@node9/proxy 1.45.0 → 1.46.0

package/dist/cli.js

@@ -240,8 +240,8 @@ function sanitizeConfig(raw) {
     }
   }
   const lines = result.error.issues.map((issue) => {
-    const path64 = issue.path.length > 0 ? issue.path.join(".") : "root";
-    return `  \u2022 ${path64}: ${issue.message}`;
+    const path65 = issue.path.length > 0 ? issue.path.join(".") : "root";
+    return `  \u2022 ${path65}: ${issue.message}`;
   });
   return {
     sanitized,
@@ -1357,9 +1357,9 @@ function matchesPattern(text, patterns) {
   const withoutDotSlash = text.replace(/^\.\//, "");
   return isMatch(withoutDotSlash) || isMatch(`./${withoutDotSlash}`);
 }
-function getNestedValue(obj, path64) {
+function getNestedValue(obj, path65) {
   if (!obj || typeof obj !== "object") return null;
-  const segments = path64.split(".");
+  const segments = path65.split(".");
   for (const seg of segments) {
     if (FORBIDDEN_PATH_SEGMENTS.has(seg)) return null;
   }
@@ -1412,6 +1412,14 @@ function evaluateSmartConditions(args, rule) {
   });
   return mode === "any" ? results.some((r) => r) : results.every((r) => r);
 }
+function resolvePinned(matches) {
+  if (matches.length === 0) return void 0;
+  const pinned = matches.filter((r) => r.pinned);
+  if (pinned.length === 0) return matches[0];
+  return pinned.reduce(
+    (best, r) => VERDICT_RANK[r.verdict] > VERDICT_RANK[best.verdict] ? r : best
+  );
+}
 function tokenize2(toolName) {
   return toolName.toLowerCase().split(/[_.\-\s]+/).filter(Boolean);
 }
@@ -1523,9 +1531,10 @@ async function evaluatePolicy(config, toolName, args, context = {}, hooks = {})
     }
   }
   if (config.policy.smartRules.length > 0) {
-    const matchedRule = config.policy.smartRules.find(
+    const matches = config.policy.smartRules.filter(
       (rule) => matchesPattern(toolName, rule.tool) && !(bashCommand !== null && rule.name && AST_FS_REGEX_RULES.has(rule.name)) && evaluateSmartConditions(args, rule)
     );
+    const matchedRule = resolvePinned(matches);
     if (matchedRule) {
       if (matchedRule.verdict === "allow")
         return { decision: "allow", ruleName: matchedRule.name ?? matchedRule.tool };
@@ -2264,7 +2273,7 @@ function* stringValues(obj, depth = 0) {
   }
   for (const v of Object.values(obj)) yield* stringValues(v, depth + 1);
 }
-var import_safe_regex2, import_mvdan_sh, import_picomatch, import_safe_regex22, import_safe_regex23, import_crypto3, MAX, UNTRUSTED_TOOLS, SIGNALS, ASSIGNMENT_CONTEXT_RE, DLP_STOPWORDS, DLP_PATTERNS, DLP_PATTERNS_GLOBAL, SENSITIVE_PATH_PATTERNS, MAX_DEPTH, MAX_STRING_BYTES, MAX_JSON_PARSE_BYTES, syntax, sharedParser, MESSAGE_FLAGS, SHELL_INTERPRETERS, DOWNLOAD_CMDS, NORMALIZE_CACHE_MAX, normalizeCache, AST_CACHE_MAX, astCache, PARSE_FAIL, FS_READ_TOOLS, FS_OP_PRESCREEN_RE, HOME_CACHE_ALLOWLIST, SENSITIVE_PATH_RULES, BASH_TOOL_NAMES, AST_FS_REGEX_RULES, SQL_DB_CLIS, SQL_DDL_RE, CHMOD_OPEN_PERM_TOKENS, COMMAND_WRAPPERS, NET_BINARIES, VALUE_FLAGS, FS_OP_CACHE_MAX, fsOpCache, DEFAULT_EGRESS_ALLOWLIST, SOURCE_COMMANDS, SINK_COMMANDS, OBFUSCATORS, SENSITIVE_PATTERNS, FLAGS_WITH_VALUES, MAX_REGEX_LENGTH, REGEX_CACHE_MAX, regexCache, FORBIDDEN_PATH_SEGMENTS, SQL_DML_KEYWORDS, aws_default, bash_safe_default, docker_default, filesystem_default, github_default, k8s_default, mongodb_default, postgres_default, project_jail_default, redis_default, BUILTIN_SHIELDS, LOOP_MAX_RECORDS, FINDING_TO_SIGNAL, SCAN_SIGNAL_WEIGHTS, LOOP_THRESHOLD_FOR_WASTE, COST_PER_LOOP_ITER_USD, DESTRUCTIVE_OP_RE, SENSITIVE_PATH_RE, FILE_TOOLS, PII_EMAIL_RE, PII_SSN_RE, PII_PHONE_RE, PII_CC_RE, REALTIME_PII_PATTERNS, MAX_PII_SCAN_BYTES, LONG_OUTPUT_THRESHOLD_BYTES, CANONICAL_EXTRACTOR_VERSION, DEDUPE_PREVIEW_LEN, TERMINAL_ESCAPE_RE;
+var import_safe_regex2, import_mvdan_sh, import_picomatch, import_safe_regex22, import_safe_regex23, import_crypto3, MAX, UNTRUSTED_TOOLS, SIGNALS, ASSIGNMENT_CONTEXT_RE, DLP_STOPWORDS, DLP_PATTERNS, DLP_PATTERNS_GLOBAL, SENSITIVE_PATH_PATTERNS, MAX_DEPTH, MAX_STRING_BYTES, MAX_JSON_PARSE_BYTES, syntax, sharedParser, MESSAGE_FLAGS, SHELL_INTERPRETERS, DOWNLOAD_CMDS, NORMALIZE_CACHE_MAX, normalizeCache, AST_CACHE_MAX, astCache, PARSE_FAIL, FS_READ_TOOLS, FS_OP_PRESCREEN_RE, HOME_CACHE_ALLOWLIST, SENSITIVE_PATH_RULES, BASH_TOOL_NAMES, AST_FS_REGEX_RULES, SQL_DB_CLIS, SQL_DDL_RE, CHMOD_OPEN_PERM_TOKENS, COMMAND_WRAPPERS, NET_BINARIES, VALUE_FLAGS, FS_OP_CACHE_MAX, fsOpCache, DEFAULT_EGRESS_ALLOWLIST, SOURCE_COMMANDS, SINK_COMMANDS, OBFUSCATORS, SENSITIVE_PATTERNS, FLAGS_WITH_VALUES, MAX_REGEX_LENGTH, REGEX_CACHE_MAX, regexCache, FORBIDDEN_PATH_SEGMENTS, VERDICT_RANK, SQL_DML_KEYWORDS, aws_default, bash_safe_default, docker_default, filesystem_default, github_default, k8s_default, mongodb_default, postgres_default, project_jail_default, redis_default, BUILTIN_SHIELDS, LOOP_MAX_RECORDS, FINDING_TO_SIGNAL, SCAN_SIGNAL_WEIGHTS, LOOP_THRESHOLD_FOR_WASTE, COST_PER_LOOP_ITER_USD, DESTRUCTIVE_OP_RE, SENSITIVE_PATH_RE, FILE_TOOLS, PII_EMAIL_RE, PII_SSN_RE, PII_PHONE_RE, PII_CC_RE, REALTIME_PII_PATTERNS, MAX_PII_SCAN_BYTES, LONG_OUTPUT_THRESHOLD_BYTES, CANONICAL_EXTRACTOR_VERSION, DEDUPE_PREVIEW_LEN, TERMINAL_ESCAPE_RE, ENGINE_VERSION;
 var init_dist = __esm({
   "packages/policy-engine/dist/index.mjs"() {
     "use strict";
@@ -3195,6 +3204,11 @@ var init_dist = __esm({
     REGEX_CACHE_MAX = 500;
     regexCache = /* @__PURE__ */ new Map();
     FORBIDDEN_PATH_SEGMENTS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
+    VERDICT_RANK = {
+      allow: 0,
+      review: 1,
+      block: 2
+    };
     SQL_DML_KEYWORDS = /* @__PURE__ */ new Set(["select", "insert", "update", "delete", "merge", "upsert"]);
     aws_default = {
       name: "aws",
@@ -3999,6 +4013,7 @@ var init_dist = __esm({
     DEDUPE_PREVIEW_LEN = 120;
     TERMINAL_ESCAPE_RE = // eslint-disable-next-line no-control-regex
     /\x1b\[[0-9;?]*[A-Za-z]|\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)|\x1b[@-_]|[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g;
+    ENGINE_VERSION = "1.4.0";
   }
 });
 
@@ -9725,13 +9740,234 @@ var init_setup = __esm({
   }
 });
 
+// src/agent-wiring.ts
+function readJson2(filePath) {
+  if (!import_fs14.default.existsSync(filePath)) return null;
+  try {
+    return JSON.parse(import_fs14.default.readFileSync(filePath, "utf-8"));
+  } catch {
+    return "invalid";
+  }
+}
+function matchersHaveNode9Hook(matchers) {
+  return (matchers ?? []).some((m) => (m.hooks ?? []).some((h) => isNode9Hook(h.command)));
+}
+function flatHaveNode9Hook(entries) {
+  return (Array.isArray(entries) ? entries : []).some((h) => isNode9Hook(h.command));
+}
+function readHookRoot(filePath, format) {
+  if (!import_fs14.default.existsSync(filePath)) return "absent";
+  let raw;
+  try {
+    raw = import_fs14.default.readFileSync(filePath, "utf-8");
+  } catch {
+    return "absent";
+  }
+  try {
+    const parsed = format === "yaml" ? yaml2.parse(raw) : JSON.parse(raw);
+    return parsed?.hooks ?? {};
+  } catch {
+    return "invalid";
+  }
+}
+function eventWired(root, ev, format) {
+  const arr = root[ev.key];
+  if (format === "matcher") return matchersHaveNode9Hook(arr);
+  return flatHaveNode9Hook(arr);
+}
+function detectMcp(servers) {
+  const entries = Object.entries(servers ?? {});
+  const present = entries.some(([, s]) => s?.command === "node9");
+  const wrapped = entries.filter(([, s]) => s?.command === "node9" && Array.isArray(s.args) && s.args.length > 0).map(([name, s]) => `${name} \u2192 ${s.args.join(" ")}`);
+  return { wrapped, present };
+}
+function readMcp(filePath, format) {
+  if (!import_fs14.default.existsSync(filePath)) return { wrapped: [], present: false };
+  try {
+    if (format === "toml") {
+      const parsed2 = (0, import_smol_toml2.parse)(import_fs14.default.readFileSync(filePath, "utf-8"));
+      return detectMcp(parsed2?.mcp_servers);
+    }
+    const parsed = readJson2(filePath);
+    if (parsed === null || parsed === "invalid") return { wrapped: [], present: false };
+    return detectMcp(parsed.mcpServers);
+  } catch {
+    return { wrapped: [], present: false };
+  }
+}
+function getAgentWiring(home = import_os13.default.homedir()) {
+  const detected = detectAgents(home);
+  return AGENT_SPECS.map((spec) => {
+    const present = spec.present(home);
+    const pad = spec.labelPad ?? DEFAULT_LABEL_PAD;
+    let hooks;
+    let wireState;
+    let hookLabel;
+    let settingsPath;
+    if (spec.shimFile) {
+      const shimWired = exists(spec.shimFile(home));
+      hooks = [{ label: "node9 plugin (node9 check)", wired: shimWired }];
+      wireState = shimWired ? "wired" : present ? "unwired" : "absent";
+      hookLabel = "node9 plugin";
+      settingsPath = spec.shimFile(home);
+    } else {
+      const root = spec.hookFile ? readHookRoot(spec.hookFile(home), spec.hookFormat) : "absent";
+      const primary = spec.hookEvents[0];
+      const rootPresent = root !== "absent" && root !== "invalid";
+      hooks = spec.hookEvents.map((ev) => ({
+        label: hookLabelOf(ev, pad),
+        wired: rootPresent && eventWired(root, ev, spec.hookFormat)
+      }));
+      if (root === "absent") wireState = "absent";
+      else if (root === "invalid") wireState = "invalid";
+      else wireState = primary && eventWired(root, primary, spec.hookFormat) ? "wired" : "unwired";
+      hookLabel = primary ? `${primary.key} hook` : "MCP proxy";
+      settingsPath = spec.hookFile ? spec.hookFile(home) : spec.mcpFile ? spec.mcpFile(home) : "";
+    }
+    const mcp = spec.mcpFile ? readMcp(spec.mcpFile(home), spec.mcpFormat ?? "json") : null;
+    const anyHookWired = hooks.some((h) => h.wired);
+    return {
+      id: spec.id,
+      label: spec.label,
+      setupCommand: spec.setupCommand,
+      installed: detected[spec.id],
+      present,
+      hooks,
+      wireState,
+      hookLabel,
+      settingsPath,
+      configFormat: spec.hookFormat === "yaml" ? "YAML" : "JSON",
+      mcpServers: mcp ? mcp.wrapped : null,
+      mcpProtected: mcp ? mcp.present : false,
+      isProtected: anyHookWired || (mcp?.present ?? false)
+    };
+  });
+}
+var import_fs14, import_path16, import_os13, yaml2, import_smol_toml2, exists, ck, lg, DEFAULT_LABEL_PAD, hookLabelOf, AGENT_SPECS;
+var init_agent_wiring = __esm({
+  "src/agent-wiring.ts"() {
+    "use strict";
+    import_fs14 = __toESM(require("fs"));
+    import_path16 = __toESM(require("path"));
+    import_os13 = __toESM(require("os"));
+    yaml2 = __toESM(require("yaml"));
+    import_smol_toml2 = require("smol-toml");
+    init_setup();
+    exists = (p) => {
+      try {
+        return import_fs14.default.existsSync(p);
+      } catch {
+        return false;
+      }
+    };
+    ck = (key) => ({ key, kind: "check" });
+    lg = (key) => ({ key, kind: "log" });
+    DEFAULT_LABEL_PAD = 11;
+    hookLabelOf = (ev, pad) => `${ev.key.padEnd(pad)} (node9 ${ev.kind})`;
+    AGENT_SPECS = [
+      {
+        id: "claude",
+        label: "Claude Code",
+        setupCommand: "node9 agents add claude",
+        hookFile: (h) => import_path16.default.join(h, ".claude", "settings.json"),
+        hookFormat: "matcher",
+        hookEvents: [ck("PreToolUse"), lg("PostToolUse")],
+        mcpFile: (h) => import_path16.default.join(h, ".claude.json"),
+        present: (h) => exists(import_path16.default.join(h, ".claude", "settings.json")) || exists(import_path16.default.join(h, ".claude.json"))
+      },
+      {
+        id: "gemini",
+        label: "Gemini CLI",
+        setupCommand: "node9 agents add gemini",
+        hookFile: (h) => import_path16.default.join(h, ".gemini", "settings.json"),
+        hookFormat: "matcher",
+        hookEvents: [ck("BeforeTool"), lg("AfterTool")],
+        mcpFile: (h) => import_path16.default.join(h, ".gemini", "settings.json"),
+        present: (h) => exists(import_path16.default.join(h, ".gemini", "settings.json"))
+      },
+      {
+        id: "codex",
+        label: "Codex",
+        setupCommand: "node9 agents add codex",
+        hookFile: (h) => import_path16.default.join(h, ".codex", "hooks.json"),
+        hookFormat: "matcher",
+        hookEvents: [ck("PreToolUse"), ck("UserPromptSubmit")],
+        mcpFile: (h) => import_path16.default.join(h, ".codex", "config.toml"),
+        mcpFormat: "toml",
+        present: (h) => exists(import_path16.default.join(h, ".codex"))
+      },
+      {
+        id: "antigravity",
+        label: "Antigravity",
+        setupCommand: "node9 agents add antigravity",
+        hookFile: (h) => import_path16.default.join(h, ".gemini", "config", "hooks.json"),
+        hookFormat: "matcher",
+        hookEvents: [ck("PreToolUse"), lg("PostToolUse")],
+        mcpFile: (h) => import_path16.default.join(h, ".gemini", "config", "mcp_config.json"),
+        present: (h) => exists(import_path16.default.join(h, ".gemini", "config", "hooks.json")) || exists(import_path16.default.join(h, ".gemini", "antigravity-cli")) || exists(import_path16.default.join(h, ".gemini", "antigravity-ide"))
+      },
+      {
+        id: "copilot",
+        label: "GitHub Copilot",
+        setupCommand: "node9 agents add copilot",
+        hookFile: (h) => import_path16.default.join(h, ".copilot", "hooks", "node9.json"),
+        hookFormat: "flat",
+        hookEvents: [ck("PreToolUse"), lg("PostToolUse"), ck("UserPromptSubmit")],
+        mcpFile: (h) => import_path16.default.join(h, ".copilot", "mcp-config.json"),
+        present: (h) => exists(import_path16.default.join(h, ".copilot"))
+      },
+      {
+        id: "cursor",
+        label: "Cursor",
+        setupCommand: "node9 agents add cursor",
+        // MCP-only — no hook file (see note above).
+        hookFormat: "flat",
+        hookEvents: [],
+        mcpFile: (h) => import_path16.default.join(h, ".cursor", "mcp.json"),
+        present: (h) => exists(import_path16.default.join(h, ".cursor", "mcp.json"))
+      },
+      {
+        id: "hermes",
+        label: "Hermes Agent",
+        setupCommand: "node9 agents add hermes",
+        hookFile: (h) => hermesConfigPath(h),
+        hookFormat: "yaml",
+        hookEvents: [ck("pre_tool_call"), lg("post_tool_call")],
+        labelPad: 14,
+        // 'post_tool_call' is wider than the default
+        present: (h) => exists(hermesConfigPath(h))
+      },
+      {
+        // Plugin-shim agents — protected by a node9-authored plugin/extension file
+        // (no hooks, no MCP). hookFormat is unused for these (shimFile drives it).
+        id: "opencode",
+        label: "OpenCode",
+        setupCommand: "node9 agents add opencode",
+        hookFormat: "flat",
+        hookEvents: [],
+        shimFile: (h) => import_path16.default.join(h, ".config", "opencode", "plugins", "node9.js"),
+        present: (h) => exists(import_path16.default.join(h, ".config", "opencode")) || exists(import_path16.default.join(h, ".config", "opencode", "plugins", "node9.js"))
+      },
+      {
+        id: "pi",
+        label: "Pi",
+        setupCommand: "node9 agents add pi",
+        hookFormat: "flat",
+        hookEvents: [],
+        shimFile: (h) => import_path16.default.join(h, ".pi", "agent", "extensions", "node9.js"),
+        present: (h) => exists(import_path16.default.join(h, ".pi", "agent")) || exists(import_path16.default.join(h, ".pi", "agent", "extensions", "node9.js"))
+      }
+    ];
+  }
+});
+
 // src/pricing/litellm.ts
 function normalizeModel(raw) {
   return raw.replace(/-\d{8}$/, "").toLowerCase();
 }
 function readCache() {
   try {
-    const raw = JSON.parse(import_fs14.default.readFileSync(CACHE_FILE(), "utf-8"));
+    const raw = JSON.parse(import_fs15.default.readFileSync(CACHE_FILE(), "utf-8"));
     if (typeof raw.fetchedAt !== "string" || typeof raw.prices !== "object" || raw.prices === null) {
       return null;
     }
@@ -9745,18 +9981,18 @@ function readCache() {
 function writeCache(prices) {
   try {
     const target = CACHE_FILE();
-    const dir = import_path16.default.dirname(target);
-    if (!import_fs14.default.existsSync(dir)) import_fs14.default.mkdirSync(dir, { recursive: true });
+    const dir = import_path17.default.dirname(target);
+    if (!import_fs15.default.existsSync(dir)) import_fs15.default.mkdirSync(dir, { recursive: true });
     const tmp = target + ".tmp";
     const body = {
       fetchedAt: (/* @__PURE__ */ new Date()).toISOString(),
       prices
     };
-    import_fs14.default.writeFileSync(tmp, JSON.stringify(body) + "\n", "utf-8");
-    import_fs14.default.renameSync(tmp, target);
+    import_fs15.default.writeFileSync(tmp, JSON.stringify(body) + "\n", "utf-8");
+    import_fs15.default.renameSync(tmp, target);
   } catch (err2) {
     try {
-      import_fs14.default.appendFileSync(
+      import_fs15.default.appendFileSync(
         HOOK_DEBUG_LOG,
         `[pricing] cache write failed: ${err2.message}
 `
@@ -9857,13 +10093,13 @@ function pricingFor(model) {
   lookupCache.set(norm, resolved);
   return resolved;
 }
-var import_fs14, import_path16, import_os13, LITELLM_URL, BUNDLED_PRICING, CACHE_FILE, TTL_MS, memCache, memCacheAt, diskChecked, lookupCache;
+var import_fs15, import_path17, import_os14, LITELLM_URL, BUNDLED_PRICING, CACHE_FILE, TTL_MS, memCache, memCacheAt, diskChecked, lookupCache;
 var init_litellm = __esm({
   "src/pricing/litellm.ts"() {
     "use strict";
-    import_fs14 = __toESM(require("fs"));
-    import_path16 = __toESM(require("path"));
-    import_os13 = __toESM(require("os"));
+    import_fs15 = __toESM(require("fs"));
+    import_path17 = __toESM(require("path"));
+    import_os14 = __toESM(require("os"));
     init_audit();
     LITELLM_URL = "https://raw.githubusercontent.com/BerriAI/litellm/main/model_prices_and_context_window.json";
     BUNDLED_PRICING = {
@@ -9903,7 +10139,7 @@ var init_litellm = __esm({
       "gemini-2.0-flash": [75e-9, 3e-7, 0, 0],
       "gemini-1.5-pro": [125e-8, 5e-6, 0, 0]
     };
-    CACHE_FILE = () => import_path16.default.join(import_os13.default.homedir(), ".node9", "model-pricing.json");
+    CACHE_FILE = () => import_path17.default.join(import_os14.default.homedir(), ".node9", "model-pricing.json");
     TTL_MS = 24 * 60 * 60 * 1e3;
     memCache = null;
     memCacheAt = 0;
@@ -9914,7 +10150,7 @@ var init_litellm = __esm({
 
