@node9/proxy 1.15.0 → 1.17.0

package/dist/cli.js

@@ -4732,15 +4732,17 @@ async function authorizeHeadless(toolName, args, meta, options) {
   if (!options?.calledFromDaemon) {
     const actId = (0, import_crypto4.randomUUID)();
     const actTs = Date.now();
+    const stripAnsi2 = (s) => s.replace(/\x1b(?:\[[0-9;?]*[a-zA-Z]|\][^\x07\x1b]*(?:\x07|\x1b\\)|[@-_])/g, "");
+    const sanitizedAgent = meta?.agent ? stripAnsi2(meta.agent).slice(0, 80) : void 0;
+    const sanitizedMcpServer = meta?.mcpServer ? stripAnsi2(meta.mcpServer).slice(0, 40) : void 0;
     const socketOk = await notifyActivity({
       id: actId,
       ts: actTs,
       tool: toolName,
       args,
       status: "pending",
-      // Strip ANSI escape sequences — agent name comes from caller-supplied metadata
-      // and may be displayed in a terminal (node9 tail/watch), enabling injection.
-      agent: meta?.agent ? meta.agent.replace(/\x1b(?:\[[0-9;?]*[a-zA-Z]|\][^\x07\x1b]*(?:\x07|\x1b\\)|[@-_])/g, "").slice(0, 80) : void 0
+      agent: sanitizedAgent,
+      mcpServer: sanitizedMcpServer
     });
     const result = await _authorizeHeadlessCore(toolName, args, meta, {
       ...options,
@@ -4758,7 +4760,9 @@ async function authorizeHeadless(toolName, args, meta, options) {
         status: result.approved ? "allow" : result.blockedByLabel?.includes("DLP") ? "dlp" : result.blockedByLabel?.includes("Taint") ? "taint" : "block",
         label: result.blockedByLabel,
         ruleHit: result.ruleHit,
-        observeWouldBlock: result.observeWouldBlock
+        observeWouldBlock: result.observeWouldBlock,
+        agent: sanitizedAgent,
+        mcpServer: sanitizedMcpServer
       });
     }
     return result;
@@ -10380,7 +10384,7 @@ function openBrowserLocal() {
   } catch {
   }
 }
-async function autoStartDaemonAndWait(openBrowser2 = true) {
+async function autoStartDaemonAndWait(openBrowser = false) {
   if (isTestingMode()) return false;
   if (!import_path15.default.isAbsolute(process.argv[1])) return false;
   let resolvedArgv1;
@@ -10400,7 +10404,7 @@ async function autoStartDaemonAndWait(openBrowser2 = true) {
       env: {
         ...process.env,
         NODE9_AUTO_STARTED: "1",
-        ...openBrowser2 && { NODE9_BROWSER_OPENED: "1" }
+        ...openBrowser && { NODE9_BROWSER_OPENED: "1" }
       }
     });
     child.unref();
@@ -10412,7 +10416,7 @@ async function autoStartDaemonAndWait(openBrowser2 = true) {
           signal: AbortSignal.timeout(500)
         });
         if (res.ok) {
-          if (openBrowser2) {
+          if (openBrowser) {
             openBrowserLocal();
           }
           return true;
@@ -11801,370 +11805,681 @@ function printRuleGroup(rule, topN, drillDown, previewWidth) {
     );
   }
 }
-function registerScanCommand(program2) {
-  program2.command("scan").description("Forecast: scan agent history and show what node9 would catch if installed").option("--all", "Scan all history (default: last 30 days)").option("--days <n>", "Scan last N days of history", "30").option("--top <n>", "Max findings to show per rule (default: 5)", "5").option("--drill-down", "Show all findings with full commands and session IDs").action(async (options) => {
-    const drillDown = options.drillDown ?? false;
-    const topN = drillDown ? Infinity : Math.max(1, parseInt(options.top, 10) || 5);
-    const previewWidth = 70;
-    const startDate = options.all ? null : (() => {
-      const d = /* @__PURE__ */ new Date();
-      d.setDate(d.getDate() - (parseInt(options.days, 10) || 30));
-      d.setHours(0, 0, 0, 0);
-      return d;
-    })();
-    const isWired = getAgentsStatus().some((a) => a.wired);
-    console.log("");
-    if (!isWired) {
-      console.log(
-        import_chalk3.default.bold("\u{1F6E1}  node9") + import_chalk3.default.dim("  \u2014  security layer for AI coding agents")
-      );
-      console.log(
-        import_chalk3.default.dim("   Intercepts dangerous tool calls before they execute. No config needed.")
-      );
-      console.log("");
+function compactRuleLabel(name) {
+  let label = name.replace(/^shield:[^:]+:/, "");
+  label = label.replace(/^(block|review|allow)-/, "");
+  return label.replace(/-+/g, "-");
+}
+function renderCompactScorecard(input) {
+  const { scan, summary, blast, blastExposures, blockedCount, reviewCount } = input;
+  const totalRisky = scan.findings.length + scan.dlpFindings.length;
+  const dateRange = scan.firstDate && scan.lastDate ? `${fmtTs(scan.firstDate)} \u2013 ${fmtTs(scan.lastDate)}` : "";
+  console.log(
+    import_chalk3.default.bold("\u{1F6E1}  Node9 Scan") + import_chalk3.default.dim("  \xB7  ") + import_chalk3.default.white(num(scan.sessions)) + import_chalk3.default.dim(" sessions  \xB7  ") + import_chalk3.default.white(num(scan.totalToolCalls)) + import_chalk3.default.dim(" tool calls") + (dateRange ? import_chalk3.default.dim("  \xB7  " + dateRange) : "")
+  );
+  console.log("");
+  const scoreColor = blast.score >= 80 ? import_chalk3.default.green : blast.score >= 50 ? import_chalk3.default.yellow : import_chalk3.default.red;
+  const scoreSeverity = blast.score >= 80 ? "Good" : blast.score >= 50 ? "At Risk" : "Critical";
+  console.log(
+    import_chalk3.default.bold("Security Score: ") + scoreColor.bold(`${blast.score}/100`) + import_chalk3.default.dim("  \xB7  ") + scoreColor(scoreSeverity)
+  );
+  if (scan.totalCostUSD > 0) {
+    console.log(
+      import_chalk3.default.bold(fmtCost(scan.totalCostUSD)) + import_chalk3.default.dim(" AI spend  \xB7  ") + import_chalk3.default.bold(`${totalRisky}`) + import_chalk3.default.dim(` risky operation${totalRisky !== 1 ? "s" : ""}`)
+    );
+  }
+  console.log("");
+  if (scan.dlpFindings.length > 0) {
+    const patternCounts = /* @__PURE__ */ new Map();
+    for (const f of scan.dlpFindings) {
+      patternCounts.set(f.patternName, (patternCounts.get(f.patternName) ?? 0) + 1);
     }
+    const topPatterns = [...patternCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3).map(([name, count]) => count > 1 ? `${name} \xD7${count}` : name).join(", ");
     console.log(
-      import_chalk3.default.cyan.bold("\u{1F50D}  Scanning your AI history") + import_chalk3.default.dim("  \u2014 what would node9 have caught?")
+      import_chalk3.default.red("\u{1F511}  ") + import_chalk3.default.red.bold(String(scan.dlpFindings.length).padEnd(4)) + import_chalk3.default.dim("credential leak".padEnd(20)) + import_chalk3.default.dim(`(${topPatterns})`)
     );
-    console.log("");
-    const useTTY = process.stdout.isTTY === true && process.env.NODE9_WRAPPER !== "1";
-    if (!useTTY) {
-      process.stdout.write(
-        "  " + import_chalk3.default.dim("Scanning your history \u2014 this may take a moment...\n")
-      );
+  }
+  if (blockedCount > 0) {
+    const blockedRules = [];
+    for (const section of summary.sections) {
+      for (const rule of section.rules) {
+        if (rule.verdict === "block") {
+          blockedRules.push({ name: rule.name, count: rule.findings.length });
+        }
+      }
     }
-    const totalFiles = countScanFiles();
-    let filesScanned = 0;
-    let linesScanned = 0;
-    let lastRender = 0;
-    const onProgress = (done) => {
-      filesScanned = done;
-      if (useTTY) renderProgressBar(filesScanned, totalFiles, linesScanned);
-      lastRender = Date.now();
-    };
-    const onLine = () => {
-      linesScanned++;
-      const now = Date.now();
-      if (useTTY && now - lastRender >= 80) {
-        lastRender = now;
-        renderProgressBar(filesScanned, totalFiles, linesScanned);
+    const topBlocked = blockedRules.sort((a, b) => b.count - a.count).slice(0, 3).map(
+      (r) => r.count > 1 ? `${compactRuleLabel(r.name)} \xD7${r.count}` : compactRuleLabel(r.name)
+    ).join(", ");
+    console.log(
+      import_chalk3.default.red("\u{1F6D1}  ") + import_chalk3.default.red.bold(String(blockedCount).padEnd(4)) + import_chalk3.default.dim("would have blocked".padEnd(20)) + import_chalk3.default.dim(`(${topBlocked})`)
+    );
+  }
+  if (scan.loopFindings.length > 0) {
+    const wastedCalls = scan.loopFindings.reduce((s, l) => s + Math.max(0, l.count - 1), 0);
+    const wastePct = scan.totalToolCalls > 0 ? Math.round(wastedCalls / scan.totalToolCalls * 100) : 0;
+    const wasteParts = [];
+    if (wastePct > 0) wasteParts.push(`${wastePct}% wasted`);
+    if (summary.loopWastedUSD > 0) wasteParts.push("~" + fmtCost(summary.loopWastedUSD));
+    const wasteSummary = wasteParts.length ? `(${wasteParts.join("  \xB7  ")})` : "";
+    console.log(
+      import_chalk3.default.yellow("\u{1F501}  ") + import_chalk3.default.yellow.bold(String(scan.loopFindings.length).padEnd(4)) + import_chalk3.default.dim("agent loops".padEnd(20)) + import_chalk3.default.dim(wasteSummary)
+    );
+  }
+  if (reviewCount > 0) {
+    const reviewRules = [];
+    for (const section of summary.sections) {
+      for (const rule of section.rules) {
+        if (rule.verdict !== "block") {
+          reviewRules.push({ name: rule.name, count: rule.findings.length });
+        }
       }
-    };
-    if (useTTY) renderProgressBar(0, totalFiles, 0);
-    const claudeScan = scanClaudeHistory(startDate, onProgress, onLine);
-    const geminiScan = scanGeminiHistory(
-      startDate,
-      (done) => onProgress(claudeScan.filesScanned + done),
-      onLine
+    }
+    const topReview = reviewRules.sort((a, b) => b.count - a.count).slice(0, 3).map(
+      (r) => r.count > 1 ? `${compactRuleLabel(r.name)} \xD7${r.count}` : compactRuleLabel(r.name)
+    ).join(", ");
+    console.log(
+      import_chalk3.default.yellow("\u{1F441}  ") + import_chalk3.default.yellow.bold(String(reviewCount).padEnd(4)) + import_chalk3.default.dim("flagged for review".padEnd(20)) + import_chalk3.default.dim(`(${topReview})`)
     );
-    const codexScan = scanCodexHistory(
-      startDate,
-      (done) => onProgress(claudeScan.filesScanned + geminiScan.filesScanned + done),
-      onLine
+  }
+  console.log("");
+  if (blastExposures > 0) {
+    const categories = /* @__PURE__ */ new Set();
+    for (const r of blast.reachable) {
+      const lower = r.label.toLowerCase();
+      if (lower.includes("ssh")) categories.add("ssh");
+      else if (lower.includes("aws")) categories.add("aws");
+      else if (lower.includes("gcloud") || lower.includes("gcp")) categories.add("gcp");
+      else if (lower.includes("docker")) categories.add("docker");
+      else if (lower.includes("netrc")) categories.add("netrc");
+      else if (lower.includes("kube")) categories.add("k8s");
+      else if (lower.includes("npmrc")) categories.add("npm");
+      else categories.add("other");
+    }
+    if (blast.envFindings.length > 0) categories.add("env");
+    const catList = [...categories].slice(0, 6).join(" \xD7 ");
+    console.log(
+      import_chalk3.default.red("\u{1F52D}  ") + import_chalk3.default.dim("Blast radius".padEnd(24)) + import_chalk3.default.dim(`${catList} (${blastExposures} exposure${blastExposures !== 1 ? "s" : ""})`)
     );
-    const scan = mergeScans(mergeScans(claudeScan, geminiScan), codexScan);
-    scan.dlpFindings.push(...scanShellConfig());
-    const summary = buildScanSummary([
-      { id: "claude", label: "Claude", icon: "\u{1F916}", scan: claudeScan },
-      { id: "gemini", label: "Gemini", icon: "\u264A", scan: geminiScan },
-      { id: "codex", label: "Codex", icon: "\u{1F52E}", scan: codexScan }
-    ]);
-    if (useTTY) process.stdout.write("\r" + " ".repeat(60) + "\r");
-    if (scan.filesScanned === 0) {
-      console.log(import_chalk3.default.yellow("  No session history found."));
-      console.log(
-        import_chalk3.default.gray(
-          "  Supported: Claude Code (~/.claude/projects/) \xB7 Gemini CLI (~/.gemini/tmp/)\n"
-        )
-      );
-      return;
