@cybedefend/vibedefend 1.4.5 → 1.4.7

package/dist/hook-runner.js

@@ -4962,7 +4962,7 @@ function extractToolInputShape(input, client) {
 // src/hooks/runtime/resolve.ts
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { createHash } from "node:crypto";
-import { existsSync as existsSync6, readFileSync as readFileSync6 } from "node:fs";
+import { existsSync as existsSync6, readFileSync as readFileSync5 } from "node:fs";
 
 // src/auth/auth-store.ts
 import { execFileSync } from "node:child_process";
@@ -5307,11 +5307,11 @@ async function resolveProjectByRepository(apiBase, token, q, deps = {}) {
 }
 
 // src/hooks/runtime/repo-link-cache.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "node:fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { dirname as dirname2 } from "node:path";
 
 // src/utils.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2 } from "node:fs";
 import { dirname, join as join2 } from "node:path";
 import { homedir as homedir3, platform } from "node:os";
 
@@ -5436,7 +5436,7 @@ function readRepoLinkCache(deps = {}) {
   const p = pathOf(deps);
   if (!existsSync3(p)) return {};
   try {
-    const raw = readFileSync3(p, "utf8");
+    const raw = readFileSync2(p, "utf8");
     if (!raw.trim()) return {};
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
@@ -5484,13 +5484,13 @@ function writeCachedRepoLink(key, entry, deps = {}) {
     const p = pathOf(deps);
     const dir = dirname2(p);
     if (!existsSync3(dir)) mkdirSync3(dir, { recursive: true });
-    writeFileSync3(p, JSON.stringify(map, null, 2) + "\n");
+    writeFileSync2(p, JSON.stringify(map, null, 2) + "\n");
   } catch {
   }
 }
 
 // src/hooks/runtime/config.ts
-import { existsSync as existsSync4, readFileSync as readFileSync4 } from "node:fs";
+import { existsSync as existsSync4, readFileSync as readFileSync3 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
 import { join as join3 } from "node:path";
 function runtimeConfigPath() {
@@ -5500,7 +5500,7 @@ function loadRuntimeConfig(path) {
   const p = path ?? runtimeConfigPath();
   if (!existsSync4(p)) return null;
   try {
-    const raw = readFileSync4(p, "utf8");
+    const raw = readFileSync3(p, "utf8");
     return JSON.parse(raw);
   } catch {
     return null;
@@ -5522,7 +5522,7 @@ async function readStdinJson() {
 }
 
 // src/hooks/runtime/trusted-api-base.ts
-import { existsSync as existsSync5, readFileSync as readFileSync5 } from "node:fs";
+import { existsSync as existsSync5, readFileSync as readFileSync4 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
 import { join as join4 } from "node:path";
 
@@ -5571,7 +5571,7 @@ function normalizeOrigin(candidate) {
 function readUserRegionApiBases(path) {
   try {
     if (!existsSync5(path)) return [];
-    const parsed = JSON.parse(readFileSync5(path, "utf8"));
+    const parsed = JSON.parse(readFileSync4(path, "utf8"));
     if (!Array.isArray(parsed)) return [];
     return parsed.map(
       (entry) => entry && typeof entry === "object" ? entry.apiBase : null
@@ -5640,7 +5640,7 @@ function resolveProjectId(cwd = process.cwd(), deps = {}) {
   const configPath = `${cwd}/.cybedefend/config.json`;
   if (existsSync6(configPath)) {
     try {
-      const raw = readFileSync6(configPath, "utf8");
+      const raw = readFileSync5(configPath, "utf8");
       const cfg = JSON.parse(raw);
       return {
         projectId: cfg.projectId ?? null,
@@ -5661,7 +5661,7 @@ function resolveToken(mcpName, opts = {}) {
   const platform2 = opts.platform ?? process.platform;
   const readKeychain = opts.readKeychain ?? readMacOSKeychain2;
   if (platform2 === "darwin") {
-    return resolveTokenMacOS(mcpName, readKeychain) ?? resolveTokenCodexMacOS(mcpName, opts.mcpUrl, readKeychain);
+    return resolveTokenMacOS(mcpName, opts.mcpUrl, readKeychain) ?? resolveTokenCodexMacOS(mcpName, opts.mcpUrl, readKeychain);
   }
   if (platform2 === "linux") return resolveTokenLinux(mcpName);
   return null;
@@ -5692,16 +5692,18 @@ function readMacOSKeychain2(service, account) {
     return null;
   }
 }
-function resolveTokenMacOS(mcpName, readKeychain) {
+function resolveTokenMacOS(mcpName, mcpUrl, readKeychain) {
   const blob = readKeychain("Claude Code-credentials");
   if (!blob) return null;
   try {
     const data = JSON.parse(blob);
     const oauth = data.mcpOAuth ?? {};
     for (const entry of Object.values(oauth)) {
-      if (entry?.serverName === mcpName && entry.accessToken) {
-        return entry.accessToken;
+      if (entry?.serverName !== mcpName || !entry.accessToken) continue;
+      if (mcpUrl && typeof entry.serverUrl === "string" && entry.serverUrl !== mcpUrl) {
+        continue;
       }
+      return entry.accessToken;
     }
   } catch {
     return blob || null;
@@ -5806,7 +5808,165 @@ async function resolveProjectIdWithApi(cwd = process.cwd(), deps = {}) {
   }
 }
 
