@node9/proxy 1.20.1 → 1.21.1

package/dist/cli.mjs

@@ -10485,7 +10485,7 @@ function originForRule(ruleName, sections) {
   return "";
 }
 function registerScanCommand(program2) {
-  program2.command("scan").description("Forecast: scan agent history and show what node9 would catch if installed").option("--all", "Scan all history (default: last 90 days)").option("--days <n>", "Scan last N days of history", "90").option("--top <n>", "Max findings to show per rule (default: 5)", "5").option("--drill-down", "Show all findings with full commands and session IDs").option("--compact", "Compact one-screen scorecard \u2014 for screenshots and sharing").option("--narrative", "Severity-grouped report \u2014 for video / dramatic sharing").option(
+  program2.command("scan").description("Forecast: scan agent history and show what node9 would catch if installed").option("--all", "Scan all history (default: last 90 days)").option("--days <n>", "Scan last N days of history", "90").option("--top <n>", "Max findings to show per rule (default: 5)", "5").option("--drill-down", "Show all findings with full commands and session IDs").option("--compact", "Compact one-screen scorecard \u2014 for screenshots and sharing").option("--narrative", "Severity-grouped report \u2014 for video / dramatic sharing").option("--classic", "Original chalk-based scorecard layout (default: new Ink-rendered view)").option(
     "--json",
     "Emit machine-readable JSON to stdout (suppresses banner, progress, and renderer)"
   ).option(
@@ -10519,7 +10519,8 @@ function registerScanCommand(program2) {
       })();
       const isWired = getAgentsStatus().some((a) => a.wired);
       const screenshotMode = options.compact || options.narrative;
-      const quiet = screenshotMode || options.json;
+      const useInk = !options.classic && !drillDown;
+      const quiet = screenshotMode || options.json || useInk;
       if (!quiet) {
         console.log("");
         if (!isWired) {
@@ -10657,6 +10658,7 @@ function registerScanCommand(program2) {
         });
         return;
       }
+      const useInkForHero = !options.classic && !drillDown;
       if (totalFindings === 0 && scan.dlpFindings.length === 0) {
         console.log(chalk5.green("  \u2705 No risky operations found in your history."));
         console.log(
@@ -10676,9 +10678,11 @@ function registerScanCommand(program2) {
           const since = daysAgo === 0 ? "today" : daysAgo === 1 ? "yesterday" : `${daysAgo} days ago`;
           return chalk5.dim("  \xB7  ") + arrow + chalk5.dim(` since ${since}`);
         })();
-        console.log(
-          "  " + (score.band === "critical" ? chalk5.red.bold("\u26A0  ") : "") + chalk5.bold("Security Score ") + score.color.bold(`${blast.score}/100`) + "  " + severityDisplay + trendSuffix + chalk5.dim("  \xB7  ") + (totalRisky > 0 ? chalk5.red.bold(`${totalRisky} risky operation${totalRisky !== 1 ? "s" : ""}`) : chalk5.green("No risky operations"))
-        );
+        if (!useInkForHero) {
+          console.log(
+            "  " + (score.band === "critical" ? chalk5.red.bold("\u26A0  ") : "") + chalk5.bold("Security Score ") + score.color.bold(`${blast.score}/100`) + "  " + severityDisplay + trendSuffix + chalk5.dim("  \xB7  ") + (totalRisky > 0 ? chalk5.red.bold(`${totalRisky} risky operation${totalRisky !== 1 ? "s" : ""}`) : chalk5.green("No risky operations"))
+          );
+        }
         const cardParts = [];
         if (scan.dlpFindings.length > 0) {
           cardParts.push(
@@ -10707,10 +10711,10 @@ function registerScanCommand(program2) {
             chalk5.red("\u{1F52D} ") + chalk5.red.bold(String(blastExposures)) + chalk5.dim(" exposures")
           );
         }
-        if (cardParts.length > 0) {
+        if (cardParts.length > 0 && !useInkForHero) {
           console.log("  " + cardParts.join(chalk5.dim("   ")));
         }
-        if (scan.totalCostUSD > 0) {
+        if (scan.totalCostUSD > 0 && !useInkForHero) {
           console.log(
             "  " + chalk5.dim("AI spend  ") + chalk5.bold(fmtCost(scan.totalCostUSD)) + (summary.loopWastedUSD > 0 ? chalk5.dim("   \xB7   wasted on loops  ") + chalk5.yellow("~" + fmtCost(summary.loopWastedUSD)) : "")
           );
@@ -10722,16 +10726,38 @@ function registerScanCommand(program2) {
             )
           );
         }
-        console.log("");
+        if (!useInkForHero) {
+          console.log("");
+        }
         if (!drillDown) {
-          renderPanelScorecard({
-            scan,
-            summary,
-            blast,
-            blastExposures,
-            blockedCount,
-            reviewCount
-          });
+          const useInk2 = !options.classic;
+          if (useInk2) {
+            const scanInkPath = path21.join(__dirname, "scan-ink.mjs");
+            const dynamicImport = new Function("id", "return import(id)");
+            const mod = await dynamicImport(`file://${scanInkPath}`);
+            const rangeLabel2 = options.all ? "all time" : `last ${options.days ?? 90} days`;
+            mod.renderScanScorecardInk(
+              {
+                scan,
+                summary,
+                blast,
+                blastExposures,
+                blockedCount,
+                reviewCount
+              },
+              rangeLabel2
+            );
+            console.log("");
+          } else {
+            renderPanelScorecard({
+              scan,
+              summary,
+              blast,
+              blastExposures,
+              blockedCount,
+              reviewCount
+            });
+          }
           const cta = isWired ? "\u2705 node9 is active" : "\u2192 install node9 to enable protection";
           console.log("  " + chalk5.green(cta));
           console.log(
@@ -13602,12 +13628,12 @@ __export(tail_exports, {
   startTail: () => startTail
 });
 import http2 from "http";
-import chalk30 from "chalk";
+import chalk29 from "chalk";
 import fs45 from "fs";
 import os41 from "os";
 import path47 from "path";
 import readline6 from "readline";
-import { spawn as spawn9 } from "child_process";
+import { spawn as spawn8 } from "child_process";
 function shortenPathSummary(s) {
   if (!s || !s.startsWith("/")) return s;
   const parts = s.split("/").filter(Boolean);
@@ -13682,10 +13708,10 @@ function readSessionUsage() {
   }
 }
 function formatContextStat(stat) {
-  const pctColor = stat.fillPct >= 80 ? chalk30.red : stat.fillPct >= 50 ? chalk30.yellow : chalk30.cyan;
+  const pctColor = stat.fillPct >= 80 ? chalk29.red : stat.fillPct >= 50 ? chalk29.yellow : chalk29.cyan;
   const k = (n) => `${Math.round(n / 1e3)}k`;
   const modelShort = stat.model.replace(/@.*$/, "").replace(/-\d{8}$/, "").replace(/^claude-/, "");
-  return chalk30.dim("ctx: ") + pctColor(`${stat.fillPct}%`) + chalk30.dim(
+  return chalk29.dim("ctx: ") + pctColor(`${stat.fillPct}%`) + chalk29.dim(
     ` (${k(stat.inputTokens)}/${k(getModelContextLimit(stat.model))}  out ${k(stat.outputTokens)}  \xB7 ${modelShort})`
   );
 }
@@ -13708,11 +13734,11 @@ function agentLabel(agent, mcpServer, sessionId) {
   const tag = sessionTag(sessionId);
   const tagSuffix = tag ? `\xB7${tag}` : "";
   if (!agent || agent === "Terminal") {
-    return mcpServer ? chalk30.dim(`[\u2192 ${mcpServer}] `) : "";
+    return mcpServer ? chalk29.dim(`[\u2192 ${mcpServer}] `) : "";
   }
   const short = agent === "Claude Code" ? "Claude" : agent === "Gemini CLI" ? "Gemini" : agent === "Unknown Agent" ? "" : agent.split(" ")[0];
-  if (!short) return mcpServer ? chalk30.dim(`[\u2192 ${mcpServer}] `) : "";
-  return mcpServer ? chalk30.dim(`[${short}${tagSuffix} \u2192 ${mcpServer}] `) : chalk30.dim(`[${short}${tagSuffix}] `);
+  if (!short) return mcpServer ? chalk29.dim(`[\u2192 ${mcpServer}] `) : "";
+  return mcpServer ? chalk29.dim(`[${short}${tagSuffix} \u2192 ${mcpServer}] `) : chalk29.dim(`[${short}${tagSuffix}] `);
 }
 function formatBase(activity) {
   const time = new Date(activity.ts).toLocaleTimeString([], { hour12: false });
@@ -13720,20 +13746,20 @@ function formatBase(activity) {
   const toolName = activity.tool.slice(0, 16).padEnd(16);
   const argsStr = JSON.stringify(activity.args ?? {}).replace(/\s+/g, " ").replaceAll(os41.homedir(), "~");
   const argsPreview = argsStr.length > 70 ? argsStr.slice(0, 70) + "\u2026" : argsStr;
-  return `${chalk30.gray(time)} ${icon} ${agentLabel(activity.agent, activity.mcpServer, activity.sessionId)}${chalk30.white.bold(toolName)} ${chalk30.dim(argsPreview)}`;
+  return `${chalk29.gray(time)} ${icon} ${agentLabel(activity.agent, activity.mcpServer, activity.sessionId)}${chalk29.white.bold(toolName)} ${chalk29.dim(argsPreview)}`;
 }
 function renderResult(activity, result) {
   const base = formatBase(activity);
   let status;
   if (result.status === "allow") {
-    status = chalk30.green("\u2713 ALLOW");
+    status = chalk29.green("\u2713 ALLOW");
   } else if (result.status === "dlp") {
-    status = chalk30.bgRed.white.bold(" \u{1F6E1}\uFE0F  DLP ");
+    status = chalk29.bgRed.white.bold(" \u{1F6E1}\uFE0F  DLP ");
   } else {
-    status = chalk30.red("\u2717 BLOCK");
+    status = chalk29.red("\u2717 BLOCK");
   }
   const cost = result.costEstimate ?? activity.costEstimate;
-  const costSuffix = cost == null ? "" : chalk30.dim(`  ~$${cost >= 1e-3 ? cost.toFixed(3) : "0.000"}`);
+  const costSuffix = cost == null ? "" : chalk29.dim(`  ~$${cost >= 1e-3 ? cost.toFixed(3) : "0.000"}`);
   if (process.stdout.isTTY) {
     if (pendingShownForId === activity.id && pendingWrappedLines > 1) {
       readline6.moveCursor(process.stdout, 0, -(pendingWrappedLines - 1));
@@ -13750,7 +13776,7 @@ function renderResult(activity, result) {
 }
 function renderPending(activity) {
   if (!process.stdout.isTTY) return;
-  const line = `${formatBase(activity)}  ${chalk30.yellow("\u25CF \u2026")}`;
+  const line = `${formatBase(activity)}  ${chalk29.yellow("\u25CF \u2026")}`;
   pendingShownForId = activity.id;
   pendingWrappedLines = wrappedLineCount(line);
   process.stdout.write(`${line}\r`);
@@ -13762,7 +13788,7 @@ async function ensureDaemon() {
       const { port } = JSON.parse(fs45.readFileSync(PID_FILE, "utf-8"));
       pidPort = port;
     } catch {
-      console.error(chalk30.dim("\u26A0\uFE0F  Could not read PID file; falling back to default port."));
+      console.error(chalk29.dim("\u26A0\uFE0F  Could not read PID file; falling back to default port."));
     }
   }
   const checkPort = pidPort ?? DAEMON_PORT;
@@ -13773,8 +13799,8 @@ async function ensureDaemon() {
     if (res.ok) return checkPort;
   } catch {
   }
-  console.log(chalk30.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon..."));
-  const child = spawn9(process.execPath, [process.argv[1], "daemon"], {
+  console.log(chalk29.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon..."));
+  const child = spawn8(process.execPath, [process.argv[1], "daemon"], {
     detached: true,
     stdio: "ignore",
     env: { ...process.env, NODE9_AUTO_STARTED: "1" }
@@ -13790,7 +13816,7 @@ async function ensureDaemon() {
     } catch {
     }
   }
-  console.error(chalk30.red("\u274C Daemon failed to start. Try: node9 daemon start"));
+  console.error(chalk29.red("\u274C Daemon failed to start. Try: node9 daemon start"));
   process.exit(1);
 }
 function postDecisionHttp(id, decision, authToken, port, opts) {
@@ -13859,7 +13885,7 @@ function buildCardLines(req, localCount = 0) {
   const severityIcon = isBlock ? `${RED}\u{1F6D1}` : `${YELLOW}\u26A0 `;
   const rawDesc = req.riskMetadata?.ruleDescription ?? "";
   const description = rawDesc ? cleanReason(rawDesc) : "";
-  const agentSuffix = req.agent && req.agent !== "Terminal" ? ` ${RESET2}${chalk30.dim(`(${req.agent})`)}` : "";
+  const agentSuffix = req.agent && req.agent !== "Terminal" ? ` ${RESET2}${chalk29.dim(`(${req.agent})`)}` : "";
   const lines = [
     ``,
     `${BOLD2}${CYAN}\u2554\u2550\u2550 Node9 Approval Required \u2550\u2550\u2557${RESET2}`,
@@ -13928,7 +13954,7 @@ function approverStatusLine() {
   const a = readApproversFromDisk();
   const fmt = (label, key) => {
