@akasecurity/ai-tc-claude-code 0.8.2 → 0.9.0

package/scripts/apply-suppressions.js

@@ -495,7 +495,7 @@ var require_ignore = __commonJS({
 import { existsSync as existsSync5, readFileSync as readFileSync9 } from "fs";
 import { userInfo } from "os";
 import { dirname as dirname4, join as join13 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
+import { fileURLToPath as fileURLToPath3 } from "url";
 
 // ../../packages/persistence/src/database.ts
 import { randomUUID as randomUUID8 } from "crypto";
@@ -544,6 +544,10 @@ var SQLITE_MIGRATIONS = [
   {
     tag: "0009_findings_path_expression_index",
     sql: "-- Custom migration: partial expression index for the resolver's per-path reads.\n--\n-- openAtRestKeysForPath / resolvedAtRestKeysForPath (and the scanner's tier-3\n-- open-key probe) filter at-rest events by\n--   e.kind = 'code_change' AND json_extract(e.metadata, '$.filePath') = :path\n-- once per changed/deleted file on every scan \u2014 previously a full events scan\n-- per file. json_extract is deterministic, so SQLite allows it in an index;\n-- the WHERE kind = 'code_change' keeps the index to exactly the rows those\n-- queries can match (in-flight events are never path-addressed).\nCREATE INDEX `idx_events_code_change_path` ON `events` (json_extract(`metadata`, '$.filePath')) WHERE `kind` = 'code_change';\n"
+  },
+  {
+    tag: "0010_events_session_expression_index",
+    sql: "-- Custom migration: partial expression index for session-scoped finding reads.\n--\n-- sessionFindingsCount, the session-scoped listGroupedFindings paths, and the\n-- insert-time session dedup all filter live-capture events by\n--   json_extract(e.metadata, '$.sessionId') = :sessionId\n-- \u2014 previously a full findings-join scan with a JSON parse per row. The\n-- IS NOT NULL predicate keeps the index to session-stamped events only (an\n-- equality probe implies non-null, so SQLite still uses it).\nCREATE INDEX `idx_events_session_id` ON `events` (json_extract(`metadata`, '$.sessionId')) WHERE json_extract(`metadata`, '$.sessionId') IS NOT NULL;\n"
   }
 ];
 
@@ -646,6 +650,12 @@ var defaultCostModel = {
   }
 };
 
+// ../../packages/schema/src/token/format.ts
+var COMPACT = new Intl.NumberFormat("en-US", {
+  notation: "compact",
+  maximumFractionDigits: 1
+});
+
 // ../../packages/schema/src/token/token-report.ts
 var num = (value) => value ?? 0;
 function costUsageOf(a) {
@@ -15317,6 +15327,12 @@ var FindingInstance = external_exports.object({
   provider: FindingProvider,
   repo: external_exports.string(),
   file: external_exports.string(),
+  // Host tool that produced the scanned text (event metadata's toolName).
+  // Present whenever the capturing hook recorded one — including
+  // file-attributed captures (views prefer `file`); its display value is
+  // the location fallback ("via Bash") when no filePath exists. Absent for
+  // legacy rows and non-tool captures (prompts, worktree scans).
+  toolName: external_exports.string().optional(),
   // Effective action: override.action ?? actionTaken, translated to FindingAction.
   action: FindingAction,
   detectedAt: external_exports.iso.datetime(),
@@ -15373,6 +15389,9 @@ var ListGroupedFindingsQuery = external_exports.object({
   provider: external_exports.array(FindingProvider).optional(),
   action: external_exports.array(FindingAction).optional(),
   q: external_exports.string().optional(),
+  // Scope to findings whose event carries this session id (the Activity page's
+  // session → findings drilldown). Findings without a session never match.
+  sessionId: external_exports.string().optional(),
   groupBy: external_exports.literal("type").optional(),
   limit: external_exports.coerce.number().int().min(1).max(100).optional(),
   cursor: external_exports.string().optional()
@@ -15384,7 +15403,13 @@ var ListGroupedFindingsResponse = external_exports.object({
   }),
   facets: FindingFacets,
   items: external_exports.array(FindingGroup),
-  nextCursor: external_exports.string().nullable()
+  nextCursor: external_exports.string().nullable(),
+  // Present only on session-scoped queries (`sessionId` set): per ruleId, how
+  // many times that rule fired in the session's persisted transcript. Findings
+  // here are deduplicated to unique values while the transcript tally counts
+  // every firing, so the two numbers legitimately differ — this map lets a
+  // session-scoped view show both.
+  sessionFirings: external_exports.record(external_exports.string(), external_exports.number().int().nonnegative()).optional()
 }).meta({ id: "ListGroupedFindingsResponse" });
 var ApplyFindingActionRequest = external_exports.object({
   // 'quarantined' is system-assigned (see FindingAction) — clients may not set
@@ -15792,6 +15817,10 @@ var ListActivitySessionsQuery = external_exports.object({
   from: external_exports.union([external_exports.iso.date(), external_exports.iso.datetime()]).optional(),
   /** Upper bound on startedAt; omitted defaults to now. */
   to: external_exports.union([external_exports.iso.date(), external_exports.iso.datetime()]).optional(),
+  /** Exclude zero-activity sessions — roots whose only recorded children are
+   * bookkeeping rows (hooks, config scans), typically background `claude`
+   * launches. Omitted = list everything. `z.stringbool()` per the note above. */
+  excludeEmpty: external_exports.stringbool().optional(),
   /** Page size, 1–100; out-of-range values are a 400. `z.coerce` — query params arrive as strings. */
   limit: external_exports.coerce.number().int().min(1).max(100).default(50),
   /** Opaque pagination cursor (most-recent first). */
@@ -15800,7 +15829,11 @@ var ListActivitySessionsQuery = external_exports.object({
 var ListActivitySessionsResponse = external_exports.object({
   items: external_exports.array(ActivitySessionSummary),
   /** `null` once the last page is reached. */
-  nextCursor: external_exports.string().nullable()
+  nextCursor: external_exports.string().nullable(),
+  /** Zero-activity sessions matching the query's filters/range (whether or
+   * not `excludeEmpty` dropped them from `items`) — the count a UI toggle
+   * shows when collapsing them. */
+  emptyCount: external_exports.number().int().nonnegative()
 }).meta({ id: "ListActivitySessionsResponse" });
 var ListSessionEventsQuery = external_exports.object({
   /** Default 100, range 1–500. */
@@ -15835,6 +15868,12 @@ var EventMetadata = external_exports.object({
   sessionId: external_exports.string().optional(),
   repo: external_exports.string().optional(),
   filePath: external_exports.string().optional(),
+  // The host tool whose input/output was scanned (e.g. 'Bash', 'WebFetch'),
+  // set by the tool-scanning hooks. The tool NAME only — never the tool's
+  // arguments or output, which can carry the very value a finding masked
+  // (metadata is stored unredacted). Gives findings on non-file captures a
+  // display location ("via Bash") when no filePath exists.
+  toolName: external_exports.string().optional(),
   // Set (true) by the worktree scanner when the file is excluded by the
   // repo's .gitignore. Gitignored files ARE still scanned — local scratch and
   // generated code can leak real secrets — but the provenance is recorded so
@@ -16166,7 +16205,10 @@ var ExceptionBundleEntry = DetectionException.pick({
 var MatcherType = external_exports.enum(["keyword", "regex", "validator"]).meta({ id: "MatcherType" });
 var KeywordMatcher = external_exports.object({
   type: external_exports.literal("keyword"),
-  keywords: external_exports.array(external_exports.string()).min(1),
+  // An empty keyword matches at every position, yielding one zero-length span
+  // per character. Rejected here because a keyword that matches everything is
+  // never intentional.
+  keywords: external_exports.array(external_exports.string().min(1)).min(1),
   caseSensitive: external_exports.boolean().default(false)
 });
 function isValidRegex(pattern, flags) {
@@ -16331,6 +16373,11 @@ function severityFloorPolicy(category) {
   const peak = CATEGORY_PEAK_SEVERITY[category];
   return peak === "critical" || peak === "high" ? "warn" : "monitor";
 }
+function severityFloorPosture() {
+  const out = {};
+  for (const c of DetectionCategory.options) out[c] = severityFloorPolicy(c);
+  return out;
+}
 var PolicyKind = external_exports.enum(["builtin", "custom"]).meta({ id: "PolicyKind" });
 var KNOWN_BUILTIN_IDS = ["monitor", "warn", "redact", "block"];
 var BuiltinPolicyId = external_exports.enum(KNOWN_BUILTIN_IDS).meta({ id: "BuiltinPolicyId" });
@@ -16415,6 +16462,10 @@ var ListEventsResponse = external_exports.object({
   items: external_exports.array(Event),
   nextCursor: external_exports.string().nullable()
 }).meta({ id: "ListEventsResponse" });
+var IngestResponse = external_exports.object({
+  accepted: external_exports.number().int().nonnegative(),
+  duplicates: external_exports.number().int().nonnegative()
+}).meta({ id: "IngestResponse" });
 var ListFindingsQuery = external_exports.object({
   cursor: external_exports.string().optional(),
   limit: external_exports.coerce.number().int().min(1).max(LIST_QUERY_MAX_LIMIT).default(50),
@@ -16804,6 +16855,7 @@ function buildFindingGroups(rows, opts = {}) {
         provider: toApiProvider(r.sourceTool),
         repo: r.repo,
         file: r.file,
+        ...r.toolName === void 0 ? {} : { toolName: r.toolName },
         action: toApiAction(effectiveDbAction),
         detectedAt: r.occurredAt,
         confidence: r.confidence,
@@ -16876,6 +16928,7 @@ function buildHaystack(g, extra) {
     g.id,
     ...g.instances.map((i) => i.repo),
     ...g.instances.map((i) => i.file),
+    ...g.instances.map((i) => i.toolName ? `via ${i.toolName}` : ""),
     ...g.instances.map((i) => i.id),
     ...extra === void 0 ? [] : [extra]
   ].join(" ").toLowerCase();
@@ -17142,6 +17195,71 @@ var ProjectFilesScan = external_exports.object({
   scannedAt: external_exports.string()
 });
 
