@node9/proxy 1.45.0 → 1.47.0

package/dist/cli.mjs

@@ -219,8 +219,8 @@ function sanitizeConfig(raw) {
     }
   }
   const lines = result.error.issues.map((issue) => {
-    const path64 = issue.path.length > 0 ? issue.path.join(".") : "root";
-    return `  \u2022 ${path64}: ${issue.message}`;
+    const path65 = issue.path.length > 0 ? issue.path.join(".") : "root";
+    return `  \u2022 ${path65}: ${issue.message}`;
   });
   return {
     sanitized,
@@ -315,6 +315,11 @@ var init_config_schema = __esm({
         // must run them from the CLI. node9's threat model is the agent itself.
         mcpAllowWeakening: z.boolean().optional(),
         cloudSyncIntervalHours: z.number().positive().optional(),
+        // Seconds-granular override for the cloud policy sync cadence. Wins over
+        // cloudSyncIntervalHours when set. Lets you opt into fast apply (e.g. 20)
+        // for an incident; clamped to a 15s floor so it can't hammer the API.
+        // Unset → falls back to hours, then the 5h default.
+        cloudSyncIntervalSeconds: z.number().positive().optional(),
         // Outbox shipper (audit.log → SaaS batch ingest). enabled defaults
         // to true; set false to fall back to local-only auditing.
         shipper: z.object({
@@ -1341,9 +1346,9 @@ function matchesPattern(text, patterns) {
   const withoutDotSlash = text.replace(/^\.\//, "");
   return isMatch(withoutDotSlash) || isMatch(`./${withoutDotSlash}`);
 }
-function getNestedValue(obj, path64) {
+function getNestedValue(obj, path65) {
   if (!obj || typeof obj !== "object") return null;
-  const segments = path64.split(".");
+  const segments = path65.split(".");
   for (const seg of segments) {
     if (FORBIDDEN_PATH_SEGMENTS.has(seg)) return null;
   }
@@ -1396,6 +1401,14 @@ function evaluateSmartConditions(args, rule) {
   });
   return mode === "any" ? results.some((r) => r) : results.every((r) => r);
 }
+function resolvePinned(matches) {
+  if (matches.length === 0) return void 0;
+  const pinned = matches.filter((r) => r.pinned);
+  if (pinned.length === 0) return matches[0];
+  return pinned.reduce(
+    (best, r) => VERDICT_RANK[r.verdict] > VERDICT_RANK[best.verdict] ? r : best
+  );
+}
 function tokenize2(toolName) {
   return toolName.toLowerCase().split(/[_.\-\s]+/).filter(Boolean);
 }
@@ -1507,9 +1520,10 @@ async function evaluatePolicy(config, toolName, args, context = {}, hooks = {})
     }
   }
   if (config.policy.smartRules.length > 0) {
-    const matchedRule = config.policy.smartRules.find(
+    const matches = config.policy.smartRules.filter(
       (rule) => matchesPattern(toolName, rule.tool) && !(bashCommand !== null && rule.name && AST_FS_REGEX_RULES.has(rule.name)) && evaluateSmartConditions(args, rule)
     );
+    const matchedRule = resolvePinned(matches);
     if (matchedRule) {
       if (matchedRule.verdict === "allow")
         return { decision: "allow", ruleName: matchedRule.name ?? matchedRule.tool };
@@ -2248,7 +2262,7 @@ function* stringValues(obj, depth = 0) {
   }
   for (const v of Object.values(obj)) yield* stringValues(v, depth + 1);
 }
-var MAX, UNTRUSTED_TOOLS, SIGNALS, ASSIGNMENT_CONTEXT_RE, DLP_STOPWORDS, DLP_PATTERNS, DLP_PATTERNS_GLOBAL, SENSITIVE_PATH_PATTERNS, MAX_DEPTH, MAX_STRING_BYTES, MAX_JSON_PARSE_BYTES, syntax, sharedParser, MESSAGE_FLAGS, SHELL_INTERPRETERS, DOWNLOAD_CMDS, NORMALIZE_CACHE_MAX, normalizeCache, AST_CACHE_MAX, astCache, PARSE_FAIL, FS_READ_TOOLS, FS_OP_PRESCREEN_RE, HOME_CACHE_ALLOWLIST, SENSITIVE_PATH_RULES, BASH_TOOL_NAMES, AST_FS_REGEX_RULES, SQL_DB_CLIS, SQL_DDL_RE, CHMOD_OPEN_PERM_TOKENS, COMMAND_WRAPPERS, NET_BINARIES, VALUE_FLAGS, FS_OP_CACHE_MAX, fsOpCache, DEFAULT_EGRESS_ALLOWLIST, SOURCE_COMMANDS, SINK_COMMANDS, OBFUSCATORS, SENSITIVE_PATTERNS, FLAGS_WITH_VALUES, MAX_REGEX_LENGTH, REGEX_CACHE_MAX, regexCache, FORBIDDEN_PATH_SEGMENTS, SQL_DML_KEYWORDS, aws_default, bash_safe_default, docker_default, filesystem_default, github_default, k8s_default, mongodb_default, postgres_default, project_jail_default, redis_default, BUILTIN_SHIELDS, LOOP_MAX_RECORDS, FINDING_TO_SIGNAL, SCAN_SIGNAL_WEIGHTS, LOOP_THRESHOLD_FOR_WASTE, COST_PER_LOOP_ITER_USD, DESTRUCTIVE_OP_RE, SENSITIVE_PATH_RE, FILE_TOOLS, PII_EMAIL_RE, PII_SSN_RE, PII_PHONE_RE, PII_CC_RE, REALTIME_PII_PATTERNS, MAX_PII_SCAN_BYTES, LONG_OUTPUT_THRESHOLD_BYTES, CANONICAL_EXTRACTOR_VERSION, DEDUPE_PREVIEW_LEN, TERMINAL_ESCAPE_RE;
+var MAX, UNTRUSTED_TOOLS, SIGNALS, ASSIGNMENT_CONTEXT_RE, DLP_STOPWORDS, DLP_PATTERNS, DLP_PATTERNS_GLOBAL, SENSITIVE_PATH_PATTERNS, MAX_DEPTH, MAX_STRING_BYTES, MAX_JSON_PARSE_BYTES, syntax, sharedParser, MESSAGE_FLAGS, SHELL_INTERPRETERS, DOWNLOAD_CMDS, NORMALIZE_CACHE_MAX, normalizeCache, AST_CACHE_MAX, astCache, PARSE_FAIL, FS_READ_TOOLS, FS_OP_PRESCREEN_RE, HOME_CACHE_ALLOWLIST, SENSITIVE_PATH_RULES, BASH_TOOL_NAMES, AST_FS_REGEX_RULES, SQL_DB_CLIS, SQL_DDL_RE, CHMOD_OPEN_PERM_TOKENS, COMMAND_WRAPPERS, NET_BINARIES, VALUE_FLAGS, FS_OP_CACHE_MAX, fsOpCache, DEFAULT_EGRESS_ALLOWLIST, SOURCE_COMMANDS, SINK_COMMANDS, OBFUSCATORS, SENSITIVE_PATTERNS, FLAGS_WITH_VALUES, MAX_REGEX_LENGTH, REGEX_CACHE_MAX, regexCache, FORBIDDEN_PATH_SEGMENTS, VERDICT_RANK, SQL_DML_KEYWORDS, aws_default, bash_safe_default, docker_default, filesystem_default, github_default, k8s_default, mongodb_default, postgres_default, project_jail_default, redis_default, BUILTIN_SHIELDS, LOOP_MAX_RECORDS, FINDING_TO_SIGNAL, SCAN_SIGNAL_WEIGHTS, LOOP_THRESHOLD_FOR_WASTE, COST_PER_LOOP_ITER_USD, DESTRUCTIVE_OP_RE, SENSITIVE_PATH_RE, FILE_TOOLS, PII_EMAIL_RE, PII_SSN_RE, PII_PHONE_RE, PII_CC_RE, REALTIME_PII_PATTERNS, MAX_PII_SCAN_BYTES, LONG_OUTPUT_THRESHOLD_BYTES, CANONICAL_EXTRACTOR_VERSION, DEDUPE_PREVIEW_LEN, TERMINAL_ESCAPE_RE, ENGINE_VERSION;
 var init_dist = __esm({
   "packages/policy-engine/dist/index.mjs"() {
     "use strict";
@@ -3173,6 +3187,11 @@ var init_dist = __esm({
     REGEX_CACHE_MAX = 500;
     regexCache = /* @__PURE__ */ new Map();
     FORBIDDEN_PATH_SEGMENTS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
+    VERDICT_RANK = {
+      allow: 0,
+      review: 1,
+      block: 2
+    };
     SQL_DML_KEYWORDS = /* @__PURE__ */ new Set(["select", "insert", "update", "delete", "merge", "upsert"]);
     aws_default = {
       name: "aws",
@@ -3977,6 +3996,7 @@ var init_dist = __esm({
     DEDUPE_PREVIEW_LEN = 120;
     TERMINAL_ESCAPE_RE = // eslint-disable-next-line no-control-regex
     /\x1b\[[0-9;?]*[A-Za-z]|\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)|\x1b[@-_]|[\x00-\x08\x0b\x0c\x0e-\x1f\x7f]/g;
+    ENGINE_VERSION = "1.4.0";
   }
 });
 
@@ -9700,16 +9720,237 @@ var init_setup = __esm({
   }
 });
 
-// src/pricing/litellm.ts
+// src/agent-wiring.ts
 import fs14 from "fs";
 import path16 from "path";
 import os13 from "os";
+import * as yaml2 from "yaml";
+import { parse as parseToml2 } from "smol-toml";
+function readJson2(filePath) {
+  if (!fs14.existsSync(filePath)) return null;
+  try {
+    return JSON.parse(fs14.readFileSync(filePath, "utf-8"));
+  } catch {
+    return "invalid";
+  }
+}
+function matchersHaveNode9Hook(matchers) {
+  return (matchers ?? []).some((m) => (m.hooks ?? []).some((h) => isNode9Hook(h.command)));
+}
+function flatHaveNode9Hook(entries) {
+  return (Array.isArray(entries) ? entries : []).some((h) => isNode9Hook(h.command));
+}
+function readHookRoot(filePath, format) {
+  if (!fs14.existsSync(filePath)) return "absent";
+  let raw;
+  try {
+    raw = fs14.readFileSync(filePath, "utf-8");
+  } catch {
+    return "absent";
+  }
+  try {
+    const parsed = format === "yaml" ? yaml2.parse(raw) : JSON.parse(raw);
+    return parsed?.hooks ?? {};
+  } catch {
+    return "invalid";
+  }
+}
+function eventWired(root, ev, format) {
+  const arr = root[ev.key];
+  if (format === "matcher") return matchersHaveNode9Hook(arr);
+  return flatHaveNode9Hook(arr);
+}
+function detectMcp(servers) {
+  const entries = Object.entries(servers ?? {});
+  const present = entries.some(([, s]) => s?.command === "node9");
+  const wrapped = entries.filter(([, s]) => s?.command === "node9" && Array.isArray(s.args) && s.args.length > 0).map(([name, s]) => `${name} \u2192 ${s.args.join(" ")}`);
+  return { wrapped, present };
+}
+function readMcp(filePath, format) {
+  if (!fs14.existsSync(filePath)) return { wrapped: [], present: false };
+  try {
+    if (format === "toml") {
+      const parsed2 = parseToml2(fs14.readFileSync(filePath, "utf-8"));
+      return detectMcp(parsed2?.mcp_servers);
+    }
+    const parsed = readJson2(filePath);
+    if (parsed === null || parsed === "invalid") return { wrapped: [], present: false };
+    return detectMcp(parsed.mcpServers);
+  } catch {
+    return { wrapped: [], present: false };
+  }
+}
+function getAgentWiring(home = os13.homedir()) {
+  const detected = detectAgents(home);
+  return AGENT_SPECS.map((spec) => {
+    const present = spec.present(home);
+    const pad = spec.labelPad ?? DEFAULT_LABEL_PAD;
+    let hooks;
+    let wireState;
+    let hookLabel;
+    let settingsPath;
+    if (spec.shimFile) {
+      const shimWired = exists(spec.shimFile(home));
+      hooks = [{ label: "node9 plugin (node9 check)", wired: shimWired }];
+      wireState = shimWired ? "wired" : present ? "unwired" : "absent";
+      hookLabel = "node9 plugin";
+      settingsPath = spec.shimFile(home);
+    } else {
+      const root = spec.hookFile ? readHookRoot(spec.hookFile(home), spec.hookFormat) : "absent";
+      const primary = spec.hookEvents[0];
+      const rootPresent = root !== "absent" && root !== "invalid";
+      hooks = spec.hookEvents.map((ev) => ({
+        label: hookLabelOf(ev, pad),
+        wired: rootPresent && eventWired(root, ev, spec.hookFormat)
+      }));
+      if (root === "absent") wireState = "absent";
+      else if (root === "invalid") wireState = "invalid";
+      else wireState = primary && eventWired(root, primary, spec.hookFormat) ? "wired" : "unwired";
+      hookLabel = primary ? `${primary.key} hook` : "MCP proxy";
+      settingsPath = spec.hookFile ? spec.hookFile(home) : spec.mcpFile ? spec.mcpFile(home) : "";
+    }
+    const mcp = spec.mcpFile ? readMcp(spec.mcpFile(home), spec.mcpFormat ?? "json") : null;
+    const anyHookWired = hooks.some((h) => h.wired);
+    return {
+      id: spec.id,
+      label: spec.label,
+      setupCommand: spec.setupCommand,
+      installed: detected[spec.id],
+      present,
+      hooks,
+      wireState,
+      hookLabel,
+      settingsPath,
+      configFormat: spec.hookFormat === "yaml" ? "YAML" : "JSON",
+      mcpServers: mcp ? mcp.wrapped : null,
+      mcpProtected: mcp ? mcp.present : false,
+      isProtected: anyHookWired || (mcp?.present ?? false)
+    };
+  });
+}
+var exists, ck, lg, DEFAULT_LABEL_PAD, hookLabelOf, AGENT_SPECS;
+var init_agent_wiring = __esm({
+  "src/agent-wiring.ts"() {
+    "use strict";
+    init_setup();
+    exists = (p) => {
+      try {
+        return fs14.existsSync(p);
+      } catch {
+        return false;
+      }
+    };
+    ck = (key) => ({ key, kind: "check" });
+    lg = (key) => ({ key, kind: "log" });
+    DEFAULT_LABEL_PAD = 11;
+    hookLabelOf = (ev, pad) => `${ev.key.padEnd(pad)} (node9 ${ev.kind})`;
+    AGENT_SPECS = [
+      {
+        id: "claude",
+        label: "Claude Code",
+        setupCommand: "node9 agents add claude",
+        hookFile: (h) => path16.join(h, ".claude", "settings.json"),
+        hookFormat: "matcher",
+        hookEvents: [ck("PreToolUse"), lg("PostToolUse")],
+        mcpFile: (h) => path16.join(h, ".claude.json"),
+        present: (h) => exists(path16.join(h, ".claude", "settings.json")) || exists(path16.join(h, ".claude.json"))
+      },
+      {
+        id: "gemini",
+        label: "Gemini CLI",
+        setupCommand: "node9 agents add gemini",
+        hookFile: (h) => path16.join(h, ".gemini", "settings.json"),
+        hookFormat: "matcher",
+        hookEvents: [ck("BeforeTool"), lg("AfterTool")],
+        mcpFile: (h) => path16.join(h, ".gemini", "settings.json"),
+        present: (h) => exists(path16.join(h, ".gemini", "settings.json"))
+      },
+      {
+        id: "codex",
+        label: "Codex",
+        setupCommand: "node9 agents add codex",
+        hookFile: (h) => path16.join(h, ".codex", "hooks.json"),
+        hookFormat: "matcher",
+        hookEvents: [ck("PreToolUse"), ck("UserPromptSubmit")],
+        mcpFile: (h) => path16.join(h, ".codex", "config.toml"),
+        mcpFormat: "toml",
+        present: (h) => exists(path16.join(h, ".codex"))
+      },
+      {
+        id: "antigravity",
+        label: "Antigravity",
+        setupCommand: "node9 agents add antigravity",
+        hookFile: (h) => path16.join(h, ".gemini", "config", "hooks.json"),
+        hookFormat: "matcher",
+        hookEvents: [ck("PreToolUse"), lg("PostToolUse")],
+        mcpFile: (h) => path16.join(h, ".gemini", "config", "mcp_config.json"),
+        present: (h) => exists(path16.join(h, ".gemini", "config", "hooks.json")) || exists(path16.join(h, ".gemini", "antigravity-cli")) || exists(path16.join(h, ".gemini", "antigravity-ide"))
+      },
+      {
+        id: "copilot",
+        label: "GitHub Copilot",
+        setupCommand: "node9 agents add copilot",
+        hookFile: (h) => path16.join(h, ".copilot", "hooks", "node9.json"),
+        hookFormat: "flat",
+        hookEvents: [ck("PreToolUse"), lg("PostToolUse"), ck("UserPromptSubmit")],
+        mcpFile: (h) => path16.join(h, ".copilot", "mcp-config.json"),
+        present: (h) => exists(path16.join(h, ".copilot"))
+      },
+      {
+        id: "cursor",
+        label: "Cursor",
+        setupCommand: "node9 agents add cursor",
+        // MCP-only — no hook file (see note above).
+        hookFormat: "flat",
+        hookEvents: [],
+        mcpFile: (h) => path16.join(h, ".cursor", "mcp.json"),
+        present: (h) => exists(path16.join(h, ".cursor", "mcp.json"))
+      },
+      {
+        id: "hermes",
+        label: "Hermes Agent",
+        setupCommand: "node9 agents add hermes",
+        hookFile: (h) => hermesConfigPath(h),
+        hookFormat: "yaml",
+        hookEvents: [ck("pre_tool_call"), lg("post_tool_call")],
+        labelPad: 14,
+        // 'post_tool_call' is wider than the default
+        present: (h) => exists(hermesConfigPath(h))
+      },
+      {
+        // Plugin-shim agents — protected by a node9-authored plugin/extension file
+        // (no hooks, no MCP). hookFormat is unused for these (shimFile drives it).
+        id: "opencode",
+        label: "OpenCode",
+        setupCommand: "node9 agents add opencode",
+        hookFormat: "flat",
+        hookEvents: [],
+        shimFile: (h) => path16.join(h, ".config", "opencode", "plugins", "node9.js"),
+        present: (h) => exists(path16.join(h, ".config", "opencode")) || exists(path16.join(h, ".config", "opencode", "plugins", "node9.js"))
+      },
+      {
+        id: "pi",
+        label: "Pi",
+        setupCommand: "node9 agents add pi",
+        hookFormat: "flat",
+        hookEvents: [],
+        shimFile: (h) => path16.join(h, ".pi", "agent", "extensions", "node9.js"),
+        present: (h) => exists(path16.join(h, ".pi", "agent")) || exists(path16.join(h, ".pi", "agent", "extensions", "node9.js"))
+      }
+    ];
+  }
+});
+
+// src/pricing/litellm.ts
+import fs15 from "fs";
+import path17 from "path";
+import os14 from "os";
 function normalizeModel(raw) {
   return raw.replace(/-\d{8}$/, "").toLowerCase();
 }
 function readCache() {
   try {
-    const raw = JSON.parse(fs14.readFileSync(CACHE_FILE(), "utf-8"));
+    const raw = JSON.parse(fs15.readFileSync(CACHE_FILE(), "utf-8"));
     if (typeof raw.fetchedAt !== "string" || typeof raw.prices !== "object" || raw.prices === null) {
       return null;
     }
@@ -9723,18 +9964,18 @@ function readCache() {
 function writeCache(prices) {
   try {
     const target = CACHE_FILE();
-    const dir = path16.dirname(target);
-    if (!fs14.existsSync(dir)) fs14.mkdirSync(dir, { recursive: true });
+    const dir = path17.dirname(target);
+    if (!fs15.existsSync(dir)) fs15.mkdirSync(dir, { recursive: true });
     const tmp = target + ".tmp";
     const body = {
       fetchedAt: (/* @__PURE__ */ new Date()).toISOString(),
       prices
     };
-    fs14.writeFileSync(tmp, JSON.stringify(body) + "\n", "utf-8");
-    fs14.renameSync(tmp, target);
+    fs15.writeFileSync(tmp, JSON.stringify(body) + "\n", "utf-8");
+    fs15.renameSync(tmp, target);
   } catch (err2) {
     try {
-      fs14.appendFileSync(
+      fs15.appendFileSync(
         HOOK_DEBUG_LOG,
         `[pricing] cache write failed: ${err2.message}
 `
@@ -9878,7 +10119,7 @@ var init_litellm = __esm({
       "gemini-2.0-flash": [75e-9, 3e-7, 0, 0],
       "gemini-1.5-pro": [125e-8, 5e-6, 0, 0]
     };
-    CACHE_FILE = () => path16.join(os13.homedir(), ".node9", "model-pricing.json");
+    CACHE_FILE = () => path17.join(os14.homedir(), ".node9", "model-pricing.json");
     TTL_MS = 24 * 60 * 60 * 1e3;
     memCache = null;
     memCacheAt = 0;
@@ -9888,11 +10129,11 @@ var init_litellm = __esm({
 });
 
