@node9/proxy 1.33.0 → 1.35.0

package/dist/cli.js

@@ -5889,6 +5889,57 @@ function validateApiUrl(raw) {
   }
   return null;
 }
+function auditLocalAllow(toolName, args, checkedBy, creds, meta, dlpInfo, containsSensitiveArgs = false, riskMetadata) {
+  const validated = validateApiUrl(creds.apiUrl);
+  if (!validated) {
+    try {
+      import_fs10.default.appendFileSync(
+        HOOK_DEBUG_LOG,
+        `[audit] refused to send: invalid apiUrl scheme/host (got "${String(creds.apiUrl).slice(0, 200)}")
+`
+      );
+    } catch {
+    }
+    return Promise.resolve();
+  }
+  const safeArgs = containsSensitiveArgs ? { tool: toolName, redacted: true } : args;
+  const dlpSample = dlpInfo && typeof dlpInfo.redactedSample === "string" ? dlpInfo.redactedSample.slice(0, DLP_SAMPLE_MAX_LEN) : void 0;
+  const dlpPattern = dlpInfo && typeof dlpInfo.pattern === "string" ? dlpInfo.pattern.slice(0, DLP_PATTERN_MAX_LEN) : void 0;
+  const safeCheckedBy = KNOWN_CHECKED_BY.has(checkedBy) ? checkedBy : "unknown";
+  const cleanedRiskMetadata = riskMetadata ? Object.fromEntries(
+    Object.entries(riskMetadata).filter(
+      ([, v]) => typeof v === "string" && v.length > 0 || typeof v === "number" && Number.isFinite(v)
+    )
+  ) : void 0;
+  const hasRiskMetadata = cleanedRiskMetadata && Object.keys(cleanedRiskMetadata).length > 0;
+  return fetch(`${validated.toString().replace(/\/$/, "")}/audit`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json", Authorization: `Bearer ${creds.apiKey}` },
+    body: JSON.stringify({
+      toolName,
+      args: safeArgs,
+      checkedBy: safeCheckedBy,
+      ...dlpInfo && { dlpPattern, dlpSample },
+      ...hasRiskMetadata && { riskMetadata: cleanedRiskMetadata },
+      // session_id (Claude Code + Gemini CLI) groups all audit rows from one
+      // agent run; transcript_path is the authoritative pointer to the
+      // session log (survives Gemini resume drift). Both optional —
+      // unsupported agents (MCP-mediated) leave them undefined.
+      ...meta?.sessionId && { runId: meta.sessionId },
+      ...meta?.transcriptPath && { transcriptPath: meta.transcriptPath },
+      context: {
+        agent: meta?.agent,
+        mcpServer: meta?.mcpServer,
+        hostname: import_os9.default.hostname(),
+        cwd: process.cwd(),
+        platform: import_os9.default.platform()
+      }
+    }),
+    signal: AbortSignal.timeout(5e3)
+  }).then(() => {
+  }).catch(() => {
+  });
+}
 async function initNode9SaaS(toolName, args, creds, meta, riskMetadata, agentPolicy, forceReview) {
   const controller = new AbortController();
   const timeout = setTimeout(() => controller.abort(), 1e4);
@@ -6012,7 +6063,7 @@ async function resolveNode9SaaS(requestId, creds, approved, decidedBy) {
     );
   }
 }
-var import_fs10, import_os9, import_path12;
+var import_fs10, import_os9, import_path12, DLP_SAMPLE_MAX_LEN, DLP_PATTERN_MAX_LEN, KNOWN_CHECKED_BY;
 var init_cloud = __esm({
   "src/auth/cloud.ts"() {
     "use strict";
@@ -6020,6 +6071,39 @@ var init_cloud = __esm({
     import_os9 = __toESM(require("os"));
     import_path12 = __toESM(require("path"));
     init_audit();
+    DLP_SAMPLE_MAX_LEN = 200;
+    DLP_PATTERN_MAX_LEN = 100;
+    KNOWN_CHECKED_BY = /* @__PURE__ */ new Set([
+      "dlp-block",
+      "observe-mode-dlp-would-block",
+      "dlp-review-flagged",
+      "loop-detected",
+      "audit-mode",
+      "local-policy",
+      "smart-rule-block",
+      // Smart-rule block was downgraded to review because the daemon was
+      // running and we're not in CI. The block attempt is still recorded;
+      // the user got a popup. Distinct from 'smart-rule-block' so the
+      // dashboard can show "block rule overridden" separately from a hard
+      // block that fired with no human in the loop.
+      "smart-rule-block-override",
+      "persistent",
+      "trust",
+      "observe-mode",
+      "observe-mode-would-block",
+      // MCP supply-chain: the gateway pinned a server's tool definitions and they
+      // changed since (possible tool poisoning / rug pull). Emitted as a synthetic
+      // audit row so the SaaS surfaces it as a blocked event. The firewall maps
+      // this checkedBy to AUTO_BLOCKED. See doc/roadmap/active/saas-value-first.md
+      // (workstream B-Tier2).
+      "mcp-pin-mismatch",
+      // MCP visibility (B-Tier2, informational — NOT blocks): the gateway
+      // discovered a server's tool inventory (mcp-discovered) or saw an oversized
+      // tool response that bloats the context window (mcp-large-response). Stored
+      // AUTO_ALLOWED; carries mcpToolCount / mcpResponseBytes in riskMetadata.
+      "mcp-discovered",
+      "mcp-large-response"
+    ]);
   }
 });
 
@@ -9278,1114 +9362,1140 @@ var init_setup = __esm({
   }
 });
 
-// src/utils/hook-payload.ts
-function extractToolName(payload, defaultValue = "") {
-  return payload.tool_name ?? payload.name ?? payload.toolCall?.name ?? defaultValue;
+// src/pricing/litellm.ts
+function normalizeModel(raw) {
+  return raw.replace(/-\d{8}$/, "").toLowerCase();
 }
-function extractToolInput(payload) {
-  return payload.tool_input ?? payload.args ?? payload.toolCall?.args ?? {};
+function readCache() {
+  try {
+    const raw = JSON.parse(import_fs14.default.readFileSync(CACHE_FILE(), "utf-8"));
+    if (typeof raw.fetchedAt !== "string" || typeof raw.prices !== "object" || raw.prices === null) {
+      return null;
+    }
+    const ageMs = Date.now() - new Date(raw.fetchedAt).getTime();
+    if (ageMs < 0 || ageMs > TTL_MS) return null;
+    return raw.prices;
+  } catch {
+    return null;
+  }
 }
-function canonicalToolName(name) {
-  switch (name) {
-    // Hermes Agent
-    case "terminal":
-      return "Bash";
-    case "write_file":
-      return "Write";
-    case "patch":
-      return "Edit";
-    case "read_file":
-      return "Read";
-    case "search_files":
-      return "Grep";
-    // Antigravity (agy) — shell tool renamed from Gemini's run_shell_command
-    case "run_command":
-      return "Bash";
-    default:
-      return name;
+function writeCache(prices) {
+  try {
+    const target = CACHE_FILE();
+    const dir = import_path16.default.dirname(target);
+    if (!import_fs14.default.existsSync(dir)) import_fs14.default.mkdirSync(dir, { recursive: true });
+    const tmp = target + ".tmp";
+    const body = {
+      fetchedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      prices
+    };
+    import_fs14.default.writeFileSync(tmp, JSON.stringify(body) + "\n", "utf-8");
+    import_fs14.default.renameSync(tmp, target);
+  } catch (err2) {
+    try {
+      import_fs14.default.appendFileSync(
+        HOOK_DEBUG_LOG,
+        `[pricing] cache write failed: ${err2.message}
+`
+      );
+    } catch {
+    }
   }
 }
-function agentLabelFromFlag(flag) {
-  if (typeof flag !== "string") return void 0;
-  switch (flag.toLowerCase()) {
-    case "antigravity":
-    case "agy":
-      return "Antigravity";
-    case "copilot":
-      return "GitHub Copilot";
-    default:
-      return void 0;
+function tupleFromLiteLLM(entry) {
+  if (!entry || typeof entry !== "object") return null;
+  const e = entry;
+  const num3 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0;
+  const inCost = num3(e.input_cost_per_token);
+  const outCost = num3(e.output_cost_per_token);
+  if (inCost === 0 && outCost === 0) return null;
+  return [
+    inCost,
+    outCost,
+    num3(e.cache_creation_input_token_cost),
+    num3(e.cache_read_input_token_cost)
+  ];
+}
+async function fetchLiteLLMPricing() {
+  try {
+    const res = await fetch(LITELLM_URL, {
+      signal: AbortSignal.timeout(15e3)
+    });
+    if (!res.ok) return null;
+    const json = await res.json();
+    if (!json || typeof json !== "object") return null;
+    const out = {};
+    for (const [key, value] of Object.entries(json)) {
+      const tuple = tupleFromLiteLLM(value);
+      if (tuple) out[key.toLowerCase()] = tuple;
+    }
+    if (Object.keys(out).length < 10) {
+      return null;
+    }
+    return out;
+  } catch {
+    return null;
   }
 }
-function canonicalToolInput(rawToolName, input) {
-  if (rawToolName !== "run_command") return input;
-  if (typeof input !== "object" || input === null || Array.isArray(input)) return input;
-  const args = input;
-  if (typeof args.CommandLine !== "string") return input;
-  const { CommandLine, Cwd, ...rest } = args;
-  const canonical = { ...rest, command: CommandLine };
-  if (typeof Cwd === "string" && Cwd.length > 0) canonical.cwd = Cwd;
-  return canonical;
+async function ensurePricingLoaded() {
+  if (memCache !== null && Date.now() - memCacheAt < TTL_MS) return;
+  const fromDisk = readCache();
+  if (fromDisk && Object.keys(fromDisk).length > 0) {
+    memCache = fromDisk;
+    memCacheAt = Date.now();
+    lookupCache.clear();
+    return;
+  }
+  const fetched = await fetchLiteLLMPricing();
+  if (fetched && Object.keys(fetched).length > 0) {
+    memCache = fetched;
+    memCacheAt = Date.now();
+    writeCache(fetched);
+    lookupCache.clear();
+    return;
+  }
+  memCache = { ...BUNDLED_PRICING };
+  memCacheAt = Date.now();
+  lookupCache.clear();
 }
-var init_hook_payload = __esm({
-  "src/utils/hook-payload.ts"() {
+function pricingFor(model) {
+  const norm = normalizeModel(model);
+  const cached = lookupCache.get(norm);
+  if (cached !== void 0) return cached;
+  if (memCache === null && !diskChecked) {
+    diskChecked = true;
+    const disk = readCache();
+    if (disk && Object.keys(disk).length > 0) {
+      memCache = disk;
+      memCacheAt = Date.now();
+    }
+  }
+  const sources = [];
+  if (memCache) sources.push(memCache);
+  sources.push(BUNDLED_PRICING);
+  let resolved = null;
+  for (const source of sources) {
+    const exact = source[norm];
+    if (exact) {
+      resolved = exact;
+      break;
+    }
+    let best = null;
+    for (const key of Object.keys(source)) {
+      if (norm.startsWith(key.toLowerCase()) && (best === null || key.length > best.length)) {
+        best = key;
+      }
+    }
+    if (best) {
+      resolved = source[best];
+      break;
+    }
+  }
+  lookupCache.set(norm, resolved);
+  return resolved;
+}
+var import_fs14, import_path16, import_os13, LITELLM_URL, BUNDLED_PRICING, CACHE_FILE, TTL_MS, memCache, memCacheAt, diskChecked, lookupCache;
+var init_litellm = __esm({
+  "src/pricing/litellm.ts"() {
     "use strict";
+    import_fs14 = __toESM(require("fs"));
+    import_path16 = __toESM(require("path"));
+    import_os13 = __toESM(require("os"));
+    init_audit();
+    LITELLM_URL = "https://raw.githubusercontent.com/BerriAI/litellm/main/model_prices_and_context_window.json";
+    BUNDLED_PRICING = {
+      // Anthropic
+      "claude-opus-4": [5e-6, 25e-6, 625e-8, 5e-7],
+      "claude-opus-4-1": [5e-6, 25e-6, 625e-8, 5e-7],
+      "claude-opus-4-5": [5e-6, 25e-6, 625e-8, 5e-7],
+      "claude-opus-4-6": [5e-6, 25e-6, 625e-8, 5e-7],
+      "claude-opus-4-7": [5e-6, 25e-6, 625e-8, 5e-7],
+      "claude-sonnet-4": [3e-6, 15e-6, 375e-8, 3e-7],
+      "claude-sonnet-4-5": [3e-6, 15e-6, 375e-8, 3e-7],
+      "claude-sonnet-4-6": [3e-6, 15e-6, 375e-8, 3e-7],
+      "claude-haiku-4": [8e-7, 4e-6, 1e-6, 8e-8],
+      "claude-haiku-4-5": [8e-7, 4e-6, 1e-6, 8e-8],
+      "claude-3-7-sonnet": [3e-6, 15e-6, 375e-8, 3e-7],
+      "claude-3-5-sonnet": [3e-6, 15e-6, 375e-8, 3e-7],
+      "claude-3-5-haiku": [8e-7, 4e-6, 1e-6, 8e-8],
+      "claude-3-haiku": [25e-8, 125e-8, 3e-7, 3e-8],
+      // OpenAI. gpt-5 family + o-series copied from the live LiteLLM table
+      // (verified 2026-06-14) — the bundled gpt-5 was stale at $10/$30 vs the real
+      // $1.25/$10, and Codex models (gpt-5-codex etc.) were absent, so the offline
+      // fallback mispriced every Codex session. See cost-codex.codexPriceFor.
