@akasecurity/ai-tc-claude-code 0.9.5 → 0.9.6

package/scripts/start-light.js

@@ -18255,6 +18255,40 @@ function escapeRegExp2(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 
+// ../../packages/detections/src/regex-cache.ts
+var singles = /* @__PURE__ */ new WeakMap();
+var keywordLists = /* @__PURE__ */ new WeakMap();
+var labelLists = /* @__PURE__ */ new WeakMap();
+function listCache(kind) {
+  return kind === "keyword" ? keywordLists : labelLists;
+}
+function memoizedRegExp(owner, build) {
+  const cached2 = singles.get(owner);
+  if (cached2 !== void 0) {
+    cached2.lastIndex = 0;
+    return cached2;
+  }
+  const compiled = build();
+  singles.set(owner, compiled);
+  return compiled;
+}
+function memoizedRegExpList(kind, owner, build) {
+  const cache = listCache(kind);
+  const cached2 = cache.get(owner);
+  if (cached2 !== void 0) {
+    if (cached2.stateful) {
+      for (const re of cached2.entries) if (re !== void 0) re.lastIndex = 0;
+    }
+    return cached2.entries;
+  }
+  const entries = build();
+  cache.set(owner, {
+    entries,
+    stateful: entries.some((re) => re !== void 0 && (re.global || re.sticky))
+  });
+  return entries;
+}
+
 // ../../packages/detections/src/matchers/limits.ts
 var MAX_MATCHES_PER_RULE = 1e4;
 var MAX_REGEX_INPUT_LENGTH = 2e5;
@@ -18265,10 +18299,17 @@ var KeywordMatcher2 = class {
     if (rule.matcher.type !== "keyword") return [];
     const { keywords, caseSensitive } = rule.matcher;
     const spans = [];
-    for (const kw of keywords) {
-      if (kw.length === 0) continue;
+    const compiled = memoizedRegExpList(
+      "keyword",
+      rule.matcher,
+      () => keywords.map((kw) => {
+        if (kw.length === 0) return void 0;
+        return new RegExp(escapeRegExp2(kw), caseSensitive ? "gu" : "giu");
+      })
+    );
+    for (const re of compiled) {
+      if (re === void 0) continue;
       if (spans.length >= MAX_MATCHES_PER_RULE) break;
-      const re = new RegExp(escapeRegExp2(kw), caseSensitive ? "gu" : "giu");
       let m;
       while ((m = re.exec(text)) !== null) {
         spans.push({ start: m.index, end: m.index + m[0].length });
@@ -18284,7 +18325,10 @@ var RegexMatcher2 = class {
   match(text, rule) {
     if (rule.matcher.type !== "regex") return [];
     const { pattern, flags, captureGroup } = rule.matcher;
-    const re = new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`);
+    const re = memoizedRegExp(
+      rule.matcher,
+      () => new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`)
+    );
     const scanText2 = text.length > MAX_REGEX_INPUT_LENGTH ? text.slice(0, MAX_REGEX_INPUT_LENGTH) : text;
     const spans = [];
     let m;
@@ -18417,7 +18461,7 @@ import { basename as basename4, dirname as dirname3, sep as sep3 } from "path";
 // ../../packages/plugin-sdk/src/project-files.ts
 var import_ignore = __toESM(require_ignore(), 1);
 import { existsSync as existsSync8, readdirSync as readdirSync4, readFileSync as readFileSync8 } from "fs";
-import { basename as basename5, join as join12, relative, sep as sep4 } from "path";
+import { basename as basename5, join as join12 } from "path";
 
 // ../../packages/plugin-sdk/src/provider-env-antigravity.ts
 var optionalBaseUrl2 = external_exports.preprocess((v) => {
@@ -18615,8 +18659,8 @@ function table(headers, rows, opts = {}) {
   const widths = headers.map(
     (h, i) => Math.max(visibleLength(h), ...rows.map((r) => visibleLength(r[i] ?? "")))
   );
-  const sep5 = " ".repeat(gap);
-  const fmt = (cells) => cells.map((cell, i) => padEnd(cell, widths[i] ?? 0)).join(sep5);
+  const sep4 = " ".repeat(gap);
+  const fmt = (cells) => cells.map((cell, i) => padEnd(cell, widths[i] ?? 0)).join(sep4);
   const headerLine = fmt(headers.map((h) => h.toUpperCase()));
   if (opts.rowSep === true) {
     const fullWidth = widths.reduce((n, w) => n + w, 0) + gap * Math.max(0, widths.length - 1);
@@ -18628,7 +18672,7 @@ function table(headers, rows, opts = {}) {
     });
     return [headerLine, rule, ...body].join("\n");
   }
-  const ruleLine = widths.map((w) => "\u2500".repeat(w)).join(sep5);
+  const ruleLine = widths.map((w) => "\u2500".repeat(w)).join(sep4);
   return [headerLine, ruleLine, ...rows.map(fmt)].join("\n");
 }
 function fenced(body) {

