npm - @node9/proxy - Versions diffs - 1.11.0 → 1.11.2 - Mend

@node9/proxy 1.11.0 → 1.11.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (7) hide show

package/README.md +52 -0
package/dist/cli.js +1017 -487
package/dist/cli.mjs +1013 -483
package/dist/index.js +48 -24
package/dist/index.mjs +48 -24
package/dist/shields/builtin/bash-safe.json +2 -2
package/package.json +1 -1

package/dist/cli.mjs CHANGED Viewed

@@ -147,8 +147,8 @@ function sanitizeConfig(raw) {
     }
   }
   const lines = result.error.issues.map((issue) => {
-    const path41 = issue.path.length > 0 ? issue.path.join(".") : "root";
-    return `  \u2022 ${path41}: ${issue.message}`;
+    const path43 = issue.path.length > 0 ? issue.path.join(".") : "root";
+    return `  \u2022 ${path43}: ${issue.message}`;
   });
   return {
     sanitized,
@@ -820,9 +820,8 @@ var init_config = __esm({
               {
                 field: "command",
                 op: "matches",
-                // Require the recursive flag to be preceded by whitespace so that
-                // filenames containing "-r" (e.g. "ai-review.yml") don't false-positive.
-                value: "rm\\b.*\\s(-[rRfF]*[rR][rRfF]*|--recursive)(\\s|$)"
+                // Anchor rm as a shell command (not inside a string arg like a git commit message).
+                value: "(^|&&|\\|\\||;)\\s*rm\\b[^;&|]*\\s(-[rRfF]*[rR][rRfF]*|--recursive)(\\s|$)"
               },
               {
                 field: "command",
@@ -851,6 +850,13 @@ var init_config = __esm({
             name: "review-drop-truncate-shell",
             tool: "bash",
             conditions: [
+              {
+                field: "command",
+                op: "matches",
+                // Require a DB CLI in the command so grep/cat/echo of SQL strings don't trigger.
+                value: "(^|&&|\\|\\||;|\\|)\\s*(psql|mysql|sqlite3|sqlplus|cockroach|clickhouse-client|mongo)\\b",
+                flags: "i"
+              },
               {
                 field: "command",
                 op: "matches",
@@ -871,7 +877,9 @@ var init_config = __esm({
               {
                 field: "command",
                 op: "matches",
-                value: "\\bgit\\b.*\\bpush\\b.*(--force|--force-with-lease|-f\\b)",
+                // Anchor git as a shell command so node -e / python -c scripts containing
+                // "git push --force" as a string don't false-positive.
+                value: "(^|&&|\\|\\||;)\\s*git\\s+push[^;&|]*(--force|--force-with-lease|-f\\b)",
                 flags: "i"
               }
             ],
@@ -881,29 +889,20 @@ var init_config = __esm({
             description: "The AI wants to force push to a remote git branch. This rewrites shared history and can permanently destroy commits that teammates have already pulled."
           },
           {
-            name: "review-git-push",
+            name: "review-git-destructive",
             tool: "bash",
             conditions: [
               {
                 field: "command",
                 op: "matches",
-                value: "\\bgit\\b.*\\bpush\\b(?!.*(-f\\b|--force|--force-with-lease))",
+                value: "\\bgit\\s+(reset\\s+--hard|clean\\s+-[fdxX]|rebase\\b|tag\\s+-d|branch\\s+-[dD])",
                 flags: "i"
-              }
-            ],
-            conditionMode: "all",
-            verdict: "review",
-            reason: "git push sends changes to a shared remote",
-            description: "The AI wants to push commits to a remote repository. Once pushed, those changes are visible to everyone with access."
-          },
-          {
-            name: "review-git-destructive",
-            tool: "bash",
-            conditions: [
+              },
               {
                 field: "command",
-                op: "matches",
-                value: "\\bgit\\b.*(reset\\s+--hard|clean\\s+-[fdxX]|\\brebase\\b|tag\\s+-d|branch\\s+-[dD])",
+                op: "notMatches",
+                // Exclude recovery ops — these resolve a conflict, not start a destructive action.
+                value: "\\bgit\\s+rebase\\s+--(abort|continue|skip)\\b",
                 flags: "i"
               }
             ],
@@ -929,7 +928,9 @@ var init_config = __esm({
               {
                 field: "command",
                 op: "matches",
-                value: "(curl|wget)[^|]*\\|\\s*(ba|z|da|fi|c|k)?sh",
+                // Anchor curl/wget as a shell command so node -e scripts testing this
+                // regex pattern don't self-match as a false positive.
+                value: "(^|&&|\\|\\||;)\\s*(curl|wget)[^|]*\\|\\s*(ba|z|da|fi|c|k)?sh",
                 flags: "i"
               }
             ],
@@ -1153,6 +1154,20 @@ function scanArgs(args, depth = 0, fieldPath = "args") {
   }
   return null;
 }
+function scanText(text) {
+  const t = text.length > MAX_STRING_BYTES ? text.slice(0, MAX_STRING_BYTES) : text;
+  for (const pattern of DLP_PATTERNS) {
+    if (pattern.regex.test(t)) {
+      return {
+        patternName: pattern.name,
+        fieldPath: "response-text",
+        redactedSample: maskSecret(t, pattern.regex),
+        severity: pattern.severity
+      };
+    }
+  }
+  return null;
+}
 var DLP_PATTERNS, SENSITIVE_PATH_PATTERNS, MAX_DEPTH, MAX_STRING_BYTES, MAX_JSON_PARSE_BYTES;
 var init_dlp = __esm({
   "src/dlp.ts"() {
@@ -1182,7 +1197,7 @@ var init_dlp = __esm({
         regex: /_authToken\s*=\s*[A-Za-z0-9_\-]{20,}/,
         severity: "block"
       },
-      { name: "Bearer Token", regex: /Bearer\s+[a-zA-Z0-9\-._~+/]+=*/i, severity: "review" }
+      { name: "Bearer Token", regex: /Bearer\s+[a-zA-Z0-9\-._~+/]{20,}=*/i, severity: "review" }
     ];
     SENSITIVE_PATH_PATTERNS = [
       /[/\\]\.ssh[/\\]/i,
@@ -1750,9 +1765,21 @@ function matchesPattern(text, patterns) {
   const withoutDotSlash = text.replace(/^\.\//, "");
   return isMatch(withoutDotSlash) || isMatch(`./${withoutDotSlash}`);
 }
-function getNestedValue(obj, path41) {
+function getNestedValue(obj, path43) {
   if (!obj || typeof obj !== "object") return null;
-  return path41.split(".").reduce((prev, curr) => prev?.[curr], obj);
+  return path43.split(".").reduce((prev, curr) => prev?.[curr], obj);
+}
+function stripStringArguments(cmd) {
+  let result = cmd;
+  result = result.replace(
+    /\b(node|python3?|ruby|perl|php|deno)\s+(-[ecr]|eval)\s+("(?:[^"\\]|\\.)*"|'(?:[^'\\]|\\.)*')/gi,
+    '$1 $2 ""'
+  );
+  result = result.replace(
+    /\s(-m|--message|--body|--title|--description)\s+("(?:[^"\\]|\\.)*"|'(?:[^'\\]|\\.)*')/g,
+    ' $1 ""'
+  );
+  return result;
 }
 function shouldSnapshot(toolName, args, config) {
   if (!config.settings.enableUndo) return false;
@@ -1771,7 +1798,8 @@ function evaluateSmartConditions(args, rule) {
   const mode = rule.conditionMode ?? "all";
   const results = rule.conditions.map((cond) => {
     const rawVal = getNestedValue(args, cond.field);
-    const val = rawVal !== null && rawVal !== void 0 ? String(rawVal).replace(/\s+/g, " ").trim() : null;
+    const normalized = rawVal !== null && rawVal !== void 0 ? String(rawVal).replace(/\s+/g, " ").trim() : null;
+    const val = cond.field === "command" && normalized !== null ? stripStringArguments(normalized) : normalized;
     switch (cond.op) {
       case "exists":
         return val !== null && val !== "";
@@ -2877,13 +2905,30 @@ ${smartTruncate(str, 500)}`
   }
   return { intent: "EXEC", message: smartTruncate(JSON.stringify(parsed), 200) };
 }
+function sendDesktopNotification(title, body) {
+  if (isTestEnv()) return;
+  try {
+    if (process.platform === "darwin") {
+      const esc = (s) => s.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+      const script = `display notification "${esc(body)}" with title "${esc(title)}"`;
+      spawn("osascript", ["-e", script], { detached: true, stdio: "ignore" }).unref();
+    } else if (process.platform === "linux") {
+      spawn("notify-send", [title, body, "--icon=dialog-warning"], {
+        detached: true,
+        stdio: "ignore"
+      }).unref();
+    }
+  } catch {
+  }
+}
 function escapePango(text) {
   return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
 function buildPlainMessage(toolName, formattedArgs, agent, explainableLabel, locked, allowCount = 1, ruleDescription) {
   const lines = [];
   if (locked) lines.push("\u26A0\uFE0F  LOCKED BY ADMIN POLICY\n");
-  lines.push(`\u{1F916} ${agent || "AI Agent"}  |  \u{1F527} ${toolName}`);
+  const safeAgent = (agent ?? "AI Agent").replace(/\x1b(?:\[[0-9;?]*[a-zA-Z]|\][^\x07\x1b]*(?:\x07|\x1b\\)|[@-_])/g, "").slice(0, 80);
+  lines.push(`\u{1F916} ${safeAgent}  |  \u{1F527} ${toolName}`);
   lines.push(`\u{1F6E1}\uFE0F  ${explainableLabel || "Security Policy"}`);
   if (ruleDescription) lines.push(`\u2139  ${ruleDescription}`);
   lines.push("");
@@ -3268,7 +3313,16 @@ async function authorizeHeadless(toolName, args, meta, options) {
   if (!options?.calledFromDaemon) {
     const actId = randomUUID();
     const actTs = Date.now();
-    await notifyActivity({ id: actId, ts: actTs, tool: toolName, args, status: "pending" });
+    await notifyActivity({
+      id: actId,
+      ts: actTs,
+      tool: toolName,
+      args,
+      status: "pending",
+      // Strip ANSI escape sequences — agent name comes from caller-supplied metadata
+      // and may be displayed in a terminal (node9 tail/watch), enabling injection.
+      agent: meta?.agent ? meta.agent.replace(/\x1b(?:\[[0-9;?]*[a-zA-Z]|\][^\x07\x1b]*(?:\x07|\x1b\\)|[@-_])/g, "").slice(0, 80) : void 0
+    });
     const result = await _authorizeHeadlessCore(toolName, args, meta, {
       ...options,
       activityId: actId
@@ -5990,7 +6044,8 @@ function startActivitySocket() {
             ts: data.ts,
             tool: data.tool,
             args: redactArgs(data.args),
-            status: "pending"
+            status: "pending",
+            agent: data.agent
           });
         } else {
           if (data.status === "allow") {
@@ -6448,16 +6503,167 @@ var init_sync = __esm({
   }
 });
-// src/daemon/server.ts
-import http from "http";
+// src/daemon/dlp-scanner.ts
 import fs18 from "fs";
 import path21 from "path";
+import os16 from "os";
+function loadIndex() {
+  try {
+    return JSON.parse(fs18.readFileSync(INDEX_FILE, "utf-8"));
+  } catch {
+    return {};
+  }
+}
+function saveIndex(index) {
+  try {
+    fs18.writeFileSync(INDEX_FILE, JSON.stringify(index), { encoding: "utf-8", mode: 384 });
+  } catch {
+  }
+}
+function appendAuditEntry(entry) {
+  try {
+    fs18.appendFileSync(AUDIT_LOG_FILE, JSON.stringify(entry) + "\n");
+  } catch {
+  }
+}
+function runDlpScan() {
+  if (!fs18.existsSync(PROJECTS_DIR)) return;
+  const index = loadIndex();
+  let updated = false;
+  let projDirs;
+  try {
+    projDirs = fs18.readdirSync(PROJECTS_DIR);
+  } catch {
+    return;
+  }
+  for (const proj of projDirs) {
+    const projPath = path21.join(PROJECTS_DIR, proj);
+    try {
+      if (!fs18.lstatSync(projPath).isDirectory()) continue;
+      const real = fs18.realpathSync(projPath);
+      if (!real.startsWith(PROJECTS_DIR + path21.sep) && real !== PROJECTS_DIR) continue;
+    } catch {
+      continue;
+    }
+    let files;
+    try {
+      files = fs18.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
+    } catch {
+      continue;
+    }
+    for (const file of files) {
+      const filePath = path21.join(projPath, file);
+      const lastOffset = index[filePath] ?? 0;
+      let size;
+      try {
+        size = fs18.statSync(filePath).size;
+      } catch {
+        continue;
+      }
+      if (size <= lastOffset) continue;
+      let fd;
+      try {
+        fd = fs18.openSync(filePath, "r");
+      } catch {
+        continue;
+      }
+      try {
+        const chunkSize = size - lastOffset;
+        const buf = Buffer.alloc(chunkSize);
+        fs18.readSync(fd, buf, 0, chunkSize, lastOffset);
+        const chunk = buf.toString("utf-8");
+        for (const line of chunk.split("\n")) {
+          if (!line.trim()) continue;
+          let entry;
+          try {
+            entry = JSON.parse(line);
+          } catch {
+            continue;
+          }
+          if (entry.type !== "assistant") continue;
+          const content = entry.message?.content;
+          if (!Array.isArray(content)) continue;
+          for (const block of content) {
+            if (typeof block !== "object" || block === null || block.type !== "text")
+              continue;
+            const text = block.text;
+            if (typeof text !== "string") continue;
+            const match = scanText(text);
+            if (!match) continue;
+            const projLabel = decodeURIComponent(proj).replace(os16.homedir(), "~").slice(0, 40);
+            const ts = entry.timestamp ?? (/* @__PURE__ */ new Date()).toISOString();
+            appendAuditEntry({
+              ts,
+              tool: "response-text",
+              decision: "dlp",
+              checkedBy: "response-dlp",
+              source: "response-dlp",
+              dlpPattern: match.patternName,
+              dlpSample: match.redactedSample,
+              project: projLabel
+            });
+            sendDesktopNotification(
+              "\u26A0\uFE0F node9 DLP Alert",
+              `${match.patternName} found in Claude response
+Sample: ${match.redactedSample}
+Project: ${projLabel}
+Run: node9 report --period 30d`
+            );
+          }
+        }
+        index[filePath] = size;
+        updated = true;
+      } finally {
+        try {
+          fs18.closeSync(fd);
+        } catch {
+        }
+      }
+    }
+  }
+  if (updated) saveIndex(index);
+}
+function startDlpScanner() {
+  setImmediate(() => {
+    try {
+      runDlpScan();
+    } catch {
+    }
+  });
+  const timer = setInterval(
+    () => {
+      try {
+        runDlpScan();
+      } catch {
+      }
+    },
+    60 * 60 * 1e3
+  );
+  timer.unref();
+}
+var INDEX_FILE, PROJECTS_DIR;
+var init_dlp_scanner = __esm({
+  "src/daemon/dlp-scanner.ts"() {
+    "use strict";
+    init_dlp();
+    init_native();
+    init_state2();
+    INDEX_FILE = path21.join(os16.homedir(), ".node9", "dlp-index.json");
+    PROJECTS_DIR = path21.join(os16.homedir(), ".claude", "projects");
+  }
+});
+// src/daemon/server.ts
+import http from "http";
+import fs19 from "fs";
+import path22 from "path";
 import { randomUUID as randomUUID4 } from "crypto";
 import { spawnSync as spawnSync2 } from "child_process";
 import chalk2 from "chalk";
 function startDaemon() {
   startCostSync();
   startCloudSync();
+  startDlpScanner();
   loadInsightCounts();
   const csrfToken = randomUUID4();
   const internalToken = randomUUID4();
@@ -6473,7 +6679,7 @@ function startDaemon() {
     idleTimer = setTimeout(() => {
       if (autoStarted) {
         try {
-          fs18.unlinkSync(DAEMON_PID_FILE);
+          fs19.unlinkSync(DAEMON_PID_FILE);
         } catch {
         }
       }
@@ -6636,7 +6842,7 @@ data: ${JSON.stringify(item.data)}
             status: "pending"
           });
         }
-        const projectCwd = typeof cwd === "string" && path21.isAbsolute(cwd) ? cwd : void 0;
+        const projectCwd = typeof cwd === "string" && path22.isAbsolute(cwd) ? cwd : void 0;
         const projectConfig = getConfig(projectCwd);
         const browserEnabled = projectConfig.settings.approvers?.browser !== false;
         const terminalEnabled = projectConfig.settings.approvers?.terminal !== false;
@@ -7027,8 +7233,8 @@ data: ${JSON.stringify(item.data)}
         const body = await readBody(req);
         const data = body ? JSON.parse(body) : {};
         const configPath = data.configPath ?? GLOBAL_CONFIG_PATH;
-        const node9Dir = path21.dirname(GLOBAL_CONFIG_PATH);
-        if (!path21.resolve(configPath).startsWith(node9Dir + path21.sep)) {
+        const node9Dir = path22.dirname(GLOBAL_CONFIG_PATH);
+        if (!path22.resolve(configPath).startsWith(node9Dir + path22.sep)) {
           res.writeHead(400, { "Content-Type": "application/json" });
           return res.end(
             JSON.stringify({ error: "configPath must be within the node9 config directory" })
@@ -7139,14 +7345,14 @@ data: ${JSON.stringify(item.data)}
   server.on("error", (e) => {
     if (e.code === "EADDRINUSE") {
       try {
-        if (fs18.existsSync(DAEMON_PID_FILE)) {
-          const { pid } = JSON.parse(fs18.readFileSync(DAEMON_PID_FILE, "utf-8"));
+        if (fs19.existsSync(DAEMON_PID_FILE)) {
+          const { pid } = JSON.parse(fs19.readFileSync(DAEMON_PID_FILE, "utf-8"));
           process.kill(pid, 0);
           return process.exit(0);
         }
       } catch {
         try {
-          fs18.unlinkSync(DAEMON_PID_FILE);
+          fs19.unlinkSync(DAEMON_PID_FILE);
         } catch {
         }
         server.listen(DAEMON_PORT, DAEMON_HOST);
@@ -7217,19 +7423,20 @@ var init_server = __esm({
     init_config_schema();
     init_costSync();
     init_sync();
+    init_dlp_scanner();
   }
 });
 // src/daemon/service.ts
-import fs19 from "fs";
-import path22 from "path";
-import os16 from "os";
+import fs20 from "fs";
+import path23 from "path";
+import os17 from "os";
 import { spawnSync as spawnSync3, execFileSync } from "child_process";
 function resolveNode9Binary() {
   try {
     const script = process.argv[1];
-    if (typeof script === "string" && path22.isAbsolute(script) && fs19.existsSync(script)) {
-      return fs19.realpathSync(script);
+    if (typeof script === "string" && path23.isAbsolute(script) && fs20.existsSync(script)) {
+      return fs20.realpathSync(script);
     }
   } catch {
   }
@@ -7247,11 +7454,11 @@ function xmlEscape(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
 function launchdPlist(binaryPath) {
-  const logDir = path22.join(os16.homedir(), ".node9");
+  const logDir = path23.join(os17.homedir(), ".node9");
   const nodePath = xmlEscape(process.execPath);
