freshcrate
Skin:/
Language:English/็ฎ€ไฝ“ไธญๆ–‡
Home > MCP Servers > node9-proxy

node9-proxy

The Execution Security Layer for the Agentic Era. Providing deterministic "Sudo" governance and audit logs for autonomous AI agents.

ai-safetyai-securityclaude-codegeminigemini-clillmllm-agentmcp-servertypescript
Why this rank:Strong adoptionRecent releaseHealthy release cadence

Description

The Execution Security Layer for the Agentic Era. Providing deterministic "Sudo" governance and audit logs for autonomous AI agents.

README

๐Ÿ›ก๏ธ Node9 Proxy

The "Sudo" Command for AI Agents.

NPM Version License: Apache 2.0 Open in HF Spaces Documentation

Node9 sits between your AI agent and your system. Every shell command, file write, and tool call passes through Node9 first โ€” blocked, approved, or logged based on your policy. Works with Claude Code, Gemini CLI, Cursor, Codex, and any MCP server.

๐Ÿ“– Full Documentation โ†’

The "Aha!" Moment

AIs move fast. Ask an agent to "ship the fix" and it might push straight to git without asking you.

With Node9:

  1. AI attempts: Bash("git push origin main")
  2. Node9 intercepts: OS-native popup appears instantly
  3. You block it โ€” one click
  4. AI pivots: "I'll create a PR for review instead"

Install

# macOS / Linux
brew tap node9-ai/node9 && brew install node9

# or via npm
npm install -g @node9/proxy
node9 init       # auto-detects Claude Code, Gemini CLI, Cursor, Codex
node9 doctor     # verify everything is wired correctly

Shields โ€” one command per service

Enable expert-crafted protection for the infrastructure your agent touches:

node9 shield enable postgres   # blocks DROP TABLE, TRUNCATE, DROP COLUMN
node9 shield enable mongodb    # blocks dropDatabase, drop(), deleteMany({})
node9 shield enable redis      # blocks FLUSHALL, FLUSHDB
node9 shield enable aws        # blocks S3 delete, EC2 terminate, IAM changes
node9 shield enable k8s        # blocks namespace delete, helm uninstall
node9 shield enable docker     # blocks system prune, volume prune, rm -f
node9 shield enable github     # blocks gh repo delete, remote branch deletion
node9 shield enable bash-safe  # blocks curl|bash, base64|sh, rm -rf /
node9 shield enable filesystem # reviews chmod 777, writes to /etc/

node9 shield list              # see all shields and their status

MCP Gateway โ€” protect any MCP server

Wrap any MCP server transparently. The AI sees the same server โ€” Node9 intercepts every tool call:

{
  "mcpServers": {
    "postgres": {
      "command": "node9",
      "args": ["mcp", "--upstream", "npx -y @modelcontextprotocol/server-postgres postgresql://..."]
    }
  }
}

Or use node9 init โ€” it wraps existing MCP servers automatically.

MCP Tool Pinning โ€” rug pull defense

MCP servers can change their tool definitions between sessions. A compromised or malicious server could silently add, remove, or modify tools after initial trust โ€” a rug pull attack.

Node9 defends against this by pinning tool definitions on first use:

  1. First connection โ€” the gateway records a SHA-256 hash of all tool definitions
  2. Subsequent connections โ€” the hash is compared; if tools changed, the session is quarantined and all tool calls are blocked until a human reviews and approves the change
  3. Corrupt pin state โ€” fails closed (blocks), never silently re-trusts
node9 mcp pin list                # show all pinned servers and hashes
node9 mcp pin update <serverKey>  # remove pin, re-pin on next connection
node9 mcp pin reset               # clear all pins (re-pin on next connection)

This is automatic โ€” no configuration needed. The gateway pins on first tools/list and enforces on every subsequent session.

Skills Pinning โ€” installed-plugin drift detection

Marketplace plugins at ~/.claude/plugins/marketplaces/ come from registries, not your workspace โ€” git status never sees them. Each installed plugin gets its own pin (same model as MCP server pinning): installing a new plugin creates a new pin silently; only changes to an already-pinned plugin trigger drift. Opt-in via policy.skillPinning.enabled: true; use mode: 'block' for strict enforcement. User-edited files are not in default scope. Extend via policy.skillPinning.roots.

Python SDK โ€” govern any Python agent

from node9 import configure

configure(agent_name="my-agent", policy="require_approval")

# Your existing agent code runs unchanged โ€” Node9 intercepts tool calls

Python SDK โ†’ ยท Governed Agent examples โ†’

What's always on (no config needed)

  • Git: blocks git push --force, git reset --hard, git clean -fd
  • SQL: blocks DELETE/UPDATE without WHERE, DROP TABLE, TRUNCATE
  • Shell: blocks curl | bash, sudo commands
  • DLP: blocks AWS keys, GitHub tokens, Stripe keys, PEM private keys in any tool call argument
  • Response DLP: background scanner reads Claude's JSONL history hourly and alerts you if a secret appears in Claude's response text (not just tool args) โ€” see node9 dlp
  • Auto-undo: git snapshot before every AI file edit โ†’ node9 undo to revert
  • Skills Pinning: SHA-256 verification of agent skill files between sessions; quarantines on drift (AST 02 + AST 07 โ€” supply chain & update drift)

Observability

Every tool call your AI agent makes is recorded โ€” command, arguments, result, and cost estimate. Node9 gives you four ways to see what your agent is doing.

Live HUD (statusline)

Node9 wires a live statusline into Claude Code that shows you what's happening in real time:

๐Ÿ›ก node9 | standard | [bash-safe] | โœ… 12 allowed  ๐Ÿ›‘ 2 blocked  ๐Ÿšจ 0 dlp | ~$0.43 | โšก no-force-push
๐Ÿ“Š claude-opus-4-6 | ctx [โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘] 54% | 5h [โ–ˆโ–ˆโ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘] 12% | 7d [โ–ˆโ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘] 7%
๐Ÿ—‚ 2 CLAUDE.md | 8 rules | 3 MCPs | 4 hooks

Line 1 โ€” Security state: active mode, enabled shields, session totals (allowed / blocked / DLP hits), estimated cost, last rule that fired.

Line 2 โ€” Context & rate limits: model name, context window usage, 5-hour and 7-day token rate-limit bars โ€” so you can see when an agent is burning through quota.

Line 3 โ€” Environment: how many CLAUDE.md files, rules, MCP servers, and hooks are active in the current project.

The HUD is wired automatically by node9 init. Full session logs land in ~/.node9/audit.log.

node9 tail โ€” live stream

Stream every tool call as it happens. Useful when you send an agent off to work and want to watch what it's doing:

node9 tail          # stream tool calls for the active session
node9 tail --all    # include all projects

Each line shows the tool name, a summary of its arguments, and the decision (allowed / blocked / DLP hit).

At startup, tail prints a one-line context summary:

ctx: 34% (68k/200k  out 2k  ยท claude-sonnet-4-6)

This shows how full the context window is, how many output tokens were generated, and which model is running. Color-coded: cyan < 50%, yellow 50โ€“79%, red โ‰ฅ 80%.

node9 report โ€” security dashboard

Run after a session to get a summary of what was allowed, blocked, DLP hits, cost, and daily activity:

$ node9 report --period 7d

  ๐Ÿ›ก node9 Report  ยท  Last 7 Days  Apr 8 โ€“ Apr 14  2,255 events
  โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€

  โœ… 1,746 allowed   ๐Ÿ›‘ 509 blocked   ๐Ÿšจ 70 DLP hits   23% block rate   ๐Ÿ’ฐ $82.91

  Top Tools                              Top Blocks
  โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€  โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€
  Bash                    โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆ 1,595   timeout                 โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆ 281
  Read                    โ–ˆโ–‘โ–‘โ–‘โ–‘โ–‘   196   smart-rule-block        โ–ˆโ–ˆโ–‘โ–‘โ–‘โ–‘  79
  Edit                    โ–ˆโ–‘โ–‘โ–‘โ–‘โ–‘   118   observe-mode-dlp-wouldโ€ฆ โ–ˆโ–‘โ–‘โ–‘โ–‘โ–‘  69
  drop_resource           โ–ˆโ–‘โ–‘โ–‘โ–‘โ–‘    69   persistent-deny         โ–ˆโ–‘โ–‘โ–‘โ–‘โ–‘  69
  Grep                    โ–ˆโ–‘โ–‘โ–‘โ–‘โ–‘    35   local-decision          โ–ˆโ–‘โ–‘โ–‘โ–‘โ–‘   5

  Daily Activity
  โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€
  Apr 9       โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆ  833  216 blocked
  Apr 10      โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘  145   24 blocked
  Apr 11      โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘  617  139 blocked

The report also includes a Tokens section showing a breakdown of input, output, cache-write, and cache-read tokens with a cache hit-rate percentage โ€” useful for spotting sessions that are burning tokens without getting cache savings.