package/scripts/statusline.js

@@ -25926,6 +25926,40 @@ function escapeRegExp2(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 
+// ../../packages/detections/src/regex-cache.ts
+var singles = /* @__PURE__ */ new WeakMap();
+var keywordLists = /* @__PURE__ */ new WeakMap();
+var labelLists = /* @__PURE__ */ new WeakMap();
+function listCache(kind) {
+  return kind === "keyword" ? keywordLists : labelLists;
+}
+function memoizedRegExp(owner, build) {
+  const cached2 = singles.get(owner);
+  if (cached2 !== void 0) {
+    cached2.lastIndex = 0;
+    return cached2;
+  }
+  const compiled = build();
+  singles.set(owner, compiled);
+  return compiled;
+}
+function memoizedRegExpList(kind, owner, build) {
+  const cache = listCache(kind);
+  const cached2 = cache.get(owner);
+  if (cached2 !== void 0) {
+    if (cached2.stateful) {
+      for (const re of cached2.entries) if (re !== void 0) re.lastIndex = 0;
+    }
+    return cached2.entries;
+  }
+  const entries = build();
+  cache.set(owner, {
+    entries,
+    stateful: entries.some((re) => re !== void 0 && (re.global || re.sticky))
+  });
+  return entries;
+}
+
 // ../../packages/detections/src/matchers/limits.ts
 var MAX_MATCHES_PER_RULE = 1e4;
 var MAX_REGEX_INPUT_LENGTH = 2e5;
@@ -25936,10 +25970,17 @@ var KeywordMatcher2 = class {
     if (rule.matcher.type !== "keyword") return [];
     const { keywords, caseSensitive } = rule.matcher;
     const spans = [];
-    for (const kw of keywords) {
-      if (kw.length === 0) continue;
+    const compiled = memoizedRegExpList(
+      "keyword",
+      rule.matcher,
+      () => keywords.map((kw) => {
+        if (kw.length === 0) return void 0;
+        return new RegExp(escapeRegExp2(kw), caseSensitive ? "gu" : "giu");
+      })
+    );
+    for (const re of compiled) {
+      if (re === void 0) continue;
       if (spans.length >= MAX_MATCHES_PER_RULE) break;
-      const re = new RegExp(escapeRegExp2(kw), caseSensitive ? "gu" : "giu");
       let m;
       while ((m = re.exec(text)) !== null) {
         spans.push({ start: m.index, end: m.index + m[0].length });
@@ -25955,7 +25996,10 @@ var RegexMatcher2 = class {
   match(text, rule) {
     if (rule.matcher.type !== "regex") return [];
     const { pattern, flags, captureGroup } = rule.matcher;
-    const re = new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`);
+    const re = memoizedRegExp(
+      rule.matcher,
+      () => new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`)
+    );
     const scanText2 = text.length > MAX_REGEX_INPUT_LENGTH ? text.slice(0, MAX_REGEX_INPUT_LENGTH) : text;
     const spans = [];
     let m;
@@ -28113,7 +28157,7 @@ import { basename as basename4, dirname as dirname3, sep as sep3 } from "path";
 // ../../packages/plugin-sdk/src/project-files.ts
 var import_ignore = __toESM(require_ignore(), 1);
 import { existsSync as existsSync8, readdirSync as readdirSync4, readFileSync as readFileSync8 } from "fs";
-import { basename as basename5, join as join12, relative, sep as sep4 } from "path";
+import { basename as basename5, join as join12 } from "path";
 
