@akasecurity/ai-tc-claude-code 0.9.4 → 0.9.5

package/scripts/apply-suppressions.js

@@ -492,15 +492,14 @@ var require_ignore = __commonJS({
 });
 
 // src/apply-suppressions.ts
-import { existsSync as existsSync7, readFileSync as readFileSync10 } from "fs";
+import { existsSync as existsSync9, readFileSync as readFileSync11 } from "fs";
 import { userInfo } from "os";
-import { dirname as dirname5, join as join15 } from "path";
-import { fileURLToPath as fileURLToPath3 } from "url";
+import { dirname as dirname6, join as join17 } from "path";
+import { fileURLToPath as fileURLToPath4 } from "url";
 
 // ../../packages/persistence/src/database.ts
-import { randomUUID as randomUUID9 } from "crypto";
-import { existsSync, renameSync as renameSync2, rmSync as rmSync2 } from "fs";
-import { join, sep } from "path";
+import { randomUUID as randomUUID10 } from "crypto";
+import { join as join2, sep } from "path";
 import { DatabaseSync } from "node:sqlite";
 
 // ../../packages/schema/src/drizzle/sqlite-ddl.ts
@@ -580,6 +579,14 @@ var SQLITE_MIGRATIONS = [
   {
     tag: "0018_serious_tana_nile",
     sql: "ALTER TABLE `secret_vault` ADD `format_version` integer DEFAULT 2 NOT NULL;"
+  },
+  {
+    tag: "0019_audit_started_at_index",
+    sql: "CREATE INDEX `idx_audit_started_at` ON `audit_events` (`started_at`);"
+  },
+  {
+    tag: "0020_secret_vault_pagination_indexes",
+    sql: "CREATE INDEX `idx_secret_vault_last_seen` ON `secret_vault` (`last_seen`,`pointer_id`);--> statement-breakpoint\nCREATE INDEX `idx_secret_vault_reuse` ON `secret_vault` (`occurrence_count`,`pointer_id`);--> statement-breakpoint\nCREATE INDEX `idx_secret_vault_deref_at` ON `secret_vault_deref` (`at`,`id`);--> statement-breakpoint\nCREATE INDEX `idx_secret_vault_deref_signal` ON `secret_vault_deref` (`at`,`id`) WHERE `reason` NOT IN ('display', 'view-render');"
   }
 ];
 
@@ -15317,7 +15324,17 @@ var Finding = external_exports.object({
 }).meta({ id: "Finding" });
 var DetectedFinding = Finding.meta({ id: "DetectedFinding" });
 var FindingAction = external_exports.enum(["blocked", "redacted", "warned", "allowed", "quarantined", "monitored"]).meta({ id: "FindingAction" });
-var FindingProvider = external_exports.enum(["claudecode", "claudedesktop", "cursor", "copilot", "chatgpt", "api"]).meta({ id: "FindingProvider" });
+var FindingProvider = external_exports.enum([
+  "claudecode",
+  "claudedesktop",
+  "cursor",
+  "copilot",
+  "chatgpt",
+  "claudeai",
+  "codex",
+  "antigravity",
+  "api"
+]).meta({ id: "FindingProvider" });
 var FindingCategory = external_exports.enum([
   "secret",
   "pii",
@@ -15371,7 +15388,16 @@ var FindingInstance = external_exports.object({
   confidence: external_exports.number().min(0).max(1),
   // Lifecycle status (see FindingStatus). Optional so legacy callers/rows
   // that predate the resolution feature stay valid.
-  status: FindingStatus.optional()
+  status: FindingStatus.optional(),
+  // The audit event this finding was captured from. Optional so callers that
+  // do not project it stay valid. An at-rest finding is content-addressed by
+  // finding_key and its row is upserted on re-detection, so this names the
+  // MOST RECENT detection event, not the first.
+  eventId: external_exports.string().optional(),
+  // The session that event belongs to, when it has one — the seam a
+  // per-instance "view session" link needs. Absent for events captured
+  // outside a session.
+  sessionId: external_exports.string().optional()
 }).meta({ id: "FindingInstance" });
 var FindingGroup = external_exports.object({
   id: external_exports.string(),
@@ -15415,7 +15441,11 @@ var FindingFacets = external_exports.object({
   // for every instance, so every group lands in a bucket; a status-less
   // group (possible only for callers whose rows carry no statuses) is
   // counted under no value.
-  status: external_exports.array(FindingFacetItem)
+  status: external_exports.array(FindingFacetItem),
+  // Host tool (attributes.tool_name). Present only on the instance-level
+  // reads, which can filter by it; the grouped read omits the dimension
+  // because a group spans tools.
+  tool: external_exports.array(FindingFacetItem).optional()
 }).meta({ id: "FindingFacets" });
 var DEFAULT_GROUPED_FINDINGS_LIMIT = 50;
 var ListGroupedFindingsQuery = external_exports.object({
@@ -15433,6 +15463,16 @@ var ListGroupedFindingsQuery = external_exports.object({
   // Scope to findings whose event carries this session id (the Activity page's
   // session → findings drilldown). Findings without a session never match.
   sessionId: external_exports.string().optional(),
+  // Inclusive lower bound on the parent event's timestamp, so a caller arriving
+  // from a time-scoped page (Activity's range) can carry that scope. Absent
+  // means all time — this list has no default window.
+  from: external_exports.iso.datetime().optional(),
+  // A group or instance id that must appear in the page even when the cursor
+  // has already advanced past its sort position. This is what keeps the
+  // Findings page's one-shot ?finding= deep link resolving once the list
+  // paginates: the target group is appended out of sort order rather than
+  // scanning forward for it. Never affects totals, facets or the cursor.
+  includeId: external_exports.string().optional(),
   groupBy: external_exports.literal("type").optional(),
   limit: external_exports.coerce.number().int().min(1).max(100).optional(),
   cursor: external_exports.string().optional()
@@ -15477,15 +15517,110 @@ var FindingInstanceDetail = FindingInstance.extend({
   detection: FindingDetectionRef,
   policy: FindingPolicyRef
 }).meta({ id: "FindingInstanceDetail" });
+var DEFAULT_FLAT_FINDINGS_LIMIT = 50;
+var ListFindingInstancesQuery = external_exports.object({
+  severity: external_exports.array(Severity).optional(),
+  // Rule ids, the same vocabulary the grouped list's `subtype` carries.
+  subtype: external_exports.array(external_exports.string()).optional(),
+  provider: external_exports.array(FindingProvider).optional(),
+  action: external_exports.array(FindingAction).optional(),
+  // Matches each instance's OWN derived status (deriveFindingStatus), unlike
+  // the grouped query's group-level fold.
+  status: external_exports.array(FindingStatus).optional(),
+  // Exact host-tool names (attributes.tool_name, e.g. 'Bash'). A real filter,
+  // where the free-text `q` can only match the rendered "via Bash" label.
+  tool: external_exports.array(external_exports.string()).optional(),
+  // Exact repository / file-path matches, for the drill-down out of the
+  // locations view. A row whose event carries no repo/file matches neither.
+  repo: external_exports.string().optional(),
+  file: external_exports.string().optional(),
+  q: external_exports.string().optional(),
+  sessionId: external_exports.string().optional(),
+  from: external_exports.iso.datetime().optional(),
+  limit: external_exports.coerce.number().int().min(1).max(200).optional(),
+  cursor: external_exports.string().optional()
+});
+var ListFindingInstancesResponse = external_exports.object({
+  // Instances matching the filters across the whole scope, not just this
+  // page — cursor-independent, like the grouped list's totals.
+  totals: external_exports.object({ findings: external_exports.number().int().nonnegative() }),
+  // Counts in INSTANCES here, where the grouped response counts groups. Each
+  // dimension still excludes its own filter.
+  facets: FindingFacets,
+  items: external_exports.array(FindingInstanceDetail),
+  nextCursor: external_exports.string().nullable()
+}).meta({ id: "ListFindingInstancesResponse" });
+var FindingLocationFile = external_exports.object({
+  // Empty when the instances carried no file path (a prompt or a tool call
+  // with no file attribution).
+  file: external_exports.string(),
+  instanceCount: external_exports.number().int().nonnegative(),
+  maxSeverity: Severity,
+  latestDetectedAt: external_exports.iso.datetime(),
+  // Folded from the instances' derived statuses with the same
+  // open-dominates precedence a group uses.
+  status: FindingStatus.optional(),
+  // Distinct rules seen at this location, capped — the row shows them as
+  // chips, and the count is what conveys scale.
+  ruleIds: external_exports.array(external_exports.string())
+}).meta({ id: "FindingLocationFile" });
+var FindingLocationRepo = external_exports.object({
+  /** Empty when the instances carried no repo attribute. */
+  repo: external_exports.string(),
+  instanceCount: external_exports.number().int().nonnegative(),
+  maxSeverity: Severity,
+  latestDetectedAt: external_exports.iso.datetime(),
+  status: FindingStatus.optional(),
+  files: external_exports.array(FindingLocationFile)
+}).meta({ id: "FindingLocationRepo" });
+var ListFindingLocationsQuery = external_exports.object({
+  severity: external_exports.array(Severity).optional(),
+  subtype: external_exports.array(external_exports.string()).optional(),
+  provider: external_exports.array(FindingProvider).optional(),
+  action: external_exports.array(FindingAction).optional(),
+  // Per-instance, as in ListFindingInstancesQuery: a location keeps the
+  // instances that match, and folds its status from those.
+  status: external_exports.array(FindingStatus).optional(),
+  tool: external_exports.array(external_exports.string()).optional(),
+  q: external_exports.string().optional(),
+  sessionId: external_exports.string().optional(),
+  from: external_exports.iso.datetime().optional(),
+  limit: external_exports.coerce.number().int().min(1).max(500).optional()
+});
+var ListFindingLocationsResponse = external_exports.object({
+  totals: external_exports.object({
+    findings: external_exports.number().int().nonnegative(),
+    repos: external_exports.number().int().nonnegative(),
+    files: external_exports.number().int().nonnegative()
+  }),
+  /** Sorted by max severity, then most recent. */
+  items: external_exports.array(FindingLocationRepo),
+  /** Whether `limit` truncated the repo list. */
+  hasMore: external_exports.boolean()
+}).meta({ id: "ListFindingLocationsResponse" });
 
 // ../../packages/schema/src/zod/harness-map.ts
-var Harness = external_exports.enum(["claudecode", "cursor", "copilot", "codex", "windsurf", "claudedesktop", "chatgpt", "api"]).meta({ id: "Harness" });
+var Harness = external_exports.enum([
+  "claudecode",
+  "cursor",
+  "copilot",
+  "codex",
+  "antigravity",
+  "windsurf",
+  "claudedesktop",
+  "chatgpt",
+  "claudeai",
+  "api"
+]).meta({ id: "Harness" });
 var TOOL_TO_HARNESS = {
   "claude-code": "claudecode",
   "claude-desktop": "claudedesktop",
   "github-copilot": "copilot",
   cursor: "cursor",
-  chatgpt: "chatgpt"
+  chatgpt: "chatgpt",
+  codex: "codex",
+  antigravity: "antigravity",
+  "claude-ai": "claudeai"
 };
 
 // ../../packages/schema/src/zod/meta.ts
@@ -15943,7 +16078,18 @@ var ActivityOverviewResponse = external_exports.object({
 // ../../packages/schema/src/zod/event.ts
 var EventKind = external_exports.enum(["prompt", "response", "code_change", "tool_use"]).meta({ id: "EventKind" });
 var CAPTURE_EVENT_TYPES_SQL = EventKind.options.map((k) => `'${k}'`).join(",");
-var SourceTool = external_exports.enum(["claude-code", "claude-desktop", "cursor", "chatgpt", "github-copilot", "cli", "unknown"]).meta({ id: "SourceTool" });
+var SourceTool = external_exports.enum([
+  "claude-code",
+  "claude-desktop",
+  "cursor",
+  "chatgpt",
+  "claude-ai",
+  "github-copilot",
+  "codex",
+  "antigravity",
+  "cli",
+  "unknown"
+]).meta({ id: "SourceTool" });
 var EventMetadata = external_exports.object({
   sessionId: external_exports.string().optional(),
   repo: external_exports.string().optional(),
@@ -16014,7 +16160,7 @@ var TrustLevel = external_exports.enum(["known-good", "risky", "unapproved"]).me
 var Flag = external_exports.enum(["update", "stale", "conflict", "unknown", "change", "untracked", "risk", "findings"]).meta({ id: "Flag" });
 var Visibility = external_exports.enum(["public", "private"]).meta({ id: "Visibility" });
 var HarnessEventKind = external_exports.enum(["block", "redact", "warn"]).meta({ id: "HarnessEventKind" });
-var HarnessId = external_exports.enum(["claudecode", "cursor", "codex"]).meta({ id: "HarnessId" });
+var HarnessId = external_exports.enum(["claudecode", "cursor", "codex", "antigravity"]).meta({ id: "HarnessId" });
 var AccessCounts = external_exports.object({
   open: external_exports.number().int().nonnegative(),
   approved: external_exports.number().int().nonnegative(),
@@ -16283,6 +16429,7 @@ var ExceptionBundleEntry = DetectionException.pick({
   useCount: true,
   conditions: true
 });
+var ExceptionDescriptor = DetectionException.omit({ valueFingerprint: true });
 
 // ../../packages/schema/src/zod/rule.ts
 var MatcherType = external_exports.enum(["keyword", "regex", "validator"]).meta({ id: "MatcherType" });
@@ -17098,6 +17245,35 @@ var EgressWriteSummary = external_exports.object({
   droppedFiles: external_exports.array(external_exports.string()).default([])
 }).meta({ id: "EgressWriteSummary" });
 