 // src/cost-gemini.ts
 function geminiTmpDir() {
-  return import_path17.default.join(import_os14.default.homedir(), ".gemini", "tmp");
+  return import_path18.default.join(import_os15.default.homedir(), ".gemini", "tmp");
 }
 function geminiPriceFor(model) {
   let tuple = pricingFor(model);
@@ -9929,14 +10165,14 @@ function geminiPriceFor(model) {
 }
 function safeReaddir(dir) {
   try {
-    return import_fs15.default.readdirSync(dir);
+    return import_fs16.default.readdirSync(dir);
   } catch {
     return [];
   }
 }
 function isDir(p) {
   try {
-    return import_fs15.default.statSync(p).isDirectory();
+    return import_fs16.default.statSync(p).isDirectory();
   } catch {
     return false;
   }
@@ -9944,11 +10180,11 @@ function isDir(p) {
 function listGeminiSessionFiles(base) {
   const out = [];
   for (const project of safeReaddir(base)) {
-    const chats = import_path17.default.join(base, project, "chats");
+    const chats = import_path18.default.join(base, project, "chats");
     if (!isDir(chats)) continue;
     for (const f of safeReaddir(chats)) {
       if (f.startsWith("session-") && f.endsWith(".jsonl")) {
-        out.push({ file: import_path17.default.join(chats, f), project });
+        out.push({ file: import_path18.default.join(chats, f), project });
       }
     }
   }
@@ -10005,20 +10241,20 @@ function parseGeminiSession(lines, project) {
   if (runId) for (const e of byKey.values()) e.runId = runId;
   return [...byKey.values()];
 }
-var import_fs15, import_os14, import_path17, GEMINI_FALLBACK_MODELS, geminiSource;
+var import_fs16, import_os15, import_path18, GEMINI_FALLBACK_MODELS, geminiSource;
 var init_cost_gemini = __esm({
   "src/cost-gemini.ts"() {
     "use strict";
-    import_fs15 = __toESM(require("fs"));
-    import_os14 = __toESM(require("os"));
-    import_path17 = __toESM(require("path"));
+    import_fs16 = __toESM(require("fs"));
+    import_os15 = __toESM(require("os"));
+    import_path18 = __toESM(require("path"));
     init_litellm();
     GEMINI_FALLBACK_MODELS = ["gemini-2.5-flash", "gemini-2.0-flash"];
     geminiSource = {
       id: "gemini",
       available() {
         try {
-          return import_fs15.default.existsSync(geminiTmpDir());
+          return import_fs16.default.existsSync(geminiTmpDir());
         } catch {
           return false;
         }
@@ -10027,13 +10263,13 @@ var init_cost_gemini = __esm({
         const combined = /* @__PURE__ */ new Map();
         for (const { file, project } of listGeminiSessionFiles(geminiTmpDir())) {
           try {
-            if (sinceMs !== void 0 && import_fs15.default.statSync(file).mtimeMs < sinceMs) continue;
+            if (sinceMs !== void 0 && import_fs16.default.statSync(file).mtimeMs < sinceMs) continue;
           } catch {
             continue;
           }
           let content;
           try {
-            content = import_fs15.default.readFileSync(file, "utf8");
+            content = import_fs16.default.readFileSync(file, "utf8");
           } catch {
             continue;
           }
@@ -10059,7 +10295,7 @@ var init_cost_gemini = __esm({
 
 // src/cost-codex.ts
 function codexSessionsDir() {
-  return import_path18.default.join(import_os15.default.homedir(), ".codex", "sessions");
+  return import_path19.default.join(import_os16.default.homedir(), ".codex", "sessions");
 }
 function codexPriceFor(model) {
   return pricingFor(model) ?? CODEX_FALLBACK;
@@ -10072,16 +10308,16 @@ function codexSessionCost(model, tokens) {
 function listCodexSessionFiles(base) {
   const out = [];
   for (const y of safeReaddir2(base)) {
-    const yp = import_path18.default.join(base, y);
+    const yp = import_path19.default.join(base, y);
     if (!isDir2(yp)) continue;
     for (const m of safeReaddir2(yp)) {
-      const mp = import_path18.default.join(yp, m);
+      const mp = import_path19.default.join(yp, m);
       if (!isDir2(mp)) continue;
       for (const d of safeReaddir2(mp)) {
-        const dp = import_path18.default.join(mp, d);
+        const dp = import_path19.default.join(mp, d);
         if (!isDir2(dp)) continue;
         for (const f of safeReaddir2(dp)) {
-          if (f.endsWith(".jsonl")) out.push(import_path18.default.join(dp, f));
+          if (f.endsWith(".jsonl")) out.push(import_path19.default.join(dp, f));
         }
       }
     }
@@ -10090,14 +10326,14 @@ function listCodexSessionFiles(base) {
 }
 function safeReaddir2(dir) {
   try {
-    return import_fs16.default.readdirSync(dir);
+    return import_fs17.default.readdirSync(dir);
   } catch {
     return [];
   }
 }
 function isDir2(p) {
   try {
-    return import_fs16.default.statSync(p).isDirectory();
+    return import_fs17.default.statSync(p).isDirectory();
   } catch {
     return false;
   }
@@ -10157,20 +10393,20 @@ function parseCodexSession(lines) {
     cacheWriteTokens: 0
   };
 }
-var import_fs16, import_os15, import_path18, CODEX_FALLBACK, codexSource;
+var import_fs17, import_os16, import_path19, CODEX_FALLBACK, codexSource;
 var init_cost_codex = __esm({
   "src/cost-codex.ts"() {
     "use strict";
-    import_fs16 = __toESM(require("fs"));
-    import_os15 = __toESM(require("os"));
-    import_path18 = __toESM(require("path"));
+    import_fs17 = __toESM(require("fs"));
+    import_os16 = __toESM(require("os"));
+    import_path19 = __toESM(require("path"));
     init_litellm();
     CODEX_FALLBACK = [5e-6, 15e-6, 0, 25e-7];
     codexSource = {
       id: "codex",
       available() {
         try {
-          return import_fs16.default.existsSync(codexSessionsDir());
+          return import_fs17.default.existsSync(codexSessionsDir());
         } catch {
           return false;
         }
@@ -10180,13 +10416,13 @@ var init_cost_codex = __esm({
         const combined = /* @__PURE__ */ new Map();
         for (const file of listCodexSessionFiles(base)) {
           try {
-            if (sinceMs !== void 0 && import_fs16.default.statSync(file).mtimeMs < sinceMs) continue;
+            if (sinceMs !== void 0 && import_fs17.default.statSync(file).mtimeMs < sinceMs) continue;
           } catch {
             continue;
           }
           let content;
           try {
-            content = import_fs16.default.readFileSync(file, "utf8");
+            content = import_fs17.default.readFileSync(file, "utf8");
           } catch {
             continue;
           }
@@ -10494,79 +10730,79 @@ var init_scan_summary = __esm({
 function buildSensitivePaths(home, cwd) {
   return [
     {
-      full: import_path19.default.join(home, ".ssh", "id_rsa"),
+      full: import_path20.default.join(home, ".ssh", "id_rsa"),
       label: "~/.ssh/id_rsa",
       description: "RSA private key \u2014 grants SSH access to your servers",
       score: 20
     },
     {
-      full: import_path19.default.join(home, ".ssh", "id_ed25519"),
+      full: import_path20.default.join(home, ".ssh", "id_ed25519"),
       label: "~/.ssh/id_ed25519",
       description: "Ed25519 private key \u2014 grants SSH access to your servers",
       score: 20
     },
     {
-      full: import_path19.default.join(home, ".ssh", "id_ecdsa"),
+      full: import_path20.default.join(home, ".ssh", "id_ecdsa"),
       label: "~/.ssh/id_ecdsa",
       description: "ECDSA private key \u2014 grants SSH access to your servers",
       score: 20
     },
     {
-      full: import_path19.default.join(home, ".aws", "credentials"),
+      full: import_path20.default.join(home, ".aws", "credentials"),
       label: "~/.aws/credentials",
       description: "AWS access keys \u2014 full cloud account access",
       score: 20
     },
     {
-      full: import_path19.default.join(home, ".aws", "config"),
+      full: import_path20.default.join(home, ".aws", "config"),
       label: "~/.aws/config",
       description: "AWS configuration \u2014 account and region settings",
       score: 5
     },
     {
-      full: import_path19.default.join(home, ".config", "gcloud", "credentials.db"),
+      full: import_path20.default.join(home, ".config", "gcloud", "credentials.db"),
       label: "~/.config/gcloud/credentials.db",
       description: "Google Cloud credentials",
       score: 15
     },
     {
-      full: import_path19.default.join(home, ".docker", "config.json"),
+      full: import_path20.default.join(home, ".docker", "config.json"),
       label: "~/.docker/config.json",
       description: "Docker registry auth tokens",
       score: 10
     },
     {
-      full: import_path19.default.join(home, ".netrc"),
+      full: import_path20.default.join(home, ".netrc"),
       label: "~/.netrc",
       description: "FTP/HTTP credentials in plain text",
       score: 15
     },
     {
-      full: import_path19.default.join(home, ".npmrc"),
+      full: import_path20.default.join(home, ".npmrc"),
       label: "~/.npmrc",
       description: "npm auth token \u2014 can publish packages as you",
       score: 10
     },
     {
-      full: import_path19.default.join(home, ".node9", "credentials.json"),
+      full: import_path20.default.join(home, ".node9", "credentials.json"),
       label: "~/.node9/credentials.json",
       description: "Node9 cloud API key",
       score: 10
     },
     {
-      full: import_path19.default.join(cwd, ".env"),
+      full: import_path20.default.join(cwd, ".env"),
       label: ".env  (current folder)",
       description: "App secrets \u2014 database passwords, API keys",
       score: 20
     },
     {
-      full: import_path19.default.join(cwd, ".env.local"),
+      full: import_path20.default.join(cwd, ".env.local"),
       label: ".env.local  (current folder)",
       description: "Local overrides \u2014 often contains real credentials",
       score: 15
     },
     {
-      full: import_path19.default.join(cwd, ".env.production"),
+      full: import_path20.default.join(cwd, ".env.production"),
       label: ".env.production  (current folder)",
       description: "Production secrets",
       score: 20
@@ -10575,7 +10811,7 @@ function buildSensitivePaths(home, cwd) {
 }
 function isReadable(filePath) {
   try {
-    import_fs17.default.accessSync(filePath, import_fs17.default.constants.R_OK);
+    import_fs18.default.accessSync(filePath, import_fs18.default.constants.R_OK);
     return true;
   } catch {
     return false;
@@ -10588,13 +10824,13 @@ function scoreLabel(score) {
   return import_chalk2.default.red.bold(`${score}/100  Critical`);
 }
 function runBlast() {
-  const home = import_os16.default.homedir();
+  const home = import_os17.default.homedir();
   const cwd = process.cwd();
   const paths = buildSensitivePaths(home, cwd);
   let scoreDeduction = 0;
   const reachable = [];
   for (const p of paths) {
-    if (import_fs17.default.existsSync(p.full) && isReadable(p.full)) {
+    if (import_fs18.default.existsSync(p.full) && isReadable(p.full)) {
       reachable.push(p);
       scoreDeduction += p.score;
     }
@@ -10612,7 +10848,7 @@ function runBlast() {
 }
 function registerBlastCommand(program2) {
   program2.command("blast").description("Map what an AI agent can currently reach on this machine").action(() => {
-    const home = import_os16.default.homedir();
+    const home = import_os17.default.homedir();
     const cwd = process.cwd();
     const { reachable, envFindings, score } = runBlast();
     console.log("");
@@ -10659,14 +10895,14 @@ function registerBlastCommand(program2) {
     console.log("");
   });
 }
-var import_chalk2, import_fs17, import_path19, import_os16;
+var import_chalk2, import_fs18, import_path20, import_os17;
 var init_blast = __esm({
   "src/cli/commands/blast.ts"() {
     "use strict";
     import_chalk2 = __toESM(require("chalk"));
-    import_fs17 = __toESM(require("fs"));
-    import_path19 = __toESM(require("path"));
-    import_os16 = __toESM(require("os"));
+    import_fs18 = __toESM(require("fs"));
+    import_path20 = __toESM(require("path"));
+    import_os17 = __toESM(require("os"));
     init_dlp();
   }
 });
@@ -10794,13 +11030,13 @@ var init_scan_json = __esm({
 
 // src/cli/render/scan-history.ts
 function defaultHistoryPath() {
-  return import_path20.default.join(import_os17.default.homedir(), ".node9", "scan-history.json");
+  return import_path21.default.join(import_os18.default.homedir(), ".node9", "scan-history.json");
 }
 function readPreviousScan(opts = {}) {
   const filePath = opts.path ?? defaultHistoryPath();
   try {
-    if (!import_fs18.default.existsSync(filePath)) return null;
-    const raw = import_fs18.default.readFileSync(filePath, "utf8");
+    if (!import_fs19.default.existsSync(filePath)) return null;
+    const raw = import_fs19.default.readFileSync(filePath, "utf8");
     const parsed = JSON.parse(raw);
     if (!Array.isArray(parsed) || parsed.length === 0) return null;
     const last = parsed[parsed.length - 1];
@@ -10814,11 +11050,11 @@ function appendScanHistory(record, opts = {}) {
   const filePath = opts.path ?? defaultHistoryPath();
   const cap = opts.cap ?? SCAN_HISTORY_CAP;
   try {
-    import_fs18.default.mkdirSync(import_path20.default.dirname(filePath), { recursive: true });
+    import_fs19.default.mkdirSync(import_path21.default.dirname(filePath), { recursive: true });
     let history = [];
-    if (import_fs18.default.existsSync(filePath)) {
+    if (import_fs19.default.existsSync(filePath)) {
       try {
-        const parsed = JSON.parse(import_fs18.default.readFileSync(filePath, "utf8"));
+        const parsed = JSON.parse(import_fs19.default.readFileSync(filePath, "utf8"));
         if (Array.isArray(parsed)) {
           history = parsed.filter(isValidRecord);
         }
@@ -10829,7 +11065,7 @@ function appendScanHistory(record, opts = {}) {
     if (history.length > cap) {
       history = history.slice(history.length - cap);
     }
-    import_fs18.default.writeFileSync(filePath, JSON.stringify(history, null, 2));
+    import_fs19.default.writeFileSync(filePath, JSON.stringify(history, null, 2));
   } catch (err2) {
     process.stderr.write(
       `[node9] Warning: could not write scan-history.json: ${err2.message}
@@ -10851,24 +11087,24 @@ function isValidRecord(x) {
   const r = x;
   return typeof r.timestamp === "string" && typeof r.score === "number" && typeof r.blocked === "number" && typeof r.review === "number" && typeof r.leaks === "number" && typeof r.loops === "number" && typeof r.totalCalls === "number";
 }
-var import_fs18, import_path20, import_os17, SCAN_HISTORY_CAP;
+var import_fs19, import_path21, import_os18, SCAN_HISTORY_CAP;
 var init_scan_history = __esm({
   "src/cli/render/scan-history.ts"() {
     "use strict";
-    import_fs18 = __toESM(require("fs"));
-    import_path20 = __toESM(require("path"));
-    import_os17 = __toESM(require("os"));
+    import_fs19 = __toESM(require("fs"));
+    import_path21 = __toESM(require("path"));
+    import_os18 = __toESM(require("os"));
     SCAN_HISTORY_CAP = 30;
   }
 });
 