 // src/cost-gemini.ts
-import fs15 from "fs";
-import os14 from "os";
-import path17 from "path";
+import fs16 from "fs";
+import os15 from "os";
+import path18 from "path";
 function geminiTmpDir() {
-  return path17.join(os14.homedir(), ".gemini", "tmp");
+  return path18.join(os15.homedir(), ".gemini", "tmp");
 }
 function geminiPriceFor(model) {
   let tuple = pricingFor(model);
@@ -9907,14 +10148,14 @@ function geminiPriceFor(model) {
 }
 function safeReaddir(dir) {
   try {
-    return fs15.readdirSync(dir);
+    return fs16.readdirSync(dir);
   } catch {
     return [];
   }
 }
 function isDir(p) {
   try {
-    return fs15.statSync(p).isDirectory();
+    return fs16.statSync(p).isDirectory();
   } catch {
     return false;
   }
@@ -9922,11 +10163,11 @@ function isDir(p) {
 function listGeminiSessionFiles(base) {
   const out = [];
   for (const project of safeReaddir(base)) {
-    const chats = path17.join(base, project, "chats");
+    const chats = path18.join(base, project, "chats");
     if (!isDir(chats)) continue;
     for (const f of safeReaddir(chats)) {
       if (f.startsWith("session-") && f.endsWith(".jsonl")) {
-        out.push({ file: path17.join(chats, f), project });
+        out.push({ file: path18.join(chats, f), project });
       }
     }
   }
@@ -9993,7 +10234,7 @@ var init_cost_gemini = __esm({
       id: "gemini",
       available() {
         try {
-          return fs15.existsSync(geminiTmpDir());
+          return fs16.existsSync(geminiTmpDir());
         } catch {
           return false;
         }
@@ -10002,13 +10243,13 @@ var init_cost_gemini = __esm({
         const combined = /* @__PURE__ */ new Map();
         for (const { file, project } of listGeminiSessionFiles(geminiTmpDir())) {
           try {
-            if (sinceMs !== void 0 && fs15.statSync(file).mtimeMs < sinceMs) continue;
+            if (sinceMs !== void 0 && fs16.statSync(file).mtimeMs < sinceMs) continue;
           } catch {
             continue;
           }
           let content;
           try {
-            content = fs15.readFileSync(file, "utf8");
+            content = fs16.readFileSync(file, "utf8");
           } catch {
             continue;
           }
@@ -10033,11 +10274,11 @@ var init_cost_gemini = __esm({
 });
 
 // src/cost-codex.ts
-import fs16 from "fs";
-import os15 from "os";
-import path18 from "path";
+import fs17 from "fs";
+import os16 from "os";
+import path19 from "path";
 function codexSessionsDir() {
-  return path18.join(os15.homedir(), ".codex", "sessions");
+  return path19.join(os16.homedir(), ".codex", "sessions");
 }
 function codexPriceFor(model) {
   return pricingFor(model) ?? CODEX_FALLBACK;
@@ -10050,16 +10291,16 @@ function codexSessionCost(model, tokens) {
 function listCodexSessionFiles(base) {
   const out = [];
   for (const y of safeReaddir2(base)) {
-    const yp = path18.join(base, y);
+    const yp = path19.join(base, y);
     if (!isDir2(yp)) continue;
     for (const m of safeReaddir2(yp)) {
-      const mp = path18.join(yp, m);
+      const mp = path19.join(yp, m);
       if (!isDir2(mp)) continue;
       for (const d of safeReaddir2(mp)) {
-        const dp = path18.join(mp, d);
+        const dp = path19.join(mp, d);
         if (!isDir2(dp)) continue;
         for (const f of safeReaddir2(dp)) {
-          if (f.endsWith(".jsonl")) out.push(path18.join(dp, f));
+          if (f.endsWith(".jsonl")) out.push(path19.join(dp, f));
         }
       }
     }
@@ -10068,14 +10309,14 @@ function listCodexSessionFiles(base) {
 }
 function safeReaddir2(dir) {
   try {
-    return fs16.readdirSync(dir);
+    return fs17.readdirSync(dir);
   } catch {
     return [];
   }
 }
 function isDir2(p) {
   try {
-    return fs16.statSync(p).isDirectory();
+    return fs17.statSync(p).isDirectory();
   } catch {
     return false;
   }
@@ -10145,7 +10386,7 @@ var init_cost_codex = __esm({
       id: "codex",
       available() {
         try {
-          return fs16.existsSync(codexSessionsDir());
+          return fs17.existsSync(codexSessionsDir());
         } catch {
           return false;
         }
@@ -10155,13 +10396,13 @@ var init_cost_codex = __esm({
         const combined = /* @__PURE__ */ new Map();
         for (const file of listCodexSessionFiles(base)) {
           try {
-            if (sinceMs !== void 0 && fs16.statSync(file).mtimeMs < sinceMs) continue;
+            if (sinceMs !== void 0 && fs17.statSync(file).mtimeMs < sinceMs) continue;
           } catch {
             continue;
           }
           let content;
           try {
-            content = fs16.readFileSync(file, "utf8");
+            content = fs17.readFileSync(file, "utf8");
           } catch {
             continue;
           }
@@ -10467,85 +10708,85 @@ var init_scan_summary = __esm({
 
 // src/cli/commands/blast.ts
 import chalk2 from "chalk";
-import fs17 from "fs";
-import path19 from "path";
-import os16 from "os";
+import fs18 from "fs";
+import path20 from "path";
+import os17 from "os";
 function buildSensitivePaths(home, cwd) {
   return [
     {
-      full: path19.join(home, ".ssh", "id_rsa"),
+      full: path20.join(home, ".ssh", "id_rsa"),
       label: "~/.ssh/id_rsa",
       description: "RSA private key \u2014 grants SSH access to your servers",
       score: 20
     },
     {
-      full: path19.join(home, ".ssh", "id_ed25519"),
+      full: path20.join(home, ".ssh", "id_ed25519"),
       label: "~/.ssh/id_ed25519",
       description: "Ed25519 private key \u2014 grants SSH access to your servers",
       score: 20
     },
     {
-      full: path19.join(home, ".ssh", "id_ecdsa"),
+      full: path20.join(home, ".ssh", "id_ecdsa"),
       label: "~/.ssh/id_ecdsa",
       description: "ECDSA private key \u2014 grants SSH access to your servers",
       score: 20
     },
     {
-      full: path19.join(home, ".aws", "credentials"),
+      full: path20.join(home, ".aws", "credentials"),
       label: "~/.aws/credentials",
       description: "AWS access keys \u2014 full cloud account access",
       score: 20
     },
     {
-      full: path19.join(home, ".aws", "config"),
+      full: path20.join(home, ".aws", "config"),
       label: "~/.aws/config",
       description: "AWS configuration \u2014 account and region settings",
       score: 5
     },
     {
-      full: path19.join(home, ".config", "gcloud", "credentials.db"),
+      full: path20.join(home, ".config", "gcloud", "credentials.db"),
       label: "~/.config/gcloud/credentials.db",
       description: "Google Cloud credentials",
       score: 15
     },
     {
-      full: path19.join(home, ".docker", "config.json"),
+      full: path20.join(home, ".docker", "config.json"),
       label: "~/.docker/config.json",
       description: "Docker registry auth tokens",
       score: 10
     },
     {
-      full: path19.join(home, ".netrc"),
+      full: path20.join(home, ".netrc"),
       label: "~/.netrc",
       description: "FTP/HTTP credentials in plain text",
       score: 15
     },
     {
-      full: path19.join(home, ".npmrc"),
+      full: path20.join(home, ".npmrc"),
       label: "~/.npmrc",
       description: "npm auth token \u2014 can publish packages as you",
       score: 10
     },
     {
-      full: path19.join(home, ".node9", "credentials.json"),
+      full: path20.join(home, ".node9", "credentials.json"),
       label: "~/.node9/credentials.json",
       description: "Node9 cloud API key",
       score: 10
     },
     {
-      full: path19.join(cwd, ".env"),
+      full: path20.join(cwd, ".env"),
       label: ".env  (current folder)",
       description: "App secrets \u2014 database passwords, API keys",
       score: 20
     },
     {
-      full: path19.join(cwd, ".env.local"),
+      full: path20.join(cwd, ".env.local"),
       label: ".env.local  (current folder)",
       description: "Local overrides \u2014 often contains real credentials",
       score: 15
     },
     {
-      full: path19.join(cwd, ".env.production"),
+      full: path20.join(cwd, ".env.production"),
       label: ".env.production  (current folder)",
       description: "Production secrets",
       score: 20
@@ -10554,7 +10795,7 @@ function buildSensitivePaths(home, cwd) {
 }
 function isReadable(filePath) {
   try {
-    fs17.accessSync(filePath, fs17.constants.R_OK);
+    fs18.accessSync(filePath, fs18.constants.R_OK);
     return true;
   } catch {
     return false;
@@ -10567,13 +10808,13 @@ function scoreLabel(score) {
   return chalk2.red.bold(`${score}/100  Critical`);
 }
 function runBlast() {
-  const home = os16.homedir();
+  const home = os17.homedir();
   const cwd = process.cwd();
   const paths = buildSensitivePaths(home, cwd);
   let scoreDeduction = 0;
   const reachable = [];
   for (const p of paths) {
-    if (fs17.existsSync(p.full) && isReadable(p.full)) {
+    if (fs18.existsSync(p.full) && isReadable(p.full)) {
       reachable.push(p);
       scoreDeduction += p.score;
     }
@@ -10591,7 +10832,7 @@ function runBlast() {
 }
 function registerBlastCommand(program2) {
   program2.command("blast").description("Map what an AI agent can currently reach on this machine").action(() => {
-    const home = os16.homedir();
+    const home = os17.homedir();
     const cwd = process.cwd();
     const { reachable, envFindings, score } = runBlast();
     console.log("");
@@ -10767,17 +11008,17 @@ var init_scan_json = __esm({
 });
 