+// ../../packages/schema/src/zod/exception-action.ts
+var confirmation = external_exports.string().optional();
+var ApproveBlockedInput = external_exports.object({
+  reference: external_exports.string(),
+  scope: external_exports.string(),
+  reason: external_exports.string(),
+  confirmation
+});
+var AddExceptionInput = external_exports.object({
+  ruleId: external_exports.string(),
+  value: external_exports.string(),
+  scope: external_exports.string(),
+  reason: external_exports.string(),
+  confirmation
+});
+var GrantRevealInput = external_exports.object({
+  pointer: external_exports.string(),
+  scope: external_exports.string(),
+  justification: external_exports.string(),
+  confirmation
+});
+var RevokeExceptionInput = external_exports.object({
+  id: external_exports.string(),
+  reason: external_exports.string()
+});
+var RotateKeyInput = external_exports.object({
+  confirmation: external_exports.string()
+});
+
 // ../../packages/schema/src/zod/findings-group-build.ts
 function toApiAction(dbVal) {
   const map2 = {
@@ -17153,6 +17329,8 @@ function buildFindingGroups(rows, opts = {}) {
         repo: r.repo,
         file: r.file,
         ...r.toolName === void 0 ? {} : { toolName: r.toolName },
+        ...r.eventId === void 0 ? {} : { eventId: r.eventId },
+        ...r.sessionId === void 0 ? {} : { sessionId: r.sessionId },
         action: toApiAction(effectiveDbAction),
         detectedAt: r.occurredAt,
         confidence: r.confidence,
@@ -17284,14 +17462,17 @@ function applyFindingFilters(groups, opts) {
 }
 var SEVERITY_ORDER = { critical: 0, high: 1, medium: 2, low: 3 };
 var SEVERITY_RANK = SEVERITY_ORDER;
+function compareFindingGroupOrder(a, b) {
+  const rankA = SEVERITY_RANK[a.severity] ?? -1;
+  const rankB = SEVERITY_RANK[b.severity] ?? -1;
+  const severityDiff = rankA - rankB;
+  if (severityDiff !== 0) return severityDiff;
+  const recencyDiff = b.latestDetectedAt.localeCompare(a.latestDetectedAt);
+  if (recencyDiff !== 0) return recencyDiff;
+  return a.id.localeCompare(b.id);
+}
 function sortFindingGroups(groups) {
-  return [...groups].sort((a, b) => {
-    const rankA = SEVERITY_RANK[a.severity] ?? -1;
-    const rankB = SEVERITY_RANK[b.severity] ?? -1;
-    const severityDiff = rankA - rankB;
-    if (severityDiff !== 0) return severityDiff;
-    return b.latestDetectedAt.localeCompare(a.latestDetectedAt);
-  });
+  return [...groups].sort(compareFindingGroupOrder);
 }
 function computeFindingFacets(allGroups, opts) {
   const forSeverity = applyFindingFilters(allGroups, {
@@ -17347,15 +17528,158 @@ function computeFindingFacets(allGroups, opts) {
   for (const g of forStatus) {
     if (g.status !== void 0) statusMap.set(g.status, (statusMap.get(g.status) ?? 0) + 1);
   }
-  const toItems = (m) => [...m.entries()].map(([value, count]) => ({ value, count }));
+  const toItems2 = (m) => [...m.entries()].map(([value, count]) => ({ value, count }));
+  return {
+    severity: toItems2(severityMap),
+    provider: toItems2(providerMap),
+    action: toItems2(actionMap),
+    subtype: toItems2(subtypeMap),
+    status: toItems2(statusMap)
+  };
+}
+
+// ../../packages/schema/src/zod/findings-flat-build.ts
+function rowHaystack(row) {
+  return [
+    row.ruleId,
+    row.category,
+    row.maskedMatch,
+    row.repo,
+    row.file,
+    row.toolName ? `via ${row.toolName}` : "",
+    row.id
+  ].join(" ").toLowerCase();
+}
+function matchesDimension(row, opts, dimension) {
+  switch (dimension) {
+    case "severity":
+      return !opts.severity?.length || opts.severity.includes(row.severity);
+    case "subtype":
+      return !opts.subtype?.length || opts.subtype.includes(row.ruleId);
+    case "providers":
+      return !opts.providers?.length || opts.providers.includes(toApiProvider(row.sourceTool));
+    case "actions":
+      return !opts.actions?.length || opts.actions.includes(toApiAction(row.actionTaken));
+    case "statuses":
+      return !opts.statuses?.length || row.status !== void 0 && opts.statuses.includes(row.status);
+    case "tools":
+      return !opts.tools?.length || row.toolName !== void 0 && opts.tools.includes(row.toolName);
+    case "repo":
+      return opts.repo === void 0 || opts.repo === "" || row.repo === opts.repo;
+    case "file":
+      return opts.file === void 0 || opts.file === "" || row.file === opts.file;
+    case "q":
+      return !opts.q || rowHaystack(row).includes(opts.q.toLowerCase());
+  }
+}
+var DIMENSIONS = [
+  "severity",
+  "subtype",
+  "providers",
+  "actions",
+  "statuses",
+  "tools",
+  "repo",
+  "file",
+  "q"
+];
+function matchesInstanceFilters(row, opts, except) {
+  for (const dimension of DIMENSIONS) {
+    if (dimension === except) continue;
+    if (!matchesDimension(row, opts, dimension)) return false;
+  }
+  return true;
+}
+function toItems(counts) {
+  return [...counts.entries()].map(([value, count]) => ({ value, count })).sort((a, b) => b.count - a.count || a.value.localeCompare(b.value));
+}
+function bump(counts, value) {
+  counts.set(value, (counts.get(value) ?? 0) + 1);
+}
+function createInstanceFacetAccumulator(opts) {
+  const severity = /* @__PURE__ */ new Map();
+  const subtype = /* @__PURE__ */ new Map();
+  const provider = /* @__PURE__ */ new Map();
+  const action = /* @__PURE__ */ new Map();
+  const status = /* @__PURE__ */ new Map();
+  const tool = /* @__PURE__ */ new Map();
   return {
-    severity: toItems(severityMap),
-    provider: toItems(providerMap),
-    action: toItems(actionMap),
-    subtype: toItems(subtypeMap),
-    status: toItems(statusMap)
+    add(row) {
+      if (matchesInstanceFilters(row, opts, "severity")) bump(severity, row.severity);
+      if (matchesInstanceFilters(row, opts, "subtype")) bump(subtype, row.ruleId);
+      if (matchesInstanceFilters(row, opts, "providers")) {
+        bump(provider, toApiProvider(row.sourceTool));
+      }
+      if (matchesInstanceFilters(row, opts, "actions")) bump(action, toApiAction(row.actionTaken));
+      if (row.status !== void 0 && matchesInstanceFilters(row, opts, "statuses")) {
+        bump(status, row.status);
+      }
+      if (row.toolName !== void 0 && matchesInstanceFilters(row, opts, "tools")) {
+        bump(tool, row.toolName);
+      }
+    },
+    facets: () => ({
+      severity: toItems(severity),
+      subtype: toItems(subtype),
+      provider: toItems(provider),
+      action: toItems(action),
+      status: toItems(status),
+      tool: toItems(tool)
+    })
+  };
+}
+function toInstanceDetail(row) {
+  const category = toApiCategory(row.category);
+  return {
+    id: row.id,
+    provider: toApiProvider(row.sourceTool),
+    repo: row.repo,
+    file: row.file,
+    ...row.toolName === void 0 ? {} : { toolName: row.toolName },
+    eventId: row.eventId,
+    ...row.sessionId === void 0 ? {} : { sessionId: row.sessionId },
+    action: toApiAction(row.actionTaken),
+    detectedAt: row.occurredAt,
+    confidence: row.confidence,
+    ...row.status === void 0 ? {} : { status: row.status },
+    groupId: row.ruleId,
+    category,
+    subtype: row.ruleId,
+    severity: row.severity,
+    match: { maskedValue: row.maskedMatch, contextPrefix: "" },
+    detection: { id: row.ruleId, name: null },
+    policy: { id: `category:${category}`, name: category }
+  };
+}
+var SEVERITY_ORDER2 = {
+  critical: 0,
+  high: 1,
+  medium: 2,
+  low: 3
+};
+function newLocationAccumulator() {
+  return {
+    instanceCount: 0,
+    // Sorts after every known severity, so the first row always wins the
+    // comparison below rather than an unknown value pinning the location.
+    maxSeverityRank: Number.MAX_SAFE_INTEGER,
+    maxSeverity: "low",
+    latestDetectedAt: "",
+    statuses: [],
+    ruleIds: /* @__PURE__ */ new Set()
   };
 }
+function addToLocation(acc, row) {
+  acc.instanceCount += 1;
+  const rank = SEVERITY_ORDER2[row.severity] ?? Number.MAX_SAFE_INTEGER - 1;
+  if (rank < acc.maxSeverityRank) {
+    acc.maxSeverityRank = rank;
+    acc.maxSeverity = row.severity;
+  }
+  if (row.occurredAt > acc.latestDetectedAt) acc.latestDetectedAt = row.occurredAt;
+  acc.statuses.push(row.status);
+  acc.ruleIds.add(row.ruleId);
+}
 
 // ../../packages/schema/src/zod/installed-pack.ts
 var InstalledPack = external_exports.object({
@@ -17492,6 +17816,50 @@ var VaultInventoryEntry = external_exports.object({
   revealGrantId: external_exports.string().nullable(),
   sightings: external_exports.array(VaultSighting)
 });
+var DEFAULT_VAULT_INVENTORY_LIMIT = 50;
+var DEFAULT_VAULT_DEREFS_LIMIT = 50;
+var MAX_VAULT_PAGE_LIMIT = 200;
+var ListVaultInventoryQuery = external_exports.object({
+  limit: external_exports.coerce.number().int().min(1).max(MAX_VAULT_PAGE_LIMIT).optional(),
+  // Opaque; names the last row of the page just served.
+  cursor: external_exports.string().optional()
+});
+var ListVaultInventoryResponse = external_exports.object({
+  // Vaulted values across the whole store, not just this page — cursor-
+  // independent, so paging never changes what the count claims.
+  totals: external_exports.object({ values: external_exports.number().int().nonnegative() }),
+  items: external_exports.array(VaultInventoryEntry),
+  // `null` once the last page is reached.
+  nextCursor: external_exports.string().nullable()
+});
+var ListVaultReuseQuery = external_exports.object({
+  limit: external_exports.coerce.number().int().min(1).max(MAX_VAULT_PAGE_LIMIT).optional(),
+  cursor: external_exports.string().optional()
+});
+var ListVaultReuseResponse = external_exports.object({
+  // Reused values across the whole store — the number the section's claim
+  // ("values detected in more than one place") is about.
+  totals: external_exports.object({ reused: external_exports.number().int().nonnegative() }),
+  items: external_exports.array(VaultInventoryEntry),
+  nextCursor: external_exports.string().nullable()
+});
+var ListVaultDerefsQuery = external_exports.object({
+  // Include the batched, high-volume reasons (display, view-render). Omitted
+  // hides them and counts them into `hiddenBatched` instead, so the model
+  // crossings stay visible. A real boolean, not `z.stringbool()`: this arrives
+  // over a Server Action, which preserves the type, never as a URL param.
+  includeBatched: external_exports.boolean().optional(),
+  limit: external_exports.coerce.number().int().min(1).max(MAX_VAULT_PAGE_LIMIT).optional(),
+  cursor: external_exports.string().optional()
+});
+var ListVaultDerefsResponse = external_exports.object({
+  items: external_exports.array(VaultDeref),
+  nextCursor: external_exports.string().nullable(),
+  // Display/view-render rows the query hid, over the WHOLE trail rather than
+  // this page — it is the count the "N hidden" line and its toggle speak for.
+  // Always 0 when `includeBatched` was set, since nothing was hidden.
+  hiddenBatched: external_exports.number().int().nonnegative()
+});
 var VaultKeyCustody = external_exports.string();
 var VaultInlineReveal = external_exports.enum(["masked", "full", "off"]);
 var VaultConsent = external_exports.object({
@@ -17868,7 +18236,7 @@ var TopSourcesQuery = external_exports.object({
   // Omit for both kinds.
   kind: external_exports.enum(SOURCE_KINDS).optional()
 });
-var Provider = external_exports.enum(["claudecode", "cursor", "codex", "chatgpt", "copilot", "api"]).meta({ id: "Provider" });
+var Provider = external_exports.enum(["claudecode", "cursor", "codex", "antigravity", "claudeai", "chatgpt", "copilot", "api"]).meta({ id: "Provider" });
 var ScanCoverageProvider = external_exports.object({
   provider: Provider,
   // Percent of that provider's traffic scanned in the window. 0 when unsupported.
@@ -18110,6 +18478,138 @@ function captureId(sessionId, contentHash, filePath = null) {
   );
 }
 
+// ../../packages/persistence/src/internal/snapshot.ts
+import { randomUUID } from "crypto";
+import { existsSync, readdirSync, renameSync as renameSync2, rmSync as rmSync2, statSync } from "fs";
+import { basename, dirname, join } from "path";
+
+// ../../packages/persistence/src/paths.ts
+import {
+  chmodSync,
+  linkSync,
+  lstatSync,
+  mkdirSync,
+  renameSync,
+  rmSync,
+  writeFileSync
+} from "fs";
+import { threadId } from "worker_threads";
+var DATA_DIR_MODE = 448;
+var DATA_FILE_MODE = 384;
+var DB_FILENAME = "aka.db";
+function isSymlink(path) {
+  try {
+    return lstatSync(path).isSymbolicLink();
+  } catch {
+    return false;
+  }
+}
+function chmodBestEffort(path, mode) {
+  if (isSymlink(path)) return;
+  try {
+    chmodSync(path, mode);
+  } catch {
+  }
+}
+function tightenDir(dir) {
+  chmodBestEffort(dir, DATA_DIR_MODE);
+}
+function ensureDataDirSync(dir) {
+  mkdirSync(dir, { recursive: true, mode: DATA_DIR_MODE });
+  tightenDir(dir);
+}
+function dbSidecars(file2) {
+  return [`${file2}-wal`, `${file2}-shm`, `${file2}-journal`];
+}
+function tightenFile(file2) {
+  chmodBestEffort(file2, DATA_FILE_MODE);
+}
+function tightenPerms(file2) {
+  for (const path of [file2, ...dbSidecars(file2)]) chmodBestEffort(path, DATA_FILE_MODE);
+}
+
+// ../../packages/persistence/src/internal/snapshot.ts
+function backupPath(file2, tag) {
+  return `${file2}.${tag}.${String(Date.now())}.${randomUUID().slice(0, 8)}.bak`;
+}
+var STALE_PARTIAL_MS = 5 * 6e4;
+function reapStalePartials(file2) {
+  const dir = dirname(file2);
+  const prefix = `${basename(file2)}.`;
+  let entries;
+  try {
+    entries = readdirSync(dir);
+  } catch {
+    return;
+  }
+  for (const name of entries) {
+    if (!name.startsWith(prefix) || !name.endsWith(".bak.partial")) continue;
+    const partial2 = join(dir, name);
+    try {
+      if (Date.now() - statSync(partial2).mtimeMs > STALE_PARTIAL_MS) {
+        rmSync2(partial2, { force: true });
+      }
+    } catch {
+    }
+  }
+}
+function snapshotStore(db, backup) {
+  const partial2 = `${backup}.partial`;
+  try {
+    rmSync2(partial2, { force: true });
+    db.prepare("VACUUM INTO ?").run(partial2);
+    tightenFile(partial2);
+    renameSync2(partial2, backup);
+  } catch (error51) {
+    try {
+      rmSync2(partial2, { force: true });
+    } catch {
+    }
+    throw error51;
+  }
+}
+function moveStoreAside(file2, backup) {
+  const undo = [];
+  renameSync2(file2, backup);
+  undo.push([backup, file2]);
+  try {
+    for (const sidecar of dbSidecars(file2)) {
+      const moved = `${backup}${sidecar.slice(file2.length)}`;
+      try {
+        renameSync2(sidecar, moved);
+        undo.push([moved, sidecar]);
+      } catch {
+        rmSync2(sidecar, { force: true });
+      }
+    }
+  } catch (error51) {
+    for (const [from, to] of undo.reverse()) {
+      try {
+        renameSync2(from, to);
+      } catch {
+      }
+    }
+    throw error51;
+  }
+  tightenPerms(backup);
+}
+function discardStore(file2, backup) {
+  try {
+    rmSync2(file2, { force: true });
+    for (const sidecar of dbSidecars(file2)) {
+      rmSync2(sidecar, { force: true });
+    }
+  } catch (error51) {
+    if (existsSync(file2)) {
+      try {
+        rmSync2(backup, { force: true });
+      } catch {
+      }
+    }
+    throw error51;
+  }
+}
+
 // ../../packages/persistence/src/internal/sql-text.ts
 function escapeLikePattern(s) {
   return s.replace(/\\/g, "\\\\").replace(/%/g, "\\%").replace(/_/g, "\\_");
@@ -18251,38 +18751,6 @@ function mapRowsTolerant(rows, map2) {
   return out;
 }
 
-// ../../packages/persistence/src/paths.ts
-import { chmodSync, lstatSync, mkdirSync, renameSync, rmSync, writeFileSync } from "fs";
-var DATA_DIR_MODE = 448;
-var DATA_FILE_MODE = 384;
-var DB_FILENAME = "aka.db";
-function chmodBestEffort(path, mode) {
-  try {
-    chmodSync(path, mode);
-  } catch {
-  }
-}
-function tightenDir(dir) {
-  chmodBestEffort(dir, DATA_DIR_MODE);
-}
-function ensureDataDirSync(dir) {
-  mkdirSync(dir, { recursive: true, mode: DATA_DIR_MODE });
-  tightenDir(dir);
-}
-function dbSidecars(file2) {
-  return [`${file2}-wal`, `${file2}-shm`, `${file2}-journal`];
-}
-function tightenFile(file2) {
-  try {
-    if (lstatSync(file2).isSymbolicLink()) return;
-  } catch {
-  }
-  chmodBestEffort(file2, DATA_FILE_MODE);
-}
-function tightenPerms(file2) {
-  for (const path of [file2, ...dbSidecars(file2)]) chmodBestEffort(path, DATA_FILE_MODE);
-}
-
 // ../../packages/persistence/src/migrations.ts
 function describeObject(object2) {
   return object2.kind === "column" ? `column ${object2.table}.${object2.name}` : `table ${object2.name}`;
@@ -18398,9 +18866,9 @@ function applyLegacyDropMigration(db, file2) {
   }
 }
 function backupBeforeLegacyDrop(db, file2) {
-  const backup = `${file2}.pre-drop.${String(Date.now())}.bak`;
-  db.prepare("VACUUM INTO ?").run(backup);
-  tightenFile(backup);
+  reapStalePartials(file2);
+  const backup = backupPath(file2, "pre-drop");
+  snapshotStore(db, backup);
   return backup;
 }
 var TOKEN_USAGE_COLUMNS = [
@@ -18744,6 +19212,25 @@ function parseJsonObject(s) {
   return void 0;
 }
 
+// ../../packages/persistence/src/internal/keyset-cursor.ts
+function encodeKeysetCursor(payload) {
+  return Buffer.from(JSON.stringify(payload)).toString("base64url");
+}
+function decodeKeysetCursor(cursor) {
+  const parsed = parseJsonObject(Buffer.from(cursor, "base64url").toString("utf8"));
+  if (parsed !== void 0 && "startedAtMs" in parsed && "id" in parsed && // `Number.isInteger`, not `typeof === 'number'`. Every timestamp this
+  // resumes from is epoch millis, and a payload carrying ±Infinity or a
+  // fraction binds cleanly rather than failing — returning an EMPTY page with
+  // a null cursor, which a caller reads as "end of list". That is the one
+  // outcome a cursor that does not decode must never produce, since the
+  // documented behaviour above is to restart from the top. (`1e999` is valid
+  // JSON and parses to Infinity; a bare `NaN` is not, so it cannot arrive.)
+  Number.isInteger(parsed.startedAtMs) && typeof parsed.id === "string") {
+    return parsed;
+  }
+  return null;
+}
+
 // ../../packages/persistence/src/repositories/activity.ts
 var DAY_MS = 864e5;
 var LIVE_ACTIVITY_WINDOW_MS = 30 * 6e4;
@@ -18789,16 +19276,6 @@ function utcWindow(nowMs) {
   const startMs = Math.floor(nowMs / DAY_MS) * DAY_MS;
   return { startMs, endMs: startMs + DAY_MS };
 }
-function encodeCursor(payload) {
-  return Buffer.from(JSON.stringify(payload)).toString("base64url");
-}
-function decodeCursor(cursor) {
-  const parsed = parseJsonObject(Buffer.from(cursor, "base64url").toString("utf8"));
-  if (parsed !== void 0 && "startedAtMs" in parsed && "id" in parsed && typeof parsed.startedAtMs === "number" && typeof parsed.id === "string") {
-    return parsed;
-  }
-  return null;
-}
 var DB_EVENT_TYPE_TO_KIND = {
   session: "session",
   prompt: "prompt",
@@ -18943,7 +19420,7 @@ var SqliteActivityRepository = class {
     return Promise.resolve({ sessionsToday, liveNow, toolCallsToday, findingsToday, egressToday });
   }
   listSessions(query) {
-    const cursor = query.cursor ? decodeCursor(query.cursor) : null;
+    const cursor = query.cursor ? decodeKeysetCursor(query.cursor) : null;
     const toMs = query.to ? isoToEpochMillis(query.to) : this.now();
     const fromMs = query.from ? isoToEpochMillis(query.from) : void 0;
     const conditions = [SESSION_ROOT];
@@ -19017,7 +19494,7 @@ var SqliteActivityRepository = class {
       )
     );
     const last = page[page.length - 1];
-    const nextCursor = hasMore && last ? encodeCursor({ startedAtMs: last.started_at, id: last.id }) : null;
+    const nextCursor = hasMore && last ? encodeKeysetCursor({ startedAtMs: last.started_at, id: last.id }) : null;
     return Promise.resolve({ items, nextCursor, emptyCount });
   }
   getSession(sessionId) {
@@ -19890,7 +20367,7 @@ var SqliteEventsRepository = class {
 };
 