+      "gpt-4o": [5e-6, 15e-6, 0, 25e-7],
+      "gpt-4o-mini": [15e-8, 6e-7, 0, 75e-9],
+      "gpt-5": [125e-8, 1e-5, 0, 125e-9],
+      "gpt-5-codex": [125e-8, 1e-5, 0, 125e-9],
+      "gpt-5-mini": [25e-8, 2e-6, 0, 25e-9],
+      o3: [2e-6, 8e-6, 0, 5e-7],
+      "o4-mini": [11e-7, 44e-7, 0, 275e-9],
+      // Google. Values copied from the live LiteLLM table (verified 2026-06-14)
+      // so the bundled fallback prices the current Gemini tiers correctly offline
+      // — the local cost readers were carrying a stale hardcoded copy where
+      // gemini-2.5-flash read $0.15/$0.60 vs the real $0.30/$2.50 (~4× under on
+      // output). See cost-gemini.geminiPriceFor (the single Gemini price source).
+      "gemini-2.5-pro": [125e-8, 1e-5, 0, 125e-9],
+      "gemini-2.5-flash": [3e-7, 25e-7, 0, 3e-8],
+      "gemini-2.0-flash": [75e-9, 3e-7, 0, 0],
+      "gemini-1.5-pro": [125e-8, 5e-6, 0, 0]
+    };
+    CACHE_FILE = () => import_path16.default.join(import_os13.default.homedir(), ".node9", "model-pricing.json");
+    TTL_MS = 24 * 60 * 60 * 1e3;
+    memCache = null;
+    memCacheAt = 0;
+    diskChecked = false;
+    lookupCache = /* @__PURE__ */ new Map();
   }
 });
 
-// src/scan-summary.ts
-function agentDisplayName(agent) {
-  return AGENT_LONG[agent] ?? "Claude Code";
+// src/cost-gemini.ts
+function geminiTmpDir() {
+  return import_path17.default.join(import_os14.default.homedir(), ".gemini", "tmp");
 }
-function agentBadgeText(agent, width = 10) {
-  return `[${AGENT_SHORT[agent] ?? "Claude"}]`.padEnd(width);
+function geminiPriceFor(model) {
+  let tuple = pricingFor(model);
+  if (!tuple && /^gemini-/i.test(model)) {
+    for (const proxy of GEMINI_FALLBACK_MODELS) {
+      tuple = pricingFor(proxy);
+      if (tuple) break;
+    }
+  }
+  if (!tuple) return null;
+  return { input: tuple[0], output: tuple[1], cacheRead: tuple[3] || tuple[0] };
 }
-function agentColorName(agent) {
-  switch (agent) {
-    case "gemini":
-      return "blue";
-    case "codex":
-      return "magenta";
-    case "antigravity":
-      return "yellow";
-    case "copilot":
-      return "green";
-    case "shell":
-      return "yellow";
-    default:
-      return "cyan";
+function safeReaddir(dir) {
+  try {
+    return import_fs15.default.readdirSync(dir);
+  } catch {
+    return [];
   }
 }
-function buildScanSummary(agents) {
-  const stats = {
-    sessions: 0,
-    totalToolCalls: 0,
-    bashCalls: 0,
-    totalCostUSD: 0,
-    firstDate: null,
-    lastDate: null
-  };
-  for (const a of agents) {
-    stats.sessions += a.scan.sessions;
-    stats.totalToolCalls += a.scan.totalToolCalls;
-    stats.bashCalls += a.scan.bashCalls;
-    stats.totalCostUSD += a.scan.totalCostUSD;
-    if (a.scan.firstDate && (!stats.firstDate || a.scan.firstDate < stats.firstDate)) {
-      stats.firstDate = a.scan.firstDate;
-    }
-    if (a.scan.lastDate && (!stats.lastDate || a.scan.lastDate > stats.lastDate)) {
-      stats.lastDate = a.scan.lastDate;
-    }
-  }
-  const allFindings = agents.flatMap((a) => a.scan.findings);
-  const allLeaks = agents.flatMap(
-    (a) => a.scan.dlpFindings.map((f) => ({
-      patternName: f.patternName,
-      redactedSample: f.redactedSample,
-      toolName: f.toolName,
-      timestamp: f.timestamp,
-      project: f.project,
-      sessionId: f.sessionId,
-      agent: f.agent
-    }))
-  );
-  const allLoops = agents.flatMap(
-    (a) => a.scan.loopFindings.map((f) => ({
-      toolName: f.toolName,
-      commandPreview: f.commandPreview,
-      count: f.count,
-      timestamp: f.timestamp,
-      project: f.project,
-      sessionId: f.sessionId,
-      agent: f.agent,
-      kind: f.kind
-    }))
-  );
-  const byVerdict = {
-    blocked: allFindings.filter((f) => f.source.rule.verdict === "block").length,
-    supervised: allFindings.filter((f) => f.source.rule.verdict === "review").length,
-    leaks: allLeaks.length,
-    loops: allLoops.length
-  };
-  const byAgent = agents.map((a) => ({
-    id: a.id,
-    label: a.label,
-    icon: a.icon,
-    sessions: a.scan.sessions,
-    findings: a.scan.findings.length + a.scan.dlpFindings.length + a.scan.loopFindings.length,
-    costUSD: a.scan.totalCostUSD
-  })).filter((s) => s.sessions > 0 || s.findings > 0);
-  const sections = buildSections(allFindings);
-  const wastedIters = allLoops.filter((l) => l.kind !== "long-iteration").reduce((sum, l) => sum + Math.max(0, l.count - LOOP_THRESHOLD_FOR_WASTE), 0);
-  const loopWastedUSD = wastedIters * COST_PER_LOOP_ITER_USD;
-  return {
-    stats,
-    byVerdict,
-    byAgent,
-    sections,
-    leaks: allLeaks,
-    loops: allLoops,
-    loopWastedUSD
-  };
-}
-function buildSections(findings) {
-  const sectionMap = /* @__PURE__ */ new Map();
-  function ensureSection(id, label, subtitle, sourceType, shieldKey) {
-    let s = sectionMap.get(id);
-    if (!s) {
-      s = {
-        id,
-        label,
-        subtitle,
-        sourceType,
-        shieldKey,
-        blockedCount: 0,
-        reviewCount: 0,
-        rules: []
-      };
-      sectionMap.set(id, s);
-    }
-    return s;
-  }
-  const ruleMap = /* @__PURE__ */ new Map();
-  for (const f of findings) {
-    const src = f.source;
-    const sourceType = src.sourceType;
-    const shieldName = src.shieldName;
-    const verdict = src.rule.verdict === "block" ? "block" : "review";
-    let sectionId;
-    let sectionLabel;
-    let sectionSubtitle;
-    let shieldKey;
-    if (sourceType === "default") {
-      sectionId = "default";
-      sectionLabel = "Default Rules";
-      sectionSubtitle = "built-in, always on";
-    } else if (sourceType === "shield") {
-      sectionId = `shield:${shieldName}`;
-      sectionLabel = shieldName;
-      sectionSubtitle = SHIELDS[shieldName]?.description ?? "";
-      shieldKey = shieldName;
-    } else if (shieldName === "cloud") {
-      sectionId = "cloud";
-      sectionLabel = "Cloud Policy";
-      sectionSubtitle = "synced from node9 cloud";
-    } else {
-      sectionId = "user";
-      sectionLabel = "Your Rules";
-      sectionSubtitle = "added in node9.config.json";
-    }
-    const section = ensureSection(sectionId, sectionLabel, sectionSubtitle, sourceType, shieldKey);
-    const ruleDisplayName = (src.rule.name ?? "unnamed").replace(/^shield:[^:]+:/, "");
-    const ruleKey = sectionId + "::" + ruleDisplayName;
-    let rule = ruleMap.get(ruleKey);
-    if (!rule) {
-      rule = {
-        name: ruleDisplayName,
-        verdict,
-        reason: src.rule.reason ?? "",
-        findings: []
-      };
-      ruleMap.set(ruleKey, rule);
-      section.rules.push(rule);
-    }
-    const cmdPreview = previewCommand(f.input, 120);
-    const fullCmd = fullCommandOf(f.input);
-    const isDupe = rule.findings.some((x) => x.project === f.project && x.command === cmdPreview);
-    if (!isDupe) {
-      rule.findings.push({
-        timestamp: f.timestamp ?? "",
-        command: cmdPreview,
-        fullCommand: fullCmd,
-        project: f.project,
-        sessionId: f.sessionId,
-        agent: f.agent,
-        toolName: f.toolName
-      });
-    }
-    if (verdict === "block") section.blockedCount++;
-    else section.reviewCount++;
-  }
-  const sections = [...sectionMap.values()];
-  sections.sort((a, b) => {
-    const aTotal = a.blockedCount + a.reviewCount;
-    const bTotal = b.blockedCount + b.reviewCount;
-    if (b.blockedCount !== a.blockedCount) return b.blockedCount - a.blockedCount;
-    return bTotal - aTotal;
-  });
-  for (const s of sections) {
-    s.rules.sort((a, b) => {
-      const aBlock = a.verdict === "block" ? 1 : 0;
-      const bBlock = b.verdict === "block" ? 1 : 0;
-      if (bBlock !== aBlock) return bBlock - aBlock;
-      return b.findings.length - a.findings.length;
-    });
-  }
-  return sections;
-}
-function previewCommand(input, max) {
-  const raw = input.command ?? input.query ?? input.file_path ?? JSON.stringify(input);
-  const s = String(raw).replace(/\s+/g, " ").trim();
-  return s.length > max ? s.slice(0, max - 1) + "\u2026" : s;
-}
-function fullCommandOf(input) {
-  const raw = input.command ?? input.query ?? input.file_path ?? JSON.stringify(input);
-  return String(raw).replace(/\s+/g, " ").trim();
-}
-var AGENT_SHORT, AGENT_LONG;
-var init_scan_summary = __esm({
-  "src/scan-summary.ts"() {
-    "use strict";
-    init_shields();
-    init_dist();
-    init_dist();
-    AGENT_SHORT = {
-      claude: "Claude",
-      gemini: "Gemini",
-      codex: "Codex",
-      antigravity: "Agy",
-      copilot: "Copilot",
-      shell: "Shell"
-    };
-    AGENT_LONG = {
-      claude: "Claude Code",
-      gemini: "Gemini CLI",
-      codex: "Codex",
-      antigravity: "Antigravity",
-      copilot: "GitHub Copilot",
-      shell: "Shell"
-    };
-  }
-});
-
-// src/cli/commands/blast.ts
-function buildSensitivePaths(home, cwd) {
-  return [
-    {
-      full: import_path16.default.join(home, ".ssh", "id_rsa"),
-      label: "~/.ssh/id_rsa",
-      description: "RSA private key \u2014 grants SSH access to your servers",
-      score: 20
-    },
-    {
-      full: import_path16.default.join(home, ".ssh", "id_ed25519"),
-      label: "~/.ssh/id_ed25519",
-      description: "Ed25519 private key \u2014 grants SSH access to your servers",
-      score: 20
-    },
-    {
-      full: import_path16.default.join(home, ".ssh", "id_ecdsa"),
-      label: "~/.ssh/id_ecdsa",
-      description: "ECDSA private key \u2014 grants SSH access to your servers",
-      score: 20
-    },
-    {
-      full: import_path16.default.join(home, ".aws", "credentials"),
-      label: "~/.aws/credentials",
-      description: "AWS access keys \u2014 full cloud account access",
-      score: 20
-    },
-    {
-      full: import_path16.default.join(home, ".aws", "config"),
-      label: "~/.aws/config",
-      description: "AWS configuration \u2014 account and region settings",
-      score: 5
-    },
-    {
-      full: import_path16.default.join(home, ".config", "gcloud", "credentials.db"),
-      label: "~/.config/gcloud/credentials.db",
-      description: "Google Cloud credentials",
-      score: 15
-    },
-    {
-      full: import_path16.default.join(home, ".docker", "config.json"),
-      label: "~/.docker/config.json",
-      description: "Docker registry auth tokens",
-      score: 10
-    },
-    {
-      full: import_path16.default.join(home, ".netrc"),
-      label: "~/.netrc",
-      description: "FTP/HTTP credentials in plain text",
-      score: 15
-    },
-    {
-      full: import_path16.default.join(home, ".npmrc"),
-      label: "~/.npmrc",
-      description: "npm auth token \u2014 can publish packages as you",
-      score: 10
-    },
-    {
-      full: import_path16.default.join(home, ".node9", "credentials.json"),
-      label: "~/.node9/credentials.json",
-      description: "Node9 cloud API key",
-      score: 10
-    },
-    {
-      full: import_path16.default.join(cwd, ".env"),
-      label: ".env  (current folder)",
-      description: "App secrets \u2014 database passwords, API keys",
-      score: 20
-    },
-    {
-      full: import_path16.default.join(cwd, ".env.local"),
-      label: ".env.local  (current folder)",
-      description: "Local overrides \u2014 often contains real credentials",
-      score: 15
-    },
-    {
-      full: import_path16.default.join(cwd, ".env.production"),
-      label: ".env.production  (current folder)",
-      description: "Production secrets",
-      score: 20
-    }
-  ];
-}
-function isReadable(filePath) {
+function isDir(p) {
   try {
-    import_fs14.default.accessSync(filePath, import_fs14.default.constants.R_OK);
-    return true;
+    return import_fs15.default.statSync(p).isDirectory();
   } catch {
     return false;
   }
 }
-function scoreLabel(score) {
-  if (score >= 80) return import_chalk2.default.green(`${score}/100  Good`);
-  if (score >= 50) return import_chalk2.default.yellow(`${score}/100  Moderate risk`);
-  if (score >= 25) return import_chalk2.default.red(`${score}/100  High risk`);
-  return import_chalk2.default.red.bold(`${score}/100  Critical`);
-}
-function runBlast() {
-  const home = import_os13.default.homedir();
-  const cwd = process.cwd();
-  const paths = buildSensitivePaths(home, cwd);
-  let scoreDeduction = 0;
-  const reachable = [];
-  for (const p of paths) {
-    if (import_fs14.default.existsSync(p.full) && isReadable(p.full)) {
-      reachable.push(p);
-      scoreDeduction += p.score;
-    }
-  }
-  const envFindings = [];
-  for (const [key, value] of Object.entries(process.env)) {
-    if (!value) continue;
-    const match = scanArgs({ [key]: value });
-    if (match) {
-      envFindings.push({ key, patternName: match.patternName });
-      scoreDeduction += 10;
+function listGeminiSessionFiles(base) {
+  const out = [];
+  for (const project of safeReaddir(base)) {
+    const chats = import_path17.default.join(base, project, "chats");
+    if (!isDir(chats)) continue;
+    for (const f of safeReaddir(chats)) {
+      if (f.startsWith("session-") && f.endsWith(".jsonl")) {
+        out.push({ file: import_path17.default.join(chats, f), project });
+      }
     }
   }
-  return { reachable, envFindings, score: Math.max(0, 100 - scoreDeduction) };
+  return out;
 }
-function registerBlastCommand(program2) {
-  program2.command("blast").description("Map what an AI agent can currently reach on this machine").action(() => {
-    const home = import_os13.default.homedir();
-    const cwd = process.cwd();
-    const { reachable, envFindings, score } = runBlast();
-    console.log("");
-    console.log(
-      import_chalk2.default.bold("  \u{1F52D}  Node9 Blast Radius") + import_chalk2.default.dim("  \xB7  what an AI agent can reach from here")
-    );
-    console.log(import_chalk2.default.dim("  Running in: ") + import_chalk2.default.white(cwd.replace(home, "~")));
-    console.log("");
-    if (reachable.length > 0) {
-      console.log("  " + import_chalk2.default.red.bold("Sensitive files reachable:"));
-      for (const p of reachable) {
-        console.log(
-          "    " + import_chalk2.default.red("\u2717  ") + import_chalk2.default.yellow(p.label.padEnd(38)) + import_chalk2.default.dim(p.description)
-        );
-      }
-      console.log("");
+function parseGeminiSession(lines, project) {
+  const seenIds = /* @__PURE__ */ new Set();
+  const byKey = /* @__PURE__ */ new Map();
+  let runId = "";
+  for (const raw of lines) {
+    if (!raw.trim()) continue;
+    let obj;
+    try {
+      obj = JSON.parse(raw);
+    } catch {
+      continue;
     }
-    if (envFindings.length > 0) {
-      console.log("  " + import_chalk2.default.red.bold("Secrets in active environment:"));
-      for (const f of envFindings) {
-        console.log(
-          "    " + import_chalk2.default.red("\u2717  ") + import_chalk2.default.yellow(f.key.padEnd(38)) + import_chalk2.default.dim(f.patternName)
-        );
-      }
-      console.log("");
+    if (typeof obj.sessionId === "string" && !runId) runId = obj.sessionId;
+    if (!obj.tokens || !obj.model || !obj.timestamp) continue;
+    if (obj.id) {
+      if (seenIds.has(obj.id)) continue;
+      seenIds.add(obj.id);
     }
-    console.log("  " + import_chalk2.default.dim("\u2500".repeat(70)));
-    if (reachable.length === 0 && envFindings.length === 0) {
-      console.log("  " + import_chalk2.default.green("\u2705  No sensitive files or environment secrets found."));
-      console.log("  Security Score: " + scoreLabel(score));
+    const price = geminiPriceFor(obj.model);
+    if (!price) continue;
+    const inp = obj.tokens.input ?? 0;
+    const out = obj.tokens.output ?? 0;
+    const cached = Math.min(obj.tokens.cached ?? 0, inp);
+    const fresh = Math.max(0, inp - cached);
+    const cost = fresh * price.input + cached * price.cacheRead + out * price.output;
+    const date = obj.timestamp.slice(0, 10);
+    const model = normalizeModel(obj.model);
+    const key = `${date}::${model}`;
+    const prev = byKey.get(key);
+    if (prev) {
+      prev.costUSD += cost;
+      prev.inputTokens += fresh;
+      prev.outputTokens += out;
+      prev.cacheReadTokens += cached;
     } else {
-      console.log(
-        "  Security Score: " + scoreLabel(score) + import_chalk2.default.dim(
-          `  (${reachable.length} file${reachable.length !== 1 ? "s" : ""}, ${envFindings.length} env var${envFindings.length !== 1 ? "s" : ""})`
-        )
-      );
-      console.log("");
-      console.log(
-        import_chalk2.default.dim(
-          "  Every AI agent you start can read the files and env vars listed above.\n  Run `node9 shield enable project-jail` to restrict agent file access.\n  Run `node9 mask` to redact secrets from existing session history."