+// ../../packages/schema/src/zod/ranges.ts
+var TIME_RANGES = ["7d", "30d", "3m", "6m"];
+var TimeRange = external_exports.enum(TIME_RANGES).meta({ id: "TimeRange" });
+var DEFAULT_TIME_RANGE = "7d";
+var RANGE_DAYS = {
+  "7d": 7,
+  "30d": 30,
+  "3m": 90,
+  "6m": 180
+};
+var TIME_RANGE_OR_DEFAULT = TimeRange.catch(DEFAULT_TIME_RANGE);
+
+// ../../packages/schema/src/zod/remediation.ts
+var SecretFindingState = external_exports.enum(["still-valid", "unknown", "invalid"]);
+var MaskedFindingLocation = external_exports.object({
+  filePath: external_exports.string(),
+  span: Span.optional()
+}).strict();
+var MaskedSecretFinding = external_exports.object({
+  provider: external_exports.string(),
+  maskedToken: external_exports.string(),
+  where: MaskedFindingLocation,
+  state: SecretFindingState,
+  observedAt: external_exports.iso.datetime().optional()
+}).strict();
+var RotationChecklistEntry = external_exports.object({
+  provider: external_exports.string(),
+  maskedToken: external_exports.string(),
+  consolePath: external_exports.string(),
+  occurrenceSpread: external_exports.number().int().positive()
+}).strict();
+var RemediationOption = external_exports.enum([
+  "redact-rotation-checklist",
+  "redact-only",
+  "set-secret-redact",
+  "leave"
+]);
+var RemediationEntrySource = external_exports.enum(["first-run", "pre-push", "secret-scan"]);
+var RemediationEntryContext = external_exports.object({
+  entrySource: RemediationEntrySource
+}).strict();
+var RemediationOptionChoice = external_exports.object({
+  id: RemediationOption,
+  label: external_exports.string()
+});
+var BatchedRemediationDecision = external_exports.object({
+  kind: external_exports.literal("decision"),
+  entrySource: RemediationEntrySource,
+  secretCount: external_exports.number().int().positive(),
+  prompt: external_exports.string(),
+  options: external_exports.tuple([
+    RemediationOptionChoice.extend({ id: external_exports.literal("redact-rotation-checklist") }),
+    RemediationOptionChoice.extend({ id: external_exports.literal("redact-only") }),
+    RemediationOptionChoice.extend({ id: external_exports.literal("set-secret-redact") }),
+    RemediationOptionChoice.extend({ id: external_exports.literal("leave") })
+  ])
+});
+var NoRemediationDecision = external_exports.object({
+  kind: external_exports.literal("no-decision")
+});
+var BatchedRemediation = external_exports.discriminatedUnion("kind", [
+  BatchedRemediationDecision,
+  NoRemediationDecision
+]);
+
 // ../../packages/schema/src/zod/rule-test.ts
 var TestRulesRequest = external_exports.object({
   rules: external_exports.array(Rule).min(1).max(100),
@@ -17200,10 +17318,8 @@ var SeveritySummaryResponse = external_exports.object({
   // All four severity levels are always present (count may be 0).
   bySeverity: external_exports.array(SeveritySummaryItem)
 }).meta({ id: "SeveritySummaryResponse" });
-var SECURITY_RANGES = ["7d", "30d", "3m", "6m"];
-var SecurityRange = external_exports.enum(SECURITY_RANGES).meta({ id: "SecurityRange" });
 var SecurityRangeQuery = external_exports.object({
-  range: external_exports.enum(SECURITY_RANGES).default("30d")
+  range: external_exports.enum(TIME_RANGES).default(DEFAULT_TIME_RANGE)
 });
 var EnforcementActionKind = external_exports.enum(["blocked", "redacted", "warned"]).meta({ id: "EnforcementActionKind" });
 var EnforcementAction = external_exports.object({
@@ -17213,7 +17329,7 @@ var EnforcementAction = external_exports.object({
   delta: external_exports.number().int()
 }).meta({ id: "EnforcementAction" });
 var EnforcementActionsResponse = external_exports.object({
-  range: SecurityRange,
+  range: TimeRange,
   // Sum of actions[].count in the window.
   total: external_exports.number().int().nonnegative(),
   // One entry per kind, always all three present (count may be 0).
@@ -17228,7 +17344,7 @@ var FindingsTimeseriesPoint = external_exports.object({
   medium: external_exports.number().int().nonnegative()
 }).meta({ id: "FindingsTimeseriesPoint" });
 var FindingsTimeseriesResponse = external_exports.object({
-  range: SecurityRange,
+  range: TimeRange,
   granularity: TimeseriesGranularity,
   points: external_exports.array(FindingsTimeseriesPoint)
 }).meta({ id: "FindingsTimeseriesResponse" });
@@ -17243,7 +17359,7 @@ var MttrTrendPoint = external_exports.object({
   })
 }).meta({ id: "MttrTrendPoint" });
 var MttrTrendResponse = external_exports.object({
-  range: SecurityRange,
+  range: TimeRange,
   granularity: TimeseriesGranularity,
   points: external_exports.array(MttrTrendPoint)
 }).meta({ id: "MttrTrendResponse" });
@@ -17270,11 +17386,11 @@ var TopSource = external_exports.object({
   findingsCount: external_exports.number().int().nonnegative()
 }).meta({ id: "TopSource" });
 var TopSourcesResponse = external_exports.object({
-  range: SecurityRange,
+  range: TimeRange,
   items: external_exports.array(TopSource)
 }).meta({ id: "TopSourcesResponse" });
 var TopSourcesQuery = external_exports.object({
-  range: external_exports.enum(SECURITY_RANGES).default("30d"),
+  range: external_exports.enum(TIME_RANGES).default(DEFAULT_TIME_RANGE),
   limit: external_exports.coerce.number().int().min(1).max(50).default(5),
   // Omit for both kinds.
   kind: external_exports.enum(SOURCE_KINDS).optional()
@@ -17287,7 +17403,7 @@ var ScanCoverageProvider = external_exports.object({
   supported: external_exports.boolean()
 }).meta({ id: "ScanCoverageProvider" });
 var ScanCoverageResponse = external_exports.object({
-  range: SecurityRange,
+  range: TimeRange,
   providers: external_exports.array(ScanCoverageProvider)
 }).meta({ id: "ScanCoverageResponse" });
 var SubjectType = external_exports.enum(["repo", "user", "team", "policy", "share", "rule"]).meta({
@@ -17336,6 +17452,114 @@ var ApplyRecommendedActionResponse = external_exports.object({
 var DismissRecommendedActionResponse = external_exports.object({ id: external_exports.string(), status: external_exports.literal("dismissed") }).meta({ id: "DismissRecommendedActionResponse" });
 var RecommendedActionIdParam = external_exports.object({ id: external_exports.string() });
 
