@cybedefend/vibedefend 1.4.4 → 1.4.6

package/dist/hook-runner.js

@@ -39,22 +39,31 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
-// node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/quote.js
+// node_modules/.pnpm/shell-quote@1.12.0/node_modules/shell-quote/quote.js
 var require_quote = __commonJS({
-  "node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/quote.js"(exports, module) {
+  "node_modules/.pnpm/shell-quote@1.12.0/node_modules/shell-quote/quote.js"(exports, module) {
     "use strict";
     var OPS = (
       /** @type {const} */
       [
         "||",
         "&&",
+        ";;&",
         ";;",
+        ";&",
         "|&",
         "<(",
+        ">(",
         "<<<",
+        "<<-",
+        "<<",
         ">>",
         ">&",
+        ">|",
+        "&>>",
+        "&>",
         "<&",
+        "<>",
         "&",
         ";",
         "(",
@@ -65,9 +74,13 @@ var require_quote = __commonJS({
       ]
     );
     var LINE_TERMINATORS = /[\n\r\u2028\u2029]/;
-    var GLOB_SHELL_SPECIAL = /[\s#!"$&'():;<=>@\\^`|]/g;
+    var GLOB_SHELL_SPECIAL = /[\s#!"$&'():;<=>@\\^`|~]/g;
     module.exports = function quote(xs) {
+      var sawComment = false;
       return xs.map(function(s) {
+        if (sawComment && typeof s === "string" && LINE_TERMINATORS.test(s)) {
+          throw new TypeError("a token after a `comment` must not contain line terminators");
+        }
         if (s === "") {
           return (
             /** @type {const} */
@@ -82,6 +95,12 @@ var require_quote = __commonJS({
             if (LINE_TERMINATORS.test(s.pattern)) {
               throw new TypeError("glob `pattern` must not contain line terminators");
             }
+            if (s.pattern === "") {
+              return (
+                /** @type {const} */
+                "''"
+              );
+            }
             return s.pattern.replace(GLOB_SHELL_SPECIAL, "\\$&");
           }
           if ("op" in s && typeof s.op === "string") {
@@ -94,15 +113,19 @@ var require_quote = __commonJS({
             if (LINE_TERMINATORS.test(s.comment)) {
               throw new TypeError("`comment` must not contain line terminators");
             }
+            sawComment = true;
             return "#" + s.comment;
           }
           throw new TypeError("unrecognized object token shape");
         }
+        if (/'/.test(s) && /!/.test(s)) {
+          return "'" + s.replace(/'/g, `'"'"'`) + "'";
+        }
         if (/["\s\\]/.test(s) && !/'/.test(s)) {
-          return "'" + s.replace(/(['])/g, "\\$1") + "'";
+          return "'" + s + "'";
         }
         if (/["'\s]/.test(s)) {
-          return '"' + s.replace(/(["\\$`!])/g, "\\$1") + '"';
+          return '"' + s.replace(/(["\\$`])/g, "\\$1") + '"';
         }
         return String(s).replace(/([A-Za-z]:)?([#!"$&'()*,:;<=>?@[\\\]^`{|}~])/g, "$1\\$2");
       }).join(" ");
@@ -110,23 +133,31 @@ var require_quote = __commonJS({
   }
 });
 
