@node9/proxy 1.19.2 → 1.19.4

package/dist/cli.js

@@ -1708,7 +1708,11 @@ function extractCanonicalFindings(call, ctx) {
       })
     );
   }
-  if (PRIVILEGE_ESCALATION_RE.test(command)) {
+  const ast = analyzeShellCommand(command);
+  const sudoVariant = ast.actions.includes("sudo") || ast.actions.includes("su");
+  const chmodVariant = ast.actions.includes("chmod") && (ast.allTokens.includes("777") || ast.allTokens.includes("0777") || ast.allTokens.includes("+x"));
+  const chownVariant = ast.actions.includes("chown") && ast.allTokens.includes("root");
+  if (sudoVariant || chmodVariant || chownVariant) {
     out.push(
       makeFinding({
         type: "privilege-escalation",
@@ -1840,7 +1844,7 @@ function* stringValues(obj, depth = 0) {
   }
   for (const v of Object.values(obj)) yield* stringValues(v, depth + 1);
 }
-var import_safe_regex2, import_mvdan_sh, import_picomatch, import_safe_regex22, import_safe_regex23, import_crypto2, ASSIGNMENT_CONTEXT_RE, DLP_STOPWORDS, DLP_PATTERNS, DLP_PATTERNS_GLOBAL, SENSITIVE_PATH_PATTERNS, MAX_DEPTH, MAX_STRING_BYTES, MAX_JSON_PARSE_BYTES, syntax, sharedParser, MESSAGE_FLAGS, SHELL_INTERPRETERS, DOWNLOAD_CMDS, NORMALIZE_CACHE_MAX, normalizeCache, AST_CACHE_MAX, astCache, PARSE_FAIL, FS_READ_TOOLS, FS_OP_PRESCREEN_RE, HOME_CACHE_ALLOWLIST, SENSITIVE_PATH_RULES, BASH_TOOL_NAMES, AST_FS_REGEX_RULES, FS_OP_CACHE_MAX, fsOpCache, SOURCE_COMMANDS, SINK_COMMANDS, OBFUSCATORS, SENSITIVE_PATTERNS, FLAGS_WITH_VALUES, MAX_REGEX_LENGTH, REGEX_CACHE_MAX, regexCache, FORBIDDEN_PATH_SEGMENTS, SQL_DML_KEYWORDS, aws_default, bash_safe_default, docker_default, filesystem_default, github_default, k8s_default, mongodb_default, postgres_default, project_jail_default, redis_default, BUILTIN_SHIELDS, LOOP_MAX_RECORDS, FINDING_TO_SIGNAL, SCAN_SIGNAL_WEIGHTS, LOOP_THRESHOLD_FOR_WASTE, COST_PER_LOOP_ITER_USD, DESTRUCTIVE_OP_RE, PRIVILEGE_ESCALATION_RE, SENSITIVE_PATH_RE, FILE_TOOLS, PII_EMAIL_RE, PII_SSN_RE, PII_PHONE_RE, PII_CC_RE, LONG_OUTPUT_THRESHOLD_BYTES, CANONICAL_EXTRACTOR_VERSION, DEDUPE_PREVIEW_LEN, TERMINAL_ESCAPE_RE;
+var import_safe_regex2, import_mvdan_sh, import_picomatch, import_safe_regex22, import_safe_regex23, import_crypto2, ASSIGNMENT_CONTEXT_RE, DLP_STOPWORDS, DLP_PATTERNS, DLP_PATTERNS_GLOBAL, SENSITIVE_PATH_PATTERNS, MAX_DEPTH, MAX_STRING_BYTES, MAX_JSON_PARSE_BYTES, syntax, sharedParser, MESSAGE_FLAGS, SHELL_INTERPRETERS, DOWNLOAD_CMDS, NORMALIZE_CACHE_MAX, normalizeCache, AST_CACHE_MAX, astCache, PARSE_FAIL, FS_READ_TOOLS, FS_OP_PRESCREEN_RE, HOME_CACHE_ALLOWLIST, SENSITIVE_PATH_RULES, BASH_TOOL_NAMES, AST_FS_REGEX_RULES, FS_OP_CACHE_MAX, fsOpCache, SOURCE_COMMANDS, SINK_COMMANDS, OBFUSCATORS, SENSITIVE_PATTERNS, FLAGS_WITH_VALUES, MAX_REGEX_LENGTH, REGEX_CACHE_MAX, regexCache, FORBIDDEN_PATH_SEGMENTS, SQL_DML_KEYWORDS, aws_default, bash_safe_default, docker_default, filesystem_default, github_default, k8s_default, mongodb_default, postgres_default, project_jail_default, redis_default, BUILTIN_SHIELDS, LOOP_MAX_RECORDS, FINDING_TO_SIGNAL, SCAN_SIGNAL_WEIGHTS, LOOP_THRESHOLD_FOR_WASTE, COST_PER_LOOP_ITER_USD, DESTRUCTIVE_OP_RE, SENSITIVE_PATH_RE, FILE_TOOLS, PII_EMAIL_RE, PII_SSN_RE, PII_PHONE_RE, PII_CC_RE, LONG_OUTPUT_THRESHOLD_BYTES, CANONICAL_EXTRACTOR_VERSION, DEDUPE_PREVIEW_LEN, TERMINAL_ESCAPE_RE;
 var init_dist = __esm({
   "packages/policy-engine/dist/index.mjs"() {
     "use strict";
@@ -3246,7 +3250,6 @@ var init_dist = __esm({
     LOOP_THRESHOLD_FOR_WASTE = 3;
     COST_PER_LOOP_ITER_USD = 6e-3;
     DESTRUCTIVE_OP_RE = /\brm\s+-[rRf]+\b|\bDROP\s+(TABLE|DATABASE|COLLECTION|SCHEMA)\b|\bTRUNCATE\s+TABLE\b|\bgit\s+push\s+(--force|-f)\b|\bFLUSHALL\b|\bFLUSHDB\b|\bkubectl\s+delete\b|\bhelm\s+uninstall\b/i;
-    PRIVILEGE_ESCALATION_RE = /\b(sudo|su)\b\s+[a-z]|\bchmod\s+(0?777|\+x)\b|\bchown\s+root\b/i;
     SENSITIVE_PATH_RE = /\.aws\/(credentials|config)\b|\.ssh\/(id_rsa|id_ed25519|id_ecdsa|id_dsa)\b|\.env(\.|$|\b)|\.config\/gcloud\/credentials\.db\b|\.docker\/config\.json\b|\.netrc\b|\.npmrc\b|\.node9\/credentials\.json\b/i;
     FILE_TOOLS = /* @__PURE__ */ new Set([
       "read",
@@ -3266,7 +3269,7 @@ var init_dist = __esm({
     PII_PHONE_RE = /\b(?:\+?1[-.\s]?)?\(?\d{3}\)?[-.\s]\d{3}[-.\s]\d{4}\b/;
     PII_CC_RE = /\b(?:4\d{3}|5[1-5]\d{2}|3[47]\d{2}|6\d{3})[-\s]?\d{4}[-\s]?\d{4}[-\s]?\d{4}\b/;
     LONG_OUTPUT_THRESHOLD_BYTES = 100 * 1024;
-    CANONICAL_EXTRACTOR_VERSION = "canonical-v1";
+    CANONICAL_EXTRACTOR_VERSION = "canonical-v4";
     DEDUPE_PREVIEW_LEN = 120;
     TERMINAL_ESCAPE_RE = // eslint-disable-next-line no-control-regex
     /\x1b\[[0-9;?]*[A-Za-z]|\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)|\x1b[@-_]|[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g;
@@ -4739,19 +4742,16 @@ function isDaemonRunning() {
       }
       return false;
     }
-    const r = (0, import_child_process.spawnSync)("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
-      encoding: "utf8",
-      timeout: 300
-    });
-    if (r.status === 0 && (r.stdout ?? "").includes(`:${DAEMON_PORT}`)) return true;
-    return false;
+    return true;
   }
+  return false;
+}
+async function isDaemonReachable(timeoutMs = 500) {
   try {
-    const r = (0, import_child_process.spawnSync)("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
-      encoding: "utf8",
-      timeout: 300
+    const res = await fetch(`http://${DAEMON_HOST}:${DAEMON_PORT}/settings`, {
+      signal: AbortSignal.timeout(timeoutMs)
     });
-    return r.status === 0 && (r.stdout ?? "").includes(`:${DAEMON_PORT}`);
+    return res.ok;
   } catch {
     return false;
   }
@@ -4810,7 +4810,7 @@ async function waitForDaemonDecision(id, signal) {
     if (signal) signal.removeEventListener("abort", onAbort);
   }
 }
-async function notifyDaemonViewer(toolName, args, meta, riskMetadata) {
+async function notifyDaemonViewer(toolName, args, meta, riskMetadata, activityId, socketActivitySent) {