 // ../../packages/plugin-sdk/src/provider-env-antigravity.ts
 var optionalBaseUrl2 = external_exports.preprocess((v) => {
@@ -28598,14 +28642,14 @@ function renderStatusBar(s, opts = {}) {
     const unreviewed = `unreviewed ${SHADE.full}${String(u.critical)} ${SHADE.dark}${String(u.high)} ${SHADE.medium}${String(u.medium)} ${SHADE.light}${String(u.low)}`;
     return `\u25B8\u25B8 AKA   health ${String(s.score)}/100   ${unreviewed}   \u2691 ${String(s.openFindings)} open findings`;
   }
-  const sep5 = ` ${paint.dim("\u2502")} `;
+  const sep4 = ` ${paint.dim("\u2502")} `;
   const sq = "\u25A0";
   const dot = s.score >= 80 ? paint.ok("\u25CF") : s.score >= 50 ? paint.high("\u25CF") : paint.critical("\u25CF");
   const score = `${dot} health ${paint.bold(String(s.score))}${paint.dim("/100")}`;
   const tally = `${paint.dim("unreviewed")} ${paint.critical(sq)}${String(u.critical)} ${paint.high(sq)}${String(u.high)} ${paint.medium(sq)}${String(u.medium)} ${paint.low(sq)}${String(u.low)}`;
   const flag = s.openFindings > 0 ? paint.critical("\u2691") : paint.dim("\u2691");
   const open2 = `${flag} ${String(s.openFindings)} open findings`;
-  return `${paint.brand("\u25B8\u25B8 AKA")}${sep5}${score}${sep5}${tally}${sep5}${open2}`;
+  return `${paint.brand("\u25B8\u25B8 AKA")}${sep4}${score}${sep4}${tally}${sep4}${open2}`;
 }
 function renderStatusLine(summary) {
   return renderStatusBar(findingStatus(summary), { color: true });

package/scripts/stop.js

@@ -18395,6 +18395,40 @@ function escapeRegExp2(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 
+// ../../packages/detections/src/regex-cache.ts
+var singles = /* @__PURE__ */ new WeakMap();
+var keywordLists = /* @__PURE__ */ new WeakMap();
+var labelLists = /* @__PURE__ */ new WeakMap();
+function listCache(kind) {
+  return kind === "keyword" ? keywordLists : labelLists;
+}
+function memoizedRegExp(owner, build) {
+  const cached2 = singles.get(owner);
+  if (cached2 !== void 0) {
+    cached2.lastIndex = 0;
+    return cached2;
+  }
+  const compiled = build();
+  singles.set(owner, compiled);
+  return compiled;
+}
+function memoizedRegExpList(kind, owner, build) {
+  const cache = listCache(kind);
+  const cached2 = cache.get(owner);
+  if (cached2 !== void 0) {
+    if (cached2.stateful) {
+      for (const re of cached2.entries) if (re !== void 0) re.lastIndex = 0;
+    }
+    return cached2.entries;
+  }
+  const entries = build();
+  cache.set(owner, {
+    entries,
+    stateful: entries.some((re) => re !== void 0 && (re.global || re.sticky))
+  });
+  return entries;
+}
+
 // ../../packages/detections/src/matchers/limits.ts
 var MAX_MATCHES_PER_RULE = 1e4;
 var MAX_REGEX_INPUT_LENGTH = 2e5;
@@ -18405,10 +18439,17 @@ var KeywordMatcher2 = class {
     if (rule.matcher.type !== "keyword") return [];
     const { keywords, caseSensitive } = rule.matcher;
     const spans = [];
-    for (const kw of keywords) {
-      if (kw.length === 0) continue;
+    const compiled = memoizedRegExpList(
+      "keyword",
+      rule.matcher,
+      () => keywords.map((kw) => {
+        if (kw.length === 0) return void 0;
+        return new RegExp(escapeRegExp2(kw), caseSensitive ? "gu" : "giu");
+      })
+    );
+    for (const re of compiled) {
+      if (re === void 0) continue;
       if (spans.length >= MAX_MATCHES_PER_RULE) break;
-      const re = new RegExp(escapeRegExp2(kw), caseSensitive ? "gu" : "giu");
       let m;
       while ((m = re.exec(text)) !== null) {
         spans.push({ start: m.index, end: m.index + m[0].length });
@@ -18424,7 +18465,10 @@ var RegexMatcher2 = class {
   match(text, rule) {
     if (rule.matcher.type !== "regex") return [];
     const { pattern, flags, captureGroup } = rule.matcher;
-    const re = new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`);
+    const re = memoizedRegExp(
+      rule.matcher,
+      () => new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`)
+    );
     const scanText2 = text.length > MAX_REGEX_INPUT_LENGTH ? text.slice(0, MAX_REGEX_INPUT_LENGTH) : text;
     const spans = [];
     let m;
@@ -18557,7 +18601,7 @@ import { basename as basename4, dirname as dirname3, sep as sep3 } from "path";
 // ../../packages/plugin-sdk/src/project-files.ts
 var import_ignore = __toESM(require_ignore(), 1);
 import { existsSync as existsSync8, readdirSync as readdirSync4, readFileSync as readFileSync8 } from "fs";
-import { basename as basename5, join as join12, relative, sep as sep4 } from "path";
+import { basename as basename5, join as join12 } from "path";
 
