@node9/proxy 1.16.0 → 1.17.0

package/dist/cli.mjs

@@ -4709,15 +4709,17 @@ async function authorizeHeadless(toolName, args, meta, options) {
   if (!options?.calledFromDaemon) {
     const actId = randomUUID();
     const actTs = Date.now();
+    const stripAnsi2 = (s) => s.replace(/\x1b(?:\[[0-9;?]*[a-zA-Z]|\][^\x07\x1b]*(?:\x07|\x1b\\)|[@-_])/g, "");
+    const sanitizedAgent = meta?.agent ? stripAnsi2(meta.agent).slice(0, 80) : void 0;
+    const sanitizedMcpServer = meta?.mcpServer ? stripAnsi2(meta.mcpServer).slice(0, 40) : void 0;
     const socketOk = await notifyActivity({
       id: actId,
       ts: actTs,
       tool: toolName,
       args,
       status: "pending",
-      // Strip ANSI escape sequences — agent name comes from caller-supplied metadata
-      // and may be displayed in a terminal (node9 tail/watch), enabling injection.
-      agent: meta?.agent ? meta.agent.replace(/\x1b(?:\[[0-9;?]*[a-zA-Z]|\][^\x07\x1b]*(?:\x07|\x1b\\)|[@-_])/g, "").slice(0, 80) : void 0
+      agent: sanitizedAgent,
+      mcpServer: sanitizedMcpServer
     });
     const result = await _authorizeHeadlessCore(toolName, args, meta, {
       ...options,
@@ -4735,7 +4737,9 @@ async function authorizeHeadless(toolName, args, meta, options) {
         status: result.approved ? "allow" : result.blockedByLabel?.includes("DLP") ? "dlp" : result.blockedByLabel?.includes("Taint") ? "taint" : "block",
         label: result.blockedByLabel,
         ruleHit: result.ruleHit,
-        observeWouldBlock: result.observeWouldBlock
+        observeWouldBlock: result.observeWouldBlock,
+        agent: sanitizedAgent,
+        mcpServer: sanitizedMcpServer
       });
     }
     return result;
@@ -10359,7 +10363,7 @@ function openBrowserLocal() {
   } catch {
   }
 }
-async function autoStartDaemonAndWait(openBrowser2 = true) {
+async function autoStartDaemonAndWait(openBrowser = false) {
   if (isTestingMode()) return false;
   if (!path15.isAbsolute(process.argv[1])) return false;
   let resolvedArgv1;
@@ -10379,7 +10383,7 @@ async function autoStartDaemonAndWait(openBrowser2 = true) {
       env: {
         ...process.env,
         NODE9_AUTO_STARTED: "1",
-        ...openBrowser2 && { NODE9_BROWSER_OPENED: "1" }
+        ...openBrowser && { NODE9_BROWSER_OPENED: "1" }
       }
     });
     child.unref();
@@ -10391,7 +10395,7 @@ async function autoStartDaemonAndWait(openBrowser2 = true) {
           signal: AbortSignal.timeout(500)
         });
         if (res.ok) {
-          if (openBrowser2) {
+          if (openBrowser) {
             openBrowserLocal();
           }
           return true;
@@ -11779,370 +11783,681 @@ function printRuleGroup(rule, topN, drillDown, previewWidth) {
     );
   }
 }
-function registerScanCommand(program2) {
-  program2.command("scan").description("Forecast: scan agent history and show what node9 would catch if installed").option("--all", "Scan all history (default: last 30 days)").option("--days <n>", "Scan last N days of history", "30").option("--top <n>", "Max findings to show per rule (default: 5)", "5").option("--drill-down", "Show all findings with full commands and session IDs").action(async (options) => {
-    const drillDown = options.drillDown ?? false;
-    const topN = drillDown ? Infinity : Math.max(1, parseInt(options.top, 10) || 5);
-    const previewWidth = 70;
-    const startDate = options.all ? null : (() => {
-      const d = /* @__PURE__ */ new Date();
-      d.setDate(d.getDate() - (parseInt(options.days, 10) || 30));
-      d.setHours(0, 0, 0, 0);
-      return d;
-    })();
-    const isWired = getAgentsStatus().some((a) => a.wired);
-    console.log("");
-    if (!isWired) {
-      console.log(
-        chalk3.bold("\u{1F6E1}  node9") + chalk3.dim("  \u2014  security layer for AI coding agents")
-      );
-      console.log(
-        chalk3.dim("   Intercepts dangerous tool calls before they execute. No config needed.")
-      );
-      console.log("");
+function compactRuleLabel(name) {
+  let label = name.replace(/^shield:[^:]+:/, "");
+  label = label.replace(/^(block|review|allow)-/, "");
+  return label.replace(/-+/g, "-");
+}
+function renderCompactScorecard(input) {
+  const { scan, summary, blast, blastExposures, blockedCount, reviewCount } = input;
+  const totalRisky = scan.findings.length + scan.dlpFindings.length;
+  const dateRange = scan.firstDate && scan.lastDate ? `${fmtTs(scan.firstDate)} \u2013 ${fmtTs(scan.lastDate)}` : "";
+  console.log(
+    chalk3.bold("\u{1F6E1}  Node9 Scan") + chalk3.dim("  \xB7  ") + chalk3.white(num(scan.sessions)) + chalk3.dim(" sessions  \xB7  ") + chalk3.white(num(scan.totalToolCalls)) + chalk3.dim(" tool calls") + (dateRange ? chalk3.dim("  \xB7  " + dateRange) : "")
+  );
+  console.log("");
+  const scoreColor = blast.score >= 80 ? chalk3.green : blast.score >= 50 ? chalk3.yellow : chalk3.red;
+  const scoreSeverity = blast.score >= 80 ? "Good" : blast.score >= 50 ? "At Risk" : "Critical";
+  console.log(
+    chalk3.bold("Security Score: ") + scoreColor.bold(`${blast.score}/100`) + chalk3.dim("  \xB7  ") + scoreColor(scoreSeverity)
+  );
+  if (scan.totalCostUSD > 0) {
+    console.log(
+      chalk3.bold(fmtCost(scan.totalCostUSD)) + chalk3.dim(" AI spend  \xB7  ") + chalk3.bold(`${totalRisky}`) + chalk3.dim(` risky operation${totalRisky !== 1 ? "s" : ""}`)
+    );
+  }
+  console.log("");
+  if (scan.dlpFindings.length > 0) {
+    const patternCounts = /* @__PURE__ */ new Map();
+    for (const f of scan.dlpFindings) {
+      patternCounts.set(f.patternName, (patternCounts.get(f.patternName) ?? 0) + 1);
     }
+    const topPatterns = [...patternCounts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3).map(([name, count]) => count > 1 ? `${name} \xD7${count}` : name).join(", ");
     console.log(
-      chalk3.cyan.bold("\u{1F50D}  Scanning your AI history") + chalk3.dim("  \u2014 what would node9 have caught?")
+      chalk3.red("\u{1F511}  ") + chalk3.red.bold(String(scan.dlpFindings.length).padEnd(4)) + chalk3.dim("credential leak".padEnd(20)) + chalk3.dim(`(${topPatterns})`)
     );
-    console.log("");
-    const useTTY = process.stdout.isTTY === true && process.env.NODE9_WRAPPER !== "1";
-    if (!useTTY) {
-      process.stdout.write(
-        "  " + chalk3.dim("Scanning your history \u2014 this may take a moment...\n")
-      );
+  }
+  if (blockedCount > 0) {
+    const blockedRules = [];
+    for (const section of summary.sections) {
+      for (const rule of section.rules) {
+        if (rule.verdict === "block") {
+          blockedRules.push({ name: rule.name, count: rule.findings.length });
+        }
+      }
     }
-    const totalFiles = countScanFiles();
-    let filesScanned = 0;
-    let linesScanned = 0;
-    let lastRender = 0;
-    const onProgress = (done) => {
-      filesScanned = done;
-      if (useTTY) renderProgressBar(filesScanned, totalFiles, linesScanned);
-      lastRender = Date.now();
-    };
-    const onLine = () => {
-      linesScanned++;
-      const now = Date.now();
-      if (useTTY && now - lastRender >= 80) {
-        lastRender = now;
-        renderProgressBar(filesScanned, totalFiles, linesScanned);
+    const topBlocked = blockedRules.sort((a, b) => b.count - a.count).slice(0, 3).map(
+      (r) => r.count > 1 ? `${compactRuleLabel(r.name)} \xD7${r.count}` : compactRuleLabel(r.name)
+    ).join(", ");
+    console.log(
+      chalk3.red("\u{1F6D1}  ") + chalk3.red.bold(String(blockedCount).padEnd(4)) + chalk3.dim("would have blocked".padEnd(20)) + chalk3.dim(`(${topBlocked})`)
+    );
+  }
+  if (scan.loopFindings.length > 0) {
+    const wastedCalls = scan.loopFindings.reduce((s, l) => s + Math.max(0, l.count - 1), 0);
+    const wastePct = scan.totalToolCalls > 0 ? Math.round(wastedCalls / scan.totalToolCalls * 100) : 0;
+    const wasteParts = [];
+    if (wastePct > 0) wasteParts.push(`${wastePct}% wasted`);
+    if (summary.loopWastedUSD > 0) wasteParts.push("~" + fmtCost(summary.loopWastedUSD));
+    const wasteSummary = wasteParts.length ? `(${wasteParts.join("  \xB7  ")})` : "";
+    console.log(
+      chalk3.yellow("\u{1F501}  ") + chalk3.yellow.bold(String(scan.loopFindings.length).padEnd(4)) + chalk3.dim("agent loops".padEnd(20)) + chalk3.dim(wasteSummary)
+    );
+  }
+  if (reviewCount > 0) {
+    const reviewRules = [];
+    for (const section of summary.sections) {
+      for (const rule of section.rules) {
+        if (rule.verdict !== "block") {
+          reviewRules.push({ name: rule.name, count: rule.findings.length });
+        }
       }
-    };
-    if (useTTY) renderProgressBar(0, totalFiles, 0);
-    const claudeScan = scanClaudeHistory(startDate, onProgress, onLine);
-    const geminiScan = scanGeminiHistory(
-      startDate,
-      (done) => onProgress(claudeScan.filesScanned + done),
-      onLine
+    }