 // src/cli/render/scan-history.ts
-import fs18 from "fs";
-import path20 from "path";
-import os17 from "os";
+import fs19 from "fs";
+import path21 from "path";
+import os18 from "os";
 function defaultHistoryPath() {
-  return path20.join(os17.homedir(), ".node9", "scan-history.json");
+  return path21.join(os18.homedir(), ".node9", "scan-history.json");
 }
 function readPreviousScan(opts = {}) {
   const filePath = opts.path ?? defaultHistoryPath();
   try {
-    if (!fs18.existsSync(filePath)) return null;
-    const raw = fs18.readFileSync(filePath, "utf8");
+    if (!fs19.existsSync(filePath)) return null;
+    const raw = fs19.readFileSync(filePath, "utf8");
     const parsed = JSON.parse(raw);
     if (!Array.isArray(parsed) || parsed.length === 0) return null;
     const last = parsed[parsed.length - 1];
@@ -10791,11 +11032,11 @@ function appendScanHistory(record, opts = {}) {
   const filePath = opts.path ?? defaultHistoryPath();
   const cap = opts.cap ?? SCAN_HISTORY_CAP;
   try {
-    fs18.mkdirSync(path20.dirname(filePath), { recursive: true });
+    fs19.mkdirSync(path21.dirname(filePath), { recursive: true });
     let history = [];
-    if (fs18.existsSync(filePath)) {
+    if (fs19.existsSync(filePath)) {
       try {
-        const parsed = JSON.parse(fs18.readFileSync(filePath, "utf8"));
+        const parsed = JSON.parse(fs19.readFileSync(filePath, "utf8"));
         if (Array.isArray(parsed)) {
           history = parsed.filter(isValidRecord);
         }
@@ -10806,7 +11047,7 @@ function appendScanHistory(record, opts = {}) {
     if (history.length > cap) {
       history = history.slice(history.length - cap);
     }
-    fs18.writeFileSync(filePath, JSON.stringify(history, null, 2));
+    fs19.writeFileSync(filePath, JSON.stringify(history, null, 2));
   } catch (err2) {
     process.stderr.write(
       `[node9] Warning: could not write scan-history.json: ${err2.message}
@@ -10837,15 +11078,15 @@ var init_scan_history = __esm({
 });
 
 // src/cost-copilot.ts
-import fs19 from "fs";
-import os18 from "os";
-import path21 from "path";
+import fs20 from "fs";
+import os19 from "os";
+import path22 from "path";
 function copilotSessionsDir() {
-  return path21.join(os18.homedir(), ".copilot", "session-state");
+  return path22.join(os19.homedir(), ".copilot", "session-state");
 }
 function safeReaddir3(dir) {
   try {
-    return fs19.readdirSync(dir);
+    return fs20.readdirSync(dir);
   } catch {
     return [];
   }
@@ -10921,7 +11162,7 @@ var init_cost_copilot = __esm({
       id: "copilot",
       available() {
         try {
-          return fs19.existsSync(copilotSessionsDir());
+          return fs20.existsSync(copilotSessionsDir());
         } catch {
           return false;
         }
@@ -10930,15 +11171,15 @@ var init_cost_copilot = __esm({
         const base = copilotSessionsDir();
         const combined = /* @__PURE__ */ new Map();
         for (const sid of safeReaddir3(base)) {
-          const file = path21.join(base, sid, "events.jsonl");
+          const file = path22.join(base, sid, "events.jsonl");
           try {
-            if (sinceMs !== void 0 && fs19.statSync(file).mtimeMs < sinceMs) continue;
+            if (sinceMs !== void 0 && fs20.statSync(file).mtimeMs < sinceMs) continue;
           } catch {
             continue;
           }
           let content;
           try {
-            content = fs19.readFileSync(file, "utf8");
+            content = fs20.readFileSync(file, "utf8");
           } catch {
             continue;
           }
@@ -10963,17 +11204,17 @@ var init_cost_copilot = __esm({
 });
 
 // src/costSync.ts
-import fs20 from "fs";
-import path22 from "path";
-import os19 from "os";
+import fs21 from "fs";
+import path23 from "path";
+import os20 from "os";
 function decodeProjectDirName(dirName) {
   return dirName.replace(/-/g, "/");
 }
 function parseJSONLFile(filePath, fallbackWorkingDir) {
-  const runId = path22.basename(filePath, ".jsonl");
+  const runId = path23.basename(filePath, ".jsonl");
   let content;
   try {
-    content = fs20.readFileSync(filePath, "utf8");
+    content = fs21.readFileSync(filePath, "utf8");
   } catch {
     return /* @__PURE__ */ new Map();
   }
@@ -11073,7 +11314,7 @@ async function postCostBatches(apiUrl, apiKey, machineId, entries) {
         signal: AbortSignal.timeout(15e3)
       });
       if (!res.ok) {
-        fs20.appendFileSync(HOOK_DEBUG_LOG, `[cost-sync] HTTP ${res.status}
+        fs21.appendFileSync(HOOK_DEBUG_LOG, `[cost-sync] HTTP ${res.status}
 `);
       } else {
         let stored;
@@ -11083,7 +11324,7 @@ async function postCostBatches(apiUrl, apiKey, machineId, entries) {
         } catch {
         }
         if (typeof stored === "number" && stored < batch.length) {
-          fs20.appendFileSync(
+          fs21.appendFileSync(
             HOOK_DEBUG_LOG,
             `[cost-sync] dropped ${batch.length - stored} of ${batch.length} rows
 `
@@ -11091,7 +11332,7 @@ async function postCostBatches(apiUrl, apiKey, machineId, entries) {
         }
       }
     } catch (err2) {
-      fs20.appendFileSync(HOOK_DEBUG_LOG, `[cost-sync] ${err2.message}
+      fs21.appendFileSync(HOOK_DEBUG_LOG, `[cost-sync] ${err2.message}
 `);
     }
   }
@@ -11104,10 +11345,10 @@ async function syncCost() {
   if (entries.length === 0) return;
   let username = "unknown";
   try {
-    username = os19.userInfo().username;
+    username = os20.userInfo().username;
   } catch {
   }
-  const machineId = `${os19.hostname()}:${username}`;
+  const machineId = `${os20.hostname()}:${username}`;
   await postCostBatches(creds.apiUrl, creds.apiKey, machineId, entries);
 }
 function startCostSync() {
@@ -11133,37 +11374,37 @@ var init_costSync = __esm({
     claudeSource = {
       id: "claude",
       available() {
-        return fs20.existsSync(path22.join(os19.homedir(), ".claude", "projects"));
+        return fs21.existsSync(path23.join(os20.homedir(), ".claude", "projects"));
       },
       collect(sinceMs) {
-        const projectsDir = path22.join(os19.homedir(), ".claude", "projects");
-        if (!fs20.existsSync(projectsDir)) return [];
+        const projectsDir = path23.join(os20.homedir(), ".claude", "projects");
+        if (!fs21.existsSync(projectsDir)) return [];
         const combined = /* @__PURE__ */ new Map();
         let dirs;
         try {
-          dirs = fs20.readdirSync(projectsDir);
+          dirs = fs21.readdirSync(projectsDir);
         } catch {
           return [];
         }
         for (const dir of dirs) {
-          const dirPath = path22.join(projectsDir, dir);
+          const dirPath = path23.join(projectsDir, dir);
           try {
-            if (!fs20.statSync(dirPath).isDirectory()) continue;
+            if (!fs21.statSync(dirPath).isDirectory()) continue;
           } catch {
             continue;
           }
           let files;
           try {
-            files = fs20.readdirSync(dirPath).filter((f) => f.endsWith(".jsonl"));
+            files = fs21.readdirSync(dirPath).filter((f) => f.endsWith(".jsonl"));
           } catch {
             continue;
           }
           const fallbackWorkingDir = decodeProjectDirName(dir);
           for (const file of files) {
-            const filePath = path22.join(dirPath, file);
+            const filePath = path23.join(dirPath, file);
             if (sinceMs !== void 0) {
               try {
-                if (fs20.statSync(filePath).mtimeMs < sinceMs) continue;
+                if (fs21.statSync(filePath).mtimeMs < sinceMs) continue;
               } catch {
                 continue;
               }
@@ -11203,9 +11444,9 @@ __export(scan_watermark_exports, {
   tickForensicBroadcast: () => tickForensicBroadcast,
   tickScanWatcher: () => tickScanWatcher
 });
-import fs21 from "fs";
-import os20 from "os";
-import path23 from "path";
+import fs22 from "fs";
+import os21 from "os";
+import path24 from "path";
 import readline from "readline";
 function freshWatermark() {
   return {
@@ -11218,7 +11459,7 @@ function freshWatermark() {
 function loadWatermark() {
   let raw;
   try {
-    raw = fs21.readFileSync(WATERMARK_FILE(), "utf-8");
+    raw = fs22.readFileSync(WATERMARK_FILE(), "utf-8");
   } catch {
     return { status: "fresh", wm: freshWatermark() };
   }
@@ -11270,28 +11511,28 @@ function loadWatermark() {
 function saveWatermark(wm) {
   if (wm.schemaVersion > WATERMARK_SCHEMA_VERSION) return;
   const target = WATERMARK_FILE();
-  const dir = path23.dirname(target);
-  if (!fs21.existsSync(dir)) fs21.mkdirSync(dir, { recursive: true });
+  const dir = path24.dirname(target);
+  if (!fs22.existsSync(dir)) fs22.mkdirSync(dir, { recursive: true });
   const tmp = target + ".tmp";
-  fs21.writeFileSync(tmp, JSON.stringify(wm, null, 2) + "\n", "utf-8");
-  fs21.renameSync(tmp, target);
+  fs22.writeFileSync(tmp, JSON.stringify(wm, null, 2) + "\n", "utf-8");
+  fs22.renameSync(tmp, target);
 }
 function listJsonlFiles() {
   const root = PROJECTS_DIR();
-  if (!fs21.existsSync(root)) return [];
+  if (!fs22.existsSync(root)) return [];
   const out = [];
-  for (const entry of fs21.readdirSync(root, { withFileTypes: true })) {
+  for (const entry of fs22.readdirSync(root, { withFileTypes: true })) {
     if (!entry.isDirectory()) continue;
-    const projectDir = path23.join(root, entry.name);
+    const projectDir = path24.join(root, entry.name);
     let inner;
     try {
-      inner = fs21.readdirSync(projectDir, { withFileTypes: true });
+      inner = fs22.readdirSync(projectDir, { withFileTypes: true });
     } catch {
       continue;
     }
     for (const file of inner) {
       if (file.isFile() && file.name.endsWith(".jsonl")) {
-        out.push(path23.join(projectDir, file.name));
+        out.push(path24.join(projectDir, file.name));
       }
     }
   }
@@ -11299,7 +11540,7 @@ function listJsonlFiles() {
 }
 function fileSize(p) {
   try {
-    return fs21.statSync(p).size;
+    return fs22.statSync(p).size;
   } catch {
     return 0;
   }
@@ -11307,7 +11548,7 @@ function fileSize(p) {
 async function scanDelta(filePath, fromByte, onLine) {
   const size = fileSize(filePath);
   if (size <= fromByte) return fromByte;
-  const stream = fs21.createReadStream(filePath, {
+  const stream = fs22.createReadStream(filePath, {
     start: fromByte,
     end: size - 1,
     highWaterMark: 64 * 1024
@@ -11419,7 +11660,7 @@ async function tickForensicBroadcast(offsets) {
       continue;
     }
     if (size <= offset) continue;
-    const sessionId = path23.basename(file, ".jsonl");
+    const sessionId = path24.basename(file, ".jsonl");
     const newOffset = await scanDelta(file, offset, (obj, lineIndex) => {
       out.push(...extractFindingsFromLine(obj, sessionId, lineIndex));
     });
@@ -11478,7 +11719,7 @@ function emptyTick(uploadAs) {
 function readRawWatermarkPreservingOffsets() {
   let raw;
   try {
-    raw = fs21.readFileSync(WATERMARK_FILE(), "utf-8");
+    raw = fs22.readFileSync(WATERMARK_FILE(), "utf-8");
   } catch {
     return null;
   }
@@ -11512,13 +11753,13 @@ async function runActualTick(wm) {
     if (!known) {
       let mtimeMs = 0;
       try {
-        mtimeMs = fs21.statSync(filePath).mtime.getTime();
+        mtimeMs = fs22.statSync(filePath).mtime.getTime();
       } catch {
         continue;
       }
       if (mtimeMs >= watermarkCreatedAt) {
         filesNew++;
-        const sessionId2 = path23.basename(filePath, ".jsonl");
+        const sessionId2 = path24.basename(filePath, ".jsonl");
         const newScannedTo2 = await scanDelta(filePath, 0, (obj, lineIndex) => {
           totalToolCalls++;
           toolCallsBySession[sessionId2] = (toolCallsBySession[sessionId2] ?? 0) + 1;
@@ -11536,7 +11777,7 @@ async function runActualTick(wm) {
       filesSkipped++;
       continue;
     }
-    const sessionId = path23.basename(filePath, ".jsonl");
+    const sessionId = path24.basename(filePath, ".jsonl");
     const newScannedTo = await scanDelta(filePath, known.scannedTo, (obj, lineIndex) => {
       totalToolCalls++;
       toolCallsBySession[sessionId] = (toolCallsBySession[sessionId] ?? 0) + 1;
@@ -11564,8 +11805,8 @@ var init_scan_watermark = __esm({
     "use strict";
     init_dlp();
     init_dist();
-    PROJECTS_DIR = () => path23.join(os20.homedir(), ".claude", "projects");
-    WATERMARK_FILE = () => path23.join(os20.homedir(), ".node9", "scan-watermark.json");
+    PROJECTS_DIR = () => path24.join(os21.homedir(), ".claude", "projects");
+    WATERMARK_FILE = () => path24.join(os21.homedir(), ".node9", "scan-watermark.json");
     MAX_LINE_BYTES = 2 * 1024 * 1024;
     WATERMARK_SCHEMA_VERSION = 2;
     LONG_OUTPUT_THRESHOLD_BYTES2 = LONG_OUTPUT_THRESHOLD_BYTES;
@@ -11581,10 +11822,10 @@ __export(scan_upload_history_exports, {
   parseSinceCutoff: () => parseSinceCutoff,
   runUploadHistory: () => runUploadHistory
 });
-import fs22 from "fs";
+import fs23 from "fs";
 import https from "https";
-import os21 from "os";
-import path24 from "path";
+import os22 from "os";
+import path25 from "path";
 import chalk4 from "chalk";
 function emptySignals2() {
   return {
@@ -11619,40 +11860,40 @@ function parseSinceCutoff(raw, now = /* @__PURE__ */ new Date()) {
   return now.getTime() - 90 * 864e5;
 }
 function* iterateJsonlFiles(cutoffMs) {
-  const projectsDir = path24.join(os21.homedir(), ".claude", "projects");
+  const projectsDir = path25.join(os22.homedir(), ".claude", "projects");
   let dirs;
   try {
-    dirs = fs22.readdirSync(projectsDir);
+    dirs = fs23.readdirSync(projectsDir);
   } catch {
     return;
   }
   for (const dir of dirs) {
-    const dirPath = path24.join(projectsDir, dir);
+    const dirPath = path25.join(projectsDir, dir);
     let stats;
     try {
-      stats = fs22.statSync(dirPath);
+      stats = fs23.statSync(dirPath);
     } catch {
       continue;
     }
     if (!stats.isDirectory()) continue;
     let files;
     try {
-      files = fs22.readdirSync(dirPath).filter((f) => f.endsWith(".jsonl"));
+      files = fs23.readdirSync(dirPath).filter((f) => f.endsWith(".jsonl"));
     } catch {
       continue;
     }
     for (const file of files) {
-      const filePath = path24.join(dirPath, file);
+      const filePath = path25.join(dirPath, file);
       let mtime = 0;
       try {
-        mtime = fs22.statSync(filePath).mtimeMs;
+        mtime = fs23.statSync(filePath).mtimeMs;
       } catch {
         continue;
       }
       if (mtime < cutoffMs) continue;
       yield {
         filePath,
-        sessionId: path24.basename(file, ".jsonl"),
+        sessionId: path25.basename(file, ".jsonl"),
         projectDir: dir
       };
     }
@@ -11720,7 +11961,7 @@ async function runUploadHistory(opts) {
     filesScanned++;
     let content;
     try {
-      content = fs22.readFileSync(filePath, "utf8");
+      content = fs23.readFileSync(filePath, "utf8");
     } catch {
       continue;
     }
@@ -11794,10 +12035,10 @@ async function runUploadHistory(opts) {
     const costUrl = creds.apiUrl.endsWith("/policies/sync") ? creds.apiUrl.replace(/\/policies\/sync$/, "/cost-sync") : `${creds.apiUrl.replace(/\/$/, "")}/cost-sync`;
     let username = "unknown";
     try {
-      username = os21.userInfo().username;
+      username = os22.userInfo().username;
     } catch {
     }
-    const machineId = `${os21.hostname()}:${username}`;
+    const machineId = `${os22.hostname()}:${username}`;
     await postJson(costUrl, creds.apiKey, {
       machineId,
       entries: dailyEntries
@@ -11871,9 +12112,9 @@ var init_scan_upload_history = __esm({
 