     const on = a[key] !== false;
-    return `[${key[0]}]${label.slice(1)} ${on ? chalk30.green("\u2713") : chalk30.dim("\u2717")}`;
+    return `[${key[0]}]${label.slice(1)} ${on ? chalk29.green("\u2713") : chalk29.dim("\u2717")}`;
   };
   return `${fmt("native", "native")}  ${fmt("cloud", "cloud")}  ${fmt("terminal", "terminal")}`;
 }
@@ -13973,7 +13999,7 @@ async function startTail(options = {}) {
       req2.end();
     });
     if (result.ok) {
-      console.log(chalk30.green("\u2713 Flight Recorder buffer cleared."));
+      console.log(chalk29.green("\u2713 Flight Recorder buffer cleared."));
     } else if (result.code === "ECONNREFUSED") {
       throw new Error("Daemon is not running. Start it with: node9 daemon start");
     } else if (result.code === "ETIMEDOUT") {
@@ -14019,7 +14045,7 @@ async function startTail(options = {}) {
       const channel = name === "n" ? "native" : name === "c" ? "cloud" : name === "t" ? "terminal" : null;
       if (channel) {
         toggleApprover(channel);
-        console.log(chalk30.dim(`  Approvers: ${approverStatusLine()}`));
+        console.log(chalk29.dim(`  Approvers: ${approverStatusLine()}`));
       }
     };
     process.stdin.on("keypress", idleKeypressHandler);
@@ -14085,7 +14111,7 @@ async function startTail(options = {}) {
           localAllowCounts.get(req2.toolName) ?? 0
         )
       );
-      const decisionStamp = action === "always-allow" ? chalk30.yellow("\u2605 ALWAYS ALLOW") : action === "trust" ? chalk30.cyan("\u23F1 TRUST 30m") : action === "allow" ? chalk30.green("\u2713 ALLOWED") : action === "redirect" ? chalk30.yellow("\u21A9 REDIRECT AI") : chalk30.red("\u2717 DENIED");
+      const decisionStamp = action === "always-allow" ? chalk29.yellow("\u2605 ALWAYS ALLOW") : action === "trust" ? chalk29.cyan("\u23F1 TRUST 30m") : action === "allow" ? chalk29.green("\u2713 ALLOWED") : action === "redirect" ? chalk29.yellow("\u21A9 REDIRECT AI") : chalk29.red("\u2717 DENIED");
       stampedLines.push(`  ${BOLD2}\u2192${RESET2} ${decisionStamp} ${GRAY}(terminal)${RESET2}`, ``);
       for (const line of stampedLines) process.stdout.write(line + "\n");
       process.stdout.write(SHOW_CURSOR);
@@ -14136,7 +14162,7 @@ async function startTail(options = {}) {
       );
       const stampedLines = buildCardLines(req2, priorCount);
       if (externalDecision) {
-        const source = externalDecision === "allow" ? chalk30.green("\u2713 ALLOWED") : chalk30.red("\u2717 DENIED");
+        const source = externalDecision === "allow" ? chalk29.green("\u2713 ALLOWED") : chalk29.red("\u2717 DENIED");
         stampedLines.push(`  ${BOLD2}\u2192${RESET2} ${source} ${GRAY}(external)${RESET2}`, ``);
       }
       for (const line of stampedLines) process.stdout.write(line + "\n");
@@ -14184,25 +14210,25 @@ async function startTail(options = {}) {
     if (unackedDlp > 0) {
       console.log("");
       console.log(
-        chalk30.bgRed.white.bold(
+        chalk29.bgRed.white.bold(
           ` \u26A0\uFE0F  DLP ALERT: ${unackedDlp} secret${unackedDlp !== 1 ? "s" : ""} found in Claude response text \u2014 run: node9 dlp `
         )
       );
     }
   } catch {
   }
-  console.log(chalk30.cyan.bold(`
+  console.log(chalk29.cyan.bold(`
 \u{1F6F0}\uFE0F  Node9 tail`));
   if (canApprove) {
-    console.log(chalk30.dim("Card: [\u21B5/y] Allow  [n] Deny  [a] Always  [t] Trust 30m"));
-    console.log(chalk30.dim(`Approvers (toggle): ${approverStatusLine()}  [q] quit`));
+    console.log(chalk29.dim("Card: [\u21B5/y] Allow  [n] Deny  [a] Always  [t] Trust 30m"));
+    console.log(chalk29.dim(`Approvers (toggle): ${approverStatusLine()}  [q] quit`));
   }
   const ctxStat = readSessionUsage();
   if (ctxStat) console.log("  " + formatContextStat(ctxStat));
   if (options.history) {
-    console.log(chalk30.dim("Showing history + live events.\n"));
+    console.log(chalk29.dim("Showing history + live events.\n"));
   } else {
-    console.log(chalk30.dim("Showing live events only. Use --history to include past.\n"));
+    console.log(chalk29.dim("Showing live events only. Use --history to include past.\n"));
   }
   process.on("SIGINT", () => {
     exitIdleMode();
@@ -14212,7 +14238,7 @@ async function startTail(options = {}) {
       readline6.clearLine(process.stdout, 0);
       readline6.cursorTo(process.stdout, 0);
     }
-    console.log(chalk30.dim("\n\u{1F6F0}\uFE0F  Disconnected."));
+    console.log(chalk29.dim("\n\u{1F6F0}\uFE0F  Disconnected."));
     process.exit(0);
   });
   const STALL_THRESHOLD_MS = 6e4;
@@ -14224,7 +14250,7 @@ async function startTail(options = {}) {
       if (Date.now() - auditMtime >= STALL_THRESHOLD_MS) return;
       console.log("");
       console.log(
-        chalk30.yellow(
+        chalk29.yellow(
           "\u26A0\uFE0F  Tail appears stalled \u2014 hooks are firing but no events are arriving. Try: node9 daemon restart"
         )
       );
@@ -14241,7 +14267,7 @@ async function startTail(options = {}) {
     },
     (res) => {
       if (res.statusCode !== 200) {
-        console.error(chalk30.red(`Failed to connect: HTTP ${res.statusCode}`));
+        console.error(chalk29.red(`Failed to connect: HTTP ${res.statusCode}`));
         process.exit(1);
       }
       if (canApprove) enterIdleMode();
@@ -14272,7 +14298,7 @@ async function startTail(options = {}) {
           readline6.clearLine(process.stdout, 0);
           readline6.cursorTo(process.stdout, 0);
         }
-        console.log(chalk30.red("\n\u274C Daemon disconnected."));
+        console.log(chalk29.red("\n\u274C Daemon disconnected."));
         process.exit(1);
       });
     }
@@ -14285,7 +14311,7 @@ async function startTail(options = {}) {
         const parsed = JSON.parse(rawData);
         const msg = parsed.message ?? "Flight recorder is down \u2014 run: node9 daemon restart";
         console.log("");
-        console.log(chalk30.bgRed.white.bold(` \u26A0\uFE0F  ${msg} `));
+        console.log(chalk29.bgRed.white.bold(` \u26A0\uFE0F  ${msg} `));
       } catch {
       }
       return;
@@ -14370,9 +14396,9 @@ async function startTail(options = {}) {
       const rawSummary = data.argsSummary ?? data.tool;
       const summary = shortenPathSummary(rawSummary);
       const fileCount = data.fileCount ?? 0;
-      const files = fileCount > 0 ? chalk30.dim(` \xB7 ${fileCount} file${fileCount === 1 ? "" : "s"}`) : "";
+      const files = fileCount > 0 ? chalk29.dim(` \xB7 ${fileCount} file${fileCount === 1 ? "" : "s"}`) : "";
       process.stdout.write(
-        `${chalk30.dim(time)}  ${chalk30.cyan("\u{1F4F8} snapshot")}  ${chalk30.dim(hash)}  ${summary}${files}
+        `${chalk29.dim(time)}  ${chalk29.cyan("\u{1F4F8} snapshot")}  ${chalk29.dim(hash)}  ${summary}${files}
 `
       );
       return;
@@ -14389,18 +14415,18 @@ async function startTail(options = {}) {
     if (event === "execution-result") {
       const exec = data;
       const time = new Date(Date.now()).toLocaleTimeString([], { hour12: false });
-      const arrow = exec.isError ? chalk30.red("  \u21B3 \u2717") : chalk30.green("  \u21B3 \u2713");
+      const arrow = exec.isError ? chalk29.red("  \u21B3 \u2717") : chalk29.green("  \u21B3 \u2713");
       const label = agentLabel(exec.agent, exec.mcpServer);
       const tool = (exec.tool ?? "").slice(0, 16);
-      const duration = typeof exec.durationMs === "number" ? chalk30.dim(` (${exec.durationMs}ms)`) : "";
+      const duration = typeof exec.durationMs === "number" ? chalk29.dim(` (${exec.durationMs}ms)`) : "";
       console.log(
-        `${chalk30.gray(time)} ${arrow} ${label}${chalk30.dim(tool)}${chalk30.dim(" completed")}${duration}`
+        `${chalk29.gray(time)} ${arrow} ${label}${chalk29.dim(tool)}${chalk29.dim(" completed")}${duration}`
       );
     }
   }
   req.on("error", (err2) => {
     const msg = err2.code === "ECONNREFUSED" ? "Daemon is not running. Start it with: node9 daemon start" : err2.message;
-    console.error(chalk30.red(`
+    console.error(chalk29.red(`
 \u274C ${msg}`));
     process.exit(1);
   });
@@ -14836,7 +14862,7 @@ init_core();
 init_setup();
 init_daemon2();
 import { Command } from "commander";
-import chalk31 from "chalk";
+import chalk30 from "chalk";
 import fs47 from "fs";
 import path49 from "path";
 import os43 from "os";
@@ -15630,7 +15656,7 @@ function detectAiAgent(payload) {
   return "Terminal";
 }
 function registerCheckCommand(program2) {
-  program2.command("check").description("Hook handler \u2014 evaluates a tool call before execution").argument("[data]", "JSON string of the tool call").action(async (data) => {
+  program2.command("check", { hidden: true }).description("Hook handler \u2014 evaluates a tool call before execution").argument("[data]", "JSON string of the tool call").action(async (data) => {
     const processPayload = async (raw) => {
       try {
         if (!raw || raw.trim() === "") process.exit(0);
@@ -16028,7 +16054,7 @@ function sanitize3(value) {
   return value.replace(/[\x00-\x1F\x7F]/g, "");
 }
 function registerLogCommand(program2) {
-  program2.command("log").description("PostToolUse hook \u2014 records executed tool calls").argument("[data]", "JSON string of the tool call").action(async (data) => {
+  program2.command("log", { hidden: true }).description("PostToolUse hook \u2014 records executed tool calls").argument("[data]", "JSON string of the tool call").action(async (data) => {
     const logPayload = async (raw) => {
       try {
         if (!raw || raw.trim() === "") process.exit(0);
@@ -18194,7 +18220,7 @@ function registerInitCommand(program2) {
       const agentList = found.join(", ");
       console.log(chalk16.green.bold(`\u{1F6E1}\uFE0F  Node9 is protecting ${agentList}!`));
       console.log("");
-      console.log(chalk16.white("  Watch live:  ") + chalk16.cyan("node9 tail"));
+      console.log(chalk16.white("  Watch live:  ") + chalk16.cyan("node9 monitor"));
       console.log("");
       console.log(chalk16.gray("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
       console.log(
@@ -18491,72 +18517,11 @@ function registerUndoCommand(program2) {
   });
 }
 
-// src/cli/commands/watch.ts
-init_daemon();
-import chalk19 from "chalk";
-import { spawn as spawn7, spawnSync as spawnSync4 } from "child_process";
-function registerWatchCommand(program2) {
-  program2.command("watch").description("Run a command under Node9 watch mode (daemon stays alive for the session)").argument("<command>", "Command to run").argument("[args...]", "Arguments for the command").action(async (cmd, args) => {
-    let port = DAEMON_PORT;
-    try {
-      const res = await fetch(`http://127.0.0.1:${DAEMON_PORT}/settings`, {
-        signal: AbortSignal.timeout(500)
-      });
-      if (res.ok) {
-        const data = await res.json();
-        if (typeof data.port === "number") port = data.port;
-      } else {
-        throw new Error("not running");
-      }
-    } catch {
-      console.error(chalk19.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon (watch mode)..."));
-      const child = spawn7(process.execPath, [process.argv[1], "daemon"], {
-        detached: true,
-        stdio: "ignore",
-        env: { ...process.env, NODE9_AUTO_STARTED: "1", NODE9_WATCH_MODE: "1" }
-      });
-      child.unref();
-      let ready = false;
-      for (let i = 0; i < 20; i++) {
-        await new Promise((r) => setTimeout(r, 250));
-        try {
-          const r = await fetch(`http://127.0.0.1:${DAEMON_PORT}/settings`, {
-            signal: AbortSignal.timeout(500)
-          });
-          if (r.ok) {
-            ready = true;
-            break;
-          }
-        } catch {
-        }
-      }
-      if (!ready) {
-        console.error(chalk19.red("\u274C Daemon failed to start. Try: node9 daemon start"));
-        process.exit(1);
-      }
-    }
-    console.error(
-      chalk19.cyan.bold("\u{1F6E1}\uFE0F  Node9 watch") + chalk19.dim(` \u2192 localhost:${port}`) + chalk19.dim(
-        "\n   Tip: run `node9 tail` in another terminal to review and approve AI actions.\n"
-      )
-    );
-    const result = spawnSync4(cmd, args, {