 // src/cost-copilot.ts
 function copilotSessionsDir() {
-  return import_path21.default.join(import_os18.default.homedir(), ".copilot", "session-state");
+  return import_path22.default.join(import_os19.default.homedir(), ".copilot", "session-state");
 }
 function safeReaddir3(dir) {
   try {
-    return import_fs19.default.readdirSync(dir);
+    return import_fs20.default.readdirSync(dir);
   } catch {
     return [];
   }
@@ -10935,19 +11171,19 @@ function parseCopilotSession(lines) {
   }
   return rows;
 }
-var import_fs19, import_os18, import_path21, copilotSource;
+var import_fs20, import_os19, import_path22, copilotSource;
 var init_cost_copilot = __esm({
   "src/cost-copilot.ts"() {
     "use strict";
-    import_fs19 = __toESM(require("fs"));
-    import_os18 = __toESM(require("os"));
-    import_path21 = __toESM(require("path"));
+    import_fs20 = __toESM(require("fs"));
+    import_os19 = __toESM(require("os"));
+    import_path22 = __toESM(require("path"));
     init_litellm();
     copilotSource = {
       id: "copilot",
       available() {
         try {
-          return import_fs19.default.existsSync(copilotSessionsDir());
+          return import_fs20.default.existsSync(copilotSessionsDir());
         } catch {
           return false;
         }
@@ -10956,15 +11192,15 @@ var init_cost_copilot = __esm({
         const base = copilotSessionsDir();
         const combined = /* @__PURE__ */ new Map();
         for (const sid of safeReaddir3(base)) {
-          const file = import_path21.default.join(base, sid, "events.jsonl");
+          const file = import_path22.default.join(base, sid, "events.jsonl");
           try {
-            if (sinceMs !== void 0 && import_fs19.default.statSync(file).mtimeMs < sinceMs) continue;
+            if (sinceMs !== void 0 && import_fs20.default.statSync(file).mtimeMs < sinceMs) continue;
           } catch {
             continue;
           }
           let content;
           try {
-            content = import_fs19.default.readFileSync(file, "utf8");
+            content = import_fs20.default.readFileSync(file, "utf8");
           } catch {
             continue;
           }
@@ -10993,10 +11229,10 @@ function decodeProjectDirName(dirName) {
   return dirName.replace(/-/g, "/");
 }
 function parseJSONLFile(filePath, fallbackWorkingDir) {
-  const runId = import_path22.default.basename(filePath, ".jsonl");
+  const runId = import_path23.default.basename(filePath, ".jsonl");
   let content;
   try {
-    content = import_fs20.default.readFileSync(filePath, "utf8");
+    content = import_fs21.default.readFileSync(filePath, "utf8");
   } catch {
     return /* @__PURE__ */ new Map();
   }
@@ -11096,7 +11332,7 @@ async function postCostBatches(apiUrl, apiKey, machineId, entries) {
         signal: AbortSignal.timeout(15e3)
       });
       if (!res.ok) {
-        import_fs20.default.appendFileSync(HOOK_DEBUG_LOG, `[cost-sync] HTTP ${res.status}
+        import_fs21.default.appendFileSync(HOOK_DEBUG_LOG, `[cost-sync] HTTP ${res.status}
 `);
       } else {
         let stored;
@@ -11106,7 +11342,7 @@ async function postCostBatches(apiUrl, apiKey, machineId, entries) {
         } catch {
         }
         if (typeof stored === "number" && stored < batch.length) {
-          import_fs20.default.appendFileSync(
+          import_fs21.default.appendFileSync(
             HOOK_DEBUG_LOG,
             `[cost-sync] dropped ${batch.length - stored} of ${batch.length} rows
 `
@@ -11114,7 +11350,7 @@ async function postCostBatches(apiUrl, apiKey, machineId, entries) {
         }
       }
     } catch (err2) {
-      import_fs20.default.appendFileSync(HOOK_DEBUG_LOG, `[cost-sync] ${err2.message}
+      import_fs21.default.appendFileSync(HOOK_DEBUG_LOG, `[cost-sync] ${err2.message}
 `);
     }
   }
@@ -11127,10 +11363,10 @@ async function syncCost() {
   if (entries.length === 0) return;
   let username = "unknown";
   try {
-    username = import_os19.default.userInfo().username;
+    username = import_os20.default.userInfo().username;
   } catch {
   }
-  const machineId = `${import_os19.default.hostname()}:${username}`;
+  const machineId = `${import_os20.default.hostname()}:${username}`;
   await postCostBatches(creds.apiUrl, creds.apiKey, machineId, entries);
 }
 function startCostSync() {
@@ -11142,13 +11378,13 @@ function startCostSync() {
   }, SYNC_INTERVAL_MS);
   timer.unref();
 }
-var import_fs20, import_path22, import_os19, SYNC_INTERVAL_MS, claudeSource, COST_SOURCES, COST_BATCH_SIZE;
+var import_fs21, import_path23, import_os20, SYNC_INTERVAL_MS, claudeSource, COST_SOURCES, COST_BATCH_SIZE;
 var init_costSync = __esm({
   "src/costSync.ts"() {
     "use strict";
-    import_fs20 = __toESM(require("fs"));
-    import_path22 = __toESM(require("path"));
-    import_os19 = __toESM(require("os"));
+    import_fs21 = __toESM(require("fs"));
+    import_path23 = __toESM(require("path"));
+    import_os20 = __toESM(require("os"));
     init_config();
     init_audit();
     init_litellm();
@@ -11159,37 +11395,37 @@ var init_costSync = __esm({
     claudeSource = {
       id: "claude",
       available() {
-        return import_fs20.default.existsSync(import_path22.default.join(import_os19.default.homedir(), ".claude", "projects"));
+        return import_fs21.default.existsSync(import_path23.default.join(import_os20.default.homedir(), ".claude", "projects"));
       },
       collect(sinceMs) {
-        const projectsDir = import_path22.default.join(import_os19.default.homedir(), ".claude", "projects");
-        if (!import_fs20.default.existsSync(projectsDir)) return [];
+        const projectsDir = import_path23.default.join(import_os20.default.homedir(), ".claude", "projects");
+        if (!import_fs21.default.existsSync(projectsDir)) return [];
         const combined = /* @__PURE__ */ new Map();
         let dirs;
         try {
-          dirs = import_fs20.default.readdirSync(projectsDir);
+          dirs = import_fs21.default.readdirSync(projectsDir);
         } catch {
           return [];
         }
         for (const dir of dirs) {
-          const dirPath = import_path22.default.join(projectsDir, dir);
+          const dirPath = import_path23.default.join(projectsDir, dir);
           try {
-            if (!import_fs20.default.statSync(dirPath).isDirectory()) continue;
+            if (!import_fs21.default.statSync(dirPath).isDirectory()) continue;
           } catch {
             continue;
           }
           let files;
           try {
-            files = import_fs20.default.readdirSync(dirPath).filter((f) => f.endsWith(".jsonl"));
+            files = import_fs21.default.readdirSync(dirPath).filter((f) => f.endsWith(".jsonl"));
           } catch {
             continue;
           }
           const fallbackWorkingDir = decodeProjectDirName(dir);
           for (const file of files) {
-            const filePath = import_path22.default.join(dirPath, file);
+            const filePath = import_path23.default.join(dirPath, file);
             if (sinceMs !== void 0) {
               try {
-                if (import_fs20.default.statSync(filePath).mtimeMs < sinceMs) continue;
+                if (import_fs21.default.statSync(filePath).mtimeMs < sinceMs) continue;
               } catch {
                 continue;
               }
@@ -11240,7 +11476,7 @@ function freshWatermark() {
 function loadWatermark() {
   let raw;
   try {
-    raw = import_fs21.default.readFileSync(WATERMARK_FILE(), "utf-8");
+    raw = import_fs22.default.readFileSync(WATERMARK_FILE(), "utf-8");
   } catch {
     return { status: "fresh", wm: freshWatermark() };
   }
@@ -11292,28 +11528,28 @@ function loadWatermark() {
 function saveWatermark(wm) {
   if (wm.schemaVersion > WATERMARK_SCHEMA_VERSION) return;
   const target = WATERMARK_FILE();
-  const dir = import_path23.default.dirname(target);
-  if (!import_fs21.default.existsSync(dir)) import_fs21.default.mkdirSync(dir, { recursive: true });
+  const dir = import_path24.default.dirname(target);
+  if (!import_fs22.default.existsSync(dir)) import_fs22.default.mkdirSync(dir, { recursive: true });
   const tmp = target + ".tmp";
-  import_fs21.default.writeFileSync(tmp, JSON.stringify(wm, null, 2) + "\n", "utf-8");
-  import_fs21.default.renameSync(tmp, target);
+  import_fs22.default.writeFileSync(tmp, JSON.stringify(wm, null, 2) + "\n", "utf-8");
+  import_fs22.default.renameSync(tmp, target);
 }
 function listJsonlFiles() {
   const root = PROJECTS_DIR();
-  if (!import_fs21.default.existsSync(root)) return [];
+  if (!import_fs22.default.existsSync(root)) return [];
   const out = [];
-  for (const entry of import_fs21.default.readdirSync(root, { withFileTypes: true })) {
+  for (const entry of import_fs22.default.readdirSync(root, { withFileTypes: true })) {
     if (!entry.isDirectory()) continue;
-    const projectDir = import_path23.default.join(root, entry.name);
+    const projectDir = import_path24.default.join(root, entry.name);
     let inner;
     try {
-      inner = import_fs21.default.readdirSync(projectDir, { withFileTypes: true });
+      inner = import_fs22.default.readdirSync(projectDir, { withFileTypes: true });
     } catch {
       continue;
     }
     for (const file of inner) {
       if (file.isFile() && file.name.endsWith(".jsonl")) {
-        out.push(import_path23.default.join(projectDir, file.name));
+        out.push(import_path24.default.join(projectDir, file.name));
       }
     }
   }
@@ -11321,7 +11557,7 @@ function listJsonlFiles() {
 }
 function fileSize(p) {
   try {
-    return import_fs21.default.statSync(p).size;
+    return import_fs22.default.statSync(p).size;
   } catch {
     return 0;
   }
@@ -11329,7 +11565,7 @@ function fileSize(p) {
 async function scanDelta(filePath, fromByte, onLine) {
   const size = fileSize(filePath);
   if (size <= fromByte) return fromByte;
-  const stream = import_fs21.default.createReadStream(filePath, {
+  const stream = import_fs22.default.createReadStream(filePath, {
     start: fromByte,
     end: size - 1,
     highWaterMark: 64 * 1024
@@ -11441,7 +11677,7 @@ async function tickForensicBroadcast(offsets) {
       continue;
     }
     if (size <= offset) continue;
-    const sessionId = import_path23.default.basename(file, ".jsonl");
+    const sessionId = import_path24.default.basename(file, ".jsonl");
     const newOffset = await scanDelta(file, offset, (obj, lineIndex) => {
       out.push(...extractFindingsFromLine(obj, sessionId, lineIndex));
     });
@@ -11500,7 +11736,7 @@ function emptyTick(uploadAs) {
 function readRawWatermarkPreservingOffsets() {
   let raw;
   try {
-    raw = import_fs21.default.readFileSync(WATERMARK_FILE(), "utf-8");
+    raw = import_fs22.default.readFileSync(WATERMARK_FILE(), "utf-8");
   } catch {
     return null;
   }
@@ -11534,13 +11770,13 @@ async function runActualTick(wm) {
     if (!known) {
       let mtimeMs = 0;
       try {
-        mtimeMs = import_fs21.default.statSync(filePath).mtime.getTime();
+        mtimeMs = import_fs22.default.statSync(filePath).mtime.getTime();
       } catch {
         continue;
       }
       if (mtimeMs >= watermarkCreatedAt) {
         filesNew++;
-        const sessionId2 = import_path23.default.basename(filePath, ".jsonl");
+        const sessionId2 = import_path24.default.basename(filePath, ".jsonl");
         const newScannedTo2 = await scanDelta(filePath, 0, (obj, lineIndex) => {
           totalToolCalls++;
           toolCallsBySession[sessionId2] = (toolCallsBySession[sessionId2] ?? 0) + 1;
@@ -11558,7 +11794,7 @@ async function runActualTick(wm) {
       filesSkipped++;
       continue;
     }
-    const sessionId = import_path23.default.basename(filePath, ".jsonl");
+    const sessionId = import_path24.default.basename(filePath, ".jsonl");
     const newScannedTo = await scanDelta(filePath, known.scannedTo, (obj, lineIndex) => {
       totalToolCalls++;
       toolCallsBySession[sessionId] = (toolCallsBySession[sessionId] ?? 0) + 1;
@@ -11580,18 +11816,18 @@ async function runActualTick(wm) {
     schemaFuture: false
   };
 }
-var import_fs21, import_os20, import_path23, import_readline, PROJECTS_DIR, WATERMARK_FILE, MAX_LINE_BYTES, WATERMARK_SCHEMA_VERSION, LONG_OUTPUT_THRESHOLD_BYTES2;
+var import_fs22, import_os21, import_path24, import_readline, PROJECTS_DIR, WATERMARK_FILE, MAX_LINE_BYTES, WATERMARK_SCHEMA_VERSION, LONG_OUTPUT_THRESHOLD_BYTES2;
 var init_scan_watermark = __esm({
   "src/daemon/scan-watermark.ts"() {
     "use strict";
-    import_fs21 = __toESM(require("fs"));
-    import_os20 = __toESM(require("os"));
-    import_path23 = __toESM(require("path"));
+    import_fs22 = __toESM(require("fs"));
+    import_os21 = __toESM(require("os"));
+    import_path24 = __toESM(require("path"));
     import_readline = __toESM(require("readline"));
     init_dlp();
     init_dist();
-    PROJECTS_DIR = () => import_path23.default.join(import_os20.default.homedir(), ".claude", "projects");
-    WATERMARK_FILE = () => import_path23.default.join(import_os20.default.homedir(), ".node9", "scan-watermark.json");
+    PROJECTS_DIR = () => import_path24.default.join(import_os21.default.homedir(), ".claude", "projects");
+    WATERMARK_FILE = () => import_path24.default.join(import_os21.default.homedir(), ".node9", "scan-watermark.json");
     MAX_LINE_BYTES = 2 * 1024 * 1024;
     WATERMARK_SCHEMA_VERSION = 2;
     LONG_OUTPUT_THRESHOLD_BYTES2 = LONG_OUTPUT_THRESHOLD_BYTES;
@@ -11640,40 +11876,40 @@ function parseSinceCutoff(raw, now = /* @__PURE__ */ new Date()) {
   return now.getTime() - 90 * 864e5;
 }
 function* iterateJsonlFiles(cutoffMs) {
-  const projectsDir = import_path24.default.join(import_os21.default.homedir(), ".claude", "projects");
+  const projectsDir = import_path25.default.join(import_os22.default.homedir(), ".claude", "projects");
   let dirs;
   try {
-    dirs = import_fs22.default.readdirSync(projectsDir);
+    dirs = import_fs23.default.readdirSync(projectsDir);
   } catch {
     return;
   }
   for (const dir of dirs) {
-    const dirPath = import_path24.default.join(projectsDir, dir);
+    const dirPath = import_path25.default.join(projectsDir, dir);
     let stats;
     try {
-      stats = import_fs22.default.statSync(dirPath);
+      stats = import_fs23.default.statSync(dirPath);
     } catch {
       continue;
     }
     if (!stats.isDirectory()) continue;
     let files;
     try {
-      files = import_fs22.default.readdirSync(dirPath).filter((f) => f.endsWith(".jsonl"));
+      files = import_fs23.default.readdirSync(dirPath).filter((f) => f.endsWith(".jsonl"));
     } catch {
       continue;
     }
     for (const file of files) {
-      const filePath = import_path24.default.join(dirPath, file);
+      const filePath = import_path25.default.join(dirPath, file);
       let mtime = 0;
       try {
-        mtime = import_fs22.default.statSync(filePath).mtimeMs;
+        mtime = import_fs23.default.statSync(filePath).mtimeMs;
       } catch {
         continue;
       }
       if (mtime < cutoffMs) continue;
       yield {
         filePath,
-        sessionId: import_path24.default.basename(file, ".jsonl"),
+        sessionId: import_path25.default.basename(file, ".jsonl"),
         projectDir: dir
       };
     }
@@ -11741,7 +11977,7 @@ async function runUploadHistory(opts) {
     filesScanned++;
     let content;
     try {
-      content = import_fs22.default.readFileSync(filePath, "utf8");
+      content = import_fs23.default.readFileSync(filePath, "utf8");
     } catch {
       continue;
     }
@@ -11815,10 +12051,10 @@ async function runUploadHistory(opts) {
     const costUrl = creds.apiUrl.endsWith("/policies/sync") ? creds.apiUrl.replace(/\/policies\/sync$/, "/cost-sync") : `${creds.apiUrl.replace(/\/$/, "")}/cost-sync`;
     let username = "unknown";
     try {
-      username = import_os21.default.userInfo().username;
+      username = import_os22.default.userInfo().username;
     } catch {
     }
-    const machineId = `${import_os21.default.hostname()}:${username}`;
+    const machineId = `${import_os22.default.hostname()}:${username}`;
     await postJson(costUrl, creds.apiKey, {
       machineId,
       entries: dailyEntries
@@ -11868,14 +12104,14 @@ async function postJson(url, apiKey, body) {
     req.end();
   });
 }
-var import_fs22, import_https, import_os21, import_path24, import_chalk4, FINDING_TO_SIGNAL2;
+var import_fs23, import_https, import_os22, import_path25, import_chalk4, FINDING_TO_SIGNAL2;
 var init_scan_upload_history = __esm({
   "src/scan-upload-history.ts"() {
     "use strict";
-    import_fs22 = __toESM(require("fs"));
+    import_fs23 = __toESM(require("fs"));
     import_https = __toESM(require("https"));
-    import_os21 = __toESM(require("os"));
-    import_path24 = __toESM(require("path"));
+    import_os22 = __toESM(require("os"));
+    import_path25 = __toESM(require("path"));
     import_chalk4 = __toESM(require("chalk"));
     init_dist();
     init_config();
@@ -12117,14 +12353,14 @@ function buildRuleSources() {
 }
 function countScanFiles() {
   let total = 0;
-  const claudeDir = import_path25.default.join(import_os22.default.homedir(), ".claude", "projects");
-  if (import_fs23.default.existsSync(claudeDir)) {
+  const claudeDir = import_path26.default.join(import_os23.default.homedir(), ".claude", "projects");
+  if (import_fs24.default.existsSync(claudeDir)) {
     try {
-      for (const proj of import_fs23.default.readdirSync(claudeDir)) {
-        const p = import_path25.default.join(claudeDir, proj);
+      for (const proj of import_fs24.default.readdirSync(claudeDir)) {
+        const p = import_path26.default.join(claudeDir, proj);
         try {
-          if (!import_fs23.default.statSync(p).isDirectory()) continue;
-          total += import_fs23.default.readdirSync(p).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-")).length;
+          if (!import_fs24.default.statSync(p).isDirectory()) continue;
+          total += import_fs24.default.readdirSync(p).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-")).length;
         } catch {
           continue;
         }
@@ -12132,17 +12368,17 @@ function countScanFiles() {
     } catch {
     }
   }
-  const geminiDir = import_path25.default.join(import_os22.default.homedir(), ".gemini", "tmp");
-  if (import_fs23.default.existsSync(geminiDir)) {
+  const geminiDir = import_path26.default.join(import_os23.default.homedir(), ".gemini", "tmp");
+  if (import_fs24.default.existsSync(geminiDir)) {
     try {
-      for (const slug2 of import_fs23.default.readdirSync(geminiDir)) {
-        const p = import_path25.default.join(geminiDir, slug2);
+      for (const slug2 of import_fs24.default.readdirSync(geminiDir)) {
+        const p = import_path26.default.join(geminiDir, slug2);
         try {
-          if (!import_fs23.default.statSync(p).isDirectory()) continue;
-          const chatsDir = import_path25.default.join(p, "chats");
-          if (import_fs23.default.existsSync(chatsDir)) {
+          if (!import_fs24.default.statSync(p).isDirectory()) continue;
+          const chatsDir = import_path26.default.join(p, "chats");
+          if (import_fs24.default.existsSync(chatsDir)) {
             try {
-              total += import_fs23.default.readdirSync(chatsDir).filter((f) => f.endsWith(".json")).length;
+              total += import_fs24.default.readdirSync(chatsDir).filter((f) => f.endsWith(".json")).length;
             } catch {
             }
           }
@@ -12154,15 +12390,15 @@ function countScanFiles() {
     }
   }
   for (const surface of ["antigravity-cli", "antigravity-ide"]) {
-    const brainDir = import_path25.default.join(import_os22.default.homedir(), ".gemini", surface, "brain");
-    if (!import_fs23.default.existsSync(brainDir)) continue;
+    const brainDir = import_path26.default.join(import_os23.default.homedir(), ".gemini", surface, "brain");
+    if (!import_fs24.default.existsSync(brainDir)) continue;
     try {
-      for (const conv of import_fs23.default.readdirSync(brainDir)) {
-        const convPath = import_path25.default.join(brainDir, conv);
+      for (const conv of import_fs24.default.readdirSync(brainDir)) {
+        const convPath = import_path26.default.join(brainDir, conv);
         try {
-          if (!import_fs23.default.statSync(convPath).isDirectory()) continue;
-          const logsDir = import_path25.default.join(convPath, ".system_generated", "logs");
-          if (import_fs23.default.existsSync(import_path25.default.join(logsDir, "transcript_full.jsonl")) || import_fs23.default.existsSync(import_path25.default.join(logsDir, "transcript.jsonl"))) {