 // src/cli/commands/scan.ts
 import chalk5 from "chalk";
-import fs23 from "fs";
-import path25 from "path";
-import os22 from "os";
+import fs24 from "fs";
+import path26 from "path";
+import os23 from "os";
 import stringWidth2 from "string-width";
 function claudeModelPrice(model) {
   const t = pricingFor(model);
@@ -12096,14 +12337,14 @@ function buildRuleSources() {
 }
 function countScanFiles() {
   let total = 0;
-  const claudeDir = path25.join(os22.homedir(), ".claude", "projects");
-  if (fs23.existsSync(claudeDir)) {
+  const claudeDir = path26.join(os23.homedir(), ".claude", "projects");
+  if (fs24.existsSync(claudeDir)) {
     try {
-      for (const proj of fs23.readdirSync(claudeDir)) {
-        const p = path25.join(claudeDir, proj);
+      for (const proj of fs24.readdirSync(claudeDir)) {
+        const p = path26.join(claudeDir, proj);
         try {
-          if (!fs23.statSync(p).isDirectory()) continue;
-          total += fs23.readdirSync(p).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-")).length;
+          if (!fs24.statSync(p).isDirectory()) continue;
+          total += fs24.readdirSync(p).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-")).length;
         } catch {
           continue;
         }
@@ -12111,17 +12352,17 @@ function countScanFiles() {
     } catch {
     }
   }
-  const geminiDir = path25.join(os22.homedir(), ".gemini", "tmp");
-  if (fs23.existsSync(geminiDir)) {
+  const geminiDir = path26.join(os23.homedir(), ".gemini", "tmp");
+  if (fs24.existsSync(geminiDir)) {
     try {
-      for (const slug2 of fs23.readdirSync(geminiDir)) {
-        const p = path25.join(geminiDir, slug2);
+      for (const slug2 of fs24.readdirSync(geminiDir)) {
+        const p = path26.join(geminiDir, slug2);
         try {
-          if (!fs23.statSync(p).isDirectory()) continue;
-          const chatsDir = path25.join(p, "chats");
-          if (fs23.existsSync(chatsDir)) {
+          if (!fs24.statSync(p).isDirectory()) continue;
+          const chatsDir = path26.join(p, "chats");
+          if (fs24.existsSync(chatsDir)) {
             try {
-              total += fs23.readdirSync(chatsDir).filter((f) => f.endsWith(".json")).length;
+              total += fs24.readdirSync(chatsDir).filter((f) => f.endsWith(".json")).length;
             } catch {
             }
           }
@@ -12133,15 +12374,15 @@ function countScanFiles() {
     }
   }
   for (const surface of ["antigravity-cli", "antigravity-ide"]) {
-    const brainDir = path25.join(os22.homedir(), ".gemini", surface, "brain");
-    if (!fs23.existsSync(brainDir)) continue;
+    const brainDir = path26.join(os23.homedir(), ".gemini", surface, "brain");
+    if (!fs24.existsSync(brainDir)) continue;
     try {
-      for (const conv of fs23.readdirSync(brainDir)) {
-        const convPath = path25.join(brainDir, conv);
+      for (const conv of fs24.readdirSync(brainDir)) {
+        const convPath = path26.join(brainDir, conv);
         try {
-          if (!fs23.statSync(convPath).isDirectory()) continue;
-          const logsDir = path25.join(convPath, ".system_generated", "logs");
-          if (fs23.existsSync(path25.join(logsDir, "transcript_full.jsonl")) || fs23.existsSync(path25.join(logsDir, "transcript.jsonl"))) {
+          if (!fs24.statSync(convPath).isDirectory()) continue;
+          const logsDir = path26.join(convPath, ".system_generated", "logs");
+          if (fs24.existsSync(path26.join(logsDir, "transcript_full.jsonl")) || fs24.existsSync(path26.join(logsDir, "transcript.jsonl"))) {
             total += 1;
           }
         } catch {
@@ -12151,31 +12392,31 @@ function countScanFiles() {
     } catch {
     }
   }
-  const copilotDir = path25.join(os22.homedir(), ".copilot", "session-state");
-  if (fs23.existsSync(copilotDir)) {
+  const copilotDir = path26.join(os23.homedir(), ".copilot", "session-state");
+  if (fs24.existsSync(copilotDir)) {
     try {
-      for (const sid of fs23.readdirSync(copilotDir)) {
-        if (fs23.existsSync(path25.join(copilotDir, sid, "events.jsonl"))) total += 1;
+      for (const sid of fs24.readdirSync(copilotDir)) {
+        if (fs24.existsSync(path26.join(copilotDir, sid, "events.jsonl"))) total += 1;
       }
     } catch {
     }
   }
-  const codexDir = path25.join(os22.homedir(), ".codex", "sessions");
-  if (fs23.existsSync(codexDir)) {
+  const codexDir = path26.join(os23.homedir(), ".codex", "sessions");
+  if (fs24.existsSync(codexDir)) {
     try {
-      for (const year of fs23.readdirSync(codexDir)) {
-        const yp = path25.join(codexDir, year);
+      for (const year of fs24.readdirSync(codexDir)) {
+        const yp = path26.join(codexDir, year);
         try {
-          if (!fs23.statSync(yp).isDirectory()) continue;
-          for (const month of fs23.readdirSync(yp)) {
-            const mp = path25.join(yp, month);
+          if (!fs24.statSync(yp).isDirectory()) continue;
+          for (const month of fs24.readdirSync(yp)) {
+            const mp = path26.join(yp, month);
             try {
-              if (!fs23.statSync(mp).isDirectory()) continue;
-              for (const day of fs23.readdirSync(mp)) {
-                const dp = path25.join(mp, day);
+              if (!fs24.statSync(mp).isDirectory()) continue;
+              for (const day of fs24.readdirSync(mp)) {
+                const dp = path26.join(mp, day);
                 try {
-                  if (!fs23.statSync(dp).isDirectory()) continue;
-                  total += fs23.readdirSync(dp).filter((f) => f.endsWith(".jsonl")).length;
+                  if (!fs24.statSync(dp).isDirectory()) continue;
+                  total += fs24.readdirSync(dp).filter((f) => f.endsWith(".jsonl")).length;
                 } catch {
                   continue;
                 }
@@ -12211,7 +12452,7 @@ function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, re
   const sessionId = file.replace(/\.jsonl$/, "");
   let raw;
   try {
-    raw = fs23.readFileSync(path25.join(projPath, file), "utf-8");
+    raw = fs24.readFileSync(path26.join(projPath, file), "utf-8");
   } catch {
     return;
   }
@@ -12263,7 +12504,7 @@ function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, re
           if (block.type !== "tool_result") continue;
           const filePath = block.tool_use_id ? toolUseFilePaths.get(block.tool_use_id) : void 0;
           if (filePath) {
-            const ext = path25.extname(filePath).toLowerCase();
+            const ext = path26.extname(filePath).toLowerCase();
             if (CODE_EXTENSIONS.has(ext)) continue;
           }
           const resultText = typeof block.content === "string" ? block.content : Array.isArray(block.content) ? block.content.map((c) => c.text ?? "").join("\n") : null;
@@ -12320,7 +12561,7 @@ function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, re
       const rawCmd = String(input.command ?? "").trimStart();
       if (/^node9\s+(scan|explain|report|tail|dlp|status|sessions|audit)\b/.test(rawCmd)) continue;
       const inputFilePath = typeof input.file_path === "string" ? input.file_path : "";
-      const inputFileExt = inputFilePath ? path25.extname(inputFilePath).toLowerCase() : "";
+      const inputFileExt = inputFilePath ? path26.extname(inputFilePath).toLowerCase() : "";
       if (CODE_EXTENSIONS.has(inputFileExt)) continue;
       const dlpMatch = scanArgs(input);
       if (dlpMatch) {
@@ -12417,19 +12658,19 @@ function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, re
   }
 }
 function processClaudeProject(proj, projectsDir, ruleSources, startDate, result, dedup, onProgress, onLine) {
-  const projPath = path25.join(projectsDir, proj);
+  const projPath = path26.join(projectsDir, proj);
   try {
-    if (!fs23.statSync(projPath).isDirectory()) return;
+    if (!fs24.statSync(projPath).isDirectory()) return;
   } catch {
     return;
   }
-  const projLabel = stripTerminalEscapes(decodeURIComponent(proj).replace(os22.homedir(), "~")).slice(
+  const projLabel = stripTerminalEscapes(decodeURIComponent(proj).replace(os23.homedir(), "~")).slice(
     0,
     40
   );
   let files;
   try {
-    files = fs23.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
+    files = fs24.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
   } catch {
     return;
   }
@@ -12463,12 +12704,12 @@ function emptyClaudeScan() {
   };
 }
 function scanClaudeHistory(startDate, onProgress, onLine) {
-  const projectsDir = path25.join(os22.homedir(), ".claude", "projects");
+  const projectsDir = path26.join(os23.homedir(), ".claude", "projects");
   const result = emptyClaudeScan();
-  if (!fs23.existsSync(projectsDir)) return result;
+  if (!fs24.existsSync(projectsDir)) return result;
   let projDirs;
   try {
-    projDirs = fs23.readdirSync(projectsDir);
+    projDirs = fs24.readdirSync(projectsDir);
   } catch {
     return result;
   }
@@ -12489,7 +12730,7 @@ function scanClaudeHistory(startDate, onProgress, onLine) {
   return result;
 }
 function scanGeminiHistory(startDate, onProgress, onLine) {
-  const tmpDir = path25.join(os22.homedir(), ".gemini", "tmp");
+  const tmpDir = path26.join(os23.homedir(), ".gemini", "tmp");
   const result = {
     filesScanned: 0,
     sessions: 0,
@@ -12504,33 +12745,33 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
     sessionsWithEarlySecrets: 0
   };
   const dedup = emptyScanDedup();
-  if (!fs23.existsSync(tmpDir)) return result;
+  if (!fs24.existsSync(tmpDir)) return result;
   let slugDirs;
   try {
-    slugDirs = fs23.readdirSync(tmpDir);
+    slugDirs = fs24.readdirSync(tmpDir);
   } catch {
     return result;
   }
   const ruleSources = buildRuleSources();
   for (const slug2 of slugDirs) {
-    const slugPath = path25.join(tmpDir, slug2);
+    const slugPath = path26.join(tmpDir, slug2);
     try {
-      if (!fs23.statSync(slugPath).isDirectory()) continue;
+      if (!fs24.statSync(slugPath).isDirectory()) continue;
     } catch {
       continue;
     }
     let projLabel = stripTerminalEscapes(slug2).slice(0, 40);
     try {
       projLabel = stripTerminalEscapes(
-        fs23.readFileSync(path25.join(slugPath, ".project_root"), "utf-8").trim()
-      ).replace(os22.homedir(), "~").slice(0, 40);
+        fs24.readFileSync(path26.join(slugPath, ".project_root"), "utf-8").trim()
+      ).replace(os23.homedir(), "~").slice(0, 40);
     } catch {
     }
-    const chatsDir = path25.join(slugPath, "chats");
-    if (!fs23.existsSync(chatsDir)) continue;
+    const chatsDir = path26.join(slugPath, "chats");
+    if (!fs24.existsSync(chatsDir)) continue;
     let chatFiles;
     try {
-      chatFiles = fs23.readdirSync(chatsDir).filter((f) => f.endsWith(".json") || f.endsWith(".jsonl")).sort((a, b) => Number(b.endsWith(".jsonl")) - Number(a.endsWith(".jsonl")));
+      chatFiles = fs24.readdirSync(chatsDir).filter((f) => f.endsWith(".json") || f.endsWith(".jsonl")).sort((a, b) => Number(b.endsWith(".jsonl")) - Number(a.endsWith(".jsonl")));
     } catch {
       continue;
     }
@@ -12543,7 +12784,7 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
       onProgress?.(result.filesScanned);
       let raw;
       try {
-        raw = fs23.readFileSync(path25.join(chatsDir, chatFile), "utf-8");
+        raw = fs24.readFileSync(path26.join(chatsDir, chatFile), "utf-8");
       } catch {
         continue;
       }
@@ -12716,13 +12957,13 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
   return result;
 }
 function antigravityBrainDirs() {
-  return ["antigravity-cli", "antigravity-ide"].map((surface) => path25.join(os22.homedir(), ".gemini", surface, "brain")).filter((p) => fs23.existsSync(p));
+  return ["antigravity-cli", "antigravity-ide"].map((surface) => path26.join(os23.homedir(), ".gemini", surface, "brain")).filter((p) => fs24.existsSync(p));
 }
 function antigravityTranscriptPath(convPath) {
-  const logsDir = path25.join(convPath, ".system_generated", "logs");
+  const logsDir = path26.join(convPath, ".system_generated", "logs");
   for (const name of ["transcript_full.jsonl", "transcript.jsonl"]) {
-    const p = path25.join(logsDir, name);
-    if (fs23.existsSync(p)) return p;
+    const p = path26.join(logsDir, name);
+    if (fs24.existsSync(p)) return p;
   }
   return null;
 }
@@ -12748,14 +12989,14 @@ function scanAntigravityHistory(startDate, onProgress, onLine) {
   for (const brainDir of brainDirs) {
     let convDirs;
     try {
-      convDirs = fs23.readdirSync(brainDir);
+      convDirs = fs24.readdirSync(brainDir);
     } catch {
       continue;
     }
     for (const conv of convDirs) {
-      const convPath = path25.join(brainDir, conv);
+      const convPath = path26.join(brainDir, conv);
       try {
-        if (!fs23.statSync(convPath).isDirectory()) continue;
+        if (!fs24.statSync(convPath).isDirectory()) continue;
       } catch {
         continue;
       }
@@ -12765,7 +13006,7 @@ function scanAntigravityHistory(startDate, onProgress, onLine) {
       onProgress?.(result.filesScanned);
       let raw;
       try {
-        raw = fs23.readFileSync(transcriptFile, "utf-8");
+        raw = fs24.readFileSync(transcriptFile, "utf-8");
       } catch {
         continue;
       }
@@ -12822,7 +13063,7 @@ function scanAntigravityHistory(startDate, onProgress, onLine) {
             result.bashCalls++;
             const cwd = String(input.cwd ?? "");
             if (cwd && projLabel === conv.slice(0, 8)) {
-              projLabel = stripTerminalEscapes(cwd).replace(os22.homedir(), "~").slice(0, 40);
+              projLabel = stripTerminalEscapes(cwd).replace(os23.homedir(), "~").slice(0, 40);
             }
           }
           const rawCmd = String(input.command ?? "").trimStart();
@@ -12922,7 +13163,7 @@ function scanAntigravityHistory(startDate, onProgress, onLine) {
   return result;
 }
 function scanCopilotHistory(startDate, onProgress, onLine) {
-  const sessionDir = path25.join(os22.homedir(), ".copilot", "session-state");
+  const sessionDir = path26.join(os23.homedir(), ".copilot", "session-state");
   const result = {
     filesScanned: 0,
     sessions: 0,
@@ -12938,22 +13179,22 @@ function scanCopilotHistory(startDate, onProgress, onLine) {
     sessionsWithEarlySecrets: 0
   };
   const dedup = emptyScanDedup();
-  if (!fs23.existsSync(sessionDir)) return result;
+  if (!fs24.existsSync(sessionDir)) return result;
   let sessionIds;
   try {
-    sessionIds = fs23.readdirSync(sessionDir);
+    sessionIds = fs24.readdirSync(sessionDir);
   } catch {
     return result;
   }
   const ruleSources = buildRuleSources();
   for (const sessionId of sessionIds) {
-    const eventsPath = path25.join(sessionDir, sessionId, "events.jsonl");
-    if (!fs23.existsSync(eventsPath)) continue;
+    const eventsPath = path26.join(sessionDir, sessionId, "events.jsonl");
+    if (!fs24.existsSync(eventsPath)) continue;
     result.filesScanned++;
     onProgress?.(result.filesScanned);
     let raw;
     try {
-      raw = fs23.readFileSync(eventsPath, "utf-8");
+      raw = fs24.readFileSync(eventsPath, "utf-8");
     } catch {
       continue;
     }
@@ -12973,7 +13214,7 @@ function scanCopilotHistory(startDate, onProgress, onLine) {
       if (ev.type === "session.start") {
         const cwd = ev.data?.context?.cwd;
         if (typeof cwd === "string" && cwd) {
-          projLabel = stripTerminalEscapes(cwd).replace(os22.homedir(), "~").slice(0, 40);
+          projLabel = stripTerminalEscapes(cwd).replace(os23.homedir(), "~").slice(0, 40);
         }
         continue;
       }
@@ -13105,7 +13346,7 @@ function scanCopilotHistory(startDate, onProgress, onLine) {
   return result;
 }
 function scanCodexHistory(startDate, onProgress, onLine) {
-  const sessionsBase = path25.join(os22.homedir(), ".codex", "sessions");
+  const sessionsBase = path26.join(os23.homedir(), ".codex", "sessions");
   const result = {
     filesScanned: 0,
     sessions: 0,
@@ -13120,32 +13361,32 @@ function scanCodexHistory(startDate, onProgress, onLine) {
     sessionsWithEarlySecrets: 0
   };
   const dedup = emptyScanDedup();
-  if (!fs23.existsSync(sessionsBase)) return result;
+  if (!fs24.existsSync(sessionsBase)) return result;
   const jsonlFiles = [];
   try {
-    for (const year of fs23.readdirSync(sessionsBase)) {
-      const yearPath = path25.join(sessionsBase, year);
+    for (const year of fs24.readdirSync(sessionsBase)) {
+      const yearPath = path26.join(sessionsBase, year);
       try {
-        if (!fs23.statSync(yearPath).isDirectory()) continue;
+        if (!fs24.statSync(yearPath).isDirectory()) continue;
       } catch {
         continue;
       }
-      for (const month of fs23.readdirSync(yearPath)) {
-        const monthPath = path25.join(yearPath, month);
+      for (const month of fs24.readdirSync(yearPath)) {
+        const monthPath = path26.join(yearPath, month);
         try {
-          if (!fs23.statSync(monthPath).isDirectory()) continue;
+          if (!fs24.statSync(monthPath).isDirectory()) continue;
         } catch {
           continue;
         }
-        for (const day of fs23.readdirSync(monthPath)) {
-          const dayPath = path25.join(monthPath, day);
+        for (const day of fs24.readdirSync(monthPath)) {
+          const dayPath = path26.join(monthPath, day);
           try {
-            if (!fs23.statSync(dayPath).isDirectory()) continue;
+            if (!fs24.statSync(dayPath).isDirectory()) continue;
           } catch {
             continue;
           }
-          for (const file of fs23.readdirSync(dayPath)) {
-            if (file.endsWith(".jsonl")) jsonlFiles.push(path25.join(dayPath, file));
+          for (const file of fs24.readdirSync(dayPath)) {
+            if (file.endsWith(".jsonl")) jsonlFiles.push(path26.join(dayPath, file));
           }
         }
       }
@@ -13159,7 +13400,7 @@ function scanCodexHistory(startDate, onProgress, onLine) {
     onProgress?.(result.filesScanned);
     let lines;
     try {
-      lines = fs23.readFileSync(filePath, "utf-8").split("\n");
+      lines = fs24.readFileSync(filePath, "utf-8").split("\n");
     } catch {
       continue;
     }
@@ -13186,7 +13427,7 @@ function scanCodexHistory(startDate, onProgress, onLine) {
         sessionId = String(payload["id"] ?? filePath);
         startTime = String(payload["timestamp"] ?? "");
         const cwd = String(payload["cwd"] ?? "");
-        projLabel = stripTerminalEscapes(cwd.replace(os22.homedir(), "~")).slice(0, 40);
+        projLabel = stripTerminalEscapes(cwd.replace(os23.homedir(), "~")).slice(0, 40);
         continue;
       }
       if (entry.type === "turn_context" && typeof payload["model"] === "string") {
@@ -13346,17 +13587,17 @@ function scanCodexHistory(startDate, onProgress, onLine) {
   return result;
 }
 function scanShellConfig() {
-  const home = os22.homedir();
+  const home = os23.homedir();
   const configFiles = [".zshrc", ".bashrc", ".bash_profile", ".profile"].map(
-    (f) => path25.join(home, f)
+    (f) => path26.join(home, f)
   );
   const findings = [];
   const seen = /* @__PURE__ */ new Set();
   for (const filePath of configFiles) {
-    if (!fs23.existsSync(filePath)) continue;
+    if (!fs24.existsSync(filePath)) continue;
     let lines;
     try {
-      lines = fs23.readFileSync(filePath, "utf-8").split("\n");
+      lines = fs24.readFileSync(filePath, "utf-8").split("\n");
     } catch {
       continue;
     }
@@ -14162,7 +14403,7 @@ function registerScanCommand(program2) {
         if (!drillDown) {
           const useInk2 = !options.classic;
           if (useInk2) {
-            const scanInkPath = path25.join(__dirname, "scan-ink.mjs");
+            const scanInkPath = path26.join(__dirname, "scan-ink.mjs");
             const dynamicImport = new Function("id", "return import(id)");
             const mod = await dynamicImport(`file://${scanInkPath}`);
             const rangeLabel2 = options.all ? "all time" : `last ${options.days ?? 90} days`;
@@ -14573,8 +14814,8 @@ var init_suggestion_tracker = __esm({
 });
 
