@node9/proxy 1.27.1 → 1.29.0

package/dist/cli.mjs

@@ -100,9 +100,11 @@ function appendLocalAudit(toolName, args, decision, checkedBy, meta, auditHashAr
   const argsField = auditHashArgsEnabled ? { argsHash: hashArgs(args) } : { args: args ? JSON.parse(redactSecrets(JSON.stringify(args))) : {} };
   const testRun = isTestCall(toolName, args) || process.env.NODE9_TESTING === "1" ? { testRun: true } : {};
   const ruleNameField = meta?.ruleName ? { ruleName: meta.ruleName } : {};
+  const agentToolNameField = meta?.agentToolName ? { agentToolName: meta.agentToolName } : {};
   appendToLog(LOCAL_AUDIT_LOG, {
     ts: (/* @__PURE__ */ new Date()).toISOString(),
     tool: toolName,
+    ...agentToolNameField,
     ...argsField,
     decision,
     checkedBy,
@@ -3923,7 +3925,14 @@ var init_config = __esm({
             "edit_file",
             "create_file",
             "edit",
-            "replace"
+            "replace",
+            // Claude / canonicalised Hermes — shouldSnapshot lowercases the
+            // incoming name before set-membership, so we list the lowercase
+            // forms of `Bash`/`Write`/`Edit`/`MultiEdit`. Without these,
+            // post-canonicalisation Hermes `patch` / `write_file` (which now
+            // arrive as `Edit` / `Write`) silently skipped snapshotting.
+            "write",
+            "multiedit"
           ],
           onlyPaths: [],
           ignorePaths: ["**/node_modules/**", "dist/**", "build/**", ".next/**", "**/*.log"]
@@ -6823,6 +6832,7 @@ import os12 from "os";
 import chalk from "chalk";
 import { confirm } from "@inquirer/prompts";
 import { parse as parseToml, stringify as stringifyToml } from "smol-toml";
+import * as yaml from "yaml";
 function hasNode9McpServer(servers) {
   const entry = servers["node9"];
   return !!entry && entry.command === "node9" && Array.isArray(entry.args) && entry.args[0] === "mcp-server";
@@ -7162,6 +7172,12 @@ async function setupClaude() {
   }
 }
 async function setupGemini() {
+  console.log(
+    chalk.yellow(
+      "  \u26A0\uFE0F  Gemini CLI stops serving AI Pro/Ultra and free tiers on 2026-06-18\n     (replaced by Antigravity). If you use agy, run: node9 agents add antigravity"
+    )
+  );
+  console.log("");
   seedMcpPinsIfMissing();
   const homeDir2 = os12.homedir();
   const settingsPath = path15.join(homeDir2, ".gemini", "settings.json");
@@ -7259,6 +7275,355 @@ async function setupGemini() {
     printDaemonTip();
   }
 }
+async function setupAntigravity() {
+  seedMcpPinsIfMissing();
+  const homeDir2 = os12.homedir();
+  const hooksPath = path15.join(homeDir2, ".gemini", "config", "hooks.json");
+  const mcpPath = path15.join(homeDir2, ".gemini", "config", "mcp_config.json");
+  const hooksFile = readJson(hooksPath) ?? {};
+  const mcpConfig = readJson(mcpPath) ?? {};
+  const servers = mcpConfig.mcpServers ?? {};
+  let hooksChanged = false;
+  let anythingChanged = false;
+  if (!hooksFile.hooks) hooksFile.hooks = {};
+  const hasPreHook = hooksFile.hooks.PreToolUse?.some(
+    (m) => m.hooks.some((h) => isNode9Hook(h.command))
+  );
+  if (!hasPreHook) {
+    if (!Array.isArray(hooksFile.hooks.PreToolUse)) hooksFile.hooks.PreToolUse = [];
+    hooksFile.hooks.PreToolUse.push({
+      matcher: ".*",
+      hooks: [
+        {
+          name: "node9-check",
+          type: "command",
+          command: fullPathCommand("check --agent antigravity"),
+          timeout: 600
+        }
+      ]
+    });
+    console.log(chalk.green("  \u2705 PreToolUse hook added  \u2192 node9 check"));
+    hooksChanged = true;
+    anythingChanged = true;
+  } else if (hooksFile.hooks.PreToolUse) {
+    for (const matcher of hooksFile.hooks.PreToolUse) {
+      for (const h of matcher.hooks) {
+        const cmd = h.command ?? "";
+        if (isNode9Hook(cmd) && needsRewrite(cmd)) {
+          h.command = fullPathCommand("check --agent antigravity");
+          console.log(chalk.yellow("  \u{1F527} PreToolUse hook repaired (stale path \u2192 current binary)"));
+          hooksChanged = true;
+          anythingChanged = true;
+        }
+      }
+    }
+  }
+  const hasPostHook = hooksFile.hooks.PostToolUse?.some(
+    (m) => m.hooks.some((h) => isNode9Hook(h.command))
+  );
+  if (!hasPostHook) {
+    if (!Array.isArray(hooksFile.hooks.PostToolUse)) hooksFile.hooks.PostToolUse = [];
+    hooksFile.hooks.PostToolUse.push({
+      matcher: ".*",
+      hooks: [
+        {
+          name: "node9-log",
+          type: "command",
+          command: fullPathCommand("log --agent antigravity"),
+          timeout: 600
+        }
+      ]
+    });
+    console.log(chalk.green("  \u2705 PostToolUse hook added \u2192 node9 log"));
+    hooksChanged = true;
+    anythingChanged = true;
+  } else if (hooksFile.hooks.PostToolUse) {
+    for (const matcher of hooksFile.hooks.PostToolUse) {
+      for (const h of matcher.hooks) {
+        const cmd = h.command ?? "";
+        if (isNode9Hook(cmd) && needsRewrite(cmd)) {
+          h.command = fullPathCommand("log --agent antigravity");
+          console.log(chalk.yellow("  \u{1F527} PostToolUse hook repaired (stale path \u2192 current binary)"));
+          hooksChanged = true;
+          anythingChanged = true;
+        }
+      }
+    }
+  }
+  if (hooksChanged) {
+    writeJson(hooksPath, hooksFile);
+    console.log("");
+  }
+  if (!hasNode9McpServer(servers)) {
+    servers["node9"] = NODE9_MCP_SERVER_ENTRY;
+    mcpConfig.mcpServers = servers;
+    writeJson(mcpPath, mcpConfig);
+    console.log(chalk.green("  \u2705 node9 MCP server added   \u2192 node9 mcp-server"));
+    anythingChanged = true;
+  }
+  const legacySettings = readJson(path15.join(homeDir2, ".gemini", "settings.json"));
+  const legacyHasNode9 = ["BeforeTool", "AfterTool"].some(
+    (ev) => legacySettings?.hooks?.[ev]?.some((m) => m.hooks.some((h) => isNode9Hook(h.command)))
+  );
+  if (legacyHasNode9) {
+    console.log(
+      chalk.yellow(
+        "  \u26A0\uFE0F  Found node9 hooks for the legacy Gemini CLI in ~/.gemini/settings.json.\n     Gemini CLI stops serving AI Pro/Ultra and free tiers on 2026-06-18.\n     Keep them only if you still use Gemini CLI (e.g. enterprise Code Assist)."
+      )
+    );
+    const clean = await confirm({
+      message: "Remove the legacy Gemini CLI hooks?",
+      default: false
+    });
+    if (clean) {
+      teardownGemini();
+      anythingChanged = true;
+    }
+    console.log("");
+  }
+  const serversToWrap = [];
+  for (const [name, server] of Object.entries(servers)) {
+    if (!server.command || server.command === "node9") continue;
+    serversToWrap.push({ name, upstream: [server.command, ...server.args ?? []].join(" ") });
+  }
+  if (serversToWrap.length > 0) {
+    console.log(chalk.bold("The following existing entries will be modified:\n"));
+    console.log(chalk.white(`  ${mcpPath}`));
+    for (const { name, upstream } of serversToWrap) {
+      console.log(chalk.gray(`    \u2022 ${name}: "${upstream}" \u2192 node9 mcp --upstream "${upstream}"`));
+    }
+    console.log("");
+    const proceed = await confirm({ message: "Wrap these MCP servers?", default: true });
+    if (proceed) {
+      for (const { name, upstream } of serversToWrap) {
+        servers[name] = {
+          ...servers[name],
+          command: "node9",
+          args: ["mcp", "--upstream", upstream]
+        };
+      }
+      mcpConfig.mcpServers = servers;
+      writeJson(mcpPath, mcpConfig);
+      console.log(chalk.green(`
+  \u2705 ${serversToWrap.length} MCP server(s) wrapped`));
+      anythingChanged = true;
+    } else {
+      console.log(chalk.yellow("  Skipped MCP server wrapping."));
+    }
+    console.log("");
+  }
+  if (!anythingChanged && serversToWrap.length === 0) {
+    console.log(chalk.blue("\u2139\uFE0F  Node9 is already fully configured for Antigravity."));
+    printDaemonTip();
+    return;
+  }
+  if (anythingChanged) {
+    console.log(chalk.green.bold("\u{1F6E1}\uFE0F  Node9 is now protecting Antigravity!"));
+    console.log(
+      chalk.gray(
+        "    Covers both the agy CLI and the Antigravity IDE (shared ~/.gemini/config).\n    Restart agy / the IDE for changes to take effect."
