@akasecurity/ai-tc-claude-code 0.9.0 → 0.9.2

package/scripts/stop.js

@@ -491,9 +491,13 @@ var require_ignore = __commonJS({
   }
 });
 
+// ../../packages/plugin-sdk/src/config.ts
+import { existsSync as existsSync3 } from "fs";
+import { join as join6 } from "path";
+
 // ../../packages/persistence/src/database.ts
 import { randomUUID as randomUUID8 } from "crypto";
-import { existsSync, renameSync, rmSync } from "fs";
+import { existsSync, renameSync as renameSync2, rmSync as rmSync2 } from "fs";
 import { join, sep } from "path";
 import { DatabaseSync } from "node:sqlite";
 
@@ -15182,7 +15186,12 @@ var FindingFacets = external_exports.object({
   severity: external_exports.array(FindingFacetItem),
   subtype: external_exports.array(FindingFacetItem),
   provider: external_exports.array(FindingFacetItem),
-  action: external_exports.array(FindingFacetItem)
+  action: external_exports.array(FindingFacetItem),
+  // Counts by the group's derived status. The SQLite store derives a status
+  // for every instance, so every group lands in a bucket; a status-less
+  // group (possible only for callers whose rows carry no statuses) is
+  // counted under no value.
+  status: external_exports.array(FindingFacetItem)
 }).meta({ id: "FindingFacets" });
 var ListGroupedFindingsQuery = external_exports.object({
   // NOTE: severity filters by Severity (critical/high/medium/low), not by
@@ -15191,6 +15200,10 @@ var ListGroupedFindingsQuery = external_exports.object({
   subtype: external_exports.array(external_exports.string()).optional(),
   provider: external_exports.array(FindingProvider).optional(),
   action: external_exports.array(FindingAction).optional(),
+  // Matches a group's DERIVED status (see FindingGroup.status), not its
+  // individual instances' — so a filtered group's Status column always reads
+  // one of the requested values.
+  status: external_exports.array(FindingStatus).optional(),
   q: external_exports.string().optional(),
   // Scope to findings whose event carries this session id (the Activity page's
   // session → findings drilldown). Findings without a session never match.
@@ -15371,6 +15384,33 @@ var ToolCallAttributes = external_exports.object({
   parent_uuid: external_exports.string().optional(),
   run_key: external_exports.string().optional()
 }).catchall(external_exports.unknown());
+var CaptureAttributes = external_exports.object({
+  // The harness/tool that produced the capture (`claude-code`, `cli`, …). A
+  // column on the legacy `events` table; here it rides the bag because a
+  // capture-typed audit row has no equivalent column of its own.
+  source_tool: external_exports.string().optional(),
+  file_path: external_exports.string().optional(),
+  repo: external_exports.string().optional(),
+  // The host tool whose input/output was scanned (e.g. 'Bash', 'WebFetch') —
+  // gives a non-file capture a display location ("via Bash") when file_path
+  // is absent. The tool NAME only, never its arguments/output.
+  tool_name: external_exports.string().optional(),
+  // Presence-only provenance flag: set when the file is excluded by the
+  // repo's .gitignore. Omitted (not false) for tracked files.
+  gitignored: external_exports.boolean().optional(),
+  // Set ONLY when the capture is a COMPLETE file snapshot (a worktree scan
+  // reading from disk), never a partial fragment (a hook-captured edit).
+  whole_file: external_exports.boolean().optional(),
+  // Distributed-tracing correlation: `correlation_id` ties the capture back to
+  // the request that produced it; `trace_id` is the originating span's W3C
+  // trace id when telemetry is enabled.
+  correlation_id: external_exports.uuid().optional(),
+  trace_id: external_exports.string().regex(/^[0-9a-f]{32}$/).optional(),
+  // Ids of the detection exceptions that downgraded findings in this capture
+  // to 'allow' — the enforcement audit trail's link back to the grant that
+  // authorized the bypass.
+  exception_ids: external_exports.array(external_exports.guid()).optional()
+}).catchall(external_exports.unknown());
 var ToolCallInspection = external_exports.object({
   ruleId: external_exports.string().min(1),
   ruleName: external_exports.string(),
@@ -15457,7 +15497,18 @@ var InspectionFindingInput = external_exports.object({
   span: Span,
   maskedMatch: external_exports.string(),
   actionTaken: ActionTaken,
-  confidence: external_exports.number().min(0).max(1)
+  confidence: external_exports.number().min(0).max(1),
+  // Stable, content-addressed key correlating this finding across re-detections
+  // — mirrors the legacy `findings.finding_key` (uq_inspection_findings_key is
+  // its unique index). Optional: only an at-rest/re-scannable finding carries
+  // one; an in-flight capture (prompt/response) has nothing to re-detect
+  // against and leaves it unset, so every insert is a fresh row.
+  findingKey: external_exports.string().optional(),
+  // The ORIGINAL detection time, preserved across a later re-detection of the
+  // same findingKey — mirrors the legacy `findings.first_detected_at`.
+  // Optional: when omitted, the writer derives it from the referenced audit
+  // event's startedAt on first insert (see SqliteInspectionFindingsRepository).
+  firstDetectedAt: external_exports.iso.datetime().optional()
 });
 var InventoryContext = external_exports.object({
   host: InventoryInput.optional(),
@@ -15656,6 +15707,7 @@ var ActivityOverviewResponse = external_exports.object({
 
 // ../../packages/schema/src/zod/event.ts
 var EventKind = external_exports.enum(["prompt", "response", "code_change", "tool_use"]).meta({ id: "EventKind" });
+var CAPTURE_EVENT_TYPES_SQL = EventKind.options.map((k) => `'${k}'`).join(",");
 var SourceTool = external_exports.enum(["claude-code", "claude-desktop", "cursor", "chatgpt", "github-copilot", "cli", "unknown"]).meta({ id: "SourceTool" });
 var EventMetadata = external_exports.object({
   sessionId: external_exports.string().optional(),
@@ -15996,6 +16048,7 @@ var ExceptionBundleEntry = DetectionException.pick({
 
 // ../../packages/schema/src/zod/rule.ts
 var MatcherType = external_exports.enum(["keyword", "regex", "validator"]).meta({ id: "MatcherType" });
+var RuleProbeVerdict = external_exports.enum(["safe", "quarantined"]).meta({ id: "RuleProbeVerdict" });
 var KeywordMatcher = external_exports.object({
   type: external_exports.literal("keyword"),
   // An empty keyword matches at every position, yielding one zero-length span
@@ -16020,9 +16073,10 @@ function matchesEmptyString(pattern, flags) {
     return false;
   }
 }
+var MAX_PATTERN_LENGTH = 2e3;
 var RegexMatcher = external_exports.object({
   type: external_exports.literal("regex"),
-  pattern: external_exports.string(),
+  pattern: external_exports.string().min(1).max(MAX_PATTERN_LENGTH),
   flags: external_exports.string().default("gi"),
   captureGroup: external_exports.number().int().nonnegative().optional()
 }).refine((v) => isValidRegex(v.pattern, v.flags), {
@@ -16143,6 +16197,12 @@ var PolicyBundle = external_exports.object({
   // on-disk caches — that omit the field still parse; consumers read
   // `bundle.exceptions ?? []`.
   exceptions: external_exports.array(ExceptionBundleEntry).optional(),
+  // Installed pack version, keyed by ruleId, for rules in `rules` that came
+  // from a versioned installed pack. Optional so older backends — and older
+  // on-disk caches — that omit the field still parse; consumers fall back to
+  // the rule's own spec version. NOT the bundle version above — see
+  // installedRuleset's ruleVersions for the source of truth.
+  ruleVersions: external_exports.record(external_exports.string(), external_exports.string()).optional(),
   customKeywords: external_exports.array(external_exports.string()),
   fetchedAt: external_exports.iso.datetime()
 }).meta({ id: "PolicyBundle" });
@@ -16504,6 +16564,212 @@ var ImportDetectionRequest = external_exports.object({
   })
 }).meta({ id: "ImportDetectionRequest" });
 