-      stdio: "inherit",
-      env: { ...process.env, NODE9_WATCH_MODE: "1" }
-    });
-    if (result.error) {
-      console.error(chalk19.red(`\u274C Failed to run command: ${result.error.message}`));
-      process.exit(1);
-    }
-    process.exit(result.status ?? 0);
-  });
-}
-
 // src/mcp-gateway/index.ts
 init_orchestrator();
 import readline4 from "readline";
-import chalk20 from "chalk";
-import { spawn as spawn8 } from "child_process";
+import chalk19 from "chalk";
+import { spawn as spawn7 } from "child_process";
 import { execa as execa2 } from "execa";
 init_provenance();
 
@@ -18716,13 +18681,13 @@ async function runMcpGateway(upstreamCommand) {
   const prov = checkProvenance(executable);
   if (prov.trustLevel === "suspect") {
     console.error(
-      chalk20.red(
+      chalk19.red(
         `\u26A0\uFE0F  Node9: Upstream MCP server binary is suspect \u2014 ${prov.reason} (${prov.resolvedPath})`
       )
     );
-    console.error(chalk20.red("   Verify this binary is trusted before proceeding."));
+    console.error(chalk19.red("   Verify this binary is trusted before proceeding."));
   }
-  console.error(chalk20.green(`\u{1F680} Node9 MCP Gateway: Monitoring [${upstreamCommand}]`));
+  console.error(chalk19.green(`\u{1F680} Node9 MCP Gateway: Monitoring [${upstreamCommand}]`));
   const UPSTREAM_INJECTOR_VARS = /* @__PURE__ */ new Set([
     "NODE_OPTIONS",
     "NODE_PATH",
@@ -18741,7 +18706,7 @@ async function runMcpGateway(upstreamCommand) {
   const safeEnv = Object.fromEntries(
     Object.entries(process.env).filter(([k]) => !UPSTREAM_INJECTOR_VARS.has(k))
   );
-  const child = spawn8(executable, cmdArgs, {
+  const child = spawn7(executable, cmdArgs, {
     stdio: ["pipe", "pipe", "inherit"],
     // control stdin/stdout; inherit stderr
     shell: false,
@@ -18835,10 +18800,10 @@ async function runMcpGateway(upstreamCommand) {
           mcpServer
         });
         if (!result.approved) {
-          console.error(chalk20.red(`
+          console.error(chalk19.red(`
 \u{1F6D1} Node9 MCP Gateway: Action Blocked`));
-          console.error(chalk20.gray(`   Tool: ${toolName}`));
-          console.error(chalk20.gray(`   Reason: ${result.reason ?? "Security Policy"}
+          console.error(chalk19.gray(`   Tool: ${toolName}`));
+          console.error(chalk19.gray(`   Reason: ${result.reason ?? "Security Policy"}
 `));
           const blockedByLabel = result.blockedByLabel ?? result.reason ?? "Security Policy";
           const isHumanDecision = blockedByLabel.toLowerCase().includes("user") || blockedByLabel.toLowerCase().includes("daemon") || blockedByLabel.toLowerCase().includes("decision");
@@ -18950,7 +18915,7 @@ async function runMcpGateway(upstreamCommand) {
           updatePin(serverKey, upstreamCommand, currentHash, toolNames);
           pinState = "validated";
           console.error(
-            chalk20.green(
+            chalk19.green(
               `\u{1F512} Node9: Pinned ${toolNames.length} tool definition(s) for this MCP server`
             )
           );
@@ -18963,11 +18928,11 @@ async function runMcpGateway(upstreamCommand) {
         } else if (pinStatus === "corrupt") {
           pinState = "quarantined";
           console.error(
-            chalk20.red("\n\u{1F6A8} Node9: MCP pin file is corrupt or unreadable \u2014 session quarantined!")
+            chalk19.red("\n\u{1F6A8} Node9: MCP pin file is corrupt or unreadable \u2014 session quarantined!")
           );
-          console.error(chalk20.red("   Tool calls are blocked until the pin file is repaired."));
+          console.error(chalk19.red("   Tool calls are blocked until the pin file is repaired."));
           console.error(
-            chalk20.yellow(`   Run: node9 mcp pin reset  (to clear and re-pin on next connect)
+            chalk19.yellow(`   Run: node9 mcp pin reset  (to clear and re-pin on next connect)
 `)
           );
           const errorResponse = {
@@ -18984,13 +18949,13 @@ async function runMcpGateway(upstreamCommand) {
         } else {
           pinState = "quarantined";
           console.error(
-            chalk20.red("\n\u{1F6A8} Node9: MCP tool definitions have changed since last verified!")
+            chalk19.red("\n\u{1F6A8} Node9: MCP tool definitions have changed since last verified!")
           );
           console.error(
-            chalk20.red("   This could indicate a supply chain attack (tool poisoning / rug pull).")
+            chalk19.red("   This could indicate a supply chain attack (tool poisoning / rug pull).")
           );
-          console.error(chalk20.red("   Session quarantined \u2014 all tool calls blocked."));
-          console.error(chalk20.yellow(`   Run: node9 mcp pin update ${serverKey}
+          console.error(chalk19.red("   Session quarantined \u2014 all tool calls blocked."));
+          console.error(chalk19.yellow(`   Run: node9 mcp pin update ${serverKey}
 `));
           const errorResponse = {
             jsonrpc: "2.0",
@@ -19033,7 +18998,7 @@ async function runMcpGateway(upstreamCommand) {
       const toolName = callId !== void 0 ? pendingCallNames.get(callId) ?? "unknown" : "unknown";
       if (callId !== void 0) pendingCallNames.delete(callId);
       console.error(
-        chalk20.yellow(
+        chalk19.yellow(
           `\u26A1 Node9: Large MCP response from '${toolName}' (${(line.length / 1024).toFixed(0)}KB) \u2014 context window enlarged`
         )
       );
@@ -19087,7 +19052,7 @@ import readline5 from "readline";
 import fs39 from "fs";
 import os35 from "os";
 import path41 from "path";
-import { spawnSync as spawnSync5 } from "child_process";
+import { spawnSync as spawnSync4 } from "child_process";
 init_core();
 init_daemon();
 init_shields();
@@ -19561,7 +19526,7 @@ function handleRuleAdd(args) {
   return `Rule "${name}" added to ~/.node9/config.json \u2014 verdict: ${verdict} when ${field} matches "${pattern}"`;
 }
 function runCliCommand(subArgs) {
-  const result = spawnSync5(process.execPath, [process.argv[1], ...subArgs], {
+  const result = spawnSync4(process.execPath, [process.argv[1], ...subArgs], {
     encoding: "utf-8",
     timeout: 6e4,
     // Disable colors — stdout is piped (not a TTY), chalk auto-detects, but be explicit
@@ -19756,7 +19721,7 @@ function registerMcpServerCommand(program2) {
 
 // src/cli/commands/trust.ts
 init_trusted_hosts();
-import chalk21 from "chalk";
+import chalk20 from "chalk";
 function isValidHost(host) {
   return /^(\*\.)?[a-z0-9][a-z0-9.-]*\.[a-z]{2,}$/.test(host);
 }
@@ -19766,51 +19731,51 @@ function registerTrustCommand(program2) {
     const normalized = normalizeHost(host.trim());
     if (!isValidHost(normalized)) {
       console.error(
-        chalk21.red(`
+        chalk20.red(`
 \u274C Invalid host: "${host}"
-`) + chalk21.gray("   Use an FQDN like api.mycompany.com or *.mycompany.com\n")
+`) + chalk20.gray("   Use an FQDN like api.mycompany.com or *.mycompany.com\n")
       );
       process.exit(1);
     }
     addTrustedHost(normalized);
-    console.log(chalk21.green(`
+    console.log(chalk20.green(`
 \u2705 ${normalized} added to trusted hosts.`));
     console.log(
-      chalk21.gray("   Pipe-chain blocks to this host: critical \u2192 review, high \u2192 allow\n")
+      chalk20.gray("   Pipe-chain blocks to this host: critical \u2192 review, high \u2192 allow\n")
     );
   });
   trustCmd.command("remove <host>").description("Remove a trusted host").action((host) => {
     const normalized = normalizeHost(host.trim());
     const removed = removeTrustedHost(normalized);
     if (!removed) {
-      console.error(chalk21.yellow(`
+      console.error(chalk20.yellow(`
 \u26A0\uFE0F  "${normalized}" is not in the trusted hosts list.
 `));
       process.exit(1);
     }
-    console.log(chalk21.green(`
+    console.log(chalk20.green(`
 \u2705 ${normalized} removed from trusted hosts.
 `));
   });
   trustCmd.command("list").description("Show all trusted hosts").action(() => {
     const hosts = readTrustedHosts();
     if (hosts.length === 0) {
-      console.log(chalk21.gray("\n  No trusted hosts configured.\n"));
-      console.log(`  Add one: ${chalk21.cyan("node9 trust add api.mycompany.com")}
+      console.log(chalk20.gray("\n  No trusted hosts configured.\n"));
+      console.log(`  Add one: ${chalk20.cyan("node9 trust add api.mycompany.com")}
 `);
       return;
     }
-    console.log(chalk21.bold("\n\u{1F513} Trusted Hosts\n"));
+    console.log(chalk20.bold("\n\u{1F513} Trusted Hosts\n"));
     for (const entry of hosts) {
       const date = new Date(entry.addedAt).toLocaleDateString();
-      console.log(`  ${chalk21.cyan(entry.host.padEnd(40))} ${chalk21.gray(`added ${date}`)}`);
+      console.log(`  ${chalk20.cyan(entry.host.padEnd(40))} ${chalk20.gray(`added ${date}`)}`);
     }
     console.log("");
   });
 }
 
 // src/cli/commands/mcp-pin.ts
-import chalk22 from "chalk";
+import chalk21 from "chalk";
 function registerMcpPinCommand(program2) {
   const pinCmd = program2.command("mcp").description("Manage MCP server tool definition pinning (rug pull defense)");
   const pinSubCmd = pinCmd.command("pin").description("Manage pinned MCP server tool definitions");
@@ -19818,31 +19783,31 @@ function registerMcpPinCommand(program2) {
     const result = readMcpPinsSafe();
     if (!result.ok) {
       if (result.reason === "missing") {
-        console.log(chalk22.gray("\nNo MCP servers are pinned yet."));
+        console.log(chalk21.gray("\nNo MCP servers are pinned yet."));
         console.log(
-          chalk22.gray("Pins are created automatically when the MCP gateway first connects.\n")
+          chalk21.gray("Pins are created automatically when the MCP gateway first connects.\n")
         );
         return;
       }
-      console.error(chalk22.red(`
+      console.error(chalk21.red(`
 \u274C Pin file is corrupt: ${result.detail}`));
-      console.error(chalk22.yellow("   Run: node9 mcp pin reset\n"));
+      console.error(chalk21.yellow("   Run: node9 mcp pin reset\n"));
       process.exit(1);
     }
     const entries = Object.entries(result.pins.servers);
     if (entries.length === 0) {
-      console.log(chalk22.gray("\nNo MCP servers are pinned yet."));
+      console.log(chalk21.gray("\nNo MCP servers are pinned yet."));
       console.log(
-        chalk22.gray("Pins are created automatically when the MCP gateway first connects.\n")
+        chalk21.gray("Pins are created automatically when the MCP gateway first connects.\n")
       );
       return;
     }
-    console.log(chalk22.bold("\n\u{1F512} Pinned MCP Servers\n"));
+    console.log(chalk21.bold("\n\u{1F512} Pinned MCP Servers\n"));
     for (const [key, entry] of entries) {
-      console.log(`  ${chalk22.cyan(key)}  ${chalk22.gray(entry.label)}`);
-      console.log(`    Tools (${entry.toolCount}): ${chalk22.white(entry.toolNames.join(", "))}`);
-      console.log(`    Hash:  ${chalk22.gray(entry.toolsHash.slice(0, 16))}...`);
-      console.log(`    Pinned: ${chalk22.gray(entry.pinnedAt)}`);
+      console.log(`  ${chalk21.cyan(key)}  ${chalk21.gray(entry.label)}`);
+      console.log(`    Tools (${entry.toolCount}): ${chalk21.white(entry.toolNames.join(", "))}`);
+      console.log(`    Hash:  ${chalk21.gray(entry.toolsHash.slice(0, 16))}...`);
+      console.log(`    Pinned: ${chalk21.gray(entry.pinnedAt)}`);
       console.log("");
     }
   });
@@ -19853,127 +19818,127 @@ function registerMcpPinCommand(program2) {
     try {
       pins = readMcpPins();
     } catch {
-      console.error(chalk22.red("\n\u274C Pin file is corrupt."));
-      console.error(chalk22.yellow("   Run: node9 mcp pin reset\n"));
+      console.error(chalk21.red("\n\u274C Pin file is corrupt."));
+      console.error(chalk21.yellow("   Run: node9 mcp pin reset\n"));
       process.exit(1);
     }
     if (!pins.servers[serverKey]) {
-      console.error(chalk22.red(`
+      console.error(chalk21.red(`
 \u274C No pin found for server key "${serverKey}"
 `));
-      console.error(`Run ${chalk22.cyan("node9 mcp pin list")} to see pinned servers.