 // src/daemon/taint-store.ts
-import fs24 from "fs";
-import path26 from "path";
+import fs25 from "fs";
+import path27 from "path";
 var DEFAULT_TTL_MS, TaintStore, SESSION_TAINT_TTL_MS, SessionTaintStore;
 var init_taint_store = __esm({
   "src/daemon/taint-store.ts"() {
@@ -14644,9 +14885,9 @@ var init_taint_store = __esm({
       /** Resolve to absolute path, falling back to path.resolve if file doesn't exist yet. */
       _resolve(filePath) {
         try {
-          return fs24.realpathSync.native(path26.resolve(filePath));
+          return fs25.realpathSync.native(path27.resolve(filePath));
         } catch {
-          return path26.resolve(filePath);
+          return path27.resolve(filePath);
         }
       }
     };
@@ -14811,14 +15052,14 @@ var init_session_history = __esm({
 
 // src/daemon/state.ts
 import net2 from "net";
-import fs25 from "fs";
-import path27 from "path";
-import os23 from "os";
+import fs26 from "fs";
+import path28 from "path";
+import os24 from "os";
 import { randomUUID as randomUUID3 } from "crypto";
 function loadInsightCounts() {
   try {
-    if (!fs25.existsSync(INSIGHT_COUNTS_FILE)) return;
-    const data = JSON.parse(fs25.readFileSync(INSIGHT_COUNTS_FILE, "utf-8"));
+    if (!fs26.existsSync(INSIGHT_COUNTS_FILE)) return;
+    const data = JSON.parse(fs26.readFileSync(INSIGHT_COUNTS_FILE, "utf-8"));
     for (const [tool, count] of Object.entries(data)) {
       if (typeof count === "number" && count > 0) insightCounts.set(tool, count);
     }
@@ -14857,23 +15098,23 @@ function markRejectionHandlerRegistered() {
   daemonRejectionHandlerRegistered = true;
 }
 function atomicWriteSync2(filePath, data, options) {
-  const dir = path27.dirname(filePath);
-  if (!fs25.existsSync(dir)) fs25.mkdirSync(dir, { recursive: true });
+  const dir = path28.dirname(filePath);
+  if (!fs26.existsSync(dir)) fs26.mkdirSync(dir, { recursive: true });
   const tmpPath = `${filePath}.${randomUUID3()}.tmp`;
   try {
-    fs25.writeFileSync(tmpPath, data, options);
+    fs26.writeFileSync(tmpPath, data, options);
   } catch (err2) {
     try {
-      fs25.unlinkSync(tmpPath);
+      fs26.unlinkSync(tmpPath);
     } catch {
     }
     throw err2;
   }
   try {
-    fs25.renameSync(tmpPath, filePath);
+    fs26.renameSync(tmpPath, filePath);
   } catch (err2) {
     try {
-      fs25.unlinkSync(tmpPath);
+      fs26.unlinkSync(tmpPath);
     } catch {
     }
     throw err2;
@@ -14897,16 +15138,16 @@ function appendAuditLog(data) {
       decision: data.decision,
       source: "daemon"
     };
-    const dir = path27.dirname(AUDIT_LOG_FILE);
-    if (!fs25.existsSync(dir)) fs25.mkdirSync(dir, { recursive: true });
-    fs25.appendFileSync(AUDIT_LOG_FILE, JSON.stringify(entry) + "\n");
+    const dir = path28.dirname(AUDIT_LOG_FILE);
+    if (!fs26.existsSync(dir)) fs26.mkdirSync(dir, { recursive: true });
+    fs26.appendFileSync(AUDIT_LOG_FILE, JSON.stringify(entry) + "\n");
   } catch {
   }
 }
 function getAuditHistory(limit = 20) {
   try {
-    if (!fs25.existsSync(AUDIT_LOG_FILE)) return [];
-    const lines = fs25.readFileSync(AUDIT_LOG_FILE, "utf-8").trim().split("\n");
+    if (!fs26.existsSync(AUDIT_LOG_FILE)) return [];
+    const lines = fs26.readFileSync(AUDIT_LOG_FILE, "utf-8").trim().split("\n");
     if (lines.length === 1 && lines[0] === "") return [];
     return lines.slice(-limit).map((l) => JSON.parse(l)).reverse();
   } catch {
@@ -14915,7 +15156,7 @@ function getAuditHistory(limit = 20) {
 }
 function getOrgName() {
   try {
-    if (fs25.existsSync(CREDENTIALS_FILE)) return "Node9 Cloud";
+    if (fs26.existsSync(CREDENTIALS_FILE)) return "Node9 Cloud";
   } catch {
   }
   return null;
@@ -14923,8 +15164,8 @@ function getOrgName() {
 function writeGlobalSetting(key, value) {
   let config = {};
   try {
-    if (fs25.existsSync(GLOBAL_CONFIG_FILE)) {
-      config = JSON.parse(fs25.readFileSync(GLOBAL_CONFIG_FILE, "utf-8"));
+    if (fs26.existsSync(GLOBAL_CONFIG_FILE)) {
+      config = JSON.parse(fs26.readFileSync(GLOBAL_CONFIG_FILE, "utf-8"));
     }
   } catch {
   }
@@ -14936,8 +15177,8 @@ function writeTrustEntry(toolName, durationMs, commandPattern) {
   try {
     let trust = { entries: [] };
     try {
-      if (fs25.existsSync(TRUST_FILE2))
-        trust = JSON.parse(fs25.readFileSync(TRUST_FILE2, "utf-8"));
+      if (fs26.existsSync(TRUST_FILE2))
+        trust = JSON.parse(fs26.readFileSync(TRUST_FILE2, "utf-8"));
     } catch {
     }
     trust.entries = trust.entries.filter(
@@ -14954,8 +15195,8 @@ function writeTrustEntry(toolName, durationMs, commandPattern) {
 }
 function readPersistentDecisions() {
   try {
-    if (fs25.existsSync(DECISIONS_FILE)) {
-      return JSON.parse(fs25.readFileSync(DECISIONS_FILE, "utf-8"));
+    if (fs26.existsSync(DECISIONS_FILE)) {
+      return JSON.parse(fs26.readFileSync(DECISIONS_FILE, "utf-8"));
     }
   } catch {
   }
@@ -14983,7 +15224,7 @@ function estimateToolCost(tool, args) {
     const filePath = a.file_path ?? a.path;
     if (filePath) {
       try {
-        const bytes = fs25.statSync(filePath).size;
+        const bytes = fs26.statSync(filePath).size;
         return bytes / BYTES_PER_TOKEN / 1e6 * INPUT_PRICE_PER_1M;
       } catch {
       }
@@ -15054,7 +15295,7 @@ function abandonPending() {
   });
   if (autoStarted) {
     try {
-      fs25.unlinkSync(DAEMON_PID_FILE);
+      fs26.unlinkSync(DAEMON_PID_FILE);
     } catch {
     }
     setTimeout(() => {
@@ -15065,8 +15306,8 @@ function abandonPending() {
 }
 function logActivitySocket(msg) {
   try {
-    fs25.appendFileSync(
-      path27.join(homeDir, ".node9", "hook-debug.log"),
+    fs26.appendFileSync(
+      path28.join(homeDir, ".node9", "hook-debug.log"),
       `[${(/* @__PURE__ */ new Date()).toISOString()}] [activity-socket] ${msg}
 `
     );
@@ -15088,13 +15329,13 @@ function shouldRebind(now = Date.now()) {
 function startActivitySocket() {
   bindActivitySocket();
   activityHealthInterval = setInterval(() => {
-    if (!fs25.existsSync(ACTIVITY_SOCKET_PATH2)) attemptRebind("health-probe");
+    if (!fs26.existsSync(ACTIVITY_SOCKET_PATH2)) attemptRebind("health-probe");
   }, ACTIVITY_HEALTH_PROBE_MS);
   activityHealthInterval.unref();
   process.on("exit", () => {
     if (activityHealthInterval) clearInterval(activityHealthInterval);
     try {
-      fs25.unlinkSync(ACTIVITY_SOCKET_PATH2);
+      fs26.unlinkSync(ACTIVITY_SOCKET_PATH2);
     } catch {
     }
   });
@@ -15122,7 +15363,7 @@ function attemptRebind(reason) {
 }
 function bindActivitySocket() {
   try {
-    fs25.unlinkSync(ACTIVITY_SOCKET_PATH2);
+    fs26.unlinkSync(ACTIVITY_SOCKET_PATH2);
   } catch {
   }
   const ACTIVITY_MAX_BYTES = 1024 * 1024;
@@ -15218,304 +15459,83 @@ function bindActivitySocket() {
     socket.on("error", () => {
     });
   });
-  unixServer.on("error", (err2) => {
-    logActivitySocket(`server error: ${err2.message}`);
-  });
-  unixServer.listen(ACTIVITY_SOCKET_PATH2, () => {
-    logActivitySocket(`bound to ${ACTIVITY_SOCKET_PATH2}`);
-  });
-  activitySocketServer = unixServer;
-}
-var homeDir, DAEMON_PID_FILE, DECISIONS_FILE, AUDIT_LOG_FILE, TRUST_FILE2, GLOBAL_CONFIG_FILE, CREDENTIALS_FILE, INSIGHT_COUNTS_FILE, pending, sseClients, suggestionTracker, taintStore, sessionTaintStore, insightCounts, _abandonTimer, _hadBrowserClient, _daemonServer, daemonRejectionHandlerRegistered, AUTO_DENY_MS, TRUST_DURATIONS, autoStarted, ACTIVITY_SOCKET_PATH2, ACTIVITY_RING_SIZE, activityRing, LARGE_RESPONSE_RING_SIZE, largeResponseRing, cachedScanResult, cachedScanTs, SCAN_CACHE_TTL_MS, SECRET_KEY_RE, INPUT_PRICE_PER_1M, OUTPUT_PRICE_PER_1M, BYTES_PER_TOKEN, CRITICAL_FORENSIC_CATEGORIES, WRITE_TOOL_NAMES, ACTIVITY_REBIND_MAX_ATTEMPTS, ACTIVITY_REBIND_WINDOW_MS, ACTIVITY_HEALTH_PROBE_MS, activitySocketServer, activityHealthInterval, activityRebindAttempts, activityCircuitTripped;
-var init_state2 = __esm({
-  "src/daemon/state.ts"() {
-    "use strict";
-    init_daemon();
-    init_suggestion_tracker();
-    init_taint_store();
-    init_session_counters();
-    init_session_history();
-    homeDir = os23.homedir();
-    DAEMON_PID_FILE = path27.join(homeDir, ".node9", "daemon.pid");
-    DECISIONS_FILE = path27.join(homeDir, ".node9", "decisions.json");
-    AUDIT_LOG_FILE = path27.join(homeDir, ".node9", "audit.log");
-    TRUST_FILE2 = path27.join(homeDir, ".node9", "trust.json");
-    GLOBAL_CONFIG_FILE = path27.join(homeDir, ".node9", "config.json");
-    CREDENTIALS_FILE = path27.join(homeDir, ".node9", "credentials.json");
-    INSIGHT_COUNTS_FILE = path27.join(homeDir, ".node9", "insight-counts.json");
-    pending = /* @__PURE__ */ new Map();
-    sseClients = /* @__PURE__ */ new Set();
-    suggestionTracker = new SuggestionTracker(3);
-    taintStore = new TaintStore();
-    sessionTaintStore = new SessionTaintStore();
-    insightCounts = /* @__PURE__ */ new Map();
-    _abandonTimer = null;
-    _hadBrowserClient = false;
-    _daemonServer = null;
-    daemonRejectionHandlerRegistered = false;
-    AUTO_DENY_MS = 12e4;
-    TRUST_DURATIONS = {
-      "30m": 30 * 6e4,
-      "1h": 60 * 6e4,
-      "2h": 2 * 60 * 6e4
-    };
-    autoStarted = process.env.NODE9_AUTO_STARTED === "1";
-    ACTIVITY_SOCKET_PATH2 = process.platform === "win32" ? "\\\\.\\pipe\\node9-activity" : path27.join(os23.tmpdir(), "node9-activity.sock");
-    ACTIVITY_RING_SIZE = 100;
-    activityRing = [];
-    LARGE_RESPONSE_RING_SIZE = 20;
-    largeResponseRing = [];
-    cachedScanResult = null;
-    cachedScanTs = 0;
-    SCAN_CACHE_TTL_MS = 5 * 60 * 1e3;
-    SECRET_KEY_RE = /password|secret|token|key|apikey|credential|auth/i;
-    INPUT_PRICE_PER_1M = 3;
-    OUTPUT_PRICE_PER_1M = 15;
-    BYTES_PER_TOKEN = 4;
-    CRITICAL_FORENSIC_CATEGORIES = /* @__PURE__ */ new Set([
-      "privilege-escalation",
-      "destructive-op",
-      "eval-of-remote"
-    ]);
-    WRITE_TOOL_NAMES = /* @__PURE__ */ new Set([
-      "write",
-      "write_file",
-      "create_file",
-      "edit",
-      "multiedit",
-      "str_replace_based_edit_tool",
-      "replace",
-      "notebook_edit",
-      "notebookedit"
-    ]);
-    ACTIVITY_REBIND_MAX_ATTEMPTS = 5;
-    ACTIVITY_REBIND_WINDOW_MS = 6e4;
-    ACTIVITY_HEALTH_PROBE_MS = 2e3;
-    activitySocketServer = null;
-    activityHealthInterval = null;
-    activityRebindAttempts = [];
-    activityCircuitTripped = false;
-  }
-});
-
-// src/agent-wiring.ts
-import fs26 from "fs";
-import path28 from "path";
-import os24 from "os";
-import * as yaml2 from "yaml";
-import { parse as parseToml2 } from "smol-toml";
-function readJson2(filePath) {
-  if (!fs26.existsSync(filePath)) return null;
-  try {
-    return JSON.parse(fs26.readFileSync(filePath, "utf-8"));
-  } catch {
-    return "invalid";
-  }
-}
-function matchersHaveNode9Hook(matchers) {
-  return (matchers ?? []).some((m) => (m.hooks ?? []).some((h) => isNode9Hook(h.command)));
-}
-function flatHaveNode9Hook(entries) {
-  return (Array.isArray(entries) ? entries : []).some((h) => isNode9Hook(h.command));
-}
-function readHookRoot(filePath, format) {
-  if (!fs26.existsSync(filePath)) return "absent";
-  let raw;
-  try {
-    raw = fs26.readFileSync(filePath, "utf-8");
-  } catch {
-    return "absent";
-  }
-  try {