+      )
+    );
+    printDaemonTip();
+  }
+}
+function teardownAntigravity() {
+  const homeDir2 = os12.homedir();
+  const hooksPath = path15.join(homeDir2, ".gemini", "config", "hooks.json");
+  const mcpPath = path15.join(homeDir2, ".gemini", "config", "mcp_config.json");
+  let changed = false;
+  const hooksFile = readJson(hooksPath);
+  if (hooksFile?.hooks) {
+    for (const event of ["PreToolUse", "PostToolUse"]) {
+      const before = hooksFile.hooks[event]?.length ?? 0;
+      hooksFile.hooks[event] = hooksFile.hooks[event]?.filter(
+        (m) => !m.hooks.some((h) => isNode9Hook(h.command))
+      );
+      if ((hooksFile.hooks[event]?.length ?? 0) < before) changed = true;
+      if (hooksFile.hooks[event]?.length === 0) delete hooksFile.hooks[event];
+    }
+    if (changed) {
+      writeJson(hooksPath, hooksFile);
+      console.log(
+        chalk.green("  \u2705 Removed PreToolUse / PostToolUse hooks from ~/.gemini/config/hooks.json")
+      );
+    } else {
+      console.log(chalk.blue("  \u2139\uFE0F  No Node9 hooks found in ~/.gemini/config/hooks.json"));
+    }
+  } else {
+    console.log(chalk.blue("  \u2139\uFE0F  ~/.gemini/config/hooks.json not found \u2014 nothing to remove"));
+  }
+  const mcpConfig = readJson(mcpPath);
+  if (mcpConfig?.mcpServers) {
+    let mcpChanged = false;
+    if (removeNode9McpServer(mcpConfig.mcpServers)) {
+      mcpChanged = true;
+      console.log(
+        chalk.green("  \u2705 Removed node9 MCP server entry from ~/.gemini/config/mcp_config.json")
+      );
+    }
+    for (const [name, server] of Object.entries(mcpConfig.mcpServers)) {
+      const args = server.args;
+      if (server.command === "node9" && Array.isArray(args) && args[0] === "mcp" && args[1] === "--upstream" && typeof args[2] === "string") {
+        const [originalCmd, ...originalArgs] = args[2].split(" ");
+        mcpConfig.mcpServers[name] = {
+          ...server,
+          command: originalCmd,
+          args: originalArgs.length ? originalArgs : void 0
+        };
+        mcpChanged = true;
+      }
+    }
+    if (mcpChanged) {
+      writeJson(mcpPath, mcpConfig);
+      console.log(chalk.green("  \u2705 Unwrapped MCP servers in ~/.gemini/config/mcp_config.json"));
+    }
+  }
+}
+async function setupCopilot() {
+  seedMcpPinsIfMissing();
+  const homeDir2 = os12.homedir();
+  const hooksPath = path15.join(homeDir2, ".copilot", "hooks", "node9.json");
+  const mcpPath = path15.join(homeDir2, ".copilot", "mcp-config.json");
+  const hooksFile = readJson(hooksPath) ?? { version: 1 };
+  if (!hooksFile.version) hooksFile.version = 1;
+  if (!hooksFile.hooks) hooksFile.hooks = {};
+  const mcpConfig = readJson(mcpPath) ?? {};
+  const servers = mcpConfig.mcpServers ?? {};
+  let hooksChanged = false;
+  let anythingChanged = false;
+  const addHook = (event, subcommand) => {
+    const arr = Array.isArray(hooksFile.hooks[event]) ? hooksFile.hooks[event] : [];
+    const present = arr.some((h) => isNode9Hook(h.command));
+    if (!present) {
+      arr.push({ type: "command", command: fullPathCommand(subcommand), timeoutSec: 600 });
+      hooksFile.hooks[event] = arr;
+      console.log(chalk.green(`  \u2705 ${event} hook added  \u2192 node9 ${subcommand.split(" ")[0]}`));
+      hooksChanged = true;
+      anythingChanged = true;
+    } else {
+      for (const h of arr) {
+        if (h.command && isNode9Hook(h.command) && needsRewrite(h.command)) {
+          h.command = fullPathCommand(subcommand);
+          console.log(chalk.yellow(`  \u{1F527} ${event} hook repaired (stale path \u2192 current binary)`));
+          hooksChanged = true;
+          anythingChanged = true;
+        }
+      }
+    }
+  };
+  addHook("PreToolUse", "check --agent copilot");
+  addHook("PostToolUse", "log --agent copilot");
+  addHook("UserPromptSubmit", "check --agent copilot");
+  if (hooksChanged) {
+    writeJson(hooksPath, hooksFile);
+    console.log("");
+  }
+  if (!hasNode9McpServer(servers)) {
+    servers["node9"] = NODE9_MCP_SERVER_ENTRY;
+    mcpConfig.mcpServers = servers;
+    writeJson(mcpPath, mcpConfig);
+    console.log(chalk.green("  \u2705 node9 MCP server added   \u2192 node9 mcp-server"));
+    anythingChanged = true;
+  }
+  const serversToWrap = [];
+  for (const [name, server] of Object.entries(servers)) {
+    if (!server.command || server.command === "node9") continue;
+    serversToWrap.push({ name, upstream: [server.command, ...server.args ?? []].join(" ") });
+  }
+  if (serversToWrap.length > 0) {
+    console.log(chalk.bold("The following existing entries will be modified:\n"));
+    console.log(chalk.white(`  ${mcpPath}`));
+    for (const { name, upstream } of serversToWrap) {
+      console.log(chalk.gray(`    \u2022 ${name}: "${upstream}" \u2192 node9 mcp --upstream "${upstream}"`));
+    }
+    console.log("");
+    const proceed = await confirm({ message: "Wrap these MCP servers?", default: true });
+    if (proceed) {
+      for (const { name, upstream } of serversToWrap) {
+        servers[name] = {
+          ...servers[name],
+          command: "node9",
+          args: ["mcp", "--upstream", upstream]
+        };
+      }
+      mcpConfig.mcpServers = servers;
+      writeJson(mcpPath, mcpConfig);
+      console.log(chalk.green(`
+  \u2705 ${serversToWrap.length} MCP server(s) wrapped`));
+      anythingChanged = true;
+    } else {
+      console.log(chalk.yellow("  Skipped MCP server wrapping."));
+    }
+    console.log("");
+  }
+  if (!anythingChanged) {
+    console.log(chalk.blue("\u2139\uFE0F  Node9 is already fully configured for GitHub Copilot CLI."));
+    printDaemonTip();
+    return;
+  }
+  console.log(chalk.green.bold("\u{1F6E1}\uFE0F  Node9 is now protecting GitHub Copilot CLI!"));
+  console.log(chalk.gray("    Restart Copilot CLI for changes to take effect."));
+  printDaemonTip();
+}
+function teardownCopilot() {
+  const homeDir2 = os12.homedir();
+  const hooksPath = path15.join(homeDir2, ".copilot", "hooks", "node9.json");
+  const mcpPath = path15.join(homeDir2, ".copilot", "mcp-config.json");
+  const hooksFile = readJson(hooksPath);
+  let changed = false;
+  if (hooksFile?.hooks) {
+    for (const event of ["PreToolUse", "PostToolUse", "UserPromptSubmit"]) {
+      const before = hooksFile.hooks[event]?.length ?? 0;
+      hooksFile.hooks[event] = hooksFile.hooks[event]?.filter((h) => !isNode9Hook(h.command));
+      if ((hooksFile.hooks[event]?.length ?? 0) < before) changed = true;
+      if (hooksFile.hooks[event]?.length === 0) delete hooksFile.hooks[event];
+    }
+    if (changed) {
+      if (Object.keys(hooksFile.hooks).length === 0) {
+        try {
+          fs13.unlinkSync(hooksPath);
+          console.log(chalk.green("  \u2705 Removed ~/.copilot/hooks/node9.json"));
+        } catch {
+          writeJson(hooksPath, hooksFile);
+        }
+      } else {
+        writeJson(hooksPath, hooksFile);
+        console.log(chalk.green("  \u2705 Removed Node9 hooks from ~/.copilot/hooks/node9.json"));
+      }
+    } else {
+      console.log(chalk.blue("  \u2139\uFE0F  No Node9 hooks found in ~/.copilot/hooks/node9.json"));
+    }
+  } else {
+    console.log(chalk.blue("  \u2139\uFE0F  ~/.copilot/hooks/node9.json not found \u2014 nothing to remove"));
+  }
+  const mcpConfig = readJson(mcpPath);
+  if (mcpConfig?.mcpServers) {
+    let mcpChanged = false;
+    if (removeNode9McpServer(mcpConfig.mcpServers)) {
+      mcpChanged = true;
+      console.log(
+        chalk.green("  \u2705 Removed node9 MCP server entry from ~/.copilot/mcp-config.json")
+      );
+    }
+    for (const [name, server] of Object.entries(mcpConfig.mcpServers)) {
+      const args = server.args;
+      if (server.command === "node9" && Array.isArray(args) && args[0] === "mcp" && args[1] === "--upstream" && typeof args[2] === "string") {
+        const [originalCmd, ...originalArgs] = args[2].split(" ");
+        mcpConfig.mcpServers[name] = {
+          ...server,
+          command: originalCmd,
+          args: originalArgs.length ? originalArgs : void 0
+        };
+        mcpChanged = true;
+      }
+    }
+    if (mcpChanged) {
+      writeJson(mcpPath, mcpConfig);
+      console.log(chalk.green("  \u2705 Unwrapped MCP servers in ~/.copilot/mcp-config.json"));
+    }
+  }
+}
 function claudeDesktopConfigPath(homeDir2 = os12.homedir()) {
   if (process.platform === "darwin") {
     return path15.join(
@@ -7306,7 +7671,23 @@ function detectAgents(homeDir2 = os12.homedir()) {
   const desktopPath = claudeDesktopConfigPath(homeDir2);
   return {
     claude: exists(path15.join(homeDir2, ".claude")) || exists(path15.join(homeDir2, ".claude.json")),
-    gemini: exists(path15.join(homeDir2, ".gemini")),
+    // Antigravity (agy) shares the ~/.gemini root, so a bare
+    // `exists(~/.gemini)` would report the (EOL'd) Gemini CLI as
+    // installed on every agy machine — and `node9 init` would then
+    // write BeforeTool hooks into settings.json, a file agy ignores,
+    // while reporting the machine protected (silent protection gap,
+    // verified live on a machine with both installed). Gemini CLI
+    // creates ~/.gemini/settings.json on first run; agy does not touch
+    // it (it uses antigravity-cli/settings.json) — that file is the
+    // legacy-CLI discriminator.
+    gemini: exists(path15.join(homeDir2, ".gemini", "settings.json")) || binaryInPath("gemini"),
+    // agy creates ~/.gemini/antigravity-cli/ on first launch; the IDE
+    // creates antigravity-ide/. PATH fallback covers installed-but-
+    // never-launched (same class as opencode #186).
+    antigravity: exists(path15.join(homeDir2, ".gemini", "antigravity-cli")) || exists(path15.join(homeDir2, ".gemini", "antigravity-ide")) || binaryInPath("agy"),
+    // GitHub Copilot CLI creates ~/.copilot on first launch; PATH
+    // fallback covers installed-but-never-launched (same as opencode #186).
+    copilot: exists(path15.join(homeDir2, ".copilot")) || binaryInPath("copilot"),
     cursor: exists(path15.join(homeDir2, ".cursor")),
     codex: exists(path15.join(homeDir2, ".codex")),
     windsurf: exists(path15.join(homeDir2, ".codeium", "windsurf")),
@@ -7321,7 +7702,13 @@ function detectAgents(homeDir2 = os12.homedir()) {
     // dir lazily on first launch — same class of bug as opencode's #186
     // (design R6) — so fall back to PATH lookup for installed-but-never-
     // launched pi.
-    pi: exists(path15.join(homeDir2, ".pi", "agent")) || binaryInPath("pi")
+    pi: exists(path15.join(homeDir2, ".pi", "agent")) || binaryInPath("pi"),
+    // Hermes Agent (https://github.com/NousResearch/hermes-agent): home dir
+    // is $HERMES_HOME (default ~/.hermes) per hermes_constants.py:30. config.yaml
+    // appears after `hermes setup` has run; the directory alone exists from
+    // install time. PATH fallback covers the rare case where the user blew
+    // away ~/.hermes but kept the binary.
+    hermes: exists(hermesHomeDir(homeDir2)) || binaryInPath("hermes")
   };
 }
 async function setupCursor() {
@@ -8128,6 +8515,169 @@ function teardownPi() {
     console.log(chalk.yellow(`  \u26A0\uFE0F  Could not remove ${extensionPath}: ${String(err2)}`));
   }
 }
+function hermesHomeDir(homeDir2 = os12.homedir()) {
+  const env = process.env.HERMES_HOME?.trim();
+  if (env && path15.isAbsolute(env)) return env;
+  return path15.join(homeDir2, ".hermes");
+}
+function hermesConfigPath(homeDir2 = os12.homedir()) {
+  return path15.join(hermesHomeDir(homeDir2), HERMES_CONFIG_FILENAME);
+}
+function hermesAllowlistPath(homeDir2 = os12.homedir()) {
+  return path15.join(hermesHomeDir(homeDir2), HERMES_ALLOWLIST_FILENAME);
+}
+function setupHermes() {
+  const homeDir2 = os12.homedir();
+  const configPath = hermesConfigPath(homeDir2);
+  const allowlistPath = hermesAllowlistPath(homeDir2);
+  if (!fs13.existsSync(configPath)) {
+    console.log(chalk.yellow(`  \u26A0\uFE0F  Hermes config not found at ${configPath}`));
+    console.log(chalk.gray("     Run `hermes setup` first, then re-run node9 setup hermes."));
+    return;
+  }
+  let anythingChanged = false;
+  const raw = fs13.readFileSync(configPath, "utf-8");
+  const doc = yaml.parseDocument(raw);
+  if (doc.errors.length > 0) {
+    console.log(chalk.yellow(`  \u26A0\uFE0F  Hermes config.yaml has YAML parse errors:`));
+    for (const err2 of doc.errors.slice(0, 3)) {
+      console.log(chalk.gray(`     \u2022 ${err2.message}`));
+    }
+    console.log(
+      chalk.gray("     Fix the file (or run `hermes config edit`), then re-run node9 setup hermes.")
