@node9/proxy 2.21.0 → 2.22.1

package/dist/cli.js

@@ -59232,11 +59232,29 @@ function suspiciousZeroWidth(text) {
 }
 var stripZeroWidth = (t) => t.replace(/[​⁠]/g, "");
 var INSTRUCTION_FILE_RE = /(^|\/)(CLAUDE|AGENTS|GEMINI)\.md$|(^|\/)\.cursorrules$|(^|\/)\.(windsurf|cline)rules$|(^|\/)copilot-instructions\.md$|(^|\/)SKILL\.md$|(^|\/)\.claude\/agents\/[^/]+\.md$|(^|\/)\.claude\/commands\/.+\.md$/;
+function skillDirsOf(paths) {
+  const dirs = /* @__PURE__ */ new Set();
+  for (const p of paths) {
+    const m = /^(.+)\/SKILL\.md$/.exec(p);
+    if (m) dirs.add(m[1]);
+  }
+  return dirs;
+}
+function isSkillSupportFile(path79, skillDirs) {
+  if (!path79.endsWith(".md") || /(^|\/)SKILL\.md$/.test(path79)) return false;
+  for (let d = path79.lastIndexOf("/"); d > 0; d = path79.lastIndexOf("/", d - 1)) {
+    if (skillDirs.has(path79.slice(0, d))) return true;
+  }
+  return false;
+}
+function isInstructionFile(path79, skillDirs) {
+  return INSTRUCTION_FILE_RE.test(path79) || isSkillSupportFile(path79, skillDirs);
+}
 var OVERRIDE_RE = /ignore\s+(all\s+)?(previous|prior|the\s+above)\s+(instructions|prompts?|rules)|disregard\s+(the\s+|your\s+)?(system\s+)?(prompt|instructions|rules)|forget\s+(everything|all\s+(previous|prior))|you\s+are\s+now\s+(a|an|the)\b|<\/?system>/i;
 var FETCH_OBEY_RE = /\b(curl|wget|iwr|invoke-webrequest)\b[^\n|]*\|\s*(bash|sh|zsh|python3?(?!\s+-m\s+json\.tool\b)|node|iex)\b|\b(curl|wget)\b[^\n]*&&[^\n]*\b(bash|sh)\b/i;
 var SECRET_PATH_RE = /~\/\.aws\/credentials|~\/\.ssh\/id_[a-z]+|~\/\.config\/gh\/hosts|read\s+the\s+(token|secret|api[_ ]?key|password)\s+(in|from)\s+[.`'"]?\.?env/i;
 var EXFIL_RE = /\b(post|send|upload|exfiltrate|forward)\b(?!\s+(the\s+|your\s+)?(users?|them|him|her|people|visitors?|customers?|readers?)\b)[^\n]{0,40}\b(to|at)\b[^\n]{0,50}(https?:\/\/|webhook|hook\.[a-z])/i;
-var HUMAN_SECTION_RE = /^#+\s.*\b(install(ation|ers?|ing|s)?|setup|set ?up|getting started|quick ?start|contributing|contribution|development|dev setup|build|prerequisites|requirements|usage)\b/i;
+var HUMAN_SECTION_RE = /^#+\s.*\b((?:re-?|un)?install(ation|ers?|ing|s)?|setup|set ?up|getting started|quick ?start|contributing|contribution|development|dev setup|build|prerequisites|requirements|usage)\b/i;
 var NEGATION_RE = /\b(never|do not|don'?t|avoid|must not|should not|no need to|refuse to)\b/i;
 function isNegated(text, idx) {
   return NEGATION_RE.test(text.slice(Math.max(0, idx - 40), idx));
@@ -59431,13 +59449,17 @@ var SURFACE_FILES = [
 ];
 var WORKFLOW_DIR = ".github/workflows";
 var CONFIG_FILE_RE = /(^|\/)\.claude\/settings(\.local)?\.json$|(^|\/)\.mcp\.json$|(^|\/)\.cursor\/mcp\.json$|(^|\/)\.codex\/config\.toml$/;
-var SURFACE_BASENAME = new RegExp(`${INSTRUCTION_FILE_RE.source}|${CONFIG_FILE_RE.source}`);
+function selectSurface(paths) {
+  const skillDirs = skillDirsOf(paths);
+  const isSupport = (p) => isSkillSupportFile(p, skillDirs);
+  return paths.filter((p) => isInstructionFile(p, skillDirs) || CONFIG_FILE_RE.test(p)).sort((a, b) => Number(isSupport(a)) - Number(isSupport(b)));
+}
 var IGNORE_HARD = /(^|\/)(node_modules|vendor|\.git|\.next|\.venv|site-packages)\//;
 var IGNORE_SOFT = /(^|\/)(dist|build|out|target)\//;
 var isIgnoredDir = (relSlash) => IGNORE_HARD.test(relSlash) || IGNORE_SOFT.test(relSlash);
 var MAX_SURFACE_FILES = 200;
 function pickSurfacePaths(paths, truncated, notes) {
-  const surface = paths.filter((p) => SURFACE_BASENAME.test(p) && !IGNORE_HARD.test(p));
+  const surface = selectSurface(paths.filter((p) => !IGNORE_HARD.test(p)));
