@node9/proxy 1.19.4 → 1.20.1

package/dist/cli.mjs

@@ -99,12 +99,14 @@ function appendHookDebug(toolName, args, meta, auditHashArgsEnabled) {
 function appendLocalAudit(toolName, args, decision, checkedBy, meta, auditHashArgsEnabled) {
   const argsField = auditHashArgsEnabled ? { argsHash: hashArgs(args) } : { args: args ? JSON.parse(redactSecrets(JSON.stringify(args))) : {} };
   const testRun = isTestCall(toolName, args) || process.env.NODE9_TESTING === "1" ? { testRun: true } : {};
+  const ruleNameField = meta?.ruleName ? { ruleName: meta.ruleName } : {};
   appendToLog(LOCAL_AUDIT_LOG, {
     ts: (/* @__PURE__ */ new Date()).toISOString(),
     tool: toolName,
     ...argsField,
     decision,
     checkedBy,
+    ...ruleNameField,
     ...testRun,
     agent: meta?.agent,
     mcpServer: meta?.mcpServer,
@@ -691,7 +693,12 @@ function analyzeFsOperationImpl(command) {
         for (const p of paths) {
           for (const sp of SENSITIVE_PATH_RULES) {
             if (sp.match(p)) {
-              result = { ruleName: sp.rule, verdict: "block", reason: sp.reason, path: p };
+              result = {
+                ruleName: sp.rule,
+                verdict: sp.verdict ?? "block",
+                reason: sp.reason,
+                path: p
+              };
               return false;
             }
           }
@@ -2345,15 +2352,50 @@ var init_dist = __esm({
         match: (p) => /(^|[\\/])\.aws[\\/]/i.test(p)
       },
       {
+        // Mirrors the JSON shield's `.env` pattern (project-jail.json's
+        // review-read-env-any-tool) so the AST FS-op path catches the
+        // same set the regex shield does — including Next.js / Vite's
+        // `.env.<env>.local` double-suffix overrides which are commonly
+        // gitignored AND commonly contain real secrets.
+        //
+        // Intentional non-matches (dev fixtures): .env.example, .env.sample,
+        // .env.template, .env.test, .envrc. See shields.test.ts:983-995
+        // for the canonical test-asserted contract.
         rule: "shield:project-jail:block-read-env",
         reason: "Reading .env files is blocked by project-jail shield",
-        match: (p) => /(?:^|[\\/])\.env(?:\.local|\.production|\.staging)?$/i.test(p)
+        match: (p) => /(?:^|[\\/])\.env(?:\.(?:local|production|staging|development|production\.local|staging\.local|development\.local))?$/i.test(
+          p
+        )
       },
       {
-        rule: "shield:project-jail:block-read-credentials",
-        reason: "Reading credential files is blocked by project-jail shield",
-        match: (p) => /(?:credentials\.json|\.netrc|\.npmrc|\.docker[\\/]config\.json|gcloud[\\/]credentials)$/i.test(
-          p
+        // verdict: 'review' (not 'block') is a deliberate design choice
+        // documented in commit 29327a8. SSH keys and AWS credentials are
+        // cryptographic material with no legitimate read use-case for
+        // an AI agent → hard `block`. But .netrc / .npmrc / .docker /
+        // .kube / gcloud are CONFIG files that hold tokens AND have
+        // legitimate diagnostic reads ("which registry am I configured
+        // for", "what cluster am I on"). Hard-blocking those creates
+        // friction without much safety win because the review gate
+        // still catches genuine exfiltration attempts.
+        //
+        // The review gate FAILS CLOSED on timeout (daemon.approvalTimeoutMs
+        // returns a deny verdict via the orchestrator's timeout branch),
+        // so a stuck or unattended approval does NOT silently grant
+        // credential access. If the threat model demands strict block,
+        // a future per-shield strict-mode toggle is the right fix —
+        // not a regex-level upgrade here.
+        rule: "shield:project-jail:review-read-credentials",
+        reason: "Reading credential files requires approval (project-jail shield)",
+        verdict: "review",
+        match: (p) => (
+          // .kube/config holds Kubernetes cluster credentials and was
+          // flagged as missing by the node9-pr-agent review (the comment
+          // above mentioned .kube but the regex didn't include it — a
+          // textbook code-comment vs code drift). The JSON shield's
+          // review-read-credentials-any-tool already had it. Now aligned.
+          /(?:credentials\.json|\.netrc|\.npmrc|\.docker[\\/]config\.json|gcloud[\\/]credentials|\.kube[\\/]config)$/i.test(
+            p
+          )
         )
       }
     ];
@@ -2369,7 +2411,7 @@ var init_dist = __esm({
       "shield:project-jail:block-read-ssh",
       "shield:project-jail:block-read-aws",
       "shield:project-jail:block-read-env",
-      "shield:project-jail:block-read-credentials"
+      "shield:project-jail:review-read-credentials"
     ]);
     FS_OP_CACHE_MAX = 5e3;
     fsOpCache = /* @__PURE__ */ new Map();
@@ -3057,7 +3099,7 @@ var init_dist = __esm({
             {
               field: "command",
               op: "matches",
-              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*[\\/\\\\]\\.ssh[\\/\\\\]",
+              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.ssh[\\/\\\\]",
               flags: "i"
             }
           ],
@@ -3071,7 +3113,7 @@ var init_dist = __esm({
             {
               field: "command",
               op: "matches",
-              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*[\\/\\\\]\\.aws[\\/\\\\]",
+              value: "(cat|less|head|tail|bat|more|open|print|nano|vim|vi|emacs|code|type)\\s+.*?\\.aws[\\/\\\\]",
               flags: "i"
             }
           ],
@@ -3093,7 +3135,7 @@ var init_dist = __esm({
           reason: "Reading .env files is blocked by project-jail shield"
         },
         {
-          name: "shield:project-jail:block-read-credentials",
+          name: "shield:project-jail:review-read-credentials",
           tool: "bash",
           conditions: [
             {
@@ -3103,8 +3145,64 @@ var init_dist = __esm({
               flags: "i"
             }
           ],
+          verdict: "review",
+          reason: "Reading credential files requires approval (project-jail shield)"
+        },
+        {
+          name: "shield:project-jail:block-read-ssh-any-tool",
+          tool: "*",
+          conditions: [
+            {
+              field: "file_path",
+              op: "matches",
+              value: "(^|[\\/\\\\])\\.ssh[\\/\\\\]",
+              flags: "i"
+            }
+          ],
+          verdict: "block",
+          reason: "Reading SSH private keys is blocked by project-jail shield"
+        },
+        {
+          name: "shield:project-jail:block-read-aws-any-tool",
+          tool: "*",
+          conditions: [
+            {
+              field: "file_path",
+              op: "matches",
+              value: "(^|[\\/\\\\])\\.aws[\\/\\\\]",
+              flags: "i"
+            }
+          ],
           verdict: "block",
-          reason: "Reading credential files is blocked by project-jail shield"
+          reason: "Reading AWS credentials is blocked by project-jail shield"
+        },
+        {
+          name: "shield:project-jail:review-read-env-any-tool",
+          tool: "*",
+          conditions: [
+            {
+              field: "file_path",
+              op: "matches",
+              value: "(^|[\\/\\\\])\\.env(\\.(local|production|staging|development|production\\.local|staging\\.local|development\\.local))?$",
+              flags: "i"
+            }
+          ],
+          verdict: "review",
+          reason: "Reading .env files requires approval (project-jail shield)"
+        },
+        {
+          name: "shield:project-jail:review-read-credentials-any-tool",
+          tool: "*",
+          conditions: [
+            {
+              field: "file_path",
+              op: "matches",
+              value: ".*(credentials\\.json|\\.netrc|\\.npmrc|\\.docker[\\/\\\\]config\\.json|gcloud[\\/\\\\]credentials|\\.kube[\\/\\\\]config)",
+              flags: "i"
+            }
+          ],
+          verdict: "review",
+          reason: "Reading credential files requires approval (project-jail shield)"
         }
       ],
       dangerousWords: []
@@ -5770,7 +5868,10 @@ async function _authorizeHeadlessCore(toolName, args, meta, options) {
             args,
             "deny",
             "smart-rule-block-override",
-            meta,
+            // Same rationale as the smart-rule-block path above —
+            // pass the specific rule name so [2] SHIELDS can
+            // attribute this override-block to its owning shield.
+            { ...meta, ruleName: policyResult.ruleName },
             hashAuditArgs
           );
         if (approvers.cloud && creds?.apiKey)
@@ -5800,7 +5901,20 @@ async function _authorizeHeadlessCore(toolName, args, meta, options) {
         }
       } else {
         if (!isManual)
-          appendLocalAudit(toolName, args, "deny", "smart-rule-block", meta, hashAuditArgs);
+          appendLocalAudit(
+            toolName,
+            args,
+            "deny",
+            "smart-rule-block",
+            // Include policyResult.ruleName so the [2] Report SHIELDS
+            // panel can attribute this block to its specific shield
+            // (e.g. `shield:project-jail:block-read-ssh`) via the
+            // rule→shield map. checkedBy stays as the generic
+            // `smart-rule-block` for backward compat with existing
+            // log readers.
+            { ...meta, ruleName: policyResult.ruleName },
+            hashAuditArgs
+          );
         if (approvers.cloud && creds?.apiKey)
           auditLocalAllow(toolName, args, "smart-rule-block", creds, meta, void 0, false, {
             ruleName: policyResult.ruleName,
@@ -7594,6 +7708,7 @@ var init_blast = __esm({
 
 // src/cli/render/scan-derive.ts
 import chalk3 from "chalk";
+import stringWidth from "string-width";
 function classifyScore(score) {
   if (score >= 80) return { band: "good", label: "Good", color: chalk3.green };
   if (score >= 50) return { band: "at-risk", label: "At Risk", color: chalk3.yellow };
@@ -7621,9 +7736,62 @@ function computeLoopWaste(loops, totalToolCalls) {
   const wastePct = totalToolCalls > 0 ? Math.round(wastedCalls / totalToolCalls * 100) : 0;
   return { wastedCalls, wastePct };
 }
+function rollupByShield(sections, topRulesPerShield = 3) {
+  const out = [];
+  for (const section of sections) {
+    if (section.sourceType !== "shield") continue;
+    if (!section.shieldKey) continue;
+    const totalCatches = section.blockedCount + section.reviewCount;
+    const topRuleLabels = [...section.rules].sort((a, b) => b.findings.length - a.findings.length).slice(0, topRulesPerShield).map((r) => r.findings.length > 1 ? `${r.name} \xD7${r.findings.length}` : r.name);
+    out.push({
+      shieldName: section.shieldKey,
+      totalCatches,
+      blockCatches: section.blockedCount,
+      reviewCatches: section.reviewCount,
+      topRuleLabels
+    });
+  }
+  return out.sort((a, b) => b.totalCatches - a.totalCatches);
+}
+function boxPanel(title, bodyLines, width = PANEL_WIDTH) {
+  const inner = width - 4;
+  const out = [];
+  const titlePad = ` ${title} `;
+  const titleWidth = stringWidth(titlePad);
+  const titleSegment = titleWidth <= inner ? titlePad : titlePad.slice(0, inner);
+  const dashFill = "\u2500".repeat(Math.max(0, inner - stringWidth(titleSegment)));
+  out.push(chalk3.dim("\u256D\u2500") + chalk3.bold(titleSegment) + chalk3.dim(`${dashFill}\u2500\u256E`));
+  for (const line of bodyLines) {
+    const padding = " ".repeat(Math.max(0, inner - line.width));
+    out.push(chalk3.dim("\u2502 ") + line.rendered + padding + chalk3.dim(" \u2502"));
+  }
+  out.push(chalk3.dim("\u2570" + "\u2500".repeat(inner + 2) + "\u256F"));
+  return out;
+}
+function relativeDate(timestamp, now = /* @__PURE__ */ new Date()) {
+  const t = new Date(timestamp).getTime();
+  if (Number.isNaN(t)) return "?";
+  const days = Math.floor((now.getTime() - t) / 864e5);
+  if (days < 1) return "today";
+  if (days > 90) return "90d+";
+  return `${days}d`;
+}
+var PANEL_WIDTH;
 var init_scan_derive = __esm({
   "src/cli/render/scan-derive.ts"() {
     "use strict";
+    PANEL_WIDTH = 76;
+  }
+});
+
+// src/protection.ts
+var PROTECTIVE_SHIELD_DISCOUNTS;
+var init_protection = __esm({
+  "src/protection.ts"() {
+    "use strict";
+    PROTECTIVE_SHIELD_DISCOUNTS = {
+      "project-jail": 0.7
+    };
   }
 });
 
@@ -7813,6 +7981,7 @@ async function ensurePricingLoaded() {
   if (fromDisk && Object.keys(fromDisk).length > 0) {
     memCache = fromDisk;
     memCacheAt = Date.now();
+    lookupCache.clear();
     return;
   }
   const fetched = await fetchLiteLLMPricing();
@@ -7820,30 +7989,42 @@ async function ensurePricingLoaded() {
     memCache = fetched;
     memCacheAt = Date.now();
     writeCache(fetched);
+    lookupCache.clear();
     return;
   }
   memCache = { ...BUNDLED_PRICING };
   memCacheAt = Date.now();
+  lookupCache.clear();
 }
 function pricingFor(model) {
   const norm = normalizeModel(model);
+  const cached = lookupCache.get(norm);
+  if (cached !== void 0) return cached;
   const sources = [];
   if (memCache) sources.push(memCache);
   sources.push(BUNDLED_PRICING);
+  let resolved = null;
   for (const source of sources) {
     const exact = source[norm];
-    if (exact) return exact;
+    if (exact) {
+      resolved = exact;
+      break;
+    }
     let best = null;
     for (const key of Object.keys(source)) {
       if (norm.startsWith(key.toLowerCase()) && (best === null || key.length > best.length)) {
         best = key;
       }
     }
-    if (best) return source[best];
+    if (best) {
+      resolved = source[best];
+      break;
+    }
   }
-  return null;
+  lookupCache.set(norm, resolved);
+  return resolved;
 }
-var LITELLM_URL, BUNDLED_PRICING, CACHE_FILE, TTL_MS, memCache, memCacheAt;
+var LITELLM_URL, BUNDLED_PRICING, CACHE_FILE, TTL_MS, memCache, memCacheAt, lookupCache;
 var init_litellm = __esm({
   "src/pricing/litellm.ts"() {
     "use strict";
@@ -7877,6 +8058,7 @@ var init_litellm = __esm({
     TTL_MS = 24 * 60 * 60 * 1e3;
     memCache = null;
     memCacheAt = 0;
+    lookupCache = /* @__PURE__ */ new Map();
   }
 });
 
@@ -7946,7 +8128,7 @@ function parseJSONLFile(filePath, fallbackWorkingDir) {
   }
   return daily;
 }
-function collectEntries() {
+function collectEntries(sinceMs) {
   const projectsDir = path18.join(os15.homedir(), ".claude", "projects");
   if (!fs16.existsSync(projectsDir)) return [];
   const combined = /* @__PURE__ */ new Map();
@@ -7971,7 +8153,15 @@ function collectEntries() {
     }
     const fallbackWorkingDir = decodeProjectDirName(dir);
     for (const file of files) {
-      const entries = parseJSONLFile(path18.join(dirPath, file), fallbackWorkingDir);
+      const filePath = path18.join(dirPath, file);
+      if (sinceMs !== void 0) {
+        try {
+          if (fs16.statSync(filePath).mtimeMs < sinceMs) continue;
+        } catch {
+          continue;
+        }
+      }
+      const entries = parseJSONLFile(filePath, fallbackWorkingDir);
       for (const [key, e] of entries) {
         const prev = combined.get(key);
         if (prev) {
@@ -8715,6 +8905,7 @@ import chalk5 from "chalk";
 import fs19 from "fs";
 import path21 from "path";
 import os18 from "os";
+import stringWidth2 from "string-width";
 function claudeModelPrice(model) {
   const base = model.replace(/@.*$/, "").replace(/-\d{8}$/, "");
   for (const [key, p] of Object.entries(CLAUDE_PRICING)) {
@@ -8807,7 +8998,16 @@ function buildRecurringPatternSet(findings) {
   }
   return recurring;
 }
-function pushFsOpAstFinding(command, toolName, input, timestamp, projLabel, sessionId, agent, result) {
+function emptyScanDedup() {
+  return { findingsKeys: /* @__PURE__ */ new Set(), dlpKeys: /* @__PURE__ */ new Set() };
+}
+function findingKey(ruleName, inputPreview, projLabel) {
+  return `${ruleName ?? "<unnamed>"}|${inputPreview}|${projLabel}`;
+}
+function dlpKey(patternName, redactedSample, projLabel) {
+  return `${patternName}|${redactedSample}|${projLabel}`;
+}
+function pushFsOpAstFinding(command, toolName, input, timestamp, projLabel, sessionId, agent, result, dedup) {
   const fsVerdict = analyzeFsOperation(command);
   if (!fsVerdict) return false;
   const synthRule = {
@@ -8830,10 +9030,9 @@ function pushFsOpAstFinding(command, toolName, input, timestamp, projLabel, sess
     rule: synthRule
   };
   const inputPreview = preview(input, 120);
-  const isDupe = result.findings.some(
-    (f) => f.source.rule.name === synthRule.name && preview(f.input, 120) === inputPreview && f.project === projLabel
-  );
-  if (!isDupe) {
+  const k = findingKey(synthRule.name, inputPreview, projLabel);
+  if (!dedup.findingsKeys.has(k)) {
+    dedup.findingsKeys.add(k);
     result.findings.push({
       source: synthSource,
       toolName,
@@ -8918,22 +9117,15 @@ function buildRuleSources() {
       sources.push({ shieldName, shieldLabel: shieldName, sourceType: "shield", rule });
     }
   }
-  try {
-    const config = getConfig();
-    for (const rule of config.policy.smartRules) {
-      if (!rule.name) continue;
-      if (rule.name.startsWith("shield:")) continue;
-      const isCloud = rule.name.startsWith("cloud:");