+          if (!import_fs24.default.statSync(convPath).isDirectory()) continue;
+          const logsDir = import_path26.default.join(convPath, ".system_generated", "logs");
+          if (import_fs24.default.existsSync(import_path26.default.join(logsDir, "transcript_full.jsonl")) || import_fs24.default.existsSync(import_path26.default.join(logsDir, "transcript.jsonl"))) {
             total += 1;
           }
         } catch {
@@ -12172,31 +12408,31 @@ function countScanFiles() {
     } catch {
     }
   }
-  const copilotDir = import_path25.default.join(import_os22.default.homedir(), ".copilot", "session-state");
-  if (import_fs23.default.existsSync(copilotDir)) {
+  const copilotDir = import_path26.default.join(import_os23.default.homedir(), ".copilot", "session-state");
+  if (import_fs24.default.existsSync(copilotDir)) {
     try {
-      for (const sid of import_fs23.default.readdirSync(copilotDir)) {
-        if (import_fs23.default.existsSync(import_path25.default.join(copilotDir, sid, "events.jsonl"))) total += 1;
+      for (const sid of import_fs24.default.readdirSync(copilotDir)) {
+        if (import_fs24.default.existsSync(import_path26.default.join(copilotDir, sid, "events.jsonl"))) total += 1;
       }
     } catch {
     }
   }
-  const codexDir = import_path25.default.join(import_os22.default.homedir(), ".codex", "sessions");
-  if (import_fs23.default.existsSync(codexDir)) {
+  const codexDir = import_path26.default.join(import_os23.default.homedir(), ".codex", "sessions");
+  if (import_fs24.default.existsSync(codexDir)) {
     try {
-      for (const year of import_fs23.default.readdirSync(codexDir)) {
-        const yp = import_path25.default.join(codexDir, year);
+      for (const year of import_fs24.default.readdirSync(codexDir)) {
+        const yp = import_path26.default.join(codexDir, year);
         try {
-          if (!import_fs23.default.statSync(yp).isDirectory()) continue;
-          for (const month of import_fs23.default.readdirSync(yp)) {
-            const mp = import_path25.default.join(yp, month);
+          if (!import_fs24.default.statSync(yp).isDirectory()) continue;
+          for (const month of import_fs24.default.readdirSync(yp)) {
+            const mp = import_path26.default.join(yp, month);
             try {
-              if (!import_fs23.default.statSync(mp).isDirectory()) continue;
-              for (const day of import_fs23.default.readdirSync(mp)) {
-                const dp = import_path25.default.join(mp, day);
+              if (!import_fs24.default.statSync(mp).isDirectory()) continue;
+              for (const day of import_fs24.default.readdirSync(mp)) {
+                const dp = import_path26.default.join(mp, day);
                 try {
-                  if (!import_fs23.default.statSync(dp).isDirectory()) continue;
-                  total += import_fs23.default.readdirSync(dp).filter((f) => f.endsWith(".jsonl")).length;
+                  if (!import_fs24.default.statSync(dp).isDirectory()) continue;
+                  total += import_fs24.default.readdirSync(dp).filter((f) => f.endsWith(".jsonl")).length;
                 } catch {
                   continue;
                 }
@@ -12232,7 +12468,7 @@ function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, re
   const sessionId = file.replace(/\.jsonl$/, "");
   let raw;
   try {
-    raw = import_fs23.default.readFileSync(import_path25.default.join(projPath, file), "utf-8");
+    raw = import_fs24.default.readFileSync(import_path26.default.join(projPath, file), "utf-8");
   } catch {
     return;
   }
@@ -12284,7 +12520,7 @@ function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, re
           if (block.type !== "tool_result") continue;
           const filePath = block.tool_use_id ? toolUseFilePaths.get(block.tool_use_id) : void 0;
           if (filePath) {
-            const ext = import_path25.default.extname(filePath).toLowerCase();
+            const ext = import_path26.default.extname(filePath).toLowerCase();
             if (CODE_EXTENSIONS.has(ext)) continue;
           }
           const resultText = typeof block.content === "string" ? block.content : Array.isArray(block.content) ? block.content.map((c) => c.text ?? "").join("\n") : null;
@@ -12341,7 +12577,7 @@ function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, re
       const rawCmd = String(input.command ?? "").trimStart();
       if (/^node9\s+(scan|explain|report|tail|dlp|status|sessions|audit)\b/.test(rawCmd)) continue;
       const inputFilePath = typeof input.file_path === "string" ? input.file_path : "";
-      const inputFileExt = inputFilePath ? import_path25.default.extname(inputFilePath).toLowerCase() : "";
+      const inputFileExt = inputFilePath ? import_path26.default.extname(inputFilePath).toLowerCase() : "";
       if (CODE_EXTENSIONS.has(inputFileExt)) continue;
       const dlpMatch = scanArgs(input);
       if (dlpMatch) {
@@ -12438,19 +12674,19 @@ function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, re
   }
 }
 function processClaudeProject(proj, projectsDir, ruleSources, startDate, result, dedup, onProgress, onLine) {
-  const projPath = import_path25.default.join(projectsDir, proj);
+  const projPath = import_path26.default.join(projectsDir, proj);
   try {
-    if (!import_fs23.default.statSync(projPath).isDirectory()) return;
+    if (!import_fs24.default.statSync(projPath).isDirectory()) return;
   } catch {
     return;
   }
-  const projLabel = stripTerminalEscapes(decodeURIComponent(proj).replace(import_os22.default.homedir(), "~")).slice(
+  const projLabel = stripTerminalEscapes(decodeURIComponent(proj).replace(import_os23.default.homedir(), "~")).slice(
     0,
     40
   );
   let files;
   try {
-    files = import_fs23.default.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
+    files = import_fs24.default.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
   } catch {
     return;
   }
@@ -12484,12 +12720,12 @@ function emptyClaudeScan() {
   };
 }
 function scanClaudeHistory(startDate, onProgress, onLine) {
-  const projectsDir = import_path25.default.join(import_os22.default.homedir(), ".claude", "projects");
+  const projectsDir = import_path26.default.join(import_os23.default.homedir(), ".claude", "projects");
   const result = emptyClaudeScan();
-  if (!import_fs23.default.existsSync(projectsDir)) return result;
+  if (!import_fs24.default.existsSync(projectsDir)) return result;
   let projDirs;
   try {
-    projDirs = import_fs23.default.readdirSync(projectsDir);
+    projDirs = import_fs24.default.readdirSync(projectsDir);
   } catch {
     return result;
   }
@@ -12510,7 +12746,7 @@ function scanClaudeHistory(startDate, onProgress, onLine) {
   return result;
 }
 function scanGeminiHistory(startDate, onProgress, onLine) {
-  const tmpDir = import_path25.default.join(import_os22.default.homedir(), ".gemini", "tmp");
+  const tmpDir = import_path26.default.join(import_os23.default.homedir(), ".gemini", "tmp");
   const result = {
     filesScanned: 0,
     sessions: 0,
@@ -12525,33 +12761,33 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
     sessionsWithEarlySecrets: 0
   };
   const dedup = emptyScanDedup();
-  if (!import_fs23.default.existsSync(tmpDir)) return result;
+  if (!import_fs24.default.existsSync(tmpDir)) return result;
   let slugDirs;
   try {
-    slugDirs = import_fs23.default.readdirSync(tmpDir);
+    slugDirs = import_fs24.default.readdirSync(tmpDir);
   } catch {
     return result;
   }
   const ruleSources = buildRuleSources();
   for (const slug2 of slugDirs) {
-    const slugPath = import_path25.default.join(tmpDir, slug2);
+    const slugPath = import_path26.default.join(tmpDir, slug2);
     try {
-      if (!import_fs23.default.statSync(slugPath).isDirectory()) continue;
+      if (!import_fs24.default.statSync(slugPath).isDirectory()) continue;
     } catch {
       continue;
     }
     let projLabel = stripTerminalEscapes(slug2).slice(0, 40);
     try {
       projLabel = stripTerminalEscapes(
-        import_fs23.default.readFileSync(import_path25.default.join(slugPath, ".project_root"), "utf-8").trim()
-      ).replace(import_os22.default.homedir(), "~").slice(0, 40);
+        import_fs24.default.readFileSync(import_path26.default.join(slugPath, ".project_root"), "utf-8").trim()
+      ).replace(import_os23.default.homedir(), "~").slice(0, 40);
     } catch {
     }
-    const chatsDir = import_path25.default.join(slugPath, "chats");
-    if (!import_fs23.default.existsSync(chatsDir)) continue;
+    const chatsDir = import_path26.default.join(slugPath, "chats");
+    if (!import_fs24.default.existsSync(chatsDir)) continue;
     let chatFiles;
     try {
-      chatFiles = import_fs23.default.readdirSync(chatsDir).filter((f) => f.endsWith(".json") || f.endsWith(".jsonl")).sort((a, b) => Number(b.endsWith(".jsonl")) - Number(a.endsWith(".jsonl")));
+      chatFiles = import_fs24.default.readdirSync(chatsDir).filter((f) => f.endsWith(".json") || f.endsWith(".jsonl")).sort((a, b) => Number(b.endsWith(".jsonl")) - Number(a.endsWith(".jsonl")));
     } catch {
       continue;
     }
@@ -12564,7 +12800,7 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
       onProgress?.(result.filesScanned);
       let raw;
       try {
-        raw = import_fs23.default.readFileSync(import_path25.default.join(chatsDir, chatFile), "utf-8");
+        raw = import_fs24.default.readFileSync(import_path26.default.join(chatsDir, chatFile), "utf-8");
       } catch {
         continue;
       }
@@ -12737,13 +12973,13 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
   return result;
 }
 function antigravityBrainDirs() {
-  return ["antigravity-cli", "antigravity-ide"].map((surface) => import_path25.default.join(import_os22.default.homedir(), ".gemini", surface, "brain")).filter((p) => import_fs23.default.existsSync(p));
+  return ["antigravity-cli", "antigravity-ide"].map((surface) => import_path26.default.join(import_os23.default.homedir(), ".gemini", surface, "brain")).filter((p) => import_fs24.default.existsSync(p));
 }
 function antigravityTranscriptPath(convPath) {
-  const logsDir = import_path25.default.join(convPath, ".system_generated", "logs");
+  const logsDir = import_path26.default.join(convPath, ".system_generated", "logs");
   for (const name of ["transcript_full.jsonl", "transcript.jsonl"]) {
-    const p = import_path25.default.join(logsDir, name);
-    if (import_fs23.default.existsSync(p)) return p;
+    const p = import_path26.default.join(logsDir, name);
+    if (import_fs24.default.existsSync(p)) return p;
   }
   return null;
 }
@@ -12769,14 +13005,14 @@ function scanAntigravityHistory(startDate, onProgress, onLine) {
   for (const brainDir of brainDirs) {
     let convDirs;
     try {
-      convDirs = import_fs23.default.readdirSync(brainDir);
+      convDirs = import_fs24.default.readdirSync(brainDir);
     } catch {
       continue;
     }
     for (const conv of convDirs) {
-      const convPath = import_path25.default.join(brainDir, conv);
+      const convPath = import_path26.default.join(brainDir, conv);
       try {
-        if (!import_fs23.default.statSync(convPath).isDirectory()) continue;
+        if (!import_fs24.default.statSync(convPath).isDirectory()) continue;
       } catch {
         continue;
       }
@@ -12786,7 +13022,7 @@ function scanAntigravityHistory(startDate, onProgress, onLine) {
       onProgress?.(result.filesScanned);
       let raw;
       try {
-        raw = import_fs23.default.readFileSync(transcriptFile, "utf-8");
+        raw = import_fs24.default.readFileSync(transcriptFile, "utf-8");
       } catch {
         continue;
       }
@@ -12843,7 +13079,7 @@ function scanAntigravityHistory(startDate, onProgress, onLine) {
             result.bashCalls++;
             const cwd = String(input.cwd ?? "");
             if (cwd && projLabel === conv.slice(0, 8)) {
-              projLabel = stripTerminalEscapes(cwd).replace(import_os22.default.homedir(), "~").slice(0, 40);
+              projLabel = stripTerminalEscapes(cwd).replace(import_os23.default.homedir(), "~").slice(0, 40);
             }
           }
           const rawCmd = String(input.command ?? "").trimStart();
@@ -12943,7 +13179,7 @@ function scanAntigravityHistory(startDate, onProgress, onLine) {
   return result;
 }
 function scanCopilotHistory(startDate, onProgress, onLine) {
-  const sessionDir = import_path25.default.join(import_os22.default.homedir(), ".copilot", "session-state");
+  const sessionDir = import_path26.default.join(import_os23.default.homedir(), ".copilot", "session-state");
   const result = {
     filesScanned: 0,
     sessions: 0,
@@ -12959,22 +13195,22 @@ function scanCopilotHistory(startDate, onProgress, onLine) {
     sessionsWithEarlySecrets: 0
   };
   const dedup = emptyScanDedup();
-  if (!import_fs23.default.existsSync(sessionDir)) return result;
+  if (!import_fs24.default.existsSync(sessionDir)) return result;
   let sessionIds;
   try {
-    sessionIds = import_fs23.default.readdirSync(sessionDir);
+    sessionIds = import_fs24.default.readdirSync(sessionDir);
   } catch {
     return result;
   }
   const ruleSources = buildRuleSources();
   for (const sessionId of sessionIds) {
-    const eventsPath = import_path25.default.join(sessionDir, sessionId, "events.jsonl");
-    if (!import_fs23.default.existsSync(eventsPath)) continue;
+    const eventsPath = import_path26.default.join(sessionDir, sessionId, "events.jsonl");
+    if (!import_fs24.default.existsSync(eventsPath)) continue;
     result.filesScanned++;
     onProgress?.(result.filesScanned);
     let raw;
     try {
-      raw = import_fs23.default.readFileSync(eventsPath, "utf-8");
+      raw = import_fs24.default.readFileSync(eventsPath, "utf-8");
     } catch {
       continue;
     }
@@ -12994,7 +13230,7 @@ function scanCopilotHistory(startDate, onProgress, onLine) {
       if (ev.type === "session.start") {
         const cwd = ev.data?.context?.cwd;
         if (typeof cwd === "string" && cwd) {
-          projLabel = stripTerminalEscapes(cwd).replace(import_os22.default.homedir(), "~").slice(0, 40);
+          projLabel = stripTerminalEscapes(cwd).replace(import_os23.default.homedir(), "~").slice(0, 40);
         }
         continue;
       }
@@ -13126,7 +13362,7 @@ function scanCopilotHistory(startDate, onProgress, onLine) {
   return result;
 }
 function scanCodexHistory(startDate, onProgress, onLine) {
-  const sessionsBase = import_path25.default.join(import_os22.default.homedir(), ".codex", "sessions");
+  const sessionsBase = import_path26.default.join(import_os23.default.homedir(), ".codex", "sessions");
   const result = {
     filesScanned: 0,
     sessions: 0,
@@ -13141,32 +13377,32 @@ function scanCodexHistory(startDate, onProgress, onLine) {
     sessionsWithEarlySecrets: 0
   };
   const dedup = emptyScanDedup();
-  if (!import_fs23.default.existsSync(sessionsBase)) return result;
+  if (!import_fs24.default.existsSync(sessionsBase)) return result;
   const jsonlFiles = [];
   try {
-    for (const year of import_fs23.default.readdirSync(sessionsBase)) {
-      const yearPath = import_path25.default.join(sessionsBase, year);
+    for (const year of import_fs24.default.readdirSync(sessionsBase)) {
+      const yearPath = import_path26.default.join(sessionsBase, year);
       try {
-        if (!import_fs23.default.statSync(yearPath).isDirectory()) continue;
+        if (!import_fs24.default.statSync(yearPath).isDirectory()) continue;
       } catch {
         continue;
       }
-      for (const month of import_fs23.default.readdirSync(yearPath)) {
-        const monthPath = import_path25.default.join(yearPath, month);
+      for (const month of import_fs24.default.readdirSync(yearPath)) {
+        const monthPath = import_path26.default.join(yearPath, month);
         try {
-          if (!import_fs23.default.statSync(monthPath).isDirectory()) continue;
+          if (!import_fs24.default.statSync(monthPath).isDirectory()) continue;
         } catch {
           continue;
         }
-        for (const day of import_fs23.default.readdirSync(monthPath)) {
-          const dayPath = import_path25.default.join(monthPath, day);
+        for (const day of import_fs24.default.readdirSync(monthPath)) {
+          const dayPath = import_path26.default.join(monthPath, day);
           try {
-            if (!import_fs23.default.statSync(dayPath).isDirectory()) continue;
+            if (!import_fs24.default.statSync(dayPath).isDirectory()) continue;
           } catch {
             continue;
           }
-          for (const file of import_fs23.default.readdirSync(dayPath)) {
-            if (file.endsWith(".jsonl")) jsonlFiles.push(import_path25.default.join(dayPath, file));
+          for (const file of import_fs24.default.readdirSync(dayPath)) {
+            if (file.endsWith(".jsonl")) jsonlFiles.push(import_path26.default.join(dayPath, file));
           }
         }
       }
@@ -13180,7 +13416,7 @@ function scanCodexHistory(startDate, onProgress, onLine) {
     onProgress?.(result.filesScanned);
     let lines;
     try {
-      lines = import_fs23.default.readFileSync(filePath, "utf-8").split("\n");
+      lines = import_fs24.default.readFileSync(filePath, "utf-8").split("\n");
     } catch {
       continue;
     }
@@ -13207,7 +13443,7 @@ function scanCodexHistory(startDate, onProgress, onLine) {
         sessionId = String(payload["id"] ?? filePath);
         startTime = String(payload["timestamp"] ?? "");
         const cwd = String(payload["cwd"] ?? "");
-        projLabel = stripTerminalEscapes(cwd.replace(import_os22.default.homedir(), "~")).slice(0, 40);
+        projLabel = stripTerminalEscapes(cwd.replace(import_os23.default.homedir(), "~")).slice(0, 40);
         continue;
       }
       if (entry.type === "turn_context" && typeof payload["model"] === "string") {
@@ -13367,17 +13603,17 @@ function scanCodexHistory(startDate, onProgress, onLine) {
   return result;
 }
 function scanShellConfig() {
-  const home = import_os22.default.homedir();
+  const home = import_os23.default.homedir();
   const configFiles = [".zshrc", ".bashrc", ".bash_profile", ".profile"].map(
-    (f) => import_path25.default.join(home, f)
+    (f) => import_path26.default.join(home, f)
   );
   const findings = [];
   const seen = /* @__PURE__ */ new Set();
   for (const filePath of configFiles) {
-    if (!import_fs23.default.existsSync(filePath)) continue;
+    if (!import_fs24.default.existsSync(filePath)) continue;
     let lines;
     try {
-      lines = import_fs23.default.readFileSync(filePath, "utf-8").split("\n");
+      lines = import_fs24.default.readFileSync(filePath, "utf-8").split("\n");
     } catch {
       continue;
     }
@@ -14183,7 +14419,7 @@ function registerScanCommand(program2) {
         if (!drillDown) {
           const useInk2 = !options.classic;
           if (useInk2) {
-            const scanInkPath = import_path25.default.join(__dirname, "scan-ink.mjs");
+            const scanInkPath = import_path26.default.join(__dirname, "scan-ink.mjs");
             const dynamicImport = new Function("id", "return import(id)");
             const mod = await dynamicImport(`file://${scanInkPath}`);
             const rangeLabel2 = options.all ? "all time" : `last ${options.days ?? 90} days`;
@@ -14415,14 +14651,14 @@ function registerScanCommand(program2) {
     }
   );
 }
-var import_chalk5, import_fs23, import_path25, import_os22, import_string_width2, CODE_EXTENSIONS, SELF_OUTPUT_MARKERS, FIXTURE_TOKEN_PATTERNS, TERMINAL_ESCAPE_RE2, LOOP_TOOLS, LOOP_THRESHOLD, LOOP_TIMESPAN_THRESHOLD_MS, STUCK_TOOLS_MIN_WASTE, STUCK_TOOLS_LIMIT, RECURRING_SESSION_THRESHOLD, STALE_AGE_DAYS, classifyRuleSeverity2, narrativeRuleLabel2;
+var import_chalk5, import_fs24, import_path26, import_os23, import_string_width2, CODE_EXTENSIONS, SELF_OUTPUT_MARKERS, FIXTURE_TOKEN_PATTERNS, TERMINAL_ESCAPE_RE2, LOOP_TOOLS, LOOP_THRESHOLD, LOOP_TIMESPAN_THRESHOLD_MS, STUCK_TOOLS_MIN_WASTE, STUCK_TOOLS_LIMIT, RECURRING_SESSION_THRESHOLD, STALE_AGE_DAYS, classifyRuleSeverity2, narrativeRuleLabel2;
 var init_scan = __esm({
   "src/cli/commands/scan.ts"() {
     "use strict";
     import_chalk5 = __toESM(require("chalk"));
-    import_fs23 = __toESM(require("fs"));
-    import_path25 = __toESM(require("path"));
-    import_os22 = __toESM(require("os"));
+    import_fs24 = __toESM(require("fs"));
+    import_path26 = __toESM(require("path"));
+    import_os23 = __toESM(require("os"));
     init_shields();
     init_config();
     init_policy();
@@ -14599,12 +14835,12 @@ var init_suggestion_tracker = __esm({
 });
 