   const base = `http://${DAEMON_HOST}:${DAEMON_PORT}`;
   const res = await fetch(`${base}/check`, {
     method: "POST",
@@ -4821,7 +4821,12 @@ async function notifyDaemonViewer(toolName, args, meta, riskMetadata) {
       slackDelegated: true,
       agent: meta?.agent,
       mcpServer: meta?.mcpServer,
-      ...riskMetadata && { riskMetadata }
+      ...riskMetadata && { riskMetadata },
+      // fromCLI=true tells the daemon the CLI already sent the activity
+      // event via socket. Same contract as registerDaemonEntry — without
+      // it the daemon double-emits 'activity' for cloud-enforced flows.
+      fromCLI: socketActivitySent !== false,
+      activityId
     }),
     signal: AbortSignal.timeout(3e3)
   });
@@ -4890,7 +4895,7 @@ async function resolveViaDaemon(id, decision, internalToken, source) {
     signal: AbortSignal.timeout(3e3)
   });
 }
-var import_fs9, import_net, import_path9, import_os8, import_child_process, ACTIVITY_SOCKET_PATH, DAEMON_PORT, DAEMON_HOST;
+var import_fs9, import_net, import_path9, import_os8, ACTIVITY_SOCKET_PATH, DAEMON_PORT, DAEMON_HOST;
 var init_daemon = __esm({
   "src/auth/daemon.ts"() {
     "use strict";
@@ -4898,7 +4903,6 @@ var init_daemon = __esm({
     import_net = __toESM(require("net"));
     import_path9 = __toESM(require("path"));
     import_os8 = __toESM(require("os"));
-    import_child_process = require("child_process");
     ACTIVITY_SOCKET_PATH = process.platform === "win32" ? "\\\\.\\pipe\\node9-activity" : import_path9.default.join(import_os8.default.tmpdir(), "node9-activity.sock");
     DAEMON_PORT = 7391;
     DAEMON_HOST = "127.0.0.1";
@@ -5098,9 +5102,9 @@ function sendDesktopNotification(title, body) {
     if (process.platform === "darwin") {
       const esc = (s) => s.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
       const script = `display notification "${esc(body)}" with title "${esc(title)}"`;
-      (0, import_child_process2.spawn)("osascript", ["-e", script], { detached: true, stdio: "ignore" }).unref();
+      (0, import_child_process.spawn)("osascript", ["-e", script], { detached: true, stdio: "ignore" }).unref();
     } else if (process.platform === "linux") {
-      (0, import_child_process2.spawn)("notify-send", [title, body, "--icon=dialog-warning"], {
+      (0, import_child_process.spawn)("notify-send", [title, body, "--icon=dialog-warning"], {
         detached: true,
         stdio: "ignore"
       }).unref();
@@ -5195,7 +5199,7 @@ activate
 display dialog (item 1 of argv) with title (item 2 of argv) ${buttons}
 end tell
 end run`;
-        childProcess = (0, import_child_process2.spawn)("osascript", ["-e", script, "--", message, title]);
+        childProcess = (0, import_child_process.spawn)("osascript", ["-e", script, "--", message, title]);
       } else if (process.platform === "linux") {
         const pangoMessage = buildPangoMessage(
           toolName,
@@ -5221,12 +5225,12 @@ end run`;
           argsList.push("--cancel-label", "Block  \u238B");
           argsList.push("--extra-button", "Always Allow");
         }
-        childProcess = (0, import_child_process2.spawn)("zenity", argsList);
+        childProcess = (0, import_child_process.spawn)("zenity", argsList);
       } else if (process.platform === "win32") {
         const b64Msg = Buffer.from(message).toString("base64");
         const b64Title = Buffer.from(title).toString("base64");
         const ps = `Add-Type -AssemblyName PresentationFramework; $msg = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String("${b64Msg}")); $title = [System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String("${b64Title}")); $res = [System.Windows.MessageBox]::Show($msg, $title, "${locked ? "OK" : "YesNo"}", "Warning", "Button2", "DefaultDesktopOnly"); if ($res -eq "Yes") { exit 0 } else { exit 1 }`;
-        childProcess = (0, import_child_process2.spawn)("powershell", ["-Command", ps]);
+        childProcess = (0, import_child_process.spawn)("powershell", ["-Command", ps]);
       }
       let output = "";
       childProcess?.stdout?.on("data", (d) => output += d.toString());
@@ -5242,11 +5246,11 @@ end run`;
     }
   });
 }
-var import_child_process2, import_path11, isTestEnv;
+var import_child_process, import_path11, isTestEnv;
 var init_native = __esm({
   "src/ui/native.ts"() {
     "use strict";
-    import_child_process2 = require("child_process");
+    import_child_process = require("child_process");
     import_path11 = __toESM(require("path"));
     init_context_sniper();
     isTestEnv = () => {
@@ -5967,7 +5971,14 @@ async function _authorizeHeadlessCore(toolName, args, meta, options) {
   let daemonAllowCount = 1;
   if (approvers.terminal && isDaemonRunning() && !options?.calledFromDaemon) {
     if (cloudEnforced && cloudRequestId) {
-      const viewer = await notifyDaemonViewer(toolName, args, meta, riskMetadata).catch(() => null);
+      const viewer = await notifyDaemonViewer(
+        toolName,
+        args,
+        meta,
+        riskMetadata,
+        options?.activityId,
+        options?.socketActivitySent
+      ).catch(() => null);
       viewerId = viewer?.id ?? null;
       daemonEntryId = viewerId;
       if (viewer) daemonAllowCount = viewer.allowCount;
@@ -8060,6 +8071,7 @@ __export(scan_watermark_exports, {
   markUploadComplete: () => markUploadComplete,
   saveWatermark: () => saveWatermark,
   scanDelta: () => scanDelta,
+  tickForensicBroadcast: () => tickForensicBroadcast,
   tickScanWatcher: () => tickScanWatcher
 });
 function freshWatermark() {
@@ -8263,6 +8275,25 @@ function extractFindingsFromLine(line, sessionId, lineIndex) {
   }
   return findings;
 }
+async function tickForensicBroadcast(offsets) {
+  const out = [];
+  const files = listJsonlFiles();
+  for (const file of files) {
+    const size = fileSize(file);