+    );
+    return;
+  }
+  const current = doc.toJS() ?? {};
+  for (const { event, subcmd } of HERMES_HOOK_PLAN) {
+    const command = fullPathCommand(subcmd);
+    const existing = current.hooks?.[event] ?? [];
+    const node9Idx = existing.findIndex(
+      (e) => typeof e?.command === "string" && isNode9Hook(e.command)
+    );
+    if (node9Idx === -1) {
+      const newEntries = [...existing, { command, timeout: 10 }];
+      doc.setIn(["hooks", event], newEntries);
+      console.log(chalk.green(`  \u2705 Hermes ${event} hook added \u2192 node9 ${subcmd}`));
+      anythingChanged = true;
+    } else if (existing[node9Idx].command !== command || isStaleHookCommand(existing[node9Idx].command ?? "")) {
+      const newEntries = [...existing];
+      newEntries[node9Idx] = { ...newEntries[node9Idx], command };
+      doc.setIn(["hooks", event], newEntries);
+      console.log(chalk.yellow(`  \u{1F527} Hermes ${event} hook repaired (stale path \u2192 current binary)`));
+      anythingChanged = true;
+    }
+  }
+  if (current.hooks_auto_accept !== true) {
+    doc.set("hooks_auto_accept", true);
+    console.log(chalk.green("  \u2705 hooks_auto_accept set to true"));
+    anythingChanged = true;
+  }
+  if (anythingChanged) {
+    fs13.writeFileSync(configPath, doc.toString());
+  }
+  let allowlist = {};
+  if (fs13.existsSync(allowlistPath)) {
+    try {
+      allowlist = JSON.parse(fs13.readFileSync(allowlistPath, "utf-8"));
+    } catch {
+      allowlist = {};
+    }
+  }
+  if (!Array.isArray(allowlist.approvals)) allowlist.approvals = [];
+  const nowIso = (/* @__PURE__ */ new Date()).toISOString();
+  let allowlistChanged = false;
+  for (const { event, subcmd } of HERMES_HOOK_PLAN) {
+    const command = fullPathCommand(subcmd);
+    const existingIdx = allowlist.approvals.findIndex(
+      (e) => e?.event === event && typeof e?.command === "string" && isNode9Hook(e.command)
+    );
+    if (existingIdx === -1) {
+      allowlist.approvals.push({ event, command, approved_at: nowIso });
+      allowlistChanged = true;
+    } else if (allowlist.approvals[existingIdx].command !== command) {
+      allowlist.approvals[existingIdx] = { event, command, approved_at: nowIso };
+      allowlistChanged = true;
+    }
+  }
+  if (allowlistChanged) {
+    fs13.mkdirSync(path15.dirname(allowlistPath), { recursive: true });
+    fs13.writeFileSync(allowlistPath, JSON.stringify(allowlist, null, 2) + "\n");
+    console.log(chalk.green("  \u2705 Hermes shell-hooks allowlist populated"));
+    anythingChanged = true;
+  }
+  if (anythingChanged) {
+    console.log(chalk.green.bold("\u{1F6E1}\uFE0F  Node9 is now protecting Hermes Agent!"));
+    console.log(chalk.gray("    Restart Hermes for changes to take effect."));
+    printDaemonTip();
+  } else {
+    console.log(chalk.blue("\u2139\uFE0F  Node9 is already fully configured for Hermes Agent."));
+    printDaemonTip();
+  }
+}
+function teardownHermes() {
+  const homeDir2 = os12.homedir();
+  const configPath = hermesConfigPath(homeDir2);
+  const allowlistPath = hermesAllowlistPath(homeDir2);
+  if (!fs13.existsSync(configPath)) {
+    console.log(chalk.blue(`  \u2139\uFE0F  ${configPath} not found \u2014 nothing to remove`));
+    return;
+  }
+  const raw = fs13.readFileSync(configPath, "utf-8");
+  const doc = yaml.parseDocument(raw);
+  if (doc.errors.length > 0) {
+    console.log(
+      chalk.yellow(`  \u26A0\uFE0F  Skipping ${configPath} \u2014 file has YAML parse errors, fix it manually.`)
+    );
+  } else {
+    teardownHermesConfigDoc(doc, configPath);
+  }
+  teardownHermesAllowlist(allowlistPath);
+}
+function teardownHermesConfigDoc(doc, configPath) {
+  let anythingChanged = false;
+  const current = doc.toJS() ?? {};
+  for (const { event } of HERMES_HOOK_PLAN) {
+    const existing = current.hooks?.[event] ?? [];
+    const filtered = existing.filter(
+      (e) => !(typeof e?.command === "string" && isNode9Hook(e.command))
+    );
+    if (filtered.length === existing.length) continue;
+    if (filtered.length === 0) {
+      doc.deleteIn(["hooks", event]);
+    } else {
+      doc.setIn(["hooks", event], filtered);
+    }
+    anythingChanged = true;
+  }
+  const afterHooks = doc.toJS()?.hooks;
+  if (afterHooks && typeof afterHooks === "object" && Object.keys(afterHooks).length === 0) {
+    doc.delete("hooks");
+    anythingChanged = true;
+  }
+  if (anythingChanged) {
+    fs13.writeFileSync(configPath, doc.toString());
+    console.log(chalk.green(`  \u2705 Removed Node9 hooks from ${configPath}`));
+  } else {
+    console.log(chalk.blue(`  \u2139\uFE0F  No Node9 hooks found in ${configPath}`));
+  }
+}
+function teardownHermesAllowlist(allowlistPath) {
+  if (!fs13.existsSync(allowlistPath)) return;
+  try {
+    const raw = fs13.readFileSync(allowlistPath, "utf-8");
+    const allowlist = JSON.parse(raw);
+    if (!Array.isArray(allowlist.approvals)) return;
+    const before = allowlist.approvals.length;
+    allowlist.approvals = allowlist.approvals.filter(
+      (e) => !(typeof e?.command === "string" && isNode9Hook(e.command))
+    );
+    if (allowlist.approvals.length === before) return;
+    fs13.writeFileSync(allowlistPath, JSON.stringify(allowlist, null, 2) + "\n");
+    console.log(chalk.green(`  \u2705 Removed Node9 entries from ${allowlistPath}`));
+  } catch {
+  }
+}
 function getAgentsStatus(homeDir2 = os12.homedir()) {
   const detected = detectAgents(homeDir2);
   const claudeWired = (() => {
@@ -8138,6 +8688,18 @@ function getAgentsStatus(homeDir2 = os12.homedir()) {
     const settings = readJson(path15.join(homeDir2, ".gemini", "settings.json"));
     return !!settings?.hooks?.BeforeTool?.some((m) => m.hooks.some((h) => isNode9Hook(h.command)));
   })();
+  const antigravityWired = (() => {
+    const hooksFile = readJson(
+      path15.join(homeDir2, ".gemini", "config", "hooks.json")
+    );
+    return !!hooksFile?.hooks?.PreToolUse?.some((m) => m.hooks.some((h) => isNode9Hook(h.command)));
+  })();
+  const copilotWired = (() => {
+    const hooksFile = readJson(
+      path15.join(homeDir2, ".copilot", "hooks", "node9.json")
+    );
+    return !!hooksFile?.hooks?.PreToolUse?.some((h) => isNode9Hook(h.command));
+  })();
   const cursorWired = (() => {
     const cfg = readJson(path15.join(homeDir2, ".cursor", "mcp.json"));
     return !!(cfg?.mcpServers && hasNode9McpServer(cfg.mcpServers));
@@ -8171,6 +8733,20 @@ function getAgentsStatus(homeDir2 = os12.homedir()) {
       wired: geminiWired,
       mode: detected.gemini ? "hooks" : null
     },
+    {
+      name: "antigravity",
+      label: "Antigravity",
+      installed: detected.antigravity,
+      wired: antigravityWired,
+      mode: detected.antigravity ? "hooks" : null
+    },
+    {
+      name: "copilot",
+      label: "GitHub Copilot",
+      installed: detected.copilot,
+      wired: copilotWired,
+      mode: detected.copilot ? "hooks" : null
+    },
     {
       name: "cursor",
       label: "Cursor",
@@ -8239,10 +8815,29 @@ function getAgentsStatus(homeDir2 = os12.homedir()) {
       // simple existence check on the canonical install location.
       wired: fs13.existsSync(path15.join(homeDir2, ".pi", "agent", "extensions", PI_EXTENSION_NAME)),
       mode: detected.pi ? "hooks" : null
+    },
+    {
+      name: "hermes",
+      label: "Hermes Agent",
+      installed: detected.hermes,
+      // Wired = node9 hook entry exists in the parsed config.yaml.
+      // Reading the YAML cheaply via yaml.parse — we don't need the
+      // Document API for a boolean status check.
+      wired: (() => {
+        try {
+          const raw = fs13.readFileSync(hermesConfigPath(homeDir2), "utf-8");
+          const cfg = yaml.parse(raw);
+          const pre = cfg?.hooks?.["pre_tool_call"] ?? [];
+          return pre.some((e) => typeof e?.command === "string" && isNode9Hook(e.command));
+        } catch {
+          return false;
+        }
+      })(),
+      mode: detected.hermes ? "hooks" : null
     }
   ];
 }
-var NODE9_MCP_SERVER_ENTRY, CODEX_PRE_TOOL_MATCHERS, OPENCODE_PLUGIN_NAME, PI_EXTENSION_NAME;
+var NODE9_MCP_SERVER_ENTRY, CODEX_PRE_TOOL_MATCHERS, OPENCODE_PLUGIN_NAME, PI_EXTENSION_NAME, HERMES_CONFIG_FILENAME, HERMES_ALLOWLIST_FILENAME, HERMES_HOOK_PLAN;
 var init_setup = __esm({
   "src/setup.ts"() {
     "use strict";
@@ -8253,10 +8848,93 @@ var init_setup = __esm({
     CODEX_PRE_TOOL_MATCHERS = ["^Bash$", "^apply_patch$", "^mcp__.*"];
     OPENCODE_PLUGIN_NAME = "node9.js";
     PI_EXTENSION_NAME = "node9.js";
+    HERMES_CONFIG_FILENAME = "config.yaml";
+    HERMES_ALLOWLIST_FILENAME = "shell-hooks-allowlist.json";
+    HERMES_HOOK_PLAN = [
+      { event: "pre_tool_call", subcmd: "check" },
+      { event: "post_tool_call", subcmd: "log" }
+    ];
+  }
+});
+
+// src/utils/hook-payload.ts
+function extractToolName(payload, defaultValue = "") {
+  return payload.tool_name ?? payload.name ?? payload.toolCall?.name ?? defaultValue;
+}
+function extractToolInput(payload) {
+  return payload.tool_input ?? payload.args ?? payload.toolCall?.args ?? {};
+}
+function canonicalToolName(name) {
+  switch (name) {
+    // Hermes Agent
+    case "terminal":
+      return "Bash";
+    case "write_file":
+      return "Write";
+    case "patch":
+      return "Edit";
+    case "read_file":
+      return "Read";
+    case "search_files":
+      return "Grep";
+    // Antigravity (agy) — shell tool renamed from Gemini's run_shell_command
+    case "run_command":
+      return "Bash";
+    default:
+      return name;
+  }
+}
+function agentLabelFromFlag(flag) {
+  if (typeof flag !== "string") return void 0;
+  switch (flag.toLowerCase()) {
+    case "antigravity":
+    case "agy":
+      return "Antigravity";
+    case "copilot":
+      return "GitHub Copilot";
+    default:
+      return void 0;
+  }
+}
+function canonicalToolInput(rawToolName, input) {
+  if (rawToolName !== "run_command") return input;
+  if (typeof input !== "object" || input === null || Array.isArray(input)) return input;
+  const args = input;
+  if (typeof args.CommandLine !== "string") return input;
+  const { CommandLine, Cwd, ...rest } = args;
+  const canonical = { ...rest, command: CommandLine };
+  if (typeof Cwd === "string" && Cwd.length > 0) canonical.cwd = Cwd;
+  return canonical;
+}
+var init_hook_payload = __esm({
+  "src/utils/hook-payload.ts"() {
+    "use strict";
   }
 });
 
 // src/scan-summary.ts
+function agentDisplayName(agent) {
+  return AGENT_LONG[agent] ?? "Claude Code";
+}
+function agentBadgeText(agent, width = 10) {
+  return `[${AGENT_SHORT[agent] ?? "Claude"}]`.padEnd(width);
+}
+function agentColorName(agent) {
+  switch (agent) {
+    case "gemini":
+      return "blue";
+    case "codex":
+      return "magenta";
+    case "antigravity":
+      return "yellow";
+    case "copilot":
+      return "green";
+    case "shell":
+      return "yellow";
+    default:
+      return "cyan";
+  }
+}
 function buildScanSummary(agents) {
   const stats = {
     sessions: 0,
@@ -8433,12 +9111,29 @@ function fullCommandOf(input) {
   const raw = input.command ?? input.query ?? input.file_path ?? JSON.stringify(input);
   return String(raw).replace(/\s+/g, " ").trim();
 }