-      const isDefault = DEFAULT_RULE_NAMES.has(rule.name);
-      const sourceType = isCloud ? "user" : isDefault ? "default" : "user";
-      sources.push({
-        shieldName: isCloud ? "cloud" : isDefault ? "default" : "custom",
-        shieldLabel: isCloud ? "Cloud Policy" : isDefault ? "Default Rules" : "Your Rules",
-        sourceType,
-        rule
-      });
-    }
-  } catch {
+  for (const rule of DEFAULT_CONFIG.policy.smartRules) {
+    if (!rule.name) continue;
+    if (rule.name.startsWith("shield:")) continue;
+    sources.push({
+      shieldName: "default",
+      shieldLabel: "Default Rules",
+      sourceType: "default",
+      rule
+    });
   }
   return sources;
 }
@@ -9019,178 +9211,53 @@ function renderProgressBar(done, total, lines) {
     `\r  ${chalk5.cyan("Scanning")}  [${chalk5.cyan(bar)}]  ${chalk5.dim(fileLabel)}${lineLabel}  `
   );
 }
-function scanClaudeHistory(startDate, onProgress, onLine) {
-  const projectsDir = path21.join(os18.homedir(), ".claude", "projects");
-  const result = {
-    filesScanned: 0,
-    sessions: 0,
-    totalToolCalls: 0,
-    bashCalls: 0,
-    findings: [],
-    dlpFindings: [],
-    loopFindings: [],
-    totalCostUSD: 0,
-    firstDate: null,
-    lastDate: null,
-    sessionsWithEarlySecrets: 0
-  };
-  if (!fs19.existsSync(projectsDir)) return result;
-  let projDirs;
+function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, result, dedup, onProgress, onLine) {
+  result.filesScanned++;
+  result.sessions++;
+  onProgress?.(result.filesScanned);
+  const sessionId = file.replace(/\.jsonl$/, "");
+  let raw;
   try {
-    projDirs = fs19.readdirSync(projectsDir);
+    raw = fs19.readFileSync(path21.join(projPath, file), "utf-8");
   } catch {
-    return result;
+    return;
   }
-  const ruleSources = buildRuleSources();
-  for (const proj of projDirs) {
-    const projPath = path21.join(projectsDir, proj);
+  const sessionCalls = [];
+  const toolUseFilePaths = /* @__PURE__ */ new Map();
+  let firstDlpTs = null;
+  let firstEditTs = null;
+  for (const line of raw.split("\n")) {
+    if (!line.trim()) continue;
+    onLine?.();
+    let entry;
     try {
-      if (!fs19.statSync(projPath).isDirectory()) continue;
+      entry = JSON.parse(line);
     } catch {
       continue;
     }
-    const projLabel = stripTerminalEscapes(
-      decodeURIComponent(proj).replace(os18.homedir(), "~")
-    ).slice(0, 40);
-    let files;
-    try {
-      files = fs19.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
-    } catch {
-      continue;
+    if (entry.type !== "assistant" && entry.type !== "user") continue;
+    if (startDate && entry.timestamp) {
+      if (new Date(entry.timestamp) < startDate) continue;
     }
-    for (const file of files) {
-      result.filesScanned++;
-      result.sessions++;
-      onProgress?.(result.filesScanned);
-      const sessionId = file.replace(/\.jsonl$/, "");
-      let raw;
-      try {
-        raw = fs19.readFileSync(path21.join(projPath, file), "utf-8");
-      } catch {
-        continue;
-      }
-      const sessionCalls = [];
-      const toolUseFilePaths = /* @__PURE__ */ new Map();
-      let firstDlpTs = null;
-      let firstEditTs = null;
-      for (const line of raw.split("\n")) {
-        if (!line.trim()) continue;
-        onLine?.();
-        let entry;
-        try {
-          entry = JSON.parse(line);
-        } catch {
-          continue;
-        }
-        if (entry.type !== "assistant" && entry.type !== "user") continue;
-        if (startDate && entry.timestamp) {
-          if (new Date(entry.timestamp) < startDate) continue;
-        }
-        if (entry.timestamp) {
-          if (!result.firstDate || entry.timestamp < result.firstDate)
-            result.firstDate = entry.timestamp;
-          if (!result.lastDate || entry.timestamp > result.lastDate)
-            result.lastDate = entry.timestamp;
-        }
-        if (entry.type === "user") {
-          const content2 = entry.message?.content;
-          if (Array.isArray(content2)) {
-            const text = content2.filter((b) => b.type === "text").map((b) => b["text"] ?? "").join("\n");
-            if (text) {
-              const dlpMatch = scanArgs({ text });
-              if (dlpMatch) {
-                const isDupe = result.dlpFindings.some(
-                  (f) => f.patternName === dlpMatch.patternName && f.redactedSample === dlpMatch.redactedSample && f.project === projLabel
-                );
-                if (!isDupe) {
-                  result.dlpFindings.push({
-                    patternName: dlpMatch.patternName,
-                    redactedSample: dlpMatch.redactedSample,
-                    toolName: "user-prompt",
-                    timestamp: entry.timestamp ?? "",
-                    project: projLabel,
-                    sessionId,
-                    agent: "claude"
-                  });
-                }
-              }
-            }
-            for (const block of content2) {
-              if (block.type !== "tool_result") continue;
-              const filePath = block.tool_use_id ? toolUseFilePaths.get(block.tool_use_id) : void 0;
-              if (filePath) {
-                const ext = path21.extname(filePath).toLowerCase();
-                if (CODE_EXTENSIONS.has(ext)) continue;
-              }
-              const resultText = typeof block.content === "string" ? block.content : Array.isArray(block.content) ? block.content.map((c) => c.text ?? "").join("\n") : null;
-              if (!resultText) continue;
-              if (isNode9SelfOutput(resultText)) continue;
-              const dlpMatch = scanArgs({ text: resultText });
-              if (dlpMatch) {
-                if (looksLikeFixtureToken(dlpMatch.redactedSample)) continue;
-                if (firstDlpTs === null) firstDlpTs = entry.timestamp ?? null;
-                const isDupe = result.dlpFindings.some(
-                  (f) => f.patternName === dlpMatch.patternName && f.redactedSample === dlpMatch.redactedSample && f.project === projLabel
-                );
-                if (!isDupe) {
-                  result.dlpFindings.push({
-                    patternName: dlpMatch.patternName,
-                    redactedSample: dlpMatch.redactedSample,
-                    toolName: "tool-result",
-                    timestamp: entry.timestamp ?? "",
-                    project: projLabel,
-                    sessionId,
-                    agent: "claude"
-                  });
-                }
-              }
-            }
-          }
-          continue;
-        }
-        const usage = entry.message?.usage;
-        const model = entry.message?.model;
-        if (usage && model) {
-          const p = claudeModelPrice(model);
-          if (p) {
-            result.totalCostUSD += (usage.input_tokens ?? 0) * p.i + (usage.output_tokens ?? 0) * p.o + (usage.cache_creation_input_tokens ?? 0) * p.cw + (usage.cache_read_input_tokens ?? 0) * p.cr;
-          }
-        }
-        const content = entry.message?.content;
-        if (!Array.isArray(content)) continue;
-        for (const block of content) {
-          if (block.type !== "tool_use") continue;
-          result.totalToolCalls++;
-          const toolName = block.name ?? "";
-          const toolNameLower = toolName.toLowerCase();
-          const input = block.input ?? {};
-          if (block.id && typeof input.file_path === "string") {
-            toolUseFilePaths.set(block.id, input.file_path);
-          }
-          sessionCalls.push({ toolName, input, timestamp: entry.timestamp ?? "" });
-          if (toolNameLower === "bash" || toolNameLower === "execute_bash") {
-            result.bashCalls++;
-          }
-          if (firstEditTs === null && (toolNameLower === "edit" || toolNameLower === "write" || toolNameLower === "write_file" || toolNameLower === "edit_file" || toolNameLower === "multiedit")) {
-            firstEditTs = entry.timestamp ?? null;
-          }
-          const rawCmd = String(input.command ?? "").trimStart();
-          if (/^node9\s+(scan|explain|report|tail|dlp|status|sessions|audit)\b/.test(rawCmd))
-            continue;
-          const inputFilePath = typeof input.file_path === "string" ? input.file_path : "";
-          const inputFileExt = inputFilePath ? path21.extname(inputFilePath).toLowerCase() : "";
-          if (CODE_EXTENSIONS.has(inputFileExt)) continue;
-          const dlpMatch = scanArgs(input);
+    if (entry.timestamp) {
+      if (!result.firstDate || entry.timestamp < result.firstDate)
+        result.firstDate = entry.timestamp;
+      if (!result.lastDate || entry.timestamp > result.lastDate) result.lastDate = entry.timestamp;
+    }
+    if (entry.type === "user") {
+      const content2 = entry.message?.content;
+      if (Array.isArray(content2)) {
+        const text = content2.filter((b) => b.type === "text").map((b) => b["text"] ?? "").join("\n");
+        if (text) {
+          const dlpMatch = scanArgs({ text });
           if (dlpMatch) {
-            if (firstDlpTs === null) firstDlpTs = entry.timestamp ?? null;
-            const isDupe = result.dlpFindings.some(
-              (f) => f.patternName === dlpMatch.patternName && f.redactedSample === dlpMatch.redactedSample && f.project === projLabel
-            );
-            if (!isDupe) {
+            const k = dlpKey(dlpMatch.patternName, dlpMatch.redactedSample, projLabel);
+            if (!dedup.dlpKeys.has(k)) {
+              dedup.dlpKeys.add(k);
               result.dlpFindings.push({
                 patternName: dlpMatch.patternName,
                 redactedSample: dlpMatch.redactedSample,
-                toolName,
+                toolName: "user-prompt",
                 timestamp: entry.timestamp ?? "",
                 project: projLabel,
                 sessionId,
@@ -9198,102 +9265,252 @@ function scanClaudeHistory(startDate, onProgress, onLine) {
               });
             }
           }
-          let astFsMatched = false;
-          const astRanForBash = toolNameLower === "bash" || toolNameLower === "execute_bash";
-          if (astRanForBash) {
-            astFsMatched = pushFsOpAstFinding(
-              String(input.command ?? ""),
-              toolName,
-              input,
-              entry.timestamp ?? "",
-              projLabel,
-              sessionId,
-              "claude",
-              result
-            );
+        }
+        for (const block of content2) {
+          if (block.type !== "tool_result") continue;
+          const filePath = block.tool_use_id ? toolUseFilePaths.get(block.tool_use_id) : void 0;
+          if (filePath) {
+            const ext = path21.extname(filePath).toLowerCase();
+            if (CODE_EXTENSIONS.has(ext)) continue;
           }
-          let ruleMatched = astFsMatched;
-          for (const source of ruleSources) {
-            const { rule } = source;
-            if (rule.verdict === "allow") continue;
-            if (rule.tool && !matchesPattern(toolNameLower, rule.tool)) continue;
-            if (astRanForBash && rule.name && AST_FS_REGEX_RULES.has(rule.name)) continue;
-            if (!evaluateSmartConditions(input, rule)) continue;
-            const inputPreview = preview(input, 120);
-            const isDupe = result.findings.some(
-              (f) => f.source.rule.name === rule.name && preview(f.input, 120) === inputPreview && f.project === projLabel
-            );
-            if (!isDupe) {
-              result.findings.push({
-                source,
-                toolName,
-                input,
+          const resultText = typeof block.content === "string" ? block.content : Array.isArray(block.content) ? block.content.map((c) => c.text ?? "").join("\n") : null;
+          if (!resultText) continue;
+          if (isNode9SelfOutput(resultText)) continue;
+          const dlpMatch = scanArgs({ text: resultText });
+          if (dlpMatch) {
+            if (looksLikeFixtureToken(dlpMatch.redactedSample)) continue;
+            if (firstDlpTs === null) firstDlpTs = entry.timestamp ?? null;
+            const k = dlpKey(dlpMatch.patternName, dlpMatch.redactedSample, projLabel);
+            if (!dedup.dlpKeys.has(k)) {
+              dedup.dlpKeys.add(k);
+              result.dlpFindings.push({
+                patternName: dlpMatch.patternName,
+                redactedSample: dlpMatch.redactedSample,
+                toolName: "tool-result",
                 timestamp: entry.timestamp ?? "",
                 project: projLabel,
                 sessionId,
                 agent: "claude"
               });
             }
-            ruleMatched = true;
-            break;
-          }
-          if (!ruleMatched && (toolNameLower === "bash" || toolNameLower === "execute_bash")) {
-            const shellVerdict = detectDangerousShellExec(String(input.command ?? ""));
-            if (shellVerdict) {
-              const astRule = {
-                name: `ast:bash-safe:${shellVerdict}-shell-exec-remote`,
-                tool: "bash",
-                conditions: [],
-                verdict: shellVerdict,
-                reason: `Shell execution of remote download detected by AST analysis (bash-safe)`
-              };
-              const inputPreview = preview(input, 120);
-              const isDupe = result.findings.some(
-                (f) => f.source.rule.name === astRule.name && preview(f.input, 120) === inputPreview && f.project === projLabel
-              );
-              if (!isDupe) {
-                result.findings.push({
-                  source: {
-                    shieldName: "bash-safe",
-                    shieldLabel: "bash-safe (AST)",
-                    sourceType: "shield",
-                    rule: astRule
-                  },
-                  toolName,
-                  input,
-                  timestamp: entry.timestamp ?? "",
-                  project: projLabel,
-                  sessionId,
-                  agent: "claude"
-                });
-              }
-            }
           }
         }
       }
-      result.loopFindings.push(...detectLoops(sessionCalls, projLabel, sessionId, "claude"));
-      if (firstDlpTs !== null && (firstEditTs === null || firstDlpTs < firstEditTs)) {
-        result.sessionsWithEarlySecrets++;
+      continue;
+    }
+    const usage = entry.message?.usage;
+    const model = entry.message?.model;
+    if (usage && model) {
+      const p = claudeModelPrice(model);
+      if (p) {
+        result.totalCostUSD += (usage.input_tokens ?? 0) * p.i + (usage.output_tokens ?? 0) * p.o + (usage.cache_creation_input_tokens ?? 0) * p.cw + (usage.cache_read_input_tokens ?? 0) * p.cr;
       }
     }
-  }
-  return result;
-}
-function scanGeminiHistory(startDate, onProgress, onLine) {
-  const tmpDir = path21.join(os18.homedir(), ".gemini", "tmp");
-  const result = {
-    filesScanned: 0,
-    sessions: 0,
-    totalToolCalls: 0,
-    bashCalls: 0,
-    findings: [],
-    dlpFindings: [],
+    const content = entry.message?.content;
+    if (!Array.isArray(content)) continue;
+    for (const block of content) {
+      if (block.type !== "tool_use") continue;
+      result.totalToolCalls++;
+      const toolName = block.name ?? "";
+      const toolNameLower = toolName.toLowerCase();
+      const input = block.input ?? {};
+      if (block.id && typeof input.file_path === "string") {
+        toolUseFilePaths.set(block.id, input.file_path);
+      }
+      sessionCalls.push({ toolName, input, timestamp: entry.timestamp ?? "" });
+      if (toolNameLower === "bash" || toolNameLower === "execute_bash") {
+        result.bashCalls++;
+      }
+      if (firstEditTs === null && (toolNameLower === "edit" || toolNameLower === "write" || toolNameLower === "write_file" || toolNameLower === "edit_file" || toolNameLower === "multiedit")) {
+        firstEditTs = entry.timestamp ?? null;
+      }
+      const rawCmd = String(input.command ?? "").trimStart();
+      if (/^node9\s+(scan|explain|report|tail|dlp|status|sessions|audit)\b/.test(rawCmd)) continue;
+      const inputFilePath = typeof input.file_path === "string" ? input.file_path : "";
+      const inputFileExt = inputFilePath ? path21.extname(inputFilePath).toLowerCase() : "";
+      if (CODE_EXTENSIONS.has(inputFileExt)) continue;
+      const dlpMatch = scanArgs(input);
+      if (dlpMatch) {
+        if (firstDlpTs === null) firstDlpTs = entry.timestamp ?? null;
+        const k = dlpKey(dlpMatch.patternName, dlpMatch.redactedSample, projLabel);
+        if (!dedup.dlpKeys.has(k)) {
+          dedup.dlpKeys.add(k);
+          result.dlpFindings.push({
+            patternName: dlpMatch.patternName,
+            redactedSample: dlpMatch.redactedSample,
+            toolName,
+            timestamp: entry.timestamp ?? "",
+            project: projLabel,
+            sessionId,
+            agent: "claude"
+          });
+        }
+      }
+      let astFsMatched = false;
+      const astRanForBash = toolNameLower === "bash" || toolNameLower === "execute_bash";
+      if (astRanForBash) {
+        astFsMatched = pushFsOpAstFinding(
+          String(input.command ?? ""),
+          toolName,
+          input,
+          entry.timestamp ?? "",
+          projLabel,
+          sessionId,
+          "claude",