+// src/hooks/runtime/usage-block.ts
+import { existsSync as existsSync7, mkdirSync as mkdirSync4, readFileSync as readFileSync6, writeFileSync as writeFileSync3 } from "node:fs";
+import { homedir as homedir6 } from "node:os";
+import { dirname as dirname3, join as join5 } from "node:path";
+var BLOCKED_CODE = "VIBEDEFEND_BLOCKED";
+var USAGE_WARNING_HEADER = "x-vibedefend-usage-warning";
+var UNITS = ["injection", "judgment", "diff_scan"];
+var REASONS = [
+  "free_tier_exhausted",
+  "cap_reached",
+  "unpaid",
+  "product_inactive"
+];
+var WARNINGS = [
+  "approaching_limit",
+  "limit_reached"
+];
+function pick(allowed, value) {
+  return allowed.find((v) => v === value);
+}
+async function readVibedefendBlock(res) {
+  if (res.status !== 402) return null;
+  let body;
+  try {
+    body = await res.json();
+  } catch {
+    return null;
+  }
+  if (!body || typeof body !== "object") return null;
+  const root = body;
+  const data = root.data && typeof root.data === "object" ? root.data : root;
+  const source = data.code === BLOCKED_CODE ? data : root;
+  if (source.code !== BLOCKED_CODE) return null;
+  return {
+    reason: pick(REASONS, source.reason) ?? "unknown",
+    unit: pick(UNITS, source.unit) ?? "unknown"
+  };
+}
+function readUsageWarning(res) {
+  let raw;
+  try {
+    raw = res.headers?.get?.(USAGE_WARNING_HEADER);
+  } catch {
+    return null;
+  }
+  if (typeof raw !== "string") return null;
+  const parts = raw.trim().split(":");
+  if (parts.length !== 2) return null;
+  const unit = pick(UNITS, parts[0]);
+  const warning = pick(WARNINGS, parts[1]);
+  if (!unit || !warning) return null;
+  return { unit, warning };
+}
+var UNIT_LABEL = {
+  injection: "Security rules injection",
+  judgment: "Action Guards judgments",
+  diff_scan: "Diff scans",
+  unknown: "Part of VibeDefend"
+};
+var UNIT_EFFECT = {
+  injection: "no security or business rules are added to your edits",
+  judgment: "Action Guards are off for this session",
+  diff_scan: "no diff scan can be started",
+  unknown: "part of VibeDefend is paused"
+};
+function blockSentence(block) {
+  const label = UNIT_LABEL[block.unit];
+  const effect = UNIT_EFFECT[block.unit];
+  switch (block.reason) {
+    case "free_tier_exhausted":
+      return `VibeDefend paused: ${label} used up this month's free tier, so ${effect}. An administrator of your organisation can add a card in the VibeDefend usage page to continue.`;
+    case "cap_reached":
+      return `VibeDefend paused: ${label} reached the monthly spending cap of your organisation, so ${effect}. An administrator can raise the cap in the VibeDefend usage page.`;
+    case "unpaid":
+      return "VibeDefend paused: your organisation's last VibeDefend invoice is unpaid, so rules, Action Guards and diff scans are off. An administrator can update the card in the VibeDefend usage page.";
+    case "product_inactive":
+      return "VibeDefend is not active for your organisation, so rules, Action Guards and diff scans are off. An administrator can activate it in the CybeDefend dashboard.";
+    default:
+      return `VibeDefend paused: ${label} is blocked for your organisation, so ${effect}. An administrator can check the VibeDefend usage page.`;
+  }
+}
+function warningSentence(w) {
+  const label = UNIT_LABEL[w.unit];
+  if (w.warning === "approaching_limit") {
+    return `VibeDefend: ${label} has used 80 % of this month's allowance of your organisation. An administrator can follow it in the VibeDefend usage page.`;
+  }
+  return `VibeDefend: ${label} has reached this month's limit of your organisation; the next requests will be refused. An administrator can add a card or raise the cap in the VibeDefend usage page.`;
+}
+var ORG_WIDE_REASONS = /* @__PURE__ */ new Set([
+  "unpaid",
+  "product_inactive"
+]);
+function blockKey(block) {
+  return ORG_WIDE_REASONS.has(block.reason) ? `block:${block.reason}` : `block:${block.reason}:${block.unit}`;
+}
+var NOTICES_CAP = 300;
+function defaultUsageNoticesFile() {
+  const dir = process.env.CYBEDEFEND_BASELINE_DIR ?? join5(homedir6(), ".cybedefend");
+  return join5(dir, "usage-notices-sessions.json");
+}
+function makeUsageNotifier(opts = {}) {
+  const file = opts.file ?? defaultUsageNoticesFile();