 // ../../packages/plugin-sdk/src/provider-env-antigravity.ts
 var optionalBaseUrl2 = external_exports.preprocess((v) => {

package/scripts/user-prompt-submit.js

@@ -26957,6 +26957,40 @@ function escapeRegExp2(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 
+// ../../packages/detections/src/regex-cache.ts
+var singles = /* @__PURE__ */ new WeakMap();
+var keywordLists = /* @__PURE__ */ new WeakMap();
+var labelLists = /* @__PURE__ */ new WeakMap();
+function listCache(kind) {
+  return kind === "keyword" ? keywordLists : labelLists;
+}
+function memoizedRegExp(owner, build) {
+  const cached2 = singles.get(owner);
+  if (cached2 !== void 0) {
+    cached2.lastIndex = 0;
+    return cached2;
+  }
+  const compiled = build();
+  singles.set(owner, compiled);
+  return compiled;
+}
+function memoizedRegExpList(kind, owner, build) {
+  const cache = listCache(kind);
+  const cached2 = cache.get(owner);
+  if (cached2 !== void 0) {
+    if (cached2.stateful) {
+      for (const re of cached2.entries) if (re !== void 0) re.lastIndex = 0;
+    }
+    return cached2.entries;
+  }
+  const entries = build();
+  cache.set(owner, {
+    entries,
+    stateful: entries.some((re) => re !== void 0 && (re.global || re.sticky))
+  });
+  return entries;
+}
+
 // ../../packages/detections/src/matchers/limits.ts
 var MAX_MATCHES_PER_RULE = 1e4;
 var MAX_REGEX_INPUT_LENGTH = 2e5;
@@ -26967,10 +27001,17 @@ var KeywordMatcher2 = class {
     if (rule.matcher.type !== "keyword") return [];
     const { keywords, caseSensitive } = rule.matcher;
     const spans = [];
-    for (const kw of keywords) {
-      if (kw.length === 0) continue;
+    const compiled = memoizedRegExpList(
+      "keyword",
+      rule.matcher,
+      () => keywords.map((kw) => {
+        if (kw.length === 0) return void 0;
+        return new RegExp(escapeRegExp2(kw), caseSensitive ? "gu" : "giu");
+      })
+    );
+    for (const re of compiled) {
+      if (re === void 0) continue;
       if (spans.length >= MAX_MATCHES_PER_RULE) break;
-      const re = new RegExp(escapeRegExp2(kw), caseSensitive ? "gu" : "giu");
       let m;
       while ((m = re.exec(text)) !== null) {
         spans.push({ start: m.index, end: m.index + m[0].length });
@@ -26986,7 +27027,10 @@ var RegexMatcher2 = class {
   match(text, rule) {
     if (rule.matcher.type !== "regex") return [];
     const { pattern, flags, captureGroup } = rule.matcher;
-    const re = new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`);
+    const re = memoizedRegExp(
+      rule.matcher,
+      () => new RegExp(pattern, flags.includes("d") ? flags : `${flags}d`)
+    );
     const scanText2 = text.length > MAX_REGEX_INPUT_LENGTH ? text.slice(0, MAX_REGEX_INPUT_LENGTH) : text;
     const spans = [];
     let m;
@@ -27094,11 +27138,15 @@ function isCorroborated(candidate, candidates, text) {
   const labels = req.labels;
   if (labels && labels.length > 0) {
     const haystack = text.slice(Math.max(0, winStart), winEnd);
-    for (const label of labels) {
-      const trimmed = label.trim();
-      if (trimmed.length === 0) continue;
-      const re = new RegExp(`(?<![A-Za-z0-9])${escapeRegExp2(trimmed)}(?![A-Za-z0-9])`, "i");
-      if (re.test(haystack)) return true;
+    for (const re of memoizedRegExpList(
+      "label",
+      req,
+      () => labels.map((label) => {
+        const trimmed = label.trim();
+        return trimmed.length === 0 ? void 0 : new RegExp(`(?<![A-Za-z0-9])${escapeRegExp2(trimmed)}(?![A-Za-z0-9])`, "i");
+      })
+    )) {
+      if (re?.test(haystack)) return true;
     }
   }
   return false;
@@ -27366,13 +27414,14 @@ function probesFor(rule) {
   const derived = rule.matcher.type === "regex" ? derivedProbes(rule.matcher.pattern) : [];
   return [...derived, ...EXPONENTIAL_PROBES, ...POLYNOMIAL_PROBES];
 }
-function worstProbeMs(rule) {
+var wallClock = () => performance.now();
+function worstProbeMs(rule, now = wallClock) {
   let ms = 0;
   let probe = "";
   for (const text of probesFor(rule)) {
-    const start = performance.now();
+    const start = now();
     scan(text, [rule]);
-    const elapsed = performance.now() - start;
+    const elapsed = now() - start;
     if (elapsed > ms) {
       ms = elapsed;
       probe = text;
@@ -30011,7 +30060,7 @@ import { basename as basename4, dirname as dirname3, sep as sep3 } from "path";
 // ../../packages/plugin-sdk/src/project-files.ts
 var import_ignore = __toESM(require_ignore(), 1);
 import { existsSync as existsSync8, readdirSync as readdirSync4, readFileSync as readFileSync8 } from "fs";
-import { basename as basename5, join as join12, relative, sep as sep4 } from "path";
+import { basename as basename5, join as join12 } from "path";
 