+          result,
+          dedup
+        );
+      }
+      let ruleMatched = astFsMatched;
+      for (const source of ruleSources) {
+        const { rule } = source;
+        if (rule.verdict === "allow") continue;
+        if (rule.tool && !matchesPattern(toolNameLower, rule.tool)) continue;
+        if (astRanForBash && rule.name && AST_FS_REGEX_RULES.has(rule.name)) continue;
+        if (!evaluateSmartConditions(input, rule)) continue;
+        const inputPreview = preview(input, 120);
+        const k = findingKey(rule.name, inputPreview, projLabel);
+        if (!dedup.findingsKeys.has(k)) {
+          dedup.findingsKeys.add(k);
+          result.findings.push({
+            source,
+            toolName,
+            input,
+            timestamp: entry.timestamp ?? "",
+            project: projLabel,
+            sessionId,
+            agent: "claude"
+          });
+        }
+        ruleMatched = true;
+        break;
+      }
+      if (!ruleMatched && (toolNameLower === "bash" || toolNameLower === "execute_bash")) {
+        const shellVerdict = detectDangerousShellExec(String(input.command ?? ""));
+        if (shellVerdict) {
+          const astRule = {
+            name: `ast:bash-safe:${shellVerdict}-shell-exec-remote`,
+            tool: "bash",
+            conditions: [],
+            verdict: shellVerdict,
+            reason: `Shell execution of remote download detected by AST analysis (bash-safe)`
+          };
+          const inputPreview = preview(input, 120);
+          const k = findingKey(astRule.name, inputPreview, projLabel);
+          if (!dedup.findingsKeys.has(k)) {
+            dedup.findingsKeys.add(k);
+            result.findings.push({
+              source: {
+                shieldName: "bash-safe",
+                shieldLabel: "bash-safe (AST)",
+                sourceType: "shield",
+                rule: astRule
+              },
+              toolName,
+              input,
+              timestamp: entry.timestamp ?? "",
+              project: projLabel,
+              sessionId,
+              agent: "claude"
+            });
+          }
+        }
+      }
+    }
+  }
+  result.loopFindings.push(...detectLoops(sessionCalls, projLabel, sessionId, "claude"));
+  if (firstDlpTs !== null && (firstEditTs === null || firstDlpTs < firstEditTs)) {
+    result.sessionsWithEarlySecrets++;
+  }
+}
+function processClaudeProject(proj, projectsDir, ruleSources, startDate, result, dedup, onProgress, onLine) {
+  const projPath = path21.join(projectsDir, proj);
+  try {
+    if (!fs19.statSync(projPath).isDirectory()) return;
+  } catch {
+    return;
+  }
+  const projLabel = stripTerminalEscapes(decodeURIComponent(proj).replace(os18.homedir(), "~")).slice(
+    0,
+    40
+  );
+  let files;
+  try {
+    files = fs19.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
+  } catch {
+    return;
+  }
+  for (const file of files) {
+    processClaudeFile(
+      file,
+      projPath,
+      projLabel,
+      ruleSources,
+      startDate,
+      result,
+      dedup,
+      onProgress,
+      onLine
+    );
+  }
+}
+function emptyClaudeScan() {
+  return {
+    filesScanned: 0,
+    sessions: 0,
+    totalToolCalls: 0,
+    bashCalls: 0,
+    findings: [],
+    dlpFindings: [],
+    loopFindings: [],
+    totalCostUSD: 0,
+    firstDate: null,
+    lastDate: null,
+    sessionsWithEarlySecrets: 0
+  };
+}
+function scanClaudeHistory(startDate, onProgress, onLine) {
+  const projectsDir = path21.join(os18.homedir(), ".claude", "projects");
+  const result = emptyClaudeScan();
+  if (!fs19.existsSync(projectsDir)) return result;
+  let projDirs;
+  try {
+    projDirs = fs19.readdirSync(projectsDir);
+  } catch {
+    return result;
+  }
+  const ruleSources = buildRuleSources();
+  const dedup = emptyScanDedup();
+  for (const proj of projDirs) {
+    processClaudeProject(
+      proj,
+      projectsDir,
+      ruleSources,
+      startDate,
+      result,
+      dedup,
+      onProgress,
+      onLine
+    );
+  }
+  return result;
+}
+function scanGeminiHistory(startDate, onProgress, onLine) {
+  const tmpDir = path21.join(os18.homedir(), ".gemini", "tmp");
+  const result = {
+    filesScanned: 0,
+    sessions: 0,
+    totalToolCalls: 0,
+    bashCalls: 0,
+    findings: [],
+    dlpFindings: [],
     loopFindings: [],
     totalCostUSD: 0,
     firstDate: null,
     lastDate: null,
     sessionsWithEarlySecrets: 0
   };
+  const dedup = emptyScanDedup();
   if (!fs19.existsSync(tmpDir)) return result;
   let slugDirs;
   try {
@@ -9350,10 +9567,9 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
           if (text) {
             const dlpMatch = scanArgs({ text });
             if (dlpMatch) {
-              const isDupe = result.dlpFindings.some(
-                (f) => f.patternName === dlpMatch.patternName && f.redactedSample === dlpMatch.redactedSample && f.project === projLabel
-              );
-              if (!isDupe) {
+              const k = dlpKey(dlpMatch.patternName, dlpMatch.redactedSample, projLabel);
+              if (!dedup.dlpKeys.has(k)) {
+                dedup.dlpKeys.add(k);
                 result.dlpFindings.push({
                   patternName: dlpMatch.patternName,
                   redactedSample: dlpMatch.redactedSample,
@@ -9398,10 +9614,9 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
             continue;
           const dlpMatch = scanArgs(input);
           if (dlpMatch) {
-            const isDupe = result.dlpFindings.some(
-              (f) => f.patternName === dlpMatch.patternName && f.redactedSample === dlpMatch.redactedSample && f.project === projLabel
-            );
-            if (!isDupe) {
+            const k = dlpKey(dlpMatch.patternName, dlpMatch.redactedSample, projLabel);
+            if (!dedup.dlpKeys.has(k)) {
+              dedup.dlpKeys.add(k);
               result.dlpFindings.push({
                 patternName: dlpMatch.patternName,
                 redactedSample: dlpMatch.redactedSample,
@@ -9424,7 +9639,8 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
               projLabel,
               sessionId,
               "gemini",
-              result
+              result,
+              dedup
             );
           }
           let ruleMatched = astFsMatched;
@@ -9435,10 +9651,9 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
             if (astRanForBash && rule.name && AST_FS_REGEX_RULES.has(rule.name)) continue;
             if (!evaluateSmartConditions(input, rule)) continue;
             const inputPreview = preview(input, 120);
-            const isDupe = result.findings.some(
-              (f) => f.source.rule.name === rule.name && preview(f.input, 120) === inputPreview && f.project === projLabel
-            );
-            if (!isDupe) {
+            const k = findingKey(rule.name, inputPreview, projLabel);
+            if (!dedup.findingsKeys.has(k)) {
+              dedup.findingsKeys.add(k);
               result.findings.push({
                 source,
                 toolName,
@@ -9466,10 +9681,9 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
                 reason: `Shell execution of remote download detected by AST analysis (bash-safe)`
               };
               const inputPreview = preview(input, 120);
-              const isDupe = result.findings.some(
-                (f) => f.source.rule.name === astRule.name && preview(f.input, 120) === inputPreview && f.project === projLabel
-              );
-              if (!isDupe) {
+              const k = findingKey(astRule.name, inputPreview, projLabel);
+              if (!dedup.findingsKeys.has(k)) {
+                dedup.findingsKeys.add(k);
                 result.findings.push({
                   source: {
                     shieldName: "bash-safe",
@@ -9509,6 +9723,7 @@ function scanCodexHistory(startDate, onProgress, onLine) {
     lastDate: null,
     sessionsWithEarlySecrets: 0
   };
+  const dedup = emptyScanDedup();
   if (!fs19.existsSync(sessionsBase)) return result;
   const jsonlFiles = [];
   try {
@@ -9590,10 +9805,9 @@ function scanCodexHistory(startDate, onProgress, onLine) {
         if (text) {
           const dlpMatch2 = scanArgs({ text });
           if (dlpMatch2) {
-            const isDupe = result.dlpFindings.some(
-              (f) => f.patternName === dlpMatch2.patternName && f.redactedSample === dlpMatch2.redactedSample && f.project === projLabel
-            );
-            if (!isDupe) {
+            const k = dlpKey(dlpMatch2.patternName, dlpMatch2.redactedSample, projLabel);
+            if (!dedup.dlpKeys.has(k)) {
+              dedup.dlpKeys.add(k);
               result.dlpFindings.push({
                 patternName: dlpMatch2.patternName,
                 redactedSample: dlpMatch2.redactedSample,
@@ -9635,10 +9849,9 @@ function scanCodexHistory(startDate, onProgress, onLine) {
       if (/^node9\s+(scan|explain|report|tail|dlp|status|sessions|audit)\b/.test(rawCmd)) continue;
       const dlpMatch = scanArgs(input);
       if (dlpMatch) {
-        const isDupe = result.dlpFindings.some(
-          (f) => f.patternName === dlpMatch.patternName && f.redactedSample === dlpMatch.redactedSample && f.project === projLabel
-        );
-        if (!isDupe) {
+        const k = dlpKey(dlpMatch.patternName, dlpMatch.redactedSample, projLabel);
+        if (!dedup.dlpKeys.has(k)) {
+          dedup.dlpKeys.add(k);
           result.dlpFindings.push({
             patternName: dlpMatch.patternName,
             redactedSample: dlpMatch.redactedSample,
@@ -9661,7 +9874,8 @@ function scanCodexHistory(startDate, onProgress, onLine) {
           projLabel,
           sessionId,
           "codex",
-          result
+          result,
+          dedup
         );
       }
       let ruleMatched = astFsMatched;
@@ -9673,10 +9887,9 @@ function scanCodexHistory(startDate, onProgress, onLine) {
         if (astRanForBash && rule.name && AST_FS_REGEX_RULES.has(rule.name)) continue;
         if (!evaluateSmartConditions(input, rule)) continue;
         const inputPreview = preview(input, 120);
-        const isDupe = result.findings.some(
-          (f) => f.source.rule.name === rule.name && preview(f.input, 120) === inputPreview && f.project === projLabel
-        );
-        if (!isDupe) {
+        const k = findingKey(rule.name, inputPreview, projLabel);
+        if (!dedup.findingsKeys.has(k)) {
+          dedup.findingsKeys.add(k);
           result.findings.push({
             source,
             toolName,
@@ -9701,10 +9914,9 @@ function scanCodexHistory(startDate, onProgress, onLine) {
             reason: `Shell execution of remote download detected by AST analysis (bash-safe)`
           };
           const inputPreview = preview(input, 120);
-          const isDupe = result.findings.some(
-            (f) => f.source.rule.name === astRule.name && preview(f.input, 120) === inputPreview && f.project === projLabel
-          );
-          if (!isDupe) {
+          const k = findingKey(astRule.name, inputPreview, projLabel);
+          if (!dedup.findingsKeys.has(k)) {
+            dedup.findingsKeys.add(k);
             result.findings.push({
               source: {
                 shieldName: "bash-safe",
@@ -9735,6 +9947,7 @@ function scanShellConfig() {
     (f) => path21.join(home, f)
   );
   const findings = [];
+  const seen = /* @__PURE__ */ new Set();
   for (const filePath of configFiles) {
     if (!fs19.existsSync(filePath)) continue;
     let lines;
@@ -9749,10 +9962,9 @@ function scanShellConfig() {
       if (!trimmed || trimmed.startsWith("#")) continue;
       const dlpMatch = scanArgs({ text: trimmed });
       if (!dlpMatch) continue;
-      const isDupe = findings.some(
-        (f) => f.patternName === dlpMatch.patternName && f.redactedSample === dlpMatch.redactedSample && f.project === shortPath
-      );
-      if (!isDupe) {
+      const k = dlpKey(dlpMatch.patternName, dlpMatch.redactedSample, shortPath);
+      if (!seen.has(k)) {
+        seen.add(k);
         findings.push({
           patternName: dlpMatch.patternName,
           redactedSample: dlpMatch.redactedSample,
@@ -10011,6 +10223,267 @@ function renderNarrativeScorecard(input) {
   console.log(chalk5.dim("\u2192  github.com/node9-ai/node9-proxy"));
   console.log("");
 }
+function mkLine(...parts) {
+  let rendered = "";
+  let width = 0;
+  for (const [text, fmt] of parts) {
+    rendered += fmt ? fmt(text) : text;
+    width += stringWidth2(text);
+  }
+  return { rendered, width };
+}
+function shortRule(name, width) {
+  const stripped = name.replace(/^shield:[^:]+:/, "");
+  if (stripped.length <= width) return stripped.padEnd(width);
+  return stripped.slice(0, width - 1) + "\u2026";
+}
+function renderPanelScorecard(input, now = /* @__PURE__ */ new Date()) {
+  const { scan, summary, blast, blastExposures, blockedCount, reviewCount } = input;
+  const topLines = [];
+  if (scan.dlpFindings.length > 0) {
+    const latest = scan.dlpFindings[0];
+    const rel = relativeDate(latest.timestamp, now);
+    const noun = `credential leak${scan.dlpFindings.length !== 1 ? "s" : ""}`;
+    topLines.push(
+      mkLine(
+        ["\u{1F6A8} ", chalk5.red],
+        [`${scan.dlpFindings.length} ${noun} in tool input  `, chalk5.bold],
+        [`(latest: ${rel} ago, ${latest.patternName})`, chalk5.dim]
+      )
+    );
+  }
+  if (blockedCount > 0) {
+    const topBlocked = topRulesByVerdict(summary.sections, "block", 2).map(
+      (r) => r.count > 1 ? `${shortRule(r.name, 20).trimEnd()} \xD7${r.count}` : shortRule(r.name, 20).trimEnd()
+    ).join(", ");
+    topLines.push(
+      mkLine(
+        ["\u{1F6D1} ", chalk5.red],
+        [`${blockedCount} ops node9 would have blocked  `, chalk5.bold],
+        [`(${topBlocked})`, chalk5.dim]
+      )
+    );
+  }
+  if (scan.loopFindings.length > 0) {
+    const { wastePct } = computeLoopWaste(scan.loopFindings, scan.totalToolCalls);
+    const byTool = /* @__PURE__ */ new Map();
+    for (const f of scan.loopFindings) {
+      byTool.set(f.toolName, (byTool.get(f.toolName) ?? 0) + Math.max(0, f.count - 1));
+    }
+    const top = [...byTool.entries()].sort((a, b) => b[1] - a[1])[0];
+    const wasteSuffix = wastePct > 0 ? `, ${wastePct}% wasted` : "";
+    const detail = top ? `(${top[0]} dominates${wasteSuffix})` : "";
+    topLines.push(
+      mkLine(
+        ["\u{1F501} ", chalk5.yellow],
+        [`${scan.loopFindings.length} agent loops detected  `, chalk5.bold],
+        [detail, chalk5.dim]
+      )
+    );
+  }
+  if (blastExposures > 0) {
+    const exposed2 = Math.max(0, 100 - blast.score);
+    const pjDiscount = PROTECTIVE_SHIELD_DISCOUNTS["project-jail"] ?? 0;
+    const pjBonus = Math.round(exposed2 * pjDiscount);
+    const cta = pjBonus > 0 ? `  \u2192 enable project-jail (+${pjBonus} pts)` : "";
+    topLines.push(
+      mkLine(
+        ["\u{1F52D} ", chalk5.red],
+        [`${blastExposures} secrets reachable on disk`, chalk5.bold],
+        [cta, chalk5.dim]
+      )
+    );
+  }
+  if (topLines.length > 0) {
+    for (const ln of boxPanel("TOP FINDINGS", topLines)) console.log("  " + ln);
+    console.log("");
+  }
+  if (summary.leaks.length > 0) {
+    const leakLines = [];
+    for (const leak of summary.leaks.slice(0, 5)) {
+      const rel = relativeDate(leak.timestamp, now);
+      leakLines.push(
+        mkLine(
+          [rel.padStart(4) + "  ", chalk5.dim],
+          [leak.patternName.padEnd(14), chalk5.red.bold],
+          [" "],
+          [leak.redactedSample.padEnd(20), chalk5.red],
+          [" "],
+          [`[${leak.toolName}]`.padEnd(15), chalk5.dim],
+          [" "],
+          [leak.agent, chalk5.dim]
+        )
+      );
+    }
+    const remaining = summary.leaks.length - 5;
+    if (remaining > 0) {
+      leakLines.push(mkLine([`\u2026 +${remaining} more`, chalk5.dim]));
+    }
+    const title = `LEAKS  \xB7  ${summary.leaks.length} secret${summary.leaks.length !== 1 ? "s" : ""} in plain text`;
+    for (const ln of boxPanel(title, leakLines)) console.log("  " + ln);
+    console.log("");
+  }
+  if (blockedCount > 0) {
+    const blockedLines = [];
+    const ruleEntries = topRulesByVerdict(summary.sections, "block", 12);
+    for (const r of ruleEntries) {
+      const origin = originForRule(r.name, summary.sections);
+      blockedLines.push(
+        mkLine(
+          ["\u2717 ", chalk5.red],
+          [shortRule(r.name, 24), chalk5.bold],
+          [" \xD7" + String(r.count).padEnd(4), chalk5.bold],
+          [" "],
+          [origin, chalk5.dim]
+        )
+      );
+    }
+    const title = `BLOCKED  \xB7  ${blockedCount} ops node9 would have stopped`;
+    for (const ln of boxPanel(title, blockedLines)) console.log("  " + ln);
+    console.log("");
+  }
+  if (reviewCount > 0) {
+    const reviewLines = [];
+    const ruleEntries = topRulesByVerdict(summary.sections, "review", 12);
+    for (const r of ruleEntries) {
+      const origin = originForRule(r.name, summary.sections);
+      reviewLines.push(
+        mkLine(
+          // VS-16 (U+FE0F) forces emoji-presentation so string-width
+          // returns 2 cells (matching how modern terminals actually
+          // render it). Without VS-16 string-width says 1 cell — and
+          // the right border drifts off. Same applies to 🛡 / ⚠ below.