+  const write = opts.write ?? ((line) => {
+    try {
+      process.stderr.write(line);
+    } catch {
+    }
+  });
+  function load() {
+    try {
+      if (!existsSync7(file)) return [];
+      const data = JSON.parse(readFileSync6(file, "utf8"));
+      return Array.isArray(data.seen) ? data.seen.filter((s) => typeof s === "string") : [];
+    } catch {
+      return [];
+    }
+  }
+  function once(sessionId, key, sentence) {
+    if (sessionId) {
+      const marker = `${sessionId}|${key}`;
+      const seen = load();
+      if (seen.includes(marker)) return null;
+      try {
+        mkdirSync4(dirname3(file), { recursive: true });
+        writeFileSync3(
+          file,
+          JSON.stringify({ seen: [...seen, marker].slice(-NOTICES_CAP) }),
+          "utf8"
+        );
+      } catch {
+      }
+    }
+    write(`[VibeDefend] ${sentence}
+`);
+    return sentence;
+  }
+  return {
+    notifyBlock: (sessionId, block) => once(sessionId, blockKey(block), blockSentence(block)),
+    notifyWarning: (sessionId, w) => once(sessionId, `warning:${w.unit}:${w.warning}`, warningSentence(w))
+  };
+}
+
 // src/hooks/runtime/api.ts
+async function reportUsageSignal(res, listener) {
+  const emit2 = (signal) => {
+    try {
+      listener?.(signal);
+    } catch {
+    }
+  };
+  if (!res.ok) {
+    const block = await readVibedefendBlock(res);
+    if (block) emit2({ kind: "blocked", block });
+    return false;
+  }
+  const warning = readUsageWarning(res);
+  if (warning) emit2({ kind: "warning", warning });
+  return true;
+}
 var DEFAULT_TIMEOUT_MS = 1e4;
 async function fetchBusinessRules(opts) {
   const f = opts.fetchImpl ?? globalThis.fetch;
@@ -5830,7 +5990,7 @@ async function fetchBusinessRules(opts) {
   } catch {
     return null;
   }
-  if (!res.ok) return null;
+  if (!await reportUsageSignal(res, opts.onUsageSignal)) return null;
   let body;
   try {
     body = await res.json();
@@ -5865,7 +6025,7 @@ async function fetchSecurityRules(opts) {
   } catch {
     return null;
   }
-  if (!res.ok) return null;
+  if (!await reportUsageSignal(res, opts.onUsageSignal)) return null;
   let body;
   try {
     body = await res.json();
@@ -5969,6 +6129,7 @@ async function fetchRulesHook(deps = {}) {
   const fetchRules = deps.fetchRulesFn ?? fetchBusinessRules;
   const fetchSecRules = deps.fetchSecurityRulesFn ?? fetchSecurityRules;
   const emitFn = deps.emitFn ?? emitPreToolUseContext;
+  const usageNotifier = deps.usageNotifier ?? makeUsageNotifier();
   const stdin = await readStdin();
   const event = sniff(stdin);
   if (!INTERESTED_TOOLS.has(event.toolName)) return;
@@ -5985,13 +6146,20 @@ async function fetchRulesHook(deps = {}) {
   const intent = buildIntent(event);
   const files = event.filePaths.length > 0 ? event.filePaths : [event.filePath];
   const fileLabel = files.join(", ");
+  const sessionId = sessionIdOf(stdin);
+  const usageNotices = [];
+  const onUsageSignal = (signal) => {
+    const sentence = signal.kind === "blocked" ? usageNotifier.notifyBlock(sessionId, signal.block) : usageNotifier.notifyWarning(sessionId, signal.warning);
+    if (sentence) usageNotices.push(sentence);
+  };
   const fetchOpts = {
     apiBase,
     projectId,
     token,
     files,
     intent,
-    topK: 5
+    topK: 5,
+    onUsageSignal
   };
   const [businessResult, securityResult] = await Promise.all([
     fetchRules(fetchOpts),
@@ -6015,8 +6183,18 @@ async function fetchRulesHook(deps = {}) {
       )
     );
   }
+  if (usageNotices.length > 0) {
+    blocks.push(
+      ["## CybeDefend VibeDefend usage", ...usageNotices.map((n) => `- ${n}`), ""].join("\n")
+    );
+  }
   if (blocks.length > 0) emitFn(blocks.join("\n"), event.client);
 }
+function sessionIdOf(stdin) {
+  if (typeof stdin.session_id === "string" && stdin.session_id) return stdin.session_id;
+  if (typeof stdin.sessionId === "string" && stdin.sessionId) return stdin.sessionId;
+  return void 0;
+}
 function buildIntent(event) {
   const limit = parseInt(process.env.CYBEDEFEND_INTENT_BYTES ?? "800", 10);
   const snippet = event.newContent.slice(0, Number.isFinite(limit) ? limit : 800).replace(/\s+/g, " ").trim();
@@ -6097,9 +6275,9 @@ var DIRECT_PROPOSE_DIRECTIVES = {
 