-        )
-      );
+      byKey.set(key, {
+        date,
+        model,
+        workingDir: project,
+        runId,
+        costUSD: cost,
+        inputTokens: fresh,
+        outputTokens: out,
+        cacheReadTokens: cached,
+        cacheWriteTokens: 0
+      });
     }
-    console.log("");
-  });
+  }
+  if (runId) for (const e of byKey.values()) e.runId = runId;
+  return [...byKey.values()];
 }
-var import_chalk2, import_fs14, import_path16, import_os13;
-var init_blast = __esm({
-  "src/cli/commands/blast.ts"() {
+var import_fs15, import_os14, import_path17, GEMINI_FALLBACK_MODELS, geminiSource;
+var init_cost_gemini = __esm({
+  "src/cost-gemini.ts"() {
     "use strict";
-    import_chalk2 = __toESM(require("chalk"));
-    import_fs14 = __toESM(require("fs"));
-    import_path16 = __toESM(require("path"));
-    import_os13 = __toESM(require("os"));
-    init_dlp();
+    import_fs15 = __toESM(require("fs"));
+    import_os14 = __toESM(require("os"));
+    import_path17 = __toESM(require("path"));
+    init_litellm();
+    GEMINI_FALLBACK_MODELS = ["gemini-2.5-flash", "gemini-2.0-flash"];
+    geminiSource = {
+      id: "gemini",
+      available() {
+        try {
+          return import_fs15.default.existsSync(geminiTmpDir());
+        } catch {
+          return false;
+        }
+      },
+      collect(sinceMs) {
+        const combined = /* @__PURE__ */ new Map();
+        for (const { file, project } of listGeminiSessionFiles(geminiTmpDir())) {
+          try {
+            if (sinceMs !== void 0 && import_fs15.default.statSync(file).mtimeMs < sinceMs) continue;
+          } catch {
+            continue;
+          }
+          let content;
+          try {
+            content = import_fs15.default.readFileSync(file, "utf8");
+          } catch {
+            continue;
+          }
+          for (const e of parseGeminiSession(content.split("\n"), project)) {
+            const key = `${e.date}::${e.model}::${e.workingDir ?? ""}::${e.runId ?? ""}`;
+            const prev = combined.get(key);
+            if (prev) {
+              prev.costUSD += e.costUSD;
+              prev.inputTokens += e.inputTokens;
+              prev.outputTokens += e.outputTokens;
+              prev.cacheReadTokens += e.cacheReadTokens;
+              prev.cacheWriteTokens += e.cacheWriteTokens;
+            } else {
+              combined.set(key, { ...e });
+            }
+          }
+        }
+        return [...combined.values()];
+      }
+    };
   }
 });
 
-// src/cli/render/scan-derive.ts
-function classifyScore(score) {
-  if (score >= 80) return { band: "good", label: "Good", color: import_chalk3.default.green };
-  if (score >= 50) return { band: "at-risk", label: "At Risk", color: import_chalk3.default.yellow };
-  return { band: "critical", label: "Critical", color: import_chalk3.default.red };
-}
-function topDlpPatterns(findings, n) {
-  const counts = /* @__PURE__ */ new Map();
-  for (const f of findings) {
-    counts.set(f.patternName, (counts.get(f.patternName) ?? 0) + 1);
-  }
-  return [...counts.entries()].sort((a, b) => b[1] - a[1]).slice(0, n).map(([name, count]) => ({ name, count }));
+// src/cost-codex.ts
+function codexSessionsDir() {
+  return import_path18.default.join(import_os15.default.homedir(), ".codex", "sessions");
 }
-function topRulesByVerdict(sections, verdict, n) {
-  const matched = [];
-  for (const section of sections) {
-    for (const rule of section.rules) {
-      const matches = verdict === "block" ? rule.verdict === "block" : rule.verdict !== "block";
-      if (matches) matched.push({ name: rule.name, count: rule.findings.length });
-    }
-  }
-  return matched.sort((a, b) => b.count - a.count).slice(0, n);
+function codexPriceFor(model) {
+  return pricingFor(model) ?? CODEX_FALLBACK;
 }
-function computeLoopWaste(loops, totalToolCalls) {
-  const wastedCalls = loops.reduce((s, l) => s + Math.max(0, l.count - 1), 0);
-  const wastePct = totalToolCalls > 0 ? Math.round(wastedCalls / totalToolCalls * 100) : 0;
-  return { wastedCalls, wastePct };
+function codexSessionCost(model, tokens) {
+  const nonCached = Math.max(0, tokens.input - tokens.cached);
+  const [pin, pout, , pcr] = codexPriceFor(model || "gpt-5");
+  return nonCached * pin + tokens.cached * pcr + tokens.output * pout;
 }
-function rollupByShield(sections, topRulesPerShield = 3) {
+function listCodexSessionFiles(base) {
   const out = [];
-  for (const section of sections) {
-    if (section.sourceType !== "shield") continue;
-    if (!section.shieldKey) continue;
-    const totalCatches = section.blockedCount + section.reviewCount;
-    const topRuleLabels = [...section.rules].sort((a, b) => b.findings.length - a.findings.length).slice(0, topRulesPerShield).map((r) => r.findings.length > 1 ? `${r.name} \xD7${r.findings.length}` : r.name);
-    out.push({
-      shieldName: section.shieldKey,
-      totalCatches,
-      blockCatches: section.blockedCount,
-      reviewCatches: section.reviewCount,
-      topRuleLabels
-    });
+  for (const y of safeReaddir2(base)) {
+    const yp = import_path18.default.join(base, y);
+    if (!isDir2(yp)) continue;
+    for (const m of safeReaddir2(yp)) {
+      const mp = import_path18.default.join(yp, m);
+      if (!isDir2(mp)) continue;
+      for (const d of safeReaddir2(mp)) {
+        const dp = import_path18.default.join(mp, d);
+        if (!isDir2(dp)) continue;
+        for (const f of safeReaddir2(dp)) {
+          if (f.endsWith(".jsonl")) out.push(import_path18.default.join(dp, f));
+        }
+      }
+    }
   }
-  return out.sort((a, b) => b.totalCatches - a.totalCatches);
+  return out;
 }
-function boxPanel(title, bodyLines, width = PANEL_WIDTH) {
-  const inner = width - 4;
-  const out = [];
-  const titlePad = ` ${title} `;
-  const titleWidth = (0, import_string_width.default)(titlePad);
-  const titleSegment = titleWidth <= inner ? titlePad : titlePad.slice(0, inner);
-  const dashFill = "\u2500".repeat(Math.max(0, inner - (0, import_string_width.default)(titleSegment)));
-  out.push(import_chalk3.default.dim("\u256D\u2500") + import_chalk3.default.bold(titleSegment) + import_chalk3.default.dim(`${dashFill}\u2500\u256E`));
-  for (const line of bodyLines) {
-    const padding = " ".repeat(Math.max(0, inner - line.width));
-    out.push(import_chalk3.default.dim("\u2502 ") + line.rendered + padding + import_chalk3.default.dim(" \u2502"));
+function safeReaddir2(dir) {
+  try {
+    return import_fs16.default.readdirSync(dir);
+  } catch {
+    return [];
   }
-  out.push(import_chalk3.default.dim("\u2570" + "\u2500".repeat(inner + 2) + "\u256F"));
-  return out;
 }
-function relativeDate(timestamp, now = /* @__PURE__ */ new Date()) {
-  const t = new Date(timestamp).getTime();
-  if (Number.isNaN(t)) return "?";
-  const days = Math.floor((now.getTime() - t) / 864e5);
-  if (days < 1) return "today";
-  if (days > 90) return "90d+";
-  return `${days}d`;
+function isDir2(p) {
+  try {
+    return import_fs16.default.statSync(p).isDirectory();
+  } catch {
+    return false;
+  }
 }
-var import_chalk3, import_string_width, PANEL_WIDTH;
-var init_scan_derive = __esm({
-  "src/cli/render/scan-derive.ts"() {
-    "use strict";
-    import_chalk3 = __toESM(require("chalk"));
-    import_string_width = __toESM(require("string-width"));
-    PANEL_WIDTH = 76;
+function parseCodexSession(lines) {
+  let sessionStart2 = "";
+  let runId = "";
+  let cwd = "";
+  let model = "";
+  let input = 0;
+  let cached = 0;
+  let output = 0;
+  let sawUsage = false;
+  for (const raw of lines) {
+    if (!raw.trim()) continue;
+    let entry;
+    try {
+      entry = JSON.parse(raw);
+    } catch {
+      continue;
+    }
+    const p = entry.payload ?? {};
+    if (entry.type === "session_meta") {
+      if (!sessionStart2 && typeof p["timestamp"] === "string") sessionStart2 = p["timestamp"];
+      if (!runId && typeof p["id"] === "string") runId = p["id"];
+      if (!cwd && typeof p["cwd"] === "string") cwd = p["cwd"];
+      continue;
+    }
+    if (entry.type === "turn_context") {
+      if (typeof p["model"] === "string") model = p["model"];
+      if (!cwd && typeof p["cwd"] === "string") cwd = p["cwd"];
+      continue;
+    }
+    if (entry.type === "event_msg" && p["type"] === "token_count") {
+      const info = p["info"] ?? {};
+      const usage = info["total_token_usage"] ?? {};
+      if (typeof usage["input_tokens"] === "number") input = usage["input_tokens"];
+      if (typeof usage["cached_input_tokens"] === "number") cached = usage["cached_input_tokens"];
+      if (typeof usage["output_tokens"] === "number") output = usage["output_tokens"];
+      sawUsage = true;
+    }
   }
-});
-
-// src/protection.ts
-var PROTECTIVE_SHIELD_DISCOUNTS;
-var init_protection = __esm({
-  "src/protection.ts"() {
+  if (!sessionStart2 || !sawUsage) return null;
+  const nonCached = Math.max(0, input - cached);
+  if (nonCached === 0 && output === 0 && cached === 0) return null;
+  const norm = normalizeModel(model || "gpt-5");
+  const costUSD = codexSessionCost(model, { input, cached, output });
+  return {
+    date: sessionStart2.slice(0, 10),
+    model: norm,
+    workingDir: cwd,
+    runId,
+    costUSD,
+    inputTokens: nonCached,
+    outputTokens: output,
+    cacheReadTokens: cached,
+    cacheWriteTokens: 0
+  };
+}
+var import_fs16, import_os15, import_path18, CODEX_FALLBACK, codexSource;
+var init_cost_codex = __esm({
+  "src/cost-codex.ts"() {
     "use strict";
-    PROTECTIVE_SHIELD_DISCOUNTS = {
-      "project-jail": 0.7
+    import_fs16 = __toESM(require("fs"));
+    import_os15 = __toESM(require("os"));
+    import_path18 = __toESM(require("path"));
+    init_litellm();
+    CODEX_FALLBACK = [5e-6, 15e-6, 0, 25e-7];
+    codexSource = {
+      id: "codex",
+      available() {
+        try {
+          return import_fs16.default.existsSync(codexSessionsDir());
+        } catch {
+          return false;
+        }
+      },
+      collect(sinceMs) {
+        const base = codexSessionsDir();
+        const combined = /* @__PURE__ */ new Map();
+        for (const file of listCodexSessionFiles(base)) {
+          try {
+            if (sinceMs !== void 0 && import_fs16.default.statSync(file).mtimeMs < sinceMs) continue;
+          } catch {
+            continue;
+          }
+          let content;
+          try {
+            content = import_fs16.default.readFileSync(file, "utf8");
+          } catch {
+            continue;
+          }
+          const e = parseCodexSession(content.split("\n"));
+          if (!e) continue;
+          const key = `${e.date}::${e.model}::${e.workingDir ?? ""}::${e.runId ?? ""}`;
+          const prev = combined.get(key);
+          if (prev) {
+            prev.costUSD += e.costUSD;
+            prev.inputTokens += e.inputTokens;
+            prev.outputTokens += e.outputTokens;
+            prev.cacheReadTokens += e.cacheReadTokens;