+      console.error(`Run ${chalk21.cyan("node9 mcp pin list")} to see pinned servers.
 `);
       process.exit(1);
     }
     const label = pins.servers[serverKey].label;
     removePin2(serverKey);
-    console.log(chalk22.green(`
-\u{1F513} Pin removed for ${chalk22.cyan(serverKey)}`));
-    console.log(chalk22.gray(`   Server: ${label}`));
-    console.log(chalk22.gray("   Next connection will re-pin with current tool definitions.\n"));
+    console.log(chalk21.green(`
+\u{1F513} Pin removed for ${chalk21.cyan(serverKey)}`));
+    console.log(chalk21.gray(`   Server: ${label}`));
+    console.log(chalk21.gray("   Next connection will re-pin with current tool definitions.\n"));
   });
   pinSubCmd.command("reset").description("Clear all MCP pins (next connection to each server will re-pin)").action(() => {
     const result = readMcpPinsSafe();
     if (!result.ok && result.reason === "missing") {
-      console.log(chalk22.gray("\nNo pins to clear.\n"));
+      console.log(chalk21.gray("\nNo pins to clear.\n"));
       return;
     }
     const count = result.ok ? Object.keys(result.pins.servers).length : "?";
     clearAllPins2();
-    console.log(chalk22.green(`
+    console.log(chalk21.green(`
 \u{1F513} Cleared ${count} MCP pin(s).`));
-    console.log(chalk22.gray("   Next connection to each server will re-pin.\n"));
+    console.log(chalk21.gray("   Next connection to each server will re-pin.\n"));
   });
 }
 
 // src/cli/commands/sync.ts
 init_sync();
-import chalk23 from "chalk";
+import chalk22 from "chalk";
 function registerSyncCommand(program2) {
   const policy = program2.command("policy").description("Manage cloud policy rules");
   policy.command("sync").description("Sync cloud policy rules to local cache (~/.node9/rules-cache.json)").action(async () => {
-    process.stdout.write(chalk23.cyan("Syncing cloud policy rules\u2026"));
+    process.stdout.write(chalk22.cyan("Syncing cloud policy rules\u2026"));
     const result = await runCloudSync();
     process.stdout.write("\n");
     if (!result.ok) {
-      console.error(chalk23.red(`\u2717 ${result.reason}`));
+      console.error(chalk22.red(`\u2717 ${result.reason}`));
       process.exit(1);
     }
     if (result.unchanged) {
       console.log(
-        chalk23.green(
+        chalk22.green(
           `\u2713 Already up to date \u2014 ${result.rules} rule${result.rules === 1 ? "" : "s"} cached`
         )
       );
-      console.log(chalk23.gray(`  Cached at: ${result.fetchedAt}`));
-      console.log(chalk23.gray(`  Server returned 304 (no changes since last sync)`));
+      console.log(chalk22.gray(`  Cached at: ${result.fetchedAt}`));
+      console.log(chalk22.gray(`  Server returned 304 (no changes since last sync)`));
     } else {
       console.log(
-        chalk23.green(`\u2713 Synced ${result.rules} rule${result.rules === 1 ? "" : "s"} from cloud`)
+        chalk22.green(`\u2713 Synced ${result.rules} rule${result.rules === 1 ? "" : "s"} from cloud`)
       );
-      console.log(chalk23.gray(`  Cached at: ${result.fetchedAt}`));
-      console.log(chalk23.gray(`  File: ~/.node9/rules-cache.json`));
+      console.log(chalk22.gray(`  Cached at: ${result.fetchedAt}`));
+      console.log(chalk22.gray(`  File: ~/.node9/rules-cache.json`));
     }
   });
   policy.command("show").description("List all cloud policy rules in the local cache").action(() => {
     const status = getCloudSyncStatus();
     if (!status.cached) {
-      console.log(chalk23.yellow("\n  No cloud rules cached \u2014 run: node9 policy sync\n"));
+      console.log(chalk22.yellow("\n  No cloud rules cached \u2014 run: node9 policy sync\n"));
       return;
     }
     const rules = getCloudRules() ?? [];
     const age = Math.round((Date.now() - new Date(status.fetchedAt).getTime()) / 6e4);
     console.log(
-      chalk23.bold(`
-  Cloud policy rules`) + chalk23.gray(
+      chalk22.bold(`
+  Cloud policy rules`) + chalk22.gray(
         ` (${rules.length} rule${rules.length === 1 ? "" : "s"}, synced ${age}m ago)
 `
       )
     );
     if (rules.length === 0) {
-      console.log(chalk23.gray("  No rules defined in cloud policy.\n"));
+      console.log(chalk22.gray("  No rules defined in cloud policy.\n"));
       return;
     }
     for (const rule of rules) {
       const r = rule;
-      const verdictColor = r.verdict === "block" ? chalk23.red : r.verdict === "allow" ? chalk23.green : chalk23.yellow;
+      const verdictColor = r.verdict === "block" ? chalk22.red : r.verdict === "allow" ? chalk22.green : chalk22.yellow;
       console.log(
         `  ${verdictColor(
           String(r.verdict ?? "unknown").toUpperCase().padEnd(6)
-        )}  ${chalk23.white(String(r.name ?? "(unnamed)"))}`
+        )}  ${chalk22.white(String(r.name ?? "(unnamed)"))}`
       );
-      if (r.reason) console.log(chalk23.gray(`           ${String(r.reason)}`));
+      if (r.reason) console.log(chalk22.gray(`           ${String(r.reason)}`));
     }
     console.log("");
   });
   policy.command("status").description("Show current cloud policy cache status").action(() => {
     const s = getCloudSyncStatus();
     if (!s.cached) {
-      console.log(chalk23.yellow("\n  No cache yet \u2014 run: node9 policy sync\n"));
+      console.log(chalk22.yellow("\n  No cache yet \u2014 run: node9 policy sync\n"));
       return;
     }
     const age = Math.round((Date.now() - new Date(s.fetchedAt).getTime()) / 6e4);
     console.log(`
-  Rules   : ${chalk23.green(String(s.rules))} cloud rules loaded`);
+  Rules   : ${chalk22.green(String(s.rules))} cloud rules loaded`);
     console.log(
-      `  Synced  : ${chalk23.gray(`${age} minute${age === 1 ? "" : "s"} ago`)} (${s.fetchedAt})`
+      `  Synced  : ${chalk22.gray(`${age} minute${age === 1 ? "" : "s"} ago`)} (${s.fetchedAt})`
     );
     if (s.workspaceId) {
-      console.log(`  Workspace: ${chalk23.gray(s.workspaceId)}`);
+      console.log(`  Workspace: ${chalk22.gray(s.workspaceId)}`);
     }
     if (s.panicMode) {
       console.log(
-        `  ${chalk23.red.bold("\u{1F6A8} Panic mode  : ON")}  ` + chalk23.dim("(every review-verdict becomes block)")
+        `  ${chalk22.red.bold("\u{1F6A8} Panic mode  : ON")}  ` + chalk22.dim("(every review-verdict becomes block)")
       );
     }
     if (s.shadowMode) {
       console.log(
-        `  ${chalk23.yellow.bold("\u{1F441}  Shadow mode : ON")}  ` + chalk23.dim("(blocks become would-block log entries)")
+        `  ${chalk22.yellow.bold("\u{1F441}  Shadow mode : ON")}  ` + chalk22.dim("(blocks become would-block log entries)")
       );
     }
     if (s.syncIntervalHours) {
       console.log(
-        chalk23.gray(
+        chalk22.gray(
           `  Polling : every ${s.syncIntervalHours} hour${s.syncIntervalHours === 1 ? "" : "s"}`
         )
       );
@@ -19984,7 +19949,7 @@ function registerSyncCommand(program2) {
 
 // src/cli/commands/agents.ts
 init_setup();
-import chalk24 from "chalk";
+import chalk23 from "chalk";
 var SETUP_FN = {
   claude: setupClaude,
   gemini: setupGemini,
@@ -20013,23 +19978,23 @@ function registerAgentsCommand(program2) {
     console.log(`  ${"Agent".padEnd(14)}${"Installed".padEnd(11)}${"Wired".padEnd(8)}Mode`);
     console.log("  " + "\u2500".repeat(44));
     for (const s of statuses) {
-      const installed = s.installed ? chalk24.green("\u2713") : chalk24.gray("\u2717");
-      const wired = !s.installed ? chalk24.gray("\u2014") : s.wired ? chalk24.green("\u2713") : chalk24.yellow("\u2717");
-      const mode = s.mode ? chalk24.gray(s.mode) : chalk24.gray("\u2014");
-      const hint = s.installed && !s.wired ? chalk24.gray(`  \u2190 node9 agents add ${s.name}`) : "";
+      const installed = s.installed ? chalk23.green("\u2713") : chalk23.gray("\u2717");
+      const wired = !s.installed ? chalk23.gray("\u2014") : s.wired ? chalk23.green("\u2713") : chalk23.yellow("\u2717");
+      const mode = s.mode ? chalk23.gray(s.mode) : chalk23.gray("\u2014");
+      const hint = s.installed && !s.wired ? chalk23.gray(`  \u2190 node9 agents add ${s.name}`) : "";
       console.log(`  ${s.label.padEnd(14)}${installed}          ${wired}       ${mode}${hint}`);
     }
     console.log("");
     if (!anyInstalled) {
       console.log(
-        chalk24.gray("  No AI agents detected. Install Claude Code, Gemini CLI, Cursor,\n") + chalk24.gray("  Windsurf, VSCode, or Codex then run: node9 agents list\n")
+        chalk23.gray("  No AI agents detected. Install Claude Code, Gemini CLI, Cursor,\n") + chalk23.gray("  Windsurf, VSCode, or Codex then run: node9 agents list\n")
       );
       return;
     }
     const unwired = statuses.filter((s) => s.installed && !s.wired);
     if (unwired.length > 0) {
       console.log(
-        chalk24.yellow(`  ${unwired.length} agent(s) not yet wired. Run: `) + chalk24.white(`node9 agents add ${unwired[0].name}`) + "\n"
+        chalk23.yellow(`  ${unwired.length} agent(s) not yet wired. Run: `) + chalk23.white(`node9 agents add ${unwired[0].name}`) + "\n"
       );
     }
   });
@@ -20037,7 +20002,7 @@ function registerAgentsCommand(program2) {
     const name = agent.toLowerCase();
     const fn = SETUP_FN[name];
     if (!fn) {
-      console.error(chalk24.red(`Unknown agent: "${agent}". Supported: ${AGENT_NAMES.join(", ")}`));
+      console.error(chalk23.red(`Unknown agent: "${agent}". Supported: ${AGENT_NAMES.join(", ")}`));
       process.exit(1);
     }
     await fn();
@@ -20046,14 +20011,14 @@ function registerAgentsCommand(program2) {
     const name = agent.toLowerCase();
     const fn = TEARDOWN_FN[name];
     if (!fn) {
-      console.error(chalk24.red(`Unknown agent: "${agent}". Supported: ${AGENT_NAMES.join(", ")}`));
+      console.error(chalk23.red(`Unknown agent: "${agent}". Supported: ${AGENT_NAMES.join(", ")}`));
       process.exit(1);
     }
-    console.log(chalk24.cyan(`
+    console.log(chalk23.cyan(`
 \u{1F6E1}\uFE0F  Node9: removing from ${name}...