+var AGENT_SHORT, AGENT_LONG;
 var init_scan_summary = __esm({
   "src/scan-summary.ts"() {
     "use strict";
     init_shields();
     init_dist();
     init_dist();
+    AGENT_SHORT = {
+      claude: "Claude",
+      gemini: "Gemini",
+      codex: "Codex",
+      antigravity: "Agy",
+      copilot: "Copilot",
+      shell: "Shell"
+    };
+    AGENT_LONG = {
+      claude: "Claude Code",
+      gemini: "Gemini CLI",
+      codex: "Codex",
+      antigravity: "Antigravity",
+      copilot: "GitHub Copilot",
+      shell: "Shell"
+    };
   }
 });
 
@@ -10083,6 +10778,34 @@ function countScanFiles() {
     } catch {
     }
   }
+  for (const surface of ["antigravity-cli", "antigravity-ide"]) {
+    const brainDir = path22.join(os19.homedir(), ".gemini", surface, "brain");
+    if (!fs20.existsSync(brainDir)) continue;
+    try {
+      for (const conv of fs20.readdirSync(brainDir)) {
+        const convPath = path22.join(brainDir, conv);
+        try {
+          if (!fs20.statSync(convPath).isDirectory()) continue;
+          const logsDir = path22.join(convPath, ".system_generated", "logs");
+          if (fs20.existsSync(path22.join(logsDir, "transcript_full.jsonl")) || fs20.existsSync(path22.join(logsDir, "transcript.jsonl"))) {
+            total += 1;
+          }
+        } catch {
+          continue;
+        }
+      }
+    } catch {
+    }
+  }
+  const copilotDir = path22.join(os19.homedir(), ".copilot", "session-state");
+  if (fs20.existsSync(copilotDir)) {
+    try {
+      for (const sid of fs20.readdirSync(copilotDir)) {
+        if (fs20.existsSync(path22.join(copilotDir, sid, "events.jsonl"))) total += 1;
+      }
+    } catch {
+    }
+  }
   const codexDir = path22.join(os19.homedir(), ".codex", "sessions");
   if (fs20.existsSync(codexDir)) {
     try {
@@ -10411,8 +11134,231 @@ function scanClaudeHistory(startDate, onProgress, onLine) {
   }
   return result;
 }
-function scanGeminiHistory(startDate, onProgress, onLine) {
-  const tmpDir = path22.join(os19.homedir(), ".gemini", "tmp");
+function scanGeminiHistory(startDate, onProgress, onLine) {
+  const tmpDir = path22.join(os19.homedir(), ".gemini", "tmp");
+  const result = {
+    filesScanned: 0,
+    sessions: 0,
+    totalToolCalls: 0,
+    bashCalls: 0,
+    findings: [],
+    dlpFindings: [],
+    loopFindings: [],
+    totalCostUSD: 0,
+    firstDate: null,
+    lastDate: null,
+    sessionsWithEarlySecrets: 0
+  };
+  const dedup = emptyScanDedup();
+  if (!fs20.existsSync(tmpDir)) return result;
+  let slugDirs;
+  try {
+    slugDirs = fs20.readdirSync(tmpDir);
+  } catch {
+    return result;
+  }
+  const ruleSources = buildRuleSources();
+  for (const slug of slugDirs) {
+    const slugPath = path22.join(tmpDir, slug);
+    try {
+      if (!fs20.statSync(slugPath).isDirectory()) continue;
+    } catch {
+      continue;
+    }
+    let projLabel = stripTerminalEscapes(slug).slice(0, 40);
+    try {
+      projLabel = stripTerminalEscapes(
+        fs20.readFileSync(path22.join(slugPath, ".project_root"), "utf-8").trim()
+      ).replace(os19.homedir(), "~").slice(0, 40);
+    } catch {
+    }
+    const chatsDir = path22.join(slugPath, "chats");
+    if (!fs20.existsSync(chatsDir)) continue;
+    let chatFiles;
+    try {
+      chatFiles = fs20.readdirSync(chatsDir).filter((f) => f.endsWith(".json"));
+    } catch {
+      continue;
+    }
+    for (const chatFile of chatFiles) {
+      result.filesScanned++;
+      onProgress?.(result.filesScanned);
+      const sessionId = chatFile.replace(/\.json$/, "");
+      let raw;
+      try {
+        raw = fs20.readFileSync(path22.join(chatsDir, chatFile), "utf-8");
+      } catch {
+        continue;
+      }
+      const sessionCalls = [];
+      let session;
+      try {
+        session = JSON.parse(raw);
+      } catch {
+        continue;
+      }
+      result.sessions++;
+      for (const msg of session.messages ?? []) {
+        onLine?.();
+        if (msg.type === "user") {
+          const content = msg.content;
+          const text = Array.isArray(content) ? content.map((c) => c.text ?? "").join("\n") : typeof content === "string" ? content : "";
+          if (text) {
+            const dlpMatch = scanArgs({ text });
+            if (dlpMatch) {
+              const k = dlpKey(dlpMatch.patternName, dlpMatch.redactedSample, projLabel);
+              if (!dedup.dlpKeys.has(k)) {
+                dedup.dlpKeys.add(k);
+                result.dlpFindings.push({
+                  patternName: dlpMatch.patternName,
+                  redactedSample: dlpMatch.redactedSample,
+                  toolName: "user-prompt",
+                  timestamp: msg.timestamp ?? "",
+                  project: projLabel,
+                  sessionId,
+                  agent: "gemini"
+                });
+              }
+            }
+          }
+          continue;
+        }
+        if (msg.type !== "gemini") continue;
+        if (startDate && msg.timestamp && new Date(msg.timestamp) < startDate) continue;
+        if (msg.timestamp) {
+          if (!result.firstDate || msg.timestamp < result.firstDate)
+            result.firstDate = msg.timestamp;
+          if (!result.lastDate || msg.timestamp > result.lastDate) result.lastDate = msg.timestamp;
+        }
+        const tokens = msg.tokens;
+        const model = msg.model;
+        if (tokens && model) {
+          const p = geminiModelPrice(model);
+          if (p) {
+            const nonCached = Math.max(0, tokens.input - tokens.cached);
+            result.totalCostUSD += nonCached * p.i + tokens.cached * p.cr + tokens.output * p.o;
+          }
+        }
+        for (const tc of msg.toolCalls ?? []) {
+          result.totalToolCalls++;
+          const toolName = tc.name ?? "";
+          const toolNameLower = toolName.toLowerCase();
+          const input = tc.args ?? {};
+          sessionCalls.push({ toolName, input, timestamp: msg.timestamp ?? "" });
+          if (toolNameLower === "run_shell_command" || toolNameLower === "shell") {
+            result.bashCalls++;
+          }
+          const rawCmd = String(input.command ?? "").trimStart();
+          if (/^node9\s+(scan|explain|report|tail|dlp|status|sessions|audit)\b/.test(rawCmd))
+            continue;
+          const dlpMatch = scanArgs(input);
+          if (dlpMatch) {
+            const k = dlpKey(dlpMatch.patternName, dlpMatch.redactedSample, projLabel);
+            if (!dedup.dlpKeys.has(k)) {
+              dedup.dlpKeys.add(k);
+              result.dlpFindings.push({
+                patternName: dlpMatch.patternName,
+                redactedSample: dlpMatch.redactedSample,
+                toolName,
+                timestamp: msg.timestamp ?? "",
+                project: projLabel,
+                sessionId,
+                agent: "gemini"
+              });
+            }
+          }
+          let astFsMatched = false;
+          const astRanForBash = toolNameLower === "run_shell_command" || toolNameLower === "shell";
+          if (astRanForBash) {
+            astFsMatched = pushFsOpAstFinding(
+              String(input.command ?? ""),
+              toolName,
+              input,
+              msg.timestamp ?? "",
+              projLabel,
+              sessionId,
+              "gemini",
+              result,
+              dedup
+            );
+          }
+          let ruleMatched = astFsMatched;
+          for (const source of ruleSources) {
+            const { rule } = source;
+            if (rule.verdict === "allow") continue;
+            if (rule.tool && !matchesPattern(toolNameLower, rule.tool)) continue;
+            if (astRanForBash && rule.name && AST_FS_REGEX_RULES.has(rule.name)) continue;
+            if (!evaluateSmartConditions(input, rule)) continue;
+            const inputPreview = preview(input, 120);
+            const k = findingKey(rule.name, inputPreview, projLabel);
+            if (!dedup.findingsKeys.has(k)) {
+              dedup.findingsKeys.add(k);
+              result.findings.push({
+                source,
+                toolName,
+                input,
+                timestamp: msg.timestamp ?? "",
+                project: projLabel,
+                sessionId,
+                agent: "gemini"
+              });
+            }
+            ruleMatched = true;
+            break;
+          }
+          const isShellTool = ["bash", "execute_bash", "run_shell_command", "shell"].includes(
+            toolNameLower
+          );
+          if (!ruleMatched && isShellTool) {
+            const shellVerdict = detectDangerousShellExec(String(input.command ?? ""));
+            if (shellVerdict) {
+              const astRule = {
+                name: `ast:bash-safe:${shellVerdict}-shell-exec-remote`,
+                tool: "bash",
+                conditions: [],
+                verdict: shellVerdict,
+                reason: `Shell execution of remote download detected by AST analysis (bash-safe)`
+              };
+              const inputPreview = preview(input, 120);
+              const k = findingKey(astRule.name, inputPreview, projLabel);
+              if (!dedup.findingsKeys.has(k)) {
+                dedup.findingsKeys.add(k);
+                result.findings.push({
+                  source: {
+                    shieldName: "bash-safe",
+                    shieldLabel: "bash-safe (AST)",
+                    sourceType: "shield",
+                    rule: astRule
+                  },
+                  toolName,
+                  input,
+                  timestamp: msg.timestamp ?? "",
+                  project: projLabel,
+                  sessionId,
+                  agent: "gemini"
+                });
+              }
+            }
+          }
+        }
+      }
+      result.loopFindings.push(...detectLoops(sessionCalls, projLabel, sessionId, "gemini"));
+    }
+  }
+  return result;
+}
+function antigravityBrainDirs() {
+  return ["antigravity-cli", "antigravity-ide"].map((surface) => path22.join(os19.homedir(), ".gemini", surface, "brain")).filter((p) => fs20.existsSync(p));
+}
+function antigravityTranscriptPath(convPath) {
+  const logsDir = path22.join(convPath, ".system_generated", "logs");
+  for (const name of ["transcript_full.jsonl", "transcript.jsonl"]) {
+    const p = path22.join(logsDir, name);
+    if (fs20.existsSync(p)) return p;
+  }
+  return null;
+}
+function scanAntigravityHistory(startDate, onProgress, onLine) {
   const result = {
     filesScanned: 0,
     sessions: 0,
@@ -10422,64 +11368,56 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
     dlpFindings: [],
     loopFindings: [],
     totalCostUSD: 0,
+    // transcripts carry no token/model data
     firstDate: null,
     lastDate: null,
     sessionsWithEarlySecrets: 0
   };
   const dedup = emptyScanDedup();
-  if (!fs20.existsSync(tmpDir)) return result;
-  let slugDirs;
-  try {
-    slugDirs = fs20.readdirSync(tmpDir);
-  } catch {
-    return result;
-  }
+  const brainDirs = antigravityBrainDirs();
+  if (brainDirs.length === 0) return result;
   const ruleSources = buildRuleSources();
-  for (const slug of slugDirs) {
-    const slugPath = path22.join(tmpDir, slug);
+  for (const brainDir of brainDirs) {
