@node9/proxy 2.48.0 → 2.48.1

package/dist/cli-main.js

@@ -26965,7 +26965,7 @@ var init_negotiation = __esm({
     init_cjs_shims();
     init_dist();
     USER_LINE_ICON = "\u{1F6E1}\uFE0F";
-    QUOTE_INSTRUCTION = "Start your reply with the line above, exactly as written, on its own line.";
+    QUOTE_INSTRUCTION = "Start your reply about this blocked action with the line above, exactly as written, on its own line. Leave it out of later replies.";
     USER_LINE_PART_MAX = 160;
     ONE_LINE_INPUT_MAX = 1e3;
     PICTOGRAPHS = /[\p{Extended_Pictographic}\u200D\uFE0F]/gu;
@@ -74924,6 +74924,7 @@ var import_fs74 = __toESM(require("fs"));
 var import_os61 = __toESM(require("os"));
 var import_path74 = __toESM(require("path"));
 init_dist();
+init_atomic_write();
 var ICON2 = "\u{1F6E1}\uFE0F";
 var LEVEL_NAMES = {
   audit: "Audit",
@@ -74932,23 +74933,27 @@ var LEVEL_NAMES = {
   strict: "Strict",
   "block-all": "Block all"
 };
-var SESSION_NOTICE_INSTRUCTION = "Start your next reply to the user with the line above, exactly as written, on its own line.";
+var SESSION_NOTICE_NOTE = "node9 shows the user this line itself. Do not mention it unless the user asks about node9.";
 var FLAG_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var SAFE_SESSION_ID = /^[A-Za-z0-9_-]{1,128}$/;
-function sessionNoticeLine(mode) {
+function sessionNoticeLine(mode, kind = "first") {
   const level = levelOf(mode);
+  const name = LEVEL_NAMES[level];
+  if (kind === "changed") {
+    return level === "audit" ? `${ICON2} Node9 level changed to Audit: actions are logged, nothing is blocked.` : `${ICON2} Node9 level changed to ${name}. Every action in this session is checked.`;
+  }
   if (level === "audit") {
     return `${ICON2} Node9 is in Audit mode: actions are logged, nothing is blocked.`;
   }
-  return `${ICON2} Node9 is on (${LEVEL_NAMES[level]}). Every action in this session is checked.`;
+  return `${ICON2} Node9 is on (${name}). Every action in this session is checked.`;
 }
-function sessionNoticeOutput(mode) {
-  const line = sessionNoticeLine(mode);
+function sessionNoticeOutput(mode, kind = "first") {
+  const line = sessionNoticeLine(mode, kind);
   return JSON.stringify({
     hookSpecificOutput: {
       hookEventName: "PreToolUse",
       additionalContext: `${line}
-${SESSION_NOTICE_INSTRUCTION}`
+${SESSION_NOTICE_NOTE}`
     },
     systemMessage: line
   });
@@ -74957,19 +74962,61 @@ function sessionNoticeEnabled(env = process.env) {
   if (env.NODE9_SESSION_NOTICE === "1") return true;
   return env.NODE9_TESTING !== "1";
 }
-function claimSessionNotice(sessionId, home = import_os61.default.homedir()) {
-  if (!sessionId || !SAFE_SESSION_ID.test(sessionId)) return false;
+var FLAG_MAX_BYTES = 32;
+function claimSessionNotice(sessionId, home = import_os61.default.homedir(), level = "standard") {
+  if (!sessionId || !SAFE_SESSION_ID.test(sessionId)) return null;
   const dir2 = import_path74.default.join(home, ".node9", "notice-sessions");
   const seen = ensureOwnDir(dir2);
-  if (!seen) return false;
+  if (!seen) return null;
+  const flag = import_path74.default.join(dir2, sessionId + SESSION_FLAG_SUFFIX);
+  let created = false;
   try {
-    if (!isSameOwnDir(dir2, seen)) return false;
-    import_fs74.default.closeSync(import_fs74.default.openSync(import_path74.default.join(dir2, sessionId + SESSION_FLAG_SUFFIX), "wx"));
-  } catch {
-    return false;
+    if (!isSameOwnDir(dir2, seen)) return null;
+    const fd = import_fs74.default.openSync(flag, "wx", 384);
+    created = true;
+    try {
+      import_fs74.default.writeSync(fd, level);
+    } finally {
+      import_fs74.default.closeSync(fd);
+    }
+  } catch (err2) {
+    if (created) {
+      try {
+        import_fs74.default.unlinkSync(flag);
+      } catch {
+      }
+      return null;
+    }
+    if (err2.code !== "EEXIST") return null;