-    const parsed = format === "yaml" ? yaml2.parse(raw) : JSON.parse(raw);
-    return parsed?.hooks ?? {};
-  } catch {
-    return "invalid";
-  }
-}
-function eventWired(root, ev, format) {
-  const arr = root[ev.key];
-  if (format === "matcher") return matchersHaveNode9Hook(arr);
-  return flatHaveNode9Hook(arr);
-}
-function detectMcp(servers) {
-  const entries = Object.entries(servers ?? {});
-  const present = entries.some(([, s]) => s?.command === "node9");
-  const wrapped = entries.filter(([, s]) => s?.command === "node9" && Array.isArray(s.args) && s.args.length > 0).map(([name, s]) => `${name} \u2192 ${s.args.join(" ")}`);
-  return { wrapped, present };
-}
-function readMcp(filePath, format) {
-  if (!fs26.existsSync(filePath)) return { wrapped: [], present: false };
-  try {
-    if (format === "toml") {
-      const parsed2 = parseToml2(fs26.readFileSync(filePath, "utf-8"));
-      return detectMcp(parsed2?.mcp_servers);
-    }
-    const parsed = readJson2(filePath);
-    if (parsed === null || parsed === "invalid") return { wrapped: [], present: false };
-    return detectMcp(parsed.mcpServers);
-  } catch {
-    return { wrapped: [], present: false };
-  }
-}
-function getAgentWiring(home = os24.homedir()) {
-  const detected = detectAgents(home);
-  return AGENT_SPECS.map((spec) => {
-    const present = spec.present(home);
-    const pad = spec.labelPad ?? DEFAULT_LABEL_PAD;
-    let hooks;
-    let wireState;
-    let hookLabel;
-    let settingsPath;
-    if (spec.shimFile) {
-      const shimWired = exists(spec.shimFile(home));
-      hooks = [{ label: "node9 plugin (node9 check)", wired: shimWired }];
-      wireState = shimWired ? "wired" : present ? "unwired" : "absent";
-      hookLabel = "node9 plugin";
-      settingsPath = spec.shimFile(home);
-    } else {
-      const root = spec.hookFile ? readHookRoot(spec.hookFile(home), spec.hookFormat) : "absent";
-      const primary = spec.hookEvents[0];
-      const rootPresent = root !== "absent" && root !== "invalid";
-      hooks = spec.hookEvents.map((ev) => ({
-        label: hookLabelOf(ev, pad),
-        wired: rootPresent && eventWired(root, ev, spec.hookFormat)
-      }));
-      if (root === "absent") wireState = "absent";
-      else if (root === "invalid") wireState = "invalid";
-      else wireState = primary && eventWired(root, primary, spec.hookFormat) ? "wired" : "unwired";
-      hookLabel = primary ? `${primary.key} hook` : "MCP proxy";
-      settingsPath = spec.hookFile ? spec.hookFile(home) : spec.mcpFile ? spec.mcpFile(home) : "";
-    }
-    const mcp = spec.mcpFile ? readMcp(spec.mcpFile(home), spec.mcpFormat ?? "json") : null;
-    const anyHookWired = hooks.some((h) => h.wired);
-    return {
-      id: spec.id,
-      label: spec.label,
-      setupCommand: spec.setupCommand,
-      installed: detected[spec.id],
-      present,
-      hooks,
-      wireState,
-      hookLabel,
-      settingsPath,
-      configFormat: spec.hookFormat === "yaml" ? "YAML" : "JSON",
-      mcpServers: mcp ? mcp.wrapped : null,
-      mcpProtected: mcp ? mcp.present : false,
-      isProtected: anyHookWired || (mcp?.present ?? false)
-    };
-  });
-}
-var exists, ck, lg, DEFAULT_LABEL_PAD, hookLabelOf, AGENT_SPECS;
-var init_agent_wiring = __esm({
-  "src/agent-wiring.ts"() {
-    "use strict";
-    init_setup();
-    exists = (p) => {
-      try {
-        return fs26.existsSync(p);
-      } catch {
-        return false;
-      }
-    };
-    ck = (key) => ({ key, kind: "check" });
-    lg = (key) => ({ key, kind: "log" });
-    DEFAULT_LABEL_PAD = 11;
-    hookLabelOf = (ev, pad) => `${ev.key.padEnd(pad)} (node9 ${ev.kind})`;
-    AGENT_SPECS = [
-      {
-        id: "claude",
-        label: "Claude Code",
-        setupCommand: "node9 agents add claude",
-        hookFile: (h) => path28.join(h, ".claude", "settings.json"),
-        hookFormat: "matcher",
-        hookEvents: [ck("PreToolUse"), lg("PostToolUse")],
-        mcpFile: (h) => path28.join(h, ".claude.json"),
-        present: (h) => exists(path28.join(h, ".claude", "settings.json")) || exists(path28.join(h, ".claude.json"))
-      },
-      {
-        id: "gemini",
-        label: "Gemini CLI",
-        setupCommand: "node9 agents add gemini",
-        hookFile: (h) => path28.join(h, ".gemini", "settings.json"),
-        hookFormat: "matcher",
-        hookEvents: [ck("BeforeTool"), lg("AfterTool")],
-        mcpFile: (h) => path28.join(h, ".gemini", "settings.json"),
-        present: (h) => exists(path28.join(h, ".gemini", "settings.json"))
-      },
-      {
-        id: "codex",
-        label: "Codex",
-        setupCommand: "node9 agents add codex",
-        hookFile: (h) => path28.join(h, ".codex", "hooks.json"),
-        hookFormat: "matcher",
-        hookEvents: [ck("PreToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path28.join(h, ".codex", "config.toml"),
-        mcpFormat: "toml",
-        present: (h) => exists(path28.join(h, ".codex"))
-      },
-      {
-        id: "antigravity",
-        label: "Antigravity",
-        setupCommand: "node9 agents add antigravity",
-        hookFile: (h) => path28.join(h, ".gemini", "config", "hooks.json"),
-        hookFormat: "matcher",
-        hookEvents: [ck("PreToolUse"), lg("PostToolUse")],
-        mcpFile: (h) => path28.join(h, ".gemini", "config", "mcp_config.json"),
-        present: (h) => exists(path28.join(h, ".gemini", "config", "hooks.json")) || exists(path28.join(h, ".gemini", "antigravity-cli")) || exists(path28.join(h, ".gemini", "antigravity-ide"))
-      },
-      {
-        id: "copilot",
-        label: "GitHub Copilot",
-        setupCommand: "node9 agents add copilot",
-        hookFile: (h) => path28.join(h, ".copilot", "hooks", "node9.json"),
-        hookFormat: "flat",
-        hookEvents: [ck("PreToolUse"), lg("PostToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path28.join(h, ".copilot", "mcp-config.json"),
-        present: (h) => exists(path28.join(h, ".copilot"))
-      },
-      {
-        id: "cursor",
-        label: "Cursor",
-        setupCommand: "node9 agents add cursor",
-        // MCP-only — no hook file (see note above).
-        hookFormat: "flat",
-        hookEvents: [],
-        mcpFile: (h) => path28.join(h, ".cursor", "mcp.json"),
-        present: (h) => exists(path28.join(h, ".cursor", "mcp.json"))
-      },
-      {
-        id: "hermes",
-        label: "Hermes Agent",
-        setupCommand: "node9 agents add hermes",
-        hookFile: (h) => hermesConfigPath(h),
-        hookFormat: "yaml",
-        hookEvents: [ck("pre_tool_call"), lg("post_tool_call")],
-        labelPad: 14,
-        // 'post_tool_call' is wider than the default
-        present: (h) => exists(hermesConfigPath(h))
-      },
-      {
-        // Plugin-shim agents — protected by a node9-authored plugin/extension file
-        // (no hooks, no MCP). hookFormat is unused for these (shimFile drives it).
-        id: "opencode",
-        label: "OpenCode",
-        setupCommand: "node9 agents add opencode",
-        hookFormat: "flat",
-        hookEvents: [],
-        shimFile: (h) => path28.join(h, ".config", "opencode", "plugins", "node9.js"),
-        present: (h) => exists(path28.join(h, ".config", "opencode")) || exists(path28.join(h, ".config", "opencode", "plugins", "node9.js"))
-      },
-      {
-        id: "pi",
-        label: "Pi",
-        setupCommand: "node9 agents add pi",
-        hookFormat: "flat",
-        hookEvents: [],
-        shimFile: (h) => path28.join(h, ".pi", "agent", "extensions", "node9.js"),
-        present: (h) => exists(path28.join(h, ".pi", "agent")) || exists(path28.join(h, ".pi", "agent", "extensions", "node9.js"))
-      }
-    ];
+  unixServer.on("error", (err2) => {
+    logActivitySocket(`server error: ${err2.message}`);
+  });
+  unixServer.listen(ACTIVITY_SOCKET_PATH2, () => {
+    logActivitySocket(`bound to ${ACTIVITY_SOCKET_PATH2}`);
+  });
+  activitySocketServer = unixServer;
+}
+var homeDir, DAEMON_PID_FILE, DECISIONS_FILE, AUDIT_LOG_FILE, TRUST_FILE2, GLOBAL_CONFIG_FILE, CREDENTIALS_FILE, INSIGHT_COUNTS_FILE, pending, sseClients, suggestionTracker, taintStore, sessionTaintStore, insightCounts, _abandonTimer, _hadBrowserClient, _daemonServer, daemonRejectionHandlerRegistered, AUTO_DENY_MS, TRUST_DURATIONS, autoStarted, ACTIVITY_SOCKET_PATH2, ACTIVITY_RING_SIZE, activityRing, LARGE_RESPONSE_RING_SIZE, largeResponseRing, cachedScanResult, cachedScanTs, SCAN_CACHE_TTL_MS, SECRET_KEY_RE, INPUT_PRICE_PER_1M, OUTPUT_PRICE_PER_1M, BYTES_PER_TOKEN, CRITICAL_FORENSIC_CATEGORIES, WRITE_TOOL_NAMES, ACTIVITY_REBIND_MAX_ATTEMPTS, ACTIVITY_REBIND_WINDOW_MS, ACTIVITY_HEALTH_PROBE_MS, activitySocketServer, activityHealthInterval, activityRebindAttempts, activityCircuitTripped;
+var init_state2 = __esm({
+  "src/daemon/state.ts"() {
+    "use strict";
+    init_daemon();
+    init_suggestion_tracker();
+    init_taint_store();
+    init_session_counters();
+    init_session_history();
+    homeDir = os24.homedir();
+    DAEMON_PID_FILE = path28.join(homeDir, ".node9", "daemon.pid");
+    DECISIONS_FILE = path28.join(homeDir, ".node9", "decisions.json");
+    AUDIT_LOG_FILE = path28.join(homeDir, ".node9", "audit.log");
+    TRUST_FILE2 = path28.join(homeDir, ".node9", "trust.json");
+    GLOBAL_CONFIG_FILE = path28.join(homeDir, ".node9", "config.json");
+    CREDENTIALS_FILE = path28.join(homeDir, ".node9", "credentials.json");
+    INSIGHT_COUNTS_FILE = path28.join(homeDir, ".node9", "insight-counts.json");
+    pending = /* @__PURE__ */ new Map();
+    sseClients = /* @__PURE__ */ new Set();
+    suggestionTracker = new SuggestionTracker(3);
+    taintStore = new TaintStore();
+    sessionTaintStore = new SessionTaintStore();
+    insightCounts = /* @__PURE__ */ new Map();
+    _abandonTimer = null;
+    _hadBrowserClient = false;
+    _daemonServer = null;
+    daemonRejectionHandlerRegistered = false;
+    AUTO_DENY_MS = 12e4;
+    TRUST_DURATIONS = {
+      "30m": 30 * 6e4,
+      "1h": 60 * 6e4,
+      "2h": 2 * 60 * 6e4
+    };
+    autoStarted = process.env.NODE9_AUTO_STARTED === "1";
+    ACTIVITY_SOCKET_PATH2 = process.platform === "win32" ? "\\\\.\\pipe\\node9-activity" : path28.join(os24.tmpdir(), "node9-activity.sock");
+    ACTIVITY_RING_SIZE = 100;
+    activityRing = [];
+    LARGE_RESPONSE_RING_SIZE = 20;
+    largeResponseRing = [];
+    cachedScanResult = null;
+    cachedScanTs = 0;
+    SCAN_CACHE_TTL_MS = 5 * 60 * 1e3;
+    SECRET_KEY_RE = /password|secret|token|key|apikey|credential|auth/i;
+    INPUT_PRICE_PER_1M = 3;
+    OUTPUT_PRICE_PER_1M = 15;
+    BYTES_PER_TOKEN = 4;
+    CRITICAL_FORENSIC_CATEGORIES = /* @__PURE__ */ new Set([
+      "privilege-escalation",
+      "destructive-op",
+      "eval-of-remote"
+    ]);
+    WRITE_TOOL_NAMES = /* @__PURE__ */ new Set([
+      "write",
+      "write_file",
+      "create_file",
+      "edit",
+      "multiedit",
+      "str_replace_based_edit_tool",
+      "replace",
+      "notebook_edit",
+      "notebookedit"
+    ]);
+    ACTIVITY_REBIND_MAX_ATTEMPTS = 5;
+    ACTIVITY_REBIND_WINDOW_MS = 6e4;
+    ACTIVITY_HEALTH_PROBE_MS = 2e3;
+    activitySocketServer = null;
+    activityHealthInterval = null;
+    activityRebindAttempts = [];
+    activityCircuitTripped = false;
   }
 });
 