 // src/hooks/runtime/self-update-check.ts
 import { spawn } from "node:child_process";
-import { existsSync as existsSync8, readFileSync as readFileSync7, rmSync, writeFileSync as writeFileSync4 } from "node:fs";
-import { homedir as homedir6 } from "node:os";
-import { join as join5 } from "node:path";
+import { existsSync as existsSync9, readFileSync as readFileSync7, rmSync, writeFileSync as writeFileSync4 } from "node:fs";
+import { homedir as homedir7 } from "node:os";
+import { join as join6 } from "node:path";
 
 // src/hooks/runtime/semver.ts
 function parseVersion(input) {
@@ -6127,7 +6305,7 @@ function isNewer(latest, current) {
 
 // src/self-update.ts
 import { fileURLToPath } from "node:url";
-import { existsSync as existsSync7, realpathSync } from "node:fs";
+import { existsSync as existsSync8, realpathSync } from "node:fs";
 var GLOBAL_MODES = /* @__PURE__ */ new Set([
   "npm-global",
   "pnpm-global",
@@ -6155,7 +6333,7 @@ function detectInstallMode(scriptPath) {
 }
 function resolveScriptPath() {
   const fromArgv = process.argv[1];
-  if (fromArgv && existsSync7(fromArgv)) {
+  if (fromArgv && existsSync8(fromArgv)) {
     try {
       return realpathSync(fromArgv);
     } catch {
@@ -6177,9 +6355,9 @@ function isValidRegistryVersion(value) {
 }
 async function selfUpdateCheck(deps) {
   const now = deps.now ?? (() => Date.now());
-  const dir = deps.cybeDir ?? join5(process.env.CYBEDEFEND_HOME ?? homedir6(), ".cybedefend");
-  const throttlePath = join5(dir, "update-check.json");
-  const logPath = join5(dir, "last-update.log");
+  const dir = deps.cybeDir ?? join6(process.env.CYBEDEFEND_HOME ?? homedir7(), ".cybedefend");
+  const throttlePath = join6(dir, "update-check.json");
+  const logPath = join6(dir, "last-update.log");
   const installMode = deps.installMode ?? (deps.runnerSource ? detectInstallMode(deps.runnerSource) : detectInstallMode(resolveScriptPath()));
   const priorFailure = takeUpdateLogNotice(logPath);
   const throttle = readThrottle(throttlePath);
@@ -6212,7 +6390,7 @@ function applyOrNotify(deps, installMode, latest, logPath) {
 }
 function readThrottle(path) {
   try {
-    if (!existsSync8(path)) return null;
+    if (!existsSync9(path)) return null;
     const data = JSON.parse(readFileSync7(path, "utf8"));
     if (typeof data.lastCheckedAt !== "number") return null;
     return { lastCheckedAt: data.lastCheckedAt };
@@ -6229,7 +6407,7 @@ function writeThrottle(path, throttle) {
 }
 function takeUpdateLogNotice(logPath) {
   try {
-    if (!existsSync8(logPath)) return null;
+    if (!existsSync9(logPath)) return null;
     let parsed = {};
     try {
       parsed = JSON.parse(readFileSync7(logPath, "utf8"));
@@ -6307,18 +6485,18 @@ function pmCommand(mode, spec) {
 
 // src/hooks/runtime/hook-refresh-trigger.ts
 import { spawn as spawn2 } from "node:child_process";
-import { existsSync as existsSync9, readFileSync as readFileSync8, writeFileSync as writeFileSync5 } from "node:fs";
-import { homedir as homedir7 } from "node:os";
-import { dirname as dirname3, join as join6 } from "node:path";
+import { existsSync as existsSync10, readFileSync as readFileSync8, writeFileSync as writeFileSync5 } from "node:fs";
+import { homedir as homedir8 } from "node:os";
+import { dirname as dirname4, join as join7 } from "node:path";
 function maybeRefreshStaleWiring(deps) {
   try {
     const { config, runnerVersion } = deps;
     if (!config.runnerSource || config.installedVersion === runnerVersion) {
       return false;
     }
-    const cliEntry = join6(dirname3(dirname3(config.runnerSource)), "bin", "vibedefend.js");
-    if (!(deps.exists ?? existsSync9)(cliEntry)) return false;
-    const markerPath = deps.markerPath ?? join6(process.env.CYBEDEFEND_HOME ?? homedir7(), ".cybedefend", "hook-refresh.json");
+    const cliEntry = join7(dirname4(dirname4(config.runnerSource)), "bin", "vibedefend.js");
+    if (!(deps.exists ?? existsSync10)(cliEntry)) return false;
+    const markerPath = deps.markerPath ?? join7(process.env.CYBEDEFEND_HOME ?? homedir8(), ".cybedefend", "hook-refresh.json");
     if (readMarkerVersion(markerPath) === runnerVersion) return false;
     (deps.spawnRefresh ?? defaultSpawnRefresh)(cliEntry);
     writeMarker(markerPath, runnerVersion);
@@ -6329,7 +6507,7 @@ function maybeRefreshStaleWiring(deps) {
 }
 function readMarkerVersion(path) {
   try {
-    if (!existsSync9(path)) return null;
+    if (!existsSync10(path)) return null;
     const data = JSON.parse(readFileSync8(path, "utf8"));
     return typeof data.version === "string" ? data.version : null;
   } catch {
@@ -6355,10 +6533,10 @@ function defaultSpawnRefresh(cliEntry) {
 // src/version.ts
 import { readFileSync as readFileSync9 } from "node:fs";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
-import { dirname as dirname4, join as join7 } from "node:path";
+import { dirname as dirname5, join as join8 } from "node:path";
 var PKG_NAME = "@cybedefend/vibedefend";
 function defaultPkgPath() {
-  return join7(dirname4(fileURLToPath2(import.meta.url)), "..", "package.json");
+  return join8(dirname5(fileURLToPath2(import.meta.url)), "..", "package.json");
 }
 function readPackageMeta(opts = {}) {
   if (typeof opts.bakedVersion === "string" && opts.bakedVersion.length > 0) {
@@ -6373,7 +6551,7 @@ function readPackageMeta(opts = {}) {
   }
 }
 var pkg = readPackageMeta({
-  bakedVersion: true ? "1.4.5" : void 0
+  bakedVersion: true ? "1.4.7" : void 0
 });
 