+    let convDirs;
     try {
-      if (!fs20.statSync(slugPath).isDirectory()) continue;
-    } catch {
-      continue;
-    }
-    let projLabel = stripTerminalEscapes(slug).slice(0, 40);
-    try {
-      projLabel = stripTerminalEscapes(
-        fs20.readFileSync(path22.join(slugPath, ".project_root"), "utf-8").trim()
-      ).replace(os19.homedir(), "~").slice(0, 40);
-    } catch {
-    }
-    const chatsDir = path22.join(slugPath, "chats");
-    if (!fs20.existsSync(chatsDir)) continue;
-    let chatFiles;
-    try {
-      chatFiles = fs20.readdirSync(chatsDir).filter((f) => f.endsWith(".json"));
+      convDirs = fs20.readdirSync(brainDir);
     } catch {
       continue;
     }
-    for (const chatFile of chatFiles) {
-      result.filesScanned++;
-      onProgress?.(result.filesScanned);
-      const sessionId = chatFile.replace(/\.json$/, "");
-      let raw;
+    for (const conv of convDirs) {
+      const convPath = path22.join(brainDir, conv);
       try {
-        raw = fs20.readFileSync(path22.join(chatsDir, chatFile), "utf-8");
+        if (!fs20.statSync(convPath).isDirectory()) continue;
       } catch {
         continue;
       }
-      const sessionCalls = [];
-      let session;
+      const transcriptFile = antigravityTranscriptPath(convPath);
+      if (!transcriptFile) continue;
+      result.filesScanned++;
+      onProgress?.(result.filesScanned);
+      let raw;
       try {
-        session = JSON.parse(raw);
+        raw = fs20.readFileSync(transcriptFile, "utf-8");
       } catch {
         continue;
       }
+      const sessionId = conv;
+      let projLabel = conv.slice(0, 8);
+      const sessionCalls = [];
       result.sessions++;
-      for (const msg of session.messages ?? []) {
+      for (const line of raw.split("\n")) {
+        if (!line.trim()) continue;
         onLine?.();
-        if (msg.type === "user") {
-          const content = msg.content;
-          const text = Array.isArray(content) ? content.map((c) => c.text ?? "").join("\n") : typeof content === "string" ? content : "";
+        let step;
+        try {
+          step = JSON.parse(line);
+        } catch {
+          continue;
+        }
+        const timestamp = step.created_at ?? "";
+        if (startDate && timestamp && new Date(timestamp) < startDate) continue;
+        if (step.type === "USER_INPUT") {
+          const text = typeof step.content === "string" ? step.content : "";
           if (text) {
             const dlpMatch = scanArgs({ text });
             if (dlpMatch) {
@@ -10490,40 +11428,34 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
                   patternName: dlpMatch.patternName,
                   redactedSample: dlpMatch.redactedSample,
                   toolName: "user-prompt",
-                  timestamp: msg.timestamp ?? "",
+                  timestamp,
                   project: projLabel,
                   sessionId,
-                  agent: "gemini"
+                  agent: "antigravity"
                 });
               }
             }
           }
           continue;
         }
-        if (msg.type !== "gemini") continue;
-        if (startDate && msg.timestamp && new Date(msg.timestamp) < startDate) continue;
-        if (msg.timestamp) {
-          if (!result.firstDate || msg.timestamp < result.firstDate)
-            result.firstDate = msg.timestamp;
-          if (!result.lastDate || msg.timestamp > result.lastDate) result.lastDate = msg.timestamp;
-        }
-        const tokens = msg.tokens;
-        const model = msg.model;
-        if (tokens && model) {
-          const p = geminiModelPrice(model);
-          if (p) {
-            const nonCached = Math.max(0, tokens.input - tokens.cached);
-            result.totalCostUSD += nonCached * p.i + tokens.cached * p.cr + tokens.output * p.o;
-          }
+        if (!Array.isArray(step.tool_calls) || step.tool_calls.length === 0) continue;
+        if (timestamp) {
+          if (!result.firstDate || timestamp < result.firstDate) result.firstDate = timestamp;
+          if (!result.lastDate || timestamp > result.lastDate) result.lastDate = timestamp;
         }
-        for (const tc of msg.toolCalls ?? []) {
+        for (const tc of step.tool_calls) {
           result.totalToolCalls++;
           const toolName = tc.name ?? "";
           const toolNameLower = toolName.toLowerCase();
-          const input = tc.args ?? {};
-          sessionCalls.push({ toolName, input, timestamp: msg.timestamp ?? "" });
-          if (toolNameLower === "run_shell_command" || toolNameLower === "shell") {
+          const input = canonicalToolInput(toolName, tc.args ?? {});
+          sessionCalls.push({ toolName, input, timestamp });
+          const isShellTool = toolNameLower === "run_command";
+          if (isShellTool) {
             result.bashCalls++;
+            const cwd = String(input.cwd ?? "");
+            if (cwd && projLabel === conv.slice(0, 8)) {
+              projLabel = stripTerminalEscapes(cwd).replace(os19.homedir(), "~").slice(0, 40);
+            }
           }
           const rawCmd = String(input.command ?? "").trimStart();
           if (/^node9\s+(scan|explain|report|tail|dlp|status|sessions|audit)\b/.test(rawCmd))
@@ -10537,24 +11469,23 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
                 patternName: dlpMatch.patternName,
                 redactedSample: dlpMatch.redactedSample,
                 toolName,
-                timestamp: msg.timestamp ?? "",
+                timestamp,
                 project: projLabel,
                 sessionId,
-                agent: "gemini"
+                agent: "antigravity"
               });
             }
           }
           let astFsMatched = false;
-          const astRanForBash = toolNameLower === "run_shell_command" || toolNameLower === "shell";
-          if (astRanForBash) {
+          if (isShellTool) {
             astFsMatched = pushFsOpAstFinding(
               String(input.command ?? ""),
               toolName,
               input,
-              msg.timestamp ?? "",
+              timestamp,
               projLabel,
               sessionId,
-              "gemini",
+              "antigravity",
               result,
               dedup
             );
@@ -10563,8 +11494,9 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
           for (const source of ruleSources) {
             const { rule } = source;
             if (rule.verdict === "allow") continue;
-            if (rule.tool && !matchesPattern(toolNameLower, rule.tool)) continue;
-            if (astRanForBash && rule.name && AST_FS_REGEX_RULES.has(rule.name)) continue;
+            const ruleToolName = isShellTool ? "bash" : toolNameLower;
+            if (rule.tool && !matchesPattern(ruleToolName, rule.tool)) continue;
+            if (isShellTool && rule.name && AST_FS_REGEX_RULES.has(rule.name)) continue;
             if (!evaluateSmartConditions(input, rule)) continue;
             const inputPreview = preview(input, 120);
             const k = findingKey(rule.name, inputPreview, projLabel);
@@ -10574,18 +11506,15 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
                 source,
                 toolName,
                 input,
-                timestamp: msg.timestamp ?? "",
+                timestamp,
                 project: projLabel,
                 sessionId,
-                agent: "gemini"
+                agent: "antigravity"
               });
             }
             ruleMatched = true;
             break;
           }
-          const isShellTool = ["bash", "execute_bash", "run_shell_command", "shell"].includes(
-            toolNameLower
-          );
           if (!ruleMatched && isShellTool) {
             const shellVerdict = detectDangerousShellExec(String(input.command ?? ""));
             if (shellVerdict) {
@@ -10609,18 +11538,201 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
                   },
                   toolName,
                   input,
-                  timestamp: msg.timestamp ?? "",
+                  timestamp,
                   project: projLabel,
                   sessionId,
-                  agent: "gemini"
+                  agent: "antigravity"
                 });
               }
             }
           }
         }
       }
-      result.loopFindings.push(...detectLoops(sessionCalls, projLabel, sessionId, "gemini"));
+      result.loopFindings.push(...detectLoops(sessionCalls, projLabel, sessionId, "antigravity"));
+    }
+  }
+  return result;
+}
+function scanCopilotHistory(startDate, onProgress, onLine) {
+  const sessionDir = path22.join(os19.homedir(), ".copilot", "session-state");
+  const result = {
+    filesScanned: 0,
+    sessions: 0,
+    totalToolCalls: 0,
+    bashCalls: 0,
+    findings: [],
+    dlpFindings: [],
+    loopFindings: [],
+    totalCostUSD: 0,
+    // event logs carry no token/cost rollup
+    firstDate: null,
+    lastDate: null,
+    sessionsWithEarlySecrets: 0
+  };
+  const dedup = emptyScanDedup();
+  if (!fs20.existsSync(sessionDir)) return result;
+  let sessionIds;
+  try {
+    sessionIds = fs20.readdirSync(sessionDir);
+  } catch {
+    return result;
+  }
+  const ruleSources = buildRuleSources();
+  for (const sessionId of sessionIds) {
+    const eventsPath = path22.join(sessionDir, sessionId, "events.jsonl");
+    if (!fs20.existsSync(eventsPath)) continue;
+    result.filesScanned++;
+    onProgress?.(result.filesScanned);
+    let raw;
+    try {
+      raw = fs20.readFileSync(eventsPath, "utf-8");
+    } catch {
+      continue;
+    }
+    let projLabel = sessionId.slice(0, 8);
+    const sessionCalls = [];
+    result.sessions++;
+    for (const line of raw.split("\n")) {
+      if (!line.trim()) continue;
+      onLine?.();
+      let ev;
+      try {
+        ev = JSON.parse(line);
+      } catch {
+        continue;
+      }
+      const timestamp = ev.timestamp ?? "";
+      if (ev.type === "session.start") {
+        const cwd = ev.data?.context?.cwd;
+        if (typeof cwd === "string" && cwd) {
+          projLabel = stripTerminalEscapes(cwd).replace(os19.homedir(), "~").slice(0, 40);
+        }
+        continue;
+      }
+      if (startDate && timestamp && new Date(timestamp) < startDate) continue;
+      if (ev.type === "user.message") {
+        const text = ev.data?.content ?? ev.data?.text ?? "";
+        if (typeof text === "string" && text) {
+          const dlpMatch2 = scanArgs({ text });
+          if (dlpMatch2) {
+            const k = dlpKey(dlpMatch2.patternName, dlpMatch2.redactedSample, projLabel);
+            if (!dedup.dlpKeys.has(k)) {
+              dedup.dlpKeys.add(k);
+              result.dlpFindings.push({
+                patternName: dlpMatch2.patternName,
+                redactedSample: dlpMatch2.redactedSample,
+                toolName: "user-prompt",
+                timestamp,
+                project: projLabel,
+                sessionId,
+                agent: "copilot"
+              });
+            }
+          }
+        }
+        continue;
+      }
+      if (ev.type !== "tool.execution_start") continue;
+      const toolName = ev.data?.toolName ?? "";