+    const offset = offsets.get(file);
+    if (offset === void 0) {
+      offsets.set(file, size);
+      continue;
+    }
+    if (size <= offset) continue;
+    const sessionId = import_path19.default.basename(file, ".jsonl");
+    const newOffset = await scanDelta(file, offset, (obj, lineIndex) => {
+      out.push(...extractFindingsFromLine(obj, sessionId, lineIndex));
+    });
+    offsets.set(file, newOffset);
+  }
+  return out;
+}
 function markUploadComplete() {
   const state = loadWatermark();
   if (state.status === "schema-future") return;
@@ -11031,6 +11062,19 @@ data: ${JSON.stringify(data)}
     }
   });
 }
+function broadcastForensic(finding) {
+  const severity = CRITICAL_FORENSIC_CATEGORIES.has(finding.type) ? "critical" : "warning";
+  const event = {
+    type: "forensic",
+    id: `fnd_${(0, import_crypto6.randomUUID)()}`,
+    ts: Date.now(),
+    sessionId: finding.sessionId,
+    category: finding.type,
+    severity
+  };
+  if (finding.patternName !== void 0) event.patternName = finding.patternName;
+  broadcast("forensic", event);
+}
 function abandonPending() {
   setAbandonTimer(null);
   pending.forEach((entry, id) => {
@@ -11214,7 +11258,7 @@ function bindActivitySocket() {
   });
   activitySocketServer = unixServer;
 }
-var import_net2, import_fs21, import_path23, import_os19, import_crypto6, homeDir, DAEMON_PID_FILE, DECISIONS_FILE, AUDIT_LOG_FILE, TRUST_FILE2, GLOBAL_CONFIG_FILE, CREDENTIALS_FILE, INSIGHT_COUNTS_FILE, pending, sseClients, suggestionTracker, taintStore, insightCounts, _abandonTimer, _hadBrowserClient, _daemonServer, daemonRejectionHandlerRegistered, AUTO_DENY_MS, TRUST_DURATIONS, autoStarted, ACTIVITY_SOCKET_PATH2, ACTIVITY_RING_SIZE, activityRing, LARGE_RESPONSE_RING_SIZE, largeResponseRing, cachedScanResult, cachedScanTs, SCAN_CACHE_TTL_MS, SECRET_KEY_RE, INPUT_PRICE_PER_1M, OUTPUT_PRICE_PER_1M, BYTES_PER_TOKEN, WRITE_TOOL_NAMES, ACTIVITY_REBIND_MAX_ATTEMPTS, ACTIVITY_REBIND_WINDOW_MS, ACTIVITY_HEALTH_PROBE_MS, activitySocketServer, activityHealthInterval, activityRebindAttempts, activityCircuitTripped;
+var import_net2, import_fs21, import_path23, import_os19, import_crypto6, homeDir, DAEMON_PID_FILE, DECISIONS_FILE, AUDIT_LOG_FILE, TRUST_FILE2, GLOBAL_CONFIG_FILE, CREDENTIALS_FILE, INSIGHT_COUNTS_FILE, pending, sseClients, suggestionTracker, taintStore, insightCounts, _abandonTimer, _hadBrowserClient, _daemonServer, daemonRejectionHandlerRegistered, AUTO_DENY_MS, TRUST_DURATIONS, autoStarted, ACTIVITY_SOCKET_PATH2, ACTIVITY_RING_SIZE, activityRing, LARGE_RESPONSE_RING_SIZE, largeResponseRing, cachedScanResult, cachedScanTs, SCAN_CACHE_TTL_MS, SECRET_KEY_RE, INPUT_PRICE_PER_1M, OUTPUT_PRICE_PER_1M, BYTES_PER_TOKEN, CRITICAL_FORENSIC_CATEGORIES, WRITE_TOOL_NAMES, ACTIVITY_REBIND_MAX_ATTEMPTS, ACTIVITY_REBIND_WINDOW_MS, ACTIVITY_HEALTH_PROBE_MS, activitySocketServer, activityHealthInterval, activityRebindAttempts, activityCircuitTripped;
 var init_state2 = __esm({
   "src/daemon/state.ts"() {
     "use strict";
@@ -11264,6 +11308,11 @@ var init_state2 = __esm({
     INPUT_PRICE_PER_1M = 3;
     OUTPUT_PRICE_PER_1M = 15;
     BYTES_PER_TOKEN = 4;
+    CRITICAL_FORENSIC_CATEGORIES = /* @__PURE__ */ new Set([
+      "privilege-escalation",
+      "destructive-op",
+      "eval-of-remote"
+    ]);
     WRITE_TOOL_NAMES = /* @__PURE__ */ new Set([
       "write",
       "write_file",
@@ -11604,7 +11653,26 @@ function startCloudSync() {
   const recurring = setInterval(() => void syncOnce(), intervalMs);
   recurring.unref();
 }
-var import_fs22, import_https2, import_os20, import_path24, FINDING_TO_SIGNAL3, rulesCacheFile, DEFAULT_API_URL, DEFAULT_INTERVAL_HOURS, MIN_INTERVAL_HOURS;
+function startForensicBroadcast() {
+  const tick = async () => {
+    try {
+      const findings = await tickForensicBroadcast(forensicBroadcastOffsets);
+      for (const f of findings) broadcastForensic(f);
+    } catch (err2) {
+      const msg = err2 instanceof Error ? err2.message : String(err2);
+      appendToLog(HOOK_DEBUG_LOG, {
+        ts: (/* @__PURE__ */ new Date()).toISOString(),
+        kind: "forensic-broadcast-error",
+        error: msg
+      });
+    }
+  };
+  const initial = setTimeout(() => void tick(), FORENSIC_INITIAL_DELAY_MS);
+  initial.unref();
+  const recurring = setInterval(() => void tick(), FORENSIC_BROADCAST_INTERVAL_MS);
+  recurring.unref();
+}
+var import_fs22, import_https2, import_os20, import_path24, FINDING_TO_SIGNAL3, rulesCacheFile, DEFAULT_API_URL, DEFAULT_INTERVAL_HOURS, MIN_INTERVAL_HOURS, FORENSIC_BROADCAST_INTERVAL_MS, FORENSIC_INITIAL_DELAY_MS, forensicBroadcastOffsets;
 var init_sync = __esm({
   "src/daemon/sync.ts"() {
     "use strict";
@@ -11616,6 +11684,8 @@ var init_sync = __esm({
     init_blast();
     init_dist();
     init_scan_watermark();
+    init_state2();
+    init_audit();
     FINDING_TO_SIGNAL3 = {
       dlp: "dlpFindings",
       pii: "piiFindings",
@@ -11632,6 +11702,9 @@ var init_sync = __esm({
     DEFAULT_API_URL = "https://api.node9.ai/api/v1/intercept/policies/sync";
     DEFAULT_INTERVAL_HOURS = 5;
     MIN_INTERVAL_HOURS = 1;
+    FORENSIC_BROADCAST_INTERVAL_MS = 3e4;
+    FORENSIC_INITIAL_DELAY_MS = 5e3;
+    forensicBroadcastOffsets = /* @__PURE__ */ new Map();
   }
 });
 
@@ -11859,6 +11932,7 @@ var init_mcp_tools = __esm({
 function startDaemon() {
   startCostSync();
   startCloudSync();
+  startForensicBroadcast();
   startDlpScanner();
   loadInsightCounts();
   const internalToken = (0, import_crypto7.randomUUID)();
@@ -12664,13 +12738,26 @@ data: ${JSON.stringify(item.data)}
       }).then((res) => {
         if (res.ok) {
           try {
-            const r = (0, import_child_process3.spawnSync)("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
+            let orphanPid = null;
+            const ss = (0, import_child_process2.spawnSync)("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
