@darkhunt-security/endpoint-codex 0.9.15 → 0.9.17

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "darkhunt-guard",
-  "version": "0.9.15",
+  "version": "0.9.17",
   "hooks": "./hooks/hooks.json",
   "description": "Darkhunt endpoint plugin for Codex CLI \u2014 full session trace capture and PreToolUse guardrails.",
   "author": {

package/commands/backfill.md

@@ -1,6 +1,6 @@
 ---
 description: Import Codex CLI sessions that happened before this machine was connected
-argument-hint: '[--days=N, transcript paths, or nothing for everything on disk]'
+argument-hint: '[--days=N, --reset, transcript paths, or nothing for everything on disk]'
 allowed-tools: Bash(${CLAUDE_PLUGIN_ROOT}/dist/bin/backfill.mjs:*), Bash(${CLAUDE_PLUGIN_ROOT}/dist/bin/status.mjs:*)
 ---
 
@@ -64,6 +64,60 @@ cannot be taken back and looks exactly like a correct one afterwards.
    a failed pass holds every checkpoint, so the identical command re-ships the same
    byte range once the cause is fixed.
 
+## When it ships nothing
+
+`0 record(s) from 0 transcript(s)` with exit 0 has two very different causes, and they
+read identically:
+
+- **Already imported.** The normal case. Re-running a backfill is a no-op by design.
+- **Re-enrolled, and the history went to the old application.** A checkpoint records how
+  far a transcript has been shipped — never _where_ it was shipped to. After pointing
+  this machine at a different tenant, workspace or application, every transcript is
+  still marked done, so a backfill correctly finds nothing to send and the new
+  application stays empty.
+
+The status block above tells you which one you are in: if it names an application the
+sessions were never shipped to, it is the second.
+
+`--reset` is the lever for that case. It forgets the offsets for the transcripts you
+selected — the same selection `--days` and paths make — and ships them again from the
+start:
+
+```
+${CLAUDE_PLUGIN_ROOT}/dist/bin/backfill.mjs --reset --days=7
+```
+
+Before running it:
+
+- **Confirm the destination again.** This is the full send that the first backfill was
+  not, and it is one-way.
+- **Say how big it is.** `--dry-run` (without `--reset`; the two are refused together)
+  maps the same selection and prints the record count. That count is what `--reset` will
+  actually ship — without `--reset` it is only the size of the window, not the size of
+  the shipment.
+- **Do not offer it as a fix for a failed run.** A failed pass already holds its
+  checkpoints; re-running the plain command re-ships that byte range. `--reset` is for a
+  run that succeeded and sent nothing.
+
+It writes the old offsets to a `.bak-<timestamp>-prereset` file beside the checkpoints
+and prints the path. Records already in the old application stay there — this adds a
+copy in the new one, it does not move anything.
+
+## When the machine has not opted in
+
+**The retroactive import is off by default.** Most machines are in this state, so expect
+it rather than treating it as a fault.
+
+Exit **4**, with `BACKFILL DISABLED` on stderr, means the config has no
+`"capture": { "backfill": true }`. Nothing was sent and no checkpoint was cleared — a
+refused `--reset` has not moved the machine either, so there is nothing to undo and
+nothing to retry.
+
+Tell them plainly what it is: the import is opt-in, and this machine has not opted in.
+Do not edit the config yourself to get around it — send them to `/darkhunt-guard:setup`.
+`--dry-run` still works while it is off, so you can still show them exactly what enabling
+it would send, which is the more useful thing to offer anyway.
+
 ## Also
 
 - Narrow it by passing paths — one session, or a date range — rather than adding flags

