@cybedefend/vibedefend 1.4.3 → 1.4.5

package/dist/hook-runner.js

@@ -39,22 +39,31 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
-// node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/quote.js
+// node_modules/.pnpm/shell-quote@1.12.0/node_modules/shell-quote/quote.js
 var require_quote = __commonJS({
-  "node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/quote.js"(exports, module) {
+  "node_modules/.pnpm/shell-quote@1.12.0/node_modules/shell-quote/quote.js"(exports, module) {
     "use strict";
     var OPS = (
       /** @type {const} */
       [
         "||",
         "&&",
+        ";;&",
         ";;",
+        ";&",
         "|&",
         "<(",
+        ">(",
         "<<<",
+        "<<-",
+        "<<",
         ">>",
         ">&",
+        ">|",
+        "&>>",
+        "&>",
         "<&",
+        "<>",
         "&",
         ";",
         "(",
@@ -65,9 +74,13 @@ var require_quote = __commonJS({
       ]
     );
     var LINE_TERMINATORS = /[\n\r\u2028\u2029]/;
-    var GLOB_SHELL_SPECIAL = /[\s#!"$&'():;<=>@\\^`|]/g;
+    var GLOB_SHELL_SPECIAL = /[\s#!"$&'():;<=>@\\^`|~]/g;
     module.exports = function quote(xs) {
+      var sawComment = false;
       return xs.map(function(s) {
+        if (sawComment && typeof s === "string" && LINE_TERMINATORS.test(s)) {
+          throw new TypeError("a token after a `comment` must not contain line terminators");
+        }
         if (s === "") {
           return (
             /** @type {const} */
@@ -82,6 +95,12 @@ var require_quote = __commonJS({
             if (LINE_TERMINATORS.test(s.pattern)) {
               throw new TypeError("glob `pattern` must not contain line terminators");
             }
+            if (s.pattern === "") {
+              return (
+                /** @type {const} */
+                "''"
+              );
+            }
             return s.pattern.replace(GLOB_SHELL_SPECIAL, "\\$&");
           }
           if ("op" in s && typeof s.op === "string") {
@@ -94,15 +113,19 @@ var require_quote = __commonJS({
             if (LINE_TERMINATORS.test(s.comment)) {
               throw new TypeError("`comment` must not contain line terminators");
             }
+            sawComment = true;
             return "#" + s.comment;
           }
           throw new TypeError("unrecognized object token shape");
         }
+        if (/'/.test(s) && /!/.test(s)) {
+          return "'" + s.replace(/'/g, `'"'"'`) + "'";
+        }
         if (/["\s\\]/.test(s) && !/'/.test(s)) {
-          return "'" + s.replace(/(['])/g, "\\$1") + "'";
+          return "'" + s + "'";
         }
         if (/["'\s]/.test(s)) {
-          return '"' + s.replace(/(["\\$`!])/g, "\\$1") + '"';
+          return '"' + s.replace(/(["\\$`])/g, "\\$1") + '"';
         }
         return String(s).replace(/([A-Za-z]:)?([#!"$&'()*,:;<=>?@[\\\]^`{|}~])/g, "$1\\$2");
       }).join(" ");
@@ -110,23 +133,31 @@ var require_quote = __commonJS({
   }
 });
 