 // ../../packages/plugin-sdk/src/provider-env-antigravity.ts
 var optionalBaseUrl2 = external_exports.preprocess((v) => {
@@ -30677,53 +30726,6 @@ var UNOPENABLE_VAULT = {
   resolvePointerIdentity: () => Promise.resolve(null)
 };
 
-// src/present.ts
-var fg = (hex3) => (text) => {
-  const r = Number.parseInt(hex3.slice(1, 3), 16);
-  const g = Number.parseInt(hex3.slice(3, 5), 16);
-  const b = Number.parseInt(hex3.slice(5, 7), 16);
-  return `\x1B[38;2;${String(r)};${String(g)};${String(b)}m${text}\x1B[0m`;
-};
-var paint = {
-  brand: fg("#33e6c6"),
-  // --color-brand        · ▸▸ AKA wordmark (accent text)
-  dim: fg("#838995"),
-  // --color-text-3      · separators · "/100" · the "unreviewed" label
-  bold: (text) => `\x1B[1m${text}\x1B[0m`,
-  // the health score number
-  ok: fg("#0db15f"),
-  // --color-ok          · healthy ● dot
-  critical: fg("#e63448"),
-  // --color-sev-critical · ■ and the open-findings flag
-  high: fg("#e97a0a"),
-  // --color-sev-high     · ■ and the mid-health dot
-  medium: fg("#f7bd00"),
-  // --color-sev-medium   · ■
-  low: fg("#0581d4")
-  // --color-sev-low      · ■ (azure blue, not purple)
-};
-
-// src/exception-guidance.ts
-function blockMessage(input) {
-  const preview = input.blockedRef ? ` (${input.blockedRef.maskedValue})` : "";
-  const commands = input.blockedRef ? [
-    `  aka exception approve ${input.blockedRef.reference}       (asks for scope + reason, then resubmit)`,
-    "  aka exception approve <value>      (same flow, pasting the blocked value itself)"
-  ] : ["  aka exception approve       (asks for scope + reason, then resubmit)"];
-  const note = input.note ? ` ${input.note}` : "";
-  return [
-    `AKA blocked this ${input.subject} \u2014 flagged ${input.ruleIds}${preview}.${note} Remove the flagged content and resubmit.`,
-    "If this is intentional and you accept the risk, grant an exception:",
-    ...commands,
-    "More: aka exception --help"
-  ].join("\n");
-}
-function exceptionPointer(references) {
-  const ref = references?.[0];
-  if (ref === void 0) return "";
-  return ` To allow this exact value intentionally, run: aka exception approve ${ref.reference}.`;
-}
-
 // src/hooks/clipboard.ts
 import { spawnSync } from "child_process";
 var defaultSpawner = (cmd, args, input) => {
@@ -30765,21 +30767,6 @@ function writeClipboard(text, opts) {
 // src/hooks/onboarding-nudge.ts
 var ONBOARDING_NUDGE = "AKA Security is installed but not calibrated \u2014 run /aka:setup to tune notifications to this machine (about a minute).";
 