+// ../../packages/schema/src/zod/triage.ts
+var TriageHit = external_exports.object({
+  ruleId: external_exports.string(),
+  category: DetectionCategory,
+  severity: Severity,
+  maskedMatch: external_exports.string(),
+  rawMatch: external_exports.string(),
+  context: external_exports.string(),
+  filePath: external_exports.string().optional(),
+  confidence: external_exports.number().min(0).max(1),
+  id: external_exports.string().optional(),
+  valueFingerprint: external_exports.string().optional(),
+  keyVersion: external_exports.number().int().nonnegative().optional()
+});
+var TriagePolicy = BuiltinPolicyId;
+var TriageCategoryRec = external_exports.object({
+  category: DetectionCategory,
+  action: TriagePolicy,
+  reasoning: external_exports.string(),
+  genuineCount: external_exports.number().int().nonnegative(),
+  fpCount: external_exports.number().int().nonnegative(),
+  // TriageHit ids judged false-positive in this category. fpCount must equal
+  // this array's length — enforced by the consumer, not this schema.
+  fpIds: external_exports.array(external_exports.string())
+});
+var TriageRecommendation = external_exports.object({
+  perCategory: external_exports.array(TriageCategoryRec),
+  notes: external_exports.string()
+});
+
+// ../../packages/schema/src/zod/setup-frame.ts
+var CalibrationCounts = external_exports.object({
+  total: external_exports.number().int().nonnegative(),
+  important: external_exports.number().int().nonnegative(),
+  routine: external_exports.number().int().nonnegative()
+}).refine((c) => c.total === c.important + c.routine, {
+  message: "total must equal important + routine",
+  path: ["total"]
+});
+var FalsePositivePatternValue = external_exports.object({
+  ruleId: external_exports.string(),
+  category: DetectionCategory,
+  valueFingerprint: external_exports.string(),
+  keyVersion: external_exports.number().int().nonnegative()
+});
+var FalsePositivePatternGroup = external_exports.object({
+  pattern: external_exports.string(),
+  count: external_exports.number().int().nonnegative(),
+  values: external_exports.array(FalsePositivePatternValue).min(1)
+});
+var CalibrationFindingKind = external_exports.object({
+  category: DetectionCategory,
+  count: external_exports.number().int().nonnegative(),
+  egress: external_exports.boolean()
+});
+var CalibrationFrame = external_exports.object({
+  counts: CalibrationCounts,
+  routineCategories: external_exports.array(DetectionCategory),
+  surfacedCategories: external_exports.array(DetectionCategory),
+  findingKinds: external_exports.array(CalibrationFindingKind),
+  posture: external_exports.record(DetectionCategory, BuiltinPolicyId),
+  maskedFindings: external_exports.array(MaskedSecretFinding).optional(),
+  falsePositivePatterns: external_exports.array(FalsePositivePatternGroup).optional()
+});
+var CalibrationPreviewCategory = TriageCategoryRec.pick({
+  category: true,
+  genuineCount: true,
+  fpCount: true
+}).extend({
+  egress: external_exports.boolean()
+});
+var CalibrationPreview = external_exports.object({
+  categories: external_exports.array(CalibrationPreviewCategory),
+  posture: external_exports.record(DetectionCategory, BuiltinPolicyId)
+});
+var CalibrationResult = external_exports.object({
+  frame: CalibrationFrame,
+  copy: external_exports.string()
+});
+var FirstRunCalibration = external_exports.enum(["scan", "floor"]);
+var SetupHandoffOption = external_exports.object({
+  id: external_exports.enum(["enter-remediation", "open-dashboard", "not-now"]),
+  label: external_exports.string()
+});
+var DashboardHandoffOptions = external_exports.tuple([
+  SetupHandoffOption.extend({ id: external_exports.literal("open-dashboard") }),
+  SetupHandoffOption.extend({ id: external_exports.literal("not-now") })
+]);
+var ComposedRemediationOptions = external_exports.tuple([
+  SetupHandoffOption.extend({ id: external_exports.literal("enter-remediation") }),
+  SetupHandoffOption.extend({ id: external_exports.literal("open-dashboard") }),
+  SetupHandoffOption.extend({ id: external_exports.literal("not-now") })
+]);
+var SetupHandoffOffer = external_exports.object({
+  worthALook: external_exports.number().int().nonnegative(),
+  liveKeys: external_exports.number().int().nonnegative().optional(),
+  options: external_exports.union([DashboardHandoffOptions, ComposedRemediationOptions])
+}).refine(
+  (o) => o.options.some((opt) => opt.id === "enter-remediation") === (o.liveKeys ?? 0) > 0,
+  {
+    message: "the chain-entry option is present exactly when liveKeys > 0",
+    path: ["options"]
+  }
+).refine((o) => (o.liveKeys ?? 0) <= o.worthALook, {
+  message: "liveKeys is a subset of worthALook and cannot exceed it",
+  path: ["liveKeys"]
+});
+
 // ../../packages/schema/src/zod/shares.ts
 var DestinationKind = external_exports.enum(["provider", "internal", "ip"]).meta({ id: "DestinationKind" });
 var Transport = external_exports.enum(["https", "http", "sftp", "grpc", "smtp"]).meta({ id: "Transport" });
@@ -17521,36 +17745,6 @@ function reviewSeverityRank(reasons) {
   return Math.min(...reasons.map((r) => REVIEW_SEVERITY_RANK[r]));
 }
 