+    const topReview = reviewRules.sort((a, b) => b.count - a.count).slice(0, 3).map(
+      (r) => r.count > 1 ? `${compactRuleLabel(r.name)} \xD7${r.count}` : compactRuleLabel(r.name)
+    ).join(", ");
+    console.log(
+      chalk3.yellow("\u{1F441}  ") + chalk3.yellow.bold(String(reviewCount).padEnd(4)) + chalk3.dim("flagged for review".padEnd(20)) + chalk3.dim(`(${topReview})`)
     );
-    const codexScan = scanCodexHistory(
-      startDate,
-      (done) => onProgress(claudeScan.filesScanned + geminiScan.filesScanned + done),
-      onLine
+  }
+  console.log("");
+  if (blastExposures > 0) {
+    const categories = /* @__PURE__ */ new Set();
+    for (const r of blast.reachable) {
+      const lower = r.label.toLowerCase();
+      if (lower.includes("ssh")) categories.add("ssh");
+      else if (lower.includes("aws")) categories.add("aws");
+      else if (lower.includes("gcloud") || lower.includes("gcp")) categories.add("gcp");
+      else if (lower.includes("docker")) categories.add("docker");
+      else if (lower.includes("netrc")) categories.add("netrc");
+      else if (lower.includes("kube")) categories.add("k8s");
+      else if (lower.includes("npmrc")) categories.add("npm");
+      else categories.add("other");
+    }
+    if (blast.envFindings.length > 0) categories.add("env");
+    const catList = [...categories].slice(0, 6).join(" \xD7 ");
+    console.log(
+      chalk3.red("\u{1F52D}  ") + chalk3.dim("Blast radius".padEnd(24)) + chalk3.dim(`${catList} (${blastExposures} exposure${blastExposures !== 1 ? "s" : ""})`)
     );
-    const scan = mergeScans(mergeScans(claudeScan, geminiScan), codexScan);
-    scan.dlpFindings.push(...scanShellConfig());
-    const summary = buildScanSummary([
-      { id: "claude", label: "Claude", icon: "\u{1F916}", scan: claudeScan },
-      { id: "gemini", label: "Gemini", icon: "\u264A", scan: geminiScan },
-      { id: "codex", label: "Codex", icon: "\u{1F52E}", scan: codexScan }
-    ]);
-    if (useTTY) process.stdout.write("\r" + " ".repeat(60) + "\r");
-    if (scan.filesScanned === 0) {
-      console.log(chalk3.yellow("  No session history found."));
-      console.log(
-        chalk3.gray(
-          "  Supported: Claude Code (~/.claude/projects/) \xB7 Gemini CLI (~/.gemini/tmp/)\n"
-        )
-      );
-      return;
+    console.log("");
+  }
+  console.log(
+    chalk3.dim("\u2192  ") + chalk3.cyan("npx node9-ai scan") + chalk3.dim("       run this on your machine")
+  );
+  console.log(chalk3.dim("\u2192  github.com/node9-ai/node9-proxy"));
+  console.log("");
+}
+function classifyRuleSeverity(name, verdict) {
+  const n = name.toLowerCase();
+  const criticalPatterns = [
+    "rm-rf",
+    "eval-remote",
+    "eval-curl",
+    "read-aws",
+    "read-ssh",
+    "read-gcp",
+    "read-cred",
+    "delete-repo",
+    "helm-uninstall",
+    "drop-table",
+    "drop-database",
+    "drop-collection",
+    "truncate",
+    "flushall",
+    "flushdb",
+    "pipe-shell"
+  ];
+  if (criticalPatterns.some((p) => n.includes(p))) return "critical";
+  const highPatterns = [
+    "force-push",
+    "force_push",
+    "git-destructive",
+    "reset-hard",
+    "rebase",
+    "delete-branch",
+    "delete-remote"
+  ];
+  if (highPatterns.some((p) => n.includes(p))) return "high";
+  if (verdict === "block") return "high";
+  return "medium";
+}
+function narrativeRuleLabel(name) {
+  const stripped = compactRuleLabel(name);
+  const map = {
+    "read-aws": "AWS credentials read",
+    "read-ssh": "SSH private key read",
+    "read-gcp": "GCP credentials read",
+    "read-cred": "credential file read",
+    "delete-repo": "GitHub repository deletion",
+    "helm-uninstall": "helm uninstall",
+    "rm-rf-home": "rm -rf on home directory",
+    "eval-remote": "eval of remote download",
+    "pipe-shell": "curl | bash",
+    "drop-table": "DROP TABLE",
+    "drop-database": "DROP DATABASE",
+    truncate: "TRUNCATE",
+    flushall: "Redis FLUSHALL",
+    flushdb: "Redis FLUSHDB",
+    "force-push": "force pushes",
+    "git-destructive": "destructive git operations",
+    rm: "rm calls",
+    sudo: "sudo calls",
+    "eval-dynamic": "dynamic eval",
+    "config-set": "Redis CONFIG SET"
+  };
+  for (const [key, label] of Object.entries(map)) {
+    if (stripped.includes(key)) return label;
+  }
+  return stripped;
+}
+function renderNarrativeScorecard(input) {
+  const { scan, summary, blast, blastExposures } = input;
+  const critical = [];
+  const high = [];
+  const medium = [];
+  if (scan.dlpFindings.length > 0) {
+    const patterns = /* @__PURE__ */ new Map();
+    for (const f of scan.dlpFindings) {
+      patterns.set(f.patternName, (patterns.get(f.patternName) ?? 0) + 1);
+    }
+    const top = [...patterns.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3).map(([name, n]) => n > 1 ? `${name} \xD7${n}` : name).join(", ");
+    critical.push({
+      label: `${scan.dlpFindings.length} credential leak${scan.dlpFindings.length !== 1 ? "s" : ""} (${top})`,
+      count: scan.dlpFindings.length
+    });
+  }
+  for (const section of summary.sections) {
+    for (const rule of section.rules) {
+      const sev = classifyRuleSeverity(rule.name, rule.verdict);
+      const label = narrativeRuleLabel(rule.name);
+      const count = rule.findings.length;
+      const display = count > 1 ? `${label} \xD7${count}` : label;
+      const entry = { label: display, count };
+      if (sev === "critical") critical.push(entry);
+      else if (sev === "high") high.push(entry);
+      else medium.push(entry);
+    }
+  }
+  if (blastExposures > 0) {
+    high.push({
+      label: `${blastExposures} credential file${blastExposures !== 1 ? "s" : ""} reachable on disk`,
+      count: blastExposures
+    });
+  }
+  if (scan.loopFindings.length > 0) {
+    const wastedCalls = scan.loopFindings.reduce((s, l) => s + Math.max(0, l.count - 1), 0);
+    const wastePct = scan.totalToolCalls > 0 ? Math.round(wastedCalls / scan.totalToolCalls * 100) : 0;
+    const cost = summary.loopWastedUSD > 0 ? `, ~${fmtCost(summary.loopWastedUSD)} wasted` : "";
+    medium.push({
+      label: `${scan.loopFindings.length} agent loops (${wastePct}% of calls${cost})`,
+      count: scan.loopFindings.length
+    });
+  }
+  const sortByCount = (a, b) => b.count - a.count;
+  critical.sort(sortByCount);
+  high.sort(sortByCount);
+  medium.sort(sortByCount);
+  const criticalCount = critical.reduce((s, e) => s + e.count, 0);
+  const highCount = high.reduce((s, e) => s + e.count, 0);
+  const mediumCount = medium.reduce((s, e) => s + e.count, 0);
+  const dateRange = scan.firstDate && scan.lastDate ? `${fmtTs(scan.firstDate)} \u2013 ${fmtTs(scan.lastDate)}` : "";
+  console.log(
+    chalk3.bold("\u{1F6E1}  Node9 Scan") + chalk3.dim("  \xB7  ") + chalk3.white(num(scan.sessions)) + chalk3.dim(" sessions") + (scan.totalCostUSD > 0 ? chalk3.dim("  \xB7  ") + chalk3.bold(fmtCost(scan.totalCostUSD)) + chalk3.dim(" spend") : "") + (dateRange ? chalk3.dim("  \xB7  " + dateRange) : "")
+  );
+  console.log("");
+  const scoreColor = blast.score >= 80 ? chalk3.green : blast.score >= 50 ? chalk3.yellow : chalk3.red;
+  const scoreSeverity = blast.score >= 80 ? "Good" : blast.score >= 50 ? "At Risk" : "Critical";
+  console.log(
+    (blast.score < 50 ? chalk3.red.bold("\u26A0  ") : "") + chalk3.bold("Security Score: ") + scoreColor.bold(`${blast.score}/100`) + chalk3.dim("  \xB7  ") + scoreColor(scoreSeverity)
+  );
+  console.log("");
+  if (criticalCount > 0) {
+    console.log(
+      chalk3.red.bold("  \u{1F534}  CRITICAL  ") + chalk3.red(`${criticalCount} finding${criticalCount !== 1 ? "s" : ""}`)
+    );
+    for (const entry of critical.slice(0, 5)) {
+      console.log(chalk3.dim("     \u2022 ") + chalk3.red(entry.label));
     }
-    const rangeLabel = options.all ? chalk3.dim("all time") : chalk3.dim(`last ${options.days ?? 30} days`);
-    const dateRange = scan.firstDate && scan.lastDate ? chalk3.dim(`  ${fmtTs(scan.firstDate)} \u2013 ${fmtTs(scan.lastDate)}`) : "";
-    const breakdownParts = [];
-    if (claudeScan.sessions > 0)
-      breakdownParts.push(chalk3.cyan(String(claudeScan.sessions)) + chalk3.dim(" Claude"));
-    if (geminiScan.sessions > 0)
-      breakdownParts.push(chalk3.blue(String(geminiScan.sessions)) + chalk3.dim(" Gemini"));
-    if (codexScan.sessions > 0)
-      breakdownParts.push(chalk3.magenta(String(codexScan.sessions)) + chalk3.dim(" Codex"));
-    const sessionBreakdown = breakdownParts.length > 1 ? chalk3.dim("(") + breakdownParts.join(chalk3.dim(" \xB7 ")) + chalk3.dim(")") : "";
+    if (critical.length > 5) {
+      const remaining = critical.length - 5;
+      console.log(chalk3.dim(`     \u2022 \u2026 and ${remaining} more`));
+    }
+    console.log("");
+  }
+  if (highCount > 0) {
     console.log(