   const matched = surface.filter((p) => !IGNORE_SOFT.test(p));
   const softSkipped = surface.filter((p) => IGNORE_SOFT.test(p));
   const capped = matched.slice(0, MAX_SURFACE_FILES);
@@ -59609,11 +59631,11 @@ function readLocalTree(dir) {
     add(rel);
   };
   for (const p of SURFACE_FILES) collect(p);
-  const matches = [];
+  const all = [];
   const MAX_DIRS = 5e3;
   let dirsVisited = 0;
   const walk = (relDir) => {
-    if (matches.length >= MAX_SURFACE_FILES || dirsVisited >= MAX_DIRS) return;
+    if (dirsVisited >= MAX_DIRS) return;
     dirsVisited++;
     let entries;
     try {
@@ -59622,22 +59644,23 @@ function readLocalTree(dir) {
       return;
     }
     for (const e of entries) {
-      if (matches.length >= MAX_SURFACE_FILES || dirsVisited >= MAX_DIRS) return;
+      if (dirsVisited >= MAX_DIRS) return;
       const rel = relDir ? `${relDir}/${e.name}` : e.name;
       if (e.isDirectory()) {
         if (isIgnoredDir(`${rel}/`)) continue;
         walk(rel);
-      } else if (e.isFile() && SURFACE_BASENAME.test(rel)) {
-        matches.push(rel);
+      } else if (e.isFile()) {
+        all.push(rel);
       }
     }
   };
   walk("");
-  if (matches.length >= MAX_SURFACE_FILES || dirsVisited >= MAX_DIRS)
+  const matches = selectSurface(all);
+  if (matches.length > MAX_SURFACE_FILES || dirsVisited >= MAX_DIRS)
     notes.push(
       `repo is large \u2014 some agent-surface files may be INCOMPLETE (capped at ${MAX_SURFACE_FILES} files / ${MAX_DIRS} dirs).`
     );
-  for (const rel of matches) collect(rel);
+  for (const rel of matches.slice(0, MAX_SURFACE_FILES)) collect(rel);
   const wfDir = import_path61.default.join(root, WORKFLOW_DIR);
   try {
     if (import_fs66.default.existsSync(wfDir)) {
@@ -59680,7 +59703,7 @@ function readGitRefTree(dir, ref) {
     if (content !== null) files.push({ path: rel, content });
   };
   for (const rel of SURFACE_FILES) add(rel);
-  const nested = all.filter((rel) => SURFACE_BASENAME.test(rel) && !isIgnoredDir(rel));
+  const nested = selectSurface(all.filter((rel) => !isIgnoredDir(rel)));
   if (nested.length > MAX_SURFACE_FILES) {
     notes.push(
       `repo is large \u2014 some agent-surface files may be INCOMPLETE (capped at ${MAX_SURFACE_FILES} files).`
@@ -60475,6 +60498,7 @@ function scanTree(tree) {
   const findings = [];
   const inspected = [];
   const notes = [...tree.notes];
+  const skillDirs = skillDirsOf(tree.files.map((f) => f.path));
   for (const file of tree.files) {
     inspected.push(file.path);
     try {
@@ -60489,7 +60513,7 @@ function scanTree(tree) {
         findings.push(...analyzeMcp(file.path, file.content));
       } else if (/(^|\/)\.codex\/config\.toml$/.test(file.path)) {
         findings.push(...analyzeCodexConfig(file.path, file.content));
-      } else if (INSTRUCTION_FILE_RE.test(file.path)) {
+      } else if (isInstructionFile(file.path, skillDirs)) {
         findings.push(...analyzeInstructionFile(file.path, file.content));
       }
     } catch (err2) {
@@ -60522,7 +60546,7 @@ var COLOR = {
   medium: import_chalk32.default.yellow,
   advisory: import_chalk32.default.gray
 };
-var ACTION_URL = "https://github.com/marketplace/actions/node9-agent-security-check?ref=cli_scan_repo";
+var ACTION_URL = "https://github.com/marketplace/actions/node9-agent-security?ref=cli_scan_repo";
 function renderCta(res) {
   const L = [];
   L.push(import_chalk32.default.dim("   " + "\u2500".repeat(63)));

package/dist/cli.mjs