Periods: today, 7d (default), 30d, month. Cost data is read from ~/.claude/projects/ โ€” no API calls, fully offline.

If the response DLP scanner found secrets during the period, the report shows a โš ๏ธ DLP ALERT banner at the top and a dedicated Response DLP section listing each finding with the pattern name, a masked sample, and the project it came from.

node9 sessions โ€” session history

See what your AI agent did across sessions โ€” prompt, tool calls, cost, files modified, and whether a snapshot was taken. Useful when you hand off a task and come back to review what happened:

$ node9 sessions --all

  ๐Ÿ“‹  node9 sessions  โ€” what your AI agent did

  7   sessions    $178.93  total    2379  tool calls    122 files modified
  avg $25.56    /session    7 of 7 sessions had snapshots

  Tool breakdown:
    Bash    โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆ  1165 (49%)
    Read    โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘   613 (26%)
    Edit    โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘   367 (15%)
    Other   โ–ˆโ–ˆโ–ˆโ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘   203 (9%)
    Write   โ–ˆโ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘โ–‘    31 (1%)

  โ”€โ”€โ”€ Apr 15  ~/node9
  14:47  implement delegated sessions feature       919 tools  $74.45  ๐Ÿ“ธ  00ac39e2
  12:47  ok, it seems you crash and we have a bugโ€ฆ   95 tools  $6.40   ๐Ÿ“ธ  5a4e7fab

Drill into any session for a full tool trace:

$ node9 sessions --detail 4812594b

  Session  4812594b-c93f-4a26-91f0-44aa2e324918
  Prompt   can you push node9-proxy to git dev?
  Project  ~/node9
  When     Apr 9, 2026, 20:49
  Cost     ~$2.06
  Snapshot โœ“ taken

  Tool calls (54):
    20:49  Bash              git status && git branch -a
    20:52  Write             /home/nadav/node9/node9-proxy/.git/hooks/pre-commit
    20:56  Edit              /home/nadav/node9/node9-proxy/src/cli/commands/check.ts
    ...

  Files modified (3):
    /home/nadav/node9/node9-proxy/.git/hooks/pre-commit
    /home/nadav/node9/node9-proxy/src/cli/commands/check.ts
    /home/nadav/node9/node9-proxy/src/cli/hud.ts

node9 sessions              # last 7 days
node9 sessions --all        # all time
node9 sessions --days 30    # last 30 days
node9 sessions --detail <session-id>   # full tool trace (prefix match on session ID)

Currently works with Claude Code. Support for other agents coming as they expose session history.

node9 scan โ€” day-0 forecast

Not installed yet? Run node9 scan against your existing Claude Code history to see what Node9 would have caught if it had been running:

$ node9 scan

  ๐Ÿ”  node9 scan  โ€” what would node9 catch?

  42 sessions  3,891 tool calls  1,165 bash commands  last 90 days

  If node9 had been installed:  23 commands flagged for review

  bash-safe  ยท  12 findings  โ†’  node9 shield enable bash-safe
    block-pipe-to-shell ร—8  โ€” Pipe-to-shell is a common supply-chain attack vector
    review-eval ร—4          โ€” eval of dynamic content requires human approval

  Secrets / DLP  ยท  2 potential secret leaks
    aws-access-key  AKIA****************  Bash  Apr 12

scan reads raw JSONL history and runs the real policy engine โ€” same shields and rules that would fire in production. No audit log needed.

node9 scan              # last 90 days
node9 scan --all        # all time
node9 scan --days 30    # custom window

node9 dlp โ€” response secret scanner

Node9's tool-call DLP blocks secrets before they leave your machine. But Claude can also write secrets into its response text โ€” a curl example with a real token, a config snippet with a live key โ€” and that text bypasses tool-call interception entirely.

The response DLP scanner runs as a background daemon. It reads Claude's JSONL conversation history incrementally (delta scan โ€” only new bytes since the last check), looks for secret patterns in assistant response text, and fires a desktop notification the moment it finds one.

โš ๏ธ  node9 DLP alert
AWS Access Key found in Claude response text.
Sample: AKIA****MPLE  โ€” run: node9 dlp

node9 dlp              # show all open findings with pattern, sample, project, date
node9 dlp resolve      # acknowledge all current findings (clears the banner)

The node9 dlp command shows a guided remediation workflow:

๐Ÿ”  node9 dlp  โ€” secrets found in Claude response text

  โš ๏ธ  1 open finding

  These secrets were included in Claude's response text โ€” NOT blocked.
  Rotate each affected key immediately.

  โ—  AWS Access Key ID   Apr 14, 2026
     Sample: AKIA****MPLE
     Project: ~/node9

  Next steps:
  1. Rotate any exposed keys shown above
  2. Run node9 dlp resolve to acknowledge
  3. Run node9 report for full audit history

Findings are never re-shown after node9 dlp resolve. The scanner stores resolved keys in ~/.node9/dlp-resolved.json so only genuinely new secrets surface.

๐Ÿ“– Full docs

Everything else โ€” config reference, smart rules, stateful rules, trusted hosts, approval modes, CLI reference โ€” is at node9.ai/docs.

Related

Enterprise

Node9 Pro provides governance locking, SAML/SSO, and VPC deployment. Visit node9.ai.