               encoding: "utf8",
               timeout: 1e3
             });
-            const match = r.stdout?.match(/pid=(\d+)/);
-            if (match) {
-              const orphanPid = parseInt(match[1], 10);
+            if (!ss.error && ss.status === 0) {
+              const m = ss.stdout?.match(/pid=(\d+)/);
+              if (m) orphanPid = parseInt(m[1], 10);
+            } else if (ss.error?.code === "ENOENT" || ss.status === null) {
+              const lsof = (0, import_child_process2.spawnSync)(
+                "lsof",
+                ["-nP", `-iTCP:${DAEMON_PORT}`, "-sTCP:LISTEN", "-t"],
+                { encoding: "utf8", timeout: 1e3 }
+              );
+              if (!lsof.error && lsof.status === 0) {
+                const first = (lsof.stdout ?? "").split("\n")[0].trim();
+                if (/^\d+$/.test(first)) orphanPid = parseInt(first, 10);
+              }
+            }
+            if (orphanPid !== null) {
               process.kill(orphanPid, 0);
               atomicWriteSync2(
                 DAEMON_PID_FILE,
@@ -12705,14 +12792,14 @@ data: ${JSON.stringify(item.data)}
       JSON.stringify({ pid: process.pid, port: DAEMON_PORT, internalToken, autoStarted }),
       { mode: 384 }
     );
-    console.error(import_chalk6.default.green(`\u{1F6E1}\uFE0F  Node9 Guard LIVE: http://127.0.0.1:${DAEMON_PORT}`));
+    console.error(import_chalk6.default.green(`\u{1F6E1}\uFE0F  Node9 Guard LIVE on 127.0.0.1:${DAEMON_PORT}`));
   });
   if (watchMode) {
     console.error(import_chalk6.default.cyan("\u{1F6F0}\uFE0F  Flight Recorder active \u2014 daemon will not idle-timeout"));
   }
   startActivitySocket();
 }
-var import_http, import_fs25, import_path27, import_os23, import_crypto7, import_child_process3, import_chalk6;
+var import_http, import_fs25, import_path27, import_os23, import_crypto7, import_child_process2, import_chalk6;
 var init_server = __esm({
   "src/daemon/server.ts"() {
     "use strict";
@@ -12721,7 +12808,7 @@ var init_server = __esm({
     import_path27 = __toESM(require("path"));
     import_os23 = __toESM(require("os"));
     import_crypto7 = require("crypto");
-    import_child_process3 = require("child_process");
+    import_child_process2 = require("child_process");
     import_chalk6 = __toESM(require("chalk"));
     init_core();
     init_scan();
@@ -12746,7 +12833,7 @@ function resolveNode9Binary() {
   }
   try {
     const cmd = process.platform === "win32" ? "where" : "which";
-    const r = (0, import_child_process4.spawnSync)(cmd, ["node9"], { encoding: "utf8", timeout: 3e3 });
+    const r = (0, import_child_process3.spawnSync)(cmd, ["node9"], { encoding: "utf8", timeout: 3e3 });
     if (r.status === 0 && r.stdout.trim()) {
       return r.stdout.trim().split("\n")[0].trim();
     }
@@ -12798,8 +12885,8 @@ function installLaunchd(binaryPath) {
   const dir = import_path28.default.dirname(LAUNCHD_PLIST);
   if (!import_fs26.default.existsSync(dir)) import_fs26.default.mkdirSync(dir, { recursive: true });
   import_fs26.default.writeFileSync(LAUNCHD_PLIST, launchdPlist(binaryPath), "utf-8");
-  (0, import_child_process4.spawnSync)("launchctl", ["unload", LAUNCHD_PLIST], { encoding: "utf8" });
-  const r = (0, import_child_process4.spawnSync)("launchctl", ["load", "-w", LAUNCHD_PLIST], {
+  (0, import_child_process3.spawnSync)("launchctl", ["unload", LAUNCHD_PLIST], { encoding: "utf8" });
+  const r = (0, import_child_process3.spawnSync)("launchctl", ["load", "-w", LAUNCHD_PLIST], {
     encoding: "utf8",
     timeout: 5e3
   });
@@ -12809,7 +12896,7 @@ function installLaunchd(binaryPath) {
 }
 function uninstallLaunchd() {
   if (import_fs26.default.existsSync(LAUNCHD_PLIST)) {
-    (0, import_child_process4.spawnSync)("launchctl", ["unload", "-w", LAUNCHD_PLIST], { encoding: "utf8", timeout: 5e3 });
+    (0, import_child_process3.spawnSync)("launchctl", ["unload", "-w", LAUNCHD_PLIST], { encoding: "utf8", timeout: 5e3 });
     import_fs26.default.unlinkSync(LAUNCHD_PLIST);
   }
 }
@@ -12838,18 +12925,18 @@ function installSystemd(binaryPath) {
   }
   import_fs26.default.writeFileSync(SYSTEMD_UNIT, systemdUnit(binaryPath), "utf-8");
   try {
-    (0, import_child_process4.execFileSync)("loginctl", ["enable-linger", import_os24.default.userInfo().username], { timeout: 3e3 });
+    (0, import_child_process3.execFileSync)("loginctl", ["enable-linger", import_os24.default.userInfo().username], { timeout: 3e3 });
   } catch {
   }
-  const reload = (0, import_child_process4.spawnSync)("systemctl", ["--user", "daemon-reload"], {
+  const reload = (0, import_child_process3.spawnSync)("systemctl", ["--user", "daemon-reload"], {
     encoding: "utf8",
     timeout: 5e3
   });
   if (reload.status !== 0) {
     throw new Error(`systemctl daemon-reload failed: ${reload.stderr}`);
   }
-  (0, import_child_process4.spawnSync)("systemctl", ["--user", "stop", "node9-daemon"], { encoding: "utf8", timeout: 3e3 });
-  const enable = (0, import_child_process4.spawnSync)("systemctl", ["--user", "enable", "--now", "node9-daemon"], {
+  (0, import_child_process3.spawnSync)("systemctl", ["--user", "stop", "node9-daemon"], { encoding: "utf8", timeout: 3e3 });
+  const enable = (0, import_child_process3.spawnSync)("systemctl", ["--user", "enable", "--now", "node9-daemon"], {
     encoding: "utf8",
     timeout: 5e3
   });
@@ -12859,11 +12946,11 @@ function installSystemd(binaryPath) {
 }
 function uninstallSystemd() {
   if (import_fs26.default.existsSync(SYSTEMD_UNIT)) {
-    (0, import_child_process4.spawnSync)("systemctl", ["--user", "disable", "--now", "node9-daemon"], {
+    (0, import_child_process3.spawnSync)("systemctl", ["--user", "disable", "--now", "node9-daemon"], {
       encoding: "utf8",
       timeout: 5e3
     });
-    (0, import_child_process4.spawnSync)("systemctl", ["--user", "daemon-reload"], { encoding: "utf8", timeout: 5e3 });