@@ -16614,9 +16634,95 @@ var init_ship = __esm({
   }
 });
 
+// src/policy-snapshot/build.ts
+function buildPolicySnapshot(config, activeShields, overrides) {
+  const p = config.policy;
+  return {
+    mode: config.settings.mode,
+    panicMode: config.settings.panicMode === true,
+    // The proxy expresses shadow/observe as mode === 'observe' (cloud shadowMode
+    // forces it); there's no separate settings flag.
+    shadowMode: config.settings.mode === "observe",
+    activeShields,
+    shieldOverrides: overrides,
+    smartRuleCount: p.smartRules.length,
+    smartRules: p.smartRules.slice(0, MAX_RULES).map((r) => ({
+      name: r.name,
+      tool: r.tool,
+      verdict: r.verdict,
+      reason: r.reason
+    })),
+    egress: {
+      enabled: p.egress.enabled,
+      mode: p.egress.mode,
+      allow: p.egress.allow.slice(0, MAX_EGRESS)
+    },
+    dlpEnabled: p.dlp.enabled,
+    engineVersion: ENGINE_VERSION
+  };
+}
+var MAX_RULES, MAX_EGRESS;
+var init_build = __esm({
+  "src/policy-snapshot/build.ts"() {
+    "use strict";
+    init_dist();
+    MAX_RULES = 500;
+    MAX_EGRESS = 200;
+  }
+});
+
+// src/policy-snapshot/ship.ts
+import http2 from "http";
+import https3 from "https";
+import { URL as URL3 } from "url";
+function policySnapshotUrlFrom(apiUrl) {
+  return apiUrl.endsWith("/policies/sync") ? apiUrl.replace(/\/policies\/sync$/, "/policy/snapshot") : null;
+}
+async function shipPolicySnapshot(body, creds) {
+  const url = policySnapshotUrlFrom(creds.apiUrl);
+  if (!url) return false;
+  const payload = JSON.stringify(body);
+  const parsed = new URL3(url);
+  const transport = parsed.protocol === "http:" ? http2 : https3;
+  return new Promise((resolve) => {
+    const req = transport.request(
+      {
+        hostname: parsed.hostname,
+        port: parsed.port ? parseInt(parsed.port, 10) : void 0,
+        path: parsed.pathname + parsed.search,
+        method: "POST",
+        headers: {
+          "Content-Type": "application/json",
+          "Content-Length": Buffer.byteLength(payload),
+          Authorization: `Bearer ${creds.apiKey}`
+        },
+        timeout: 1e4
+      },
+      (res) => {
+        const ok2 = !!res.statusCode && res.statusCode >= 200 && res.statusCode < 300;
+        res.resume();
+        res.on("end", () => resolve(ok2));
+        res.on("error", () => resolve(false));
+      }
+    );
+    req.on("error", () => resolve(false));
+    req.on("timeout", () => {
+      req.destroy();
+      resolve(false);
+    });
+    req.write(payload);
+    req.end();
+  });
+}
+var init_ship2 = __esm({
+  "src/policy-snapshot/ship.ts"() {
+    "use strict";
+  }
+});
+
 // src/daemon/sync.ts
 import fs32 from "fs";
-import https3 from "https";
+import https4 from "https";
 import os29 from "os";
 import path31 from "path";
 function emptySignals3() {
@@ -16650,6 +16756,11 @@ function buildSessionDeltas(findings, toolCallsBySession) {
     signals
   }));
 }
+function resolveSyncIntervalMs(settings) {
+  const rawSeconds = settings.cloudSyncIntervalSeconds ?? (settings.cloudSyncIntervalHours ?? DEFAULT_INTERVAL_HOURS) * 3600;
+  const clamped = Math.min(Math.max(rawSeconds, MIN_INTERVAL_SECONDS), MAX_INTERVAL_SECONDS);
+  return clamped * 1e3;
+}
 function readCredentials() {
   if (process.env.NODE9_API_KEY) {
     return {
@@ -16699,7 +16810,7 @@ function fetchCloudPolicy(apiKey, apiUrl, ifNoneMatch) {
   };
   if (ifNoneMatch) headers["If-None-Match"] = `"${ifNoneMatch}"`;
   return new Promise((resolve, reject) => {
-    const req = https3.request(
+    const req = https4.request(
       {
         hostname: parsed.hostname,
         port: parsed.port ? parseInt(parsed.port, 10) : void 0,
@@ -16779,6 +16890,9 @@ async function syncOnce() {
   if (process.env.NODE9_POSTURE_DISABLE !== "1") {
     void pushPostureSnapshot(creds);
   }
+  if (process.env.NODE9_POLICY_MIRROR_DISABLE !== "1") {
+    void pushPolicySnapshot(creds);
+  }
 }
 async function pushBlastSnapshot(creds) {
   try {
@@ -16788,7 +16902,7 @@ async function pushBlastSnapshot(creds) {
     if (!blastUrl) return;
     const parsed = new URL(blastUrl);
     await new Promise((resolve) => {
-      const req = https3.request(
+      const req = https4.request(
         {
           hostname: parsed.hostname,
           port: parsed.port ? parseInt(parsed.port, 10) : void 0,
@@ -16825,6 +16939,29 @@ async function pushPostureSnapshot(creds) {
   } catch {
   }
 }
+async function pushPolicySnapshot(creds) {
+  try {
+    const body = buildPolicySnapshot(getConfig(), readActiveShields(), readShieldOverrides());
+    await shipPolicySnapshot(body, creds);
+  } catch {
+  }
+}
+async function runPolicyPush() {
+  const creds = readCredentials();
+  if (!creds) {
+    return {
+      ok: false,
+      reason: "No API key configured. Add credentials with: node9 login"
+    };
+  }
+  try {
+    const body = buildPolicySnapshot(getConfig(), readActiveShields(), readShieldOverrides());
+    const sent = await shipPolicySnapshot(body, creds);
+    return sent ? { ok: true } : { ok: false, reason: "Push failed (network or server error)" };
+  } catch (e) {
+    return { ok: false, reason: e instanceof Error ? e.message : String(e) };
+  }
+}
 async function pushScanSnapshot(creds) {
   try {
     const tick = await tickScanWatcher();
@@ -16842,7 +16979,7 @@ async function pushScanSnapshot(creds) {
     const parsed = new URL(scanUrl);
     let posted = false;
     await new Promise((resolve) => {
-      const req = https3.request(
+      const req = https4.request(
         {
           hostname: parsed.hostname,
           port: parsed.port ? parseInt(parsed.port, 10) : void 0,
@@ -16892,6 +17029,9 @@ async function runCloudSync() {
     if (process.env.NODE9_POSTURE_DISABLE !== "1") {
       void pushPostureSnapshot(creds);
     }
+    if (process.env.NODE9_POLICY_MIRROR_DISABLE !== "1") {
+      void pushPolicySnapshot(creds);
+    }
   };
   try {
     const result = await fetchCloudPolicy(creds.apiKey, creds.apiUrl, readCachedEtag());
@@ -16943,9 +17083,7 @@ function getCloudRules() {
   }
 }
 function startCloudSync() {
-  const rawHours = getConfig().settings.cloudSyncIntervalHours ?? DEFAULT_INTERVAL_HOURS;
-  const intervalHours = Math.max(rawHours, MIN_INTERVAL_HOURS);
-  const intervalMs = intervalHours * 60 * 60 * 1e3;
+  const intervalMs = resolveSyncIntervalMs(getConfig().settings);
   const initial = setTimeout(() => void syncOnce(), 3e4);
   initial.unref();
   const recurring = setInterval(() => void syncOnce(), intervalMs);
@@ -16970,7 +17108,7 @@ function startForensicBroadcast() {
   const recurring = setInterval(() => void tick(), FORENSIC_BROADCAST_INTERVAL_MS);
   recurring.unref();
 }
-var FINDING_TO_SIGNAL3, rulesCacheFile, DEFAULT_API_URL, DEFAULT_INTERVAL_HOURS, MIN_INTERVAL_HOURS, FORENSIC_BROADCAST_INTERVAL_MS, FORENSIC_INITIAL_DELAY_MS, forensicBroadcastOffsets;
+var FINDING_TO_SIGNAL3, rulesCacheFile, DEFAULT_API_URL, DEFAULT_INTERVAL_HOURS, MIN_INTERVAL_SECONDS, MAX_INTERVAL_SECONDS, FORENSIC_BROADCAST_INTERVAL_MS, FORENSIC_INITIAL_DELAY_MS, forensicBroadcastOffsets;
 var init_sync = __esm({
   "src/daemon/sync.ts"() {
     "use strict";
@@ -16978,6 +17116,9 @@ var init_sync = __esm({
     init_blast();
     init_posture();
     init_ship();
+    init_build();
+    init_ship2();
+    init_shields();
     init_dist();
     init_scan_watermark();
     init_state2();
@@ -16997,7 +17138,8 @@ var init_sync = __esm({
     rulesCacheFile = () => path31.join(os29.homedir(), ".node9", "rules-cache.json");
     DEFAULT_API_URL = "https://api.node9.ai/api/v1/intercept/policies/sync";
     DEFAULT_INTERVAL_HOURS = 5;
-    MIN_INTERVAL_HOURS = 1;
+    MIN_INTERVAL_SECONDS = 15;
+    MAX_INTERVAL_SECONDS = 24 * 60 * 60;
     FORENSIC_BROADCAST_INTERVAL_MS = 3e4;
     FORENSIC_INITIAL_DELAY_MS = 5e3;
     forensicBroadcastOffsets = /* @__PURE__ */ new Map();
@@ -17451,7 +17593,7 @@ var init_mcp_tools = __esm({
 });
 