 // src/hooks/runtime/session-start.ts
@@ -6489,7 +6667,7 @@ async function sessionStartHook(deps = {}) {
 }
 
 // src/hooks/runtime/session-review.ts
-import { existsSync as existsSync10, readFileSync as readFileSync10 } from "node:fs";
+import { existsSync as existsSync11, readFileSync as readFileSync10 } from "node:fs";
 var COUNTED_TOOLS = /* @__PURE__ */ new Set([
   "Edit",
   "Write",
@@ -6573,7 +6751,7 @@ function loadTranscript(stdin, readFile) {
   return out;
 }
 function defaultReadTranscript(path) {
-  if (!existsSync10(path)) return null;
+  if (!existsSync11(path)) return null;
   try {
     return readFileSync10(path, "utf8");
   } catch {
@@ -6835,17 +7013,17 @@ async function preCompactHook(deps = {}) {
 }
 
 // src/hooks/runtime/user-prompt-submit.ts
-import { existsSync as existsSync11, mkdirSync as mkdirSync4, readFileSync as readFileSync11, writeFileSync as writeFileSync6 } from "node:fs";
-import { homedir as homedir8 } from "node:os";
-import { join as join8 } from "node:path";
+import { existsSync as existsSync12, mkdirSync as mkdirSync5, readFileSync as readFileSync11, writeFileSync as writeFileSync6 } from "node:fs";
+import { homedir as homedir9 } from "node:os";
+import { join as join9 } from "node:path";
 var SESSIONS_CAP = 100;
 function defaultSessionsFile() {
-  const dir = process.env.CYBEDEFEND_BASELINE_DIR ?? join8(homedir8(), ".cybedefend");
-  return join8(dir, "user-prompt-seen-sessions.json");
+  const dir = process.env.CYBEDEFEND_BASELINE_DIR ?? join9(homedir9(), ".cybedefend");
+  return join9(dir, "user-prompt-seen-sessions.json");
 }
 function defaultSessionTracker(file = defaultSessionsFile()) {
   function load() {
-    if (!existsSync11(file)) return [];
+    if (!existsSync12(file)) return [];
     try {
       const raw = readFileSync11(file, "utf8");
       const data = JSON.parse(raw);
@@ -6864,7 +7042,7 @@ function defaultSessionTracker(file = defaultSessionsFile()) {
       if (existing.includes(sessionId)) return;
       const next = [...existing, sessionId].slice(-SESSIONS_CAP);
       try {
-        mkdirSync4(join8(file, ".."), { recursive: true });
+        mkdirSync5(join9(file, ".."), { recursive: true });
         writeFileSync6(file, JSON.stringify({ sessions: next }), "utf8");
       } catch {
       }
@@ -7936,10 +8114,10 @@ function nearMiss(req, rule) {
 }
 
 // src/hooks/runtime/guard-rules-cache.ts
-import { readFileSync as readFileSync12, writeFileSync as writeFileSync7, existsSync as existsSync12, mkdirSync as mkdirSync5 } from "node:fs";
-import { dirname as dirname5 } from "node:path";
-import { homedir as homedir9 } from "node:os";
-import { join as join9 } from "node:path";
+import { readFileSync as readFileSync12, writeFileSync as writeFileSync7, existsSync as existsSync13, mkdirSync as mkdirSync6 } from "node:fs";
+import { dirname as dirname6 } from "node:path";
+import { homedir as homedir10 } from "node:os";
+import { join as join10 } from "node:path";
 
 // node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
 var external_exports = {};
@@ -12051,8 +12229,8 @@ function parseRuleFields(raw) {
 }
 
 // src/hooks/runtime/guard-rules-cache.ts
-var DEFAULT_CACHE_FILE = join9(
-  homedir9(),
+var DEFAULT_CACHE_FILE = join10(
+  homedir10(),
   ".cybedefend",
   "guards-cache.json"
 );
@@ -12132,14 +12310,26 @@ function makeGuardRulesCache(opts) {
     const entry = readCache(ctx.projectId);
     const ageSec = entry ? (Date.now() - entry.fetchedAt) / 1e3 : Infinity;
     if (entry && ageSec < staleSec) {
+      if (entry.blocked) return { kind: "blocked", block: entry.blocked };
       return { kind: "rules", rules: entry.rules, llmJudge: entry.llmJudge };
     }
     try {
       const result = await fetchFn({
         ...ctx,
-        etag: entry?.etag ?? null
+        etag: entry?.blocked ? null : entry?.etag ?? null
       });
-      if (result.notModified && entry) {
+      if (result.blocked) {
+        writeCache({
+          projectId: ctx.projectId,
+          rules: [],
+          etag: null,
+          fetchedAt: Date.now(),
+          llmJudge: null,
+          blocked: result.blocked
+        });
+        return { kind: "blocked", block: result.blocked };
+      }
+      if (result.notModified && entry && !entry.blocked) {
         writeCache({
           ...entry,
           fetchedAt: Date.now()
@@ -12161,7 +12351,7 @@ function makeGuardRulesCache(opts) {
       return { kind: "rules", rules: fresh.rules, llmJudge: fresh.llmJudge };
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
-      if (entry?.rules?.length) {
+      if (entry?.rules?.length && !entry.blocked) {
         const ageSec2 = Math.round((Date.now() - entry.fetchedAt) / 1e3);
         process.stderr.write(
           `[VibeDefend] Action Guards: rule refresh failed (${msg}). Using cached rules (age=${ageSec2}s).
@@ -12176,7 +12366,7 @@ function makeGuardRulesCache(opts) {
     }
   }
   function readCache(projectId) {
-    if (!existsSync12(cacheFile)) return null;
+    if (!existsSync13(cacheFile)) return null;
     try {
       const raw = readFileSync12(cacheFile, "utf8");
       const data = JSON.parse(raw);
@@ -12196,9 +12386,9 @@ function makeGuardRulesCache(opts) {
   return { refreshIfStale };
 }
 function ensureDirFor2(filePath) {
-  const dir = dirname5(filePath);
-  if (!existsSync12(dir)) {
-    mkdirSync5(dir, { recursive: true });
+  const dir = dirname6(filePath);
+  if (!existsSync13(dir)) {
+    mkdirSync6(dir, { recursive: true });
   }
 }
 var DEFAULT_TIMEOUT_MS2 = 8e3;
@@ -12221,6 +12411,10 @@ async function fetchEffectiveRulesFromGateway(ctx, opts = {}) {
     return { rules: [], etag: ctx.etag ?? null, notModified: true };
   }
   if (!res.ok) {
+    const blocked = await readVibedefendBlock(res);
+    if (blocked) {
+      return { rules: [], etag: null, notModified: false, blocked };
+    }
     throw new Error(`HTTP ${res.status} from effective-rules endpoint`);
   }
   const body = await res.json();
@@ -12241,6 +12435,9 @@ function parseLlmJudgeHint(raw) {
 }
 