   const scriptPath = xmlEscape(binaryPath);
-  const outLog = xmlEscape(path22.join(logDir, "daemon.log"));
-  const errLog = xmlEscape(path22.join(logDir, "daemon-error.log"));
+  const outLog = xmlEscape(path23.join(logDir, "daemon.log"));
+  const errLog = xmlEscape(path23.join(logDir, "daemon-error.log"));
   return `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
@@ -7286,9 +7493,9 @@ function launchdPlist(binaryPath) {
 `;
 }
 function installLaunchd(binaryPath) {
-  const dir = path22.dirname(LAUNCHD_PLIST);
-  if (!fs19.existsSync(dir)) fs19.mkdirSync(dir, { recursive: true });
-  fs19.writeFileSync(LAUNCHD_PLIST, launchdPlist(binaryPath), "utf-8");
+  const dir = path23.dirname(LAUNCHD_PLIST);
+  if (!fs20.existsSync(dir)) fs20.mkdirSync(dir, { recursive: true });
+  fs20.writeFileSync(LAUNCHD_PLIST, launchdPlist(binaryPath), "utf-8");
   spawnSync3("launchctl", ["unload", LAUNCHD_PLIST], { encoding: "utf8" });
   const r = spawnSync3("launchctl", ["load", "-w", LAUNCHD_PLIST], {
     encoding: "utf8",
@@ -7299,13 +7506,13 @@ function installLaunchd(binaryPath) {
   }
 }
 function uninstallLaunchd() {
-  if (fs19.existsSync(LAUNCHD_PLIST)) {
+  if (fs20.existsSync(LAUNCHD_PLIST)) {
     spawnSync3("launchctl", ["unload", "-w", LAUNCHD_PLIST], { encoding: "utf8", timeout: 5e3 });
-    fs19.unlinkSync(LAUNCHD_PLIST);
+    fs20.unlinkSync(LAUNCHD_PLIST);
   }
 }
 function isLaunchdInstalled() {
-  return fs19.existsSync(LAUNCHD_PLIST);
+  return fs20.existsSync(LAUNCHD_PLIST);
 }
 function systemdUnit(binaryPath) {
   return `[Unit]
@@ -7325,12 +7532,12 @@ WantedBy=default.target
 `;
 }
 function installSystemd(binaryPath) {
-  if (!fs19.existsSync(SYSTEMD_UNIT_DIR)) {
-    fs19.mkdirSync(SYSTEMD_UNIT_DIR, { recursive: true });
+  if (!fs20.existsSync(SYSTEMD_UNIT_DIR)) {
+    fs20.mkdirSync(SYSTEMD_UNIT_DIR, { recursive: true });
   }
-  fs19.writeFileSync(SYSTEMD_UNIT, systemdUnit(binaryPath), "utf-8");
+  fs20.writeFileSync(SYSTEMD_UNIT, systemdUnit(binaryPath), "utf-8");
   try {
-    execFileSync("loginctl", ["enable-linger", os16.userInfo().username], { timeout: 3e3 });
+    execFileSync("loginctl", ["enable-linger", os17.userInfo().username], { timeout: 3e3 });
   } catch {
   }
   const reload = spawnSync3("systemctl", ["--user", "daemon-reload"], {
@@ -7350,23 +7557,23 @@ function installSystemd(binaryPath) {
   }
 }
 function uninstallSystemd() {
-  if (fs19.existsSync(SYSTEMD_UNIT)) {
+  if (fs20.existsSync(SYSTEMD_UNIT)) {
     spawnSync3("systemctl", ["--user", "disable", "--now", "node9-daemon"], {
       encoding: "utf8",
       timeout: 5e3
     });
     spawnSync3("systemctl", ["--user", "daemon-reload"], { encoding: "utf8", timeout: 5e3 });
-    fs19.unlinkSync(SYSTEMD_UNIT);
+    fs20.unlinkSync(SYSTEMD_UNIT);
   }
 }
 function isSystemdInstalled() {
-  return fs19.existsSync(SYSTEMD_UNIT);
+  return fs20.existsSync(SYSTEMD_UNIT);
 }
 function stopRunningDaemon() {
-  const pidFile = path22.join(os16.homedir(), ".node9", "daemon.pid");
-  if (!fs19.existsSync(pidFile)) return;
+  const pidFile = path23.join(os17.homedir(), ".node9", "daemon.pid");
+  if (!fs20.existsSync(pidFile)) return;
   try {
-    const data = JSON.parse(fs19.readFileSync(pidFile, "utf-8"));
+    const data = JSON.parse(fs20.readFileSync(pidFile, "utf-8"));
     const pid = data.pid;
     const MAX_PID2 = 4194304;
     if (typeof pid === "number" && Number.isInteger(pid) && pid > 0 && pid <= MAX_PID2) {
@@ -7386,7 +7593,7 @@ function stopRunningDaemon() {
       }
     }
     try {
-      fs19.unlinkSync(pidFile);
+      fs20.unlinkSync(pidFile);
     } catch {
     }
   } catch {
@@ -7461,20 +7668,20 @@ var init_service = __esm({
   "src/daemon/service.ts"() {
     "use strict";
     LAUNCHD_LABEL = "ai.node9.daemon";
-    LAUNCHD_PLIST = path22.join(os16.homedir(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
-    SYSTEMD_UNIT_DIR = path22.join(os16.homedir(), ".config", "systemd", "user");
-    SYSTEMD_UNIT = path22.join(SYSTEMD_UNIT_DIR, "node9-daemon.service");
+    LAUNCHD_PLIST = path23.join(os17.homedir(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
+    SYSTEMD_UNIT_DIR = path23.join(os17.homedir(), ".config", "systemd", "user");
+    SYSTEMD_UNIT = path23.join(SYSTEMD_UNIT_DIR, "node9-daemon.service");
   }
 });
 // src/daemon/index.ts
-import fs20 from "fs";
+import fs21 from "fs";
 import chalk3 from "chalk";
 import { spawnSync as spawnSync4 } from "child_process";
 function stopDaemon() {
-  if (!fs20.existsSync(DAEMON_PID_FILE)) return console.log(chalk3.yellow("Not running."));
+  if (!fs21.existsSync(DAEMON_PID_FILE)) return console.log(chalk3.yellow("Not running."));
   try {
-    const data = JSON.parse(fs20.readFileSync(DAEMON_PID_FILE, "utf-8"));
+    const data = JSON.parse(fs21.readFileSync(DAEMON_PID_FILE, "utf-8"));
     const pid = data.pid;
     if (typeof pid !== "number" || !Number.isInteger(pid) || pid <= 0 || pid > MAX_PID) {
       console.log(chalk3.gray("Cleaned up invalid PID file."));
@@ -7486,7 +7693,7 @@ function stopDaemon() {
     console.log(chalk3.gray("Cleaned up stale PID file."));
   } finally {
     try {
-      fs20.unlinkSync(DAEMON_PID_FILE);
+      fs21.unlinkSync(DAEMON_PID_FILE);
     } catch {
     }
   }
@@ -7495,9 +7702,9 @@ function daemonStatus() {
   const serviceInstalled = isDaemonServiceInstalled();
   const serviceLabel = serviceInstalled ? chalk3.green("installed (starts on login)") : chalk3.yellow("not installed \u2014 run: node9 daemon install");
   let processStatus;
-  if (fs20.existsSync(DAEMON_PID_FILE)) {
+  if (fs21.existsSync(DAEMON_PID_FILE)) {
     try {
-      const data = JSON.parse(fs20.readFileSync(DAEMON_PID_FILE, "utf-8"));
+      const data = JSON.parse(fs21.readFileSync(DAEMON_PID_FILE, "utf-8"));
       const pid = data.pid;
       const port = data.port;
       if (typeof pid !== "number" || !Number.isInteger(pid) || pid <= 0 || pid > MAX_PID) {
@@ -7546,10 +7753,10 @@ __export(tail_exports, {
   startTail: () => startTail
 });
 import http2 from "http";
-import chalk24 from "chalk";
-import fs35 from "fs";
-import os31 from "os";
-import path38 from "path";
+import chalk25 from "chalk";
+import fs37 from "fs";
+import os33 from "os";
+import path40 from "path";
 import readline5 from "readline";
 import { spawn as spawn10, execSync as execSync3 } from "child_process";
 function getIcon(tool) {
@@ -7559,6 +7766,74 @@ function getIcon(tool) {
   }
   return "\u{1F6E0}\uFE0F";
 }
+function getModelContextLimit(model) {
+  const base = model.replace(/@.*$/, "").replace(/-\d{8}$/, "");
+  for (const [key, limit] of Object.entries(MODEL_CONTEXT_LIMITS)) {
+    if (base.startsWith(key)) return limit;
+  }
+  return 2e5;
+}
+function readSessionUsage() {
+  const projectsDir = path40.join(os33.homedir(), ".claude", "projects");
+  if (!fs37.existsSync(projectsDir)) return null;
+  let latestFile = null;
+  let latestMtime = 0;
+  try {
+    for (const dir of fs37.readdirSync(projectsDir)) {
+      const dirPath = path40.join(projectsDir, dir);
+      try {
+        if (!fs37.statSync(dirPath).isDirectory()) continue;
+        for (const file of fs37.readdirSync(dirPath)) {
+          if (!file.endsWith(".jsonl") || file.startsWith("agent-")) continue;
+          const filePath = path40.join(dirPath, file);
+          try {
+            const mtime = fs37.statSync(filePath).mtimeMs;
+            if (mtime > latestMtime) {
+              latestMtime = mtime;
+              latestFile = filePath;
+            }
+          } catch {
+          }
+        }
+      } catch {
+      }
+    }
+  } catch {
+  }
+  if (!latestFile) return null;
+  try {
+    const lines = fs37.readFileSync(latestFile, "utf-8").split("\n");
+    let lastModel = "";
+    let lastInput = 0;
+    let lastOutput = 0;
+    for (const line of lines) {
+      if (!line.trim()) continue;
+      try {
+        const entry = JSON.parse(line);
+        if (entry.type !== "assistant" || !entry.message?.usage) continue;
+        const u = entry.message.usage;
+        lastInput = (u.input_tokens ?? 0) + (u.cache_read_input_tokens ?? 0) + (u.cache_creation_input_tokens ?? 0);
+        lastOutput = u.output_tokens ?? 0;
+        if (entry.message.model) lastModel = entry.message.model;
+      } catch {
+      }
+    }
+    if (!lastModel || lastInput === 0) return null;
+    const limit = getModelContextLimit(lastModel);
+    const fillPct = Math.round(lastInput / limit * 100);
+    return { inputTokens: lastInput, outputTokens: lastOutput, model: lastModel, fillPct };
+  } catch {
+    return null;
+  }
+}
+function formatContextStat(stat) {
+  const pctColor = stat.fillPct >= 80 ? chalk25.red : stat.fillPct >= 50 ? chalk25.yellow : chalk25.cyan;
+  const k = (n) => `${Math.round(n / 1e3)}k`;
+  const modelShort = stat.model.replace(/@.*$/, "").replace(/-\d{8}$/, "").replace(/^claude-/, "");
+  return chalk25.dim("ctx: ") + pctColor(`${stat.fillPct}%`) + chalk25.dim(
+    ` (${k(stat.inputTokens)}/${k(getModelContextLimit(stat.model))}  out ${k(stat.outputTokens)}  \xB7 ${modelShort})`
+  );
+}
 function visibleLength(s) {
   return s.replace(/\x1B\[[0-9;]*m/g, "").length;
 }
@@ -7568,26 +7843,31 @@ function wrappedLineCount(text) {
   const len = visibleLength(text);
   return Math.max(1, Math.ceil(len / cols));
 }
+function agentLabel(agent) {
+  if (!agent || agent === "Terminal") return "";
+  const short = agent === "Claude Code" ? "Claude" : agent === "Gemini CLI" ? "Gemini" : agent === "Unknown Agent" ? "" : agent.split(" ")[0];
+  return short ? chalk25.dim(`[${short}] `) : "";
+}
 function formatBase(activity) {
   const time = new Date(activity.ts).toLocaleTimeString([], { hour12: false });
   const icon = getIcon(activity.tool);
   const toolName = activity.tool.slice(0, 16).padEnd(16);
-  const argsStr = JSON.stringify(activity.args ?? {}).replace(/\s+/g, " ").replaceAll(os31.homedir(), "~");
+  const argsStr = JSON.stringify(activity.args ?? {}).replace(/\s+/g, " ").replaceAll(os33.homedir(), "~");
   const argsPreview = argsStr.length > 70 ? argsStr.slice(0, 70) + "\u2026" : argsStr;
-  return `${chalk24.gray(time)} ${icon} ${chalk24.white.bold(toolName)} ${chalk24.dim(argsPreview)}`;
+  return `${chalk25.gray(time)} ${icon} ${agentLabel(activity.agent)}${chalk25.white.bold(toolName)} ${chalk25.dim(argsPreview)}`;
 }
 function renderResult(activity, result) {
   const base = formatBase(activity);
   let status;
   if (result.status === "allow") {
-    status = chalk24.green("\u2713 ALLOW");
+    status = chalk25.green("\u2713 ALLOW");
   } else if (result.status === "dlp") {
-    status = chalk24.bgRed.white.bold(" \u{1F6E1}\uFE0F  DLP ");
+    status = chalk25.bgRed.white.bold(" \u{1F6E1}\uFE0F  DLP ");
   } else {
-    status = chalk24.red("\u2717 BLOCK");
+    status = chalk25.red("\u2717 BLOCK");
   }
   const cost = result.costEstimate ?? activity.costEstimate;
-  const costSuffix = cost == null ? "" : chalk24.dim(`  ~$${cost >= 1e-3 ? cost.toFixed(3) : "0.000"}`);
+  const costSuffix = cost == null ? "" : chalk25.dim(`  ~$${cost >= 1e-3 ? cost.toFixed(3) : "0.000"}`);
   if (process.stdout.isTTY) {
     if (pendingShownForId === activity.id && pendingWrappedLines > 1) {
       readline5.moveCursor(process.stdout, 0, -(pendingWrappedLines - 1));
@@ -7604,19 +7884,19 @@ function renderResult(activity, result) {
 }
 function renderPending(activity) {
   if (!process.stdout.isTTY) return;
-  const line = `${formatBase(activity)}  ${chalk24.yellow("\u25CF \u2026")}`;
+  const line = `${formatBase(activity)}  ${chalk25.yellow("\u25CF \u2026")}`;
   pendingShownForId = activity.id;
   pendingWrappedLines = wrappedLineCount(line);
   process.stdout.write(`${line}\r`);
 }
 async function ensureDaemon() {
   let pidPort = null;
-  if (fs35.existsSync(PID_FILE)) {
+  if (fs37.existsSync(PID_FILE)) {
     try {
-      const { port } = JSON.parse(fs35.readFileSync(PID_FILE, "utf-8"));
+      const { port } = JSON.parse(fs37.readFileSync(PID_FILE, "utf-8"));
       pidPort = port;
     } catch {
-      console.error(chalk24.dim("\u26A0\uFE0F  Could not read PID file; falling back to default port."));
+      console.error(chalk25.dim("\u26A0\uFE0F  Could not read PID file; falling back to default port."));
     }
   }
   const checkPort = pidPort ?? DAEMON_PORT;
@@ -7627,7 +7907,7 @@ async function ensureDaemon() {
     if (res.ok) return checkPort;
   } catch {
   }
-  console.log(chalk24.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon..."));
+  console.log(chalk25.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon..."));
   const child = spawn10(process.execPath, [process.argv[1], "daemon"], {
     detached: true,
     stdio: "ignore",
@@ -7644,7 +7924,7 @@ async function ensureDaemon() {
     } catch {
     }
   }
-  console.error(chalk24.red("\u274C Daemon failed to start. Try: node9 daemon start"));
+  console.error(chalk25.red("\u274C Daemon failed to start. Try: node9 daemon start"));
   process.exit(1);
 }
 function postDecisionHttp(id, decision, csrfToken, port, opts) {
@@ -7710,10 +7990,11 @@ function buildCardLines(req, localCount = 0) {
   const severityIcon = isBlock ? `${RED}\u{1F6D1}` : `${YELLOW}\u26A0 `;
   const rawDesc = req.riskMetadata?.ruleDescription ?? "";
   const description = rawDesc ? cleanReason(rawDesc) : "";
+  const agentSuffix = req.agent && req.agent !== "Terminal" ? ` ${RESET2}${chalk25.dim(`(${req.agent})`)}` : "";
   const lines = [
     ``,
     `${BOLD2}${CYAN}\u2554\u2550\u2550 Node9 Approval Required \u2550\u2550\u2557${RESET2}`,
-    `${CYAN}\u2551${RESET2} Tool:    ${BOLD2}${req.toolName}${RESET2}`,
+    `${CYAN}\u2551${RESET2} Tool:    ${BOLD2}${req.toolName}${RESET2}${agentSuffix}`,
     `${CYAN}\u2551${RESET2} Policy:  ${severityIcon} ${blockedBy}${RESET2}`
   ];
   if (description) {
@@ -7765,9 +8046,9 @@ function buildRecoveryCardLines(req) {
   ];
 }
 function readApproversFromDisk() {
-  const configPath = path38.join(os31.homedir(), ".node9", "config.json");
+  const configPath = path40.join(os33.homedir(), ".node9", "config.json");
   try {
-    const raw = JSON.parse(fs35.readFileSync(configPath, "utf-8"));
+    const raw = JSON.parse(fs37.readFileSync(configPath, "utf-8"));
     const settings = raw.settings ?? {};
     return settings.approvers ?? {};
   } catch {
@@ -7778,20 +8059,20 @@ function approverStatusLine() {
   const a = readApproversFromDisk();
   const fmt = (label, key) => {
     const on = a[key] !== false;
-    return `[${key[0]}]${label.slice(1)} ${on ? chalk24.green("\u2713") : chalk24.dim("\u2717")}`;
+    return `[${key[0]}]${label.slice(1)} ${on ? chalk25.green("\u2713") : chalk25.dim("\u2717")}`;
   };
   return `${fmt("native", "native")}  ${fmt("browser", "browser")}  ${fmt("cloud", "cloud")}  ${fmt("terminal", "terminal")}`;
 }
 function toggleApprover(channel) {
-  const configPath = path38.join(os31.homedir(), ".node9", "config.json");
+  const configPath = path40.join(os33.homedir(), ".node9", "config.json");
   try {
-    const raw = JSON.parse(fs35.readFileSync(configPath, "utf-8"));
+    const raw = JSON.parse(fs37.readFileSync(configPath, "utf-8"));
     const settings = raw.settings ?? {};
     const approvers = settings.approvers ?? {};
     approvers[channel] = approvers[channel] === false;
     settings.approvers = approvers;
     raw.settings = settings;
-    fs35.writeFileSync(configPath, JSON.stringify(raw, null, 2) + "\n");
+    fs37.writeFileSync(configPath, JSON.stringify(raw, null, 2) + "\n");
   } catch (err2) {
     process.stderr.write(`[node9] toggleApprover failed: ${String(err2)}
 `);
@@ -7823,7 +8104,7 @@ async function startTail(options = {}) {
       req2.end();
     });
     if (result.ok) {
-      console.log(chalk24.green("\u2713 Flight Recorder buffer cleared."));
+      console.log(chalk25.green("\u2713 Flight Recorder buffer cleared."));
     } else if (result.code === "ECONNREFUSED") {
       throw new Error("Daemon is not running. Start it with: node9 daemon start");
     } else if (result.code === "ETIMEDOUT") {
@@ -7867,7 +8148,7 @@ async function startTail(options = {}) {
       const channel = name === "n" ? "native" : name === "b" ? "browser" : name === "c" ? "cloud" : name === "t" ? "terminal" : null;
       if (channel) {
         toggleApprover(channel);
-        console.log(chalk24.dim(`  Approvers: ${approverStatusLine()}`));
+        console.log(chalk25.dim(`  Approvers: ${approverStatusLine()}`));
       }
     };
     process.stdin.on("keypress", idleKeypressHandler);
@@ -7933,7 +8214,7 @@ async function startTail(options = {}) {
           localAllowCounts.get(req2.toolName) ?? 0
         )
       );
-      const decisionStamp = action === "always-allow" ? chalk24.yellow("\u2605 ALWAYS ALLOW") : action === "trust" ? chalk24.cyan("\u23F1 TRUST 30m") : action === "allow" ? chalk24.green("\u2713 ALLOWED") : action === "redirect" ? chalk24.yellow("\u21A9 REDIRECT AI") : chalk24.red("\u2717 DENIED");
+      const decisionStamp = action === "always-allow" ? chalk25.yellow("\u2605 ALWAYS ALLOW") : action === "trust" ? chalk25.cyan("\u23F1 TRUST 30m") : action === "allow" ? chalk25.green("\u2713 ALLOWED") : action === "redirect" ? chalk25.yellow("\u21A9 REDIRECT AI") : chalk25.red("\u2717 DENIED");
       stampedLines.push(`  ${BOLD2}\u2192${RESET2} ${decisionStamp} ${GRAY}(terminal)${RESET2}`, ``);
       for (const line of stampedLines) process.stdout.write(line + "\n");
       process.stdout.write(SHOW_CURSOR);
@@ -7961,8 +8242,8 @@ async function startTail(options = {}) {
       }
       postDecisionHttp(req2.id, httpDecision, csrfToken, port, httpOpts).catch((err2) => {
         try {
-          fs35.appendFileSync(
-            path38.join(os31.homedir(), ".node9", "hook-debug.log"),
+          fs37.appendFileSync(
+            path40.join(os33.homedir(), ".node9", "hook-debug.log"),
             `[tail] POST /decision failed: ${String(err2)}
 `
           );
@@ -7984,7 +8265,7 @@ async function startTail(options = {}) {