 // ../../packages/persistence/src/repositories/exceptions.ts
-import { randomUUID } from "crypto";
+import { randomUUID as randomUUID2 } from "crypto";
 
 // ../../packages/persistence/src/internal/sqlite-errors.ts
 var SQLITE_CONSTRAINT_UNIQUE = 2067;
@@ -19926,8 +20403,9 @@ var ACTIVE_REVEAL_GRANT_PREDICATE = `capability = 'reveal_to_model'
      AND conditions IS NULL
      AND ${ACTIVE_PREDICATE}`;
 var SqliteExceptionsRepository = class {
-  constructor(db) {
+  constructor(db, now = () => Date.now()) {
     this.db = db;
+    this.now = now;
     this.consumeStmt = db.prepare(
       `UPDATE exceptions
           SET use_count = use_count + 1, last_used_at = :now, updated_at = :now
@@ -19945,6 +20423,7 @@ var SqliteExceptionsRepository = class {
     );
   }
   db;
+  now;
   consumeStmt;
   insertBlockedStmt;
   sweepBlockedStmt;
@@ -19971,8 +20450,8 @@ var SqliteExceptionsRepository = class {
         "provider conditions are not supported yet \u2014 a grant with one would never apply"
       );
     }
-    const id = randomUUID();
-    const now = Date.now();
+    const id = randomUUID2();
+    const now = this.now();
     try {
       this.insertExceptionRow(id, input, now);
     } catch (err) {
@@ -20050,7 +20529,7 @@ var SqliteExceptionsRepository = class {
     const where = opts?.includeTerminal ? "" : `WHERE ${ACTIVE_PREDICATE}`;
     const rows = allRows(
       this.db.prepare(`SELECT * FROM exceptions ${where} ORDER BY created_at DESC, rowid DESC`),
-      opts?.includeTerminal ? {} : { now: Date.now() }
+      opts?.includeTerminal ? {} : { now: this.now() }
     );
     const exceptions = mapRowsTolerant(rows, parseExceptionRow);
     return Promise.resolve(exceptions);
@@ -20085,7 +20564,7 @@ var SqliteExceptionsRepository = class {
    * already revoked.
    */
   revoke(id, revokedBy, reason) {
-    const now = Date.now();
+    const now = this.now();
     const result = this.db.prepare(
       `UPDATE exceptions
             SET revoked_at = :now, revoked_by = :revokedBy, revoke_reason = :reason, updated_at = :now
@@ -20099,7 +20578,7 @@ var SqliteExceptionsRepository = class {
    * callers must treat identically — means it does not and the detection is
    * enforced as usual. Deliberately NOT wrapped in try/catch.
    */
-  consume(id, now = Date.now()) {
+  consume(id, now = this.now()) {
     const result = this.consumeStmt.run({ id, now });
     return Promise.resolve(Number(result.changes) === 1);
   }
@@ -20108,7 +20587,7 @@ var SqliteExceptionsRepository = class {
    * version — what rides the policy bundle to the hook. Grants written under
    * a different (rotated-away) key never match, so they are excluded at read.
    */
-  activeBundleEntries(keyVersion, now = Date.now()) {
+  activeBundleEntries(keyVersion, now = this.now()) {
     const rows = allRows(
       this.db.prepare(
         `SELECT * FROM exceptions
@@ -20140,7 +20619,7 @@ var SqliteExceptionsRepository = class {
    * than the retention window on every write, so the ledger self-limits.
    */
   recordBlocked(entry) {
-    const now = Date.now();
+    const now = this.now();
     this.sweepBlockedStmt.run({ cutoff: now - BLOCKED_DETECTIONS_RETENTION_MS });
     this.insertBlockedStmt.run({
       reference: entry.reference,
@@ -20163,7 +20642,7 @@ var SqliteExceptionsRepository = class {
           WHERE blocked_at > :cutoff
           ORDER BY blocked_at DESC, rowid DESC`
       ),
-      { cutoff: Date.now() - windowMs }
+      { cutoff: this.now() - windowMs }
     );
     return Promise.resolve(
       rows.map((row) => ({
@@ -20191,8 +20670,9 @@ var SqliteExceptionsRepository = class {
    * evaluate conditions, and a narrowing clause that is ignored would WIDEN the
    * grant instead. Fail closed until reveal-side condition evaluation exists.
    */
-  activeRevealGrant(ruleId, valueFingerprint, keyVersion, now = Date.now()) {
+  activeRevealGrant(ruleId, valueFingerprint, keyVersion, now) {
     try {
+      const at = now ?? this.now();
       const row = getRow(
         this.db.prepare(
           `SELECT id FROM exceptions
@@ -20201,7 +20681,7 @@ var SqliteExceptionsRepository = class {
               AND ${ACTIVE_REVEAL_GRANT_PREDICATE}
             LIMIT 1`
         ),
-        { ruleId, valueFingerprint, keyVersion, now }
+        { ruleId, valueFingerprint, keyVersion, now: at }
       );
       return Promise.resolve(row ?? null);
     } catch (err) {
@@ -20215,7 +20695,7 @@ var SqliteExceptionsRepository = class {
    * predicate, so correctness never depends on this sweep; it only bounds how
    * long the audit evidence is kept locally. Returns the deleted count.
    */
-  sweepTerminal(retentionMs, now = Date.now()) {
+  sweepTerminal(retentionMs, now = this.now()) {
     const result = this.db.prepare(
       `DELETE FROM exceptions
           WHERE updated_at < :cutoff
@@ -20278,6 +20758,23 @@ var LATEST_RESOLUTION_BY_KEY_SQL = `(
 
 // ../../packages/persistence/src/repositories/findings.ts
 var PREVIEW_INSTANCES_PER_GROUP = 200;
+var SCAN_BATCH_ROWS = 1e3;
+var DEFAULT_LOCATIONS_LIMIT = 100;
+var LOCATION_RULE_IDS_CAP = 20;
+function compareLocationOrder(a, b) {
+  return compareFindingGroupOrder(
+    {
+      severity: a.maxSeverity,
+      latestDetectedAt: a.latestDetectedAt,
+      id: ""
+    },
+    {
+      severity: b.maxSeverity,
+      latestDetectedAt: b.latestDetectedAt,
+      id: ""
+    }
+  );
+}
 var CONCAT_SEP = ",";
 var TUPLE_SEP = "|";
 function splitConcat(value) {
@@ -20290,6 +20787,33 @@ function deriveInstanceStatus(row) {
     latestResolutionStatus: row.latest_status
   });
 }
+function encodeGroupCursor(group) {
+  const payload = {
+    sev: group.severity,
+    t: group.latestDetectedAt,
+    id: group.id
+  };
+  return Buffer.from(JSON.stringify(payload)).toString("base64url");
+}
+function decodeGroupCursor(cursor) {
+  const parsed = parseJsonObject(Buffer.from(cursor, "base64url").toString("utf8"));
+  if (parsed !== void 0 && typeof parsed.sev === "string" && typeof parsed.t === "string" && typeof parsed.id === "string") {
+    return {
+      severity: parsed.sev,
+      latestDetectedAt: parsed.t,
+      id: parsed.id
+    };
+  }
+  return null;
+}
+function firstAfter(sorted, cursor) {
+  const index = sorted.findIndex((g) => compareFindingGroupOrder(g, cursor) > 0);
+  return index === -1 ? sorted.length : index;
+}
+function findDeepLinked(sorted, page, id) {
+  if (page.some((g) => g.id === id || g.instances.some((i) => i.id === id))) return void 0;
+  return sorted.find((g) => g.id === id || g.instances.some((i) => i.id === id));
+}
 var DAY_MS3 = 864e5;
 var SqliteFindingsRepository = class {
   constructor(db) {
@@ -20399,8 +20923,13 @@ var SqliteFindingsRepository = class {
    */
   listGroupedFindings(query) {
     const sessionPredicate = query.sessionId ? ` AND e.root_session_id = :sessionId` : "";
-    const predicate = `WHERE e.event_type IN (${CAPTURE_EVENT_TYPES_SQL})${sessionPredicate}`;
-    const sessionParams = query.sessionId ? { sessionId: query.sessionId } : {};
+    const fromMs = query.from === void 0 ? void 0 : isoToEpochMillis(query.from);
+    const fromPredicate = fromMs === void 0 ? "" : ` AND e.started_at >= :fromMs`;
+    const predicate = `WHERE e.event_type IN (${CAPTURE_EVENT_TYPES_SQL})${sessionPredicate}${fromPredicate}`;
+    const sessionParams = {
+      ...query.sessionId ? { sessionId: query.sessionId } : {},
+      ...fromMs === void 0 ? {} : { fromMs }
+    };
     const aggregates = this.groupAggregates(query.q !== void 0 && query.q !== "", {
       predicate,
       params: sessionParams
@@ -20408,7 +20937,8 @@ var SqliteFindingsRepository = class {
     const rows = allRows(
       this.db.prepare(
         `SELECT id, rule_id, category, severity, masked_match, action_taken, confidence,
-                occurred_at, source_tool, repo, file, tool_name, kind, finding_key, latest_status
+                occurred_at, source_tool, repo, file, tool_name, event_id, session_id,
+                kind, finding_key, latest_status
          FROM (
            SELECT f.id AS id, d.rule_id AS rule_id, d.category AS category,
                   d.severity AS severity, f.masked_match AS masked_match,
@@ -20418,6 +20948,7 @@ var SqliteFindingsRepository = class {
                   json_extract(e.attributes, '$.repo') AS repo,
                   json_extract(e.attributes, '$.file_path') AS file,
                   json_extract(e.attributes, '$.tool_name') AS tool_name,
+                  f.audit_event_id AS event_id, e.root_session_id AS session_id,
                   e.event_type AS kind, f.finding_key AS finding_key,
                   latest.status AS latest_status,
                   ROW_NUMBER() OVER (
@@ -20449,6 +20980,8 @@ var SqliteFindingsRepository = class {
       repo: r.repo ?? "",
       file: r.file ?? "",
       ...r.tool_name === null ? {} : { toolName: r.tool_name },
+      eventId: r.event_id,
+      ...r.session_id === null ? {} : { sessionId: r.session_id },
       status: deriveInstanceStatus(r)
     }));
     const allGroups = buildFindingGroups(groupable, { aggregates });
@@ -20472,18 +21005,23 @@ var SqliteFindingsRepository = class {
       groups: sorted.length
     };
     const limit = query.limit ?? DEFAULT_GROUPED_FINDINGS_LIMIT;
+    const cursor = query.cursor === void 0 ? null : decodeGroupCursor(query.cursor);
+    const start = cursor === null ? 0 : firstAfter(sorted, cursor);
+    const page = sorted.slice(start, start + limit);
+    const lastOnPage = page.at(-1);
+    const nextCursor = start + limit < sorted.length && lastOnPage ? encodeGroupCursor(lastOnPage) : null;
+    const deepLinked = query.includeId === void 0 || query.includeId === "" ? void 0 : findDeepLinked(sorted, page, query.includeId);
     const statusSet = statusFilter.length > 0 ? new Set(statusFilter) : null;
-    const items = sorted.slice(0, limit).map(
-      (g) => statusSet ? {
-        ...g,
-        instances: g.instances.filter((i) => i.status !== void 0 && statusSet.has(i.status))
-      } : g
-    );
+    const narrow = (g) => statusSet ? {
+      ...g,
+      instances: g.instances.filter((i) => i.status !== void 0 && statusSet.has(i.status))
+    } : g;
+    const items = [...page, ...deepLinked ? [deepLinked] : []].map(narrow);
     return Promise.resolve({
       totals,
       facets,
       items,
-      nextCursor: null,
+      nextCursor,
       ...query.sessionId ? { sessionFirings: this.sessionFirings(query.sessionId) } : {}
     });
   }
@@ -20515,14 +21053,274 @@ var SqliteFindingsRepository = class {
    * request actually carries a `q`. (Substring matching is unaffected by a
    * path repeating across tuples.)
    */
-  groupAggregates(withSearchText, scope) {
-    const innerSearchColumns = withSearchText ? `, group_concat(DISTINCT json_extract(e.attributes, '$.repo')) AS repos,
-           group_concat(DISTINCT json_extract(e.attributes, '$.file_path')) AS files,
-           group_concat(DISTINCT 'via ' || json_extract(e.attributes, '$.tool_name')) AS tool_names` : `, NULL AS repos, NULL AS files, NULL AS tool_names`;
-    const rows = this.db.prepare(
-      `SELECT rule_id,
-                sum(tuple_count) AS instance_count,
-                max(latest_at) AS latest_at,
+  /**
+   * The instance-level (flat) findings list: one row per finding, newest first,
+   * paged by keyset.
+   *
+   * SQL owns SCOPE, JS owns every FILTER DIMENSION. The session and the time
+   * bound are SQL predicates: nothing counts them, so narrowing the scan by
+   * them changes no reported number. Severity, subtype, provider, action,
+   * status, tool, repo, file and `q` all stay in JS — each has a facet, and a
+   * facet excludes its own filter, so a row the filter rejects still has to be
+   * counted. Pushing any of them into SQL would silently empty its own facet.
+   * Several could not be expressed there anyway: status comes from the one
+   * shared classifier (deriveFindingStatus), and provider 'api' means "a tool
+   * none of the mappers names", which no IN-list can say.
+   *
+   * The scan runs from the top of the scope on every request, not from the
+   * cursor: `totals` and `facets` describe the whole filtered scope and must not
+   * move as the caller pages. Rows are pulled in batches so memory stays flat
+   * while the counting runs, and only the page itself is retained.
+   */
+  listFindingInstances(query) {
+    const opts = {
+      severity: query.severity,
+      subtype: query.subtype,
+      providers: query.provider,
+      actions: query.action,
+      statuses: query.status,
+      tools: query.tool,
+      repo: query.repo,
+      file: query.file,
+      q: query.q
+    };
+    const limit = query.limit ?? DEFAULT_FLAT_FINDINGS_LIMIT;
+    const cursor = query.cursor === void 0 ? null : decodeKeysetCursor(query.cursor);
+    const accumulator = createInstanceFacetAccumulator(opts);
+    const items = [];
+    let total = 0;
+    let last;
+    let hasMore = false;
+    for (const row of this.scanFindingRows({
+      sessionId: query.sessionId,
+      from: query.from
+    })) {
+      accumulator.add(row);
+      if (!matchesInstanceFilters(row, opts)) continue;
+      total += 1;
+      if (items.length < limit) {
+        items.push(toInstanceDetail(row));
+        last = row;
+      } else {
+        hasMore = true;
+      }
+    }
+    const nextCursor = hasMore && last ? encodeKeysetCursor({ startedAtMs: isoToEpochMillis(last.occurredAt), id: last.id }) : null;
+    if (cursor !== null) {
+      const resumed = this.pageAfter(cursor, opts, limit, query);
+      return Promise.resolve({
+        totals: { findings: total },
+        facets: accumulator.facets(),
+        items: resumed.items,
+        nextCursor: resumed.nextCursor
+      });
+    }
+    return Promise.resolve({
+      totals: { findings: total },
+      facets: accumulator.facets(),
+      items,
+      nextCursor
+    });
+  }
+  /**
+   * The page of matching rows strictly after `cursor`. Separate from the
+   * counting pass because that one starts at the top of the scope by design;
+   * this one narrows the scan with the same keyset predicate the activity list
+   * uses, so a later page costs less than the first rather than more.
+   */
+  pageAfter(cursor, opts, limit, query) {
+    const items = [];
+    let last;
+    let hasMore = false;
+    for (const row of this.scanFindingRows({
+      sessionId: query.sessionId,
+      from: query.from,
+      after: cursor
+    })) {
+      if (!matchesInstanceFilters(row, opts)) continue;
+      if (items.length < limit) {
+        items.push(toInstanceDetail(row));
+        last = row;
+      } else {
+        hasMore = true;
+        break;
+      }
+    }
+    return {
+      items,
+      nextCursor: hasMore && last ? encodeKeysetCursor({ startedAtMs: isoToEpochMillis(last.occurredAt), id: last.id }) : null
+    };
+  }
+  /**
+   * The same findings folded by location: repository, then file within it.
+   *
+   * The grouping keys come from the capturing event's attributes, which is what
+   * the local store relates a finding to — there is no finding↔asset row to
+   * group by instead. A repo or file the event did not record folds into the
+   * empty-string bucket, which the view renders but does not link, since no
+   * filter can name it.
+   */
+  listFindingLocations(query) {
+    const opts = {
+      severity: query.severity,
+      subtype: query.subtype,
+      providers: query.provider,
+      actions: query.action,
+      statuses: query.status,
+      tools: query.tool,
+      q: query.q
+    };
+    const limit = query.limit ?? DEFAULT_LOCATIONS_LIMIT;
+    const byRepo = /* @__PURE__ */ new Map();
+    let total = 0;
+    for (const row of this.scanFindingRows({
+      sessionId: query.sessionId,
+      from: query.from
+    })) {
+      if (!matchesInstanceFilters(row, opts)) continue;
+      total += 1;
+      let files = byRepo.get(row.repo);
+      if (files === void 0) {
+        files = /* @__PURE__ */ new Map();
+        byRepo.set(row.repo, files);
+      }
+      let acc = files.get(row.file);
+      if (acc === void 0) {
+        acc = newLocationAccumulator();
+        files.set(row.file, acc);
+      }
+      addToLocation(acc, row);
+    }
+    let fileCount = 0;
+    const repos = [...byRepo.entries()].map(([repo, files]) => {
+      fileCount += files.size;
+      const fileRows = [...files.entries()].map(([file2, acc]) => ({
+        file: file2,
+        instanceCount: acc.instanceCount,
+        maxSeverity: acc.maxSeverity,
+        latestDetectedAt: acc.latestDetectedAt,
+        ...foldGroupStatus(acc.statuses) === void 0 ? {} : { status: foldGroupStatus(acc.statuses) },
+        ruleIds: [...acc.ruleIds].slice(0, LOCATION_RULE_IDS_CAP)
+      })).sort(compareLocationOrder);
+      const rollup = fileRows.reduce(
+        (a, f) => ({
+          instanceCount: a.instanceCount + f.instanceCount,
+          maxSeverity: compareLocationOrder(f, a) < 0 ? f.maxSeverity : a.maxSeverity,
+          latestDetectedAt: f.latestDetectedAt > a.latestDetectedAt ? f.latestDetectedAt : a.latestDetectedAt
+        }),
+        {
+          instanceCount: 0,
+          maxSeverity: fileRows[0]?.maxSeverity ?? "low",
+          latestDetectedAt: ""
+        }
+      );
+      const statuses = fileRows.map((f) => f.status);
+      const folded = foldGroupStatus(statuses);
+      return {
+        repo,
+        instanceCount: rollup.instanceCount,
+        maxSeverity: rollup.maxSeverity,
+        latestDetectedAt: rollup.latestDetectedAt,
+        ...folded === void 0 ? {} : { status: folded },
+        files: fileRows
+      };
+    });
+    repos.sort(compareLocationOrder);
+    return Promise.resolve({
+      totals: { findings: total, repos: repos.length, files: fileCount },
+      items: repos.slice(0, limit),
+      hasMore: repos.length > limit
+    });
+  }
+  /**
+   * Every finding in scope as a FlatFindingRow, newest first, pulled in batches.
+   *
+   * A generator so a caller streams the scope without it ever being an array:
+   * the flat list counts and facets the whole filtered scope, which on a large
+   * store is far more rows than any page. Each batch advances the same keyset
+   * predicate the page read uses, so the scan is a sequence of bounded reads
+   * rather than one unbounded result set.
+   *
+   * The latest-resolution lookup is the CORRELATED form, not the derived table
+   * the grouped path joins: only `status` is needed, idx_finding_resolution_key
+   * makes it a point lookup per row, and the derived table would re-materialize
+   * a window over the whole resolution table once per batch.
+   *
+   * `scope` carries ONLY what no facet counts. A filter dimension narrowed here
+   * would be missing from its own facet, which is computed by excluding that
+   * dimension — see listFindingInstances.
+   */
+  *scanFindingRows(scope) {
+    const conditions = [`e.event_type IN (${CAPTURE_EVENT_TYPES_SQL})`];
+    const params = [];
+    if (scope.sessionId !== void 0 && scope.sessionId !== "") {
+      conditions.push("e.root_session_id = ?");
+      params.push(scope.sessionId);
+    }
+    if (scope.from !== void 0) {
+      conditions.push("e.started_at >= ?");
+      params.push(isoToEpochMillis(scope.from));
+    }
+    const sql = `SELECT f.id AS id, d.rule_id AS rule_id, d.category AS category,
+              d.severity AS severity, f.masked_match AS masked_match,
+              f.action_taken AS action_taken, f.confidence AS confidence,
+              e.started_at AS occurred_at,
+              json_extract(e.attributes, '$.source_tool') AS source_tool,
+              json_extract(e.attributes, '$.repo') AS repo,
+              json_extract(e.attributes, '$.file_path') AS file,
+              json_extract(e.attributes, '$.tool_name') AS tool_name,
+              f.audit_event_id AS event_id, e.root_session_id AS session_id,
+              e.event_type AS kind, f.finding_key AS finding_key,
+              ${latestResolutionStatusSql("f")} AS latest_status
+         FROM inspection_findings f
+         JOIN audit_events e ON e.id = f.audit_event_id
+         JOIN inspection_definitions d ON d.id = f.inspection_definition_id
+        WHERE ${conditions.join(" AND ")}
+          AND (e.started_at < ? OR (e.started_at = ? AND f.id < ?))
+        ORDER BY e.started_at DESC, f.id DESC
+        LIMIT ?`;
+    let after = scope.after ?? { startedAtMs: Number.MAX_SAFE_INTEGER, id: "\uFFFF" };
+    for (; ; ) {
+      const rows = allRows(this.db.prepare(sql), [
+        ...params,
+        after.startedAtMs,
+        after.startedAtMs,
+        after.id,
+        SCAN_BATCH_ROWS
+      ]);
+      for (const r of rows) {
+        yield {
+          id: r.id,
+          ruleId: r.rule_id,
+          category: r.category,
+          severity: r.severity,
+          maskedMatch: r.masked_match,
+          actionTaken: r.action_taken,
+          confidence: r.confidence,
+          occurredAt: epochMillisToIso(r.occurred_at),
+          sourceTool: r.source_tool,
+          repo: r.repo ?? "",
+          file: r.file ?? "",
+          ...r.tool_name === null ? {} : { toolName: r.tool_name },
+          eventId: r.event_id,
+          ...r.session_id === null ? {} : { sessionId: r.session_id },
+          status: deriveInstanceStatus(r)
+        };
+      }
+      if (rows.length < SCAN_BATCH_ROWS) return;
+      const lastRow = rows[rows.length - 1];
+      if (lastRow === void 0) return;
+      after = { startedAtMs: lastRow.occurred_at, id: lastRow.id };
+    }
+  }
+  groupAggregates(withSearchText, scope) {
+    const innerSearchColumns = withSearchText ? `, group_concat(DISTINCT json_extract(e.attributes, '$.repo')) AS repos,
+           group_concat(DISTINCT json_extract(e.attributes, '$.file_path')) AS files,
+           group_concat(DISTINCT 'via ' || json_extract(e.attributes, '$.tool_name')) AS tool_names` : `, NULL AS repos, NULL AS files, NULL AS tool_names`;
+    const rows = this.db.prepare(
+      `SELECT rule_id,
+                sum(tuple_count) AS instance_count,
+                max(latest_at) AS latest_at,
                 group_concat(source_tools) AS source_tools,
                 group_concat(actions_taken) AS actions_taken,
                 group_concat(status_tuple || '${TUPLE_SEP}' || tuple_count) AS status_inputs,
@@ -20775,7 +21573,7 @@ var SqliteInspectionFindingsRepository = class {
 };
 