-// src/hooks/resubmit-message.ts
-var REWRITE_OPEN = "----- safe prompt (copy everything between these lines) -----";
-var REWRITE_CLOSE = "----- end safe prompt -----";
-function resubmitMessage(opts) {
-  const paste = opts.clipboardWrote ? "It is already on your clipboard \u2014 paste and resubmit." : "Copy it, then paste and resubmit.";
-  return [
-    `AKA blocked this prompt \u2014 flagged ${opts.ruleIds}. The flagged value never reached the model.`,
-    `Here is your prompt with each detected secret replaced by a vault pointer. ${paste}`,
-    REWRITE_OPEN,
-    opts.rewrite,
-    REWRITE_CLOSE,
-    "The model works with the pointers; the real values stay in your local vault." + exceptionPointer(opts.blockedRef ? [opts.blockedRef] : void 0)
-  ].join("\n");
-}
-
 // src/hooks/shared.ts
 async function readStdin() {
   return new Promise((resolve) => {
@@ -31186,6 +31173,110 @@ function claimStoreUnavailableWarning(dataDir2, sessionId) {
   return true;
 }
 
+// src/present.ts
+var fg = (hex3) => (text) => {
+  const r = Number.parseInt(hex3.slice(1, 3), 16);
+  const g = Number.parseInt(hex3.slice(3, 5), 16);
+  const b = Number.parseInt(hex3.slice(5, 7), 16);
+  return `\x1B[38;2;${String(r)};${String(g)};${String(b)}m${text}\x1B[0m`;
+};
+var paint = {
+  brand: fg("#33e6c6"),
+  // --color-brand        · ▸▸ AKA wordmark (accent text)
+  dim: fg("#838995"),
+  // --color-text-3      · separators · "/100" · the "unreviewed" label
+  bold: (text) => `\x1B[1m${text}\x1B[0m`,
+  // the health score number
+  ok: fg("#0db15f"),
+  // --color-ok          · healthy ● dot
+  critical: fg("#e63448"),
+  // --color-sev-critical · ■ and the open-findings flag
+  high: fg("#e97a0a"),
+  // --color-sev-high     · ■ and the mid-health dot
+  medium: fg("#f7bd00"),
+  // --color-sev-medium   · ■
+  low: fg("#0581d4")
+  // --color-sev-low      · ■ (azure blue, not purple)
+};
+
+// src/exception-guidance.ts
+function blockMessage(input) {
+  const preview = input.blockedRef ? ` (${input.blockedRef.maskedValue})` : "";
+  const commands = input.blockedRef ? [
+    `  aka exception approve ${input.blockedRef.reference}       (asks for scope + reason, then resubmit)`,
+    "  aka exception approve <value>      (same flow, pasting the blocked value itself)"
+  ] : ["  aka exception approve       (asks for scope + reason, then resubmit)"];
+  const note = input.note ? ` ${input.note}` : "";
+  return [
+    `AKA blocked this ${input.subject} \u2014 flagged ${input.ruleIds}${preview}.${note} Remove the flagged content and resubmit.`,
+    "If this is intentional and you accept the risk, grant an exception:",
+    ...commands,
+    "More: aka exception --help"
+  ].join("\n");
+}
+function exceptionPointer(references) {
+  const ref = references?.[0];
+  if (ref === void 0) return "";
+  return ` To allow this exact value intentionally, run: aka exception approve ${ref.reference}.`;
+}
+
+// src/hooks/resubmit-message.ts
+var REWRITE_OPEN = "----- safe prompt (copy everything between these lines) -----";
+var REWRITE_CLOSE = "----- end safe prompt -----";
+function resubmitMessage(opts) {
+  const paste = opts.clipboardWrote ? "It is already on your clipboard \u2014 paste and resubmit." : "Copy it, then paste and resubmit.";
+  return [
+    `AKA blocked this prompt \u2014 flagged ${opts.ruleIds}. The flagged value never reached the model.`,
+    `Here is your prompt with each detected secret replaced by a vault pointer. ${paste}`,
+    REWRITE_OPEN,
+    opts.rewrite,
+    REWRITE_CLOSE,
+    "The model works with the pointers; the real values stay in your local vault." + exceptionPointer(opts.blockedRef ? [opts.blockedRef] : void 0)