-      "  " + chalk3.white(num(scan.sessions)) + chalk3.dim(" sessions  ") + sessionBreakdown + (sessionBreakdown ? "  " : "") + chalk3.white(num(scan.totalToolCalls)) + chalk3.dim(" tool calls  ") + chalk3.white(num(scan.bashCalls)) + chalk3.dim(" bash commands  ") + rangeLabel + dateRange
+      chalk3.yellow.bold("  \u{1F7E1}  HIGH       ") + chalk3.yellow(`${highCount} finding${highCount !== 1 ? "s" : ""}`)
     );
+    for (const entry of high.slice(0, 5)) {
+      console.log(chalk3.dim("     \u2022 ") + chalk3.yellow(entry.label));
+    }
+    if (high.length > 5) {
+      const remaining = high.length - 5;
+      console.log(chalk3.dim(`     \u2022 \u2026 and ${remaining} more`));
+    }
     console.log("");
-    const totalFindings = scan.findings.length;
-    const blockedCount = scan.findings.filter((f) => f.source.rule.verdict === "block").length;
-    const reviewCount = totalFindings - blockedCount;
-    if (totalFindings === 0 && scan.dlpFindings.length === 0) {
-      console.log(chalk3.green("  \u2705 No risky operations found in your history."));
-      console.log(
-        chalk3.dim("  node9 is still worth running \u2014 it monitors every tool call in real time.\n")
-      );
-    } else {
-      const totalRisky = totalFindings + scan.dlpFindings.length;
-      const heroLine = isWired ? chalk3.bold(
-        `  Found ${chalk3.yellow(String(totalRisky))} risky operation${totalRisky !== 1 ? "s" : ""} in your history`
-      ) : chalk3.bold(
-        `  ${chalk3.red.bold(String(totalRisky))} risky operation${totalRisky !== 1 ? "s" : ""} found \u2014 none were blocked`
-      );
-      console.log(heroLine);
-      console.log("");
-      if (scan.totalCostUSD > 0) {
+  }
+  if (mediumCount > 0) {
+    console.log(
+      chalk3.bold("  \u{1F7E2}  MEDIUM     ") + chalk3.dim(`${mediumCount} finding${mediumCount !== 1 ? "s" : ""}`)
+    );
+    for (const entry of medium.slice(0, 5)) {
+      console.log(chalk3.dim("     \u2022 ") + chalk3.dim(entry.label));
+    }
+    if (medium.length > 5) {
+      const remaining = medium.length - 5;
+      console.log(chalk3.dim(`     \u2022 \u2026 and ${remaining} more`));
+    }
+    console.log("");
+  }
+  console.log(
+    chalk3.dim("\u2192  ") + chalk3.cyan("npx node9-ai scan") + chalk3.dim("       run this on your machine")
+  );
+  console.log(chalk3.dim("\u2192  github.com/node9-ai/node9-proxy"));
+  console.log("");
+}
+function registerScanCommand(program2) {
+  program2.command("scan").description("Forecast: scan agent history and show what node9 would catch if installed").option("--all", "Scan all history (default: last 30 days)").option("--days <n>", "Scan last N days of history", "30").option("--top <n>", "Max findings to show per rule (default: 5)", "5").option("--drill-down", "Show all findings with full commands and session IDs").option("--compact", "Compact one-screen scorecard \u2014 for screenshots and sharing").option("--narrative", "Severity-grouped report \u2014 for video / dramatic sharing").action(
+    async (options) => {
+      const drillDown = options.drillDown ?? false;
+      const topN = drillDown ? Infinity : Math.max(1, parseInt(options.top, 10) || 5);
+      const previewWidth = 70;
+      const startDate = options.all ? null : (() => {
+        const d = /* @__PURE__ */ new Date();
+        d.setDate(d.getDate() - (parseInt(options.days, 10) || 30));
+        d.setHours(0, 0, 0, 0);
+        return d;
+      })();
+      const isWired = getAgentsStatus().some((a) => a.wired);
+      const screenshotMode = options.compact || options.narrative;
+      if (!screenshotMode) {
+        console.log("");
+        if (!isWired) {
+          console.log(
+            chalk3.bold("\u{1F6E1}  node9") + chalk3.dim("  \u2014  security layer for AI coding agents")
+          );
+          console.log(
+            chalk3.dim("   Intercepts dangerous tool calls before they execute. No config needed.")
+          );
+          console.log("");
+        }
         console.log(
-          "    " + chalk3.bold(fmtCost(scan.totalCostUSD)) + chalk3.dim(" AI spend  \xB7  ") + chalk3.dim(`${totalRisky} risky operations`)
+          chalk3.cyan.bold("\u{1F50D}  Scanning your AI history") + chalk3.dim("  \u2014 what would node9 have caught?")
         );
+        console.log("");
       }
-      if (scan.dlpFindings.length > 0) {
-        const earlyLabel = scan.sessionsWithEarlySecrets > 0 ? chalk3.dim("  \xB7  ") + chalk3.red(
-          `${scan.sessionsWithEarlySecrets} session${scan.sessionsWithEarlySecrets !== 1 ? "s" : ""} loaded secrets before first edit`
-        ) : "";
-        console.log(
-          "    " + chalk3.red("\u{1F511}  Credential leak") + "     " + chalk3.red.bold(String(scan.dlpFindings.length).padStart(5)) + chalk3.dim("   secret detected in history or shell config") + earlyLabel
+      const useTTY = process.stdout.isTTY === true && process.env.NODE9_WRAPPER !== "1";
+      if (!useTTY && !screenshotMode) {
+        process.stdout.write(
+          "  " + chalk3.dim("Scanning your history \u2014 this may take a moment...\n")
         );
       }
-      if (blockedCount > 0) {
+      const totalFiles = countScanFiles();
+      let filesScanned = 0;
+      let linesScanned = 0;
+      let lastRender = 0;
+      const onProgress = (done) => {
+        filesScanned = done;
+        if (useTTY) renderProgressBar(filesScanned, totalFiles, linesScanned);
+        lastRender = Date.now();
+      };
+      const onLine = () => {
+        linesScanned++;
+        const now = Date.now();
+        if (useTTY && now - lastRender >= 80) {
+          lastRender = now;
+          renderProgressBar(filesScanned, totalFiles, linesScanned);
+        }
+      };
+      if (useTTY) renderProgressBar(0, totalFiles, 0);
+      const claudeScan = scanClaudeHistory(startDate, onProgress, onLine);
+      const geminiScan = scanGeminiHistory(
+        startDate,
+        (done) => onProgress(claudeScan.filesScanned + done),
+        onLine
+      );
+      const codexScan = scanCodexHistory(
+        startDate,
+        (done) => onProgress(claudeScan.filesScanned + geminiScan.filesScanned + done),
+        onLine
+      );
+      const scan = mergeScans(mergeScans(claudeScan, geminiScan), codexScan);
+      scan.dlpFindings.push(...scanShellConfig());
+      const summary = buildScanSummary([
+        { id: "claude", label: "Claude", icon: "\u{1F916}", scan: claudeScan },
+        { id: "gemini", label: "Gemini", icon: "\u264A", scan: geminiScan },
+        { id: "codex", label: "Codex", icon: "\u{1F52E}", scan: codexScan }
+      ]);
+      if (useTTY) process.stdout.write("\r" + " ".repeat(60) + "\r");
+      if (scan.filesScanned === 0) {
+        console.log(chalk3.yellow("  No session history found."));
         console.log(
-          "    " + chalk3.red("\u{1F6D1}  Would have blocked") + "   " + chalk3.red.bold(String(blockedCount).padStart(5)) + chalk3.dim("   operations stopped before execution")
+          chalk3.gray(
+            "  Supported: Claude Code (~/.claude/projects/) \xB7 Gemini CLI (~/.gemini/tmp/)\n"
+          )
         );
+        return;
       }
-      if (scan.loopFindings.length > 0) {
-        const wastedCalls = scan.loopFindings.reduce((s, l) => s + Math.max(0, l.count - 1), 0);
-        const loopRatio = scan.totalToolCalls > 0 ? chalk3.dim("  \xB7  ") + chalk3.yellow(
-          Math.round(wastedCalls / scan.totalToolCalls * 100) + "% of calls wasted"
-        ) : "";
-        const loopCost = summary.loopWastedUSD > 0 ? chalk3.dim("  \xB7  ") + chalk3.yellow("~" + fmtCost(summary.loopWastedUSD)) : "";
+      const rangeLabel = options.all ? chalk3.dim("all time") : chalk3.dim(`last ${options.days ?? 30} days`);
+      const dateRange = scan.firstDate && scan.lastDate ? chalk3.dim(`  ${fmtTs(scan.firstDate)} \u2013 ${fmtTs(scan.lastDate)}`) : "";
+      const breakdownParts = [];
+      if (claudeScan.sessions > 0)
+        breakdownParts.push(chalk3.cyan(String(claudeScan.sessions)) + chalk3.dim(" Claude"));
+      if (geminiScan.sessions > 0)
+        breakdownParts.push(chalk3.blue(String(geminiScan.sessions)) + chalk3.dim(" Gemini"));
+      if (codexScan.sessions > 0)
+        breakdownParts.push(chalk3.magenta(String(codexScan.sessions)) + chalk3.dim(" Codex"));
+      const sessionBreakdown = breakdownParts.length > 1 ? chalk3.dim("(") + breakdownParts.join(chalk3.dim(" \xB7 ")) + chalk3.dim(")") : "";
+      if (!screenshotMode) {
         console.log(
-          "    " + chalk3.yellow("\u{1F501}  Loop detected") + "      " + chalk3.yellow.bold(String(scan.loopFindings.length).padStart(5)) + chalk3.dim("   repeated tool call patterns found") + loopRatio + loopCost
+          "  " + chalk3.white(num(scan.sessions)) + chalk3.dim(" sessions  ") + sessionBreakdown + (sessionBreakdown ? "  " : "") + chalk3.white(num(scan.totalToolCalls)) + chalk3.dim(" tool calls  ") + chalk3.white(num(scan.bashCalls)) + chalk3.dim(" bash commands  ") + rangeLabel + dateRange