-// ../../packages/schema/src/zod/triage.ts
-var TriageHit = external_exports.object({
-  ruleId: external_exports.string(),
-  category: DetectionCategory,
-  severity: Severity,
-  maskedMatch: external_exports.string(),
-  rawMatch: external_exports.string(),
-  context: external_exports.string(),
-  filePath: external_exports.string().optional(),
-  confidence: external_exports.number().min(0).max(1),
-  id: external_exports.string().optional(),
-  valueFingerprint: external_exports.string().optional(),
-  keyVersion: external_exports.number().int().nonnegative().optional()
-});
-var TriagePolicy = BuiltinPolicyId;
-var TriageCategoryRec = external_exports.object({
-  category: DetectionCategory,
-  action: TriagePolicy,
-  reasoning: external_exports.string(),
-  genuineCount: external_exports.number().int().nonnegative(),
-  fpCount: external_exports.number().int().nonnegative(),
-  // TriageHit ids judged false-positive in this category. fpCount must equal
-  // this array's length — enforced by the consumer, not this schema.
-  fpIds: external_exports.array(external_exports.string())
-});
-var TriageRecommendation = external_exports.object({
-  perCategory: external_exports.array(TriageCategoryRec),
-  notes: external_exports.string()
-});
-
 // ../../packages/persistence/src/internal/sql-text.ts
 function escapeLikePattern(s) {
   return s.replace(/\\/g, "\\\\").replace(/%/g, "\\%").replace(/_/g, "\\_");
@@ -17635,9 +17829,9 @@ function schemaObjectExists(db, kind, name) {
 function indexExists(db, name) {
   return schemaObjectExists(db, "index", name);
 }
-function columnNames(db, table, opts) {
+function columnNames(db, table2, opts) {
   const pragma = opts?.includeGenerated ? "table_xinfo" : "table_info";
-  const columns = db.prepare(`PRAGMA ${pragma}(${table})`).all();
+  const columns = db.prepare(`PRAGMA ${pragma}(${table2})`).all();
   return columns.map((c) => c.name);
 }
 function evidenceExists(db, object2) {
@@ -17805,12 +17999,12 @@ function reconcileSourceProjectIds(db) {
     const repointCallSite = db.prepare(
       "UPDATE share_call_site SET project_id = ? WHERE project_id = ?"
     );
-    const pathTables = ["project_file", "file_access_override"].map((table) => ({
+    const pathTables = ["project_file", "file_access_override"].map((table2) => ({
       dropCollisions: db.prepare(
-        `DELETE FROM ${table} WHERE project_id = ?
-           AND path IN (SELECT path FROM ${table} WHERE project_id = ?)`
+        `DELETE FROM ${table2} WHERE project_id = ?
+           AND path IN (SELECT path FROM ${table2} WHERE project_id = ?)`
       ),
-      repoint: db.prepare(`UPDATE ${table} SET project_id = ? WHERE project_id = ?`)
+      repoint: db.prepare(`UPDATE ${table2} SET project_id = ? WHERE project_id = ?`)
     }));
     const deleteLegacy = db.prepare("DELETE FROM source_project WHERE id = ?");
     withTransaction(
@@ -17844,9 +18038,9 @@ function isForeignSqliteLineage(db) {
   if (schemaObjectExists(db, "table", "tenants")) return true;
   return columnNames(db, "events").includes("tenant_id");
 }
-function ensureSyncedAtColumn(db, table) {
-  if (!columnNames(db, table).includes("synced_at")) {
-    db.exec(`ALTER TABLE ${table} ADD COLUMN synced_at integer`);
+function ensureSyncedAtColumn(db, table2) {
+  if (!columnNames(db, table2).includes("synced_at")) {
+    db.exec(`ALTER TABLE ${table2} ADD COLUMN synced_at integer`);
   }
 }
 function ensureScanLedgerTable(db) {
@@ -18113,6 +18307,10 @@ var TIMELINE_COLUMNS = `
   json_extract(attributes, '$.internal') AS internal,
   json_extract(attributes, '$.flagged') AS flagged`;
 var SESSION_ROOT = `event_type = 'session'`;
+var HAS_ACTIVITY = `EXISTS (
+  SELECT 1 FROM audit_events c
+  WHERE c.root_session_id = audit_events.id
+    AND c.event_type NOT IN ('hook', 'config_scan'))`;
 var SqliteActivityRepository = class {
   constructor(db, now = () => Date.now()) {
     this.db = db;
@@ -18126,7 +18324,8 @@ var SqliteActivityRepository = class {
     const sessionsToday = countScalar(
       this.db,
       `SELECT count(*) AS n FROM audit_events
-           WHERE ${SESSION_ROOT} AND started_at >= ? AND started_at < ?`,
+           WHERE ${SESSION_ROOT} AND started_at >= ? AND started_at < ?
+             AND ${HAS_ACTIVITY}`,
       [startMs, endMs]
     );
     const liveThreshold = this.now() - LIVE_ACTIVITY_WINDOW_MS;
@@ -18198,6 +18397,13 @@ var SqliteActivityRepository = class {
       );
       params.push(pattern, pattern, pattern, pattern, pattern, pattern);
     }
+    const emptyCount = countScalar(
+      this.db,
+      `SELECT count(*) AS n FROM audit_events
+        WHERE ${[...conditions, `NOT ${HAS_ACTIVITY}`].join(" AND ")}`,
+      params
+    );
+    if (query.excludeEmpty) conditions.push(HAS_ACTIVITY);
     if (cursor) {
       conditions.push("(started_at < ? OR (started_at = ? AND id < ?))");
       params.push(cursor.startedAtMs, cursor.startedAtMs, cursor.id);
@@ -18234,7 +18440,7 @@ var SqliteActivityRepository = class {
     );
     const last = page[page.length - 1];
     const nextCursor = hasMore && last ? encodeCursor({ startedAtMs: last.started_at, id: last.id }) : null;
-    return Promise.resolve({ items, nextCursor });
+    return Promise.resolve({ items, nextCursor, emptyCount });
   }
   getSession(sessionId) {
     const rootRow = getRow(
@@ -19540,9 +19746,43 @@ var SqliteFindingsRepository = class {
       }))
     );
   }
+  /** Live-enforced findings recorded for one session — a bare COUNT over the
+   * session-stamped events (served by idx_events_session_id), so the Activity
+   * page can label its findings link without the grouped pipeline. */
+  sessionFindingsCount(sessionId) {
+    if (!sessionId) return Promise.resolve(0);
+    return Promise.resolve(
+      countScalar(
+        this.db,
+        `SELECT count(*) AS n FROM findings f
+           JOIN events e ON e.id = f.event_id
+          WHERE json_extract(e.metadata, '$.sessionId') = :sessionId`,
+        { sessionId }
+      )
+    );
+  }
+  /** Per-rule transcript firing tally for one session — reads the OTHER finding
+   * store (inspection_findings, keyed to audit_events): every detection the
+   * transcript pass recorded, counted per firing rather than per unique value.
+   * Rides on session-scoped grouped responses so the findings view can
+   * reconcile the Activity page's tally with the deduped groups it lists. */
+  sessionFirings(sessionId) {
+    return Object.fromEntries(
+      countBy(
+        this.db,
+        `SELECT d.rule_id AS k, count(*) AS n
+           FROM inspection_findings f
+           JOIN audit_events e ON e.id = f.audit_event_id
+           JOIN inspection_definitions d ON d.id = f.inspection_definition_id
+          WHERE e.root_session_id = :sessionId
+          GROUP BY d.rule_id`,
+        { sessionId }
+      )
+    );
+  }
   /**
-   * Grouped findings for the dashboard — joins findings⋈events (repo/file
-   * from event metadata), groups by ruleId, computes per-filter-excluded facets,
+   * Grouped findings for the dashboard — joins findings⋈events (repo/file/
+   * toolName from event metadata), groups by ruleId, computes per-filter-excluded facets,
    * applies the requested filters, and sorts by severity then recency. Filtering
    * and faceting run in JS via the shared @akasecurity/schema helpers. `totals`
    * reflect the full filtered set; `items` is the requested
@@ -19559,11 +19799,16 @@ var SqliteFindingsRepository = class {
    * rule is ever restated in SQL.
    */
   listGroupedFindings(query) {
-    const aggregates = this.groupAggregates(query.q !== void 0 && query.q !== "");
+    const sessionPredicate = query.sessionId ? `WHERE json_extract(e.metadata, '$.sessionId') = :sessionId` : "";
+    const sessionParams = query.sessionId ? { sessionId: query.sessionId } : {};
+    const aggregates = this.groupAggregates(query.q !== void 0 && query.q !== "", {
+      predicate: sessionPredicate,
+      params: sessionParams
+    });
     const rows = allRows(
       this.db.prepare(
         `SELECT id, rule_id, category, severity, masked_match, action_taken, confidence,
-                occurred_at, source_tool, repo, file, kind, finding_key, latest_status
+                occurred_at, source_tool, repo, file, tool_name, kind, finding_key, latest_status
          FROM (
            SELECT f.id AS id, f.rule_id AS rule_id, f.category AS category,
                   f.severity AS severity, f.masked_match AS masked_match,
@@ -19571,6 +19816,7 @@ var SqliteFindingsRepository = class {
                   e.occurred_at AS occurred_at, e.source_tool AS source_tool,
                   json_extract(e.metadata, '$.repo') AS repo,
                   json_extract(e.metadata, '$.filePath') AS file,
+                  json_extract(e.metadata, '$.toolName') AS tool_name,
                   e.kind AS kind, f.finding_key AS finding_key,
                   latest.status AS latest_status,
                   ROW_NUMBER() OVER (
@@ -19581,11 +19827,12 @@ var SqliteFindingsRepository = class {
              JOIN events e ON e.id = f.event_id
              LEFT JOIN ${LATEST_RESOLUTION_BY_KEY_SQL} latest
                ON latest.finding_key = f.finding_key
+             ${sessionPredicate}
          )
          WHERE rn <= :cap
          ORDER BY occurred_at DESC, id DESC`
       ),
-      { cap: PREVIEW_INSTANCES_PER_GROUP }
+      { cap: PREVIEW_INSTANCES_PER_GROUP, ...sessionParams }
     );
     const groupable = rows.map((r) => ({
       id: r.id,
@@ -19599,6 +19846,7 @@ var SqliteFindingsRepository = class {
       sourceTool: r.source_tool,
       repo: r.repo ?? "",
       file: r.file ?? "",
+      ...r.tool_name === null ? {} : { toolName: r.tool_name },
       status: deriveInstanceStatus(r)
     }));
     const allGroups = buildFindingGroups(groupable, { aggregates });
@@ -19617,7 +19865,13 @@ var SqliteFindingsRepository = class {
     };
     const limit = query.limit ?? DEFAULT_GROUPED_FINDINGS_LIMIT;
     const items = sorted.slice(0, limit);
-    return Promise.resolve({ totals, facets, items, nextCursor: null });
+    return Promise.resolve({
+      totals,
+      facets,
+      items,
+      nextCursor: null,
+      ...query.sessionId ? { sessionFirings: this.sessionFirings(query.sessionId) } : {}
+    });
   }
   /**
    * One row per rule_id, folding EVERY instance of the group into the values
@@ -19641,9 +19895,10 @@ var SqliteFindingsRepository = class {
    * would silently lose, so it is fetched only when the request actually
    * carries a `q`.
    */
-  groupAggregates(withSearchText) {
+  groupAggregates(withSearchText, scope) {
     const searchTextColumns = withSearchText ? `, group_concat(DISTINCT json_extract(e.metadata, '$.repo')) AS repos,
-           group_concat(DISTINCT json_extract(e.metadata, '$.filePath')) AS files` : `, NULL AS repos, NULL AS files`;
+           group_concat(DISTINCT json_extract(e.metadata, '$.filePath')) AS files,
+           group_concat(DISTINCT 'via ' || json_extract(e.metadata, '$.toolName')) AS tool_names` : `, NULL AS repos, NULL AS files, NULL AS tool_names`;
     const rows = this.db.prepare(
       `SELECT f.rule_id AS rule_id,
                 count(*) AS instance_count,
@@ -19660,8 +19915,9 @@ var SqliteFindingsRepository = class {
            JOIN events e ON e.id = f.event_id
            LEFT JOIN ${LATEST_RESOLUTION_BY_KEY_SQL} latest
              ON latest.finding_key = f.finding_key
+          ${scope.predicate}
           GROUP BY f.rule_id`
-    ).all();
+    ).all(scope.params);
     return new Map(
       rows.map((r) => [
         r.rule_id,
@@ -19685,7 +19941,9 @@ var SqliteFindingsRepository = class {
           // Left undefined (not '') when unfetched, so buildFindingGroups can
           // tell "no q this request" from "a group with no repo/file at all"
           // and skip priming a haystack nothing will read.
-          ...withSearchText ? { searchText: [r.repos ?? "", r.files ?? ""].filter((s) => s !== "").join(" ") } : {}
+          ...withSearchText ? {
+            searchText: [r.repos ?? "", r.files ?? "", r.tool_names ?? ""].filter((s) => s !== "").join(" ")
+          } : {}
         }
       ])
     );
@@ -21421,7 +21679,6 @@ var SqliteScanLedgerRepository = class {
 // ../../packages/persistence/src/repositories/security.ts
 var DAY_MS4 = 864e5;
 var SEVERITIES = ["critical", "high", "medium", "low"];
-var RANGE_DAYS = { "7d": 7, "30d": 30, "3m": 90, "6m": 180 };
 var ACTION_TO_KIND = {
   block: "blocked",
   redact: "redacted",
@@ -21436,8 +21693,14 @@ var SCAN_COVERAGE = [
   { provider: "copilot", coverage: 0, supported: false },
   { provider: "api", coverage: 0, supported: false }
 ];
+var GRANULARITY = {
+  "7d": "day",
+  "30d": "day",
+  "3m": "week",
+  "6m": "week"
+};
 function granularityFor(range) {
-  return range === "7d" || range === "30d" ? "day" : "week";
+  return GRANULARITY[range];
 }
 function startOfUtcDay2(ms) {
   return Math.floor(ms / DAY_MS4) * DAY_MS4;
@@ -22584,21 +22847,28 @@ import { readdirSync, readFileSync as readFileSync4, realpathSync, statSync as s
 import { homedir as homedir2 } from "os";
 import { basename as basename2, join as join7 } from "path";
 