+    (0, import_child_process3.spawnSync)("systemctl", ["--user", "daemon-reload"], { encoding: "utf8", timeout: 5e3 });
     import_fs26.default.unlinkSync(SYSTEMD_UNIT);
   }
 }
@@ -12881,7 +12968,7 @@ function stopRunningDaemon() {
       try {
         process.kill(pid, "SIGTERM");
         const deadline = Date.now() + 3e3;
-        const pollStop = (0, import_child_process4.spawnSync)(
+        const pollStop = (0, import_child_process3.spawnSync)(
           "sh",
           ["-c", `while kill -0 ${pid} 2>/dev/null; do sleep 0.1; done`],
           {
@@ -12913,7 +13000,7 @@ function installDaemonService() {
       return { ok: true, platform: "launchd", alreadyInstalled };
     }
     if (process.platform === "linux") {
-      const check = (0, import_child_process4.spawnSync)("systemctl", ["--user", "--version"], {
+      const check = (0, import_child_process3.spawnSync)("systemctl", ["--user", "--version"], {
         encoding: "utf8",
         timeout: 2e3
       });
@@ -12964,14 +13051,14 @@ function isDaemonServiceInstalled() {
   if (process.platform === "linux") return isSystemdInstalled();
   return false;
 }
-var import_fs26, import_path28, import_os24, import_child_process4, LAUNCHD_LABEL, LAUNCHD_PLIST, SYSTEMD_UNIT_DIR, SYSTEMD_UNIT;
+var import_fs26, import_path28, import_os24, import_child_process3, LAUNCHD_LABEL, LAUNCHD_PLIST, SYSTEMD_UNIT_DIR, SYSTEMD_UNIT;
 var init_service = __esm({
   "src/daemon/service.ts"() {
     "use strict";
     import_fs26 = __toESM(require("fs"));
     import_path28 = __toESM(require("path"));
     import_os24 = __toESM(require("os"));
-    import_child_process4 = require("child_process");
+    import_child_process3 = require("child_process");
     LAUNCHD_LABEL = "ai.node9.daemon";
     LAUNCHD_PLIST = import_path28.default.join(import_os24.default.homedir(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
     SYSTEMD_UNIT_DIR = import_path28.default.join(import_os24.default.homedir(), ".config", "systemd", "user");
@@ -13021,28 +13108,19 @@ function daemonStatus() {
       processStatus = import_chalk7.default.yellow("not running (stale PID file)");
     }
   } else {
-    const r = (0, import_child_process5.spawnSync)("ss", ["-Htnp", `sport = :${DAEMON_PORT}`], {
-      encoding: "utf8",
-      timeout: 500
-    });
-    if (r.status === 0 && (r.stdout ?? "").includes(`:${DAEMON_PORT}`)) {
-      processStatus = import_chalk7.default.yellow(`running (orphaned \u2014 no PID file)`);
-    } else {
-      processStatus = import_chalk7.default.yellow("not running");
-    }
+    processStatus = import_chalk7.default.yellow("not running");
   }
   console.log(`
   Process : ${processStatus}`);
   console.log(`  Service : ${serviceLabel}
 `);
 }
-var import_fs27, import_chalk7, import_child_process5, MAX_PID;
+var import_fs27, import_chalk7, MAX_PID;
 var init_daemon2 = __esm({
   "src/daemon/index.ts"() {
     "use strict";
     import_fs27 = __toESM(require("fs"));
     import_chalk7 = __toESM(require("chalk"));
-    import_child_process5 = require("child_process");
     init_server();
     init_state2();
     init_service();
@@ -13219,7 +13297,7 @@ async function ensureDaemon() {
   } catch {
   }
   console.log(import_chalk30.default.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon..."));
-  const child = (0, import_child_process15.spawn)(process.execPath, [process.argv[1], "daemon"], {
+  const child = (0, import_child_process13.spawn)(process.execPath, [process.argv[1], "daemon"], {
     detached: true,
     stdio: "ignore",
     env: { ...process.env, NODE9_AUTO_STARTED: "1" }
@@ -13849,7 +13927,7 @@ async function startTail(options = {}) {
     process.exit(1);
   });
 }
-var import_http2, import_chalk30, import_fs45, import_os41, import_path47, import_readline6, import_child_process15, PID_FILE, ICONS, MODEL_CONTEXT_LIMITS, RESET2, BOLD2, RED, YELLOW, CYAN, GRAY, GREEN, HIDE_CURSOR, SHOW_CURSOR, ERASE_DOWN, pendingShownForId, pendingWrappedLines, DIVIDER;
+var import_http2, import_chalk30, import_fs45, import_os41, import_path47, import_readline6, import_child_process13, PID_FILE, ICONS, MODEL_CONTEXT_LIMITS, RESET2, BOLD2, RED, YELLOW, CYAN, GRAY, GREEN, HIDE_CURSOR, SHOW_CURSOR, ERASE_DOWN, pendingShownForId, pendingWrappedLines, DIVIDER;
 var init_tail = __esm({
   "src/tui/tail.ts"() {
     "use strict";
@@ -13859,7 +13937,7 @@ var init_tail = __esm({
     import_os41 = __toESM(require("os"));
     import_path47 = __toESM(require("path"));
     import_readline6 = __toESM(require("readline"));
-    import_child_process15 = require("child_process");
+    import_child_process13 = require("child_process");
     init_daemon2();
     init_daemon();
     PID_FILE = import_path47.default.join(import_os41.default.homedir(), ".node9", "daemon.pid");
@@ -14315,7 +14393,7 @@ function parseDuration(str) {
 // src/proxy/index.ts
 var import_readline2 = __toESM(require("readline"));
 var import_chalk8 = __toESM(require("chalk"));
-var import_child_process6 = require("child_process");
+var import_child_process4 = require("child_process");
 var import_execa = require("execa");
 var import_execa2 = require("execa");
 init_orchestrator();
@@ -14403,11 +14481,11 @@ async function runProxy(targetCommand) {
   }
   console.error(import_chalk8.default.green(`\u{1F680} Node9 Proxy Active: Monitoring [${targetCommand}]`));
   const spawnEnv = { ...process.env, FORCE_COLOR: "1" };
-  const child = useShell ? (0, import_child_process6.spawn)("/bin/bash", ["-c", targetCommand], {
+  const child = useShell ? (0, import_child_process4.spawn)("/bin/bash", ["-c", targetCommand], {
     stdio: ["pipe", "pipe", "inherit"],
     shell: false,
     env: spawnEnv
-  }) : (0, import_child_process6.spawn)(executable, args, { stdio: ["pipe", "pipe", "inherit"], shell: false, env: spawnEnv });