         );
+        console.log("");
       }
-      if (reviewCount > 0) {
-        console.log(
-          "    " + chalk3.yellow("\u{1F441}   Would have flagged") + "   " + chalk3.yellow.bold(String(reviewCount).padStart(5)) + chalk3.dim("   sent to you for approval")
-        );
+      const totalFindings = scan.findings.length;
+      const blockedCount = scan.findings.filter((f) => f.source.rule.verdict === "block").length;
+      const reviewCount = totalFindings - blockedCount;
+      const blast = runBlast();
+      const blastExposures = blast.reachable.length + blast.envFindings.length;
+      if (options.compact) {
+        renderCompactScorecard({
+          scan,
+          summary,
+          blast,
+          blastExposures,
+          blockedCount,
+          reviewCount
+        });
+        return;
       }
-      console.log("");
-      if (scan.dlpFindings.length > 0) {
-        console.log("  " + chalk3.dim("\u2500".repeat(70)));
+      if (options.narrative) {
+        renderNarrativeScorecard({
+          scan,
+          summary,
+          blast,
+          blastExposures,
+          blockedCount,
+          reviewCount
+        });
+        return;
+      }
+      if (totalFindings === 0 && scan.dlpFindings.length === 0) {
+        console.log(chalk3.green("  \u2705 No risky operations found in your history."));
         console.log(
-          "  " + chalk3.red.bold("\u{1F511}  Credential Leaks") + chalk3.dim("  \xB7  ") + chalk3.red(
-            `${num(scan.dlpFindings.length)} secret${scan.dlpFindings.length !== 1 ? "s" : ""} found in plain text`
+          chalk3.dim(
+            "  node9 is still worth running \u2014 it monitors every tool call in real time.\n"
           )
         );
-        const sortedDlp = sortDlpFindingsByPriority(scan.dlpFindings);
-        const recurringPatterns = buildRecurringPatternSet(scan.dlpFindings);
-        const shownDlp = drillDown ? sortedDlp : sortedDlp.slice(0, topN);
-        for (const f of shownDlp) {
-          const stale = isStaleFinding(f.timestamp);
-          const ts = f.timestamp ? chalk3.dim(fmtTs(f.timestamp) + "  ") : "";
-          const proj = chalk3.dim(f.project.slice(0, 22).padEnd(22) + "  ");
-          const agentBadge = f.agent === "gemini" ? chalk3.blue("[Gemini]  ") : f.agent === "codex" ? chalk3.magenta("[Codex]   ") : f.agent === "shell" ? chalk3.yellow("[Shell]   ") : chalk3.cyan("[Claude]  ");
-          const sessionSuffix = f.sessionId ? chalk3.dim(`  \u2192 ${f.sessionId.slice(0, 8)}`) : "";
-          const recurringBadge = recurringPatterns.has(f.patternName) ? chalk3.red.bold(" \u26A0\uFE0F recurring ") : "";
-          const patternDisplay = stale ? chalk3.dim(f.patternName) : chalk3.yellow(f.patternName);
-          const sampleDisplay = stale ? chalk3.dim(f.redactedSample) : chalk3.gray(f.redactedSample);
-          const entryBadge = chalk3.dim(`  [${entryPathLabel(f.toolName)}]`);
-          const leadIcon = stale ? chalk3.dim("\u{1F6A8}") : "\u{1F6A8}";
+      } else {
+        const totalRisky = totalFindings + scan.dlpFindings.length;
+        const scoreSeverity = blast.score >= 80 ? chalk3.green("Good") : blast.score >= 50 ? chalk3.yellow("At Risk") : chalk3.red.bold("Critical");
+        const scoreColor = blast.score >= 80 ? chalk3.green : blast.score >= 50 ? chalk3.yellow : chalk3.red;
+        console.log(
+          "  " + (blast.score < 50 ? chalk3.red.bold("\u26A0  ") : "") + chalk3.bold("Security Score ") + scoreColor.bold(`${blast.score}/100`) + "  " + scoreSeverity + chalk3.dim("  \xB7  ") + (totalRisky > 0 ? chalk3.red.bold(`${totalRisky} risky operation${totalRisky !== 1 ? "s" : ""}`) : chalk3.green("No risky operations"))
+        );
+        const cardParts = [];
+        if (scan.dlpFindings.length > 0) {
+          cardParts.push(
+            chalk3.red("\u{1F511} ") + chalk3.red.bold(String(scan.dlpFindings.length)) + chalk3.dim(` leak${scan.dlpFindings.length !== 1 ? "s" : ""}`)
+          );
+        }
+        if (blockedCount > 0) {
+          cardParts.push(
+            chalk3.red("\u{1F6D1} ") + chalk3.red.bold(String(blockedCount)) + chalk3.dim(" blocked")
+          );
+        }
+        if (scan.loopFindings.length > 0) {
+          const wastedCalls = scan.loopFindings.reduce((s, l) => s + Math.max(0, l.count - 1), 0);
+          const wastePct = scan.totalToolCalls > 0 ? Math.round(wastedCalls / scan.totalToolCalls * 100) : 0;
+          const wasteSuffix = wastePct > 0 ? chalk3.dim(` (${wastePct}% wasted)`) : "";
+          cardParts.push(
+            chalk3.yellow("\u{1F501} ") + chalk3.yellow.bold(String(scan.loopFindings.length)) + chalk3.dim(" loops") + wasteSuffix
+          );
+        }
+        if (reviewCount > 0) {
+          cardParts.push(
+            chalk3.yellow("\u{1F441} ") + chalk3.yellow.bold(String(reviewCount)) + chalk3.dim(" flagged")
+          );
+        }
+        if (blastExposures > 0) {
+          cardParts.push(
+            chalk3.red("\u{1F52D} ") + chalk3.red.bold(String(blastExposures)) + chalk3.dim(" exposures")
+          );
+        }
+        if (cardParts.length > 0) {
+          console.log("  " + cardParts.join(chalk3.dim("   ")));
+        }
+        if (scan.totalCostUSD > 0) {
           console.log(
-            `    ${leadIcon} ${ts}${proj}${agentBadge}` + patternDisplay + recurringBadge + chalk3.dim("  ") + sampleDisplay + entryBadge + sessionSuffix
+            "  " + chalk3.dim("AI spend  ") + chalk3.bold(fmtCost(scan.totalCostUSD)) + (summary.loopWastedUSD > 0 ? chalk3.dim("   \xB7   wasted on loops  ") + chalk3.yellow("~" + fmtCost(summary.loopWastedUSD)) : "")
           );
         }
-        if (!drillDown && scan.dlpFindings.length > topN) {
+        if (scan.dlpFindings.length > 0 && scan.sessionsWithEarlySecrets > 0) {
           console.log(
-            chalk3.dim(
-              `    \u2026 and ${scan.dlpFindings.length - topN} more  (--drill-down for full list)`
+            "  " + chalk3.dim(
+              `${scan.sessionsWithEarlySecrets} session${scan.sessionsWithEarlySecrets !== 1 ? "s" : ""} loaded secrets before first edit`
             )
           );
         }
         console.log("");
-      }
-      const blockedRuleSections = summary.sections.map((s) => ({ ...s, rules: s.rules.filter((r) => r.verdict === "block") })).filter((s) => s.rules.length > 0);
-      if (blockedRuleSections.length > 0) {
-        console.log("  " + chalk3.dim("\u2500".repeat(70)));
-        console.log(
-          "  " + chalk3.red.bold("\u{1F6D1}  Blocked") + chalk3.dim("  \xB7  ") + chalk3.red(
-            `${blockedCount} operation${blockedCount !== 1 ? "s" : ""} node9 would have stopped`
-          )
-        );
-        for (const section of blockedRuleSections) {
-          for (const rule of section.rules) {
-            printRuleGroup(rule, topN, drillDown, previewWidth);
-          }
-        }
-        console.log("");
-      }
-      if (scan.loopFindings.length > 0) {
-        console.log("  " + chalk3.dim("\u2500".repeat(70)));
-        const loopCostLabel = summary.loopWastedUSD > 0 ? chalk3.dim("  \xB7  ") + chalk3.yellow("~" + fmtCost(summary.loopWastedUSD) + " wasted") : "";
-        console.log(
-          "  " + chalk3.yellow.bold("\u{1F501}  Agent Loops") + chalk3.dim("  \xB7  ") + chalk3.yellow(
-            `${num(scan.loopFindings.length)} repeated pattern${scan.loopFindings.length !== 1 ? "s" : ""} found`
-          ) + loopCostLabel
-        );
-        const shownLoops = drillDown ? scan.loopFindings : scan.loopFindings.slice(0, topN);
-        for (const f of shownLoops) {
-          const ts = f.timestamp ? chalk3.dim(fmtTs(f.timestamp) + "  ") : "";
-          const proj = chalk3.dim(f.project.slice(0, 22).padEnd(22) + "  ");
-          const agentBadge = f.agent === "gemini" ? chalk3.blue("[Gemini]  ") : f.agent === "codex" ? chalk3.magenta("[Codex]   ") : chalk3.cyan("[Claude]  ");
-          const sessionSuffix = f.sessionId ? chalk3.dim(`  \u2192 ${f.sessionId.slice(0, 8)}`) : "";
+        if (scan.dlpFindings.length > 0) {
+          console.log("  " + chalk3.dim("\u2500".repeat(70)));
           console.log(
-            `    ${ts}${proj}${agentBadge}` + chalk3.yellow(f.toolName) + chalk3.dim(`  \xD7${f.count}  `) + chalk3.gray(f.commandPreview) + sessionSuffix
+            "  " + chalk3.red.bold("\u{1F511}  Credential Leaks") + chalk3.dim("  \xB7  ") + chalk3.red(
+              `${num(scan.dlpFindings.length)} secret${scan.dlpFindings.length !== 1 ? "s" : ""} found in plain text`
+            )
           );
+          const sortedDlp = sortDlpFindingsByPriority(scan.dlpFindings);
+          const recurringPatterns = buildRecurringPatternSet(scan.dlpFindings);