+            prev.cacheWriteTokens += e.cacheWriteTokens;
+          } else {
+            combined.set(key, { ...e });
+          }
+        }
+        return [...combined.values()];
+      }
     };
   }
 });
 
-// src/cli/render/scan-json.ts
-function buildScanJson(input) {
-  const { summary, blast, isWired, generatedAt } = input;
-  const { band } = classifyScore(blast.score);
-  return {
-    schemaVersion: 1,
-    generatedAt,
-    isWired,
-    score: blast.score,
-    band,
-    totals: {
-      blocked: summary.byVerdict.blocked,
-      review: summary.byVerdict.supervised,
-      leaks: summary.byVerdict.leaks,
-      loops: summary.byVerdict.loops,
-      blastExposures: blast.reachable.length + blast.envFindings.length
-    },
-    summary,
-    blast: {
-      score: blast.score,
-      reachable: blast.reachable,
-      envFindings: blast.envFindings
-    }
-  };
+// src/utils/hook-payload.ts
+function extractToolName(payload, defaultValue = "") {
+  return payload.tool_name ?? payload.name ?? payload.toolCall?.name ?? defaultValue;
+}
+function extractToolInput(payload) {
+  return payload.tool_input ?? payload.args ?? payload.toolCall?.args ?? {};
+}
+function canonicalToolName(name) {
+  switch (name) {
+    // Hermes Agent
+    case "terminal":
+      return "Bash";
+    case "write_file":
+      return "Write";
+    case "patch":
+      return "Edit";
+    case "read_file":
+      return "Read";
+    case "search_files":
+      return "Grep";
+    // Antigravity (agy) — shell tool renamed from Gemini's run_shell_command
+    case "run_command":
+      return "Bash";
+    default:
+      return name;
+  }
+}
+function agentLabelFromFlag(flag) {
+  if (typeof flag !== "string") return void 0;
+  switch (flag.toLowerCase()) {
+    case "antigravity":
+    case "agy":
+      return "Antigravity";
+    case "copilot":
+      return "GitHub Copilot";
+    default:
+      return void 0;
+  }
 }
-var init_scan_json = __esm({
-  "src/cli/render/scan-json.ts"() {
+function canonicalToolInput(rawToolName, input) {
+  if (rawToolName !== "run_command") return input;
+  if (typeof input !== "object" || input === null || Array.isArray(input)) return input;
+  const args = input;
+  if (typeof args.CommandLine !== "string") return input;
+  const { CommandLine, Cwd, ...rest } = args;
+  const canonical = { ...rest, command: CommandLine };
+  if (typeof Cwd === "string" && Cwd.length > 0) canonical.cwd = Cwd;
+  return canonical;
+}
+var init_hook_payload = __esm({
+  "src/utils/hook-payload.ts"() {
     "use strict";
-    init_scan_derive();
   }
 });
 
-// src/cli/render/scan-history.ts
-function defaultHistoryPath() {
-  return import_path17.default.join(import_os14.default.homedir(), ".node9", "scan-history.json");
+// src/scan-summary.ts
+function agentDisplayName(agent) {
+  return AGENT_LONG[agent] ?? "Claude Code";
 }
-function readPreviousScan(opts = {}) {
-  const filePath = opts.path ?? defaultHistoryPath();
-  try {
-    if (!import_fs15.default.existsSync(filePath)) return null;
-    const raw = import_fs15.default.readFileSync(filePath, "utf8");
-    const parsed = JSON.parse(raw);
-    if (!Array.isArray(parsed) || parsed.length === 0) return null;
-    const last = parsed[parsed.length - 1];
-    if (!isValidRecord(last)) return null;
-    return last;
-  } catch {
-    return null;
+function agentBadgeText(agent, width = 10) {
+  return `[${AGENT_SHORT[agent] ?? "Claude"}]`.padEnd(width);
+}
+function agentColorName(agent) {
+  switch (agent) {
+    case "gemini":
+      return "blue";
+    case "codex":
+      return "magenta";
+    case "antigravity":
+      return "yellow";
+    case "copilot":
+      return "green";
+    case "shell":
+      return "yellow";
+    default:
+      return "cyan";
   }
 }
-function appendScanHistory(record, opts = {}) {
-  const filePath = opts.path ?? defaultHistoryPath();
-  const cap = opts.cap ?? SCAN_HISTORY_CAP;
-  try {
-    import_fs15.default.mkdirSync(import_path17.default.dirname(filePath), { recursive: true });
-    let history = [];
-    if (import_fs15.default.existsSync(filePath)) {
-      try {
-        const parsed = JSON.parse(import_fs15.default.readFileSync(filePath, "utf8"));
-        if (Array.isArray(parsed)) {
-          history = parsed.filter(isValidRecord);
-        }
-      } catch {
-      }
+function buildScanSummary(agents) {
+  const stats = {
+    sessions: 0,
+    totalToolCalls: 0,
+    bashCalls: 0,
+    totalCostUSD: 0,
+    firstDate: null,
+    lastDate: null
+  };
+  for (const a of agents) {
+    stats.sessions += a.scan.sessions;
+    stats.totalToolCalls += a.scan.totalToolCalls;
+    stats.bashCalls += a.scan.bashCalls;
+    stats.totalCostUSD += a.scan.totalCostUSD;
+    if (a.scan.firstDate && (!stats.firstDate || a.scan.firstDate < stats.firstDate)) {
+      stats.firstDate = a.scan.firstDate;
     }
-    history.push(record);
-    if (history.length > cap) {
-      history = history.slice(history.length - cap);
+    if (a.scan.lastDate && (!stats.lastDate || a.scan.lastDate > stats.lastDate)) {
+      stats.lastDate = a.scan.lastDate;
     }
-    import_fs15.default.writeFileSync(filePath, JSON.stringify(history, null, 2));
-  } catch (err2) {
-    process.stderr.write(
-      `[node9] Warning: could not write scan-history.json: ${err2.message}
-`
-    );
   }
+  const allFindings = agents.flatMap((a) => a.scan.findings);
+  const allLeaks = agents.flatMap(
+    (a) => a.scan.dlpFindings.map((f) => ({
+      patternName: f.patternName,
+      redactedSample: f.redactedSample,
+      toolName: f.toolName,
+      timestamp: f.timestamp,
+      project: f.project,
+      sessionId: f.sessionId,
+      agent: f.agent
+    }))
+  );
+  const allLoops = agents.flatMap(
+    (a) => a.scan.loopFindings.map((f) => ({
+      toolName: f.toolName,
+      commandPreview: f.commandPreview,
+      count: f.count,
+      timestamp: f.timestamp,
+      project: f.project,
+      sessionId: f.sessionId,
+      agent: f.agent,
+      kind: f.kind
+    }))
+  );
+  const byVerdict = {
+    blocked: allFindings.filter((f) => f.source.rule.verdict === "block").length,
+    supervised: allFindings.filter((f) => f.source.rule.verdict === "review").length,
+    leaks: allLeaks.length,
+    loops: allLoops.length
+  };
+  const byAgent = agents.map((a) => ({
+    id: a.id,
+    label: a.label,
+    icon: a.icon,
+    sessions: a.scan.sessions,
+    findings: a.scan.findings.length + a.scan.dlpFindings.length + a.scan.loopFindings.length,
+    costUSD: a.scan.totalCostUSD
+  })).filter((s) => s.sessions > 0 || s.findings > 0);
+  const sections = buildSections(allFindings);
+  const wastedIters = allLoops.filter((l) => l.kind !== "long-iteration").reduce((sum, l) => sum + Math.max(0, l.count - LOOP_THRESHOLD_FOR_WASTE), 0);
+  const loopWastedUSD = wastedIters * COST_PER_LOOP_ITER_USD;
+  return {
+    stats,
+    byVerdict,
+    byAgent,
+    sections,
+    leaks: allLeaks,
+    loops: allLoops,
+    loopWastedUSD
+  };
 }
-function computeScanDelta(current, previous, now = Date.now()) {
-  if (!previous) return null;
-  const prevMs = Date.parse(previous.timestamp);
-  if (Number.isNaN(prevMs)) return null;
-  const scoreDelta = current.score - previous.score;
-  const daysAgo = Math.max(0, Math.floor((now - prevMs) / 864e5));
-  if (scoreDelta === 0 && daysAgo === 0) return null;
-  return { scoreDelta, daysAgo };
-}
-function isValidRecord(x) {
-  if (typeof x !== "object" || x === null) return false;
-  const r = x;
-  return typeof r.timestamp === "string" && typeof r.score === "number" && typeof r.blocked === "number" && typeof r.review === "number" && typeof r.leaks === "number" && typeof r.loops === "number" && typeof r.totalCalls === "number";
-}
-var import_fs15, import_path17, import_os14, SCAN_HISTORY_CAP;
-var init_scan_history = __esm({
-  "src/cli/render/scan-history.ts"() {
-    "use strict";
-    import_fs15 = __toESM(require("fs"));
-    import_path17 = __toESM(require("path"));
-    import_os14 = __toESM(require("os"));
-    SCAN_HISTORY_CAP = 30;
+function buildSections(findings) {
+  const sectionMap = /* @__PURE__ */ new Map();
+  function ensureSection(id, label, subtitle, sourceType, shieldKey) {
+    let s = sectionMap.get(id);
+    if (!s) {
+      s = {
+        id,
+        label,
+        subtitle,
+        sourceType,
+        shieldKey,
+        blockedCount: 0,
+        reviewCount: 0,
+        rules: []
+      };
+      sectionMap.set(id, s);
+    }
+    return s;
+  }
+  const ruleMap = /* @__PURE__ */ new Map();
+  for (const f of findings) {
+    const src = f.source;
+    const sourceType = src.sourceType;
+    const shieldName = src.shieldName;
+    const verdict = src.rule.verdict === "block" ? "block" : "review";
+    let sectionId;
+    let sectionLabel;
+    let sectionSubtitle;
+    let shieldKey;
+    if (sourceType === "default") {
+      sectionId = "default";
+      sectionLabel = "Default Rules";
+      sectionSubtitle = "built-in, always on";
+    } else if (sourceType === "shield") {
+      sectionId = `shield:${shieldName}`;
+      sectionLabel = shieldName;
+      sectionSubtitle = SHIELDS[shieldName]?.description ?? "";
+      shieldKey = shieldName;
+    } else if (shieldName === "cloud") {
+      sectionId = "cloud";
+      sectionLabel = "Cloud Policy";
+      sectionSubtitle = "synced from node9 cloud";
+    } else {
+      sectionId = "user";
+      sectionLabel = "Your Rules";
+      sectionSubtitle = "added in node9.config.json";
+    }
+    const section = ensureSection(sectionId, sectionLabel, sectionSubtitle, sourceType, shieldKey);
+    const ruleDisplayName = (src.rule.name ?? "unnamed").replace(/^shield:[^:]+:/, "");
+    const ruleKey = sectionId + "::" + ruleDisplayName;
+    let rule = ruleMap.get(ruleKey);
+    if (!rule) {
+      rule = {
+        name: ruleDisplayName,
+        verdict,
+        reason: src.rule.reason ?? "",
+        findings: []
+      };
+      ruleMap.set(ruleKey, rule);
+      section.rules.push(rule);
+    }
+    const cmdPreview = previewCommand(f.input, 120);
+    const fullCmd = fullCommandOf(f.input);
+    const isDupe = rule.findings.some((x) => x.project === f.project && x.command === cmdPreview);
+    if (!isDupe) {
+      rule.findings.push({
+        timestamp: f.timestamp ?? "",
+        command: cmdPreview,
+        fullCommand: fullCmd,
+        project: f.project,
+        sessionId: f.sessionId,
+        agent: f.agent,
+        toolName: f.toolName
+      });
+    }
+    if (verdict === "block") section.blockedCount++;
+    else section.reviewCount++;
+  }
+  const sections = [...sectionMap.values()];
+  sections.sort((a, b) => {
+    const aTotal = a.blockedCount + a.reviewCount;
+    const bTotal = b.blockedCount + b.reviewCount;
+    if (b.blockedCount !== a.blockedCount) return b.blockedCount - a.blockedCount;
+    return bTotal - aTotal;
+  });
+  for (const s of sections) {
+    s.rules.sort((a, b) => {