@@ -59221,11 +59221,29 @@ function suspiciousZeroWidth(text) {
 }
 var stripZeroWidth = (t) => t.replace(/[​⁠]/g, "");
 var INSTRUCTION_FILE_RE = /(^|\/)(CLAUDE|AGENTS|GEMINI)\.md$|(^|\/)\.cursorrules$|(^|\/)\.(windsurf|cline)rules$|(^|\/)copilot-instructions\.md$|(^|\/)SKILL\.md$|(^|\/)\.claude\/agents\/[^/]+\.md$|(^|\/)\.claude\/commands\/.+\.md$/;
+function skillDirsOf(paths) {
+  const dirs = /* @__PURE__ */ new Set();
+  for (const p of paths) {
+    const m = /^(.+)\/SKILL\.md$/.exec(p);
+    if (m) dirs.add(m[1]);
+  }
+  return dirs;
+}
+function isSkillSupportFile(path79, skillDirs) {
+  if (!path79.endsWith(".md") || /(^|\/)SKILL\.md$/.test(path79)) return false;
+  for (let d = path79.lastIndexOf("/"); d > 0; d = path79.lastIndexOf("/", d - 1)) {
+    if (skillDirs.has(path79.slice(0, d))) return true;
+  }
+  return false;
+}
+function isInstructionFile(path79, skillDirs) {
+  return INSTRUCTION_FILE_RE.test(path79) || isSkillSupportFile(path79, skillDirs);
+}
 var OVERRIDE_RE = /ignore\s+(all\s+)?(previous|prior|the\s+above)\s+(instructions|prompts?|rules)|disregard\s+(the\s+|your\s+)?(system\s+)?(prompt|instructions|rules)|forget\s+(everything|all\s+(previous|prior))|you\s+are\s+now\s+(a|an|the)\b|<\/?system>/i;
 var FETCH_OBEY_RE = /\b(curl|wget|iwr|invoke-webrequest)\b[^\n|]*\|\s*(bash|sh|zsh|python3?(?!\s+-m\s+json\.tool\b)|node|iex)\b|\b(curl|wget)\b[^\n]*&&[^\n]*\b(bash|sh)\b/i;
 var SECRET_PATH_RE = /~\/\.aws\/credentials|~\/\.ssh\/id_[a-z]+|~\/\.config\/gh\/hosts|read\s+the\s+(token|secret|api[_ ]?key|password)\s+(in|from)\s+[.`'"]?\.?env/i;
 var EXFIL_RE = /\b(post|send|upload|exfiltrate|forward)\b(?!\s+(the\s+|your\s+)?(users?|them|him|her|people|visitors?|customers?|readers?)\b)[^\n]{0,40}\b(to|at)\b[^\n]{0,50}(https?:\/\/|webhook|hook\.[a-z])/i;
-var HUMAN_SECTION_RE = /^#+\s.*\b(install(ation|ers?|ing|s)?|setup|set ?up|getting started|quick ?start|contributing|contribution|development|dev setup|build|prerequisites|requirements|usage)\b/i;
+var HUMAN_SECTION_RE = /^#+\s.*\b((?:re-?|un)?install(ation|ers?|ing|s)?|setup|set ?up|getting started|quick ?start|contributing|contribution|development|dev setup|build|prerequisites|requirements|usage)\b/i;
 var NEGATION_RE = /\b(never|do not|don'?t|avoid|must not|should not|no need to|refuse to)\b/i;
 function isNegated(text, idx) {
   return NEGATION_RE.test(text.slice(Math.max(0, idx - 40), idx));
@@ -59420,13 +59438,17 @@ var SURFACE_FILES = [
 ];
 var WORKFLOW_DIR = ".github/workflows";
 var CONFIG_FILE_RE = /(^|\/)\.claude\/settings(\.local)?\.json$|(^|\/)\.mcp\.json$|(^|\/)\.cursor\/mcp\.json$|(^|\/)\.codex\/config\.toml$/;
-var SURFACE_BASENAME = new RegExp(`${INSTRUCTION_FILE_RE.source}|${CONFIG_FILE_RE.source}`);
+function selectSurface(paths) {
+  const skillDirs = skillDirsOf(paths);
+  const isSupport = (p) => isSkillSupportFile(p, skillDirs);
+  return paths.filter((p) => isInstructionFile(p, skillDirs) || CONFIG_FILE_RE.test(p)).sort((a, b) => Number(isSupport(a)) - Number(isSupport(b)));
+}
 var IGNORE_HARD = /(^|\/)(node_modules|vendor|\.git|\.next|\.venv|site-packages)\//;
 var IGNORE_SOFT = /(^|\/)(dist|build|out|target)\//;
 var isIgnoredDir = (relSlash) => IGNORE_HARD.test(relSlash) || IGNORE_SOFT.test(relSlash);
 var MAX_SURFACE_FILES = 200;
 function pickSurfacePaths(paths, truncated, notes) {
-  const surface = paths.filter((p) => SURFACE_BASENAME.test(p) && !IGNORE_HARD.test(p));
+  const surface = selectSurface(paths.filter((p) => !IGNORE_HARD.test(p)));
   const matched = surface.filter((p) => !IGNORE_SOFT.test(p));