-// node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/parse.js
+// node_modules/.pnpm/shell-quote@1.12.0/node_modules/shell-quote/parse.js
 var require_parse = __commonJS({
-  "node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/parse.js"(exports, module) {
+  "node_modules/.pnpm/shell-quote@1.12.0/node_modules/shell-quote/parse.js"(exports, module) {
     "use strict";
     var CONTROL = (
       /** @type {const} */
       "(?:" + /** @type {const} */
       [
         "\\|\\|",
-        "\\&\\&",
-        ";;",
-        "\\|\\&",
+        "\\&(?:\\&|>>?)",
+        // `&&`, `&>`, and `&>>`
+        ";;\\&?",
+        // `;;` and `;;&`
+        "[;|]\\&",
+        // `;&` and `|&`
         "\\<\\(",
         "\\<\\<\\<",
+        "\\<\\<-",
+        "\\<\\<(?!\\()",
+        // `<<(` stays `<` and `<(`, as zsh reads it; other shells reject it
         ">>",
-        ">\\&",
-        "<\\&",
+        ">[&|(]",
+        // `>&`, `>|`, and `>(`
+        "<[&>]",
+        // `<&` and `<>`
         "[&;()|<>]"
       ].join(
         /** @type {const} */
@@ -143,10 +174,11 @@ var require_parse = __commonJS({
       /** @type {const} */
       "'([^']*?)'"
     );
-    var DOUBLE_QUOTE = (
-      /** @type {const} */
-      '"((\\\\"|[^"])*?)"'
-    );
+    var ANSI_C_BODY = "(?:\\\\[\\s\\S]|[^\\\\'])*?";
+    var ANSI_C_QUOTE = "\\$'" + ANSI_C_BODY + "'";
+    var ansiCAt = new RegExp("\\$'" + ANSI_C_BODY + "(?:(')|\\\\?$)", "g");
+    var ANSI_C_LETTERS = "abeEfnrtv";
+    var ANSI_C_CHARS = "\x07\b\x1B\x1B\f\n\r	\v";
     var hash = /^#$/;
     var SQ = (
       /** @type {const} */
@@ -195,17 +227,46 @@ var require_parse = __commonJS({
       }
       return pre + r;
     }
+    var ansiCEscape = /\\([0-7]{1,3}|x[\dA-Fa-f]{1,2}|u[\dA-Fa-f]{1,4}|U[\dA-Fa-f]{1,8}|c(?:\\\\|[\s\S])|[abeEfnrtv\\'"?])/g;
+    function expandAnsiCEscape(m, escape) {
+      var kind = escape.charAt(0);
+      if (kind === "c") {
+        var ctrl = escape.charAt(1);
+        return ctrl === "?" ? "\x7F" : String.fromCharCode(ctrl.charCodeAt(0) & 31);
+      }
+      if (kind === "x" || kind === "u" || kind === "U") {
+        var cp = parseInt(escape.slice(1), 16);
+        if (cp > 1114111) {
+          return m;
+        }
+        return String.fromCharCode.apply(null, cp > 65535 ? [55232 + (cp >> 10), 56320 + (cp & 1023)] : [cp]);
+      }
+      if (kind >= "0" && kind <= "7") {
+        return String.fromCharCode(parseInt(escape, 8) & 255);
+      }
+      var letter = ANSI_C_LETTERS.indexOf(escape);
+      return letter < 0 ? escape : ANSI_C_CHARS.charAt(letter);
+    }
+    function expandAnsiC(body) {
+      return body.replace(ansiCEscape, expandAnsiCEscape).split("\0")[0];
+    }
+    function closesAnsiC(s, i2) {
+      ansiCAt.lastIndex = i2;
+      return !!/** @type {RegExpExecArray} */
+      ansiCAt.exec(s)[1];
+    }
     function parseInternal(string, env, opts) {
       if (!opts) {
         opts = {};
       }
       var BS = opts.escape || "\\";
       var ifs = opts.splitUnquoted === true ? " 	\n" : typeof opts.splitUnquoted === "string" ? opts.splitUnquoted : "";
-      var BAREWORD = "(\\" + BS + `['"` + META + `]|[^\\s'"` + META + "])+";
+      var BAREWORD = "(\\" + BS + `['"$\\` + BS + META + "]|\\$\\$|\\$(?!" + ANSI_C_QUOTE.slice(2) + `)|[^\\s'"$` + META + "])+";
+      var DOUBLE_QUOTE = '"(?:\\' + BS + '[\\s\\S]|[^"\\' + BS + '])*"';
       var chunker = new RegExp([
         "(" + CONTROL + ")",
         // control chars
-        "(" + BAREWORD + "|" + DOUBLE_QUOTE + "|" + SINGLE_QUOTE + ")+"
+        "(" + ANSI_C_QUOTE + "|" + BAREWORD + "|" + DOUBLE_QUOTE + "|" + SINGLE_QUOTE + ")+"
       ].join("|"), "g");
       var matches = matchAll(string, chunker);
       if (matches.length === 0) {
@@ -260,9 +321,8 @@ var require_parse = __commonJS({
             varend -= 1;
             varname = s.slice(i2, varend);
             i2 = varend;
-          } else if (/[*@#?$!_-]/.test(char)) {
+          } else if (/[*@#?$!-]/.test(char)) {
             varname = char;
-            i2 += 1;
           } else {
             var slicedFromI = s.slice(i2);
             varend = slicedFromI.match(/[^\w\d_]/);
@@ -352,6 +412,11 @@ var require_parse = __commonJS({
             );
           } else if (c === BS) {
             esc = true;
+          } else if (c === DS && s.charAt(i2 + 1) === SQ && closesAnsiC(s, i2)) {
+            flushRun();
+            sawQuote = true;
+            out += expandAnsiC(s.slice(i2 + 2, ansiCAt.lastIndex - 1));
+            i2 = ansiCAt.lastIndex - 1;
           } else if (c === DS) {
             var value = parseEnvVar();
             if (!ifs) {
@@ -435,9 +500,9 @@ var require_parse = __commonJS({
   }
 });
 
-// node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/index.js
+// node_modules/.pnpm/shell-quote@1.12.0/node_modules/shell-quote/index.js
 var require_shell_quote = __commonJS({
-  "node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/index.js"(exports) {
+  "node_modules/.pnpm/shell-quote@1.12.0/node_modules/shell-quote/index.js"(exports) {
     "use strict";
     exports.quote = require_quote();
     exports.parse = require_parse();
@@ -4742,7 +4807,7 @@ function extractShellWriteTargetsAt(command, depth) {
     const tok = tokens[i];
     if (isOp(tok)) {
       if (tok.op === "&" && isOp(tokens[i + 1], ">")) continue;
-      if (tok.op === ">" || tok.op === ">>") {
+      if (tok.op === ">" || tok.op === ">>" || tok.op === "&>" || tok.op === "&>>") {
         const next = tokens[i + 1];
         const text2 = next === void 0 ? null : tokenText(next);
         if (text2 !== null) {
@@ -4896,6 +4961,7 @@ function extractToolInputShape(input, client) {
 
 // src/hooks/runtime/resolve.ts
 import { execFileSync as execFileSync2 } from "node:child_process";
+import { createHash } from "node:crypto";
 import { existsSync as existsSync6, readFileSync as readFileSync6 } from "node:fs";
 