+    console.log("");
+  }
+  console.log(
+    import_chalk3.default.dim("\u2192  ") + import_chalk3.default.cyan("npx node9-ai scan") + import_chalk3.default.dim("       run this on your machine")
+  );
+  console.log(import_chalk3.default.dim("\u2192  github.com/node9-ai/node9-proxy"));
+  console.log("");
+}
+function classifyRuleSeverity(name, verdict) {
+  const n = name.toLowerCase();
+  const criticalPatterns = [
+    "rm-rf",
+    "eval-remote",
+    "eval-curl",
+    "read-aws",
+    "read-ssh",
+    "read-gcp",
+    "read-cred",
+    "delete-repo",
+    "helm-uninstall",
+    "drop-table",
+    "drop-database",
+    "drop-collection",
+    "truncate",
+    "flushall",
+    "flushdb",
+    "pipe-shell"
+  ];
+  if (criticalPatterns.some((p) => n.includes(p))) return "critical";
+  const highPatterns = [
+    "force-push",
+    "force_push",
+    "git-destructive",
+    "reset-hard",
+    "rebase",
+    "delete-branch",
+    "delete-remote"
+  ];
+  if (highPatterns.some((p) => n.includes(p))) return "high";
+  if (verdict === "block") return "high";
+  return "medium";
+}
+function narrativeRuleLabel(name) {
+  const stripped = compactRuleLabel(name);
+  const map = {
+    "read-aws": "AWS credentials read",
+    "read-ssh": "SSH private key read",
+    "read-gcp": "GCP credentials read",
+    "read-cred": "credential file read",
+    "delete-repo": "GitHub repository deletion",
+    "helm-uninstall": "helm uninstall",
+    "rm-rf-home": "rm -rf on home directory",
+    "eval-remote": "eval of remote download",
+    "pipe-shell": "curl | bash",
+    "drop-table": "DROP TABLE",
+    "drop-database": "DROP DATABASE",
+    truncate: "TRUNCATE",
+    flushall: "Redis FLUSHALL",
+    flushdb: "Redis FLUSHDB",
+    "force-push": "force pushes",
+    "git-destructive": "destructive git operations",
+    rm: "rm calls",
+    sudo: "sudo calls",
+    "eval-dynamic": "dynamic eval",
+    "config-set": "Redis CONFIG SET"
+  };
+  for (const [key, label] of Object.entries(map)) {
+    if (stripped.includes(key)) return label;
+  }
+  return stripped;
+}
+function renderNarrativeScorecard(input) {
+  const { scan, summary, blast, blastExposures } = input;
+  const critical = [];
+  const high = [];
+  const medium = [];
+  if (scan.dlpFindings.length > 0) {
+    const patterns = /* @__PURE__ */ new Map();
+    for (const f of scan.dlpFindings) {
+      patterns.set(f.patternName, (patterns.get(f.patternName) ?? 0) + 1);
+    }
+    const top = [...patterns.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3).map(([name, n]) => n > 1 ? `${name} \xD7${n}` : name).join(", ");
+    critical.push({
+      label: `${scan.dlpFindings.length} credential leak${scan.dlpFindings.length !== 1 ? "s" : ""} (${top})`,
+      count: scan.dlpFindings.length
+    });
+  }
+  for (const section of summary.sections) {
+    for (const rule of section.rules) {
+      const sev = classifyRuleSeverity(rule.name, rule.verdict);
+      const label = narrativeRuleLabel(rule.name);
+      const count = rule.findings.length;
+      const display = count > 1 ? `${label} \xD7${count}` : label;
+      const entry = { label: display, count };
+      if (sev === "critical") critical.push(entry);
+      else if (sev === "high") high.push(entry);
+      else medium.push(entry);
+    }
+  }
+  if (blastExposures > 0) {
+    high.push({
+      label: `${blastExposures} credential file${blastExposures !== 1 ? "s" : ""} reachable on disk`,
+      count: blastExposures
+    });
+  }
+  if (scan.loopFindings.length > 0) {
+    const wastedCalls = scan.loopFindings.reduce((s, l) => s + Math.max(0, l.count - 1), 0);
+    const wastePct = scan.totalToolCalls > 0 ? Math.round(wastedCalls / scan.totalToolCalls * 100) : 0;
+    const cost = summary.loopWastedUSD > 0 ? `, ~${fmtCost(summary.loopWastedUSD)} wasted` : "";
+    medium.push({
+      label: `${scan.loopFindings.length} agent loops (${wastePct}% of calls${cost})`,
+      count: scan.loopFindings.length
+    });
+  }
+  const sortByCount = (a, b) => b.count - a.count;
+  critical.sort(sortByCount);
+  high.sort(sortByCount);
+  medium.sort(sortByCount);
+  const criticalCount = critical.reduce((s, e) => s + e.count, 0);
+  const highCount = high.reduce((s, e) => s + e.count, 0);
+  const mediumCount = medium.reduce((s, e) => s + e.count, 0);
+  const dateRange = scan.firstDate && scan.lastDate ? `${fmtTs(scan.firstDate)} \u2013 ${fmtTs(scan.lastDate)}` : "";
+  console.log(
+    import_chalk3.default.bold("\u{1F6E1}  Node9 Scan") + import_chalk3.default.dim("  \xB7  ") + import_chalk3.default.white(num(scan.sessions)) + import_chalk3.default.dim(" sessions") + (scan.totalCostUSD > 0 ? import_chalk3.default.dim("  \xB7  ") + import_chalk3.default.bold(fmtCost(scan.totalCostUSD)) + import_chalk3.default.dim(" spend") : "") + (dateRange ? import_chalk3.default.dim("  \xB7  " + dateRange) : "")
+  );
+  console.log("");
+  const scoreColor = blast.score >= 80 ? import_chalk3.default.green : blast.score >= 50 ? import_chalk3.default.yellow : import_chalk3.default.red;
+  const scoreSeverity = blast.score >= 80 ? "Good" : blast.score >= 50 ? "At Risk" : "Critical";
+  console.log(
+    (blast.score < 50 ? import_chalk3.default.red.bold("\u26A0  ") : "") + import_chalk3.default.bold("Security Score: ") + scoreColor.bold(`${blast.score}/100`) + import_chalk3.default.dim("  \xB7  ") + scoreColor(scoreSeverity)
+  );
+  console.log("");
+  if (criticalCount > 0) {
+    console.log(
+      import_chalk3.default.red.bold("  \u{1F534}  CRITICAL  ") + import_chalk3.default.red(`${criticalCount} finding${criticalCount !== 1 ? "s" : ""}`)
+    );
+    for (const entry of critical.slice(0, 5)) {
+      console.log(import_chalk3.default.dim("     \u2022 ") + import_chalk3.default.red(entry.label));
+    }
+    if (critical.length > 5) {
+      const remaining = critical.length - 5;
+      console.log(import_chalk3.default.dim(`     \u2022 \u2026 and ${remaining} more`));
     }
-    const rangeLabel = options.all ? import_chalk3.default.dim("all time") : import_chalk3.default.dim(`last ${options.days ?? 30} days`);
-    const dateRange = scan.firstDate && scan.lastDate ? import_chalk3.default.dim(`  ${fmtTs(scan.firstDate)} \u2013 ${fmtTs(scan.lastDate)}`) : "";
-    const breakdownParts = [];
-    if (claudeScan.sessions > 0)
-      breakdownParts.push(import_chalk3.default.cyan(String(claudeScan.sessions)) + import_chalk3.default.dim(" Claude"));
-    if (geminiScan.sessions > 0)
-      breakdownParts.push(import_chalk3.default.blue(String(geminiScan.sessions)) + import_chalk3.default.dim(" Gemini"));
-    if (codexScan.sessions > 0)
-      breakdownParts.push(import_chalk3.default.magenta(String(codexScan.sessions)) + import_chalk3.default.dim(" Codex"));
-    const sessionBreakdown = breakdownParts.length > 1 ? import_chalk3.default.dim("(") + breakdownParts.join(import_chalk3.default.dim(" \xB7 ")) + import_chalk3.default.dim(")") : "";
+    console.log("");
+  }
+  if (highCount > 0) {
     console.log(
-      "  " + import_chalk3.default.white(num(scan.sessions)) + import_chalk3.default.dim(" sessions  ") + sessionBreakdown + (sessionBreakdown ? "  " : "") + import_chalk3.default.white(num(scan.totalToolCalls)) + import_chalk3.default.dim(" tool calls  ") + import_chalk3.default.white(num(scan.bashCalls)) + import_chalk3.default.dim(" bash commands  ") + rangeLabel + dateRange
+      import_chalk3.default.yellow.bold("  \u{1F7E1}  HIGH       ") + import_chalk3.default.yellow(`${highCount} finding${highCount !== 1 ? "s" : ""}`)
     );
+    for (const entry of high.slice(0, 5)) {
+      console.log(import_chalk3.default.dim("     \u2022 ") + import_chalk3.default.yellow(entry.label));
+    }
+    if (high.length > 5) {
+      const remaining = high.length - 5;
+      console.log(import_chalk3.default.dim(`     \u2022 \u2026 and ${remaining} more`));
+    }
     console.log("");
-    const totalFindings = scan.findings.length;
-    const blockedCount = scan.findings.filter((f) => f.source.rule.verdict === "block").length;
-    const reviewCount = totalFindings - blockedCount;
-    if (totalFindings === 0 && scan.dlpFindings.length === 0) {
-      console.log(import_chalk3.default.green("  \u2705 No risky operations found in your history."));
-      console.log(
-        import_chalk3.default.dim("  node9 is still worth running \u2014 it monitors every tool call in real time.\n")
-      );
-    } else {
-      const totalRisky = totalFindings + scan.dlpFindings.length;
-      const heroLine = isWired ? import_chalk3.default.bold(
-        `  Found ${import_chalk3.default.yellow(String(totalRisky))} risky operation${totalRisky !== 1 ? "s" : ""} in your history`
-      ) : import_chalk3.default.bold(
-        `  ${import_chalk3.default.red.bold(String(totalRisky))} risky operation${totalRisky !== 1 ? "s" : ""} found \u2014 none were blocked`
-      );
-      console.log(heroLine);
-      console.log("");
-      if (scan.totalCostUSD > 0) {
+  }
+  if (mediumCount > 0) {
+    console.log(
+      import_chalk3.default.bold("  \u{1F7E2}  MEDIUM     ") + import_chalk3.default.dim(`${mediumCount} finding${mediumCount !== 1 ? "s" : ""}`)
+    );
+    for (const entry of medium.slice(0, 5)) {
+      console.log(import_chalk3.default.dim("     \u2022 ") + import_chalk3.default.dim(entry.label));
+    }
+    if (medium.length > 5) {
+      const remaining = medium.length - 5;
+      console.log(import_chalk3.default.dim(`     \u2022 \u2026 and ${remaining} more`));
+    }
+    console.log("");
+  }
+  console.log(
+    import_chalk3.default.dim("\u2192  ") + import_chalk3.default.cyan("npx node9-ai scan") + import_chalk3.default.dim("       run this on your machine")
+  );
+  console.log(import_chalk3.default.dim("\u2192  github.com/node9-ai/node9-proxy"));
+  console.log("");
+}
+function registerScanCommand(program2) {
+  program2.command("scan").description("Forecast: scan agent history and show what node9 would catch if installed").option("--all", "Scan all history (default: last 30 days)").option("--days <n>", "Scan last N days of history", "30").option("--top <n>", "Max findings to show per rule (default: 5)", "5").option("--drill-down", "Show all findings with full commands and session IDs").option("--compact", "Compact one-screen scorecard \u2014 for screenshots and sharing").option("--narrative", "Severity-grouped report \u2014 for video / dramatic sharing").action(
+    async (options) => {
+      const drillDown = options.drillDown ?? false;
+      const topN = drillDown ? Infinity : Math.max(1, parseInt(options.top, 10) || 5);
+      const previewWidth = 70;
+      const startDate = options.all ? null : (() => {
+        const d = /* @__PURE__ */ new Date();
+        d.setDate(d.getDate() - (parseInt(options.days, 10) || 30));
+        d.setHours(0, 0, 0, 0);
+        return d;
+      })();
+      const isWired = getAgentsStatus().some((a) => a.wired);
+      const screenshotMode = options.compact || options.narrative;
+      if (!screenshotMode) {
+        console.log("");
+        if (!isWired) {
+          console.log(
+            import_chalk3.default.bold("\u{1F6E1}  node9") + import_chalk3.default.dim("  \u2014  security layer for AI coding agents")
+          );
+          console.log(
+            import_chalk3.default.dim("   Intercepts dangerous tool calls before they execute. No config needed.")
+          );
+          console.log("");
+        }
         console.log(
-          "    " + import_chalk3.default.bold(fmtCost(scan.totalCostUSD)) + import_chalk3.default.dim(" AI spend  \xB7  ") + import_chalk3.default.dim(`${totalRisky} risky operations`)
+          import_chalk3.default.cyan.bold("\u{1F50D}  Scanning your AI history") + import_chalk3.default.dim("  \u2014 what would node9 have caught?")