+  }) : (0, import_child_process4.spawn)(executable, args, { stdio: ["pipe", "pipe", "inherit"], shell: false, env: spawnEnv });
   const agentIn = import_readline2.default.createInterface({ input: process.stdin, terminal: false });
   agentIn.on("line", async (line) => {
     let message;
@@ -14471,7 +14549,7 @@ async function runProxy(targetCommand) {
 }
 
 // src/cli/daemon-starter.ts
-var import_child_process7 = require("child_process");
+var import_child_process5 = require("child_process");
 var import_path29 = __toESM(require("path"));
 var import_fs28 = __toESM(require("fs"));
 init_daemon();
@@ -14489,7 +14567,7 @@ async function autoStartDaemonAndWait() {
   }
   if (!resolvedArgv1.endsWith(".js")) return false;
   try {
-    const child = (0, import_child_process7.spawn)(process.execPath, [resolvedArgv1, "daemon"], {
+    const child = (0, import_child_process5.spawn)(process.execPath, [resolvedArgv1, "daemon"], {
       detached: true,
       stdio: "ignore",
       env: {
@@ -14501,13 +14579,7 @@ async function autoStartDaemonAndWait() {
     for (let i = 0; i < 20; i++) {
       await new Promise((r) => setTimeout(r, 250));
       if (!isDaemonRunning()) continue;
-      try {
-        const res = await fetch(`http://${DAEMON_HOST}:${DAEMON_PORT}/settings`, {
-          signal: AbortSignal.timeout(500)
-        });
-        if (res.ok) return true;
-      } catch {
-      }
+      if (await isDaemonReachable()) return true;
     }
   } catch {
   }
@@ -14517,7 +14589,7 @@ async function autoStartDaemonAndWait() {
 // src/cli/commands/check.ts
 var import_chalk9 = __toESM(require("chalk"));
 var import_fs31 = __toESM(require("fs"));
-var import_child_process9 = require("child_process");
+var import_child_process7 = require("child_process");
 var import_path32 = __toESM(require("path"));
 var import_os27 = __toESM(require("os"));
 init_orchestrator();
@@ -14526,7 +14598,7 @@ init_config();
 init_policy();
 
 // src/undo.ts
-var import_child_process8 = require("child_process");
+var import_child_process6 = require("child_process");
 var import_crypto8 = __toESM(require("crypto"));
 var import_fs29 = __toESM(require("fs"));
 var import_net3 = __toESM(require("net"));
@@ -14639,7 +14711,7 @@ function ensureShadowRepo(shadowDir, cwd) {
   cleanOrphanedIndexFiles(shadowDir);
   const normalizedCwd = normalizeCwdForHash(cwd);
   const shadowEnvBase = { ...process.env, GIT_DIR: shadowDir, GIT_WORK_TREE: cwd };
-  const check = (0, import_child_process8.spawnSync)("git", ["rev-parse", "--git-dir"], {
+  const check = (0, import_child_process6.spawnSync)("git", ["rev-parse", "--git-dir"], {
     env: shadowEnvBase,
     timeout: 3e3
   });
@@ -14665,17 +14737,17 @@ function ensureShadowRepo(shadowDir, cwd) {
     import_fs29.default.mkdirSync(shadowDir, { recursive: true });
   } catch {
   }
-  const init = (0, import_child_process8.spawnSync)("git", ["init", "--bare", shadowDir], { timeout: 5e3 });
+  const init = (0, import_child_process6.spawnSync)("git", ["init", "--bare", shadowDir], { timeout: 5e3 });
   if (init.status !== 0 || init.error) {
     const reason = init.error ? init.error.message : init.stderr?.toString();
     if (process.env.NODE9_DEBUG === "1") console.error("[Node9] git init --bare failed:", reason);
     return false;
   }
   const configFile = import_path30.default.join(shadowDir, "config");
-  (0, import_child_process8.spawnSync)("git", ["config", "--file", configFile, "core.untrackedCache", "true"], {
+  (0, import_child_process6.spawnSync)("git", ["config", "--file", configFile, "core.untrackedCache", "true"], {
     timeout: 3e3
   });
-  (0, import_child_process8.spawnSync)("git", ["config", "--file", configFile, "core.fsmonitor", "true"], {
+  (0, import_child_process6.spawnSync)("git", ["config", "--file", configFile, "core.fsmonitor", "true"], {
     timeout: 3e3
   });
   try {
@@ -14686,14 +14758,17 @@ function ensureShadowRepo(shadowDir, cwd) {
 }
 function buildGitEnv(cwd) {
   const shadowDir = getShadowRepoDir(cwd);
-  const check = (0, import_child_process8.spawnSync)("git", ["rev-parse", "--git-dir"], {
+  const check = (0, import_child_process6.spawnSync)("git", ["rev-parse", "--git-dir"], {
     env: { ...process.env, GIT_DIR: shadowDir, GIT_WORK_TREE: cwd },
     timeout: 2e3
   });
   if (check.status === 0) {
     return { ...process.env, GIT_DIR: shadowDir, GIT_WORK_TREE: cwd };
   }
-  return { ...process.env };
+  const env = { ...process.env };
+  delete env.GIT_DIR;
+  delete env.GIT_WORK_TREE;
+  return env;
 }
 async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = []) {
   let indexFile = null;
@@ -14711,11 +14786,11 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
       GIT_WORK_TREE: cwd,
       GIT_INDEX_FILE: indexFile
     };
-    (0, import_child_process8.spawnSync)("git", ["add", "-A"], { env: shadowEnv, timeout: GIT_TIMEOUT });
-    const treeRes = (0, import_child_process8.spawnSync)("git", ["write-tree"], { env: shadowEnv, timeout: GIT_TIMEOUT });
+    (0, import_child_process6.spawnSync)("git", ["add", "-A"], { env: shadowEnv, timeout: GIT_TIMEOUT });
+    const treeRes = (0, import_child_process6.spawnSync)("git", ["write-tree"], { env: shadowEnv, timeout: GIT_TIMEOUT });
     const treeHash = treeRes.stdout?.toString().trim();
     if (!treeHash || treeRes.status !== 0) return null;
-    const commitRes = (0, import_child_process8.spawnSync)(
+    const commitRes = (0, import_child_process6.spawnSync)(
       "git",
       ["commit-tree", treeHash, "-m", `Node9 AI Snapshot: ${(/* @__PURE__ */ new Date()).toISOString()}`],
       { env: shadowEnv, timeout: GIT_TIMEOUT }
@@ -14727,7 +14802,7 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
     let capturedFiles = [];
     let capturedDiff = null;
     if (prevEntry) {
-      const filesRes = (0, import_child_process8.spawnSync)("git", ["diff", "--name-only", prevEntry.hash, commitHash], {