+// ../../packages/detections/src/escape-regexp.ts
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+
+// ../../packages/detections/src/matchers/limits.ts
+var MAX_MATCHES_PER_RULE = 1e4;
+
 // ../../packages/detections/src/matchers/keyword.ts
 var KeywordMatcher2 = class {
   match(text, rule) {
     if (rule.matcher.type !== "keyword") return [];
     const { keywords, caseSensitive } = rule.matcher;
-    const haystack = caseSensitive ? text : text.toLowerCase();
     const spans = [];
     for (const kw of keywords) {
-      const needle = caseSensitive ? kw : kw.toLowerCase();
-      let idx = 0;
-      while (idx < haystack.length) {
-        const pos = haystack.indexOf(needle, idx);
-        if (pos === -1) break;
-        spans.push({ start: pos, end: pos + kw.length });
-        idx = pos + 1;
+      if (kw.length === 0) continue;
+      if (spans.length >= MAX_MATCHES_PER_RULE) break;
+      const re = new RegExp(escapeRegExp(kw), caseSensitive ? "gu" : "giu");
+      let m;
+      while ((m = re.exec(text)) !== null) {
+        spans.push({ start: m.index, end: m.index + m[0].length });
+        if (spans.length >= MAX_MATCHES_PER_RULE) break;
       }
     }
     return spans;
@@ -22606,7 +22876,6 @@ var KeywordMatcher2 = class {
 };
 
 // ../../packages/detections/src/matchers/regex.ts
-var MAX_MATCHES_PER_RULE = 1e4;
 var RegexMatcher2 = class {
   match(text, rule) {
     if (rule.matcher.type !== "regex") return [];
@@ -22860,6 +23129,118 @@ async function applySetupTriageSuppressions(entries, writer, opts) {
 import { mkdirSync as mkdirSync4, statSync as statSync3, writeFileSync as writeFileSync5 } from "fs";
 import { join as join10 } from "path";
 
+// src/command-registry.ts
+import { readdirSync as readdirSync3 } from "fs";
+import { fileURLToPath } from "url";
+var COMMAND_NAMESPACE = "aka";
+var COMMANDS_DIR = fileURLToPath(new URL("../commands", import.meta.url));
+function readRegisteredCommands() {
+  return readdirSync3(COMMANDS_DIR).filter((f) => f.endsWith(".md")).map((f) => `/${COMMAND_NAMESPACE}:${f.replace(/\.md$/, "")}`);
+}
+function selectRegisteredCommands(curated, registry2) {
+  const registered = new Set(registry2);
+  const missing = curated.filter((c) => !registered.has(c));
+  if (missing.length > 0) {
+    throw new Error(
+      `Curated command(s) not registered in the installed plugin: ${missing.join(", ")}`
+    );
+  }
+  return [...curated];
+}
+
+// src/setup-frame-json.ts
+var FRAME_JSON_BEGIN = "<<<AKA_FRAME_JSON";
+var FRAME_JSON_END = "AKA_FRAME_JSON>>>";
+function frameJsonBlock(payload) {
+  return `${FRAME_JSON_BEGIN}
+${JSON.stringify(payload)}
+${FRAME_JSON_END}
+`;
+}
+
+// src/setup-show.ts
+var SHOW_BEGIN = "<<<AKA_SHOW";
+var SHOW_END = "AKA_SHOW>>>";
+function showBlock(body) {
+  return `${SHOW_BEGIN}
+${body}
+${SHOW_END}
+`;
+}
+
+// src/present.ts
+var SHADE = {
+  light: "\u2591",
+  medium: "\u2592",
+  dark: "\u2593",
+  full: "\u2588"
+};
+var ANSI_RE = /\x1b\[[0-9;]*m/g;
+function visibleLength(text) {
+  return text.replace(ANSI_RE, "").length;
+}
+var fg = (hex3) => (text) => {
+  const r = Number.parseInt(hex3.slice(1, 3), 16);
+  const g = Number.parseInt(hex3.slice(3, 5), 16);
+  const b = Number.parseInt(hex3.slice(5, 7), 16);
+  return `\x1B[38;2;${String(r)};${String(g)};${String(b)}m${text}\x1B[0m`;
+};
+var paint = {
+  brand: fg("#33e6c6"),
+  // --color-brand        · ▸▸ AKA wordmark (accent text)
+  dim: fg("#838995"),
+  // --color-text-3      · separators · "/100" · the "unreviewed" label
+  bold: (text) => `\x1B[1m${text}\x1B[0m`,
+  // the health score number
+  ok: fg("#0db15f"),
+  // --color-ok          · healthy ● dot
+  critical: fg("#e63448"),
+  // --color-sev-critical · ■ and the open-findings flag
+  high: fg("#e97a0a"),
+  // --color-sev-high     · ■ and the mid-health dot
+  medium: fg("#f7bd00"),
+  // --color-sev-medium   · ■
+  low: fg("#0581d4")
+  // --color-sev-low      · ■ (azure blue, not purple)
+};
+function padEnd(text, width) {
+  const pad = width - visibleLength(text);
+  return pad > 0 ? text + " ".repeat(pad) : text;
+}
+function indent(text, spaces = 2) {
+  const pad = " ".repeat(spaces);
+  return text.split("\n").map((line) => pad + line).join("\n");
+}
+function table(headers, rows, opts = {}) {
+  const gap = opts.gap ?? 3;
+  const widths = headers.map(
+    (h, i) => Math.max(visibleLength(h), ...rows.map((r) => visibleLength(r[i] ?? "")))
+  );
+  const sep4 = " ".repeat(gap);
+  const fmt = (cells) => cells.map((cell, i) => padEnd(cell, widths[i] ?? 0)).join(sep4);
+  const headerLine = fmt(headers.map((h) => h.toUpperCase()));
+  if (opts.rowSep === true) {
+    const fullWidth = widths.reduce((n, w) => n + w, 0) + gap * Math.max(0, widths.length - 1);
+    const rule = "\u2500".repeat(fullWidth);
+    const body = [];
+    rows.forEach((row, i) => {
+      if (i > 0) body.push(rule);
+      body.push(fmt(row));
+    });
+    return [headerLine, rule, ...body].join("\n");
+  }
+  const ruleLine = widths.map((w) => "\u2500".repeat(w)).join(sep4);
+  return [headerLine, ruleLine, ...rows.map(fmt)].join("\n");
+}
+function fenced(body) {
+  const longestRun = Math.max(0, ...[...body.matchAll(/`+/g)].map((m) => m[0].length));
+  const fence = "`".repeat(Math.max(3, longestRun + 1));
+  return [fence, body, fence].join("\n");
+}
+function show(body) {
+  return showBlock(body);
+}
+
 // src/triage/gate-display.ts
 function findContext(entry, join14) {
   const byFingerprint = join14.find(
@@ -22913,11 +23294,14 @@ function renderPosturePlan(posture, current) {
   if (lines.length === 0) {
     return "No per-category detection posture will be written.";
   }
-  const footer = downgrades.length > 0 ? `
+  return `Here's the detection level I'd set for each type:
+${lines.join("\n")}${downgradeWarning(downgrades)}`;
+}
+function downgradeWarning(downgrades) {
+  if (downgrades.length === 0) return "";
+  return `
 