         );
+        console.log("");
       }
-      if (scan.dlpFindings.length > 0) {
-        const earlyLabel = scan.sessionsWithEarlySecrets > 0 ? import_chalk3.default.dim("  \xB7  ") + import_chalk3.default.red(
-          `${scan.sessionsWithEarlySecrets} session${scan.sessionsWithEarlySecrets !== 1 ? "s" : ""} loaded secrets before first edit`
-        ) : "";
-        console.log(
-          "    " + import_chalk3.default.red("\u{1F511}  Credential leak") + "     " + import_chalk3.default.red.bold(String(scan.dlpFindings.length).padStart(5)) + import_chalk3.default.dim("   secret detected in history or shell config") + earlyLabel
+      const useTTY = process.stdout.isTTY === true && process.env.NODE9_WRAPPER !== "1";
+      if (!useTTY && !screenshotMode) {
+        process.stdout.write(
+          "  " + import_chalk3.default.dim("Scanning your history \u2014 this may take a moment...\n")
         );
       }
-      if (blockedCount > 0) {
+      const totalFiles = countScanFiles();
+      let filesScanned = 0;
+      let linesScanned = 0;
+      let lastRender = 0;
+      const onProgress = (done) => {
+        filesScanned = done;
+        if (useTTY) renderProgressBar(filesScanned, totalFiles, linesScanned);
+        lastRender = Date.now();
+      };
+      const onLine = () => {
+        linesScanned++;
+        const now = Date.now();
+        if (useTTY && now - lastRender >= 80) {
+          lastRender = now;
+          renderProgressBar(filesScanned, totalFiles, linesScanned);
+        }
+      };
+      if (useTTY) renderProgressBar(0, totalFiles, 0);
+      const claudeScan = scanClaudeHistory(startDate, onProgress, onLine);
+      const geminiScan = scanGeminiHistory(
+        startDate,
+        (done) => onProgress(claudeScan.filesScanned + done),
+        onLine
+      );
+      const codexScan = scanCodexHistory(
+        startDate,
+        (done) => onProgress(claudeScan.filesScanned + geminiScan.filesScanned + done),
+        onLine
+      );
+      const scan = mergeScans(mergeScans(claudeScan, geminiScan), codexScan);
+      scan.dlpFindings.push(...scanShellConfig());
+      const summary = buildScanSummary([
+        { id: "claude", label: "Claude", icon: "\u{1F916}", scan: claudeScan },
+        { id: "gemini", label: "Gemini", icon: "\u264A", scan: geminiScan },
+        { id: "codex", label: "Codex", icon: "\u{1F52E}", scan: codexScan }
+      ]);
+      if (useTTY) process.stdout.write("\r" + " ".repeat(60) + "\r");
+      if (scan.filesScanned === 0) {
+        console.log(import_chalk3.default.yellow("  No session history found."));
         console.log(
-          "    " + import_chalk3.default.red("\u{1F6D1}  Would have blocked") + "   " + import_chalk3.default.red.bold(String(blockedCount).padStart(5)) + import_chalk3.default.dim("   operations stopped before execution")
+          import_chalk3.default.gray(
+            "  Supported: Claude Code (~/.claude/projects/) \xB7 Gemini CLI (~/.gemini/tmp/)\n"
+          )
         );
+        return;
       }
-      if (scan.loopFindings.length > 0) {
-        const wastedCalls = scan.loopFindings.reduce((s, l) => s + Math.max(0, l.count - 1), 0);
-        const loopRatio = scan.totalToolCalls > 0 ? import_chalk3.default.dim("  \xB7  ") + import_chalk3.default.yellow(
-          Math.round(wastedCalls / scan.totalToolCalls * 100) + "% of calls wasted"
-        ) : "";
-        const loopCost = summary.loopWastedUSD > 0 ? import_chalk3.default.dim("  \xB7  ") + import_chalk3.default.yellow("~" + fmtCost(summary.loopWastedUSD)) : "";
+      const rangeLabel = options.all ? import_chalk3.default.dim("all time") : import_chalk3.default.dim(`last ${options.days ?? 30} days`);
+      const dateRange = scan.firstDate && scan.lastDate ? import_chalk3.default.dim(`  ${fmtTs(scan.firstDate)} \u2013 ${fmtTs(scan.lastDate)}`) : "";
+      const breakdownParts = [];
+      if (claudeScan.sessions > 0)
+        breakdownParts.push(import_chalk3.default.cyan(String(claudeScan.sessions)) + import_chalk3.default.dim(" Claude"));
+      if (geminiScan.sessions > 0)
+        breakdownParts.push(import_chalk3.default.blue(String(geminiScan.sessions)) + import_chalk3.default.dim(" Gemini"));
+      if (codexScan.sessions > 0)
+        breakdownParts.push(import_chalk3.default.magenta(String(codexScan.sessions)) + import_chalk3.default.dim(" Codex"));
+      const sessionBreakdown = breakdownParts.length > 1 ? import_chalk3.default.dim("(") + breakdownParts.join(import_chalk3.default.dim(" \xB7 ")) + import_chalk3.default.dim(")") : "";
+      if (!screenshotMode) {
         console.log(
-          "    " + import_chalk3.default.yellow("\u{1F501}  Loop detected") + "      " + import_chalk3.default.yellow.bold(String(scan.loopFindings.length).padStart(5)) + import_chalk3.default.dim("   repeated tool call patterns found") + loopRatio + loopCost
+          "  " + import_chalk3.default.white(num(scan.sessions)) + import_chalk3.default.dim(" sessions  ") + sessionBreakdown + (sessionBreakdown ? "  " : "") + import_chalk3.default.white(num(scan.totalToolCalls)) + import_chalk3.default.dim(" tool calls  ") + import_chalk3.default.white(num(scan.bashCalls)) + import_chalk3.default.dim(" bash commands  ") + rangeLabel + dateRange
         );
+        console.log("");
       }
-      if (reviewCount > 0) {
-        console.log(
-          "    " + import_chalk3.default.yellow("\u{1F441}   Would have flagged") + "   " + import_chalk3.default.yellow.bold(String(reviewCount).padStart(5)) + import_chalk3.default.dim("   sent to you for approval")
-        );
+      const totalFindings = scan.findings.length;
+      const blockedCount = scan.findings.filter((f) => f.source.rule.verdict === "block").length;
+      const reviewCount = totalFindings - blockedCount;
+      const blast = runBlast();
+      const blastExposures = blast.reachable.length + blast.envFindings.length;
+      if (options.compact) {
+        renderCompactScorecard({
+          scan,
+          summary,
+          blast,
+          blastExposures,
+          blockedCount,
+          reviewCount
+        });
+        return;
       }
-      console.log("");
-      if (scan.dlpFindings.length > 0) {
-        console.log("  " + import_chalk3.default.dim("\u2500".repeat(70)));
+      if (options.narrative) {
+        renderNarrativeScorecard({
+          scan,
+          summary,
+          blast,
+          blastExposures,
+          blockedCount,
+          reviewCount
+        });
+        return;
+      }
+      if (totalFindings === 0 && scan.dlpFindings.length === 0) {
+        console.log(import_chalk3.default.green("  \u2705 No risky operations found in your history."));
         console.log(
-          "  " + import_chalk3.default.red.bold("\u{1F511}  Credential Leaks") + import_chalk3.default.dim("  \xB7  ") + import_chalk3.default.red(
-            `${num(scan.dlpFindings.length)} secret${scan.dlpFindings.length !== 1 ? "s" : ""} found in plain text`
+          import_chalk3.default.dim(
+            "  node9 is still worth running \u2014 it monitors every tool call in real time.\n"
           )
         );
-        const sortedDlp = sortDlpFindingsByPriority(scan.dlpFindings);
-        const recurringPatterns = buildRecurringPatternSet(scan.dlpFindings);
-        const shownDlp = drillDown ? sortedDlp : sortedDlp.slice(0, topN);
-        for (const f of shownDlp) {
-          const stale = isStaleFinding(f.timestamp);
-          const ts = f.timestamp ? import_chalk3.default.dim(fmtTs(f.timestamp) + "  ") : "";
-          const proj = import_chalk3.default.dim(f.project.slice(0, 22).padEnd(22) + "  ");
-          const agentBadge = f.agent === "gemini" ? import_chalk3.default.blue("[Gemini]  ") : f.agent === "codex" ? import_chalk3.default.magenta("[Codex]   ") : f.agent === "shell" ? import_chalk3.default.yellow("[Shell]   ") : import_chalk3.default.cyan("[Claude]  ");
-          const sessionSuffix = f.sessionId ? import_chalk3.default.dim(`  \u2192 ${f.sessionId.slice(0, 8)}`) : "";
-          const recurringBadge = recurringPatterns.has(f.patternName) ? import_chalk3.default.red.bold(" \u26A0\uFE0F recurring ") : "";
-          const patternDisplay = stale ? import_chalk3.default.dim(f.patternName) : import_chalk3.default.yellow(f.patternName);
-          const sampleDisplay = stale ? import_chalk3.default.dim(f.redactedSample) : import_chalk3.default.gray(f.redactedSample);
-          const entryBadge = import_chalk3.default.dim(`  [${entryPathLabel(f.toolName)}]`);
-          const leadIcon = stale ? import_chalk3.default.dim("\u{1F6A8}") : "\u{1F6A8}";
+      } else {
+        const totalRisky = totalFindings + scan.dlpFindings.length;
+        const scoreSeverity = blast.score >= 80 ? import_chalk3.default.green("Good") : blast.score >= 50 ? import_chalk3.default.yellow("At Risk") : import_chalk3.default.red.bold("Critical");
+        const scoreColor = blast.score >= 80 ? import_chalk3.default.green : blast.score >= 50 ? import_chalk3.default.yellow : import_chalk3.default.red;
+        console.log(
+          "  " + (blast.score < 50 ? import_chalk3.default.red.bold("\u26A0  ") : "") + import_chalk3.default.bold("Security Score ") + scoreColor.bold(`${blast.score}/100`) + "  " + scoreSeverity + import_chalk3.default.dim("  \xB7  ") + (totalRisky > 0 ? import_chalk3.default.red.bold(`${totalRisky} risky operation${totalRisky !== 1 ? "s" : ""}`) : import_chalk3.default.green("No risky operations"))
+        );
+        const cardParts = [];
+        if (scan.dlpFindings.length > 0) {
+          cardParts.push(
+            import_chalk3.default.red("\u{1F511} ") + import_chalk3.default.red.bold(String(scan.dlpFindings.length)) + import_chalk3.default.dim(` leak${scan.dlpFindings.length !== 1 ? "s" : ""}`)
+          );
+        }
+        if (blockedCount > 0) {
+          cardParts.push(
+            import_chalk3.default.red("\u{1F6D1} ") + import_chalk3.default.red.bold(String(blockedCount)) + import_chalk3.default.dim(" blocked")
+          );
+        }
+        if (scan.loopFindings.length > 0) {
+          const wastedCalls = scan.loopFindings.reduce((s, l) => s + Math.max(0, l.count - 1), 0);
+          const wastePct = scan.totalToolCalls > 0 ? Math.round(wastedCalls / scan.totalToolCalls * 100) : 0;
+          const wasteSuffix = wastePct > 0 ? import_chalk3.default.dim(` (${wastePct}% wasted)`) : "";
+          cardParts.push(
+            import_chalk3.default.yellow("\u{1F501} ") + import_chalk3.default.yellow.bold(String(scan.loopFindings.length)) + import_chalk3.default.dim(" loops") + wasteSuffix
+          );
+        }
+        if (reviewCount > 0) {
+          cardParts.push(
+            import_chalk3.default.yellow("\u{1F441} ") + import_chalk3.default.yellow.bold(String(reviewCount)) + import_chalk3.default.dim(" flagged")
+          );
+        }
+        if (blastExposures > 0) {
+          cardParts.push(
+            import_chalk3.default.red("\u{1F52D} ") + import_chalk3.default.red.bold(String(blastExposures)) + import_chalk3.default.dim(" exposures")
+          );
+        }
+        if (cardParts.length > 0) {
+          console.log("  " + cardParts.join(import_chalk3.default.dim("   ")));
+        }
+        if (scan.totalCostUSD > 0) {
           console.log(
-            `    ${leadIcon} ${ts}${proj}${agentBadge}` + patternDisplay + recurringBadge + import_chalk3.default.dim("  ") + sampleDisplay + entryBadge + sessionSuffix
+            "  " + import_chalk3.default.dim("AI spend  ") + import_chalk3.default.bold(fmtCost(scan.totalCostUSD)) + (summary.loopWastedUSD > 0 ? import_chalk3.default.dim("   \xB7   wasted on loops  ") + import_chalk3.default.yellow("~" + fmtCost(summary.loopWastedUSD)) : "")
           );
         }
-        if (!drillDown && scan.dlpFindings.length > topN) {
+        if (scan.dlpFindings.length > 0 && scan.sessionsWithEarlySecrets > 0) {
           console.log(
-            import_chalk3.default.dim(
-              `    \u2026 and ${scan.dlpFindings.length - topN} more  (--drill-down for full list)`
+            "  " + import_chalk3.default.dim(
+              `${scan.sessionsWithEarlySecrets} session${scan.sessionsWithEarlySecrets !== 1 ? "s" : ""} loaded secrets before first edit`
             )
           );
         }
         console.log("");
-      }
-      const blockedRuleSections = summary.sections.map((s) => ({ ...s, rules: s.rules.filter((r) => r.verdict === "block") })).filter((s) => s.rules.length > 0);
-      if (blockedRuleSections.length > 0) {