   const softSkipped = surface.filter((p) => IGNORE_SOFT.test(p));
   const capped = matched.slice(0, MAX_SURFACE_FILES);
@@ -59598,11 +59620,11 @@ function readLocalTree(dir) {
     add(rel);
   };
   for (const p of SURFACE_FILES) collect(p);
-  const matches = [];
+  const all = [];
   const MAX_DIRS = 5e3;
   let dirsVisited = 0;
   const walk = (relDir) => {
-    if (matches.length >= MAX_SURFACE_FILES || dirsVisited >= MAX_DIRS) return;
+    if (dirsVisited >= MAX_DIRS) return;
     dirsVisited++;
     let entries;
     try {
@@ -59611,22 +59633,23 @@ function readLocalTree(dir) {
       return;
     }
     for (const e of entries) {
-      if (matches.length >= MAX_SURFACE_FILES || dirsVisited >= MAX_DIRS) return;
+      if (dirsVisited >= MAX_DIRS) return;
       const rel = relDir ? `${relDir}/${e.name}` : e.name;
       if (e.isDirectory()) {
         if (isIgnoredDir(`${rel}/`)) continue;
         walk(rel);
-      } else if (e.isFile() && SURFACE_BASENAME.test(rel)) {
-        matches.push(rel);
+      } else if (e.isFile()) {
+        all.push(rel);
       }
     }
   };
   walk("");
-  if (matches.length >= MAX_SURFACE_FILES || dirsVisited >= MAX_DIRS)
+  const matches = selectSurface(all);
+  if (matches.length > MAX_SURFACE_FILES || dirsVisited >= MAX_DIRS)
     notes.push(
       `repo is large \u2014 some agent-surface files may be INCOMPLETE (capped at ${MAX_SURFACE_FILES} files / ${MAX_DIRS} dirs).`
     );
-  for (const rel of matches) collect(rel);
+  for (const rel of matches.slice(0, MAX_SURFACE_FILES)) collect(rel);
   const wfDir = path65.join(root, WORKFLOW_DIR);
   try {
     if (fs70.existsSync(wfDir)) {
@@ -59669,7 +59692,7 @@ function readGitRefTree(dir, ref) {
     if (content !== null) files.push({ path: rel, content });
   };
   for (const rel of SURFACE_FILES) add(rel);
-  const nested = all.filter((rel) => SURFACE_BASENAME.test(rel) && !isIgnoredDir(rel));
+  const nested = selectSurface(all.filter((rel) => !isIgnoredDir(rel)));
   if (nested.length > MAX_SURFACE_FILES) {
     notes.push(
       `repo is large \u2014 some agent-surface files may be INCOMPLETE (capped at ${MAX_SURFACE_FILES} files).`
@@ -60464,6 +60487,7 @@ function scanTree(tree) {
   const findings = [];
   const inspected = [];
   const notes = [...tree.notes];
+  const skillDirs = skillDirsOf(tree.files.map((f) => f.path));
   for (const file of tree.files) {
     inspected.push(file.path);
     try {
@@ -60478,7 +60502,7 @@ function scanTree(tree) {
         findings.push(...analyzeMcp(file.path, file.content));
       } else if (/(^|\/)\.codex\/config\.toml$/.test(file.path)) {
         findings.push(...analyzeCodexConfig(file.path, file.content));
-      } else if (INSTRUCTION_FILE_RE.test(file.path)) {
+      } else if (isInstructionFile(file.path, skillDirs)) {
         findings.push(...analyzeInstructionFile(file.path, file.content));
       }
     } catch (err2) {
@@ -60511,7 +60535,7 @@ var COLOR = {
   medium: chalk32.yellow,
   advisory: chalk32.gray
 };
-var ACTION_URL = "https://github.com/marketplace/actions/node9-agent-security-check?ref=cli_scan_repo";
+var ACTION_URL = "https://github.com/marketplace/actions/node9-agent-security?ref=cli_scan_repo";
 function renderCta(res) {
   const L = [];
   L.push(chalk32.dim("   " + "\u2500".repeat(63)));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "2.21.0",
+  "version": "2.22.1",
   "description": "IAM for your AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",