 // src/daemon/taint-store.ts
-var import_fs24, import_path26, DEFAULT_TTL_MS, TaintStore, SESSION_TAINT_TTL_MS, SessionTaintStore;
+var import_fs25, import_path27, DEFAULT_TTL_MS, TaintStore, SESSION_TAINT_TTL_MS, SessionTaintStore;
 var init_taint_store = __esm({
   "src/daemon/taint-store.ts"() {
     "use strict";
-    import_fs24 = __toESM(require("fs"));
-    import_path26 = __toESM(require("path"));
+    import_fs25 = __toESM(require("fs"));
+    import_path27 = __toESM(require("path"));
     DEFAULT_TTL_MS = 60 * 60 * 1e3;
     TaintStore = class {
       records = /* @__PURE__ */ new Map();
@@ -14670,9 +14906,9 @@ var init_taint_store = __esm({
       /** Resolve to absolute path, falling back to path.resolve if file doesn't exist yet. */
       _resolve(filePath) {
         try {
-          return import_fs24.default.realpathSync.native(import_path26.default.resolve(filePath));
+          return import_fs25.default.realpathSync.native(import_path27.default.resolve(filePath));
         } catch {
-          return import_path26.default.resolve(filePath);
+          return import_path27.default.resolve(filePath);
         }
       }
     };
@@ -14838,8 +15074,8 @@ var init_session_history = __esm({
 // src/daemon/state.ts
 function loadInsightCounts() {
   try {
-    if (!import_fs25.default.existsSync(INSIGHT_COUNTS_FILE)) return;
-    const data = JSON.parse(import_fs25.default.readFileSync(INSIGHT_COUNTS_FILE, "utf-8"));
+    if (!import_fs26.default.existsSync(INSIGHT_COUNTS_FILE)) return;
+    const data = JSON.parse(import_fs26.default.readFileSync(INSIGHT_COUNTS_FILE, "utf-8"));
     for (const [tool, count] of Object.entries(data)) {
       if (typeof count === "number" && count > 0) insightCounts.set(tool, count);
     }
@@ -14878,23 +15114,23 @@ function markRejectionHandlerRegistered() {
   daemonRejectionHandlerRegistered = true;
 }
 function atomicWriteSync2(filePath, data, options) {
-  const dir = import_path27.default.dirname(filePath);
-  if (!import_fs25.default.existsSync(dir)) import_fs25.default.mkdirSync(dir, { recursive: true });
+  const dir = import_path28.default.dirname(filePath);
+  if (!import_fs26.default.existsSync(dir)) import_fs26.default.mkdirSync(dir, { recursive: true });
   const tmpPath = `${filePath}.${(0, import_crypto8.randomUUID)()}.tmp`;
   try {
-    import_fs25.default.writeFileSync(tmpPath, data, options);
+    import_fs26.default.writeFileSync(tmpPath, data, options);
   } catch (err2) {
     try {
-      import_fs25.default.unlinkSync(tmpPath);
+      import_fs26.default.unlinkSync(tmpPath);
     } catch {
     }
     throw err2;
   }
   try {
-    import_fs25.default.renameSync(tmpPath, filePath);
+    import_fs26.default.renameSync(tmpPath, filePath);
   } catch (err2) {
     try {
-      import_fs25.default.unlinkSync(tmpPath);
+      import_fs26.default.unlinkSync(tmpPath);
     } catch {
     }
     throw err2;
@@ -14918,16 +15154,16 @@ function appendAuditLog(data) {
       decision: data.decision,
       source: "daemon"
     };
-    const dir = import_path27.default.dirname(AUDIT_LOG_FILE);
-    if (!import_fs25.default.existsSync(dir)) import_fs25.default.mkdirSync(dir, { recursive: true });
-    import_fs25.default.appendFileSync(AUDIT_LOG_FILE, JSON.stringify(entry) + "\n");
+    const dir = import_path28.default.dirname(AUDIT_LOG_FILE);
+    if (!import_fs26.default.existsSync(dir)) import_fs26.default.mkdirSync(dir, { recursive: true });
+    import_fs26.default.appendFileSync(AUDIT_LOG_FILE, JSON.stringify(entry) + "\n");
   } catch {
   }
 }
 function getAuditHistory(limit = 20) {
   try {
-    if (!import_fs25.default.existsSync(AUDIT_LOG_FILE)) return [];
-    const lines = import_fs25.default.readFileSync(AUDIT_LOG_FILE, "utf-8").trim().split("\n");
+    if (!import_fs26.default.existsSync(AUDIT_LOG_FILE)) return [];
+    const lines = import_fs26.default.readFileSync(AUDIT_LOG_FILE, "utf-8").trim().split("\n");
     if (lines.length === 1 && lines[0] === "") return [];
     return lines.slice(-limit).map((l) => JSON.parse(l)).reverse();
   } catch {
@@ -14936,7 +15172,7 @@ function getAuditHistory(limit = 20) {
 }
 function getOrgName() {
   try {
-    if (import_fs25.default.existsSync(CREDENTIALS_FILE)) return "Node9 Cloud";
+    if (import_fs26.default.existsSync(CREDENTIALS_FILE)) return "Node9 Cloud";
   } catch {
   }
   return null;
@@ -14944,8 +15180,8 @@ function getOrgName() {
 function writeGlobalSetting(key, value) {
   let config = {};
   try {
-    if (import_fs25.default.existsSync(GLOBAL_CONFIG_FILE)) {
-      config = JSON.parse(import_fs25.default.readFileSync(GLOBAL_CONFIG_FILE, "utf-8"));
+    if (import_fs26.default.existsSync(GLOBAL_CONFIG_FILE)) {
+      config = JSON.parse(import_fs26.default.readFileSync(GLOBAL_CONFIG_FILE, "utf-8"));
     }
   } catch {
   }
@@ -14957,8 +15193,8 @@ function writeTrustEntry(toolName, durationMs, commandPattern) {
   try {
     let trust = { entries: [] };
     try {
-      if (import_fs25.default.existsSync(TRUST_FILE2))
-        trust = JSON.parse(import_fs25.default.readFileSync(TRUST_FILE2, "utf-8"));
+      if (import_fs26.default.existsSync(TRUST_FILE2))
+        trust = JSON.parse(import_fs26.default.readFileSync(TRUST_FILE2, "utf-8"));
     } catch {
     }
     trust.entries = trust.entries.filter(
@@ -14975,8 +15211,8 @@ function writeTrustEntry(toolName, durationMs, commandPattern) {
 }
 function readPersistentDecisions() {
   try {
-    if (import_fs25.default.existsSync(DECISIONS_FILE)) {
-      return JSON.parse(import_fs25.default.readFileSync(DECISIONS_FILE, "utf-8"));
+    if (import_fs26.default.existsSync(DECISIONS_FILE)) {
+      return JSON.parse(import_fs26.default.readFileSync(DECISIONS_FILE, "utf-8"));
     }
   } catch {
   }
@@ -15004,7 +15240,7 @@ function estimateToolCost(tool, args) {
     const filePath = a.file_path ?? a.path;
     if (filePath) {
       try {
-        const bytes = import_fs25.default.statSync(filePath).size;
+        const bytes = import_fs26.default.statSync(filePath).size;
         return bytes / BYTES_PER_TOKEN / 1e6 * INPUT_PRICE_PER_1M;
       } catch {
       }
@@ -15075,7 +15311,7 @@ function abandonPending() {
   });
   if (autoStarted) {
     try {
-      import_fs25.default.unlinkSync(DAEMON_PID_FILE);
+      import_fs26.default.unlinkSync(DAEMON_PID_FILE);
     } catch {
     }
     setTimeout(() => {
@@ -15086,8 +15322,8 @@ function abandonPending() {
 }
 function logActivitySocket(msg) {
   try {
-    import_fs25.default.appendFileSync(
-      import_path27.default.join(homeDir, ".node9", "hook-debug.log"),
+    import_fs26.default.appendFileSync(
+      import_path28.default.join(homeDir, ".node9", "hook-debug.log"),
       `[${(/* @__PURE__ */ new Date()).toISOString()}] [activity-socket] ${msg}
 `
     );
@@ -15109,13 +15345,13 @@ function shouldRebind(now = Date.now()) {
 function startActivitySocket() {
   bindActivitySocket();
   activityHealthInterval = setInterval(() => {
-    if (!import_fs25.default.existsSync(ACTIVITY_SOCKET_PATH2)) attemptRebind("health-probe");
+    if (!import_fs26.default.existsSync(ACTIVITY_SOCKET_PATH2)) attemptRebind("health-probe");
   }, ACTIVITY_HEALTH_PROBE_MS);
   activityHealthInterval.unref();
   process.on("exit", () => {
     if (activityHealthInterval) clearInterval(activityHealthInterval);
     try {
-      import_fs25.default.unlinkSync(ACTIVITY_SOCKET_PATH2);
+      import_fs26.default.unlinkSync(ACTIVITY_SOCKET_PATH2);
     } catch {
     }
   });
@@ -15143,7 +15379,7 @@ function attemptRebind(reason) {
 }
 function bindActivitySocket() {
   try {
-    import_fs25.default.unlinkSync(ACTIVITY_SOCKET_PATH2);
+    import_fs26.default.unlinkSync(ACTIVITY_SOCKET_PATH2);
   } catch {
   }
   const ACTIVITY_MAX_BYTES = 1024 * 1024;
@@ -15230,318 +15466,97 @@ function bindActivitySocket() {
             costEstimate,
             agent: data.agent,
             mcpServer: data.mcpServer,
-            sessionId: data.sessionId
-          });
-        }
-      } catch {
-      }
-    });
-    socket.on("error", () => {
-    });
-  });
-  unixServer.on("error", (err2) => {
-    logActivitySocket(`server error: ${err2.message}`);
-  });
-  unixServer.listen(ACTIVITY_SOCKET_PATH2, () => {
-    logActivitySocket(`bound to ${ACTIVITY_SOCKET_PATH2}`);
-  });
-  activitySocketServer = unixServer;
-}
-var import_net2, import_fs25, import_path27, import_os23, import_crypto8, homeDir, DAEMON_PID_FILE, DECISIONS_FILE, AUDIT_LOG_FILE, TRUST_FILE2, GLOBAL_CONFIG_FILE, CREDENTIALS_FILE, INSIGHT_COUNTS_FILE, pending, sseClients, suggestionTracker, taintStore, sessionTaintStore, insightCounts, _abandonTimer, _hadBrowserClient, _daemonServer, daemonRejectionHandlerRegistered, AUTO_DENY_MS, TRUST_DURATIONS, autoStarted, ACTIVITY_SOCKET_PATH2, ACTIVITY_RING_SIZE, activityRing, LARGE_RESPONSE_RING_SIZE, largeResponseRing, cachedScanResult, cachedScanTs, SCAN_CACHE_TTL_MS, SECRET_KEY_RE, INPUT_PRICE_PER_1M, OUTPUT_PRICE_PER_1M, BYTES_PER_TOKEN, CRITICAL_FORENSIC_CATEGORIES, WRITE_TOOL_NAMES, ACTIVITY_REBIND_MAX_ATTEMPTS, ACTIVITY_REBIND_WINDOW_MS, ACTIVITY_HEALTH_PROBE_MS, activitySocketServer, activityHealthInterval, activityRebindAttempts, activityCircuitTripped;
-var init_state2 = __esm({
-  "src/daemon/state.ts"() {
-    "use strict";
-    import_net2 = __toESM(require("net"));
-    import_fs25 = __toESM(require("fs"));
-    import_path27 = __toESM(require("path"));
-    import_os23 = __toESM(require("os"));
-    import_crypto8 = require("crypto");
-    init_daemon();
-    init_suggestion_tracker();
-    init_taint_store();
-    init_session_counters();
-    init_session_history();
-    homeDir = import_os23.default.homedir();
-    DAEMON_PID_FILE = import_path27.default.join(homeDir, ".node9", "daemon.pid");
-    DECISIONS_FILE = import_path27.default.join(homeDir, ".node9", "decisions.json");
-    AUDIT_LOG_FILE = import_path27.default.join(homeDir, ".node9", "audit.log");
-    TRUST_FILE2 = import_path27.default.join(homeDir, ".node9", "trust.json");
-    GLOBAL_CONFIG_FILE = import_path27.default.join(homeDir, ".node9", "config.json");
-    CREDENTIALS_FILE = import_path27.default.join(homeDir, ".node9", "credentials.json");
-    INSIGHT_COUNTS_FILE = import_path27.default.join(homeDir, ".node9", "insight-counts.json");
-    pending = /* @__PURE__ */ new Map();
-    sseClients = /* @__PURE__ */ new Set();
-    suggestionTracker = new SuggestionTracker(3);
-    taintStore = new TaintStore();
-    sessionTaintStore = new SessionTaintStore();
-    insightCounts = /* @__PURE__ */ new Map();
-    _abandonTimer = null;
-    _hadBrowserClient = false;
-    _daemonServer = null;
-    daemonRejectionHandlerRegistered = false;
-    AUTO_DENY_MS = 12e4;
-    TRUST_DURATIONS = {
-      "30m": 30 * 6e4,
-      "1h": 60 * 6e4,
-      "2h": 2 * 60 * 6e4
-    };
-    autoStarted = process.env.NODE9_AUTO_STARTED === "1";
-    ACTIVITY_SOCKET_PATH2 = process.platform === "win32" ? "\\\\.\\pipe\\node9-activity" : import_path27.default.join(import_os23.default.tmpdir(), "node9-activity.sock");
-    ACTIVITY_RING_SIZE = 100;
-    activityRing = [];
-    LARGE_RESPONSE_RING_SIZE = 20;
-    largeResponseRing = [];
-    cachedScanResult = null;
-    cachedScanTs = 0;
-    SCAN_CACHE_TTL_MS = 5 * 60 * 1e3;
-    SECRET_KEY_RE = /password|secret|token|key|apikey|credential|auth/i;
-    INPUT_PRICE_PER_1M = 3;
-    OUTPUT_PRICE_PER_1M = 15;
-    BYTES_PER_TOKEN = 4;
-    CRITICAL_FORENSIC_CATEGORIES = /* @__PURE__ */ new Set([
-      "privilege-escalation",
-      "destructive-op",
-      "eval-of-remote"
-    ]);
-    WRITE_TOOL_NAMES = /* @__PURE__ */ new Set([
-      "write",
-      "write_file",
-      "create_file",
-      "edit",
-      "multiedit",
-      "str_replace_based_edit_tool",
-      "replace",
-      "notebook_edit",
-      "notebookedit"
-    ]);
-    ACTIVITY_REBIND_MAX_ATTEMPTS = 5;
-    ACTIVITY_REBIND_WINDOW_MS = 6e4;
-    ACTIVITY_HEALTH_PROBE_MS = 2e3;
-    activitySocketServer = null;
-    activityHealthInterval = null;
-    activityRebindAttempts = [];
-    activityCircuitTripped = false;
-  }
-});
-
-// src/agent-wiring.ts
-function readJson2(filePath) {
-  if (!import_fs26.default.existsSync(filePath)) return null;
-  try {
-    return JSON.parse(import_fs26.default.readFileSync(filePath, "utf-8"));
-  } catch {
-    return "invalid";
-  }
-}
-function matchersHaveNode9Hook(matchers) {
-  return (matchers ?? []).some((m) => (m.hooks ?? []).some((h) => isNode9Hook(h.command)));
-}
-function flatHaveNode9Hook(entries) {
-  return (Array.isArray(entries) ? entries : []).some((h) => isNode9Hook(h.command));
-}
-function readHookRoot(filePath, format) {
-  if (!import_fs26.default.existsSync(filePath)) return "absent";
-  let raw;
-  try {
-    raw = import_fs26.default.readFileSync(filePath, "utf-8");
-  } catch {
-    return "absent";
-  }
-  try {
-    const parsed = format === "yaml" ? yaml2.parse(raw) : JSON.parse(raw);
-    return parsed?.hooks ?? {};
-  } catch {
-    return "invalid";
-  }
-}
-function eventWired(root, ev, format) {
-  const arr = root[ev.key];
-  if (format === "matcher") return matchersHaveNode9Hook(arr);
-  return flatHaveNode9Hook(arr);
-}
-function detectMcp(servers) {
-  const entries = Object.entries(servers ?? {});
-  const present = entries.some(([, s]) => s?.command === "node9");
-  const wrapped = entries.filter(([, s]) => s?.command === "node9" && Array.isArray(s.args) && s.args.length > 0).map(([name, s]) => `${name} \u2192 ${s.args.join(" ")}`);
-  return { wrapped, present };
-}
-function readMcp(filePath, format) {
-  if (!import_fs26.default.existsSync(filePath)) return { wrapped: [], present: false };
-  try {
-    if (format === "toml") {
-      const parsed2 = (0, import_smol_toml2.parse)(import_fs26.default.readFileSync(filePath, "utf-8"));
-      return detectMcp(parsed2?.mcp_servers);
-    }
-    const parsed = readJson2(filePath);
-    if (parsed === null || parsed === "invalid") return { wrapped: [], present: false };
-    return detectMcp(parsed.mcpServers);
-  } catch {
-    return { wrapped: [], present: false };
-  }
-}
-function getAgentWiring(home = import_os24.default.homedir()) {
-  const detected = detectAgents(home);
-  return AGENT_SPECS.map((spec) => {
-    const present = spec.present(home);
-    const pad = spec.labelPad ?? DEFAULT_LABEL_PAD;
-    let hooks;
-    let wireState;
-    let hookLabel;
-    let settingsPath;
-    if (spec.shimFile) {
-      const shimWired = exists(spec.shimFile(home));
-      hooks = [{ label: "node9 plugin (node9 check)", wired: shimWired }];
-      wireState = shimWired ? "wired" : present ? "unwired" : "absent";
-      hookLabel = "node9 plugin";
-      settingsPath = spec.shimFile(home);
-    } else {
-      const root = spec.hookFile ? readHookRoot(spec.hookFile(home), spec.hookFormat) : "absent";
-      const primary = spec.hookEvents[0];
-      const rootPresent = root !== "absent" && root !== "invalid";
-      hooks = spec.hookEvents.map((ev) => ({
-        label: hookLabelOf(ev, pad),
-        wired: rootPresent && eventWired(root, ev, spec.hookFormat)
-      }));
-      if (root === "absent") wireState = "absent";
-      else if (root === "invalid") wireState = "invalid";
-      else wireState = primary && eventWired(root, primary, spec.hookFormat) ? "wired" : "unwired";
-      hookLabel = primary ? `${primary.key} hook` : "MCP proxy";
-      settingsPath = spec.hookFile ? spec.hookFile(home) : spec.mcpFile ? spec.mcpFile(home) : "";
-    }
-    const mcp = spec.mcpFile ? readMcp(spec.mcpFile(home), spec.mcpFormat ?? "json") : null;
-    const anyHookWired = hooks.some((h) => h.wired);
-    return {
-      id: spec.id,
-      label: spec.label,
-      setupCommand: spec.setupCommand,
-      installed: detected[spec.id],
-      present,
-      hooks,
-      wireState,
-      hookLabel,
-      settingsPath,
-      configFormat: spec.hookFormat === "yaml" ? "YAML" : "JSON",
-      mcpServers: mcp ? mcp.wrapped : null,
-      mcpProtected: mcp ? mcp.present : false,
-      isProtected: anyHookWired || (mcp?.present ?? false)
-    };
-  });
-}
-var import_fs26, import_path28, import_os24, yaml2, import_smol_toml2, exists, ck, lg, DEFAULT_LABEL_PAD, hookLabelOf, AGENT_SPECS;
-var init_agent_wiring = __esm({
-  "src/agent-wiring.ts"() {
-    "use strict";
-    import_fs26 = __toESM(require("fs"));
-    import_path28 = __toESM(require("path"));
-    import_os24 = __toESM(require("os"));
-    yaml2 = __toESM(require("yaml"));
-    import_smol_toml2 = require("smol-toml");
-    init_setup();
-    exists = (p) => {
-      try {
-        return import_fs26.default.existsSync(p);
-      } catch {
-        return false;
-      }
-    };
-    ck = (key) => ({ key, kind: "check" });
-    lg = (key) => ({ key, kind: "log" });
-    DEFAULT_LABEL_PAD = 11;
-    hookLabelOf = (ev, pad) => `${ev.key.padEnd(pad)} (node9 ${ev.kind})`;
-    AGENT_SPECS = [
-      {
-        id: "claude",
-        label: "Claude Code",
-        setupCommand: "node9 agents add claude",
-        hookFile: (h) => import_path28.default.join(h, ".claude", "settings.json"),
-        hookFormat: "matcher",
-        hookEvents: [ck("PreToolUse"), lg("PostToolUse")],
-        mcpFile: (h) => import_path28.default.join(h, ".claude.json"),
-        present: (h) => exists(import_path28.default.join(h, ".claude", "settings.json")) || exists(import_path28.default.join(h, ".claude.json"))
-      },
-      {
-        id: "gemini",
-        label: "Gemini CLI",
-        setupCommand: "node9 agents add gemini",
-        hookFile: (h) => import_path28.default.join(h, ".gemini", "settings.json"),
-        hookFormat: "matcher",
-        hookEvents: [ck("BeforeTool"), lg("AfterTool")],
-        mcpFile: (h) => import_path28.default.join(h, ".gemini", "settings.json"),
-        present: (h) => exists(import_path28.default.join(h, ".gemini", "settings.json"))
-      },
-      {
-        id: "codex",
-        label: "Codex",
-        setupCommand: "node9 agents add codex",
-        hookFile: (h) => import_path28.default.join(h, ".codex", "hooks.json"),
-        hookFormat: "matcher",
-        hookEvents: [ck("PreToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => import_path28.default.join(h, ".codex", "config.toml"),
-        mcpFormat: "toml",
-        present: (h) => exists(import_path28.default.join(h, ".codex"))
-      },
-      {
-        id: "antigravity",
-        label: "Antigravity",
-        setupCommand: "node9 agents add antigravity",
-        hookFile: (h) => import_path28.default.join(h, ".gemini", "config", "hooks.json"),
-        hookFormat: "matcher",
-        hookEvents: [ck("PreToolUse"), lg("PostToolUse")],
-        mcpFile: (h) => import_path28.default.join(h, ".gemini", "config", "mcp_config.json"),
-        present: (h) => exists(import_path28.default.join(h, ".gemini", "config", "hooks.json")) || exists(import_path28.default.join(h, ".gemini", "antigravity-cli")) || exists(import_path28.default.join(h, ".gemini", "antigravity-ide"))
-      },
-      {
-        id: "copilot",
-        label: "GitHub Copilot",
-        setupCommand: "node9 agents add copilot",
-        hookFile: (h) => import_path28.default.join(h, ".copilot", "hooks", "node9.json"),
-        hookFormat: "flat",
-        hookEvents: [ck("PreToolUse"), lg("PostToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => import_path28.default.join(h, ".copilot", "mcp-config.json"),
-        present: (h) => exists(import_path28.default.join(h, ".copilot"))
-      },
-      {
-        id: "cursor",
-        label: "Cursor",
-        setupCommand: "node9 agents add cursor",
-        // MCP-only — no hook file (see note above).
-        hookFormat: "flat",
-        hookEvents: [],
-        mcpFile: (h) => import_path28.default.join(h, ".cursor", "mcp.json"),
-        present: (h) => exists(import_path28.default.join(h, ".cursor", "mcp.json"))
-      },
-      {
-        id: "hermes",
-        label: "Hermes Agent",
-        setupCommand: "node9 agents add hermes",
-        hookFile: (h) => hermesConfigPath(h),
-        hookFormat: "yaml",
-        hookEvents: [ck("pre_tool_call"), lg("post_tool_call")],
-        labelPad: 14,
-        // 'post_tool_call' is wider than the default
-        present: (h) => exists(hermesConfigPath(h))
-      },
-      {
-        // Plugin-shim agents — protected by a node9-authored plugin/extension file
-        // (no hooks, no MCP). hookFormat is unused for these (shimFile drives it).
-        id: "opencode",
-        label: "OpenCode",
-        setupCommand: "node9 agents add opencode",
-        hookFormat: "flat",
-        hookEvents: [],
-        shimFile: (h) => import_path28.default.join(h, ".config", "opencode", "plugins", "node9.js"),
-        present: (h) => exists(import_path28.default.join(h, ".config", "opencode")) || exists(import_path28.default.join(h, ".config", "opencode", "plugins", "node9.js"))
-      },
-      {
-        id: "pi",
-        label: "Pi",
-        setupCommand: "node9 agents add pi",
-        hookFormat: "flat",
-        hookEvents: [],
-        shimFile: (h) => import_path28.default.join(h, ".pi", "agent", "extensions", "node9.js"),
-        present: (h) => exists(import_path28.default.join(h, ".pi", "agent")) || exists(import_path28.default.join(h, ".pi", "agent", "extensions", "node9.js"))
+            sessionId: data.sessionId
+          });
+        }
+      } catch {
       }
-    ];
+    });
+    socket.on("error", () => {
+    });
+  });
+  unixServer.on("error", (err2) => {
+    logActivitySocket(`server error: ${err2.message}`);
+  });
+  unixServer.listen(ACTIVITY_SOCKET_PATH2, () => {
+    logActivitySocket(`bound to ${ACTIVITY_SOCKET_PATH2}`);
+  });
+  activitySocketServer = unixServer;
+}
+var import_net2, import_fs26, import_path28, import_os24, import_crypto8, homeDir, DAEMON_PID_FILE, DECISIONS_FILE, AUDIT_LOG_FILE, TRUST_FILE2, GLOBAL_CONFIG_FILE, CREDENTIALS_FILE, INSIGHT_COUNTS_FILE, pending, sseClients, suggestionTracker, taintStore, sessionTaintStore, insightCounts, _abandonTimer, _hadBrowserClient, _daemonServer, daemonRejectionHandlerRegistered, AUTO_DENY_MS, TRUST_DURATIONS, autoStarted, ACTIVITY_SOCKET_PATH2, ACTIVITY_RING_SIZE, activityRing, LARGE_RESPONSE_RING_SIZE, largeResponseRing, cachedScanResult, cachedScanTs, SCAN_CACHE_TTL_MS, SECRET_KEY_RE, INPUT_PRICE_PER_1M, OUTPUT_PRICE_PER_1M, BYTES_PER_TOKEN, CRITICAL_FORENSIC_CATEGORIES, WRITE_TOOL_NAMES, ACTIVITY_REBIND_MAX_ATTEMPTS, ACTIVITY_REBIND_WINDOW_MS, ACTIVITY_HEALTH_PROBE_MS, activitySocketServer, activityHealthInterval, activityRebindAttempts, activityCircuitTripped;
+var init_state2 = __esm({
+  "src/daemon/state.ts"() {
+    "use strict";
+    import_net2 = __toESM(require("net"));
+    import_fs26 = __toESM(require("fs"));
+    import_path28 = __toESM(require("path"));
+    import_os24 = __toESM(require("os"));
+    import_crypto8 = require("crypto");
+    init_daemon();
+    init_suggestion_tracker();
+    init_taint_store();
+    init_session_counters();
+    init_session_history();
+    homeDir = import_os24.default.homedir();
+    DAEMON_PID_FILE = import_path28.default.join(homeDir, ".node9", "daemon.pid");
+    DECISIONS_FILE = import_path28.default.join(homeDir, ".node9", "decisions.json");
+    AUDIT_LOG_FILE = import_path28.default.join(homeDir, ".node9", "audit.log");
+    TRUST_FILE2 = import_path28.default.join(homeDir, ".node9", "trust.json");
+    GLOBAL_CONFIG_FILE = import_path28.default.join(homeDir, ".node9", "config.json");
+    CREDENTIALS_FILE = import_path28.default.join(homeDir, ".node9", "credentials.json");
+    INSIGHT_COUNTS_FILE = import_path28.default.join(homeDir, ".node9", "insight-counts.json");
+    pending = /* @__PURE__ */ new Map();
+    sseClients = /* @__PURE__ */ new Set();
+    suggestionTracker = new SuggestionTracker(3);
+    taintStore = new TaintStore();
+    sessionTaintStore = new SessionTaintStore();
+    insightCounts = /* @__PURE__ */ new Map();
+    _abandonTimer = null;
+    _hadBrowserClient = false;
+    _daemonServer = null;
+    daemonRejectionHandlerRegistered = false;
+    AUTO_DENY_MS = 12e4;
+    TRUST_DURATIONS = {
+      "30m": 30 * 6e4,
+      "1h": 60 * 6e4,
+      "2h": 2 * 60 * 6e4
+    };
+    autoStarted = process.env.NODE9_AUTO_STARTED === "1";
+    ACTIVITY_SOCKET_PATH2 = process.platform === "win32" ? "\\\\.\\pipe\\node9-activity" : import_path28.default.join(import_os24.default.tmpdir(), "node9-activity.sock");
+    ACTIVITY_RING_SIZE = 100;
+    activityRing = [];
+    LARGE_RESPONSE_RING_SIZE = 20;
+    largeResponseRing = [];
+    cachedScanResult = null;
+    cachedScanTs = 0;
+    SCAN_CACHE_TTL_MS = 5 * 60 * 1e3;
+    SECRET_KEY_RE = /password|secret|token|key|apikey|credential|auth/i;
+    INPUT_PRICE_PER_1M = 3;
+    OUTPUT_PRICE_PER_1M = 15;
+    BYTES_PER_TOKEN = 4;
+    CRITICAL_FORENSIC_CATEGORIES = /* @__PURE__ */ new Set([
+      "privilege-escalation",
+      "destructive-op",
+      "eval-of-remote"
+    ]);
+    WRITE_TOOL_NAMES = /* @__PURE__ */ new Set([
+      "write",
+      "write_file",
+      "create_file",
+      "edit",
+      "multiedit",
+      "str_replace_based_edit_tool",
+      "replace",
+      "notebook_edit",
+      "notebookedit"
+    ]);
+    ACTIVITY_REBIND_MAX_ATTEMPTS = 5;
+    ACTIVITY_REBIND_WINDOW_MS = 6e4;
+    ACTIVITY_HEALTH_PROBE_MS = 2e3;
+    activitySocketServer = null;
+    activityHealthInterval = null;
+    activityRebindAttempts = [];
+    activityCircuitTripped = false;
   }
 });
 