 `));
     fn();
-    console.log(chalk24.gray("\n  Restart the agent for changes to take effect."));
+    console.log(chalk23.gray("\n  Restart the agent for changes to take effect."));
   });
 }
 
@@ -20061,7 +20026,7 @@ function registerAgentsCommand(program2) {
 init_scan();
 
 // src/cli/commands/sessions.ts
-import chalk25 from "chalk";
+import chalk24 from "chalk";
 import fs40 from "fs";
 import path42 from "path";
 import os36 from "os";
@@ -20570,11 +20535,11 @@ function toolInputSummary(tool, input) {
 }
 function toolColor(tool) {
   const t = tool.toLowerCase();
-  if (t === "bash" || t === "execute_bash") return chalk25.red;
-  if (t === "write") return chalk25.green;
-  if (t === "edit" || t === "notebookedit") return chalk25.yellow;
-  if (t === "read") return chalk25.cyan;
-  return chalk25.gray;
+  if (t === "bash" || t === "execute_bash") return chalk24.red;
+  if (t === "write") return chalk24.green;
+  if (t === "edit" || t === "notebookedit") return chalk24.yellow;
+  if (t === "read") return chalk24.cyan;
+  return chalk24.gray;
 }
 function barStr2(value, max, width) {
   if (max === 0 || width <= 0) return "\u2591".repeat(width);
@@ -20584,7 +20549,7 @@ function barStr2(value, max, width) {
 function colorBar2(value, max, width) {
   const s = barStr2(value, max, width);
   const filled = Math.max(1, Math.round(max > 0 ? value / max * width : 0));
-  return chalk25.cyan(s.slice(0, filled)) + chalk25.dim(s.slice(filled));
+  return chalk24.cyan(s.slice(0, filled)) + chalk24.dim(s.slice(filled));
 }
 function renderSummary(summaries) {
   const totalTools = summaries.reduce((n, s) => n + s.toolCalls.length, 0);
@@ -20614,45 +20579,45 @@ function renderSummary(summaries) {
   }
   const topProjects = [...projCosts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3);
   const W = 20;
-  console.log(chalk25.dim("  " + "\u2500".repeat(70)));
+  console.log(chalk24.dim("  " + "\u2500".repeat(70)));
   console.log(
-    "  " + chalk25.bold.white(String(summaries.length).padEnd(4)) + chalk25.dim("sessions    ") + chalk25.bold.yellow(fmtCost3(totalCost).padEnd(10)) + chalk25.dim("total    ") + chalk25.bold.white(String(totalTools).padEnd(6)) + chalk25.dim("tool calls    ") + chalk25.bold.white(String(totalFiles)) + chalk25.dim(" files modified") + (totalBlocked > 0 ? chalk25.dim("    ") + chalk25.red.bold(String(totalBlocked)) + chalk25.dim(" blocked by node9") : "")
+    "  " + chalk24.bold.white(String(summaries.length).padEnd(4)) + chalk24.dim("sessions    ") + chalk24.bold.yellow(fmtCost3(totalCost).padEnd(10)) + chalk24.dim("total    ") + chalk24.bold.white(String(totalTools).padEnd(6)) + chalk24.dim("tool calls    ") + chalk24.bold.white(String(totalFiles)) + chalk24.dim(" files modified") + (totalBlocked > 0 ? chalk24.dim("    ") + chalk24.red.bold(String(totalBlocked)) + chalk24.dim(" blocked by node9") : "")
   );
   console.log(
-    "  " + chalk25.dim("avg ") + chalk25.white(fmtCost3(avgCost).padEnd(10)) + chalk25.dim("/session    ") + chalk25.green(String(snapshots)) + chalk25.dim(` of ${summaries.length} sessions had snapshots`)
+    "  " + chalk24.dim("avg ") + chalk24.white(fmtCost3(avgCost).padEnd(10)) + chalk24.dim("/session    ") + chalk24.green(String(snapshots)) + chalk24.dim(` of ${summaries.length} sessions had snapshots`)
   );
   console.log("");
-  console.log("  " + chalk25.dim("Tool breakdown:"));
+  console.log("  " + chalk24.dim("Tool breakdown:"));
   const maxGroup = Math.max(...Object.values(groups));
   for (const [label, count] of Object.entries(groups)) {
     if (count === 0) continue;
     const pct = totalTools > 0 ? Math.round(count / totalTools * 100) : 0;
     console.log(
-      "    " + label.padEnd(6) + "  " + colorBar2(count, maxGroup, W) + "  " + chalk25.white(String(count).padStart(4)) + chalk25.dim(` (${String(pct)}%)`)
+      "    " + label.padEnd(6) + "  " + colorBar2(count, maxGroup, W) + "  " + chalk24.white(String(count).padStart(4)) + chalk24.dim(` (${String(pct)}%)`)
     );
   }
   console.log("");
   if (topProjects.length > 1) {
-    console.log("  " + chalk25.dim("Cost by project:"));
+    console.log("  " + chalk24.dim("Cost by project:"));
     const maxProjCost = topProjects[0][1];
     for (const [proj, cost] of topProjects) {
       console.log(
-        "    " + proj.slice(0, 28).padEnd(28) + "  " + colorBar2(cost, maxProjCost, W) + "  " + chalk25.yellow(fmtCost3(cost))
+        "    " + proj.slice(0, 28).padEnd(28) + "  " + colorBar2(cost, maxProjCost, W) + "  " + chalk24.yellow(fmtCost3(cost))
       );
     }
     console.log("");
   }
-  console.log(chalk25.dim("  " + "\u2500".repeat(70)));
+  console.log(chalk24.dim("  " + "\u2500".repeat(70)));
   console.log("");
 }
 function renderList(summaries, totalCost) {
   if (summaries.length === 0) {
-    console.log(chalk25.yellow("  No sessions found in the requested range.\n"));
+    console.log(chalk24.yellow("  No sessions found in the requested range.\n"));
     return;
   }
-  const totalLabel = totalCost > 0 ? chalk25.dim("  ~" + fmtCost3(totalCost) + " total") : "";
+  const totalLabel = totalCost > 0 ? chalk24.dim("  ~" + fmtCost3(totalCost) + " total") : "";
   console.log(
-    "  " + chalk25.white(String(summaries.length)) + chalk25.dim(` session${summaries.length !== 1 ? "s" : ""}`) + totalLabel
+    "  " + chalk24.white(String(summaries.length)) + chalk24.dim(` session${summaries.length !== 1 ? "s" : ""}`) + totalLabel
   );
   console.log("");
   let lastGroup = "";
@@ -20660,49 +20625,49 @@ function renderList(summaries, totalCost) {
     const activeDate = fmtDate2(s.lastActiveTime);
     const group = activeDate + "  " + s.projectLabel;
     if (group !== lastGroup) {
-      console.log(chalk25.dim("  \u2500\u2500\u2500 ") + chalk25.bold(activeDate) + chalk25.dim("  " + s.projectLabel));
+      console.log(chalk24.dim("  \u2500\u2500\u2500 ") + chalk24.bold(activeDate) + chalk24.dim("  " + s.projectLabel));
       lastGroup = group;
     }
     const startDate = fmtDate2(s.startTime);
-    const dateRange = startDate !== activeDate ? chalk25.dim(" (" + startDate + " \u2192 " + activeDate + ")") : "";
-    const timeStr = chalk25.dim(fmtTime(s.startTime));
-    const prompt = chalk25.white(truncate(s.firstPrompt.replace(/\n/g, " "), 50).padEnd(50));
-    const tools = s.toolCalls.length > 0 ? chalk25.dim(String(s.toolCalls.length).padStart(3) + " tools") : chalk25.dim("  0 tools");
-    const cost = s.costUSD > 0 ? chalk25.dim("  " + fmtCost3(s.costUSD).padEnd(8)) : "          ";
-    const blocked = s.blockedCalls.length > 0 ? chalk25.red("  \u{1F6D1} " + String(s.blockedCalls.length)) : "";
-    const snap = s.hasSnapshot ? chalk25.green("  \u{1F4F8}") : "";
-    const agentBadge = s.agent === "gemini" ? chalk25.blue("  [Gemini]") : s.agent === "codex" ? chalk25.magenta("  [Codex]") : chalk25.cyan("  [Claude]");
-    const sid = chalk25.dim("  " + s.sessionId.slice(0, 8));
+    const dateRange = startDate !== activeDate ? chalk24.dim(" (" + startDate + " \u2192 " + activeDate + ")") : "";
+    const timeStr = chalk24.dim(fmtTime(s.startTime));
+    const prompt = chalk24.white(truncate(s.firstPrompt.replace(/\n/g, " "), 50).padEnd(50));
+    const tools = s.toolCalls.length > 0 ? chalk24.dim(String(s.toolCalls.length).padStart(3) + " tools") : chalk24.dim("  0 tools");
+    const cost = s.costUSD > 0 ? chalk24.dim("  " + fmtCost3(s.costUSD).padEnd(8)) : "          ";
+    const blocked = s.blockedCalls.length > 0 ? chalk24.red("  \u{1F6D1} " + String(s.blockedCalls.length)) : "";
+    const snap = s.hasSnapshot ? chalk24.green("  \u{1F4F8}") : "";
+    const agentBadge = s.agent === "gemini" ? chalk24.blue("  [Gemini]") : s.agent === "codex" ? chalk24.magenta("  [Codex]") : chalk24.cyan("  [Claude]");
+    const sid = chalk24.dim("  " + s.sessionId.slice(0, 8));
     console.log(
       `  ${timeStr}  ${prompt}  ${tools}${cost}${blocked}${snap}${agentBadge}${sid}${dateRange}`
     );
   }
   console.log("");
   console.log(
-    chalk25.dim("  Run") + " " + chalk25.cyan("node9 sessions --detail <session-id>") + chalk25.dim(" for full tool trace.")
+    chalk24.dim("  Run") + " " + chalk24.cyan("node9 sessions --detail <session-id>") + chalk24.dim(" for full tool trace.")
   );
   console.log("");
 }
 function renderDetail(s) {
   console.log("");
-  console.log(chalk25.bold("  Session  ") + chalk25.dim(s.sessionId));
+  console.log(chalk24.bold("  Session  ") + chalk24.dim(s.sessionId));
   console.log(
-    chalk25.bold("  Prompt   ") + chalk25.white(s.firstPrompt.replace(/\n/g, " ").slice(0, 120))
+    chalk24.bold("  Prompt   ") + chalk24.white(s.firstPrompt.replace(/\n/g, " ").slice(0, 120))
   );
-  console.log(chalk25.bold("  Project  ") + chalk25.white(s.projectLabel));
+  console.log(chalk24.bold("  Project  ") + chalk24.white(s.projectLabel));
   if (s.agent) {
-    const agentLabel2 = s.agent === "gemini" ? chalk25.blue("Gemini CLI") : s.agent === "codex" ? chalk25.magenta("Codex") : chalk25.cyan("Claude Code");
-    console.log(chalk25.bold("  Agent    ") + agentLabel2);
+    const agentLabel2 = s.agent === "gemini" ? chalk24.blue("Gemini CLI") : s.agent === "codex" ? chalk24.magenta("Codex") : chalk24.cyan("Claude Code");
+    console.log(chalk24.bold("  Agent    ") + agentLabel2);
   }
-  console.log(chalk25.bold("  When     ") + chalk25.white(fmtDateTime(s.startTime)));
+  console.log(chalk24.bold("  When     ") + chalk24.white(fmtDateTime(s.startTime)));
   if (s.costUSD > 0)
-    console.log(chalk25.bold("  Cost     ") + chalk25.yellow("~" + fmtCost3(s.costUSD)));
+    console.log(chalk24.bold("  Cost     ") + chalk24.yellow("~" + fmtCost3(s.costUSD)));
   console.log(
-    chalk25.bold("  Snapshot ") + (s.hasSnapshot ? chalk25.green("\u2713 taken") : chalk25.dim("none"))
+    chalk24.bold("  Snapshot ") + (s.hasSnapshot ? chalk24.green("\u2713 taken") : chalk24.dim("none"))
   );
   console.log("");
   if (s.toolCalls.length === 0 && s.blockedCalls.length === 0) {
-    console.log(chalk25.dim("  No tool calls recorded.\n"));
+    console.log(chalk24.dim("  No tool calls recorded.\n"));
     return;
   }
   const timeline = [
@@ -20715,32 +20680,32 @@ function renderDetail(s) {
   });
   const headerParts = [`Tool calls (${s.toolCalls.length})`];
   if (s.blockedCalls.length > 0)
-    headerParts.push(chalk25.red(`${s.blockedCalls.length} blocked by node9`));
-  console.log(chalk25.bold("  " + headerParts.join("  \xB7  ")));
+    headerParts.push(chalk24.red(`${s.blockedCalls.length} blocked by node9`));
+  console.log(chalk24.bold("  " + headerParts.join("  \xB7  ")));
   console.log("");
   for (const entry of timeline) {
     if (entry.kind === "tool") {
       const tc = entry.tc;
       const colorFn = toolColor(tc.tool);
       const toolPad = colorFn(tc.tool.padEnd(16));
-      const detail = chalk25.gray(truncate(toolInputSummary(tc.tool, tc.input), 70));
-      const ts = tc.timestamp ? chalk25.dim(fmtTime(tc.timestamp) + "  ") : "       ";
+      const detail = chalk24.gray(truncate(toolInputSummary(tc.tool, tc.input), 70));
+      const ts = tc.timestamp ? chalk24.dim(fmtTime(tc.timestamp) + "  ") : "       ";
       console.log(`    ${ts}${toolPad}  ${detail}`);
     } else {
       const bc = entry.bc;
-      const ts = bc.timestamp ? chalk25.dim(fmtTime(bc.timestamp) + "  ") : "       ";
-      const label = chalk25.red("\u{1F6D1} BLOCKED".padEnd(16));
-      const toolName = chalk25.red(bc.tool.padEnd(10));
-      const argsSummary = bc.args ? chalk25.gray(truncate(toolInputSummary(bc.tool, bc.args), 40)) : chalk25.dim("[args not logged]");
-      const reason = bc.checkedBy ? chalk25.dim("  \u2190 " + bc.checkedBy) : "";
+      const ts = bc.timestamp ? chalk24.dim(fmtTime(bc.timestamp) + "  ") : "       ";
+      const label = chalk24.red("\u{1F6D1} BLOCKED".padEnd(16));
+      const toolName = chalk24.red(bc.tool.padEnd(10));
+      const argsSummary = bc.args ? chalk24.gray(truncate(toolInputSummary(bc.tool, bc.args), 40)) : chalk24.dim("[args not logged]");
+      const reason = bc.checkedBy ? chalk24.dim("  \u2190 " + bc.checkedBy) : "";
       console.log(`    ${ts}${label}  ${toolName}  ${argsSummary}${reason}`);
     }
   }
   console.log("");
   if (s.modifiedFiles.length > 0) {
-    console.log(chalk25.bold(`  Files modified (${s.modifiedFiles.length}):`));
+    console.log(chalk24.bold(`  Files modified (${s.modifiedFiles.length}):`));
     for (const f of s.modifiedFiles) {
-      console.log("    " + chalk25.yellow(f));
+      console.log("    " + chalk24.yellow(f));