-// node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/parse.js
+// node_modules/.pnpm/shell-quote@1.12.0/node_modules/shell-quote/parse.js
 var require_parse = __commonJS({
-  "node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/parse.js"(exports, module) {
+  "node_modules/.pnpm/shell-quote@1.12.0/node_modules/shell-quote/parse.js"(exports, module) {
     "use strict";
     var CONTROL = (
       /** @type {const} */
       "(?:" + /** @type {const} */
       [
         "\\|\\|",
-        "\\&\\&",
-        ";;",
-        "\\|\\&",
+        "\\&(?:\\&|>>?)",
+        // `&&`, `&>`, and `&>>`
+        ";;\\&?",
+        // `;;` and `;;&`
+        "[;|]\\&",
+        // `;&` and `|&`
         "\\<\\(",
         "\\<\\<\\<",
+        "\\<\\<-",
+        "\\<\\<(?!\\()",
+        // `<<(` stays `<` and `<(`, as zsh reads it; other shells reject it
         ">>",
-        ">\\&",
-        "<\\&",
+        ">[&|(]",
+        // `>&`, `>|`, and `>(`
+        "<[&>]",
+        // `<&` and `<>`
         "[&;()|<>]"
       ].join(
         /** @type {const} */
@@ -143,10 +174,11 @@ var require_parse = __commonJS({
       /** @type {const} */
       "'([^']*?)'"
     );
-    var DOUBLE_QUOTE = (
-      /** @type {const} */
-      '"((\\\\"|[^"])*?)"'
-    );
+    var ANSI_C_BODY = "(?:\\\\[\\s\\S]|[^\\\\'])*?";
+    var ANSI_C_QUOTE = "\\$'" + ANSI_C_BODY + "'";
+    var ansiCAt = new RegExp("\\$'" + ANSI_C_BODY + "(?:(')|\\\\?$)", "g");
+    var ANSI_C_LETTERS = "abeEfnrtv";
+    var ANSI_C_CHARS = "\x07\b\x1B\x1B\f\n\r	\v";
     var hash = /^#$/;
     var SQ = (
       /** @type {const} */
@@ -195,17 +227,46 @@ var require_parse = __commonJS({
       }
       return pre + r;
     }
+    var ansiCEscape = /\\([0-7]{1,3}|x[\dA-Fa-f]{1,2}|u[\dA-Fa-f]{1,4}|U[\dA-Fa-f]{1,8}|c(?:\\\\|[\s\S])|[abeEfnrtv\\'"?])/g;
+    function expandAnsiCEscape(m, escape) {
+      var kind = escape.charAt(0);
+      if (kind === "c") {
+        var ctrl = escape.charAt(1);
+        return ctrl === "?" ? "\x7F" : String.fromCharCode(ctrl.charCodeAt(0) & 31);
+      }
+      if (kind === "x" || kind === "u" || kind === "U") {
+        var cp = parseInt(escape.slice(1), 16);
+        if (cp > 1114111) {
+          return m;
+        }
+        return String.fromCharCode.apply(null, cp > 65535 ? [55232 + (cp >> 10), 56320 + (cp & 1023)] : [cp]);
+      }
+      if (kind >= "0" && kind <= "7") {
+        return String.fromCharCode(parseInt(escape, 8) & 255);
+      }
+      var letter = ANSI_C_LETTERS.indexOf(escape);
+      return letter < 0 ? escape : ANSI_C_CHARS.charAt(letter);
+    }
+    function expandAnsiC(body) {
+      return body.replace(ansiCEscape, expandAnsiCEscape).split("\0")[0];
+    }
+    function closesAnsiC(s, i2) {
+      ansiCAt.lastIndex = i2;
+      return !!/** @type {RegExpExecArray} */
+      ansiCAt.exec(s)[1];
+    }
     function parseInternal(string, env, opts) {
       if (!opts) {
         opts = {};
       }
       var BS = opts.escape || "\\";
       var ifs = opts.splitUnquoted === true ? " 	\n" : typeof opts.splitUnquoted === "string" ? opts.splitUnquoted : "";
-      var BAREWORD = "(\\" + BS + `['"` + META + `]|[^\\s'"` + META + "])+";
+      var BAREWORD = "(\\" + BS + `['"$\\` + BS + META + "]|\\$\\$|\\$(?!" + ANSI_C_QUOTE.slice(2) + `)|[^\\s'"$` + META + "])+";
+      var DOUBLE_QUOTE = '"(?:\\' + BS + '[\\s\\S]|[^"\\' + BS + '])*"';
       var chunker = new RegExp([
         "(" + CONTROL + ")",
         // control chars
-        "(" + BAREWORD + "|" + DOUBLE_QUOTE + "|" + SINGLE_QUOTE + ")+"
+        "(" + ANSI_C_QUOTE + "|" + BAREWORD + "|" + DOUBLE_QUOTE + "|" + SINGLE_QUOTE + ")+"
       ].join("|"), "g");
       var matches = matchAll(string, chunker);
       if (matches.length === 0) {
@@ -260,9 +321,8 @@ var require_parse = __commonJS({
             varend -= 1;
             varname = s.slice(i2, varend);
             i2 = varend;
-          } else if (/[*@#?$!_-]/.test(char)) {
+          } else if (/[*@#?$!-]/.test(char)) {
             varname = char;
-            i2 += 1;
           } else {
             var slicedFromI = s.slice(i2);
             varend = slicedFromI.match(/[^\w\d_]/);
@@ -352,6 +412,11 @@ var require_parse = __commonJS({
             );
           } else if (c === BS) {
             esc = true;
+          } else if (c === DS && s.charAt(i2 + 1) === SQ && closesAnsiC(s, i2)) {
+            flushRun();
+            sawQuote = true;
+            out += expandAnsiC(s.slice(i2 + 2, ansiCAt.lastIndex - 1));
+            i2 = ansiCAt.lastIndex - 1;
           } else if (c === DS) {
             var value = parseEnvVar();
             if (!ifs) {
@@ -435,9 +500,9 @@ var require_parse = __commonJS({
   }
 });
 