 // ../../packages/persistence/src/repositories/installed-packs.ts
-import { createHash as createHash2, randomUUID as randomUUID2 } from "crypto";
+import { createHash as createHash2, randomUUID as randomUUID3 } from "crypto";
 
 // ../../packages/persistence/src/semver.ts
 function parse3(version2) {
@@ -20926,7 +21724,7 @@ var SqliteInstalledPacksRepository = class {
           let behind = false;
           for (const row of rows) {
             const params = {
-              id: randomUUID2(),
+              id: randomUUID3(),
               namespace: row.namespace,
               packId: row.packId,
               version: row.version,
@@ -20938,7 +21736,7 @@ var SqliteInstalledPacksRepository = class {
             if (stored === void 0 || !isMirrorDowngrade(row, stored)) {
               this.upsertAvailableStmt.run({
                 ...params,
-                id: randomUUID2(),
+                id: randomUUID3(),
                 recordedBy: meta3?.recordedBy ?? null
               });
             } else {
@@ -21261,14 +22059,15 @@ var SqliteInventoryRepository = class {
 };
 
 // ../../packages/persistence/src/repositories/inventory-assets.ts
-import { randomUUID as randomUUID3 } from "crypto";
+import { randomUUID as randomUUID4 } from "crypto";
 var CATEGORY_ORDER = ["config", "skill", "mcp", "hook"];
 var VALID_HARNESS_IDS = new Set(HarnessId.options);
 var WORKTREE_CHECKOUT_FILTER = "(url IS NULL OR (url NOT LIKE '%/.claude/worktrees/%' AND url NOT LIKE '%\\.claude\\worktrees\\%'))";
 var HARNESS_LABELS = {
   claudecode: "Claude Code",
   cursor: "Cursor",
-  codex: "Codex"
+  codex: "Codex",
+  antigravity: "Antigravity"
 };
 var HARNESS_LIVENESS_WINDOW_MS = 30 * 24 * 60 * 60 * 1e3;
 var EMPTY_PROJECT_AGG = {
@@ -21283,6 +22082,7 @@ function resolveHarnessId(attrs, row) {
   if (t.includes("claudecode") || t === "claude") return "claudecode";
   if (t.includes("cursor")) return "cursor";
   if (t.includes("codex")) return "codex";
+  if (t.includes("antigravity")) return "antigravity";
   return null;
 }
 function isLiveRealClaudeCode(rows) {
@@ -21741,7 +22541,7 @@ var SqliteInventoryAssetsRepository = class {
         `INSERT INTO file_access_override (id, project_id, path, access, created_at, updated_at)
            VALUES (:id, :projectId, :path, :access, :now, :now)
            ON CONFLICT (project_id, path) DO UPDATE SET access = excluded.access, updated_at = excluded.updated_at`
-      ).run({ id: randomUUID3(), projectId, path, access, now: Date.now() });
+      ).run({ id: randomUUID4(), projectId, path, access, now: Date.now() });
     }
     return true;
   }
@@ -21762,7 +22562,7 @@ var SqliteInventoryAssetsRepository = class {
         `INSERT INTO mcp_trust_override (id, asset_id, trust, created_at, updated_at)
            VALUES (:id, :assetId, :trust, :now, :now)
            ON CONFLICT (asset_id) DO UPDATE SET trust = excluded.trust, updated_at = excluded.updated_at`
-      ).run({ id: randomUUID3(), assetId, trust, now: Date.now() });
+      ).run({ id: randomUUID4(), assetId, trust, now: Date.now() });
     }
     this.configRowsCache = void 0;
     return "ok";
@@ -22059,7 +22859,7 @@ var SqliteInventoryAssetsRepository = class {
 };
 
 // ../../packages/persistence/src/repositories/policies.ts
-import { randomUUID as randomUUID4 } from "crypto";
+import { randomUUID as randomUUID5 } from "crypto";
 var SqlitePoliciesRepository = class {
   constructor(db) {
     this.db = db;
@@ -22094,7 +22894,7 @@ var SqlitePoliciesRepository = class {
     failOpenTransaction(this.db, () => {
       for (const [category, action] of Object.entries(DEFAULT_ACTIONS)) {
         stmt.run({
-          id: randomUUID4(),
+          id: randomUUID5(),
           target: JSON.stringify({ category }),
           action,
           now: Date.now()
@@ -22114,7 +22914,7 @@ var SqlitePoliciesRepository = class {
       `INSERT INTO policies (id, scope, target, action, enabled, created_at, updated_at)
          VALUES (:id, 'global', :target, :action, 1, :now, :now)
          ON CONFLICT(scope, target) DO UPDATE SET action = excluded.action, enabled = 1, updated_at = excluded.updated_at`
-    ).run({ id: randomUUID4(), target: JSON.stringify({ category }), action, now });
+    ).run({ id: randomUUID5(), target: JSON.stringify({ category }), action, now });
   }
   // Caps every global per-category policy currently set to block/redact down
   // to warn (see warn-era-cap.ts). Rule-targeted policies are untouched.
@@ -22182,7 +22982,7 @@ var SqlitePolicyCatalogRepository = class {
 };
 
 // ../../packages/persistence/src/repositories/project-files.ts
-import { randomUUID as randomUUID5 } from "crypto";
+import { randomUUID as randomUUID6 } from "crypto";
 var SqliteProjectFilesRepository = class {
   constructor(db) {
     this.db = db;
@@ -22214,7 +23014,7 @@ var SqliteProjectFilesRepository = class {
     const stamp = Math.max(now, maxStamp + 1);
     for (const file2 of scan2.files) {
       this.upsertStmt.run({
-        id: randomUUID5(),
+        id: randomUUID6(),
         projectId,
         path: file2.path,
         name: file2.name,
@@ -22228,7 +23028,7 @@ var SqliteProjectFilesRepository = class {
 };
 
 // ../../packages/persistence/src/repositories/resolutions.ts
-import { randomUUID as randomUUID6 } from "crypto";
+import { randomUUID as randomUUID7 } from "crypto";
 var SqliteResolutionsRepository = class {
   constructor(db, now = () => Date.now()) {
     this.db = db;
@@ -22282,7 +23082,7 @@ var SqliteResolutionsRepository = class {
    */
   insertResolution(r) {
     this.insertStmt.run({
-      id: randomUUID6(),
+      id: randomUUID7(),
       findingKey: r.findingKey,
       status: FindingStatus.parse(r.status),
       method: ResolutionMethod.parse(r.method),
@@ -22341,13 +23141,51 @@ var SqliteRuleProbeCacheRepository = class {
     this.readStmt = db.prepare(
       `SELECT verdict, worst_probe_ms AS worstProbeMs FROM rule_probe_cache WHERE rule_key = :ruleKey`
     );
+    this.countQuarantinedStmt = db.prepare(
+      `SELECT COUNT(*) AS n FROM rule_probe_cache WHERE verdict = 'quarantined'`
+    );
+    this.clearQuarantinedStmt = db.prepare(
+      `DELETE FROM rule_probe_cache WHERE verdict = 'quarantined'`
+    );
   }
   db;
   upsertStmt;
   readStmt;
+  countQuarantinedStmt;
+  clearQuarantinedStmt;
   getVerdict(ruleKey) {
     return getRow(this.readStmt, { ruleKey });
   }
+  /** How many rules are currently excluded by a cached quarantine verdict. */
+  countQuarantined() {
+    return getRow(this.countQuarantinedStmt, {})?.n ?? 0;
+  }
+  /**
+   * Forgets every quarantine verdict, so the rules behind them are measured
+   * again on the next load. This is the undo for a verdict the machine reached
+   * on its own: a rule terminated mid-scan is cached forever and dropped from
+   * every later scan, and a timing verdict is a wall-clock judgement that a
+   * loaded or slow machine can reach about a rule that is in fact fine.
+   *
+   * Only 'quarantined' rows go — a 'safe' verdict is a measurement worth
+   * keeping, and dropping it would make every rule pay the battery again.
+   *
+   * Reports `refused` from the write's own result rather than inferring it from
+   * the row count. The two are NOT the same answer: `failOpenTransaction`
+   * swallows a contended DELETE (another writer holding the lock past
+   * `busy_timeout` — reads are unaffected in WAL), and a swallowed refusal
+   * leaves the count unchanged, which is indistinguishable from "there was
+   * nothing to clear". An undo that reports success while the quarantines are
+   * still in place is worse than one that fails, because the rules it claimed
+   * to restore are silently still disabled.
+   */
+  clearQuarantined() {
+    const before = this.countQuarantined();
+    const committed = failOpenTransaction(this.db, () => {
+      this.clearQuarantinedStmt.run();
+    });
+    return { refused: !committed, cleared: before - this.countQuarantined() };
+  }
   setVerdict(ruleKey, verdict, worstProbeMs) {
     failOpenTransaction(this.db, () => {
       this.upsertStmt.run({ ruleKey, verdict, worstProbeMs, checkedAt: Date.now() });
@@ -22402,7 +23240,39 @@ var SqliteScanLedgerRepository = class {
 };
 