     }
     console.log("");
   }
@@ -20748,19 +20713,19 @@ function renderDetail(s) {
 function registerSessionsCommand(program2) {
   program2.command("sessions").description("Show what your AI agent did \u2014 sessions, tool calls, cost, and file changes").option("--all", "Show all sessions (default: last 7 days)").option("--days <n>", "Show last N days of sessions", "7").option("--detail <sessionId>", "Show full tool trace for a session").action((options) => {
     console.log("");
-    console.log(chalk25.cyan.bold("\u{1F4CB}  node9 sessions") + chalk25.dim("  \u2014 what your AI agent did"));
+    console.log(chalk24.cyan.bold("\u{1F4CB}  node9 sessions") + chalk24.dim("  \u2014 what your AI agent did"));
     console.log("");
     const historyPath = path42.join(os36.homedir(), ".claude", "history.jsonl");
     if (!fs40.existsSync(historyPath)) {
-      console.log(chalk25.yellow("  No Claude session history found at ~/.claude/history.jsonl"));
-      console.log(chalk25.gray("  Install Claude Code, run a few sessions, then try again.\n"));
+      console.log(chalk24.yellow("  No Claude session history found at ~/.claude/history.jsonl"));
+      console.log(chalk24.gray("  Install Claude Code, run a few sessions, then try again.\n"));
       return;
     }
     const days = options.detail || options.all ? null : Math.max(1, parseInt(options.days, 10) || 7);
     const rangeLabel = options.detail ? "all time" : options.all ? "all time" : `last ${String(days)} days`;
-    console.log(chalk25.dim("  " + rangeLabel));
+    console.log(chalk24.dim("  " + rangeLabel));
     console.log("");
-    process.stdout.write(chalk25.dim("  Loading\u2026"));
+    process.stdout.write(chalk24.dim("  Loading\u2026"));
     const summaries = buildSessions(days);
     if (process.stdout.isTTY) {
       process.stdout.clearLine(0);
@@ -20773,8 +20738,8 @@ function registerSessionsCommand(program2) {
         (s) => s.sessionId === options.detail || s.sessionId.startsWith(options.detail)
       );
       if (!target) {
-        console.log(chalk25.red(`  Session not found: ${options.detail}`));
-        console.log(chalk25.dim("  Run `node9 sessions` to list recent sessions.\n"));
+        console.log(chalk24.red(`  Session not found: ${options.detail}`));
+        console.log(chalk24.dim("  Run `node9 sessions` to list recent sessions.\n"));
         return;
       }
       renderDetail(target);
@@ -20787,7 +20752,7 @@ function registerSessionsCommand(program2) {
 }
 
 // src/cli/commands/skill-pin.ts
-import chalk26 from "chalk";
+import chalk25 from "chalk";
 import fs41 from "fs";
 import os37 from "os";
 import path43 from "path";
@@ -20807,29 +20772,29 @@ function registerSkillPinCommand(program2) {
     const result = readSkillPinsSafe();
     if (!result.ok) {
       if (result.reason === "missing") {
-        console.log(chalk26.gray("\nNo skill roots are pinned yet."));
+        console.log(chalk25.gray("\nNo skill roots are pinned yet."));
         console.log(
-          chalk26.gray("Pins are created automatically on the first tool call of each session.\n")
+          chalk25.gray("Pins are created automatically on the first tool call of each session.\n")
         );
         return;
       }
-      console.error(chalk26.red(`
+      console.error(chalk25.red(`
 \u274C Pin file is corrupt: ${result.detail}`));
-      console.error(chalk26.yellow("   Run: node9 skill pin reset\n"));
+      console.error(chalk25.yellow("   Run: node9 skill pin reset\n"));
       process.exit(1);
     }
     const entries = Object.entries(result.pins.roots);
     if (entries.length === 0) {
-      console.log(chalk26.gray("\nNo skill roots are pinned yet.\n"));
+      console.log(chalk25.gray("\nNo skill roots are pinned yet.\n"));
       return;
     }
-    console.log(chalk26.bold("\n\u{1F512} Pinned Skill Roots\n"));
+    console.log(chalk25.bold("\n\u{1F512} Pinned Skill Roots\n"));
     for (const [key, entry] of entries) {
-      const missing = entry.exists ? "" : chalk26.yellow(" (not present at pin time)");
-      console.log(`  ${chalk26.cyan(key)}  ${chalk26.gray(entry.rootPath)}${missing}`);
+      const missing = entry.exists ? "" : chalk25.yellow(" (not present at pin time)");
+      console.log(`  ${chalk25.cyan(key)}  ${chalk25.gray(entry.rootPath)}${missing}`);
       console.log(`    Files (${entry.fileCount})`);
-      console.log(`    Hash:  ${chalk26.gray(entry.contentHash.slice(0, 16))}...`);
-      console.log(`    Pinned: ${chalk26.gray(entry.pinnedAt)}
+      console.log(`    Hash:  ${chalk25.gray(entry.contentHash.slice(0, 16))}...`);
+      console.log(`    Pinned: ${chalk25.gray(entry.pinnedAt)}
 `);
     }
   });
@@ -20838,39 +20803,39 @@ function registerSkillPinCommand(program2) {
     try {
       pins = readSkillPins();
     } catch {
-      console.error(chalk26.red("\n\u274C Pin file is corrupt."));
-      console.error(chalk26.yellow("   Run: node9 skill pin reset\n"));
+      console.error(chalk25.red("\n\u274C Pin file is corrupt."));
+      console.error(chalk25.yellow("   Run: node9 skill pin reset\n"));
       process.exit(1);
     }
     if (!pins.roots[rootKey]) {
-      console.error(chalk26.red(`
+      console.error(chalk25.red(`
 \u274C No pin found for root key "${rootKey}"
 `));
-      console.error(`Run ${chalk26.cyan("node9 skill pin list")} to see pinned roots.
+      console.error(`Run ${chalk25.cyan("node9 skill pin list")} to see pinned roots.
 `);
       process.exit(1);
     }
     const rootPath = pins.roots[rootKey].rootPath;
     removePin(rootKey);
     wipeSkillSessions();
-    console.log(chalk26.green(`
-\u{1F513} Pin removed for ${chalk26.cyan(rootKey)}`));
-    console.log(chalk26.gray(`   ${rootPath}`));
-    console.log(chalk26.gray("   Next session will re-pin with current state.\n"));
+    console.log(chalk25.green(`
+\u{1F513} Pin removed for ${chalk25.cyan(rootKey)}`));
+    console.log(chalk25.gray(`   ${rootPath}`));
+    console.log(chalk25.gray("   Next session will re-pin with current state.\n"));
   });
   pinSubCmd.command("reset").description("Clear all skill pins and wipe session verification flags").action(() => {
     const result = readSkillPinsSafe();
     if (!result.ok && result.reason === "missing") {
       wipeSkillSessions();
-      console.log(chalk26.gray("\nNo pins to clear.\n"));
+      console.log(chalk25.gray("\nNo pins to clear.\n"));
       return;
     }
     const count = result.ok ? Object.keys(result.pins.roots).length : "?";
     clearAllPins();
     wipeSkillSessions();
-    console.log(chalk26.green(`
+    console.log(chalk25.green(`
 \u{1F513} Cleared ${count} skill pin(s).`));
-    console.log(chalk26.gray("   Next session will re-pin with current state.\n"));
+    console.log(chalk25.gray("   Next session will re-pin with current state.\n"));
   });
 }
 
@@ -20878,7 +20843,7 @@ function registerSkillPinCommand(program2) {
 import fs42 from "fs";
 import os38 from "os";
 import path44 from "path";
-import chalk27 from "chalk";
+import chalk26 from "chalk";
 var DECISIONS_FILE2 = path44.join(os38.homedir(), ".node9", "decisions.json");
 function readDecisions() {
   try {
@@ -20907,55 +20872,55 @@ function registerDecisionsCommand(program2) {
     const decisions = readDecisions();
     const entries = Object.entries(decisions);
     if (entries.length === 0) {
-      console.log(chalk27.gray("  No persistent decisions stored."));
+      console.log(chalk26.gray("  No persistent decisions stored."));
       console.log(
-        chalk27.gray(`  File: ${DECISIONS_FILE2}
-`) + chalk27.gray('  Decisions are written when you click "Always Allow" or')
+        chalk26.gray(`  File: ${DECISIONS_FILE2}
+`) + chalk26.gray('  Decisions are written when you click "Always Allow" or')
       );
-      console.log(chalk27.gray('  "Always Deny" in node9 tail or the native popup.'));
+      console.log(chalk26.gray('  "Always Deny" in node9 tail or the native popup.'));
       return;
     }
-    console.log(chalk27.bold(`
+    console.log(chalk26.bold(`
 Persistent decisions  (${entries.length})
 `));
     const w = Math.max(...entries.map(([k]) => k.length));
     for (const [tool, verdict] of entries.sort()) {
-      const colored = verdict === "allow" ? chalk27.green(verdict) : chalk27.red(verdict);
+      const colored = verdict === "allow" ? chalk26.green(verdict) : chalk26.red(verdict);
       console.log(`  ${tool.padEnd(w)}  ${colored}`);
     }
     console.log(
-      chalk27.gray(`
+      chalk26.gray(`
   Stored in ${DECISIONS_FILE2}
-`) + chalk27.gray("  Run `node9 decisions clear <tool>` to remove an entry.")
+`) + chalk26.gray("  Run `node9 decisions clear <tool>` to remove an entry.")
     );
   });
   cmd.command("clear <toolName>").description("Remove a persistent decision for one tool").action((toolName) => {
     const decisions = readDecisions();
     if (!(toolName in decisions)) {
-      console.log(chalk27.yellow(`  No persistent decision for "${toolName}". Nothing to clear.`));
+      console.log(chalk26.yellow(`  No persistent decision for "${toolName}". Nothing to clear.`));
       process.exitCode = 1;
       return;
     }
     delete decisions[toolName];
     writeDecisions(decisions);
-    console.log(chalk27.green(`  \u2713 Cleared persistent decision for "${toolName}".`));
+    console.log(chalk26.green(`  \u2713 Cleared persistent decision for "${toolName}".`));
   });
   cmd.command("clear-all").description("Remove every persistent decision (irreversible)").action(() => {
     const decisions = readDecisions();
     const count = Object.keys(decisions).length;
     if (count === 0) {
-      console.log(chalk27.gray("  Nothing to clear \u2014 no persistent decisions stored."));
+      console.log(chalk26.gray("  Nothing to clear \u2014 no persistent decisions stored."));
       return;
     }
     writeDecisions({});
     console.log(
-      chalk27.green(`  \u2713 Cleared ${count} persistent decision${count === 1 ? "" : "s"}.`)
+      chalk26.green(`  \u2713 Cleared ${count} persistent decision${count === 1 ? "" : "s"}.`)
     );
   });
 }
 
 // src/cli/commands/dlp.ts
-import chalk28 from "chalk";
+import chalk27 from "chalk";
 import fs43 from "fs";
 import path45 from "path";
 import os39 from "os";
@@ -21010,14 +20975,14 @@ function registerDlpCommand(program2) {
   cmd.command("resolve").description("Mark all current DLP findings as resolved").action(() => {
     const findings = loadDlpFindings();
     if (findings.length === 0) {
-      console.log(chalk28.green("\n  \u2705 No response-DLP findings to resolve.\n"));
+      console.log(chalk27.green("\n  \u2705 No response-DLP findings to resolve.\n"));
       return;
     }
     const resolved = loadResolved();
     for (const e of findings) resolved.add(entryKey(e));
     saveResolved(resolved);
     console.log(
-      chalk28.green(
+      chalk27.green(
         `
   \u2705 ${findings.length} finding${findings.length !== 1 ? "s" : ""} marked as resolved.
 `
@@ -21031,47 +20996,47 @@ function registerDlpCommand(program2) {
     const resolvedCount = findings.length - open.length;
     console.log("");
     console.log(
-      chalk28.bold.cyan("\u{1F510}  node9 dlp") + chalk28.dim("  \u2014 secrets found in Claude response text")
+      chalk27.bold.cyan("\u{1F510}  node9 dlp") + chalk27.dim("  \u2014 secrets found in Claude response text")
     );
     console.log("");
     if (open.length === 0) {
       if (resolvedCount > 0) {
-        console.log(chalk28.green(`  \u2705 No open findings  \xB7  ${resolvedCount} previously resolved`));
+        console.log(chalk27.green(`  \u2705 No open findings  \xB7  ${resolvedCount} previously resolved`));
       } else {
         console.log(
-          chalk28.green("  \u2705 No findings \u2014 Claude has not leaked secrets in response text")
+          chalk27.green("  \u2705 No findings \u2014 Claude has not leaked secrets in response text")
         );
       }
       console.log("");
       return;
     }
     console.log(
-      chalk28.bgRed.white.bold(` \u26A0\uFE0F  ${open.length} open finding${open.length !== 1 ? "s" : ""} `) + chalk28.dim(resolvedCount > 0 ? `  (${resolvedCount} resolved)` : "")
+      chalk27.bgRed.white.bold(` \u26A0\uFE0F  ${open.length} open finding${open.length !== 1 ? "s" : ""} `) + chalk27.dim(resolvedCount > 0 ? `  (${resolvedCount} resolved)` : "")
     );
     console.log("");
     console.log(
-      chalk28.dim("  These secrets were included in Claude's response text \u2014 NOT blocked.")