       );
       const stampedLines = buildCardLines(req2, priorCount);
       if (externalDecision) {
-        const source = externalDecision === "allow" ? chalk24.green("\u2713 ALLOWED") : chalk24.red("\u2717 DENIED");
+        const source = externalDecision === "allow" ? chalk25.green("\u2713 ALLOWED") : chalk25.red("\u2717 DENIED");
         stampedLines.push(`  ${BOLD2}\u2192${RESET2} ${source} ${GRAY}(external)${RESET2}`, ``);
       }
       for (const line of stampedLines) process.stdout.write(line + "\n");
@@ -8043,16 +8324,31 @@ async function startTail(options = {}) {
     }
   } catch {
   }
-  console.log(chalk24.cyan.bold(`
-\u{1F6F0}\uFE0F  Node9 tail  `) + chalk24.dim(`\u2192 ${dashboardUrl}`));
+  const auditLog = path40.join(os33.homedir(), ".node9", "audit.log");
+  try {
+    const unackedDlp = fs37.readFileSync(auditLog, "utf-8").split("\n").filter((l) => l.includes('"response-dlp"')).length;
+    if (unackedDlp > 0) {
+      console.log("");
+      console.log(
+        chalk25.bgRed.white.bold(
+          ` \u26A0\uFE0F  DLP ALERT: ${unackedDlp} secret${unackedDlp !== 1 ? "s" : ""} found in Claude response text \u2014 run: node9 dlp `
+        )
+      );
+    }
+  } catch {
+  }
+  console.log(chalk25.cyan.bold(`
+\u{1F6F0}\uFE0F  Node9 tail  `) + chalk25.dim(`\u2192 ${dashboardUrl}`));
   if (canApprove) {
-    console.log(chalk24.dim("Card: [\u21B5/y] Allow  [n] Deny  [a] Always  [t] Trust 30m"));
-    console.log(chalk24.dim(`Approvers (toggle): ${approverStatusLine()}  [q] quit`));
+    console.log(chalk25.dim("Card: [\u21B5/y] Allow  [n] Deny  [a] Always  [t] Trust 30m"));
+    console.log(chalk25.dim(`Approvers (toggle): ${approverStatusLine()}  [q] quit`));
   }
+  const ctxStat = readSessionUsage();
+  if (ctxStat) console.log("  " + formatContextStat(ctxStat));
   if (options.history) {
-    console.log(chalk24.dim("Showing history + live events.\n"));
+    console.log(chalk25.dim("Showing history + live events.\n"));
   } else {
-    console.log(chalk24.dim("Showing live events only. Use --history to include past.\n"));
+    console.log(chalk25.dim("Showing live events only. Use --history to include past.\n"));
   }
   process.on("SIGINT", () => {
     exitIdleMode();
@@ -8062,13 +8358,13 @@ async function startTail(options = {}) {
       readline5.clearLine(process.stdout, 0);
       readline5.cursorTo(process.stdout, 0);
     }
-    console.log(chalk24.dim("\n\u{1F6F0}\uFE0F  Disconnected."));
+    console.log(chalk25.dim("\n\u{1F6F0}\uFE0F  Disconnected."));
     process.exit(0);
   });
   const sseUrl = `http://127.0.0.1:${port}/events?capabilities=input`;
   const req = http2.get(sseUrl, (res) => {
     if (res.statusCode !== 200) {
-      console.error(chalk24.red(`Failed to connect: HTTP ${res.statusCode}`));
+      console.error(chalk25.red(`Failed to connect: HTTP ${res.statusCode}`));
       process.exit(1);
     }
     if (canApprove) enterIdleMode();
@@ -8099,7 +8395,7 @@ async function startTail(options = {}) {
         readline5.clearLine(process.stdout, 0);
         readline5.cursorTo(process.stdout, 0);
       }
-      console.log(chalk24.red("\n\u274C Daemon disconnected."));
+      console.log(chalk25.red("\n\u274C Daemon disconnected."));
       process.exit(1);
     });
   });
@@ -8191,9 +8487,9 @@ async function startTail(options = {}) {
       const hash = data.hash ?? "";
       const summary = data.argsSummary ?? data.tool;
       const fileCount = data.fileCount ?? 0;
-      const files = fileCount > 0 ? chalk24.dim(` \xB7 ${fileCount} file${fileCount === 1 ? "" : "s"}`) : "";
+      const files = fileCount > 0 ? chalk25.dim(` \xB7 ${fileCount} file${fileCount === 1 ? "" : "s"}`) : "";
       process.stdout.write(
-        `${chalk24.dim(time)}  ${chalk24.cyan("\u{1F4F8} snapshot")}  ${chalk24.dim(hash)}  ${summary}${files}
+        `${chalk25.dim(time)}  ${chalk25.cyan("\u{1F4F8} snapshot")}  ${chalk25.dim(hash)}  ${summary}${files}
 `
       );
       return;
@@ -8210,19 +8506,19 @@ async function startTail(options = {}) {
   }
   req.on("error", (err2) => {
     const msg = err2.code === "ECONNREFUSED" ? "Daemon is not running. Start it with: node9 daemon start" : err2.message;
-    console.error(chalk24.red(`
+    console.error(chalk25.red(`
 \u274C ${msg}`));
     process.exit(1);
   });
 }
-var PID_FILE, ICONS, RESET2, BOLD2, RED, YELLOW, CYAN, GRAY, GREEN, HIDE_CURSOR, SHOW_CURSOR, ERASE_DOWN, pendingShownForId, pendingWrappedLines, DIVIDER;
+var PID_FILE, ICONS, MODEL_CONTEXT_LIMITS, RESET2, BOLD2, RED, YELLOW, CYAN, GRAY, GREEN, HIDE_CURSOR, SHOW_CURSOR, ERASE_DOWN, pendingShownForId, pendingWrappedLines, DIVIDER;
 var init_tail = __esm({
   "src/tui/tail.ts"() {
     "use strict";
     init_daemon2();
     init_daemon();
     init_core();
-    PID_FILE = path38.join(os31.homedir(), ".node9", "daemon.pid");
+    PID_FILE = path40.join(os33.homedir(), ".node9", "daemon.pid");
     ICONS = {
       bash: "\u{1F4BB}",
       shell: "\u{1F4BB}",
@@ -8240,6 +8536,13 @@ var init_tail = __esm({
       delete: "\u{1F5D1}\uFE0F",
       web: "\u{1F310}"
     };
+    MODEL_CONTEXT_LIMITS = {
+      "claude-opus-4": 2e5,
+      "claude-sonnet-4": 2e5,
+      "claude-haiku-4": 2e5,
+      "claude-3-7": 2e5,
+      "claude-3-5": 2e5
+    };
     RESET2 = "\x1B[0m";
     BOLD2 = "\x1B[1m";
     RED = "\x1B[31m";
@@ -8263,9 +8566,9 @@ __export(hud_exports, {
   main: () => main,
   renderEnvironmentLine: () => renderEnvironmentLine
 });
-import fs36 from "fs";
-import path39 from "path";
-import os32 from "os";
+import fs38 from "fs";
+import path41 from "path";
+import os34 from "os";
 import http3 from "http";
 async function readStdin() {
   const chunks = [];
@@ -8341,9 +8644,9 @@ function formatTimeLeft(resetsAt) {
   return ` (${m}m left)`;
 }
 function safeReadJson(filePath) {
-  if (!fs36.existsSync(filePath)) return null;
+  if (!fs38.existsSync(filePath)) return null;
   try {
-    return JSON.parse(fs36.readFileSync(filePath, "utf-8"));
+    return JSON.parse(fs38.readFileSync(filePath, "utf-8"));
   } catch {
     return null;
   }
@@ -8364,12 +8667,12 @@ function countHooksInFile(filePath) {
   return Object.keys(cfg.hooks).length;
 }
 function countRulesInDir(rulesDir) {
-  if (!fs36.existsSync(rulesDir)) return 0;
+  if (!fs38.existsSync(rulesDir)) return 0;
   let count = 0;
   try {
-    for (const entry of fs36.readdirSync(rulesDir, { withFileTypes: true })) {
+    for (const entry of fs38.readdirSync(rulesDir, { withFileTypes: true })) {
       if (entry.isDirectory()) {
-        count += countRulesInDir(path39.join(rulesDir, entry.name));
+        count += countRulesInDir(path41.join(rulesDir, entry.name));
       } else if (entry.isFile() && entry.name.endsWith(".md")) {
         count++;
       }
@@ -8380,46 +8683,46 @@ function countRulesInDir(rulesDir) {
 }
 function isSamePath(a, b) {
   try {
-    return path39.resolve(a) === path39.resolve(b);
+    return path41.resolve(a) === path41.resolve(b);
   } catch {
     return false;
   }
 }
 function countConfigs(cwd) {
-  const homeDir2 = os32.homedir();
-  const claudeDir = path39.join(homeDir2, ".claude");
+  const homeDir2 = os34.homedir();
+  const claudeDir = path41.join(homeDir2, ".claude");
   let claudeMdCount = 0;
   let rulesCount = 0;
   let hooksCount = 0;
   const userMcpServers = /* @__PURE__ */ new Set();
   const projectMcpServers = /* @__PURE__ */ new Set();
-  if (fs36.existsSync(path39.join(claudeDir, "CLAUDE.md"))) claudeMdCount++;
-  rulesCount += countRulesInDir(path39.join(claudeDir, "rules"));
-  const userSettings = path39.join(claudeDir, "settings.json");
+  if (fs38.existsSync(path41.join(claudeDir, "CLAUDE.md"))) claudeMdCount++;
+  rulesCount += countRulesInDir(path41.join(claudeDir, "rules"));
+  const userSettings = path41.join(claudeDir, "settings.json");
   for (const name of getMcpServerNames(userSettings)) userMcpServers.add(name);
   hooksCount += countHooksInFile(userSettings);
-  const userClaudeJson = path39.join(homeDir2, ".claude.json");
+  const userClaudeJson = path41.join(homeDir2, ".claude.json");
   for (const name of getMcpServerNames(userClaudeJson)) userMcpServers.add(name);
   for (const name of getDisabledMcpServers(userClaudeJson, "disabledMcpServers")) {
     userMcpServers.delete(name);
   }
   if (cwd) {
-    if (fs36.existsSync(path39.join(cwd, "CLAUDE.md"))) claudeMdCount++;
-    if (fs36.existsSync(path39.join(cwd, "CLAUDE.local.md"))) claudeMdCount++;
-    const projectClaudeDir = path39.join(cwd, ".claude");
+    if (fs38.existsSync(path41.join(cwd, "CLAUDE.md"))) claudeMdCount++;
+    if (fs38.existsSync(path41.join(cwd, "CLAUDE.local.md"))) claudeMdCount++;
+    const projectClaudeDir = path41.join(cwd, ".claude");
     const overlapsUserScope = isSamePath(projectClaudeDir, claudeDir);
     if (!overlapsUserScope) {
-      if (fs36.existsSync(path39.join(projectClaudeDir, "CLAUDE.md"))) claudeMdCount++;
-      rulesCount += countRulesInDir(path39.join(projectClaudeDir, "rules"));
-      const projSettings = path39.join(projectClaudeDir, "settings.json");
+      if (fs38.existsSync(path41.join(projectClaudeDir, "CLAUDE.md"))) claudeMdCount++;
+      rulesCount += countRulesInDir(path41.join(projectClaudeDir, "rules"));
+      const projSettings = path41.join(projectClaudeDir, "settings.json");
       for (const name of getMcpServerNames(projSettings)) projectMcpServers.add(name);
       hooksCount += countHooksInFile(projSettings);
     }
-    if (fs36.existsSync(path39.join(projectClaudeDir, "CLAUDE.local.md"))) claudeMdCount++;
-    const localSettings = path39.join(projectClaudeDir, "settings.local.json");
+    if (fs38.existsSync(path41.join(projectClaudeDir, "CLAUDE.local.md"))) claudeMdCount++;
+    const localSettings = path41.join(projectClaudeDir, "settings.local.json");
     for (const name of getMcpServerNames(localSettings)) projectMcpServers.add(name);
     hooksCount += countHooksInFile(localSettings);
-    const mcpJsonServers = getMcpServerNames(path39.join(cwd, ".mcp.json"));
+    const mcpJsonServers = getMcpServerNames(path41.join(cwd, ".mcp.json"));
     const disabledMcpJson = getDisabledMcpServers(localSettings, "disabledMcpjsonServers");
     for (const name of disabledMcpJson) mcpJsonServers.delete(name);
     for (const name of mcpJsonServers) projectMcpServers.add(name);
@@ -8452,12 +8755,12 @@ function readActiveShieldsHud() {
     return shieldsCache.value;
   }
   try {
-    const shieldsPath = path39.join(os32.homedir(), ".node9", "shields.json");
-    if (!fs36.existsSync(shieldsPath)) {
+    const shieldsPath = path41.join(os34.homedir(), ".node9", "shields.json");
+    if (!fs38.existsSync(shieldsPath)) {
       shieldsCache = { value: [], ts: now };
       return [];
     }
-    const parsed = JSON.parse(fs36.readFileSync(shieldsPath, "utf-8"));
+    const parsed = JSON.parse(fs38.readFileSync(shieldsPath, "utf-8"));
     if (!Array.isArray(parsed.active)) {
       shieldsCache = { value: [], ts: now };
       return [];
@@ -8559,17 +8862,17 @@ function renderContextLine(stdin) {
 async function main() {
   try {
     const [stdin, daemonStatus2] = await Promise.all([readStdin(), queryDaemon()]);
-    if (fs36.existsSync(path39.join(os32.homedir(), ".node9", "hud-debug"))) {
+    if (fs38.existsSync(path41.join(os34.homedir(), ".node9", "hud-debug"))) {
       try {
-        const logPath = path39.join(os32.homedir(), ".node9", "hud-debug.log");
+        const logPath = path41.join(os34.homedir(), ".node9", "hud-debug.log");
         const MAX_LOG_SIZE = 10 * 1024 * 1024;
         let size = 0;
         try {
-          size = fs36.statSync(logPath).size;
+          size = fs38.statSync(logPath).size;
         } catch {
         }
         if (size < MAX_LOG_SIZE) {
-          fs36.appendFileSync(
+          fs38.appendFileSync(
             logPath,
             JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString(), stdin }) + "\n"
           );
@@ -8590,11 +8893,11 @@ async function main() {
       try {
         const cwd = stdin.cwd ?? process.cwd();
         for (const configPath of [
-          path39.join(cwd, "node9.config.json"),
-          path39.join(os32.homedir(), ".node9", "config.json")
+          path41.join(cwd, "node9.config.json"),
+          path41.join(os34.homedir(), ".node9", "config.json")
         ]) {
-          if (!fs36.existsSync(configPath)) continue;
-          const cfg = JSON.parse(fs36.readFileSync(configPath, "utf-8"));
+          if (!fs38.existsSync(configPath)) continue;
+          const cfg = JSON.parse(fs38.readFileSync(configPath, "utf-8"));
           const hud = cfg.settings?.hud;
           if (hud && "showEnvironmentCounts" in hud) return hud.showEnvironmentCounts !== false;
         }
@@ -9529,10 +9832,10 @@ function getAgentsStatus(homeDir2 = os11.homedir()) {
 // src/cli.ts
 init_daemon2();
-import chalk25 from "chalk";
-import fs37 from "fs";
-import path40 from "path";
-import os33 from "os";
+import chalk26 from "chalk";
+import fs39 from "fs";
+import path42 from "path";
+import os35 from "os";
 import { confirm as confirm2 } from "@inquirer/prompts";
 // src/utils/duration.ts
@@ -9761,19 +10064,19 @@ init_daemon();
 init_config();
 init_policy();
 import chalk5 from "chalk";
-import fs23 from "fs";
+import fs24 from "fs";
 import { spawn as spawn6 } from "child_process";
-import path25 from "path";
-import os19 from "os";
+import path26 from "path";
+import os20 from "os";
 // src/undo.ts
 import { spawnSync as spawnSync5, spawn as spawn5 } from "child_process";
 import crypto3 from "crypto";
-import fs21 from "fs";
+import fs22 from "fs";
 import net3 from "net";
-import path23 from "path";
-import os17 from "os";
-var ACTIVITY_SOCKET_PATH3 = process.platform === "win32" ? "\\\\.\\pipe\\node9-activity" : path23.join(os17.tmpdir(), "node9-activity.sock");
+import path24 from "path";
+import os18 from "os";
+var ACTIVITY_SOCKET_PATH3 = process.platform === "win32" ? "\\\\.\\pipe\\node9-activity" : path24.join(os18.tmpdir(), "node9-activity.sock");
 function notifySnapshotTaken(hash, tool, argsSummary, fileCount) {
   try {
     const payload = JSON.stringify({
@@ -9793,22 +10096,22 @@ function notifySnapshotTaken(hash, tool, argsSummary, fileCount) {
   } catch {
   }
 }
-var SNAPSHOT_STACK_PATH = path23.join(os17.homedir(), ".node9", "snapshots.json");
-var UNDO_LATEST_PATH = path23.join(os17.homedir(), ".node9", "undo_latest.txt");
+var SNAPSHOT_STACK_PATH = path24.join(os18.homedir(), ".node9", "snapshots.json");
+var UNDO_LATEST_PATH = path24.join(os18.homedir(), ".node9", "undo_latest.txt");
 var MAX_SNAPSHOTS = 10;
 var GIT_TIMEOUT = 15e3;
 function readStack() {
   try {
-    if (fs21.existsSync(SNAPSHOT_STACK_PATH))
-      return JSON.parse(fs21.readFileSync(SNAPSHOT_STACK_PATH, "utf-8"));
+    if (fs22.existsSync(SNAPSHOT_STACK_PATH))
+      return JSON.parse(fs22.readFileSync(SNAPSHOT_STACK_PATH, "utf-8"));
   } catch {
   }
   return [];
 }
 function writeStack(stack) {
-  const dir = path23.dirname(SNAPSHOT_STACK_PATH);
-  if (!fs21.existsSync(dir)) fs21.mkdirSync(dir, { recursive: true });
-  fs21.writeFileSync(SNAPSHOT_STACK_PATH, JSON.stringify(stack, null, 2));
+  const dir = path24.dirname(SNAPSHOT_STACK_PATH);
+  if (!fs22.existsSync(dir)) fs22.mkdirSync(dir, { recursive: true });
+  fs22.writeFileSync(SNAPSHOT_STACK_PATH, JSON.stringify(stack, null, 2));
 }
 function extractFilePath(args) {
   if (!args || typeof args !== "object") return null;
@@ -9828,12 +10131,12 @@ function buildArgsSummary(tool, args) {
   return "";
 }
 function findProjectRoot(filePath) {
-  let dir = path23.dirname(filePath);
+  let dir = path24.dirname(filePath);
   while (true) {
-    if (fs21.existsSync(path23.join(dir, ".git")) || fs21.existsSync(path23.join(dir, "package.json"))) {
+    if (fs22.existsSync(path24.join(dir, ".git")) || fs22.existsSync(path24.join(dir, "package.json"))) {
       return dir;
     }
-    const parent = path23.dirname(dir);
+    const parent = path24.dirname(dir);
     if (parent === dir) return process.cwd();
     dir = parent;
   }
@@ -9841,7 +10144,7 @@ function findProjectRoot(filePath) {
 function normalizeCwdForHash(cwd) {
   let normalized;
   try {
-    normalized = fs21.realpathSync(cwd);
+    normalized = fs22.realpathSync(cwd);
   } catch {
     normalized = cwd;
   }
@@ -9851,16 +10154,16 @@ function normalizeCwdForHash(cwd) {
 }
 function getShadowRepoDir(cwd) {
   const hash = crypto3.createHash("sha256").update(normalizeCwdForHash(cwd)).digest("hex").slice(0, 16);
-  return path23.join(os17.homedir(), ".node9", "snapshots", hash);
+  return path24.join(os18.homedir(), ".node9", "snapshots", hash);
 }
 function cleanOrphanedIndexFiles(shadowDir) {
   try {
     const cutoff = Date.now() - 6e4;
-    for (const f of fs21.readdirSync(shadowDir)) {
+    for (const f of fs22.readdirSync(shadowDir)) {
       if (f.startsWith("index_")) {
-        const fp = path23.join(shadowDir, f);
+        const fp = path24.join(shadowDir, f);
         try {
-          if (fs21.statSync(fp).mtimeMs < cutoff) fs21.unlinkSync(fp);
+          if (fs22.statSync(fp).mtimeMs < cutoff) fs22.unlinkSync(fp);
         } catch {
         }
       }
@@ -9872,7 +10175,7 @@ function writeShadowExcludes(shadowDir, ignorePaths) {
   const hardcoded = [".git", ".node9"];
   const lines = [...hardcoded, ...ignorePaths].join("\n");
   try {
-    fs21.writeFileSync(path23.join(shadowDir, "info", "exclude"), lines + "\n", "utf8");
+    fs22.writeFileSync(path24.join(shadowDir, "info", "exclude"), lines + "\n", "utf8");
   } catch {
   }
 }
@@ -9885,25 +10188,25 @@ function ensureShadowRepo(shadowDir, cwd) {
     timeout: 3e3
   });
   if (check.status === 0) {
-    const ptPath = path23.join(shadowDir, "project-path.txt");
+    const ptPath = path24.join(shadowDir, "project-path.txt");
     try {
-      const stored = fs21.readFileSync(ptPath, "utf8").trim();