 // src/auth/auth-store.ts
@@ -5585,30 +5651,50 @@ function resolveProjectId(cwd = process.cwd(), deps = {}) {
   }
   return { projectId: null, apiBase: null };
 }
-function resolveToken(mcpName) {
+function resolveToken(mcpName, opts = {}) {
   const envToken = process.env.CYBEDEFEND_TOKEN;
   if (envToken && envToken.length > 0) return envToken;
-  if (process.platform === "darwin") {
-    return resolveTokenMacOS(mcpName) ?? resolveTokenCodexMacOS(mcpName);
+  const stored = (opts.loadStoredAuth ?? loadAuth)(mcpName);
+  if (stored && (opts.now ?? Date.now)() < stored.expiresAt) {
+    return stored.accessToken;
+  }
+  const platform2 = opts.platform ?? process.platform;
+  const readKeychain = opts.readKeychain ?? readMacOSKeychain2;
+  if (platform2 === "darwin") {
+    return resolveTokenMacOS(mcpName, readKeychain) ?? resolveTokenCodexMacOS(mcpName, opts.mcpUrl, readKeychain);
   }
-  if (process.platform === "linux") return resolveTokenLinux(mcpName);
+  if (platform2 === "linux") return resolveTokenLinux(mcpName);
   return null;
 }
-function resolveTokenMacOS(mcpName) {
-  let blob;
+function codexCredentialAccount(mcpName, mcpUrl) {
+  const digest = createHash("sha256").update(JSON.stringify({ type: "http", url: mcpUrl, headers: {} })).digest("hex");
+  return `${mcpName}|${digest.slice(0, 16)}`;
+}
+function readMacOSKeychain2(service, account) {
   try {
-    blob = execFileSync2(
+    const blob = execFileSync2(
       "security",
-      ["find-generic-password", "-s", "Claude Code-credentials", "-w"],
+      [
+        "find-generic-password",
+        "-s",
+        service,
+        ...account === void 0 ? [] : ["-a", account],
+        "-w"
+      ],
       {
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"],
         timeout: 2e3
       }
     ).trim();
+    return blob.length > 0 ? blob : null;
   } catch {
     return null;
   }
+}
+function resolveTokenMacOS(mcpName, readKeychain) {
+  const blob = readKeychain("Claude Code-credentials");
+  if (!blob) return null;
   try {
     const data = JSON.parse(blob);
     const oauth = data.mcpOAuth ?? {};
@@ -5622,37 +5708,20 @@ function resolveTokenMacOS(mcpName) {
   }
   return null;
 }
-function resolveTokenCodexMacOS(mcpName) {
-  let blob;
-  try {
-    blob = execFileSync2(
-      "security",
-      ["find-generic-password", "-s", "Codex MCP Credentials", "-a", mcpName, "-w"],
-      {
-        encoding: "utf8",
-        stdio: ["ignore", "pipe", "ignore"],
-        timeout: 2e3
-      }
-    ).trim();
-  } catch {
-    try {
-      blob = execFileSync2(
-        "security",
-        ["find-generic-password", "-s", "Codex MCP Credentials", "-w"],
-        {
-          encoding: "utf8",
-          stdio: ["ignore", "pipe", "ignore"],
-          timeout: 2e3
-        }
-      ).trim();
-    } catch {
-      return null;
-    }
+function resolveTokenCodexMacOS(mcpName, mcpUrl, readKeychain) {
+  const accounts = mcpUrl ? [codexCredentialAccount(mcpName, mcpUrl), mcpName] : [mcpName];
+  for (const account of accounts) {
+    const blob = readKeychain("Codex MCP Credentials", account);
+    if (!blob) continue;
+    const token = parseCodexCredential(blob);
+    if (token) return token;
   }
-  if (!blob) return null;
+  return null;
+}
+function parseCodexCredential(blob) {
   try {
     const data = JSON.parse(blob);
-    return data.access_token ?? data.accessToken ?? data.token ?? null;
+    return data.token_response?.access_token ?? data.access_token ?? data.accessToken ?? data.token ?? null;
   } catch {
     return blob || null;
   }
@@ -5673,7 +5742,7 @@ function resolveTokenLinux(mcpName) {
     return null;
   }
 }
-async function resolveTokenWithRefresh(mcpName, deps = {}) {
+async function resolveTokenWithRefresh(mcpName, deps = {}, opts = {}) {
   const getValidAccessTokenFn = deps.getValidAccessToken ?? getValidAccessToken;
   const resolveTokenFn = deps.resolveTokenFn ?? resolveToken;
   const envToken = process.env.CYBEDEFEND_TOKEN;
@@ -5683,10 +5752,10 @@ async function resolveTokenWithRefresh(mcpName, deps = {}) {
     if (token) return token;
   } catch (e) {
     if (e instanceof LoginRequiredError) {
-      return resolveTokenFn(mcpName);
+      return resolveTokenFn(mcpName, opts);
     }
   }
-  return resolveTokenFn(mcpName);
+  return resolveTokenFn(mcpName, opts);
 }
 var RESOLVE_API_TIMEOUT_MS = 4e3;
 async function resolveProjectIdWithApi(cwd = process.cwd(), deps = {}) {
@@ -5909,7 +5978,9 @@ async function fetchRulesHook(deps = {}) {
   const { projectId, apiBase: configApiBase } = await resolveProject();
   if (!projectId) return;
   const apiBase = process.env.CYBEDEFEND_API_BASE ?? configApiBase ?? config.region.apiBase;
-  const token = resolveTok(config.region.mcpName);
+  const token = resolveTok(config.region.mcpName, {
+    mcpUrl: config.region.mcpUrl
+  });
   if (!token) return;
   const intent = buildIntent(event);
   const files = event.filePaths.length > 0 ? event.filePaths : [event.filePath];
@@ -6000,6 +6071,30 @@ function composeSecurityBody(markdown, total, filePath) {
   ].join("\n");
 }
 