+      chalk27.dim("  These secrets were included in Claude's response text \u2014 NOT blocked.")
     );
-    console.log(chalk28.dim("  Rotate each affected key immediately.\n"));
+    console.log(chalk27.dim("  Rotate each affected key immediately.\n"));
     for (const e of open) {
       console.log(
-        "  " + chalk28.red("\u25CF") + "  " + chalk28.white(e.dlpPattern ?? "Secret") + chalk28.dim("  " + fmtDate3(e.ts))
+        "  " + chalk27.red("\u25CF") + "  " + chalk27.white(e.dlpPattern ?? "Secret") + chalk27.dim("  " + fmtDate3(e.ts))
       );
       if (e.dlpSample) {
-        console.log("     " + chalk28.dim("Sample: ") + chalk28.yellow(stripAnsi(e.dlpSample)));
+        console.log("     " + chalk27.dim("Sample: ") + chalk27.yellow(stripAnsi(e.dlpSample)));
       }
       if (e.project) {
-        console.log("     " + chalk28.dim("Project: ") + chalk28.dim(stripAnsi(e.project)));
+        console.log("     " + chalk27.dim("Project: ") + chalk27.dim(stripAnsi(e.project)));
       }
       console.log("");
     }
-    console.log("  " + chalk28.bold("Next steps:"));
-    console.log("  " + chalk28.cyan("1.") + " Rotate any exposed keys shown above");
+    console.log("  " + chalk27.bold("Next steps:"));
+    console.log("  " + chalk27.cyan("1.") + " Rotate any exposed keys shown above");
     console.log(
-      "  " + chalk28.cyan("2.") + " Run " + chalk28.white("node9 dlp resolve") + " to acknowledge"
+      "  " + chalk27.cyan("2.") + " Run " + chalk27.white("node9 dlp resolve") + " to acknowledge"
     );
     console.log(
-      "  " + chalk28.cyan("3.") + " Run " + chalk28.white("node9 report") + " for full audit history"
+      "  " + chalk27.cyan("3.") + " Run " + chalk27.white("node9 report") + " for full audit history"
     );
     console.log("");
   });
@@ -21079,7 +21044,7 @@ function registerDlpCommand(program2) {
 
 // src/cli/commands/mask.ts
 init_dlp();
-import chalk29 from "chalk";
+import chalk28 from "chalk";
 import fs44 from "fs";
 import path46 from "path";
 import os40 from "os";
@@ -21215,12 +21180,12 @@ function registerMaskCommand(program2) {
       }
     }) : allFiles;
     if (filtered.length === 0) {
-      console.log(chalk29.yellow("  No session files found."));
+      console.log(chalk28.yellow("  No session files found."));
       return;
     }
     console.log("");
     if (dryRun) {
-      console.log(chalk29.dim("  Dry run \u2014 no files will be modified.\n"));
+      console.log(chalk28.dim("  Dry run \u2014 no files will be modified.\n"));
     }
     let totalFiles = 0;
     let totalLines = 0;
@@ -21236,23 +21201,23 @@ function registerMaskCommand(program2) {
         });
         const verb = dryRun ? "Would redact" : "Redacted";
         console.log(
-          "  " + chalk29.dim(shortPath.slice(0, 60).padEnd(62)) + chalk29.red(`${verb}: `) + chalk29.yellow(patterns.join(", ")) + chalk29.dim(` (${redactedLines} line${redactedLines !== 1 ? "s" : ""})`)
+          "  " + chalk28.dim(shortPath.slice(0, 60).padEnd(62)) + chalk28.red(`${verb}: `) + chalk28.yellow(patterns.join(", ")) + chalk28.dim(` (${redactedLines} line${redactedLines !== 1 ? "s" : ""})`)
         );
       }
     }
     console.log("");
     if (totalFiles === 0) {
-      console.log(chalk29.green("  No secrets found in session history."));
+      console.log(chalk28.green("  No secrets found in session history."));
     } else {
       const verb = dryRun ? "would be modified" : "modified";
       console.log(
-        chalk29.bold(`  ${totalFiles} file${totalFiles !== 1 ? "s" : ""} ${verb}`) + chalk29.dim(`, ${totalLines} line${totalLines !== 1 ? "s" : ""} redacted`)
+        chalk28.bold(`  ${totalFiles} file${totalFiles !== 1 ? "s" : ""} ${verb}`) + chalk28.dim(`, ${totalLines} line${totalLines !== 1 ? "s" : ""} redacted`)
       );
-      console.log("  Patterns: " + chalk29.yellow(totalPatterns.join(", ")));
+      console.log("  Patterns: " + chalk28.yellow(totalPatterns.join(", ")));
       if (!dryRun) {
         console.log("");
         console.log(
-          chalk29.dim(
+          chalk28.dim(
             "  Note: secrets were already sent to the AI provider during the active session.\n        This cleans your local disk only. Rotate any exposed keys."
           )
         );
@@ -21316,17 +21281,17 @@ program.command("login").argument("<apiKey>").option("--local", "Save key for au
     fs47.writeFileSync(configPath, JSON.stringify(config, null, 2), { mode: 384 });
   }
   if (options.profile && profileName !== "default") {
-    console.log(chalk31.green(`\u2705 Profile "${profileName}" saved`));
-    console.log(chalk31.gray(`   Switch to it per-session:  NODE9_PROFILE=${profileName} claude`));
+    console.log(chalk30.green(`\u2705 Profile "${profileName}" saved`));
+    console.log(chalk30.gray(`   Switch to it per-session:  NODE9_PROFILE=${profileName} claude`));
   } else if (options.local) {
-    console.log(chalk31.green(`\u2705 Privacy mode \u{1F6E1}\uFE0F`));
-    console.log(chalk31.gray(`   All decisions stay on this machine.`));
+    console.log(chalk30.green(`\u2705 Privacy mode \u{1F6E1}\uFE0F`));
+    console.log(chalk30.gray(`   All decisions stay on this machine.`));
   } else {
-    console.log(chalk31.green(`\u2705 Logged in \u2014 agent mode`));
-    console.log(chalk31.gray(`   Team policy enforced for all calls via Node9 cloud.`));
+    console.log(chalk30.green(`\u2705 Logged in \u2014 agent mode`));
+    console.log(chalk30.gray(`   Team policy enforced for all calls via Node9 cloud.`));
   }
 });
-program.command("addto").description("Integrate Node9 with an AI agent").addHelpText(
+program.command("addto", { hidden: true }).description("Integrate Node9 with an AI agent").addHelpText(
   "after",
   "\n  Supported targets:  claude  gemini  cursor  codex  windsurf  vscode  hud"
 ).argument(
@@ -21341,13 +21306,13 @@ program.command("addto").description("Integrate Node9 with an AI agent").addHelp
   if (target === "vscode") return await setupVSCode();
   if (target === "hud") return setupHud();
   console.error(
-    chalk31.red(
+    chalk30.red(
       `Unknown target: "${target}". Supported: claude, gemini, cursor, codex, windsurf, vscode, hud`
     )
   );
   process.exit(1);
 });
-program.command("setup").description('Alias for "addto" \u2014 integrate Node9 with an AI agent').addHelpText(
+program.command("setup", { hidden: true }).description('Alias for "addto" \u2014 integrate Node9 with an AI agent').addHelpText(
   "after",
   "\n  Supported targets:  claude  gemini  cursor  codex  windsurf  vscode  hud"
 ).argument(
@@ -21355,17 +21320,17 @@ program.command("setup").description('Alias for "addto" \u2014 integrate Node9 w
   "The agent to protect: claude | gemini | cursor | codex | windsurf | vscode | hud"
 ).action(async (target) => {
   if (!target) {
-    console.log(chalk31.cyan("\n\u{1F6E1}\uFE0F  Node9 Setup \u2014 integrate with your AI agent\n"));
-    console.log("  Usage:  " + chalk31.white("node9 setup <target>") + "\n");
+    console.log(chalk30.cyan("\n\u{1F6E1}\uFE0F  Node9 Setup \u2014 integrate with your AI agent\n"));
+    console.log("  Usage:  " + chalk30.white("node9 setup <target>") + "\n");
     console.log("  Targets:");
-    console.log("    " + chalk31.green("claude") + "    \u2014 Claude Code (hook mode)");
-    console.log("    " + chalk31.green("gemini") + "    \u2014 Gemini CLI (hook mode)");
-    console.log("    " + chalk31.green("cursor") + "    \u2014 Cursor (MCP proxy)");
-    console.log("    " + chalk31.green("codex") + "     \u2014 OpenAI Codex CLI (MCP proxy)");
-    console.log("    " + chalk31.green("windsurf") + "  \u2014 Windsurf (MCP proxy)");
-    console.log("    " + chalk31.green("vscode") + "    \u2014 VSCode / Copilot (MCP proxy)");
+    console.log("    " + chalk30.green("claude") + "    \u2014 Claude Code (hook mode)");
+    console.log("    " + chalk30.green("gemini") + "    \u2014 Gemini CLI (hook mode)");
+    console.log("    " + chalk30.green("cursor") + "    \u2014 Cursor (MCP proxy)");
+    console.log("    " + chalk30.green("codex") + "     \u2014 OpenAI Codex CLI (MCP proxy)");
+    console.log("    " + chalk30.green("windsurf") + "  \u2014 Windsurf (MCP proxy)");
+    console.log("    " + chalk30.green("vscode") + "    \u2014 VSCode / Copilot (MCP proxy)");
     process.stdout.write(
-      "    " + chalk31.green("hud") + "       \u2014 Claude Code security statusline\n"
+      "    " + chalk30.green("hud") + "       \u2014 Claude Code security statusline\n"
     );
     console.log("");
     return;
@@ -21379,13 +21344,13 @@ program.command("setup").description('Alias for "addto" \u2014 integrate Node9 w
   if (t === "vscode") return await setupVSCode();
   if (t === "hud") return setupHud();
   console.error(
-    chalk31.red(
+    chalk30.red(
       `Unknown target: "${target}". Supported: claude, gemini, cursor, codex, windsurf, vscode, hud`
     )
   );
   process.exit(1);
 });
-program.command("removefrom").description("Remove Node9 hooks from an AI agent configuration").addHelpText(
+program.command("removefrom", { hidden: true }).description("Remove Node9 hooks from an AI agent configuration").addHelpText(
   "after",
   "\n  Supported targets:  claude  gemini  cursor  codex  windsurf  vscode  hud"
 ).argument(
@@ -21402,33 +21367,33 @@ program.command("removefrom").description("Remove Node9 hooks from an AI agent c
   else if (target === "hud") fn = teardownHud;
   else {
     console.error(
-      chalk31.red(
+      chalk30.red(
         `Unknown target: "${target}". Supported: claude, gemini, cursor, codex, windsurf, vscode, hud`
       )
     );
     process.exit(1);
   }
-  console.log(chalk31.cyan(`
+  console.log(chalk30.cyan(`
 \u{1F6E1}\uFE0F  Node9: removing hooks from ${target}...
 `));
   try {
     fn();
   } catch (err2) {
-    console.error(chalk31.red(`  \u26A0\uFE0F  Failed: ${err2 instanceof Error ? err2.message : String(err2)}`));
+    console.error(chalk30.red(`  \u26A0\uFE0F  Failed: ${err2 instanceof Error ? err2.message : String(err2)}`));
     process.exit(1);
   }
-  console.log(chalk31.gray("\n  Restart the agent for changes to take effect."));
+  console.log(chalk30.gray("\n  Restart the agent for changes to take effect."));
 });
 program.command("uninstall").description("Remove all Node9 hooks and optionally delete config files").option("--purge", "Also delete ~/.node9/ directory (config, audit log, credentials)").action(async (options) => {
-  console.log(chalk31.cyan("\n\u{1F6E1}\uFE0F  Node9 Uninstall\n"));
-  console.log(chalk31.bold("Stopping daemon..."));
+  console.log(chalk30.cyan("\n\u{1F6E1}\uFE0F  Node9 Uninstall\n"));
+  console.log(chalk30.bold("Stopping daemon..."));
   try {
     stopDaemon();
-    console.log(chalk31.green("  \u2705 Daemon stopped"));
+    console.log(chalk30.green("  \u2705 Daemon stopped"));
   } catch {
-    console.log(chalk31.blue("  \u2139\uFE0F  Daemon was not running"));
+    console.log(chalk30.blue("  \u2139\uFE0F  Daemon was not running"));
   }
-  console.log(chalk31.bold("\nRemoving hooks..."));
+  console.log(chalk30.bold("\nRemoving hooks..."));
   let teardownFailed = false;
   for (const [label, fn] of [
     ["Claude", teardownClaude],
@@ -21443,7 +21408,7 @@ program.command("uninstall").description("Remove all Node9 hooks and optionally
     } catch (err2) {
       teardownFailed = true;
       console.error(
-        chalk31.red(
+        chalk30.red(
           `  \u26A0\uFE0F  Failed to remove ${label} hooks: ${err2 instanceof Error ? err2.message : String(err2)}`
         )
       );
@@ -21460,28 +21425,28 @@ program.command("uninstall").description("Remove all Node9 hooks and optionally
         fs47.rmSync(node9Dir, { recursive: true });
         if (fs47.existsSync(node9Dir)) {
           console.error(
-            chalk31.red("\n  \u26A0\uFE0F  ~/.node9/ could not be fully deleted \u2014 remove it manually.")