Release History

VersionChangesUrgencyDate
v2.38.0# [2.38.0](https://github.com/node9-ai/node9-proxy/compare/v2.37.1...v2.38.0) (2026-10-24) ### Bug Fixes * **apps:** code review of fw[#390](https://github.com/node9-ai/node9-proxy/issues/390) phases 1-5 ([d599d61](https://github.com/node9-ai/node9-proxy/commit/d599d614a0984ea420c72f3e7d3adbcd345bdd3d)) * **apps:** read manifests through one descriptor; Windows-safe tests (fw[#390](https://github.com/node9-ai/node9-proxy/issues/390)) ([af0abe8](https://github.com/node9-ai/node9-proxy/commit/aHigh10/24/2026
v2.37.1## [2.37.1](https://github.com/node9-ai/node9-proxy/compare/v2.37.0...v2.37.1) (2026-10-23) ### Bug Fixes * **deps:** bump undici from 7.29.1 to 7.30.1 ([916b051](https://github.com/node9-ai/node9-proxy/commit/916b0515bc921720f09856b0a18c22d3992867cc)) High10/24/2026
v2.35.0# [2.35.0](https://github.com/node9-ai/node9-proxy/compare/v2.34.0...v2.35.0) (2026-10-20) ### Bug Fixes * **approvals:** cap a card's timer at 24 hours (CodeQL js/resource-exhaustion) ([c02a30b](https://github.com/node9-ai/node9-proxy/commit/c02a30bf54080df9b7b0b88e2bebe48d4529d863)) * **approvals:** one timer per approval; node9 tail and monitor speak the card protocol (steps 4-5) ([44e3218](https://github.com/node9-ai/node9-proxy/commit/44e3218ac1ecff2e5171f907c6dfaeaf13441f0b)) * **approvHigh10/20/2026
v2.34.0# [2.34.0](https://github.com/node9-ai/node9-proxy/compare/v2.33.2...v2.34.0) (2026-10-19) ### Bug Fixes * code review of the bench-pools changes ([d03bb52](https://github.com/node9-ai/node9-proxy/commit/d03bb52d29c60ebdb46bbf8b1e0c772fc0f9ec64)) * **pii:** a dot or a "0," before a card number no longer hides it ([c500d5b](https://github.com/node9-ai/node9-proxy/commit/c500d5b50a946aa379167875592d9ce35d0af002)) ### Features * **dlp:** Basic credentials, OTP constructor secrets, escaped JSOHigh10/19/2026
v2.33.0# [2.33.0](https://github.com/node9-ai/node9-proxy/compare/v2.32.0...v2.33.0) (2026-10-18) ### Bug Fixes * **dlp:** encoded-secret inspection no longer fails open on decode limits ([84e37e9](https://github.com/node9-ai/node9-proxy/commit/84e37e9c4edca9167288254d49d57fd89594aeac)), closes [#338](https://github.com/node9-ai/node9-proxy/issues/338) * **policy:** close MCP shell routing bypasses from the third [#338](https://github.com/node9-ai/node9-proxy/issues/338) review ([8b9a53b](https://giHigh10/18/2026
v2.31.3## [2.31.3](https://github.com/node9-ai/node9-proxy/compare/v2.31.2...v2.31.3) (2026-10-16) ### Bug Fixes * **deps:** bump ink from 7.1.1 to 8.0.0 ([7acbd87](https://github.com/node9-ai/node9-proxy/commit/7acbd875d876f282f6d7f1e20204f91ba6f2055e)) * **scan:** keep a gap after truncated labels under ink 8 ([4d9cc64](https://github.com/node9-ai/node9-proxy/commit/4d9cc64f39f736b2e2d5ed43a73d09c1a1347366)) High10/16/2026
v2.30.1## [2.30.1](https://github.com/node9-ai/node9-proxy/compare/v2.30.0...v2.30.1) (2026-10-11) ### Bug Fixes * **ci-check:** a workflow_run after workflows only the team starts is not a stranger's run ([41d92cc](https://github.com/node9-ai/node9-proxy/commit/41d92cc37f6f4d8c70dd0b6ce2afd28d949f1415)) * **ci-check:** founder decisions on third-party agent builds and exec-escape grants ([ba32f99](https://github.com/node9-ai/node9-proxy/commit/ba32f996a6c506a5d782c1d32db7c90511fa9336)) High10/11/2026
v2.29.0# [2.29.0](https://github.com/node9-ai/node9-proxy/compare/v2.28.1...v2.29.0) (2026-10-10) ### Bug Fixes * **action:** pre-release review of the upload step ([1a9306f](https://github.com/node9-ai/node9-proxy/commit/1a9306f1754ed226b447d4edec0ae0f386ba053a)) * **action:** resolve the scanner version in Node, on every runner OS ([3054206](https://github.com/node9-ai/node9-proxy/commit/3054206e89bbc7a7b3d825822f2a66cacbf30194)) ### Features * **action:** send push scans to a connected node9 wHigh10/10/2026
v2.28.1## [2.28.1](https://github.com/node9-ai/node9-proxy/compare/v2.28.0...v2.28.1) (2026-10-09) ### Bug Fixes * **explain:** close the review findings on the output sanitizer ([645605e](https://github.com/node9-ai/node9-proxy/commit/645605e824af3a6221f7e97e713b99a7cc3bbf7e)) * **log:** read tool output from the shape each agent sends ([0df5f3a](https://github.com/node9-ai/node9-proxy/commit/0df5f3a78959d78739496d858c65a6a359cfad42)) High10/9/2026
v2.27.0# [2.27.0](https://github.com/node9-ai/node9-proxy/compare/v2.26.2...v2.27.0) (2026-10-04) ### Bug Fixes * **daemon:** report the engine default mode, not audit, when none is set ([eee0c7e](https://github.com/node9-ai/node9-proxy/commit/eee0c7e854b3625a75c0f1ee5f8153042eaf9524)) * **dlp:** redact only a declared group, keep the frame in shims, close extractor gaps ([73c91b7](https://github.com/node9-ai/node9-proxy/commit/73c91b7f920ad9e7fa7cbb8dfd8cee8e792db261)) * **dlp:** redact whole tool High10/4/2026
v2.26.2## [2.26.2](https://github.com/node9-ai/node9-proxy/compare/v2.26.1...v2.26.2) (2026-09-29) ### Bug Fixes * **package:** find node9 on npm under access-control ([12ffcee](https://github.com/node9-ai/node9-proxy/commit/12ffcee72db3754cf621deb305b96a3ae5cc7cdf)) High9/29/2026
v2.26.1## [2.26.1](https://github.com/node9-ai/node9-proxy/compare/v2.26.0...v2.26.1) (2026-09-29) ### Bug Fixes * **deps:** ship string-width 8 to users; type runtime dependency bumps as fix ([7a521e2](https://github.com/node9-ai/node9-proxy/commit/7a521e2c0f5912ec75e69bec0b8ac985c3a19e57)), closes [#382](https://github.com/node9-ai/node9-proxy/issues/382) High9/29/2026
v2.25.1## [2.25.1](https://github.com/node9-ai/node9-proxy/compare/v2.25.0...v2.25.1) (2026-09-27) ### Bug Fixes * **scan-repo:** count only the alerts the data supports; list the rest as "Worth a look" ([ea2ea54](https://github.com/node9-ai/node9-proxy/commit/ea2ea541c0b666d37f3fa00c344cd9ce13022b0a)) High9/27/2026
v2.24.2## [2.24.2](https://github.com/node9-ai/node9-proxy/compare/v2.24.1...v2.24.2) (2026-09-26) ### Bug Fixes * **dlp:** a credential review reaches a human on every route (DLP-3) ([7d23297](https://github.com/node9-ai/node9-proxy/commit/7d232974f06251c1695adcf98f36d705e8120c17)), closes [#3](https://github.com/node9-ai/node9-proxy/issues/3) [#16](https://github.com/node9-ai/node9-proxy/issues/16) * **dlp:** review-round fixes for DLP-3, each with a red witness ([0d2f5e7](https://github.com/node9High9/26/2026
v2.24.1## [2.24.1](https://github.com/node9-ai/node9-proxy/compare/v2.24.0...v2.24.1) (2026-09-26) ### Bug Fixes * **scan-repo:** judge actor gates per agent job, through the needs: chain ([0535400](https://github.com/node9-ai/node9-proxy/commit/0535400427a2fe696ef4e68768255e0f21722734)), closes [actions/runner#491](https://github.com/actions/runner/issues/491) High9/26/2026
v2.23.2## [2.23.2](https://github.com/node9-ai/node9-proxy/compare/v2.23.1...v2.23.2) (2026-09-25) ### Bug Fixes * **scan-repo:** CI-2 write-gate bypass needs github_token, not "*" alone ([7837562](https://github.com/node9-ai/node9-proxy/commit/7837562c77d7e5c699ca43ebff09beba95b791d0)), closes [anthropics/claude-code-action#550](https://github.com/anthropics/claude-code-action/issues/550) High9/25/2026
v2.22.0# [2.22.0](https://github.com/node9-ai/node9-proxy/compare/v2.21.0...v2.22.0) (2026-09-24) ### Features * **scan-repo:** read a skill's supporting files, not only its SKILL.md ([1147e44](https://github.com/node9-ai/node9-proxy/commit/1147e44971e488316b756a161578e523ad4f9d1b)) High9/24/2026