+          const shownDlp = drillDown ? sortedDlp : sortedDlp.slice(0, topN);
+          for (const f of shownDlp) {
+            const stale = isStaleFinding(f.timestamp);
+            const ts = f.timestamp ? chalk3.dim(fmtTs(f.timestamp) + "  ") : "";
+            const proj = chalk3.dim(f.project.slice(0, 22).padEnd(22) + "  ");
+            const agentBadge = f.agent === "gemini" ? chalk3.blue("[Gemini]  ") : f.agent === "codex" ? chalk3.magenta("[Codex]   ") : f.agent === "shell" ? chalk3.yellow("[Shell]   ") : chalk3.cyan("[Claude]  ");
+            const sessionSuffix = f.sessionId ? chalk3.dim(`  \u2192 ${f.sessionId.slice(0, 8)}`) : "";
+            const recurringBadge = recurringPatterns.has(f.patternName) ? chalk3.red.bold(" \u26A0\uFE0F recurring ") : "";
+            const patternDisplay = stale ? chalk3.dim(f.patternName) : chalk3.yellow(f.patternName);
+            const sampleDisplay = stale ? chalk3.dim(f.redactedSample) : chalk3.gray(f.redactedSample);
+            const entryBadge = chalk3.dim(`  [${entryPathLabel(f.toolName)}]`);
+            const leadIcon = stale ? chalk3.dim("\u{1F6A8}") : "\u{1F6A8}";
+            console.log(
+              `    ${leadIcon} ${ts}${proj}${agentBadge}` + patternDisplay + recurringBadge + chalk3.dim("  ") + sampleDisplay + entryBadge + sessionSuffix
+            );
+          }
+          if (!drillDown && scan.dlpFindings.length > topN) {
+            console.log(
+              chalk3.dim(
+                `    \u2026 and ${scan.dlpFindings.length - topN} more  (--drill-down for full list)`
+              )
+            );
+          }
+          console.log("");
         }
-        if (!drillDown && scan.loopFindings.length > topN) {
+        const blockedRuleSections = summary.sections.map((s) => ({ ...s, rules: s.rules.filter((r) => r.verdict === "block") })).filter((s) => s.rules.length > 0);
+        if (blockedRuleSections.length > 0) {
+          console.log("  " + chalk3.dim("\u2500".repeat(70)));
           console.log(
-            chalk3.dim(
-              `    \u2026 and ${scan.loopFindings.length - topN} more  (--drill-down for full list)`
+            "  " + chalk3.red.bold("\u{1F6D1}  Blocked") + chalk3.dim("  \xB7  ") + chalk3.red(
+              `${blockedCount} operation${blockedCount !== 1 ? "s" : ""} node9 would have stopped`
             )
           );
-        }
-        const stuckTools = computeStuckTools(scan.loopFindings);
-        if (stuckTools.length > 0) {
+          for (const section of blockedRuleSections) {
+            for (const rule of section.rules) {
+              printRuleGroup(rule, topN, drillDown, previewWidth);
+            }
+          }
           console.log("");
-          console.log("  " + chalk3.dim("Most stuck tools:"));
-          for (const t of stuckTools) {
+        }
+        if (scan.loopFindings.length > 0) {
+          console.log("  " + chalk3.dim("\u2500".repeat(70)));
+          const loopCostLabel = summary.loopWastedUSD > 0 ? chalk3.dim("  \xB7  ") + chalk3.yellow("~" + fmtCost(summary.loopWastedUSD) + " wasted") : "";
+          console.log(
+            "  " + chalk3.yellow.bold("\u{1F501}  Agent Loops") + chalk3.dim("  \xB7  ") + chalk3.yellow(
+              `${num(scan.loopFindings.length)} repeated pattern${scan.loopFindings.length !== 1 ? "s" : ""} found`
+            ) + loopCostLabel
+          );
+          const shownLoops = drillDown ? scan.loopFindings : scan.loopFindings.slice(0, topN);
+          for (const f of shownLoops) {
+            const ts = f.timestamp ? chalk3.dim(fmtTs(f.timestamp) + "  ") : "";
+            const proj = chalk3.dim(f.project.slice(0, 22).padEnd(22) + "  ");
+            const agentBadge = f.agent === "gemini" ? chalk3.blue("[Gemini]  ") : f.agent === "codex" ? chalk3.magenta("[Codex]   ") : chalk3.cyan("[Claude]  ");
+            const sessionSuffix = f.sessionId ? chalk3.dim(`  \u2192 ${f.sessionId.slice(0, 8)}`) : "";
+            console.log(
+              `    ${ts}${proj}${agentBadge}` + chalk3.yellow(f.toolName) + chalk3.dim(`  \xD7${f.count}  `) + chalk3.gray(f.commandPreview) + sessionSuffix
+            );
+          }
+          if (!drillDown && scan.loopFindings.length > topN) {
             console.log(
-              chalk3.dim("    ") + chalk3.yellow(t.toolName.padEnd(8)) + chalk3.dim("  ") + chalk3.dim(`\xD7${t.waste} repeats`.padEnd(14)) + chalk3.dim(`  (${t.pct}%)`)
+              chalk3.dim(
+                `    \u2026 and ${scan.loopFindings.length - topN} more  (--drill-down for full list)`
+              )
             );
           }
+          const stuckTools = computeStuckTools(scan.loopFindings);
+          if (stuckTools.length > 0) {
+            console.log("");
+            console.log("  " + chalk3.dim("Most stuck tools:"));
+            for (const t of stuckTools) {
+              console.log(
+                chalk3.dim("    ") + chalk3.yellow(t.toolName.padEnd(8)) + chalk3.dim("  ") + chalk3.dim(`\xD7${t.waste} repeats`.padEnd(14)) + chalk3.dim(`  (${t.pct}%)`)
+              );
+            }
+          }
+          console.log("");
+        }
+        for (const section of summary.sections) {
+          const reviewRules = section.rules.filter((r) => r.verdict !== "block");
+          if (reviewRules.length === 0) continue;
+          const enableHint = section.shieldKey ? chalk3.dim(`  \u2192  node9 shield enable ${section.shieldKey}`) : "";
+          console.log("  " + chalk3.dim("\u2500".repeat(70)));
+          console.log(
+            "  " + chalk3.bold(section.label) + (section.subtitle ? chalk3.dim(`  \xB7  ${section.subtitle}`) : "") + "  " + chalk3.yellow(`${section.reviewCount} review`) + enableHint
+          );
+          for (const rule of reviewRules) {
+            printRuleGroup(rule, topN, drillDown, previewWidth);
+          }
+          console.log("");
+        }
+        const activeShieldIds = new Set(
+          summary.sections.filter((s) => s.sourceType === "shield" && s.shieldKey).map((s) => s.shieldKey)
+        );
+        const emptyShields = Object.keys(SHIELDS).filter((n) => !activeShieldIds.has(n)).sort();
+        if (emptyShields.length > 0) {
+          console.log("  " + chalk3.dim("\u2500".repeat(70)));
+          console.log(
+            "  " + chalk3.bold("\u{1F6E1}  Inactive Shields") + chalk3.dim("  \xB7  enable for more coverage")
+          );
+          console.log("  " + chalk3.dim(emptyShields.join(" \xB7 ")));
+          console.log("  " + chalk3.dim("\u2192  node9 shield enable <name>  to activate"));
+          console.log("");
         }
-        console.log("");
       }
-      for (const section of summary.sections) {
-        const reviewRules = section.rules.filter((r) => r.verdict !== "block");
-        if (reviewRules.length === 0) continue;
-        const enableHint = section.shieldKey ? chalk3.dim(`  \u2192  node9 shield enable ${section.shieldKey}`) : "";
+      if (blast.reachable.length > 0 || blast.envFindings.length > 0) {
         console.log("  " + chalk3.dim("\u2500".repeat(70)));
         console.log(
-          "  " + chalk3.bold(section.label) + (section.subtitle ? chalk3.dim(`  \xB7  ${section.subtitle}`) : "") + "  " + chalk3.yellow(`${section.reviewCount} review`) + enableHint
+          "  " + chalk3.bold("\u{1F52D}  Blast Radius") + chalk3.dim(
+            `  \xB7  ${blastExposures} exposure${blastExposures !== 1 ? "s" : ""} an AI agent can reach right now`
+          )
         );
-        for (const rule of reviewRules) {
-          printRuleGroup(rule, topN, drillDown, previewWidth);
+        console.log("");
+        if (blast.reachable.length > 0) {
+          for (const p of blast.reachable) {
+            console.log(
+              "    " + chalk3.red("\u2717  ") + chalk3.yellow(p.label.padEnd(38)) + chalk3.dim(p.description)
+            );
+          }
+        }
+        if (blast.envFindings.length > 0) {
+          for (const f of blast.envFindings) {
+            console.log(
+              "    " + chalk3.red("\u2717  ") + chalk3.yellow(f.key.padEnd(38)) + chalk3.dim(f.patternName + " in environment")
+            );
+          }
         }
         console.log("");
-      }
-      const activeShieldIds = new Set(
-        summary.sections.filter((s) => s.sourceType === "shield" && s.shieldKey).map((s) => s.shieldKey)
-      );
-      const emptyShields = Object.keys(SHIELDS).filter((n) => !activeShieldIds.has(n)).sort();
-      if (emptyShields.length > 0) {
-        console.log("  " + chalk3.dim("\u2500".repeat(70)));
         console.log(
-          "  " + chalk3.bold("\u{1F6E1}  Inactive Shields") + chalk3.dim("  \xB7  enable for more coverage")
+          chalk3.dim(
+            "  \u2192 Run `node9 shield enable project-jail` to block agent access to these files."