+      const aBlock = a.verdict === "block" ? 1 : 0;
+      const bBlock = b.verdict === "block" ? 1 : 0;
+      if (bBlock !== aBlock) return bBlock - aBlock;
+      return b.findings.length - a.findings.length;
+    });
   }
-});
-
-// src/pricing/litellm.ts
-function normalizeModel(raw) {
-  return raw.replace(/-\d{8}$/, "").toLowerCase();
+  return sections;
 }
-function readCache() {
-  try {
-    const raw = JSON.parse(import_fs16.default.readFileSync(CACHE_FILE(), "utf-8"));
-    if (typeof raw.fetchedAt !== "string" || typeof raw.prices !== "object" || raw.prices === null) {
-      return null;
-    }
-    const ageMs = Date.now() - new Date(raw.fetchedAt).getTime();
-    if (ageMs < 0 || ageMs > TTL_MS) return null;
-    return raw.prices;
-  } catch {
-    return null;
-  }
+function previewCommand(input, max) {
+  const raw = input.command ?? input.query ?? input.file_path ?? JSON.stringify(input);
+  const s = String(raw).replace(/\s+/g, " ").trim();
+  return s.length > max ? s.slice(0, max - 1) + "\u2026" : s;
 }
-function writeCache(prices) {
-  try {
-    const target = CACHE_FILE();
-    const dir = import_path18.default.dirname(target);
-    if (!import_fs16.default.existsSync(dir)) import_fs16.default.mkdirSync(dir, { recursive: true });
-    const tmp = target + ".tmp";
-    const body = {
-      fetchedAt: (/* @__PURE__ */ new Date()).toISOString(),
-      prices
+function fullCommandOf(input) {
+  const raw = input.command ?? input.query ?? input.file_path ?? JSON.stringify(input);
+  return String(raw).replace(/\s+/g, " ").trim();
+}
+var AGENT_SHORT, AGENT_LONG;
+var init_scan_summary = __esm({
+  "src/scan-summary.ts"() {
+    "use strict";
+    init_shields();
+    init_dist();
+    init_dist();
+    AGENT_SHORT = {
+      claude: "Claude",
+      gemini: "Gemini",
+      codex: "Codex",
+      antigravity: "Agy",
+      copilot: "Copilot",
+      shell: "Shell"
+    };
+    AGENT_LONG = {
+      claude: "Claude Code",
+      gemini: "Gemini CLI",
+      codex: "Codex",
+      antigravity: "Antigravity",
+      copilot: "GitHub Copilot",
+      shell: "Shell"
     };
-    import_fs16.default.writeFileSync(tmp, JSON.stringify(body) + "\n", "utf-8");
-    import_fs16.default.renameSync(tmp, target);
-  } catch (err2) {
-    try {
-      import_fs16.default.appendFileSync(
-        HOOK_DEBUG_LOG,
-        `[pricing] cache write failed: ${err2.message}
-`
-      );
-    } catch {
-    }
   }
-}
-function tupleFromLiteLLM(entry) {
-  if (!entry || typeof entry !== "object") return null;
-  const e = entry;
-  const num3 = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 ? v : 0;
-  const inCost = num3(e.input_cost_per_token);
-  const outCost = num3(e.output_cost_per_token);
-  if (inCost === 0 && outCost === 0) return null;
+});
+
+// src/cli/commands/blast.ts
+function buildSensitivePaths(home, cwd) {
   return [
-    inCost,
-    outCost,
-    num3(e.cache_creation_input_token_cost),
-    num3(e.cache_read_input_token_cost)
+    {
+      full: import_path19.default.join(home, ".ssh", "id_rsa"),
+      label: "~/.ssh/id_rsa",
+      description: "RSA private key \u2014 grants SSH access to your servers",
+      score: 20
+    },
+    {
+      full: import_path19.default.join(home, ".ssh", "id_ed25519"),
+      label: "~/.ssh/id_ed25519",
+      description: "Ed25519 private key \u2014 grants SSH access to your servers",
+      score: 20
+    },
+    {
+      full: import_path19.default.join(home, ".ssh", "id_ecdsa"),
+      label: "~/.ssh/id_ecdsa",
+      description: "ECDSA private key \u2014 grants SSH access to your servers",
+      score: 20
+    },
+    {
+      full: import_path19.default.join(home, ".aws", "credentials"),
+      label: "~/.aws/credentials",
+      description: "AWS access keys \u2014 full cloud account access",
+      score: 20
+    },
+    {
+      full: import_path19.default.join(home, ".aws", "config"),
+      label: "~/.aws/config",
+      description: "AWS configuration \u2014 account and region settings",
+      score: 5
+    },
+    {
+      full: import_path19.default.join(home, ".config", "gcloud", "credentials.db"),
+      label: "~/.config/gcloud/credentials.db",
+      description: "Google Cloud credentials",
+      score: 15
+    },
+    {
+      full: import_path19.default.join(home, ".docker", "config.json"),
+      label: "~/.docker/config.json",
+      description: "Docker registry auth tokens",
+      score: 10
+    },
+    {
+      full: import_path19.default.join(home, ".netrc"),
+      label: "~/.netrc",
+      description: "FTP/HTTP credentials in plain text",
+      score: 15
+    },
+    {
+      full: import_path19.default.join(home, ".npmrc"),
+      label: "~/.npmrc",
+      description: "npm auth token \u2014 can publish packages as you",
+      score: 10
+    },
+    {
+      full: import_path19.default.join(home, ".node9", "credentials.json"),
+      label: "~/.node9/credentials.json",
+      description: "Node9 cloud API key",
+      score: 10
+    },
+    {
+      full: import_path19.default.join(cwd, ".env"),
+      label: ".env  (current folder)",
+      description: "App secrets \u2014 database passwords, API keys",
+      score: 20
+    },
+    {
+      full: import_path19.default.join(cwd, ".env.local"),
+      label: ".env.local  (current folder)",
+      description: "Local overrides \u2014 often contains real credentials",
+      score: 15
+    },
+    {
+      full: import_path19.default.join(cwd, ".env.production"),
+      label: ".env.production  (current folder)",
+      description: "Production secrets",
+      score: 20
+    }
   ];
 }
-async function fetchLiteLLMPricing() {
+function isReadable(filePath) {
   try {
-    const res = await fetch(LITELLM_URL, {
-      signal: AbortSignal.timeout(15e3)
-    });
-    if (!res.ok) return null;
-    const json = await res.json();
-    if (!json || typeof json !== "object") return null;
-    const out = {};
-    for (const [key, value] of Object.entries(json)) {
-      const tuple = tupleFromLiteLLM(value);
-      if (tuple) out[key.toLowerCase()] = tuple;
-    }
-    if (Object.keys(out).length < 10) {
-      return null;
-    }
-    return out;
+    import_fs17.default.accessSync(filePath, import_fs17.default.constants.R_OK);
+    return true;
   } catch {
-    return null;
+    return false;
   }
 }
-async function ensurePricingLoaded() {
-  if (memCache !== null && Date.now() - memCacheAt < TTL_MS) return;
-  const fromDisk = readCache();
-  if (fromDisk && Object.keys(fromDisk).length > 0) {
-    memCache = fromDisk;
-    memCacheAt = Date.now();
-    lookupCache.clear();
-    return;
+function scoreLabel(score) {
+  if (score >= 80) return import_chalk2.default.green(`${score}/100  Good`);
+  if (score >= 50) return import_chalk2.default.yellow(`${score}/100  Moderate risk`);
+  if (score >= 25) return import_chalk2.default.red(`${score}/100  High risk`);
+  return import_chalk2.default.red.bold(`${score}/100  Critical`);
+}
+function runBlast() {
+  const home = import_os16.default.homedir();
+  const cwd = process.cwd();
+  const paths = buildSensitivePaths(home, cwd);
+  let scoreDeduction = 0;
+  const reachable = [];
+  for (const p of paths) {
+    if (import_fs17.default.existsSync(p.full) && isReadable(p.full)) {
+      reachable.push(p);
+      scoreDeduction += p.score;
+    }
   }
-  const fetched = await fetchLiteLLMPricing();
-  if (fetched && Object.keys(fetched).length > 0) {
-    memCache = fetched;
-    memCacheAt = Date.now();
-    writeCache(fetched);
-    lookupCache.clear();
-    return;
+  const envFindings = [];
+  for (const [key, value] of Object.entries(process.env)) {
+    if (!value) continue;
+    const match = scanArgs({ [key]: value });
+    if (match) {
+      envFindings.push({ key, patternName: match.patternName });
+      scoreDeduction += 10;
+    }
   }
-  memCache = { ...BUNDLED_PRICING };
-  memCacheAt = Date.now();
-  lookupCache.clear();
+  return { reachable, envFindings, score: Math.max(0, 100 - scoreDeduction) };
 }
-function pricingFor(model) {
-  const norm = normalizeModel(model);
-  const cached = lookupCache.get(norm);
-  if (cached !== void 0) return cached;
-  const sources = [];
-  if (memCache) sources.push(memCache);
-  sources.push(BUNDLED_PRICING);
-  let resolved = null;
-  for (const source of sources) {
-    const exact = source[norm];
-    if (exact) {
-      resolved = exact;
-      break;
+function registerBlastCommand(program2) {
+  program2.command("blast").description("Map what an AI agent can currently reach on this machine").action(() => {
+    const home = import_os16.default.homedir();
+    const cwd = process.cwd();
+    const { reachable, envFindings, score } = runBlast();
+    console.log("");
+    console.log(
+      import_chalk2.default.bold("  \u{1F52D}  Node9 Blast Radius") + import_chalk2.default.dim("  \xB7  what an AI agent can reach from here")
+    );
+    console.log(import_chalk2.default.dim("  Running in: ") + import_chalk2.default.white(cwd.replace(home, "~")));
+    console.log("");
+    if (reachable.length > 0) {
+      console.log("  " + import_chalk2.default.red.bold("Sensitive files reachable:"));
+      for (const p of reachable) {
+        console.log(
+          "    " + import_chalk2.default.red("\u2717  ") + import_chalk2.default.yellow(p.label.padEnd(38)) + import_chalk2.default.dim(p.description)
+        );
+      }
+      console.log("");
     }
-    let best = null;
-    for (const key of Object.keys(source)) {
-      if (norm.startsWith(key.toLowerCase()) && (best === null || key.length > best.length)) {
-        best = key;
+    if (envFindings.length > 0) {
+      console.log("  " + import_chalk2.default.red.bold("Secrets in active environment:"));
+      for (const f of envFindings) {
+        console.log(
+          "    " + import_chalk2.default.red("\u2717  ") + import_chalk2.default.yellow(f.key.padEnd(38)) + import_chalk2.default.dim(f.patternName)
+        );
       }
+      console.log("");
     }
-    if (best) {
-      resolved = source[best];
-      break;
+    console.log("  " + import_chalk2.default.dim("\u2500".repeat(70)));
+    if (reachable.length === 0 && envFindings.length === 0) {
+      console.log("  " + import_chalk2.default.green("\u2705  No sensitive files or environment secrets found."));
+      console.log("  Security Score: " + scoreLabel(score));
+    } else {
+      console.log(
+        "  Security Score: " + scoreLabel(score) + import_chalk2.default.dim(
+          `  (${reachable.length} file${reachable.length !== 1 ? "s" : ""}, ${envFindings.length} env var${envFindings.length !== 1 ? "s" : ""})`
+        )
+      );
+      console.log("");
+      console.log(
+        import_chalk2.default.dim(
+          "  Every AI agent you start can read the files and env vars listed above.\n  Run `node9 shield enable project-jail` to restrict agent file access.\n  Run `node9 mask` to redact secrets from existing session history."