+      const toolNameLower = toolName.toLowerCase();
+      const input = ev.data?.arguments ?? {};
+      result.totalToolCalls++;
+      sessionCalls.push({ toolName, input, timestamp });
+      const isShellTool = toolNameLower === "bash" || toolNameLower === "shell";
+      if (isShellTool) result.bashCalls++;
+      if (timestamp) {
+        if (!result.firstDate || timestamp < result.firstDate) result.firstDate = timestamp;
+        if (!result.lastDate || timestamp > result.lastDate) result.lastDate = timestamp;
+      }
+      const rawCmd = String(input.command ?? "").trimStart();
+      if (/^node9\s+(scan|explain|report|tail|dlp|status|sessions|audit)\b/.test(rawCmd)) continue;
+      const dlpMatch = scanArgs(input);
+      if (dlpMatch) {
+        const k = dlpKey(dlpMatch.patternName, dlpMatch.redactedSample, projLabel);
+        if (!dedup.dlpKeys.has(k)) {
+          dedup.dlpKeys.add(k);
+          result.dlpFindings.push({
+            patternName: dlpMatch.patternName,
+            redactedSample: dlpMatch.redactedSample,
+            toolName,
+            timestamp,
+            project: projLabel,
+            sessionId,
+            agent: "copilot"
+          });
+        }
+      }
+      let astFsMatched = false;
+      if (isShellTool) {
+        astFsMatched = pushFsOpAstFinding(
+          String(input.command ?? ""),
+          toolName,
+          input,
+          timestamp,
+          projLabel,
+          sessionId,
+          "copilot",
+          result,
+          dedup
+        );
+      }
+      let ruleMatched = astFsMatched;
+      for (const source of ruleSources) {
+        const { rule } = source;
+        if (rule.verdict === "allow") continue;
+        if (rule.tool && !matchesPattern(toolNameLower, rule.tool)) continue;
+        if (isShellTool && rule.name && AST_FS_REGEX_RULES.has(rule.name)) continue;
+        if (!evaluateSmartConditions(input, rule)) continue;
+        const inputPreview = preview(input, 120);
+        const k = findingKey(rule.name, inputPreview, projLabel);
+        if (!dedup.findingsKeys.has(k)) {
+          dedup.findingsKeys.add(k);
+          result.findings.push({
+            source,
+            toolName,
+            input,
+            timestamp,
+            project: projLabel,
+            sessionId,
+            agent: "copilot"
+          });
+        }
+        ruleMatched = true;
+        break;
+      }
+      if (!ruleMatched && isShellTool) {
+        const shellVerdict = detectDangerousShellExec(String(input.command ?? ""));
+        if (shellVerdict) {
+          const astRule = {
+            name: `ast:bash-safe:${shellVerdict}-shell-exec-remote`,
+            tool: "bash",
+            conditions: [],
+            verdict: shellVerdict,
+            reason: `Shell execution of remote download detected by AST analysis (bash-safe)`
+          };
+          const inputPreview = preview(input, 120);
+          const k = findingKey(astRule.name, inputPreview, projLabel);
+          if (!dedup.findingsKeys.has(k)) {
+            dedup.findingsKeys.add(k);
+            result.findings.push({
+              source: {
+                shieldName: "bash-safe",
+                shieldLabel: "bash-safe (AST)",
+                sourceType: "shield",
+                rule: astRule
+              },
+              toolName,
+              input,
+              timestamp,
+              project: projLabel,
+              sessionId,
+              agent: "copilot"
+            });
+          }
+        }
+      }
     }
+    result.loopFindings.push(...detectLoops(sessionCalls, projLabel, sessionId, "copilot"));
   }
   return result;
 }
@@ -10919,8 +12031,8 @@ function printFindingRow(f, drillDown, showSessionId, previewWidth) {
   const stale = isStaleFinding(f.timestamp);
   const ts = f.timestamp ? chalk5.dim(fmtTs(f.timestamp) + "  ") : "";
   const proj = chalk5.dim(f.project.slice(0, 22).padEnd(22) + "  ");
-  const agentLabel2 = f.agent === "gemini" ? "[Gemini]  " : f.agent === "codex" ? "[Codex]   " : "[Claude]  ";
-  const agentBadge = stale ? chalk5.dim(agentLabel2) : f.agent === "gemini" ? chalk5.blue(agentLabel2) : f.agent === "codex" ? chalk5.magenta(agentLabel2) : chalk5.cyan(agentLabel2);
+  const agentLabel2 = agentBadgeText(f.agent);
+  const agentBadge = stale ? chalk5.dim(agentLabel2) : chalk5[agentColorName(f.agent)](agentLabel2);
   let cmdText;
   if (drillDown) {
     cmdText = f.fullCommand;
@@ -11483,16 +12595,35 @@ function registerScanCommand(program2) {
         (done) => onProgress(claudeScan.filesScanned + done),
         onLine
       );
-      const codexScan = scanCodexHistory(
+      const antigravityScan = scanAntigravityHistory(
         startDate,
         (done) => onProgress(claudeScan.filesScanned + geminiScan.filesScanned + done),
         onLine
       );
-      const scan = mergeScans(mergeScans(claudeScan, geminiScan), codexScan);
+      const copilotScan = scanCopilotHistory(
+        startDate,
+        (done) => onProgress(
+          claudeScan.filesScanned + geminiScan.filesScanned + antigravityScan.filesScanned + done
+        ),
+        onLine
+      );
+      const codexScan = scanCodexHistory(
+        startDate,
+        (done) => onProgress(
+          claudeScan.filesScanned + geminiScan.filesScanned + antigravityScan.filesScanned + copilotScan.filesScanned + done
+        ),
+        onLine
+      );
+      const scan = mergeScans(
+        mergeScans(mergeScans(mergeScans(claudeScan, geminiScan), antigravityScan), copilotScan),
+        codexScan
+      );
       scan.dlpFindings.push(...scanShellConfig());
       const summary = buildScanSummary([
         { id: "claude", label: "Claude", icon: "\u{1F916}", scan: claudeScan },
         { id: "gemini", label: "Gemini", icon: "\u264A", scan: geminiScan },
+        { id: "antigravity", label: "Antigravity", icon: "\u{1F680}", scan: antigravityScan },
+        { id: "copilot", label: "Copilot", icon: "\u{1F419}", scan: copilotScan },
         { id: "codex", label: "Codex", icon: "\u{1F52E}", scan: codexScan }
       ]);
       if (useTTY) process.stdout.write("\r" + " ".repeat(60) + "\r");
@@ -11500,7 +12631,7 @@ function registerScanCommand(program2) {
         console.log(chalk5.yellow("  No session history found."));
         console.log(
           chalk5.gray(
-            "  Supported: Claude Code (~/.claude/projects/) \xB7 Gemini CLI (~/.gemini/tmp/)\n"
+            "  Supported: Claude Code (~/.claude/projects/) \xB7 Gemini CLI (~/.gemini/tmp/) \xB7 Antigravity (~/.gemini/antigravity-*/brain/) \xB7 Copilot CLI (~/.copilot/session-state/)\n"
           )
         );
         return;
@@ -11512,6 +12643,12 @@ function registerScanCommand(program2) {
         breakdownParts.push(chalk5.cyan(String(claudeScan.sessions)) + chalk5.dim(" Claude"));
       if (geminiScan.sessions > 0)
         breakdownParts.push(chalk5.blue(String(geminiScan.sessions)) + chalk5.dim(" Gemini"));
+      if (antigravityScan.sessions > 0)
+        breakdownParts.push(
+          chalk5.yellow(String(antigravityScan.sessions)) + chalk5.dim(" Antigravity")
+        );
+      if (copilotScan.sessions > 0)
+        breakdownParts.push(chalk5.green(String(copilotScan.sessions)) + chalk5.dim(" Copilot"));
       if (codexScan.sessions > 0)
         breakdownParts.push(chalk5.magenta(String(codexScan.sessions)) + chalk5.dim(" Codex"));
       const sessionBreakdown = breakdownParts.length > 1 ? chalk5.dim("(") + breakdownParts.join(chalk5.dim(" \xB7 ")) + chalk5.dim(")") : "";
@@ -11700,7 +12837,7 @@ function registerScanCommand(program2) {
             const stale = isStaleFinding(f.timestamp);
             const ts = f.timestamp ? chalk5.dim(fmtTs(f.timestamp) + "  ") : "";
             const proj = chalk5.dim(f.project.slice(0, 22).padEnd(22) + "  ");
-            const agentBadge = f.agent === "gemini" ? chalk5.blue("[Gemini]  ") : f.agent === "codex" ? chalk5.magenta("[Codex]   ") : f.agent === "shell" ? chalk5.yellow("[Shell]   ") : chalk5.cyan("[Claude]  ");
+            const agentBadge = chalk5[agentColorName(f.agent)](agentBadgeText(f.agent));
             const sessionSuffix = f.sessionId ? chalk5.dim(`  \u2192 ${f.sessionId.slice(0, 8)}`) : "";
             const recurringBadge = recurringPatterns.has(f.patternName) ? chalk5.red.bold(" \u26A0\uFE0F recurring ") : "";
             const patternDisplay = stale ? chalk5.dim(f.patternName) : chalk5.yellow(f.patternName);
@@ -11748,8 +12885,8 @@ function registerScanCommand(program2) {
             const stale = isStaleFinding(f.timestamp);
             const ts = f.timestamp ? chalk5.dim(fmtTs(f.timestamp) + "  ") : "";
             const proj = chalk5.dim(f.project.slice(0, 22).padEnd(22) + "  ");
-            const agentLabel2 = f.agent === "gemini" ? "[Gemini]  " : f.agent === "codex" ? "[Codex]   " : "[Claude]  ";
-            const agentBadge = stale ? chalk5.dim(agentLabel2) : f.agent === "gemini" ? chalk5.blue(agentLabel2) : f.agent === "codex" ? chalk5.magenta(agentLabel2) : chalk5.cyan(agentLabel2);
+            const agentLabel2 = agentBadgeText(f.agent);
+            const agentBadge = stale ? chalk5.dim(agentLabel2) : chalk5[agentColorName(f.agent)](agentLabel2);
             const toolDisplay = stale ? chalk5.dim(f.toolName) : chalk5.yellow(f.toolName);
             const cmdDisplay = stale ? chalk5.dim(f.commandPreview) : chalk5.gray(f.commandPreview);
             const sessionSuffix = f.sessionId ? chalk5.dim(`  \u2192 ${f.sessionId.slice(0, 8)}`) : "";
@@ -11883,6 +13020,7 @@ var init_scan = __esm({
     init_policy();
     init_dist();
     init_dlp();
+    init_hook_payload();
     init_dist();
     init_scan_summary();
     init_setup();
@@ -11961,6 +13099,8 @@ var init_scan = __esm({
       "exec_command",
       "shell",
       "run_shell_command",
+      "run_command",
+      // Antigravity (agy)
       "write",
       "edit",
       "multiedit"
@@ -16547,6 +17687,7 @@ function resolveUserSkillRoot(entry, cwd) {
 // src/cli/commands/check.ts
 init_dlp();
 init_audit();
+init_hook_payload();
 function sanitize2(value) {
   return value.replace(/[\x00-\x1F\x7F]/g, "");
 }
@@ -16559,15 +17700,27 @@ function detectAiAgent(payload) {
   if (payload.turn_id !== void 0) {
     return "Codex";
   }
+  if (payload.toolCall !== void 0 || payload.conversationId !== void 0) {
+    return "Antigravity";
+  }
   if (payload.hook_event_name === "PreToolUse" || payload.hook_event_name === "PostToolUse" || payload.tool_use_id !== void 0 || payload.permission_mode !== void 0) {
     return "Claude Code";
   }
   if (payload.hook_event_name === "BeforeTool" || payload.hook_event_name === "AfterTool" || payload.timestamp !== void 0) {
     return "Gemini CLI";
   }
+  if (payload.hook_event_name === "pre_tool_call" || payload.hook_event_name === "post_tool_call") {
+    return "Hermes";
+  }
   if (process.env.CLAUDECODE === "1" || process.env.CLAUDE_CODE_SESSION_ID) {
     return "Claude Code";
   }
+  if (process.env.HERMES_SESSION_ID || process.env.HERMES_HOME || process.env.HERMES_INTERACTIVE) {
+    return "Hermes";
+  }
+  if (process.env.ANTIGRAVITY_CONVERSATION_ID) {
+    return "Antigravity";
+  }
   if (process.env.GEMINI_CLI_VERSION || process.env.GEMINI_API_KEY) {