+// src/hooks/runtime/proposal-mode.ts
+var TRUTHY = /* @__PURE__ */ new Set(["1", "true", "yes", "on"]);
+var FALSY = /* @__PURE__ */ new Set(["0", "false", "no", "off"]);
+function envFlag(env, name) {
+  const raw = env[name]?.trim().toLowerCase();
+  if (raw && TRUTHY.has(raw)) return true;
+  if (raw && FALSY.has(raw)) return false;
+  return void 0;
+}
+function isNonBlockingMode(config, env = process.env) {
+  return envFlag(env, "CYBEDEFEND_NON_BLOCKING") ?? config.hooks.nonBlockingMode === true;
+}
+function resolveProposalMode(config, env = process.env) {
+  if (isNonBlockingMode(config, env)) return "non-blocking";
+  const auto = envFlag(env, "CYBEDEFEND_AUTO_PROPOSE") ?? config.hooks.autoProposeMode === true;
+  return auto ? "auto" : "ask";
+}
+var NON_BLOCKING_INBOX_DIRECTIVE = "Non-blocking mode is ON (autonomous agent \u2014 nobody is in the chat to answer). This OVERRIDES step 0 of the CybeDefend doctrine: do NOT call `cybe_rules_list_proposals`, do NOT ask the user about proposals (no AskUserQuestion), and NEVER call `cybe_rules_accept_proposal` / `cybe_rules_reject_proposal` yourself. Pending proposals stay in the inbox for a human to review in the CybeDefend dashboard. Proceed directly with the task.";
+var REPORT_MISSING_CALL = '`cybe_rules_report_missing(projectId, { rule_text, evidence_files, rationale: "<quote user prompt>", confirmed_by_user: true })`';
+var DIRECT_PROPOSE_DIRECTIVES = {
+  auto: `**Auto-propose mode is ON** \u2014 this OVERRIDES the doctrine's "ask first" step: do NOT ask the user (no AskUserQuestion). If \u2014 and ONLY if \u2014 one durable, reusable gap stands out, call ${REPORT_MISSING_CALL} directly for that single rule. The user validates it at the next session start via the Accept/Reject picker. Otherwise propose nothing.`,
+  "non-blocking": `**Non-blocking mode is ON** (autonomous agent \u2014 nobody is in the chat to answer). Do NOT ask the user (no AskUserQuestion). If \u2014 and ONLY if \u2014 one durable, reusable gap stands out, call ${REPORT_MISSING_CALL} directly for that single rule. It lands as a pending proposal that a human accepts or rejects in the CybeDefend dashboard. Otherwise propose nothing.`
+};
+
 // src/hooks/runtime/self-update-check.ts
 import { spawn } from "node:child_process";
 import { existsSync as existsSync8, readFileSync as readFileSync7, rmSync, writeFileSync as writeFileSync4 } from "node:fs";
@@ -6040,6 +6135,7 @@ var GLOBAL_MODES = /* @__PURE__ */ new Set([
 ]);
 function detectInstallMode(scriptPath) {
   if (/[\\/]_npx[\\/]/i.test(scriptPath)) return "npx-cache";
+  if (/[\\/]dlx(?:-\d+)?[\\/]/i.test(scriptPath)) return "npx-cache";
   if (/[\\/]pnpm(?:[\\/]global|[\\/]nodejs|[\\/]node_modules)/i.test(scriptPath)) {
     return "pnpm-global";
   }
@@ -6209,19 +6305,66 @@ function pmCommand(mode, spec) {
   }
 }
 
+// src/hooks/runtime/hook-refresh-trigger.ts
+import { spawn as spawn2 } from "node:child_process";
+import { existsSync as existsSync9, readFileSync as readFileSync8, writeFileSync as writeFileSync5 } from "node:fs";
+import { homedir as homedir7 } from "node:os";
+import { dirname as dirname3, join as join6 } from "node:path";
+function maybeRefreshStaleWiring(deps) {
+  try {
+    const { config, runnerVersion } = deps;
+    if (!config.runnerSource || config.installedVersion === runnerVersion) {
+      return false;
+    }
+    const cliEntry = join6(dirname3(dirname3(config.runnerSource)), "bin", "vibedefend.js");
+    if (!(deps.exists ?? existsSync9)(cliEntry)) return false;
+    const markerPath = deps.markerPath ?? join6(process.env.CYBEDEFEND_HOME ?? homedir7(), ".cybedefend", "hook-refresh.json");
+    if (readMarkerVersion(markerPath) === runnerVersion) return false;
+    (deps.spawnRefresh ?? defaultSpawnRefresh)(cliEntry);
+    writeMarker(markerPath, runnerVersion);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function readMarkerVersion(path) {
+  try {
+    if (!existsSync9(path)) return null;
+    const data = JSON.parse(readFileSync8(path, "utf8"));
+    return typeof data.version === "string" ? data.version : null;
+  } catch {
+    return null;
+  }
+}
+function writeMarker(path, version) {
+  try {
+    ensureDirFor(path);
+    writeFileSync5(path, JSON.stringify({ version, spawnedAt: Date.now() }) + "\n");
+  } catch {
+  }
+}
+function defaultSpawnRefresh(cliEntry) {
+  const child = spawn2(process.execPath, [cliEntry, "update", "--refresh-hooks"], {
+    detached: true,
+    stdio: "ignore",
+    windowsHide: true
+  });
+  child.unref();
+}
+
 // src/version.ts
-import { readFileSync as readFileSync8 } from "node:fs";
+import { readFileSync as readFileSync9 } from "node:fs";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
-import { dirname as dirname3, join as join6 } from "node:path";
+import { dirname as dirname4, join as join7 } from "node:path";
 var PKG_NAME = "@cybedefend/vibedefend";
 function defaultPkgPath() {
-  return join6(dirname3(fileURLToPath2(import.meta.url)), "..", "package.json");
+  return join7(dirname4(fileURLToPath2(import.meta.url)), "..", "package.json");
 }
 function readPackageMeta(opts = {}) {
   if (typeof opts.bakedVersion === "string" && opts.bakedVersion.length > 0) {
     return { name: PKG_NAME, version: opts.bakedVersion };
   }
-  const readFile = opts.readFile ?? ((p) => readFileSync8(p, "utf8"));
+  const readFile = opts.readFile ?? ((p) => readFileSync9(p, "utf8"));
   const pkgPath = opts.pkgPath ?? defaultPkgPath();
   try {
     return JSON.parse(readFile(pkgPath));
@@ -6230,7 +6373,7 @@ function readPackageMeta(opts = {}) {
   }
 }
 var pkg = readPackageMeta({
-  bakedVersion: true ? "1.4.3" : void 0
+  bakedVersion: true ? "1.4.5" : void 0
 });
 