+          )
         );
-        console.log("  " + chalk3.dim(emptyShields.join(" \xB7 ")));
-        console.log("  " + chalk3.dim("\u2192  node9 shield enable <name>  to activate"));
         console.log("");
       }
-    }
-    const blast = runBlast();
-    if (blast.reachable.length > 0 || blast.envFindings.length > 0) {
-      console.log("  " + chalk3.dim("\u2500".repeat(70)));
-      console.log(
-        "  " + chalk3.bold("\u{1F52D}  Blast Radius") + chalk3.dim("  \xB7  what an AI agent can reach right now")
-      );
-      console.log("");
-      if (blast.reachable.length > 0) {
-        for (const p of blast.reachable) {
+      if (isWired) {
+        console.log(chalk3.green("  \u2705 node9 is active \u2014 your future sessions are protected."));
+        console.log(
+          chalk3.dim("  Run ") + chalk3.cyan("node9 report") + chalk3.dim(" to see live protection stats.")
+        );
+        if (drillDown) {
           console.log(
-            "    " + chalk3.red("\u2717  ") + chalk3.yellow(p.label.padEnd(38)) + chalk3.dim(p.description)
+            chalk3.dim("  Run ") + chalk3.cyan("node9 sessions --detail <session-id>") + chalk3.dim(" to see the full conversation for any session above.")
           );
-        }
-      }
-      if (blast.envFindings.length > 0) {
-        for (const f of blast.envFindings) {
+        } else {
           console.log(
-            "    " + chalk3.red("\u2717  ") + chalk3.yellow(f.key.padEnd(38)) + chalk3.dim(f.patternName + " in environment")
+            chalk3.dim("  Run ") + chalk3.cyan("node9 scan --drill-down") + chalk3.dim(" to see full commands and session IDs.")
           );
         }
-      }
-      console.log("");
-      console.log(
-        "  Security Score: " + scoreLabel(blast.score) + chalk3.dim(
-          `  (${blast.reachable.length + blast.envFindings.length} exposure${blast.reachable.length + blast.envFindings.length !== 1 ? "s" : ""})`
-        )
-      );
-      console.log(
-        chalk3.dim(
-          "\n  Run `node9 shield enable project-jail` to block agent access to these files."
-        )
-      );
-      console.log("");
-    }
-    if (isWired) {
-      console.log(chalk3.green("  \u2705 node9 is active \u2014 your future sessions are protected."));
-      console.log(
-        chalk3.dim("  Run ") + chalk3.cyan("node9 report") + chalk3.dim(" to see live protection stats.")
-      );
-      if (drillDown) {
-        console.log(
-          chalk3.dim("  Run ") + chalk3.cyan("node9 sessions --detail <session-id>") + chalk3.dim(" to see the full conversation for any session above.")
-        );
       } else {
+        const riskySummary = totalFindings + scan.dlpFindings.length;
+        if (riskySummary > 0) {
+          console.log(
+            chalk3.yellow.bold(
+              `  \u26A1 ${riskySummary} operation${riskySummary !== 1 ? "s" : ""} ran unprotected.`
+            ) + chalk3.dim(" node9 would have caught them.")
+          );
+          console.log("");
+        }
+        console.log(chalk3.bold("  Enable real-time protection:"));
+        console.log("");
         console.log(
-          chalk3.dim("  Run ") + chalk3.cyan("node9 scan --drill-down") + chalk3.dim(" to see full commands and session IDs.")
+          "    " + chalk3.cyan("npm install -g @node9/proxy") + chalk3.dim("  &&  ") + chalk3.cyan("node9 init --recommended")
         );
-      }
-    } else {
-      const riskySummary = totalFindings + scan.dlpFindings.length;
-      if (riskySummary > 0) {
+        console.log("");
         console.log(
-          chalk3.yellow.bold(
-            `  \u26A1 ${riskySummary} operation${riskySummary !== 1 ? "s" : ""} ran unprotected.`
-          ) + chalk3.dim(" node9 would have caught them.")
+          chalk3.dim(
+            "  Hooks into Claude Code automatically. Every tool call checked before it runs."
+          )
         );
+        console.log("  " + chalk3.dim("\u2192 ") + chalk3.underline("https://node9.ai"));
       }
       console.log("");
-      console.log(chalk3.bold("  Protect your next session in 30 seconds:"));
-      console.log("");
-      console.log("    " + chalk3.cyan("npm install -g @node9/proxy"));
-      console.log("    " + chalk3.cyan("node9 init"));
-      console.log("");
-      console.log(chalk3.dim("  node9 hooks into Claude Code automatically."));
-      console.log(
-        chalk3.dim("  Every tool call is checked before it runs \u2014 no proxy, no latency.")
-      );
-      console.log("");
-      console.log("  " + chalk3.dim("\u2192 ") + chalk3.underline("https://node9.ai"));
-    }
-    console.log("");
-    if (!isTestingMode()) {
-      if (isWired) {
-        const url = `http://${DAEMON_HOST}:${DAEMON_PORT}/?openscan=1`;
-        if (isDaemonRunning()) {
-          const internalToken = getInternalToken();
-          if (internalToken) {
-            try {
-              const pushSummary = buildScanSummary([
-                { id: "claude", label: "Claude", icon: "\u{1F916}", scan: claudeScan },
-                { id: "gemini", label: "Gemini", icon: "\u264A", scan: geminiScan },
-                { id: "codex", label: "Codex", icon: "\u{1F52E}", scan: codexScan }
-              ]);
-              await fetch(`http://${DAEMON_HOST}:${DAEMON_PORT}/scan/push`, {
-                method: "POST",
-                headers: {
-                  "Content-Type": "application/json",
-                  "x-node9-internal": internalToken
-                },
-                body: JSON.stringify({ status: "complete", summary: pushSummary }),
-                signal: AbortSignal.timeout(3e3)
-              });
-              openBrowserLocal();
-            } catch {
+      if (!isTestingMode()) {
+        if (isWired) {
+          const url = `http://${DAEMON_HOST}:${DAEMON_PORT}/?openscan=1`;
+          if (isDaemonRunning()) {
+            const internalToken = getInternalToken();
+            if (internalToken) {
+              try {
+                const pushSummary = buildScanSummary([
+                  { id: "claude", label: "Claude", icon: "\u{1F916}", scan: claudeScan },
+                  { id: "gemini", label: "Gemini", icon: "\u264A", scan: geminiScan },
+                  { id: "codex", label: "Codex", icon: "\u{1F52E}", scan: codexScan }
+                ]);
+                await fetch(`http://${DAEMON_HOST}:${DAEMON_PORT}/scan/push`, {
+                  method: "POST",
+                  headers: {
+                    "Content-Type": "application/json",
+                    "x-node9-internal": internalToken
+                  },
+                  body: JSON.stringify({ status: "complete", summary: pushSummary }),
+                  signal: AbortSignal.timeout(3e3)
+                });
+              } catch {
+              }
             }
           }
+          if (isDaemonRunning()) {
+            console.log("  " + chalk3.cyan("\u{1F310} View in browser:") + "  " + chalk3.underline(url));
+          } else {
+            console.log(
+              "  " + chalk3.dim("\u{1F4CA} To view in browser, start the daemon:  ") + chalk3.cyan("node9 daemon --background")
+            );
+          }
+          console.log("");
         }
-        if (isDaemonRunning()) {
-          console.log("  " + chalk3.cyan("\u{1F310} View in browser:") + "  " + chalk3.underline(url));
-        } else {
-          console.log(
-            "  " + chalk3.dim("\u{1F4CA} To view in browser, start the daemon:  ") + chalk3.cyan("node9 daemon --background")
-          );
-        }
-        console.log("");
       }
     }
-  });
+  );
 }
 var CLAUDE_PRICING, GEMINI_PRICING, CODE_EXTENSIONS, TERMINAL_ESCAPE_RE, LOOP_TOOLS, LOOP_THRESHOLD, STUCK_TOOLS_MIN_WASTE, STUCK_TOOLS_LIMIT, RECURRING_SESSION_THRESHOLD, STALE_AGE_DAYS, DEFAULT_RULE_NAMES;
 var init_scan = __esm({
@@ -12509,7 +12824,6 @@ import net2 from "net";
 import fs17 from "fs";
 import path19 from "path";
 import os14 from "os";
-import { spawn as spawn3 } from "child_process";
 import { randomUUID as randomUUID3 } from "crypto";
 function loadInsightCounts() {
   try {
@@ -12680,14 +12994,6 @@ function readBody(req) {
     req.on("end", () => resolve(body));
   });
 }
-function openBrowser(url) {
-  if (process.env.NODE9_TESTING === "1") return;
-  try {
-    const args = process.platform === "darwin" ? ["open", url] : process.platform === "win32" ? ["cmd", "/c", "start", "", url] : ["xdg-open", url];
-    spawn3(args[0], args.slice(1), { detached: true, stdio: "ignore" }).unref();
-  } catch {
-  }
-}
 function estimateToolCost(tool, args) {
   const a = args ?? {};
   const t = tool.toLowerCase().replace(/[^a-z_]/g, "_");
@@ -12800,6 +13106,18 @@ function startActivitySocket() {
           });
           return;
         }
+        if (data.status === "execution-completed") {
+          broadcast("execution-result", {
+            id: data.id,
+            ts: data.ts,
+            tool: data.tool,
+            agent: data.agent,
+            mcpServer: data.mcpServer,
+            durationMs: data.durationMs,
+            isError: data.isError
+          });
+          return;
+        }
         if (data.status === "pending") {
           broadcast("activity", {
             id: data.id,
@@ -12807,7 +13125,8 @@ function startActivitySocket() {
             tool: data.tool,
             args: redactArgs(data.args),
             status: "pending",
-            agent: data.agent
+            agent: data.agent,
+            mcpServer: data.mcpServer
           });
         } else {
           if (data.status === "allow") {
@@ -12834,7 +13153,9 @@ function startActivitySocket() {
             id: data.id,
             status: data.status,
             label: data.label,
-            costEstimate
+            costEstimate,
+            agent: data.agent,
+            mcpServer: data.mcpServer
           });
         }
       } catch {
@@ -13516,7 +13837,6 @@ function startDaemon() {
   const IDLE_TIMEOUT_MS = 12 * 60 * 60 * 1e3;
   const watchMode = process.env.NODE9_WATCH_MODE === "1";
   let idleTimer;
-  let browserOpened = false;
   function resetIdleTimer() {
     if (watchMode) return;
     if (idleTimer) clearTimeout(idleTimer);
@@ -13625,12 +13945,6 @@ data: ${JSON.stringify(item.data)}
         }
       });
     }
-    if (req.method === "POST" && pathname === "/browser-opened") {
-      if (req.headers["x-node9-internal"] !== internalToken) return res.writeHead(403).end();
-      browserOpened = true;
-      res.writeHead(200).end();
-      return;
-    }
     if (req.method === "POST" && pathname === "/check") {
       try {
         resetIdleTimer();
@@ -13691,7 +14005,9 @@ data: ${JSON.stringify(item.data)}
             ts: entry.timestamp,
             tool: toolName,
             args: redactArgs(args),
-            status: "pending"
+            status: "pending",
+            agent: entry.agent,
+            mcpServer: entry.mcpServer
           });
         }
         const projectCwd = typeof cwd === "string" && path25.isAbsolute(cwd) ? cwd : void 0;
@@ -13714,11 +14030,6 @@ data: ${JSON.stringify(item.data)}
             // Terminal uses this to show the 💡 insight line on the Nth consecutive approval.