+// ../../packages/schema/src/zod/shares.ts
+var DestinationKind = external_exports.enum(["provider", "internal", "external", "ip"]).meta({ id: "DestinationKind" });
+var Transport = external_exports.enum(["https", "http", "sftp", "grpc", "smtp", "ws", "wss"]).meta({ id: "Transport" });
+var DataClass = external_exports.enum(["secrets", "pii", "customer", "source", "telemetry", "logs", "metrics", "none"]).meta({ id: "DataClass" });
+var DATA_CLASS_ORDER = DataClass.options;
+var ShareTrustLevel = external_exports.enum(["recognized", "internal", "unverified", "ip"]).meta({ id: "ShareTrustLevel" });
+var EgressDecision = external_exports.enum(["allow", "block"]).meta({ id: "EgressDecision" });
+var EgressStatus = external_exports.enum(["allowed", "blocked", "review"]).meta({ id: "EgressStatus" });
+var ReviewReason = external_exports.enum(["raw_ip", "unverified_domain", "plaintext_transport"]).meta({ id: "ReviewReason" });
+var HttpMethod = external_exports.enum(["GET", "POST", "PUT", "DELETE", "SDK", "REF"]).meta({ id: "HttpMethod" });
+var ReviewInfo = external_exports.object({
+  needsReview: external_exports.boolean(),
+  reasons: external_exports.array(ReviewReason)
+}).meta({ id: "ReviewInfo" });
+var DestinationNetwork = external_exports.object({
+  port: external_exports.number().int().nullable(),
+  geo: external_exports.string().nullable(),
+  ptr: external_exports.string().nullable()
+}).meta({ id: "DestinationNetwork" });
+var EndpointSummary = external_exports.object({
+  id: external_exports.string(),
+  method: HttpMethod,
+  transport: Transport,
+  url: external_exports.string(),
+  template: external_exports.boolean(),
+  dataClass: DataClass,
+  lastSeen: external_exports.iso.datetime(),
+  callSiteCount: external_exports.number().int().nonnegative()
+}).meta({ id: "EndpointSummary" });
+var CallSite = external_exports.object({
+  id: external_exports.string(),
+  project: external_exports.string(),
+  file: external_exports.string(),
+  line: external_exports.number().int().nonnegative(),
+  snippet: external_exports.string(),
+  dynamic: external_exports.boolean(),
+  vendored: external_exports.boolean(),
+  /** Deep-link to the Inventory project, when the repo is governed there. */
+  projectId: external_exports.string().nullable()
+}).meta({ id: "CallSite" });
+var EndpointWithSites = EndpointSummary.extend({
+  sites: external_exports.array(CallSite)
+}).meta({ id: "EndpointWithSites" });
+var ShareDestinationSummary = external_exports.object({
+  id: external_exports.string(),
+  kind: DestinationKind,
+  name: external_exports.string(),
+  host: external_exports.string(),
+  category: external_exports.string(),
+  trust: ShareTrustLevel,
+  /** Effective state (decision applied over the trust default). */
+  status: EgressStatus,
+  /** True when an egress decision override differs from the trust default. */
+  isCustom: external_exports.boolean(),
+  lastSeen: external_exports.iso.datetime(),
+  endpointCount: external_exports.number().int().nonnegative(),
+  callSiteCount: external_exports.number().int().nonnegative(),
+  transports: external_exports.array(Transport),
+  /** Most-sensitive first. */
+  dataClasses: external_exports.array(DataClass),
+  review: ReviewInfo,
+  /** Non-provider hosts only; null for providers. */
+  network: DestinationNetwork.nullable(),
+  /** Embedded for inline expansion — no call sites here. */
+  endpoints: external_exports.array(EndpointSummary)
+}).meta({ id: "ShareDestinationSummary" });
+var ShareDestinationDetail = ShareDestinationSummary.omit({
+  endpointCount: true,
+  callSiteCount: true,
+  endpoints: true
+}).extend({
+  /** Ownership/geo rationale; null for providers. */
+  note: external_exports.string().nullable(),
+  endpoints: external_exports.array(EndpointWithSites)
+}).meta({ id: "ShareDestinationDetail" });
+var ReviewDestination = external_exports.object({
+  id: external_exports.string(),
+  kind: DestinationKind,
+  name: external_exports.string(),
+  /** Registrable host — lets the strip derive the provider lettermark, as the register does. */
+  host: external_exports.string(),
+  trust: ShareTrustLevel,
+  status: EgressStatus,
+  review: ReviewInfo,
+  topDataClass: DataClass,
+  callSiteCount: external_exports.number().int().nonnegative(),
+  lastSeen: external_exports.iso.datetime()
+}).meta({ id: "ReviewDestination" });
+var ShareDestinationGroup = external_exports.object({
+  kind: DestinationKind,
+  total: external_exports.number().int().nonnegative(),
+  items: external_exports.array(ShareDestinationSummary)
+}).meta({ id: "ShareDestinationGroup" });
+var ListShareDestinationsResponse = external_exports.object({ groups: external_exports.array(ShareDestinationGroup) }).meta({ id: "ListShareDestinationsResponse" });
+var NeedsReviewResponse = external_exports.object({ items: external_exports.array(ReviewDestination) }).meta({ id: "NeedsReviewResponse" });
+var SharesStats = external_exports.object({
+  destinations: external_exports.number().int().nonnegative(),
+  endpoints: external_exports.number().int().nonnegative(),
+  callSites: external_exports.number().int().nonnegative(),
+  needsReview: external_exports.number().int().nonnegative(),
+  insecure: external_exports.number().int().nonnegative(),
+  byKind: external_exports.object({
+    provider: external_exports.number().int().nonnegative(),
+    internal: external_exports.number().int().nonnegative(),
+    external: external_exports.number().int().nonnegative(),
+    ip: external_exports.number().int().nonnegative()
+  }),
+  byTrust: external_exports.object({
+    recognized: external_exports.number().int().nonnegative(),
+    internal: external_exports.number().int().nonnegative(),
+    unverified: external_exports.number().int().nonnegative(),
+    ip: external_exports.number().int().nonnegative()
+  })
+}).meta({ id: "SharesStats" });
+var SetEgressDecisionBody = external_exports.object({
+  /** `null` clears the override — reverts to the trust default, isCustom false. */
+  decision: EgressDecision.nullable()
+}).meta({ id: "SetEgressDecisionBody" });
+var SetEgressDecisionResponse = external_exports.object({ destination: ShareDestinationSummary }).meta({ id: "SetEgressDecisionResponse" });
+var ListShareDestinationsQuery = external_exports.object({
+  /** Case-insensitive match over destination name/category, endpoint url, call-site project/file. */
+  q: external_exports.string().optional(),
+  /** Repeatable. Restrict to these DestinationKind values; absent means all kinds. */
+  kind: external_exports.array(DestinationKind).optional(),
+  /** Reserved for future grouping modes; only 'destination' is supported today. */
+  groupBy: external_exports.enum(["destination"]).default("destination"),
+  /**
+   * When true, return a flat severity-ordered `items[]` instead of `groups`.
+   * Uses `z.stringbool()` (NOT `z.coerce.boolean()` — `Boolean(str)` is true for
+   * any non-empty string, so `?review=false`/`?review=0` would wrongly coerce
+   * to `true`). `z.stringbool()` parses true/1/yes vs false/0/no correctly.
+   */
+  review: external_exports.stringbool().default(false)
+});
+var ExportSharesQuery = external_exports.object({
+  format: external_exports.enum(["csv", "json"]).default("csv"),
+  q: external_exports.string().optional(),
+  kind: external_exports.array(DestinationKind).optional()
+});
+
+// ../../packages/schema/src/zod/egress-extraction.ts
+var EgressEcosystem = external_exports.enum(["npm", "pypi", "go", "maven", "rubygems", "cargo", "composer", "nuget"]).meta({ id: "EgressEcosystem" });
+var ProviderRegistryEntry = external_exports.object({
+  id: external_exports.string(),
+  name: external_exports.string(),
+  category: external_exports.string(),
+  /** Suffix-matched: 'stripe.com' matches api.stripe.com, never evilstripe.com. */
+  hostSuffixes: external_exports.array(external_exports.string()).min(1),
+  /** Canonical API base URL recorded for manifest-derived (method 'SDK') endpoints. */
+  apiBase: external_exports.string(),
+  /** Most-sensitive first; index 0 becomes the endpoint dataClass. */
+  defaultDataClasses: external_exports.array(DataClass).min(1),
+  /** SDK identifiers per ecosystem ('go' prefix-matched by path, 'maven' by group-id prefix). */
+  sdks: external_exports.partialRecord(EgressEcosystem, external_exports.array(external_exports.string()))
+}).meta({ id: "ProviderRegistryEntry" });
+var EgressCallSiteHit = external_exports.object({
+  file: external_exports.string(),
+  line: external_exports.number().int().positive(),
+  snippet: external_exports.string(),
+  dynamic: external_exports.boolean(),
+  vendored: external_exports.boolean()
+}).meta({ id: "EgressCallSiteHit" });
+var ResolvedEgressHit = external_exports.object({
+  host: external_exports.string(),
+  kind: DestinationKind,
+  name: external_exports.string(),
+  category: external_exports.string(),
+  trust: ShareTrustLevel,
+  network: DestinationNetwork.nullable(),
+  method: HttpMethod,
+  transport: Transport,
+  url: external_exports.string(),
+  template: external_exports.boolean(),
+  dataClass: DataClass,
+  site: EgressCallSiteHit
+}).meta({ id: "ResolvedEgressHit" });
+var EgressReconcile = external_exports.discriminatedUnion("mode", [
+  external_exports.object({ mode: external_exports.literal("walk"), walkedPrefix: external_exports.string() }),
+  external_exports.object({
+    mode: external_exports.literal("ledger"),
+    scannedFiles: external_exports.array(external_exports.string()),
+    deletedFiles: external_exports.array(external_exports.string())
+  })
+]).meta({ id: "EgressReconcile" });
+var RecordProjectEgressInput = external_exports.object({
+  /** Stable reconcile key: 'git:<repo identity>' or 'path:<abs root>' (non-git). */
+  projectKey: external_exports.string().min(1),
+  /** Display name only — never keys reconciliation. */
+  project: external_exports.string(),
+  projectId: external_exports.string().nullable(),
+  reconcile: EgressReconcile,
+  hits: external_exports.array(ResolvedEgressHit)
+}).meta({ id: "RecordProjectEgressInput" });
+var EgressWriteSummary = external_exports.object({
+  destinations: external_exports.number().int().nonnegative(),
+  endpoints: external_exports.number().int().nonnegative(),
+  callSites: external_exports.number().int().nonnegative(),
+  truncated: external_exports.boolean(),
+  /**
+   * Files the cap dropped whole. Their stored rows were left untouched, so a
+   * ledger-keeping caller must withhold their ledger entries and read them
+   * again next scan.
+   */
+  droppedFiles: external_exports.array(external_exports.string()).default([])
+}).meta({ id: "EgressWriteSummary" });
+
 // ../../packages/schema/src/zod/installed-pack.ts
 var InstalledPack = external_exports.object({
   id: external_exports.guid(),
@@ -16535,10 +16801,14 @@ var PatchInstalledPackRequest = external_exports.object({
 }).meta({ id: "PatchInstalledPackRequest" });
 