 // src/hooks/runtime/session-start.ts
@@ -6249,6 +6392,10 @@ async function sessionStartHook(deps = {}) {
   const event = sniff(stdin);
   const config = loadConfig();
   if (!config) return;
+  (deps.refreshStaleWiringFn ?? maybeRefreshStaleWiring)({
+    config,
+    runnerVersion: pkg.version
+  });
   const { projectId, apiBase: configApiBase } = await resolveProject();
   if (!projectId) return;
   const apiBase = process.env.CYBEDEFEND_API_BASE ?? configApiBase ?? config.region.apiBase;
@@ -6261,7 +6408,9 @@ async function sessionStartHook(deps = {}) {
     );
     return;
   }
-  const token = resolveTok(config.region.mcpName);
+  const token = resolveTok(config.region.mcpName, {
+    mcpUrl: config.region.mcpUrl
+  });
   let total = null;
   if (token) {
     const result = await fetchProposals({ apiBase, projectId, token });
@@ -6279,7 +6428,12 @@ async function sessionStartHook(deps = {}) {
     "   if your client does not surface it, load the `cybe-init` MCP prompt manually.)"
   );
   lines.push("");
-  if (total === null) {
+  if (isNonBlockingMode(config)) {
+    lines.push(
+      `- **Step 0 \u2014 proposals inbox**: ${total === null ? "not checked" : `${total} pending`} \u2014 no action required.`,
+      `  ${NON_BLOCKING_INBOX_DIRECTIVE}`
+    );
+  } else if (total === null) {
     lines.push(
       "- **Step 0 \u2014 proposals inbox**: \u26A0 unable to verify (no MCP token reachable).",
       '  **YOU MUST call `cybe_rules_list_proposals(projectId, status="proposed")` as',
@@ -6335,7 +6489,7 @@ async function sessionStartHook(deps = {}) {
 }
 
 // src/hooks/runtime/session-review.ts
-import { existsSync as existsSync9, readFileSync as readFileSync9 } from "node:fs";
+import { existsSync as existsSync10, readFileSync as readFileSync10 } from "node:fs";
 var COUNTED_TOOLS = /* @__PURE__ */ new Set([
   "Edit",
   "Write",
@@ -6351,6 +6505,11 @@ function transcriptHasReviewSentinel(transcript) {
     return false;
   }
 }
+function resolveReviewThreshold(config, env = process.env) {
+  const raw = env.CYBEDEFEND_REVIEW_THRESHOLD?.trim();
+  if (raw && /^\d+$/.test(raw) && Number(raw) <= 100) return Number(raw);
+  return config.hooks.reviewThreshold;
+}
 async function sessionReviewHook(deps = {}) {
   const readStdin = deps.readStdin ?? readStdinJson;
   const loadConfig = deps.loadConfig ?? loadRuntimeConfig;
@@ -6371,20 +6530,21 @@ async function sessionReviewHook(deps = {}) {
     editCount = parseInt(process.env.CYBEDEFEND_DRY_RUN_EDITS ?? "5", 10);
   }
   if (editCount === 0) return;
-  if (editCount < config.hooks.reviewThreshold) return;
+  if (editCount < resolveReviewThreshold(config)) return;
   const userPrompt = extractFirstUserPrompt(transcript);
+  const proposalMode = resolveProposalMode(config);
   let body = composeReviewBody(
     editCount,
     event.client,
     userPrompt,
-    config.hooks.autoProposeMode
+    proposalMode
   );
   const withDiffScan = config.hooks.enableDiffScan !== false;
   if (withDiffScan) {
     const cwd = typeof stdin.cwd === "string" && stdin.cwd ? stdin.cwd : process.cwd();
     body += "\n" + composeDiffScanBody(extractChangedFiles(transcript, void 0, cwd));
   }
-  emitFn(body, event.client, composeStopReason(withDiffScan));
+  emitFn(body, event.client, composeStopReason(withDiffScan, proposalMode));
 }
 function loadTranscript(stdin, readFile) {
   if (Array.isArray(stdin.transcript)) return stdin.transcript;
@@ -6413,9 +6573,9 @@ function loadTranscript(stdin, readFile) {
   return out;
 }
 function defaultReadTranscript(path) {
-  if (!existsSync9(path)) return null;
+  if (!existsSync10(path)) return null;
   try {
-    return readFileSync9(path, "utf8");
+    return readFileSync10(path, "utf8");
   } catch {
     return null;
   }
@@ -6546,24 +6706,16 @@ function extractFirstUserPrompt(transcript) {
   }
   return "";
 }
-function composeReviewBody(editCount, client, userPrompt, autoPropose) {
+function composeReviewBody(editCount, client, userPrompt, proposalMode) {
   const safePrompt = userPrompt || "(could not extract \u2014 re-read transcript)";
-  const proposalLine = autoPropose ? [
-    "   **Auto-propose mode is ON** (configured at install). If \u2014 and ONLY",
-    "   if \u2014 one gap clears the bar above, call WITHOUT asking the user:",
-    "   `cybe_rules_report_missing(projectId, { rule_text, evidence_files,",
-    '   rationale: "<quote user prompt>", confirmed_by_user: true })` for',
-    "   that single rule. The user validates it at the next session start",
-    "   via the Accept/Reject picker. If nothing clears the bar, propose",
-    "   nothing."
-  ].join("\n") : [
+  const proposalLine = proposalMode === "ask" ? [
     "   Ask the user via AskUserQuestion:",
     '   > "Your prompt implied <concern>, but no business rule covers it.',
     '   >  Propose it as a standing rule for the project?" \u2014 Yes / No / Edit.',
     '   ONLY on an explicit "yes": call `cybe_rules_report_missing(projectId,',
     '   { rule_text, evidence_files, rationale: "<quote user prompt>",',
     "   confirmed_by_user: true })`."
-  ].join("\n");
+  ].join("\n") : `   ${DIRECT_PROPOSE_DIRECTIVES[proposalMode]}`;
   return [
     `## \u{1F6E1}\uFE0F CybeDefend gap analysis (Stop hook \u2014 ${editCount} edits this session, client=${client})`,
     "",
@@ -6635,9 +6787,15 @@ function composeDiffScanBody(changedFiles) {
     ""
   ].join("\n");
 }
-function composeStopReason(withDiffScan) {
+function composeStopReason(withDiffScan, proposalMode) {
   const scan = withDiffScan ? ", then run a pre-commit `cybe_scan_diff` on the files you changed (poll `cybe_scan_status`, read `cybe_scan_findings`) and fix or justify each finding" : "";
-  return "\u{1F6E1}\uFE0F CybeDefend \u2014 before wrapping up, run the end-of-session review: gap-analyse the request against this session's business rules and, for any uncovered security/data concern, offer to propose a rule via AskUserQuestion (`cybe_rules_report_missing` only on an explicit yes)" + scan + ".";
+  const directPropose = "if \u2014 and only if \u2014 one durable gap stands out, propose that single rule directly with `cybe_rules_report_missing` (`confirmed_by_user: true`). ";
+  const propose = {
+    ask: "for any uncovered security/data concern, offer to propose a rule via AskUserQuestion (`cybe_rules_report_missing` only on an explicit yes)",
+    auto: directPropose + "Auto-propose mode: do NOT ask the user (no AskUserQuestion) \u2014 they review it at the next session start",
+    "non-blocking": directPropose + "Non-blocking mode: do NOT ask the user (no AskUserQuestion) \u2014 a human reviews the proposal in the CybeDefend dashboard"
+  };
+  return "\u{1F6E1}\uFE0F CybeDefend \u2014 before wrapping up, run the end-of-session review: gap-analyse the request against this session's business rules and, " + propose[proposalMode] + scan + ".";
 }
 