 // ../../packages/persistence/src/repositories/secret-vault.ts
-import { randomUUID as randomUUID7 } from "crypto";
+import { randomUUID as randomUUID8 } from "crypto";
+function pageLimit(requested, fallback) {
+  if (requested === void 0) return fallback;
+  return Math.min(Math.max(1, Math.trunc(requested)), MAX_VAULT_PAGE_LIMIT);
+}
+function encodeReuseCursor(payload) {
+  return Buffer.from(JSON.stringify(payload)).toString("base64url");
+}
+function decodeReuseCursor(cursor) {
+  const parsed = parseJsonObject(Buffer.from(cursor, "base64url").toString("utf8"));
+  if (parsed !== void 0 && // `Number.isInteger`, not `typeof === 'number'`: a payload carrying
+  // ±Infinity or a fraction binds cleanly and returns an EMPTY page with a
+  // null cursor, which the caller reads as "end of list" — the one outcome a
+  // malformed cursor must never produce, since restarting from the top is the
+  // documented behaviour and the only recoverable one. (`1e999` is valid JSON
+  // and parses to Infinity; a bare `NaN` is not, so it cannot arrive here.)
+  Number.isInteger(parsed.occurrences) && typeof parsed.pointerId === "string") {
+    return { occurrences: parsed.occurrences, pointerId: parsed.pointerId };
+  }
+  return null;
+}
+var REUSED_PREDICATE = `(v.occurrence_count > 1
+     OR (SELECT count(*) FROM secret_vault_sighting s WHERE s.pointer_id = v.pointer_id) > 1)`;
+var INVENTORY_COLUMNS = `v.pointer_id, v.category, v.rule_id, v.masked_match, v.provider,
+          v.occurrence_count, v.first_seen, v.last_seen`;
+function toSighting(row) {
+  return {
+    location: row.location,
+    kind: row.kind,
+    firstSeen: new Date(row.first_seen).toISOString(),
+    lastSeen: new Date(row.last_seen).toISOString()
+  };
+}
 var SELECT_COLUMNS = `
   pointer_id AS pointerId,
   value_fingerprint AS valueFingerprint,
@@ -22586,39 +23456,67 @@ var SqliteSecretVaultRepository = class {
          VALUES (:id, :pointerId, :location, :kind, :now, :now)
          ON CONFLICT (pointer_id, location) DO UPDATE SET last_seen = :now`
     ).run({
-      id: randomUUID7(),
+      id: randomUUID8(),
       pointerId: entry.pointerId,
       location: entry.location,
       kind: entry.kind,
       now
     });
   }
-  listSightings(pointerId) {
+  /**
+   * Sightings for a whole page of pointers, in ONE query grouped in JS rather
+   * than one query per row. A pointer with no sightings still gets an entry, so
+   * the caller never has to distinguish "none" from "missing".
+   *
+   * The `IN` list is sized to the page, so this statement cannot be cached on
+   * the instance the way the fixed-shape ones in the constructor are.
+   */
+  sightingsFor(pointerIds) {
+    const byPointer = new Map(pointerIds.map((id) => [id, []]));
+    if (pointerIds.length === 0) return byPointer;
     const rows = allRows(
       this.db.prepare(
-        `SELECT location, kind, first_seen, last_seen FROM secret_vault_sighting
-          WHERE pointer_id = :pointerId ORDER BY last_seen DESC`
+        `SELECT pointer_id, location, kind, first_seen, last_seen
+           FROM secret_vault_sighting
+          WHERE pointer_id IN (${placeholders(pointerIds.length)})
+          ORDER BY last_seen DESC`
       ),
-      { pointerId }
+      pointerIds
     );
+    for (const row of rows) byPointer.get(row.pointer_id)?.push(toSighting(row));
+    return byPointer;
+  }
+  /** Hydrate a page of raw inventory rows with their sightings, batched. */
+  toInventoryEntries(rows) {
+    const sightings = this.sightingsFor(rows.map((r) => r.pointer_id));
     return rows.map((r) => ({
-      location: r.location,
-      kind: r.kind,
+      pointerId: r.pointer_id,
+      category: r.category,
+      ...r.provider === null ? {} : { provider: r.provider },
+      maskedMatch: r.masked_match,
+      occurrences: r.occurrence_count,
       firstSeen: new Date(r.first_seen).toISOString(),
-      lastSeen: new Date(r.last_seen).toISOString()
+      lastSeen: new Date(r.last_seen).toISOString(),
+      revealGrantId: r.grant_id,
+      sightings: sightings.get(r.pointer_id) ?? []
     }));
   }
   /**
-   * The dashboard inventory: every vaulted value's descriptor data joined with
-   * its sightings and the active reveal-to-model grant when one exists.
-   * Raw-free by construction — neither the fingerprint nor the ciphertext
-   * columns are selected.
+   * The dashboard inventory, newest-first, ONE PAGE at a time: every vaulted
+   * value's descriptor data joined with its sightings and the active
+   * reveal-to-model grant when one exists. Raw-free by construction — neither
+   * the fingerprint nor the ciphertext columns are selected.
+   *
+   * `totals.values` counts the whole store, not the page, so the count a reader
+   * sees never depends on how far they have paged.
    */
-  listInventory(now = Date.now()) {
+  listInventory(query = {}, now = Date.now()) {
+    const limit = pageLimit(query.limit, DEFAULT_VAULT_INVENTORY_LIMIT);
+    const cursor = query.cursor === void 0 ? null : decodeKeysetCursor(query.cursor);
+    const where = cursor === null ? "" : "WHERE (v.last_seen < :cursorLastSeen OR (v.last_seen = :cursorLastSeen AND v.pointer_id < :cursorPointerId))";
     const rows = allRows(
       this.db.prepare(
-        `SELECT v.pointer_id, v.category, v.rule_id, v.masked_match, v.provider,
-                v.occurrence_count, v.first_seen, v.last_seen,
+        `SELECT ${INVENTORY_COLUMNS},
                 (SELECT e.id FROM exceptions e
                   WHERE e.rule_id = v.rule_id
                     AND e.value_fingerprint = v.value_fingerprint
@@ -22626,45 +23524,109 @@ var SqliteSecretVaultRepository = class {
                     AND ${ACTIVE_REVEAL_GRANT_PREDICATE}
                   LIMIT 1) AS grant_id
            FROM secret_vault v
-          ORDER BY v.last_seen DESC`
+           ${where}
+          ORDER BY v.last_seen DESC, v.pointer_id DESC
+          LIMIT :limit`
       ),
-      { now }
+      bindParams({
+        now,
+        limit: limit + 1,
+        ...cursor === null ? {} : { cursorLastSeen: cursor.startedAtMs, cursorPointerId: cursor.id }
+      })
     );
-    return rows.map((r) => ({
-      pointerId: r.pointer_id,
-      category: r.category,
-      ...r.provider === null ? {} : { provider: r.provider },
-      maskedMatch: r.masked_match,
-      occurrences: r.occurrence_count,
-      firstSeen: new Date(r.first_seen).toISOString(),
-      lastSeen: new Date(r.last_seen).toISOString(),
-      revealGrantId: r.grant_id,
-      sightings: this.listSightings(r.pointer_id)
-    }));
+    const hasMore = rows.length > limit;
+    const page = hasMore ? rows.slice(0, limit) : rows;
+    const last = page[page.length - 1];
+    return {
+      totals: { values: this.countEntries() },
+      items: this.toInventoryEntries(page),
+      // Minted from the last row of the PAGE, never the extra probe row.
+      nextCursor: hasMore && last ? encodeKeysetCursor({ startedAtMs: last.last_seen, id: last.pointer_id }) : null
+    };
+  }
+  /**
+   * Values reused on this machine — detected more than once, or written to more
+   * than one location — most-reused first, one page at a time.
+   *
+   * Its own read rather than a filter over an inventory page: reuse is a
+   * property of the whole store, and deriving it from 50 newest rows would
+   * under-report exactly the values a reader most needs to see.
+   */
+  listReuse(query = {}, now = Date.now()) {
+    const limit = pageLimit(query.limit, DEFAULT_VAULT_INVENTORY_LIMIT);
+    const cursor = query.cursor === void 0 ? null : decodeReuseCursor(query.cursor);
+    const after = cursor === null ? "" : `AND (v.occurrence_count < :cursorOccurrences
+              OR (v.occurrence_count = :cursorOccurrences AND v.pointer_id < :cursorPointerId))`;
+    const rows = allRows(
+      this.db.prepare(
+        `SELECT ${INVENTORY_COLUMNS},
+                (SELECT e.id FROM exceptions e
+                  WHERE e.rule_id = v.rule_id
+                    AND e.value_fingerprint = v.value_fingerprint
+                    AND e.key_version = v.fingerprint_key_version
+                    AND ${ACTIVE_REVEAL_GRANT_PREDICATE}
+                  LIMIT 1) AS grant_id
+           FROM secret_vault v
+          WHERE ${REUSED_PREDICATE} ${after}
+          ORDER BY v.occurrence_count DESC, v.pointer_id DESC
+          LIMIT :limit`
+      ),
+      bindParams({
+        now,
+        limit: limit + 1,
+        ...cursor === null ? {} : { cursorOccurrences: cursor.occurrences, cursorPointerId: cursor.pointerId }
+      })
+    );
+    const hasMore = rows.length > limit;
+    const page = hasMore ? rows.slice(0, limit) : rows;
+    const last = page[page.length - 1];
+    return {
+      totals: { reused: this.countReused() },
+      items: this.toInventoryEntries(page),
+      nextCursor: hasMore && last ? encodeReuseCursor({ occurrences: last.occurrence_count, pointerId: last.pointer_id }) : null
+    };
   }
   /**
-   * The de-reference trail, newest first. By default the batched, high-volume
-   * reasons (display, view-render) are hidden and counted instead — the rows
-   * that matter as a signal are the model crossings, and burying them under
-   * render noise would defeat the audit's purpose.
+   * The de-reference trail, newest first, one page at a time. By default the
+   * batched, high-volume reasons (display, view-render) are hidden and counted
+   * instead — the rows that matter as a signal are the model crossings, and
+   * burying them under render noise would defeat the audit's purpose.
+   *
+   * `hiddenBatched` counts the whole trail rather than the page: it is what the
+   * view's "N hidden" line and its toggle speak for, so it must not shrink as
+   * the reader pages.
    */
-  listDerefs(opts) {
-    const limit = opts?.limit ?? 200;
-    const where = opts?.includeBatched === true ? "" : `WHERE reason NOT IN ('display', 'view-render')`;
+  listDerefs(query = {}) {
+    const limit = pageLimit(query.limit, DEFAULT_VAULT_DEREFS_LIMIT);
+    const cursor = query.cursor === void 0 ? null : decodeKeysetCursor(query.cursor);
+    const conditions = [];
+    if (query.includeBatched !== true) {
+      conditions.push(`reason NOT IN ('display', 'view-render')`);
+    }
+    if (cursor !== null) {
+      conditions.push("(at < :cursorAt OR (at = :cursorAt AND id < :cursorId))");
+    }
+    const where = conditions.length === 0 ? "" : `WHERE ${conditions.join(" AND ")}`;
     const rows = allRows(
       this.db.prepare(
         `SELECT id, pointer_id, at, target, reason, outcome, grant_id, pointer_count
            FROM secret_vault_deref ${where}
-          ORDER BY at DESC, rowid DESC LIMIT :limit`
+          ORDER BY at DESC, id DESC LIMIT :limit`
       ),
-      { limit }
+      bindParams({
+        limit: limit + 1,
+        ...cursor === null ? {} : { cursorAt: cursor.startedAtMs, cursorId: cursor.id }
+      })
     );
-    const hiddenBatched = opts?.includeBatched === true ? 0 : countScalar(
+    const hasMore = rows.length > limit;
+    const page = hasMore ? rows.slice(0, limit) : rows;
+    const last = page[page.length - 1];
+    const hiddenBatched = query.includeBatched === true ? 0 : countScalar(
       this.db,
       `SELECT count(*) AS n FROM secret_vault_deref WHERE reason IN ('display', 'view-render')`
     );
     return {
-      rows: rows.map((r) => ({
+      items: page.map((r) => ({
         id: r.id,
         pointerId: r.pointer_id,
         at: new Date(r.at).toISOString(),
@@ -22674,12 +23636,20 @@ var SqliteSecretVaultRepository = class {
         ...r.grant_id === null ? {} : { grantId: r.grant_id },
         pointerCount: r.pointer_count
       })),
+      nextCursor: hasMore && last ? encodeKeysetCursor({ startedAtMs: last.at, id: last.id }) : null,
       hiddenBatched
     };
   }
   countEntries() {
     return countScalar(this.db, "SELECT COUNT(*) AS n FROM secret_vault");
   }
+  /** Values reused on this machine — the reuse list's page-independent total. */
+  countReused() {
+    return countScalar(
+      this.db,
+      `SELECT COUNT(*) AS n FROM secret_vault v WHERE ${REUSED_PREDICATE}`
+    );
+  }
 };
 
 // ../../packages/persistence/src/repositories/security.ts
@@ -22694,7 +23664,9 @@ var ENFORCEMENT_KINDS = ["blocked", "redacted", "warned"];
 var SCAN_COVERAGE = [
   { provider: "claudecode", coverage: 100, supported: true },
   { provider: "cursor", coverage: 0, supported: false },
-  { provider: "codex", coverage: 0, supported: false },
+  { provider: "codex", coverage: 80, supported: true },
+  { provider: "antigravity", coverage: 60, supported: true },
+  { provider: "claudeai", coverage: 0, supported: false },
   { provider: "chatgpt", coverage: 0, supported: false },
   { provider: "copilot", coverage: 0, supported: false },
   { provider: "api", coverage: 0, supported: false }
@@ -23027,7 +23999,7 @@ var SqliteSecurityRepository = class {
 };
 
 // ../../packages/persistence/src/repositories/shares.ts
-import { randomUUID as randomUUID8 } from "crypto";
+import { randomUUID as randomUUID9 } from "crypto";
 var MAX_EGRESS_CALL_SITES_PER_PROJECT = 5e3;
 var IN_CHUNK = 500;
 var KIND_ORDER = ["provider", "internal", "external", "ip"];
@@ -23283,7 +24255,7 @@ var SqliteSharesRepository = class {
                (id, destination_id, host, decision, created_at, updated_at)
              VALUES (:id, :destinationId, :host, :decision, :now, :now)`
         ).run({
-          id: randomUUID8(),
+          id: randomUUID9(),
           destinationId,
           host: dest.host,
           decision,
@@ -23432,7 +24404,7 @@ var SqliteSharesRepository = class {
       let destinationId = destIds.get(hit.host);
       if (destinationId === void 0) {
         destStmt.run({
-          id: randomUUID8(),
+          id: randomUUID9(),
           kind: hit.kind,
           name: hit.name,
           host: hit.host,
@@ -23448,7 +24420,7 @@ var SqliteSharesRepository = class {
       let endpointId = endpointIds.get(endpointKey);
       if (endpointId === void 0) {
         endpointStmt.run({
-          id: randomUUID8(),
+          id: randomUUID9(),
           destinationId,
           method: hit.method,
           transport: hit.transport,
@@ -23461,7 +24433,7 @@ var SqliteSharesRepository = class {
         endpointIds.set(endpointKey, endpointId);
       }
       siteStmt.run({
-        id: randomUUID8(),
+        id: randomUUID9(),
         endpointId,
         project: input.project,
         projectKey: input.projectKey,
@@ -23826,6 +24798,9 @@ function purgeSampleData(db) {
 }
 
 // ../../packages/persistence/src/database.ts
+var UNSAFE_TEST_ONLY_RAW_HANDLE = /* @__PURE__ */ Symbol(
+  "aka.persistence.unsafeTestOnlyRawHandle"
+);
 function linkHost(input, hostId) {
   return hostId ? { ...input, hostId } : input;
 }
@@ -23847,21 +24822,34 @@ function openWithPragmas(file2) {
   }
   return db;
 }
-function backupLegacyStore(file2) {
-  const backup = `${file2}.legacy.${String(Date.now())}.bak`;
-  renameSync2(file2, backup);
-  tightenFile(backup);
-  for (const sidecar of dbSidecars(file2)) {
-    if (existsSync(sidecar)) rmSync2(sidecar);
+function backupLegacyStore(db, file2) {
+  reapStalePartials(file2);
+  const backup = backupPath(file2, "legacy");
+  let snapshotted = false;
+  let snapshotError;
+  try {
+    snapshotStore(db, backup);
+    snapshotted = true;
+  } catch (error51) {
+    snapshotError = error51;
+  } finally {
+    db.close();
+  }
+  if (!snapshotted) {
+    akaWarn(
+      `Could not snapshot the incompatible ${DB_FILENAME} (${String(snapshotError)}); moving the store aside with its sidecars instead.`
+    );
+    moveStoreAside(file2, backup);
+    return backup;
   }
+  discardStore(file2, backup);
   return backup;
 }
 function openAndInitialize(file2) {
   let db = openWithPragmas(file2);
   try {
     if (isForeignSqliteLineage(db)) {
-      db.close();
-      const backup = backupLegacyStore(file2);
+      const backup = backupLegacyStore(db, file2);
       db = openWithPragmas(file2);
       akaWarn(
         `Detected an older, incompatible (tenant-bearing) ${DB_FILENAME}; backed it up to ${backup} and created a fresh store.`
@@ -23905,7 +24893,7 @@ function openAndInitialize(file2) {
 }
 function openLocalDatabase(dir) {
   ensureDataDirSync(dir);
-  const file2 = join(dir, DB_FILENAME);
+  const file2 = join2(dir, DB_FILENAME);
   const {
     db,
     events,
@@ -24022,7 +25010,7 @@ function openLocalDatabase(dir) {
         const definitionId = definitionIds.get(`${finding.ruleId}@${finding.version}`);
         if (!definitionId) continue;
         inspectionFindings.insertFinding({
-          id: randomUUID9(),
+          id: randomUUID10(),
           auditEventId: record2.scanEvent.id,
           inspectionDefinitionId: definitionId,
           span: finding.span,
@@ -24128,35 +25116,51 @@ function openLocalDatabase(dir) {
     transaction,
     close: () => {
       db.close();
-    }
+    },
+    // Last, and a plain value rather than a getter, so `{ ...db }` carries it.
+    [UNSAFE_TEST_ONLY_RAW_HANDLE]: db
   };
 }
 
+// ../../packages/persistence/src/file-lock.ts
+import { randomUUID as randomUUID11 } from "crypto";
+import {
+  closeSync,
+  existsSync as existsSync2,
+  openSync,
+  readFileSync,
+  rmSync as rmSync3,
+  statSync as statSync2,
+  writeFileSync as writeFileSync2
+} from "fs";
+import { hostname as hostname3 } from "os";
+var PARK = new Int32Array(new SharedArrayBuffer(4));
+
 // ../../packages/persistence/src/finding-key.ts
 import { createHash as createHash3 } from "crypto";
 