+          ["\u{1F441}\uFE0F  ", chalk5.yellow],
+          [shortRule(r.name, 24), chalk5.bold],
+          [" \xD7" + String(r.count).padEnd(4), chalk5.bold],
+          [" "],
+          [origin, chalk5.dim]
+        )
+      );
+    }
+    const title = `REVIEW QUEUE  \xB7  ${reviewCount} ops flagged for approval`;
+    for (const ln of boxPanel(title, reviewLines)) console.log("  " + ln);
+    console.log("");
+  }
+  if (scan.loopFindings.length > 0) {
+    const { wastePct } = computeLoopWaste(scan.loopFindings, scan.totalToolCalls);
+    const byTool = /* @__PURE__ */ new Map();
+    let totalRepeats = 0;
+    for (const f of scan.loopFindings) {
+      const repeats = Math.max(0, f.count - 1);
+      byTool.set(f.toolName, (byTool.get(f.toolName) ?? 0) + repeats);
+      totalRepeats += repeats;
+    }
+    const toolEntries = [...byTool.entries()].sort((a, b) => b[1] - a[1]).slice(0, 5);
+    const loopLines = [];
+    for (const [tool, repeats] of toolEntries) {
+      const pct = totalRepeats > 0 ? Math.round(repeats / totalRepeats * 100) : 0;
+      loopLines.push(
+        mkLine(
+          [tool.padEnd(10), chalk5.bold],
+          [`\xD7${num(repeats)} repeats`.padEnd(16)],
+          [`(${pct}%)`, chalk5.dim]
+        )
+      );
+    }
+    const topStuck = [...scan.loopFindings].sort((a, b) => b.count - a.count).slice(0, 3);
+    if (topStuck.length > 0) {
+      loopLines.push(mkLine([""]));
+      loopLines.push(mkLine(["Top stuck patterns:", chalk5.dim]));
+      for (const f of topStuck) {
+        const raw = f.commandPreview || f.toolName;
+        const target = raw.length > 60 ? "\u2026" + raw.slice(raw.length - 59) : raw.padEnd(60);
+        loopLines.push(mkLine([`\xD7${num(f.count).padEnd(4)} `, chalk5.bold], [target, chalk5.dim]));
+      }
+    }
+    const wasteSuffix = wastePct > 0 ? `  \xB7  ${wastePct}% wasted` : "";
+    const title = `AGENT LOOPS  \xB7  ${scan.loopFindings.length} repeated patterns${wasteSuffix}`;
+    for (const ln of boxPanel(title, loopLines)) console.log("  " + ln);
+    console.log("");
+  }
+  if (blast.reachable.length > 0 || blast.envFindings.length > 0) {
+    const blastLines = [];
+    const DESC_W = 33;
+    for (const r of blast.reachable.slice(0, 8)) {
+      const trimmed = r.description.split(" \u2014 ")[0].split(/—|--/)[0].trim();
+      const desc = trimmed.length > DESC_W ? trimmed.slice(0, DESC_W - 1) + "\u2026" : trimmed;
+      blastLines.push(mkLine(["\u2717  ", chalk5.red], [r.label.padEnd(36)], [desc, chalk5.dim]));
+    }
+    for (const e of blast.envFindings.slice(0, 3)) {
+      blastLines.push(
+        mkLine(["\u26A0\uFE0F  ", chalk5.yellow], [`${e.key} `], [`(${e.patternName})`, chalk5.dim])
+      );
+    }
+    const totalExposed = blast.reachable.length + blast.envFindings.length;
+    if (totalExposed > 8) {
+      blastLines.push(mkLine([`\u2026 +${totalExposed - 8} more`, chalk5.dim]));
+    }
+    const title = `BLAST RADIUS  \xB7  ${totalExposed} path${totalExposed !== 1 ? "s" : ""} reachable right now`;
+    for (const ln of boxPanel(title, blastLines)) console.log("  " + ln);
+    console.log("");
+  }
+  const shieldImpacts = rollupByShield(summary.sections);
+  const exposed = Math.max(0, 100 - blast.score);
+  const shieldLines = [];
+  const ranked = [...shieldImpacts].sort((a, b) => {
+    const aDiscount = PROTECTIVE_SHIELD_DISCOUNTS[a.shieldName] ?? 0;
+    const bDiscount = PROTECTIVE_SHIELD_DISCOUNTS[b.shieldName] ?? 0;
+    if (aDiscount !== bDiscount) return bDiscount - aDiscount;
+    return b.totalCatches - a.totalCatches;
+  });
+  for (const impact of ranked) {
+    if (impact.totalCatches === 0) continue;
+    const discount = PROTECTIVE_SHIELD_DISCOUNTS[impact.shieldName] ?? 0;
+    const bonus = Math.round(exposed * discount);
+    const icon = discount > 0 ? "\u{1F6E1}\uFE0F  " : "\u2610   ";
+    const wouldCatch = `would catch ${impact.totalCatches} op${impact.totalCatches !== 1 ? "s" : ""}`;
+    const deltaSuffix = bonus > 0 ? `  \u2192  +${bonus} pts  (${blast.score} \u2192 ${blast.score + bonus})` : "";
+    shieldLines.push(
+      mkLine(
+        [icon, discount > 0 ? chalk5.cyan : chalk5.dim],
+        [impact.shieldName.padEnd(14), chalk5.bold],
+        [wouldCatch.padEnd(22), chalk5.dim],
+        [deltaSuffix, bonus > 0 ? chalk5.green.bold : chalk5.dim]
+      )
+    );
+    if (impact.topRuleLabels.length > 0) {
+      const rules = impact.topRuleLabels.join(", ");
+      shieldLines.push(mkLine(["      ", chalk5.dim], [rules, chalk5.dim]));
+    }
+  }
+  const hitShieldSet = new Set(
+    shieldImpacts.filter((i) => i.totalCatches > 0).map((i) => i.shieldName)
+  );
+  const zeroHitBuiltins = Object.keys(SHIELDS).filter((name) => !hitShieldSet.has(name)).sort();
+  if (zeroHitBuiltins.length > 0) {
+    shieldLines.push(mkLine([""]));
+    shieldLines.push(mkLine([zeroHitBuiltins.join(" \xB7 "), chalk5.dim]));
+    shieldLines.push(mkLine(["      no hits in your history \u2014 install proactively", chalk5.dim]));
+  }
+  const topRec = ranked.find(
+    (r) => r.totalCatches > 0 && (PROTECTIVE_SHIELD_DISCOUNTS[r.shieldName] ?? 0) > 0
+  );
+  if (topRec) {
+    const bonus = Math.round(exposed * (PROTECTIVE_SHIELD_DISCOUNTS[topRec.shieldName] ?? 0));
+    const cta = `\u2192 node9 shield enable ${topRec.shieldName}   (start here \u2014 +${bonus} pts)`;
+    shieldLines.push(mkLine([""]));
+    shieldLines.push(mkLine([cta, chalk5.cyan]));
+  }
+  if (shieldLines.length > 0) {
+    const title = "SHIELDS  \xB7  install node9 + enable these to catch what we found";
+    for (const ln of boxPanel(title, shieldLines)) console.log("  " + ln);
+    console.log("");
+  }
+}
+function originForRule(ruleName, sections) {
+  for (const section of sections) {
+    if (section.rules.some((r) => r.name === ruleName)) {
+      if (section.sourceType === "default") return "default";
+      if (section.sourceType === "shield") return `needs shield:${section.shieldKey ?? section.id}`;
+    }
+  }
+  return "";
+}
 function registerScanCommand(program2) {
   program2.command("scan").description("Forecast: scan agent history and show what node9 would catch if installed").option("--all", "Scan all history (default: last 90 days)").option("--days <n>", "Scan last N days of history", "90").option("--top <n>", "Max findings to show per rule (default: 5)", "5").option("--drill-down", "Show all findings with full commands and session IDs").option("--compact", "Compact one-screen scorecard \u2014 for screenshots and sharing").option("--narrative", "Severity-grouped report \u2014 for video / dramatic sharing").option(
     "--json",
@@ -10242,7 +10715,7 @@ function registerScanCommand(program2) {
             "  " + chalk5.dim("AI spend  ") + chalk5.bold(fmtCost(scan.totalCostUSD)) + (summary.loopWastedUSD > 0 ? chalk5.dim("   \xB7   wasted on loops  ") + chalk5.yellow("~" + fmtCost(summary.loopWastedUSD)) : "")
           );
         }
-        if (scan.dlpFindings.length > 0 && scan.sessionsWithEarlySecrets > 0) {
+        if (drillDown && scan.dlpFindings.length > 0 && scan.sessionsWithEarlySecrets > 0) {
           console.log(
             "  " + chalk5.dim(
               `${scan.sessionsWithEarlySecrets} session${scan.sessionsWithEarlySecrets !== 1 ? "s" : ""} loaded secrets before first edit`
@@ -10250,6 +10723,26 @@ function registerScanCommand(program2) {
           );
         }
         console.log("");
+        if (!drillDown) {
+          renderPanelScorecard({
+            scan,
+            summary,
+            blast,
+            blastExposures,
+            blockedCount,
+            reviewCount
+          });
+          const cta = isWired ? "\u2705 node9 is active" : "\u2192 install node9 to enable protection";
+          console.log("  " + chalk5.green(cta));
+          console.log(
+            "  " + chalk5.dim("\u2192 ") + chalk5.cyan("node9 monitor") + chalk5.dim("              live dashboard")
+          );
+          console.log(
+            "  " + chalk5.dim("\u2192 ") + chalk5.cyan("node9 scan --drill-down") + chalk5.dim("    full commands + session IDs")
+          );
+          console.log("");
+          return;
+        }
         if (scan.dlpFindings.length > 0) {
           console.log("  " + chalk5.dim("\u2500".repeat(70)));
           console.log(
@@ -10438,7 +10931,7 @@ function registerScanCommand(program2) {
     }
   );
 }
-var CLAUDE_PRICING, GEMINI_PRICING, CODE_EXTENSIONS, SELF_OUTPUT_MARKERS, FIXTURE_TOKEN_PATTERNS, TERMINAL_ESCAPE_RE2, LOOP_TOOLS, LOOP_THRESHOLD, LOOP_TIMESPAN_THRESHOLD_MS, STUCK_TOOLS_MIN_WASTE, STUCK_TOOLS_LIMIT, RECURRING_SESSION_THRESHOLD, STALE_AGE_DAYS, DEFAULT_RULE_NAMES, classifyRuleSeverity2, narrativeRuleLabel2;
+var CLAUDE_PRICING, GEMINI_PRICING, CODE_EXTENSIONS, SELF_OUTPUT_MARKERS, FIXTURE_TOKEN_PATTERNS, TERMINAL_ESCAPE_RE2, LOOP_TOOLS, LOOP_THRESHOLD, LOOP_TIMESPAN_THRESHOLD_MS, STUCK_TOOLS_MIN_WASTE, STUCK_TOOLS_LIMIT, RECURRING_SESSION_THRESHOLD, STALE_AGE_DAYS, classifyRuleSeverity2, narrativeRuleLabel2;
 var init_scan = __esm({
   "src/cli/commands/scan.ts"() {
     "use strict";
@@ -10452,6 +10945,7 @@ var init_scan = __esm({
     init_setup();
     init_blast();
     init_scan_derive();
+    init_protection();
     init_scan_json();
     init_scan_history();
     CLAUDE_PRICING = {
@@ -10534,9 +11028,6 @@ var init_scan = __esm({
     STUCK_TOOLS_LIMIT = 3;
     RECURRING_SESSION_THRESHOLD = 3;
     STALE_AGE_DAYS = 30;
-    DEFAULT_RULE_NAMES = new Set(
-      DEFAULT_CONFIG.policy.smartRules.map((r) => r.name).filter(Boolean)
-    );
     classifyRuleSeverity2 = classifyRuleSeverity;
     narrativeRuleLabel2 = narrativeRuleLabel;
   }
@@ -13107,6 +13598,7 @@ var tail_exports = {};
 __export(tail_exports, {
   agentLabel: () => agentLabel,
   sessionTag: () => sessionTag,
+  shortenPathSummary: () => shortenPathSummary,
   startTail: () => startTail
 });
 import http2 from "http";
@@ -13116,6 +13608,12 @@ import os41 from "os";
 import path47 from "path";
 import readline6 from "readline";
 import { spawn as spawn9 } from "child_process";
+function shortenPathSummary(s) {
+  if (!s || !s.startsWith("/")) return s;
+  const parts = s.split("/").filter(Boolean);
+  if (parts.length <= 2) return s;
+  return `\u2026/${parts.slice(-2).join("/")}`;
+}
 function getIcon(tool) {
   const t = tool.toLowerCase();
   for (const [k, v] of Object.entries(ICONS)) {
@@ -13869,7 +14367,8 @@ async function startTail(options = {}) {
     if (event === "snapshot") {
       const time = new Date(data.ts).toLocaleTimeString([], { hour12: false });
       const hash = data.hash ?? "";
-      const summary = data.argsSummary ?? data.tool;
+      const rawSummary = data.argsSummary ?? data.tool;
+      const summary = shortenPathSummary(rawSummary);
       const fileCount = data.fileCount ?? 0;
       const files = fileCount > 0 ? chalk30.dim(` \xB7 ${fileCount} file${fileCount === 1 ? "" : "s"}`) : "";
       process.stdout.write(
@@ -16251,63 +16750,13 @@ function registerAuditCommand(program2) {
 
 // src/cli/commands/report.ts
 import chalk13 from "chalk";
+
+// src/cli/aggregate/report-audit.ts
+init_costSync();
+init_litellm();
 import fs35 from "fs";
-import path36 from "path";
 import os31 from "os";
-
-// src/cli/render/report-json.ts
-function buildReportJson(input) {
-  const totalBlocked = input.timedOut + input.hardBlocked + input.dlpBlocked + input.loopHits + input.userDenied;
-  const blockRate = input.total > 0 ? totalBlocked / input.total : 0;
-  const deltaPct = input.priorBlockRate === null ? null : Math.round((blockRate - input.priorBlockRate) * 100);
-  return {
-    schemaVersion: 1,
-    generatedAt: input.generatedAt,
-    period: input.period,
-    range: { start: input.start.toISOString(), end: input.end.toISOString() },
-    excludedTests: input.excludedTests,
-    totals: {
-      events: input.total,
-      blocked: totalBlocked,
-      blockRate,
-      userApproved: input.userApproved,
-      userDenied: input.userDenied,
-      timedOut: input.timedOut,
-      hardBlocked: input.hardBlocked,
-      dlpBlocked: input.dlpBlocked,
-      observeDlp: input.observeDlp,
-      loopHits: input.loopHits,
-      unackedDlp: input.unackedDlp
-    },
-    tests: {
-      passes: input.testPasses,
-      fails: input.testFails
-    },
-    cost: {
-      totalUSD: input.cost.claudeUSD + input.cost.codexUSD,
-      claudeUSD: input.cost.claudeUSD,
-      codexUSD: input.cost.codexUSD,
-      inputTokens: input.cost.inputTokens,
-      outputTokens: input.cost.outputTokens,
-      cacheWriteTokens: input.cost.cacheWriteTokens,
-      cacheReadTokens: input.cost.cacheReadTokens,
-      byDay: [...input.cost.byDay.entries()].sort((a, b) => a[0].localeCompare(b[0])).map(([day, usd]) => ({ day, usd })),
-      byModel: [...input.cost.byModel.entries()].sort((a, b) => b[1] - a[1]).map(([model, usd]) => ({ model, usd }))
-    },
-    byTool: [...input.toolMap.entries()].sort((a, b) => b[1].calls - a[1].calls).map(([tool, v]) => ({ tool, calls: v.calls, blocked: v.blocked })),
-    byBlock: [...input.blockMap.entries()].sort((a, b) => b[1] - a[1]).map(([rule, count]) => ({ rule, count })),
-    byAgent: [...input.agentMap.entries()].sort((a, b) => b[1] - a[1]).map(([agent, calls]) => ({ agent, calls })),
-    byMcp: [...input.mcpMap.entries()].sort((a, b) => b[1] - a[1]).map(([server, calls]) => ({ server, calls })),
-    byDay: [...input.dailyMap.entries()].sort((a, b) => a[0].localeCompare(b[0])).map(([day, v]) => ({ day, calls: v.calls, blocked: v.blocked })),
-    byHour: [...input.hourMap.entries()].sort((a, b) => a[0] - b[0]).map(([hour, calls]) => ({ hour, calls })),
-    trend: {
-      priorBlockRate: input.priorBlockRate,
-      deltaPct
-    }
-  };
-}
-
-// src/cli/commands/report.ts
+import path36 from "path";
 var TEST_COMMAND_RE3 = /(?:^|\s)(npm\s+(?:run\s+)?test|npx\s+(?:vitest|jest|mocha)|yarn\s+(?:run\s+)?test|pnpm\s+(?:run\s+)?test|vitest|jest|mocha|pytest|py\.test|cargo\s+test|go\s+test|bundle\s+exec\s+rspec|rspec|phpunit|dotnet\s+test)\b/i;
 function buildTestTimestamps(allEntries) {
   const testTs = /* @__PURE__ */ new Set();
@@ -16332,8 +16781,7 @@ function isTestEntry(entry, testTs) {
   }
   return false;
 }
-function getDateRange(period) {
-  const now = /* @__PURE__ */ new Date();
+function getDateRange(period, now) {
   const todayStart = new Date(now.getFullYear(), now.getMonth(), now.getDate());
   const end = new Date(now.getFullYear(), now.getMonth(), now.getDate(), 23, 59, 59, 999);
   switch (period) {
@@ -16349,6 +16797,11 @@ function getDateRange(period) {
       s.setDate(s.getDate() - 29);
       return { start: s, end };
     }
+    case "90d": {
+      const s = new Date(todayStart);
+      s.setDate(s.getDate() - 89);
+      return { start: s, end };
+    }