     return "Gemini CLI";
   }
@@ -16583,7 +17736,11 @@ function detectAiAgent(payload) {
   return "Terminal";
 }
 function registerCheckCommand(program2) {
-  program2.command("check", { hidden: true }).description("Hook handler \u2014 evaluates a tool call before execution").argument("[data]", "JSON string of the tool call").action(async (data) => {
+  program2.command("check", { hidden: true }).description("Hook handler \u2014 evaluates a tool call before execution").argument("[data]", "JSON string of the tool call").option(
+    "--agent <name>",
+    "Agent identity override, set by node9-authored hook registrations (e.g. antigravity)"
+  ).action(async (data, opts) => {
+    const agentOverride = agentLabelFromFlag(opts?.agent);
     const processPayload = async (raw) => {
       try {
         if (!raw || raw.trim() === "") process.exit(0);
@@ -16623,7 +17780,7 @@ RAW: ${raw}
           if (!prompt) process.exit(0);
           const dlpMatch = scanArgs({ prompt });
           if (!dlpMatch) process.exit(0);
-          const agent2 = detectAiAgent(payload);
+          const agent2 = agentOverride ?? detectAiAgent(payload);
           const sessionId2 = typeof payload.session_id === "string" ? payload.session_id : void 0;
           appendLocalAudit(
             "UserPromptSubmit",
@@ -16664,7 +17821,8 @@ RAW: ${raw}
           );
           process.exit(2);
         }
-        const safeCwdForConfig = typeof payload.cwd === "string" && path33.isAbsolute(payload.cwd) ? payload.cwd : void 0;
+        const payloadCwd = typeof payload.cwd === "string" ? payload.cwd : Array.isArray(payload.workspacePaths) && typeof payload.workspacePaths[0] === "string" ? payload.workspacePaths[0] : void 0;
+        const safeCwdForConfig = typeof payloadCwd === "string" && path33.isAbsolute(payloadCwd) ? payloadCwd : void 0;
         const config = getConfig(safeCwdForConfig);
         if (config.settings.autoStartDaemon && !isDaemonRunning() && !process.env.NODE9_NO_AUTO_DAEMON) {
           try {
@@ -16714,9 +17872,10 @@ RAW: ${raw}
           fs32.appendFileSync(logPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] STDIN: ${raw}
 `);
         }
-        const toolName = sanitize2(payload.tool_name ?? payload.name ?? "");
-        const toolInput = payload.tool_input ?? payload.args ?? {};
-        const agent = detectAiAgent(payload);
+        const rawToolName = sanitize2(extractToolName(payload));
+        const toolName = canonicalToolName(rawToolName);
+        const toolInput = canonicalToolInput(rawToolName, extractToolInput(payload));
+        const agent = agentOverride ?? detectAiAgent(payload);
         const mcpMatch = toolName.match(/^mcp__([^_](?:[^_]|_(?!_))*?)__/i);
         const mcpServer = mcpMatch?.[1];
         const sendBlock = (msg, result2) => {
@@ -16754,6 +17913,21 @@ RAW: ${raw}
             msg,
             result2?.recoveryCommand
           );
+          if (agent === "Antigravity") {
+            process.stdout.write(
+              JSON.stringify({ decision: "deny", reason: aiFeedbackMessage }) + "\n"
+            );
+            process.exit(0);
+          }
+          if (agent === "GitHub Copilot") {
+            process.stdout.write(
+              JSON.stringify({
+                permissionDecision: "deny",
+                permissionDecisionReason: aiFeedbackMessage
+              }) + "\n"
+            );
+            process.exit(0);
+          }
           process.stdout.write(
             JSON.stringify({
               decision: "block",
@@ -16772,11 +17946,11 @@ RAW: ${raw}
           sendBlock("Node9: unrecognised hook payload \u2014 tool name missing.");
           return;
         }
-        const sessionId = typeof payload.session_id === "string" ? payload.session_id : void 0;
-        const transcriptPath = typeof payload.transcript_path === "string" ? payload.transcript_path : void 0;
+        const sessionId = typeof payload.session_id === "string" ? payload.session_id : typeof payload.conversationId === "string" ? payload.conversationId : void 0;
+        const transcriptPath = typeof payload.transcript_path === "string" ? payload.transcript_path : typeof payload.transcriptPath === "string" ? payload.transcriptPath : void 0;
         const meta = { agent, mcpServer, sessionId, transcriptPath };
         const skillPinCfg = config.policy.skillPinning;
-        const rawSessionId = typeof payload.session_id === "string" ? payload.session_id : "";
+        const rawSessionId = sessionId ?? "";
         const safeSessionId = /^[A-Za-z0-9_\-]{1,128}$/.test(rawSessionId) ? rawSessionId : "";
         if (skillPinCfg.enabled && safeSessionId) {
           try {
@@ -16833,7 +18007,7 @@ RAW: ${raw}
               return;
             }
             if (!flag || flag.state !== "verified" && flag.state !== "warned") {
-              const absoluteCwd = typeof payload.cwd === "string" && path33.isAbsolute(payload.cwd) ? payload.cwd : void 0;
+              const absoluteCwd = typeof payloadCwd === "string" && path33.isAbsolute(payloadCwd) ? payloadCwd : void 0;
               const extraRoots = skillPinCfg.roots;
               const resolvedExtra = extraRoots.map((r) => resolveUserSkillRoot(r, absoluteCwd)).filter((r) => typeof r === "string");
               const roots = [...defaultSkillRoots(absoluteCwd), ...resolvedExtra];
@@ -16899,7 +18073,7 @@ RAW: ${raw}
         if (shouldSnapshot(toolName, toolInput, config)) {
           await createShadowSnapshot(toolName, toolInput, config.policy.snapshot.ignorePaths);
         }
-        const safeCwdForAuth = typeof payload.cwd === "string" && path33.isAbsolute(payload.cwd) ? payload.cwd : void 0;
+        const safeCwdForAuth = typeof payloadCwd === "string" && path33.isAbsolute(payloadCwd) ? payloadCwd : void 0;
         const result = await authorizeHeadless(toolName, toolInput, meta, {
           cwd: safeCwdForAuth
         });
@@ -17024,6 +18198,7 @@ function containsShellMetachar(token) {
 }
 
 // src/cli/commands/log.ts
+init_hook_payload();
 var TEST_COMMAND_RE2 = /(?:^|\s)(npm\s+(?:run\s+)?test|npx\s+(?:vitest|jest|mocha)|yarn\s+(?:run\s+)?test|pnpm\s+(?:run\s+)?test|vitest|jest|mocha|pytest|py\.test|cargo\s+test|go\s+test|bundle\s+exec\s+rspec|rspec|phpunit|dotnet\s+test)\b/i;
 function detectTestResult(command, output) {
   if (!TEST_COMMAND_RE2.test(command)) return null;
@@ -17042,13 +18217,19 @@ function sanitize3(value) {
   return value.replace(/[\x00-\x1F\x7F]/g, "");
 }
 function registerLogCommand(program2) {
-  program2.command("log", { hidden: true }).description("PostToolUse hook \u2014 records executed tool calls").argument("[data]", "JSON string of the tool call").action(async (data) => {
+  program2.command("log", { hidden: true }).description("PostToolUse hook \u2014 records executed tool calls").argument("[data]", "JSON string of the tool call").option(
+    "--agent <name>",
+    "Agent identity override, set by node9-authored hook registrations (e.g. antigravity)"
+  ).action(async (data, opts) => {
+    const agentOverride = agentLabelFromFlag(opts?.agent);
     const logPayload = async (raw) => {
       try {
         if (!raw || raw.trim() === "") process.exit(0);
         const payload = JSON.parse(raw);
-        const tool = sanitize3(payload.tool_name ?? payload.name ?? "unknown");
-        const rawInput = payload.tool_input ?? payload.args ?? {};
+        if (payload.toolCall === null) process.exit(0);
+        const rawToolName = sanitize3(extractToolName(payload, "unknown"));
+        const tool = canonicalToolName(rawToolName);
+        const rawInput = canonicalToolInput(rawToolName, extractToolInput(payload));
         const metaTag = (() => {
           const m = payload.meta;
           if (m && typeof m === "object") {
@@ -17057,7 +18238,7 @@ function registerLogCommand(program2) {
           }
           return void 0;
         })();
-        const agent = metaTag !== void 0 ? metaTag : payload.turn_id !== void 0 ? "Codex" : payload.hook_event_name === "PreToolUse" || payload.hook_event_name === "PostToolUse" || payload.tool_use_id !== void 0 || payload.permission_mode !== void 0 ? "Claude Code" : payload.hook_event_name === "BeforeTool" || payload.hook_event_name === "AfterTool" || payload.timestamp !== void 0 ? "Gemini CLI" : void 0;
+        const agent = agentOverride !== void 0 ? agentOverride : metaTag !== void 0 ? metaTag : payload.turn_id !== void 0 ? "Codex" : payload.toolCall !== void 0 || payload.conversationId !== void 0 ? "Antigravity" : payload.hook_event_name === "pre_tool_call" || payload.hook_event_name === "post_tool_call" ? "Hermes" : payload.hook_event_name === "PreToolUse" || payload.hook_event_name === "PostToolUse" || payload.tool_use_id !== void 0 || payload.permission_mode !== void 0 ? "Claude Code" : payload.hook_event_name === "BeforeTool" || payload.hook_event_name === "AfterTool" || payload.timestamp !== void 0 ? "Gemini CLI" : process.env.HERMES_SESSION_ID || process.env.HERMES_HOME || process.env.HERMES_INTERACTIVE ? "Hermes" : process.env.ANTIGRAVITY_CONVERSATION_ID ? "Antigravity" : void 0;
         const entry = {
           ts: (/* @__PURE__ */ new Date()).toISOString(),
           tool,
@@ -17066,7 +18247,9 @@ function registerLogCommand(program2) {
           source: "post-hook"
         };
         if (agent) entry.agent = agent;
-        if (payload.session_id) entry.sessionId = payload.session_id;
+        if (rawToolName !== tool) entry.agentToolName = rawToolName;
+        const payloadSessionId = payload.session_id ?? payload.conversationId;
+        if (payloadSessionId) entry.sessionId = payloadSessionId;
         const logPath = path34.join(os29.homedir(), ".node9", "audit.log");
         if (!fs33.existsSync(path34.dirname(logPath)))
           fs33.mkdirSync(path34.dirname(logPath), { recursive: true });
@@ -17103,7 +18286,8 @@ function registerLogCommand(program2) {
             }
           }
         }
-        const safeCwd = typeof payload.cwd === "string" && path34.isAbsolute(payload.cwd) ? payload.cwd : void 0;
+        const payloadCwd = typeof payload.cwd === "string" ? payload.cwd : Array.isArray(payload.workspacePaths) && typeof payload.workspacePaths[0] === "string" ? payload.workspacePaths[0] : void 0;
+        const safeCwd = typeof payloadCwd === "string" && path34.isAbsolute(payloadCwd) ? payloadCwd : void 0;
         const config = getConfig(safeCwd);
         if ((tool === "Bash" || tool === "bash") && config.settings.enableUndo !== false) {
           const bashCommand = typeof rawInput === "object" && rawInput !== null && "command" in rawInput && typeof rawInput.command === "string" ? rawInput.command : null;
@@ -19191,12 +20375,12 @@ function registerInitCommand(program2) {
       if (found.length === 0) {
         console.log(
           chalk16.gray(
-            "No AI agents detected. Install one of the supported agents (Claude Code, Codex, Gemini CLI, Cursor, Windsurf, VSCode, Claude Desktop, Opencode, or Pi)."
+            "No AI agents detected. Install one of the supported agents (Claude Code, Codex, Antigravity, Gemini CLI, GitHub Copilot CLI, Cursor, Windsurf, VSCode, Claude Desktop, Opencode, Pi, or Hermes Agent)."