 // src/hooks/runtime/judge.ts
+function isJudgeBlocked(res) {
+  return res !== null && "blocked" in res;
+}
 var DEFAULT_TIMEOUT_MS3 = 1500;
 async function callJudge(input, opts = {}) {
   const f = opts.fetchImpl ?? globalThis.fetch;
@@ -12264,7 +12461,11 @@ async function callJudge(input, opts = {}) {
       }),
       signal: AbortSignal.timeout(timeoutMs)
     });
-    if (!res.ok) return null;
+    if (!res.ok) {
+      const blocked = await readVibedefendBlock(res);
+      return blocked ? { blocked } : null;
+    }
+    const usageWarning = readUsageWarning(res);
     const body = await res.json();
     const data = body.data ?? body;
     const decision = data["decision"];
@@ -12274,7 +12475,8 @@ async function callJudge(input, opts = {}) {
       reason: typeof data["reason"] === "string" ? data["reason"] : "",
       model: typeof data["model"] === "string" ? data["model"] : "",
       quotaRemaining: typeof data["quota_remaining"] === "number" ? data["quota_remaining"] : -1,
-      quotaExceeded: Boolean(data["quota_exceeded"])
+      quotaExceeded: Boolean(data["quota_exceeded"]),
+      ...usageWarning ? { usageWarning } : {}
     };
   } catch {
     return null;
@@ -12319,11 +12521,11 @@ function detectPromptInjection(text) {
 }
 
 // src/hooks/runtime/judge-cache.ts
-import { readFileSync as readFileSync13, writeFileSync as writeFileSync8, existsSync as existsSync13, mkdirSync as mkdirSync6 } from "node:fs";
-import { dirname as dirname6, join as join10 } from "node:path";
-import { homedir as homedir10 } from "node:os";
-var DEFAULT_JUDGE_CACHE_FILE = join10(
-  homedir10(),
+import { readFileSync as readFileSync13, writeFileSync as writeFileSync8, existsSync as existsSync14, mkdirSync as mkdirSync7 } from "node:fs";
+import { dirname as dirname7, join as join11 } from "node:path";
+import { homedir as homedir11 } from "node:os";
+var DEFAULT_JUDGE_CACHE_FILE = join11(
+  homedir11(),
   ".cybedefend",
   "guards-judge-cache.json"
 );
@@ -12333,7 +12535,7 @@ function makeJudgeCache(opts = {}) {
   const ttlMs = opts.ttlMs ?? DEFAULT_JUDGE_TTL_MS;
   const now = opts.now ?? (() => Date.now());
   function readAll() {
-    if (!existsSync13(cacheFile)) return {};
+    if (!existsSync14(cacheFile)) return {};
     try {
       return JSON.parse(readFileSync13(cacheFile, "utf8"));
     } catch {
@@ -12362,29 +12564,29 @@ function makeJudgeCache(opts = {}) {
   return { get, set };
 }
 function ensureDirFor3(filePath) {
-  const dir = dirname6(filePath);
-  if (!existsSync13(dir)) {
-    mkdirSync6(dir, { recursive: true });
+  const dir = dirname7(filePath);
+  if (!existsSync14(dir)) {
+    mkdirSync7(dir, { recursive: true });
   }
 }
 
 // src/hooks/runtime/guard-check.ts
-import { homedir as homedir12 } from "node:os";
-import { join as join12 } from "node:path";
+import { homedir as homedir13 } from "node:os";
+import { join as join13 } from "node:path";
 