+      const stored = fs22.readFileSync(ptPath, "utf8").trim();
       if (stored === normalizedCwd) return true;
       if (process.env.NODE9_DEBUG === "1")
         console.error(
           `[Node9] Shadow repo path mismatch: stored="${stored}" expected="${normalizedCwd}" \u2014 reinitializing`
         );
-      fs21.rmSync(shadowDir, { recursive: true, force: true });
+      fs22.rmSync(shadowDir, { recursive: true, force: true });
     } catch {
       try {
-        fs21.writeFileSync(ptPath, normalizedCwd, "utf8");
+        fs22.writeFileSync(ptPath, normalizedCwd, "utf8");
       } catch {
       }
       return true;
     }
   }
   try {
-    fs21.mkdirSync(shadowDir, { recursive: true });
+    fs22.mkdirSync(shadowDir, { recursive: true });
   } catch {
   }
   const init = spawnSync5("git", ["init", "--bare", shadowDir], { timeout: 5e3 });
@@ -9912,7 +10215,7 @@ function ensureShadowRepo(shadowDir, cwd) {
     if (process.env.NODE9_DEBUG === "1") console.error("[Node9] git init --bare failed:", reason);
     return false;
   }
-  const configFile = path23.join(shadowDir, "config");
+  const configFile = path24.join(shadowDir, "config");
   spawnSync5("git", ["config", "--file", configFile, "core.untrackedCache", "true"], {
     timeout: 3e3
   });
@@ -9920,7 +10223,7 @@ function ensureShadowRepo(shadowDir, cwd) {
     timeout: 3e3
   });
   try {
-    fs21.writeFileSync(path23.join(shadowDir, "project-path.txt"), normalizedCwd, "utf8");
+    fs22.writeFileSync(path24.join(shadowDir, "project-path.txt"), normalizedCwd, "utf8");
   } catch {
   }
   return true;
@@ -9940,12 +10243,12 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
   let indexFile = null;
   try {
     const rawFilePath = extractFilePath(args);
-    const absFilePath = rawFilePath && path23.isAbsolute(rawFilePath) ? rawFilePath : null;
+    const absFilePath = rawFilePath && path24.isAbsolute(rawFilePath) ? rawFilePath : null;
     const cwd = absFilePath ? findProjectRoot(absFilePath) : process.cwd();
     const shadowDir = getShadowRepoDir(cwd);
     if (!ensureShadowRepo(shadowDir, cwd)) return null;
     writeShadowExcludes(shadowDir, ignorePaths);
-    indexFile = path23.join(shadowDir, `index_${process.pid}_${Date.now()}`);
+    indexFile = path24.join(shadowDir, `index_${process.pid}_${Date.now()}`);
     const shadowEnv = {
       ...process.env,
       GIT_DIR: shadowDir,
@@ -10017,7 +10320,7 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
     writeStack(stack);
     const entry = stack[stack.length - 1];
     notifySnapshotTaken(commitHash.slice(0, 7), tool, entry.argsSummary, capturedFiles.length);
-    fs21.writeFileSync(UNDO_LATEST_PATH, commitHash);
+    fs22.writeFileSync(UNDO_LATEST_PATH, commitHash);
     if (shouldGc) {
       spawn5("git", ["gc", "--auto"], { env: shadowEnv, detached: true, stdio: "ignore" }).unref();
     }
@@ -10028,7 +10331,7 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
   } finally {
     if (indexFile) {
       try {
-        fs21.unlinkSync(indexFile);
+        fs22.unlinkSync(indexFile);
       } catch {
       }
     }
@@ -10104,9 +10407,9 @@ function applyUndo(hash, cwd) {
       timeout: GIT_TIMEOUT
     }).stdout?.toString().trim().split("\n").filter(Boolean) ?? [];
     for (const file of [...tracked, ...untracked]) {
-      const fullPath = path23.join(dir, file);
-      if (!snapshotFiles.has(file) && fs21.existsSync(fullPath)) {
-        fs21.unlinkSync(fullPath);
+      const fullPath = path24.join(dir, file);
+      if (!snapshotFiles.has(file) && fs22.existsSync(fullPath)) {
+        fs22.unlinkSync(fullPath);
       }
     }
     return true;
@@ -10116,12 +10419,12 @@ function applyUndo(hash, cwd) {
 }
 // src/skill-pin.ts
-import fs22 from "fs";
-import path24 from "path";
-import os18 from "os";
+import fs23 from "fs";
+import path25 from "path";
+import os19 from "os";
 import crypto4 from "crypto";
 function getPinsFilePath() {
-  return path24.join(os18.homedir(), ".node9", "skill-pins.json");
+  return path25.join(os19.homedir(), ".node9", "skill-pins.json");
 }
 var MAX_FILES = 5e3;
 var MAX_TOTAL_BYTES = 50 * 1024 * 1024;
@@ -10135,18 +10438,18 @@ function walkDir(root) {
     if (out.length >= MAX_FILES) return;
     let entries;
     try {
-      entries = fs22.readdirSync(dir, { withFileTypes: true });
+      entries = fs23.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
     entries.sort((a, b) => a.name.localeCompare(b.name));
     for (const entry of entries) {
       if (out.length >= MAX_FILES) return;
-      const full = path24.join(dir, entry.name);
-      const rel = relDir ? path24.posix.join(relDir, entry.name) : entry.name;
+      const full = path25.join(dir, entry.name);
+      const rel = relDir ? path25.posix.join(relDir, entry.name) : entry.name;
       let lst;
       try {
-        lst = fs22.lstatSync(full);
+        lst = fs23.lstatSync(full);
       } catch {
         continue;
       }
@@ -10158,7 +10461,7 @@ function walkDir(root) {
       if (!lst.isFile()) continue;
       if (totalBytes + lst.size > MAX_TOTAL_BYTES) continue;
       try {
-        const buf = fs22.readFileSync(full);
+        const buf = fs23.readFileSync(full);
         totalBytes += buf.length;
         out.push({ rel, hash: sha256Bytes(buf) });
       } catch {
@@ -10172,14 +10475,14 @@ function walkDir(root) {
 function hashSkillRoot(absPath) {
   let lst;
   try {
-    lst = fs22.lstatSync(absPath);
+    lst = fs23.lstatSync(absPath);
   } catch {
     return { exists: false, contentHash: "", fileCount: 0 };
   }
   if (lst.isSymbolicLink()) return { exists: false, contentHash: "", fileCount: 0 };
   if (lst.isFile()) {
     try {
-      return { exists: true, contentHash: sha256Bytes(fs22.readFileSync(absPath)), fileCount: 1 };
+      return { exists: true, contentHash: sha256Bytes(fs23.readFileSync(absPath)), fileCount: 1 };
     } catch {
       return { exists: false, contentHash: "", fileCount: 0 };
     }
@@ -10197,7 +10500,7 @@ function getRootKey(absPath) {
 function readSkillPinsSafe() {
   const filePath = getPinsFilePath();
   try {
-    const raw = fs22.readFileSync(filePath, "utf-8");
+    const raw = fs23.readFileSync(filePath, "utf-8");
     if (!raw.trim()) return { ok: false, reason: "corrupt", detail: "empty file" };
     const parsed = JSON.parse(raw);
     if (!parsed.roots || typeof parsed.roots !== "object" || Array.isArray(parsed.roots)) {
@@ -10217,10 +10520,10 @@ function readSkillPins() {
 }
 function writeSkillPins(data) {
   const filePath = getPinsFilePath();
-  fs22.mkdirSync(path24.dirname(filePath), { recursive: true });
+  fs23.mkdirSync(path25.dirname(filePath), { recursive: true });
   const tmp = `${filePath}.${crypto4.randomBytes(6).toString("hex")}.tmp`;
-  fs22.writeFileSync(tmp, JSON.stringify(data, null, 2), { mode: 384 });
-  fs22.renameSync(tmp, filePath);
+  fs23.writeFileSync(tmp, JSON.stringify(data, null, 2), { mode: 384 });
+  fs23.renameSync(tmp, filePath);
 }
 function removePin(rootKey) {
   const pins = readSkillPins();
@@ -10264,36 +10567,36 @@ function verifyAndPinRoots(roots) {
   return { kind: "verified" };
 }
 function defaultSkillRoots(_cwd) {
-  const marketplaces = path24.join(os18.homedir(), ".claude", "plugins", "marketplaces");
+  const marketplaces = path25.join(os19.homedir(), ".claude", "plugins", "marketplaces");
   const roots = [];
   let registries;
   try {
-    registries = fs22.readdirSync(marketplaces, { withFileTypes: true });
+    registries = fs23.readdirSync(marketplaces, { withFileTypes: true });
   } catch {
     return [];
   }
   for (const registry of registries) {
     if (!registry.isDirectory()) continue;
-    const pluginsDir = path24.join(marketplaces, registry.name, "plugins");
+    const pluginsDir = path25.join(marketplaces, registry.name, "plugins");
     let plugins;
     try {
-      plugins = fs22.readdirSync(pluginsDir, { withFileTypes: true });
+      plugins = fs23.readdirSync(pluginsDir, { withFileTypes: true });
     } catch {
       continue;
     }
     for (const plugin of plugins) {
       if (!plugin.isDirectory()) continue;
-      roots.push(path24.join(pluginsDir, plugin.name));
+      roots.push(path25.join(pluginsDir, plugin.name));
     }
   }
   return roots;
 }
 function resolveUserSkillRoot(entry, cwd) {
   if (!entry) return null;
-  if (entry.startsWith("~/") || entry === "~") return path24.join(os18.homedir(), entry.slice(1));
-  if (path24.isAbsolute(entry)) return entry;
-  if (!cwd || !path24.isAbsolute(cwd)) return null;
-  return path24.join(cwd, entry);
+  if (entry.startsWith("~/") || entry === "~") return path25.join(os19.homedir(), entry.slice(1));
+  if (path25.isAbsolute(entry)) return entry;
+  if (!cwd || !path25.isAbsolute(cwd)) return null;
+  return path25.join(cwd, entry);
 }
 // src/cli/commands/check.ts
@@ -10311,9 +10614,9 @@ function registerCheckCommand(program2) {
         } catch (err2) {
           const tempConfig = getConfig();
           if (process.env.NODE9_DEBUG === "1" || tempConfig.settings.enableHookLogDebug) {
-            const logPath = path25.join(os19.homedir(), ".node9", "hook-debug.log");
+            const logPath = path26.join(os20.homedir(), ".node9", "hook-debug.log");
             const errMsg = err2 instanceof Error ? err2.message : String(err2);
-            fs23.appendFileSync(
+            fs24.appendFileSync(
               logPath,
               `[${(/* @__PURE__ */ new Date()).toISOString()}] JSON_PARSE_ERROR: ${errMsg}
 RAW: ${raw}
@@ -10326,11 +10629,11 @@ RAW: ${raw}
         if (config.settings.autoStartDaemon && !isDaemonRunning() && !process.env.NODE9_NO_AUTO_DAEMON) {
           try {
             const scriptPath = process.argv[1];
-            if (typeof scriptPath !== "string" || !path25.isAbsolute(scriptPath))
+            if (typeof scriptPath !== "string" || !path26.isAbsolute(scriptPath))
               throw new Error("node9: argv[1] is not an absolute path");
-            const resolvedScript = fs23.realpathSync(scriptPath);
-            const packageDist = fs23.realpathSync(path25.resolve(__dirname, "../.."));
-            if (!resolvedScript.startsWith(packageDist + path25.sep) && resolvedScript !== packageDist)
+            const resolvedScript = fs24.realpathSync(scriptPath);
+            const packageDist = fs24.realpathSync(path26.resolve(__dirname, "../.."));
+            if (!resolvedScript.startsWith(packageDist + path26.sep) && resolvedScript !== packageDist)
               throw new Error(
                 `node9: daemon spawn aborted \u2014 argv[1] (${resolvedScript}) is outside package dist (${packageDist})`
               );
@@ -10352,10 +10655,10 @@ RAW: ${raw}
             });
             d.unref();
           } catch (spawnErr) {
-            const logPath = path25.join(os19.homedir(), ".node9", "hook-debug.log");
+            const logPath = path26.join(os20.homedir(), ".node9", "hook-debug.log");
             const msg = spawnErr instanceof Error ? spawnErr.message : String(spawnErr);
             try {
-              fs23.appendFileSync(
+              fs24.appendFileSync(
                 logPath,
                 `[${(/* @__PURE__ */ new Date()).toISOString()}] daemon-autostart-failed: ${msg}
 `
@@ -10365,10 +10668,10 @@ RAW: ${raw}
           }
         }
         if (process.env.NODE9_DEBUG === "1" || config.settings.enableHookLogDebug) {
-          const logPath = path25.join(os19.homedir(), ".node9", "hook-debug.log");
-          if (!fs23.existsSync(path25.dirname(logPath)))
-            fs23.mkdirSync(path25.dirname(logPath), { recursive: true });
-          fs23.appendFileSync(logPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] STDIN: ${raw}
+          const logPath = path26.join(os20.homedir(), ".node9", "hook-debug.log");
+          if (!fs24.existsSync(path26.dirname(logPath)))
+            fs24.mkdirSync(path26.dirname(logPath), { recursive: true });
+          fs24.appendFileSync(logPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] STDIN: ${raw}
 `);
         }
         const toolName = sanitize2(payload.tool_name ?? payload.name ?? "");
@@ -10381,8 +10684,8 @@ RAW: ${raw}
           const isHumanDecision = blockedByContext.toLowerCase().includes("user") || blockedByContext.toLowerCase().includes("daemon") || blockedByContext.toLowerCase().includes("decision");
           let ttyFd = null;
           try {
-            ttyFd = fs23.openSync("/dev/tty", "w");
-            const writeTty = (line) => fs23.writeSync(ttyFd, line + "\n");
+            ttyFd = fs24.openSync("/dev/tty", "w");
+            const writeTty = (line) => fs24.writeSync(ttyFd, line + "\n");
             if (blockedByContext.includes("DLP") || blockedByContext.includes("Secret Detected") || blockedByContext.includes("Credential Review")) {
               writeTty(chalk5.bgRed.white.bold(`
  \u{1F6A8} NODE9 DLP ALERT \u2014 CREDENTIAL DETECTED `));
@@ -10401,7 +10704,7 @@ RAW: ${raw}
           } finally {
             if (ttyFd !== null)
               try {
-                fs23.closeSync(ttyFd);
+                fs24.closeSync(ttyFd);
               } catch {
               }
           }
@@ -10435,17 +10738,17 @@ RAW: ${raw}
         const safeSessionId = /^[A-Za-z0-9_\-]{1,128}$/.test(rawSessionId) ? rawSessionId : "";
         if (skillPinCfg.enabled && safeSessionId) {
           try {
-            const sessionsDir = path25.join(os19.homedir(), ".node9", "skill-sessions");
-            const flagPath = path25.join(sessionsDir, `${safeSessionId}.json`);
+            const sessionsDir = path26.join(os20.homedir(), ".node9", "skill-sessions");
+            const flagPath = path26.join(sessionsDir, `${safeSessionId}.json`);
             let flag = null;
             try {
-              flag = JSON.parse(fs23.readFileSync(flagPath, "utf-8"));
+              flag = JSON.parse(fs24.readFileSync(flagPath, "utf-8"));
             } catch {
             }
             const writeFlag = (data2) => {
               try {
-                fs23.mkdirSync(sessionsDir, { recursive: true });
-                fs23.writeFileSync(
+                fs24.mkdirSync(sessionsDir, { recursive: true });
+                fs24.writeFileSync(
                   flagPath,
                   JSON.stringify({ ...data2, timestamp: (/* @__PURE__ */ new Date()).toISOString() }, null, 2),
                   { mode: 384 }
@@ -10456,8 +10759,8 @@ RAW: ${raw}
             const sendSkillWarn = (detail, recoveryCmd) => {
               let ttyFd = null;
               try {
-                ttyFd = fs23.openSync("/dev/tty", "w");
-                const w = (line) => fs23.writeSync(ttyFd, line + "\n");
+                ttyFd = fs24.openSync("/dev/tty", "w");
+                const w = (line) => fs24.writeSync(ttyFd, line + "\n");
                 w(chalk5.yellow(`
 \u26A0\uFE0F  Node9: installed skill drift detected`));
                 w(chalk5.gray(`   ${detail}`));
@@ -10472,7 +10775,7 @@ RAW: ${raw}
               } finally {
                 if (ttyFd !== null)
                   try {
-                    fs23.closeSync(ttyFd);
+                    fs24.closeSync(ttyFd);
                   } catch {
                   }
               }
@@ -10488,7 +10791,7 @@ RAW: ${raw}
               return;
             }
             if (!flag || flag.state !== "verified" && flag.state !== "warned") {
-              const absoluteCwd = typeof payload.cwd === "string" && path25.isAbsolute(payload.cwd) ? payload.cwd : void 0;
+              const absoluteCwd = typeof payload.cwd === "string" && path26.isAbsolute(payload.cwd) ? payload.cwd : void 0;
               const extraRoots = skillPinCfg.roots;
               const resolvedExtra = extraRoots.map((r) => resolveUserSkillRoot(r, absoluteCwd)).filter((r) => typeof r === "string");
               const roots = [...defaultSkillRoots(absoluteCwd), ...resolvedExtra];
@@ -10529,10 +10832,10 @@ RAW: ${raw}
               }
               try {
                 const cutoff = Date.now() - 7 * 24 * 60 * 60 * 1e3;
-                for (const name of fs23.readdirSync(sessionsDir)) {
-                  const p = path25.join(sessionsDir, name);
+                for (const name of fs24.readdirSync(sessionsDir)) {
+                  const p = path26.join(sessionsDir, name);
                   try {
-                    if (fs23.statSync(p).mtimeMs < cutoff) fs23.unlinkSync(p);
+                    if (fs24.statSync(p).mtimeMs < cutoff) fs24.unlinkSync(p);
                   } catch {
                   }
                 }
@@ -10542,9 +10845,9 @@ RAW: ${raw}
           } catch (err2) {
             if (process.env.NODE9_DEBUG === "1") {
               try {
-                const dbg = path25.join(os19.homedir(), ".node9", "hook-debug.log");
+                const dbg = path26.join(os20.homedir(), ".node9", "hook-debug.log");
                 const msg = err2 instanceof Error ? err2.message : String(err2);
-                fs23.appendFileSync(dbg, `[${(/* @__PURE__ */ new Date()).toISOString()}] SKILL_PIN_ERROR: ${msg}
+                fs24.appendFileSync(dbg, `[${(/* @__PURE__ */ new Date()).toISOString()}] SKILL_PIN_ERROR: ${msg}
 `);
               } catch {
               }
@@ -10554,7 +10857,7 @@ RAW: ${raw}
         if (shouldSnapshot(toolName, toolInput, config)) {
           await createShadowSnapshot(toolName, toolInput, config.policy.snapshot.ignorePaths);
         }
-        const safeCwdForAuth = typeof payload.cwd === "string" && path25.isAbsolute(payload.cwd) ? payload.cwd : void 0;
+        const safeCwdForAuth = typeof payload.cwd === "string" && path26.isAbsolute(payload.cwd) ? payload.cwd : void 0;
         const result = await authorizeHeadless(toolName, toolInput, meta, {
           cwd: safeCwdForAuth
         });
@@ -10566,12 +10869,12 @@ RAW: ${raw}
         }
         if (result.noApprovalMechanism && !isDaemonRunning() && !process.env.NODE9_NO_AUTO_DAEMON && !process.stdout.isTTY && config.settings.autoStartDaemon) {
