@node9/proxy 2.28.0 → 2.28.1

package/dist/cli.js

@@ -57986,15 +57986,25 @@ var VISIBLE_ESCAPES = {
 function toVisibleEscape(c) {
   return VISIBLE_ESCAPES[c] ?? `\\u${c.charCodeAt(0).toString(16).padStart(4, "0")}`;
 }
+var redact = (s) => redactText(s).result;
+var escapeUnsafe = (s) => s.replace(UNSAFE_CHARS, toVisibleEscape);
 function displaySafe(text) {
-  return redactText(text).result.replace(UNSAFE_CHARS, toVisibleEscape);
+  return escapeUnsafe(redact(text));
 }
 var INPUT_PREVIEW_MAX = 80;
 function inputPreview(raw) {
-  const safe = displaySafe(raw);
-  return safe.length > INPUT_PREVIEW_MAX ? safe.slice(0, INPUT_PREVIEW_MAX - 3) + "\u2026" : safe;
+  const redacted = redact(raw);
+  const points = Array.from(redacted);
+  const cut = points.length > INPUT_PREVIEW_MAX ? points.slice(0, INPUT_PREVIEW_MAX - 3).join("") + "\u2026" : redacted;
+  return escapeUnsafe(cut);
+}
+var JSON_RAW_UNSAFE = /[\u007f-\u009f\u061c\u200e\u200f\u2028\u2029\u202a-\u202e\u2066-\u2069]/g;
+function toSafeJson(doc) {
+  return JSON.stringify(doc, null, 2).replace(
+    JSON_RAW_UNSAFE,
+    (c) => `\\u${c.charCodeAt(0).toString(16).padStart(4, "0")}`
+  );
 }
-var redact = (s) => redactText(s).result;
 function buildExplainJson(result, rawInput) {
   return {
     schemaVersion: 1,
@@ -58009,7 +58019,11 @@ function buildExplainJson(result, rawInput) {
       detail: redact(s.detail),
       final: s.isFinal === true
     })),
-    waterfall: result.waterfall
+    waterfall: result.waterfall.map((t) => ({
+      ...t,
+      ...t.path !== void 0 && { path: redact(t.path) },
+      ...t.note !== void 0 && { note: redact(t.note) }
+    }))
   };
 }
 function buildExplainJsonError(message) {
@@ -58935,6 +58949,52 @@ ${neutralizeMarkers(text)}
 ${f.footer}`;
 }
 
+// src/tool-output.ts
+init_dlp();
+var MAX_DEPTH3 = 8;
+function collectToolOutputText(toolResponse, opts = {}) {
+  const maxBytes = opts.maxBytes ?? DLP_SCAN_LIMITS.maxStringBytes;
+  const parts = [];
+  let size = 0;
+  let fields = 0;
+  let truncated = false;
+  const push = (s) => {
+    if (s.length === 0) return true;
+    const room = maxBytes - size;
+    if (s.length > room) {
+      if (room > 0) {
+        parts.push(s.slice(0, room));
+        fields++;
+      }
+      size = maxBytes;
+      truncated = true;
+      return false;
+    }
+    parts.push(s);
+    fields++;
+    size += s.length + 1;
+    return true;
+  };
+  const walk = (v, depth) => {
+    if (typeof v === "string") return push(v);
+    if (depth >= MAX_DEPTH3 || v === null || typeof v !== "object") return true;
+    const children = Array.isArray(v) ? v : Object.values(v);
+    for (const child of children) if (!walk(child, depth + 1)) return false;
+    return true;
+  };
+  walk(toolResponse, 0);
+  return { text: parts.join("\n"), truncated, fields };
+}
+function shellOutputText(toolResponse) {
+  if (toolResponse && typeof toolResponse === "object" && !Array.isArray(toolResponse)) {
+    const r = toolResponse;
+    if (typeof r.stdout === "string" || typeof r.stderr === "string") {
+      return [r.stdout, r.stderr].filter((s) => typeof s === "string").join("\n");
+    }
+  }
+  return collectToolOutputText(toolResponse).text;
+}
+
 // src/cli/commands/log.ts
 init_hasher();
 