 // src/hooks/runtime/guard-violations-buffer.ts
 import {
   appendFileSync,
-  existsSync as existsSync14,
+  existsSync as existsSync15,
   readFileSync as readFileSync14,
   writeFileSync as writeFileSync9,
-  mkdirSync as mkdirSync7
+  mkdirSync as mkdirSync8
 } from "node:fs";
-import { dirname as dirname7 } from "node:path";
-import { homedir as homedir11 } from "node:os";
-import { join as join11 } from "node:path";
-var DEFAULT_BUFFER_FILE = join11(
-  homedir11(),
+import { dirname as dirname8 } from "node:path";
+import { homedir as homedir12 } from "node:os";
+import { join as join12 } from "node:path";
+var DEFAULT_BUFFER_FILE = join12(
+  homedir12(),
   ".cybedefend",
   "guards-violations-buffer.jsonl"
 );
@@ -12403,7 +12605,7 @@ function makeViolationsBuffer(opts = {}) {
     }
   }
   async function flushViolations2(ctx, postFn) {
-    if (!existsSync14(bufferFile)) return;
+    if (!existsSync15(bufferFile)) return;
     let content;
     try {
       content = readFileSync14(bufferFile, "utf8").trim();
@@ -12466,9 +12668,9 @@ function makeViolationsBuffer(opts = {}) {
   return { bufferViolation: bufferViolation2, flushViolations: flushViolations2 };
 }
 function ensureDirFor4(filePath) {
-  const dir = dirname7(filePath);
-  if (!existsSync14(dir)) {
-    mkdirSync7(dir, { recursive: true });
+  const dir = dirname8(filePath);
+  if (!existsSync15(dir)) {
+    mkdirSync8(dir, { recursive: true });
   }
 }
 var _defaultBuffer = makeViolationsBuffer();
@@ -12494,11 +12696,11 @@ function appendDebugLog(entry) {
   try {
     const homeDir = process.env.HOME ?? process.env.USERPROFILE ?? "";
     if (!homeDir) return;
-    const { mkdirSync: mkdirSync8, appendFileSync: appendFileSync2 } = __require("node:fs");
-    const { join: join13 } = __require("node:path");
-    const dir = join13(homeDir, ".cybedefend");
-    mkdirSync8(dir, { recursive: true });
-    appendFileSync2(join13(dir, "hook-debug.log"), entry + "\n", "utf8");
+    const { mkdirSync: mkdirSync9, appendFileSync: appendFileSync2 } = __require("node:fs");
+    const { join: join14 } = __require("node:path");
+    const dir = join14(homeDir, ".cybedefend");
+    mkdirSync9(dir, { recursive: true });
+    appendFileSync2(join14(dir, "hook-debug.log"), entry + "\n", "utf8");
   } catch {
   }
 }
@@ -12669,6 +12871,28 @@ function stringifyTarget(t) {
       return `git ${t.subcommand}`;
   }
 }
+async function consultJudge(judge, sessionId, cacheKey, input) {
+  const cached = judge.cacheGet(cacheKey);
+  if (cached) return { kind: "result", res: cached };
+  if (judge.usage?.isBlocked(sessionId)) return { kind: "blocked" };
+  const answer = await judge.callJudge(input);
+  if (isJudgeBlocked(answer)) {
+    if (judge.usage) {
+      judge.usage.markBlocked(sessionId);
+      judge.usage.notifier.notifyBlock(sessionId, answer.blocked);
+    } else {
+      judge.warnOnce(sessionId, blockSentence(answer.blocked));
+    }
+    return { kind: "blocked" };
+  }
+  if (!answer) return { kind: "result", res: null };
+  const { usageWarning, ...res } = answer;
+  if (usageWarning) {
+    judge.usage?.notifier.notifyWarning(sessionId, usageWarning);
+  }
+  judge.cacheSet(cacheKey, res);
+  return { kind: "result", res };
+}
 async function runJudgeStep(args) {
   const {
     judge,
@@ -12697,30 +12921,30 @@ async function runJudgeStep(args) {
   const actionHash = hashTarget(targetStr);
   const ruleIds = llmRules.map((r) => r.id).sort().join(",");
   const cacheKey = `${actionHash}|${ruleIds}|confirm`;
-  let res = judge.cacheGet(cacheKey);
-  if (!res) {
-    res = await judge.callJudge({
-      apiBaseResolved: projectContext.apiBaseResolved,
-      token: projectContext.token,
-      projectId: request.projectId,
-      tool: request.tool,
-      agent: request.agent,
-      sessionId,
-      phase: "confirm",
-      // Judge over the FULL (schema-bounded 2048) redacted action — the default
-      // redactTarget cap of 256 (right for the DB-stored violation summary) would
-      // truncate a long dangerous action and risk an overturn on a partial view.
-      actionSummary: redactTarget(targetStr, 2048),
-      actionHash,
-      rules: llmRules.map((r) => ({
-        id: r.id,
-        name: r.name ?? r.id,
-        description: r.description ?? "",
-        severity: r.severity
-      }))
-    });
-    if (res) judge.cacheSet(cacheKey, res);
+  const consultation = await consultJudge(judge, sessionId, cacheKey, {
+    apiBaseResolved: projectContext.apiBaseResolved,
+    token: projectContext.token,
+    projectId: request.projectId,
+    tool: request.tool,
+    agent: request.agent,
+    sessionId,
+    phase: "confirm",
+    // Judge over the FULL (schema-bounded 2048) redacted action — the default
+    // redactTarget cap of 256 (right for the DB-stored violation summary) would
