@node9/proxy 2.8.2 → 2.8.3

package/dist/cli.js

@@ -48278,33 +48278,39 @@ REQUIRED ACTIONS:
 1. Remove the hardcoded credential from your command or code.
 2. Use an environment variable or a dedicated secrets manager instead.
 3. Treat the leaked credential as compromised and rotate it immediately.
-Do NOT attempt to bypass this check or pass the credential through another tool.`;
+Do NOT attempt to bypass this check or pass the credential through another tool.
+- Tell the user node9 blocked this and why, then ask how to proceed.`;
   }
   if (label2.includes("sql safety") && label2.includes("delete without where")) {
     return `NODE9: Blocked \u2014 DELETE without WHERE clause would wipe the entire table.
 INSTRUCTION: Add a WHERE clause to scope the deletion (e.g. WHERE id = <value>).
-Do NOT retry without a WHERE clause.`;
+Do NOT retry without a WHERE clause.
+- Tell the user node9 blocked this and why, then ask how to proceed.`;
   }
   if (label2.includes("sql safety") && label2.includes("update without where")) {
     return `NODE9: Blocked \u2014 UPDATE without WHERE clause would update every row.
 INSTRUCTION: Add a WHERE clause to scope the update (e.g. WHERE id = <value>).
-Do NOT retry without a WHERE clause.`;
+Do NOT retry without a WHERE clause.
+- Tell the user node9 blocked this and why, then ask how to proceed.`;
   }
   if (label2.includes("dangerous word")) {
     const match = blockedByLabel.match(/dangerous word: "([^"]+)"/i);
     const word = match?.[1] ?? "a dangerous keyword";
     return `NODE9: Blocked \u2014 command contains forbidden keyword "${word}".
 INSTRUCTION: Do NOT use "${word}". Use a non-destructive alternative.
-Do NOT attempt to bypass this with shell tricks or aliases \u2014 it will be blocked again.`;
+Do NOT attempt to bypass this with shell tricks or aliases \u2014 it will be blocked again.
+- Tell the user node9 blocked this and why, then ask how to proceed.`;
   }
   if (label2.includes("path blocked") || label2.includes("sandbox")) {
     return `NODE9: Blocked \u2014 operation targets a path outside the allowed sandbox.
 INSTRUCTION: Move your output to an allowed directory such as /tmp/ or the project directory.
-Do NOT retry on the same path.`;
+Do NOT retry on the same path.
+- Tell the user node9 blocked this and why, then ask how to proceed.`;
   }
   if (label2.includes("inline execution")) {
     return `NODE9: Blocked \u2014 inline code execution (e.g. bash -c "...") is not allowed.
-INSTRUCTION: Use individual tool calls instead of embedding code in a shell string.`;
+INSTRUCTION: Use individual tool calls instead of embedding code in a shell string.
+- Tell the user node9 blocked this and why, then ask how to proceed.`;
   }
   if (label2.includes("strict mode")) {
     return `NODE9: Blocked \u2014 strict mode is active. All tool calls require explicit human approval.
@@ -48315,7 +48321,8 @@ INSTRUCTION: Inform the user this action is pending approval. Wait for them to a
     const rule = match?.[1] ?? "a policy rule";
     return `NODE9: Blocked \u2014 action "${rule}" is forbidden by security policy.
 INSTRUCTION: Do NOT use "${rule}". Find a read-only or non-destructive alternative.
-Do NOT attempt to bypass this rule.`;
+Do NOT attempt to bypass this rule.
+- Tell the user node9 blocked this and why, then ask how to proceed.`;
   }
   const recovery = recoveryCommand ? `
 REQUIRED ACTION: Run \`${recoveryCommand}\` first, then retry your original command.` : "\n- Pivot to a non-destructive or read-only alternative.";

package/dist/cli.mjs

@@ -48270,33 +48270,39 @@ REQUIRED ACTIONS:
 1. Remove the hardcoded credential from your command or code.
 2. Use an environment variable or a dedicated secrets manager instead.
 3. Treat the leaked credential as compromised and rotate it immediately.
-Do NOT attempt to bypass this check or pass the credential through another tool.`;
+Do NOT attempt to bypass this check or pass the credential through another tool.
+- Tell the user node9 blocked this and why, then ask how to proceed.`;
   }
   if (label2.includes("sql safety") && label2.includes("delete without where")) {
     return `NODE9: Blocked \u2014 DELETE without WHERE clause would wipe the entire table.
 INSTRUCTION: Add a WHERE clause to scope the deletion (e.g. WHERE id = <value>).
-Do NOT retry without a WHERE clause.`;
+Do NOT retry without a WHERE clause.
+- Tell the user node9 blocked this and why, then ask how to proceed.`;
   }
   if (label2.includes("sql safety") && label2.includes("update without where")) {
     return `NODE9: Blocked \u2014 UPDATE without WHERE clause would update every row.
 INSTRUCTION: Add a WHERE clause to scope the update (e.g. WHERE id = <value>).
-Do NOT retry without a WHERE clause.`;
+Do NOT retry without a WHERE clause.
+- Tell the user node9 blocked this and why, then ask how to proceed.`;
   }
   if (label2.includes("dangerous word")) {
     const match = blockedByLabel.match(/dangerous word: "([^"]+)"/i);
     const word = match?.[1] ?? "a dangerous keyword";
     return `NODE9: Blocked \u2014 command contains forbidden keyword "${word}".
 INSTRUCTION: Do NOT use "${word}". Use a non-destructive alternative.
-Do NOT attempt to bypass this with shell tricks or aliases \u2014 it will be blocked again.`;
+Do NOT attempt to bypass this with shell tricks or aliases \u2014 it will be blocked again.
+- Tell the user node9 blocked this and why, then ask how to proceed.`;
   }
   if (label2.includes("path blocked") || label2.includes("sandbox")) {
     return `NODE9: Blocked \u2014 operation targets a path outside the allowed sandbox.
 INSTRUCTION: Move your output to an allowed directory such as /tmp/ or the project directory.
-Do NOT retry on the same path.`;
+Do NOT retry on the same path.
+- Tell the user node9 blocked this and why, then ask how to proceed.`;
   }
   if (label2.includes("inline execution")) {
     return `NODE9: Blocked \u2014 inline code execution (e.g. bash -c "...") is not allowed.
-INSTRUCTION: Use individual tool calls instead of embedding code in a shell string.`;
+INSTRUCTION: Use individual tool calls instead of embedding code in a shell string.
+- Tell the user node9 blocked this and why, then ask how to proceed.`;
   }
   if (label2.includes("strict mode")) {
     return `NODE9: Blocked \u2014 strict mode is active. All tool calls require explicit human approval.
@@ -48307,7 +48313,8 @@ INSTRUCTION: Inform the user this action is pending approval. Wait for them to a
     const rule = match?.[1] ?? "a policy rule";
     return `NODE9: Blocked \u2014 action "${rule}" is forbidden by security policy.
 INSTRUCTION: Do NOT use "${rule}". Find a read-only or non-destructive alternative.
-Do NOT attempt to bypass this rule.`;
+Do NOT attempt to bypass this rule.
+- Tell the user node9 blocked this and why, then ask how to proceed.`;
   }
   const recovery = recoveryCommand ? `
 REQUIRED ACTION: Run \`${recoveryCommand}\` first, then retry your original command.` : "\n- Pivot to a non-destructive or read-only alternative.";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "2.8.2",
+  "version": "2.8.3",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",