           try {
-            const tty = fs23.openSync("/dev/tty", "w");
-            fs23.writeSync(
+            const tty = fs24.openSync("/dev/tty", "w");
+            fs24.writeSync(
               tty,
               chalk5.cyan("\n\u{1F6E1}\uFE0F  Node9: Starting approval daemon automatically...\n")
             );
-            fs23.closeSync(tty);
+            fs24.closeSync(tty);
           } catch {
           }
           const daemonReady = await autoStartDaemonAndWait();
@@ -10598,9 +10901,9 @@ RAW: ${raw}
         });
       } catch (err2) {
         if (process.env.NODE9_DEBUG === "1") {
-          const logPath = path25.join(os19.homedir(), ".node9", "hook-debug.log");
+          const logPath = path26.join(os20.homedir(), ".node9", "hook-debug.log");
           const errMsg = err2 instanceof Error ? err2.message : String(err2);
-          fs23.appendFileSync(logPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] ERROR: ${errMsg}
+          fs24.appendFileSync(logPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] ERROR: ${errMsg}
 `);
         }
         process.exit(0);
@@ -10637,9 +10940,9 @@ RAW: ${raw}
 init_audit();
 init_config();
 init_policy();
-import fs24 from "fs";
-import path26 from "path";
-import os20 from "os";
+import fs25 from "fs";
+import path27 from "path";
+import os21 from "os";
 init_daemon();
 // src/utils/cp-mv-parser.ts
@@ -10712,10 +11015,10 @@ function registerLogCommand(program2) {
           decision: "allowed",
           source: "post-hook"
         };
-        const logPath = path26.join(os20.homedir(), ".node9", "audit.log");
-        if (!fs24.existsSync(path26.dirname(logPath)))
-          fs24.mkdirSync(path26.dirname(logPath), { recursive: true });
-        fs24.appendFileSync(logPath, JSON.stringify(entry) + "\n");
+        const logPath = path27.join(os21.homedir(), ".node9", "audit.log");
+        if (!fs25.existsSync(path27.dirname(logPath)))
+          fs25.mkdirSync(path27.dirname(logPath), { recursive: true });
+        fs25.appendFileSync(logPath, JSON.stringify(entry) + "\n");
         if ((tool === "Bash" || tool === "bash") && isDaemonRunning()) {
           const command = typeof rawInput === "object" && rawInput !== null && "command" in rawInput && typeof rawInput.command === "string" ? rawInput.command : null;
           if (command) {
@@ -10748,7 +11051,7 @@ function registerLogCommand(program2) {
             }
           }
         }
-        const safeCwd = typeof payload.cwd === "string" && path26.isAbsolute(payload.cwd) ? payload.cwd : void 0;
+        const safeCwd = typeof payload.cwd === "string" && path27.isAbsolute(payload.cwd) ? payload.cwd : void 0;
         const config = getConfig(safeCwd);
         if (shouldSnapshot(tool, {}, config)) {
           await createShadowSnapshot("unknown", {}, config.policy.snapshot.ignorePaths);
@@ -10757,9 +11060,9 @@ function registerLogCommand(program2) {
         const msg = err2 instanceof Error ? err2.message : String(err2);
         process.stderr.write(`[Node9] audit log error: ${msg}
 `);
-        const debugPath = path26.join(os20.homedir(), ".node9", "hook-debug.log");
+        const debugPath = path27.join(os21.homedir(), ".node9", "hook-debug.log");
         try {
-          fs24.appendFileSync(debugPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] LOG_ERROR: ${msg}
+          fs25.appendFileSync(debugPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] LOG_ERROR: ${msg}
 `);
         } catch {
         }
@@ -11160,13 +11463,13 @@ function registerConfigShowCommand(program2) {
 // src/cli/commands/doctor.ts
 init_daemon();
 import chalk7 from "chalk";
-import fs25 from "fs";
-import path27 from "path";
-import os21 from "os";
+import fs26 from "fs";
+import path28 from "path";
+import os22 from "os";
 import { execSync as execSync2 } from "child_process";
 function registerDoctorCommand(program2, version2) {
   program2.command("doctor").description("Check that Node9 is installed and configured correctly").action(() => {
-    const homeDir2 = os21.homedir();
+    const homeDir2 = os22.homedir();
     let failures = 0;
     function pass(msg) {
       console.log(chalk7.green("  \u2705 ") + msg);
@@ -11215,10 +11518,10 @@ function registerDoctorCommand(program2, version2) {
       );
     }
     section("Configuration");
-    const globalConfigPath = path27.join(homeDir2, ".node9", "config.json");
-    if (fs25.existsSync(globalConfigPath)) {
+    const globalConfigPath = path28.join(homeDir2, ".node9", "config.json");
+    if (fs26.existsSync(globalConfigPath)) {
       try {
-        JSON.parse(fs25.readFileSync(globalConfigPath, "utf-8"));
+        JSON.parse(fs26.readFileSync(globalConfigPath, "utf-8"));
         pass("~/.node9/config.json found and valid");
       } catch {
         fail("~/.node9/config.json is invalid JSON", "Run: node9 init --force");
@@ -11226,10 +11529,10 @@ function registerDoctorCommand(program2, version2) {
     } else {
       warn("~/.node9/config.json not found (using defaults)", "Run: node9 init");
     }
-    const projectConfigPath = path27.join(process.cwd(), "node9.config.json");
-    if (fs25.existsSync(projectConfigPath)) {
+    const projectConfigPath = path28.join(process.cwd(), "node9.config.json");
+    if (fs26.existsSync(projectConfigPath)) {
       try {
-        JSON.parse(fs25.readFileSync(projectConfigPath, "utf-8"));
+        JSON.parse(fs26.readFileSync(projectConfigPath, "utf-8"));
         pass("node9.config.json found and valid (project)");
       } catch {
         fail(
@@ -11238,8 +11541,8 @@ function registerDoctorCommand(program2, version2) {
         );
       }
     }
-    const credsPath = path27.join(homeDir2, ".node9", "credentials.json");
-    if (fs25.existsSync(credsPath)) {
+    const credsPath = path28.join(homeDir2, ".node9", "credentials.json");
+    if (fs26.existsSync(credsPath)) {
       pass("Cloud credentials found (~/.node9/credentials.json)");
     } else {
       warn(
@@ -11248,10 +11551,10 @@ function registerDoctorCommand(program2, version2) {
       );
     }
     section("Agent Hooks");
-    const claudeSettingsPath = path27.join(homeDir2, ".claude", "settings.json");
-    if (fs25.existsSync(claudeSettingsPath)) {
+    const claudeSettingsPath = path28.join(homeDir2, ".claude", "settings.json");
+    if (fs26.existsSync(claudeSettingsPath)) {
       try {
-        const cs = JSON.parse(fs25.readFileSync(claudeSettingsPath, "utf-8"));
+        const cs = JSON.parse(fs26.readFileSync(claudeSettingsPath, "utf-8"));
         const hasHook = cs.hooks?.PreToolUse?.some(
           (m) => m.hooks.some((h) => h.command?.includes("node9") || h.command?.includes("cli.js"))
         );
@@ -11267,10 +11570,10 @@ function registerDoctorCommand(program2, version2) {
     } else {
       warn("Claude Code \u2014 not configured", "Run: node9 setup claude");
     }
-    const geminiSettingsPath = path27.join(homeDir2, ".gemini", "settings.json");
-    if (fs25.existsSync(geminiSettingsPath)) {
+    const geminiSettingsPath = path28.join(homeDir2, ".gemini", "settings.json");
+    if (fs26.existsSync(geminiSettingsPath)) {
       try {
-        const gs = JSON.parse(fs25.readFileSync(geminiSettingsPath, "utf-8"));
+        const gs = JSON.parse(fs26.readFileSync(geminiSettingsPath, "utf-8"));
         const hasHook = gs.hooks?.BeforeTool?.some(
           (m) => m.hooks.some((h) => h.command?.includes("node9") || h.command?.includes("cli.js"))
         );
@@ -11286,10 +11589,10 @@ function registerDoctorCommand(program2, version2) {
     } else {
       warn("Gemini CLI  \u2014 not configured", "Run: node9 setup gemini  (skip if not using Gemini)");
     }
-    const cursorHooksPath = path27.join(homeDir2, ".cursor", "hooks.json");
-    if (fs25.existsSync(cursorHooksPath)) {
+    const cursorHooksPath = path28.join(homeDir2, ".cursor", "hooks.json");
+    if (fs26.existsSync(cursorHooksPath)) {
       try {
-        const cur = JSON.parse(fs25.readFileSync(cursorHooksPath, "utf-8"));
+        const cur = JSON.parse(fs26.readFileSync(cursorHooksPath, "utf-8"));
         const hasHook = cur.hooks?.preToolUse?.some(
           (h) => h.command?.includes("node9") || h.command?.includes("cli.js")
         );
@@ -11327,9 +11630,9 @@ function registerDoctorCommand(program2, version2) {
 // src/cli/commands/audit.ts
 import chalk8 from "chalk";
-import fs26 from "fs";
-import path28 from "path";
-import os22 from "os";
+import fs27 from "fs";
+import path29 from "path";
+import os23 from "os";
 function formatRelativeTime(timestamp) {
   const diff = Date.now() - new Date(timestamp).getTime();
   const sec = Math.floor(diff / 1e3);
@@ -11342,14 +11645,14 @@ function formatRelativeTime(timestamp) {
 }
 function registerAuditCommand(program2) {
   program2.command("audit").description("View local execution audit log").option("--tail <n>", "Number of entries to show", "20").option("--tool <pattern>", "Filter by tool name (substring match)").option("--deny", "Show only denied actions").option("--json", "Output raw JSON").action((options) => {
-    const logPath = path28.join(os22.homedir(), ".node9", "audit.log");
-    if (!fs26.existsSync(logPath)) {
+    const logPath = path29.join(os23.homedir(), ".node9", "audit.log");
+    if (!fs27.existsSync(logPath)) {
       console.log(
         chalk8.yellow("No audit logs found. Run node9 with an agent to generate entries.")
       );
       return;
     }
-    const raw = fs26.readFileSync(logPath, "utf-8");
+    const raw = fs27.readFileSync(logPath, "utf-8");
     const lines = raw.split("\n").filter((l) => l.trim() !== "");
     let entries = lines.flatMap((line) => {
       try {
@@ -11403,9 +11706,9 @@ function registerAuditCommand(program2) {
 // src/cli/commands/report.ts
 import chalk9 from "chalk";
-import fs27 from "fs";
-import path29 from "path";
-import os23 from "os";
+import fs28 from "fs";
+import path30 from "path";
+import os24 from "os";
 var TEST_COMMAND_RE3 = /(?:^|\s)(npm\s+(?:run\s+)?test|npx\s+(?:vitest|jest|mocha)|yarn\s+(?:run\s+)?test|pnpm\s+(?:run\s+)?test|vitest|jest|mocha|pytest|py\.test|cargo\s+test|go\s+test|bundle\s+exec\s+rspec|rspec|phpunit|dotnet\s+test)\b/i;
 function buildTestTimestamps(allEntries) {
   const testTs = /* @__PURE__ */ new Set();
@@ -11452,8 +11755,8 @@ function getDateRange(period) {
   }
 }
 function parseAuditLog(logPath) {
-  if (!fs27.existsSync(logPath)) return [];
-  const raw = fs27.readFileSync(logPath, "utf-8");
+  if (!fs28.existsSync(logPath)) return [];
+  const raw = fs28.readFileSync(logPath, "utf-8");
   return raw.split("\n").flatMap((line) => {
     if (!line.trim()) return [];
     try {
@@ -11520,34 +11823,38 @@ function loadClaudeCost(start, end) {
     byDay: /* @__PURE__ */ new Map(),
     byModel: /* @__PURE__ */ new Map(),
     inputTokens: 0,
+    outputTokens: 0,
+    cacheWriteTokens: 0,
     cacheReadTokens: 0
   };
-  const projectsDir = path29.join(os23.homedir(), ".claude", "projects");
-  if (!fs27.existsSync(projectsDir)) return empty;
+  const projectsDir = path30.join(os24.homedir(), ".claude", "projects");
+  if (!fs28.existsSync(projectsDir)) return empty;
   let dirs;
   try {
-    dirs = fs27.readdirSync(projectsDir);
+    dirs = fs28.readdirSync(projectsDir);
   } catch {
     return empty;
   }
   let total = 0;
   let inputTokens = 0;
+  let outputTokens = 0;
+  let cacheWriteTokens = 0;
   let cacheReadTokens = 0;
   const byDay = /* @__PURE__ */ new Map();
   const byModel = /* @__PURE__ */ new Map();
   for (const proj of dirs) {
-    const projPath = path29.join(projectsDir, proj);
+    const projPath = path30.join(projectsDir, proj);
     let files;
     try {
-      const stat = fs27.statSync(projPath);
+      const stat = fs28.statSync(projPath);
       if (!stat.isDirectory()) continue;
-      files = fs27.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
+      files = fs28.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
     } catch {
       continue;
     }
     for (const file of files) {
       try {
-        const raw = fs27.readFileSync(path29.join(projPath, file), "utf-8");
+        const raw = fs28.readFileSync(path30.join(projPath, file), "utf-8");
         for (const line of raw.split("\n")) {
           if (!line.trim()) continue;
           let entry;
@@ -11572,6 +11879,8 @@ function loadClaudeCost(start, end) {
           const cost = inp * p.i + out * p.o + cw * p.cw + cr * p.cr;
           total += cost;
           inputTokens += inp;
+          outputTokens += out;
+          cacheWriteTokens += cw;
           cacheReadTokens += cr;
           const dateKey = entry.timestamp.slice(0, 10);
           byDay.set(dateKey, (byDay.get(dateKey) ?? 0) + cost);
@@ -11583,15 +11892,24 @@ function loadClaudeCost(start, end) {
       }
     }
   }
-  return { total, byDay, byModel, inputTokens, cacheReadTokens };
+  return { total, byDay, byModel, inputTokens, outputTokens, cacheWriteTokens, cacheReadTokens };
 }
 function registerReportCommand(program2) {
   program2.command("report").description("Activity and security report \u2014 what Claude did, what was blocked").option("--period <period>", "today | 7d | 30d | month", "7d").option("--no-tests", "exclude test runner calls (npm test, vitest, pytest\u2026) from stats").action((options) => {
     const period = ["today", "7d", "30d", "month"].includes(
       options.period
     ) ? options.period : "7d";
-    const logPath = path29.join(os23.homedir(), ".node9", "audit.log");
+    const logPath = path30.join(os24.homedir(), ".node9", "audit.log");
     const allEntries = parseAuditLog(logPath);
+    const unackedDlp = allEntries.filter((e) => e.source === "response-dlp");
+    if (unackedDlp.length > 0) {
+      console.log("");
+      console.log(
+        chalk9.bgRed.white.bold(
+          ` \u26A0\uFE0F  DLP ALERT: ${unackedDlp.length} secret${unackedDlp.length !== 1 ? "s" : ""} found in Claude response text `
+        ) + "  " + chalk9.yellow("\u2192 run: node9 dlp")
+      );
+    }
     if (allEntries.length === 0) {
       console.log(
         chalk9.yellow("\n  No audit data found. Run node9 with Claude Code to generate entries.\n")
@@ -11604,6 +11922,8 @@ function registerReportCommand(program2) {
       byDay: costByDay,
       byModel: costByModel,
       inputTokens: costInputTokens,
+      outputTokens: costOutputTokens,
+      cacheWriteTokens: costCacheWrite,
       cacheReadTokens: costCacheRead
     } = loadClaudeCost(start, end);
     const periodMs = end.getTime() - start.getTime();
@@ -11621,6 +11941,7 @@ function registerReportCommand(program2) {
     let filteredTestCount = 0;
     const entries = allEntries.filter((e) => {
       if (e.source === "post-hook") return false;
+      if (e.source === "response-dlp") return false;
       const ts = new Date(e.ts);
       if (ts < start || ts > end) return false;
       if (excludeTests && isTestEntry(e, testTs)) {
@@ -11754,7 +12075,7 @@ function registerReportCommand(program2) {
     if (topBlocks.length === 0) {
       console.log("  " + " ".repeat(COL) + "  " + chalk9.dim("nothing blocked \u2713"));
     }
-    if (agentMap.size > 1) {
+    if (agentMap.size >= 1) {
       console.log("");
       console.log("  " + chalk9.bold("Agents"));
       console.log("  " + chalk9.dim("\u2500".repeat(Math.min(50, W - 4))));
@@ -11804,6 +12125,40 @@ function registerReportCommand(program2) {
         );
       }
     }
+    const totalTokens = costInputTokens + costOutputTokens + costCacheWrite + costCacheRead;
+    if (totalTokens > 0) {
+      const cacheHitPct = costInputTokens + costCacheRead > 0 ? Math.round(costCacheRead / (costInputTokens + costCacheRead) * 100) : 0;
+      console.log("");
+      console.log("  " + chalk9.bold("Tokens") + "  " + chalk9.dim(`${num(totalTokens)} total`));
+      console.log("  " + chalk9.dim("\u2500".repeat(Math.min(50, W - 4))));
+      const tokenRows = [
+        ["Input", costInputTokens, chalk9.cyan(num(costInputTokens))],
+        ["Output", costOutputTokens, chalk9.white(num(costOutputTokens))],
+        ["Cache write", costCacheWrite, chalk9.yellow(num(costCacheWrite))],
+        ["Cache read", costCacheRead, chalk9.green(num(costCacheRead))]
+      ];
+      const maxTok = Math.max(
+        costInputTokens,
+        costOutputTokens,
+        costCacheWrite,
+        costCacheRead,
+        1
+      );
+      const TOK_BAR = Math.max(6, Math.min(20, W - 30));
+      const TOK_LABEL = 14;
+      for (const [label, count, colored] of tokenRows) {
+        if (count === 0) continue;
+        const b = colorBar(count, maxTok, TOK_BAR);
+        console.log("  " + chalk9.white(label.padEnd(TOK_LABEL)) + b + "  " + colored);
+      }
+      if (cacheHitPct > 0) {
+        console.log(
+          "  " + chalk9.dim(
+            `Cache hit rate: ${cacheHitPct}%  (saves ~${fmtCost(costCacheRead * 27e-7)} vs fresh input)`
+          )
+        );
+      }
+    }
     if (costUSD > 0) {
       const periodDays = Math.max(1, Math.ceil((end.getTime() - start.getTime()) / 864e5));
       const avgPerDay = costUSD / periodDays;
@@ -11828,6 +12183,33 @@ function registerReportCommand(program2) {
         );
       }
     }
+    const responseDlpEntries = allEntries.filter((e) => {
+      if (e.source !== "response-dlp") return false;
+      const ts = new Date(e.ts);
+      return ts >= start && ts <= end;
+    });
+    if (responseDlpEntries.length > 0) {
+      console.log("");
+      console.log(
+        "  " + chalk9.red.bold("\u26A0\uFE0F  Response DLP") + chalk9.dim("  \xB7  ") + chalk9.red(
+          `${responseDlpEntries.length} secret${responseDlpEntries.length !== 1 ? "s" : ""} found in Claude response text`
+        )
+      );
+      console.log("  " + chalk9.dim("\u2500".repeat(Math.min(60, W - 4))));
+      console.log(
+        "  " + chalk9.yellow("These were NOT blocked \u2014 Claude included them in response prose.")