-        console.log("  " + import_chalk3.default.dim("\u2500".repeat(70)));
-        console.log(
-          "  " + import_chalk3.default.red.bold("\u{1F6D1}  Blocked") + import_chalk3.default.dim("  \xB7  ") + import_chalk3.default.red(
-            `${blockedCount} operation${blockedCount !== 1 ? "s" : ""} node9 would have stopped`
-          )
-        );
-        for (const section of blockedRuleSections) {
-          for (const rule of section.rules) {
-            printRuleGroup(rule, topN, drillDown, previewWidth);
-          }
-        }
-        console.log("");
-      }
-      if (scan.loopFindings.length > 0) {
-        console.log("  " + import_chalk3.default.dim("\u2500".repeat(70)));
-        const loopCostLabel = summary.loopWastedUSD > 0 ? import_chalk3.default.dim("  \xB7  ") + import_chalk3.default.yellow("~" + fmtCost(summary.loopWastedUSD) + " wasted") : "";
-        console.log(
-          "  " + import_chalk3.default.yellow.bold("\u{1F501}  Agent Loops") + import_chalk3.default.dim("  \xB7  ") + import_chalk3.default.yellow(
-            `${num(scan.loopFindings.length)} repeated pattern${scan.loopFindings.length !== 1 ? "s" : ""} found`
-          ) + loopCostLabel
-        );
-        const shownLoops = drillDown ? scan.loopFindings : scan.loopFindings.slice(0, topN);
-        for (const f of shownLoops) {
-          const ts = f.timestamp ? import_chalk3.default.dim(fmtTs(f.timestamp) + "  ") : "";
-          const proj = import_chalk3.default.dim(f.project.slice(0, 22).padEnd(22) + "  ");
-          const agentBadge = f.agent === "gemini" ? import_chalk3.default.blue("[Gemini]  ") : f.agent === "codex" ? import_chalk3.default.magenta("[Codex]   ") : import_chalk3.default.cyan("[Claude]  ");
-          const sessionSuffix = f.sessionId ? import_chalk3.default.dim(`  \u2192 ${f.sessionId.slice(0, 8)}`) : "";
+        if (scan.dlpFindings.length > 0) {
+          console.log("  " + import_chalk3.default.dim("\u2500".repeat(70)));
           console.log(
-            `    ${ts}${proj}${agentBadge}` + import_chalk3.default.yellow(f.toolName) + import_chalk3.default.dim(`  \xD7${f.count}  `) + import_chalk3.default.gray(f.commandPreview) + sessionSuffix
+            "  " + import_chalk3.default.red.bold("\u{1F511}  Credential Leaks") + import_chalk3.default.dim("  \xB7  ") + import_chalk3.default.red(
+              `${num(scan.dlpFindings.length)} secret${scan.dlpFindings.length !== 1 ? "s" : ""} found in plain text`
+            )
           );
+          const sortedDlp = sortDlpFindingsByPriority(scan.dlpFindings);
+          const recurringPatterns = buildRecurringPatternSet(scan.dlpFindings);
+          const shownDlp = drillDown ? sortedDlp : sortedDlp.slice(0, topN);
+          for (const f of shownDlp) {
+            const stale = isStaleFinding(f.timestamp);
+            const ts = f.timestamp ? import_chalk3.default.dim(fmtTs(f.timestamp) + "  ") : "";
+            const proj = import_chalk3.default.dim(f.project.slice(0, 22).padEnd(22) + "  ");
+            const agentBadge = f.agent === "gemini" ? import_chalk3.default.blue("[Gemini]  ") : f.agent === "codex" ? import_chalk3.default.magenta("[Codex]   ") : f.agent === "shell" ? import_chalk3.default.yellow("[Shell]   ") : import_chalk3.default.cyan("[Claude]  ");
+            const sessionSuffix = f.sessionId ? import_chalk3.default.dim(`  \u2192 ${f.sessionId.slice(0, 8)}`) : "";
+            const recurringBadge = recurringPatterns.has(f.patternName) ? import_chalk3.default.red.bold(" \u26A0\uFE0F recurring ") : "";
+            const patternDisplay = stale ? import_chalk3.default.dim(f.patternName) : import_chalk3.default.yellow(f.patternName);
+            const sampleDisplay = stale ? import_chalk3.default.dim(f.redactedSample) : import_chalk3.default.gray(f.redactedSample);
+            const entryBadge = import_chalk3.default.dim(`  [${entryPathLabel(f.toolName)}]`);
+            const leadIcon = stale ? import_chalk3.default.dim("\u{1F6A8}") : "\u{1F6A8}";
+            console.log(
+              `    ${leadIcon} ${ts}${proj}${agentBadge}` + patternDisplay + recurringBadge + import_chalk3.default.dim("  ") + sampleDisplay + entryBadge + sessionSuffix
+            );
+          }
+          if (!drillDown && scan.dlpFindings.length > topN) {
+            console.log(
+              import_chalk3.default.dim(
+                `    \u2026 and ${scan.dlpFindings.length - topN} more  (--drill-down for full list)`
+              )
+            );
+          }
+          console.log("");
         }
-        if (!drillDown && scan.loopFindings.length > topN) {
+        const blockedRuleSections = summary.sections.map((s) => ({ ...s, rules: s.rules.filter((r) => r.verdict === "block") })).filter((s) => s.rules.length > 0);
+        if (blockedRuleSections.length > 0) {
+          console.log("  " + import_chalk3.default.dim("\u2500".repeat(70)));
           console.log(
-            import_chalk3.default.dim(
-              `    \u2026 and ${scan.loopFindings.length - topN} more  (--drill-down for full list)`
+            "  " + import_chalk3.default.red.bold("\u{1F6D1}  Blocked") + import_chalk3.default.dim("  \xB7  ") + import_chalk3.default.red(
+              `${blockedCount} operation${blockedCount !== 1 ? "s" : ""} node9 would have stopped`
             )
           );
-        }
-        const stuckTools = computeStuckTools(scan.loopFindings);
-        if (stuckTools.length > 0) {
+          for (const section of blockedRuleSections) {
+            for (const rule of section.rules) {
+              printRuleGroup(rule, topN, drillDown, previewWidth);
+            }
+          }
           console.log("");
-          console.log("  " + import_chalk3.default.dim("Most stuck tools:"));
-          for (const t of stuckTools) {
+        }
+        if (scan.loopFindings.length > 0) {
+          console.log("  " + import_chalk3.default.dim("\u2500".repeat(70)));
+          const loopCostLabel = summary.loopWastedUSD > 0 ? import_chalk3.default.dim("  \xB7  ") + import_chalk3.default.yellow("~" + fmtCost(summary.loopWastedUSD) + " wasted") : "";
+          console.log(
+            "  " + import_chalk3.default.yellow.bold("\u{1F501}  Agent Loops") + import_chalk3.default.dim("  \xB7  ") + import_chalk3.default.yellow(
+              `${num(scan.loopFindings.length)} repeated pattern${scan.loopFindings.length !== 1 ? "s" : ""} found`
+            ) + loopCostLabel
+          );
+          const shownLoops = drillDown ? scan.loopFindings : scan.loopFindings.slice(0, topN);
+          for (const f of shownLoops) {
+            const ts = f.timestamp ? import_chalk3.default.dim(fmtTs(f.timestamp) + "  ") : "";
+            const proj = import_chalk3.default.dim(f.project.slice(0, 22).padEnd(22) + "  ");
+            const agentBadge = f.agent === "gemini" ? import_chalk3.default.blue("[Gemini]  ") : f.agent === "codex" ? import_chalk3.default.magenta("[Codex]   ") : import_chalk3.default.cyan("[Claude]  ");
+            const sessionSuffix = f.sessionId ? import_chalk3.default.dim(`  \u2192 ${f.sessionId.slice(0, 8)}`) : "";
+            console.log(
+              `    ${ts}${proj}${agentBadge}` + import_chalk3.default.yellow(f.toolName) + import_chalk3.default.dim(`  \xD7${f.count}  `) + import_chalk3.default.gray(f.commandPreview) + sessionSuffix
+            );
+          }
+          if (!drillDown && scan.loopFindings.length > topN) {
             console.log(
-              import_chalk3.default.dim("    ") + import_chalk3.default.yellow(t.toolName.padEnd(8)) + import_chalk3.default.dim("  ") + import_chalk3.default.dim(`\xD7${t.waste} repeats`.padEnd(14)) + import_chalk3.default.dim(`  (${t.pct}%)`)
+              import_chalk3.default.dim(
+                `    \u2026 and ${scan.loopFindings.length - topN} more  (--drill-down for full list)`
+              )
             );
           }
+          const stuckTools = computeStuckTools(scan.loopFindings);
+          if (stuckTools.length > 0) {
+            console.log("");
+            console.log("  " + import_chalk3.default.dim("Most stuck tools:"));
+            for (const t of stuckTools) {
+              console.log(
+                import_chalk3.default.dim("    ") + import_chalk3.default.yellow(t.toolName.padEnd(8)) + import_chalk3.default.dim("  ") + import_chalk3.default.dim(`\xD7${t.waste} repeats`.padEnd(14)) + import_chalk3.default.dim(`  (${t.pct}%)`)
+              );
+            }
+          }
+          console.log("");
+        }
+        for (const section of summary.sections) {
+          const reviewRules = section.rules.filter((r) => r.verdict !== "block");
+          if (reviewRules.length === 0) continue;
+          const enableHint = section.shieldKey ? import_chalk3.default.dim(`  \u2192  node9 shield enable ${section.shieldKey}`) : "";
+          console.log("  " + import_chalk3.default.dim("\u2500".repeat(70)));
+          console.log(
+            "  " + import_chalk3.default.bold(section.label) + (section.subtitle ? import_chalk3.default.dim(`  \xB7  ${section.subtitle}`) : "") + "  " + import_chalk3.default.yellow(`${section.reviewCount} review`) + enableHint
+          );
+          for (const rule of reviewRules) {
+            printRuleGroup(rule, topN, drillDown, previewWidth);
+          }
+          console.log("");
+        }
+        const activeShieldIds = new Set(
+          summary.sections.filter((s) => s.sourceType === "shield" && s.shieldKey).map((s) => s.shieldKey)
+        );
+        const emptyShields = Object.keys(SHIELDS).filter((n) => !activeShieldIds.has(n)).sort();
+        if (emptyShields.length > 0) {
+          console.log("  " + import_chalk3.default.dim("\u2500".repeat(70)));
+          console.log(
+            "  " + import_chalk3.default.bold("\u{1F6E1}  Inactive Shields") + import_chalk3.default.dim("  \xB7  enable for more coverage")
+          );
+          console.log("  " + import_chalk3.default.dim(emptyShields.join(" \xB7 ")));
+          console.log("  " + import_chalk3.default.dim("\u2192  node9 shield enable <name>  to activate"));
+          console.log("");
         }
-        console.log("");
       }
-      for (const section of summary.sections) {
-        const reviewRules = section.rules.filter((r) => r.verdict !== "block");
-        if (reviewRules.length === 0) continue;
-        const enableHint = section.shieldKey ? import_chalk3.default.dim(`  \u2192  node9 shield enable ${section.shieldKey}`) : "";
+      if (blast.reachable.length > 0 || blast.envFindings.length > 0) {
         console.log("  " + import_chalk3.default.dim("\u2500".repeat(70)));
         console.log(
-          "  " + import_chalk3.default.bold(section.label) + (section.subtitle ? import_chalk3.default.dim(`  \xB7  ${section.subtitle}`) : "") + "  " + import_chalk3.default.yellow(`${section.reviewCount} review`) + enableHint
+          "  " + import_chalk3.default.bold("\u{1F52D}  Blast Radius") + import_chalk3.default.dim(
+            `  \xB7  ${blastExposures} exposure${blastExposures !== 1 ? "s" : ""} an AI agent can reach right now`
+          )
         );
-        for (const rule of reviewRules) {
-          printRuleGroup(rule, topN, drillDown, previewWidth);
+        console.log("");
+        if (blast.reachable.length > 0) {
+          for (const p of blast.reachable) {
+            console.log(
+              "    " + import_chalk3.default.red("\u2717  ") + import_chalk3.default.yellow(p.label.padEnd(38)) + import_chalk3.default.dim(p.description)
+            );
+          }
+        }
+        if (blast.envFindings.length > 0) {
+          for (const f of blast.envFindings) {
+            console.log(
+              "    " + import_chalk3.default.red("\u2717  ") + import_chalk3.default.yellow(f.key.padEnd(38)) + import_chalk3.default.dim(f.patternName + " in environment")
+            );
+          }
         }
         console.log("");
-      }
-      const activeShieldIds = new Set(
-        summary.sections.filter((s) => s.sourceType === "shield" && s.shieldKey).map((s) => s.shieldKey)
-      );
-      const emptyShields = Object.keys(SHIELDS).filter((n) => !activeShieldIds.has(n)).sort();
-      if (emptyShields.length > 0) {
-        console.log("  " + import_chalk3.default.dim("\u2500".repeat(70)));
         console.log(
-          "  " + import_chalk3.default.bold("\u{1F6E1}  Inactive Shields") + import_chalk3.default.dim("  \xB7  enable for more coverage")
+          import_chalk3.default.dim(
+            "  \u2192 Run `node9 shield enable project-jail` to block agent access to these files."