@@ -16643,6 +16658,93 @@ var init_ship = __esm({
   }
 });
 
+// src/policy-snapshot/build.ts
+function buildPolicySnapshot(config, activeShields, overrides) {
+  const p = config.policy;
+  return {
+    mode: config.settings.mode,
+    panicMode: config.settings.panicMode === true,
+    // The proxy expresses shadow/observe as mode === 'observe' (cloud shadowMode
+    // forces it); there's no separate settings flag.
+    shadowMode: config.settings.mode === "observe",
+    activeShields,
+    shieldOverrides: overrides,
+    smartRuleCount: p.smartRules.length,
+    smartRules: p.smartRules.slice(0, MAX_RULES).map((r) => ({
+      name: r.name,
+      tool: r.tool,
+      verdict: r.verdict,
+      reason: r.reason
+    })),
+    egress: {
+      enabled: p.egress.enabled,
+      mode: p.egress.mode,
+      allow: p.egress.allow.slice(0, MAX_EGRESS)
+    },
+    dlpEnabled: p.dlp.enabled,
+    engineVersion: ENGINE_VERSION
+  };
+}
+var MAX_RULES, MAX_EGRESS;
+var init_build = __esm({
+  "src/policy-snapshot/build.ts"() {
+    "use strict";
+    init_dist();
+    MAX_RULES = 500;
+    MAX_EGRESS = 200;
+  }
+});
+
+// src/policy-snapshot/ship.ts
+function policySnapshotUrlFrom(apiUrl) {
+  return apiUrl.endsWith("/policies/sync") ? apiUrl.replace(/\/policies\/sync$/, "/policy/snapshot") : null;
+}
+async function shipPolicySnapshot(body, creds) {
+  const url = policySnapshotUrlFrom(creds.apiUrl);
+  if (!url) return false;
+  const payload = JSON.stringify(body);
+  const parsed = new import_url2.URL(url);
+  const transport = parsed.protocol === "http:" ? import_http2.default : import_https3.default;
+  return new Promise((resolve) => {
+    const req = transport.request(
+      {
+        hostname: parsed.hostname,
+        port: parsed.port ? parseInt(parsed.port, 10) : void 0,
+        path: parsed.pathname + parsed.search,
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "Content-Length": Buffer.byteLength(payload),
+          Authorization: `Bearer ${creds.apiKey}`
+        },
+        timeout: 1e4
+      },
+      (res) => {
+        const ok2 = !!res.statusCode && res.statusCode >= 200 && res.statusCode < 300;
+        res.resume();
+        res.on("end", () => resolve(ok2));
+        res.on("error", () => resolve(false));
+      }
+    );
+    req.on("error", () => resolve(false));
+    req.on("timeout", () => {
+      req.destroy();
+      resolve(false);
+    });
+    req.write(payload);
+    req.end();
+  });
+}
+var import_http2, import_https3, import_url2;
+var init_ship2 = __esm({
+  "src/policy-snapshot/ship.ts"() {
+    "use strict";
+    import_http2 = __toESM(require("http"));
+    import_https3 = __toESM(require("https"));
+    import_url2 = require("url");
+  }
+});
+
 // src/daemon/sync.ts
 function emptySignals3() {
   return {
@@ -16724,7 +16826,7 @@ function fetchCloudPolicy(apiKey, apiUrl, ifNoneMatch) {
   };
   if (ifNoneMatch) headers["If-None-Match"] = `"${ifNoneMatch}"`;
   return new Promise((resolve, reject) => {
-    const req = import_https3.default.request(
+    const req = import_https4.default.request(
       {
         hostname: parsed.hostname,
         port: parsed.port ? parseInt(parsed.port, 10) : void 0,
@@ -16804,6 +16906,9 @@ async function syncOnce() {
   if (process.env.NODE9_POSTURE_DISABLE !== "1") {
     void pushPostureSnapshot(creds);
   }
+  if (process.env.NODE9_POLICY_MIRROR_DISABLE !== "1") {
+    void pushPolicySnapshot(creds);
+  }
 }
 async function pushBlastSnapshot(creds) {
   try {
@@ -16813,7 +16918,7 @@ async function pushBlastSnapshot(creds) {
     if (!blastUrl) return;
     const parsed = new URL(blastUrl);
     await new Promise((resolve) => {
-      const req = import_https3.default.request(
+      const req = import_https4.default.request(
         {
           hostname: parsed.hostname,
           port: parsed.port ? parseInt(parsed.port, 10) : void 0,
@@ -16850,6 +16955,29 @@ async function pushPostureSnapshot(creds) {
   } catch {
   }
 }
+async function pushPolicySnapshot(creds) {
+  try {
+    const body = buildPolicySnapshot(getConfig(), readActiveShields(), readShieldOverrides());
+    await shipPolicySnapshot(body, creds);
+  } catch {
+  }
+}
+async function runPolicyPush() {
+  const creds = readCredentials();
+  if (!creds) {
+    return {
+      ok: false,
+      reason: "No API key configured. Add credentials with: node9 login"
+    };
+  }
+  try {
+    const body = buildPolicySnapshot(getConfig(), readActiveShields(), readShieldOverrides());
+    const sent = await shipPolicySnapshot(body, creds);
+    return sent ? { ok: true } : { ok: false, reason: "Push failed (network or server error)" };
+  } catch (e) {
+    return { ok: false, reason: e instanceof Error ? e.message : String(e) };
+  }
+}
 async function pushScanSnapshot(creds) {
   try {
     const tick = await tickScanWatcher();
@@ -16867,7 +16995,7 @@ async function pushScanSnapshot(creds) {
     const parsed = new URL(scanUrl);
     let posted = false;
     await new Promise((resolve) => {
-      const req = import_https3.default.request(
+      const req = import_https4.default.request(
         {
           hostname: parsed.hostname,
           port: parsed.port ? parseInt(parsed.port, 10) : void 0,
@@ -16917,6 +17045,9 @@ async function runCloudSync() {
     if (process.env.NODE9_POSTURE_DISABLE !== "1") {
       void pushPostureSnapshot(creds);
     }
+    if (process.env.NODE9_POLICY_MIRROR_DISABLE !== "1") {
+      void pushPolicySnapshot(creds);
+    }
   };
   try {
     const result = await fetchCloudPolicy(creds.apiKey, creds.apiUrl, readCachedEtag());
@@ -16995,18 +17126,21 @@ function startForensicBroadcast() {
   const recurring = setInterval(() => void tick(), FORENSIC_BROADCAST_INTERVAL_MS);
   recurring.unref();
 }
-var import_fs32, import_https3, import_os29, import_path31, FINDING_TO_SIGNAL3, rulesCacheFile, DEFAULT_API_URL, DEFAULT_INTERVAL_HOURS, MIN_INTERVAL_HOURS, FORENSIC_BROADCAST_INTERVAL_MS, FORENSIC_INITIAL_DELAY_MS, forensicBroadcastOffsets;
+var import_fs32, import_https4, import_os29, import_path31, FINDING_TO_SIGNAL3, rulesCacheFile, DEFAULT_API_URL, DEFAULT_INTERVAL_HOURS, MIN_INTERVAL_HOURS, FORENSIC_BROADCAST_INTERVAL_MS, FORENSIC_INITIAL_DELAY_MS, forensicBroadcastOffsets;
 var init_sync = __esm({
   "src/daemon/sync.ts"() {
     "use strict";
     import_fs32 = __toESM(require("fs"));
-    import_https3 = __toESM(require("https"));
+    import_https4 = __toESM(require("https"));
     import_os29 = __toESM(require("os"));
     import_path31 = __toESM(require("path"));
     init_config();
     init_blast();
     init_posture();
     init_ship();
+    init_build();
+    init_ship2();
+    init_shields();
     init_dist();
     init_scan_watermark();
     init_state2();
@@ -17509,7 +17643,7 @@ function startDaemon() {
   }
   resetIdleTimer();
   const allowedHosts = /* @__PURE__ */ new Set([`127.0.0.1:${DAEMON_PORT}`, `localhost:${DAEMON_PORT}`]);
-  const server = import_http2.default.createServer(async (req, res) => {
+  const server = import_http3.default.createServer(async (req, res) => {
     const host = req.headers.host ?? "";
     if (!allowedHosts.has(host)) {
       res.writeHead(421, { "Content-Type": "text/plain" });
@@ -18411,11 +18545,11 @@ data: ${JSON.stringify(item.data)}
   }
   startActivitySocket();
 }
-var import_http2, import_fs36, import_path35, import_os33, import_crypto10, import_child_process2, import_chalk6;
+var import_http3, import_fs36, import_path35, import_os33, import_crypto10, import_child_process2, import_chalk6;
 var init_server = __esm({
   "src/daemon/server.ts"() {
     "use strict";
-    import_http2 = __toESM(require("http"));
+    import_http3 = __toESM(require("http"));
     import_fs36 = __toESM(require("fs"));
     import_path35 = __toESM(require("path"));
     import_os33 = __toESM(require("os"));
@@ -18772,18 +18906,18 @@ function getModelContextLimit(model) {
   return 2e5;
 }
 function readSessionUsage() {
-  const projectsDir = import_path61.default.join(import_os54.default.homedir(), ".claude", "projects");
+  const projectsDir = import_path62.default.join(import_os55.default.homedir(), ".claude", "projects");
   if (!import_fs64.default.existsSync(projectsDir)) return null;
   let latestFile = null;
   let latestMtime = 0;
   try {
     for (const dir of import_fs64.default.readdirSync(projectsDir)) {
-      const dirPath = import_path61.default.join(projectsDir, dir);
+      const dirPath = import_path62.default.join(projectsDir, dir);
       try {
         if (!import_fs64.default.statSync(dirPath).isDirectory()) continue;
         for (const file of import_fs64.default.readdirSync(dirPath)) {
           if (!file.endsWith(".jsonl") || file.startsWith("agent-")) continue;
-          const filePath = import_path61.default.join(dirPath, file);
+          const filePath = import_path62.default.join(dirPath, file);
           try {
             const mtime = import_fs64.default.statSync(filePath).mtimeMs;
             if (mtime > latestMtime) {
@@ -18861,7 +18995,7 @@ function formatBase(activity) {
   const time = new Date(activity.ts).toLocaleTimeString([], { hour12: false });
   const icon = getIcon(activity.tool);
   const toolName = activity.tool.slice(0, 16).padEnd(16);
-  const argsStr = JSON.stringify(activity.args ?? {}).replace(/\s+/g, " ").replaceAll(import_os54.default.homedir(), "~");
+  const argsStr = JSON.stringify(activity.args ?? {}).replace(/\s+/g, " ").replaceAll(import_os55.default.homedir(), "~");
   const argsPreview = argsStr.length > 70 ? argsStr.slice(0, 70) + "\u2026" : argsStr;
   return `${import_chalk35.default.gray(time)} ${icon} ${agentLabel(activity.agent, activity.mcpServer, activity.sessionId)}${import_chalk35.default.white.bold(toolName)} ${import_chalk35.default.dim(argsPreview)}`;
 }
@@ -18943,7 +19077,7 @@ function postDecisionHttp(id, decision, authToken, port, opts) {
     if (opts?.trustDuration) bodyObj.trustDuration = opts.trustDuration;
     if (opts?.reason) bodyObj.reason = opts.reason;
     const body = JSON.stringify(bodyObj);
-    const req = import_http3.default.request(
+    const req = import_http4.default.request(
       {
         hostname: "127.0.0.1",
         port,
@@ -19058,7 +19192,7 @@ function buildRecoveryCardLines(req) {
   ];
 }
 function readApproversFromDisk() {
-  const configPath = import_path61.default.join(import_os54.default.homedir(), ".node9", "config.json");
+  const configPath = import_path62.default.join(import_os55.default.homedir(), ".node9", "config.json");
   try {
     const raw = JSON.parse(import_fs64.default.readFileSync(configPath, "utf-8"));
     const settings = raw.settings ?? {};
@@ -19076,7 +19210,7 @@ function approverStatusLine() {
   return `${fmt("native", "native")}  ${fmt("cloud", "cloud")}  ${fmt("terminal", "terminal")}`;
 }
 function toggleApprover(channel) {
-  const configPath = import_path61.default.join(import_os54.default.homedir(), ".node9", "config.json");
+  const configPath = import_path62.default.join(import_os55.default.homedir(), ".node9", "config.json");
   try {
     const raw = JSON.parse(import_fs64.default.readFileSync(configPath, "utf-8"));
     const settings = raw.settings ?? {};
@@ -19094,7 +19228,7 @@ async function startTail(options = {}) {
   const port = await ensureDaemon();
   if (options.clear) {
     const result = await new Promise((resolve) => {
-      const req2 = import_http3.default.request(
+      const req2 = import_http4.default.request(
         { method: "POST", hostname: "127.0.0.1", port, path: "/events/clear" },
         (res) => {
           const status = res.statusCode ?? 0;
@@ -19257,7 +19391,7 @@ async function startTail(options = {}) {
       postDecisionHttp(req2.id, httpDecision, authToken, port, httpOpts).catch((err2) => {
         try {
           import_fs64.default.appendFileSync(
-            import_path61.default.join(import_os54.default.homedir(), ".node9", "hook-debug.log"),
+            import_path62.default.join(import_os55.default.homedir(), ".node9", "hook-debug.log"),
             `[tail] POST /decision failed: ${String(err2)}
 `
           );
@@ -19321,7 +19455,7 @@ async function startTail(options = {}) {
     };
     process.stdin.on("keypress", onKeypress);
   }
-  const auditLog = import_path61.default.join(import_os54.default.homedir(), ".node9", "audit.log");
+  const auditLog = import_path62.default.join(import_os55.default.homedir(), ".node9", "audit.log");
   try {
     const unackedDlp = import_fs64.default.readFileSync(auditLog, "utf-8").split("\n").filter((l) => l.includes('"response-dlp"')).length;
     if (unackedDlp > 0) {
@@ -19377,7 +19511,7 @@ async function startTail(options = {}) {
   }, STALL_THRESHOLD_MS / 2);
   stallWatchdog.unref();
   const sseUrl = `http://127.0.0.1:${port}/events?capabilities=input`;
-  const req = import_http3.default.get(
+  const req = import_http4.default.get(
     sseUrl,
     {
       headers: authToken ? { "X-Node9-Internal": authToken } : {}
@@ -19548,20 +19682,20 @@ async function startTail(options = {}) {
     process.exit(1);
   });
 }
-var import_http3, import_chalk35, import_fs64, import_os54, import_path61, import_readline6, import_child_process14, PID_FILE, ICONS, MODEL_CONTEXT_LIMITS, RESET2, BOLD2, RED, YELLOW, CYAN, GRAY, GREEN, HIDE_CURSOR, SHOW_CURSOR, ERASE_DOWN, pendingShownForId, pendingWrappedLines, DIVIDER;
+var import_http4, import_chalk35, import_fs64, import_os55, import_path62, import_readline6, import_child_process14, PID_FILE, ICONS, MODEL_CONTEXT_LIMITS, RESET2, BOLD2, RED, YELLOW, CYAN, GRAY, GREEN, HIDE_CURSOR, SHOW_CURSOR, ERASE_DOWN, pendingShownForId, pendingWrappedLines, DIVIDER;
 var init_tail = __esm({
   "src/tui/tail.ts"() {
     "use strict";
-    import_http3 = __toESM(require("http"));
+    import_http4 = __toESM(require("http"));
     import_chalk35 = __toESM(require("chalk"));
     import_fs64 = __toESM(require("fs"));
-    import_os54 = __toESM(require("os"));
-    import_path61 = __toESM(require("path"));
+    import_os55 = __toESM(require("os"));
+    import_path62 = __toESM(require("path"));
     import_readline6 = __toESM(require("readline"));
     import_child_process14 = require("child_process");
     init_daemon2();
     init_daemon();
-    PID_FILE = import_path61.default.join(import_os54.default.homedir(), ".node9", "daemon.pid");
+    PID_FILE = import_path62.default.join(import_os55.default.homedir(), ".node9", "daemon.pid");
     ICONS = {
       bash: "\u{1F4BB}",
       shell: "\u{1F4BB}",
@@ -19626,7 +19760,7 @@ function queryDaemon() {
   return new Promise((resolve) => {
     const timeout = setTimeout(() => resolve(null), 50);
     try {
-      const req = import_http4.default.get(
+      const req = import_http5.default.get(
         `http://${DAEMON_HOST}:${DAEMON_PORT}/status`,
         { timeout: 50 },
         (res) => {
@@ -19711,7 +19845,7 @@ function countRulesInDir(rulesDir) {
   try {
     for (const entry of import_fs65.default.readdirSync(rulesDir, { withFileTypes: true })) {
       if (entry.isDirectory()) {
-        count += countRulesInDir(import_path62.default.join(rulesDir, entry.name));
+        count += countRulesInDir(import_path63.default.join(rulesDir, entry.name));
       } else if (entry.isFile() && entry.name.endsWith(".md")) {
         count++;
       }
@@ -19722,46 +19856,46 @@ function countRulesInDir(rulesDir) {
 }
 function isSamePath(a, b) {
   try {
-    return import_path62.default.resolve(a) === import_path62.default.resolve(b);
+    return import_path63.default.resolve(a) === import_path63.default.resolve(b);
   } catch {
     return false;
   }
 }
 function countConfigs(cwd) {
-  const homeDir2 = import_os55.default.homedir();
-  const claudeDir = import_path62.default.join(homeDir2, ".claude");
+  const homeDir2 = import_os56.default.homedir();
+  const claudeDir = import_path63.default.join(homeDir2, ".claude");
   let claudeMdCount = 0;
   let rulesCount = 0;
   let hooksCount = 0;
   const userMcpServers = /* @__PURE__ */ new Set();
   const projectMcpServers = /* @__PURE__ */ new Set();
-  if (import_fs65.default.existsSync(import_path62.default.join(claudeDir, "CLAUDE.md"))) claudeMdCount++;
-  rulesCount += countRulesInDir(import_path62.default.join(claudeDir, "rules"));
-  const userSettings = import_path62.default.join(claudeDir, "settings.json");
+  if (import_fs65.default.existsSync(import_path63.default.join(claudeDir, "CLAUDE.md"))) claudeMdCount++;
+  rulesCount += countRulesInDir(import_path63.default.join(claudeDir, "rules"));
+  const userSettings = import_path63.default.join(claudeDir, "settings.json");
   for (const name of getMcpServerNames(userSettings)) userMcpServers.add(name);
   hooksCount += countHooksInFile(userSettings);
-  const userClaudeJson = import_path62.default.join(homeDir2, ".claude.json");
+  const userClaudeJson = import_path63.default.join(homeDir2, ".claude.json");
   for (const name of getMcpServerNames(userClaudeJson)) userMcpServers.add(name);
   for (const name of getDisabledMcpServers(userClaudeJson, "disabledMcpServers")) {
     userMcpServers.delete(name);
   }
   if (cwd) {
-    if (import_fs65.default.existsSync(import_path62.default.join(cwd, "CLAUDE.md"))) claudeMdCount++;
-    if (import_fs65.default.existsSync(import_path62.default.join(cwd, "CLAUDE.local.md"))) claudeMdCount++;
-    const projectClaudeDir = import_path62.default.join(cwd, ".claude");
+    if (import_fs65.default.existsSync(import_path63.default.join(cwd, "CLAUDE.md"))) claudeMdCount++;
+    if (import_fs65.default.existsSync(import_path63.default.join(cwd, "CLAUDE.local.md"))) claudeMdCount++;
+    const projectClaudeDir = import_path63.default.join(cwd, ".claude");
     const overlapsUserScope = isSamePath(projectClaudeDir, claudeDir);
     if (!overlapsUserScope) {
-      if (import_fs65.default.existsSync(import_path62.default.join(projectClaudeDir, "CLAUDE.md"))) claudeMdCount++;
-      rulesCount += countRulesInDir(import_path62.default.join(projectClaudeDir, "rules"));
-      const projSettings = import_path62.default.join(projectClaudeDir, "settings.json");
+      if (import_fs65.default.existsSync(import_path63.default.join(projectClaudeDir, "CLAUDE.md"))) claudeMdCount++;
+      rulesCount += countRulesInDir(import_path63.default.join(projectClaudeDir, "rules"));
+      const projSettings = import_path63.default.join(projectClaudeDir, "settings.json");
       for (const name of getMcpServerNames(projSettings)) projectMcpServers.add(name);
       hooksCount += countHooksInFile(projSettings);
     }
-    if (import_fs65.default.existsSync(import_path62.default.join(projectClaudeDir, "CLAUDE.local.md"))) claudeMdCount++;
-    const localSettings = import_path62.default.join(projectClaudeDir, "settings.local.json");
+    if (import_fs65.default.existsSync(import_path63.default.join(projectClaudeDir, "CLAUDE.local.md"))) claudeMdCount++;
+    const localSettings = import_path63.default.join(projectClaudeDir, "settings.local.json");
     for (const name of getMcpServerNames(localSettings)) projectMcpServers.add(name);
     hooksCount += countHooksInFile(localSettings);
-    const mcpJsonServers = getMcpServerNames(import_path62.default.join(cwd, ".mcp.json"));
+    const mcpJsonServers = getMcpServerNames(import_path63.default.join(cwd, ".mcp.json"));
     const disabledMcpJson = getDisabledMcpServers(localSettings, "disabledMcpjsonServers");
     for (const name of disabledMcpJson) mcpJsonServers.delete(name);
     for (const name of mcpJsonServers) projectMcpServers.add(name);
@@ -19794,7 +19928,7 @@ function readActiveShieldsHud() {
     return shieldsCache.value;
   }
   try {
-    const shieldsPath = import_path62.default.join(import_os55.default.homedir(), ".node9", "shields.json");
+    const shieldsPath = import_path63.default.join(import_os56.default.homedir(), ".node9", "shields.json");
     if (!import_fs65.default.existsSync(shieldsPath)) {
       shieldsCache = { value: [], ts: now };
       return [];
@@ -19901,9 +20035,9 @@ function renderContextLine(stdin) {
 async function main() {
   try {
     const [stdin, daemonStatus2] = await Promise.all([readStdin(), queryDaemon()]);
-    if (import_fs65.default.existsSync(import_path62.default.join(import_os55.default.homedir(), ".node9", "hud-debug"))) {
+    if (import_fs65.default.existsSync(import_path63.default.join(import_os56.default.homedir(), ".node9", "hud-debug"))) {
       try {
-        const logPath = import_path62.default.join(import_os55.default.homedir(), ".node9", "hud-debug.log");
+        const logPath = import_path63.default.join(import_os56.default.homedir(), ".node9", "hud-debug.log");
         const MAX_LOG_SIZE = 10 * 1024 * 1024;
         let size = 0;
         try {
@@ -19932,8 +20066,8 @@ async function main() {
       try {
         const cwd = stdin.cwd ?? process.cwd();
         for (const configPath of [
-          import_path62.default.join(cwd, "node9.config.json"),
-          import_path62.default.join(import_os55.default.homedir(), ".node9", "config.json")
+          import_path63.default.join(cwd, "node9.config.json"),
+          import_path63.default.join(import_os56.default.homedir(), ".node9", "config.json")
         ]) {
           if (!import_fs65.default.existsSync(configPath)) continue;
           const cfg = JSON.parse(import_fs65.default.readFileSync(configPath, "utf-8"));
@@ -19954,14 +20088,14 @@ async function main() {
     renderOffline();
   }
 }
-var import_fs65, import_path62, import_os55, import_http4, RESET3, BOLD3, DIM, RED2, GREEN2, YELLOW2, BLUE, MAGENTA, CYAN2, WHITE, BAR_FILLED, BAR_EMPTY, BAR_WIDTH, shieldsCache, SHIELDS_CACHE_TTL_MS;
+var import_fs65, import_path63, import_os56, import_http5, RESET3, BOLD3, DIM, RED2, GREEN2, YELLOW2, BLUE, MAGENTA, CYAN2, WHITE, BAR_FILLED, BAR_EMPTY, BAR_WIDTH, shieldsCache, SHIELDS_CACHE_TTL_MS;
 var init_hud = __esm({
   "src/cli/hud.ts"() {
     "use strict";
     import_fs65 = __toESM(require("fs"));
-    import_path62 = __toESM(require("path"));
-    import_os55 = __toESM(require("os"));
-    import_http4 = __toESM(require("http"));
+    import_path63 = __toESM(require("path"));
+    import_os56 = __toESM(require("os"));
+    import_http5 = __toESM(require("http"));
     init_daemon();
     RESET3 = "\x1B[0m";
     BOLD3 = "\x1B[1m";
@@ -19985,11 +20119,44 @@ var init_hud = __esm({
 var import_commander = require("commander");
 init_core();
 init_setup();
+
+// src/agent-teardowns.ts
+init_setup();
+var AGENT_TEARDOWNS = [
+  { id: "claude", label: "Claude", fn: teardownClaude },
+  { id: "gemini", label: "Gemini", fn: teardownGemini },
+  { id: "codex", label: "Codex", fn: teardownCodex },
+  { id: "cursor", label: "Cursor", fn: teardownCursor },
+  { id: "windsurf", label: "Windsurf", fn: teardownWindsurf },
+  { id: "vscode", label: "VSCode", fn: teardownVSCode },
+  { id: "hermes", label: "Hermes", fn: teardownHermes },
+  { id: "antigravity", label: "Antigravity", fn: teardownAntigravity, aliases: ["agy"] },
+  { id: "copilot", label: "Copilot", fn: teardownCopilot },
+  { id: "hud", label: "HUD", fn: teardownHud },
+  {
+    id: "claudedesktop",
+    label: "Claude Desktop",
+    fn: teardownClaudeDesktop,
+    aliases: ["claude-desktop"]
+  },
+  { id: "opencode", label: "OpenCode", fn: teardownOpencode },
+  { id: "pi", label: "Pi", fn: teardownPi }
+];
+function resolveAgentTeardown(target) {
+  const t = target.trim().toLowerCase();
+  return AGENT_TEARDOWNS.find((a) => a.id === t || a.aliases?.includes(t));
+}
+function agentTeardownTargets() {
+  return AGENT_TEARDOWNS.flatMap((a) => [a.id, ...a.aliases ?? []]);
+}
+
+// src/cli.ts
+init_agent_wiring();
 init_daemon2();
 var import_chalk36 = __toESM(require("chalk"));
 var import_fs66 = __toESM(require("fs"));
-var import_path63 = __toESM(require("path"));
-var import_os56 = __toESM(require("os"));
+var import_path64 = __toESM(require("path"));
+var import_os57 = __toESM(require("os"));
 var import_child_process15 = require("child_process");
 var import_prompts2 = require("@inquirer/prompts");
 
@@ -21619,6 +21786,8 @@ function registerLogCommand(program2) {
 // src/cli/commands/shield.ts
 var import_chalk10 = __toESM(require("chalk"));
 var import_fs46 = __toESM(require("fs"));
+var import_path44 = __toESM(require("path"));
+var import_os40 = __toESM(require("os"));
 init_shields();
 
 // src/shields/build.ts
@@ -21749,10 +21918,10 @@ init_audit();
 init_config();
 
 // src/utils/https-fetch.ts
-var import_https4 = __toESM(require("https"));
+var import_https5 = __toESM(require("https"));
 function httpsFetch(url) {
   return new Promise((resolve, reject) => {
-    import_https4.default.get(url, (res) => {
+    import_https5.default.get(url, (res) => {
       if (res.statusCode !== 200) {
         reject(new Error(`HTTP ${String(res.statusCode)} for ${url}`));
         res.resume();
@@ -21768,6 +21937,22 @@ function httpsFetch(url) {
 
 // src/cli/commands/shield.ts
 var COMMUNITY_INDEX_URL = "https://raw.githubusercontent.com/node9ai/node9-proxy/main/shields/community/index.json";
+function readCloudShields() {
+  const out = /* @__PURE__ */ new Set();
+  try {
+    const file = import_path44.default.join(import_os40.default.homedir(), ".node9", "rules-cache.json");
+    const raw = JSON.parse(import_fs46.default.readFileSync(file, "utf-8"));
+    for (const r of raw.rules ?? []) {
+      const rule = r;
+      const fromSource = rule.source?.startsWith("SHIELD:") ? rule.source.slice("SHIELD:".length).toLowerCase() : void 0;
+      const fromDesc = !fromSource && rule.description ? /\b([a-z0-9-]+)\s+shield/i.exec(rule.description)?.[1]?.toLowerCase() : void 0;
+      const name = fromSource ?? fromDesc;
+      if (name) out.add(name);
+    }
+  } catch {
+  }
+  return out;
+}
 function registerShieldCommand(program2) {
   const shieldCmd = program2.command("shield").description("Manage pre-packaged security shield templates");
   shieldCmd.command("enable <service>").description("Enable a security shield for a specific service").action((service) => {
@@ -21854,10 +22039,17 @@ function registerShieldCommand(program2) {
       return;
     }
     const active = new Set(readActiveShields());
+    const cloud = readCloudShields();
     console.log(import_chalk10.default.bold("\n\u{1F6E1}\uFE0F  Available Shields\n"));
+    console.log(import_chalk10.default.gray("  \u25CF local \xB7 \u2601 cloud\n"));
     for (const shield of listShields()) {
-      const status = active.has(shield.name) ? import_chalk10.default.green("\u25CF enabled") : import_chalk10.default.gray("\u25CB disabled");
-      console.log(`  ${status}  ${import_chalk10.default.cyan(shield.name.padEnd(12))} ${shield.description}`);
+      const isLocal = active.has(shield.name);
+      const isCloud = cloud.has(shield.name);
+      const status = isLocal && isCloud ? import_chalk10.default.green("\u25CF\u2601 enabled ") : isLocal ? import_chalk10.default.green("\u25CF  enabled ") : isCloud ? import_chalk10.default.cyan("\u2601  cloud   ") : import_chalk10.default.gray("\u25CB  disabled");
+      const via = isCloud && !isLocal ? import_chalk10.default.gray(" (via dashboard)") : "";
+      console.log(
+        `  ${status} ${import_chalk10.default.cyan(shield.name.padEnd(12))} ${shield.description}${via}`
+      );
       if (shield.aliases.length > 0)
         console.log(import_chalk10.default.gray(`              aliases: ${shield.aliases.join(", ")}`));
     }
@@ -22187,15 +22379,15 @@ function registerConfigShowCommand(program2) {
 // src/cli/commands/doctor.ts
 var import_chalk11 = __toESM(require("chalk"));
 var import_fs47 = __toESM(require("fs"));
-var import_path44 = __toESM(require("path"));
-var import_os40 = __toESM(require("os"));
+var import_path45 = __toESM(require("path"));
+var import_os41 = __toESM(require("os"));
 var import_child_process8 = require("child_process");
 init_daemon();
 init_config();
 init_agent_wiring();
 function registerDoctorCommand(program2, version2) {
   program2.command("doctor").description("Check that Node9 is installed and configured correctly").action(async () => {
-    const homeDir2 = import_os40.default.homedir();
+    const homeDir2 = import_os41.default.homedir();
     let failures = 0;
     function pass(msg) {
       console.log(import_chalk11.default.green("  \u2705 ") + msg);
@@ -22241,7 +22433,7 @@ function registerDoctorCommand(program2, version2) {
       );
     }
     section("Configuration");
-    const globalConfigPath = import_path44.default.join(homeDir2, ".node9", "config.json");
+    const globalConfigPath = import_path45.default.join(homeDir2, ".node9", "config.json");
     if (import_fs47.default.existsSync(globalConfigPath)) {
       try {
         JSON.parse(import_fs47.default.readFileSync(globalConfigPath, "utf-8"));
@@ -22252,7 +22444,7 @@ function registerDoctorCommand(program2, version2) {
     } else {
       warn("~/.node9/config.json not found (using defaults)", "Run: node9 init");
     }
-    const projectConfigPath = import_path44.default.join(process.cwd(), "node9.config.json");
+    const projectConfigPath = import_path45.default.join(process.cwd(), "node9.config.json");
     if (import_fs47.default.existsSync(projectConfigPath)) {
       try {
         JSON.parse(import_fs47.default.readFileSync(projectConfigPath, "utf-8"));
@@ -22264,7 +22456,7 @@ function registerDoctorCommand(program2, version2) {
         );
       }
     }
-    const credsPath = import_path44.default.join(homeDir2, ".node9", "credentials.json");
+    const credsPath = import_path45.default.join(homeDir2, ".node9", "credentials.json");
     if (import_fs47.default.existsSync(credsPath)) {
       pass("Cloud credentials found (~/.node9/credentials.json)");
     } else {
@@ -22309,7 +22501,7 @@ function registerDoctorCommand(program2, version2) {
     try {
       const { shipLagBytes: shipLagBytes2, readWatermark: readWatermark2, AUDIT_SHIP_WATERMARK: AUDIT_SHIP_WATERMARK2 } = await Promise.resolve().then(() => (init_audit_shipper(), audit_shipper_exports));
       const cfg = getConfig();
-      const creds = import_fs47.default.existsSync(import_path44.default.join(import_os40.default.homedir(), ".node9", "credentials.json"));
+      const creds = import_fs47.default.existsSync(import_path45.default.join(import_os41.default.homedir(), ".node9", "credentials.json"));
       if (!creds) {
         warn("Not logged in \u2014 audit rows stay local", "Run: node9 login <api-key>");
       } else if (!cfg.settings.approvers.cloud) {
@@ -22360,8 +22552,8 @@ function registerDoctorCommand(program2, version2) {
 // src/cli/commands/audit.ts
 var import_chalk12 = __toESM(require("chalk"));
 var import_fs48 = __toESM(require("fs"));
-var import_path45 = __toESM(require("path"));
-var import_os41 = __toESM(require("os"));
+var import_path46 = __toESM(require("path"));
+var import_os42 = __toESM(require("os"));
 function formatRelativeTime(timestamp) {
   const diff = Date.now() - new Date(timestamp).getTime();
   const sec = Math.floor(diff / 1e3);
@@ -22374,7 +22566,7 @@ function formatRelativeTime(timestamp) {
 }
 function registerAuditCommand(program2) {
   program2.command("audit").description("View local execution audit log").option("--tail <n>", "Number of entries to show", "20").option("--tool <pattern>", "Filter by tool name (substring match)").option("--deny", "Show only denied actions").option("--json", "Output raw JSON").action((options) => {
-    const logPath = import_path45.default.join(import_os41.default.homedir(), ".node9", "audit.log");
+    const logPath = import_path46.default.join(import_os42.default.homedir(), ".node9", "audit.log");
     if (!import_fs48.default.existsSync(logPath)) {
       console.log(
         import_chalk12.default.yellow("No audit logs found. Run node9 with an agent to generate entries.")
@@ -22438,8 +22630,8 @@ var import_chalk13 = __toESM(require("chalk"));
 