     case "month":
       return { start: new Date(now.getFullYear(), now.getMonth(), 1), end };
   }
@@ -16371,40 +16824,6 @@ function isAllow(decision) {
 function isDlp(checkedBy) {
   return !!checkedBy?.includes("dlp");
 }
-var BLOCK_REASON_LABELS = {
-  timeout: "Popup timeout",
-  "smart-rule-block": "Smart rule",
-  "observe-mode-dlp-would-block": "DLP (observe)",
-  "persistent-deny": "Persistent deny",
-  "local-decision": "User denied",
-  "dlp-block": "DLP block",
-  "loop-detected": "Loop detected"
-};
-function humanBlockReason(reason) {
-  return BLOCK_REASON_LABELS[reason] ?? reason;
-}
-function barStr(value, max, width) {
-  if (max === 0 || width <= 0) return "\u2591".repeat(width);
-  const filled = Math.max(1, Math.round(value / max * width));
-  return "\u2588".repeat(filled) + "\u2591".repeat(width - filled);
-}
-function colorBar(value, max, width) {
-  const s = barStr(value, max, width);
-  const filled = Math.max(1, Math.round(max > 0 ? value / max * width : 0));
-  return chalk13.cyan(s.slice(0, filled)) + chalk13.dim(s.slice(filled));
-}
-function fmtDate(d) {
-  const date = typeof d === "string" ? /* @__PURE__ */ new Date(d + "T12:00:00") : d;
-  return date.toLocaleDateString("en-US", { month: "short", day: "numeric" });
-}
-function num2(n) {
-  return n.toLocaleString();
-}
-function fmtCost2(usd) {
-  if (usd < 1e-3) return "< $0.001";
-  if (usd < 1) return "$" + usd.toFixed(4);
-  return "$" + usd.toFixed(2);
-}
 var CLAUDE_PRICING2 = {
   "claude-opus-4-6": { i: 5e-6, o: 25e-6, cw: 625e-8, cr: 5e-7 },
   "claude-opus-4-5": { i: 5e-6, o: 25e-6, cw: 625e-8, cr: 5e-7 },
@@ -16424,90 +16843,160 @@ function claudeModelPrice2(model) {
   }
   return null;
 }
-function loadClaudeCost(start, end) {
-  const empty = {
+function emptyClaudeCostAccumulator() {
+  return {
     total: 0,
-    byDay: /* @__PURE__ */ new Map(),
-    byModel: /* @__PURE__ */ new Map(),
     inputTokens: 0,
     outputTokens: 0,
     cacheWriteTokens: 0,
-    cacheReadTokens: 0
+    cacheReadTokens: 0,
+    byDay: /* @__PURE__ */ new Map(),
+    byModel: /* @__PURE__ */ new Map(),
+    byProject: /* @__PURE__ */ new Map()
   };
-  const projectsDir = path36.join(os31.homedir(), ".claude", "projects");
-  if (!fs35.existsSync(projectsDir)) return empty;
+}
+function freezeClaudeCost(acc) {
+  return {
+    total: acc.total,
+    byDay: acc.byDay,
+    byModel: acc.byModel,
+    byProject: acc.byProject,
+    inputTokens: acc.inputTokens,
+    outputTokens: acc.outputTokens,
+    cacheWriteTokens: acc.cacheWriteTokens,
+    cacheReadTokens: acc.cacheReadTokens
+  };
+}
+function processClaudeCostProject(proj, projectsDir, start, end, acc) {
+  const projPath = path36.join(projectsDir, proj);
+  let files;
+  try {
+    const stat = fs35.statSync(projPath);
+    if (!stat.isDirectory()) return;
+    files = fs35.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
+  } catch {
+    return;
+  }
+  const startMs = start.getTime();
+  for (const file of files) {
+    const filePath = path36.join(projPath, file);
+    try {
+      if (fs35.statSync(filePath).mtimeMs < startMs) continue;
+    } catch {
+      continue;
+    }
+    try {
+      const raw = fs35.readFileSync(filePath, "utf-8");
+      for (const line of raw.split("\n")) {
+        if (!line.trim()) continue;
+        let entry;
+        try {
+          entry = JSON.parse(line);
+        } catch {
+          continue;
+        }
+        if (entry.type !== "assistant") continue;
+        if (!entry.timestamp) continue;
+        const ts = new Date(entry.timestamp);
+        if (ts < start || ts > end) continue;
+        const usage = entry.message?.usage;
+        const model = entry.message?.model;
+        if (!usage || !model) continue;
+        const p = claudeModelPrice2(model);
+        if (!p) continue;
+        const inp = usage.input_tokens ?? 0;
+        const out = usage.output_tokens ?? 0;
+        const cw = usage.cache_creation_input_tokens ?? 0;
+        const cr = usage.cache_read_input_tokens ?? 0;
+        const cost = inp * p.i + out * p.o + cw * p.cw + cr * p.cr;
+        acc.total += cost;
+        acc.inputTokens += inp;
+        acc.outputTokens += out;
+        acc.cacheWriteTokens += cw;
+        acc.cacheReadTokens += cr;
+        const dateKey = entry.timestamp.slice(0, 10);
+        acc.byDay.set(dateKey, (acc.byDay.get(dateKey) ?? 0) + cost);
+        const normModel = model.replace(/@.*$/, "").replace(/-\d{8}$/, "");
+        acc.byModel.set(normModel, (acc.byModel.get(normModel) ?? 0) + cost);
+        const projectKey = decodeProjectDirName(proj);
+        const projectRollup = acc.byProject.get(projectKey) ?? {
+          cost: 0,
+          inputTokens: 0,
+          outputTokens: 0
+        };
+        projectRollup.cost += cost;
+        projectRollup.inputTokens += inp;
+        projectRollup.outputTokens += out;
+        acc.byProject.set(projectKey, projectRollup);
+      }
+    } catch {
+      continue;
+    }
+  }
+}
+function loadClaudeCost(start, end, projectsDir) {
+  const acc = emptyClaudeCostAccumulator();
+  if (!fs35.existsSync(projectsDir)) return freezeClaudeCost(acc);
   let dirs;
   try {
     dirs = fs35.readdirSync(projectsDir);
   } catch {
-    return empty;
+    return freezeClaudeCost(acc);
   }
-  let total = 0;
-  let inputTokens = 0;
-  let outputTokens = 0;
-  let cacheWriteTokens = 0;
-  let cacheReadTokens = 0;
-  const byDay = /* @__PURE__ */ new Map();
-  const byModel = /* @__PURE__ */ new Map();
   for (const proj of dirs) {
-    const projPath = path36.join(projectsDir, proj);
-    let files;
+    processClaudeCostProject(proj, projectsDir, start, end, acc);
+  }
+  return freezeClaudeCost(acc);
+}
+function processCodexCostFile(filePath, start, end, acc) {
+  let lines;
+  try {
+    lines = fs35.readFileSync(filePath, "utf-8").split("\n");
+  } catch {
+    return;
+  }
+  let sessionStart2 = "";
+  let lastTotalInput = 0;
+  let lastTotalCached = 0;
+  let lastTotalOutput = 0;
+  let sessionToolCalls = 0;
+  for (const line of lines) {
+    if (!line.trim()) continue;
+    let entry;
     try {
-      const stat = fs35.statSync(projPath);
-      if (!stat.isDirectory()) continue;
-      files = fs35.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
+      entry = JSON.parse(line);
     } catch {
       continue;
     }
-    for (const file of files) {
-      try {
-        const raw = fs35.readFileSync(path36.join(projPath, file), "utf-8");
-        for (const line of raw.split("\n")) {
-          if (!line.trim()) continue;
-          let entry;
-          try {
-            entry = JSON.parse(line);
-          } catch {
-            continue;
-          }
-          if (entry.type !== "assistant") continue;
-          if (!entry.timestamp) continue;
-          const ts = new Date(entry.timestamp);
-          if (ts < start || ts > end) continue;
-          const usage = entry.message?.usage;
-          const model = entry.message?.model;
-          if (!usage || !model) continue;
-          const p = claudeModelPrice2(model);
-          if (!p) continue;
-          const inp = usage.input_tokens ?? 0;
-          const out = usage.output_tokens ?? 0;
-          const cw = usage.cache_creation_input_tokens ?? 0;
-          const cr = usage.cache_read_input_tokens ?? 0;
-          const cost = inp * p.i + out * p.o + cw * p.cw + cr * p.cr;
-          total += cost;
-          inputTokens += inp;
-          outputTokens += out;
-          cacheWriteTokens += cw;
-          cacheReadTokens += cr;
-          const dateKey = entry.timestamp.slice(0, 10);
-          byDay.set(dateKey, (byDay.get(dateKey) ?? 0) + cost);
-          const normModel = model.replace(/@.*$/, "").replace(/-\d{8}$/, "");
-          byModel.set(normModel, (byModel.get(normModel) ?? 0) + cost);
-        }
-      } catch {
-        continue;
-      }
+    const p = entry.payload ?? {};
+    if (entry.type === "session_meta") {
+      sessionStart2 = String(p["timestamp"] ?? "");
+      continue;
+    }
+    if (entry.type === "event_msg" && p["type"] === "token_count") {
+      const info = p["info"] ?? {};
+      const usage = info["total_token_usage"] ?? {};
+      lastTotalInput = usage["input_tokens"] ?? lastTotalInput;
+      lastTotalCached = usage["cached_input_tokens"] ?? lastTotalCached;
+      lastTotalOutput = usage["output_tokens"] ?? lastTotalOutput;
+    }
+    if (entry.type === "response_item" && p["type"] === "function_call") {
+      sessionToolCalls++;
     }
   }
-  return { total, byDay, byModel, inputTokens, outputTokens, cacheWriteTokens, cacheReadTokens };
+  if (!sessionStart2) return;
+  const ts = new Date(sessionStart2);
+  if (ts < start || ts > end) return;
+  const nonCached = Math.max(0, lastTotalInput - lastTotalCached);
+  const cost = nonCached * 5e-6 + lastTotalCached * 25e-7 + lastTotalOutput * 15e-6;
+  acc.total += cost;
+  acc.toolCalls += sessionToolCalls;
+  const dateKey = sessionStart2.slice(0, 10);
+  acc.byDay.set(dateKey, (acc.byDay.get(dateKey) ?? 0) + cost);
 }
-function loadCodexCost(start, end) {
-  const sessionsBase = path36.join(os31.homedir(), ".codex", "sessions");
-  const byDay = /* @__PURE__ */ new Map();
-  let total = 0;
-  let toolCalls = 0;
-  if (!fs35.existsSync(sessionsBase)) return { total, byDay, toolCalls };
+function listCodexSessionFiles(sessionsBase) {
   const jsonlFiles = [];
+  if (!fs35.existsSync(sessionsBase)) return jsonlFiles;
   try {
     for (const year of fs35.readdirSync(sessionsBase)) {
       const yearPath = path36.join(sessionsBase, year);
@@ -16537,495 +17026,742 @@ function loadCodexCost(start, end) {
       }
     }
   } catch {
-    return { total, byDay, toolCalls };
+    return [];
   }
-  for (const filePath of jsonlFiles) {
-    let lines;
+  return jsonlFiles;
+}
+function loadCodexCost(start, end, sessionsBase) {
+  const acc = { total: 0, toolCalls: 0, byDay: /* @__PURE__ */ new Map() };
+  const files = listCodexSessionFiles(sessionsBase);
+  for (const filePath of files) {
+    processCodexCostFile(filePath, start, end, acc);
+  }
+  return { total: acc.total, byDay: acc.byDay, toolCalls: acc.toolCalls };
+}
+var GEMINI_FALLBACK_MODELS = ["gemini-2.5-flash", "gemini-2.0-flash"];
+function geminiPriceFor(model) {
+  let tuple = pricingFor(model);
+  if (!tuple && /^gemini-/i.test(model)) {
+    for (const proxy of GEMINI_FALLBACK_MODELS) {
+      tuple = pricingFor(proxy);
+      if (tuple) break;
+    }
+  }
+  if (!tuple) return null;
+  return { input: tuple[0], output: tuple[1], cacheRead: tuple[3] || tuple[0] };
+}
+function emptyGeminiAccumulator() {
+  return {
+    total: 0,
+    inputTokens: 0,
+    outputTokens: 0,
+    cacheReadTokens: 0,
+    byDay: /* @__PURE__ */ new Map(),
+    byProject: /* @__PURE__ */ new Map()
+  };
+}
+function freezeGeminiCost(acc) {
+  return {
+    total: acc.total,
+    byDay: acc.byDay,
+    byProject: acc.byProject,
+    inputTokens: acc.inputTokens,
+    outputTokens: acc.outputTokens,
+    cacheReadTokens: acc.cacheReadTokens
+  };
+}
+function processGeminiCostFile(filePath, projectKey, start, end, acc) {
+  const startMs = start.getTime();
+  try {
+    if (fs35.statSync(filePath).mtimeMs < startMs) return;
+  } catch {
+    return;
+  }
+  let raw;
+  try {
+    raw = fs35.readFileSync(filePath, "utf-8");
+  } catch {
+    return;
+  }
+  const seenIds = /* @__PURE__ */ new Set();
+  for (const line of raw.split("\n")) {
+    if (!line.trim()) continue;
+    let entry;
     try {
-      lines = fs35.readFileSync(filePath, "utf-8").split("\n");
+      entry = JSON.parse(line);
     } catch {
       continue;
     }
-    let sessionStart2 = "";
-    let lastTotalInput = 0;
-    let lastTotalCached = 0;
-    let lastTotalOutput = 0;
-    let sessionToolCalls = 0;
-    for (const line of lines) {
-      if (!line.trim()) continue;
-      let entry;
-      try {
-        entry = JSON.parse(line);
-      } catch {
-        continue;
-      }
-      const p = entry.payload ?? {};
-      if (entry.type === "session_meta") {
-        sessionStart2 = String(p["timestamp"] ?? "");
-        continue;
-      }
-      if (entry.type === "event_msg" && p["type"] === "token_count") {
-        const info = p["info"] ?? {};
-        const usage = info["total_token_usage"] ?? {};
-        lastTotalInput = usage["input_tokens"] ?? lastTotalInput;
-        lastTotalCached = usage["cached_input_tokens"] ?? lastTotalCached;
-        lastTotalOutput = usage["output_tokens"] ?? lastTotalOutput;
-      }
-      if (entry.type === "response_item" && p["type"] === "function_call") {
-        sessionToolCalls++;
-      }
+    if (entry.type !== "gemini") continue;
+    if (!entry.tokens || !entry.model || !entry.timestamp) continue;
+    if (entry.id) {
+      if (seenIds.has(entry.id)) continue;
+      seenIds.add(entry.id);
     }
-    if (!sessionStart2) continue;
-    const ts = new Date(sessionStart2);
+    const ts = new Date(entry.timestamp);
     if (ts < start || ts > end) continue;
-    const nonCached = Math.max(0, lastTotalInput - lastTotalCached);
-    const cost = nonCached * 5e-6 + lastTotalCached * 25e-7 + lastTotalOutput * 15e-6;
-    total += cost;
-    toolCalls += sessionToolCalls;
-    const dateKey = sessionStart2.slice(0, 10);
-    byDay.set(dateKey, (byDay.get(dateKey) ?? 0) + cost);
+    const price = geminiPriceFor(entry.model);
+    if (!price) continue;
+    const inp = entry.tokens.input ?? 0;
+    const out = entry.tokens.output ?? 0;
+    const cached = Math.min(entry.tokens.cached ?? 0, inp);
+    const fresh = Math.max(0, inp - cached);
+    const cost = fresh * price.input + cached * price.cacheRead + out * price.output;
+    acc.total += cost;
+    acc.inputTokens += inp;
+    acc.outputTokens += out;
+    acc.cacheReadTokens += cached;
+    const dateKey = entry.timestamp.slice(0, 10);
+    acc.byDay.set(dateKey, (acc.byDay.get(dateKey) ?? 0) + cost);
+    const rollup = acc.byProject.get(projectKey) ?? {
+      cost: 0,
+      inputTokens: 0,
+      outputTokens: 0
+    };
+    rollup.cost += cost;
+    rollup.inputTokens += inp;
+    rollup.outputTokens += out;
+    acc.byProject.set(projectKey, rollup);
+  }
+}
+function listGeminiSessionFiles(geminiTmpDir) {
+  const out = [];
+  let dirs;
+  try {
+    if (!fs35.statSync(geminiTmpDir).isDirectory()) return out;
+    dirs = fs35.readdirSync(geminiTmpDir);
+  } catch {
+    return out;
+  }
+  for (const proj of dirs) {
+    const chatsDir = path36.join(geminiTmpDir, proj, "chats");
+    let files;
+    try {
+      if (!fs35.statSync(chatsDir).isDirectory()) continue;
+      files = fs35.readdirSync(chatsDir);
+    } catch {
+      continue;
+    }
+    for (const f of files) {
+      if (!f.endsWith(".jsonl")) continue;
+      out.push({ projectKey: proj, file: path36.join(chatsDir, f) });