-// node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/index.js
+// node_modules/.pnpm/shell-quote@1.12.0/node_modules/shell-quote/index.js
 var require_shell_quote = __commonJS({
-  "node_modules/.pnpm/shell-quote@1.10.0/node_modules/shell-quote/index.js"(exports) {
+  "node_modules/.pnpm/shell-quote@1.12.0/node_modules/shell-quote/index.js"(exports) {
     "use strict";
     exports.quote = require_quote();
     exports.parse = require_parse();
@@ -4742,7 +4807,7 @@ function extractShellWriteTargetsAt(command, depth) {
     const tok = tokens[i];
     if (isOp(tok)) {
       if (tok.op === "&" && isOp(tokens[i + 1], ">")) continue;
-      if (tok.op === ">" || tok.op === ">>") {
+      if (tok.op === ">" || tok.op === ">>" || tok.op === "&>" || tok.op === "&>>") {
         const next = tokens[i + 1];
         const text2 = next === void 0 ? null : tokenText(next);
         if (text2 !== null) {
@@ -4897,7 +4962,7 @@ function extractToolInputShape(input, client) {
 // src/hooks/runtime/resolve.ts
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { createHash } from "node:crypto";
-import { existsSync as existsSync6, readFileSync as readFileSync6 } from "node:fs";
+import { existsSync as existsSync6, readFileSync as readFileSync5 } from "node:fs";
 
 // src/auth/auth-store.ts
 import { execFileSync } from "node:child_process";
@@ -5242,11 +5307,11 @@ async function resolveProjectByRepository(apiBase, token, q, deps = {}) {
 }
 
 // src/hooks/runtime/repo-link-cache.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "node:fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { dirname as dirname2 } from "node:path";
 
 // src/utils.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2 } from "node:fs";
 import { dirname, join as join2 } from "node:path";
 import { homedir as homedir3, platform } from "node:os";
 
@@ -5371,7 +5436,7 @@ function readRepoLinkCache(deps = {}) {
   const p = pathOf(deps);
   if (!existsSync3(p)) return {};
   try {
-    const raw = readFileSync3(p, "utf8");
+    const raw = readFileSync2(p, "utf8");
     if (!raw.trim()) return {};
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
@@ -5419,13 +5484,13 @@ function writeCachedRepoLink(key, entry, deps = {}) {
     const p = pathOf(deps);
     const dir = dirname2(p);
     if (!existsSync3(dir)) mkdirSync3(dir, { recursive: true });
-    writeFileSync3(p, JSON.stringify(map, null, 2) + "\n");
+    writeFileSync2(p, JSON.stringify(map, null, 2) + "\n");
   } catch {
   }
 }
 
 // src/hooks/runtime/config.ts
-import { existsSync as existsSync4, readFileSync as readFileSync4 } from "node:fs";
+import { existsSync as existsSync4, readFileSync as readFileSync3 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
 import { join as join3 } from "node:path";
 function runtimeConfigPath() {
@@ -5435,7 +5500,7 @@ function loadRuntimeConfig(path) {
   const p = path ?? runtimeConfigPath();
   if (!existsSync4(p)) return null;
   try {
-    const raw = readFileSync4(p, "utf8");
+    const raw = readFileSync3(p, "utf8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -5457,7 +5522,7 @@ async function readStdinJson() {
 }
 
 // src/hooks/runtime/trusted-api-base.ts
-import { existsSync as existsSync5, readFileSync as readFileSync5 } from "node:fs";
+import { existsSync as existsSync5, readFileSync as readFileSync4 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
 import { join as join4 } from "node:path";
 
@@ -5506,7 +5571,7 @@ function normalizeOrigin(candidate) {
 function readUserRegionApiBases(path) {
   try {
     if (!existsSync5(path)) return [];
-    const parsed = JSON.parse(readFileSync5(path, "utf8"));
+    const parsed = JSON.parse(readFileSync4(path, "utf8"));
     if (!Array.isArray(parsed)) return [];
     return parsed.map(
       (entry) => entry && typeof entry === "object" ? entry.apiBase : null
@@ -5575,7 +5640,7 @@ function resolveProjectId(cwd = process.cwd(), deps = {}) {
   const configPath = `${cwd}/.cybedefend/config.json`;
   if (existsSync6(configPath)) {
     try {
-      const raw = readFileSync6(configPath, "utf8");
+      const raw = readFileSync5(configPath, "utf8");
       const cfg = JSON.parse(raw);
       return {
         projectId: cfg.projectId ?? null,
@@ -5596,7 +5661,7 @@ function resolveToken(mcpName, opts = {}) {
   const platform2 = opts.platform ?? process.platform;
   const readKeychain = opts.readKeychain ?? readMacOSKeychain2;
   if (platform2 === "darwin") {
-    return resolveTokenMacOS(mcpName, readKeychain) ?? resolveTokenCodexMacOS(mcpName, opts.mcpUrl, readKeychain);
+    return resolveTokenMacOS(mcpName, opts.mcpUrl, readKeychain) ?? resolveTokenCodexMacOS(mcpName, opts.mcpUrl, readKeychain);
   }
   if (platform2 === "linux") return resolveTokenLinux(mcpName);
   return null;
@@ -5627,16 +5692,18 @@ function readMacOSKeychain2(service, account) {
     return null;
   }
 }
-function resolveTokenMacOS(mcpName, readKeychain) {
+function resolveTokenMacOS(mcpName, mcpUrl, readKeychain) {
   const blob = readKeychain("Claude Code-credentials");
   if (!blob) return null;
   try {
     const data = JSON.parse(blob);
     const oauth = data.mcpOAuth ?? {};
     for (const entry of Object.values(oauth)) {
-      if (entry?.serverName === mcpName && entry.accessToken) {
-        return entry.accessToken;
+      if (entry?.serverName !== mcpName || !entry.accessToken) continue;
+      if (mcpUrl && typeof entry.serverUrl === "string" && entry.serverUrl !== mcpUrl) {
+        continue;
       }
+      return entry.accessToken;
     }
   } catch {
     return blob || null;
@@ -6006,9 +6073,33 @@ function composeSecurityBody(markdown, total, filePath) {
   ].join("\n");
 }
 