+      const filesRes = (0, import_child_process6.spawnSync)("git", ["diff", "--name-only", prevEntry.hash, commitHash], {
         env: shadowEnv,
         timeout: GIT_TIMEOUT
       });
@@ -14737,7 +14812,7 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
       if (capturedFiles.length === 0) {
         return prevEntry.hash;
       }
-      const diffRes = (0, import_child_process8.spawnSync)("git", ["diff", prevEntry.hash, commitHash], {
+      const diffRes = (0, import_child_process6.spawnSync)("git", ["diff", prevEntry.hash, commitHash], {
         env: shadowEnv,
         timeout: GIT_TIMEOUT
       });
@@ -14745,7 +14820,7 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
         capturedDiff = diffRes.stdout?.toString() || null;
       }
     } else {
-      const filesRes = (0, import_child_process8.spawnSync)("git", ["ls-tree", "-r", "--name-only", commitHash], {
+      const filesRes = (0, import_child_process6.spawnSync)("git", ["ls-tree", "-r", "--name-only", commitHash], {
         env: shadowEnv,
         timeout: GIT_TIMEOUT
       });
@@ -14778,7 +14853,7 @@ async function createShadowSnapshot(tool = "unknown", args = {}, ignorePaths = [
     notifySnapshotTaken(commitHash.slice(0, 7), tool, entry.argsSummary, capturedFiles.length);
     import_fs29.default.writeFileSync(UNDO_LATEST_PATH, commitHash);
     if (shouldGc) {
-      (0, import_child_process8.spawn)("git", ["gc", "--auto"], { env: shadowEnv, detached: true, stdio: "ignore" }).unref();
+      (0, import_child_process6.spawn)("git", ["gc", "--auto"], { env: shadowEnv, detached: true, stdio: "ignore" }).unref();
     }
     return commitHash;
   } catch (err2) {
@@ -14799,14 +14874,14 @@ function getSnapshotHistory() {
 function computeUndoDiff(hash, cwd) {
   try {
     const env = buildGitEnv(cwd);
-    const statRes = (0, import_child_process8.spawnSync)("git", ["diff", hash, "--stat", "--", "."], {
+    const statRes = (0, import_child_process6.spawnSync)("git", ["diff", hash, "--stat", "--", "."], {
       cwd,
       env,
       timeout: GIT_TIMEOUT
     });
     const stat = statRes.stdout?.toString().trim();
     if (!stat || statRes.status !== 0) return null;
-    const diffRes = (0, import_child_process8.spawnSync)("git", ["diff", hash, "--", "."], {
+    const diffRes = (0, import_child_process6.spawnSync)("git", ["diff", hash, "--", "."], {
       cwd,
       env,
       timeout: GIT_TIMEOUT
@@ -14825,7 +14900,7 @@ function applyUndo(hash, cwd) {
   try {
     const dir = cwd ?? process.cwd();
     const env = buildGitEnv(dir);
-    const restore = (0, import_child_process8.spawnSync)("git", ["restore", "--source", hash, "--staged", "--worktree", "."], {
+    const restore = (0, import_child_process6.spawnSync)("git", ["restore", "--source", hash, "--staged", "--worktree", "."], {
       cwd: dir,
       env,
       timeout: GIT_TIMEOUT
@@ -14837,7 +14912,7 @@ function applyUndo(hash, cwd) {
       }
       return false;
     }
-    const lsTree = (0, import_child_process8.spawnSync)("git", ["ls-tree", "-r", "--name-only", hash], {
+    const lsTree = (0, import_child_process6.spawnSync)("git", ["ls-tree", "-r", "--name-only", hash], {
       cwd: dir,
       env,
       timeout: GIT_TIMEOUT
@@ -14856,8 +14931,8 @@ function applyUndo(hash, cwd) {
 `);
       return false;
     }
-    const tracked = (0, import_child_process8.spawnSync)("git", ["ls-files"], { cwd: dir, env, timeout: GIT_TIMEOUT }).stdout?.toString().trim().split("\n").filter(Boolean) ?? [];
-    const untracked = (0, import_child_process8.spawnSync)("git", ["ls-files", "--others", "--exclude-standard"], {
+    const tracked = (0, import_child_process6.spawnSync)("git", ["ls-files"], { cwd: dir, env, timeout: GIT_TIMEOUT }).stdout?.toString().trim().split("\n").filter(Boolean) ?? [];
+    const untracked = (0, import_child_process6.spawnSync)("git", ["ls-files", "--others", "--exclude-standard"], {
       cwd: dir,
       env,
       timeout: GIT_TIMEOUT
@@ -15128,7 +15203,7 @@ RAW: ${raw}
             ]) {
               delete safeEnv[key];
             }
-            const d = (0, import_child_process9.spawn)(process.execPath, [scriptPath, "daemon"], {
+            const d = (0, import_child_process7.spawn)(process.execPath, [scriptPath, "daemon"], {
               detached: true,
               stdio: "ignore",
               env: { ...safeEnv, NODE9_AUTO_STARTED: "1" }
@@ -15961,7 +16036,7 @@ var import_chalk11 = __toESM(require("chalk"));
 var import_fs33 = __toESM(require("fs"));
 var import_path34 = __toESM(require("path"));
 var import_os29 = __toESM(require("os"));
-var import_child_process10 = require("child_process");
+var import_child_process8 = require("child_process");
 init_daemon();
 function registerDoctorCommand(program2, version2) {
   program2.command("doctor").description("Check that Node9 is installed and configured correctly").action(() => {
@@ -15987,7 +16062,7 @@ function registerDoctorCommand(program2, version2) {
 `));
     section("Binary");
     try {
-      const which = (0, import_child_process10.execSync)("which node9", { encoding: "utf-8", timeout: 3e3 }).trim();
+      const which = (0, import_child_process8.execSync)("which node9", { encoding: "utf-8", timeout: 3e3 }).trim();
       pass(`node9 found at ${which}`);
     } catch {
       warn(
@@ -16005,7 +16080,7 @@ function registerDoctorCommand(program2, version2) {
       );
     }
     try {
-      const gitVersion = (0, import_child_process10.execSync)("git --version", { encoding: "utf-8", timeout: 3e3 }).trim();
+      const gitVersion = (0, import_child_process8.execSync)("git --version", { encoding: "utf-8", timeout: 3e3 }).trim();
       pass(gitVersion);
     } catch {
       warn(
@@ -16106,10 +16181,12 @@ function registerDoctorCommand(program2, version2) {
     }