+            chalk30.red("\n  \u26A0\uFE0F  ~/.node9/ could not be fully deleted \u2014 remove it manually.")
           );
         } else {
-          console.log(chalk31.green("\n  \u2705 Deleted ~/.node9/ (config, audit log, credentials)"));
+          console.log(chalk30.green("\n  \u2705 Deleted ~/.node9/ (config, audit log, credentials)"));
         }
       } else {
-        console.log(chalk31.yellow("\n  Skipped \u2014 ~/.node9/ was not deleted."));
+        console.log(chalk30.yellow("\n  Skipped \u2014 ~/.node9/ was not deleted."));
       }
     } else {
-      console.log(chalk31.blue("\n  \u2139\uFE0F  ~/.node9/ not found \u2014 nothing to delete"));
+      console.log(chalk30.blue("\n  \u2139\uFE0F  ~/.node9/ not found \u2014 nothing to delete"));
     }
   } else {
     console.log(
-      chalk31.gray("\n  ~/.node9/ kept \u2014 run with --purge to delete config and audit log")
+      chalk30.gray("\n  ~/.node9/ kept \u2014 run with --purge to delete config and audit log")
     );
   }
   if (teardownFailed) {
-    console.error(chalk31.red("\n  \u26A0\uFE0F  Some hooks could not be removed \u2014 see errors above."));
+    console.error(chalk30.red("\n  \u26A0\uFE0F  Some hooks could not be removed \u2014 see errors above."));
     process.exit(1);
   }
-  console.log(chalk31.green.bold("\n\u{1F6E1}\uFE0F  Node9 removed. Run: npm uninstall -g @node9/proxy"));
-  console.log(chalk31.gray("   Restart any open AI agent sessions for changes to take effect.\n"));
+  console.log(chalk30.green.bold("\n\u{1F6E1}\uFE0F  Node9 removed. Run: npm uninstall -g @node9/proxy"));
+  console.log(chalk30.gray("   Restart any open AI agent sessions for changes to take effect.\n"));
 });
 registerDoctorCommand(program, version);
 program.command("explain").description(
@@ -21494,7 +21459,7 @@ program.command("explain").description(
       try {
         args = JSON.parse(trimmed);
       } catch {
-        console.error(chalk31.red(`
+        console.error(chalk30.red(`
 \u274C Invalid JSON: ${trimmed}
 `));
         process.exit(1);
@@ -21505,54 +21470,54 @@ program.command("explain").description(
   }
   const result = await explainPolicy(tool, args);
   console.log("");
-  console.log(chalk31.cyan.bold("\u{1F6E1}\uFE0F  Node9 Explain"));
+  console.log(chalk30.cyan.bold("\u{1F6E1}\uFE0F  Node9 Explain"));
   console.log("");
-  console.log(`   ${chalk31.bold("Tool:")}    ${chalk31.white(result.tool)}`);
+  console.log(`   ${chalk30.bold("Tool:")}    ${chalk30.white(result.tool)}`);
   if (argsRaw) {
     const preview2 = argsRaw.length > 80 ? argsRaw.slice(0, 77) + "\u2026" : argsRaw;
-    console.log(`   ${chalk31.bold("Input:")}   ${chalk31.gray(preview2)}`);
+    console.log(`   ${chalk30.bold("Input:")}   ${chalk30.gray(preview2)}`);
   }
   console.log("");
-  console.log(chalk31.bold("Config Sources (Waterfall):"));
+  console.log(chalk30.bold("Config Sources (Waterfall):"));
   for (const tier of result.waterfall) {
-    const num3 = chalk31.gray(`  ${tier.tier}.`);
+    const num3 = chalk30.gray(`  ${tier.tier}.`);
     const label = tier.label.padEnd(16);
     let statusStr;
     if (tier.tier === 1) {
-      statusStr = chalk31.gray(tier.note ?? "");
+      statusStr = chalk30.gray(tier.note ?? "");
     } else if (tier.status === "active") {
-      const loc = tier.path ? chalk31.gray(tier.path) : "";
-      const note = tier.note ? chalk31.gray(`(${tier.note})`) : "";
-      statusStr = chalk31.green("\u2713 active") + (loc ? "  " + loc : "") + (note ? "  " + note : "");
+      const loc = tier.path ? chalk30.gray(tier.path) : "";
+      const note = tier.note ? chalk30.gray(`(${tier.note})`) : "";
+      statusStr = chalk30.green("\u2713 active") + (loc ? "  " + loc : "") + (note ? "  " + note : "");
     } else {
-      statusStr = chalk31.gray("\u25CB " + (tier.note ?? "not found"));
+      statusStr = chalk30.gray("\u25CB " + (tier.note ?? "not found"));
     }
-    console.log(`${num3} ${chalk31.white(label)} ${statusStr}`);
+    console.log(`${num3} ${chalk30.white(label)} ${statusStr}`);
   }
   console.log("");
-  console.log(chalk31.bold("Policy Evaluation:"));
+  console.log(chalk30.bold("Policy Evaluation:"));
   for (const step of result.steps) {
     const isFinal = step.isFinal;
     let icon;
-    if (step.outcome === "allow") icon = chalk31.green("  \u2705");
-    else if (step.outcome === "review") icon = chalk31.red("  \u{1F534}");
-    else if (step.outcome === "skip") icon = chalk31.gray("  \u2500 ");
-    else icon = chalk31.gray("  \u25CB ");
+    if (step.outcome === "allow") icon = chalk30.green("  \u2705");
+    else if (step.outcome === "review") icon = chalk30.red("  \u{1F534}");
+    else if (step.outcome === "skip") icon = chalk30.gray("  \u2500 ");
+    else icon = chalk30.gray("  \u25CB ");
     const name = step.name.padEnd(18);
-    const nameStr = isFinal ? chalk31.white.bold(name) : chalk31.white(name);
-    const detail = isFinal ? chalk31.white(step.detail) : chalk31.gray(step.detail);
-    const arrow = isFinal ? chalk31.yellow("  \u2190 STOP") : "";
+    const nameStr = isFinal ? chalk30.white.bold(name) : chalk30.white(name);
+    const detail = isFinal ? chalk30.white(step.detail) : chalk30.gray(step.detail);
+    const arrow = isFinal ? chalk30.yellow("  \u2190 STOP") : "";
     console.log(`${icon} ${nameStr} ${detail}${arrow}`);
   }
   console.log("");
   if (result.decision === "allow") {
-    console.log(chalk31.green.bold("  Decision: \u2705 ALLOW") + chalk31.gray("  \u2014 no approval needed"));
+    console.log(chalk30.green.bold("  Decision: \u2705 ALLOW") + chalk30.gray("  \u2014 no approval needed"));
   } else {
     console.log(
-      chalk31.red.bold("  Decision: \u{1F534} REVIEW") + chalk31.gray("  \u2014 human approval required")
+      chalk30.red.bold("  Decision: \u{1F534} REVIEW") + chalk30.gray("  \u2014 human approval required")
     );
     if (result.blockedByLabel) {
-      console.log(chalk31.gray(`  Reason:   ${result.blockedByLabel}`));
+      console.log(chalk30.gray(`  Reason:   ${result.blockedByLabel}`));
     }
   }
   console.log("");
@@ -21567,7 +21532,7 @@ program.command("tail").description("Stream live agent activity to the terminal"
   try {
     await startTail2(options);
   } catch (err2) {
-    console.error(chalk31.red(`\u274C ${err2 instanceof Error ? err2.message : String(err2)}`));
+    console.error(chalk30.red(`\u274C ${err2 instanceof Error ? err2.message : String(err2)}`));
     process.exit(1);
   }
 });
@@ -21578,11 +21543,10 @@ program.command("monitor").description("Live interactive dashboard \u2014 activi
     const mod = await dynamicImport(`file://${dashboardPath}`);
     await mod.startMonitor();
   } catch (err2) {
-    console.error(chalk31.red(`\u274C ${err2 instanceof Error ? err2.message : String(err2)}`));
+    console.error(chalk30.red(`\u274C ${err2 instanceof Error ? err2.message : String(err2)}`));
     process.exit(1);
   }
 });
-registerWatchCommand(program);
 registerMcpGatewayCommand(program);
 registerMcpServerCommand(program);
 registerMcpPinCommand(program);
@@ -21590,7 +21554,7 @@ registerSkillPinCommand(program);
 registerDecisionsCommand(program);
 registerCheckCommand(program);
 registerLogCommand(program);
-program.command("hud").description("Render node9 security statusline (spawned by Claude Code statusLine)").addHelpText(
+program.command("hud", { hidden: true }).description("Render node9 security statusline (spawned by Claude Code statusLine)").addHelpText(
   "after",
   `
 Outputs up to 3 lines to stdout, then exits:
@@ -21634,7 +21598,7 @@ program.command("pause").description("Temporarily disable Node9 protection for a
   const ms = parseDuration(options.duration);
   if (ms === null) {
     console.error(
-      chalk31.red(`
+      chalk30.red(`
 \u274C  Invalid duration: "${options.duration}". Use format like 15m, 1h, 30s.
 `)
     );
@@ -21642,20 +21606,20 @@ program.command("pause").description("Temporarily disable Node9 protection for a
   }
   pauseNode9(ms, options.duration);
   const expiresAt = new Date(Date.now() + ms).toLocaleTimeString();
-  console.log(chalk31.yellow(`
+  console.log(chalk30.yellow(`
 \u23F8  Node9 paused until ${expiresAt}`));
-  console.log(chalk31.gray(`   All tool calls will be allowed without review.`));
-  console.log(chalk31.gray(`   Run "node9 resume" to re-enable early.
+  console.log(chalk30.gray(`   All tool calls will be allowed without review.`));
+  console.log(chalk30.gray(`   Run "node9 resume" to re-enable early.
 `));
 });
 program.command("resume").description("Re-enable Node9 protection immediately").action(() => {
   const { paused } = checkPause();
   if (!paused) {
-    console.log(chalk31.gray("\nNode9 is already active \u2014 nothing to resume.\n"));
+    console.log(chalk30.gray("\nNode9 is already active \u2014 nothing to resume.\n"));
     return;
   }
   resumeNode9();
-  console.log(chalk31.green("\n\u25B6  Node9 resumed \u2014 protection is active.\n"));
+  console.log(chalk30.green("\n\u25B6  Node9 resumed \u2014 protection is active.\n"));
 });
 var HOOK_BASED_AGENTS = {
   claude: "claude",
@@ -21668,15 +21632,15 @@ program.argument("[command...]", "The agent command to run (e.g., gemini)").acti
     if (HOOK_BASED_AGENTS[firstArg2] !== void 0) {
       const target = HOOK_BASED_AGENTS[firstArg2];
       console.error(
-        chalk31.yellow(`
+        chalk30.yellow(`
 \u26A0\uFE0F  Node9 proxy mode does not support "${target}" directly.`)
       );
-      console.error(chalk31.white(`
+      console.error(chalk30.white(`
    "${target}" uses its own hook system. Use:`));
       console.error(
-        chalk31.green(`     node9 addto ${target}   `) + chalk31.gray("# one-time setup")
+        chalk30.green(`     node9 addto ${target}   `) + chalk30.gray("# one-time setup")
       );
-      console.error(chalk31.green(`     ${target}              `) + chalk31.gray("# run normally"));
+      console.error(chalk30.green(`     ${target}              `) + chalk30.gray("# run normally"));
       process.exit(1);
     }
     const runArgs = firstArg2 === "shell" ? commandArgs.slice(1) : commandArgs;
@@ -21693,7 +21657,7 @@ program.argument("[command...]", "The agent command to run (e.g., gemini)").acti
       }
     );
     if (result.noApprovalMechanism && !isDaemonRunning() && !process.env.NODE9_NO_AUTO_DAEMON && getConfig().settings.autoStartDaemon) {
-      console.error(chalk31.cyan("\n\u{1F6E1}\uFE0F  Node9: Starting approval daemon automatically..."));
+      console.error(chalk30.cyan("\n\u{1F6E1}\uFE0F  Node9: Starting approval daemon automatically..."));
       const daemonReady = await autoStartDaemonAndWait();
       if (daemonReady) result = await authorizeHeadless("shell", { command: fullCommand });
     }
@@ -21706,12 +21670,12 @@ program.argument("[command...]", "The agent command to run (e.g., gemini)").acti
     }
     if (!result.approved) {
       console.error(
-        chalk31.red(`
+        chalk30.red(`
 \u274C Node9 Blocked: ${result.reason || "Dangerous command detected."}`)
       );
       process.exit(1);
     }
-    console.error(chalk31.green("\n\u2705 Approved \u2014 running command...\n"));
+    console.error(chalk30.green("\n\u2705 Approved \u2014 running command...\n"));
     await runProxy(fullCommand);
   } else {
     program.help();