+// src/hooks/runtime/proposal-mode.ts
+var TRUTHY = /* @__PURE__ */ new Set(["1", "true", "yes", "on"]);
+var FALSY = /* @__PURE__ */ new Set(["0", "false", "no", "off"]);
+function envFlag(env, name) {
+  const raw = env[name]?.trim().toLowerCase();
+  if (raw && TRUTHY.has(raw)) return true;
+  if (raw && FALSY.has(raw)) return false;
+  return void 0;
+}
+function isNonBlockingMode(config, env = process.env) {
+  return envFlag(env, "CYBEDEFEND_NON_BLOCKING") ?? config.hooks.nonBlockingMode === true;
+}
+function resolveProposalMode(config, env = process.env) {
+  if (isNonBlockingMode(config, env)) return "non-blocking";
+  const auto = envFlag(env, "CYBEDEFEND_AUTO_PROPOSE") ?? config.hooks.autoProposeMode === true;
+  return auto ? "auto" : "ask";
+}
+var NON_BLOCKING_INBOX_DIRECTIVE = "Non-blocking mode is ON (autonomous agent \u2014 nobody is in the chat to answer). This OVERRIDES step 0 of the CybeDefend doctrine: do NOT call `cybe_rules_list_proposals`, do NOT ask the user about proposals (no AskUserQuestion), and NEVER call `cybe_rules_accept_proposal` / `cybe_rules_reject_proposal` yourself. Pending proposals stay in the inbox for a human to review in the CybeDefend dashboard. Proceed directly with the task.";
+var REPORT_MISSING_CALL = '`cybe_rules_report_missing(projectId, { rule_text, evidence_files, rationale: "<quote user prompt>", confirmed_by_user: true })`';
+var DIRECT_PROPOSE_DIRECTIVES = {
+  auto: `**Auto-propose mode is ON** \u2014 this OVERRIDES the doctrine's "ask first" step: do NOT ask the user (no AskUserQuestion). If \u2014 and ONLY if \u2014 one durable, reusable gap stands out, call ${REPORT_MISSING_CALL} directly for that single rule. The user validates it at the next session start via the Accept/Reject picker. Otherwise propose nothing.`,
+  "non-blocking": `**Non-blocking mode is ON** (autonomous agent \u2014 nobody is in the chat to answer). Do NOT ask the user (no AskUserQuestion). If \u2014 and ONLY if \u2014 one durable, reusable gap stands out, call ${REPORT_MISSING_CALL} directly for that single rule. It lands as a pending proposal that a human accepts or rejects in the CybeDefend dashboard. Otherwise propose nothing.`
+};
+
 // src/hooks/runtime/self-update-check.ts
 import { spawn } from "node:child_process";
-import { existsSync as existsSync8, readFileSync as readFileSync7, rmSync, writeFileSync as writeFileSync4 } from "node:fs";
+import { existsSync as existsSync8, readFileSync as readFileSync6, rmSync, writeFileSync as writeFileSync3 } from "node:fs";
 import { homedir as homedir6 } from "node:os";
 import { join as join5 } from "node:path";
 