             allowCount: (insightCounts.get(toolName) ?? 0) + 1
           });
-          const browserAlreadyOpened = process.env.NODE9_BROWSER_OPENED === "1";
-          if (browserEnabled && !browserOpened && !browserAlreadyOpened) {
-            browserOpened = true;
-            openBrowser(`http://127.0.0.1:${DAEMON_PORT}/`);
-          }
         }
         res.writeHead(200, { "Content-Type": "application/json" });
         res.end(JSON.stringify({ id, allowCount: (insightCounts.get(toolName) ?? 0) + 1 }));
@@ -13740,7 +14051,9 @@ data: ${JSON.stringify(item.data)}
           broadcast("activity-result", {
             id,
             status: result.approved ? "allow" : result.blockedByLabel?.includes("DLP") ? "dlp" : "block",
-            label: result.blockedByLabel
+            label: result.blockedByLabel,
+            agent: e.agent,
+            mcpServer: e.mcpServer
           });
           clearTimeout(e.timer);
           const decision = result.approved ? "allow" : "deny";
@@ -14912,7 +15225,7 @@ import fs41 from "fs";
 import os37 from "os";
 import path43 from "path";
 import readline5 from "readline";
-import { spawn as spawn10, execSync as execSync3 } from "child_process";
+import { spawn as spawn9 } from "child_process";
 function getIcon(tool) {
   const t = tool.toLowerCase();
   for (const [k, v] of Object.entries(ICONS)) {
@@ -14997,10 +15310,13 @@ function wrappedLineCount(text) {
   const len = visibleLength(text);
   return Math.max(1, Math.ceil(len / cols));
 }
-function agentLabel(agent) {
-  if (!agent || agent === "Terminal") return "";
+function agentLabel(agent, mcpServer) {
+  if (!agent || agent === "Terminal") {
+    return mcpServer ? chalk27.dim(`[\u2192 ${mcpServer}] `) : "";
+  }
   const short = agent === "Claude Code" ? "Claude" : agent === "Gemini CLI" ? "Gemini" : agent === "Unknown Agent" ? "" : agent.split(" ")[0];
-  return short ? chalk27.dim(`[${short}] `) : "";
+  if (!short) return mcpServer ? chalk27.dim(`[\u2192 ${mcpServer}] `) : "";
+  return mcpServer ? chalk27.dim(`[${short} \u2192 ${mcpServer}] `) : chalk27.dim(`[${short}] `);
 }
 function formatBase(activity) {
   const time = new Date(activity.ts).toLocaleTimeString([], { hour12: false });
@@ -15008,7 +15324,7 @@ function formatBase(activity) {
   const toolName = activity.tool.slice(0, 16).padEnd(16);
   const argsStr = JSON.stringify(activity.args ?? {}).replace(/\s+/g, " ").replaceAll(os37.homedir(), "~");
   const argsPreview = argsStr.length > 70 ? argsStr.slice(0, 70) + "\u2026" : argsStr;
-  return `${chalk27.gray(time)} ${icon} ${agentLabel(activity.agent)}${chalk27.white.bold(toolName)} ${chalk27.dim(argsPreview)}`;
+  return `${chalk27.gray(time)} ${icon} ${agentLabel(activity.agent, activity.mcpServer)}${chalk27.white.bold(toolName)} ${chalk27.dim(argsPreview)}`;
 }
 function renderResult(activity, result) {
   const base = formatBase(activity);
@@ -15062,7 +15378,7 @@ async function ensureDaemon() {
   } catch {
   }
   console.log(chalk27.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon..."));
-  const child = spawn10(process.execPath, [process.argv[1], "daemon"], {
+  const child = spawn9(process.execPath, [process.argv[1], "daemon"], {
     detached: true,
     stdio: "ignore",
     env: { ...process.env, NODE9_AUTO_STARTED: "1" }
@@ -15462,22 +15778,6 @@ async function startTail(options = {}) {
     process.stdin.on("keypress", onKeypress);
   }
   const dashboardUrl = `http://127.0.0.1:${port}/`;
-  try {
-    const browserEnabled = getConfig().settings.approvers?.browser !== false;
-    if (browserEnabled) {
-      if (process.platform === "darwin") execSync3(`open "${dashboardUrl}"`, { stdio: "ignore" });
-      else if (process.platform === "win32")
-        execSync3(`cmd /c start "" "${dashboardUrl}"`, { stdio: "ignore" });
-      else execSync3(`xdg-open "${dashboardUrl}"`, { stdio: "ignore" });
-      const intToken = getInternalToken();
-      fetch(`http://127.0.0.1:${port}/browser-opened`, {
-        method: "POST",
-        headers: intToken ? { "X-Node9-Internal": intToken } : {}
-      }).catch(() => {
-      });
-    }
-  } catch {
-  }
   const auditLog = path43.join(os37.homedir(), ".node9", "audit.log");
   try {
     const unackedDlp = fs41.readFileSync(auditLog, "utf-8").split("\n").filter((l) => l.includes('"response-dlp"')).length;
@@ -15657,6 +15957,17 @@ async function startTail(options = {}) {
         orphanedResults.set(data.id, data);
       }
     }
+    if (event === "execution-result") {
+      const exec = data;
+      const time = new Date(Date.now()).toLocaleTimeString([], { hour12: false });
+      const arrow = exec.isError ? chalk27.red("  \u21B3 \u2717") : chalk27.green("  \u21B3 \u2713");
+      const label = agentLabel(exec.agent, exec.mcpServer);
+      const tool = (exec.tool ?? "").slice(0, 16);
+      const duration = typeof exec.durationMs === "number" ? chalk27.dim(` (${exec.durationMs}ms)`) : "";
+      console.log(
+        `${chalk27.gray(time)} ${arrow} ${label}${chalk27.dim(tool)}${chalk27.dim(" completed")}${duration}`
+      );
+    }
   }
   req.on("error", (err2) => {
     const msg = err2.code === "ECONNREFUSED" ? "Daemon is not running. Start it with: node9 daemon start" : err2.message;
@@ -15670,8 +15981,6 @@ var init_tail = __esm({
   "src/tui/tail.ts"() {
     "use strict";
     init_daemon2();
-    init_daemon();
-    init_core();
     PID_FILE = path43.join(os37.homedir(), ".node9", "daemon.pid");
     ICONS = {
       bash: "\u{1F4BB}",
@@ -16126,7 +16435,7 @@ function parseDuration(str) {
 init_orchestrator();
 import readline from "readline";
 import chalk6 from "chalk";
-import { spawn as spawn4 } from "child_process";
+import { spawn as spawn3 } from "child_process";
 import { execa } from "execa";
 import { parseCommandString } from "execa";
 
@@ -16213,11 +16522,11 @@ async function runProxy(targetCommand) {
   }
   console.error(chalk6.green(`\u{1F680} Node9 Proxy Active: Monitoring [${targetCommand}]`));
   const spawnEnv = { ...process.env, FORCE_COLOR: "1" };
-  const child = useShell ? spawn4("/bin/bash", ["-c", targetCommand], {
+  const child = useShell ? spawn3("/bin/bash", ["-c", targetCommand], {
     stdio: ["pipe", "pipe", "inherit"],
     shell: false,
     env: spawnEnv
-  }) : spawn4(executable, args, { stdio: ["pipe", "pipe", "inherit"], shell: false, env: spawnEnv });
+  }) : spawn3(executable, args, { stdio: ["pipe", "pipe", "inherit"], shell: false, env: spawnEnv });
   const agentIn = readline.createInterface({ input: process.stdin, terminal: false });
   agentIn.on("line", async (line) => {
     let message;
@@ -16290,12 +16599,12 @@ init_config();
 init_policy();
 import chalk7 from "chalk";
 import fs28 from "fs";
-import { spawn as spawn6 } from "child_process";
+import { spawn as spawn5 } from "child_process";
 import path29 from "path";
 import os24 from "os";
 
 // src/undo.ts
-import { spawnSync as spawnSync5, spawn as spawn5 } from "child_process";
+import { spawnSync as spawnSync5, spawn as spawn4 } from "child_process";
 import crypto3 from "crypto";
 import fs26 from "fs";
 import net3 from "net";
@@ -16547,7 +16856,7 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
     notifySnapshotTaken(commitHash.slice(0, 7), tool, entry.argsSummary, capturedFiles.length);
     fs26.writeFileSync(UNDO_LATEST_PATH, commitHash);
     if (shouldGc) {
-      spawn5("git", ["gc", "--auto"], { env: shadowEnv, detached: true, stdio: "ignore" }).unref();
+      spawn4("git", ["gc", "--auto"], { env: shadowEnv, detached: true, stdio: "ignore" }).unref();
     }
     return commitHash;
   } catch (err2) {
@@ -16876,7 +17185,7 @@ RAW: ${raw}
             ]) {
               delete safeEnv[key];
             }
-            const d = spawn6(process.execPath, [scriptPath, "daemon"], {
+            const d = spawn5(process.execPath, [scriptPath, "daemon"], {
               detached: true,
               stdio: "ignore",
               env: { ...safeEnv, NODE9_AUTO_STARTED: "1", NODE9_BROWSER_OPENED: "1" }
@@ -18638,7 +18947,7 @@ init_daemon2();
 init_daemon();
 init_daemon_starter();
 import chalk12 from "chalk";
-import { spawn as spawn7 } from "child_process";