+  ].join("\n");
+}
+
+// src/hooks/user-prompt-submit-decision.ts
+async function decideUserPromptSubmit(prompt, result, deps = {}) {
+  if (result.action === "block" || result.action === "redact") {
+    const ruleIds = uniqueRuleIds(result.findings);
+    const blockedRef = result.blockedReferences?.[0];
+    const rewrite = deps.tokenizePrompt ? await pointerizedRewrite(prompt, result.findings, deps.tokenizePrompt) : null;
+    if (rewrite !== null) {
+      const clipboardWrote = writeClipboardSafely(rewrite, deps.writeClipboard);
+      return {
+        decision: "block",
+        reason: resubmitMessage({ ruleIds, rewrite, clipboardWrote, blockedRef })
+      };
+    }
+    return { decision: "block", reason: blockMessage({ subject: "prompt", ruleIds, blockedRef }) };
+  }
+  if (result.action === "warn") {
+    return {
+      systemMessage: `AKA flagged sensitive content (${uniqueRuleIds(result.findings)}) \u2014 sent unchanged.${exceptionPointer(result.blockedReferences)}`
+    };
+  }
+  return null;
+}
+function writeClipboardSafely(text, write) {
+  try {
+    return write?.(text) ?? false;
+  } catch {
+    return false;
+  }
+}
+async function pointerizedRewrite(prompt, findings, tokenize) {
+  try {
+    const tokenized = await tokenize(prompt, findings);
+    if (tokenized.pointers.length === 0) return null;
+    for (const finding of findings) {
+      if (finding.rawMatch !== "" && tokenized.text.includes(finding.rawMatch)) return null;
+    }
+    return tokenized.text;
+  } catch {
+    return null;
+  }
+}
+
 // src/hooks/user-prompt-submit.ts
 async function main() {
   const input = parseJson(await readStdin());
@@ -31213,45 +31304,21 @@ async function main() {
   } finally {
     await runtime.close();
   }
-  if (result.action === "block" || result.action === "redact") {
-    const ruleIds = uniqueRuleIds(result.findings);
-    const blockedRef = result.blockedReferences?.[0];
-    let reason = blockMessage({ subject: "prompt", ruleIds, blockedRef });
-    if (isVaultConsentValid(config2.settings.vaultConsent)) {
-      const rewrite = await pointerizedRewrite(prompt, result.findings);
-      if (rewrite !== null) {
-        const clipboardWrote = writeClipboard(rewrite);
-        reason = resubmitMessage({ ruleIds, rewrite, clipboardWrote, blockedRef });
-      }
-    }
-    await emit({ decision: "block", reason });
-    return;
-  }
-  if (result.action === "warn") {
-    await emit({
-      systemMessage: `AKA flagged sensitive content (${uniqueRuleIds(result.findings)}) \u2014 sent unchanged.${exceptionPointer(result.blockedReferences)}`
-    });
+  const decision = await decideUserPromptSubmit(prompt, result, {
+    tokenizePrompt: isVaultConsentValid(config2.settings.vaultConsent) ? (text, findings) => createVaultGlue().tokenizeText(text, {
+      findings,
+      sighting: { location: "prompt", kind: "prompt" }
+    }) : void 0,
+    writeClipboard
+  });
+  if (decision !== null) {
+    await emit(decision);
     return;
   }
   if (!config2.onboarded && claimOnboardingNudge(config2.dataDir, sessionId)) {
     await emit({ systemMessage: ONBOARDING_NUDGE });
   }
 }
-async function pointerizedRewrite(prompt, findings) {
-  try {
-    const tokenized = await createVaultGlue().tokenizeText(prompt, {
-      findings,
-      sighting: { location: "prompt", kind: "prompt" }
-    });
-    if (tokenized.pointers.length === 0) return null;
-    for (const finding of findings) {
-      if (finding.rawMatch !== "" && tokenized.text.includes(finding.rawMatch)) return null;
-    }
-    return tokenized.text;
-  } catch {
-    return null;
-  }
-}
 try {
   await main();
 } catch {