 // ../../packages/schema/src/zod/local.ts
-var WORKSPACE_SETTINGS_SPEC_VERSION = 2;
+var WORKSPACE_SETTINGS_SPEC_VERSION = 4;
 var RunMode = external_exports.enum(["standalone"]);
 var SimpleDetectionPolicy = external_exports.enum(["redact", "warn"]);
 var HistoricalAccess = external_exports.enum(["full", "session-only"]);
+var ModelJudgeConsent = external_exports.object({
+  acknowledgedAt: external_exports.iso.datetime(),
+  payloadVersion: external_exports.number().int().positive()
+});
 var WorkspaceSettings = external_exports.object({
   specVersion: external_exports.number().int().positive().default(WORKSPACE_SETTINGS_SPEC_VERSION),
   // Settings files written by earlier releases may carry the retired 'attached'
@@ -16550,8 +16820,16 @@ var WorkspaceSettings = external_exports.object({
   policy: SimpleDetectionPolicy.default("redact"),
   // Consent for scanning pre-install surfaces; opt-in (see HistoricalAccess).
   historicalAccess: HistoricalAccess.default("session-only"),
+  // In-place egress extraction on the scan paths; disable to stop all Data
+  // Shares writes.
+  dataSharesInPlace: external_exports.boolean().default(true),
   // Absent until /aka:setup completes; its presence is what "onboarded" means.
-  onboardedAt: external_exports.iso.datetime().optional()
+  onboardedAt: external_exports.iso.datetime().optional(),
+  // Records that the user consented to sending findings to the model API for
+  // the /aka:setup judge, along with the payload-shape version they agreed to.
+  // Absent until granted; a stale payloadVersion means the consent no longer
+  // covers the current payload and must be re-granted.
+  modelJudgeConsent: ModelJudgeConsent.optional()
 });
 function defaultWorkspaceSettings() {
   return WorkspaceSettings.parse({});
@@ -16929,152 +17207,33 @@ var SetupHandoffOffer = external_exports.object({
   path: ["liveKeys"]
 });
 