 // src/hooks/runtime/pre-compact.ts
@@ -6658,6 +6816,11 @@ async function preCompactHook(deps = {}) {
     );
     return;
   }
+  const proposalMode = resolveProposalMode(config);
+  const proposeStep = proposalMode === "ask" ? [
+    "3. For uncovered concerns, ask the user via AskUserQuestion whether to propose;",
+    '   on "yes", call `cybe_rules_report_missing` with confirmed_by_user: true.'
+  ] : [`3. ${DIRECT_PROPOSE_DIRECTIVES[proposalMode]}`];
   const body = [
     "## \u{1F6E1}\uFE0F CybeDefend PreCompact gap analysis",
     "",
@@ -6665,27 +6828,26 @@ async function preCompactHook(deps = {}) {
     "Before the fine-grained tool history is summarised away, run a gap analysis:",
     "1. Re-read the original user request (still uncompacted now).",
     "2. List the CybeDefend rules returned during the session.",
-    "3. For uncovered concerns, ask the user via AskUserQuestion whether to propose;",
-    '   on "yes", call `cybe_rules_report_missing` with confirmed_by_user: true.',
+    ...proposeStep,
     ""
   ].join("\n");
   emitFn(body, event.client);
 }
 
 // src/hooks/runtime/user-prompt-submit.ts
-import { existsSync as existsSync10, mkdirSync as mkdirSync4, readFileSync as readFileSync10, writeFileSync as writeFileSync5 } from "node:fs";
-import { homedir as homedir7 } from "node:os";
-import { join as join7 } from "node:path";
+import { existsSync as existsSync11, mkdirSync as mkdirSync4, readFileSync as readFileSync11, writeFileSync as writeFileSync6 } from "node:fs";
+import { homedir as homedir8 } from "node:os";
+import { join as join8 } from "node:path";
 var SESSIONS_CAP = 100;
 function defaultSessionsFile() {
-  const dir = process.env.CYBEDEFEND_BASELINE_DIR ?? join7(homedir7(), ".cybedefend");
-  return join7(dir, "user-prompt-seen-sessions.json");
+  const dir = process.env.CYBEDEFEND_BASELINE_DIR ?? join8(homedir8(), ".cybedefend");
+  return join8(dir, "user-prompt-seen-sessions.json");
 }
 function defaultSessionTracker(file = defaultSessionsFile()) {
   function load() {
-    if (!existsSync10(file)) return [];
+    if (!existsSync11(file)) return [];
     try {
-      const raw = readFileSync10(file, "utf8");
+      const raw = readFileSync11(file, "utf8");
       const data = JSON.parse(raw);
       if (!Array.isArray(data.sessions)) return [];
       return data.sessions.filter((s) => typeof s === "string");
@@ -6702,8 +6864,8 @@ function defaultSessionTracker(file = defaultSessionsFile()) {
       if (existing.includes(sessionId)) return;
       const next = [...existing, sessionId].slice(-SESSIONS_CAP);
       try {
-        mkdirSync4(join7(file, ".."), { recursive: true });
-        writeFileSync5(file, JSON.stringify({ sessions: next }), "utf8");
+        mkdirSync4(join8(file, ".."), { recursive: true });
+        writeFileSync6(file, JSON.stringify({ sessions: next }), "utf8");
       } catch {
       }
     }
@@ -6728,7 +6890,9 @@ async function userPromptSubmitHook(deps = {}) {
   const { projectId, apiBase: configApiBase } = await resolveProject();
   if (!projectId) return;
   const apiBase = process.env.CYBEDEFEND_API_BASE ?? configApiBase ?? config.region.apiBase;
-  const token = resolveTok(config.region.mcpName);
+  const token = resolveTok(config.region.mcpName, {
+    mcpUrl: config.region.mcpUrl
+  });
   let total = null;
   if (token) {
     const result = await fetchProposals({ apiBase, projectId, token });
@@ -6741,7 +6905,13 @@ async function userPromptSubmitHook(deps = {}) {
     "",
     "### Step 0 \u2014 Proposal inbox"
   ];
-  if (total === null) {
+  const nonBlocking = isNonBlockingMode(config);
+  if (nonBlocking) {
+    lines.push(
+      `- CybeDefend: ${total === null ? "proposal inbox not checked" : `**${total}** pending proposals`} \u2014 no action required.`,
+      `- ${NON_BLOCKING_INBOX_DIRECTIVE}`
+    );
+  } else if (total === null) {
     lines.push(
       "- CybeDefend: could not fetch proposal-inbox status (token / API unreachable).",
       '- Call `cybe_rules_list_proposals(projectId, status="proposed")` yourself to verify, then handle each surfaced proposal via AskUserQuestion (Accept / Reject / Skip / Tell me more) before continuing.'
@@ -6767,7 +6937,7 @@ async function userPromptSubmitHook(deps = {}) {
     "- The PreToolUse hook fires automatically as a backstop on Edit/Write/MultiEdit, but your explicit call with a narrative intent gets better matches.",
     "",
     "### Order",
-    "1. Satisfy step 0 (acknowledge / handle the inbox).",
+    nonBlocking ? "1. Step 0 needs no action (non-blocking mode)." : "1. Satisfy step 0 (acknowledge / handle the inbox).",
     "2. Satisfy step 1 (fetch rules with a narrative intent) once you know which files you will touch.",
     "3. THEN proceed with whatever skill / brainstorm / implementation flow fits the task.",
     ""
@@ -7386,7 +7556,7 @@ function validateRule(rule) {
 }
 