@@ -59080,7 +59140,7 @@ function registerLogCommand(program2) {
         }
         if ((tool === "Bash" || tool === "bash") && isDaemonRunning()) {
           const bashCommand = typeof rawInput === "object" && rawInput !== null && "command" in rawInput && typeof rawInput.command === "string" ? rawInput.command : null;
-          const output = payload.tool_response?.output ?? "";
+          const output = shellOutputText(payload.tool_response);
           if (bashCommand && output) {
             const testResult = detectTestResult(bashCommand, output);
             if (testResult) {
@@ -59132,10 +59192,24 @@ function registerLogCommand(program2) {
           }
         }
         {
-          const toolOutput = payload.tool_response?.output;
+          const rawResponse = payload.tool_response;
+          const shimOutput = rawResponse && typeof rawResponse === "object" && typeof rawResponse.output === "string" ? rawResponse.output : void 0;
+          const collected = redactOutputMode ? {
+            text: shimOutput ?? collectToolOutputText(rawResponse, { maxBytes: Number.MAX_SAFE_INTEGER }).text,
+            truncated: false
+          } : collectToolOutputText(rawResponse);
+          const toolOutput = collected.text;
+          if (collected.truncated) {
+            appendToLog(HOOK_DEBUG_LOG, {
+              ts: (/* @__PURE__ */ new Date()).toISOString(),
+              event: "post-tool-scan-truncated",
+              tool,
+              scannedBytes: toolOutput.length
+            });
+          }
           const inj = config.policy.injectionScan;
           const injectionOn = inj.enabled && !inj.allow.includes(tool);
-          if (typeof toolOutput === "string" && toolOutput.length > 0) {
+          if (toolOutput.length > 0) {
             if (redactOutputMode) {
               const { result, found } = redactText(toolOutput);
               let out = result;
@@ -59196,7 +59270,7 @@ function registerLogCommand(program2) {
         } catch {
         }
       }
-      process.exit(0);
+      process.stdout.write("", () => process.exit(0));
     };
     if (data) {
       await logPayload(data);
@@ -70739,7 +70813,7 @@ program.command("explain").description(
   'Machine-readable output (one JSON document; no "decision" field means failure)'
 ).action(async (tool, argsRaw, opts) => {
   const failJson = (message) => {
-    console.log(JSON.stringify(buildExplainJsonError(message), null, 2));
+    console.log(toSafeJson(buildExplainJsonError(message)));
     process.exit(1);
   };
   let args = {};
@@ -70751,7 +70825,7 @@ program.command("explain").description(
       } catch {
         if (opts.json) failJson("Invalid JSON in [args]");
         console.error(import_chalk47.default.red(`
-\u274C Invalid JSON: ${inputPreview(trimmed)}
+\u274C Invalid JSON: ${displaySafe(trimmed)}
 `));
         process.exit(1);
       }
@@ -70767,7 +70841,7 @@ program.command("explain").description(
     throw err2;
   }
   if (opts.json) {
-    console.log(JSON.stringify(buildExplainJson(result, argsRaw), null, 2));
+    console.log(toSafeJson(buildExplainJson(result, argsRaw)));
     return;
   }
   console.log("");
@@ -70781,16 +70855,17 @@ program.command("explain").description(
   console.log(import_chalk47.default.bold("Config Sources (Waterfall):"));
   for (const tier of result.waterfall) {
     const num3 = import_chalk47.default.gray(`  ${tier.tier}.`);
-    const label3 = tier.label.padEnd(16);
+    const label3 = displaySafe(tier.label).padEnd(16);
+    const tierNote = tier.note === void 0 ? void 0 : displaySafe(tier.note);
     let statusStr;
     if (tier.tier === 1) {
-      statusStr = import_chalk47.default.gray(tier.note ?? "");
+      statusStr = import_chalk47.default.gray(tierNote ?? "");
     } else if (tier.status === "active") {
-      const loc = tier.path ? import_chalk47.default.gray(tier.path) : "";
-      const note = tier.note ? import_chalk47.default.gray(`(${tier.note})`) : "";
+      const loc = tier.path ? import_chalk47.default.gray(displaySafe(tier.path)) : "";
+      const note = tierNote ? import_chalk47.default.gray(`(${tierNote})`) : "";
       statusStr = import_chalk47.default.green("\u2713 active") + (loc ? "  " + loc : "") + (note ? "  " + note : "");
     } else {
-      statusStr = import_chalk47.default.gray("\u25CB " + (tier.note ?? "not found"));
+      statusStr = import_chalk47.default.gray("\u25CB " + (tierNote ?? "not found"));
     }
     console.log(`${num3} ${import_chalk47.default.white(label3)} ${statusStr}`);
   }