-// ../../packages/schema/src/zod/shares.ts
-var DestinationKind = external_exports.enum(["provider", "internal", "ip"]).meta({ id: "DestinationKind" });
-var Transport = external_exports.enum(["https", "http", "sftp", "grpc", "smtp"]).meta({ id: "Transport" });
-var DataClass = external_exports.enum(["secrets", "pii", "customer", "source", "telemetry", "logs", "metrics", "none"]).meta({ id: "DataClass" });
-var DATA_CLASS_ORDER = DataClass.options;
-var ShareTrustLevel = external_exports.enum(["recognized", "internal", "unverified", "ip"]).meta({ id: "ShareTrustLevel" });
-var EgressDecision = external_exports.enum(["allow", "block"]).meta({ id: "EgressDecision" });
-var EgressStatus = external_exports.enum(["allowed", "blocked", "review"]).meta({ id: "EgressStatus" });
-var ReviewReason = external_exports.enum(["raw_ip", "unverified_domain", "plaintext_transport"]).meta({ id: "ReviewReason" });
-var HttpMethod = external_exports.enum(["GET", "POST", "PUT", "DELETE"]).meta({ id: "HttpMethod" });
-var ReviewInfo = external_exports.object({
-  needsReview: external_exports.boolean(),
-  reasons: external_exports.array(ReviewReason)
-}).meta({ id: "ReviewInfo" });
-var DestinationNetwork = external_exports.object({
-  port: external_exports.number().int().nullable(),
-  geo: external_exports.string().nullable(),
-  ptr: external_exports.string().nullable()
-}).meta({ id: "DestinationNetwork" });
-var EndpointSummary = external_exports.object({
-  id: external_exports.string(),
-  method: HttpMethod,
-  transport: Transport,
-  url: external_exports.string(),
-  template: external_exports.boolean(),
-  dataClass: DataClass,
-  lastSeen: external_exports.iso.datetime(),
-  callSiteCount: external_exports.number().int().nonnegative()
-}).meta({ id: "EndpointSummary" });
-var CallSite = external_exports.object({
-  id: external_exports.string(),
-  project: external_exports.string(),
-  file: external_exports.string(),
-  line: external_exports.number().int().nonnegative(),
-  snippet: external_exports.string(),
-  dynamic: external_exports.boolean(),
-  vendored: external_exports.boolean(),
-  /** Deep-link to the Inventory project, when the repo is governed there. */
-  projectId: external_exports.string().nullable()
-}).meta({ id: "CallSite" });
-var EndpointWithSites = EndpointSummary.extend({
-  sites: external_exports.array(CallSite)
-}).meta({ id: "EndpointWithSites" });
-var ShareDestinationSummary = external_exports.object({
-  id: external_exports.string(),
-  kind: DestinationKind,
-  name: external_exports.string(),
-  host: external_exports.string(),
-  category: external_exports.string(),
-  trust: ShareTrustLevel,
-  /** Effective state (decision applied over the trust default). */
-  status: EgressStatus,
-  /** True when an egress decision override differs from the trust default. */
-  isCustom: external_exports.boolean(),
-  lastSeen: external_exports.iso.datetime(),
-  endpointCount: external_exports.number().int().nonnegative(),
-  callSiteCount: external_exports.number().int().nonnegative(),
-  transports: external_exports.array(Transport),
-  /** Most-sensitive first. */
-  dataClasses: external_exports.array(DataClass),
-  review: ReviewInfo,
-  /** Non-provider hosts only; null for providers. */
-  network: DestinationNetwork.nullable(),
-  /** Embedded for inline expansion — no call sites here. */
-  endpoints: external_exports.array(EndpointSummary)
-}).meta({ id: "ShareDestinationSummary" });
-var ShareDestinationDetail = ShareDestinationSummary.omit({
-  endpointCount: true,
-  callSiteCount: true,
-  endpoints: true
-}).extend({
-  /** Ownership/geo rationale; null for providers. */
-  note: external_exports.string().nullable(),
-  endpoints: external_exports.array(EndpointWithSites)
-}).meta({ id: "ShareDestinationDetail" });
-var ReviewDestination = external_exports.object({
-  id: external_exports.string(),
-  kind: DestinationKind,
-  name: external_exports.string(),
-  /** Registrable host — lets the strip derive the provider lettermark, as the register does. */
-  host: external_exports.string(),
-  trust: ShareTrustLevel,
-  status: EgressStatus,
-  review: ReviewInfo,
-  topDataClass: DataClass,
-  callSiteCount: external_exports.number().int().nonnegative(),
-  lastSeen: external_exports.iso.datetime()
-}).meta({ id: "ReviewDestination" });
-var ShareDestinationGroup = external_exports.object({
-  kind: DestinationKind,
-  total: external_exports.number().int().nonnegative(),
-  items: external_exports.array(ShareDestinationSummary)
-}).meta({ id: "ShareDestinationGroup" });
-var ListShareDestinationsResponse = external_exports.object({ groups: external_exports.array(ShareDestinationGroup) }).meta({ id: "ListShareDestinationsResponse" });
-var NeedsReviewResponse = external_exports.object({ items: external_exports.array(ReviewDestination) }).meta({ id: "NeedsReviewResponse" });
-var SharesStats = external_exports.object({
-  destinations: external_exports.number().int().nonnegative(),
-  endpoints: external_exports.number().int().nonnegative(),
-  callSites: external_exports.number().int().nonnegative(),
-  needsReview: external_exports.number().int().nonnegative(),
-  insecure: external_exports.number().int().nonnegative(),
-  byKind: external_exports.object({
-    provider: external_exports.number().int().nonnegative(),
-    internal: external_exports.number().int().nonnegative(),
-    ip: external_exports.number().int().nonnegative()
-  }),
-  byTrust: external_exports.object({
-    recognized: external_exports.number().int().nonnegative(),
-    internal: external_exports.number().int().nonnegative(),
-    unverified: external_exports.number().int().nonnegative(),
-    ip: external_exports.number().int().nonnegative()
-  })
-}).meta({ id: "SharesStats" });
-var SetEgressDecisionBody = external_exports.object({
-  /** `null` clears the override — reverts to the trust default, isCustom false. */
-  decision: EgressDecision.nullable()
-}).meta({ id: "SetEgressDecisionBody" });
-var SetEgressDecisionResponse = external_exports.object({ destination: ShareDestinationSummary }).meta({ id: "SetEgressDecisionResponse" });
-var ListShareDestinationsQuery = external_exports.object({
-  /** Case-insensitive match over destination name/category, endpoint url, call-site project/file. */
-  q: external_exports.string().optional(),
-  /** Repeatable. Restrict to these DestinationKind values; absent means all kinds. */
-  kind: external_exports.array(DestinationKind).optional(),
-  /** Reserved for future grouping modes; only 'destination' is supported today. */
-  groupBy: external_exports.enum(["destination"]).default("destination"),
-  /**
-   * When true, return a flat severity-ordered `items[]` instead of `groups`.
-   * Uses `z.stringbool()` (NOT `z.coerce.boolean()` — `Boolean(str)` is true for
-   * any non-empty string, so `?review=false`/`?review=0` would wrongly coerce
-   * to `true`). `z.stringbool()` parses true/1/yes vs false/0/no correctly.
-   */
-  review: external_exports.stringbool().default(false)
-});
-var ExportSharesQuery = external_exports.object({
-  format: external_exports.enum(["csv", "json"]).default("csv"),
-  q: external_exports.string().optional(),
-  kind: external_exports.array(DestinationKind).optional()
-});
-
 // ../../packages/persistence/src/ids.ts
 import { createHash } from "crypto";
 
 // ../../packages/persistence/src/paths.ts
-import { chmodSync, mkdirSync } from "fs";
+import { chmodSync, lstatSync, mkdirSync, renameSync, rmSync, writeFileSync } from "fs";
 var DATA_DIR_MODE = 448;
 var DATA_FILE_MODE = 384;
+function chmodBestEffort(path, mode) {
+  try {
+    chmodSync(path, mode);
+  } catch {
+  }
+}
+function tightenDir(dir) {
+  chmodBestEffort(dir, DATA_DIR_MODE);
+}
+function ensureDataDirSync(dir) {
+  mkdirSync(dir, { recursive: true, mode: DATA_DIR_MODE });
+  tightenDir(dir);
+}
+function tightenFile(file2) {
+  try {
+    if (lstatSync(file2).isSymbolicLink()) return;
+  } catch {
+  }
+  chmodBestEffort(file2, DATA_FILE_MODE);
+}
 
 // ../../packages/persistence/src/internal/json.ts
 function parseJsonObject(s) {
@@ -17115,14 +17274,17 @@ import { randomUUID as randomUUID6 } from "crypto";
 // ../../packages/persistence/src/repositories/shares.ts
 import { randomUUID as randomUUID7 } from "crypto";
 
+// ../../packages/persistence/src/finding-key.ts
+import { createHash as createHash3 } from "crypto";
+
 // ../../packages/persistence/src/fingerprint.ts
 import { createHmac, randomBytes } from "crypto";
-import { chmodSync as chmodSync2, readFileSync, renameSync as renameSync2, writeFileSync } from "fs";
+import { readFileSync } from "fs";
 import { join as join2 } from "path";
 
 // ../../packages/persistence/src/local-layout.ts
-import { chmodSync as chmodSync3, mkdirSync as mkdirSync2, renameSync as renameSync3 } from "fs";
-import { chmod, mkdir } from "fs/promises";
+import { renameSync as renameSync3 } from "fs";
+import { mkdir } from "fs/promises";
 import { homedir } from "os";
 import { join as join3 } from "path";
 function defaultDataDir() {
@@ -17137,6 +17299,9 @@ function dataDir(base = defaultDataDir()) {
 function dbPath(base = defaultDataDir()) {
   return join3(dataDir(base), "aka.db");
 }
+function ensureLayoutDirSync(dir = defaultDataDir()) {
+  ensureDataDirSync(dir);
+}
 function migrateLegacyLayout(base = defaultDataDir()) {
   const moves = [
     { name: "config.json", dest: settingsDir(base) },
@@ -17144,19 +17309,17 @@ function migrateLegacyLayout(base = defaultDataDir()) {
   ];
   for (const { name, dest } of moves) {
     try {
-      mkdirSync2(dest, { recursive: true, mode: DATA_DIR_MODE });
-      try {
-        chmodSync3(dest, DATA_DIR_MODE);
-      } catch {
-      }
-      renameSync3(join3(base, name), join3(dest, name));
+      ensureDataDirSync(dest);
+      const moved = join3(dest, name);
+      renameSync3(join3(base, name), moved);
+      tightenFile(moved);
     } catch {
     }
   }
 }
 