v2.21.0# [2.21.0](https://github.com/node9-ai/node9-proxy/compare/v2.20.0...v2.21.0) (2026-09-23) ### Bug Fixes * **engine:** teach the verb vocabulary PowerShell, so iwr | iex is gated like curl | sh ([bf11e6b](https://github.com/node9-ai/node9-proxy/commit/bf11e6bcb119bc3269d3641c0d42846e775ec494)) * **setup:** emit the shim path with forward slashes, and stop asserting a POSIX mode bit on Windows ([90457a9](https://github.com/node9-ai/node9-proxy/commit/90457a97a424b5591507e13642cf069c1d0bda91)) High9/23/2026
v2.19.0# [2.19.0](https://github.com/node9-ai/node9-proxy/compare/v2.18.0...v2.19.0) (2026-09-21) ### Features * **init:** send the machine id, and tell a stalled user what to do ([e6ab4e8](https://github.com/node9-ai/node9-proxy/commit/e6ab4e862e7c6fb94bd41dc85fd8aa21fce0e12a)) High9/21/2026
v2.17.0# [2.17.0](https://github.com/node9-ai/node9-proxy/compare/v2.16.2...v2.17.0) (2026-09-21) ### Features * **egress:** one egress policy, every carrier ([29ba551](https://github.com/node9-ai/node9-proxy/commit/29ba551f39274279c1c133d313affaf3e3cb68b7)) High9/21/2026
v2.15.0# [2.15.0](https://github.com/node9-ai/node9-proxy/compare/v2.14.3...v2.15.0) (2026-09-17) ### Bug Fixes * **deps:** force esbuild past the advisory tsup cannot reach ([d746f6a](https://github.com/node9-ai/node9-proxy/commit/d746f6a7f9c5f72105223e6b76d035c12af9ee8c)) ### Features * one Node baseline, and it is 22 ([11eeb21](https://github.com/node9-ai/node9-proxy/commit/11eeb21d20987eee0cbe77465ea1dbbf0830f350)) High9/17/2026
v2.14.3## [2.14.3](https://github.com/node9-ai/node9-proxy/compare/v2.14.2...v2.14.3) (2026-09-16) ### Bug Fixes * **auth:** pin where the device key may go, at the source ([54ebdc5](https://github.com/node9-ai/node9-proxy/commit/54ebdc58d9bfa7dc6be432fbdf3a9fca7c36e8e6)) * **auth:** review findings on the api-url pin ([438a9b8](https://github.com/node9-ai/node9-proxy/commit/438a9b89b912fbc42f1100c00f2fe3eab552c89f)) * **fs:** enforce read caps at the read, not at a prior stat ([d5accea](https://gitHigh9/16/2026
v2.14.2## [2.14.2](https://github.com/node9-ai/node9-proxy/compare/v2.14.1...v2.14.2) (2026-09-14) ### Bug Fixes * **blast:** strip trailing separators in linear time; record a __proto__ arg ([d1937a0](https://github.com/node9-ai/node9-proxy/commit/d1937a0944ab9114f567927cb35b6d0700fccd2d)) * **login:** open the URL via explorer.exe, not a command interpreter ([6f1c126](https://github.com/node9-ai/node9-proxy/commit/6f1c1269fece53fad6db7dda10528f76c567f7df)) * **login:** open the URL with rundll32, High9/14/2026
v2.14.0# [2.14.0](https://github.com/node9-ai/node9-proxy/compare/v2.13.1...v2.14.0) (2026-09-13) ### Bug Fixes * **cost:** read a rollout's stats and opening line from one descriptor ([e078a35](https://github.com/node9-ai/node9-proxy/commit/e078a35eaf6a4258eab61a4d9684086a9e6e734e)) * **jail:** review a credential COPY, guarded by argument position ([bfe1be6](https://github.com/node9-ai/node9-proxy/commit/bfe1be68b88986b5edd83f9030dd9113c569dd84)) ### Features * **jail:** keep each argument's slHigh9/13/2026
v2.8.3## [2.8.3](https://github.com/node9-ai/node9-proxy/compare/v2.8.2...v2.8.3) (2026-09-04) ### Bug Fixes * **negotiation:** every block tells the agent to tell the user ([249cc6f](https://github.com/node9-ai/node9-proxy/commit/249cc6f43db2ac008e553b33ff056699b8cdccb4)) High9/4/2026
v1.67.3## [1.67.3](https://github.com/node9-ai/node9-proxy/compare/v1.67.2...v1.67.3) (2026-08-20) ### Bug Fixes * **jail:** the credential jail now covers every command that reads, not fourteen ([6c93c98](https://github.com/node9-ai/node9-proxy/commit/6c93c98145b1bb2e8d175d5d64bfa89a74e52668)) High8/20/2026
v1.67.1## [1.67.1](https://github.com/node9-ai/node9-proxy/compare/v1.67.0...v1.67.1) (2026-07-27) ### Bug Fixes * **config:** an admin commandChecks value must apply when the device has no local opinion ([c09f7c4](https://github.com/node9-ai/node9-proxy/commit/c09f7c420ae2a9455261dc93961d66f36c4772f8)) Medium7/27/2026
v1.65.0# [1.65.0](https://github.com/node9-ai/node9-proxy/compare/v1.64.0...v1.65.0) (2026-07-24) ### Bug Fixes * **audit:** classify from the row, not a field pair ([389816a](https://github.com/node9-ai/node9-proxy/commit/389816a83e861ce1f603a87c6701fc550d46c149)) * **audit:** converge the last two daemon readers; fix row detection ([4bae6e2](https://github.com/node9-ai/node9-proxy/commit/4bae6e2bc817f1dc9dd695d88932d453caa28d5e)) * **audit:** one decision mapper โ€” a denial can never render as an aHigh7/24/2026
v1.61.0# [1.61.0](https://github.com/node9-ai/node9-proxy/compare/v1.60.0...v1.61.0) (2026-07-13) ### Features * **report:** regroup report dimensions to canon โ€” loopsโ†’Detection, app-permissionโ†’Apps (v3 P1) ([dd5f13d](https://github.com/node9-ai/node9-proxy/commit/dd5f13d8cb652f553ec401548acf812b043830bf)) High7/13/2026
v1.53.0# [1.53.0](https://github.com/node9-ai/node9-proxy/compare/v1.52.0...v1.53.0) (2026-06-30) ### Features * **sync:** honor the dashboard's sync interval, not just local config ([#229](https://github.com/node9-ai/node9-proxy/issues/229)) ([9d0fd7f](https://github.com/node9-ai/node9-proxy/commit/9d0fd7f6c1afd7b7cc5518dd1ed34c2f980c3084)) High6/30/2026
v1.39.0# [1.39.0](https://github.com/node9-ai/node9-proxy/compare/v1.38.0...v1.39.0) (2026-06-18) ### Features * **capture:** Phase-1 CTA โ€” tracked signup links in posture/scan + node9 signup ([#213](https://github.com/node9-ai/node9-proxy/issues/213)) ([efedf8c](https://github.com/node9-ai/node9-proxy/commit/efedf8c2975cc8bf053262b0d8c6fd4f65d0294d)), closes [dashboard-hi#level](https://github.com/dashboard-hi/issues/level) [#1](https://github.com/node9-ai/node9-proxy/issues/1) [#2](https://github.High6/18/2026
v1.33.0# [1.33.0](https://github.com/node9-ai/node9-proxy/compare/v1.32.0...v1.33.0) (2026-06-13) ### Features * multi-agent cost tracking, drop-proof ingestion, egress control + outbox shipper ([45b5109](https://github.com/node9-ai/node9-proxy/commit/45b510923114d8ee03737eadb224439f427475c1)) High6/13/2026
v1.29.0# [1.29.0](https://github.com/node9-ai/node9-proxy/compare/v1.28.0...v1.29.0) (2026-06-07) ### Features * add Antigravity (agy) + GitHub Copilot CLI integrations (dev โ†’ main release cycle) ([#198](https://github.com/node9-ai/node9-proxy/issues/198)) ([609c366](https://github.com/node9-ai/node9-proxy/commit/609c36676175723ccb733f45b2beae12e5aa4234)), closes [#152](https://github.com/node9-ai/node9-proxy/issues/152) [#151](https://github.com/node9-ai/node9-proxy/issues/151) [#154](https://githuHigh6/7/2026
v1.28.0# [1.28.0](https://github.com/node9-ai/node9-proxy/compare/v1.27.1...v1.28.0) (2026-05-27) ### Features * add Hermes Agent integration (dev โ†’ main release cycle) ([#197](https://github.com/node9-ai/node9-proxy/issues/197)) ([f2ead78](https://github.com/node9-ai/node9-proxy/commit/f2ead784079c930c4470d170f02fe480218430b3)), closes [#9](https://github.com/node9-ai/node9-proxy/issues/9) [#9](https://github.com/node9-ai/node9-proxy/issues/9) [#152](https://github.com/node9-ai/node9-proxy/issues/1High5/27/2026
v1.24.3## [1.24.3](https://github.com/node9-ai/node9-proxy/compare/v1.24.2...v1.24.3) (2026-05-21) ### Bug Fixes * **setup:** self-heal legacy backslash hooks on init ([#185](https://github.com/node9-ai/node9-proxy/issues/185) follow-up) ([6c7af51](https://github.com/node9-ai/node9-proxy/commit/6c7af51648a4442e5e5d99f04d3e495315d0b43c)) High5/21/2026