+    // truncate a long dangerous action and risk an overturn on a partial view.
+    actionSummary: redactTarget(targetStr, 2048),
+    actionHash,
+    rules: llmRules.map((r) => ({
+      id: r.id,
+      name: r.name ?? r.id,
+      description: r.description ?? "",
+      severity: r.severity
+    }))
+  });
+  if (consultation.kind === "blocked") {
+    return { engine: "llm", outcome: "quota_exceeded" };
   }
+  const res = consultation.res;
   if (!res) {
     return {
       engine: "llm",
@@ -12783,27 +13007,25 @@ async function runCatchJudgeStep(args) {
   const actionHash = hashTarget(targetStr);
   const ruleIds = near.map((r) => r.id).sort();
   const cacheKey = `${actionHash}|${ruleIds.join(",")}|catch`;
-  let res = judge.cacheGet(cacheKey);
-  if (!res) {
-    res = await judge.callJudge({
-      apiBaseResolved: projectContext.apiBaseResolved,
-      token: projectContext.token,
-      projectId: request.projectId,
-      tool: request.tool,
-      agent: request.agent,
-      sessionId,
-      phase: "catch",
-      actionSummary: redactTarget(targetStr, 2048),
-      actionHash,
-      rules: near.map((r) => ({
-        id: r.id,
-        name: r.name ?? r.id,
-        description: r.description ?? "",
-        severity: r.severity
-      }))
-    });
-    if (res) judge.cacheSet(cacheKey, res);
-  }
+  const consultation = await consultJudge(judge, sessionId, cacheKey, {
+    apiBaseResolved: projectContext.apiBaseResolved,
+    token: projectContext.token,
+    projectId: request.projectId,
+    tool: request.tool,
+    agent: request.agent,
+    sessionId,
+    phase: "catch",
+    actionSummary: redactTarget(targetStr, 2048),
+    actionHash,
+    rules: near.map((r) => ({
+      id: r.id,
+      name: r.name ?? r.id,
+      description: r.description ?? "",
+      severity: r.severity
+    }))
+  });
+  if (consultation.kind === "blocked") return void 0;
+  const res = consultation.res;
   if (!res) return void 0;
   if (res.quotaExceeded) {
     judge.warnOnce(
@@ -12849,6 +13071,9 @@ function emitUnverifiedBanner(reason) {
     }
   }
 }
+function sessionIdOf2(envelope) {
+  return typeof envelope.session_id === "string" ? envelope.session_id : typeof envelope.sessionId === "string" ? envelope.sessionId : void 0;
+}
 async function runPreToolUseGuardWith(opts) {
   const {
     stdinEnvelope,
@@ -12864,11 +13089,19 @@ async function runPreToolUseGuardWith(opts) {
     );
     return 0;
   }
+  if (rulesOutcome.kind === "blocked") {
+    const sentence = opts.usageNotifier?.notifyBlock(
+      sessionIdOf2(stdinEnvelope),
+      rulesOutcome.block
+    );
+    if (sentence) emitAgentMessage("warn", sentence);
+    return 0;
+  }
   const rules = rulesOutcome.rules;
   const caller = sniff(stdinEnvelope);
   const partial = mapEnvelopeToGuardRequest(stdinEnvelope, caller.client);
   if (partial === null) return 0;
-  const sessionId = typeof stdinEnvelope.session_id === "string" ? stdinEnvelope.session_id : typeof stdinEnvelope.sessionId === "string" ? stdinEnvelope.sessionId : void 0;
+  const sessionId = sessionIdOf2(stdinEnvelope);
   const guardRequest = {
     ...partial,
     projectId: projectContext.projectId,
@@ -13012,11 +13245,21 @@ function emitAgentMessage(verdict, message) {
 }
 function makeProductionJudgeDeps() {
   const cache = makeJudgeCache();
-  const warnDir = process.env.CYBEDEFEND_BASELINE_DIR ?? join12(homedir12(), ".cybedefend");
+  const warnDir = process.env.CYBEDEFEND_BASELINE_DIR ?? join13(homedir13(), ".cybedefend");
   const warnTracker = defaultSessionTracker(
-    join12(warnDir, "guards-judge-warned-sessions.json")
+    join13(warnDir, "guards-judge-warned-sessions.json")
+  );
+  const blockedTracker = defaultSessionTracker(
+    join13(warnDir, "guards-judge-blocked-sessions.json")
   );
   return {
+    usage: {
+      notifier: makeUsageNotifier(),
+      isBlocked: (sessionId) => sessionId ? blockedTracker.hasSeen(sessionId) : false,
+      markBlocked: (sessionId) => {
+        if (sessionId) void blockedTracker.markSeen(sessionId);
+      }
+    },
     callJudge,
     cacheGet: (k) => cache.get(k),
     cacheSet: (k, r) => cache.set(k, r),
@@ -13074,7 +13317,10 @@ async function runPreToolUseGuard() {
       judge: makeProductionJudgeDeps(),
       // v1.1 catch — OFF by default; opt in with CYBEDEFEND_JUDGE_CATCH=1 once
       // the call-rate gate is validated in the field.
-      judgeCatch: process.env.CYBEDEFEND_JUDGE_CATCH === "1"
+      judgeCatch: process.env.CYBEDEFEND_JUDGE_CATCH === "1",
+      // The refusal sentence goes out through the agent-message channels
+      // (stderr included), so this notifier itself writes nothing.
+      usageNotifier: makeUsageNotifier({ write: () => void 0 })
     });
     try {
       await buffer.flushViolations(