-WARNING: ${String(downgrades.length)} categor${downgrades.length === 1 ? "y" : "ies"} (${downgrades.join(", ")}) would be LOWERED from a stronger existing setting. Confirm you intend to weaken enforcement there before applying.` : "";
-  return `Per-category detection posture to be applied:
-${lines.join("\n")}${footer}`;
+Heads up \u2014 this would lower ${String(downgrades.length)} detection level${downgrades.length === 1 ? "" : "s"} (${downgrades.join(", ")}) below what you've already set. Confirm you mean to lower ${downgrades.length === 1 ? "it" : "them"} before I apply.`;
 }
 function renderShowcase(showcase) {
   if (showcase.length === 0) {
@@ -22930,7 +23314,7 @@ function renderShowcase(showcase) {
       `   ${s.reasoning}`
     ].join("\n");
   });
-  return `What the judgment found, per category:
+  return `Here's what I found, by type:
 
 ${blocks.join("\n\n")}`;
 }
@@ -22938,7 +23322,7 @@ function renderSuppressionGate(entries, join14) {
   if (entries.length === 0) {
     return "No false-positive suppressions to confirm \u2014 nothing will be written.";
   }
-  const header = entries.length === 1 ? "The following detection will be suppressed as a false positive:" : `The following ${String(entries.length)} detections will be suppressed as false positives:`;
+  const header = entries.length === 1 ? "This looks like a false positive \u2014 take a look before I suppress it:" : `These ${String(entries.length)} look like false positives \u2014 take a look before I suppress them:`;
   const blocks = entries.map((entry, i) => {
     const context = findContext(entry, join14);
     const lines = [
@@ -22954,6 +23338,218 @@ function renderSuppressionGate(entries, join14) {
 ${blocks.join("\n\n")}`;
 }
 
+// src/render.ts
+var STORE_UNAVAILABLE_NOTE = "I couldn't check my records just now \u2014 we can check again soon. Your Claude session keeps going, and I'll fill in as you work.";
+var SEVERITY_GLYPH = {
+  critical: SHADE.full,
+  high: SHADE.dark,
+  medium: SHADE.medium,
+  low: SHADE.light
+};
+var CATEGORY_ORDER2 = DetectionCategory.options;
+function categoryRank(category) {
+  const i = CATEGORY_ORDER2.indexOf(category);
+  return i === -1 ? CATEGORY_ORDER2.length : i;
+}
+function renderRecommendedPosture(posture) {
+  const rows = Object.keys(posture).map((category) => ({
+    category,
+    level: posture[category] ?? ""
+  }));
+  const width = Math.max(0, ...rows.map((r) => r.category.length));
+  return rows.sort((a, b) => categoryRank(a.category) - categoryRank(b.category)).map((r) => `  ${r.category.padEnd(width)}  ${r.level}`).join("\n");
+}
+var GRID_MARK = "\u25CF";
+function renderPostureGrid(posture) {
+  const packs = Object.keys(posture).sort(
+    (a, b) => categoryRank(a) - categoryRank(b)
+  );
+  const rows = packs.map((category) => [
+    category,
+    ...BUILTIN_ORDER.map((level) => posture[category] === level ? GRID_MARK : "")
+  ]);
+  return indent(table(["Category", ...BUILTIN_ORDER], rows));
+}
+var READY_COMMANDS = ["/aka:health", "/aka:findings", "/aka:recommend"];
+function renderCategoriesTuned(categoriesTuned) {
+  return `\u2713 Set all ${String(categoriesTuned)} detection categories`;
+}
+function renderApplied(categoriesTuned, dismissed, registry2) {
+  const routine = dismissed > 0 ? `set aside ${String(dismissed)} routine result${dismissed === 1 ? "" : "s"}` : "nothing routine to set aside";
+  const ready = `Ready: ${selectRegisteredCommands(READY_COMMANDS, registry2).join(" \xB7 ")}`;
+  return `${renderCategoriesTuned(categoriesTuned)} \xB7 ${routine} \xB7 ${ready}`;
+}
+
+// src/calibration.ts
+var SURFACED_KIND_LABEL = {
+  secret: "live keys",
+  pii: "personal data",
+  financial: "financial records",
+  phi: "health records",
+  code_context: "source context",
+  code_flaw: "code flaws",
+  custom: "custom matches",
+  config: "configuration secrets"
+};
+function frameCalibration(preview, maskedFindings = [], falsePositivePatterns = []) {
+  const important = preview.categories.reduce((n, c) => n + c.genuineCount, 0);
+  const routine = preview.categories.reduce((n, c) => n + c.fpCount, 0);
+  const total = important + routine;
+  const surfacedCategories = preview.categories.filter((c) => c.genuineCount > 0).map((c) => c.category);
+  const routineCategories = preview.categories.filter((c) => c.fpCount > 0).map((c) => c.category);
+  const findingKinds = preview.categories.filter((c) => c.genuineCount + c.fpCount > 0).map((c) => ({ category: c.category, count: c.genuineCount + c.fpCount, egress: c.egress }));
+  const frame = {
+    counts: { total, important, routine },
+    routineCategories,
+    surfacedCategories,
+    findingKinds,
+    posture: preview.posture,
+    ...maskedFindings.length > 0 ? { maskedFindings: [...maskedFindings] } : {},
+    ...falsePositivePatterns.length > 0 ? { falsePositivePatterns: [...falsePositivePatterns] } : {}
+  };
+  const kind = surfacedCategories.map((c) => SURFACED_KIND_LABEL[c]).join(", ");
+  const parenthetical = kind ? ` (${kind})` : "";
+  const headline = `I went through Claude's recent work \u2014 ${String(total)} detection${total === 1 ? "" : "s"}, ${String(important)} result${important === 1 ? "" : "s"} worth a look.${parenthetical}`;
+  const copy = headline;
+  return { frame, copy };
+}
+var SCAN_CLEAN_HEADLINE = "I looked over Claude's recent work \u2014 nothing needs your attention right now. You're starting clean; here's what I'd recommend:";
+var NO_HISTORY_HEADLINE = "Nothing to learn from yet \u2014 Claude hasn't left any work on this machine. I'll start each detection category at a careful default:";
+function frameEmptyState(cause, posture) {
+  const frame = {
+    counts: { total: 0, important: 0, routine: 0 },
+    routineCategories: [],
+    surfacedCategories: [],
+    findingKinds: [],
+    posture
+  };
+  const copy = cause === "scan-clean" ? `${SCAN_CLEAN_HEADLINE}
+${renderRecommendedPosture(posture)}` : `${NO_HISTORY_HEADLINE}
+${renderPostureGrid(posture)}`;
+  return { frame, copy };
+}
+
+// src/triage/dedupe.ts
+function dedupeKey(hit) {
+  if (hit.valueFingerprint === void 0) return void 0;
+  return `${hit.ruleId}\u2588${hit.valueFingerprint}`;
+}
+function dedupeForJudge(hits) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const h of hits) {
+    const key = dedupeKey(h);
+    if (key === void 0) {
+      out.push(h);
+      continue;
+    }
+    if (seen.has(key)) continue;
+    seen.add(key);
+    out.push(h);
+  }
+  return out;
+}
+
+// src/triage/false-positive-patterns.ts
+function deriveFalsePositivePatterns(hits, rec, plan) {
+  const hitById = new Map(hits.filter((h) => h.id !== void 0).map((h) => [h.id, h]));
+  const seenCategory = /* @__PURE__ */ new Set();
+  const markedIds = /* @__PURE__ */ new Set();
+  for (const c of rec.perCategory) {
+    if (seenCategory.has(c.category)) continue;
+    seenCategory.add(c.category);
+    if (plan.posture[c.category] === void 0) continue;
+    for (const id of c.fpIds) markedIds.add(id);
+  }
+  const groups = /* @__PURE__ */ new Map();
+  for (const id of markedIds) {
+    const h = hitById.get(id);
+    if (h === void 0) continue;
+    const pattern = safeMaskedMatch(h.rawMatch);
+    const group = groups.get(pattern) ?? { count: 0, values: [] };
+    group.count += 1;
+    if (h.valueFingerprint !== void 0 && h.keyVersion !== void 0) {
+      group.values.push({
+        ruleId: h.ruleId,
+        category: h.category,
+        valueFingerprint: h.valueFingerprint,
+        keyVersion: h.keyVersion
+      });
+    }
+    groups.set(pattern, group);
+  }
+  return [...groups.entries()].filter(([, g]) => g.values.length > 0).map(([pattern, g]) => ({ pattern, count: g.count, values: g.values }));
+}
+
+// src/triage/merge.ts
+var RANK = { monitor: 0, warn: 1, redact: 2, block: 3 };
+function chunkForJudge(hits, maxBytes = 262144) {
+  const chunks = [];
+  let current = [];
+  let size = 0;
+  for (const h of hits) {
+    const b = Buffer.byteLength(JSON.stringify(h)) + 1;
+    if (size + b > maxBytes && current.length > 0) {
+      chunks.push(current);
+      current = [];
+      size = 0;
+    }
+    current.push(h);
+    size += b;
+  }
+  chunks.push(current);
+  return chunks;
+}
+function chunkIds(hits) {
+  return new Set(hits.map((h) => h.id).filter((id) => id !== void 0));
+}
+function joinReasonings(reasonings) {
+  const ordered = [...reasonings].sort((a, b) => b.rank - a.rank);
+  return [...new Set(ordered.map((r) => r.text.trim()).filter((t) => t !== ""))].join(" ");
+}
+function groundVerdict(rec, ids) {
+  const perCategory = [];
+  const strayNotes = [];
+  for (const c of rec.perCategory) {
+    const grounded = c.fpIds.filter((id) => ids.has(id));
+    const strayCount = c.fpIds.length - grounded.length;
+    if (strayCount > 0) {
+      strayNotes.push(
+        `${c.category}: dropped ${String(strayCount)} false-positive id(s) naming hits outside the batch they were judged in`
+      );
+    }
+    perCategory.push({ ...c, fpIds: grounded });
+  }
+  return { perCategory, notes: [rec.notes, ...strayNotes].filter(Boolean).join("\n") };
+}
+function mergeRecommendations(verdicts) {
+  const byCat = /* @__PURE__ */ new Map();
+  const grounded = verdicts.map((v) => groundVerdict(v.rec, v.ids));
+  for (const rec of grounded) {
+    for (const c of rec.perCategory) {
+      const entry = { rank: RANK[c.action], text: c.reasoning };
+      const prev = byCat.get(c.category);
+      if (!prev) {
+        byCat.set(c.category, { ...c, fpIds: [...c.fpIds], reasonings: [entry] });
+        continue;
+      }
+      prev.genuineCount += c.genuineCount;
+      prev.fpCount += c.fpCount;
+      prev.fpIds = [.../* @__PURE__ */ new Set([...prev.fpIds, ...c.fpIds])];
+      prev.reasonings.push(entry);
+      if (RANK[c.action] > RANK[prev.action]) prev.action = c.action;
+    }
+  }
+  const perCategory = [...byCat.values()].map(({ reasonings, ...cat }) => ({
+    ...cat,
+    reasoning: joinReasonings(reasonings)
+  }));
+  return {
+    perCategory,
+    notes: grounded.map((r) => r.notes).filter(Boolean).join("\n")
+  };
+}
+
 // src/triage/plan-file.ts
 import { mkdtempSync, readFileSync as readFileSync7, rmdirSync, rmSync as rmSync2, writeFileSync as writeFileSync6 } from "fs";
 import { tmpdir } from "os";
@@ -23032,6 +23628,38 @@ function deletePlanFile(path) {
   }
 }
 