+    }
   }
-  return { total, byDay, toolCalls };
+  return out;
+}
+function loadGeminiCost(start, end, geminiTmpDir) {
+  const acc = emptyGeminiAccumulator();
+  if (!fs35.existsSync(geminiTmpDir)) return freezeGeminiCost(acc);
+  for (const { projectKey, file } of listGeminiSessionFiles(geminiTmpDir)) {
+    processGeminiCostFile(file, projectKey, start, end, acc);
+  }
+  return freezeGeminiCost(acc);
+}
+function aggregateReportFromAudit(period, opts = {}) {
+  const now = opts.now ?? /* @__PURE__ */ new Date();
+  const auditLogPath = opts.auditLogPath ?? path36.join(os31.homedir(), ".node9", "audit.log");
+  const claudeProjectsDir = opts.claudeProjectsDir ?? path36.join(os31.homedir(), ".claude", "projects");
+  const codexSessionsDir = opts.codexSessionsDir ?? path36.join(os31.homedir(), ".codex", "sessions");
+  const geminiTmpDir = opts.geminiTmpDir ?? path36.join(os31.homedir(), ".gemini", "tmp");
+  const hasAuditFile = fs35.existsSync(auditLogPath);
+  const allEntries = opts.preloadedAuditEntries ?? parseAuditLog(auditLogPath);
+  const unackedDlp = allEntries.filter((e) => e.source === "response-dlp");
+  const { start, end } = getDateRange(period, now);
+  const responseDlpEntries = allEntries.filter((e) => {
+    if (e.source !== "response-dlp") return false;
+    const ts = new Date(e.ts);
+    return ts >= start && ts <= end;
+  }).map((e) => {
+    const raw = e;
+    return {
+      ts: e.ts,
+      dlpPattern: typeof raw.dlpPattern === "string" ? raw.dlpPattern : void 0,
+      dlpSample: typeof raw.dlpSample === "string" ? raw.dlpSample : void 0
+    };
+  });
+  const claudeCost = opts.preloadedClaudeCost ?? loadClaudeCost(start, end, claudeProjectsDir);
+  const codexCost = opts.preloadedCodexCost ?? loadCodexCost(start, end, codexSessionsDir);
+  const geminiCost = opts.preloadedGeminiCost ?? loadGeminiCost(start, end, geminiTmpDir);
+  for (const [day, c] of codexCost.byDay) {
+    claudeCost.byDay.set(day, (claudeCost.byDay.get(day) ?? 0) + c);
+  }
+  for (const [day, c] of geminiCost.byDay) {
+    claudeCost.byDay.set(day, (claudeCost.byDay.get(day) ?? 0) + c);
+  }
+  for (const [geminiKey, gRollup] of geminiCost.byProject) {
+    let mergedInto = null;
+    for (const claudeKey of claudeCost.byProject.keys()) {
+      const claudeBase = claudeKey.match(/[^/\\]+$/)?.[0] ?? claudeKey;
+      if (claudeBase === geminiKey) {
+        mergedInto = claudeKey;
+        break;
+      }
+    }
+    const targetKey = mergedInto ?? geminiKey;
+    const existing = claudeCost.byProject.get(targetKey) ?? {
+      cost: 0,
+      inputTokens: 0,
+      outputTokens: 0
+    };
+    existing.cost += gRollup.cost;
+    existing.inputTokens += gRollup.inputTokens;
+    existing.outputTokens += gRollup.outputTokens;
+    claudeCost.byProject.set(targetKey, existing);
+  }
+  const periodMs = end.getTime() - start.getTime();
+  const priorEnd = new Date(start.getTime() - 1);
+  const priorStart = new Date(start.getTime() - periodMs);
+  const priorEntries = allEntries.filter((e) => {
+    if (e.source === "post-hook") return false;
+    const ts = new Date(e.ts);
+    return ts >= priorStart && ts <= priorEnd;
+  });
+  const priorBlocked = priorEntries.filter((e) => !isAllow(e.decision)).length;
+  const priorBlockRate = priorEntries.length > 0 ? priorBlocked / priorEntries.length : null;
+  const excludeTests = opts.excludeTests === true;
+  const testTs = excludeTests ? buildTestTimestamps(allEntries) : /* @__PURE__ */ new Set();
+  let excludedTests = 0;
+  const entries = allEntries.filter((e) => {
+    if (e.source === "post-hook") return false;
+    if (e.source === "response-dlp") return false;
+    const ts = new Date(e.ts);
+    if (ts < start || ts > end) return false;
+    if (excludeTests && isTestEntry(e, testTs)) {
+      excludedTests++;
+      return false;
+    }
+    return true;
+  });
+  let userApproved = 0;
+  let userDenied = 0;
+  let timedOut = 0;
+  let hardBlocked = 0;
+  let dlpBlocked = 0;
+  let observeDlp = 0;
+  let loopHits = 0;
+  let testPasses = 0;
+  let testFails = 0;
+  const toolMap = /* @__PURE__ */ new Map();
+  const blockMap = /* @__PURE__ */ new Map();
+  const ruleMap = /* @__PURE__ */ new Map();
+  const agentMap = /* @__PURE__ */ new Map();
+  const mcpMap = /* @__PURE__ */ new Map();
+  const dailyMap = /* @__PURE__ */ new Map();
+  const hourMap = /* @__PURE__ */ new Map();
+  for (const e of entries) {
+    const allow = isAllow(e.decision);
+    const dateKey = e.ts.slice(0, 10);
+    const userInteracted = e.source === "daemon";
+    if (userInteracted) {
+      if (allow) userApproved++;
+      else userDenied++;
+    } else if (!allow) {
+      if (e.checkedBy === "timeout") timedOut++;
+      else if (e.checkedBy === "observe-mode-dlp-would-block") observeDlp++;
+      else if (isDlp(e.checkedBy)) dlpBlocked++;
+      else if (e.checkedBy !== "loop-detected") hardBlocked++;
+    }
+    if (e.checkedBy === "loop-detected") loopHits++;
+    const t = toolMap.get(e.tool) ?? { calls: 0, blocked: 0 };
+    t.calls++;
+    if (!allow) t.blocked++;
+    toolMap.set(e.tool, t);
+    if (!allow && e.checkedBy) {
+      blockMap.set(e.checkedBy, (blockMap.get(e.checkedBy) ?? 0) + 1);
+    }
+    if (!allow && e.ruleName) {
+      ruleMap.set(e.ruleName, (ruleMap.get(e.ruleName) ?? 0) + 1);
+    }
+    if (e.agent) agentMap.set(e.agent, (agentMap.get(e.agent) ?? 0) + 1);
+    if (e.mcpServer) mcpMap.set(e.mcpServer, (mcpMap.get(e.mcpServer) ?? 0) + 1);
+    const hour = new Date(e.ts).getHours();
+    hourMap.set(hour, (hourMap.get(hour) ?? 0) + 1);
+    const d = dailyMap.get(dateKey) ?? { calls: 0, blocked: 0 };
+    d.calls++;
+    if (!allow) d.blocked++;
+    dailyMap.set(dateKey, d);
+  }
+  for (const e of allEntries) {
+    if (e.source !== "test-result") continue;
+    const ts = new Date(e.ts);
+    if (ts < start || ts > end) continue;
+    if (e.testResult === "pass") testPasses++;
+    else if (e.testResult === "fail") testFails++;
+  }
+  if (codexCost.toolCalls > 0) {
+    agentMap.set("Codex", (agentMap.get("Codex") ?? 0) + codexCost.toolCalls);
+  }
+  const data = {
+    period,
+    start,
+    end,
+    excludedTests,
+    total: entries.length,
+    userApproved,
+    userDenied,
+    timedOut,
+    hardBlocked,
+    dlpBlocked,
+    observeDlp,
+    loopHits,
+    testPasses,
+    testFails,
+    unackedDlp: unackedDlp.length,
+    priorBlockRate,
+    cost: {
+      claudeUSD: claudeCost.total,
+      codexUSD: codexCost.total,
+      geminiUSD: geminiCost.total,
+      inputTokens: claudeCost.inputTokens + geminiCost.inputTokens,
+      outputTokens: claudeCost.outputTokens + geminiCost.outputTokens,
+      cacheWriteTokens: claudeCost.cacheWriteTokens,
+      cacheReadTokens: claudeCost.cacheReadTokens + geminiCost.cacheReadTokens,
+      byDay: claudeCost.byDay,
+      byModel: claudeCost.byModel,
+      byProject: claudeCost.byProject
+    },
+    toolMap,
+    blockMap,
+    ruleMap,
+    agentMap,
+    mcpMap,
+    dailyMap,
+    hourMap,
+    generatedAt: now.toISOString()
+  };
+  return { data, hasAuditFile, responseDlpEntries };
+}
+
+// src/cli/render/report-json.ts
+function buildReportJson(input) {
+  const totalBlocked = input.timedOut + input.hardBlocked + input.dlpBlocked + input.loopHits + input.userDenied;
+  const blockRate = input.total > 0 ? totalBlocked / input.total : 0;
+  const deltaPct = input.priorBlockRate === null ? null : Math.round((blockRate - input.priorBlockRate) * 100);
+  return {
+    schemaVersion: 1,
+    generatedAt: input.generatedAt,
+    period: input.period,
+    range: { start: input.start.toISOString(), end: input.end.toISOString() },
+    excludedTests: input.excludedTests,
+    totals: {
+      events: input.total,
+      blocked: totalBlocked,
+      blockRate,
+      userApproved: input.userApproved,
+      userDenied: input.userDenied,
+      timedOut: input.timedOut,
+      hardBlocked: input.hardBlocked,
+      dlpBlocked: input.dlpBlocked,
+      observeDlp: input.observeDlp,
+      loopHits: input.loopHits,
+      unackedDlp: input.unackedDlp
+    },
+    tests: {
+      passes: input.testPasses,
+      fails: input.testFails
+    },
+    cost: {
+      totalUSD: input.cost.claudeUSD + input.cost.codexUSD + input.cost.geminiUSD,
+      claudeUSD: input.cost.claudeUSD,
+      codexUSD: input.cost.codexUSD,
+      geminiUSD: input.cost.geminiUSD,
+      inputTokens: input.cost.inputTokens,
+      outputTokens: input.cost.outputTokens,
+      cacheWriteTokens: input.cost.cacheWriteTokens,
+      cacheReadTokens: input.cost.cacheReadTokens,
+      byDay: [...input.cost.byDay.entries()].sort((a, b) => a[0].localeCompare(b[0])).map(([day, usd]) => ({ day, usd })),
+      byModel: [...input.cost.byModel.entries()].sort((a, b) => b[1] - a[1]).map(([model, usd]) => ({ model, usd }))
+    },
+    byTool: [...input.toolMap.entries()].sort((a, b) => b[1].calls - a[1].calls).map(([tool, v]) => ({ tool, calls: v.calls, blocked: v.blocked })),
+    byBlock: [...input.blockMap.entries()].sort((a, b) => b[1] - a[1]).map(([rule, count]) => ({ rule, count })),
+    byAgent: [...input.agentMap.entries()].sort((a, b) => b[1] - a[1]).map(([agent, calls]) => ({ agent, calls })),
+    byMcp: [...input.mcpMap.entries()].sort((a, b) => b[1] - a[1]).map(([server, calls]) => ({ server, calls })),
+    byDay: [...input.dailyMap.entries()].sort((a, b) => a[0].localeCompare(b[0])).map(([day, v]) => ({ day, calls: v.calls, blocked: v.blocked })),
+    byHour: [...input.hourMap.entries()].sort((a, b) => a[0] - b[0]).map(([hour, calls]) => ({ hour, calls })),
+    trend: {
+      priorBlockRate: input.priorBlockRate,
+      deltaPct
+    }
+  };
+}
+
+// src/cli/commands/report.ts
+var BLOCK_REASON_LABELS = {
+  timeout: "Approval timeout",
+  "smart-rule-block": "Smart rule",
+  "observe-mode-dlp-would-block": "DLP (observe)",
+  "persistent-deny": "Persistent deny",
+  "local-decision": "User denied",
+  "dlp-block": "DLP block",
+  "loop-detected": "Loop detected"
+};
+function humanBlockReason(reason) {
+  return BLOCK_REASON_LABELS[reason] ?? reason;
+}
+function barStr(value, max, width) {
+  if (max === 0 || width <= 0) return "\u2591".repeat(width);
+  const filled = Math.max(1, Math.round(value / max * width));
+  return "\u2588".repeat(filled) + "\u2591".repeat(width - filled);
+}
+function colorBar(value, max, width) {
+  const s = barStr(value, max, width);
+  const filled = Math.max(1, Math.round(max > 0 ? value / max * width : 0));
+  return chalk13.cyan(s.slice(0, filled)) + chalk13.dim(s.slice(filled));
+}
+function fmtDate(d) {
+  const date = typeof d === "string" ? /* @__PURE__ */ new Date(d + "T12:00:00") : d;
+  return date.toLocaleDateString("en-US", { month: "short", day: "numeric" });
+}
+function num2(n) {
+  return n.toLocaleString();
+}
+function fmtCost2(usd) {
+  if (usd < 1e-3) return "< $0.001";
+  if (usd < 1) return "$" + usd.toFixed(4);
+  return "$" + usd.toFixed(2);
 }
 function registerReportCommand(program2) {
   program2.command("report").description("Activity and security report \u2014 what Claude did, what was blocked").option("--period <period>", "today | 7d | 30d | month", "7d").option("--no-tests", "exclude test runner calls (npm test, vitest, pytest\u2026) from stats").option("--json", "Emit machine-readable JSON to stdout (suppresses renderer)").action((options) => {
-    const period = ["today", "7d", "30d", "month"].includes(
+    const period = ["today", "7d", "30d", "90d", "month"].includes(
       options.period
     ) ? options.period : "7d";
-    const logPath = path36.join(os31.homedir(), ".node9", "audit.log");
-    const allEntries = parseAuditLog(logPath);
-    const unackedDlp = allEntries.filter((e) => e.source === "response-dlp");
-    if (unackedDlp.length > 0 && !options.json) {
+    const excludeTests = options.tests === false;
+    const { data, hasAuditFile, responseDlpEntries } = aggregateReportFromAudit(period, {
+      excludeTests
+    });
+    if (data.unackedDlp > 0 && !options.json) {
       console.log("");
       console.log(
         chalk13.bgRed.white.bold(
-          ` \u26A0\uFE0F  DLP ALERT: ${unackedDlp.length} secret${unackedDlp.length !== 1 ? "s" : ""} found in Claude response text `
+          ` \u26A0\uFE0F  DLP ALERT: ${data.unackedDlp} secret${data.unackedDlp !== 1 ? "s" : ""} found in Claude response text `
         ) + "  " + chalk13.yellow("\u2192 run: node9 dlp")
       );
     }
-    if (allEntries.length === 0 && !options.json) {
+    if (!hasAuditFile && !options.json) {
       console.log(
         chalk13.yellow("\n  No audit data found. Run node9 with Claude Code to generate entries.\n")
       );
       return;
     }
-    const { start, end } = getDateRange(period);
-    const {
-      total: claudeCostUSD,
-      byDay: costByDay,
-      byModel: costByModel,
-      inputTokens: costInputTokens,
-      outputTokens: costOutputTokens,
-      cacheWriteTokens: costCacheWrite,
-      cacheReadTokens: costCacheRead
-    } = loadClaudeCost(start, end);
-    const {
-      total: codexCostUSD,
-      byDay: codexCostByDay,
-      toolCalls: codexToolCalls
-    } = loadCodexCost(start, end);
-    const costUSD = claudeCostUSD + codexCostUSD;
-    for (const [day, c] of codexCostByDay) {
-      costByDay.set(day, (costByDay.get(day) ?? 0) + c);
-    }
-    const periodMs = end.getTime() - start.getTime();
-    const priorEnd = new Date(start.getTime() - 1);
-    const priorStart = new Date(start.getTime() - periodMs);
-    const priorEntries = allEntries.filter((e) => {
-      if (e.source === "post-hook") return false;
-      const ts = new Date(e.ts);
-      return ts >= priorStart && ts <= priorEnd;
-    });
-    const priorBlocked = priorEntries.filter((e) => !isAllow(e.decision)).length;
-    const priorBlockRate = priorEntries.length > 0 ? priorBlocked / priorEntries.length : null;
-    const excludeTests = options.tests === false;
-    const testTs = excludeTests ? buildTestTimestamps(allEntries) : /* @__PURE__ */ new Set();
-    let filteredTestCount = 0;
-    const entries = allEntries.filter((e) => {
-      if (e.source === "post-hook") return false;
-      if (e.source === "response-dlp") return false;
-      const ts = new Date(e.ts);
-      if (ts < start || ts > end) return false;
-      if (excludeTests && isTestEntry(e, testTs)) {
-        filteredTestCount++;
-        return false;
-      }
-      return true;
-    });
-    if (entries.length === 0 && !options.json) {
+    if (options.json) {
+      const envelope = buildReportJson(data);
+      process.stdout.write(JSON.stringify(envelope, null, 2) + "\n");
+      return;
+    }
+    if (data.total === 0) {
       console.log(chalk13.yellow(`
   No activity for period "${period}".