@@ -6046,6 +6137,7 @@ var GLOBAL_MODES = /* @__PURE__ */ new Set([
 ]);
 function detectInstallMode(scriptPath) {
   if (/[\\/]_npx[\\/]/i.test(scriptPath)) return "npx-cache";
+  if (/[\\/]dlx(?:-\d+)?[\\/]/i.test(scriptPath)) return "npx-cache";
   if (/[\\/]pnpm(?:[\\/]global|[\\/]nodejs|[\\/]node_modules)/i.test(scriptPath)) {
     return "pnpm-global";
   }
@@ -6123,7 +6215,7 @@ function applyOrNotify(deps, installMode, latest, logPath) {
 function readThrottle(path) {
   try {
     if (!existsSync8(path)) return null;
-    const data = JSON.parse(readFileSync7(path, "utf8"));
+    const data = JSON.parse(readFileSync6(path, "utf8"));
     if (typeof data.lastCheckedAt !== "number") return null;
     return { lastCheckedAt: data.lastCheckedAt };
   } catch {
@@ -6133,7 +6225,7 @@ function readThrottle(path) {
 function writeThrottle(path, throttle) {
   try {
     ensureDirFor(path);
-    writeFileSync4(path, JSON.stringify(throttle) + "\n");
+    writeFileSync3(path, JSON.stringify(throttle) + "\n");
   } catch {
   }
 }
@@ -6142,7 +6234,7 @@ function takeUpdateLogNotice(logPath) {
     if (!existsSync8(logPath)) return null;
     let parsed = {};
     try {
-      parsed = JSON.parse(readFileSync7(logPath, "utf8"));
+      parsed = JSON.parse(readFileSync6(logPath, "utf8"));
     } catch {
       parsed = {};
     }
@@ -6217,7 +6309,7 @@ function pmCommand(mode, spec) {
 
 // src/hooks/runtime/hook-refresh-trigger.ts
 import { spawn as spawn2 } from "node:child_process";
-import { existsSync as existsSync9, readFileSync as readFileSync8, writeFileSync as writeFileSync5 } from "node:fs";
+import { existsSync as existsSync9, readFileSync as readFileSync7, writeFileSync as writeFileSync4 } from "node:fs";
 import { homedir as homedir7 } from "node:os";
 import { dirname as dirname3, join as join6 } from "node:path";
 function maybeRefreshStaleWiring(deps) {
@@ -6240,7 +6332,7 @@ function maybeRefreshStaleWiring(deps) {
 function readMarkerVersion(path) {
   try {
     if (!existsSync9(path)) return null;
-    const data = JSON.parse(readFileSync8(path, "utf8"));
+    const data = JSON.parse(readFileSync7(path, "utf8"));
     return typeof data.version === "string" ? data.version : null;
   } catch {
     return null;
@@ -6249,7 +6341,7 @@ function readMarkerVersion(path) {
 function writeMarker(path, version) {
   try {
     ensureDirFor(path);
-    writeFileSync5(path, JSON.stringify({ version, spawnedAt: Date.now() }) + "\n");
+    writeFileSync4(path, JSON.stringify({ version, spawnedAt: Date.now() }) + "\n");
   } catch {
   }
 }
@@ -6263,7 +6355,7 @@ function defaultSpawnRefresh(cliEntry) {
 }
 
 // src/version.ts
-import { readFileSync as readFileSync9 } from "node:fs";
+import { readFileSync as readFileSync8 } from "node:fs";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { dirname as dirname4, join as join7 } from "node:path";
 var PKG_NAME = "@cybedefend/vibedefend";
@@ -6274,7 +6366,7 @@ function readPackageMeta(opts = {}) {
   if (typeof opts.bakedVersion === "string" && opts.bakedVersion.length > 0) {
     return { name: PKG_NAME, version: opts.bakedVersion };
   }
-  const readFile = opts.readFile ?? ((p) => readFileSync9(p, "utf8"));
+  const readFile = opts.readFile ?? ((p) => readFileSync8(p, "utf8"));
   const pkgPath = opts.pkgPath ?? defaultPkgPath();
   try {
     return JSON.parse(readFile(pkgPath));
@@ -6283,7 +6375,7 @@ function readPackageMeta(opts = {}) {
   }
 }
 var pkg = readPackageMeta({
-  bakedVersion: true ? "1.4.4" : void 0
+  bakedVersion: true ? "1.4.6" : void 0
 });
 
 // src/hooks/runtime/session-start.ts
@@ -6338,7 +6430,12 @@ async function sessionStartHook(deps = {}) {
     "   if your client does not surface it, load the `cybe-init` MCP prompt manually.)"
   );
   lines.push("");
-  if (total === null) {
+  if (isNonBlockingMode(config)) {
+    lines.push(
+      `- **Step 0 \u2014 proposals inbox**: ${total === null ? "not checked" : `${total} pending`} \u2014 no action required.`,
+      `  ${NON_BLOCKING_INBOX_DIRECTIVE}`
+    );
+  } else if (total === null) {
     lines.push(
       "- **Step 0 \u2014 proposals inbox**: \u26A0 unable to verify (no MCP token reachable).",
       '  **YOU MUST call `cybe_rules_list_proposals(projectId, status="proposed")` as',
@@ -6394,7 +6491,7 @@ async function sessionStartHook(deps = {}) {
 }
 