 // ../../packages/persistence/src/fingerprint.ts
 import { createHmac, randomBytes } from "crypto";
-import { existsSync as existsSync2, readFileSync } from "fs";
-import { join as join2 } from "path";
+import { existsSync as existsSync3, readFileSync as readFileSync2 } from "fs";
+import { join as join3 } from "path";
 import { DatabaseSync as DatabaseSync2 } from "node:sqlite";
 
 // ../../packages/persistence/src/local-layout.ts
 import { renameSync as renameSync3 } from "fs";
 import { mkdir } from "fs/promises";
 import { homedir } from "os";
-import { join as join3 } from "path";
+import { join as join4 } from "path";
 function defaultDataDir() {
-  return join3(homedir(), ".aka");
+  return join4(homedir(), ".aka");
 }
 function settingsDir(base = defaultDataDir()) {
-  return join3(base, "settings");
+  return join4(base, "settings");
 }
 function dataDir(base = defaultDataDir()) {
-  return join3(base, "data");
+  return join4(base, "data");
 }
 function dbPath(base = defaultDataDir()) {
-  return join3(dataDir(base), "aka.db");
+  return join4(dataDir(base), "aka.db");
 }
 function ensureLayoutDirSync(dir = defaultDataDir()) {
   ensureDataDirSync(dir);
@@ -24169,8 +25173,8 @@ function migrateLegacyLayout(base = defaultDataDir()) {
   for (const { name, dest } of moves) {
     try {
       ensureDataDirSync(dest);
-      const moved = join3(dest, name);
-      renameSync3(join3(base, name), moved);
+      const moved = join4(dest, name);
+      renameSync3(join4(base, name), moved);
       tightenFile(moved);
     } catch {
     }
@@ -24178,10 +25182,11 @@ function migrateLegacyLayout(base = defaultDataDir()) {
 }
 
 // ../../packages/persistence/src/settings.ts
-import { readFileSync as readFileSync2 } from "fs";
-import { join as join4 } from "path";
+import { readFileSync as readFileSync3 } from "fs";
+import { join as join5 } from "path";
+var SETTINGS_FILENAME = "settings.json";
 function readWorkspaceSettings(base = defaultDataDir()) {
-  const record2 = readJson(join4(settingsDir(base), "settings.json"));
+  const record2 = readJson(join5(settingsDir(base), SETTINGS_FILENAME));
   if (!record2) return defaultWorkspaceSettings();
   try {
     return WorkspaceSettings.parse(record2);
@@ -24192,7 +25197,7 @@ function readWorkspaceSettings(base = defaultDataDir()) {
 function readJson(file2) {
   let text;
   try {
-    text = readFileSync2(file2, "utf8");
+    text = readFileSync3(file2, "utf8");
   } catch {
     return null;
   }
@@ -24214,24 +25219,24 @@ import { randomBytes as randomBytes2 } from "crypto";
 import {
   chmodSync as chmodSync2,
   mkdirSync as mkdirSync2,
-  readFileSync as readFileSync3,
+  readFileSync as readFileSync4,
   renameSync as renameSync4,
-  rmSync as rmSync3,
-  statSync,
-  writeFileSync as writeFileSync2
+  rmSync as rmSync4,
+  statSync as statSync3,
+  writeFileSync as writeFileSync3
 } from "fs";
-import { join as join5 } from "path";
+import { join as join6 } from "path";
 
 // ../../packages/persistence/src/vault/vault.ts
-import { randomBytes as randomBytes3, randomUUID as randomUUID10 } from "crypto";
+import { randomBytes as randomBytes3, randomUUID as randomUUID12 } from "crypto";
 
 // ../../packages/persistence/src/warn-era-cap.ts
-import { existsSync as existsSync3, writeFileSync as writeFileSync3 } from "fs";
-import { join as join6 } from "path";
+import { existsSync as existsSync4, writeFileSync as writeFileSync4 } from "fs";
+import { join as join7 } from "path";
 
 // ../../packages/plugin-sdk/src/config.ts
-import { existsSync as existsSync4 } from "fs";
-import { join as join7 } from "path";
+import { existsSync as existsSync5 } from "fs";
+import { join as join8 } from "path";
 
 // ../../packages/plugin-sdk/src/provider-env.ts
 var DEFAULT_ANTHROPIC_HOST = "api.anthropic.com";
@@ -24282,11 +25287,11 @@ function resolveProvider() {
 }
 
 // ../../packages/plugin-sdk/src/config.ts
-function loadConfig(base = defaultDataDir()) {
+function loadConfig(base = defaultDataDir(), resolveProviderFn = resolveProvider) {
   try {
     ensureLayoutDirSync(base);
-    const settingsFile = join7(settingsDir(base), "settings.json");
-    if (existsSync4(settingsFile)) tightenFile(settingsFile);
+    const settingsFile = join8(settingsDir(base), "settings.json");
+    if (existsSync5(settingsFile)) tightenFile(settingsFile);
   } catch {
   }
   migrateLegacyLayout(base);
@@ -24297,21 +25302,21 @@ function loadConfig(base = defaultDataDir()) {
     dbPath: dbPath(base),
     settingsDir: settingsDir(base),
     onboarded: settings.onboardedAt != null,
-    provider: resolveProviderSafe()
+    provider: resolveProviderSafe(resolveProviderFn)
   };
 }
-function resolveProviderSafe() {
+function resolveProviderSafe(resolveProviderFn) {
   try {
-    return resolveProvider();
+    return resolveProviderFn();
   } catch {
     return { provider: "anthropic" };
   }
 }
 
 // ../../packages/plugin-sdk/src/config-inventory.ts
-import { readdirSync, readFileSync as readFileSync5, realpathSync, statSync as statSync3 } from "fs";
+import { readdirSync as readdirSync2, readFileSync as readFileSync6, realpathSync, statSync as statSync5 } from "fs";
 import { homedir as homedir2 } from "os";
-import { basename as basename2, join as join9 } from "path";
+import { basename as basename3, join as join10 } from "path";
 
 // ../../packages/detections/src/egress/registry.ts
 var EXTRACTOR_VERSION = "1";
@@ -26887,7 +27892,7 @@ var gcp_service_account_default = {
   severity: "critical",
   matcher: {
     type: "regex",
-    pattern: "\\b[a-z0-9][a-z0-9-]{2,60}@[a-z0-9][a-z0-9-]{2,60}\\.iam\\.gserviceaccount\\.com\\b",
+    pattern: "(?<![a-z0-9-])[a-z0-9-]{3,}@[a-z0-9][a-z0-9-]{2,60}\\.iam\\.gserviceaccount\\.com\\b",
     flags: "g"
   },
   examples: [
@@ -27299,22 +28304,27 @@ function maskText(text) {
 }
 
 // ../../packages/plugin-sdk/src/repo.ts
-import { existsSync as existsSync5, readFileSync as readFileSync4, statSync as statSync2 } from "fs";
-import { basename, dirname, isAbsolute, join as join8, sep as sep2 } from "path";
+import { existsSync as existsSync6, readFileSync as readFileSync5, statSync as statSync4 } from "fs";
+import { basename as basename2, dirname as dirname2, isAbsolute, join as join9, sep as sep2 } from "path";
 
 // ../../packages/plugin-sdk/src/events.ts
-import { createHash as createHash4, randomUUID as randomUUID11 } from "crypto";
+import { createHash as createHash4, randomUUID as randomUUID13 } from "crypto";
+
+// ../../packages/plugin-sdk/src/isolated-scan.ts
+import { existsSync as existsSync7 } from "fs";
+import { fileURLToPath } from "url";
+import { Worker } from "worker_threads";
 
 // ../../packages/plugin-sdk/src/inventory-resolver.ts
-import { arch, hostname as hostname3, platform, release } from "os";
+import { arch, hostname as hostname4, platform, release } from "os";
 
 // ../../packages/plugin-sdk/src/nudge.ts
-import { mkdirSync as mkdirSync3, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "fs";
-import { join as join10 } from "path";
+import { mkdirSync as mkdirSync3, readFileSync as readFileSync7, writeFileSync as writeFileSync5 } from "fs";
+import { join as join11 } from "path";
 
 // ../../packages/plugin-sdk/src/paths.ts
-import { readdirSync as readdirSync2, realpathSync as realpathSync2 } from "fs";
-import { basename as basename3, dirname as dirname2, sep as sep3 } from "path";
+import { readdirSync as readdirSync3, realpathSync as realpathSync2 } from "fs";
+import { basename as basename4, dirname as dirname3, sep as sep3 } from "path";
 
 // ../../packages/plugin-sdk/src/posture.ts
 function applyCategoryPosture(posture, repo, mode = "fill-gaps") {
@@ -27328,8 +28338,34 @@ function applyCategoryPosture(posture, repo, mode = "fill-gaps") {
 
 // ../../packages/plugin-sdk/src/project-files.ts
 var import_ignore = __toESM(require_ignore(), 1);
-import { existsSync as existsSync6, readdirSync as readdirSync3, readFileSync as readFileSync7 } from "fs";
-import { basename as basename4, join as join11, relative, sep as sep4 } from "path";
+import { existsSync as existsSync8, readdirSync as readdirSync4, readFileSync as readFileSync8 } from "fs";
+import { basename as basename5, join as join12, relative, sep as sep4 } from "path";
+
+// ../../packages/plugin-sdk/src/provider-env-antigravity.ts
+var optionalBaseUrl2 = external_exports.preprocess((v) => {
+  if (typeof v === "string" && v.trim() === "") return void 0;
+  return v;
+}, external_exports.string().optional()).catch(void 0);
+var optionalFlag = external_exports.preprocess((v) => {
+  if (typeof v !== "string") return false;
+  const normalized = v.trim().toLowerCase();
+  return normalized !== "" && normalized !== "0" && normalized !== "false";
+}, external_exports.boolean()).catch(false);
+var antigravityProviderEnvShape = {
+  GOOGLE_GENAI_USE_VERTEXAI: optionalFlag,
+  GOOGLE_GEMINI_BASE_URL: optionalBaseUrl2
+};
+var AntigravityProviderEnvSchema = external_exports.object(antigravityProviderEnvShape);
+
+// ../../packages/plugin-sdk/src/provider-env-codex.ts
+var optionalBaseUrl3 = external_exports.preprocess((v) => {
+  if (typeof v === "string" && v.trim() === "") return void 0;
+  return v;
+}, external_exports.string().optional()).catch(void 0);
+var codexProviderEnvShape = {
+  OPENAI_BASE_URL: optionalBaseUrl3
+};
+var CodexProviderEnvSchema = external_exports.object(codexProviderEnvShape);
 
 // ../../packages/plugin-sdk/src/raw-egress.ts
 var RawEgressError = class extends Error {
@@ -27380,7 +28416,7 @@ function assertRawFree(text, rawValues) {
 }
 
 // ../../packages/plugin-sdk/src/runtime.ts
-import { randomUUID as randomUUID12 } from "crypto";
+import { randomUUID as randomUUID14 } from "crypto";
 
 // ../../packages/plugin-sdk/src/suppressions.ts
 var THIRTY_DAYS_MS = 30 * 24 * 60 * 60 * 1e3;
@@ -27420,128 +28456,72 @@ async function applySetupTriageSuppressions(entries, writer, opts) {
 }
 
 // ../../packages/plugin-sdk/src/throttle.ts
-import { mkdirSync as mkdirSync4, statSync as statSync4, writeFileSync as writeFileSync5 } from "fs";
-import { join as join12 } from "path";
+import { mkdirSync as mkdirSync4, statSync as statSync6, writeFileSync as writeFileSync6 } from "fs";
+import { join as join13 } from "path";
 
-// src/command-registry.ts
-import { readdirSync as readdirSync4 } from "fs";
-import { fileURLToPath } from "url";
-var COMMAND_NAMESPACE = "aka";
-var COMMANDS_DIR = fileURLToPath(new URL("../commands", import.meta.url));
-function readRegisteredCommands() {
-  return readdirSync4(COMMANDS_DIR).filter((f) => f.endsWith(".md")).map((f) => `/${COMMAND_NAMESPACE}:${f.replace(/\.md$/, "")}`);
+// ../../packages/setup-wizard/src/remediation/rotation-checklist.ts
+import { writeFileSync as writeFileSync7 } from "fs";
+import { join as join14 } from "path";
+
+// ../../packages/setup-wizard/src/triage/dedupe.ts
+function dedupeKey(hit) {
+  if (hit.valueFingerprint === void 0) return void 0;
+  return `${hit.ruleId}\u2588${hit.valueFingerprint}`;
 }
-function selectRegisteredCommands(curated, registry2) {
-  const registered = new Set(registry2);
-  const missing = curated.filter((c) => !registered.has(c));
-  if (missing.length > 0) {
-    throw new Error(
-      `Curated command(s) not registered in the installed plugin: ${missing.join(", ")}`
-    );
+function dedupeForJudge(hits) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  for (const h of hits) {
+    const key = dedupeKey(h);
+    if (key === void 0) {
+      out.push(h);
+      continue;
+    }
+    if (seen.has(key)) continue;
+    seen.add(key);
+    out.push(h);
   }
-  return [...curated];
+  return out;
 }
 
-// src/setup-frame-json.ts
-var FRAME_JSON_BEGIN = "<<<AKA_FRAME_JSON";
-var FRAME_JSON_END = "AKA_FRAME_JSON>>>";
-function frameJsonBlock(payload) {
-  return `${FRAME_JSON_BEGIN}
-${JSON.stringify(payload)}
-${FRAME_JSON_END}
-`;
-}
-
-// src/setup-show.ts
-var SHOW_BEGIN = "<<<AKA_SHOW";
-var SHOW_END = "AKA_SHOW>>>";
-function showBlock(body) {
-  return `${SHOW_BEGIN}
-${body}
-${SHOW_END}
-`;
-}
-
-// src/present.ts
-var SHADE = {
-  light: "\u2591",
-  medium: "\u2592",
-  dark: "\u2593",
-  full: "\u2588"
-};
-var ANSI_RE = /\x1b\[[0-9;]*m/g;
-function visibleLength(text) {
-  return text.replace(ANSI_RE, "").length;
-}
-var fg = (hex3) => (text) => {
-  const r = Number.parseInt(hex3.slice(1, 3), 16);
-  const g = Number.parseInt(hex3.slice(3, 5), 16);
-  const b = Number.parseInt(hex3.slice(5, 7), 16);
-  return `\x1B[38;2;${String(r)};${String(g)};${String(b)}m${text}\x1B[0m`;
-};
-var paint = {
-  brand: fg("#33e6c6"),
-  // --color-brand        · ▸▸ AKA wordmark (accent text)
-  dim: fg("#838995"),
-  // --color-text-3      · separators · "/100" · the "unreviewed" label
-  bold: (text) => `\x1B[1m${text}\x1B[0m`,
-  // the health score number
-  ok: fg("#0db15f"),
-  // --color-ok          · healthy ● dot
-  critical: fg("#e63448"),
-  // --color-sev-critical · ■ and the open-findings flag
-  high: fg("#e97a0a"),
-  // --color-sev-high     · ■ and the mid-health dot
-  medium: fg("#f7bd00"),
-  // --color-sev-medium   · ■
-  low: fg("#0581d4")
-  // --color-sev-low      · ■ (azure blue, not purple)
-};
-function padEnd(text, width) {
-  const pad = width - visibleLength(text);
-  return pad > 0 ? text + " ".repeat(pad) : text;
-}
-function indent(text, spaces = 2) {
-  const pad = " ".repeat(spaces);
-  return text.split("\n").map((line) => pad + line).join("\n");
-}
-function table(headers, rows, opts = {}) {
-  const gap = opts.gap ?? 3;
-  const widths = headers.map(
-    (h, i) => Math.max(visibleLength(h), ...rows.map((r) => visibleLength(r[i] ?? "")))
-  );
-  const sep5 = " ".repeat(gap);
-  const fmt = (cells) => cells.map((cell, i) => padEnd(cell, widths[i] ?? 0)).join(sep5);
-  const headerLine = fmt(headers.map((h) => h.toUpperCase()));
-  if (opts.rowSep === true) {
-    const fullWidth = widths.reduce((n, w) => n + w, 0) + gap * Math.max(0, widths.length - 1);
-    const rule = "\u2500".repeat(fullWidth);
-    const body = [];
-    rows.forEach((row, i) => {
-      if (i > 0) body.push(rule);
-      body.push(fmt(row));
-    });
-    return [headerLine, rule, ...body].join("\n");
+// ../../packages/setup-wizard/src/triage/false-positive-patterns.ts
+function deriveFalsePositivePatterns(hits, rec, plan) {
+  const hitById = new Map(hits.filter((h) => h.id !== void 0).map((h) => [h.id, h]));
+  const seenCategory = /* @__PURE__ */ new Set();
+  const markedIds = /* @__PURE__ */ new Set();
+  for (const c of rec.perCategory) {
+    if (seenCategory.has(c.category)) continue;
+    seenCategory.add(c.category);
+    if (plan.posture[c.category] === void 0) continue;
+    for (const id of c.fpIds) markedIds.add(id);
   }
-  const ruleLine = widths.map((w) => "\u2500".repeat(w)).join(sep5);
-  return [headerLine, ruleLine, ...rows.map(fmt)].join("\n");
-}
-function fenced(body) {
-  const longestRun = Math.max(0, ...[...body.matchAll(/`+/g)].map((m) => m[0].length));
-  const fence = "`".repeat(Math.max(3, longestRun + 1));
-  return [fence, body, fence].join("\n");
-}
-function show(body) {
-  return showBlock(body);
+  const groups = /* @__PURE__ */ new Map();
+  for (const id of markedIds) {
+    const h = hitById.get(id);
+    if (h === void 0) continue;
+    const pattern = safeMaskedMatch(h.rawMatch);
+    const group = groups.get(pattern) ?? { count: 0, values: [] };
+    group.count += 1;
+    if (h.valueFingerprint !== void 0 && h.keyVersion !== void 0) {
+      group.values.push({
+        ruleId: h.ruleId,
+        category: h.category,
+        valueFingerprint: h.valueFingerprint,
+        keyVersion: h.keyVersion
+      });
+    }
+    groups.set(pattern, group);
+  }
+  return [...groups.entries()].filter(([, g]) => g.values.length > 0).map(([pattern, g]) => ({ pattern, count: g.count, values: g.values }));
 }
 