 `));
       return;
     }
-    let userApproved = 0;
-    let userDenied = 0;
-    let timedOut = 0;
-    let hardBlocked = 0;
-    let dlpBlocked = 0;
-    let observeDlp = 0;
-    let loopHits = 0;
-    let testPasses = 0;
-    let testFails = 0;
-    const toolMap = /* @__PURE__ */ new Map();
-    const blockMap = /* @__PURE__ */ new Map();
-    const agentMap = /* @__PURE__ */ new Map();
-    const mcpMap = /* @__PURE__ */ new Map();
-    const dailyMap = /* @__PURE__ */ new Map();
-    const hourMap = /* @__PURE__ */ new Map();
-    for (const e of entries) {
-      const allow = isAllow(e.decision);
-      const dateKey = e.ts.slice(0, 10);
-      const userInteracted = e.source === "daemon";
-      if (userInteracted) {
-        if (allow) userApproved++;
-        else userDenied++;
-      } else if (!allow) {
-        if (e.checkedBy === "timeout") timedOut++;
-        else if (e.checkedBy === "observe-mode-dlp-would-block") observeDlp++;
-        else if (isDlp(e.checkedBy)) dlpBlocked++;
-        else if (e.checkedBy !== "loop-detected") hardBlocked++;
-      }
-      if (e.checkedBy === "loop-detected") loopHits++;
-      const t = toolMap.get(e.tool) ?? { calls: 0, blocked: 0 };
-      t.calls++;
-      if (!allow) t.blocked++;
-      toolMap.set(e.tool, t);
-      if (!allow && e.checkedBy) {
-        blockMap.set(e.checkedBy, (blockMap.get(e.checkedBy) ?? 0) + 1);
-      }
-      if (e.agent) agentMap.set(e.agent, (agentMap.get(e.agent) ?? 0) + 1);
-      if (e.mcpServer) mcpMap.set(e.mcpServer, (mcpMap.get(e.mcpServer) ?? 0) + 1);
-      const hour = new Date(e.ts).getHours();
-      hourMap.set(hour, (hourMap.get(hour) ?? 0) + 1);
-      const d = dailyMap.get(dateKey) ?? { calls: 0, blocked: 0 };
-      d.calls++;
-      if (!allow) d.blocked++;
-      dailyMap.set(dateKey, d);
-    }
-    for (const e of allEntries) {
-      if (e.source !== "test-result") continue;
-      const ts = new Date(e.ts);
-      if (ts < start || ts > end) continue;
-      if (e.testResult === "pass") testPasses++;
-      else if (e.testResult === "fail") testFails++;
-    }
-    if (codexToolCalls > 0) agentMap.set("Codex", (agentMap.get("Codex") ?? 0) + codexToolCalls);
-    if (options.json) {
-      const envelope = buildReportJson({
-        period,
-        start,
-        end,
-        excludedTests: filteredTestCount,
-        total: entries.length,
-        userApproved,
-        userDenied,
-        timedOut,
-        hardBlocked,
-        dlpBlocked,
-        observeDlp,
-        loopHits,
-        testPasses,
-        testFails,
-        unackedDlp: unackedDlp.length,
-        priorBlockRate,
-        cost: {
-          claudeUSD: claudeCostUSD,
-          codexUSD: codexCostUSD,
-          inputTokens: costInputTokens,
-          outputTokens: costOutputTokens,
-          cacheWriteTokens: costCacheWrite,
-          cacheReadTokens: costCacheRead,
-          byDay: costByDay,
-          byModel: costByModel
-        },
-        toolMap,
-        blockMap,
-        agentMap,
-        mcpMap,
-        dailyMap,
-        hourMap,
-        generatedAt: (/* @__PURE__ */ new Date()).toISOString()
-      });
-      process.stdout.write(JSON.stringify(envelope, null, 2) + "\n");
-      return;
-    }
-    const total = entries.length;
-    const topTools = [...toolMap.entries()].sort((a, b) => b[1].calls - a[1].calls).slice(0, 8);
-    const topBlocks = [...blockMap.entries()].sort((a, b) => b[1] - a[1]).slice(0, 6);
-    const dailyList = [...dailyMap.entries()].sort((a, b) => a[0].localeCompare(b[0])).slice(-14);
-    const maxTool = Math.max(...topTools.map(([, v]) => v.calls), 1);
-    const maxBlock = Math.max(...topBlocks.map(([, v]) => v), 1);
-    const maxDaily = Math.max(...dailyList.map(([, v]) => v.calls), 1);
-    const W = Math.min(process.stdout.columns || 80, 100);
-    const INNER = W - 4;
-    const COL = Math.floor(INNER / 2) - 1;
-    const LABEL = 24;
-    const BAR = Math.max(6, Math.min(14, COL - LABEL - 8));
-    const TOOL_COUNT_W = Math.max(...topTools.map(([, v]) => num2(v.calls).length), 1);
-    const BLOCK_COUNT_W = Math.max(...topBlocks.map(([, v]) => num2(v).length), 1);
-    const line = chalk13.dim("\u2500".repeat(W - 2));
-    const periodLabel = {
-      today: "Today",
-      "7d": "Last 7 Days",
-      "30d": "Last 30 Days",
-      month: "This Month"
-    };
+    renderTerminalReport(data, responseDlpEntries, excludeTests);
+  });
+}
+function renderTerminalReport(data, responseDlpEntries, excludeTests) {
+  const {
+    period,
+    start,
+    end,
+    total,
+    excludedTests,
+    userApproved,
+    userDenied,
+    timedOut,
+    hardBlocked,
+    dlpBlocked,
+    observeDlp,
+    loopHits,
+    testPasses,
+    testFails,
+    priorBlockRate,
+    cost: {
+      claudeUSD,
+      codexUSD,
+      geminiUSD,
+      inputTokens: costInputTokens,
+      outputTokens: costOutputTokens,
+      cacheWriteTokens: costCacheWrite,
+      cacheReadTokens: costCacheRead,
+      byDay: costByDay,
+      byModel: costByModel
+    },
+    toolMap,
+    blockMap,
+    agentMap,
+    mcpMap,
+    dailyMap,
+    hourMap
+  } = data;
+  const costUSD = claudeUSD + codexUSD + geminiUSD;
+  const topTools = [...toolMap.entries()].sort((a, b) => b[1].calls - a[1].calls).slice(0, 8);
+  const topBlocks = [...blockMap.entries()].sort((a, b) => b[1] - a[1]).slice(0, 6);
+  const dailyList = [...dailyMap.entries()].sort((a, b) => a[0].localeCompare(b[0])).slice(-14);
+  const maxTool = Math.max(...topTools.map(([, v]) => v.calls), 1);
+  const maxBlock = Math.max(...topBlocks.map(([, v]) => v), 1);
+  const maxDaily = Math.max(...dailyList.map(([, v]) => v.calls), 1);
+  const W = Math.min(process.stdout.columns || 80, 100);
+  const INNER = W - 4;
+  const COL = Math.floor(INNER / 2) - 1;
+  const LABEL = 24;
+  const BAR = Math.max(6, Math.min(14, COL - LABEL - 8));
+  const TOOL_COUNT_W = Math.max(...topTools.map(([, v]) => num2(v.calls).length), 1);
+  const BLOCK_COUNT_W = Math.max(...topBlocks.map(([, v]) => num2(v).length), 1);
+  const line = chalk13.dim("\u2500".repeat(W - 2));
+  const periodLabel = {
+    today: "Today",
+    "7d": "Last 7 Days",
+    "30d": "Last 30 Days",
+    "90d": "Last 90 Days",
+    month: "This Month"
+  };
+  console.log("");
+  console.log(
+    "  " + chalk13.bold.cyan("\u{1F6E1} node9 Report") + chalk13.dim("  \xB7  ") + chalk13.white(periodLabel[period]) + chalk13.dim(`  ${fmtDate(start)} \u2013 ${fmtDate(end)}`) + chalk13.dim(`  ${num2(total)} events`) + (excludeTests ? chalk13.dim(`  \u2013tests (\u2013${excludedTests})`) : "")
+  );
+  console.log("  " + line);
+  const totalBlocked = timedOut + hardBlocked + dlpBlocked + loopHits + userDenied;
+  const currentRate = total > 0 ? totalBlocked / total : 0;
+  const trendLabel = (() => {
+    if (priorBlockRate === null) return "";
+    const delta = Math.round((currentRate - priorBlockRate) * 100);
+    if (delta === 0) return "";
+    return "  " + (delta > 0 ? chalk13.red(`\u25B2${delta}%`) : chalk13.green(`\u25BC${Math.abs(delta)}%`)) + chalk13.dim(" vs prior");
+  })();
+  const reads = toolMap.get("Read")?.calls ?? 0;
+  const edits = (toolMap.get("Edit")?.calls ?? 0) + (toolMap.get("Write")?.calls ?? 0);
+  const ratioLabel = reads > 0 ? chalk13.dim(`edit/read ${(edits / reads).toFixed(1)}`) : chalk13.dim("edit/read \u2013");
+  const testLabel = testPasses + testFails > 0 ? chalk13.dim("tests ") + chalk13.green(`${testPasses}\u2713`) + (testFails > 0 ? " " + chalk13.red(`${testFails}\u2717`) : "") : chalk13.dim("tests \u2013");
+  console.log("");
+  console.log("  " + chalk13.bold("Protection Summary"));
+  console.log("  " + chalk13.dim("\u2500".repeat(Math.min(50, W - 4))));
+  console.log(
+    "  " + chalk13.dim("Intercepted") + "  " + chalk13.white(num2(total)) + chalk13.dim(" tool calls")
+  );
+  console.log("");
+  const COL1 = 18;
+  const summaryRow = (icon, label, count, note, colorFn = (s) => s) => {
+    const countStr = colorFn(num2(count));
+    const noteStr = note ? chalk13.dim("   " + note) : "";
+    console.log("    " + icon + "  " + chalk13.white(label.padEnd(COL1)) + countStr + noteStr);
+  };
+  summaryRow(
+    userApproved > 0 ? chalk13.green("\u2705") : chalk13.dim("\u2705"),
+    "User approved",
+    userApproved,
+    userApproved === 0 ? "no popups this period" : void 0,
+    userApproved > 0 ? (s) => chalk13.green(s) : (s) => chalk13.dim(s)
+  );
+  summaryRow(
+    userDenied > 0 ? chalk13.red("\u{1F6AB}") : chalk13.dim("\u{1F6AB}"),
+    "User denied",
+    userDenied,
+    void 0,
+    userDenied > 0 ? (s) => chalk13.red(s) : (s) => chalk13.dim(s)
+  );
+  summaryRow(
+    timedOut > 0 ? chalk13.yellow("\u23F1") : chalk13.dim("\u23F1"),
+    "Timed out",
+    timedOut,
+    timedOut > 0 ? "no approval response" : void 0,
+    timedOut > 0 ? (s) => chalk13.yellow(s) : (s) => chalk13.dim(s)
+  );
+  summaryRow(
+    hardBlocked > 0 ? chalk13.red("\u{1F6D1}") : chalk13.dim("\u{1F6D1}"),
+    "Auto-blocked",
+    hardBlocked,
+    void 0,
+    hardBlocked > 0 ? (s) => chalk13.red(s) : (s) => chalk13.dim(s)
+  );
+  summaryRow(
+    dlpBlocked > 0 ? chalk13.yellow("\u{1F6A8}") : chalk13.dim("\u{1F6A8}"),
+    "DLP blocked",
+    dlpBlocked,
+    void 0,
+    dlpBlocked > 0 ? (s) => chalk13.yellow(s) : (s) => chalk13.dim(s)
+  );
+  summaryRow(
+    observeDlp > 0 ? chalk13.blue("\u{1F441}") : chalk13.dim("\u{1F441}"),
+    "DLP (observe)",
+    observeDlp,
+    observeDlp > 0 ? "would-block in strict mode" : void 0,
+    observeDlp > 0 ? (s) => chalk13.blue(s) : (s) => chalk13.dim(s)
+  );
+  summaryRow(
+    loopHits > 0 ? chalk13.yellow("\u{1F504}") : chalk13.dim("\u{1F504}"),
+    "Loops detected",
+    loopHits,
+    void 0,
+    loopHits > 0 ? (s) => chalk13.yellow(s) : (s) => chalk13.dim(s)
+  );
+  if (trendLabel || ratioLabel || testPasses + testFails > 0) {
     console.log("");
-    console.log(
-      "  " + chalk13.bold.cyan("\u{1F6E1} node9 Report") + chalk13.dim("  \xB7  ") + chalk13.white(periodLabel[period]) + chalk13.dim(`  ${fmtDate(start)} \u2013 ${fmtDate(end)}`) + chalk13.dim(`  ${num2(total)} events`) + (excludeTests ? chalk13.dim(`  \u2013tests (\u2013${filteredTestCount})`) : "")
-    );
-    console.log("  " + line);
-    const totalBlocked = timedOut + hardBlocked + dlpBlocked + loopHits + userDenied;
-    const currentRate = total > 0 ? totalBlocked / total : 0;
-    const trendLabel = (() => {
-      if (priorBlockRate === null) return "";
-      const delta = Math.round((currentRate - priorBlockRate) * 100);
-      if (delta === 0) return "";
-      return "  " + (delta > 0 ? chalk13.red(`\u25B2${delta}%`) : chalk13.green(`\u25BC${Math.abs(delta)}%`)) + chalk13.dim(" vs prior");
-    })();
-    const reads = toolMap.get("Read")?.calls ?? 0;
-    const edits = (toolMap.get("Edit")?.calls ?? 0) + (toolMap.get("Write")?.calls ?? 0);
-    const ratioLabel = reads > 0 ? chalk13.dim(`edit/read ${(edits / reads).toFixed(1)}`) : chalk13.dim("edit/read \u2013");
-    const testLabel = testPasses + testFails > 0 ? chalk13.dim("tests ") + chalk13.green(`${testPasses}\u2713`) + (testFails > 0 ? " " + chalk13.red(`${testFails}\u2717`) : "") : chalk13.dim("tests \u2013");
+    console.log("  " + ratioLabel + "   " + testLabel + trendLabel);
+  }
+  console.log("");
+  const toolHeaderRaw = "Top Tools";
+  const blockHeaderRaw = "Top Blocks";
+  console.log(
+    "  " + chalk13.bold(toolHeaderRaw) + " ".repeat(COL - toolHeaderRaw.length) + "  " + chalk13.bold(blockHeaderRaw)
+  );
+  console.log("  " + chalk13.dim("\u2500".repeat(COL)) + "  " + chalk13.dim("\u2500".repeat(COL)));
+  const rows = Math.max(topTools.length, topBlocks.length, 1);
+  for (let i = 0; i < rows; i++) {
+    let leftStyled = " ".repeat(COL);
+    if (i < topTools.length) {
+      const [tool, { calls }] = topTools[i];
+      const label = tool.length > LABEL - 1 ? tool.slice(0, LABEL - 2) + "\u2026" : tool;
+      const countStr = num2(calls).padStart(TOOL_COUNT_W);
+      const b = colorBar(calls, maxTool, BAR);
+      const rawLen = LABEL + BAR + 1 + TOOL_COUNT_W;
+      const pad = Math.max(0, COL - rawLen);
+      leftStyled = chalk13.white(label.padEnd(LABEL)) + b + " " + chalk13.white(countStr) + " ".repeat(pad);
+    }
+    let rightStyled = "";
+    if (i < topBlocks.length) {
+      const [reason, count] = topBlocks[i];
+      const readable = humanBlockReason(reason);
+      const label = readable.length > LABEL - 1 ? readable.slice(0, LABEL - 2) + "\u2026" : readable;
+      const countStr = num2(count).padStart(BLOCK_COUNT_W);
+      const b = colorBar(count, maxBlock, BAR);
+      rightStyled = chalk13.white(label.padEnd(LABEL)) + b + " " + chalk13.red(countStr);
+    }
+    console.log("  " + leftStyled + "  " + rightStyled);
+  }
+  if (topBlocks.length === 0) {
+    console.log("  " + " ".repeat(COL) + "  " + chalk13.dim("nothing blocked \u2713"));
+  }
+  if (agentMap.size >= 1) {
     console.log("");
-    console.log("  " + chalk13.bold("Protection Summary"));
+    console.log("  " + chalk13.bold("Agents"));
     console.log("  " + chalk13.dim("\u2500".repeat(Math.min(50, W - 4))));
-    console.log(
-      "  " + chalk13.dim("Intercepted") + "  " + chalk13.white(num2(total)) + chalk13.dim(" tool calls")
-    );
-    console.log("");
-    const COL1 = 18;
-    const summaryRow = (icon, label, count, note, colorFn = (s) => s) => {
-      const countStr = colorFn(num2(count));
-      const noteStr = note ? chalk13.dim("   " + note) : "";
-      console.log("    " + icon + "  " + chalk13.white(label.padEnd(COL1)) + countStr + noteStr);
-    };
-    summaryRow(
-      userApproved > 0 ? chalk13.green("\u2705") : chalk13.dim("\u2705"),
-      "User approved",
-      userApproved,
-      userApproved === 0 ? "no popups this period" : void 0,
-      userApproved > 0 ? (s) => chalk13.green(s) : (s) => chalk13.dim(s)
-    );
-    summaryRow(
-      userDenied > 0 ? chalk13.red("\u{1F6AB}") : chalk13.dim("\u{1F6AB}"),
-      "User denied",
-      userDenied,
-      void 0,
-      userDenied > 0 ? (s) => chalk13.red(s) : (s) => chalk13.dim(s)
-    );
-    summaryRow(
-      timedOut > 0 ? chalk13.yellow("\u23F1") : chalk13.dim("\u23F1"),
-      "Timed out",
-      timedOut,
-      timedOut > 0 ? "no approval response" : void 0,
-      timedOut > 0 ? (s) => chalk13.yellow(s) : (s) => chalk13.dim(s)
-    );
-    summaryRow(
-      hardBlocked > 0 ? chalk13.red("\u{1F6D1}") : chalk13.dim("\u{1F6D1}"),
-      "Auto-blocked",
-      hardBlocked,
-      void 0,
-      hardBlocked > 0 ? (s) => chalk13.red(s) : (s) => chalk13.dim(s)
-    );
-    summaryRow(
-      dlpBlocked > 0 ? chalk13.yellow("\u{1F6A8}") : chalk13.dim("\u{1F6A8}"),
-      "DLP blocked",
-      dlpBlocked,
-      void 0,
-      dlpBlocked > 0 ? (s) => chalk13.yellow(s) : (s) => chalk13.dim(s)
-    );
-    summaryRow(
-      observeDlp > 0 ? chalk13.blue("\u{1F441}") : chalk13.dim("\u{1F441}"),
-      "DLP (observe)",
-      observeDlp,
-      observeDlp > 0 ? "would-block in strict mode" : void 0,
-      observeDlp > 0 ? (s) => chalk13.blue(s) : (s) => chalk13.dim(s)
-    );
-    summaryRow(
-      loopHits > 0 ? chalk13.yellow("\u{1F504}") : chalk13.dim("\u{1F504}"),
-      "Loops detected",
-      loopHits,
-      void 0,