+      );
+      console.log("  " + chalk9.yellow("Rotate affected keys immediately."));
+      for (const e of responseDlpEntries.slice(0, 5)) {
+        const ts = chalk9.dim(fmtDate(e.ts) + "  ");
+        const pattern = chalk9.red(e.dlpPattern ?? "DLP");
+        const sample = chalk9.gray(e.dlpSample ?? "");
+        console.log(`    ${ts}${pattern}  ${sample}`);
+      }
+      if (responseDlpEntries.length > 5) {
+        console.log(chalk9.dim(`    \u2026 and ${responseDlpEntries.length - 5} more`));
+      }
+    }
     console.log("");
     console.log(
       "  " + chalk9.dim("node9 audit --deny") + chalk9.dim("  \xB7  ") + chalk9.dim("node9 report --period today|7d|30d|month  --no-tests")
@@ -11945,12 +12327,12 @@ function registerDaemonCommand(program2) {
 init_core();
 init_daemon();
 import chalk11 from "chalk";
-import fs28 from "fs";
-import path30 from "path";
-import os24 from "os";
+import fs29 from "fs";
+import path31 from "path";
+import os25 from "os";
 function readJson2(filePath) {
   try {
-    if (fs28.existsSync(filePath)) return JSON.parse(fs28.readFileSync(filePath, "utf-8"));
+    if (fs29.existsSync(filePath)) return JSON.parse(fs29.readFileSync(filePath, "utf-8"));
   } catch {
   }
   return null;
@@ -12015,28 +12397,28 @@ function registerStatusCommand(program2) {
     console.log("");
     const modeLabel = settings.mode === "audit" ? chalk11.blue("audit") : settings.mode === "strict" ? chalk11.red("strict") : chalk11.white("standard");
     console.log(`  Mode:    ${modeLabel}`);
-    const projectConfig = path30.join(process.cwd(), "node9.config.json");
-    const globalConfig = path30.join(os24.homedir(), ".node9", "config.json");
+    const projectConfig = path31.join(process.cwd(), "node9.config.json");
+    const globalConfig = path31.join(os25.homedir(), ".node9", "config.json");
     console.log(
-      `  Local:   ${fs28.existsSync(projectConfig) ? chalk11.green("Active (node9.config.json)") : chalk11.gray("Not present")}`
+      `  Local:   ${fs29.existsSync(projectConfig) ? chalk11.green("Active (node9.config.json)") : chalk11.gray("Not present")}`
     );
     console.log(
-      `  Global:  ${fs28.existsSync(globalConfig) ? chalk11.green("Active (~/.node9/config.json)") : chalk11.gray("Not present")}`
+      `  Global:  ${fs29.existsSync(globalConfig) ? chalk11.green("Active (~/.node9/config.json)") : chalk11.gray("Not present")}`
     );
     if (mergedConfig.policy.sandboxPaths.length > 0) {
       console.log(
         `  Sandbox: ${chalk11.green(`${mergedConfig.policy.sandboxPaths.length} safe zones active`)}`
       );
     }
-    const homeDir2 = os24.homedir();
+    const homeDir2 = os25.homedir();
     const claudeSettings = readJson2(
-      path30.join(homeDir2, ".claude", "settings.json")
+      path31.join(homeDir2, ".claude", "settings.json")
     );
-    const claudeConfig = readJson2(path30.join(homeDir2, ".claude.json"));
+    const claudeConfig = readJson2(path31.join(homeDir2, ".claude.json"));
     const geminiSettings = readJson2(
-      path30.join(homeDir2, ".gemini", "settings.json")
+      path31.join(homeDir2, ".gemini", "settings.json")
     );
-    const cursorConfig = readJson2(path30.join(homeDir2, ".cursor", "mcp.json"));
+    const cursorConfig = readJson2(path31.join(homeDir2, ".cursor", "mcp.json"));
     const agentFound = claudeSettings || claudeConfig || geminiSettings || cursorConfig;
     if (agentFound) {
       console.log("");
@@ -12096,9 +12478,9 @@ function registerStatusCommand(program2) {
 // src/cli/commands/init.ts
 init_core();
 import chalk12 from "chalk";
-import fs29 from "fs";
-import path31 from "path";
-import os25 from "os";
+import fs30 from "fs";
+import path32 from "path";
+import os26 from "os";
 import https3 from "https";
 init_shields();
 init_service();
@@ -12158,15 +12540,15 @@ function registerInitCommand(program2) {
       }
       console.log("");
     }
-    const configPath = path31.join(os25.homedir(), ".node9", "config.json");
-    if (fs29.existsSync(configPath) && !options.force) {
+    const configPath = path32.join(os26.homedir(), ".node9", "config.json");
+    if (fs30.existsSync(configPath) && !options.force) {
       try {
-        const existing = JSON.parse(fs29.readFileSync(configPath, "utf-8"));
+        const existing = JSON.parse(fs30.readFileSync(configPath, "utf-8"));
         const settings = existing.settings ?? {};
         if (settings.mode !== chosenMode) {
           settings.mode = chosenMode;
           existing.settings = settings;
-          fs29.writeFileSync(configPath, JSON.stringify(existing, null, 2) + "\n");
+          fs30.writeFileSync(configPath, JSON.stringify(existing, null, 2) + "\n");
           console.log(chalk12.green(`\u2705 Mode updated: ${chosenMode}`));
         } else {
           console.log(chalk12.blue(`\u2139\uFE0F  Config already exists: ${configPath}`));
@@ -12179,9 +12561,9 @@ function registerInitCommand(program2) {
         ...DEFAULT_CONFIG,
         settings: { ...DEFAULT_CONFIG.settings, mode: chosenMode }
       };
-      const dir = path31.dirname(configPath);
-      if (!fs29.existsSync(dir)) fs29.mkdirSync(dir, { recursive: true });
-      fs29.writeFileSync(configPath, JSON.stringify(configToSave, null, 2) + "\n");
+      const dir = path32.dirname(configPath);
+      if (!fs30.existsSync(dir)) fs30.mkdirSync(dir, { recursive: true });
+      fs30.writeFileSync(configPath, JSON.stringify(configToSave, null, 2) + "\n");
       console.log(chalk12.green(`\u2705 Config created: ${configPath}`));
       console.log(chalk12.gray(`   Mode: ${chosenMode}`));
     }
@@ -12265,7 +12647,7 @@ function registerInitCommand(program2) {
 }
 // src/cli/commands/undo.ts
-import path32 from "path";
+import path33 from "path";
 import chalk14 from "chalk";
 // src/tui/undo-navigator.ts
@@ -12424,7 +12806,7 @@ function findMatchingCwd(startDir, history) {
   let dir = startDir;
   while (true) {
     if (cwds.has(dir)) return dir;
-    const parent = path32.dirname(dir);
+    const parent = path33.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -12620,12 +13002,12 @@ import { execa as execa2 } from "execa";
 init_provenance();
 // src/mcp-pin.ts
-import fs30 from "fs";
-import path33 from "path";
-import os26 from "os";
+import fs31 from "fs";
+import path34 from "path";
+import os27 from "os";
 import crypto5 from "crypto";
 function getPinsFilePath2() {
-  return path33.join(os26.homedir(), ".node9", "mcp-pins.json");
+  return path34.join(os27.homedir(), ".node9", "mcp-pins.json");
 }
 function hashToolDefinitions(tools) {
   const sorted = [...tools].sort((a, b) => {
@@ -12642,7 +13024,7 @@ function getServerKey(upstreamCommand) {
 function readMcpPinsSafe() {
   const filePath = getPinsFilePath2();
   try {
-    const raw = fs30.readFileSync(filePath, "utf-8");
+    const raw = fs31.readFileSync(filePath, "utf-8");
     if (!raw.trim()) {
       return { ok: false, reason: "corrupt", detail: "empty file" };
     }
@@ -12666,10 +13048,10 @@ function readMcpPins() {
 }
 function writeMcpPins(data) {
   const filePath = getPinsFilePath2();
-  fs30.mkdirSync(path33.dirname(filePath), { recursive: true });
+  fs31.mkdirSync(path34.dirname(filePath), { recursive: true });
   const tmp = `${filePath}.${crypto5.randomBytes(6).toString("hex")}.tmp`;
-  fs30.writeFileSync(tmp, JSON.stringify(data, null, 2), { mode: 384 });
-  fs30.renameSync(tmp, filePath);
+  fs31.writeFileSync(tmp, JSON.stringify(data, null, 2), { mode: 384 });
+  fs31.renameSync(tmp, filePath);
 }
 function checkPin(serverKey, currentHash) {
   const result = readMcpPinsSafe();
@@ -13041,9 +13423,9 @@ function registerMcpGatewayCommand(program2) {
 // src/mcp-server/index.ts
 import readline4 from "readline";
-import fs31 from "fs";
-import os27 from "os";
-import path34 from "path";
+import fs32 from "fs";
+import os28 from "os";
+import path35 from "path";
 init_core();
 init_daemon();
 init_shields();
@@ -13218,13 +13600,13 @@ function handleStatus() {
   lines.push(`Active shields: ${activeShields.length > 0 ? activeShields.join(", ") : "none"}`);
   lines.push(`Smart rules: ${config.policy.smartRules.length} loaded`);
   lines.push(`DLP: ${config.policy.dlp?.enabled !== false ? "enabled" : "disabled"}`);
-  const projectConfig = path34.join(process.cwd(), "node9.config.json");
-  const globalConfig = path34.join(os27.homedir(), ".node9", "config.json");
+  const projectConfig = path35.join(process.cwd(), "node9.config.json");
+  const globalConfig = path35.join(os28.homedir(), ".node9", "config.json");
   lines.push(
-    `Project config (node9.config.json): ${fs31.existsSync(projectConfig) ? "present" : "not found"}`
+    `Project config (node9.config.json): ${fs32.existsSync(projectConfig) ? "present" : "not found"}`
   );
   lines.push(
-    `Global config (~/.node9/config.json): ${fs31.existsSync(globalConfig) ? "present" : "not found"}`
+    `Global config (~/.node9/config.json): ${fs32.existsSync(globalConfig) ? "present" : "not found"}`
   );
   return lines.join("\n");
 }
@@ -13298,21 +13680,21 @@ function handleShieldDisable(args) {
   writeActiveShields(active.filter((s) => s !== name));
   return `Shield "${name}" disabled.`;
 }
-var GLOBAL_CONFIG_PATH2 = path34.join(os27.homedir(), ".node9", "config.json");
+var GLOBAL_CONFIG_PATH2 = path35.join(os28.homedir(), ".node9", "config.json");
 var APPROVER_CHANNELS = ["native", "browser", "cloud", "terminal"];
 function readGlobalConfigRaw() {
   try {
-    if (fs31.existsSync(GLOBAL_CONFIG_PATH2)) {
-      return JSON.parse(fs31.readFileSync(GLOBAL_CONFIG_PATH2, "utf-8"));
+    if (fs32.existsSync(GLOBAL_CONFIG_PATH2)) {
+      return JSON.parse(fs32.readFileSync(GLOBAL_CONFIG_PATH2, "utf-8"));
     }
   } catch {
   }
   return {};
 }
 function writeGlobalConfigRaw(data) {
-  const dir = path34.dirname(GLOBAL_CONFIG_PATH2);
-  if (!fs31.existsSync(dir)) fs31.mkdirSync(dir, { recursive: true });
-  fs31.writeFileSync(GLOBAL_CONFIG_PATH2, JSON.stringify(data, null, 2) + "\n");
+  const dir = path35.dirname(GLOBAL_CONFIG_PATH2);
+  if (!fs32.existsSync(dir)) fs32.mkdirSync(dir, { recursive: true });
+  fs32.writeFileSync(GLOBAL_CONFIG_PATH2, JSON.stringify(data, null, 2) + "\n");
 }
 function handleApproverList() {
   const config = getConfig();
@@ -13355,9 +13737,9 @@ function handleApproverSet(args) {
 }
 function handleAuditGet(args) {
   const limit = Math.min(typeof args.limit === "number" ? args.limit : 20, 100);
-  const auditPath = path34.join(os27.homedir(), ".node9", "audit.log");
-  if (!fs31.existsSync(auditPath)) return "No audit log found.";
-  const lines = fs31.readFileSync(auditPath, "utf-8").trim().split("\n").filter(Boolean);
+  const auditPath = path35.join(os28.homedir(), ".node9", "audit.log");
+  if (!fs32.existsSync(auditPath)) return "No audit log found.";
+  const lines = fs32.readFileSync(auditPath, "utf-8").trim().split("\n").filter(Boolean);
   const recent = lines.slice(-limit);
   const entries = recent.map((line) => {
     try {
@@ -13819,9 +14201,9 @@ init_config();
 init_policy();
 init_dlp();
 import chalk21 from "chalk";
-import fs32 from "fs";
-import path35 from "path";
-import os28 from "os";
+import fs33 from "fs";
+import path36 from "path";
+import os29 from "os";
 var CLAUDE_PRICING2 = {
   "claude-opus-4-6": { i: 5e-6, o: 25e-6, cw: 625e-8, cr: 5e-7 },
   "claude-opus-4-5": { i: 5e-6, o: 25e-6, cw: 625e-8, cr: 5e-7 },
@@ -13889,7 +14271,7 @@ function buildRuleSources() {
   return sources;
 }
 function scanClaudeHistory(startDate) {
-  const projectsDir = path35.join(os28.homedir(), ".claude", "projects");
+  const projectsDir = path36.join(os29.homedir(), ".claude", "projects");
   const result = {
     filesScanned: 0,
     sessions: 0,
@@ -13901,25 +14283,25 @@ function scanClaudeHistory(startDate) {
     firstDate: null,
     lastDate: null
   };
-  if (!fs32.existsSync(projectsDir)) return result;
+  if (!fs33.existsSync(projectsDir)) return result;
   let projDirs;
   try {
-    projDirs = fs32.readdirSync(projectsDir);
+    projDirs = fs33.readdirSync(projectsDir);
   } catch {
     return result;
   }
   const ruleSources = buildRuleSources();
   for (const proj of projDirs) {
-    const projPath = path35.join(projectsDir, proj);
+    const projPath = path36.join(projectsDir, proj);
     try {
-      if (!fs32.statSync(projPath).isDirectory()) continue;
+      if (!fs33.statSync(projPath).isDirectory()) continue;
     } catch {
       continue;
     }
-    const projLabel = decodeURIComponent(proj).replace(os28.homedir(), "~").slice(0, 40);
+    const projLabel = decodeURIComponent(proj).replace(os29.homedir(), "~").slice(0, 40);
     let files;
     try {
-      files = fs32.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
+      files = fs33.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
     } catch {
       continue;
     }
@@ -13928,7 +14310,7 @@ function scanClaudeHistory(startDate) {
       result.sessions++;
       let raw;
       try {
-        raw = fs32.readFileSync(path35.join(projPath, file), "utf-8");
+        raw = fs33.readFileSync(path36.join(projPath, file), "utf-8");
       } catch {
         continue;
       }
@@ -13969,6 +14351,9 @@ function scanClaudeHistory(startDate) {
           if (toolNameLower === "bash" || toolNameLower === "execute_bash") {
             result.bashCalls++;
           }
+          const rawCmd = String(input.command ?? "").trimStart();
+          if (/^node9\s+(scan|explain|report|tail|dlp|status|sessions|audit)\b/.test(rawCmd))
+            continue;
           const dlpMatch = scanArgs(input);
           if (dlpMatch) {
             const isDupe = result.dlpFindings.some(
@@ -13986,6 +14371,7 @@ function scanClaudeHistory(startDate) {
           }
           for (const source of ruleSources) {
             const { rule } = source;
+            if (rule.verdict === "allow") continue;
             if (rule.tool && !matchesPattern(toolNameLower, rule.tool)) continue;
             if (!evaluateSmartConditions(input, rule)) continue;
             const inputPreview = preview(input, 120);
@@ -14021,8 +14407,8 @@ function registerScanCommand(program2) {
     console.log("");
     console.log(chalk21.cyan.bold("\u{1F50D}  node9 scan") + chalk21.dim("  \u2014 what would node9 catch?"));
     console.log("");
-    const projectsDir = path35.join(os28.homedir(), ".claude", "projects");
-    if (!fs32.existsSync(projectsDir)) {
+    const projectsDir = path36.join(os29.homedir(), ".claude", "projects");
+    if (!fs33.existsSync(projectsDir)) {
       console.log(chalk21.yellow("  No Claude history found at ~/.claude/projects/"));
       console.log(chalk21.gray("  Install Claude Code, run a few sessions, then try again.\n"));
       return;
@@ -14134,8 +14520,8 @@ function registerScanCommand(program2) {
       );
       console.log("");
     }
-    const auditLog = path35.join(os28.homedir(), ".node9", "audit.log");
-    if (fs32.existsSync(auditLog)) {
+    const auditLog = path36.join(os29.homedir(), ".node9", "audit.log");
+    if (fs33.existsSync(auditLog)) {
       console.log(chalk21.green("  \u2705 node9 is active \u2014 future sessions are protected."));
       console.log(
         chalk21.dim("  Run ") + chalk21.cyan("node9 report") + chalk21.dim(" to see live stats.")