+    return levelChange(dir2, seen, flag, level);
   }
   removeOldFlags(dir2, seen);
-  return true;
+  return "first";
+}
+function levelChange(dir2, seen, flag, level) {
+  try {
+    const told = readFlag(flag);
+    if (told === null) return null;
+    if (told === level) return null;
+    if (!isSameOwnDir(dir2, seen)) return null;
+    atomicWriteSync(flag, level, { mode: 384 });
+    return told === "" ? null : "changed";
+  } catch {
+    return null;
+  }
+}
+function readFlag(flag) {
+  const c = import_fs74.default.constants;
+  const fd = import_fs74.default.openSync(flag, c.O_RDONLY | (c.O_NOFOLLOW ?? 0) | (c.O_NONBLOCK ?? 0));
+  try {
+    const st = import_fs74.default.fstatSync(fd);
+    if (!st.isFile() || st.nlink !== 1 || st.size > FLAG_MAX_BYTES) return null;
+    const buf = Buffer.alloc(FLAG_MAX_BYTES);
+    const n = import_fs74.default.readSync(fd, buf, 0, FLAG_MAX_BYTES, 0);
+    return buf.toString("utf8", 0, n).trim();
+  } finally {
+    import_fs74.default.closeSync(fd);
+  }
 }
 function removeOldFlags(dir2, seen) {
   const cutoff = Date.now() - FLAG_TTL_MS;
@@ -75526,9 +75573,10 @@ RAW: ${raw}
         }
         const isSubagentCall = typeof payload.agent_id === "string" && payload.agent_id !== "";
         const allowExit = (checkedBy) => {
-          if (checkedBy !== "paused" && agent === "Claude Code" && !isSubagentCall && sessionNoticeEnabled() && claimSessionNotice(safeSessionId)) {
+          const notice = checkedBy !== "paused" && agent === "Claude Code" && !isSubagentCall && sessionNoticeEnabled() ? claimSessionNotice(safeSessionId, import_os62.default.homedir(), levelOf(config.settings.mode)) : null;
+          if (notice) {
             try {
-              import_fs75.default.writeSync(1, sessionNoticeOutput(config.settings.mode) + "\n");
+              import_fs75.default.writeSync(1, sessionNoticeOutput(config.settings.mode, notice) + "\n");
             } catch {
             }
           }

package/dist/hook.js

@@ -24161,7 +24161,7 @@ function recordAndCheck(tool, args, threshold = 3, windowMs = 12e4) {
 init_cjs_shims();
 init_dist();
 var USER_LINE_ICON = "\u{1F6E1}\uFE0F";
-var QUOTE_INSTRUCTION = "Start your reply with the line above, exactly as written, on its own line.";
+var QUOTE_INSTRUCTION = "Start your reply about this blocked action with the line above, exactly as written, on its own line. Leave it out of later replies.";
 var USER_LINE_PART_MAX = 160;
 var ONE_LINE_INPUT_MAX = 1e3;
 var PICTOGRAPHS = /[\p{Extended_Pictographic}\u200D\uFE0F]/gu;
@@ -26487,23 +26487,27 @@ var LEVEL_NAMES = {
   strict: "Strict",
   "block-all": "Block all"
 };
-var SESSION_NOTICE_INSTRUCTION = "Start your next reply to the user with the line above, exactly as written, on its own line.";
+var SESSION_NOTICE_NOTE = "node9 shows the user this line itself. Do not mention it unless the user asks about node9.";
 var FLAG_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
 var SAFE_SESSION_ID = /^[A-Za-z0-9_-]{1,128}$/;
-function sessionNoticeLine(mode) {
+function sessionNoticeLine(mode, kind = "first") {
   const level = levelOf(mode);
+  const name = LEVEL_NAMES[level];
+  if (kind === "changed") {
+    return level === "audit" ? `${ICON} Node9 level changed to Audit: actions are logged, nothing is blocked.` : `${ICON} Node9 level changed to ${name}. Every action in this session is checked.`;
+  }
   if (level === "audit") {
     return `${ICON} Node9 is in Audit mode: actions are logged, nothing is blocked.`;
   }
-  return `${ICON} Node9 is on (${LEVEL_NAMES[level]}). Every action in this session is checked.`;
+  return `${ICON} Node9 is on (${name}). Every action in this session is checked.`;
 }
-function sessionNoticeOutput(mode) {
-  const line = sessionNoticeLine(mode);
+function sessionNoticeOutput(mode, kind = "first") {