+        )
+      );
     }
-  }
-  lookupCache.set(norm, resolved);
-  return resolved;
+    console.log("");
+  });
 }
-var import_fs16, import_path18, import_os15, LITELLM_URL, BUNDLED_PRICING, CACHE_FILE, TTL_MS, memCache, memCacheAt, lookupCache;
-var init_litellm = __esm({
-  "src/pricing/litellm.ts"() {
+var import_chalk2, import_fs17, import_path19, import_os16;
+var init_blast = __esm({
+  "src/cli/commands/blast.ts"() {
     "use strict";
-    import_fs16 = __toESM(require("fs"));
-    import_path18 = __toESM(require("path"));
-    import_os15 = __toESM(require("os"));
-    init_audit();
-    LITELLM_URL = "https://raw.githubusercontent.com/BerriAI/litellm/main/model_prices_and_context_window.json";
-    BUNDLED_PRICING = {
-      // Anthropic
-      "claude-opus-4": [5e-6, 25e-6, 625e-8, 5e-7],
-      "claude-opus-4-1": [5e-6, 25e-6, 625e-8, 5e-7],
-      "claude-opus-4-5": [5e-6, 25e-6, 625e-8, 5e-7],
-      "claude-opus-4-6": [5e-6, 25e-6, 625e-8, 5e-7],
-      "claude-opus-4-7": [5e-6, 25e-6, 625e-8, 5e-7],
-      "claude-sonnet-4": [3e-6, 15e-6, 375e-8, 3e-7],
-      "claude-sonnet-4-5": [3e-6, 15e-6, 375e-8, 3e-7],
-      "claude-sonnet-4-6": [3e-6, 15e-6, 375e-8, 3e-7],
-      "claude-haiku-4": [8e-7, 4e-6, 1e-6, 8e-8],
-      "claude-haiku-4-5": [8e-7, 4e-6, 1e-6, 8e-8],
-      "claude-3-7-sonnet": [3e-6, 15e-6, 375e-8, 3e-7],
-      "claude-3-5-sonnet": [3e-6, 15e-6, 375e-8, 3e-7],
-      "claude-3-5-haiku": [8e-7, 4e-6, 1e-6, 8e-8],
-      "claude-3-haiku": [25e-8, 125e-8, 3e-7, 3e-8],
-      // OpenAI
-      "gpt-4o": [5e-6, 15e-6, 0, 25e-7],
-      "gpt-4o-mini": [15e-8, 6e-7, 0, 75e-9],
-      "gpt-5": [1e-5, 3e-5, 0, 5e-6],
-      // Google
-      "gemini-2.0-flash": [75e-9, 3e-7, 0, 0],
-      "gemini-1.5-pro": [125e-8, 5e-6, 0, 0]
-    };
-    CACHE_FILE = () => import_path18.default.join(import_os15.default.homedir(), ".node9", "model-pricing.json");
-    TTL_MS = 24 * 60 * 60 * 1e3;
-    memCache = null;
-    memCacheAt = 0;
-    lookupCache = /* @__PURE__ */ new Map();
+    import_chalk2 = __toESM(require("chalk"));
+    import_fs17 = __toESM(require("fs"));
+    import_path19 = __toESM(require("path"));
+    import_os16 = __toESM(require("os"));
+    init_dlp();
   }
 });
 
-// src/cost-codex.ts
-function codexSessionsDir() {
-  return import_path19.default.join(import_os16.default.homedir(), ".codex", "sessions");
+// src/cli/render/scan-derive.ts
+function classifyScore(score) {
+  if (score >= 80) return { band: "good", label: "Good", color: import_chalk3.default.green };
+  if (score >= 50) return { band: "at-risk", label: "At Risk", color: import_chalk3.default.yellow };
+  return { band: "critical", label: "Critical", color: import_chalk3.default.red };
 }
-function codexPriceFor(model) {
-  return pricingFor(model) ?? CODEX_FALLBACK;
+function topDlpPatterns(findings, n) {
+  const counts = /* @__PURE__ */ new Map();
+  for (const f of findings) {
+    counts.set(f.patternName, (counts.get(f.patternName) ?? 0) + 1);
+  }
+  return [...counts.entries()].sort((a, b) => b[1] - a[1]).slice(0, n).map(([name, count]) => ({ name, count }));
 }
-function listCodexSessionFiles(base) {
-  const out = [];
-  for (const y of safeReaddir(base)) {
-    const yp = import_path19.default.join(base, y);
-    if (!isDir(yp)) continue;
-    for (const m of safeReaddir(yp)) {
-      const mp = import_path19.default.join(yp, m);
-      if (!isDir(mp)) continue;
-      for (const d of safeReaddir(mp)) {
-        const dp = import_path19.default.join(mp, d);
-        if (!isDir(dp)) continue;
-        for (const f of safeReaddir(dp)) {
-          if (f.endsWith(".jsonl")) out.push(import_path19.default.join(dp, f));
-        }
-      }
+function topRulesByVerdict(sections, verdict, n) {
+  const matched = [];
+  for (const section of sections) {
+    for (const rule of section.rules) {
+      const matches = verdict === "block" ? rule.verdict === "block" : rule.verdict !== "block";
+      if (matches) matched.push({ name: rule.name, count: rule.findings.length });
     }
   }
-  return out;
+  return matched.sort((a, b) => b.count - a.count).slice(0, n);
 }
-function safeReaddir(dir) {
-  try {
-    return import_fs17.default.readdirSync(dir);
-  } catch {
-    return [];
-  }
+function computeLoopWaste(loops, totalToolCalls) {
+  const wastedCalls = loops.reduce((s, l) => s + Math.max(0, l.count - 1), 0);
+  const wastePct = totalToolCalls > 0 ? Math.round(wastedCalls / totalToolCalls * 100) : 0;
+  return { wastedCalls, wastePct };
 }
-function isDir(p) {
-  try {
-    return import_fs17.default.statSync(p).isDirectory();
-  } catch {
-    return false;
+function rollupByShield(sections, topRulesPerShield = 3) {
+  const out = [];
+  for (const section of sections) {
+    if (section.sourceType !== "shield") continue;
+    if (!section.shieldKey) continue;
+    const totalCatches = section.blockedCount + section.reviewCount;
+    const topRuleLabels = [...section.rules].sort((a, b) => b.findings.length - a.findings.length).slice(0, topRulesPerShield).map((r) => r.findings.length > 1 ? `${r.name} \xD7${r.findings.length}` : r.name);
+    out.push({
+      shieldName: section.shieldKey,
+      totalCatches,
+      blockCatches: section.blockedCount,
+      reviewCatches: section.reviewCount,
+      topRuleLabels
+    });
   }
+  return out.sort((a, b) => b.totalCatches - a.totalCatches);
 }
-function parseCodexSession(lines) {
-  let sessionStart2 = "";
-  let runId = "";
-  let cwd = "";
-  let model = "";
-  let input = 0;
-  let cached = 0;
-  let output = 0;
-  let sawUsage = false;
-  for (const raw of lines) {
-    if (!raw.trim()) continue;
-    let entry;
-    try {
-      entry = JSON.parse(raw);
-    } catch {
-      continue;
-    }
-    const p = entry.payload ?? {};
-    if (entry.type === "session_meta") {
-      if (!sessionStart2 && typeof p["timestamp"] === "string") sessionStart2 = p["timestamp"];
-      if (!runId && typeof p["id"] === "string") runId = p["id"];
-      if (!cwd && typeof p["cwd"] === "string") cwd = p["cwd"];
-      continue;
-    }
-    if (entry.type === "turn_context") {
-      if (typeof p["model"] === "string") model = p["model"];
-      if (!cwd && typeof p["cwd"] === "string") cwd = p["cwd"];
-      continue;
-    }
-    if (entry.type === "event_msg" && p["type"] === "token_count") {
-      const info = p["info"] ?? {};
-      const usage = info["total_token_usage"] ?? {};
-      if (typeof usage["input_tokens"] === "number") input = usage["input_tokens"];
-      if (typeof usage["cached_input_tokens"] === "number") cached = usage["cached_input_tokens"];
-      if (typeof usage["output_tokens"] === "number") output = usage["output_tokens"];
-      sawUsage = true;
-    }
+function boxPanel(title, bodyLines, width = PANEL_WIDTH) {
+  const inner = width - 4;
+  const out = [];
+  const titlePad = ` ${title} `;
+  const titleWidth = (0, import_string_width.default)(titlePad);
+  const titleSegment = titleWidth <= inner ? titlePad : titlePad.slice(0, inner);
+  const dashFill = "\u2500".repeat(Math.max(0, inner - (0, import_string_width.default)(titleSegment)));
+  out.push(import_chalk3.default.dim("\u256D\u2500") + import_chalk3.default.bold(titleSegment) + import_chalk3.default.dim(`${dashFill}\u2500\u256E`));
+  for (const line of bodyLines) {
+    const padding = " ".repeat(Math.max(0, inner - line.width));
+    out.push(import_chalk3.default.dim("\u2502 ") + line.rendered + padding + import_chalk3.default.dim(" \u2502"));
   }
-  if (!sessionStart2 || !sawUsage) return null;
-  const nonCached = Math.max(0, input - cached);
-  if (nonCached === 0 && output === 0 && cached === 0) return null;
-  const norm = normalizeModel(model || "gpt-5");
-  const [pin, pout, , pcr] = codexPriceFor(model || "gpt-5");
-  const costUSD = nonCached * pin + output * pout + cached * pcr;
-  return {
-    date: sessionStart2.slice(0, 10),
-    model: norm,
-    workingDir: cwd,
-    runId,
-    costUSD,
-    inputTokens: nonCached,
-    outputTokens: output,
-    cacheReadTokens: cached,
-    cacheWriteTokens: 0
-  };
+  out.push(import_chalk3.default.dim("\u2570" + "\u2500".repeat(inner + 2) + "\u256F"));
+  return out;
 }
-var import_fs17, import_os16, import_path19, CODEX_FALLBACK, codexSource;
-var init_cost_codex = __esm({
-  "src/cost-codex.ts"() {
+function relativeDate(timestamp, now = /* @__PURE__ */ new Date()) {
+  const t = new Date(timestamp).getTime();
+  if (Number.isNaN(t)) return "?";
+  const days = Math.floor((now.getTime() - t) / 864e5);
+  if (days < 1) return "today";
+  if (days > 90) return "90d+";
+  return `${days}d`;
+}
+var import_chalk3, import_string_width, PANEL_WIDTH;
+var init_scan_derive = __esm({
+  "src/cli/render/scan-derive.ts"() {
     "use strict";
-    import_fs17 = __toESM(require("fs"));
-    import_os16 = __toESM(require("os"));
-    import_path19 = __toESM(require("path"));
-    init_litellm();
-    CODEX_FALLBACK = [5e-6, 15e-6, 0, 25e-7];
-    codexSource = {
-      id: "codex",
-      available() {
-        try {
-          return import_fs17.default.existsSync(codexSessionsDir());
-        } catch {
-          return false;
-        }
-      },
-      collect(sinceMs) {
-        const base = codexSessionsDir();
-        const combined = /* @__PURE__ */ new Map();
-        for (const file of listCodexSessionFiles(base)) {
-          try {
-            if (sinceMs !== void 0 && import_fs17.default.statSync(file).mtimeMs < sinceMs) continue;
-          } catch {
-            continue;
-          }
-          let content;
-          try {
-            content = import_fs17.default.readFileSync(file, "utf8");
-          } catch {
-            continue;
-          }
-          const e = parseCodexSession(content.split("\n"));
-          if (!e) continue;
-          const key = `${e.date}::${e.model}::${e.workingDir ?? ""}::${e.runId ?? ""}`;
-          const prev = combined.get(key);
-          if (prev) {
-            prev.costUSD += e.costUSD;
-            prev.inputTokens += e.inputTokens;
-            prev.outputTokens += e.outputTokens;
-            prev.cacheReadTokens += e.cacheReadTokens;
-            prev.cacheWriteTokens += e.cacheWriteTokens;
-          } else {
-            combined.set(key, { ...e });
-          }
-        }
-        return [...combined.values()];
-      }
+    import_chalk3 = __toESM(require("chalk"));
+    import_string_width = __toESM(require("string-width"));
+    PANEL_WIDTH = 76;
+  }
+});
+
+// src/protection.ts
+var PROTECTIVE_SHIELD_DISCOUNTS;
+var init_protection = __esm({
+  "src/protection.ts"() {
+    "use strict";
+    PROTECTIVE_SHIELD_DISCOUNTS = {
+      "project-jail": 0.7
     };
   }
 });
 
-// src/cost-gemini.ts
-function geminiTmpDir() {
-  return import_path20.default.join(import_os17.default.homedir(), ".gemini", "tmp");
-}
-function geminiPriceFor(model) {
-  let tuple = pricingFor(model);
-  if (!tuple && /^gemini-/i.test(model)) {
-    for (const proxy of GEMINI_FALLBACK_MODELS) {
-      tuple = pricingFor(proxy);
-      if (tuple) break;
-    }
-  }
-  if (!tuple) return null;
-  return { input: tuple[0], output: tuple[1], cacheRead: tuple[3] || tuple[0] };
+// src/cli/render/scan-json.ts
+function buildScanJson(input) {
+  const { summary, blast, isWired, generatedAt } = input;
+  const { band } = classifyScore(blast.score);
+  return {
+    schemaVersion: 1,
+    generatedAt,
+    isWired,
+    score: blast.score,
+    band,
+    totals: {
+      blocked: summary.byVerdict.blocked,
+      review: summary.byVerdict.supervised,
+      leaks: summary.byVerdict.leaks,
+      loops: summary.byVerdict.loops,
+      blastExposures: blast.reachable.length + blast.envFindings.length
+    },
+    summary,
+    blast: {
+      score: blast.score,
+      reachable: blast.reachable,
+      envFindings: blast.envFindings
+    }
+  };
+}
+var init_scan_json = __esm({
+  "src/cli/render/scan-json.ts"() {
+    "use strict";
+    init_scan_derive();
+  }
+});
+
+// src/cli/render/scan-history.ts
+function defaultHistoryPath() {
+  return import_path20.default.join(import_os17.default.homedir(), ".node9", "scan-history.json");
 }
-function safeReaddir2(dir) {
+function readPreviousScan(opts = {}) {
+  const filePath = opts.path ?? defaultHistoryPath();
   try {
-    return import_fs18.default.readdirSync(dir);
+    if (!import_fs18.default.existsSync(filePath)) return null;
+    const raw = import_fs18.default.readFileSync(filePath, "utf8");
+    const parsed = JSON.parse(raw);
+    if (!Array.isArray(parsed) || parsed.length === 0) return null;
+    const last = parsed[parsed.length - 1];
+    if (!isValidRecord(last)) return null;
+    return last;
   } catch {
-    return [];
+    return null;
   }
 }
-function isDir2(p) {