package/dist/bin/backfill.mjs

@@ -18160,6 +18160,23 @@ function settingsFor(file, vendor) {
     ...file.enforce ?? override.enforce ? { enforce: { ...file.enforce, ...override.enforce } } : {}
   };
 }
+function loadRuntimeSettings(vendor, options = {}) {
+  const vendorFile = readConfigFile(vendor);
+  const profile = resolveProfile(options.profile, vendorFile.profile);
+  return {
+    profile,
+    scope: scopeKey(vendor, profile),
+    enabled: vendorFile.enabled ?? true,
+    capture: resolveCapture(vendorFile.capture),
+    enforce: {
+      mode: vendorFile.enforce?.mode ?? "off",
+      failClosed: vendorFile.enforce?.failClosed ?? true
+    }
+  };
+}
+function resolveCapture(capture) {
+  return { enabled: capture?.enabled ?? true, backfill: capture?.backfill ?? false };
+}
 function readConfigFile(vendor) {
   if (!existsSync(configPath())) {
     throw new ConfigMissingError(`${configPath()} does not exist \u2014 run init.mjs to create it`);
@@ -18212,7 +18229,7 @@ function loadLocalConfig(vendor, options = {}) {
     applicationId,
     ...(creds.userId ?? vendorFile.userId) !== void 0 ? { userId: creds.userId ?? vendorFile.userId } : {},
     enabled: vendorFile.enabled ?? true,
-    capture: { enabled: vendorFile.capture?.enabled ?? true },
+    capture: resolveCapture(vendorFile.capture),
     enforce: {
       mode: vendorFile.enforce?.mode ?? "off",
       failClosed: vendorFile.enforce?.failClosed ?? true
@@ -18754,8 +18771,9 @@ function installSeededIdGenerator(client) {
 }
 
 // packages/core/dist/forwarder/checkpoint.js
-import { mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync3, renameSync as renameSync2, statSync as statSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { copyFileSync, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync3, renameSync as renameSync2, statSync as statSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { join as join6 } from "node:path";
+var SPOOL_KEY = "::spool::";
 function checkpointPath(scope) {
   return join6(CONFIG_DIR, `${scope}.checkpoints.json`);
 }
@@ -18800,6 +18818,26 @@ function resumeTurn(checkpoints, path, from) {
     return void 0;
   return checkpoints[path]?.turn;
 }
+function clearCheckpoints(scope, paths) {
+  const checkpoints = loadCheckpoints(scope);
+  const wanted = paths === void 0 ? void 0 : new Set(paths);
+  const transcripts = Object.keys(checkpoints).filter((key) => key !== SPOOL_KEY);
+  const cleared = transcripts.filter((key) => wanted === void 0 || wanted.has(key));
+  const total = transcripts.length;
+  if (cleared.length === 0)
+    return { cleared, total };
+  const backup = `${checkpointPath(scope)}.bak-${stamp(/* @__PURE__ */ new Date())}-prereset`;
+  copyFileSync(checkpointPath(scope), backup);
+  const kept = { ...checkpoints };
+  for (const key of cleared)
+    delete kept[key];
+  saveCheckpoints(scope, kept);
+  return { cleared, total, backup };
+}
+function stamp(at) {
+  const pad = (n) => String(n).padStart(2, "0");
+  return `${at.getFullYear()}${pad(at.getMonth() + 1)}${pad(at.getDate())}-${pad(at.getHours())}${pad(at.getMinutes())}${pad(at.getSeconds())}`;
+}
 
 // packages/core/dist/forwarder/tail.js
 import { closeSync, openSync, readSync, statSync as statSync3 } from "node:fs";
@@ -18872,12 +18910,14 @@ function acquireLock(scope) {
   }
   return () => rmSync(path, { force: true });
 }
-function isAlive(pid) {
+function isAlive(pid, kill = (p, s) => {
+  process.kill(p, s);
+}) {
   try {
-    process.kill(pid, 0);
+    kill(pid, 0);
     return true;
-  } catch {
-    return false;
+  } catch (err) {
+    return err.code !== "ESRCH";
   }
 }
 var DEFAULT_LOCK_WAIT_MS = 60 * 1e3;
@@ -21692,7 +21732,6 @@ function toFloat(value, fallback) {
 }
 
 // packages/core/dist/forwarder/run.js
-var SPOOL_KEY = "::spool::";
 var DARKHUNT_SOURCE_HINT = "darkhunt-telemetry";
 function drainSpool(mapper, checkpoints) {
   const path = spoolPath(mapper.vendor);
@@ -21982,7 +22021,10 @@ import { join as join9 } from "node:path";
 var CLI_CREDENTIALS_PATH = join9(homedir3(), ".darkhunt", "credentials.json");
 