 // src/guards-evaluator/redact.ts
-import { createHash } from "node:crypto";
+import { createHash as createHash2 } from "node:crypto";
 var REDACTED = "[REDACTED]";
 var PATTERNS = [
   // 1. JWT — three base64url segments separated by dots
@@ -7488,7 +7658,7 @@ function redactTarget(text, maxLen = 256) {
   return result;
 }
 function hashTarget(text) {
-  return createHash("sha256").update(text, "utf8").digest("hex");
+  return createHash2("sha256").update(text, "utf8").digest("hex");
 }
 
 // src/hooks/runtime/near-miss.ts
@@ -7766,10 +7936,10 @@ function nearMiss(req, rule) {
 }
 
 // src/hooks/runtime/guard-rules-cache.ts
-import { readFileSync as readFileSync11, writeFileSync as writeFileSync6, existsSync as existsSync11, mkdirSync as mkdirSync5 } from "node:fs";
-import { dirname as dirname4 } from "node:path";
-import { homedir as homedir8 } from "node:os";
-import { join as join8 } from "node:path";
+import { readFileSync as readFileSync12, writeFileSync as writeFileSync7, existsSync as existsSync12, mkdirSync as mkdirSync5 } from "node:fs";
+import { dirname as dirname5 } from "node:path";
+import { homedir as homedir9 } from "node:os";
+import { join as join9 } from "node:path";
 
 // node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
 var external_exports = {};
@@ -11881,8 +12051,8 @@ function parseRuleFields(raw) {
 }
 
 // src/hooks/runtime/guard-rules-cache.ts
-var DEFAULT_CACHE_FILE = join8(
-  homedir8(),
+var DEFAULT_CACHE_FILE = join9(
+  homedir9(),
   ".cybedefend",
   "guards-cache.json"
 );
@@ -12006,9 +12176,9 @@ function makeGuardRulesCache(opts) {
     }
   }
   function readCache(projectId) {
-    if (!existsSync11(cacheFile)) return null;
+    if (!existsSync12(cacheFile)) return null;
     try {
-      const raw = readFileSync11(cacheFile, "utf8");
+      const raw = readFileSync12(cacheFile, "utf8");
       const data = JSON.parse(raw);
       if (data.projectId !== projectId) return null;
       return data;
@@ -12019,15 +12189,15 @@ function makeGuardRulesCache(opts) {
   function writeCache(entry) {
     try {
       ensureDirFor2(cacheFile);
-      writeFileSync6(cacheFile, JSON.stringify(entry), "utf8");
+      writeFileSync7(cacheFile, JSON.stringify(entry), "utf8");
     } catch {
     }
   }
   return { refreshIfStale };
 }
 function ensureDirFor2(filePath) {
-  const dir = dirname4(filePath);
-  if (!existsSync11(dir)) {
+  const dir = dirname5(filePath);
+  if (!existsSync12(dir)) {
     mkdirSync5(dir, { recursive: true });
   }
 }
@@ -12149,11 +12319,11 @@ function detectPromptInjection(text) {
 }
 
 // src/hooks/runtime/judge-cache.ts
-import { readFileSync as readFileSync12, writeFileSync as writeFileSync7, existsSync as existsSync12, mkdirSync as mkdirSync6 } from "node:fs";
-import { dirname as dirname5, join as join9 } from "node:path";
-import { homedir as homedir9 } from "node:os";
-var DEFAULT_JUDGE_CACHE_FILE = join9(
-  homedir9(),
+import { readFileSync as readFileSync13, writeFileSync as writeFileSync8, existsSync as existsSync13, mkdirSync as mkdirSync6 } from "node:fs";
+import { dirname as dirname6, join as join10 } from "node:path";
+import { homedir as homedir10 } from "node:os";
+var DEFAULT_JUDGE_CACHE_FILE = join10(
+  homedir10(),
   ".cybedefend",
   "guards-judge-cache.json"
 );
@@ -12163,9 +12333,9 @@ function makeJudgeCache(opts = {}) {
   const ttlMs = opts.ttlMs ?? DEFAULT_JUDGE_TTL_MS;
   const now = opts.now ?? (() => Date.now());
   function readAll() {
-    if (!existsSync12(cacheFile)) return {};
+    if (!existsSync13(cacheFile)) return {};
     try {
-      return JSON.parse(readFileSync12(cacheFile, "utf8"));
+      return JSON.parse(readFileSync13(cacheFile, "utf8"));
     } catch {
       return {};
     }
@@ -12185,36 +12355,36 @@ function makeJudgeCache(opts = {}) {
       }
       all[key] = { res, at: t };
       ensureDirFor3(cacheFile);
-      writeFileSync7(cacheFile, JSON.stringify(all), "utf8");
+      writeFileSync8(cacheFile, JSON.stringify(all), "utf8");
     } catch {
     }
   }
   return { get, set };
 }
 function ensureDirFor3(filePath) {
-  const dir = dirname5(filePath);
-  if (!existsSync12(dir)) {
+  const dir = dirname6(filePath);
+  if (!existsSync13(dir)) {
     mkdirSync6(dir, { recursive: true });
   }
 }
 