+          )
         );
-        console.log("  " + import_chalk3.default.dim(emptyShields.join(" \xB7 ")));
-        console.log("  " + import_chalk3.default.dim("\u2192  node9 shield enable <name>  to activate"));
         console.log("");
       }
-    }
-    const blast = runBlast();
-    if (blast.reachable.length > 0 || blast.envFindings.length > 0) {
-      console.log("  " + import_chalk3.default.dim("\u2500".repeat(70)));
-      console.log(
-        "  " + import_chalk3.default.bold("\u{1F52D}  Blast Radius") + import_chalk3.default.dim("  \xB7  what an AI agent can reach right now")
-      );
-      console.log("");
-      if (blast.reachable.length > 0) {
-        for (const p of blast.reachable) {
+      if (isWired) {
+        console.log(import_chalk3.default.green("  \u2705 node9 is active \u2014 your future sessions are protected."));
+        console.log(
+          import_chalk3.default.dim("  Run ") + import_chalk3.default.cyan("node9 report") + import_chalk3.default.dim(" to see live protection stats.")
+        );
+        if (drillDown) {
           console.log(
-            "    " + import_chalk3.default.red("\u2717  ") + import_chalk3.default.yellow(p.label.padEnd(38)) + import_chalk3.default.dim(p.description)
+            import_chalk3.default.dim("  Run ") + import_chalk3.default.cyan("node9 sessions --detail <session-id>") + import_chalk3.default.dim(" to see the full conversation for any session above.")
           );
-        }
-      }
-      if (blast.envFindings.length > 0) {
-        for (const f of blast.envFindings) {
+        } else {
           console.log(
-            "    " + import_chalk3.default.red("\u2717  ") + import_chalk3.default.yellow(f.key.padEnd(38)) + import_chalk3.default.dim(f.patternName + " in environment")
+            import_chalk3.default.dim("  Run ") + import_chalk3.default.cyan("node9 scan --drill-down") + import_chalk3.default.dim(" to see full commands and session IDs.")
           );
         }
-      }
-      console.log("");
-      console.log(
-        "  Security Score: " + scoreLabel(blast.score) + import_chalk3.default.dim(
-          `  (${blast.reachable.length + blast.envFindings.length} exposure${blast.reachable.length + blast.envFindings.length !== 1 ? "s" : ""})`
-        )
-      );
-      console.log(
-        import_chalk3.default.dim(
-          "\n  Run `node9 shield enable project-jail` to block agent access to these files."
-        )
-      );
-      console.log("");
-    }
-    if (isWired) {
-      console.log(import_chalk3.default.green("  \u2705 node9 is active \u2014 your future sessions are protected."));
-      console.log(
-        import_chalk3.default.dim("  Run ") + import_chalk3.default.cyan("node9 report") + import_chalk3.default.dim(" to see live protection stats.")
-      );
-      if (drillDown) {
-        console.log(
-          import_chalk3.default.dim("  Run ") + import_chalk3.default.cyan("node9 sessions --detail <session-id>") + import_chalk3.default.dim(" to see the full conversation for any session above.")
-        );
       } else {
+        const riskySummary = totalFindings + scan.dlpFindings.length;
+        if (riskySummary > 0) {
+          console.log(
+            import_chalk3.default.yellow.bold(
+              `  \u26A1 ${riskySummary} operation${riskySummary !== 1 ? "s" : ""} ran unprotected.`
+            ) + import_chalk3.default.dim(" node9 would have caught them.")
+          );
+          console.log("");
+        }
+        console.log(import_chalk3.default.bold("  Enable real-time protection:"));
+        console.log("");
         console.log(
-          import_chalk3.default.dim("  Run ") + import_chalk3.default.cyan("node9 scan --drill-down") + import_chalk3.default.dim(" to see full commands and session IDs.")
+          "    " + import_chalk3.default.cyan("npm install -g @node9/proxy") + import_chalk3.default.dim("  &&  ") + import_chalk3.default.cyan("node9 init --recommended")
         );
-      }
-    } else {
-      const riskySummary = totalFindings + scan.dlpFindings.length;
-      if (riskySummary > 0) {
+        console.log("");
         console.log(
-          import_chalk3.default.yellow.bold(
-            `  \u26A1 ${riskySummary} operation${riskySummary !== 1 ? "s" : ""} ran unprotected.`
-          ) + import_chalk3.default.dim(" node9 would have caught them.")
+          import_chalk3.default.dim(
+            "  Hooks into Claude Code automatically. Every tool call checked before it runs."
+          )
         );
+        console.log("  " + import_chalk3.default.dim("\u2192 ") + import_chalk3.default.underline("https://node9.ai"));
       }
       console.log("");
-      console.log(import_chalk3.default.bold("  Protect your next session in 30 seconds:"));
-      console.log("");
-      console.log("    " + import_chalk3.default.cyan("npm install -g @node9/proxy"));
-      console.log("    " + import_chalk3.default.cyan("node9 init"));
-      console.log("");
-      console.log(import_chalk3.default.dim("  node9 hooks into Claude Code automatically."));
-      console.log(
-        import_chalk3.default.dim("  Every tool call is checked before it runs \u2014 no proxy, no latency.")
-      );
-      console.log("");
-      console.log("  " + import_chalk3.default.dim("\u2192 ") + import_chalk3.default.underline("https://node9.ai"));
-    }
-    console.log("");
-    if (!isTestingMode()) {
-      if (isWired) {
-        const url = `http://${DAEMON_HOST}:${DAEMON_PORT}/?openscan=1`;
-        if (isDaemonRunning()) {
-          const internalToken = getInternalToken();
-          if (internalToken) {
-            try {
-              const pushSummary = buildScanSummary([
-                { id: "claude", label: "Claude", icon: "\u{1F916}", scan: claudeScan },
-                { id: "gemini", label: "Gemini", icon: "\u264A", scan: geminiScan },
-                { id: "codex", label: "Codex", icon: "\u{1F52E}", scan: codexScan }
-              ]);
-              await fetch(`http://${DAEMON_HOST}:${DAEMON_PORT}/scan/push`, {
-                method: "POST",
-                headers: {
-                  "Content-Type": "application/json",
-                  "x-node9-internal": internalToken
-                },
-                body: JSON.stringify({ status: "complete", summary: pushSummary }),
-                signal: AbortSignal.timeout(3e3)
-              });
-              openBrowserLocal();
-            } catch {
+      if (!isTestingMode()) {
+        if (isWired) {
+          const url = `http://${DAEMON_HOST}:${DAEMON_PORT}/?openscan=1`;
+          if (isDaemonRunning()) {
+            const internalToken = getInternalToken();
+            if (internalToken) {
+              try {
+                const pushSummary = buildScanSummary([
+                  { id: "claude", label: "Claude", icon: "\u{1F916}", scan: claudeScan },
+                  { id: "gemini", label: "Gemini", icon: "\u264A", scan: geminiScan },
+                  { id: "codex", label: "Codex", icon: "\u{1F52E}", scan: codexScan }
+                ]);
+                await fetch(`http://${DAEMON_HOST}:${DAEMON_PORT}/scan/push`, {
+                  method: "POST",
+                  headers: {
+                    "Content-Type": "application/json",
+                    "x-node9-internal": internalToken
+                  },
+                  body: JSON.stringify({ status: "complete", summary: pushSummary }),
+                  signal: AbortSignal.timeout(3e3)
+                });
+              } catch {
+              }
             }
           }
+          if (isDaemonRunning()) {
+            console.log("  " + import_chalk3.default.cyan("\u{1F310} View in browser:") + "  " + import_chalk3.default.underline(url));
+          } else {
+            console.log(
+              "  " + import_chalk3.default.dim("\u{1F4CA} To view in browser, start the daemon:  ") + import_chalk3.default.cyan("node9 daemon --background")
+            );
+          }
+          console.log("");
         }
-        if (isDaemonRunning()) {
-          console.log("  " + import_chalk3.default.cyan("\u{1F310} View in browser:") + "  " + import_chalk3.default.underline(url));
-        } else {
-          console.log(
-            "  " + import_chalk3.default.dim("\u{1F4CA} To view in browser, start the daemon:  ") + import_chalk3.default.cyan("node9 daemon --background")
-          );
-        }
-        console.log("");
       }
     }
-  });
+  );
 }
 var import_chalk3, import_fs15, import_path17, import_os13, CLAUDE_PRICING, GEMINI_PRICING, CODE_EXTENSIONS, TERMINAL_ESCAPE_RE, LOOP_TOOLS, LOOP_THRESHOLD, STUCK_TOOLS_MIN_WASTE, STUCK_TOOLS_LIMIT, RECURRING_SESSION_THRESHOLD, STALE_AGE_DAYS, DEFAULT_RULE_NAMES;
 var init_scan = __esm({
@@ -12700,14 +13015,6 @@ function readBody(req) {
     req.on("end", () => resolve(body));
   });
 }
-function openBrowser(url) {
-  if (process.env.NODE9_TESTING === "1") return;
-  try {
-    const args = process.platform === "darwin" ? ["open", url] : process.platform === "win32" ? ["cmd", "/c", "start", "", url] : ["xdg-open", url];
-    (0, import_child_process4.spawn)(args[0], args.slice(1), { detached: true, stdio: "ignore" }).unref();
-  } catch {
-  }
-}
 function estimateToolCost(tool, args) {
   const a = args ?? {};
   const t = tool.toLowerCase().replace(/[^a-z_]/g, "_");
@@ -12820,6 +13127,18 @@ function startActivitySocket() {
           });
           return;
         }
+        if (data.status === "execution-completed") {
+          broadcast("execution-result", {
+            id: data.id,
+            ts: data.ts,
+            tool: data.tool,
+            agent: data.agent,
+            mcpServer: data.mcpServer,
+            durationMs: data.durationMs,
+            isError: data.isError
+          });
+          return;
+        }
         if (data.status === "pending") {
           broadcast("activity", {
             id: data.id,
@@ -12827,7 +13146,8 @@ function startActivitySocket() {
             tool: data.tool,
             args: redactArgs(data.args),
             status: "pending",
-            agent: data.agent
+            agent: data.agent,
+            mcpServer: data.mcpServer
           });
         } else {
           if (data.status === "allow") {
@@ -12854,7 +13174,9 @@ function startActivitySocket() {
             id: data.id,
             status: data.status,
             label: data.label,
-            costEstimate
+            costEstimate,
+            agent: data.agent,
+            mcpServer: data.mcpServer
           });
         }
       } catch {
@@ -12871,7 +13193,7 @@ function startActivitySocket() {
     }
   });
 }
-var import_net2, import_fs17, import_path19, import_os14, import_child_process4, import_crypto6, homeDir, DAEMON_PID_FILE, DECISIONS_FILE, AUDIT_LOG_FILE, TRUST_FILE2, GLOBAL_CONFIG_FILE, CREDENTIALS_FILE, INSIGHT_COUNTS_FILE, pending, sseClients, suggestionTracker, suggestions, taintStore, insightCounts, _abandonTimer, _hadBrowserClient, _daemonServer, daemonRejectionHandlerRegistered, AUTO_DENY_MS, TRUST_DURATIONS, autoStarted, ACTIVITY_SOCKET_PATH2, ACTIVITY_RING_SIZE, activityRing, LARGE_RESPONSE_RING_SIZE, largeResponseRing, cachedScanResult, cachedScanTs, SCAN_CACHE_TTL_MS, SECRET_KEY_RE, INPUT_PRICE_PER_1M, OUTPUT_PRICE_PER_1M, BYTES_PER_TOKEN, WRITE_TOOL_NAMES;
+var import_net2, import_fs17, import_path19, import_os14, import_crypto6, homeDir, DAEMON_PID_FILE, DECISIONS_FILE, AUDIT_LOG_FILE, TRUST_FILE2, GLOBAL_CONFIG_FILE, CREDENTIALS_FILE, INSIGHT_COUNTS_FILE, pending, sseClients, suggestionTracker, suggestions, taintStore, insightCounts, _abandonTimer, _hadBrowserClient, _daemonServer, daemonRejectionHandlerRegistered, AUTO_DENY_MS, TRUST_DURATIONS, autoStarted, ACTIVITY_SOCKET_PATH2, ACTIVITY_RING_SIZE, activityRing, LARGE_RESPONSE_RING_SIZE, largeResponseRing, cachedScanResult, cachedScanTs, SCAN_CACHE_TTL_MS, SECRET_KEY_RE, INPUT_PRICE_PER_1M, OUTPUT_PRICE_PER_1M, BYTES_PER_TOKEN, WRITE_TOOL_NAMES;
 var init_state2 = __esm({
   "src/daemon/state.ts"() {
     "use strict";
@@ -12879,7 +13201,6 @@ var init_state2 = __esm({
     import_fs17 = __toESM(require("fs"));
     import_path19 = __toESM(require("path"));
     import_os14 = __toESM(require("os"));
-    import_child_process4 = require("child_process");
     import_crypto6 = require("crypto");
     init_daemon();
     init_suggestion_tracker();
@@ -13536,7 +13857,6 @@ function startDaemon() {
   const IDLE_TIMEOUT_MS = 12 * 60 * 60 * 1e3;
   const watchMode = process.env.NODE9_WATCH_MODE === "1";
   let idleTimer;
-  let browserOpened = false;
   function resetIdleTimer() {
     if (watchMode) return;
     if (idleTimer) clearTimeout(idleTimer);
@@ -13645,12 +13965,6 @@ data: ${JSON.stringify(item.data)}
         }
       });
     }
-    if (req.method === "POST" && pathname === "/browser-opened") {
-      if (req.headers["x-node9-internal"] !== internalToken) return res.writeHead(403).end();
-      browserOpened = true;
-      res.writeHead(200).end();
-      return;
-    }
     if (req.method === "POST" && pathname === "/check") {
       try {
         resetIdleTimer();
@@ -13711,7 +14025,9 @@ data: ${JSON.stringify(item.data)}
             ts: entry.timestamp,
             tool: toolName,
             args: redactArgs(args),
-            status: "pending"
+            status: "pending",
+            agent: entry.agent,
+            mcpServer: entry.mcpServer
           });
         }
         const projectCwd = typeof cwd === "string" && import_path25.default.isAbsolute(cwd) ? cwd : void 0;
@@ -13734,11 +14050,6 @@ data: ${JSON.stringify(item.data)}
             // Terminal uses this to show the 💡 insight line on the Nth consecutive approval.