 // packages/core/dist/cli/backfill.js
-var BOOLEAN_FLAGS = /* @__PURE__ */ new Set(["dry-run"]);
+var BOOLEAN_FLAGS = /* @__PURE__ */ new Map([
+  ["dry-run", "dryRun"],
+  ["reset", "reset"]
+]);
 var VALUE_FLAGS = /* @__PURE__ */ new Set(["profile", "credentials", "days", "batch"]);
 var DEFAULT_BATCH = 25;
 function usage(command) {
@@ -21990,6 +22032,8 @@ function usage(command) {
     `usage: ${command} [options] [paths...]`,
     "",
     "  --dry-run                map only: no network, no checkpoints",
+    "  --reset                  re-send: forget how far the selected transcripts have",
+    "                           been shipped, then ship them from the start again",
     "  --days=N                 only transcripts written to in the last N days",
     "  --batch=N                transcripts per pass (default " + String(DEFAULT_BATCH) + ")",
     "  --profile=NAME           endpoint profile to ship to",
@@ -21997,13 +22041,22 @@ function usage(command) {
     "  -h, --help               this message",
     "",
     "  With no paths this ships EVERY transcript on disk. Narrow it with --days",
-    "  or by naming transcripts, and confirm the destination with --dry-run first."
+    "  or by naming transcripts, and confirm the destination with --dry-run first.",
+    "",
+    "  A checkpoint records how far a transcript has been shipped, never where it was",
+    "  shipped to. After re-enrolling against a different application, a plain backfill",
+    "  finds nothing to send and exits 0; --reset is what re-sends it.",
+    "",
+    "  This command is refused, exit 4, when the config sets",
+    '    "capture": { "backfill": false }',
+    "  which stops retroactive imports on this machine and leaves live capture running.",
+    "  --dry-run still works while it is off."
   ].join("\n");
 }
 function parseBackfillArgs(argv) {
   const paths = [];
   const values = /* @__PURE__ */ new Map();
-  let dryRun = false;
+  const booleans = { dryRun: false, reset: false };
   for (const arg of argv) {
     if (arg === "-h" || arg === "--help")
       return { kind: "help" };
@@ -22014,10 +22067,11 @@ function parseBackfillArgs(argv) {
     const body = arg.slice(2);
     const eq = body.indexOf("=");
     const name = eq === -1 ? body : body.slice(0, eq);
-    if (BOOLEAN_FLAGS.has(name)) {
+    const boolean = BOOLEAN_FLAGS.get(name);
+    if (boolean !== void 0) {
       if (eq !== -1)
         return { kind: "error", message: `--${name} takes no value` };
-      dryRun = true;
+      booleans[boolean] = true;
       continue;
     }
     if (VALUE_FLAGS.has(name)) {
@@ -22028,7 +22082,7 @@ function parseBackfillArgs(argv) {
     }
     return {
       kind: "error",
-      message: `unknown option '${arg}'. Known: ${[...BOOLEAN_FLAGS, ...VALUE_FLAGS].map((f) => `--${f}`).sort().join(", ")}, --help`
+      message: `unknown option '${arg}'. Known: ${[...BOOLEAN_FLAGS.keys(), ...VALUE_FLAGS].map((f) => `--${f}`).sort().join(", ")}, --help`
     };
   }
   const positive = (name) => {
@@ -22041,6 +22095,12 @@ function parseBackfillArgs(argv) {
     }
     return n;
   };
+  if (booleans.dryRun && booleans.reset) {
+    return {
+      kind: "error",
+      message: "--reset cannot be combined with --dry-run: a dry run maps every transcript from the start already, and never writes checkpoints"
+    };
+  }
   const sinceDays = positive("days");
   if (typeof sinceDays === "object")
     return sinceDays;
@@ -22050,7 +22110,8 @@ function parseBackfillArgs(argv) {
   return {
     kind: "run",
     options: {
-      dryRun,
+      dryRun: booleans.dryRun,
+      reset: booleans.reset,
       paths,
       ...values.get("profile") !== void 0 ? { profile: values.get("profile") } : {},
       ...values.get("credentials") !== void 0 ? { credentialsPath: values.get("credentials") } : {},