     section("Daemon (optional)");
     if (isDaemonRunning()) {
-      pass(`Browser dashboard running \u2192 http://${DAEMON_HOST}:${DAEMON_PORT}/`);
+      pass(
+        `Daemon running on ${DAEMON_HOST}:${DAEMON_PORT} \u2014 terminal & native approvals enabled`
+      );
     } else {
       warn(
-        "Daemon not running \u2014 browser approvals unavailable",
+        "Daemon not running \u2014 terminal & native approvals unavailable",
         "Run: node9 daemon --background"
       );
     }
@@ -16981,7 +17058,7 @@ function registerReportCommand(program2) {
 
 // src/cli/commands/daemon-cmd.ts
 var import_chalk14 = __toESM(require("chalk"));
-var import_child_process11 = require("child_process");
+var import_child_process9 = require("child_process");
 init_daemon2();
 var VALID_ACTIONS = "start | stop | restart | status | install | uninstall";
 function registerDaemonCommand(program2) {
@@ -17020,7 +17097,7 @@ function registerDaemonCommand(program2) {
       if (cmd === "restart") {
         stopDaemon();
         await new Promise((r) => setTimeout(r, 500));
-        const child = (0, import_child_process11.spawn)(process.execPath, [process.argv[1], "daemon"], {
+        const child = (0, import_child_process9.spawn)(process.execPath, [process.argv[1], "daemon"], {
           detached: true,
           stdio: "ignore",
           env: { ...process.env, NODE9_AUTO_STARTED: "1" }
@@ -17050,7 +17127,7 @@ function registerDaemonCommand(program2) {
         return;
       }
       if (options.background) {
-        const child = (0, import_child_process11.spawn)(process.execPath, [process.argv[1], "daemon"], {
+        const child = (0, import_child_process9.spawn)(process.execPath, [process.argv[1], "daemon"], {
           detached: true,
           stdio: "ignore"
         });
@@ -17708,7 +17785,7 @@ function registerUndoCommand(program2) {
 
 // src/cli/commands/watch.ts
 var import_chalk19 = __toESM(require("chalk"));
-var import_child_process12 = require("child_process");
+var import_child_process10 = require("child_process");
 init_daemon();
 function registerWatchCommand(program2) {
   program2.command("watch").description("Run a command under Node9 watch mode (daemon stays alive for the session)").argument("<command>", "Command to run").argument("[args...]", "Arguments for the command").action(async (cmd, args) => {
@@ -17725,7 +17802,7 @@ function registerWatchCommand(program2) {
       }
     } catch {
       console.error(import_chalk19.default.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon (watch mode)..."));
-      const child = (0, import_child_process12.spawn)(process.execPath, [process.argv[1], "daemon"], {
+      const child = (0, import_child_process10.spawn)(process.execPath, [process.argv[1], "daemon"], {
         detached: true,
         stdio: "ignore",
         env: { ...process.env, NODE9_AUTO_STARTED: "1", NODE9_WATCH_MODE: "1" }
@@ -17755,7 +17832,7 @@ function registerWatchCommand(program2) {
         "\n   Tip: run `node9 tail` in another terminal to review and approve AI actions.\n"
       )
     );
-    const result = (0, import_child_process12.spawnSync)(cmd, args, {
+    const result = (0, import_child_process10.spawnSync)(cmd, args, {
       stdio: "inherit",
       env: { ...process.env, NODE9_WATCH_MODE: "1" }
     });
@@ -17770,7 +17847,7 @@ function registerWatchCommand(program2) {
 // src/mcp-gateway/index.ts
 var import_readline4 = __toESM(require("readline"));
 var import_chalk20 = __toESM(require("chalk"));
-var import_child_process13 = require("child_process");
+var import_child_process11 = require("child_process");
 var import_execa3 = require("execa");
 init_orchestrator();
 init_provenance();
@@ -17956,7 +18033,7 @@ async function runMcpGateway(upstreamCommand) {
   const safeEnv = Object.fromEntries(
     Object.entries(process.env).filter(([k]) => !UPSTREAM_INJECTOR_VARS.has(k))
   );
-  const child = (0, import_child_process13.spawn)(executable, cmdArgs, {
+  const child = (0, import_child_process11.spawn)(executable, cmdArgs, {
     stdio: ["pipe", "pipe", "inherit"],
     // control stdin/stdout; inherit stderr
     shell: false,
@@ -18302,7 +18379,7 @@ var import_readline5 = __toESM(require("readline"));
 var import_fs39 = __toESM(require("fs"));
 var import_os35 = __toESM(require("os"));
 var import_path41 = __toESM(require("path"));
-var import_child_process14 = require("child_process");
+var import_child_process12 = require("child_process");
 init_core();
 init_daemon();
 init_shields();
@@ -18776,7 +18853,7 @@ function handleRuleAdd(args) {
   return `Rule "${name}" added to ~/.node9/config.json \u2014 verdict: ${verdict} when ${field} matches "${pattern}"`;
 }
 function runCliCommand(subArgs) {
-  const result = (0, import_child_process14.spawnSync)(process.execPath, [process.argv[1], ...subArgs], {
+  const result = (0, import_child_process12.spawnSync)(process.execPath, [process.argv[1], ...subArgs], {
     encoding: "utf-8",
     timeout: 6e4,
     // Disable colors — stdout is piped (not a TTY), chalk auto-detects, but be explicit
@@ -20786,6 +20863,17 @@ program.command("tail").description("Stream live agent activity to the terminal"
     process.exit(1);
   }
 });
+program.command("monitor").description("Live interactive dashboard \u2014 activity feed, approvals, security signals").action(async () => {
+  try {
+    const dashboardPath = import_path49.default.join(__dirname, "dashboard.mjs");
+    const dynamicImport = new Function("id", "return import(id)");
+    const mod = await dynamicImport(`file://${dashboardPath}`);
+    await mod.startMonitor();
+  } catch (err2) {
+    console.error(import_chalk31.default.red(`\u274C ${err2 instanceof Error ? err2.message : String(err2)}`));
+    process.exit(1);
+  }
+});
 registerWatchCommand(program);
 registerMcpGatewayCommand(program);
 registerMcpServerCommand(program);