package/dist/cli.mjs

@@ -57968,15 +57968,25 @@ var VISIBLE_ESCAPES = {
 function toVisibleEscape(c) {
   return VISIBLE_ESCAPES[c] ?? `\\u${c.charCodeAt(0).toString(16).padStart(4, "0")}`;
 }
+var redact = (s) => redactText(s).result;
+var escapeUnsafe = (s) => s.replace(UNSAFE_CHARS, toVisibleEscape);
 function displaySafe(text) {
-  return redactText(text).result.replace(UNSAFE_CHARS, toVisibleEscape);
+  return escapeUnsafe(redact(text));
 }
 var INPUT_PREVIEW_MAX = 80;
 function inputPreview(raw) {
-  const safe = displaySafe(raw);
-  return safe.length > INPUT_PREVIEW_MAX ? safe.slice(0, INPUT_PREVIEW_MAX - 3) + "\u2026" : safe;
+  const redacted = redact(raw);
+  const points = Array.from(redacted);
+  const cut = points.length > INPUT_PREVIEW_MAX ? points.slice(0, INPUT_PREVIEW_MAX - 3).join("") + "\u2026" : redacted;
+  return escapeUnsafe(cut);
+}
+var JSON_RAW_UNSAFE = /[\u007f-\u009f\u061c\u200e\u200f\u2028\u2029\u202a-\u202e\u2066-\u2069]/g;
+function toSafeJson(doc) {
+  return JSON.stringify(doc, null, 2).replace(
+    JSON_RAW_UNSAFE,
+    (c) => `\\u${c.charCodeAt(0).toString(16).padStart(4, "0")}`
+  );
 }
-var redact = (s) => redactText(s).result;
 function buildExplainJson(result, rawInput) {
   return {
     schemaVersion: 1,
@@ -57991,7 +58001,11 @@ function buildExplainJson(result, rawInput) {
       detail: redact(s.detail),
       final: s.isFinal === true
     })),
-    waterfall: result.waterfall
+    waterfall: result.waterfall.map((t) => ({
+      ...t,
+      ...t.path !== void 0 && { path: redact(t.path) },
+      ...t.note !== void 0 && { note: redact(t.note) }
+    }))
   };
 }
 function buildExplainJsonError(message) {
@@ -58917,6 +58931,52 @@ ${neutralizeMarkers(text)}
 ${f.footer}`;
 }
 
+// src/tool-output.ts
+init_dlp();
+var MAX_DEPTH3 = 8;
+function collectToolOutputText(toolResponse, opts = {}) {
+  const maxBytes = opts.maxBytes ?? DLP_SCAN_LIMITS.maxStringBytes;
+  const parts = [];
+  let size = 0;
+  let fields = 0;
+  let truncated = false;
+  const push = (s) => {
+    if (s.length === 0) return true;
+    const room = maxBytes - size;
+    if (s.length > room) {
+      if (room > 0) {
+        parts.push(s.slice(0, room));
+        fields++;
+      }
+      size = maxBytes;
+      truncated = true;
+      return false;
+    }
+    parts.push(s);
+    fields++;
+    size += s.length + 1;
+    return true;
+  };
+  const walk = (v, depth) => {
+    if (typeof v === "string") return push(v);
+    if (depth >= MAX_DEPTH3 || v === null || typeof v !== "object") return true;
+    const children = Array.isArray(v) ? v : Object.values(v);
+    for (const child of children) if (!walk(child, depth + 1)) return false;
+    return true;
+  };
+  walk(toolResponse, 0);
+  return { text: parts.join("\n"), truncated, fields };
+}
+function shellOutputText(toolResponse) {
+  if (toolResponse && typeof toolResponse === "object" && !Array.isArray(toolResponse)) {
+    const r = toolResponse;
+    if (typeof r.stdout === "string" || typeof r.stderr === "string") {
+      return [r.stdout, r.stderr].filter((s) => typeof s === "string").join("\n");
+    }
+  }
+  return collectToolOutputText(toolResponse).text;
+}
+
 // src/cli/commands/log.ts
 init_hasher();
 