@@ -14152,9 +14538,9 @@ function registerScanCommand(program2) {
 // src/cli/commands/sessions.ts
 import chalk22 from "chalk";
-import fs33 from "fs";
-import path36 from "path";
-import os29 from "os";
+import fs34 from "fs";
+import path37 from "path";
+import os30 from "os";
 var CLAUDE_PRICING3 = {
   "claude-opus-4-6": { i: 5e-6, o: 25e-6, cw: 625e-8, cr: 5e-7 },
   "claude-opus-4-5": { i: 5e-6, o: 25e-6, cw: 625e-8, cr: 5e-7 },
@@ -14179,10 +14565,10 @@ function encodeProjectPath(projectPath) {
 }
 function sessionJsonlPath(projectPath, sessionId) {
   const encoded = encodeProjectPath(projectPath);
-  return path36.join(os29.homedir(), ".claude", "projects", encoded, `${sessionId}.jsonl`);
+  return path37.join(os30.homedir(), ".claude", "projects", encoded, `${sessionId}.jsonl`);
 }
 function projectLabel(projectPath) {
-  return projectPath.replace(os29.homedir(), "~");
+  return projectPath.replace(os30.homedir(), "~");
 }
 function parseHistoryLines(lines) {
   const entries = [];
@@ -14251,10 +14637,10 @@ function parseSessionLines(lines) {
   return { toolCalls, costUSD, hasSnapshot, modifiedFiles };
 }
 function loadAuditEntries(auditPath) {
-  const aPath = auditPath ?? path36.join(os29.homedir(), ".node9", "audit.log");
+  const aPath = auditPath ?? path37.join(os30.homedir(), ".node9", "audit.log");
   let raw;
   try {
-    raw = fs33.readFileSync(aPath, "utf-8");
+    raw = fs34.readFileSync(aPath, "utf-8");
   } catch {
     return [];
   }
@@ -14290,10 +14676,10 @@ function auditEntriesInWindow(entries, windowStart, windowEnd) {
   return result;
 }
 function buildSessions(days, historyPath) {
-  const hPath = historyPath ?? path36.join(os29.homedir(), ".claude", "history.jsonl");
+  const hPath = historyPath ?? path37.join(os30.homedir(), ".claude", "history.jsonl");
   let historyRaw;
   try {
-    historyRaw = fs33.readFileSync(hPath, "utf-8");
+    historyRaw = fs34.readFileSync(hPath, "utf-8");
   } catch {
     return [];
   }
@@ -14318,7 +14704,7 @@ function buildSessions(days, historyPath) {
     const jsonlFile = sessionJsonlPath(entry.project, entry.sessionId);
     let sessionLines = [];
     try {
-      sessionLines = fs33.readFileSync(jsonlFile, "utf-8").split("\n");
+      sessionLines = fs34.readFileSync(jsonlFile, "utf-8").split("\n");
     } catch {
     }
     const { toolCalls, costUSD, hasSnapshot, modifiedFiles } = parseSessionLines(sessionLines);
@@ -14569,8 +14955,8 @@ function registerSessionsCommand(program2) {
     console.log("");
     console.log(chalk22.cyan.bold("\u{1F4CB}  node9 sessions") + chalk22.dim("  \u2014 what your AI agent did"));
     console.log("");
-    const historyPath = path36.join(os29.homedir(), ".claude", "history.jsonl");
-    if (!fs33.existsSync(historyPath)) {
+    const historyPath = path37.join(os30.homedir(), ".claude", "history.jsonl");
+    if (!fs34.existsSync(historyPath)) {
       console.log(chalk22.yellow("  No Claude session history found at ~/.claude/history.jsonl"));
       console.log(chalk22.gray("  Install Claude Code, run a few sessions, then try again.\n"));
       return;
@@ -14602,12 +14988,12 @@ function registerSessionsCommand(program2) {
 // src/cli/commands/skill-pin.ts
 import chalk23 from "chalk";
-import fs34 from "fs";
-import os30 from "os";
-import path37 from "path";
+import fs35 from "fs";
+import os31 from "os";
+import path38 from "path";
 function wipeSkillSessions() {
   try {
-    fs34.rmSync(path37.join(os30.homedir(), ".node9", "skill-sessions"), {
+    fs35.rmSync(path38.join(os31.homedir(), ".node9", "skill-sessions"), {
       recursive: true,
       force: true
     });
@@ -14688,22 +15074,145 @@ function registerSkillPinCommand(program2) {
   });
 }
+// src/cli/commands/dlp.ts
+import chalk24 from "chalk";
+import fs36 from "fs";
+import path39 from "path";
+import os32 from "os";
+var AUDIT_LOG = path39.join(os32.homedir(), ".node9", "audit.log");
+var RESOLVED_FILE = path39.join(os32.homedir(), ".node9", "dlp-resolved.json");
+var ANSI_RE = /\x1b(?:\[[0-9;?]*[a-zA-Z]|\][^\x07\x1b]*(?:\x07|\x1b\\)|[@-_])/g;
+function stripAnsi(s) {
+  return s.replace(ANSI_RE, "");
+}
+function loadResolved() {
+  try {
+    const raw = JSON.parse(fs36.readFileSync(RESOLVED_FILE, "utf-8"));
+    return new Set(raw);
+  } catch {
+    return /* @__PURE__ */ new Set();
+  }
+}
+function saveResolved(resolved) {
+  try {
+    fs36.writeFileSync(RESOLVED_FILE, JSON.stringify([...resolved], null, 2), { mode: 384 });
+  } catch {
+  }
+}
+function loadDlpFindings() {
+  if (!fs36.existsSync(AUDIT_LOG)) return [];
+  return fs36.readFileSync(AUDIT_LOG, "utf-8").split("\n").flatMap((line) => {
+    if (!line.trim()) return [];
+    try {
+      const e = JSON.parse(line);
+      return e.source === "response-dlp" ? [e] : [];
+    } catch {
+      return [];
+    }
+  });
+}
+function entryKey(e) {
+  return `${e.ts}:${e.dlpPattern}:${e.dlpSample}`;
+}
+function fmtDate3(ts) {
+  try {
+    return new Date(ts).toLocaleDateString("en-US", {
+      month: "short",
+      day: "numeric",
+      year: "numeric"
+    });
+  } catch {
+    return ts.slice(0, 10);
+  }
+}
+function registerDlpCommand(program2) {
+  const cmd = program2.command("dlp").description("Show secrets detected in Claude response text and mark them resolved");
+  cmd.command("resolve").description("Mark all current DLP findings as resolved").action(() => {
+    const findings = loadDlpFindings();
+    if (findings.length === 0) {
+      console.log(chalk24.green("\n  \u2705 No response-DLP findings to resolve.\n"));
+      return;
+    }
+    const resolved = loadResolved();
+    for (const e of findings) resolved.add(entryKey(e));
+    saveResolved(resolved);
+    console.log(
+      chalk24.green(
+        `
+  \u2705 ${findings.length} finding${findings.length !== 1 ? "s" : ""} marked as resolved.
+`
+      )
+    );
+  });
+  cmd.action(() => {
+    const findings = loadDlpFindings();
+    const resolved = loadResolved();
+    const open = findings.filter((e) => !resolved.has(entryKey(e)));
+    const resolvedCount = findings.length - open.length;
+    console.log("");
+    console.log(
+      chalk24.bold.cyan("\u{1F510}  node9 dlp") + chalk24.dim("  \u2014 secrets found in Claude response text")
+    );
+    console.log("");
+    if (open.length === 0) {
+      if (resolvedCount > 0) {
+        console.log(chalk24.green(`  \u2705 No open findings  \xB7  ${resolvedCount} previously resolved`));
+      } else {
+        console.log(
+          chalk24.green("  \u2705 No findings \u2014 Claude has not leaked secrets in response text")
+        );
+      }
+      console.log("");
+      return;
+    }
+    console.log(
+      chalk24.bgRed.white.bold(` \u26A0\uFE0F  ${open.length} open finding${open.length !== 1 ? "s" : ""} `) + chalk24.dim(resolvedCount > 0 ? `  (${resolvedCount} resolved)` : "")
+    );
+    console.log("");
+    console.log(
+      chalk24.dim("  These secrets were included in Claude's response text \u2014 NOT blocked.")
+    );
+    console.log(chalk24.dim("  Rotate each affected key immediately.\n"));
+    for (const e of open) {
+      console.log(
+        "  " + chalk24.red("\u25CF") + "  " + chalk24.white(e.dlpPattern ?? "Secret") + chalk24.dim("  " + fmtDate3(e.ts))
+      );
+      if (e.dlpSample) {
+        console.log("     " + chalk24.dim("Sample: ") + chalk24.yellow(stripAnsi(e.dlpSample)));
+      }
+      if (e.project) {
+        console.log("     " + chalk24.dim("Project: ") + chalk24.dim(stripAnsi(e.project)));
+      }
+      console.log("");
+    }
+    console.log("  " + chalk24.bold("Next steps:"));
+    console.log("  " + chalk24.cyan("1.") + " Rotate any exposed keys shown above");
+    console.log(
+      "  " + chalk24.cyan("2.") + " Run " + chalk24.white("node9 dlp resolve") + " to acknowledge"
+    );
+    console.log(
+      "  " + chalk24.cyan("3.") + " Run " + chalk24.white("node9 report") + " for full audit history"
+    );
+    console.log("");
+  });
+}
 // src/cli.ts
 var { version } = JSON.parse(
-  fs37.readFileSync(path40.join(__dirname, "../package.json"), "utf-8")
+  fs39.readFileSync(path42.join(__dirname, "../package.json"), "utf-8")
 );
 var program = new Command();
 program.name("node9").description("The Sudo Command for AI Agents").version(version);
 program.command("login").argument("<apiKey>").option("--local", "Save key for audit/logging only \u2014 local config still controls all decisions").option("--profile <name>", 'Save as a named profile (default: "default")').action((apiKey, options) => {
   const DEFAULT_API_URL2 = "https://api.node9.ai/api/v1/intercept";
-  const credPath = path40.join(os33.homedir(), ".node9", "credentials.json");
-  if (!fs37.existsSync(path40.dirname(credPath)))
-    fs37.mkdirSync(path40.dirname(credPath), { recursive: true });
+  const credPath = path42.join(os35.homedir(), ".node9", "credentials.json");
+  if (!fs39.existsSync(path42.dirname(credPath)))
+    fs39.mkdirSync(path42.dirname(credPath), { recursive: true });
   const profileName = options.profile || "default";
   let existingCreds = {};
   try {
-    if (fs37.existsSync(credPath)) {
-      const raw = JSON.parse(fs37.readFileSync(credPath, "utf-8"));
+    if (fs39.existsSync(credPath)) {
+      const raw = JSON.parse(fs39.readFileSync(credPath, "utf-8"));
       if (raw.apiKey) {
         existingCreds = {
           default: { apiKey: raw.apiKey, apiUrl: raw.apiUrl || DEFAULT_API_URL2 }
@@ -14715,13 +15224,13 @@ program.command("login").argument("<apiKey>").option("--local", "Save key for au
   } catch {
   }
   existingCreds[profileName] = { apiKey, apiUrl: DEFAULT_API_URL2 };
-  fs37.writeFileSync(credPath, JSON.stringify(existingCreds, null, 2), { mode: 384 });
+  fs39.writeFileSync(credPath, JSON.stringify(existingCreds, null, 2), { mode: 384 });
   if (profileName === "default") {
-    const configPath = path40.join(os33.homedir(), ".node9", "config.json");
+    const configPath = path42.join(os35.homedir(), ".node9", "config.json");
     let config = {};
     try {
-      if (fs37.existsSync(configPath))
-        config = JSON.parse(fs37.readFileSync(configPath, "utf-8"));
+      if (fs39.existsSync(configPath))
+        config = JSON.parse(fs39.readFileSync(configPath, "utf-8"));
     } catch {
     }
     if (!config.settings || typeof config.settings !== "object") config.settings = {};
@@ -14736,47 +15245,61 @@ program.command("login").argument("<apiKey>").option("--local", "Save key for au
       approvers.cloud = false;
     }
     s.approvers = approvers;
-    if (!fs37.existsSync(path40.dirname(configPath)))
-      fs37.mkdirSync(path40.dirname(configPath), { recursive: true });
-    fs37.writeFileSync(configPath, JSON.stringify(config, null, 2), { mode: 384 });
+    if (!fs39.existsSync(path42.dirname(configPath)))
+      fs39.mkdirSync(path42.dirname(configPath), { recursive: true });
+    fs39.writeFileSync(configPath, JSON.stringify(config, null, 2), { mode: 384 });
   }
   if (options.profile && profileName !== "default") {
-    console.log(chalk25.green(`\u2705 Profile "${profileName}" saved`));
-    console.log(chalk25.gray(`   Switch to it per-session:  NODE9_PROFILE=${profileName} claude`));
+    console.log(chalk26.green(`\u2705 Profile "${profileName}" saved`));
+    console.log(chalk26.gray(`   Switch to it per-session:  NODE9_PROFILE=${profileName} claude`));
   } else if (options.local) {
-    console.log(chalk25.green(`\u2705 Privacy mode \u{1F6E1}\uFE0F`));
-    console.log(chalk25.gray(`   All decisions stay on this machine.`));
+    console.log(chalk26.green(`\u2705 Privacy mode \u{1F6E1}\uFE0F`));
+    console.log(chalk26.gray(`   All decisions stay on this machine.`));
   } else {
-    console.log(chalk25.green(`\u2705 Logged in \u2014 agent mode`));
-    console.log(chalk25.gray(`   Team policy enforced for all calls via Node9 cloud.`));
+    console.log(chalk26.green(`\u2705 Logged in \u2014 agent mode`));
+    console.log(chalk26.gray(`   Team policy enforced for all calls via Node9 cloud.`));
   }
 });
-program.command("addto").description("Integrate Node9 with an AI agent").addHelpText("after", "\n  Supported targets:  claude  gemini  cursor  windsurf  vscode  hud").argument("<target>", "The agent to protect: claude | gemini | cursor | windsurf | vscode | hud").action(async (target) => {
+program.command("addto").description("Integrate Node9 with an AI agent").addHelpText(
+  "after",
+  "\n  Supported targets:  claude  gemini  cursor  codex  windsurf  vscode  hud"
+).argument(
+  "<target>",
+  "The agent to protect: claude | gemini | cursor | codex | windsurf | vscode | hud"
+).action(async (target) => {
   if (target === "gemini") return await setupGemini();
   if (target === "claude") return await setupClaude();
   if (target === "cursor") return await setupCursor();
+  if (target === "codex") return await setupCodex();
   if (target === "windsurf") return await setupWindsurf();
   if (target === "vscode") return await setupVSCode();
   if (target === "hud") return setupHud();
   console.error(
-    chalk25.red(
-      `Unknown target: "${target}". Supported: claude, gemini, cursor, windsurf, vscode, hud`
+    chalk26.red(
+      `Unknown target: "${target}". Supported: claude, gemini, cursor, codex, windsurf, vscode, hud`
     )
   );
   process.exit(1);
 });
-program.command("setup").description('Alias for "addto" \u2014 integrate Node9 with an AI agent').addHelpText("after", "\n  Supported targets:  claude  gemini  cursor  windsurf  vscode  hud").argument("[target]", "The agent to protect: claude | gemini | cursor | windsurf | vscode | hud").action(async (target) => {
+program.command("setup").description('Alias for "addto" \u2014 integrate Node9 with an AI agent').addHelpText(
+  "after",
+  "\n  Supported targets:  claude  gemini  cursor  codex  windsurf  vscode  hud"
+).argument(
+  "[target]",
+  "The agent to protect: claude | gemini | cursor | codex | windsurf | vscode | hud"
+).action(async (target) => {
   if (!target) {
-    console.log(chalk25.cyan("\n\u{1F6E1}\uFE0F  Node9 Setup \u2014 integrate with your AI agent\n"));
-    console.log("  Usage:  " + chalk25.white("node9 setup <target>") + "\n");
+    console.log(chalk26.cyan("\n\u{1F6E1}\uFE0F  Node9 Setup \u2014 integrate with your AI agent\n"));
+    console.log("  Usage:  " + chalk26.white("node9 setup <target>") + "\n");
     console.log("  Targets:");
-    console.log("    " + chalk25.green("claude") + "    \u2014 Claude Code (hook mode)");
-    console.log("    " + chalk25.green("gemini") + "    \u2014 Gemini CLI (hook mode)");
-    console.log("    " + chalk25.green("cursor") + "    \u2014 Cursor (MCP proxy)");
-    console.log("    " + chalk25.green("windsurf") + "  \u2014 Windsurf (MCP proxy)");
-    console.log("    " + chalk25.green("vscode") + "    \u2014 VSCode / Copilot (MCP proxy)");
+    console.log("    " + chalk26.green("claude") + "    \u2014 Claude Code (hook mode)");
+    console.log("    " + chalk26.green("gemini") + "    \u2014 Gemini CLI (hook mode)");
+    console.log("    " + chalk26.green("cursor") + "    \u2014 Cursor (MCP proxy)");
+    console.log("    " + chalk26.green("codex") + "     \u2014 OpenAI Codex CLI (MCP proxy)");
+    console.log("    " + chalk26.green("windsurf") + "  \u2014 Windsurf (MCP proxy)");
+    console.log("    " + chalk26.green("vscode") + "    \u2014 VSCode / Copilot (MCP proxy)");
     process.stdout.write(
-      "    " + chalk25.green("hud") + "       \u2014 Claude Code security statusline\n"
+      "    " + chalk26.green("hud") + "       \u2014 Claude Code security statusline\n"
     );
     console.log("");
     return;
@@ -14785,61 +15308,67 @@ program.command("setup").description('Alias for "addto" \u2014 integrate Node9 w
   if (t === "gemini") return await setupGemini();
   if (t === "claude") return await setupClaude();
   if (t === "cursor") return await setupCursor();
+  if (t === "codex") return await setupCodex();
   if (t === "windsurf") return await setupWindsurf();
   if (t === "vscode") return await setupVSCode();
   if (t === "hud") return setupHud();
   console.error(
-    chalk25.red(
-      `Unknown target: "${target}". Supported: claude, gemini, cursor, windsurf, vscode, hud`
+    chalk26.red(
+      `Unknown target: "${target}". Supported: claude, gemini, cursor, codex, windsurf, vscode, hud`
     )
   );
   process.exit(1);
 });
-program.command("removefrom").description("Remove Node9 hooks from an AI agent configuration").addHelpText("after", "\n  Supported targets:  claude  gemini  cursor  windsurf  vscode  hud").argument(
+program.command("removefrom").description("Remove Node9 hooks from an AI agent configuration").addHelpText(
+  "after",
+  "\n  Supported targets:  claude  gemini  cursor  codex  windsurf  vscode  hud"
+).argument(
   "<target>",
-  "The agent to remove from: claude | gemini | cursor | windsurf | vscode | hud"
+  "The agent to remove from: claude | gemini | cursor | codex | windsurf | vscode | hud"
 ).action((target) => {
   let fn;
   if (target === "claude") fn = teardownClaude;
   else if (target === "gemini") fn = teardownGemini;
   else if (target === "cursor") fn = teardownCursor;
+  else if (target === "codex") fn = teardownCodex;
   else if (target === "windsurf") fn = teardownWindsurf;
   else if (target === "vscode") fn = teardownVSCode;
   else if (target === "hud") fn = teardownHud;
   else {
     console.error(
-      chalk25.red(
-        `Unknown target: "${target}". Supported: claude, gemini, cursor, windsurf, vscode, hud`
+      chalk26.red(
+        `Unknown target: "${target}". Supported: claude, gemini, cursor, codex, windsurf, vscode, hud`
       )
     );
     process.exit(1);
   }
-  console.log(chalk25.cyan(`
+  console.log(chalk26.cyan(`
 \u{1F6E1}\uFE0F  Node9: removing hooks from ${target}...