 // src/hooks/runtime/session-review.ts
-import { existsSync as existsSync10, readFileSync as readFileSync10 } from "node:fs";
+import { existsSync as existsSync10, readFileSync as readFileSync9 } from "node:fs";
 var COUNTED_TOOLS = /* @__PURE__ */ new Set([
   "Edit",
   "Write",
@@ -6410,6 +6507,11 @@ function transcriptHasReviewSentinel(transcript) {
     return false;
   }
 }
+function resolveReviewThreshold(config, env = process.env) {
+  const raw = env.CYBEDEFEND_REVIEW_THRESHOLD?.trim();
+  if (raw && /^\d+$/.test(raw) && Number(raw) <= 100) return Number(raw);
+  return config.hooks.reviewThreshold;
+}
 async function sessionReviewHook(deps = {}) {
   const readStdin = deps.readStdin ?? readStdinJson;
   const loadConfig = deps.loadConfig ?? loadRuntimeConfig;
@@ -6430,20 +6532,21 @@ async function sessionReviewHook(deps = {}) {
     editCount = parseInt(process.env.CYBEDEFEND_DRY_RUN_EDITS ?? "5", 10);
   }
   if (editCount === 0) return;
-  if (editCount < config.hooks.reviewThreshold) return;
+  if (editCount < resolveReviewThreshold(config)) return;
   const userPrompt = extractFirstUserPrompt(transcript);
+  const proposalMode = resolveProposalMode(config);
   let body = composeReviewBody(
     editCount,
     event.client,
     userPrompt,
-    config.hooks.autoProposeMode
+    proposalMode
   );
   const withDiffScan = config.hooks.enableDiffScan !== false;
   if (withDiffScan) {
     const cwd = typeof stdin.cwd === "string" && stdin.cwd ? stdin.cwd : process.cwd();
     body += "\n" + composeDiffScanBody(extractChangedFiles(transcript, void 0, cwd));
   }
-  emitFn(body, event.client, composeStopReason(withDiffScan));
+  emitFn(body, event.client, composeStopReason(withDiffScan, proposalMode));
 }
 function loadTranscript(stdin, readFile) {
   if (Array.isArray(stdin.transcript)) return stdin.transcript;
@@ -6474,7 +6577,7 @@ function loadTranscript(stdin, readFile) {
 function defaultReadTranscript(path) {
   if (!existsSync10(path)) return null;
   try {
-    return readFileSync10(path, "utf8");
+    return readFileSync9(path, "utf8");
   } catch {
     return null;
   }
@@ -6605,24 +6708,16 @@ function extractFirstUserPrompt(transcript) {
   }
   return "";
 }
-function composeReviewBody(editCount, client, userPrompt, autoPropose) {
+function composeReviewBody(editCount, client, userPrompt, proposalMode) {
   const safePrompt = userPrompt || "(could not extract \u2014 re-read transcript)";
-  const proposalLine = autoPropose ? [
-    "   **Auto-propose mode is ON** (configured at install). If \u2014 and ONLY",
-    "   if \u2014 one gap clears the bar above, call WITHOUT asking the user:",
-    "   `cybe_rules_report_missing(projectId, { rule_text, evidence_files,",
-    '   rationale: "<quote user prompt>", confirmed_by_user: true })` for',
-    "   that single rule. The user validates it at the next session start",
-    "   via the Accept/Reject picker. If nothing clears the bar, propose",
-    "   nothing."
-  ].join("\n") : [
+  const proposalLine = proposalMode === "ask" ? [
     "   Ask the user via AskUserQuestion:",
     '   > "Your prompt implied <concern>, but no business rule covers it.',
     '   >  Propose it as a standing rule for the project?" \u2014 Yes / No / Edit.',
     '   ONLY on an explicit "yes": call `cybe_rules_report_missing(projectId,',
     '   { rule_text, evidence_files, rationale: "<quote user prompt>",',
     "   confirmed_by_user: true })`."
-  ].join("\n");
+  ].join("\n") : `   ${DIRECT_PROPOSE_DIRECTIVES[proposalMode]}`;
   return [
     `## \u{1F6E1}\uFE0F CybeDefend gap analysis (Stop hook \u2014 ${editCount} edits this session, client=${client})`,
     "",
@@ -6694,9 +6789,15 @@ function composeDiffScanBody(changedFiles) {
     ""
   ].join("\n");
 }
-function composeStopReason(withDiffScan) {
+function composeStopReason(withDiffScan, proposalMode) {
   const scan = withDiffScan ? ", then run a pre-commit `cybe_scan_diff` on the files you changed (poll `cybe_scan_status`, read `cybe_scan_findings`) and fix or justify each finding" : "";
-  return "\u{1F6E1}\uFE0F CybeDefend \u2014 before wrapping up, run the end-of-session review: gap-analyse the request against this session's business rules and, for any uncovered security/data concern, offer to propose a rule via AskUserQuestion (`cybe_rules_report_missing` only on an explicit yes)" + scan + ".";
+  const directPropose = "if \u2014 and only if \u2014 one durable gap stands out, propose that single rule directly with `cybe_rules_report_missing` (`confirmed_by_user: true`). ";
+  const propose = {
+    ask: "for any uncovered security/data concern, offer to propose a rule via AskUserQuestion (`cybe_rules_report_missing` only on an explicit yes)",
+    auto: directPropose + "Auto-propose mode: do NOT ask the user (no AskUserQuestion) \u2014 they review it at the next session start",
+    "non-blocking": directPropose + "Non-blocking mode: do NOT ask the user (no AskUserQuestion) \u2014 a human reviews the proposal in the CybeDefend dashboard"
+  };
+  return "\u{1F6E1}\uFE0F CybeDefend \u2014 before wrapping up, run the end-of-session review: gap-analyse the request against this session's business rules and, " + propose[proposalMode] + scan + ".";
 }
 