-      loopHits > 0 ? (s) => chalk13.yellow(s) : (s) => chalk13.dim(s)
-    );
-    if (trendLabel || ratioLabel || testPasses + testFails > 0) {
-      console.log("");
-      console.log("  " + ratioLabel + "   " + testLabel + trendLabel);
+    const maxAgent = Math.max(...agentMap.values(), 1);
+    for (const [agent, count] of [...agentMap.entries()].sort((a, b) => b[1] - a[1])) {
+      const label = agent.slice(0, LABEL - 1);
+      const b = colorBar(count, maxAgent, BAR);
+      console.log("  " + chalk13.white(label.padEnd(LABEL)) + b + " " + chalk13.white(num2(count)));
     }
+  }
+  if (mcpMap.size > 0) {
     console.log("");
-    const toolHeaderRaw = "Top Tools";
-    const blockHeaderRaw = "Top Blocks";
-    console.log(
-      "  " + chalk13.bold(toolHeaderRaw) + " ".repeat(COL - toolHeaderRaw.length) + "  " + chalk13.bold(blockHeaderRaw)
-    );
-    console.log("  " + chalk13.dim("\u2500".repeat(COL)) + "  " + chalk13.dim("\u2500".repeat(COL)));
-    const rows = Math.max(topTools.length, topBlocks.length, 1);
-    for (let i = 0; i < rows; i++) {
-      let leftStyled = " ".repeat(COL);
-      if (i < topTools.length) {
-        const [tool, { calls }] = topTools[i];
-        const label = tool.length > LABEL - 1 ? tool.slice(0, LABEL - 2) + "\u2026" : tool;
-        const countStr = num2(calls).padStart(TOOL_COUNT_W);
-        const b = colorBar(calls, maxTool, BAR);
-        const rawLen = LABEL + BAR + 1 + TOOL_COUNT_W;
-        const pad = Math.max(0, COL - rawLen);
-        leftStyled = chalk13.white(label.padEnd(LABEL)) + b + " " + chalk13.white(countStr) + " ".repeat(pad);
-      }
-      let rightStyled = "";
-      if (i < topBlocks.length) {
-        const [reason, count] = topBlocks[i];
-        const readable = humanBlockReason(reason);
-        const label = readable.length > LABEL - 1 ? readable.slice(0, LABEL - 2) + "\u2026" : readable;
-        const countStr = num2(count).padStart(BLOCK_COUNT_W);
-        const b = colorBar(count, maxBlock, BAR);
-        rightStyled = chalk13.white(label.padEnd(LABEL)) + b + " " + chalk13.red(countStr);
-      }
-      console.log("  " + leftStyled + "  " + rightStyled);
-    }
-    if (topBlocks.length === 0) {
-      console.log("  " + " ".repeat(COL) + "  " + chalk13.dim("nothing blocked \u2713"));
-    }
-    if (agentMap.size >= 1) {
-      console.log("");
-      console.log("  " + chalk13.bold("Agents"));
-      console.log("  " + chalk13.dim("\u2500".repeat(Math.min(50, W - 4))));
-      const maxAgent = Math.max(...agentMap.values(), 1);
-      for (const [agent, count] of [...agentMap.entries()].sort((a, b) => b[1] - a[1])) {
-        const label = agent.slice(0, LABEL - 1);
-        const b = colorBar(count, maxAgent, BAR);
-        console.log("  " + chalk13.white(label.padEnd(LABEL)) + b + " " + chalk13.white(num2(count)));
-      }
-    }
-    if (mcpMap.size > 0) {
-      console.log("");
-      console.log("  " + chalk13.bold("MCP Servers"));
-      console.log("  " + chalk13.dim("\u2500".repeat(Math.min(50, W - 4))));
-      const maxMcp = Math.max(...mcpMap.values(), 1);
-      for (const [server, count] of [...mcpMap.entries()].sort((a, b) => b[1] - a[1])) {
-        const label = server.slice(0, LABEL - 1).padEnd(LABEL);
-        const b = colorBar(count, maxMcp, BAR);
-        console.log("  " + chalk13.white(label) + b + " " + chalk13.white(num2(count)));
-      }
-    }
-    if (hourMap.size > 0) {
-      const BLOCKS = " \u2581\u2582\u2583\u2584\u2585\u2586\u2587\u2588";
-      const maxHour = Math.max(...hourMap.values(), 1);
-      const bar = Array.from({ length: 24 }, (_, h) => {
-        const v = hourMap.get(h) ?? 0;
-        return BLOCKS[Math.round(v / maxHour * 8)];
-      }).join("");
-      console.log("");
-      console.log("  " + chalk13.bold("Hour of Day") + chalk13.dim("  (local, 0h \u2013 23h)"));
-      console.log("  " + chalk13.cyan(bar));
-      console.log("  " + chalk13.dim("0h" + " ".repeat(10) + "12h" + " ".repeat(7) + "23h"));
-    }
-    if (dailyList.length > 1) {
-      console.log("");
-      console.log("  " + chalk13.bold("Daily Activity"));
-      console.log("  " + chalk13.dim("\u2500".repeat(W - 2)));
-      const DAY_BAR = Math.max(8, Math.min(30, W - 36));
-      for (const [dateKey, { calls, blocked: db }] of dailyList) {
-        const label = fmtDate(dateKey).padEnd(10);
-        const b = colorBar(calls, maxDaily, DAY_BAR);
-        const dayCost = costByDay.get(dateKey);
-        const costNote = dayCost ? chalk13.magenta(`  ${fmtCost2(dayCost)}`) : "";
-        const blockNote = db > 0 ? chalk13.red(`  ${db} blocked`) : "";
-        console.log(
-          "  " + chalk13.dim(label) + "  " + b + "  " + chalk13.white(num2(calls)) + blockNote + costNote
-        );
-      }
-    }
-    const totalTokens = costInputTokens + costOutputTokens + costCacheWrite + costCacheRead;
-    if (totalTokens > 0) {
-      const cacheHitPct = costInputTokens + costCacheRead > 0 ? Math.round(costCacheRead / (costInputTokens + costCacheRead) * 100) : 0;
-      console.log("");
-      console.log("  " + chalk13.bold("Tokens") + "  " + chalk13.dim(`${num2(totalTokens)} total`));
-      console.log("  " + chalk13.dim("\u2500".repeat(Math.min(50, W - 4))));
-      const TOK_BAR = Math.max(6, Math.min(20, W - 30));
-      const TOK_LABEL = 14;
-      const maxNonCache = Math.max(costInputTokens, costOutputTokens, costCacheWrite, 1);
-      const nonCacheRows = [
-        ["Input", costInputTokens, chalk13.cyan(num2(costInputTokens))],
-        ["Output", costOutputTokens, chalk13.white(num2(costOutputTokens))],
-        ["Cache write", costCacheWrite, chalk13.yellow(num2(costCacheWrite))]
-      ];
-      for (const [label, count, colored] of nonCacheRows) {
-        if (count === 0) continue;
-        const b = colorBar(count, maxNonCache, TOK_BAR);
-        console.log("  " + chalk13.white(label.padEnd(TOK_LABEL)) + b + "  " + colored);
-      }
-      if (costCacheRead > 0) {
-        const cacheBar = colorBar(costCacheRead, costCacheRead, TOK_BAR);
-        const pct = cacheHitPct > 0 ? chalk13.dim(`  ${cacheHitPct}% hit rate`) : "";
-        console.log(
-          "  " + chalk13.white("Cache read".padEnd(TOK_LABEL)) + cacheBar + "  " + chalk13.green(num2(costCacheRead)) + pct
-        );
-      }
-    }
-    if (costUSD > 0) {
-      const periodDays = Math.max(1, Math.ceil((end.getTime() - start.getTime()) / 864e5));
-      const avgPerDay = costUSD / periodDays;
-      const cacheHitPct = costInputTokens + costCacheRead > 0 ? Math.round(costCacheRead / (costInputTokens + costCacheRead) * 100) : 0;
-      const costHeaderRight = [
-        chalk13.yellow(fmtCost2(costUSD)),
-        chalk13.dim(`avg ${fmtCost2(avgPerDay)}/day`),
-        cacheHitPct > 0 ? chalk13.dim(`${cacheHitPct}% cache hit`) : null
-      ].filter(Boolean).join(chalk13.dim("  \xB7  "));
-      console.log("");
-      console.log("  " + chalk13.bold("Cost") + "  " + costHeaderRight);
-      console.log("  " + chalk13.dim("\u2500".repeat(Math.min(50, W - 4))));
-      if (codexCostUSD > 0)
-        costByModel.set(
-          "codex (openai)",
-          (costByModel.get("codex (openai)") ?? 0) + codexCostUSD
-        );
-      const modelList = [...costByModel.entries()].sort((a, b) => b[1] - a[1]);
-      const maxModelCost = Math.max(...modelList.map(([, v]) => v), 1e-9);
-      const MODEL_LABEL = 22;
-      const MODEL_BAR = Math.max(6, Math.min(20, W - MODEL_LABEL - 12));
-      for (const [model, cost] of modelList) {
-        const label = model.length > MODEL_LABEL - 1 ? model.slice(0, MODEL_LABEL - 2) + "\u2026" : model;
-        const b = colorBar(cost, maxModelCost, MODEL_BAR);
-        console.log(
-          "  " + chalk13.white(label.padEnd(MODEL_LABEL)) + b + "  " + chalk13.yellow(fmtCost2(cost))
-        );
-      }
+    console.log("  " + chalk13.bold("MCP Servers"));
+    console.log("  " + chalk13.dim("\u2500".repeat(Math.min(50, W - 4))));
+    const maxMcp = Math.max(...mcpMap.values(), 1);
+    for (const [server, count] of [...mcpMap.entries()].sort((a, b) => b[1] - a[1])) {
+      const label = server.slice(0, LABEL - 1).padEnd(LABEL);
+      const b = colorBar(count, maxMcp, BAR);
+      console.log("  " + chalk13.white(label) + b + " " + chalk13.white(num2(count)));
+    }
+  }
+  if (hourMap.size > 0) {
+    const BLOCKS = " \u2581\u2582\u2583\u2584\u2585\u2586\u2587\u2588";
+    const maxHour = Math.max(...hourMap.values(), 1);
+    const bar = Array.from({ length: 24 }, (_, h) => {
+      const v = hourMap.get(h) ?? 0;
+      return BLOCKS[Math.round(v / maxHour * 8)];
+    }).join("");
+    console.log("");
+    console.log("  " + chalk13.bold("Hour of Day") + chalk13.dim("  (local, 0h \u2013 23h)"));
+    console.log("  " + chalk13.cyan(bar));
+    console.log("  " + chalk13.dim("0h" + " ".repeat(10) + "12h" + " ".repeat(7) + "23h"));
+  }
+  if (dailyList.length > 1) {
+    console.log("");
+    console.log("  " + chalk13.bold("Daily Activity"));
+    console.log("  " + chalk13.dim("\u2500".repeat(W - 2)));
+    const DAY_BAR = Math.max(8, Math.min(30, W - 36));
+    for (const [dateKey, { calls, blocked: db }] of dailyList) {
+      const label = fmtDate(dateKey).padEnd(10);
+      const b = colorBar(calls, maxDaily, DAY_BAR);
+      const dayCost = costByDay.get(dateKey);
+      const costNote = dayCost ? chalk13.magenta(`  ${fmtCost2(dayCost)}`) : "";
+      const blockNote = db > 0 ? chalk13.red(`  ${db} blocked`) : "";
+      console.log(
+        "  " + chalk13.dim(label) + "  " + b + "  " + chalk13.white(num2(calls)) + blockNote + costNote
+      );
     }
-    const responseDlpEntries = allEntries.filter((e) => {
-      if (e.source !== "response-dlp") return false;
-      const ts = new Date(e.ts);
-      return ts >= start && ts <= end;
-    });
-    if (responseDlpEntries.length > 0) {
-      console.log("");
+  }
+  const totalTokens = costInputTokens + costOutputTokens + costCacheWrite + costCacheRead;
+  if (totalTokens > 0) {
+    const cacheHitPct = costInputTokens + costCacheRead > 0 ? Math.round(costCacheRead / (costInputTokens + costCacheRead) * 100) : 0;
+    console.log("");
+    console.log("  " + chalk13.bold("Tokens") + "  " + chalk13.dim(`${num2(totalTokens)} total`));
+    console.log("  " + chalk13.dim("\u2500".repeat(Math.min(50, W - 4))));
+    const TOK_BAR = Math.max(6, Math.min(20, W - 30));
+    const TOK_LABEL = 14;
+    const maxNonCache = Math.max(costInputTokens, costOutputTokens, costCacheWrite, 1);
+    const nonCacheRows = [
+      ["Input", costInputTokens, chalk13.cyan(num2(costInputTokens))],
+      ["Output", costOutputTokens, chalk13.white(num2(costOutputTokens))],
+      ["Cache write", costCacheWrite, chalk13.yellow(num2(costCacheWrite))]
+    ];
+    for (const [label, count, colored] of nonCacheRows) {
+      if (count === 0) continue;
+      const b = colorBar(count, maxNonCache, TOK_BAR);
+      console.log("  " + chalk13.white(label.padEnd(TOK_LABEL)) + b + "  " + colored);
+    }
+    if (costCacheRead > 0) {
+      const cacheBar = colorBar(costCacheRead, costCacheRead, TOK_BAR);
+      const pct = cacheHitPct > 0 ? chalk13.dim(`  ${cacheHitPct}% hit rate`) : "";
       console.log(
-        "  " + chalk13.red.bold("\u26A0\uFE0F  Response DLP") + chalk13.dim("  \xB7  ") + chalk13.red(
-          `${responseDlpEntries.length} secret${responseDlpEntries.length !== 1 ? "s" : ""} found in Claude response text`
-        )
+        "  " + chalk13.white("Cache read".padEnd(TOK_LABEL)) + cacheBar + "  " + chalk13.green(num2(costCacheRead)) + pct
       );
-      console.log("  " + chalk13.dim("\u2500".repeat(Math.min(60, W - 4))));
+    }
+  }
+  if (costUSD > 0) {
+    const periodDays = Math.max(1, Math.ceil((end.getTime() - start.getTime()) / 864e5));
+    const avgPerDay = costUSD / periodDays;
+    const cacheHitPct = costInputTokens + costCacheRead > 0 ? Math.round(costCacheRead / (costInputTokens + costCacheRead) * 100) : 0;
+    const costHeaderRight = [
+      chalk13.yellow(fmtCost2(costUSD)),
+      chalk13.dim(`avg ${fmtCost2(avgPerDay)}/day`),
+      cacheHitPct > 0 ? chalk13.dim(`${cacheHitPct}% cache hit`) : null
+    ].filter(Boolean).join(chalk13.dim("  \xB7  "));
+    console.log("");
+    console.log("  " + chalk13.bold("Cost") + "  " + costHeaderRight);
+    console.log("  " + chalk13.dim("\u2500".repeat(Math.min(50, W - 4))));
+    if (codexUSD > 0)
+      costByModel.set("codex (openai)", (costByModel.get("codex (openai)") ?? 0) + codexUSD);
+    if (geminiUSD > 0)
+      costByModel.set("gemini (google)", (costByModel.get("gemini (google)") ?? 0) + geminiUSD);
+    const modelList = [...costByModel.entries()].sort((a, b) => b[1] - a[1]);
+    const maxModelCost = Math.max(...modelList.map(([, v]) => v), 1e-9);
+    const MODEL_LABEL = 22;
+    const MODEL_BAR = Math.max(6, Math.min(20, W - MODEL_LABEL - 12));
+    for (const [model, cost] of modelList) {
+      const label = model.length > MODEL_LABEL - 1 ? model.slice(0, MODEL_LABEL - 2) + "\u2026" : model;
+      const b = colorBar(cost, maxModelCost, MODEL_BAR);
       console.log(
-        "  " + chalk13.yellow("These were NOT blocked \u2014 Claude included them in response prose.")
+        "  " + chalk13.white(label.padEnd(MODEL_LABEL)) + b + "  " + chalk13.yellow(fmtCost2(cost))
       );
-      console.log("  " + chalk13.yellow("Rotate affected keys immediately."));
-      for (const e of responseDlpEntries.slice(0, 5)) {
-        const ts = chalk13.dim(fmtDate(e.ts) + "  ");
-        const pattern = chalk13.red(e.dlpPattern ?? "DLP");
-        const sample = chalk13.gray(e.dlpSample ?? "");
-        console.log(`    ${ts}${pattern}  ${sample}`);
-      }
-      if (responseDlpEntries.length > 5) {
-        console.log(chalk13.dim(`    \u2026 and ${responseDlpEntries.length - 5} more`));
-      }
     }
+  }
+  if (responseDlpEntries.length > 0) {
     console.log("");
     console.log(
-      "  " + chalk13.dim("node9 audit --deny") + chalk13.dim("  \xB7  ") + chalk13.dim("node9 report --period today|7d|30d|month  --no-tests")
+      "  " + chalk13.red.bold("\u26A0\uFE0F  Response DLP") + chalk13.dim("  \xB7  ") + chalk13.red(
+        `${responseDlpEntries.length} secret${responseDlpEntries.length !== 1 ? "s" : ""} found in Claude response text`
+      )
     );
-    console.log("");
-  });
+    console.log("  " + chalk13.dim("\u2500".repeat(Math.min(60, W - 4))));
+    console.log(
+      "  " + chalk13.yellow("These were NOT blocked \u2014 Claude included them in response prose.")
+    );
+    console.log("  " + chalk13.yellow("Rotate affected keys immediately."));
+    for (const e of responseDlpEntries.slice(0, 5)) {
+      const ts = chalk13.dim(fmtDate(e.ts) + "  ");
+      const pattern = chalk13.red(e.dlpPattern ?? "DLP");
+      const sample = chalk13.gray(e.dlpSample ?? "");
+      console.log(`    ${ts}${pattern}  ${sample}`);
+    }
+    if (responseDlpEntries.length > 5) {
+      console.log(chalk13.dim(`    \u2026 and ${responseDlpEntries.length - 5} more`));
+    }
+  }
+  console.log("");
+  console.log(
+    "  " + chalk13.dim("node9 audit --deny") + chalk13.dim("  \xB7  ") + chalk13.dim("node9 report --period today|7d|30d|month  --no-tests")
+  );
+  console.log("");
 }
 
 // src/cli/commands/daemon-cmd.ts