v1.21.5## [1.21.5](https://github.com/node9-ai/node9-proxy/compare/v1.21.4...v1.21.5) (2026-05-14) ### Bug Fixes * **ci:** auto-bump @node9/policy-engine when its files change ([#177](https://github.com/node9-ai/node9-proxy/issues/177)) ([928f1c3](https://github.com/node9-ai/node9-proxy/commit/928f1c39a3ef154f82a54221c9723a075e1e9476)) High5/14/2026
v1.19.4## [1.19.4](https://github.com/node9-ai/node9-proxy/compare/v1.19.3...v1.19.4) (2026-05-10) ### Bug Fixes * Dev - release verion ([#165](https://github.com/node9-ai/node9-proxy/issues/165)) ([ad95f1d](https://github.com/node9-ai/node9-proxy/commit/ad95f1dc8da518005b9f10a1096902c048ca963f)), closes [#1](https://github.com/node9-ai/node9-proxy/issues/1) [#2](https://github.com/node9-ai/node9-proxy/issues/2) High5/10/2026
v1.18.3## [1.18.3](https://github.com/node9-ai/node9-proxy/compare/v1.18.2...v1.18.3) (2026-05-06) ### Bug Fixes * dev โ†’ main ([#150](https://github.com/node9-ai/node9-proxy/issues/150)) ([864e002](https://github.com/node9-ai/node9-proxy/commit/864e002d7630f432092cc58b2cb465a7f06426f5)), closes [#3](https://github.com/node9-ai/node9-proxy/issues/3) [#1](https://github.com/node9-ai/node9-proxy/issues/1) [#1](https://github.com/node9-ai/node9-proxy/issues/1) [#5](https://github.com/node9-ai/node9-proxHigh5/6/2026
v1.16.0# [1.16.0](https://github.com/node9-ai/node9-proxy/compare/v1.15.0...v1.16.0) (2026-04-30) ### Features * prefix and bump to 1.16.0 ([#138](https://github.com/node9-ai/node9-proxy/issues/138)) ([e280e73](https://github.com/node9-ai/node9-proxy/commit/e280e73076a3ecbb5b82dbb0c6c544bbc12c6e04)), closes [#3](https://github.com/node9-ai/node9-proxy/issues/3) [#1](https://github.com/node9-ai/node9-proxy/issues/1) High4/30/2026
v1.14.0# [1.14.0](https://github.com/node9-ai/node9-proxy/compare/v1.13.1...v1.14.0) (2026-04-27) ### Features * dev โ†’ main ([#132](https://github.com/node9-ai/node9-proxy/issues/132)) ([1c3a08e](https://github.com/node9-ai/node9-proxy/commit/1c3a08ef6f39092aea2c7cd01065251c00110567)), closes [#92](https://github.com/node9-ai/node9-proxy/issues/92) [hi#level](https://github.com/hi/issues/level) [#5](https://github.com/node9-ai/node9-proxy/issues/5) [#3](https://github.com/node9-ai/node9-proxy/issuesHigh4/27/2026
v1.11.11## [1.11.11](https://github.com/node9-ai/node9-proxy/compare/v1.11.10...v1.11.11) (2026-04-22) ### Bug Fixes * Dev ([#109](https://github.com/node9-ai/node9-proxy/issues/109)) ([355a42a](https://github.com/node9-ai/node9-proxy/commit/355a42a3466b7542108474d3bb260136afebc80d)), closes [#92](https://github.com/node9-ai/node9-proxy/issues/92) [hi#level](https://github.com/hi/issues/level) High4/22/2026
v1.11.3## [1.11.3](https://github.com/node9-ai/node9-proxy/compare/v1.11.2...v1.11.3) (2026-04-19) ### Bug Fixes * dev โ†’ main ([#101](https://github.com/node9-ai/node9-proxy/issues/101)) ([b82ff3c](https://github.com/node9-ai/node9-proxy/commit/b82ff3c13234a0acb7a77174e735f5df6f945d70)), closes [#92](https://github.com/node9-ai/node9-proxy/issues/92) [hi#level](https://github.com/hi/issues/level) High4/19/2026
v1.11.2## [1.11.2](https://github.com/node9-ai/node9-proxy/compare/v1.11.1...v1.11.2) (2026-04-18) ### Bug Fixes * dev โ†’ main ([#100](https://github.com/node9-ai/node9-proxy/issues/100)) ([9c6a84f](https://github.com/node9-ai/node9-proxy/commit/9c6a84f301e3f9834e93d557216b295a84fd0a72)), closes [#92](https://github.com/node9-ai/node9-proxy/issues/92) [hi#level](https://github.com/hi/issues/level) High4/18/2026
v1.11.1## [1.11.1](https://github.com/node9-ai/node9-proxy/compare/v1.11.0...v1.11.1) (2026-04-18) ### Bug Fixes * dev โ†’ main ([#99](https://github.com/node9-ai/node9-proxy/issues/99)) ([dcd21ad](https://github.com/node9-ai/node9-proxy/commit/dcd21adcaedfbc99c0b0ac2b84af782d4d76162d)), closes [#92](https://github.com/node9-ai/node9-proxy/issues/92) [hi#level](https://github.com/hi/issues/level) High4/18/2026
v1.11.0# [1.11.0](https://github.com/node9-ai/node9-proxy/compare/v1.10.3...v1.11.0) (2026-04-17) ### Features * dev โ†’ main ([#98](https://github.com/node9-ai/node9-proxy/issues/98)) ([9fd0f38](https://github.com/node9-ai/node9-proxy/commit/9fd0f38c1e00f8aa2d4244a6d2f4fdf17bf486c1)), closes [#92](https://github.com/node9-ai/node9-proxy/issues/92) [hi#level](https://github.com/hi/issues/level) High4/17/2026
v1.10.3## [1.10.3](https://github.com/node9-ai/node9-proxy/compare/v1.10.2...v1.10.3) (2026-04-17) ### Bug Fixes * dev โ†’ main ([#97](https://github.com/node9-ai/node9-proxy/issues/97)) ([a29d64b](https://github.com/node9-ai/node9-proxy/commit/a29d64b0bbca203110dcc7e5fd2ee72ed5988c8d)), closes [hi#level](https://github.com/hi/issues/level) High4/17/2026
v1.10.2## [1.10.2](https://github.com/node9-ai/node9-proxy/compare/v1.10.1...v1.10.2) (2026-04-16) ### Bug Fixes * dev โ†’ main ([#95](https://github.com/node9-ai/node9-proxy/issues/95)) ([2fccfb7](https://github.com/node9-ai/node9-proxy/commit/2fccfb744109142f83d2bade3e063770ce8f5da1)) High4/16/2026
v1.10.1## [1.10.1](https://github.com/node9-ai/node9-proxy/compare/v1.10.0...v1.10.1) (2026-04-16) ### Bug Fixes * dev โ†’ main ([#94](https://github.com/node9-ai/node9-proxy/issues/94)) ([4a13b56](https://github.com/node9-ai/node9-proxy/commit/4a13b56be06ff23cf4ec927c6c09414f2fe147f5)) High4/16/2026
v1.10.0# [1.10.0](https://github.com/node9-ai/node9-proxy/compare/v1.9.3...v1.10.0) (2026-04-15) ### Features * dev โ†’ main ([#91](https://github.com/node9-ai/node9-proxy/issues/91)) ([98801e0](https://github.com/node9-ai/node9-proxy/commit/98801e00950ab83aae8ce4527509a3aa6a8b2ec0)) High4/15/2026
v1.9.3## [1.9.3](https://github.com/node9-ai/node9-proxy/compare/v1.9.2...v1.9.3) (2026-04-13) ### Bug Fixes * dev โ†’ main ([#84](https://github.com/node9-ai/node9-proxy/issues/84)) ([99b18db](https://github.com/node9-ai/node9-proxy/commit/99b18db82b06c0619a44e1c17084c6be612286da)) High4/13/2026
v1.9.2## [1.9.2](https://github.com/node9-ai/node9-proxy/compare/v1.9.1...v1.9.2) (2026-04-11) ### Bug Fixes * pr-81 โ†’ main ([#83](https://github.com/node9-ai/node9-proxy/issues/83)) ([8d46c01](https://github.com/node9-ai/node9-proxy/commit/8d46c0152df13d771e32e93e3f5364b912ff814a)) High4/11/2026
v1.9.1## [1.9.1](https://github.com/node9-ai/node9-proxy/compare/v1.9.0...v1.9.1) (2026-04-11) ### Bug Fixes * dev โ†’ main ([#82](https://github.com/node9-ai/node9-proxy/issues/82)) ([8f55caf](https://github.com/node9-ai/node9-proxy/commit/8f55caf0613711933d9eae9198f09b673f411889)) Medium4/11/2026
v1.9.0# [1.9.0](https://github.com/node9-ai/node9-proxy/compare/v1.8.4...v1.9.0) (2026-04-09) ### Bug Fixes * add || true to e2e check calls to prevent set -e from killing script ([848d1d7](https://github.com/node9-ai/node9-proxy/commit/848d1d70c44b19efb053d9cf62fa89151d4ca70f)) * **ci:** guard git commit when agent writes produce no diff ([78d6fbc](https://github.com/node9-ai/node9-proxy/commit/78d6fbcfc9bc90a0c6fd5f8342ada19b16d964f5)) * correct MCP gateway wrapping format in setup/teardown for aMedium4/9/2026
v1.8.4## [1.8.4](https://github.com/node9-ai/node9-proxy/compare/v1.8.3...v1.8.4) (2026-04-09) ### Bug Fixes * dev โ†’ main ([#80](https://github.com/node9-ai/node9-proxy/issues/80)) ([9d9d6c9](https://github.com/node9-ai/node9-proxy/commit/9d9d6c9c7de1f9eb23c56e08b28398ae8fea0f20)), closes [#78](https://github.com/node9-ai/node9-proxy/issues/78) Medium4/9/2026