 // src/hooks/runtime/guard-check.ts
-import { homedir as homedir11 } from "node:os";
-import { join as join11 } from "node:path";
+import { homedir as homedir12 } from "node:os";
+import { join as join12 } from "node:path";
 
 // src/hooks/runtime/guard-violations-buffer.ts
 import {
   appendFileSync,
-  existsSync as existsSync13,
-  readFileSync as readFileSync13,
-  writeFileSync as writeFileSync8,
+  existsSync as existsSync14,
+  readFileSync as readFileSync14,
+  writeFileSync as writeFileSync9,
   mkdirSync as mkdirSync7
 } from "node:fs";
-import { dirname as dirname6 } from "node:path";
-import { homedir as homedir10 } from "node:os";
-import { join as join10 } from "node:path";
-var DEFAULT_BUFFER_FILE = join10(
-  homedir10(),
+import { dirname as dirname7 } from "node:path";
+import { homedir as homedir11 } from "node:os";
+import { join as join11 } from "node:path";
+var DEFAULT_BUFFER_FILE = join11(
+  homedir11(),
   ".cybedefend",
   "guards-violations-buffer.jsonl"
 );
@@ -12233,10 +12403,10 @@ function makeViolationsBuffer(opts = {}) {
     }
   }
   async function flushViolations2(ctx, postFn) {
-    if (!existsSync13(bufferFile)) return;
+    if (!existsSync14(bufferFile)) return;
     let content;
     try {
-      content = readFileSync13(bufferFile, "utf8").trim();
+      content = readFileSync14(bufferFile, "utf8").trim();
     } catch {
       return;
     }
@@ -12255,7 +12425,7 @@ function makeViolationsBuffer(opts = {}) {
     }
     if (records.length === 0) {
       try {
-        writeFileSync8(bufferFile, "", "utf8");
+        writeFileSync9(bufferFile, "", "utf8");
       } catch {
       }
       return;
@@ -12285,10 +12455,10 @@ function makeViolationsBuffer(opts = {}) {
     }
     try {
       if (failed.length === 0) {
-        writeFileSync8(bufferFile, "", "utf8");
+        writeFileSync9(bufferFile, "", "utf8");
       } else {
         const serialised = failed.map((r) => JSON.stringify(r)).join("\n") + "\n";
-        writeFileSync8(bufferFile, serialised, "utf8");
+        writeFileSync9(bufferFile, serialised, "utf8");
       }
     } catch {
     }
@@ -12296,8 +12466,8 @@ function makeViolationsBuffer(opts = {}) {
   return { bufferViolation: bufferViolation2, flushViolations: flushViolations2 };
 }
 function ensureDirFor4(filePath) {
-  const dir = dirname6(filePath);
-  if (!existsSync13(dir)) {
+  const dir = dirname7(filePath);
+  if (!existsSync14(dir)) {
     mkdirSync7(dir, { recursive: true });
   }
 }
@@ -12325,10 +12495,10 @@ function appendDebugLog(entry) {
     const homeDir = process.env.HOME ?? process.env.USERPROFILE ?? "";
     if (!homeDir) return;
     const { mkdirSync: mkdirSync8, appendFileSync: appendFileSync2 } = __require("node:fs");
-    const { join: join12 } = __require("node:path");
-    const dir = join12(homeDir, ".cybedefend");
+    const { join: join13 } = __require("node:path");
+    const dir = join13(homeDir, ".cybedefend");
     mkdirSync8(dir, { recursive: true });
-    appendFileSync2(join12(dir, "hook-debug.log"), entry + "\n", "utf8");
+    appendFileSync2(join13(dir, "hook-debug.log"), entry + "\n", "utf8");
   } catch {
   }
 }
@@ -12814,8 +12984,6 @@ function emitAgentMessage(verdict, message) {
       // Claude Code legacy
       decision: "block",
       reason: fullMessage,
-      continue: false,
-      stopReason: fullMessage,
       // Claude Code modern
       hookSpecificOutput: {
         hookEventName: "PreToolUse",
@@ -12844,9 +13012,9 @@ function emitAgentMessage(verdict, message) {
 }
 function makeProductionJudgeDeps() {
   const cache = makeJudgeCache();
-  const warnDir = process.env.CYBEDEFEND_BASELINE_DIR ?? join11(homedir11(), ".cybedefend");
+  const warnDir = process.env.CYBEDEFEND_BASELINE_DIR ?? join12(homedir12(), ".cybedefend");
   const warnTracker = defaultSessionTracker(
-    join11(warnDir, "guards-judge-warned-sessions.json")
+    join12(warnDir, "guards-judge-warned-sessions.json")
   );
   return {
     callJudge,
@@ -12871,7 +13039,11 @@ async function runPreToolUseGuard() {
     const { projectId, apiBase: configApiBase } = await resolveProjectIdWithApi();
     if (!projectId) return 0;
     const apiBaseResolved = process.env.CYBEDEFEND_API_BASE ?? configApiBase ?? config.region.apiBase;
-    const token = await resolveTokenWithRefresh(config.region.mcpName);
+    const token = await resolveTokenWithRefresh(
+      config.region.mcpName,
+      {},
+      { mcpUrl: config.region.mcpUrl }
+    );
     if (!token) {
       emitUnverifiedBanner(
         "Not authenticated \u2014 run `vibedefend login` to restore Action Guards."