-// src/triage/gate-display.ts
-function findContext(entry, join16) {
-  const byFingerprint = join16.find(
+// ../../packages/setup-wizard/src/triage/gate-display.ts
+function findContext(entry, join18) {
+  const byFingerprint = join18.find(
     (j) => j.valueFingerprint !== void 0 && j.valueFingerprint === entry.valueFingerprint
   );
   if (byFingerprint) return byFingerprint.maskedContext;
-  const byRuleAndMask = join16.find(
+  const byRuleAndMask = join18.find(
     (j) => j.ruleId === entry.ruleId && j.maskedMatch === entry.maskedValue
   );
   return byRuleAndMask?.maskedContext;
@@ -27612,13 +28592,13 @@ function renderShowcase(showcase) {
 
 ${blocks.join("\n\n")}`;
 }
-function renderSuppressionGate(entries, join16) {
+function renderSuppressionGate(entries, join18) {
   if (entries.length === 0) {
     return "No false-positive suppressions to confirm \u2014 nothing will be written.";
   }
   const header = entries.length === 1 ? "This looks like a false positive \u2014 take a look before I suppress it:" : `These ${String(entries.length)} look like false positives \u2014 take a look before I suppress them:`;
   const blocks = entries.map((entry, i) => {
-    const context = findContext(entry, join16);
+    const context = findContext(entry, join18);
     const lines = [
       `${String(i + 1)}. ${entry.ruleId} [${entry.category}]`,
       `   value:   ${entry.maskedValue}`,
@@ -27632,153 +28612,7 @@ function renderSuppressionGate(entries, join16) {
 ${blocks.join("\n\n")}`;
 }
 
-// src/render.ts
-var STORE_UNAVAILABLE_NOTE = "I couldn't check my records just now \u2014 we can check again soon. Your Claude session keeps going, and I'll fill in as you work.";
-var SEVERITY_GLYPH = {
-  critical: SHADE.full,
-  high: SHADE.dark,
-  medium: SHADE.medium,
-  low: SHADE.light
-};
-var CATEGORY_ORDER2 = DetectionCategory.options;
-function categoryRank(category) {
-  const i = CATEGORY_ORDER2.indexOf(category);
-  return i === -1 ? CATEGORY_ORDER2.length : i;
-}
-function renderRecommendedPosture(posture) {
-  const rows = Object.keys(posture).map((category) => ({
-    category,
-    level: posture[category] ?? ""
-  }));
-  const width = Math.max(0, ...rows.map((r) => r.category.length));
-  return rows.sort((a, b) => categoryRank(a.category) - categoryRank(b.category)).map((r) => `  ${r.category.padEnd(width)}  ${r.level}`).join("\n");
-}
-var GRID_MARK = "\u25CF";
-function renderPostureGrid(posture) {
-  const packs2 = Object.keys(posture).sort(
-    (a, b) => categoryRank(a) - categoryRank(b)
-  );
-  const rows = packs2.map((category) => [
-    category,
-    ...BUILTIN_ORDER.map((level) => posture[category] === level ? GRID_MARK : "")
-  ]);
-  return indent(table(["Category", ...BUILTIN_ORDER], rows));
-}
-var READY_COMMANDS = ["/aka:health", "/aka:findings", "/aka:recommend"];
-function renderCategoriesTuned(categoriesTuned) {
-  return `\u2713 Set all ${String(categoriesTuned)} detection categories`;
-}
-function renderApplied(categoriesTuned, dismissed, registry2) {
-  const routine = dismissed > 0 ? `set aside ${String(dismissed)} routine result${dismissed === 1 ? "" : "s"}` : "nothing routine to set aside";
-  const ready = `Ready: ${selectRegisteredCommands(READY_COMMANDS, registry2).join(" \xB7 ")}`;
-  return `${renderCategoriesTuned(categoriesTuned)} \xB7 ${routine} \xB7 ${ready}`;
-}
-
-// src/calibration.ts
-var SURFACED_KIND_LABEL = {
-  secret: "live keys",
-  pii: "personal data",
-  financial: "financial records",
-  phi: "health records",
-  code_context: "source context",
-  code_flaw: "code flaws",
-  custom: "custom matches",
-  config: "configuration secrets"
-};
-function frameCalibration(preview, maskedFindings = [], falsePositivePatterns = []) {
-  const important = preview.categories.reduce((n, c) => n + c.genuineCount, 0);
-  const routine = preview.categories.reduce((n, c) => n + c.fpCount, 0);
-  const total = important + routine;
-  const surfacedCategories = preview.categories.filter((c) => c.genuineCount > 0).map((c) => c.category);
-  const routineCategories = preview.categories.filter((c) => c.fpCount > 0).map((c) => c.category);
-  const findingKinds = preview.categories.filter((c) => c.genuineCount + c.fpCount > 0).map((c) => ({ category: c.category, count: c.genuineCount + c.fpCount, egress: c.egress }));
-  const frame = {
-    counts: { total, important, routine },
-    routineCategories,
-    surfacedCategories,
-    findingKinds,
-    posture: preview.posture,
-    ...maskedFindings.length > 0 ? { maskedFindings: [...maskedFindings] } : {},
-    ...falsePositivePatterns.length > 0 ? { falsePositivePatterns: [...falsePositivePatterns] } : {}
-  };
-  const kind = surfacedCategories.map((c) => SURFACED_KIND_LABEL[c]).join(", ");
-  const parenthetical = kind ? ` (${kind})` : "";
-  const headline = `I went through Claude's recent work \u2014 ${String(total)} detection${total === 1 ? "" : "s"}, ${String(important)} result${important === 1 ? "" : "s"} worth a look.${parenthetical}`;
-  const copy = headline;
-  return { frame, copy };
-}
-var SCAN_CLEAN_HEADLINE = "I looked over Claude's recent work \u2014 nothing needs your attention right now. You're starting clean; here's what I'd recommend:";
-var NO_HISTORY_HEADLINE = "Nothing to learn from yet \u2014 Claude hasn't left any work on this machine. I'll start each detection category at a careful default:";
-function zeroCountFrame(posture) {
-  return {
-    counts: { total: 0, important: 0, routine: 0 },
-    routineCategories: [],
-    surfacedCategories: [],
-    findingKinds: [],
-    posture
-  };
-}
-function frameEmptyState(cause, posture) {
-  const frame = zeroCountFrame(posture);
-  const copy = cause === "scan-clean" ? `${SCAN_CLEAN_HEADLINE}
-${renderRecommendedPosture(posture)}` : `${NO_HISTORY_HEADLINE}
-${renderPostureGrid(posture)}`;
-  return { frame, copy };
-}
-
-// src/triage/dedupe.ts
-function dedupeKey(hit) {
-  if (hit.valueFingerprint === void 0) return void 0;
-  return `${hit.ruleId}\u2588${hit.valueFingerprint}`;
-}
-function dedupeForJudge(hits) {
-  const seen = /* @__PURE__ */ new Set();
-  const out = [];
-  for (const h of hits) {
-    const key = dedupeKey(h);
-    if (key === void 0) {
-      out.push(h);
-      continue;
-    }
-    if (seen.has(key)) continue;
-    seen.add(key);
-    out.push(h);
-  }
-  return out;
-}
-
-// src/triage/false-positive-patterns.ts
-function deriveFalsePositivePatterns(hits, rec, plan) {
-  const hitById = new Map(hits.filter((h) => h.id !== void 0).map((h) => [h.id, h]));
-  const seenCategory = /* @__PURE__ */ new Set();
-  const markedIds = /* @__PURE__ */ new Set();
-  for (const c of rec.perCategory) {
-    if (seenCategory.has(c.category)) continue;
-    seenCategory.add(c.category);
-    if (plan.posture[c.category] === void 0) continue;
-    for (const id of c.fpIds) markedIds.add(id);
-  }
-  const groups = /* @__PURE__ */ new Map();
-  for (const id of markedIds) {
-    const h = hitById.get(id);
-    if (h === void 0) continue;
-    const pattern = safeMaskedMatch(h.rawMatch);
-    const group = groups.get(pattern) ?? { count: 0, values: [] };
-    group.count += 1;
-    if (h.valueFingerprint !== void 0 && h.keyVersion !== void 0) {
-      group.values.push({
-        ruleId: h.ruleId,
-        category: h.category,
-        valueFingerprint: h.valueFingerprint,
-        keyVersion: h.keyVersion
-      });
-    }
-    groups.set(pattern, group);
-  }
-  return [...groups.entries()].filter(([, g]) => g.values.length > 0).map(([pattern, g]) => ({ pattern, count: g.count, values: g.values }));
-}
-
-// src/triage/merge.ts
+// ../../packages/setup-wizard/src/triage/merge.ts
 var RANK = { monitor: 0, warn: 1, redact: 2, block: 3 };
 function chunkForJudge(hits, maxBytes = 262144) {
   const chunks = [];
@@ -27847,10 +28681,10 @@ function mergeRecommendations(verdicts) {
   };
 }
 
-// src/triage/plan-file.ts
-import { mkdtempSync, readFileSync as readFileSync8, rmdirSync, rmSync as rmSync4, writeFileSync as writeFileSync6 } from "fs";
+// ../../packages/setup-wizard/src/triage/plan-file.ts
+import { mkdtempSync, readFileSync as readFileSync9, rmdirSync, rmSync as rmSync5, writeFileSync as writeFileSync8 } from "fs";
 import { tmpdir } from "os";
-import { basename as basename5, dirname as dirname3, join as join13 } from "path";
+import { basename as basename6, dirname as dirname4, join as join15 } from "path";
 var SuppressionEntrySchema = external_exports.object({
   ruleId: external_exports.string(),
   category: DetectionCategory,
@@ -27905,27 +28739,27 @@ function serializePlan(plan, current) {
 function writePlanFile(plan, current, rawValues, deps = {}) {
   const serialized = serializePlan(plan, current);
   assertRawFree(serialized, rawValues);
-  const dir = (deps.mkTempDir ?? (() => mkdtempSync(join13(tmpdir(), "aka-plan-"))))();
-  const path = join13(dir, "setup-plan.json");
-  writeFileSync6(path, serialized, { encoding: "utf8", mode: 384 });
+  const dir = (deps.mkTempDir ?? (() => mkdtempSync(join15(tmpdir(), "aka-plan-"))))();
+  const path = join15(dir, "setup-plan.json");
+  writeFileSync8(path, serialized, { encoding: "utf8", mode: 384 });
   return path;
 }
 function readPlanFile(path) {
-  const text = readFileSync8(path, "utf8");
+  const text = readFileSync9(path, "utf8");
   const json2 = JSON.parse(text);
   return PersistedPlanSchema.parse(json2);
 }
 function deletePlanFile(path) {
-  rmSync4(path, { force: true });
-  const dir = dirname3(path);
-  if (!basename5(dir).startsWith("aka-plan-")) return;
+  rmSync5(path, { force: true });
+  const dir = dirname4(path);
+  if (!basename6(dir).startsWith("aka-plan-")) return;
   try {
     rmdirSync(dir);
   } catch {
   }
 }
 
-// src/triage/surfaced-secrets.ts
+// ../../packages/setup-wizard/src/triage/surfaced-secrets.ts
 var DEFAULT_STATE = "unknown";
 var UNKNOWN_LOCATION = "(location unavailable)";
 function deriveProvider(ruleId) {
@@ -27957,7 +28791,7 @@ function deriveSurfacedSecretFindings(hits, rec, plan) {
   }));
 }
 
-// src/triage/join-file.ts
+// ../../packages/setup-wizard/src/triage/join-file.ts
 function buildJoinEntries(hits) {
   const rawValues = hits.map((h) => h.rawMatch);
   return hits.map((h) => {
@@ -27984,9 +28818,9 @@ function buildJoinEntries(hits) {
   });
 }
 
-// src/triage/resolve.ts
-function resolveSuppressions(rec, join16) {
-  const byId = new Map(join16.map((e) => [e.id, e]));
+// ../../packages/setup-wizard/src/triage/resolve.ts
+function resolveSuppressions(rec, join18) {
+  const byId = new Map(join18.map((e) => [e.id, e]));
   const entries = [];
   const skipped = [];
   for (const cat of rec.perCategory) {
@@ -28024,7 +28858,7 @@ function resolveSuppressions(rec, join16) {
   return { entries, skipped };
 }
 
-// src/triage/writeback.ts
+// ../../packages/setup-wizard/src/triage/writeback.ts
 var SCRUBBED_NOTES = "[notes withheld: model text referenced a raw detected value]";
 var TRIAGE_STATUSES = ["complete", "complete:no-history", "skipped:no-consent"];
 function isSentinel(v) {
@@ -28088,7 +28922,7 @@ function parseTriageStream(text) {
   return { hits, status: "complete" };
 }
 function planTriageWriteback(hits, rec) {
-  const join16 = buildJoinEntries(hits);
+  const join18 = buildJoinEntries(hits);
   const rawValues = hits.map((h) => h.rawMatch);
   const skipped = [];
   const posture = {};
@@ -28128,7 +28962,7 @@ function planTriageWriteback(hits, rec) {
   }
   const { entries, skipped: resolveSkips } = resolveSuppressions(
     { perCategory: safeCategories, notes: rec.notes },
-    join16
+    join18
   );
   skipped.push(...resolveSkips);
   let notes = rec.notes;
@@ -28138,7 +28972,7 @@ function planTriageWriteback(hits, rec) {
     if (err instanceof RawEgressError) notes = SCRUBBED_NOTES;
     else throw err;
   }
-  return { entries, posture, showcase, join: join16, notes, skipped };
+  return { entries, posture, showcase, join: join18, notes, skipped };
 }
 function recommendedPosture(evidence) {
   return { ...severityFloorPosture(), ...evidence };
@@ -28158,7 +28992,7 @@ async function performTriageWriteback(plan, writers, opts) {
   return { written, skippedDuplicate, categoriesWritten: tuned.size };
 }
 
-// src/triage/adapter.ts
+// ../../packages/setup-wizard/src/triage/adapter.ts
 var DEFAULT_PLAN_IO = {
   write: writePlanFile,
   read: readPlanFile,
@@ -28184,28 +29018,31 @@ async function runApply(deps) {
   return confirmed ? runConfirm(deps, planIO) : runPreview(deps, planIO);
 }
 function runPreview(deps, planIO) {
+  const { present } = deps;
   const streamPath = getFlag(deps.argv, "stream");
   const streamText = deps.readStream(streamPath === "" ? void 0 : streamPath);
   const { hits, status } = parseTriageStream(streamText);
   if (hits.length === 0) {
     if (status === "complete") {
-      const empty = frameEmptyState("scan-clean", severityFloorPosture());
-      deps.stdout(show(fenced(empty.copy)));
-      deps.stdout(frameJsonBlock(empty.frame));
+      const empty = present.frameEmptyState("scan-clean", severityFloorPosture());
+      deps.stdout(present.show(present.fenced(empty.copy)));
+      deps.stdout(present.frameJsonBlock(empty.frame));
       return 0;
     }
     if (status === "complete:no-history") {
-      const empty = frameEmptyState("no-history", severityFloorPosture());
-      deps.stdout(show(fenced(empty.copy)));
-      deps.stdout(frameJsonBlock(empty.frame));
+      const empty = present.frameEmptyState("no-history", severityFloorPosture());
+      deps.stdout(present.show(present.fenced(empty.copy)));
+      deps.stdout(present.frameJsonBlock(empty.frame));
       return 0;
     }
-    deps.stdout(show("I didn't review anything \u2014 historical access wasn't granted."));
+    deps.stdout(present.show("I didn't review anything \u2014 historical access wasn't granted."));
     return 0;
   }
   if (!deps.modelJudgeConsent()) {
-    deps.stdout(show("I didn't send anything to the model \u2014 model-judge consent wasn't granted."));
-    deps.stdout(frameJsonBlock(zeroCountFrame(severityFloorPosture())));
+    deps.stdout(
+      present.show("I didn't send anything to the model \u2014 model-judge consent wasn't granted.")
+    );
+    deps.stdout(present.frameJsonBlock(present.zeroCountFrame(severityFloorPosture())));
     return 0;
   }
   const rawValues = hits.map((h) => h.rawMatch);
@@ -28214,7 +29051,7 @@ function runPreview(deps, planIO) {
     const chunks = chunkForJudge(reps, resolveMaxJudgeBytes(deps));
     if (chunks.length > 1) {
       deps.stdout(
-        show(
+        present.show(
           `Reviewing ${String(reps.length)} distinct values in ${String(chunks.length)} batches \u2014 this is the large-history path, so give it a moment.`
         )
       );
@@ -28245,7 +29082,7 @@ function runPreview(deps, planIO) {
     }
     const gate = [];
     if (storeUnavailable) {
-      gate.push(STORE_UNAVAILABLE_NOTE);
+      gate.push(present.storeUnavailableNote);
     }
     gate.push(renderPosturePlan(plan.posture, storeUnavailable ? {} : current));
     gate.push(renderShowcase(plan.showcase));
@@ -28267,11 +29104,11 @@ function runPreview(deps, planIO) {
     };
     const maskedFindings = deriveSurfacedSecretFindings(hits, rec, plan);
     const falsePositivePatterns = deriveFalsePositivePatterns(reps, rec, plan);
-    const calibration = frameCalibration(preview, maskedFindings, falsePositivePatterns);
+    const calibration = present.frameCalibration(preview, maskedFindings, falsePositivePatterns);
     gate.push(calibration.copy);
-    gate.push(renderRecommendedPosture(preview.posture));
-    deps.stdout(show(fenced(gate.join("\n\n"))));
-    deps.stdout(frameJsonBlock(calibration.frame));
+    gate.push(present.renderRecommendedPosture(preview.posture));
+    deps.stdout(present.show(present.fenced(gate.join("\n\n"))));
+    deps.stdout(present.frameJsonBlock(calibration.frame));
     const planPath = planIO.write(plan, storeUnavailable ? {} : current, rawValues);
     deps.stdout(`
 Plan saved to: ${planPath}
@@ -28328,7 +29165,7 @@ async function runConfirm(deps, planIO) {
     if (drifted.length > 0) {
       closeOnce();
       deps.stderr(
-        `AKA apply-suppressions failed: the detection store changed since this plan was previewed (${drifted.join(", ")}). Refusing to apply a stale plan \u2014 re-run /aka:setup to review against the current store.
+        `AKA apply-suppressions failed: the detection store changed since this plan was previewed (${drifted.join(", ")}). Refusing to apply a stale plan \u2014 re-run ${deps.present.rerunHint} to review against the current store.
 `
       );
       return 1;
@@ -28378,7 +29215,7 @@ async function runConfirm(deps, planIO) {
     }
     try {
       deps.stdout(
-        show(renderApplied(res.categoriesWritten, res.written, readRegisteredCommands()))
+        deps.present.show(deps.present.renderApplied(res.categoriesWritten, res.written))
       );
     } catch {
     }
@@ -28393,14 +29230,7 @@ async function runConfirm(deps, planIO) {
   }
 }
 