 // ../../packages/persistence/src/settings.ts
-import { readFileSync as readFileSync2, renameSync as renameSync4, writeFileSync as writeFileSync2 } from "fs";
+import { readFileSync as readFileSync2 } from "fs";
 import { join as join4 } from "path";
 function readWorkspaceSettings(base = defaultDataDir()) {
   const record2 = readJson(join4(settingsDir(base), "settings.json"));
@@ -17178,7 +17341,7 @@ function readJson(file2) {
 }
 
 // ../../packages/persistence/src/warn-era-cap.ts
-import { existsSync as existsSync2, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync2, writeFileSync as writeFileSync2 } from "fs";
 import { join as join5 } from "path";
 
 // ../../packages/plugin-sdk/src/provider-env.ts
@@ -17231,6 +17394,12 @@ function resolveProvider() {
 
 // ../../packages/plugin-sdk/src/config.ts
 function loadConfig(base = defaultDataDir()) {
+  try {
+    ensureLayoutDirSync(base);
+    const settingsFile = join6(settingsDir(base), "settings.json");
+    if (existsSync3(settingsFile)) tightenFile(settingsFile);
+  } catch {
+  }
   migrateLegacyLayout(base);
   const settings = readWorkspaceSettings(base);
   return {
@@ -17253,15 +17422,583 @@ function resolveProviderSafe() {
 // ../../packages/plugin-sdk/src/config-inventory.ts
 import { readdirSync, readFileSync as readFileSync4, realpathSync, statSync as statSync2 } from "fs";
 import { homedir as homedir2 } from "os";
-import { basename as basename2, join as join7 } from "path";
+import { basename as basename2, join as join8 } from "path";
+
+// ../../packages/detections/src/egress/registry.ts
+var EXTRACTOR_VERSION = "1";
+var PROVIDER_REGISTRY = [
+  {
+    id: "stripe",
+    name: "Stripe",
+    category: "Payments",
+    hostSuffixes: ["stripe.com"],
+    apiBase: "https://api.stripe.com",
+    defaultDataClasses: ["pii", "customer"],
+    sdks: {
+      npm: ["stripe"],
+      pypi: ["stripe"],
+      go: ["github.com/stripe/stripe-go"],
+      maven: ["com.stripe"],
+      rubygems: ["stripe"],
+      composer: ["stripe/stripe-php"],
+      nuget: ["Stripe.net"]
+    }
+  },
+  {
+    id: "datadog",
+    name: "Datadog",
+    category: "Observability",
+    hostSuffixes: ["datadoghq.com", "datadoghq.eu"],
+    apiBase: "https://api.datadoghq.com",
+    defaultDataClasses: ["telemetry", "logs", "metrics"],
+    sdks: {
+      npm: ["dd-trace", "@datadog/browser-logs"],
+      pypi: ["datadog", "ddtrace"],
+      go: ["github.com/DataDog/dd-trace-go"],
+      maven: ["com.datadoghq"],
+      rubygems: ["ddtrace", "dogapi"],
+      nuget: ["Datadog.Trace"]
+    }
+  },
+  {
+    id: "newrelic",
+    name: "New Relic",
+    category: "Observability",
+    hostSuffixes: ["newrelic.com", "nr-data.net"],
+    apiBase: "https://api.newrelic.com",
+    defaultDataClasses: ["telemetry", "logs", "metrics"],
+    sdks: {
+      npm: ["newrelic"],
+      pypi: ["newrelic"],
+      go: ["github.com/newrelic/go-agent"],
+      maven: ["com.newrelic.agent.java"],
+      rubygems: ["newrelic_rpm"],
+      nuget: ["NewRelic.Agent"]
+    }
+  },
+  {
+    id: "sentry",
+    name: "Sentry",
+    category: "Error tracking",
+    hostSuffixes: ["sentry.io"],
+    apiBase: "https://sentry.io",
+    defaultDataClasses: ["source", "telemetry"],
+    sdks: {
+      npm: ["@sentry/node", "@sentry/react", "@sentry/nextjs"],
+      pypi: ["sentry-sdk"],
+      go: ["github.com/getsentry/sentry-go"],
+      maven: ["io.sentry"],
+      rubygems: ["sentry-ruby"],
+      cargo: ["sentry"],
+      composer: ["sentry/sentry"],
+      nuget: ["Sentry"]
+    }
+  },
+  {
+    id: "openai",
+    name: "OpenAI",
+    category: "LLM provider",
+    hostSuffixes: ["openai.com"],
+    apiBase: "https://api.openai.com",
+    defaultDataClasses: ["pii", "source"],
+    sdks: {
+      npm: ["openai"],
+      pypi: ["openai"],
+      go: ["github.com/sashabaranov/go-openai"],
+      maven: ["com.openai"],
+      rubygems: ["ruby-openai"],
+      cargo: ["async-openai"],
+      composer: ["openai-php/client"],
+      nuget: ["OpenAI"]
+    }
+  },
+  {
+    id: "anthropic",
+    name: "Anthropic",
+    category: "LLM provider",
+    hostSuffixes: ["anthropic.com"],
+    apiBase: "https://api.anthropic.com",
+    defaultDataClasses: ["pii", "source"],
+    sdks: {
+      npm: ["@anthropic-ai/sdk"],
+      pypi: ["anthropic"],
+      go: ["github.com/anthropics/anthropic-sdk-go"],
+      nuget: ["Anthropic.SDK"]
+    }
+  },
+  {
+    id: "aws",
+    name: "Amazon Web Services",
+    category: "Cloud platform",
+    hostSuffixes: ["amazonaws.com"],
+    apiBase: "https://s3.amazonaws.com",
+    defaultDataClasses: ["secrets", "customer"],
+    sdks: {
+      npm: ["@aws-sdk/client-s3", "aws-sdk"],
+      pypi: ["boto3"],
+      go: ["github.com/aws/aws-sdk-go", "github.com/aws/aws-sdk-go-v2"],
+      maven: ["com.amazonaws", "software.amazon.awssdk"],
+      rubygems: ["aws-sdk-s3"],
+      cargo: ["aws-sdk-s3"],
+      nuget: ["AWSSDK.S3"]
+    }
+  },
+  {
+    id: "gcp",
+    name: "Google Cloud",
+    category: "Cloud platform",
+    hostSuffixes: ["googleapis.com"],
+    apiBase: "https://storage.googleapis.com",
+    defaultDataClasses: ["customer", "logs"],
+    sdks: {
+      npm: ["@google-cloud/storage"],
+      pypi: ["google-cloud-storage"],
+      go: ["cloud.google.com/go"],
+      maven: ["com.google.cloud"],
+      rubygems: ["google-cloud-storage"],
+      nuget: ["Google.Cloud.Storage.V1"]
+    }
+  },
+  {
+    id: "azure",
+    name: "Microsoft Azure",
+    category: "Cloud platform",
+    hostSuffixes: ["azure.com", "windows.net"],
+    apiBase: "https://management.azure.com",
+    defaultDataClasses: ["customer", "logs"],
+    sdks: {
+      npm: ["@azure/storage-blob"],
+      pypi: ["azure-storage-blob"],
+      go: ["github.com/Azure/azure-sdk-for-go"],
+      maven: ["com.azure"],
+      rubygems: ["azure-storage-blob"],