 // src/cli/aggregate/report-audit.ts
 var import_fs49 = __toESM(require("fs"));
-var import_os42 = __toESM(require("os"));
-var import_path46 = __toESM(require("path"));
+var import_os43 = __toESM(require("os"));
+var import_path47 = __toESM(require("path"));
 init_costSync();
 init_litellm();
 init_cost_codex();
@@ -22570,7 +22762,7 @@ function freezeClaudeCost(acc) {
   };
 }
 function processClaudeCostProject(proj, projectsDir, start, end, acc) {
-  const projPath = import_path46.default.join(projectsDir, proj);
+  const projPath = import_path47.default.join(projectsDir, proj);
   let files;
   try {
     const stat = import_fs49.default.statSync(projPath);
@@ -22581,7 +22773,7 @@ function processClaudeCostProject(proj, projectsDir, start, end, acc) {
   }
   const startMs = start.getTime();
   for (const file of files) {
-    const filePath = import_path46.default.join(projPath, file);
+    const filePath = import_path47.default.join(projPath, file);
     try {
       if (import_fs49.default.statSync(filePath).mtimeMs < startMs) continue;
     } catch {
@@ -22711,28 +22903,28 @@ function listCodexSessionFiles2(sessionsBase) {
   if (!import_fs49.default.existsSync(sessionsBase)) return jsonlFiles;
   try {
     for (const year of import_fs49.default.readdirSync(sessionsBase)) {
-      const yearPath = import_path46.default.join(sessionsBase, year);
+      const yearPath = import_path47.default.join(sessionsBase, year);
       try {
         if (!import_fs49.default.statSync(yearPath).isDirectory()) continue;
       } catch {
         continue;
       }
       for (const month of import_fs49.default.readdirSync(yearPath)) {
-        const monthPath = import_path46.default.join(yearPath, month);
+        const monthPath = import_path47.default.join(yearPath, month);
         try {
           if (!import_fs49.default.statSync(monthPath).isDirectory()) continue;
         } catch {
           continue;
         }
         for (const day of import_fs49.default.readdirSync(monthPath)) {
-          const dayPath = import_path46.default.join(monthPath, day);
+          const dayPath = import_path47.default.join(monthPath, day);
           try {
             if (!import_fs49.default.statSync(dayPath).isDirectory()) continue;
           } catch {
             continue;
           }
           for (const file of import_fs49.default.readdirSync(dayPath)) {
-            if (file.endsWith(".jsonl")) jsonlFiles.push(import_path46.default.join(dayPath, file));
+            if (file.endsWith(".jsonl")) jsonlFiles.push(import_path47.default.join(dayPath, file));
           }
         }
       }
@@ -22858,7 +23050,7 @@ function listGeminiSessionFiles2(geminiTmpDir2) {
     return out;
   }
   for (const proj of dirs) {
-    const chatsDir = import_path46.default.join(geminiTmpDir2, proj, "chats");
+    const chatsDir = import_path47.default.join(geminiTmpDir2, proj, "chats");
     let files;
     try {
       if (!import_fs49.default.statSync(chatsDir).isDirectory()) continue;
@@ -22868,7 +23060,7 @@ function listGeminiSessionFiles2(geminiTmpDir2) {
     }
     for (const f of files) {
       if (!f.endsWith(".jsonl")) continue;
-      out.push({ projectKey: proj, file: import_path46.default.join(chatsDir, f) });
+      out.push({ projectKey: proj, file: import_path47.default.join(chatsDir, f) });
     }
   }
   return out;
@@ -22883,10 +23075,10 @@ function loadGeminiCost(start, end, geminiTmpDir2) {
 }
 function aggregateReportFromAudit(period, opts = {}) {
   const now = opts.now ?? /* @__PURE__ */ new Date();
-  const auditLogPath = opts.auditLogPath ?? import_path46.default.join(import_os42.default.homedir(), ".node9", "audit.log");
-  const claudeProjectsDir = opts.claudeProjectsDir ?? import_path46.default.join(import_os42.default.homedir(), ".claude", "projects");
-  const codexSessionsDir2 = opts.codexSessionsDir ?? import_path46.default.join(import_os42.default.homedir(), ".codex", "sessions");
-  const geminiTmpDir2 = opts.geminiTmpDir ?? import_path46.default.join(import_os42.default.homedir(), ".gemini", "tmp");
+  const auditLogPath = opts.auditLogPath ?? import_path47.default.join(import_os43.default.homedir(), ".node9", "audit.log");
+  const claudeProjectsDir = opts.claudeProjectsDir ?? import_path47.default.join(import_os43.default.homedir(), ".claude", "projects");
+  const codexSessionsDir2 = opts.codexSessionsDir ?? import_path47.default.join(import_os43.default.homedir(), ".codex", "sessions");
+  const geminiTmpDir2 = opts.geminiTmpDir ?? import_path47.default.join(import_os43.default.homedir(), ".gemini", "tmp");
   const hasAuditFile = import_fs49.default.existsSync(auditLogPath);
   const allEntries = opts.preloadedAuditEntries ?? parseAuditLog(auditLogPath);
   const unackedDlp = allEntries.filter((e) => e.source === "response-dlp");
@@ -23584,8 +23776,8 @@ function registerDaemonCommand(program2) {
 // src/cli/commands/status.ts
 var import_chalk15 = __toESM(require("chalk"));
 var import_fs50 = __toESM(require("fs"));
-var import_path47 = __toESM(require("path"));
-var import_os43 = __toESM(require("os"));
+var import_path48 = __toESM(require("path"));
+var import_os44 = __toESM(require("os"));
 init_core();
 init_daemon();
 init_agent_wiring();
@@ -23642,8 +23834,8 @@ function registerStatusCommand(program2) {
     console.log("");
     const modeLabel = settings.mode === "audit" ? import_chalk15.default.blue("audit") : settings.mode === "strict" ? import_chalk15.default.red("strict") : import_chalk15.default.white("standard");
     console.log(`  Mode:    ${modeLabel}`);
-    const projectConfig = import_path47.default.join(process.cwd(), "node9.config.json");
-    const globalConfig = import_path47.default.join(import_os43.default.homedir(), ".node9", "config.json");
+    const projectConfig = import_path48.default.join(process.cwd(), "node9.config.json");
+    const globalConfig = import_path48.default.join(import_os44.default.homedir(), ".node9", "config.json");
     console.log(
       `  Local:   ${import_fs50.default.existsSync(projectConfig) ? import_chalk15.default.green("Active (node9.config.json)") : import_chalk15.default.gray("Not present")}`
     );
@@ -23655,7 +23847,7 @@ function registerStatusCommand(program2) {
         `  Sandbox: ${import_chalk15.default.green(`${mergedConfig.policy.sandboxPaths.length} safe zones active`)}`
       );
     }
-    const wiring = getAgentWiring(import_os43.default.homedir()).filter((a) => a.present);
+    const wiring = getAgentWiring(import_os44.default.homedir()).filter((a) => a.present);
     if (wiring.length > 0) {
       console.log("");
       console.log(import_chalk15.default.bold("  Agent Wiring:"));
@@ -23691,9 +23883,9 @@ function registerStatusCommand(program2) {
 // src/cli/commands/init.ts
 var import_chalk16 = __toESM(require("chalk"));
 var import_fs51 = __toESM(require("fs"));
-var import_path48 = __toESM(require("path"));
-var import_os44 = __toESM(require("os"));
-var import_https5 = __toESM(require("https"));
+var import_path49 = __toESM(require("path"));
+var import_os45 = __toESM(require("os"));
+var import_https6 = __toESM(require("https"));
 init_core();
 init_setup();
 init_shields();
@@ -23711,7 +23903,7 @@ function buildTelemetryPayload(agents, firstInstall) {
 function fireTelemetryPing(agents, firstInstall) {
   try {
     const body = JSON.stringify(buildTelemetryPayload(agents, firstInstall));
-    const req = import_https5.default.request(
+    const req = import_https6.default.request(
       {
         hostname: "api.node9.ai",
         path: "/api/v1/telemetry",
@@ -23782,7 +23974,7 @@ function registerInitCommand(program2) {
         }
         console.log("");
       }
-      const configPath = import_path48.default.join(import_os44.default.homedir(), ".node9", "config.json");
+      const configPath = import_path49.default.join(import_os45.default.homedir(), ".node9", "config.json");
       const isFirstInstall = !import_fs51.default.existsSync(configPath);
       if (import_fs51.default.existsSync(configPath) && !options.force) {
         try {
@@ -23804,7 +23996,7 @@ function registerInitCommand(program2) {
           ...DEFAULT_CONFIG,
           settings: { ...DEFAULT_CONFIG.settings, mode: chosenMode }
         };
-        const dir = import_path48.default.dirname(configPath);
+        const dir = import_path49.default.dirname(configPath);
         if (!import_fs51.default.existsSync(dir)) import_fs51.default.mkdirSync(dir, { recursive: true });
         import_fs51.default.writeFileSync(configPath, JSON.stringify(configToSave, null, 2) + "\n");
         console.log(import_chalk16.default.green(`\u2705 Config created: ${configPath}`));
@@ -23911,7 +24103,7 @@ function registerInitCommand(program2) {
 }
 
 // src/cli/commands/undo.ts
-var import_path49 = __toESM(require("path"));
+var import_path50 = __toESM(require("path"));
 var import_chalk18 = __toESM(require("chalk"));
 
 // src/tui/undo-navigator.ts
@@ -24070,7 +24262,7 @@ function findMatchingCwd(startDir, history) {
   let dir = startDir;
   while (true) {
     if (cwds.has(dir)) return dir;
-    const parent = import_path49.default.dirname(dir);
+    const parent = import_path50.default.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -24706,8 +24898,8 @@ function registerMcpGatewayCommand(program2) {
 // src/mcp-server/index.ts
 var import_readline5 = __toESM(require("readline"));
 var import_fs53 = __toESM(require("fs"));
-var import_os46 = __toESM(require("os"));
-var import_path51 = __toESM(require("path"));
+var import_os47 = __toESM(require("os"));
+var import_path52 = __toESM(require("path"));
 var import_child_process11 = require("child_process");
 init_core();
 init_daemon();
@@ -24715,8 +24907,8 @@ init_shields();
 
 // src/auth/egress-config.ts
 var import_fs52 = __toESM(require("fs"));
-var import_os45 = __toESM(require("os"));
-var import_path50 = __toESM(require("path"));
+var import_os46 = __toESM(require("os"));
+var import_path51 = __toESM(require("path"));
 var DEFAULT_EGRESS = {
   enabled: false,
   mode: "review",
@@ -24725,7 +24917,7 @@ var DEFAULT_EGRESS = {
   allowPrivate: true
 };
 function egressConfigPath() {
-  return import_path50.default.join(import_os45.default.homedir(), ".node9", "config.json");
+  return import_path51.default.join(import_os46.default.homedir(), ".node9", "config.json");
 }
 function readEgressRawConfig() {
   let text;
@@ -24745,7 +24937,7 @@ function readEgressRawConfig() {
 }
 function writeEgressRawConfig(config) {
   const p = egressConfigPath();
-  import_fs52.default.mkdirSync(import_path50.default.dirname(p), { recursive: true });
+  import_fs52.default.mkdirSync(import_path51.default.dirname(p), { recursive: true });
   import_fs52.default.writeFileSync(p, JSON.stringify(config, null, 2) + "\n", { mode: 384 });
 }
 function applyEgress(config, change) {
@@ -25131,8 +25323,8 @@ function handleStatus() {
   lines.push(`Active shields: ${activeShields.length > 0 ? activeShields.join(", ") : "none"}`);
   lines.push(`Smart rules: ${config.policy.smartRules.length} loaded`);
   lines.push(`DLP: ${config.policy.dlp?.enabled !== false ? "enabled" : "disabled"}`);
-  const projectConfig = import_path51.default.join(process.cwd(), "node9.config.json");
-  const globalConfig = import_path51.default.join(import_os46.default.homedir(), ".node9", "config.json");
+  const projectConfig = import_path52.default.join(process.cwd(), "node9.config.json");
+  const globalConfig = import_path52.default.join(import_os47.default.homedir(), ".node9", "config.json");
   lines.push(
     `Project config (node9.config.json): ${import_fs53.default.existsSync(projectConfig) ? "present" : "not found"}`
   );
@@ -25243,7 +25435,7 @@ function handleEgressDeny(args) {
   addEgressHost("deny", host);
   return `Denied egress to ${host} (deny always wins over allow).`;
 }
-var GLOBAL_CONFIG_PATH = import_path51.default.join(import_os46.default.homedir(), ".node9", "config.json");
+var GLOBAL_CONFIG_PATH = import_path52.default.join(import_os47.default.homedir(), ".node9", "config.json");
 var APPROVER_CHANNELS = ["native", "browser", "cloud", "terminal"];
 function readGlobalConfigRaw() {
   try {
@@ -25255,7 +25447,7 @@ function readGlobalConfigRaw() {
   return {};
 }
 function writeGlobalConfigRaw(data) {
-  const dir = import_path51.default.dirname(GLOBAL_CONFIG_PATH);
+  const dir = import_path52.default.dirname(GLOBAL_CONFIG_PATH);
   if (!import_fs53.default.existsSync(dir)) import_fs53.default.mkdirSync(dir, { recursive: true });
   import_fs53.default.writeFileSync(GLOBAL_CONFIG_PATH, JSON.stringify(data, null, 2) + "\n");
 }
@@ -25301,7 +25493,7 @@ function handleApproverSet(args) {
 function handleAuditGet(args) {
   const limit = Math.min(typeof args.limit === "number" ? args.limit : 20, 100);
   const filter = typeof args.filter === "string" && args.filter !== "all" ? args.filter : null;
-  const auditPath = import_path51.default.join(import_os46.default.homedir(), ".node9", "audit.log");
+  const auditPath = import_path52.default.join(import_os47.default.homedir(), ".node9", "audit.log");
   if (!import_fs53.default.existsSync(auditPath)) return "No audit log found.";
   const rawLines = import_fs53.default.readFileSync(auditPath, "utf-8").trim().split("\n").filter(Boolean);
   const parsed = [];
@@ -25809,6 +26001,17 @@ var import_chalk22 = __toESM(require("chalk"));
 init_sync();
 function registerSyncCommand(program2) {
   const policy = program2.command("policy").description("Manage cloud policy rules");
+  policy.command("push").description("Push this machine's effective policy to the node9 dashboard").action(async () => {
+    process.stdout.write(import_chalk22.default.cyan("Pushing policy to the dashboard\u2026"));
+    const result = await runPolicyPush();
+    process.stdout.write("\n");
+    if (!result.ok) {
+      console.error(import_chalk22.default.red(`\u2717 ${result.reason}`));
+      process.exit(1);
+    }
+    console.log(import_chalk22.default.green("\u2713 Policy mirrored to the dashboard"));
+    console.log(import_chalk22.default.gray("  See it under Security Policy \u2192 Machines"));
+  });
   policy.command("sync").description("Sync cloud policy rules to local cache (~/.node9/rules-cache.json)").action(async () => {
     process.stdout.write(import_chalk22.default.cyan("Syncing cloud policy rules\u2026"));
     const result = await runCloudSync();
@@ -26257,12 +26460,12 @@ var import_chalk27 = __toESM(require("chalk"));
 
 // src/shields/jail.ts
 var import_fs55 = __toESM(require("fs"));
-var import_os47 = __toESM(require("os"));
-var import_path52 = __toESM(require("path"));
+var import_os48 = __toESM(require("os"));
+var import_path53 = __toESM(require("path"));
 init_shields();
 var USER_JAIL_SHIELD = "user-jail";
 function jailStorePath() {
-  return import_path52.default.join(import_os47.default.homedir(), ".node9", "jail-paths.json");
+  return import_path53.default.join(import_os48.default.homedir(), ".node9", "jail-paths.json");
 }
 function readJailPaths() {
   let text;
@@ -26285,7 +26488,7 @@ function readJailPaths() {
 }
 function writeJailPaths(paths) {
   const p = jailStorePath();
-  import_fs55.default.mkdirSync(import_path52.default.dirname(p), { recursive: true });
+  import_fs55.default.mkdirSync(import_path53.default.dirname(p), { recursive: true });
   import_fs55.default.writeFileSync(p, JSON.stringify({ paths }, null, 2) + "\n", { mode: 384 });
 }
 function addJailPath(rawPath, verdict) {
@@ -26308,7 +26511,7 @@ function removeJailPath(rawPath) {
   return { removed, paths: after };
 }
 function regenerateUserJail(paths) {
-  const file = import_path52.default.join(USER_SHIELDS_DIR_PATH, `${USER_JAIL_SHIELD}.json`);
+  const file = import_path53.default.join(USER_SHIELDS_DIR_PATH, `${USER_JAIL_SHIELD}.json`);
   if (paths.length === 0) {
     const active2 = readActiveShields();
     if (active2.includes(USER_JAIL_SHIELD)) {
@@ -26430,13 +26633,13 @@ function registerJailCommand(program2) {
 // src/cli/commands/sandbox.ts
 var import_chalk28 = __toESM(require("chalk"));
 var import_fs58 = __toESM(require("fs"));
-var import_path55 = __toESM(require("path"));
+var import_path56 = __toESM(require("path"));
 var import_child_process13 = require("child_process");
 init_config();
 
 // src/sandbox/config.ts
 var import_fs56 = __toESM(require("fs"));
-var import_path53 = __toESM(require("path"));
+var import_path54 = __toESM(require("path"));
 var import_yaml = require("yaml");
 var SANDBOX_CONFIG_FILE = "node9.sandbox.yaml";
 var FORBIDDEN_ENV = /* @__PURE__ */ new Set(["NODE9_API_KEY", "NODE9_API_URL"]);
@@ -26509,7 +26712,7 @@ function scaffoldSandboxYaml(agent) {
   return header + (0, import_yaml.stringify)(defaultSandboxConfig(agent));
 }
 function sandboxConfigPath(cwd = process.cwd()) {
-  return import_path53.default.join(cwd, SANDBOX_CONFIG_FILE);
+  return import_path54.default.join(cwd, SANDBOX_CONFIG_FILE);
 }
 function loadSandboxConfig(cwd = process.cwd(), fallbackAgent = "claude") {
   const p = sandboxConfigPath(cwd);
@@ -26577,13 +26780,13 @@ init_templates();
 
 // src/sandbox/runtime.ts
 var import_fs57 = __toESM(require("fs"));
-var import_os48 = __toESM(require("os"));
-var import_path54 = __toESM(require("path"));
+var import_os49 = __toESM(require("os"));
+var import_path55 = __toESM(require("path"));
 var import_crypto13 = __toESM(require("crypto"));
 var import_child_process12 = require("child_process");
 init_templates();
 function sandboxDataDir(cwd = process.cwd()) {
-  return import_path54.default.join(cwd, ".node9", "sandbox", "data");
+  return import_path55.default.join(cwd, ".node9", "sandbox", "data");
 }
 function detectEngine(engine) {
   const r = (0, import_child_process12.spawnSync)(engine, ["--version"], { encoding: "utf-8" });
@@ -26594,7 +26797,7 @@ function detectEngine(engine) {
 }
 function agentCredentialsMount(agent) {
   const rel = agent === "codex" ? ".codex/auth.json" : ".claude/.credentials.json";
-  return { hostPath: import_path54.default.join(import_os48.default.homedir(), rel), target: `/home/${RUN_AS_USER}/${rel}` };
+  return { hostPath: import_path55.default.join(import_os49.default.homedir(), rel), target: `/home/${RUN_AS_USER}/${rel}` };
 }
 function buildRunArgs(opts) {
   const { config, workspaceHostPath, dataHostPath, allowlistHostPath, agentArgs } = opts;
@@ -26622,30 +26825,30 @@ function imageContentHash(dockerfile, entrypoint) {
   return import_crypto13.default.createHash("sha256").update(dockerfile).update("\0").update(entrypoint).digest("hex").slice(0, 16);
 }
 function sandboxBuildDir(cwd = process.cwd()) {
-  return import_path54.default.join(cwd, ".node9", "sandbox", "build");
+  return import_path55.default.join(cwd, ".node9", "sandbox", "build");
 }
 function writeBuildContext(cwd, dockerfile, entrypoint) {
   const dir = sandboxBuildDir(cwd);
   import_fs57.default.mkdirSync(dir, { recursive: true });
-  import_fs57.default.writeFileSync(import_path54.default.join(dir, "Dockerfile"), dockerfile);
-  import_fs57.default.writeFileSync(import_path54.default.join(dir, "entrypoint.sh"), entrypoint);
+  import_fs57.default.writeFileSync(import_path55.default.join(dir, "Dockerfile"), dockerfile);
+  import_fs57.default.writeFileSync(import_path55.default.join(dir, "entrypoint.sh"), entrypoint);
   return dir;
 }
 function writeAllowlist(cwd, hosts) {
-  const dir = import_path54.default.join(cwd, ".node9", "sandbox");
+  const dir = import_path55.default.join(cwd, ".node9", "sandbox");
   import_fs57.default.mkdirSync(dir, { recursive: true });
-  const p = import_path54.default.join(dir, "allowed-domains.txt");
+  const p = import_path55.default.join(dir, "allowed-domains.txt");
   import_fs57.default.writeFileSync(p, hosts.join("\n") + "\n");
   return p;
 }
 function resolveHomePath(p) {
-  return p.startsWith("~") ? import_path54.default.join(import_os48.default.homedir(), p.slice(1)) : import_path54.default.resolve(p);
+  return p.startsWith("~") ? import_path55.default.join(import_os49.default.homedir(), p.slice(1)) : import_path55.default.resolve(p);
 }
 