 // src/hooks/runtime/pre-compact.ts
@@ -6717,6 +6818,11 @@ async function preCompactHook(deps = {}) {
     );
     return;
   }
+  const proposalMode = resolveProposalMode(config);
+  const proposeStep = proposalMode === "ask" ? [
+    "3. For uncovered concerns, ask the user via AskUserQuestion whether to propose;",
+    '   on "yes", call `cybe_rules_report_missing` with confirmed_by_user: true.'
+  ] : [`3. ${DIRECT_PROPOSE_DIRECTIVES[proposalMode]}`];
   const body = [
     "## \u{1F6E1}\uFE0F CybeDefend PreCompact gap analysis",
     "",
@@ -6724,15 +6830,14 @@ async function preCompactHook(deps = {}) {
     "Before the fine-grained tool history is summarised away, run a gap analysis:",
     "1. Re-read the original user request (still uncompacted now).",
     "2. List the CybeDefend rules returned during the session.",
-    "3. For uncovered concerns, ask the user via AskUserQuestion whether to propose;",
-    '   on "yes", call `cybe_rules_report_missing` with confirmed_by_user: true.',
+    ...proposeStep,
     ""
   ].join("\n");
   emitFn(body, event.client);
 }
 
 // src/hooks/runtime/user-prompt-submit.ts
-import { existsSync as existsSync11, mkdirSync as mkdirSync4, readFileSync as readFileSync11, writeFileSync as writeFileSync6 } from "node:fs";
+import { existsSync as existsSync11, mkdirSync as mkdirSync4, readFileSync as readFileSync10, writeFileSync as writeFileSync5 } from "node:fs";
 import { homedir as homedir8 } from "node:os";
 import { join as join8 } from "node:path";
 var SESSIONS_CAP = 100;
@@ -6744,7 +6849,7 @@ function defaultSessionTracker(file = defaultSessionsFile()) {
   function load() {
     if (!existsSync11(file)) return [];
     try {
-      const raw = readFileSync11(file, "utf8");
+      const raw = readFileSync10(file, "utf8");
       const data = JSON.parse(raw);
       if (!Array.isArray(data.sessions)) return [];
       return data.sessions.filter((s) => typeof s === "string");
@@ -6762,7 +6867,7 @@ function defaultSessionTracker(file = defaultSessionsFile()) {
       const next = [...existing, sessionId].slice(-SESSIONS_CAP);
       try {
         mkdirSync4(join8(file, ".."), { recursive: true });
-        writeFileSync6(file, JSON.stringify({ sessions: next }), "utf8");
+        writeFileSync5(file, JSON.stringify({ sessions: next }), "utf8");
       } catch {
       }
     }
@@ -6802,7 +6907,13 @@ async function userPromptSubmitHook(deps = {}) {
     "",
     "### Step 0 \u2014 Proposal inbox"
   ];
-  if (total === null) {
+  const nonBlocking = isNonBlockingMode(config);
+  if (nonBlocking) {
+    lines.push(
+      `- CybeDefend: ${total === null ? "proposal inbox not checked" : `**${total}** pending proposals`} \u2014 no action required.`,
+      `- ${NON_BLOCKING_INBOX_DIRECTIVE}`
+    );
+  } else if (total === null) {
     lines.push(
       "- CybeDefend: could not fetch proposal-inbox status (token / API unreachable).",
       '- Call `cybe_rules_list_proposals(projectId, status="proposed")` yourself to verify, then handle each surfaced proposal via AskUserQuestion (Accept / Reject / Skip / Tell me more) before continuing.'
@@ -6828,7 +6939,7 @@ async function userPromptSubmitHook(deps = {}) {
     "- The PreToolUse hook fires automatically as a backstop on Edit/Write/MultiEdit, but your explicit call with a narrative intent gets better matches.",
     "",
     "### Order",
-    "1. Satisfy step 0 (acknowledge / handle the inbox).",
+    nonBlocking ? "1. Step 0 needs no action (non-blocking mode)." : "1. Satisfy step 0 (acknowledge / handle the inbox).",
     "2. Satisfy step 1 (fetch rules with a narrative intent) once you know which files you will touch.",
     "3. THEN proceed with whatever skill / brainstorm / implementation flow fits the task.",
     ""
@@ -7827,7 +7938,7 @@ function nearMiss(req, rule) {
 }
 