             allowCount: (insightCounts.get(toolName) ?? 0) + 1
           });
-          const browserAlreadyOpened = process.env.NODE9_BROWSER_OPENED === "1";
-          if (browserEnabled && !browserOpened && !browserAlreadyOpened) {
-            browserOpened = true;
-            openBrowser(`http://127.0.0.1:${DAEMON_PORT}/`);
-          }
         }
         res.writeHead(200, { "Content-Type": "application/json" });
         res.end(JSON.stringify({ id, allowCount: (insightCounts.get(toolName) ?? 0) + 1 }));
@@ -13760,7 +14071,9 @@ data: ${JSON.stringify(item.data)}
           broadcast("activity-result", {
             id,
             status: result.approved ? "allow" : result.blockedByLabel?.includes("DLP") ? "dlp" : "block",
-            label: result.blockedByLabel
+            label: result.blockedByLabel,
+            agent: e.agent,
+            mcpServer: e.mcpServer
           });
           clearTimeout(e.timer);
           const decision = result.approved ? "allow" : "deny";
@@ -14534,7 +14847,7 @@ data: ${JSON.stringify(item.data)}
       }).then((res) => {
         if (res.ok) {
           try {
-            const r = (0, import_child_process5.spawnSync)("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
+            const r = (0, import_child_process4.spawnSync)("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
               encoding: "utf8",
               timeout: 1e3
             });
@@ -14582,7 +14895,7 @@ data: ${JSON.stringify(item.data)}
   }
   startActivitySocket();
 }
-var import_http, import_fs23, import_path25, import_os20, import_crypto7, import_child_process5, import_chalk4;
+var import_http, import_fs23, import_path25, import_os20, import_crypto7, import_child_process4, import_chalk4;
 var init_server = __esm({
   "src/daemon/server.ts"() {
     "use strict";
@@ -14591,7 +14904,7 @@ var init_server = __esm({
     import_path25 = __toESM(require("path"));
     import_os20 = __toESM(require("os"));
     import_crypto7 = require("crypto");
-    import_child_process5 = require("child_process");
+    import_child_process4 = require("child_process");
     import_chalk4 = __toESM(require("chalk"));
     init_core();
     init_shields();
@@ -14620,7 +14933,7 @@ function resolveNode9Binary() {
   }
   try {
     const cmd = process.platform === "win32" ? "where" : "which";
-    const r = (0, import_child_process6.spawnSync)(cmd, ["node9"], { encoding: "utf8", timeout: 3e3 });
+    const r = (0, import_child_process5.spawnSync)(cmd, ["node9"], { encoding: "utf8", timeout: 3e3 });
     if (r.status === 0 && r.stdout.trim()) {
       return r.stdout.trim().split("\n")[0].trim();
     }
@@ -14674,8 +14987,8 @@ function installLaunchd(binaryPath) {
   const dir = import_path26.default.dirname(LAUNCHD_PLIST);
   if (!import_fs24.default.existsSync(dir)) import_fs24.default.mkdirSync(dir, { recursive: true });
   import_fs24.default.writeFileSync(LAUNCHD_PLIST, launchdPlist(binaryPath), "utf-8");
-  (0, import_child_process6.spawnSync)("launchctl", ["unload", LAUNCHD_PLIST], { encoding: "utf8" });
-  const r = (0, import_child_process6.spawnSync)("launchctl", ["load", "-w", LAUNCHD_PLIST], {
+  (0, import_child_process5.spawnSync)("launchctl", ["unload", LAUNCHD_PLIST], { encoding: "utf8" });
+  const r = (0, import_child_process5.spawnSync)("launchctl", ["load", "-w", LAUNCHD_PLIST], {
     encoding: "utf8",
     timeout: 5e3
   });
@@ -14685,7 +14998,7 @@ function installLaunchd(binaryPath) {
 }
 function uninstallLaunchd() {
   if (import_fs24.default.existsSync(LAUNCHD_PLIST)) {
-    (0, import_child_process6.spawnSync)("launchctl", ["unload", "-w", LAUNCHD_PLIST], { encoding: "utf8", timeout: 5e3 });
+    (0, import_child_process5.spawnSync)("launchctl", ["unload", "-w", LAUNCHD_PLIST], { encoding: "utf8", timeout: 5e3 });
     import_fs24.default.unlinkSync(LAUNCHD_PLIST);
   }
 }
@@ -14715,18 +15028,18 @@ function installSystemd(binaryPath) {
   }
   import_fs24.default.writeFileSync(SYSTEMD_UNIT, systemdUnit(binaryPath), "utf-8");
   try {
-    (0, import_child_process6.execFileSync)("loginctl", ["enable-linger", import_os21.default.userInfo().username], { timeout: 3e3 });
+    (0, import_child_process5.execFileSync)("loginctl", ["enable-linger", import_os21.default.userInfo().username], { timeout: 3e3 });
   } catch {
   }
-  const reload = (0, import_child_process6.spawnSync)("systemctl", ["--user", "daemon-reload"], {
+  const reload = (0, import_child_process5.spawnSync)("systemctl", ["--user", "daemon-reload"], {
     encoding: "utf8",
     timeout: 5e3
   });
   if (reload.status !== 0) {
     throw new Error(`systemctl daemon-reload failed: ${reload.stderr}`);
   }
-  (0, import_child_process6.spawnSync)("systemctl", ["--user", "stop", "node9-daemon"], { encoding: "utf8", timeout: 3e3 });
-  const enable = (0, import_child_process6.spawnSync)("systemctl", ["--user", "enable", "--now", "node9-daemon"], {
+  (0, import_child_process5.spawnSync)("systemctl", ["--user", "stop", "node9-daemon"], { encoding: "utf8", timeout: 3e3 });
+  const enable = (0, import_child_process5.spawnSync)("systemctl", ["--user", "enable", "--now", "node9-daemon"], {
     encoding: "utf8",
     timeout: 5e3
   });
@@ -14736,11 +15049,11 @@ function installSystemd(binaryPath) {
 }
 function uninstallSystemd() {
   if (import_fs24.default.existsSync(SYSTEMD_UNIT)) {
-    (0, import_child_process6.spawnSync)("systemctl", ["--user", "disable", "--now", "node9-daemon"], {
+    (0, import_child_process5.spawnSync)("systemctl", ["--user", "disable", "--now", "node9-daemon"], {
       encoding: "utf8",
       timeout: 5e3
     });
-    (0, import_child_process6.spawnSync)("systemctl", ["--user", "daemon-reload"], { encoding: "utf8", timeout: 5e3 });
+    (0, import_child_process5.spawnSync)("systemctl", ["--user", "daemon-reload"], { encoding: "utf8", timeout: 5e3 });
     import_fs24.default.unlinkSync(SYSTEMD_UNIT);
   }
 }
@@ -14758,7 +15071,7 @@ function stopRunningDaemon() {
       try {
         process.kill(pid, "SIGTERM");
         const deadline = Date.now() + 3e3;
-        const pollStop = (0, import_child_process6.spawnSync)(
+        const pollStop = (0, import_child_process5.spawnSync)(
           "sh",
           ["-c", `while kill -0 ${pid} 2>/dev/null; do sleep 0.1; done`],
           {
@@ -14790,7 +15103,7 @@ function installDaemonService() {
       return { ok: true, platform: "launchd", alreadyInstalled };
     }
     if (process.platform === "linux") {
-      const check = (0, import_child_process6.spawnSync)("systemctl", ["--user", "--version"], {
+      const check = (0, import_child_process5.spawnSync)("systemctl", ["--user", "--version"], {
         encoding: "utf8",
         timeout: 2e3
       });
@@ -14841,14 +15154,14 @@ function isDaemonServiceInstalled() {
   if (process.platform === "linux") return isSystemdInstalled();
   return false;
 }
-var import_fs24, import_path26, import_os21, import_child_process6, LAUNCHD_LABEL, LAUNCHD_PLIST, SYSTEMD_UNIT_DIR, SYSTEMD_UNIT;
+var import_fs24, import_path26, import_os21, import_child_process5, LAUNCHD_LABEL, LAUNCHD_PLIST, SYSTEMD_UNIT_DIR, SYSTEMD_UNIT;
 var init_service = __esm({
   "src/daemon/service.ts"() {
     "use strict";
     import_fs24 = __toESM(require("fs"));
     import_path26 = __toESM(require("path"));
     import_os21 = __toESM(require("os"));
-    import_child_process6 = require("child_process");
+    import_child_process5 = require("child_process");
     LAUNCHD_LABEL = "ai.node9.daemon";
     LAUNCHD_PLIST = import_path26.default.join(import_os21.default.homedir(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
     SYSTEMD_UNIT_DIR = import_path26.default.join(import_os21.default.homedir(), ".config", "systemd", "user");
@@ -14898,7 +15211,7 @@ function daemonStatus() {
       processStatus = import_chalk5.default.yellow("not running (stale PID file)");
     }
   } else {
-    const r = (0, import_child_process7.spawnSync)("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
+    const r = (0, import_child_process6.spawnSync)("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
       encoding: "utf8",
       timeout: 500
     });
@@ -14913,13 +15226,13 @@ function daemonStatus() {
   console.log(`  Service : ${serviceLabel}
 `);
 }
-var import_fs25, import_chalk5, import_child_process7, MAX_PID;
+var import_fs25, import_chalk5, import_child_process6, MAX_PID;
 var init_daemon2 = __esm({
   "src/daemon/index.ts"() {
     "use strict";
     import_fs25 = __toESM(require("fs"));
     import_chalk5 = __toESM(require("chalk"));
-    import_child_process7 = require("child_process");
+    import_child_process6 = require("child_process");
     init_server();
     init_state2();
     init_service();
@@ -15018,10 +15331,13 @@ function wrappedLineCount(text) {
   const len = visibleLength(text);
   return Math.max(1, Math.ceil(len / cols));
 }
-function agentLabel(agent) {
-  if (!agent || agent === "Terminal") return "";
+function agentLabel(agent, mcpServer) {
+  if (!agent || agent === "Terminal") {
+    return mcpServer ? import_chalk27.default.dim(`[\u2192 ${mcpServer}] `) : "";
+  }
   const short = agent === "Claude Code" ? "Claude" : agent === "Gemini CLI" ? "Gemini" : agent === "Unknown Agent" ? "" : agent.split(" ")[0];
-  return short ? import_chalk27.default.dim(`[${short}] `) : "";
+  if (!short) return mcpServer ? import_chalk27.default.dim(`[\u2192 ${mcpServer}] `) : "";
+  return mcpServer ? import_chalk27.default.dim(`[${short} \u2192 ${mcpServer}] `) : import_chalk27.default.dim(`[${short}] `);
 }
 function formatBase(activity) {
   const time = new Date(activity.ts).toLocaleTimeString([], { hour12: false });
@@ -15029,7 +15345,7 @@ function formatBase(activity) {
   const toolName = activity.tool.slice(0, 16).padEnd(16);
   const argsStr = JSON.stringify(activity.args ?? {}).replace(/\s+/g, " ").replaceAll(import_os37.default.homedir(), "~");
   const argsPreview = argsStr.length > 70 ? argsStr.slice(0, 70) + "\u2026" : argsStr;
-  return `${import_chalk27.default.gray(time)} ${icon} ${agentLabel(activity.agent)}${import_chalk27.default.white.bold(toolName)} ${import_chalk27.default.dim(argsPreview)}`;
+  return `${import_chalk27.default.gray(time)} ${icon} ${agentLabel(activity.agent, activity.mcpServer)}${import_chalk27.default.white.bold(toolName)} ${import_chalk27.default.dim(argsPreview)}`;
 }
 function renderResult(activity, result) {
   const base = formatBase(activity);
@@ -15083,7 +15399,7 @@ async function ensureDaemon() {
   } catch {
   }
   console.log(import_chalk27.default.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon..."));
-  const child = (0, import_child_process16.spawn)(process.execPath, [process.argv[1], "daemon"], {
+  const child = (0, import_child_process15.spawn)(process.execPath, [process.argv[1], "daemon"], {
     detached: true,
     stdio: "ignore",
     env: { ...process.env, NODE9_AUTO_STARTED: "1" }
@@ -15483,22 +15799,6 @@ async function startTail(options = {}) {
     process.stdin.on("keypress", onKeypress);
   }
   const dashboardUrl = `http://127.0.0.1:${port}/`;
-  try {
-    const browserEnabled = getConfig().settings.approvers?.browser !== false;
-    if (browserEnabled) {
-      if (process.platform === "darwin") (0, import_child_process16.execSync)(`open "${dashboardUrl}"`, { stdio: "ignore" });
-      else if (process.platform === "win32")
-        (0, import_child_process16.execSync)(`cmd /c start "" "${dashboardUrl}"`, { stdio: "ignore" });
-      else (0, import_child_process16.execSync)(`xdg-open "${dashboardUrl}"`, { stdio: "ignore" });
-      const intToken = getInternalToken();
-      fetch(`http://127.0.0.1:${port}/browser-opened`, {
-        method: "POST",