+      nuget: ["Azure.Storage.Blobs"]
+    }
+  },
+  {
+    id: "slack",
+    name: "Slack",
+    category: "Notifications",
+    hostSuffixes: ["slack.com"],
+    apiBase: "https://slack.com/api",
+    defaultDataClasses: ["logs"],
+    sdks: {
+      npm: ["@slack/web-api"],
+      pypi: ["slack-sdk"],
+      go: ["github.com/slack-go/slack"],
+      maven: ["com.slack.api"],
+      rubygems: ["slack-ruby-client"],
+      composer: ["slack-php/slack-api"],
+      nuget: ["SlackNet"]
+    }
+  },
+  {
+    id: "segment",
+    name: "Segment",
+    category: "Analytics",
+    hostSuffixes: ["segment.io", "segment.com"],
+    apiBase: "https://api.segment.io",
+    defaultDataClasses: ["customer"],
+    sdks: {
+      npm: ["@segment/analytics-node", "analytics-node"],
+      pypi: ["segment-analytics-python"],
+      go: ["github.com/segmentio/analytics-go"],
+      maven: ["com.segment.analytics.java"],
+      rubygems: ["analytics-ruby"],
+      nuget: ["Analytics"]
+    }
+  },
+  {
+    id: "twilio",
+    name: "Twilio",
+    category: "Communications",
+    hostSuffixes: ["twilio.com"],
+    apiBase: "https://api.twilio.com",
+    defaultDataClasses: ["pii", "customer"],
+    sdks: {
+      npm: ["twilio"],
+      pypi: ["twilio"],
+      go: ["github.com/twilio/twilio-go"],
+      maven: ["com.twilio.sdk"],
+      rubygems: ["twilio-ruby"],
+      composer: ["twilio/sdk"],
+      nuget: ["Twilio"]
+    }
+  },
+  {
+    id: "sendgrid",
+    name: "SendGrid",
+    category: "Email",
+    hostSuffixes: ["sendgrid.com"],
+    apiBase: "https://api.sendgrid.com",
+    defaultDataClasses: ["pii"],
+    sdks: {
+      npm: ["@sendgrid/mail"],
+      pypi: ["sendgrid"],
+      go: ["github.com/sendgrid/sendgrid-go"],
+      maven: ["com.sendgrid"],
+      rubygems: ["sendgrid-ruby"],
+      composer: ["sendgrid/sendgrid"],
+      nuget: ["SendGrid"]
+    }
+  },
+  {
+    id: "mailgun",
+    name: "Mailgun",
+    category: "Email",
+    hostSuffixes: ["mailgun.net"],
+    apiBase: "https://api.mailgun.net",
+    defaultDataClasses: ["pii"],
+    sdks: {
+      npm: ["mailgun.js"],
+      pypi: ["mailgun"],
+      rubygems: ["mailgun-ruby"],
+      composer: ["mailgun/mailgun-php"],
+      nuget: ["Mailgun"]
+    }
+  },
+  {
+    id: "mixpanel",
+    name: "Mixpanel",
+    category: "Analytics",
+    hostSuffixes: ["mixpanel.com"],
+    apiBase: "https://api.mixpanel.com",
+    defaultDataClasses: ["customer", "telemetry"],
+    sdks: {
+      npm: ["mixpanel"],
+      pypi: ["mixpanel"],
+      rubygems: ["mixpanel-ruby"],
+      nuget: ["Mixpanel"]
+    }
+  },
+  {
+    id: "amplitude",
+    name: "Amplitude",
+    category: "Analytics",
+    hostSuffixes: ["amplitude.com"],
+    apiBase: "https://api2.amplitude.com",
+    defaultDataClasses: ["customer", "telemetry"],
+    sdks: {
+      npm: ["@amplitude/analytics-node"],
+      pypi: ["amplitude-analytics"],
+      nuget: ["Amplitude"]
+    }
+  },
+  {
+    id: "posthog",
+    name: "PostHog",
+    category: "Analytics",
+    hostSuffixes: ["posthog.com"],
+    apiBase: "https://us.i.posthog.com",
+    defaultDataClasses: ["customer", "telemetry"],
+    sdks: {
+      npm: ["posthog-node", "posthog-js"],
+      pypi: ["posthog"],
+      go: ["github.com/posthog/posthog-go"],
+      rubygems: ["posthog-ruby"],
+      composer: ["posthog/posthog-php"],
+      nuget: ["PostHog"]
+    }
+  },
+  {
+    id: "honeycomb",
+    name: "Honeycomb",
+    category: "Observability",
+    hostSuffixes: ["honeycomb.io"],
+    apiBase: "https://api.honeycomb.io",
+    defaultDataClasses: ["telemetry", "metrics"],
+    sdks: {
+      npm: ["libhoney"],
+      pypi: ["libhoney"],
+      go: ["github.com/honeycombio/libhoney-go"],
+      rubygems: ["libhoney"]
+    }
+  },
+  {
+    id: "grafana",
+    name: "Grafana Cloud",
+    category: "Observability",
+    hostSuffixes: ["grafana.net"],
+    apiBase: "https://grafana.net",
+    defaultDataClasses: ["logs", "metrics"],
+    sdks: {
+      npm: ["@grafana/faro-web-sdk"]
+    }
+  },
+  {
+    id: "splunk",
+    name: "Splunk",
+    category: "Observability",
+    hostSuffixes: ["splunkcloud.com", "splunk.com"],
+    apiBase: "https://http-inputs.splunkcloud.com",
+    defaultDataClasses: ["logs"],
+    sdks: {
+      npm: ["splunk-logging"],
+      pypi: ["splunk-sdk"],
+      maven: ["com.splunk"],
+      nuget: ["Splunk.Logging.Common"]
+    }
+  },
+  {
+    id: "pagerduty",
+    name: "PagerDuty",
+    category: "Incident response",
+    hostSuffixes: ["pagerduty.com"],
+    apiBase: "https://api.pagerduty.com",
+    defaultDataClasses: ["logs"],
+    sdks: {
+      npm: ["@pagerduty/pdjs"],
+      pypi: ["pdpyras"],
+      go: ["github.com/PagerDuty/go-pagerduty"],
+      rubygems: ["pagerduty"]
+    }
+  },
+  {
+    id: "github",
+    name: "GitHub",
+    category: "Developer platform",
+    hostSuffixes: ["github.com", "githubusercontent.com"],
+    apiBase: "https://api.github.com",
+    defaultDataClasses: ["source"],
+    sdks: {
+      npm: ["@octokit/rest", "octokit"],
+      pypi: ["pygithub"],
+      go: ["github.com/google/go-github"],
+      maven: ["org.kohsuke.github-api"],
+      rubygems: ["octokit"],
+      cargo: ["octocrab"],
+      composer: ["knplabs/github-api"],
+      nuget: ["Octokit"]
+    }
+  },
+  {
+    id: "gitlab",
+    name: "GitLab",
+    category: "Developer platform",
+    hostSuffixes: ["gitlab.com"],
+    apiBase: "https://gitlab.com/api",
+    defaultDataClasses: ["source"],
+    sdks: {
+      npm: ["@gitbeaker/rest"],
+      pypi: ["python-gitlab"],
+      go: ["gitlab.com/gitlab-org/api/client-go"],
+      rubygems: ["gitlab"],
+      nuget: ["GitLabApiClient"]
+    }
+  },
+  {
+    id: "auth0",
+    name: "Auth0",
+    category: "Identity",
+    hostSuffixes: ["auth0.com"],
+    apiBase: "https://login.auth0.com",
+    defaultDataClasses: ["pii"],