 // src/hooks/runtime/guard-rules-cache.ts
-import { readFileSync as readFileSync12, writeFileSync as writeFileSync7, existsSync as existsSync12, mkdirSync as mkdirSync5 } from "node:fs";
+import { readFileSync as readFileSync11, writeFileSync as writeFileSync6, existsSync as existsSync12, mkdirSync as mkdirSync5 } from "node:fs";
 import { dirname as dirname5 } from "node:path";
 import { homedir as homedir9 } from "node:os";
 import { join as join9 } from "node:path";
@@ -12069,7 +12180,7 @@ function makeGuardRulesCache(opts) {
   function readCache(projectId) {
     if (!existsSync12(cacheFile)) return null;
     try {
-      const raw = readFileSync12(cacheFile, "utf8");
+      const raw = readFileSync11(cacheFile, "utf8");
       const data = JSON.parse(raw);
       if (data.projectId !== projectId) return null;
       return data;
@@ -12080,7 +12191,7 @@ function makeGuardRulesCache(opts) {
   function writeCache(entry) {
     try {
       ensureDirFor2(cacheFile);
-      writeFileSync7(cacheFile, JSON.stringify(entry), "utf8");
+      writeFileSync6(cacheFile, JSON.stringify(entry), "utf8");
     } catch {
     }
   }
@@ -12210,7 +12321,7 @@ function detectPromptInjection(text) {
 }
 
 // src/hooks/runtime/judge-cache.ts
-import { readFileSync as readFileSync13, writeFileSync as writeFileSync8, existsSync as existsSync13, mkdirSync as mkdirSync6 } from "node:fs";
+import { readFileSync as readFileSync12, writeFileSync as writeFileSync7, existsSync as existsSync13, mkdirSync as mkdirSync6 } from "node:fs";
 import { dirname as dirname6, join as join10 } from "node:path";
 import { homedir as homedir10 } from "node:os";
 var DEFAULT_JUDGE_CACHE_FILE = join10(
@@ -12226,7 +12337,7 @@ function makeJudgeCache(opts = {}) {
   function readAll() {
     if (!existsSync13(cacheFile)) return {};
     try {
-      return JSON.parse(readFileSync13(cacheFile, "utf8"));
+      return JSON.parse(readFileSync12(cacheFile, "utf8"));
     } catch {
       return {};
     }
@@ -12246,7 +12357,7 @@ function makeJudgeCache(opts = {}) {
       }
       all[key] = { res, at: t };
       ensureDirFor3(cacheFile);
-      writeFileSync8(cacheFile, JSON.stringify(all), "utf8");
+      writeFileSync7(cacheFile, JSON.stringify(all), "utf8");
     } catch {
     }
   }
@@ -12267,8 +12378,8 @@ import { join as join12 } from "node:path";
 import {
   appendFileSync,
   existsSync as existsSync14,
-  readFileSync as readFileSync14,
-  writeFileSync as writeFileSync9,
+  readFileSync as readFileSync13,
+  writeFileSync as writeFileSync8,
   mkdirSync as mkdirSync7
 } from "node:fs";
 import { dirname as dirname7 } from "node:path";
@@ -12297,7 +12408,7 @@ function makeViolationsBuffer(opts = {}) {
     if (!existsSync14(bufferFile)) return;
     let content;
     try {
-      content = readFileSync14(bufferFile, "utf8").trim();
+      content = readFileSync13(bufferFile, "utf8").trim();
     } catch {
       return;
     }
@@ -12316,7 +12427,7 @@ function makeViolationsBuffer(opts = {}) {
     }
     if (records.length === 0) {
       try {
-        writeFileSync9(bufferFile, "", "utf8");
+        writeFileSync8(bufferFile, "", "utf8");
       } catch {
       }
       return;
@@ -12346,10 +12457,10 @@ function makeViolationsBuffer(opts = {}) {
     }
     try {
       if (failed.length === 0) {
-        writeFileSync9(bufferFile, "", "utf8");
+        writeFileSync8(bufferFile, "", "utf8");
       } else {
         const serialised = failed.map((r) => JSON.stringify(r)).join("\n") + "\n";
-        writeFileSync9(bufferFile, serialised, "utf8");
+        writeFileSync8(bufferFile, serialised, "utf8");
       }
     } catch {
     }