v1.8.3## [1.8.3](https://github.com/node9-ai/node9-proxy/compare/v1.8.2...v1.8.3) (2026-04-09) ### Bug Fixes * dev โ†’ main ([#79](https://github.com/node9-ai/node9-proxy/issues/79)) ([b332467](https://github.com/node9-ai/node9-proxy/commit/b3324679e33ffbd493306f53d6f330555cb00ee5)) Medium4/9/2026
v1.8.2## [1.8.2](https://github.com/node9-ai/node9-proxy/compare/v1.8.1...v1.8.2) (2026-04-08) ### Bug Fixes * add || true to e2e check calls to prevent set -e from killing script ([0882db3](https://github.com/node9-ai/node9-proxy/commit/0882db3441e70d064b451ef2afc9ea40105d65c3)) High4/8/2026
v1.7.1## [1.7.1](https://github.com/node9-ai/node9-proxy/compare/v1.7.0...v1.7.1) (2026-04-08) ### Bug Fixes * shield ([#71](https://github.com/node9-ai/node9-proxy/issues/71)) ([a54a474](https://github.com/node9-ai/node9-proxy/commit/a54a47415e32e05544436a042106bfb49c09f976)), closes [#41](https://github.com/node9-ai/node9-proxy/issues/41) [#0](https://github.com/node9-ai/node9-proxy/issues/0) [#4](https://github.com/node9-ai/node9-proxy/issues/4) [#5](https://github.com/node9-ai/node9-proxy/issueMedium4/8/2026
v1.7.0# [1.7.0](https://github.com/node9-ai/node9-proxy/compare/v1.6.0...v1.7.0) (2026-04-04) ### Features * cost monitor ([#66](https://github.com/node9-ai/node9-proxy/issues/66)) ([85bc2e2](https://github.com/node9-ai/node9-proxy/commit/85bc2e2798bc433671bca692addebb91301e8d3c)) Medium4/4/2026
v1.6.0# [1.6.0](https://github.com/node9-ai/node9-proxy/compare/v1.5.5...v1.6.0) (2026-04-04) ### Features * MCP Server - [node9] AI review: main ([#63](https://github.com/node9-ai/node9-proxy/issues/63)) ([c53558f](https://github.com/node9-ai/node9-proxy/commit/c53558f33d939795139debb291647687fedb0a1d)) Medium4/4/2026
v1.5.5## [1.5.5](https://github.com/node9-ai/node9-proxy/compare/v1.5.4...v1.5.5) (2026-04-03) ### Bug Fixes * merge latest dev updates into main ([#60](https://github.com/node9-ai/node9-proxy/issues/60)) ([e129077](https://github.com/node9-ai/node9-proxy/commit/e129077fad1a109269b30f01c62258d38e5b33a5)) Medium4/3/2026
v1.5.4## [1.5.4](https://github.com/node9-ai/node9-proxy/compare/v1.5.3...v1.5.4) (2026-04-03) ### Bug Fixes * merge latest dev updates into main ([#55](https://github.com/node9-ai/node9-proxy/issues/55)) ([e075df7](https://github.com/node9-ai/node9-proxy/commit/e075df756ef41cd2d78da45297b5591b663ba06f)) Medium4/3/2026
v1.5.3## [1.5.3](https://github.com/node9-ai/node9-proxy/compare/v1.5.2...v1.5.3) (2026-03-31) ### Bug Fixes * merge latest dev updates into main ([#54](https://github.com/node9-ai/node9-proxy/issues/54)) ([c1aa419](https://github.com/node9-ai/node9-proxy/commit/c1aa4191247fa048eb8aeafa2560bc8c85e47142)), closes [#33](https://github.com/node9-ai/node9-proxy/issues/33) [#33](https://github.com/node9-ai/node9-proxy/issues/33) Medium3/31/2026
v1.5.2## [1.5.2](https://github.com/node9-ai/node9-proxy/compare/v1.5.1...v1.5.2) (2026-03-30) ### Bug Fixes * merge latest dev updates into main ([#53](https://github.com/node9-ai/node9-proxy/issues/53)) ([356105f](https://github.com/node9-ai/node9-proxy/commit/356105fc84d0523bf18a0ac687eae09b59a63a1b)), closes [#33](https://github.com/node9-ai/node9-proxy/issues/33) [#33](https://github.com/node9-ai/node9-proxy/issues/33) Medium3/30/2026
v1.5.1## [1.5.1](https://github.com/node9-ai/node9-proxy/compare/v1.5.0...v1.5.1) (2026-03-30) ### Bug Fixes * merge latest dev updates into main ([#52](https://github.com/node9-ai/node9-proxy/issues/52)) ([49b8cc7](https://github.com/node9-ai/node9-proxy/commit/49b8cc7e9a0ea0c204cda82dd0e4d7c9c4ffba5a)), closes [#33](https://github.com/node9-ai/node9-proxy/issues/33) [#33](https://github.com/node9-ai/node9-proxy/issues/33) Medium3/30/2026
v1.5.0# [1.5.0](https://github.com/node9-ai/node9-proxy/compare/v1.4.0...v1.5.0) (2026-03-29) ### Features * merge latest dev updates into main ([#50](https://github.com/node9-ai/node9-proxy/issues/50)) ([bf5ab77](https://github.com/node9-ai/node9-proxy/commit/bf5ab77ed82100ca551acfb48bc36c32a2f5c2b6)), closes [#33](https://github.com/node9-ai/node9-proxy/issues/33) [#33](https://github.com/node9-ai/node9-proxy/issues/33) Medium3/29/2026
v1.4.0# [1.4.0](https://github.com/node9-ai/node9-proxy/compare/v1.3.2...v1.4.0) (2026-03-28) ### Features * merge latest dev updates into main ([#49](https://github.com/node9-ai/node9-proxy/issues/49)) ([eddc0b2](https://github.com/node9-ai/node9-proxy/commit/eddc0b2582395c04d910248f66347e22433014f6)), closes [#33](https://github.com/node9-ai/node9-proxy/issues/33) [#33](https://github.com/node9-ai/node9-proxy/issues/33) Medium3/28/2026
v1.3.2## [1.3.2](https://github.com/node9-ai/node9-proxy/compare/v1.3.1...v1.3.2) (2026-03-28) ### Bug Fixes * merge latest dev updates into main ([#48](https://github.com/node9-ai/node9-proxy/issues/48)) ([9ea2137](https://github.com/node9-ai/node9-proxy/commit/9ea21370718dbff45d0b7f4ebf1898bf0a8e2e78)), closes [#33](https://github.com/node9-ai/node9-proxy/issues/33) [#33](https://github.com/node9-ai/node9-proxy/issues/33) Medium3/28/2026
v1.3.1## [1.3.1](https://github.com/node9-ai/node9-proxy/compare/v1.3.0...v1.3.1) (2026-03-28) ### Bug Fixes * merge latest dev updates into main ([#47](https://github.com/node9-ai/node9-proxy/issues/47)) ([e7ade6b](https://github.com/node9-ai/node9-proxy/commit/e7ade6b99495ee40962b1033156cbc551660c2f2)), closes [#33](https://github.com/node9-ai/node9-proxy/issues/33) [#33](https://github.com/node9-ai/node9-proxy/issues/33) Medium3/28/2026
v1.3.0# [1.3.0](https://github.com/node9-ai/node9-proxy/compare/v1.2.0...v1.3.0) (2026-03-28) ### Features * merge latest dev updates into main ([#45](https://github.com/node9-ai/node9-proxy/issues/45)) ([9c09cdd](https://github.com/node9-ai/node9-proxy/commit/9c09cddb9a13994c21bede9224f0ea6b22397b77)), closes [#33](https://github.com/node9-ai/node9-proxy/issues/33) [#33](https://github.com/node9-ai/node9-proxy/issues/33) Medium3/28/2026
v1.2.0# [1.2.0](https://github.com/node9-ai/node9-proxy/compare/v1.1.7...v1.2.0) (2026-03-27) ### Features * merge latest dev updates into main ([#44](https://github.com/node9-ai/node9-proxy/issues/44)) ([9220277](https://github.com/node9-ai/node9-proxy/commit/92202771cf2ea9187068285d89ab008455407904)), closes [#33](https://github.com/node9-ai/node9-proxy/issues/33) [#33](https://github.com/node9-ai/node9-proxy/issues/33) Medium3/27/2026
v1.1.7## [1.1.7](https://github.com/node9-ai/node9-proxy/compare/v1.1.6...v1.1.7) (2026-03-26) ### Bug Fixes * merge latest dev updates into main ([#43](https://github.com/node9-ai/node9-proxy/issues/43)) ([0ca3b32](https://github.com/node9-ai/node9-proxy/commit/0ca3b32339ddfc36b2dc386851be7372b1208d38)), closes [#33](https://github.com/node9-ai/node9-proxy/issues/33) [#33](https://github.com/node9-ai/node9-proxy/issues/33) Medium3/26/2026
v1.1.6## [1.1.6](https://github.com/node9-ai/node9-proxy/compare/v1.1.5...v1.1.6) (2026-03-25) ### Bug Fixes * merge latest dev updates into main ([#42](https://github.com/node9-ai/node9-proxy/issues/42)) ([4f6b76c](https://github.com/node9-ai/node9-proxy/commit/4f6b76c1ac2b737e28c3e02b3543d3190df94630)), closes [#33](https://github.com/node9-ai/node9-proxy/issues/33) [#33](https://github.com/node9-ai/node9-proxy/issues/33) Medium3/25/2026