+// src/triage/surfaced-secrets.ts
+var DEFAULT_STATE = "unknown";
+var UNKNOWN_LOCATION = "(location unavailable)";
+function deriveProvider(ruleId) {
+  const slug = (ruleId.split("/").pop() ?? ruleId).split(".").pop() ?? ruleId;
+  const provider = slug.split("-")[0] ?? slug;
+  return provider === "" ? "unknown" : provider;
+}
+function deriveSurfacedSecretFindings(hits, rec, plan) {
+  if (plan.posture.secret === void 0) return [];
+  const dismissedIds = new Set(
+    rec.perCategory.filter((c) => c.category === "secret").flatMap((c) => c.fpIds)
+  );
+  const dismissedKeys = new Set(
+    hits.filter((h) => h.id !== void 0 && dismissedIds.has(h.id)).map((h) => dedupeKey(h)).filter((k) => k !== void 0)
+  );
+  const isDismissed = (h) => {
+    if (h.id !== void 0 && dismissedIds.has(h.id)) return true;
+    const key = dedupeKey(h);
+    return key !== void 0 && dismissedKeys.has(key);
+  };
+  const rawValues = hits.map((h) => h.rawMatch);
+  return hits.filter((h) => h.category === "secret" && !isDismissed(h)).map((h) => ({
+    provider: deriveProvider(h.ruleId),
+    maskedToken: safeMaskedMatch(h.rawMatch),
+    // A filePath is not a raw secret, but pass it through the egress gate as
+    // defence-in-depth so only a raw-free location can cross into the frame.
+    where: { filePath: assertRawFree(h.filePath ?? UNKNOWN_LOCATION, rawValues) },
+    state: DEFAULT_STATE
+  }));
+}
+
 // src/triage/join-file.ts
 function buildJoinEntries(hits) {
   const rawValues = hits.map((h) => h.rawMatch);
@@ -23101,7 +23729,7 @@ function resolveSuppressions(rec, join14) {
 
 // src/triage/writeback.ts
 var SCRUBBED_NOTES = "[notes withheld: model text referenced a raw detected value]";
-var TRIAGE_STATUSES = ["complete", "skipped:no-consent"];
+var TRIAGE_STATUSES = ["complete", "complete:no-history", "skipped:no-consent"];
 function isSentinel(v) {
   return typeof v === "object" && v !== null && v.done === true && typeof v.count === "number" && typeof v.status === "string";
 }
@@ -23135,6 +23763,11 @@ function parseTriageStream(text) {
         `triage stream carried ${String(hitLines.length)} hits under a ${tail.status} sentinel`
       );
     }
+    if (tail.count !== 0) {
+      throw new Error(
+        `triage stream sentinel reported ${String(tail.count)} hits under a ${tail.status} sentinel`
+      );
+    }
     return { hits: [], status: tail.status };
   }
   if (tail.count !== hitLines.length) {
@@ -23210,13 +23843,22 @@ function planTriageWriteback(hits, rec) {
   }
   return { entries, posture, showcase, join: join14, notes, skipped };
 }
+function recommendedPosture(evidence) {
+  return { ...severityFloorPosture(), ...evidence };
+}
 async function performTriageWriteback(plan, writers, opts) {
   const applyBoth = async () => {
     applyCategoryPosture(plan.posture, writers.policies, "overwrite");
-    return applySetupTriageSuppressions(plan.entries, writers.exceptions, opts);
+    if (opts.floor) applyCategoryPosture(opts.floor, writers.policies, "fill-gaps");
+    return applySetupTriageSuppressions(plan.entries, writers.exceptions, {
+      createdBy: opts.createdBy,
+      now: opts.now
+    });
   };
   const { written, skippedDuplicate } = writers.transaction ? await writers.transaction(applyBoth) : await applyBoth();
-  return { written, skippedDuplicate, categoriesWritten: Object.keys(plan.posture).length };
+  const tuned = new Set(Object.keys(plan.posture));
+  if (opts.floor) for (const c of Object.keys(opts.floor)) tuned.add(c);
+  return { written, skippedDuplicate, categoriesWritten: tuned.size };
 }
 