 `));
   try {
     fn();
   } catch (err2) {
-    console.error(chalk25.red(`  \u26A0\uFE0F  Failed: ${err2 instanceof Error ? err2.message : String(err2)}`));
+    console.error(chalk26.red(`  \u26A0\uFE0F  Failed: ${err2 instanceof Error ? err2.message : String(err2)}`));
     process.exit(1);
   }
-  console.log(chalk25.gray("\n  Restart the agent for changes to take effect."));
+  console.log(chalk26.gray("\n  Restart the agent for changes to take effect."));
 });
 program.command("uninstall").description("Remove all Node9 hooks and optionally delete config files").option("--purge", "Also delete ~/.node9/ directory (config, audit log, credentials)").action(async (options) => {
-  console.log(chalk25.cyan("\n\u{1F6E1}\uFE0F  Node9 Uninstall\n"));
-  console.log(chalk25.bold("Stopping daemon..."));
+  console.log(chalk26.cyan("\n\u{1F6E1}\uFE0F  Node9 Uninstall\n"));
+  console.log(chalk26.bold("Stopping daemon..."));
   try {
     stopDaemon();
-    console.log(chalk25.green("  \u2705 Daemon stopped"));
+    console.log(chalk26.green("  \u2705 Daemon stopped"));
   } catch {
-    console.log(chalk25.blue("  \u2139\uFE0F  Daemon was not running"));
+    console.log(chalk26.blue("  \u2139\uFE0F  Daemon was not running"));
   }
-  console.log(chalk25.bold("\nRemoving hooks..."));
+  console.log(chalk26.bold("\nRemoving hooks..."));
   let teardownFailed = false;
   for (const [label, fn] of [
     ["Claude", teardownClaude],
     ["Gemini", teardownGemini],
     ["Cursor", teardownCursor],
+    ["Codex", teardownCodex],
     ["Windsurf", teardownWindsurf],
     ["VSCode", teardownVSCode]
   ]) {
@@ -14848,45 +15377,45 @@ program.command("uninstall").description("Remove all Node9 hooks and optionally
     } catch (err2) {
       teardownFailed = true;
       console.error(
-        chalk25.red(
+        chalk26.red(
           `  \u26A0\uFE0F  Failed to remove ${label} hooks: ${err2 instanceof Error ? err2.message : String(err2)}`
         )
       );
     }
   }
   if (options.purge) {
-    const node9Dir = path40.join(os33.homedir(), ".node9");
-    if (fs37.existsSync(node9Dir)) {
+    const node9Dir = path42.join(os35.homedir(), ".node9");
+    if (fs39.existsSync(node9Dir)) {
       const confirmed = await confirm2({
         message: `Permanently delete ${node9Dir} (config, audit log, credentials)?`,
         default: false
       });
       if (confirmed) {
-        fs37.rmSync(node9Dir, { recursive: true });
-        if (fs37.existsSync(node9Dir)) {
+        fs39.rmSync(node9Dir, { recursive: true });
+        if (fs39.existsSync(node9Dir)) {
           console.error(
-            chalk25.red("\n  \u26A0\uFE0F  ~/.node9/ could not be fully deleted \u2014 remove it manually.")
+            chalk26.red("\n  \u26A0\uFE0F  ~/.node9/ could not be fully deleted \u2014 remove it manually.")
           );
         } else {
-          console.log(chalk25.green("\n  \u2705 Deleted ~/.node9/ (config, audit log, credentials)"));
+          console.log(chalk26.green("\n  \u2705 Deleted ~/.node9/ (config, audit log, credentials)"));
         }
       } else {
-        console.log(chalk25.yellow("\n  Skipped \u2014 ~/.node9/ was not deleted."));
+        console.log(chalk26.yellow("\n  Skipped \u2014 ~/.node9/ was not deleted."));
       }
     } else {
-      console.log(chalk25.blue("\n  \u2139\uFE0F  ~/.node9/ not found \u2014 nothing to delete"));
+      console.log(chalk26.blue("\n  \u2139\uFE0F  ~/.node9/ not found \u2014 nothing to delete"));
     }
   } else {
     console.log(
-      chalk25.gray("\n  ~/.node9/ kept \u2014 run with --purge to delete config and audit log")
+      chalk26.gray("\n  ~/.node9/ kept \u2014 run with --purge to delete config and audit log")
     );
   }
   if (teardownFailed) {
-    console.error(chalk25.red("\n  \u26A0\uFE0F  Some hooks could not be removed \u2014 see errors above."));
+    console.error(chalk26.red("\n  \u26A0\uFE0F  Some hooks could not be removed \u2014 see errors above."));
     process.exit(1);
   }
-  console.log(chalk25.green.bold("\n\u{1F6E1}\uFE0F  Node9 removed. Run: npm uninstall -g @node9/proxy"));
-  console.log(chalk25.gray("   Restart any open AI agent sessions for changes to take effect.\n"));
+  console.log(chalk26.green.bold("\n\u{1F6E1}\uFE0F  Node9 removed. Run: npm uninstall -g @node9/proxy"));
+  console.log(chalk26.gray("   Restart any open AI agent sessions for changes to take effect.\n"));
 });
 registerDoctorCommand(program, version);
 program.command("explain").description(
@@ -14899,7 +15428,7 @@ program.command("explain").description(
       try {
         args = JSON.parse(trimmed);
       } catch {
-        console.error(chalk25.red(`
+        console.error(chalk26.red(`
 \u274C Invalid JSON: ${trimmed}
 `));
         process.exit(1);
@@ -14910,54 +15439,54 @@ program.command("explain").description(
   }
   const result = await explainPolicy(tool, args);
   console.log("");
-  console.log(chalk25.cyan.bold("\u{1F6E1}\uFE0F  Node9 Explain"));
+  console.log(chalk26.cyan.bold("\u{1F6E1}\uFE0F  Node9 Explain"));
   console.log("");
-  console.log(`   ${chalk25.bold("Tool:")}    ${chalk25.white(result.tool)}`);
+  console.log(`   ${chalk26.bold("Tool:")}    ${chalk26.white(result.tool)}`);
   if (argsRaw) {
     const preview2 = argsRaw.length > 80 ? argsRaw.slice(0, 77) + "\u2026" : argsRaw;
-    console.log(`   ${chalk25.bold("Input:")}   ${chalk25.gray(preview2)}`);
+    console.log(`   ${chalk26.bold("Input:")}   ${chalk26.gray(preview2)}`);
   }
   console.log("");
-  console.log(chalk25.bold("Config Sources (Waterfall):"));
+  console.log(chalk26.bold("Config Sources (Waterfall):"));
   for (const tier of result.waterfall) {
-    const num3 = chalk25.gray(`  ${tier.tier}.`);
+    const num3 = chalk26.gray(`  ${tier.tier}.`);
     const label = tier.label.padEnd(16);
     let statusStr;
     if (tier.tier === 1) {
-      statusStr = chalk25.gray(tier.note ?? "");
+      statusStr = chalk26.gray(tier.note ?? "");
     } else if (tier.status === "active") {
-      const loc = tier.path ? chalk25.gray(tier.path) : "";
-      const note = tier.note ? chalk25.gray(`(${tier.note})`) : "";
-      statusStr = chalk25.green("\u2713 active") + (loc ? "  " + loc : "") + (note ? "  " + note : "");
+      const loc = tier.path ? chalk26.gray(tier.path) : "";
+      const note = tier.note ? chalk26.gray(`(${tier.note})`) : "";
+      statusStr = chalk26.green("\u2713 active") + (loc ? "  " + loc : "") + (note ? "  " + note : "");
     } else {
-      statusStr = chalk25.gray("\u25CB " + (tier.note ?? "not found"));
+      statusStr = chalk26.gray("\u25CB " + (tier.note ?? "not found"));
     }
-    console.log(`${num3} ${chalk25.white(label)} ${statusStr}`);
+    console.log(`${num3} ${chalk26.white(label)} ${statusStr}`);
   }
   console.log("");
-  console.log(chalk25.bold("Policy Evaluation:"));
+  console.log(chalk26.bold("Policy Evaluation:"));
   for (const step of result.steps) {
     const isFinal = step.isFinal;
     let icon;
-    if (step.outcome === "allow") icon = chalk25.green("  \u2705");
-    else if (step.outcome === "review") icon = chalk25.red("  \u{1F534}");
-    else if (step.outcome === "skip") icon = chalk25.gray("  \u2500 ");
-    else icon = chalk25.gray("  \u25CB ");
+    if (step.outcome === "allow") icon = chalk26.green("  \u2705");
+    else if (step.outcome === "review") icon = chalk26.red("  \u{1F534}");
+    else if (step.outcome === "skip") icon = chalk26.gray("  \u2500 ");
+    else icon = chalk26.gray("  \u25CB ");
     const name = step.name.padEnd(18);
-    const nameStr = isFinal ? chalk25.white.bold(name) : chalk25.white(name);
-    const detail = isFinal ? chalk25.white(step.detail) : chalk25.gray(step.detail);
-    const arrow = isFinal ? chalk25.yellow("  \u2190 STOP") : "";
+    const nameStr = isFinal ? chalk26.white.bold(name) : chalk26.white(name);
+    const detail = isFinal ? chalk26.white(step.detail) : chalk26.gray(step.detail);
+    const arrow = isFinal ? chalk26.yellow("  \u2190 STOP") : "";
     console.log(`${icon} ${nameStr} ${detail}${arrow}`);
   }
   console.log("");
   if (result.decision === "allow") {
-    console.log(chalk25.green.bold("  Decision: \u2705 ALLOW") + chalk25.gray("  \u2014 no approval needed"));
+    console.log(chalk26.green.bold("  Decision: \u2705 ALLOW") + chalk26.gray("  \u2014 no approval needed"));
   } else {
     console.log(
-      chalk25.red.bold("  Decision: \u{1F534} REVIEW") + chalk25.gray("  \u2014 human approval required")
+      chalk26.red.bold("  Decision: \u{1F534} REVIEW") + chalk26.gray("  \u2014 human approval required")
     );
     if (result.blockedByLabel) {
-      console.log(chalk25.gray(`  Reason:   ${result.blockedByLabel}`));
+      console.log(chalk26.gray(`  Reason:   ${result.blockedByLabel}`));
     }
   }
   console.log("");
@@ -14972,7 +15501,7 @@ program.command("tail").description("Stream live agent activity to the terminal"
   try {
     await startTail2(options);
   } catch (err2) {
-    console.error(chalk25.red(`\u274C ${err2 instanceof Error ? err2.message : String(err2)}`));
+    console.error(chalk26.red(`\u274C ${err2 instanceof Error ? err2.message : String(err2)}`));
     process.exit(1);
   }
 });
@@ -15005,14 +15534,14 @@ Claude Code spawns this command every ~300ms and writes a JSON payload to stdin.
 Run "node9 addto claude" to register it as the statusLine.`
 ).argument("[subcommand]", 'Optional: "debug on" / "debug off" to toggle stdin logging').argument("[state]", 'on|off \u2014 used with "debug" subcommand').action(async (subcommand, state) => {
   if (subcommand === "debug") {
-    const flagFile = path40.join(os33.homedir(), ".node9", "hud-debug");
+    const flagFile = path42.join(os35.homedir(), ".node9", "hud-debug");
     if (state === "on") {
-      fs37.mkdirSync(path40.dirname(flagFile), { recursive: true });
-      fs37.writeFileSync(flagFile, "");
+      fs39.mkdirSync(path42.dirname(flagFile), { recursive: true });
+      fs39.writeFileSync(flagFile, "");
       console.log("HUD debug logging enabled \u2192 ~/.node9/hud-debug.log");
       console.log("Tail it with: tail -f ~/.node9/hud-debug.log");
     } else if (state === "off") {
-      if (fs37.existsSync(flagFile)) fs37.unlinkSync(flagFile);
+      if (fs39.existsSync(flagFile)) fs39.unlinkSync(flagFile);
       console.log("HUD debug logging disabled.");
     } else {
       console.error("Usage: node9 hud debug on|off");
@@ -15027,7 +15556,7 @@ program.command("pause").description("Temporarily disable Node9 protection for a
   const ms = parseDuration(options.duration);
   if (ms === null) {
     console.error(
-      chalk25.red(`
+      chalk26.red(`
 \u274C  Invalid duration: "${options.duration}". Use format like 15m, 1h, 30s.
 `)
     );
@@ -15035,20 +15564,20 @@ program.command("pause").description("Temporarily disable Node9 protection for a
   }
   pauseNode9(ms, options.duration);
   const expiresAt = new Date(Date.now() + ms).toLocaleTimeString();
-  console.log(chalk25.yellow(`
+  console.log(chalk26.yellow(`
 \u23F8  Node9 paused until ${expiresAt}`));
-  console.log(chalk25.gray(`   All tool calls will be allowed without review.`));
-  console.log(chalk25.gray(`   Run "node9 resume" to re-enable early.
+  console.log(chalk26.gray(`   All tool calls will be allowed without review.`));
+  console.log(chalk26.gray(`   Run "node9 resume" to re-enable early.
 `));
 });
 program.command("resume").description("Re-enable Node9 protection immediately").action(() => {
   const { paused } = checkPause();
   if (!paused) {
-    console.log(chalk25.gray("\nNode9 is already active \u2014 nothing to resume.\n"));
+    console.log(chalk26.gray("\nNode9 is already active \u2014 nothing to resume.\n"));
     return;
   }
   resumeNode9();
-  console.log(chalk25.green("\n\u25B6  Node9 resumed \u2014 protection is active.\n"));
+  console.log(chalk26.green("\n\u25B6  Node9 resumed \u2014 protection is active.\n"));
 });
 var HOOK_BASED_AGENTS = {
   claude: "claude",
@@ -15061,15 +15590,15 @@ program.argument("[command...]", "The agent command to run (e.g., gemini)").acti
     if (HOOK_BASED_AGENTS[firstArg2] !== void 0) {
       const target = HOOK_BASED_AGENTS[firstArg2];
       console.error(
-        chalk25.yellow(`
+        chalk26.yellow(`
 \u26A0\uFE0F  Node9 proxy mode does not support "${target}" directly.`)
       );
-      console.error(chalk25.white(`
+      console.error(chalk26.white(`
    "${target}" uses its own hook system. Use:`));
       console.error(
-        chalk25.green(`     node9 addto ${target}   `) + chalk25.gray("# one-time setup")
+        chalk26.green(`     node9 addto ${target}   `) + chalk26.gray("# one-time setup")
       );
-      console.error(chalk25.green(`     ${target}              `) + chalk25.gray("# run normally"));
+      console.error(chalk26.green(`     ${target}              `) + chalk26.gray("# run normally"));
       process.exit(1);
     }
     const runArgs = firstArg2 === "shell" ? commandArgs.slice(1) : commandArgs;
@@ -15086,7 +15615,7 @@ program.argument("[command...]", "The agent command to run (e.g., gemini)").acti
       }
     );
     if (result.noApprovalMechanism && !isDaemonRunning() && !process.env.NODE9_NO_AUTO_DAEMON && getConfig().settings.autoStartDaemon) {
-      console.error(chalk25.cyan("\n\u{1F6E1}\uFE0F  Node9: Starting approval daemon automatically..."));
+      console.error(chalk26.cyan("\n\u{1F6E1}\uFE0F  Node9: Starting approval daemon automatically..."));
       const daemonReady = await autoStartDaemonAndWait();
       if (daemonReady) result = await authorizeHeadless("shell", { command: fullCommand });
     }
@@ -15099,12 +15628,12 @@ program.argument("[command...]", "The agent command to run (e.g., gemini)").acti
     }
     if (!result.approved) {
       console.error(
-        chalk25.red(`
+        chalk26.red(`
 \u274C Node9 Blocked: ${result.reason || "Dangerous command detected."}`)
       );
       process.exit(1);
     }
-    console.error(chalk25.green("\n\u2705 Approved \u2014 running command...\n"));
+    console.error(chalk26.green("\n\u2705 Approved \u2014 running command...\n"));
     await runProxy(fullCommand);
   } else {
     program.help();
@@ -15118,14 +15647,15 @@ registerSyncCommand(program);
 registerAgentsCommand(program);
 registerScanCommand(program);
 registerSessionsCommand(program);
+registerDlpCommand(program);
 if (process.argv[2] !== "daemon") {
   process.on("unhandledRejection", (reason) => {
     const isCheckHook = process.argv[2] === "check";
     if (isCheckHook) {
       if (process.env.NODE9_DEBUG === "1" || getConfig().settings.enableHookLogDebug) {
-        const logPath = path40.join(os33.homedir(), ".node9", "hook-debug.log");
+        const logPath = path42.join(os35.homedir(), ".node9", "hook-debug.log");
         const msg = reason instanceof Error ? reason.message : String(reason);
-        fs37.appendFileSync(logPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] UNHANDLED: ${msg}
+        fs39.appendFileSync(logPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] UNHANDLED: ${msg}
 `);
       }
       process.exit(0);