v1.1.5## [1.1.5](https://github.com/node9-ai/node9-proxy/compare/v1.1.4...v1.1.5) (2026-03-25) ### Bug Fixes * merge latest dev updates into main ([#40](https://github.com/node9-ai/node9-proxy/issues/40)) ([ac1d341](https://github.com/node9-ai/node9-proxy/commit/ac1d341fc7b98d7efe354105f98a435c18572eaa)), closes [#33](https://github.com/node9-ai/node9-proxy/issues/33) [#33](https://github.com/node9-ai/node9-proxy/issues/33) Medium3/25/2026
v1.1.4## [1.1.4](https://github.com/node9-ai/node9-proxy/compare/v1.1.3...v1.1.4) (2026-03-25) ### Bug Fixes * merge latest dev updates into main ([#39](https://github.com/node9-ai/node9-proxy/issues/39)) ([5d14215](https://github.com/node9-ai/node9-proxy/commit/5d14215e1b786d2062c398452010e13b638bd4f8)), closes [#33](https://github.com/node9-ai/node9-proxy/issues/33) [#33](https://github.com/node9-ai/node9-proxy/issues/33) Medium3/25/2026
v1.1.3## [1.1.3](https://github.com/node9-ai/node9-proxy/compare/v1.1.2...v1.1.3) (2026-03-25) ### Bug Fixes * merge latest dev updates into main ([#38](https://github.com/node9-ai/node9-proxy/issues/38)) ([664db8b](https://github.com/node9-ai/node9-proxy/commit/664db8bd2f793e937ca84dba899b72ce4767b113)), closes [#33](https://github.com/node9-ai/node9-proxy/issues/33) [#33](https://github.com/node9-ai/node9-proxy/issues/33) Medium3/25/2026
v1.1.2## [1.1.2](https://github.com/node9-ai/node9-proxy/compare/v1.1.1...v1.1.2) (2026-03-24) ### Bug Fixes * merge latest dev updates into main ([#35](https://github.com/node9-ai/node9-proxy/issues/35)) ([e26f490](https://github.com/node9-ai/node9-proxy/commit/e26f490543e6d7178c9b6c85600f340d6a93d247)), closes [#33](https://github.com/node9-ai/node9-proxy/issues/33) [#33](https://github.com/node9-ai/node9-proxy/issues/33) Medium3/24/2026
v1.1.1## [1.1.1](https://github.com/node9-ai/node9-proxy/compare/v1.1.0...v1.1.1) (2026-03-24) ### Bug Fixes * merge latest dev updates into main ([#34](https://github.com/node9-ai/node9-proxy/issues/34)) ([c2a2138](https://github.com/node9-ai/node9-proxy/commit/c2a21380d6c671e4f3fe74fd47204dfee877c2c5)), closes [#33](https://github.com/node9-ai/node9-proxy/issues/33) [#33](https://github.com/node9-ai/node9-proxy/issues/33) Medium3/24/2026
v1.1.0# [1.1.0](https://github.com/node9-ai/node9-proxy/compare/v1.0.19...v1.1.0) (2026-03-24) ### Bug Fixes * add env validation and diff size limit to AI review ([7f018aa](https://github.com/node9-ai/node9-proxy/commit/7f018aae056bba6a1a6c9b33d328986cfa7b3803)) * address all PR review issues โ€” environment merge safety, allow-rule bypass, tests ([aac0c3c](https://github.com/node9-ai/node9-proxy/commit/aac0c3c80e6670387f55b1beb7ce952a2dec6920)) * address code review โ€” image src, jq injection safe pMedium3/24/2026
v1.0.19## [1.0.19](https://github.com/node9-ai/node9-proxy/compare/v1.0.18...v1.0.19) (2026-03-23) ### Bug Fixes * merge latest dev updates into main ([#31](https://github.com/node9-ai/node9-proxy/issues/31)) ([ed7406c](https://github.com/node9-ai/node9-proxy/commit/ed7406cffde96dad8474ab40743f2f189b602bd5)), closes [hi#confidence](https://github.com/hi/issues/confidence) Medium3/23/2026
v1.0.18## [1.0.18](https://github.com/node9-ai/node9-proxy/compare/v1.0.17...v1.0.18) (2026-03-22) ### Bug Fixes * merge latest dev updates into main ([#28](https://github.com/node9-ai/node9-proxy/issues/28)) ([7892725](https://github.com/node9-ai/node9-proxy/commit/7892725af5f2f41875ff8ea69b2ee062bc849c0c)), closes [hi#confidence](https://github.com/hi/issues/confidence) Medium3/22/2026
v1.0.17## [1.0.17](https://github.com/node9-ai/node9-proxy/compare/v1.0.16...v1.0.17) (2026-03-22) ### Bug Fixes * merge latest dev updates into main ([#27](https://github.com/node9-ai/node9-proxy/issues/27)) ([538db01](https://github.com/node9-ai/node9-proxy/commit/538db01004ce886a9a363ac1233116c63361ccbf)), closes [hi#confidence](https://github.com/hi/issues/confidence) Low3/22/2026
v1.0.16## [1.0.16](https://github.com/node9-ai/node9-proxy/compare/v1.0.15...v1.0.16) (2026-03-22) ### Bug Fixes * merge latest dev updates into main ([#26](https://github.com/node9-ai/node9-proxy/issues/26)) ([d18423f](https://github.com/node9-ai/node9-proxy/commit/d18423f012e2967f8196e8e0aed50e400dde9d31)), closes [hi#confidence](https://github.com/hi/issues/confidence) Low3/22/2026
v1.0.15## [1.0.15](https://github.com/node9-ai/node9-proxy/compare/v1.0.14...v1.0.15) (2026-03-22) ### Bug Fixes * merge latest dev updates into main ([#25](https://github.com/node9-ai/node9-proxy/issues/25)) ([b0253f5](https://github.com/node9-ai/node9-proxy/commit/b0253f55596520b72d87c3f5076e905f16bbc23e)), closes [hi#confidence](https://github.com/hi/issues/confidence) Low3/22/2026
v1.0.14## [1.0.14](https://github.com/node9-ai/node9-proxy/compare/v1.0.13...v1.0.14) (2026-03-21) ### Bug Fixes * merge latest dev updates into main ([#24](https://github.com/node9-ai/node9-proxy/issues/24)) ([8ad4bfa](https://github.com/node9-ai/node9-proxy/commit/8ad4bfa7a49282eefcb8797e7dde93128b7db829)), closes [hi#confidence](https://github.com/hi/issues/confidence) Low3/21/2026
v1.0.13## [1.0.13](https://github.com/node9-ai/node9-proxy/compare/v1.0.12...v1.0.13) (2026-03-20) ### Bug Fixes * merge latest dev updates into main ([#23](https://github.com/node9-ai/node9-proxy/issues/23)) ([b64e5d8](https://github.com/node9-ai/node9-proxy/commit/b64e5d8fe4c21d5b83ad281e91e3cee5bb47248e)) Low3/20/2026
v1.0.12## [1.0.12](https://github.com/node9-ai/node9-proxy/compare/v1.0.11...v1.0.12) (2026-03-20) ### Bug Fixes * merge latest dev updates into main ([#22](https://github.com/node9-ai/node9-proxy/issues/22)) ([3e235d7](https://github.com/node9-ai/node9-proxy/commit/3e235d7916a8ec6f7b947544c87b74c327aac20f)) Low3/20/2026
v1.0.11## [1.0.11](https://github.com/node9-ai/node9-proxy/compare/v1.0.10...v1.0.11) (2026-03-17) ### Bug Fixes * merge latest dev updates into main ([#20](https://github.com/node9-ai/node9-proxy/issues/20)) ([7401516](https://github.com/node9-ai/node9-proxy/commit/740151680684068cf9ef841b509571d99d850352)) Low3/17/2026
v1.0.10## [1.0.10](https://github.com/node9-ai/node9-proxy/compare/v1.0.9...v1.0.10) (2026-03-17) ### Bug Fixes * merge latest dev updates into main ([#19](https://github.com/node9-ai/node9-proxy/issues/19)) ([622076d](https://github.com/node9-ai/node9-proxy/commit/622076d0d9bd64ef8e42c35b358550ae3e5188b6)) Low3/17/2026
v1.0.9## [1.0.9](https://github.com/node9-ai/node9-proxy/compare/v1.0.8...v1.0.9) (2026-03-16) ### Bug Fixes * merge latest dev updates into main ([#18](https://github.com/node9-ai/node9-proxy/issues/18)) ([76b9747](https://github.com/node9-ai/node9-proxy/commit/76b9747d9c242fdea084efd63c3bbd098dd9e325)) Low3/16/2026
v1.0.8## [1.0.8](https://github.com/node9-ai/node9-proxy/compare/v1.0.7...v1.0.8) (2026-03-16) ### Bug Fixes * merge latest dev updates into main ([#17](https://github.com/node9-ai/node9-proxy/issues/17)) ([e809be6](https://github.com/node9-ai/node9-proxy/commit/e809be6fffaa661c8101e98185a1486c7874943c)) Low3/16/2026
v1.0.7## [1.0.7](https://github.com/node9-ai/node9-proxy/compare/v1.0.6...v1.0.7) (2026-03-14) ### Bug Fixes * merge latest dev updates into main ([#16](https://github.com/node9-ai/node9-proxy/issues/16)) ([04bdc90](https://github.com/node9-ai/node9-proxy/commit/04bdc9056882ee05717529aee9f4c814a51d590c)) Low3/14/2026