+    sdks: {
+      npm: ["auth0"],
+      pypi: ["auth0-python"],
+      go: ["github.com/auth0/go-auth0"],
+      maven: ["com.auth0"],
+      rubygems: ["auth0"],
+      composer: ["auth0/auth0-php"],
+      nuget: ["Auth0.ManagementApi"]
+    }
+  },
+  {
+    id: "okta",
+    name: "Okta",
+    category: "Identity",
+    hostSuffixes: ["okta.com", "oktapreview.com"],
+    apiBase: "https://login.okta.com",
+    defaultDataClasses: ["pii"],
+    sdks: {
+      npm: ["@okta/okta-sdk-nodejs"],
+      pypi: ["okta"],
+      go: ["github.com/okta/okta-sdk-golang"],
+      maven: ["com.okta.sdk"],
+      nuget: ["Okta.Sdk"]
+    }
+  },
+  {
+    id: "clerk",
+    name: "Clerk",
+    category: "Identity",
+    hostSuffixes: ["clerk.com", "clerk.dev"],
+    apiBase: "https://api.clerk.com",
+    defaultDataClasses: ["pii"],
+    sdks: {
+      npm: ["@clerk/backend", "@clerk/nextjs"],
+      pypi: ["clerk-backend-api"],
+      go: ["github.com/clerk/clerk-sdk-go"]
+    }
+  },
+  {
+    id: "supabase",
+    name: "Supabase",
+    category: "Backend platform",
+    hostSuffixes: ["supabase.co", "supabase.com"],
+    apiBase: "https://api.supabase.com",
+    defaultDataClasses: ["pii", "customer"],
+    sdks: {
+      npm: ["@supabase/supabase-js"],
+      pypi: ["supabase"],
+      cargo: ["postgrest"]
+    }
+  },
+  {
+    id: "firebase",
+    name: "Firebase",
+    category: "Backend platform",
+    hostSuffixes: ["firebaseio.com", "firebase.google.com"],
+    apiBase: "https://firebaseio.com",
+    defaultDataClasses: ["customer"],
+    sdks: {
+      npm: ["firebase", "firebase-admin"],
+      pypi: ["firebase-admin"],
+      go: ["firebase.google.com/go"],
+      maven: ["com.google.firebase"]
+    }
+  },
+  {
+    id: "mongodb-atlas",
+    name: "MongoDB Atlas",
+    category: "Database SaaS",
+    hostSuffixes: ["mongodb.net", "mongodb.com"],
+    apiBase: "https://cloud.mongodb.com",
+    defaultDataClasses: ["customer"],
+    sdks: {
+      npm: ["mongodb"],
+      pypi: ["pymongo"],
+      go: ["go.mongodb.org/mongo-driver"],
+      maven: ["org.mongodb"],
+      rubygems: ["mongo"],
+      cargo: ["mongodb"],
+      nuget: ["MongoDB.Driver"]
+    }
+  },
+  {
+    id: "planetscale",
+    name: "PlanetScale",
+    category: "Database SaaS",
+    hostSuffixes: ["psdb.cloud", "planetscale.com"],
+    apiBase: "https://api.planetscale.com",
+    defaultDataClasses: ["customer"],
+    sdks: {
+      npm: ["@planetscale/database"],
+      go: ["github.com/planetscale/planetscale-go"]
+    }
+  },
+  {
+    id: "algolia",
+    name: "Algolia",
+    category: "Search SaaS",
+    hostSuffixes: ["algolia.net", "algolianet.com"],
+    apiBase: "https://algolia.net",
+    defaultDataClasses: ["customer"],
+    sdks: {
+      npm: ["algoliasearch"],
+      pypi: ["algoliasearch"],
+      go: ["github.com/algolia/algoliasearch-client-go"],
+      maven: ["com.algolia"],
+      rubygems: ["algolia"],
+      composer: ["algolia/algoliasearch-client-php"],
+      nuget: ["Algolia.Search"]
+    }
+  },
+  {
+    id: "cloudflare",
+    name: "Cloudflare",
+    category: "CDN / edge",
+    hostSuffixes: ["cloudflare.com", "workers.dev"],
+    apiBase: "https://api.cloudflare.com",
+    defaultDataClasses: ["logs"],
+    sdks: {
+      npm: ["cloudflare"],
+      pypi: ["cloudflare"],
+      go: ["github.com/cloudflare/cloudflare-go"],
+      nuget: ["CloudFlare.Client"]
+    }
+  },
+  {
+    id: "huggingface",
+    name: "Hugging Face",
+    category: "LLM provider",
+    hostSuffixes: ["huggingface.co"],
+    apiBase: "https://api-inference.huggingface.co",
+    defaultDataClasses: ["source"],
+    sdks: {
+      npm: ["@huggingface/inference"],
+      pypi: ["huggingface-hub", "transformers"],
+      rubygems: ["hugging-face"]
+    }
+  },
+  {
+    id: "cohere",
+    name: "Cohere",
+    category: "LLM provider",
+    hostSuffixes: ["cohere.com", "cohere.ai"],
+    apiBase: "https://api.cohere.com",
+    defaultDataClasses: ["pii", "source"],
+    sdks: {
+      npm: ["cohere-ai"],
+      pypi: ["cohere"],
+      go: ["github.com/cohere-ai/cohere-go"]
+    }
+  },
+  {
+    id: "mistral",
+    name: "Mistral AI",
+    category: "LLM provider",
+    hostSuffixes: ["mistral.ai"],
+    apiBase: "https://api.mistral.ai",
+    defaultDataClasses: ["pii", "source"],
+    sdks: {
+      npm: ["@mistralai/mistralai"],
+      pypi: ["mistralai"],
+      go: ["github.com/gage-technologies/mistral-go"]
+    }
+  }
+];
+var EGRESS_VERSION_MATERIAL = `${EXTRACTOR_VERSION}
+${JSON.stringify(PROVIDER_REGISTRY)}`;
+
+// ../../packages/detections/src/egress/extract.ts
+var SECRET_KEY_NAMES = "api[_-]?key|apikey|private[_-]?key|access[_-]?key|access[_-]?token|token|secret|credentials?|password|passwd|pwd|authorization|sig|signature|sas|assertion";
+var AUTH_SCHEMES = "Bearer|Basic|Token|Digest|ApiKey|SSWS|AWS4-HMAC-SHA256";
+var SECRET_VALUE = new RegExp(
+  `((?:${SECRET_KEY_NAMES})['"\`]?\\s*[:=]\\s*['"\`]?)(?!(?:${AUTH_SCHEMES})[\\s'"\`])[^\\s'"\`&]+`,
+  "gi"
+);
+var AUTH_SCHEME_VALUE = new RegExp(
+  `((?:${SECRET_KEY_NAMES})['"\`]?\\s*[:=]\\s*['"\`]?)(${AUTH_SCHEMES})\\s+[^\\s'"\`]+`,
+  "gi"
+);
+var WEBHOOK_SECRET_PATHS = [
+  { hosts: ["hooks.slack.com"], prefix: "/services/" },
+  {
+    hosts: ["discord.com", "discordapp.com", "ptb.discord.com", "canary.discord.com"],
+    prefix: "/api/webhooks/"
+  },
+  { hosts: ["hooks.zapier.com"], prefix: "/hooks/" },
+  { hosts: ["outlook.office.com", "outlook.office365.com"], prefix: "/webhook/" }
+];
+function escapeRegExp(literal2) {
+  return literal2.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+var WEBHOOK_URL = new RegExp(
+  `(https?://(?:${WEBHOOK_SECRET_PATHS.flatMap(
+    (entry) => entry.hosts.map((host) => `${escapeRegExp(host)}${escapeRegExp(entry.prefix)}`)
+  ).join("|")}))[^\\s'"\`<>()[\\]{},;]+`,
+  "gi"
+);
 