 // src/cli/commands/sandbox.ts
 function seedDataDirConfig(dataDir, sandbox) {
   import_fs58.default.mkdirSync(dataDir, { recursive: true });
-  const configPath = import_path55.default.join(dataDir, "config.json");
+  const configPath = import_path56.default.join(dataDir, "config.json");
   const seed = {
     settings: {
       approvers: {
@@ -26710,7 +26913,7 @@ function registerSandboxCommand(program2, version2) {
     const buildDir = writeBuildContext(cwd, dockerfile, entrypoint);
     const hash = imageContentHash(dockerfile, entrypoint);
     const image = sandbox.runtime.image;
-    const hashFile = import_path55.default.join(sandboxBuildDir(cwd), ".image-hash");
+    const hashFile = import_path56.default.join(sandboxBuildDir(cwd), ".image-hash");
     const lastHash = import_fs58.default.existsSync(hashFile) ? import_fs58.default.readFileSync(hashFile, "utf-8").trim() : "";
     const imageExists = (0, import_child_process13.spawnSync)(sandbox.runtime.engine, ["image", "inspect", image], { stdio: "ignore" }).status === 0;
     const needBuild = sandbox.runtime.rebuild === "always" || !imageExists || sandbox.runtime.rebuild !== "never" && lastHash !== hash;
@@ -26753,7 +26956,7 @@ function registerSandboxCommand(program2, version2) {
     process.exit(r.status ?? 0);
   });
   cmd.command("tail").description("Stream the sandbox's audit log (host-side)").action(() => {
-    const auditPath = import_path55.default.join(sandboxDataDir(), "audit.log");
+    const auditPath = import_path56.default.join(sandboxDataDir(), "audit.log");
     if (!import_fs58.default.existsSync(auditPath)) {
       console.log(import_chalk28.default.dim("  no sandbox audit yet."));
       return;
@@ -26761,7 +26964,7 @@ function registerSandboxCommand(program2, version2) {
     (0, import_child_process13.spawnSync)("tail", ["-f", auditPath], { stdio: "inherit" });
   });
   cmd.command("logs").description("Dump the sandbox's audit log").action(() => {
-    const auditPath = import_path55.default.join(sandboxDataDir(), "audit.log");
+    const auditPath = import_path56.default.join(sandboxDataDir(), "audit.log");
     if (!import_fs58.default.existsSync(auditPath)) {
       console.log(import_chalk28.default.dim("  no sandbox audit yet."));
       return;
@@ -26780,7 +26983,7 @@ function registerSandboxCommand(program2, version2) {
         stdio: "ignore"
       });
     }
-    import_fs58.default.rmSync(import_path55.default.join(cwd, ".node9", "sandbox"), { recursive: true, force: true });
+    import_fs58.default.rmSync(import_path56.default.join(cwd, ".node9", "sandbox"), { recursive: true, force: true });
     console.log(import_chalk28.default.green("  \u2713 sandbox image + build + data removed."));
   });
 }
@@ -26788,8 +26991,8 @@ function registerSandboxCommand(program2, version2) {
 // src/cli/commands/sessions.ts
 var import_chalk29 = __toESM(require("chalk"));
 var import_fs59 = __toESM(require("fs"));
-var import_path56 = __toESM(require("path"));
-var import_os49 = __toESM(require("os"));
+var import_path57 = __toESM(require("path"));
+var import_os50 = __toESM(require("os"));
 init_scan_summary();
 init_litellm();
 init_cost_gemini();
@@ -26810,10 +27013,10 @@ function encodeProjectPath(projectPath) {
 }
 function sessionJsonlPath(projectPath, sessionId) {
   const encoded = encodeProjectPath(projectPath);
-  return import_path56.default.join(import_os49.default.homedir(), ".claude", "projects", encoded, `${sessionId}.jsonl`);
+  return import_path57.default.join(import_os50.default.homedir(), ".claude", "projects", encoded, `${sessionId}.jsonl`);
 }
 function projectLabel(projectPath) {
-  return projectPath.replace(import_os49.default.homedir(), "~");
+  return projectPath.replace(import_os50.default.homedir(), "~");
 }
 function parseHistoryLines(lines) {
   const entries = [];
@@ -26882,7 +27085,7 @@ function parseSessionLines(lines) {
   return { toolCalls, costUSD, hasSnapshot, modifiedFiles };
 }
 function loadAuditEntries(auditPath) {
-  const aPath = auditPath ?? import_path56.default.join(import_os49.default.homedir(), ".node9", "audit.log");
+  const aPath = auditPath ?? import_path57.default.join(import_os50.default.homedir(), ".node9", "audit.log");
   let raw;
   try {
     raw = import_fs59.default.readFileSync(aPath, "utf-8");
@@ -26921,7 +27124,7 @@ function auditEntriesInWindow(entries, windowStart, windowEnd) {
   return result;
 }
 function buildGeminiSessions(days, allAuditEntries) {
-  const tmpDir = import_path56.default.join(import_os49.default.homedir(), ".gemini", "tmp");
+  const tmpDir = import_path57.default.join(import_os50.default.homedir(), ".gemini", "tmp");
   if (!import_fs59.default.existsSync(tmpDir)) return [];
   const cutoff = days !== null ? (() => {
     const d = /* @__PURE__ */ new Date();
@@ -26937,18 +27140,18 @@ function buildGeminiSessions(days, allAuditEntries) {
   }
   const summaries = [];
   for (const slug2 of slugDirs) {
-    const slugPath = import_path56.default.join(tmpDir, slug2);
+    const slugPath = import_path57.default.join(tmpDir, slug2);
     try {
       if (!import_fs59.default.statSync(slugPath).isDirectory()) continue;
     } catch {
       continue;
     }
-    let projectRoot = import_path56.default.join(import_os49.default.homedir(), slug2);
+    let projectRoot = import_path57.default.join(import_os50.default.homedir(), slug2);
     try {
-      projectRoot = import_fs59.default.readFileSync(import_path56.default.join(slugPath, ".project_root"), "utf-8").trim();
+      projectRoot = import_fs59.default.readFileSync(import_path57.default.join(slugPath, ".project_root"), "utf-8").trim();
     } catch {
     }
-    const chatsDir = import_path56.default.join(slugPath, "chats");
+    const chatsDir = import_path57.default.join(slugPath, "chats");
     if (!import_fs59.default.existsSync(chatsDir)) continue;
     let chatFiles;
     try {
@@ -26959,7 +27162,7 @@ function buildGeminiSessions(days, allAuditEntries) {
     for (const chatFile of chatFiles) {
       let raw;
       try {
-        raw = import_fs59.default.readFileSync(import_path56.default.join(chatsDir, chatFile), "utf-8");
+        raw = import_fs59.default.readFileSync(import_path57.default.join(chatsDir, chatFile), "utf-8");
       } catch {
         continue;
       }
@@ -27039,7 +27242,7 @@ function buildGeminiSessions(days, allAuditEntries) {
   return summaries;
 }
 function buildCodexSessions(days, allAuditEntries) {
-  const sessionsBase = import_path56.default.join(import_os49.default.homedir(), ".codex", "sessions");
+  const sessionsBase = import_path57.default.join(import_os50.default.homedir(), ".codex", "sessions");
   if (!import_fs59.default.existsSync(sessionsBase)) return [];
   const cutoff = days !== null ? (() => {
     const d = /* @__PURE__ */ new Date();
@@ -27050,28 +27253,28 @@ function buildCodexSessions(days, allAuditEntries) {
   const jsonlFiles = [];
   try {
     for (const year of import_fs59.default.readdirSync(sessionsBase)) {
-      const yearPath = import_path56.default.join(sessionsBase, year);
+      const yearPath = import_path57.default.join(sessionsBase, year);
       try {
         if (!import_fs59.default.statSync(yearPath).isDirectory()) continue;
       } catch {
         continue;
       }
       for (const month of import_fs59.default.readdirSync(yearPath)) {
-        const monthPath = import_path56.default.join(yearPath, month);
+        const monthPath = import_path57.default.join(yearPath, month);
         try {
           if (!import_fs59.default.statSync(monthPath).isDirectory()) continue;
         } catch {
           continue;
         }
         for (const day of import_fs59.default.readdirSync(monthPath)) {
-          const dayPath = import_path56.default.join(monthPath, day);
+          const dayPath = import_path57.default.join(monthPath, day);
           try {
             if (!import_fs59.default.statSync(dayPath).isDirectory()) continue;
           } catch {
             continue;
           }
           for (const file of import_fs59.default.readdirSync(dayPath)) {
-            if (file.endsWith(".jsonl")) jsonlFiles.push(import_path56.default.join(dayPath, file));
+            if (file.endsWith(".jsonl")) jsonlFiles.push(import_path57.default.join(dayPath, file));
           }
         }
       }
@@ -27169,7 +27372,7 @@ function buildCodexSessions(days, allAuditEntries) {
   return summaries;
 }
 function buildSessions(days, historyPath) {
-  const hPath = historyPath ?? import_path56.default.join(import_os49.default.homedir(), ".claude", "history.jsonl");
+  const hPath = historyPath ?? import_path57.default.join(import_os50.default.homedir(), ".claude", "history.jsonl");
   let historyRaw = "";
   try {
     historyRaw = import_fs59.default.readFileSync(hPath, "utf-8");
@@ -27591,11 +27794,11 @@ function registerSessionTaintCommand(program2) {
 // src/cli/commands/skill-pin.ts
 var import_chalk31 = __toESM(require("chalk"));
 var import_fs60 = __toESM(require("fs"));
-var import_os50 = __toESM(require("os"));
-var import_path57 = __toESM(require("path"));
+var import_os51 = __toESM(require("os"));
+var import_path58 = __toESM(require("path"));
 function wipeSkillSessions() {
   try {
-    import_fs60.default.rmSync(import_path57.default.join(import_os50.default.homedir(), ".node9", "skill-sessions"), {
+    import_fs60.default.rmSync(import_path58.default.join(import_os51.default.homedir(), ".node9", "skill-sessions"), {
       recursive: true,
       force: true
     });
@@ -27678,10 +27881,10 @@ function registerSkillPinCommand(program2) {
 
 // src/cli/commands/decisions.ts
 var import_fs61 = __toESM(require("fs"));
-var import_os51 = __toESM(require("os"));
-var import_path58 = __toESM(require("path"));
+var import_os52 = __toESM(require("os"));
+var import_path59 = __toESM(require("path"));
 var import_chalk32 = __toESM(require("chalk"));
-var DECISIONS_FILE2 = import_path58.default.join(import_os51.default.homedir(), ".node9", "decisions.json");
+var DECISIONS_FILE2 = import_path59.default.join(import_os52.default.homedir(), ".node9", "decisions.json");
 function readDecisions() {
   try {
     if (!import_fs61.default.existsSync(DECISIONS_FILE2)) return {};
@@ -27697,7 +27900,7 @@ function readDecisions() {
   }
 }
 function writeDecisions(d) {
-  const dir = import_path58.default.dirname(DECISIONS_FILE2);
+  const dir = import_path59.default.dirname(DECISIONS_FILE2);
   if (!import_fs61.default.existsSync(dir)) import_fs61.default.mkdirSync(dir, { recursive: true });
   const tmp = `${DECISIONS_FILE2}.${process.pid}.tmp`;
   import_fs61.default.writeFileSync(tmp, JSON.stringify(d, null, 2));
@@ -27759,10 +27962,10 @@ Persistent decisions  (${entries.length})
 // src/cli/commands/dlp.ts
 var import_chalk33 = __toESM(require("chalk"));
 var import_fs62 = __toESM(require("fs"));
-var import_path59 = __toESM(require("path"));
-var import_os52 = __toESM(require("os"));
-var AUDIT_LOG = import_path59.default.join(import_os52.default.homedir(), ".node9", "audit.log");
-var RESOLVED_FILE = import_path59.default.join(import_os52.default.homedir(), ".node9", "dlp-resolved.json");
+var import_path60 = __toESM(require("path"));
+var import_os53 = __toESM(require("os"));
+var AUDIT_LOG = import_path60.default.join(import_os53.default.homedir(), ".node9", "audit.log");
+var RESOLVED_FILE = import_path60.default.join(import_os53.default.homedir(), ".node9", "dlp-resolved.json");
 var ANSI_RE = /\x1b(?:\[[0-9;?]*[a-zA-Z]|\][^\x07\x1b]*(?:\x07|\x1b\\)|[@-_])/g;
 function stripAnsi(s) {
   return s.replace(ANSI_RE, "");
@@ -27882,14 +28085,14 @@ function registerDlpCommand(program2) {
 // src/cli/commands/mask.ts
 var import_chalk34 = __toESM(require("chalk"));
 var import_fs63 = __toESM(require("fs"));
-var import_path60 = __toESM(require("path"));
-var import_os53 = __toESM(require("os"));
+var import_path61 = __toESM(require("path"));
+var import_os54 = __toESM(require("os"));
 init_dlp();
 function findJsonlFiles(dir) {
   const results = [];
   if (!import_fs63.default.existsSync(dir)) return results;
   for (const entry of import_fs63.default.readdirSync(dir, { withFileTypes: true })) {
-    const full = import_path60.default.join(dir, entry.name);
+    const full = import_path61.default.join(dir, entry.name);
     if (entry.isDirectory()) results.push(...findJsonlFiles(full));
     else if (entry.isFile() && entry.name.endsWith(".jsonl")) results.push(full);
   }
@@ -27992,7 +28195,7 @@ function findJsonFiles(dir) {
   const results = [];
   if (!import_fs63.default.existsSync(dir)) return results;
   for (const entry of import_fs63.default.readdirSync(dir, { withFileTypes: true })) {
-    const full = import_path60.default.join(dir, entry.name);
+    const full = import_path61.default.join(dir, entry.name);
     if (entry.isDirectory()) results.push(...findJsonFiles(full));
     else if (entry.isFile() && entry.name.endsWith(".json")) results.push(full);
   }
@@ -28001,9 +28204,9 @@ function findJsonFiles(dir) {
 function registerMaskCommand(program2) {
   program2.command("mask").description("Redact plaintext secrets from local AI session history files").option("--dry-run", "show what would be redacted without making changes").option("--all", "scan all history (default: last 30 days)").action(async (options) => {
     const dryRun = !!options.dryRun;
-    const home = import_os53.default.homedir();
-    const claudeDir = import_path60.default.join(home, ".claude", "projects");
-    const geminiDir = import_path60.default.join(home, ".gemini", "tmp");
+    const home = import_os54.default.homedir();
+    const claudeDir = import_path61.default.join(home, ".claude", "projects");
+    const geminiDir = import_path61.default.join(home, ".gemini", "tmp");
     const allFiles = [
       ...findJsonlFiles(claudeDir).map((p) => ({ path: p, type: "jsonl" })),
       ...findJsonFiles(geminiDir).map((p) => ({ path: p, type: "json" }))
@@ -28067,15 +28270,15 @@ function registerMaskCommand(program2) {
 // src/cli.ts
 init_blast();
 var { version } = JSON.parse(
-  import_fs66.default.readFileSync(import_path63.default.join(__dirname, "../package.json"), "utf-8")
+  import_fs66.default.readFileSync(import_path64.default.join(__dirname, "../package.json"), "utf-8")
 );
 var program = new import_commander.Command();
 program.name("node9").description("The Sudo Command for AI Agents").version(version);
 program.command("login").argument("<apiKey>").option("--local", "Save key for audit/logging only \u2014 local config still controls all decisions").option("--profile <name>", 'Save as a named profile (default: "default")').action((apiKey, options) => {
   const DEFAULT_API_URL2 = "https://api.node9.ai/api/v1/intercept";
-  const credPath = import_path63.default.join(import_os56.default.homedir(), ".node9", "credentials.json");
-  if (!import_fs66.default.existsSync(import_path63.default.dirname(credPath)))
-    import_fs66.default.mkdirSync(import_path63.default.dirname(credPath), { recursive: true });
+  const credPath = import_path64.default.join(import_os57.default.homedir(), ".node9", "credentials.json");
+  if (!import_fs66.default.existsSync(import_path64.default.dirname(credPath)))
+    import_fs66.default.mkdirSync(import_path64.default.dirname(credPath), { recursive: true });
   const profileName = options.profile || "default";
   let existingCreds = {};
   try {
@@ -28095,7 +28298,7 @@ program.command("login").argument("<apiKey>").option("--local", "Save key for au
   import_fs66.default.writeFileSync(credPath, JSON.stringify(existingCreds, null, 2), { mode: 384 });
   let effectiveCloud = null;
   if (profileName === "default") {
-    const configPath = import_path63.default.join(import_os56.default.homedir(), ".node9", "config.json");
+    const configPath = import_path64.default.join(import_os57.default.homedir(), ".node9", "config.json");
     let config = {};
     try {
       if (import_fs66.default.existsSync(configPath))
@@ -28114,8 +28317,8 @@ program.command("login").argument("<apiKey>").option("--local", "Save key for au
       approvers.cloud = false;
     }
     s.approvers = approvers;
-    if (!import_fs66.default.existsSync(import_path63.default.dirname(configPath)))
-      import_fs66.default.mkdirSync(import_path63.default.dirname(configPath), { recursive: true });
+    if (!import_fs66.default.existsSync(import_path64.default.dirname(configPath)))
+      import_fs66.default.mkdirSync(import_path64.default.dirname(configPath), { recursive: true });
     import_fs66.default.writeFileSync(configPath, JSON.stringify(config, null, 2), { mode: 384 });
     effectiveCloud = approvers.cloud === true;
   }
@@ -28225,37 +28428,21 @@ program.command("setup", { hidden: true }).description('Alias for "addto" \u2014
   );
   process.exit(1);
 });
-program.command("removefrom", { hidden: true }).description("Remove Node9 hooks from an AI agent configuration").addHelpText(
-  "after",
-  "\n  Supported targets:  claude  antigravity  copilot  gemini  cursor  codex  windsurf  vscode  hud"
-).argument(
-  "<target>",
-  "The agent to remove from: claude | antigravity | copilot | gemini | cursor | codex | windsurf | vscode | hud"
-).action((target) => {
-  let fn;
-  if (target === "claude") fn = teardownClaude;
-  else if (target === "gemini") fn = teardownGemini;
-  else if (target === "antigravity" || target === "agy") fn = teardownAntigravity;
-  else if (target === "copilot") fn = teardownCopilot;
-  else if (target === "cursor") fn = teardownCursor;
-  else if (target === "codex") fn = teardownCodex;
-  else if (target === "windsurf") fn = teardownWindsurf;
-  else if (target === "vscode") fn = teardownVSCode;
-  else if (target === "hermes") fn = teardownHermes;
-  else if (target === "hud") fn = teardownHud;
-  else {
+program.command("removefrom", { hidden: true }).description("Remove Node9 hooks from an AI agent configuration").addHelpText("after", `
+  Supported targets:  ${agentTeardownTargets().join("  ")}`).argument("<target>", `The agent to remove from: ${agentTeardownTargets().join(" | ")}`).action((target) => {
+  const agent = resolveAgentTeardown(target);
+  if (!agent) {
     console.error(
-      import_chalk36.default.red(
-        `Unknown target: "${target}". Supported: claude, antigravity, copilot, gemini, cursor, codex, windsurf, vscode, hermes, hud`
-      )
+      import_chalk36.default.red(`Unknown target: "${target}". Supported: ${agentTeardownTargets().join(", ")}`)
     );
     process.exit(1);
+    return;
   }
   console.log(import_chalk36.default.cyan(`
-\u{1F6E1}\uFE0F  Node9: removing hooks from ${target}...
+\u{1F6E1}\uFE0F  Node9: removing hooks from ${agent.label}...
 `));
   try {
-    fn();
+    agent.fn();
   } catch (err2) {
     console.error(import_chalk36.default.red(`  \u26A0\uFE0F  Failed: ${err2 instanceof Error ? err2.message : String(err2)}`));
     process.exit(1);
@@ -28273,15 +28460,7 @@ program.command("uninstall").description("Remove all Node9 hooks and optionally
   }
   console.log(import_chalk36.default.bold("\nRemoving hooks..."));
   let teardownFailed = false;
-  for (const [label2, fn] of [
-    ["Claude", teardownClaude],
-    ["Gemini", teardownGemini],
-    ["Cursor", teardownCursor],
-    ["Codex", teardownCodex],
-    ["Windsurf", teardownWindsurf],
-    ["VSCode", teardownVSCode],
-    ["Hermes", teardownHermes]
-  ]) {
+  for (const { label: label2, fn } of AGENT_TEARDOWNS) {
     try {
       fn();
     } catch (err2) {
@@ -28293,8 +28472,21 @@ program.command("uninstall").description("Remove all Node9 hooks and optionally
       );
     }
   }
+  try {
+    const residual = getAgentWiring().filter((a) => a.wireState === "wired");
+    if (residual.length === 0) {
+      console.log(import_chalk36.default.green("  \u2705 Verified \u2014 no node9 hooks or plugin shims remain"));
+    } else {
+      teardownFailed = true;
+      console.error(import_chalk36.default.red("  \u26A0\uFE0F  Still wired after teardown:"));
+      for (const a of residual) {
+        console.error(import_chalk36.default.red(`     \u2022 ${a.label} \u2014 ${a.settingsPath}`));
+      }
+    }
+  } catch {
+  }
   if (options.purge) {
-    const node9Dir = import_path63.default.join(import_os56.default.homedir(), ".node9");
+    const node9Dir = import_path64.default.join(import_os57.default.homedir(), ".node9");
     if (import_fs66.default.existsSync(node9Dir)) {
       const confirmed = await (0, import_prompts2.confirm)({
         message: `Permanently delete ${node9Dir} (config, audit log, credentials)?`,
@@ -28425,7 +28617,7 @@ program.command("tail").description("Stream live agent activity to the terminal"
 });
 program.command("monitor").description("Live interactive dashboard \u2014 activity feed, approvals, security signals").action(async () => {
   try {
-    const dashboardPath = import_path63.default.join(__dirname, "dashboard.mjs");
+    const dashboardPath = import_path64.default.join(__dirname, "dashboard.mjs");
     const dynamicImport = new Function("id", "return import(id)");
     const mod = await dynamicImport(`file://${dashboardPath}`);
     await mod.startMonitor();
@@ -28463,9 +28655,9 @@ Claude Code spawns this command every ~300ms and writes a JSON payload to stdin.
 Run "node9 addto claude" to register it as the statusLine.`
 ).argument("[subcommand]", 'Optional: "debug on" / "debug off" to toggle stdin logging').argument("[state]", 'on|off \u2014 used with "debug" subcommand').action(async (subcommand, state) => {
   if (subcommand === "debug") {
-    const flagFile = import_path63.default.join(import_os56.default.homedir(), ".node9", "hud-debug");
+    const flagFile = import_path64.default.join(import_os57.default.homedir(), ".node9", "hud-debug");
     if (state === "on") {
-      import_fs66.default.mkdirSync(import_path63.default.dirname(flagFile), { recursive: true });
+      import_fs66.default.mkdirSync(import_path64.default.dirname(flagFile), { recursive: true });
       import_fs66.default.writeFileSync(flagFile, "");
       console.log("HUD debug logging enabled \u2192 ~/.node9/hud-debug.log");
       console.log("Tail it with: tail -f ~/.node9/hud-debug.log");
@@ -28592,7 +28784,7 @@ if (process.argv[2] !== "daemon") {
     const isCheckHook = process.argv[2] === "check";
     if (isCheckHook) {
       if (process.env.NODE9_DEBUG === "1" || getConfig().settings.enableHookLogDebug) {
-        const logPath = import_path63.default.join(import_os56.default.homedir(), ".node9", "hook-debug.log");
+        const logPath = import_path64.default.join(import_os57.default.homedir(), ".node9", "hook-debug.log");
         const msg = reason instanceof Error ? reason.message : String(reason);
         import_fs66.default.appendFileSync(logPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] UNHANDLED: ${msg}
 `);