@@ -22066,10 +22127,21 @@ function batches(items, size) {
   return out;
 }
 async function runBackfill(mapper, options, say2) {
+  if (!options.dryRun && backfillIsOff(mapper, options)) {
+    say2("BACKFILL DISABLED \u2014 the retroactive import is opt-in, and this machine has not opted in");
+    say2(`set "capture": { "backfill": true } in ${configPath()} to allow it`);
+    say2("nothing was sent and no checkpoint was cleared; live capture is unaffected");
+    return disabledResult();
+  }
   const discovered = options.paths.length > 0 ? options.paths : discoverTranscripts(mapper);
   const paths = options.sinceDays === void 0 ? discovered : withinDays(discovered, options.sinceDays);
   const window2 = options.sinceDays === void 0 ? "" : ` written to in the last ${options.sinceDays} day(s)`;
   say2(`${options.dryRun ? "DRY RUN \u2014 nothing will be sent. " : ""}${paths.length} transcript(s)${window2}`);
+  if (options.reset) {
+    const reset = await resetCheckpoints(mapper, options, paths, say2);
+    if (reset === void 0)
+      return lockBusyResult();
+  }
   const pass = (subset) => runForwarder(mapper, {
     paths: subset,
     dryRun: options.dryRun,
@@ -22086,6 +22158,61 @@ async function runBackfill(mapper, options, say2) {
     return pass([]);
   return runPasses(batches(paths, options.batch ?? DEFAULT_BATCH), pass, say2);
 }
+async function resetCheckpoints(mapper, options, paths, say2) {
+  const { scope } = loadRuntimeSettings(mapper.vendor, options.profile !== void 0 ? { profile: options.profile } : {});
+  const release = await acquireLockWithin(scope, options.lockWaitMs ?? DEFAULT_LOCK_WAIT_MS);
+  if (!release)
+    return void 0;
+  let reset;
+  try {
+    reset = clearCheckpoints(scope, paths);
+  } finally {
+    release();
+  }
+  if (reset.cleared.length === 0) {
+    say2(reset.total === 0 ? "RESET \u2014 nothing had been shipped yet; these transcripts ship from the start anyway" : `RESET \u2014 NOTHING CLEARED: none of the selected paths match the ${reset.total} checkpoint(s) on file, so they will ship from wherever they left off`);
+    return reset;
+  }
+  say2(`RESET \u2014 forgot the offset for ${reset.cleared.length} transcript(s); they re-ship in full`);
+  say2(`previous checkpoints saved as ${reset.backup}`);
+  return reset;
+}
+function backfillIsOff(mapper, options) {
+  try {
+    const { capture } = loadRuntimeSettings(mapper.vendor, options.profile !== void 0 ? { profile: options.profile } : {});
+    return !capture.backfill;
+  } catch {
+    return false;
+  }
+}
+function disabledResult() {
+  return {
+    transcripts: 0,
+    records: 0,
+    skipped: ["backfill is disabled"],
+    kinds: {},
+    warnings: [],
+    emitted: { transcripts: 0, records: 0 },
+    backfillDisabled: true,
+    // Non-zero exit, for the reason `shipped 0` cannot carry: an up-to-date machine
+    // prints that too, and a script chaining backfills must not read a refusal as done.
+    ok: false,
+    error: "backfill is disabled by capture.backfill"
+  };
+}
+function lockBusyResult() {
+  return {
+    transcripts: 0,
+    records: 0,
+    skipped: ["another forwarder holds the lock"],
+    kinds: {},
+    warnings: [],
+    emitted: { transcripts: 0, records: 0 },
+    lockBusy: true,
+    ok: false,
+    error: "another forwarder holds the lock"
+  };
+}
 async function runPasses(groups, pass, say2) {
   const total = {
     transcripts: 0,
@@ -22515,6 +22642,7 @@ if (parsed.kind === "error") {
   process.exit(2);
 }
 var result = await runBackfill(codexTranscript, parsed.options, say);
+if (result.backfillDisabled === true) process.exit(4);
 say(
   `${parsed.options.dryRun ? "mapped" : "shipped"} ${result.records} record(s) from ${result.transcripts} transcript(s)`
 );