-        headers: intToken ? { "X-Node9-Internal": intToken } : {}
-      }).catch(() => {
-      });
-    }
-  } catch {
-  }
   const auditLog = import_path43.default.join(import_os37.default.homedir(), ".node9", "audit.log");
   try {
     const unackedDlp = import_fs41.default.readFileSync(auditLog, "utf-8").split("\n").filter((l) => l.includes('"response-dlp"')).length;
@@ -15678,6 +15978,17 @@ async function startTail(options = {}) {
         orphanedResults.set(data.id, data);
       }
     }
+    if (event === "execution-result") {
+      const exec = data;
+      const time = new Date(Date.now()).toLocaleTimeString([], { hour12: false });
+      const arrow = exec.isError ? import_chalk27.default.red("  \u21B3 \u2717") : import_chalk27.default.green("  \u21B3 \u2713");
+      const label = agentLabel(exec.agent, exec.mcpServer);
+      const tool = (exec.tool ?? "").slice(0, 16);
+      const duration = typeof exec.durationMs === "number" ? import_chalk27.default.dim(` (${exec.durationMs}ms)`) : "";
+      console.log(
+        `${import_chalk27.default.gray(time)} ${arrow} ${label}${import_chalk27.default.dim(tool)}${import_chalk27.default.dim(" completed")}${duration}`
+      );
+    }
   }
   req.on("error", (err2) => {
     const msg = err2.code === "ECONNREFUSED" ? "Daemon is not running. Start it with: node9 daemon start" : err2.message;
@@ -15686,7 +15997,7 @@ async function startTail(options = {}) {
     process.exit(1);
   });
 }
-var import_http2, import_chalk27, import_fs41, import_os37, import_path43, import_readline5, import_child_process16, PID_FILE, ICONS, MODEL_CONTEXT_LIMITS, RESET2, BOLD2, RED, YELLOW, CYAN, GRAY, GREEN, HIDE_CURSOR, SHOW_CURSOR, ERASE_DOWN, pendingShownForId, pendingWrappedLines, DIVIDER;
+var import_http2, import_chalk27, import_fs41, import_os37, import_path43, import_readline5, import_child_process15, PID_FILE, ICONS, MODEL_CONTEXT_LIMITS, RESET2, BOLD2, RED, YELLOW, CYAN, GRAY, GREEN, HIDE_CURSOR, SHOW_CURSOR, ERASE_DOWN, pendingShownForId, pendingWrappedLines, DIVIDER;
 var init_tail = __esm({
   "src/tui/tail.ts"() {
     "use strict";
@@ -15696,10 +16007,8 @@ var init_tail = __esm({
     import_os37 = __toESM(require("os"));
     import_path43 = __toESM(require("path"));
     import_readline5 = __toESM(require("readline"));
-    import_child_process16 = require("child_process");
+    import_child_process15 = require("child_process");
     init_daemon2();
-    init_daemon();
-    init_core();
     PID_FILE = import_path43.default.join(import_os37.default.homedir(), ".node9", "daemon.pid");
     ICONS = {
       bash: "\u{1F4BB}",
@@ -16153,7 +16462,7 @@ function parseDuration(str) {
 // src/proxy/index.ts
 var import_readline = __toESM(require("readline"));
 var import_chalk6 = __toESM(require("chalk"));
-var import_child_process8 = require("child_process");
+var import_child_process7 = require("child_process");
 var import_execa = require("execa");
 var import_execa2 = require("execa");
 init_orchestrator();
@@ -16241,11 +16550,11 @@ async function runProxy(targetCommand) {
   }
   console.error(import_chalk6.default.green(`\u{1F680} Node9 Proxy Active: Monitoring [${targetCommand}]`));
   const spawnEnv = { ...process.env, FORCE_COLOR: "1" };
-  const child = useShell ? (0, import_child_process8.spawn)("/bin/bash", ["-c", targetCommand], {
+  const child = useShell ? (0, import_child_process7.spawn)("/bin/bash", ["-c", targetCommand], {
     stdio: ["pipe", "pipe", "inherit"],
     shell: false,
     env: spawnEnv
-  }) : (0, import_child_process8.spawn)(executable, args, { stdio: ["pipe", "pipe", "inherit"], shell: false, env: spawnEnv });
+  }) : (0, import_child_process7.spawn)(executable, args, { stdio: ["pipe", "pipe", "inherit"], shell: false, env: spawnEnv });
   const agentIn = import_readline.default.createInterface({ input: process.stdin, terminal: false });
   agentIn.on("line", async (line) => {
     let message;
@@ -16314,7 +16623,7 @@ init_daemon_starter();
 // src/cli/commands/check.ts
 var import_chalk7 = __toESM(require("chalk"));
 var import_fs28 = __toESM(require("fs"));
-var import_child_process10 = require("child_process");
+var import_child_process9 = require("child_process");
 var import_path29 = __toESM(require("path"));
 var import_os24 = __toESM(require("os"));
 init_orchestrator();
@@ -16323,7 +16632,7 @@ init_config();
 init_policy();
 
 // src/undo.ts
-var import_child_process9 = require("child_process");
+var import_child_process8 = require("child_process");
 var import_crypto8 = __toESM(require("crypto"));
 var import_fs26 = __toESM(require("fs"));
 var import_net3 = __toESM(require("net"));
@@ -16436,7 +16745,7 @@ function ensureShadowRepo(shadowDir, cwd) {
   cleanOrphanedIndexFiles(shadowDir);
   const normalizedCwd = normalizeCwdForHash(cwd);
   const shadowEnvBase = { ...process.env, GIT_DIR: shadowDir, GIT_WORK_TREE: cwd };
-  const check = (0, import_child_process9.spawnSync)("git", ["rev-parse", "--git-dir"], {
+  const check = (0, import_child_process8.spawnSync)("git", ["rev-parse", "--git-dir"], {
     env: shadowEnvBase,
     timeout: 3e3
   });
@@ -16462,17 +16771,17 @@ function ensureShadowRepo(shadowDir, cwd) {
     import_fs26.default.mkdirSync(shadowDir, { recursive: true });
   } catch {
   }
-  const init = (0, import_child_process9.spawnSync)("git", ["init", "--bare", shadowDir], { timeout: 5e3 });
+  const init = (0, import_child_process8.spawnSync)("git", ["init", "--bare", shadowDir], { timeout: 5e3 });
   if (init.status !== 0 || init.error) {
     const reason = init.error ? init.error.message : init.stderr?.toString();
     if (process.env.NODE9_DEBUG === "1") console.error("[Node9] git init --bare failed:", reason);
     return false;
   }
   const configFile = import_path27.default.join(shadowDir, "config");
-  (0, import_child_process9.spawnSync)("git", ["config", "--file", configFile, "core.untrackedCache", "true"], {
+  (0, import_child_process8.spawnSync)("git", ["config", "--file", configFile, "core.untrackedCache", "true"], {
     timeout: 3e3
   });
-  (0, import_child_process9.spawnSync)("git", ["config", "--file", configFile, "core.fsmonitor", "true"], {
+  (0, import_child_process8.spawnSync)("git", ["config", "--file", configFile, "core.fsmonitor", "true"], {
     timeout: 3e3
   });
   try {
@@ -16483,7 +16792,7 @@ function ensureShadowRepo(shadowDir, cwd) {
 }
 function buildGitEnv(cwd) {
   const shadowDir = getShadowRepoDir(cwd);
-  const check = (0, import_child_process9.spawnSync)("git", ["rev-parse", "--git-dir"], {
+  const check = (0, import_child_process8.spawnSync)("git", ["rev-parse", "--git-dir"], {
     env: { ...process.env, GIT_DIR: shadowDir, GIT_WORK_TREE: cwd },
     timeout: 2e3
   });
@@ -16508,11 +16817,11 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
       GIT_WORK_TREE: cwd,
       GIT_INDEX_FILE: indexFile
     };
-    (0, import_child_process9.spawnSync)("git", ["add", "-A"], { env: shadowEnv, timeout: GIT_TIMEOUT });
-    const treeRes = (0, import_child_process9.spawnSync)("git", ["write-tree"], { env: shadowEnv, timeout: GIT_TIMEOUT });
+    (0, import_child_process8.spawnSync)("git", ["add", "-A"], { env: shadowEnv, timeout: GIT_TIMEOUT });
+    const treeRes = (0, import_child_process8.spawnSync)("git", ["write-tree"], { env: shadowEnv, timeout: GIT_TIMEOUT });
     const treeHash = treeRes.stdout?.toString().trim();
     if (!treeHash || treeRes.status !== 0) return null;
-    const commitRes = (0, import_child_process9.spawnSync)(
+    const commitRes = (0, import_child_process8.spawnSync)(
       "git",
       ["commit-tree", treeHash, "-m", `Node9 AI Snapshot: ${(/* @__PURE__ */ new Date()).toISOString()}`],
       { env: shadowEnv, timeout: GIT_TIMEOUT }
@@ -16524,7 +16833,7 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
     let capturedFiles = [];
     let capturedDiff = null;
     if (prevEntry) {
-      const filesRes = (0, import_child_process9.spawnSync)("git", ["diff", "--name-only", prevEntry.hash, commitHash], {
+      const filesRes = (0, import_child_process8.spawnSync)("git", ["diff", "--name-only", prevEntry.hash, commitHash], {
         env: shadowEnv,
         timeout: GIT_TIMEOUT
       });
@@ -16534,7 +16843,7 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
       if (capturedFiles.length === 0) {
         return prevEntry.hash;
       }
-      const diffRes = (0, import_child_process9.spawnSync)("git", ["diff", prevEntry.hash, commitHash], {
+      const diffRes = (0, import_child_process8.spawnSync)("git", ["diff", prevEntry.hash, commitHash], {
         env: shadowEnv,
         timeout: GIT_TIMEOUT
       });
@@ -16542,7 +16851,7 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
         capturedDiff = diffRes.stdout?.toString() || null;
       }
     } else {
-      const filesRes = (0, import_child_process9.spawnSync)("git", ["ls-tree", "-r", "--name-only", commitHash], {
+      const filesRes = (0, import_child_process8.spawnSync)("git", ["ls-tree", "-r", "--name-only", commitHash], {
         env: shadowEnv,
         timeout: GIT_TIMEOUT
       });
@@ -16575,7 +16884,7 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
     notifySnapshotTaken(commitHash.slice(0, 7), tool, entry.argsSummary, capturedFiles.length);
     import_fs26.default.writeFileSync(UNDO_LATEST_PATH, commitHash);
     if (shouldGc) {
-      (0, import_child_process9.spawn)("git", ["gc", "--auto"], { env: shadowEnv, detached: true, stdio: "ignore" }).unref();
+      (0, import_child_process8.spawn)("git", ["gc", "--auto"], { env: shadowEnv, detached: true, stdio: "ignore" }).unref();
     }
     return commitHash;
   } catch (err2) {
@@ -16596,14 +16905,14 @@ function getSnapshotHistory() {
 function computeUndoDiff(hash, cwd) {
   try {
     const env = buildGitEnv(cwd);
-    const statRes = (0, import_child_process9.spawnSync)("git", ["diff", hash, "--stat", "--", "."], {
+    const statRes = (0, import_child_process8.spawnSync)("git", ["diff", hash, "--stat", "--", "."], {
       cwd,
       env,
       timeout: GIT_TIMEOUT
     });
     const stat = statRes.stdout?.toString().trim();
     if (!stat || statRes.status !== 0) return null;
-    const diffRes = (0, import_child_process9.spawnSync)("git", ["diff", hash, "--", "."], {
+    const diffRes = (0, import_child_process8.spawnSync)("git", ["diff", hash, "--", "."], {
       cwd,
       env,
       timeout: GIT_TIMEOUT
@@ -16622,7 +16931,7 @@ function applyUndo(hash, cwd) {
   try {
     const dir = cwd ?? process.cwd();
     const env = buildGitEnv(dir);
-    const restore = (0, import_child_process9.spawnSync)("git", ["restore", "--source", hash, "--staged", "--worktree", "."], {
+    const restore = (0, import_child_process8.spawnSync)("git", ["restore", "--source", hash, "--staged", "--worktree", "."], {
       cwd: dir,
       env,
       timeout: GIT_TIMEOUT
@@ -16634,7 +16943,7 @@ function applyUndo(hash, cwd) {
       }
       return false;
     }
-    const lsTree = (0, import_child_process9.spawnSync)("git", ["ls-tree", "-r", "--name-only", hash], {
+    const lsTree = (0, import_child_process8.spawnSync)("git", ["ls-tree", "-r", "--name-only", hash], {
       cwd: dir,
       env,
       timeout: GIT_TIMEOUT
@@ -16653,8 +16962,8 @@ function applyUndo(hash, cwd) {
 `);
       return false;
     }
-    const tracked = (0, import_child_process9.spawnSync)("git", ["ls-files"], { cwd: dir, env, timeout: GIT_TIMEOUT }).stdout?.toString().trim().split("\n").filter(Boolean) ?? [];
-    const untracked = (0, import_child_process9.spawnSync)("git", ["ls-files", "--others", "--exclude-standard"], {
+    const tracked = (0, import_child_process8.spawnSync)("git", ["ls-files"], { cwd: dir, env, timeout: GIT_TIMEOUT }).stdout?.toString().trim().split("\n").filter(Boolean) ?? [];