Dependencies & License Audit

Loading dependencies...

Similar Packages

mcp-ts-coreAgent-native TypeScript framework for building MCP servers. Build tools, not infrastructure.v0.13.16
mcp-searxngMCP Server for SearXNGv2.7.0
nix-aiYour AI coding toolkit, declared in Nix โ€” Claude, Gemini, Copilot, 15+ MCP servers, one flakev8.2.0
studioOpen-source control plane for your AI agents. Connect tools, hire agents, track every token and dollarv4.519.0
codegA unified workspace for local AI coding agents (Claude Code, Codex, Gemini CLI, etc.) โ€” desktop app, standalone server, or Docker. Conversation aggregation, git worktree workflows, MCP/Skills managemev0.40.0

More in MCP Servers

litellmPython SDK, Proxy Server (AI Gateway) to call 100+ LLM APIs in OpenAI (or native) format, with cost tracking, guardrails, loadbalancing and logging. [Bedrock, Azure, OpenAI, VertexAI, Cohere, Anthropi
ruflo๐ŸŒŠ The leading agent orchestration platform for Claude. Deploy intelligent multi-agent swarms, coordinate autonomous workflows, and build conversational AI systems. Features enterprise-grade archit
@claude-flow/cliRuflo CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code
claude-plugins-officialOfficial, Anthropic-managed directory of high quality Claude Code Plugins.