+  const line = sessionNoticeLine(mode, kind);
   return JSON.stringify({
     hookSpecificOutput: {
       hookEventName: "PreToolUse",
       additionalContext: `${line}
-${SESSION_NOTICE_INSTRUCTION}`
+${SESSION_NOTICE_NOTE}`
     },
     systemMessage: line
   });
@@ -26512,19 +26516,61 @@ function sessionNoticeEnabled(env = process.env) {
   if (env.NODE9_SESSION_NOTICE === "1") return true;
   return env.NODE9_TESTING !== "1";
 }
-function claimSessionNotice(sessionId, home = import_os26.default.homedir()) {
-  if (!sessionId || !SAFE_SESSION_ID.test(sessionId)) return false;
+var FLAG_MAX_BYTES = 32;
+function claimSessionNotice(sessionId, home = import_os26.default.homedir(), level = "standard") {
+  if (!sessionId || !SAFE_SESSION_ID.test(sessionId)) return null;
   const dir2 = import_path36.default.join(home, ".node9", "notice-sessions");
   const seen = ensureOwnDir(dir2);
-  if (!seen) return false;
+  if (!seen) return null;
+  const flag = import_path36.default.join(dir2, sessionId + SESSION_FLAG_SUFFIX);
+  let created = false;
   try {
-    if (!isSameOwnDir(dir2, seen)) return false;
-    import_fs34.default.closeSync(import_fs34.default.openSync(import_path36.default.join(dir2, sessionId + SESSION_FLAG_SUFFIX), "wx"));
-  } catch {
-    return false;
+    if (!isSameOwnDir(dir2, seen)) return null;
+    const fd = import_fs34.default.openSync(flag, "wx", 384);
+    created = true;
+    try {
+      import_fs34.default.writeSync(fd, level);
+    } finally {
+      import_fs34.default.closeSync(fd);
+    }
+  } catch (err) {
+    if (created) {
+      try {
+        import_fs34.default.unlinkSync(flag);
+      } catch {
+      }
+      return null;
+    }
+    if (err.code !== "EEXIST") return null;
+    return levelChange(dir2, seen, flag, level);
   }
   removeOldFlags(dir2, seen);
-  return true;
+  return "first";
+}
+function levelChange(dir2, seen, flag, level) {
+  try {
+    const told = readFlag(flag);
+    if (told === null) return null;
+    if (told === level) return null;
+    if (!isSameOwnDir(dir2, seen)) return null;
+    atomicWriteSync(flag, level, { mode: 384 });
+    return told === "" ? null : "changed";
+  } catch {
+    return null;
+  }
+}
+function readFlag(flag) {
+  const c = import_fs34.default.constants;
+  const fd = import_fs34.default.openSync(flag, c.O_RDONLY | (c.O_NOFOLLOW ?? 0) | (c.O_NONBLOCK ?? 0));
+  try {
+    const st = import_fs34.default.fstatSync(fd);
+    if (!st.isFile() || st.nlink !== 1 || st.size > FLAG_MAX_BYTES) return null;
+    const buf = Buffer.alloc(FLAG_MAX_BYTES);
+    const n = import_fs34.default.readSync(fd, buf, 0, FLAG_MAX_BYTES, 0);
+    return buf.toString("utf8", 0, n).trim();
+  } finally {
+    import_fs34.default.closeSync(fd);
+  }
 }
 function removeOldFlags(dir2, seen) {
   const cutoff = Date.now() - FLAG_TTL_MS;
@@ -27081,9 +27127,10 @@ RAW: ${raw}
         }
         const isSubagentCall = typeof payload.agent_id === "string" && payload.agent_id !== "";
         const allowExit = (checkedBy) => {
-          if (checkedBy !== "paused" && agent === "Claude Code" && !isSubagentCall && sessionNoticeEnabled() && claimSessionNotice(safeSessionId)) {
+          const notice = checkedBy !== "paused" && agent === "Claude Code" && !isSubagentCall && sessionNoticeEnabled() ? claimSessionNotice(safeSessionId, import_os27.default.homedir(), levelOf(config.settings.mode)) : null;
+          if (notice) {
             try {
-              import_fs35.default.writeSync(1, sessionNoticeOutput(config.settings.mode) + "\n");
+              import_fs35.default.writeSync(1, sessionNoticeOutput(config.settings.mode, notice) + "\n");
             } catch {
             }
           }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "2.48.0",
+  "version": "2.48.1",
   "description": "Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",