+import { spawn as spawn6 } from "child_process";
 var VALID_ACTIONS = "start | stop | restart | status | install | uninstall";
 function registerDaemonCommand(program2) {
   program2.command("daemon").description("Manage the local approval daemon").argument("[action]", `${VALID_ACTIONS} (default: start)`).option("-b, --background", "Start the daemon in the background (detached)").option("-o, --openui", "Start in background and open browser").option(
@@ -18676,7 +18985,7 @@ function registerDaemonCommand(program2) {
       if (cmd === "restart") {
         stopDaemon();
         await new Promise((r) => setTimeout(r, 500));
-        const child = spawn7(process.execPath, [process.argv[1], "daemon"], {
+        const child = spawn6(process.execPath, [process.argv[1], "daemon"], {
           detached: true,
           stdio: "ignore",
           env: { ...process.env, NODE9_AUTO_STARTED: "1", NODE9_BROWSER_OPENED: "1" }
@@ -18710,7 +19019,7 @@ function registerDaemonCommand(program2) {
           console.log(chalk12.green(`\u{1F310}  Opened browser: http://${DAEMON_HOST}:${DAEMON_PORT}/`));
           process.exit(0);
         }
-        const child = spawn7(process.execPath, [process.argv[1], "daemon"], {
+        const child = spawn6(process.execPath, [process.argv[1], "daemon"], {
           detached: true,
           stdio: "ignore"
         });
@@ -18725,7 +19034,7 @@ function registerDaemonCommand(program2) {
         process.exit(0);
       }
       if (options.background) {
-        const child = spawn7(process.execPath, [process.argv[1], "daemon"], {
+        const child = spawn6(process.execPath, [process.argv[1], "daemon"], {
           detached: true,
           stdio: "ignore"
         });
@@ -18933,14 +19242,18 @@ function fireTelemetryPing(agents) {
   }
 }
 function registerInitCommand(program2) {
-  program2.command("init").description("Set up Node9: create config and wire all detected AI agents").option("--force", "Overwrite existing config").option("-m, --mode <mode>", "Set initial security mode (standard, strict, audit)", "standard").option("--skip-setup", "Only create config \u2014 do not wire AI agents").option(
+  program2.command("init").description("Set up Node9: create config and wire all detected AI agents").option("--force", "Overwrite existing config").option(
+    "-m, --mode <mode>",
+    "Initial security mode: standard | strict | audit | observe (logs would-block, never blocks)",
+    "standard"
+  ).option("--skip-setup", "Only create config \u2014 do not wire AI agents").option(
     "--recommended",
     "Non-interactive: enable bash-safe + filesystem + project-jail shields without prompting"
   ).action(
     async (options) => {
       console.log(chalk14.cyan.bold("\n\u{1F6E1}\uFE0F  Node9 Init\n"));
       let chosenMode = options.mode.toLowerCase();
-      if (!["standard", "strict", "audit"].includes(chosenMode)) {
+      if (!["standard", "strict", "audit", "observe"].includes(chosenMode)) {
         chosenMode = DEFAULT_CONFIG.settings.mode;
       }
       {
@@ -19382,7 +19695,7 @@ function registerUndoCommand(program2) {
 // src/cli/commands/watch.ts
 init_daemon();
 import chalk17 from "chalk";
-import { spawn as spawn8, spawnSync as spawnSync6 } from "child_process";
+import { spawn as spawn7, spawnSync as spawnSync6 } from "child_process";
 function registerWatchCommand(program2) {
   program2.command("watch").description("Run a command under Node9 watch mode (daemon stays alive for the session)").argument("<command>", "Command to run").argument("[args...]", "Arguments for the command").action(async (cmd, args) => {
     let port = DAEMON_PORT;
@@ -19398,7 +19711,7 @@ function registerWatchCommand(program2) {
       }
     } catch {
       console.error(chalk17.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon (watch mode)..."));
-      const child = spawn8(process.execPath, [process.argv[1], "daemon"], {
+      const child = spawn7(process.execPath, [process.argv[1], "daemon"], {
         detached: true,
         stdio: "ignore",
         env: { ...process.env, NODE9_AUTO_STARTED: "1", NODE9_WATCH_MODE: "1" }
@@ -19444,7 +19757,7 @@ function registerWatchCommand(program2) {
 init_orchestrator();
 import readline3 from "readline";
 import chalk18 from "chalk";
-import { spawn as spawn9 } from "child_process";
+import { spawn as spawn8 } from "child_process";
 import { execa as execa2 } from "execa";
 init_provenance();
 
@@ -19565,6 +19878,18 @@ function extractMcpServer(toolName) {
   const match = toolName.match(/^mcp__([^_](?:[^_]|_(?!_))*?)__/i);
   return match?.[1];
 }
+function normalizeClientName(name) {
+  if (typeof name !== "string" || name.length === 0) return void 0;
+  const lower = name.toLowerCase();
+  if (lower.includes("claude")) return "Claude";
+  if (lower.includes("cursor")) return "Cursor";
+  if (lower.includes("codex")) return "Codex";
+  if (lower.includes("gemini")) return "Gemini";
+  if (lower.includes("cline")) return "Cline";
+  if (lower.includes("continue")) return "Continue";
+  const sanitized = sanitize4(name).slice(0, 40);
+  return sanitized.length > 0 ? sanitized : void 0;
+}
 function tokenize4(cmd) {
   const tokens = [];
   let current = "";
@@ -19637,7 +19962,7 @@ async function runMcpGateway(upstreamCommand) {
   const safeEnv = Object.fromEntries(
     Object.entries(process.env).filter(([k]) => !UPSTREAM_INJECTOR_VARS.has(k))
   );
-  const child = spawn9(executable, cmdArgs, {
+  const child = spawn8(executable, cmdArgs, {
     stdio: ["pipe", "pipe", "inherit"],
     // control stdin/stdout; inherit stderr
     shell: false,
@@ -19651,6 +19976,8 @@ async function runMcpGateway(upstreamCommand) {
   let pinState = "pending";
   const pendingToolCalls = [];
   const pendingCallNames = /* @__PURE__ */ new Map();
+  const pendingExecutions = /* @__PURE__ */ new Map();
+  let clientName;
   const agentIn = readline3.createInterface({ input: process.stdin, terminal: false });
   agentIn.on("line", async (line) => {
     let message;
@@ -19673,6 +20000,13 @@ async function runMcpGateway(upstreamCommand) {
       child.stdin.write(line + "\n");
       return;
     }
+    if (message.method === "initialize") {
+      clientName = normalizeClientName(
+        message.params?.clientInfo?.name
+      );
+      child.stdin.write(line + "\n");
+      return;
+    }
     if (message.method === "tools/list" && message.id !== void 0 && message.id !== null) {
       pendingToolsListIds.add(message.id);
     }
@@ -19718,7 +20052,7 @@ async function runMcpGateway(upstreamCommand) {
         const toolArgs = message.params?.arguments ?? message.params?.tool_input ?? {};
         const mcpServer = extractMcpServer(toolName);
         const result = await authorizeHeadless(toolName, toolArgs, {
-          agent: "MCP-Gateway",
+          agent: clientName ?? "MCP-Gateway",
           mcpServer
         });
         if (!result.approved) {
@@ -19748,6 +20082,12 @@ async function runMcpGateway(upstreamCommand) {
         }
         if (message.id !== void 0 && message.id !== null) {
           pendingCallNames.set(message.id, toolName);
+          pendingExecutions.set(message.id, {
+            ts: Date.now(),
+            toolName,
+            agent: clientName,
+            mcpServer
+          });
         }
         child.stdin.write(line + "\n");
       } catch {
@@ -19889,6 +20229,26 @@ async function runMcpGateway(upstreamCommand) {
         return;
       }
     }
+    const respId = parsed?.id;
+    if (respId !== void 0 && respId !== null) {
+      const exec = pendingExecutions.get(respId);
+      if (exec) {
+        pendingExecutions.delete(respId);
+        const durationMs = Date.now() - exec.ts;
+        const isError = parsed?.error !== void 0;
+        notifyActivitySocket({
+          id: String(respId),
+          ts: Date.now(),
+          tool: exec.toolName,
+          status: "execution-completed",
+          durationMs,
+          agent: exec.agent,
+          mcpServer: exec.mcpServer,
+          isError
+        }).catch(() => {
+        });
+      }
+    }
     const LARGE_RESPONSE_THRESHOLD = 5e5;
     if (parsed?.result && line.length > LARGE_RESPONSE_THRESHOLD) {
       const callId = parsed.id;