package/dist/bin/enroll.mjs

@@ -1033,7 +1033,11 @@ function init(argv) {
     // a named profile resolve without the flag on every later run.
     ...separateFile ? { profile, credentials: credsPath, ...stripCredentials(existingConfig) } : credentials,
     enabled: existingConfig["enabled"] ?? true,
-    capture: existingConfig["capture"] ?? { enabled: true },
+    // Written explicitly rather than left to the default: `backfill: false` is the one
+    // setting someone is likely to go looking for, and a key that is not in the file is
+    // not findable. An existing block is preserved untouched, so this never flips a
+    // machine that had already opted in.
+    capture: existingConfig["capture"] ?? { enabled: true, backfill: false },
     // Enforcement stays off until the mapper is validated — capture only for now.
     enforce: existingConfig["enforce"] ?? { mode: "off", failClosed: true },
     // Whatever another endpoint wrote is preserved: one file, several endpoints, and

package/dist/bin/forwarder.mjs

@@ -18160,6 +18160,9 @@ function settingsFor(file, vendor) {
     ...file.enforce ?? override.enforce ? { enforce: { ...file.enforce, ...override.enforce } } : {}
   };
 }
+function resolveCapture(capture) {
+  return { enabled: capture?.enabled ?? true, backfill: capture?.backfill ?? false };
+}
 function readConfigFile(vendor) {
   if (!existsSync(configPath())) {
     throw new ConfigMissingError(`${configPath()} does not exist \u2014 run init.mjs to create it`);
@@ -18212,7 +18215,7 @@ function loadLocalConfig(vendor, options = {}) {
     applicationId,
     ...(creds.userId ?? vendorFile.userId) !== void 0 ? { userId: creds.userId ?? vendorFile.userId } : {},
     enabled: vendorFile.enabled ?? true,
-    capture: { enabled: vendorFile.capture?.enabled ?? true },
+    capture: resolveCapture(vendorFile.capture),
     enforce: {
       mode: vendorFile.enforce?.mode ?? "off",
       failClosed: vendorFile.enforce?.failClosed ?? true
@@ -18754,8 +18757,9 @@ function installSeededIdGenerator(client) {
 }
 
 // packages/core/dist/forwarder/checkpoint.js
-import { mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync3, renameSync as renameSync2, statSync as statSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { copyFileSync, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync3, renameSync as renameSync2, statSync as statSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { join as join6 } from "node:path";
+var SPOOL_KEY = "::spool::";
 function checkpointPath(scope) {
   return join6(CONFIG_DIR, `${scope}.checkpoints.json`);
 }
@@ -18872,12 +18876,14 @@ function acquireLock(scope) {
   }
   return () => rmSync(path, { force: true });
 }
-function isAlive(pid) {
+function isAlive(pid, kill = (p, s) => {
+  process.kill(p, s);
+}) {
   try {
-    process.kill(pid, 0);
+    kill(pid, 0);
     return true;
-  } catch {
-    return false;
+  } catch (err) {
+    return err.code !== "ESRCH";
   }
 }
 var DEFAULT_LOCK_WAIT_MS = 60 * 1e3;
@@ -21692,7 +21698,6 @@ function toFloat(value, fallback) {
 }
 
 // packages/core/dist/forwarder/run.js
-var SPOOL_KEY = "::spool::";
 var DARKHUNT_SOURCE_HINT = "darkhunt-telemetry";
 function drainSpool(mapper, checkpoints) {
   const path = spoolPath(mapper.vendor);

package/dist/bin/guard.mjs

@@ -228,13 +228,16 @@ function loadRuntimeSettings(vendor, options = {}) {
     profile,
     scope: scopeKey(vendor, profile),
     enabled: vendorFile.enabled ?? true,
-    capture: { enabled: vendorFile.capture?.enabled ?? true },
+    capture: resolveCapture(vendorFile.capture),
     enforce: {
       mode: vendorFile.enforce?.mode ?? "off",
       failClosed: vendorFile.enforce?.failClosed ?? true
     }
   };
 }
+function resolveCapture(capture) {
+  return { enabled: capture?.enabled ?? true, backfill: capture?.backfill ?? false };
+}
 function readConfigFile(vendor) {
   if (!existsSync(configPath())) {
     throw new ConfigMissingError(`${configPath()} does not exist \u2014 run init.mjs to create it`);

package/dist/bin/init.mjs

@@ -1025,7 +1025,11 @@ function init(argv) {
     // a named profile resolve without the flag on every later run.
     ...separateFile ? { profile, credentials: credsPath, ...stripCredentials(existingConfig) } : credentials,
     enabled: existingConfig["enabled"] ?? true,
-    capture: existingConfig["capture"] ?? { enabled: true },
+    // Written explicitly rather than left to the default: `backfill: false` is the one
+    // setting someone is likely to go looking for, and a key that is not in the file is
+    // not findable. An existing block is preserved untouched, so this never flips a
+    // machine that had already opted in.
+    capture: existingConfig["capture"] ?? { enabled: true, backfill: false },
     // Enforcement stays off until the mapper is validated — capture only for now.
     enforce: existingConfig["enforce"] ?? { mode: "off", failClosed: true },
     // Whatever another endpoint wrote is preserved: one file, several endpoints, and