-// src/triage/judge.ts
-import { execFileSync as execFileSync2 } from "child_process";
-import { mkdtempSync as mkdtempSync2, readFileSync as readFileSync9, rmSync as rmSync5 } from "fs";
-import { tmpdir as tmpdir2 } from "os";
-import { dirname as dirname4, join as join14 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
-
-// src/triage/parse-verdict.ts
+// ../../packages/setup-wizard/src/triage/parse-verdict.ts
 var FENCE_RE = /```json\s*([\s\S]*?)```/g;
 function parseRecommendation(text) {
   const fences = [...text.matchAll(FENCE_RE)];
@@ -28410,8 +29240,23 @@ function parseRecommendation(text) {
 }
 
 // src/triage/judge.ts
-var TRIAGE_DIR = dirname4(fileURLToPath2(import.meta.url));
-var DEFAULT_RUBRIC_PATH = join14(TRIAGE_DIR, "..", "..", "eval", "prompt.md");
+import { execFileSync as execFileSync2 } from "child_process";
+import { mkdtempSync as mkdtempSync2, readFileSync as readFileSync10, rmSync as rmSync6 } from "fs";
+import { tmpdir as tmpdir2 } from "os";
+import { dirname as dirname5, join as join16 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+var TRIAGE_DIR = dirname5(fileURLToPath2(import.meta.url));
+var DEFAULT_RUBRIC_PATH = join16(
+  TRIAGE_DIR,
+  "..",
+  "..",
+  "..",
+  "..",
+  "packages",
+  "setup-wizard",
+  "assets",
+  "triage-rubric.md"
+);
 function parseVerdict(stdout) {
   let envelope;
   try {
@@ -28438,7 +29283,7 @@ function judgeEnv(platform2 = process.platform) {
     CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: "1"
   };
   if (platform2 === "darwin") {
-    env.CLAUDE_CONFIG_DIR = mkdtempSync2(join14(tmpdir2(), "aka-judge-cfg-"));
+    env.CLAUDE_CONFIG_DIR = mkdtempSync2(join16(tmpdir2(), "aka-judge-cfg-"));
   }
   return env;
 }
@@ -28470,7 +29315,7 @@ function runJudge(hits, deps) {
   if (typeof deps.spawn !== "function") {
     throw new TypeError("runJudge requires deps.spawn \u2014 there is no live-spawn fallback");
   }
-  const rubric = deps.loadRubric?.() ?? readFileSync9(DEFAULT_RUBRIC_PATH, "utf8");
+  const rubric = deps.loadRubric?.() ?? readFileSync10(DEFAULT_RUBRIC_PATH, "utf8");
   const hitsJsonl = hits.map((h) => JSON.stringify(toJudgePayload(h))).join("\n");
   const fullPrompt = `${rubric}
 
@@ -28494,13 +29339,237 @@ ${hitsJsonl}
   } finally {
     if (platform2 === "darwin" && env.CLAUDE_CONFIG_DIR) {
       try {
-        rmSync5(env.CLAUDE_CONFIG_DIR, { recursive: true, force: true });
+        rmSync6(env.CLAUDE_CONFIG_DIR, { recursive: true, force: true });
       } catch {
       }
     }
   }
 }
 
+// src/command-registry.ts
+import { readdirSync as readdirSync5 } from "fs";
+import { fileURLToPath as fileURLToPath3 } from "url";
+var COMMAND_NAMESPACE = "aka";
+var COMMANDS_DIR = fileURLToPath3(new URL("../commands", import.meta.url));
+function readRegisteredCommands() {
+  return readdirSync5(COMMANDS_DIR).filter((f) => f.endsWith(".md")).map((f) => `/${COMMAND_NAMESPACE}:${f.replace(/\.md$/, "")}`);
+}
+function selectRegisteredCommands(curated, registry2) {
+  const registered = new Set(registry2);
+  const missing = curated.filter((c) => !registered.has(c));
+  if (missing.length > 0) {
+    throw new Error(
+      `Curated command(s) not registered in the installed plugin: ${missing.join(", ")}`
+    );
+  }
+  return [...curated];
+}
+
+// src/setup-frame-json.ts
+var FRAME_JSON_BEGIN = "<<<AKA_FRAME_JSON";
+var FRAME_JSON_END = "AKA_FRAME_JSON>>>";
+function frameJsonBlock(payload) {
+  return `${FRAME_JSON_BEGIN}
+${JSON.stringify(payload)}
+${FRAME_JSON_END}
+`;
+}
+
+// src/setup-show.ts
+var SHOW_BEGIN = "<<<AKA_SHOW";
+var SHOW_END = "AKA_SHOW>>>";
+function showBlock(body) {
+  return `${SHOW_BEGIN}
+${body}
+${SHOW_END}
+`;
+}
+
+// src/present.ts
+var SHADE = {
+  light: "\u2591",
+  medium: "\u2592",
+  dark: "\u2593",
+  full: "\u2588"
+};
+var ANSI_RE = /\x1b\[[0-9;]*m/g;
+function visibleLength(text) {
+  return text.replace(ANSI_RE, "").length;
+}
+var fg = (hex3) => (text) => {
+  const r = Number.parseInt(hex3.slice(1, 3), 16);
+  const g = Number.parseInt(hex3.slice(3, 5), 16);
+  const b = Number.parseInt(hex3.slice(5, 7), 16);
+  return `\x1B[38;2;${String(r)};${String(g)};${String(b)}m${text}\x1B[0m`;
+};
+var paint = {
+  brand: fg("#33e6c6"),
+  // --color-brand        · ▸▸ AKA wordmark (accent text)
+  dim: fg("#838995"),
+  // --color-text-3      · separators · "/100" · the "unreviewed" label
+  bold: (text) => `\x1B[1m${text}\x1B[0m`,
+  // the health score number
+  ok: fg("#0db15f"),
+  // --color-ok          · healthy ● dot
+  critical: fg("#e63448"),
+  // --color-sev-critical · ■ and the open-findings flag
+  high: fg("#e97a0a"),
+  // --color-sev-high     · ■ and the mid-health dot
+  medium: fg("#f7bd00"),
+  // --color-sev-medium   · ■
+  low: fg("#0581d4")
+  // --color-sev-low      · ■ (azure blue, not purple)
+};
+function padEnd(text, width) {
+  const pad = width - visibleLength(text);
+  return pad > 0 ? text + " ".repeat(pad) : text;
+}
+function indent(text, spaces = 2) {
+  const pad = " ".repeat(spaces);
+  return text.split("\n").map((line) => pad + line).join("\n");
+}
+function table(headers, rows, opts = {}) {
+  const gap = opts.gap ?? 3;
+  const widths = headers.map(
+    (h, i) => Math.max(visibleLength(h), ...rows.map((r) => visibleLength(r[i] ?? "")))
+  );
+  const sep5 = " ".repeat(gap);
+  const fmt = (cells) => cells.map((cell, i) => padEnd(cell, widths[i] ?? 0)).join(sep5);
+  const headerLine = fmt(headers.map((h) => h.toUpperCase()));
+  if (opts.rowSep === true) {
+    const fullWidth = widths.reduce((n, w) => n + w, 0) + gap * Math.max(0, widths.length - 1);
+    const rule = "\u2500".repeat(fullWidth);
+    const body = [];
+    rows.forEach((row, i) => {
+      if (i > 0) body.push(rule);
+      body.push(fmt(row));
+    });
+    return [headerLine, rule, ...body].join("\n");
+  }
+  const ruleLine = widths.map((w) => "\u2500".repeat(w)).join(sep5);
+  return [headerLine, ruleLine, ...rows.map(fmt)].join("\n");
+}
+function fenced(body) {
+  const longestRun = Math.max(0, ...[...body.matchAll(/`+/g)].map((m) => m[0].length));
+  const fence = "`".repeat(Math.max(3, longestRun + 1));
+  return [fence, body, fence].join("\n");
+}
+function show(body) {
+  return showBlock(body);
+}
+
+// src/render.ts
+var STORE_UNAVAILABLE_NOTE = "I couldn't check my records just now \u2014 we can check again soon. Your Claude session keeps going, and I'll fill in as you work.";
+var SEVERITY_GLYPH = {
+  critical: SHADE.full,
+  high: SHADE.dark,
+  medium: SHADE.medium,
+  low: SHADE.light
+};
+var CATEGORY_ORDER2 = DetectionCategory.options;
+function categoryRank(category) {
+  const i = CATEGORY_ORDER2.indexOf(category);
+  return i === -1 ? CATEGORY_ORDER2.length : i;
+}
+function renderRecommendedPosture(posture) {
+  const rows = Object.keys(posture).map((category) => ({
+    category,
+    level: posture[category] ?? ""
+  }));
+  const width = Math.max(0, ...rows.map((r) => r.category.length));
+  return rows.sort((a, b) => categoryRank(a.category) - categoryRank(b.category)).map((r) => `  ${r.category.padEnd(width)}  ${r.level}`).join("\n");
+}
+var GRID_MARK = "\u25CF";
+function renderPostureGrid(posture) {
+  const packs2 = Object.keys(posture).sort(
+    (a, b) => categoryRank(a) - categoryRank(b)
+  );
+  const rows = packs2.map((category) => [
+    category,
+    ...BUILTIN_ORDER.map((level) => posture[category] === level ? GRID_MARK : "")
+  ]);
+  return indent(table(["Category", ...BUILTIN_ORDER], rows));
+}
+var READY_COMMANDS = ["/aka:health", "/aka:findings", "/aka:recommend"];
+function renderCategoriesTuned(categoriesTuned) {
+  return `\u2713 Set all ${String(categoriesTuned)} detection categories`;
+}
+function renderApplied(categoriesTuned, dismissed, registry2) {
+  const routine = dismissed > 0 ? `set aside ${String(dismissed)} routine result${dismissed === 1 ? "" : "s"}` : "nothing routine to set aside";
+  const ready = `Ready: ${selectRegisteredCommands(READY_COMMANDS, registry2).join(" \xB7 ")}`;
+  return `${renderCategoriesTuned(categoriesTuned)} \xB7 ${routine} \xB7 ${ready}`;
+}
+
+// src/calibration.ts
+var SURFACED_KIND_LABEL = {
+  secret: "live keys",
+  pii: "personal data",
+  financial: "financial records",
+  phi: "health records",
+  code_context: "source context",
+  code_flaw: "code flaws",
+  custom: "custom matches",
+  config: "configuration secrets"
+};
+function frameCalibration(preview, maskedFindings = [], falsePositivePatterns = []) {
+  const important = preview.categories.reduce((n, c) => n + c.genuineCount, 0);
+  const routine = preview.categories.reduce((n, c) => n + c.fpCount, 0);
+  const total = important + routine;
+  const surfacedCategories = preview.categories.filter((c) => c.genuineCount > 0).map((c) => c.category);
+  const routineCategories = preview.categories.filter((c) => c.fpCount > 0).map((c) => c.category);
+  const findingKinds = preview.categories.filter((c) => c.genuineCount + c.fpCount > 0).map((c) => ({ category: c.category, count: c.genuineCount + c.fpCount, egress: c.egress }));
+  const frame = {
+    counts: { total, important, routine },
+    routineCategories,
+    surfacedCategories,
+    findingKinds,
+    posture: preview.posture,
+    ...maskedFindings.length > 0 ? { maskedFindings: [...maskedFindings] } : {},
+    ...falsePositivePatterns.length > 0 ? { falsePositivePatterns: [...falsePositivePatterns] } : {}
+  };
+  const kind = surfacedCategories.map((c) => SURFACED_KIND_LABEL[c]).join(", ");
+  const parenthetical = kind ? ` (${kind})` : "";
+  const headline = `I went through Claude's recent work \u2014 ${String(total)} detection${total === 1 ? "" : "s"}, ${String(important)} result${important === 1 ? "" : "s"} worth a look.${parenthetical}`;
+  const copy = headline;
+  return { frame, copy };
+}
+var SCAN_CLEAN_HEADLINE = "I looked over Claude's recent work \u2014 nothing needs your attention right now. You're starting clean; here's what I'd recommend:";
+var NO_HISTORY_HEADLINE = "Nothing to learn from yet \u2014 Claude hasn't left any work on this machine. I'll start each detection category at a careful default:";
+function zeroCountFrame(posture) {
+  return {
+    counts: { total: 0, important: 0, routine: 0 },
+    routineCategories: [],
+    surfacedCategories: [],
+    findingKinds: [],
+    posture
+  };
+}
+function frameEmptyState(cause, posture) {
+  const frame = zeroCountFrame(posture);
+  const copy = cause === "scan-clean" ? `${SCAN_CLEAN_HEADLINE}
+${renderRecommendedPosture(posture)}` : `${NO_HISTORY_HEADLINE}
+${renderPostureGrid(posture)}`;
+  return { frame, copy };
+}
+
+// src/triage/presenter.ts
+var adapterPresenter = {
+  show,
+  fenced,
+  frameJsonBlock,
+  frameEmptyState,
+  frameCalibration,
+  zeroCountFrame,
+  renderRecommendedPosture,
+  // The applied card's Ready line resolves against the installed command
+  // registry — closed over here so the shared core never reads it.
+  renderApplied: (categoriesTuned, dismissed) => renderApplied(categoriesTuned, dismissed, readRegisteredCommands()),
+  storeUnavailableNote: STORE_UNAVAILABLE_NOTE,
+  // The stale-plan refusal tells the user to restart the wizard by its
+  // Claude Code command name.
+  rerunHint: "/aka:setup"
+};
+
 // src/apply-suppressions.ts
 function fail(message) {
   process.stderr.write(`AKA apply-suppressions failed: ${message}
@@ -28515,10 +29584,13 @@ function resolveCreatedBy() {
   }
 }
 function loadRubric() {
-  const here = dirname5(fileURLToPath3(import.meta.url));
-  const shipped = join15(here, "triage-rubric.md");
-  if (existsSync7(shipped)) return readFileSync10(shipped, "utf8");
-  return readFileSync10(join15(here, "..", "eval", "prompt.md"), "utf8");
+  const here = dirname6(fileURLToPath4(import.meta.url));
+  const shipped = join17(here, "triage-rubric.md");
+  if (existsSync9(shipped)) return readFileSync11(shipped, "utf8");
+  return readFileSync11(
+    join17(here, "..", "..", "..", "packages", "setup-wizard", "assets", "triage-rubric.md"),
+    "utf8"
+  );
 }
 async function main() {
   const argv = process.argv.slice(2);
@@ -28526,7 +29598,7 @@ async function main() {
     argv,
     // fd 0 = stdin; the wizard pipes `backfill.js --triage` into this on preview.
     // Called only on the preview path — the confirm path never reads a stream.
-    readStream: (streamPath) => streamPath !== void 0 ? readFileSync10(streamPath, "utf8") : readFileSync10(0, "utf8"),
+    readStream: (streamPath) => streamPath !== void 0 ? readFileSync11(streamPath, "utf8") : readFileSync11(0, "utf8"),
     runJudge: (hits) => runJudge(hits, { spawn: spawnClaude, loadRubric }),
     // The distinct model-judge egress consent, read from settings.json. When it
     // is absent or stale the preview skips the judge instead of sending findings
@@ -28548,6 +29620,7 @@ async function main() {
     now: () => Date.now(),
     createdBy: resolveCreatedBy,
     stdout: (s) => process.stdout.write(s),
+    present: adapterPresenter,
     stderr: (s) => process.stderr.write(s)
   });
   process.exit(code);