 // src/triage/adapter.ts
@@ -23231,6 +23873,14 @@ function getFlag(argv, name) {
   const next = argv[i + 1];
   return next !== void 0 && !next.startsWith("--") ? next : "";
 }
+function resolveMaxJudgeBytes(deps) {
+  const flag = getFlag(deps.argv, "max-judge-bytes");
+  if (flag !== void 0 && flag !== "") {
+    const parsed = Number(flag);
+    if (Number.isInteger(parsed) && parsed > 0) return parsed;
+  }
+  return deps.maxJudgeBytes;
+}
 async function runApply(deps) {
   const planIO = deps.planIO ?? DEFAULT_PLAN_IO;
   const confirmed = deps.argv.includes("--confirmed");
@@ -23241,38 +23891,86 @@ function runPreview(deps, planIO) {
   const streamText = deps.readStream(streamPath === "" ? void 0 : streamPath);
   const { hits, status } = parseTriageStream(streamText);
   if (hits.length === 0) {
-    deps.stdout(`No triage hits to review (${status}). Nothing to suppress.
-`);
+    if (status === "complete") {
+      const empty = frameEmptyState("scan-clean", severityFloorPosture());
+      deps.stdout(show(fenced(empty.copy)));
+      deps.stdout(frameJsonBlock(empty.frame));
+      return 0;
+    }
+    if (status === "complete:no-history") {
+      const empty = frameEmptyState("no-history", severityFloorPosture());
+      deps.stdout(show(fenced(empty.copy)));
+      deps.stdout(frameJsonBlock(empty.frame));
+      return 0;
+    }
+    deps.stdout(show("I didn't review anything \u2014 historical access wasn't granted."));
     return 0;
   }
   const rawValues = hits.map((h) => h.rawMatch);
   try {
-    const rec = deps.runJudge(hits);
-    const plan = planTriageWriteback(hits, rec);
+    const reps = dedupeForJudge(hits);
+    const chunks = chunkForJudge(reps, resolveMaxJudgeBytes(deps));
+    if (chunks.length > 1) {
+      deps.stdout(
+        show(
+          `Reviewing ${String(reps.length)} distinct values in ${String(chunks.length)} batches \u2014 this is the large-history path, so give it a moment.`
+        )
+      );
+    }
+    let rec;
+    if (chunks.length === 1) {
+      const [soleChunk] = chunks;
+      if (soleChunk === void 0) throw new Error("chunkForJudge returned no chunks");
+      rec = groundVerdict(deps.runJudge(soleChunk), chunkIds(soleChunk));
+    } else {
+      rec = mergeRecommendations(chunks.map((c) => ({ rec: deps.runJudge(c), ids: chunkIds(c) })));
+    }
+    const plan = planTriageWriteback(reps, rec);
     const current = {};
-    const db = deps.openDb();
+    let storeUnavailable = false;
     try {
-      for (const category of Object.keys(plan.posture)) {
-        const action = db.policies.getCategoryAction(category);
-        if (action !== void 0) current[category] = action;
+      const db = deps.openDb();
+      try {
+        for (const category of Object.keys(plan.posture)) {
+          const action = db.policies.getCategoryAction(category);
+          if (action !== void 0) current[category] = action;
+        }
+      } finally {
+        db.close();
       }
-    } finally {
-      db.close();
+    } catch {
+      storeUnavailable = true;
+    }
+    const gate = [];
+    if (storeUnavailable) {
+      gate.push(STORE_UNAVAILABLE_NOTE);
     }
-    deps.stdout(renderPosturePlan(plan.posture, current) + "\n\n");
-    deps.stdout(renderShowcase(plan.showcase) + "\n\n");
-    deps.stdout(renderSuppressionGate(plan.entries, plan.join) + "\n");
+    gate.push(renderPosturePlan(plan.posture, storeUnavailable ? {} : current));
+    gate.push(renderShowcase(plan.showcase));
+    gate.push(renderSuppressionGate(plan.entries, plan.join));
     if (plan.skipped.length > 0) {
-      deps.stdout(
-        `
-Skipped (fail-secure): ${plan.skipped.map((s) => `${s.category} \u2014 ${s.reason}`).join("; ")}
-`
+      gate.push(
+        `Skipped (fail-secure): ${plan.skipped.map((s) => `${s.category} \u2014 ${s.reason}`).join("; ")}`
       );
     }
-    deps.stdout(`
-Notes: ${plan.notes}
-`);
-    const planPath = planIO.write(plan, current, rawValues);
+    gate.push(`Notes: ${plan.notes}`);
+    const preview = {
+      categories: plan.showcase.map((c) => ({
+        category: c.category,
+        genuineCount: c.genuineCount,
+        fpCount: c.fpCount,
+        egress: false
+      })),
+      posture: recommendedPosture(plan.posture)
+    };
+    const maskedFindings = deriveSurfacedSecretFindings(hits, rec, plan);
+    const falsePositivePatterns = deriveFalsePositivePatterns(reps, rec, plan);
+    const calibration = frameCalibration(preview, maskedFindings, falsePositivePatterns);
+    gate.push(calibration.copy);
+    gate.push(renderRecommendedPosture(preview.posture));
+    deps.stdout(show(fenced(gate.join("\n\n"))));
+    deps.stdout(frameJsonBlock(calibration.frame));
+    const planPath = planIO.write(plan, storeUnavailable ? {} : current, rawValues);
     deps.stdout(`
 Plan saved to: ${planPath}
 `);
@@ -23348,6 +24046,13 @@ async function runConfirm(deps, planIO) {
       // `transaction` makes the posture + suppression writes ALL-OR-NOTHING, so a
       // mid-batch fault rolls the posture overwrite back too — the store is never
       // left half-applied (and the floor fallback below is safe: nothing persisted).
+      // Establish the full 8-pack the preview showed so settings holds
+      // all 8 packs and the confirmation reads 'Set all 8 detection categories': the reviewed,
+      // drift-gated evidence packs (plan.posture) OVERWRITE, and the severity floor
+      // fills the remaining packs with FILL-GAPS. The floor packs are not covered by
+      // the drift gate above (only the reviewed evidence is), so they must never
+      // overwrite — an out-of-band-hardened pack (e.g. code_context=block) is left
+      // as-is rather than silently reset to the weak floor.
       {
         posture: plan.posture,
         entries: plan.entries,
@@ -23362,7 +24067,7 @@ async function runConfirm(deps, planIO) {
         // Only set when the store provides one (exactOptionalPropertyTypes).
         ...db.transaction ? { transaction: db.transaction } : {}
       },
-      { createdBy: deps.createdBy(), now: deps.now() }
+      { createdBy: deps.createdBy(), now: deps.now(), floor: severityFloorPosture() }
     );
     closeOnce();
     try {
@@ -23371,8 +24076,7 @@ async function runConfirm(deps, planIO) {
     }
     try {
       deps.stdout(
-        `AKA suppressions applied: ${String(res.written)} written` + (res.skippedDuplicate > 0 ? `, ${String(res.skippedDuplicate)} already active` : "") + `; posture calibrated for ${String(res.categoriesWritten)} categories.
-`
+        show(renderApplied(res.categoriesWritten, res.written, readRegisteredCommands()))
       );
     } catch {
     }
@@ -23392,7 +24096,7 @@ import { execFileSync } from "child_process";
 import { mkdtempSync as mkdtempSync2, readFileSync as readFileSync8, rmSync as rmSync3 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
 import { dirname as dirname3, join as join12 } from "path";
-import { fileURLToPath } from "url";
+import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/triage/parse-verdict.ts
 var FENCE_RE = /```json\s*([\s\S]*?)```/g;
@@ -23404,7 +24108,7 @@ function parseRecommendation(text) {
 }
 
 // src/triage/judge.ts
-var TRIAGE_DIR = dirname3(fileURLToPath(import.meta.url));
+var TRIAGE_DIR = dirname3(fileURLToPath2(import.meta.url));
 var DEFAULT_RUBRIC_PATH = join12(TRIAGE_DIR, "..", "..", "eval", "prompt.md");
 function parseVerdict(stdout) {
   let envelope;
@@ -23436,9 +24140,10 @@ function judgeEnv() {
   }
   return env;
 }
-function spawnClaude(argv, env) {
+function spawnClaude(argv, env, stdin) {
   return execFileSync("claude", [...argv], {
     env,
+    input: stdin,
     encoding: "utf8",
     timeout: 18e4,
     maxBuffer: 32 * 1024 * 1024
@@ -23463,12 +24168,12 @@ function runJudge(hits, deps) {
 ${hitsJsonl}
 \`\`\`
 `;
-  const argv = ["-p", "--no-session-persistence", "--output-format", "json", fullPrompt];
+  const argv = ["-p", "--no-session-persistence", "--output-format", "json"];
   const env = judgeEnv();
   try {
     let stdout;
     try {
-      stdout = deps.spawn(argv, env);
+      stdout = deps.spawn(argv, env, fullPrompt);
     } catch (err) {
       throw new Error(`claude -p judge subprocess failed (${spawnFailureMeta(err)})`);
     }
@@ -23494,14 +24199,15 @@ function resolveCreatedBy() {
   }
 }
 function loadRubric() {
-  const here = dirname4(fileURLToPath2(import.meta.url));
+  const here = dirname4(fileURLToPath3(import.meta.url));
   const shipped = join13(here, "triage-rubric.md");
   if (existsSync5(shipped)) return readFileSync9(shipped, "utf8");
   return readFileSync9(join13(here, "..", "eval", "prompt.md"), "utf8");
 }
 async function main() {
+  const argv = process.argv.slice(2);
   const code = await runApply({
-    argv: process.argv.slice(2),
+    argv,
     // fd 0 = stdin; the wizard pipes `backfill.js --triage` into this on preview.
     // Called only on the preview path — the confirm path never reads a stream.
     readStream: (streamPath) => streamPath !== void 0 ? readFileSync9(streamPath, "utf8") : readFileSync9(0, "utf8"),