           )
         );
         console.log(
           chalk16.gray(
-            "then run: node9 agents add <claude|codex|gemini|cursor|windsurf|vscode|claudeDesktop|opencode|pi>"
+            "then run: node9 agents add <claude|codex|antigravity|gemini|copilot|cursor|windsurf|vscode|claudeDesktop|opencode|pi|hermes>"
           )
         );
         return;
@@ -19210,6 +20394,8 @@ function registerInitCommand(program2) {
         console.log(chalk16.bold(`Wiring ${agent}...`));
         if (agent === "claude") await setupClaude();
         else if (agent === "gemini") await setupGemini();
+        else if (agent === "antigravity") await setupAntigravity();
+        else if (agent === "copilot") await setupCopilot();
         else if (agent === "cursor") await setupCursor();
         else if (agent === "codex") await setupCodex();
         else if (agent === "windsurf") await setupWindsurf();
@@ -19217,6 +20403,7 @@ function registerInitCommand(program2) {
         else if (agent === "claudeDesktop") await setupClaudeDesktop();
         else if (agent === "opencode") await setupOpencode();
         else if (agent === "pi") await setupPi();
+        else if (agent === "hermes") setupHermes();
         console.log("");
       }
       if ((process.platform === "darwin" || process.platform === "linux") && process.stdout.isTTY) {
@@ -20972,26 +22159,36 @@ import chalk23 from "chalk";
 var SETUP_FN = {
   claude: setupClaude,
   gemini: setupGemini,
+  antigravity: setupAntigravity,
+  copilot: setupCopilot,
   cursor: setupCursor,
   codex: setupCodex,
   windsurf: setupWindsurf,
   vscode: setupVSCode,
   claudeDesktop: setupClaudeDesktop,
   opencode: setupOpencode,
-  pi: setupPi
+  pi: setupPi,
+  hermes: setupHermes
 };
 var TEARDOWN_FN = {
   claude: teardownClaude,
   gemini: teardownGemini,
+  antigravity: teardownAntigravity,
+  copilot: teardownCopilot,
   cursor: teardownCursor,
   codex: teardownCodex,
   windsurf: teardownWindsurf,
   vscode: teardownVSCode,
   claudeDesktop: teardownClaudeDesktop,
   opencode: teardownOpencode,
-  pi: teardownPi
+  pi: teardownPi,
+  hermes: teardownHermes
 };
 var AGENT_NAMES = Object.keys(SETUP_FN);
+function resolveAgentName(agent) {
+  const lower = agent.toLowerCase();
+  return lower === "agy" ? "antigravity" : lower;
+}
 function registerAgentsCommand(program2) {
   const agents = program2.command("agents").description("List and manage AI agent integrations");
   agents.command("list").description("Show all supported agents and their Node9 status").action(() => {
@@ -21020,9 +22217,16 @@ function registerAgentsCommand(program2) {
         chalk23.yellow(`  ${unwired.length} agent(s) not yet wired. Run: `) + chalk23.white(`node9 agents add ${unwired[0].name}`) + "\n"
       );
     }
+    if (statuses.some((s) => s.name === "gemini" && s.installed)) {
+      console.log(
+        chalk23.yellow(
+          "  \u26A0\uFE0F  Gemini CLI stops serving AI Pro/Ultra and free tiers on 2026-06-18.\n"
+        ) + chalk23.gray("     Migrate to Antigravity: ") + chalk23.white("node9 agents add antigravity") + "\n"
+      );
+    }
   });
   agents.command("add").description("Wire Node9 into an agent").argument("<agent>", `Agent to wire: ${AGENT_NAMES.join(" | ")}`).action(async (agent) => {
-    const name = agent.toLowerCase();
+    const name = resolveAgentName(agent);
     const fn = SETUP_FN[name];
     if (!fn) {
       console.error(chalk23.red(`Unknown agent: "${agent}". Supported: ${AGENT_NAMES.join(", ")}`));
@@ -21031,7 +22235,7 @@ function registerAgentsCommand(program2) {
     await fn();
   });
   agents.command("remove").description("Remove Node9 from an agent").argument("<agent>", `Agent to unwire: ${AGENT_NAMES.join(" | ")}`).action((agent) => {
-    const name = agent.toLowerCase();
+    const name = resolveAgentName(agent);
     const fn = TEARDOWN_FN[name];
     if (!fn) {
       console.error(chalk23.red(`Unknown agent: "${agent}". Supported: ${AGENT_NAMES.join(", ")}`));
@@ -21049,6 +22253,7 @@ function registerAgentsCommand(program2) {
 init_scan();
 
 // src/cli/commands/sessions.ts
+init_scan_summary();
 import chalk24 from "chalk";
 import fs41 from "fs";
 import path42 from "path";
@@ -21659,7 +22864,9 @@ function renderList(summaries, totalCost) {
     const cost = s.costUSD > 0 ? chalk24.dim("  " + fmtCost3(s.costUSD).padEnd(8)) : "          ";
     const blocked = s.blockedCalls.length > 0 ? chalk24.red("  \u{1F6D1} " + String(s.blockedCalls.length)) : "";
     const snap = s.hasSnapshot ? chalk24.green("  \u{1F4F8}") : "";
-    const agentBadge = s.agent === "gemini" ? chalk24.blue("  [Gemini]") : s.agent === "codex" ? chalk24.magenta("  [Codex]") : chalk24.cyan("  [Claude]");
+    const agentBadge = chalk24[agentColorName(s.agent ?? "claude")](
+      "  " + agentBadgeText(s.agent ?? "claude", 0)
+    );
     const sid = chalk24.dim("  " + s.sessionId.slice(0, 8));
     console.log(
       `  ${timeStr}  ${prompt}  ${tools}${cost}${blocked}${snap}${agentBadge}${sid}${dateRange}`
@@ -21679,7 +22886,7 @@ function renderDetail(s) {
   );
   console.log(chalk24.bold("  Project  ") + chalk24.white(s.projectLabel));
   if (s.agent) {
-    const agentLabel2 = s.agent === "gemini" ? chalk24.blue("Gemini CLI") : s.agent === "codex" ? chalk24.magenta("Codex") : chalk24.cyan("Claude Code");
+    const agentLabel2 = chalk24[agentColorName(s.agent)](agentDisplayName(s.agent));
     console.log(chalk24.bold("  Agent    ") + agentLabel2);
   }
   console.log(chalk24.bold("  When     ") + chalk24.white(fmtDateTime(s.startTime)));
@@ -22316,31 +23523,34 @@ program.command("login").argument("<apiKey>").option("--local", "Save key for au
 });
 program.command("addto", { hidden: true }).description("Integrate Node9 with an AI agent").addHelpText(
   "after",
-  "\n  Supported targets:  claude  gemini  cursor  codex  windsurf  vscode  hud"
+  "\n  Supported targets:  claude  antigravity  copilot  gemini  cursor  codex  windsurf  vscode  hud"
 ).argument(
   "<target>",
-  "The agent to protect: claude | gemini | cursor | codex | windsurf | vscode | hud"
+  "The agent to protect: claude | antigravity | copilot | gemini | cursor | codex | windsurf | vscode | hud"
 ).action(async (target) => {
   if (target === "gemini") return await setupGemini();
+  if (target === "antigravity" || target === "agy") return await setupAntigravity();
+  if (target === "copilot") return await setupCopilot();
   if (target === "claude") return await setupClaude();
   if (target === "cursor") return await setupCursor();
   if (target === "codex") return await setupCodex();
   if (target === "windsurf") return await setupWindsurf();
   if (target === "vscode") return await setupVSCode();
+  if (target === "hermes") return setupHermes();
   if (target === "hud") return setupHud();
   console.error(
     chalk30.red(
-      `Unknown target: "${target}". Supported: claude, gemini, cursor, codex, windsurf, vscode, hud`
+      `Unknown target: "${target}". Supported: claude, antigravity, copilot, gemini, cursor, codex, windsurf, vscode, hermes, hud`
     )
   );
   process.exit(1);
 });
 program.command("setup", { hidden: true }).description('Alias for "addto" \u2014 integrate Node9 with an AI agent').addHelpText(
   "after",
-  "\n  Supported targets:  claude  gemini  cursor  codex  windsurf  vscode  hud"
+  "\n  Supported targets:  claude  antigravity  copilot  gemini  cursor  codex  windsurf  vscode  hud"
 ).argument(
   "[target]",
-  "The agent to protect: claude | gemini | cursor | codex | windsurf | vscode | hud"
+  "The agent to protect: claude | antigravity | copilot | gemini | cursor | codex | windsurf | vscode | hud"
 ).action(async (target) => {
   if (!target) {
     console.log(chalk30.cyan("\n\u{1F6E1}\uFE0F  Node9 Setup \u2014 integrate with your AI agent\n"));
@@ -22348,10 +23558,13 @@ program.command("setup", { hidden: true }).description('Alias for "addto" \u2014
     console.log("  Targets:");
     console.log("    " + chalk30.green("claude") + "    \u2014 Claude Code (hook mode)");
     console.log("    " + chalk30.green("gemini") + "    \u2014 Gemini CLI (hook mode)");
+    console.log("    " + chalk30.green("antigravity") + " \u2014 Antigravity / agy (hook mode)");
+    console.log("    " + chalk30.green("copilot") + "   \u2014 GitHub Copilot CLI (hook mode)");
     console.log("    " + chalk30.green("cursor") + "    \u2014 Cursor (MCP proxy)");
     console.log("    " + chalk30.green("codex") + "     \u2014 OpenAI Codex CLI (MCP proxy)");
     console.log("    " + chalk30.green("windsurf") + "  \u2014 Windsurf (MCP proxy)");
     console.log("    " + chalk30.green("vscode") + "    \u2014 VSCode / Copilot (MCP proxy)");
+    console.log("    " + chalk30.green("hermes") + "    \u2014 Hermes Agent (hook mode)");
     process.stdout.write(
       "    " + chalk30.green("hud") + "       \u2014 Claude Code security statusline\n"
     );
@@ -22360,38 +23573,44 @@ program.command("setup", { hidden: true }).description('Alias for "addto" \u2014
   }
   const t = target.toLowerCase();
   if (t === "gemini") return await setupGemini();
+  if (t === "antigravity" || t === "agy") return await setupAntigravity();
+  if (t === "copilot") return await setupCopilot();
   if (t === "claude") return await setupClaude();
   if (t === "cursor") return await setupCursor();
   if (t === "codex") return await setupCodex();
   if (t === "windsurf") return await setupWindsurf();
   if (t === "vscode") return await setupVSCode();
+  if (t === "hermes") return setupHermes();
   if (t === "hud") return setupHud();
   console.error(
     chalk30.red(
-      `Unknown target: "${target}". Supported: claude, gemini, cursor, codex, windsurf, vscode, hud`
+      `Unknown target: "${target}". Supported: claude, antigravity, copilot, gemini, cursor, codex, windsurf, vscode, hermes, hud`
     )
   );
   process.exit(1);
 });
 program.command("removefrom", { hidden: true }).description("Remove Node9 hooks from an AI agent configuration").addHelpText(
   "after",
-  "\n  Supported targets:  claude  gemini  cursor  codex  windsurf  vscode  hud"
+  "\n  Supported targets:  claude  antigravity  copilot  gemini  cursor  codex  windsurf  vscode  hud"
 ).argument(
   "<target>",
-  "The agent to remove from: claude | gemini | cursor | codex | windsurf | vscode | hud"
+  "The agent to remove from: claude | antigravity | copilot | gemini | cursor | codex | windsurf | vscode | hud"
 ).action((target) => {
   let fn;
   if (target === "claude") fn = teardownClaude;
   else if (target === "gemini") fn = teardownGemini;
+  else if (target === "antigravity" || target === "agy") fn = teardownAntigravity;
+  else if (target === "copilot") fn = teardownCopilot;
   else if (target === "cursor") fn = teardownCursor;
   else if (target === "codex") fn = teardownCodex;
   else if (target === "windsurf") fn = teardownWindsurf;
   else if (target === "vscode") fn = teardownVSCode;
+  else if (target === "hermes") fn = teardownHermes;
   else if (target === "hud") fn = teardownHud;
   else {
     console.error(
       chalk30.red(
-        `Unknown target: "${target}". Supported: claude, gemini, cursor, codex, windsurf, vscode, hud`
+        `Unknown target: "${target}". Supported: claude, antigravity, copilot, gemini, cursor, codex, windsurf, vscode, hermes, hud`
       )
     );
     process.exit(1);
@@ -22424,7 +23643,8 @@ program.command("uninstall").description("Remove all Node9 hooks and optionally
     ["Cursor", teardownCursor],
     ["Codex", teardownCodex],
     ["Windsurf", teardownWindsurf],
-    ["VSCode", teardownVSCode]
+    ["VSCode", teardownVSCode],
+    ["Hermes", teardownHermes]
   ]) {
     try {
       fn();
@@ -22647,6 +23867,9 @@ program.command("resume").description("Re-enable Node9 protection immediately").
 var HOOK_BASED_AGENTS = {
   claude: "claude",
   gemini: "gemini",
+  antigravity: "antigravity",
+  agy: "antigravity",
+  copilot: "copilot",
   cursor: "cursor"
 };
 program.argument("[command...]", "The agent command to run (e.g., gemini)").action(async (commandArgs) => {