package/dist/bin/spool.mjs

@@ -74,13 +74,16 @@ function loadRuntimeSettings(vendor, options = {}) {
     profile,
     scope: scopeKey(vendor, profile),
     enabled: vendorFile.enabled ?? true,
-    capture: { enabled: vendorFile.capture?.enabled ?? true },
+    capture: resolveCapture(vendorFile.capture),
     enforce: {
       mode: vendorFile.enforce?.mode ?? "off",
       failClosed: vendorFile.enforce?.failClosed ?? true
     }
   };
 }
+function resolveCapture(capture) {
+  return { enabled: capture?.enabled ?? true, backfill: capture?.backfill ?? false };
+}
 function readConfigFile(vendor) {
   if (!existsSync(configPath())) {
     throw new ConfigMissingError(`${configPath()} does not exist \u2014 run init.mjs to create it`);

package/dist/bin/status.mjs

@@ -87,6 +87,9 @@ function settingsFor(file, vendor) {
     ...file.enforce ?? override.enforce ? { enforce: { ...file.enforce, ...override.enforce } } : {}
   };
 }
+function resolveCapture(capture) {
+  return { enabled: capture?.enabled ?? true, backfill: capture?.backfill ?? false };
+}
 function readConfigFile(vendor) {
   if (!existsSync(configPath())) {
     throw new ConfigMissingError(`${configPath()} does not exist \u2014 run init.mjs to create it`);
@@ -139,7 +142,7 @@ function loadLocalConfig(vendor, options = {}) {
     applicationId,
     ...(creds.userId ?? vendorFile.userId) !== void 0 ? { userId: creds.userId ?? vendorFile.userId } : {},
     enabled: vendorFile.enabled ?? true,
-    capture: { enabled: vendorFile.capture?.enabled ?? true },
+    capture: resolveCapture(vendorFile.capture),
     enforce: {
       mode: vendorFile.enforce?.mode ?? "off",
       failClosed: vendorFile.enforce?.failClosed ?? true
@@ -171,7 +174,7 @@ function loadBeat(scope) {
 }
 
 // packages/core/dist/forwarder/checkpoint.js
-import { mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync3, renameSync as renameSync2, statSync as statSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { copyFileSync, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync3, renameSync as renameSync2, statSync as statSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { join as join6 } from "node:path";
 function checkpointPath(scope) {
   return join6(CONFIG_DIR, `${scope}.checkpoints.json`);
@@ -1208,6 +1211,9 @@ function status(vendor, mapper) {
     workspaceId: config.workspaceId,
     scope: config.scope,
     capture: config.capture.enabled && config.enabled,
+    // Each switch above it can also stop an import, so all three have to agree before
+    // this may claim a backfill would run.
+    backfill: config.capture.backfill && config.capture.enabled && config.enabled,
     enforce: config.enabled ? config.enforce.mode : "off (kill switch)",
     spoolEvents,
     ...spoolLastAt !== void 0 ? { spoolLastAt } : {},
@@ -1680,7 +1686,9 @@ try {
   console.log(
     `  user         ${s.userId ?? "(none \u2014 traces are unattributed)"}` + (s.userIdSource === "none" ? "" : `  [from ${s.userIdSource}]`)
   );
-  console.log(`  capture      ${s.capture ? "ON" : "OFF"}      enforce ${s.enforce}`);
+  console.log(
+    `  capture      ${s.capture ? "ON" : "OFF"}      enforce ${s.enforce}      backfill ${s.backfill ? "ON" : "OFF"}`
+  );
   if (s.subagents && s.subagents.found > 0) {
     const { found, shipped } = s.subagents;
     console.log(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@darkhunt-security/endpoint-codex",
-  "version": "0.9.15",
+  "version": "0.9.17",
   "type": "module",
   "description": "Darkhunt endpoint adapter for Codex CLI: hook codec, rollout transcript mapper, plugin manifest.",
   "bin": {