+    const untracked = (0, import_child_process8.spawnSync)("git", ["ls-files", "--others", "--exclude-standard"], {
       cwd: dir,
       env,
       timeout: GIT_TIMEOUT
@@ -16904,7 +17213,7 @@ RAW: ${raw}
             ]) {
               delete safeEnv[key];
             }
-            const d = (0, import_child_process10.spawn)(process.execPath, [scriptPath, "daemon"], {
+            const d = (0, import_child_process9.spawn)(process.execPath, [scriptPath, "daemon"], {
               detached: true,
               stdio: "ignore",
               env: { ...safeEnv, NODE9_AUTO_STARTED: "1", NODE9_BROWSER_OPENED: "1" }
@@ -17736,7 +18045,7 @@ var import_chalk9 = __toESM(require("chalk"));
 var import_fs30 = __toESM(require("fs"));
 var import_path31 = __toESM(require("path"));
 var import_os26 = __toESM(require("os"));
-var import_child_process11 = require("child_process");
+var import_child_process10 = require("child_process");
 init_daemon();
 function registerDoctorCommand(program2, version2) {
   program2.command("doctor").description("Check that Node9 is installed and configured correctly").action(() => {
@@ -17762,7 +18071,7 @@ function registerDoctorCommand(program2, version2) {
 `));
     section("Binary");
     try {
-      const which = (0, import_child_process11.execSync)("which node9", { encoding: "utf-8", timeout: 3e3 }).trim();
+      const which = (0, import_child_process10.execSync)("which node9", { encoding: "utf-8", timeout: 3e3 }).trim();
       pass(`node9 found at ${which}`);
     } catch {
       warn(
@@ -17780,7 +18089,7 @@ function registerDoctorCommand(program2, version2) {
       );
     }
     try {
-      const gitVersion = (0, import_child_process11.execSync)("git --version", { encoding: "utf-8", timeout: 3e3 }).trim();
+      const gitVersion = (0, import_child_process10.execSync)("git --version", { encoding: "utf-8", timeout: 3e3 }).trim();
       pass(gitVersion);
     } catch {
       warn(
@@ -18663,7 +18972,7 @@ function registerReportCommand(program2) {
 
 // src/cli/commands/daemon-cmd.ts
 var import_chalk12 = __toESM(require("chalk"));
-var import_child_process12 = require("child_process");
+var import_child_process11 = require("child_process");
 init_daemon2();
 init_daemon();
 init_daemon_starter();
@@ -18704,7 +19013,7 @@ function registerDaemonCommand(program2) {
       if (cmd === "restart") {
         stopDaemon();
         await new Promise((r) => setTimeout(r, 500));
-        const child = (0, import_child_process12.spawn)(process.execPath, [process.argv[1], "daemon"], {
+        const child = (0, import_child_process11.spawn)(process.execPath, [process.argv[1], "daemon"], {
           detached: true,
           stdio: "ignore",
           env: { ...process.env, NODE9_AUTO_STARTED: "1", NODE9_BROWSER_OPENED: "1" }
@@ -18738,7 +19047,7 @@ function registerDaemonCommand(program2) {
           console.log(import_chalk12.default.green(`\u{1F310}  Opened browser: http://${DAEMON_HOST}:${DAEMON_PORT}/`));
           process.exit(0);
         }
-        const child = (0, import_child_process12.spawn)(process.execPath, [process.argv[1], "daemon"], {
+        const child = (0, import_child_process11.spawn)(process.execPath, [process.argv[1], "daemon"], {
           detached: true,
           stdio: "ignore"
         });
@@ -18753,7 +19062,7 @@ function registerDaemonCommand(program2) {
         process.exit(0);
       }
       if (options.background) {
-        const child = (0, import_child_process12.spawn)(process.execPath, [process.argv[1], "daemon"], {
+        const child = (0, import_child_process11.spawn)(process.execPath, [process.argv[1], "daemon"], {
           detached: true,
           stdio: "ignore"
         });
@@ -18961,14 +19270,18 @@ function fireTelemetryPing(agents) {
   }
 }
 function registerInitCommand(program2) {
-  program2.command("init").description("Set up Node9: create config and wire all detected AI agents").option("--force", "Overwrite existing config").option("-m, --mode <mode>", "Set initial security mode (standard, strict, audit)", "standard").option("--skip-setup", "Only create config \u2014 do not wire AI agents").option(
+  program2.command("init").description("Set up Node9: create config and wire all detected AI agents").option("--force", "Overwrite existing config").option(
+    "-m, --mode <mode>",
+    "Initial security mode: standard | strict | audit | observe (logs would-block, never blocks)",
+    "standard"
+  ).option("--skip-setup", "Only create config \u2014 do not wire AI agents").option(
     "--recommended",
     "Non-interactive: enable bash-safe + filesystem + project-jail shields without prompting"
   ).action(
     async (options) => {
       console.log(import_chalk14.default.cyan.bold("\n\u{1F6E1}\uFE0F  Node9 Init\n"));
       let chosenMode = options.mode.toLowerCase();
-      if (!["standard", "strict", "audit"].includes(chosenMode)) {
+      if (!["standard", "strict", "audit", "observe"].includes(chosenMode)) {
         chosenMode = DEFAULT_CONFIG.settings.mode;
       }
       {
@@ -19409,7 +19722,7 @@ function registerUndoCommand(program2) {
 
 // src/cli/commands/watch.ts
 var import_chalk17 = __toESM(require("chalk"));
-var import_child_process13 = require("child_process");
+var import_child_process12 = require("child_process");
 init_daemon();
 function registerWatchCommand(program2) {
   program2.command("watch").description("Run a command under Node9 watch mode (daemon stays alive for the session)").argument("<command>", "Command to run").argument("[args...]", "Arguments for the command").action(async (cmd, args) => {
@@ -19426,7 +19739,7 @@ function registerWatchCommand(program2) {
       }
     } catch {
       console.error(import_chalk17.default.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon (watch mode)..."));
-      const child = (0, import_child_process13.spawn)(process.execPath, [process.argv[1], "daemon"], {
+      const child = (0, import_child_process12.spawn)(process.execPath, [process.argv[1], "daemon"], {
         detached: true,
         stdio: "ignore",
         env: { ...process.env, NODE9_AUTO_STARTED: "1", NODE9_WATCH_MODE: "1" }
@@ -19456,7 +19769,7 @@ function registerWatchCommand(program2) {
         "\n   Tip: run `node9 tail` in another terminal to review and approve AI actions.\n"
       )
     );
-    const result = (0, import_child_process13.spawnSync)(cmd, args, {
+    const result = (0, import_child_process12.spawnSync)(cmd, args, {
       stdio: "inherit",
       env: { ...process.env, NODE9_WATCH_MODE: "1" }
     });
@@ -19471,7 +19784,7 @@ function registerWatchCommand(program2) {
 // src/mcp-gateway/index.ts
 var import_readline3 = __toESM(require("readline"));
 var import_chalk18 = __toESM(require("chalk"));
-var import_child_process14 = require("child_process");
+var import_child_process13 = require("child_process");
 var import_execa3 = require("execa");
 init_orchestrator();
 init_provenance();
@@ -19593,6 +19906,18 @@ function extractMcpServer(toolName) {
   const match = toolName.match(/^mcp__([^_](?:[^_]|_(?!_))*?)__/i);
   return match?.[1];
 }
+function normalizeClientName(name) {
+  if (typeof name !== "string" || name.length === 0) return void 0;
+  const lower = name.toLowerCase();
+  if (lower.includes("claude")) return "Claude";
+  if (lower.includes("cursor")) return "Cursor";
+  if (lower.includes("codex")) return "Codex";
+  if (lower.includes("gemini")) return "Gemini";
+  if (lower.includes("cline")) return "Cline";
+  if (lower.includes("continue")) return "Continue";
+  const sanitized = sanitize4(name).slice(0, 40);
+  return sanitized.length > 0 ? sanitized : void 0;
+}
 function tokenize4(cmd) {
   const tokens = [];
   let current = "";
@@ -19665,7 +19990,7 @@ async function runMcpGateway(upstreamCommand) {
   const safeEnv = Object.fromEntries(
     Object.entries(process.env).filter(([k]) => !UPSTREAM_INJECTOR_VARS.has(k))
   );
-  const child = (0, import_child_process14.spawn)(executable, cmdArgs, {
+  const child = (0, import_child_process13.spawn)(executable, cmdArgs, {
     stdio: ["pipe", "pipe", "inherit"],
     // control stdin/stdout; inherit stderr
     shell: false,
@@ -19679,6 +20004,8 @@ async function runMcpGateway(upstreamCommand) {
   let pinState = "pending";
   const pendingToolCalls = [];
   const pendingCallNames = /* @__PURE__ */ new Map();
+  const pendingExecutions = /* @__PURE__ */ new Map();
+  let clientName;
   const agentIn = import_readline3.default.createInterface({ input: process.stdin, terminal: false });
   agentIn.on("line", async (line) => {
     let message;
@@ -19701,6 +20028,13 @@ async function runMcpGateway(upstreamCommand) {
       child.stdin.write(line + "\n");
       return;
     }
+    if (message.method === "initialize") {
+      clientName = normalizeClientName(
+        message.params?.clientInfo?.name
+      );
+      child.stdin.write(line + "\n");
+      return;
+    }
     if (message.method === "tools/list" && message.id !== void 0 && message.id !== null) {
       pendingToolsListIds.add(message.id);
     }
@@ -19746,7 +20080,7 @@ async function runMcpGateway(upstreamCommand) {
         const toolArgs = message.params?.arguments ?? message.params?.tool_input ?? {};
         const mcpServer = extractMcpServer(toolName);
         const result = await authorizeHeadless(toolName, toolArgs, {
-          agent: "MCP-Gateway",
+          agent: clientName ?? "MCP-Gateway",
           mcpServer
         });
         if (!result.approved) {
@@ -19776,6 +20110,12 @@ async function runMcpGateway(upstreamCommand) {
         }
         if (message.id !== void 0 && message.id !== null) {
           pendingCallNames.set(message.id, toolName);
+          pendingExecutions.set(message.id, {
+            ts: Date.now(),
+            toolName,
+            agent: clientName,
+            mcpServer
+          });
         }
         child.stdin.write(line + "\n");
       } catch {
@@ -19917,6 +20257,26 @@ async function runMcpGateway(upstreamCommand) {
         return;
       }
     }
+    const respId = parsed?.id;
+    if (respId !== void 0 && respId !== null) {
+      const exec = pendingExecutions.get(respId);
+      if (exec) {
+        pendingExecutions.delete(respId);
+        const durationMs = Date.now() - exec.ts;
+        const isError = parsed?.error !== void 0;
+        notifyActivitySocket({
+          id: String(respId),
+          ts: Date.now(),
+          tool: exec.toolName,
+          status: "execution-completed",
+          durationMs,
+          agent: exec.agent,
+          mcpServer: exec.mcpServer,
+          isError
+        }).catch(() => {
+        });
+      }
+    }
     const LARGE_RESPONSE_THRESHOLD = 5e5;
     if (parsed?.result && line.length > LARGE_RESPONSE_THRESHOLD) {
       const callId = parsed.id;
@@ -19977,7 +20337,7 @@ var import_readline4 = __toESM(require("readline"));
 var import_fs36 = __toESM(require("fs"));
 var import_os32 = __toESM(require("os"));
 var import_path38 = __toESM(require("path"));
-var import_child_process15 = require("child_process");
+var import_child_process14 = require("child_process");
 init_core();
 init_daemon();
 init_shields();
@@ -20451,7 +20811,7 @@ function handleRuleAdd(args) {
   return `Rule "${name}" added to ~/.node9/config.json \u2014 verdict: ${verdict} when ${field} matches "${pattern}"`;
 }
 function runCliCommand(subArgs) {
-  const result = (0, import_child_process15.spawnSync)(process.execPath, [process.argv[1], ...subArgs], {
+  const result = (0, import_child_process14.spawnSync)(process.execPath, [process.argv[1], ...subArgs], {
     encoding: "utf-8",
     timeout: 6e4,
     // Disable colors — stdout is piped (not a TTY), chalk auto-detects, but be explicit