@@ -59062,7 +59122,7 @@ function registerLogCommand(program2) {
         }
         if ((tool === "Bash" || tool === "bash") && isDaemonRunning()) {
           const bashCommand = typeof rawInput === "object" && rawInput !== null && "command" in rawInput && typeof rawInput.command === "string" ? rawInput.command : null;
-          const output = payload.tool_response?.output ?? "";
+          const output = shellOutputText(payload.tool_response);
           if (bashCommand && output) {
             const testResult = detectTestResult(bashCommand, output);
             if (testResult) {
@@ -59114,10 +59174,24 @@ function registerLogCommand(program2) {
           }
         }
         {
-          const toolOutput = payload.tool_response?.output;
+          const rawResponse = payload.tool_response;
+          const shimOutput = rawResponse && typeof rawResponse === "object" && typeof rawResponse.output === "string" ? rawResponse.output : void 0;
+          const collected = redactOutputMode ? {
+            text: shimOutput ?? collectToolOutputText(rawResponse, { maxBytes: Number.MAX_SAFE_INTEGER }).text,
+            truncated: false
+          } : collectToolOutputText(rawResponse);
+          const toolOutput = collected.text;
+          if (collected.truncated) {
+            appendToLog(HOOK_DEBUG_LOG, {
+              ts: (/* @__PURE__ */ new Date()).toISOString(),
+              event: "post-tool-scan-truncated",
+              tool,
+              scannedBytes: toolOutput.length
+            });
+          }
           const inj = config.policy.injectionScan;
           const injectionOn = inj.enabled && !inj.allow.includes(tool);
-          if (typeof toolOutput === "string" && toolOutput.length > 0) {
+          if (toolOutput.length > 0) {
             if (redactOutputMode) {
               const { result, found } = redactText(toolOutput);
               let out = result;
@@ -59178,7 +59252,7 @@ function registerLogCommand(program2) {
         } catch {
         }
       }
-      process.exit(0);
+      process.stdout.write("", () => process.exit(0));
     };
     if (data) {
       await logPayload(data);
@@ -70721,7 +70795,7 @@ program.command("explain").description(
   'Machine-readable output (one JSON document; no "decision" field means failure)'
 ).action(async (tool, argsRaw, opts) => {
   const failJson = (message) => {
-    console.log(JSON.stringify(buildExplainJsonError(message), null, 2));
+    console.log(toSafeJson(buildExplainJsonError(message)));
     process.exit(1);
   };
   let args = {};
@@ -70733,7 +70807,7 @@ program.command("explain").description(
       } catch {
         if (opts.json) failJson("Invalid JSON in [args]");
         console.error(chalk47.red(`
-\u274C Invalid JSON: ${inputPreview(trimmed)}
+\u274C Invalid JSON: ${displaySafe(trimmed)}
 `));
         process.exit(1);
       }
@@ -70749,7 +70823,7 @@ program.command("explain").description(
     throw err2;
   }
   if (opts.json) {
-    console.log(JSON.stringify(buildExplainJson(result, argsRaw), null, 2));
+    console.log(toSafeJson(buildExplainJson(result, argsRaw)));
     return;
   }
   console.log("");
@@ -70763,16 +70837,17 @@ program.command("explain").description(
   console.log(chalk47.bold("Config Sources (Waterfall):"));
   for (const tier of result.waterfall) {
     const num3 = chalk47.gray(`  ${tier.tier}.`);
-    const label3 = tier.label.padEnd(16);
+    const label3 = displaySafe(tier.label).padEnd(16);
+    const tierNote = tier.note === void 0 ? void 0 : displaySafe(tier.note);
     let statusStr;
     if (tier.tier === 1) {
-      statusStr = chalk47.gray(tier.note ?? "");
+      statusStr = chalk47.gray(tierNote ?? "");
     } else if (tier.status === "active") {
-      const loc = tier.path ? chalk47.gray(tier.path) : "";
-      const note = tier.note ? chalk47.gray(`(${tier.note})`) : "";
+      const loc = tier.path ? chalk47.gray(displaySafe(tier.path)) : "";
+      const note = tierNote ? chalk47.gray(`(${tierNote})`) : "";
       statusStr = chalk47.green("\u2713 active") + (loc ? "  " + loc : "") + (note ? "  " + note : "");
     } else {
-      statusStr = chalk47.gray("\u25CB " + (tier.note ?? "not found"));
+      statusStr = chalk47.gray("\u25CB " + (tierNote ?? "not found"));
     }
     console.log(`${num3} ${chalk47.white(label3)} ${statusStr}`);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "2.28.0",
+  "version": "2.28.1",
   "description": "Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",