+function appendScanHistory(record, opts = {}) {
+  const filePath = opts.path ?? defaultHistoryPath();
+  const cap = opts.cap ?? SCAN_HISTORY_CAP;
   try {
-    return import_fs18.default.statSync(p).isDirectory();
-  } catch {
-    return false;
-  }
-}
-function listGeminiSessionFiles(base) {
-  const out = [];
-  for (const project of safeReaddir2(base)) {
-    const chats = import_path20.default.join(base, project, "chats");
-    if (!isDir2(chats)) continue;
-    for (const f of safeReaddir2(chats)) {
-      if (f.startsWith("session-") && f.endsWith(".jsonl")) {
-        out.push({ file: import_path20.default.join(chats, f), project });
+    import_fs18.default.mkdirSync(import_path20.default.dirname(filePath), { recursive: true });
+    let history = [];
+    if (import_fs18.default.existsSync(filePath)) {
+      try {
+        const parsed = JSON.parse(import_fs18.default.readFileSync(filePath, "utf8"));
+        if (Array.isArray(parsed)) {
+          history = parsed.filter(isValidRecord);
+        }
+      } catch {
       }
     }
-  }
-  return out;
-}
-function parseGeminiSession(lines, project) {
-  const seenIds = /* @__PURE__ */ new Set();
-  const byKey = /* @__PURE__ */ new Map();
-  let runId = "";
-  for (const raw of lines) {
-    if (!raw.trim()) continue;
-    let obj;
-    try {
-      obj = JSON.parse(raw);
-    } catch {
-      continue;
-    }
-    if (typeof obj.sessionId === "string" && !runId) runId = obj.sessionId;
-    if (!obj.tokens || !obj.model || !obj.timestamp) continue;
-    if (obj.id) {
-      if (seenIds.has(obj.id)) continue;
-      seenIds.add(obj.id);
-    }
-    const price = geminiPriceFor(obj.model);
-    if (!price) continue;
-    const inp = obj.tokens.input ?? 0;
-    const out = obj.tokens.output ?? 0;
-    const cached = Math.min(obj.tokens.cached ?? 0, inp);
-    const fresh = Math.max(0, inp - cached);
-    const cost = fresh * price.input + cached * price.cacheRead + out * price.output;
-    const date = obj.timestamp.slice(0, 10);
-    const model = normalizeModel(obj.model);
-    const key = `${date}::${model}`;
-    const prev = byKey.get(key);
-    if (prev) {
-      prev.costUSD += cost;
-      prev.inputTokens += fresh;
-      prev.outputTokens += out;
-      prev.cacheReadTokens += cached;
-    } else {
-      byKey.set(key, {
-        date,
-        model,
-        workingDir: project,
-        runId,
-        costUSD: cost,
-        inputTokens: fresh,
-        outputTokens: out,
-        cacheReadTokens: cached,
-        cacheWriteTokens: 0
-      });
+    history.push(record);
+    if (history.length > cap) {
+      history = history.slice(history.length - cap);
     }
+    import_fs18.default.writeFileSync(filePath, JSON.stringify(history, null, 2));
+  } catch (err2) {
+    process.stderr.write(
+      `[node9] Warning: could not write scan-history.json: ${err2.message}
+`
+    );
   }
-  if (runId) for (const e of byKey.values()) e.runId = runId;
-  return [...byKey.values()];
 }
-var import_fs18, import_os17, import_path20, GEMINI_FALLBACK_MODELS, geminiSource;
-var init_cost_gemini = __esm({
-  "src/cost-gemini.ts"() {
+function computeScanDelta(current, previous, now = Date.now()) {
+  if (!previous) return null;
+  const prevMs = Date.parse(previous.timestamp);
+  if (Number.isNaN(prevMs)) return null;
+  const scoreDelta = current.score - previous.score;
+  const daysAgo = Math.max(0, Math.floor((now - prevMs) / 864e5));
+  if (scoreDelta === 0 && daysAgo === 0) return null;
+  return { scoreDelta, daysAgo };
+}
+function isValidRecord(x) {
+  if (typeof x !== "object" || x === null) return false;
+  const r = x;
+  return typeof r.timestamp === "string" && typeof r.score === "number" && typeof r.blocked === "number" && typeof r.review === "number" && typeof r.leaks === "number" && typeof r.loops === "number" && typeof r.totalCalls === "number";
+}
+var import_fs18, import_path20, import_os17, SCAN_HISTORY_CAP;
+var init_scan_history = __esm({
+  "src/cli/render/scan-history.ts"() {
     "use strict";
     import_fs18 = __toESM(require("fs"));
-    import_os17 = __toESM(require("os"));
     import_path20 = __toESM(require("path"));
-    init_litellm();
-    GEMINI_FALLBACK_MODELS = ["gemini-2.5-flash", "gemini-2.0-flash"];
-    geminiSource = {
-      id: "gemini",
-      available() {
-        try {
-          return import_fs18.default.existsSync(geminiTmpDir());
-        } catch {
-          return false;
-        }
-      },
-      collect(sinceMs) {
-        const combined = /* @__PURE__ */ new Map();
-        for (const { file, project } of listGeminiSessionFiles(geminiTmpDir())) {
-          try {
-            if (sinceMs !== void 0 && import_fs18.default.statSync(file).mtimeMs < sinceMs) continue;
-          } catch {
-            continue;
-          }
-          let content;
-          try {
-            content = import_fs18.default.readFileSync(file, "utf8");
-          } catch {
-            continue;
-          }
-          for (const e of parseGeminiSession(content.split("\n"), project)) {
-            const key = `${e.date}::${e.model}::${e.workingDir ?? ""}::${e.runId ?? ""}`;
-            const prev = combined.get(key);
-            if (prev) {
-              prev.costUSD += e.costUSD;
-              prev.inputTokens += e.inputTokens;
-              prev.outputTokens += e.outputTokens;
-              prev.cacheReadTokens += e.cacheReadTokens;
-              prev.cacheWriteTokens += e.cacheWriteTokens;
-            } else {
-              combined.set(key, { ...e });
-            }
-          }
-        }
-        return [...combined.values()];
-      }
-    };
+    import_os17 = __toESM(require("os"));
+    SCAN_HISTORY_CAP = 30;
   }
 });
 
@@ -11424,19 +11534,15 @@ var init_scan_upload_history = __esm({
 
 // src/cli/commands/scan.ts
 function claudeModelPrice(model) {
-  const base = model.replace(/@.*$/, "").replace(/-\d{8}$/, "");
-  for (const [key, p] of Object.entries(CLAUDE_PRICING)) {
-    if (base === key || base.startsWith(key)) return p;
-  }
-  return null;
+  const t = pricingFor(model);
+  if (!t) return null;
+  const [i, o, cw, cr] = t;
+  return { i, o, cw, cr };
 }
 function geminiModelPrice(model) {
-  const base = model.replace(/-preview$/, "").replace(/-exp$/, "").replace(/-\d{4}-\d{2}-\d{2}$/, "");
-  for (const [key, p] of Object.entries(GEMINI_PRICING)) {
-    if (base === key || base.startsWith(key)) return p;
-  }
-  if (base.includes("flash")) return GEMINI_PRICING["gemini-2.0-flash"];
-  return null;
+  const p = geminiPriceFor(model);
+  if (!p) return null;
+  return { i: p.input, o: p.output, cr: p.cacheRead };
 }
 function isNode9SelfOutput(text) {
   let hits = 0;
@@ -12082,14 +12188,17 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
     if (!import_fs23.default.existsSync(chatsDir)) continue;
     let chatFiles;
     try {
-      chatFiles = import_fs23.default.readdirSync(chatsDir).filter((f) => f.endsWith(".json"));
+      chatFiles = import_fs23.default.readdirSync(chatsDir).filter((f) => f.endsWith(".json") || f.endsWith(".jsonl")).sort((a, b) => Number(b.endsWith(".jsonl")) - Number(a.endsWith(".jsonl")));
     } catch {
       continue;
     }
+    const seenSessions = /* @__PURE__ */ new Set();
     for (const chatFile of chatFiles) {
+      const sessionId = chatFile.replace(/\.jsonl?$/, "");
+      if (seenSessions.has(sessionId)) continue;
+      seenSessions.add(sessionId);
       result.filesScanned++;
       onProgress?.(result.filesScanned);
-      const sessionId = chatFile.replace(/\.json$/, "");
       let raw;
       try {
         raw = import_fs23.default.readFileSync(import_path25.default.join(chatsDir, chatFile), "utf-8");
@@ -12099,7 +12208,18 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
       const sessionCalls = [];
       let session;
       try {
-        session = JSON.parse(raw);
+        if (chatFile.endsWith(".jsonl")) {
+          const messages = raw.split("\n").filter((l) => l.trim()).map((l) => {
+            try {
+              return JSON.parse(l);
+            } catch {
+              return null;
+            }
+          }).filter((m) => m !== null);
+          session = { messages };
+        } else {
+          session = JSON.parse(raw);
+        }
       } catch {
         continue;
       }
@@ -12709,6 +12829,7 @@ function scanCodexHistory(startDate, onProgress, onLine) {
     let lastTotalInput = 0;
     let lastTotalCached = 0;
     let lastTotalOutput = 0;
+    let model = "";
     for (const line of lines) {
       if (!line.trim()) continue;
       onLine?.();
@@ -12726,6 +12847,10 @@ function scanCodexHistory(startDate, onProgress, onLine) {
         projLabel = stripTerminalEscapes(cwd.replace(import_os22.default.homedir(), "~")).slice(0, 40);
         continue;
       }
+      if (entry.type === "turn_context" && typeof payload["model"] === "string") {
+        model = payload["model"];
+        continue;
+      }
       if (entry.type === "event_msg" && payload["type"] === "token_count") {
         const info = payload["info"];
         const usage = info?.["total_token_usage"] ?? {};
@@ -12869,8 +12994,11 @@ function scanCodexHistory(startDate, onProgress, onLine) {
         }
       }
     }
-    const nonCached = Math.max(0, lastTotalInput - lastTotalCached);
-    result.totalCostUSD += nonCached * 5e-6 + lastTotalCached * 25e-7 + lastTotalOutput * 15e-6;
+    result.totalCostUSD += codexSessionCost(model, {
+      input: lastTotalInput,
+      cached: lastTotalCached,
+      output: lastTotalOutput
+    });
     result.loopFindings.push(...detectLoops(sessionCalls, projLabel, sessionId, "codex"));
   }
   return result;
@@ -13917,7 +14045,7 @@ function registerScanCommand(program2) {
     }
   );
 }
-var import_chalk5, import_fs23, import_path25, import_os22, import_string_width2, CLAUDE_PRICING, GEMINI_PRICING, CODE_EXTENSIONS, SELF_OUTPUT_MARKERS, FIXTURE_TOKEN_PATTERNS, TERMINAL_ESCAPE_RE2, LOOP_TOOLS, LOOP_THRESHOLD, LOOP_TIMESPAN_THRESHOLD_MS, STUCK_TOOLS_MIN_WASTE, STUCK_TOOLS_LIMIT, RECURRING_SESSION_THRESHOLD, STALE_AGE_DAYS, classifyRuleSeverity2, narrativeRuleLabel2;
+var import_chalk5, import_fs23, import_path25, import_os22, import_string_width2, CODE_EXTENSIONS, SELF_OUTPUT_MARKERS, FIXTURE_TOKEN_PATTERNS, TERMINAL_ESCAPE_RE2, LOOP_TOOLS, LOOP_THRESHOLD, LOOP_TIMESPAN_THRESHOLD_MS, STUCK_TOOLS_MIN_WASTE, STUCK_TOOLS_LIMIT, RECURRING_SESSION_THRESHOLD, STALE_AGE_DAYS, classifyRuleSeverity2, narrativeRuleLabel2;
 var init_scan = __esm({
   "src/cli/commands/scan.ts"() {
     "use strict";
@@ -13930,6 +14058,9 @@ var init_scan = __esm({
     init_policy();
     init_dist();
     init_dlp();
+    init_litellm();
+    init_cost_gemini();
+    init_cost_codex();
     init_hook_payload();
     init_dist();
     init_scan_summary();
@@ -13940,26 +14071,6 @@ var init_scan = __esm({
     import_string_width2 = __toESM(require("string-width"));
     init_scan_json();
     init_scan_history();
-    CLAUDE_PRICING = {
-      "claude-opus-4-6": { i: 5e-6, o: 25e-6, cw: 625e-8, cr: 5e-7 },
-      "claude-opus-4-5": { i: 5e-6, o: 25e-6, cw: 625e-8, cr: 5e-7 },
-      "claude-opus-4": { i: 15e-6, o: 75e-6, cw: 1875e-8, cr: 15e-7 },
-      "claude-sonnet-4-6": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
-      "claude-sonnet-4-5": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
-      "claude-sonnet-4": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
-      "claude-3-7-sonnet": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
-      "claude-3-5-sonnet": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
-      "claude-haiku-4-5": { i: 1e-6, o: 5e-6, cw: 125e-8, cr: 1e-7 },
-      "claude-3-5-haiku": { i: 8e-7, o: 4e-6, cw: 1e-6, cr: 8e-8 }
-    };
-    GEMINI_PRICING = {
-      "gemini-2.5-pro": { i: 125e-8, o: 1e-5, cr: 31e-8 },
-      "gemini-2.5-flash": { i: 15e-8, o: 6e-7, cr: 375e-10 },
-      "gemini-2.0-flash": { i: 1e-7, o: 4e-7, cr: 25e-9 },
-      "gemini-1.5-pro": { i: 125e-8, o: 5e-6, cr: 3125e-10 },
-      "gemini-1.5-flash": { i: 75e-9, o: 3e-7, cr: 1875e-11 },
-      "gemini-3-flash": { i: 1e-7, o: 4e-7, cr: 25e-9 }
-    };
     CODE_EXTENSIONS = /* @__PURE__ */ new Set([
       ".ts",
       ".tsx",
@@ -20140,6 +20251,7 @@ var import_os36 = __toESM(require("os"));
 var import_path41 = __toESM(require("path"));
 init_costSync();
 init_litellm();
+init_cost_codex();
 var TEST_COMMAND_RE3 = /(?:^|\s)(npm\s+(?:run\s+)?test|npx\s+(?:vitest|jest|mocha)|yarn\s+(?:run\s+)?test|pnpm\s+(?:run\s+)?test|vitest|jest|mocha|pytest|py\.test|cargo\s+test|go\s+test|bundle\s+exec\s+rspec|rspec|phpunit|dotnet\s+test)\b/i;
 function buildTestTimestamps(allEntries) {
   const testTs = /* @__PURE__ */ new Set();
@@ -20236,24 +20348,11 @@ function isAllow(decision) {
