@node9/proxy 2.51.0 → 2.53.0

package/dist/scan-ink.mjs

@@ -2314,7 +2314,7 @@ var CHECK_TEXT = {
     advice: "Fixed at Review for now."
   },
   "commands.node9-disarm": {
-    plain: "The agent runs a node9 command that would switch off a protection: clear a session flag, trust an address, pause the gate, weaken a shield.",
+    plain: "The agent switches node9 off or weakens it: stops or kills the daemon, stops its service, uninstalls node9, changes files in ~/.node9, clears a session flag, trusts an address, pauses the gate, weakens a shield.",
     example: "After reading a web page, the agent runs node9 session-exposure clear --all",
     advice: "Keep Review: these are your commands to run. Block if the agent should never touch node9."
   },
@@ -2602,7 +2602,7 @@ var PRODUCT_CHECKS = [
     group: "commands",
     owasp: "ASI10",
     title: "node9 disarmed from the shell",
-    catches: "a node9 command that clears a session flag, trusts a destination, pauses the gate or weakens a shield, run by the agent",
+    catches: "the agent stopping or killing the node9 daemon, stopping its service, uninstalling node9, changing files in ~/.node9, or running a node9 command that clears a session flag, trusts a destination, pauses the gate or weakens a shield",
     values: ALL,
     defaultValue: "review",
     legacy: ["review-node9-disarm"]
@@ -3432,6 +3432,46 @@ var PHP = [
   ],
   ["permissions", /\b(?:chmod|chown|chgrp|lchown|lchgrp)\s*\(/]
 ];
+var READ_CALL = {
+  python: String.raw`(?:\b(?:io|codecs)\.)?\bopen|\b(?:dotenv_values|load_dotenv|get_key|read_file|loadtxt|read_csv)`,
+  node: String.raw`\b(?:readFileSync|readFile|createReadStream|readTextFile(?:Sync)?|readFileStr|openSync|file)`,
+  perl: String.raw`\b(?:open|sysopen|read_file|slurp)`,
+  ruby: String.raw`\b(?:File|IO)\.(?:read|binread|readlines|foreach|open)|\bDotenv\.(?:load|parse|overload)`,
+  php: String.raw`\b(?:file_get_contents|fopen|file|readfile|parse_ini_file|highlight_file|show_source)`
+};
+var ARG = String.raw`(?:(?:(?:my|our|local)\s+)?[\w.$]+(?:\s*\(\s*\))?|'[^'\n]{0,8}'|"[^"\n]{0,8}")\s*,\s*`;
+var WRAP = String.raw`(?:(?:new\s+)?[\w.$]+\s*\(\s*(?:${ARG}){0,3}){0,3}`;
+var STR_PREFIX = String.raw`[rRbBuUfF]{0,2}`;
+var WRITE_MODE_LITERAL = String.raw`['"](?=[rbtU+]*w|(?![^'"]*\+)[rbtU]*[ax])[rwaxbtU+]{1,4}['"]`;
+var WRITE_MODE = String.raw`\s*,\s*(?:mode\s*=\s*)?${WRITE_MODE_LITERAL}`;
+var WRITE_MODE_AFTER = new RegExp(`^(?:\\s*\\)){0,3}${WRITE_MODE}`);
+var readCallBefore = (language) => new RegExp(
+  String.raw`(?:${READ_CALL[language]})(?![\w$])\s*\(?\s*(?:${ARG}){0,3}${WRAP}${STR_PREFIX}$`
+);
+var READ_BEFORE = {
+  python: readCallBefore("python"),
+  node: readCallBefore("node"),
+  perl: readCallBefore("perl"),
+  ruby: readCallBefore("ruby"),
+  php: readCallBefore("php")
+};
+var READ_AFTER = {
+  python: new RegExp(
+    String.raw`^\s*\)\s*\.\s*(?:read_text|read_bytes|open)\s*\((?!\s*(?:mode\s*=\s*)?${WRITE_MODE_LITERAL})`
+  )
+};
+var ASSIGNED = new RegExp(String.raw`([$\w]+)\s*=\s*${WRAP}${STR_PREFIX}$`);
+var openedName = (language) => new RegExp(
+  String.raw`(?:${READ_CALL[language]})(?![\w$])\s*\(?\s*(?:${ARG}){0,3}${WRAP}([$\w]+)(?!${WRITE_MODE})\s*[),]` + (language === "python" ? String.raw`|\bPath\s*\(\s*([$\w]+)\s*\)\s*\.\s*(?:read_text|read_bytes|open)\s*\(` : ""),
+  "g"
+);
+var OPENED_NAME = {
+  python: openedName("python"),
+  node: openedName("node"),
+  perl: openedName("perl"),
+  ruby: openedName("ruby"),
+  php: openedName("php")
+};
 var sharedParser = lazy(() => getSyntax().NewParser());
 var SHELL_INTERPRETERS = /* @__PURE__ */ new Set([
   "bash",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "2.51.0",
+  "version": "2.53.0",
   "description": "Access control for AI agents. Set what Claude Code, Codex, Gemini, Cursor and any MCP server are allowed to do, review risky actions before they run, and keep every action on the record.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",