 // ../../packages/detections/src/escape-regexp.ts
-function escapeRegExp(value) {
+function escapeRegExp2(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 
 // ../../packages/detections/src/matchers/limits.ts
 var MAX_MATCHES_PER_RULE = 1e4;
+var MAX_REGEX_INPUT_LENGTH = 2e5;
 
 // ../../packages/detections/src/matchers/keyword.ts
 var KeywordMatcher2 = class {
@@ -17272,7 +18009,7 @@ var KeywordMatcher2 = class {
     for (const kw of keywords) {
       if (kw.length === 0) continue;
       if (spans.length >= MAX_MATCHES_PER_RULE) break;
-      const re = new RegExp(escapeRegExp(kw), caseSensitive ? "gu" : "giu");
+      const re = new RegExp(escapeRegExp2(kw), caseSensitive ? "gu" : "giu");
       let m;
       while ((m = re.exec(text)) !== null) {
         spans.push({ start: m.index, end: m.index + m[0].length });
@@ -17289,9 +18026,13 @@ var RegexMatcher2 = class {
     if (rule.matcher.type !== "regex") return [];
     const { pattern, flags, captureGroup } = rule.matcher;
     const re = new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`);
+    const scanText2 = text.length > MAX_REGEX_INPUT_LENGTH ? text.slice(0, MAX_REGEX_INPUT_LENGTH) : text;
     const spans = [];
     let m;
-    while ((m = re.exec(text)) !== null) {
+    const maxIterations = scanText2.length + 1;
+    let iterations = 0;
+    while ((m = re.exec(scanText2)) !== null) {
+      if (++iterations > maxIterations) break;
       const group = captureGroup != null ? m[captureGroup] : m[0];
       if (m[0].length === 0) re.lastIndex++;
       if (group && spans.length < MAX_MATCHES_PER_RULE) {
@@ -17366,27 +18107,53 @@ var CONFIG_POSTURE_RULES = [
   }
 ];
 
+// ../../packages/detections/src/security/redos-probe.ts
+var EXPONENTIAL_UNITS = [
+  "a",
+  "0",
+  " ",
+  "x",
+  "ab",
+  "a.",
+  "a-",
+  "a_",
+  "a@",
+  "a/",
+  "a:",
+  "a=",
+  "a;",
+  "aA0",
+  "	"
+];
+var EXPONENTIAL_PROBES = EXPONENTIAL_UNITS.flatMap(
+  (unit) => [23, 25].map((len) => unit.repeat(Math.ceil(len / unit.length)).slice(0, len) + "!")
+);
+var POLYNOMIAL_PROBES = ["abc-", "a.", "a ", "a=", "x", "0", "a@", "a/", "ab"].map(
+  (unit) => unit.repeat(1e4).slice(0, 4e4) + "!"
+);
+
 // ../../packages/plugin-sdk/src/repo.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3, statSync } from "fs";
-import { basename, dirname, isAbsolute, join as join6, sep as sep2 } from "path";
+import { existsSync as existsSync4, readFileSync as readFileSync3, statSync } from "fs";
+import { basename, dirname, isAbsolute, join as join7, sep as sep2 } from "path";
 
 // ../../packages/plugin-sdk/src/events.ts
-import { createHash as createHash3, randomUUID as randomUUID9 } from "crypto";
-
-// ../../packages/plugin-sdk/src/finding-key.ts
-import { createHash as createHash4 } from "crypto";
+import { createHash as createHash4, randomUUID as randomUUID9 } from "crypto";
 
 // ../../packages/plugin-sdk/src/inventory-resolver.ts
 import { arch, hostname as hostname3, platform, release } from "os";
 
 // ../../packages/plugin-sdk/src/nudge.ts
-import { mkdirSync as mkdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "fs";
-import { join as join8 } from "path";
+import { mkdirSync as mkdirSync2, readFileSync as readFileSync5, writeFileSync as writeFileSync3 } from "fs";
+import { join as join9 } from "path";
+
+// ../../packages/plugin-sdk/src/paths.ts
+import { readdirSync as readdirSync2, realpathSync as realpathSync2 } from "fs";
+import { basename as basename3, dirname as dirname2, sep as sep3 } from "path";
 
 // ../../packages/plugin-sdk/src/project-files.ts
 var import_ignore = __toESM(require_ignore(), 1);
-import { existsSync as existsSync4, readdirSync as readdirSync2, readFileSync as readFileSync6 } from "fs";
-import { basename as basename3, join as join9, relative, sep as sep3 } from "path";
+import { existsSync as existsSync5, readdirSync as readdirSync3, readFileSync as readFileSync6 } from "fs";
+import { basename as basename4, join as join10, relative, sep as sep4 } from "path";
 
 // ../../packages/plugin-sdk/src/runtime.ts
 import { randomUUID as randomUUID10 } from "crypto";
@@ -17395,17 +18162,17 @@ import { randomUUID as randomUUID10 } from "crypto";
 var THIRTY_DAYS_MS = 30 * 24 * 60 * 60 * 1e3;
 
 // ../../packages/plugin-sdk/src/throttle.ts
-import { mkdirSync as mkdirSync4, statSync as statSync3, writeFileSync as writeFileSync5 } from "fs";
-import { join as join10 } from "path";
+import { mkdirSync as mkdirSync3, statSync as statSync3, writeFileSync as writeFileSync4 } from "fs";
+import { join as join11 } from "path";
 function throttled(dataDir2, markerName, windowMs) {
-  const marker = join10(dataDir2, markerName);
+  const marker = join11(dataDir2, markerName);
   try {
     if (Date.now() - statSync3(marker).mtimeMs < windowMs) return true;
   } catch {
   }
   try {
-    mkdirSync4(dataDir2, { recursive: true, mode: DATA_DIR_MODE });
-    writeFileSync5(marker, String(Date.now()), { mode: DATA_FILE_MODE });
+    mkdirSync3(dataDir2, { recursive: true, mode: DATA_DIR_MODE });
+    writeFileSync4(marker, String(Date.now()), { mode: DATA_FILE_MODE });
   } catch {
   }
   return false;
@@ -17413,7 +18180,7 @@ function throttled(dataDir2, markerName, windowMs) {
 
 // src/history/reconcile-trigger.ts
 import { spawn } from "child_process";
-import { dirname as dirname2, join as join12 } from "path";
+import { dirname as dirname3, join as join13 } from "path";
 import { fileURLToPath } from "url";
 
 // src/history/tail.ts
@@ -17421,13 +18188,13 @@ import { createHash as createHash5 } from "crypto";
 import {
   closeSync,
   fstatSync,
-  mkdirSync as mkdirSync5,
+  mkdirSync as mkdirSync4,
   openSync,
   readFileSync as readFileSync7,
   readSync,
-  writeFileSync as writeFileSync6
+  writeFileSync as writeFileSync5
 } from "fs";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 var SAFE_SESSION_ID = /^[A-Za-z0-9._-]+$/;
 function safeSessionId(sessionId) {
   if (SAFE_SESSION_ID.test(sessionId) && sessionId !== "." && sessionId !== "..") {
@@ -17443,8 +18210,8 @@ function triggerReconcile(dataDir2, sessionId, transcriptPath) {
   try {
     const marker = `${RECONCILE_MARKER_PREFIX}-${safeSessionId(sessionId)}`;
     if (throttled(dataDir2, marker, RECONCILE_THROTTLE_MS)) return;
-    const here = dirname2(fileURLToPath(import.meta.url));
-    const child = spawn(process.execPath, [join12(here, "reconcile.js"), sessionId, transcriptPath], {
+    const here = dirname3(fileURLToPath(import.meta.url));
+    const child = spawn(process.execPath, [join13(here, "reconcile.js"), sessionId, transcriptPath], {
       detached: true,
       stdio: "ignore"
     });
@@ -17457,13 +18224,23 @@ function triggerReconcile(dataDir2, sessionId, transcriptPath) {
 async function readStdin() {
   return new Promise((resolve) => {
     let data = "";
-    process.stdin.setEncoding("utf8");
-    process.stdin.on("data", (chunk) => {
-      data += chunk;
-    });
-    process.stdin.on("end", () => {
+    let settled = false;
+    const finish = () => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      process.stdin.removeListener("data", onData);
+      process.stdin.removeListener("end", finish);
       resolve(data);
-    });
+    };
+    const onData = (chunk) => {
+      data += chunk;
+    };
+    const timer = setTimeout(finish, 5e3);
+    process.stdin.setEncoding("utf8");
+    process.stdin.on("data", onData);
+    process.stdin.on("end", finish);
+    process.stdin.on("error", finish);
   });
 }
 function parseJson(raw) {