 function isDlp(checkedBy) {
   return !!checkedBy?.includes("dlp");
 }
-var CLAUDE_PRICING2 = {
-  "claude-opus-4-6": { i: 5e-6, o: 25e-6, cw: 625e-8, cr: 5e-7 },
-  "claude-opus-4-5": { i: 5e-6, o: 25e-6, cw: 625e-8, cr: 5e-7 },
-  "claude-opus-4": { i: 15e-6, o: 75e-6, cw: 1875e-8, cr: 15e-7 },
-  "claude-sonnet-4-6": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
-  "claude-sonnet-4-5": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
-  "claude-sonnet-4": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
-  "claude-3-7-sonnet": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
-  "claude-3-5-sonnet": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
-  "claude-haiku-4-5": { i: 1e-6, o: 5e-6, cw: 125e-8, cr: 1e-7 },
-  "claude-3-5-haiku": { i: 8e-7, o: 4e-6, cw: 1e-6, cr: 8e-8 }
-};
 function claudeModelPrice2(model) {
-  const base = model.replace(/@.*$/, "").replace(/-\d{8}$/, "");
-  for (const [key, p] of Object.entries(CLAUDE_PRICING2)) {
-    if (base === key || base.startsWith(key + "-") || base.startsWith(key)) return p;
-  }
-  return null;
+  const t = pricingFor(model);
+  if (!t) return null;
+  const [i, o, cw, cr] = t;
+  return { i, o, cw, cr };
 }
 function emptyClaudeCostAccumulator() {
   return {
@@ -20368,6 +20467,7 @@ function processCodexCostFile(filePath, start, end, acc) {
     return;
   }
   let sessionStart2 = "";
+  let model = "";
   let lastTotalInput = 0;
   let lastTotalCached = 0;
   let lastTotalOutput = 0;
@@ -20385,6 +20485,10 @@ function processCodexCostFile(filePath, start, end, acc) {
       sessionStart2 = String(p["timestamp"] ?? "");
       continue;
     }
+    if (entry.type === "turn_context" && typeof p["model"] === "string") {
+      model = p["model"];
+      continue;
+    }
     if (entry.type === "event_msg" && p["type"] === "token_count") {
       const info = p["info"] ?? {};
       const usage = info["total_token_usage"] ?? {};
@@ -20399,12 +20503,17 @@ function processCodexCostFile(filePath, start, end, acc) {
   if (!sessionStart2) return;
   const ts = new Date(sessionStart2);
   if (ts < start || ts > end) return;
-  const nonCached = Math.max(0, lastTotalInput - lastTotalCached);
-  const cost = nonCached * 5e-6 + lastTotalCached * 25e-7 + lastTotalOutput * 15e-6;
+  const cost = codexSessionCost(model, {
+    input: lastTotalInput,
+    cached: lastTotalCached,
+    output: lastTotalOutput
+  });
   acc.total += cost;
   acc.toolCalls += sessionToolCalls;
   const dateKey = sessionStart2.slice(0, 10);
   acc.byDay.set(dateKey, (acc.byDay.get(dateKey) ?? 0) + cost);
+  const normModel = normalizeModel(model || "gpt-5");
+  acc.byModel.set(normModel, (acc.byModel.get(normModel) ?? 0) + cost);
 }
 function listCodexSessionFiles2(sessionsBase) {
   const jsonlFiles = [];
@@ -20442,13 +20551,25 @@ function listCodexSessionFiles2(sessionsBase) {
   }
   return jsonlFiles;
 }
+function mergeByModel(...maps) {
+  const out = /* @__PURE__ */ new Map();
+  for (const m of maps) {
+    for (const [k, v] of m) out.set(k, (out.get(k) ?? 0) + v);
+  }
+  return out;
+}
 function loadCodexCost(start, end, sessionsBase) {
-  const acc = { total: 0, toolCalls: 0, byDay: /* @__PURE__ */ new Map() };
+  const acc = {
+    total: 0,
+    toolCalls: 0,
+    byDay: /* @__PURE__ */ new Map(),
+    byModel: /* @__PURE__ */ new Map()
+  };
   const files = listCodexSessionFiles2(sessionsBase);
   for (const filePath of files) {
     processCodexCostFile(filePath, start, end, acc);
   }
-  return { total: acc.total, byDay: acc.byDay, toolCalls: acc.toolCalls };
+  return { total: acc.total, byDay: acc.byDay, byModel: acc.byModel, toolCalls: acc.toolCalls };
 }
 var GEMINI_FALLBACK_MODELS2 = ["gemini-2.5-flash", "gemini-2.0-flash"];
 function geminiPriceFor2(model) {
@@ -20737,7 +20858,7 @@ function aggregateReportFromAudit(period, opts = {}) {
       cacheWriteTokens: claudeCost.cacheWriteTokens,
       cacheReadTokens: claudeCost.cacheReadTokens + geminiCost.cacheReadTokens,
       byDay: claudeCost.byDay,
-      byModel: claudeCost.byModel,
+      byModel: mergeByModel(claudeCost.byModel, codexCost.byModel),
       byProject: claudeCost.byProject
     },
     toolMap,
@@ -22010,6 +22131,8 @@ var import_chalk19 = __toESM(require("chalk"));
 var import_child_process10 = require("child_process");
 var import_execa3 = require("execa");
 init_orchestrator();
+init_cloud();
+init_config();
 init_provenance();
 init_mcp_pin();
 init_mcp_tools();
@@ -22038,6 +22161,60 @@ function normalizeClientName(name) {
   const sanitized = sanitize4(name).slice(0, 40);
   return sanitized.length > 0 ? sanitized : void 0;
 }
+function reportPinMismatchToCloud(serverKey, agent) {
+  try {
+    const creds = getCredentials();
+    if (!creds) return;
+    void auditLocalAllow(
+      `mcp-server:${serverKey}`,
+      { serverKey, reason: "tool-pin-mismatch" },
+      "mcp-pin-mismatch",
+      creds,
+      { mcpServer: serverKey, agent },
+      void 0,
+      false,
+      {
+        ruleName: "MCP tool definitions changed (possible rug pull)",
+        ruleDescription: `The MCP server "${serverKey}" changed its tool definitions since they were pinned. This can indicate a supply-chain attack (tool poisoning). The session was quarantined. Review with: node9 mcp pin update ${serverKey}`
+      }
+    );
+  } catch {
+  }
+}
+function reportInventoryToCloud(serverKey, toolCount, agent) {
+  try {
+    const creds = getCredentials();
+    if (!creds) return;
+    void auditLocalAllow(
+      `mcp-server:${serverKey}`,
+      { serverKey, toolCount },
+      "mcp-discovered",
+      creds,
+      { mcpServer: serverKey, agent },
+      void 0,
+      false,
+      { mcpToolCount: toolCount }
+    );
+  } catch {
+  }
+}
+function reportLargeResponseToCloud(serverKey, responseBytes, agent) {
+  try {
+    const creds = getCredentials();
+    if (!creds) return;
+    void auditLocalAllow(
+      `mcp-server:${serverKey}`,
+      { serverKey, responseBytes },
+      "mcp-large-response",
+      creds,
+      { mcpServer: serverKey, agent },
+      void 0,
+      false,
+      { mcpResponseBytes: responseBytes }
+    );
+  } catch {
+  }
+}
 function tokenize4(cmd) {
   const tokens = [];
   let current = "";
@@ -22298,6 +22475,7 @@ async function runMcpGateway(upstreamCommand) {
         const currentHash = hashToolDefinitions(tools);
         const pinStatus = checkPin(serverKey, currentHash, gatewayCwd);
         const token = getInternalToken();
+        reportInventoryToCloud(serverKey, tools.length, clientName);
         if (isDaemonRunning() && process.env.NODE9_TESTING !== "1") {
           const toolSummary = tools.map((t) => ({ name: t.name, description: t.description }));
           fetch(`http://${DAEMON_HOST}:${DAEMON_PORT}/mcp/discovered`, {
@@ -22362,6 +22540,7 @@ async function runMcpGateway(upstreamCommand) {
           console.error(import_chalk19.default.red("   Session quarantined \u2014 all tool calls blocked."));
           console.error(import_chalk19.default.yellow(`   Run: node9 mcp pin update ${serverKey}
 `));
+          reportPinMismatchToCloud(serverKey, clientName);
           const errorResponse = {
             jsonrpc: "2.0",
             id: parsed.id,
@@ -22407,6 +22586,7 @@ async function runMcpGateway(upstreamCommand) {
           `\u26A1 Node9: Large MCP response from '${toolName}' (${(line.length / 1024).toFixed(0)}KB) \u2014 context window enlarged`
         )
       );
+      reportLargeResponseToCloud(serverKey, line.length, clientName);
       if (isDaemonRunning() && process.env.NODE9_TESTING !== "1") {
         const token = getInternalToken();
         fetch(`http://${DAEMON_HOST}:${DAEMON_PORT}/mcp/large-response`, {
@@ -23510,40 +23690,19 @@ var import_fs45 = __toESM(require("fs"));
 var import_path46 = __toESM(require("path"));
 var import_os40 = __toESM(require("os"));
 init_scan_summary();
-var CLAUDE_PRICING3 = {
-  "claude-opus-4-6": { i: 5e-6, o: 25e-6, cw: 625e-8, cr: 5e-7 },
-  "claude-opus-4-5": { i: 5e-6, o: 25e-6, cw: 625e-8, cr: 5e-7 },
-  "claude-opus-4": { i: 15e-6, o: 75e-6, cw: 1875e-8, cr: 15e-7 },
-  "claude-sonnet-4-6": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
-  "claude-sonnet-4-5": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
-  "claude-sonnet-4": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
-  "claude-3-7-sonnet": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
-  "claude-3-5-sonnet": { i: 3e-6, o: 15e-6, cw: 375e-8, cr: 3e-7 },
-  "claude-haiku-4-5": { i: 1e-6, o: 5e-6, cw: 125e-8, cr: 1e-7 },
-  "claude-3-5-haiku": { i: 8e-7, o: 4e-6, cw: 1e-6, cr: 8e-8 }
-};
+init_litellm();
+init_cost_gemini();
+init_cost_codex();
 function modelPrice(model) {
-  const base = model.replace(/@.*$/, "").replace(/-\d{8}$/, "");
-  for (const [key, p] of Object.entries(CLAUDE_PRICING3)) {
-    if (base === key || base.startsWith(key)) return p;
-  }
-  return null;
+  const t = pricingFor(model);
+  if (!t) return null;
+  const [i, o, cw, cr] = t;
+  return { i, o, cw, cr };
 }
-var GEMINI_PRICING2 = {
-  "gemini-2.5-pro": { i: 125e-8, o: 1e-5, cr: 31e-8 },
-  "gemini-2.5-flash": { i: 15e-8, o: 6e-7, cr: 375e-10 },
-  "gemini-2.0-flash": { i: 1e-7, o: 4e-7, cr: 25e-9 },
-  "gemini-1.5-pro": { i: 125e-8, o: 5e-6, cr: 3125e-10 },
-  "gemini-1.5-flash": { i: 75e-9, o: 3e-7, cr: 1875e-11 },
-  "gemini-3-flash": { i: 1e-7, o: 4e-7, cr: 25e-9 }
-};
 function geminiModelPrice2(model) {
-  const base = model.replace(/-preview$/, "").replace(/-exp$/, "").replace(/-\d{4}-\d{2}-\d{2}$/, "");
-  for (const [key, p] of Object.entries(GEMINI_PRICING2)) {
-    if (base === key || base.startsWith(key)) return p;
-  }
-  if (base.includes("flash")) return GEMINI_PRICING2["gemini-2.0-flash"];
-  return null;
+  const p = geminiPriceFor(model);
+  if (!p) return null;
+  return { i: p.input, o: p.output, cr: p.cacheRead };
 }
 function encodeProjectPath(projectPath) {
   return projectPath.replace(/\//g, "-");
@@ -23836,6 +23995,7 @@ function buildCodexSessions(days, allAuditEntries) {
     let lastTotalInput = 0;
     let lastTotalCached = 0;
     let lastTotalOutput = 0;
+    let model = "";
     for (const line of lines) {
       if (!line.trim()) continue;
       let entry;
@@ -23851,6 +24011,10 @@ function buildCodexSessions(days, allAuditEntries) {
         cwd = String(p["cwd"] ?? "");
         continue;
       }
+      if (entry.type === "turn_context" && typeof p["model"] === "string") {
+        model = p["model"];
+        continue;
+      }
       if (entry.type === "event_msg" && p["type"] === "user_message" && !firstPrompt) {
         firstPrompt = String(p["message"] ?? "");
         continue;
@@ -23877,8 +24041,11 @@ function buildCodexSessions(days, allAuditEntries) {
     }
     if (!sessionId || !startTime) continue;
     if (cutoff && new Date(startTime) < cutoff) continue;
-    const nonCached = Math.max(0, lastTotalInput - lastTotalCached);
-    const costUSD = nonCached * 5e-6 + lastTotalCached * 25e-7 + lastTotalOutput * 15e-6;
+    const costUSD = codexSessionCost(model, {
+      input: lastTotalInput,
+      cached: lastTotalCached,
+      output: lastTotalOutput
+    });
     const windowEnd = new Date(
       Math.max(new Date(startTime).getTime(), lastToolTs ? new Date(lastToolTs).getTime() : 0) + 5 * 60 * 1e3
     ).toISOString();
@@ -23902,11 +24069,10 @@ function buildCodexSessions(days, allAuditEntries) {
 }
 function buildSessions(days, historyPath) {
   const hPath = historyPath ?? import_path46.default.join(import_os40.default.homedir(), ".claude", "history.jsonl");
-  let historyRaw;
+  let historyRaw = "";
   try {
     historyRaw = import_fs45.default.readFileSync(hPath, "utf-8");
   } catch {
-    return [];
   }
   const cutoff = days !== null ? (() => {
     const d = /* @__PURE__ */ new Date();
@@ -24197,12 +24363,6 @@ function registerSessionsCommand(program2) {
     console.log("");
     console.log(import_chalk24.default.cyan.bold("\u{1F4CB}  node9 sessions") + import_chalk24.default.dim("  \u2014 what your AI agent did"));
     console.log("");
-    const historyPath = import_path46.default.join(import_os40.default.homedir(), ".claude", "history.jsonl");
-    if (!import_fs45.default.existsSync(historyPath)) {
-      console.log(import_chalk24.default.yellow("  No Claude session history found at ~/.claude/history.jsonl"));
-      console.log(import_chalk24.default.gray("  Install Claude Code, run a few sessions, then try again.\n"));
-      return;
-    }
     const days = options.detail || options.all ? null : Math.max(1, parseInt(options.days, 10) || 7);
     const rangeLabel = options.detail ? "all time" : options.all ? "all time" : `last ${String(days)} days`;
     console.log(import_chalk24.default.dim("  " + rangeLabel));