 // src/daemon/server.ts
-import http2 from "http";
+import http3 from "http";
 import fs36 from "fs";
 import path35 from "path";
 import os33 from "os";
@@ -17486,7 +17628,7 @@ function startDaemon() {
   }
   resetIdleTimer();
   const allowedHosts = /* @__PURE__ */ new Set([`127.0.0.1:${DAEMON_PORT}`, `localhost:${DAEMON_PORT}`]);
-  const server = http2.createServer(async (req, res) => {
+  const server = http3.createServer(async (req, res) => {
     const host = req.headers.host ?? "";
     if (!allowedHosts.has(host)) {
       res.writeHead(421, { "Content-Type": "text/plain" });
@@ -18720,11 +18862,11 @@ __export(tail_exports, {
   shortenPathSummary: () => shortenPathSummary,
   startTail: () => startTail
 });
-import http3 from "http";
+import http4 from "http";
 import chalk35 from "chalk";
 import fs64 from "fs";
-import os54 from "os";
-import path61 from "path";
+import os55 from "os";
+import path62 from "path";
 import readline6 from "readline";
 import { spawn as spawn8 } from "child_process";
 function shortenPathSummary(s) {
@@ -18748,18 +18890,18 @@ function getModelContextLimit(model) {
   return 2e5;
 }
 function readSessionUsage() {
-  const projectsDir = path61.join(os54.homedir(), ".claude", "projects");
+  const projectsDir = path62.join(os55.homedir(), ".claude", "projects");
   if (!fs64.existsSync(projectsDir)) return null;
   let latestFile = null;
   let latestMtime = 0;
   try {
     for (const dir of fs64.readdirSync(projectsDir)) {
-      const dirPath = path61.join(projectsDir, dir);
+      const dirPath = path62.join(projectsDir, dir);
       try {
         if (!fs64.statSync(dirPath).isDirectory()) continue;
         for (const file of fs64.readdirSync(dirPath)) {
           if (!file.endsWith(".jsonl") || file.startsWith("agent-")) continue;
-          const filePath = path61.join(dirPath, file);
+          const filePath = path62.join(dirPath, file);
           try {
             const mtime = fs64.statSync(filePath).mtimeMs;
             if (mtime > latestMtime) {
@@ -18837,7 +18979,7 @@ function formatBase(activity) {
   const time = new Date(activity.ts).toLocaleTimeString([], { hour12: false });
   const icon = getIcon(activity.tool);
   const toolName = activity.tool.slice(0, 16).padEnd(16);
-  const argsStr = JSON.stringify(activity.args ?? {}).replace(/\s+/g, " ").replaceAll(os54.homedir(), "~");
+  const argsStr = JSON.stringify(activity.args ?? {}).replace(/\s+/g, " ").replaceAll(os55.homedir(), "~");
   const argsPreview = argsStr.length > 70 ? argsStr.slice(0, 70) + "\u2026" : argsStr;
   return `${chalk35.gray(time)} ${icon} ${agentLabel(activity.agent, activity.mcpServer, activity.sessionId)}${chalk35.white.bold(toolName)} ${chalk35.dim(argsPreview)}`;
 }
@@ -18919,7 +19061,7 @@ function postDecisionHttp(id, decision, authToken, port, opts) {
     if (opts?.trustDuration) bodyObj.trustDuration = opts.trustDuration;
     if (opts?.reason) bodyObj.reason = opts.reason;
     const body = JSON.stringify(bodyObj);
-    const req = http3.request(
+    const req = http4.request(
       {
         hostname: "127.0.0.1",
         port,
@@ -19034,7 +19176,7 @@ function buildRecoveryCardLines(req) {
   ];
 }
 function readApproversFromDisk() {
-  const configPath = path61.join(os54.homedir(), ".node9", "config.json");
+  const configPath = path62.join(os55.homedir(), ".node9", "config.json");
   try {
     const raw = JSON.parse(fs64.readFileSync(configPath, "utf-8"));
     const settings = raw.settings ?? {};
@@ -19052,7 +19194,7 @@ function approverStatusLine() {
   return `${fmt("native", "native")}  ${fmt("cloud", "cloud")}  ${fmt("terminal", "terminal")}`;
 }
 function toggleApprover(channel) {
-  const configPath = path61.join(os54.homedir(), ".node9", "config.json");
+  const configPath = path62.join(os55.homedir(), ".node9", "config.json");
   try {
     const raw = JSON.parse(fs64.readFileSync(configPath, "utf-8"));
     const settings = raw.settings ?? {};
@@ -19070,7 +19212,7 @@ async function startTail(options = {}) {
   const port = await ensureDaemon();
   if (options.clear) {
     const result = await new Promise((resolve) => {
-      const req2 = http3.request(
+      const req2 = http4.request(
         { method: "POST", hostname: "127.0.0.1", port, path: "/events/clear" },
         (res) => {
           const status = res.statusCode ?? 0;
@@ -19233,7 +19375,7 @@ async function startTail(options = {}) {
       postDecisionHttp(req2.id, httpDecision, authToken, port, httpOpts).catch((err2) => {
         try {
           fs64.appendFileSync(
-            path61.join(os54.homedir(), ".node9", "hook-debug.log"),
+            path62.join(os55.homedir(), ".node9", "hook-debug.log"),
             `[tail] POST /decision failed: ${String(err2)}
 `
           );
@@ -19297,7 +19439,7 @@ async function startTail(options = {}) {
     };
     process.stdin.on("keypress", onKeypress);
   }
-  const auditLog = path61.join(os54.homedir(), ".node9", "audit.log");
+  const auditLog = path62.join(os55.homedir(), ".node9", "audit.log");
   try {
     const unackedDlp = fs64.readFileSync(auditLog, "utf-8").split("\n").filter((l) => l.includes('"response-dlp"')).length;
     if (unackedDlp > 0) {
@@ -19353,7 +19495,7 @@ async function startTail(options = {}) {
   }, STALL_THRESHOLD_MS / 2);
   stallWatchdog.unref();
   const sseUrl = `http://127.0.0.1:${port}/events?capabilities=input`;
-  const req = http3.get(
+  const req = http4.get(
     sseUrl,
     {
       headers: authToken ? { "X-Node9-Internal": authToken } : {}
@@ -19530,7 +19672,7 @@ var init_tail = __esm({
     "use strict";
     init_daemon2();
     init_daemon();
-    PID_FILE = path61.join(os54.homedir(), ".node9", "daemon.pid");
+    PID_FILE = path62.join(os55.homedir(), ".node9", "daemon.pid");
     ICONS = {
       bash: "\u{1F4BB}",
       shell: "\u{1F4BB}",
@@ -19579,9 +19721,9 @@ __export(hud_exports, {
   renderEnvironmentLine: () => renderEnvironmentLine
 });
 import fs65 from "fs";
-import path62 from "path";
-import os55 from "os";
-import http4 from "http";
+import path63 from "path";
+import os56 from "os";
+import http5 from "http";
 async function readStdin() {
   const chunks = [];
   for await (const chunk2 of process.stdin) {
@@ -19599,7 +19741,7 @@ function queryDaemon() {
   return new Promise((resolve) => {
     const timeout = setTimeout(() => resolve(null), 50);
     try {
-      const req = http4.get(
+      const req = http5.get(
         `http://${DAEMON_HOST}:${DAEMON_PORT}/status`,
         { timeout: 50 },
         (res) => {
@@ -19684,7 +19826,7 @@ function countRulesInDir(rulesDir) {
   try {
     for (const entry of fs65.readdirSync(rulesDir, { withFileTypes: true })) {
       if (entry.isDirectory()) {
-        count += countRulesInDir(path62.join(rulesDir, entry.name));
+        count += countRulesInDir(path63.join(rulesDir, entry.name));
       } else if (entry.isFile() && entry.name.endsWith(".md")) {
         count++;
       }
@@ -19695,46 +19837,46 @@ function countRulesInDir(rulesDir) {
 }
 function isSamePath(a, b) {
   try {
-    return path62.resolve(a) === path62.resolve(b);
+    return path63.resolve(a) === path63.resolve(b);
   } catch {
     return false;
   }
 }
 function countConfigs(cwd) {
-  const homeDir2 = os55.homedir();
-  const claudeDir = path62.join(homeDir2, ".claude");
+  const homeDir2 = os56.homedir();
+  const claudeDir = path63.join(homeDir2, ".claude");
   let claudeMdCount = 0;
   let rulesCount = 0;
   let hooksCount = 0;
   const userMcpServers = /* @__PURE__ */ new Set();
   const projectMcpServers = /* @__PURE__ */ new Set();
-  if (fs65.existsSync(path62.join(claudeDir, "CLAUDE.md"))) claudeMdCount++;
-  rulesCount += countRulesInDir(path62.join(claudeDir, "rules"));
-  const userSettings = path62.join(claudeDir, "settings.json");
+  if (fs65.existsSync(path63.join(claudeDir, "CLAUDE.md"))) claudeMdCount++;
+  rulesCount += countRulesInDir(path63.join(claudeDir, "rules"));
+  const userSettings = path63.join(claudeDir, "settings.json");
   for (const name of getMcpServerNames(userSettings)) userMcpServers.add(name);
   hooksCount += countHooksInFile(userSettings);
-  const userClaudeJson = path62.join(homeDir2, ".claude.json");
+  const userClaudeJson = path63.join(homeDir2, ".claude.json");
   for (const name of getMcpServerNames(userClaudeJson)) userMcpServers.add(name);
   for (const name of getDisabledMcpServers(userClaudeJson, "disabledMcpServers")) {
     userMcpServers.delete(name);
   }
   if (cwd) {
-    if (fs65.existsSync(path62.join(cwd, "CLAUDE.md"))) claudeMdCount++;
-    if (fs65.existsSync(path62.join(cwd, "CLAUDE.local.md"))) claudeMdCount++;
-    const projectClaudeDir = path62.join(cwd, ".claude");
+    if (fs65.existsSync(path63.join(cwd, "CLAUDE.md"))) claudeMdCount++;
+    if (fs65.existsSync(path63.join(cwd, "CLAUDE.local.md"))) claudeMdCount++;
+    const projectClaudeDir = path63.join(cwd, ".claude");
     const overlapsUserScope = isSamePath(projectClaudeDir, claudeDir);
     if (!overlapsUserScope) {
-      if (fs65.existsSync(path62.join(projectClaudeDir, "CLAUDE.md"))) claudeMdCount++;
-      rulesCount += countRulesInDir(path62.join(projectClaudeDir, "rules"));
-      const projSettings = path62.join(projectClaudeDir, "settings.json");
+      if (fs65.existsSync(path63.join(projectClaudeDir, "CLAUDE.md"))) claudeMdCount++;
+      rulesCount += countRulesInDir(path63.join(projectClaudeDir, "rules"));
+      const projSettings = path63.join(projectClaudeDir, "settings.json");
       for (const name of getMcpServerNames(projSettings)) projectMcpServers.add(name);
       hooksCount += countHooksInFile(projSettings);
     }
-    if (fs65.existsSync(path62.join(projectClaudeDir, "CLAUDE.local.md"))) claudeMdCount++;
-    const localSettings = path62.join(projectClaudeDir, "settings.local.json");
+    if (fs65.existsSync(path63.join(projectClaudeDir, "CLAUDE.local.md"))) claudeMdCount++;
+    const localSettings = path63.join(projectClaudeDir, "settings.local.json");
     for (const name of getMcpServerNames(localSettings)) projectMcpServers.add(name);
     hooksCount += countHooksInFile(localSettings);
-    const mcpJsonServers = getMcpServerNames(path62.join(cwd, ".mcp.json"));
+    const mcpJsonServers = getMcpServerNames(path63.join(cwd, ".mcp.json"));
     const disabledMcpJson = getDisabledMcpServers(localSettings, "disabledMcpjsonServers");
     for (const name of disabledMcpJson) mcpJsonServers.delete(name);
     for (const name of mcpJsonServers) projectMcpServers.add(name);
@@ -19767,7 +19909,7 @@ function readActiveShieldsHud() {
     return shieldsCache.value;
   }
   try {
-    const shieldsPath = path62.join(os55.homedir(), ".node9", "shields.json");
+    const shieldsPath = path63.join(os56.homedir(), ".node9", "shields.json");
     if (!fs65.existsSync(shieldsPath)) {
       shieldsCache = { value: [], ts: now };
       return [];
@@ -19874,9 +20016,9 @@ function renderContextLine(stdin) {
 async function main() {
   try {
     const [stdin, daemonStatus2] = await Promise.all([readStdin(), queryDaemon()]);
-    if (fs65.existsSync(path62.join(os55.homedir(), ".node9", "hud-debug"))) {
+    if (fs65.existsSync(path63.join(os56.homedir(), ".node9", "hud-debug"))) {
       try {
-        const logPath = path62.join(os55.homedir(), ".node9", "hud-debug.log");
+        const logPath = path63.join(os56.homedir(), ".node9", "hud-debug.log");
         const MAX_LOG_SIZE = 10 * 1024 * 1024;
         let size = 0;
         try {
@@ -19905,8 +20047,8 @@ async function main() {
       try {
         const cwd = stdin.cwd ?? process.cwd();
         for (const configPath of [
-          path62.join(cwd, "node9.config.json"),
-          path62.join(os55.homedir(), ".node9", "config.json")
+          path63.join(cwd, "node9.config.json"),
+          path63.join(os56.homedir(), ".node9", "config.json")
         ]) {
           if (!fs65.existsSync(configPath)) continue;
           const cfg = JSON.parse(fs65.readFileSync(configPath, "utf-8"));
@@ -19953,12 +20095,45 @@ var init_hud = __esm({
 // src/cli.ts
 init_core();
 init_setup();
-init_daemon2();
 import { Command } from "commander";
+
+// src/agent-teardowns.ts
+init_setup();
+var AGENT_TEARDOWNS = [
+  { id: "claude", label: "Claude", fn: teardownClaude },
+  { id: "gemini", label: "Gemini", fn: teardownGemini },
+  { id: "codex", label: "Codex", fn: teardownCodex },
+  { id: "cursor", label: "Cursor", fn: teardownCursor },
+  { id: "windsurf", label: "Windsurf", fn: teardownWindsurf },
+  { id: "vscode", label: "VSCode", fn: teardownVSCode },
+  { id: "hermes", label: "Hermes", fn: teardownHermes },
+  { id: "antigravity", label: "Antigravity", fn: teardownAntigravity, aliases: ["agy"] },
+  { id: "copilot", label: "Copilot", fn: teardownCopilot },
+  { id: "hud", label: "HUD", fn: teardownHud },
+  {
+    id: "claudedesktop",
+    label: "Claude Desktop",
+    fn: teardownClaudeDesktop,
+    aliases: ["claude-desktop"]
+  },
+  { id: "opencode", label: "OpenCode", fn: teardownOpencode },
+  { id: "pi", label: "Pi", fn: teardownPi }
+];
+function resolveAgentTeardown(target) {
+  const t = target.trim().toLowerCase();
+  return AGENT_TEARDOWNS.find((a) => a.id === t || a.aliases?.includes(t));
+}
+function agentTeardownTargets() {
+  return AGENT_TEARDOWNS.flatMap((a) => [a.id, ...a.aliases ?? []]);
+}
+
+// src/cli.ts
+init_agent_wiring();
+init_daemon2();
 import chalk36 from "chalk";
 import fs66 from "fs";
-import path63 from "path";
-import os56 from "os";
+import path64 from "path";
+import os57 from "os";
 import { spawn as spawn9 } from "child_process";
 import { confirm as confirm2 } from "@inquirer/prompts";
 
@@ -21589,6 +21764,8 @@ function registerLogCommand(program2) {
 init_shields();
 import chalk10 from "chalk";
 import fs46 from "fs";
+import path44 from "path";
+import os40 from "os";
 
 // src/shields/build.ts
 function escapeRegex(s) {
@@ -21718,10 +21895,10 @@ init_audit();
 init_config();
 
 // src/utils/https-fetch.ts
-import https4 from "https";
+import https5 from "https";
 function httpsFetch(url) {
   return new Promise((resolve, reject) => {
-    https4.get(url, (res) => {
+    https5.get(url, (res) => {
       if (res.statusCode !== 200) {
         reject(new Error(`HTTP ${String(res.statusCode)} for ${url}`));
         res.resume();
@@ -21737,6 +21914,22 @@ function httpsFetch(url) {
 
 // src/cli/commands/shield.ts
 var COMMUNITY_INDEX_URL = "https://raw.githubusercontent.com/node9ai/node9-proxy/main/shields/community/index.json";
+function readCloudShields() {
+  const out = /* @__PURE__ */ new Set();
+  try {
+    const file = path44.join(os40.homedir(), ".node9", "rules-cache.json");
+    const raw = JSON.parse(fs46.readFileSync(file, "utf-8"));
+    for (const r of raw.rules ?? []) {
+      const rule = r;
+      const fromSource = rule.source?.startsWith("SHIELD:") ? rule.source.slice("SHIELD:".length).toLowerCase() : void 0;
+      const fromDesc = !fromSource && rule.description ? /\b([a-z0-9-]+)\s+shield/i.exec(rule.description)?.[1]?.toLowerCase() : void 0;
+      const name = fromSource ?? fromDesc;
+      if (name) out.add(name);
+    }
+  } catch {
+  }
+  return out;
+}
 function registerShieldCommand(program2) {
   const shieldCmd = program2.command("shield").description("Manage pre-packaged security shield templates");
   shieldCmd.command("enable <service>").description("Enable a security shield for a specific service").action((service) => {
@@ -21823,10 +22016,17 @@ function registerShieldCommand(program2) {
       return;
     }
     const active = new Set(readActiveShields());
+    const cloud = readCloudShields();
     console.log(chalk10.bold("\n\u{1F6E1}\uFE0F  Available Shields\n"));
+    console.log(chalk10.gray("  \u25CF local \xB7 \u2601 cloud\n"));
     for (const shield of listShields()) {
-      const status = active.has(shield.name) ? chalk10.green("\u25CF enabled") : chalk10.gray("\u25CB disabled");
-      console.log(`  ${status}  ${chalk10.cyan(shield.name.padEnd(12))} ${shield.description}`);
+      const isLocal = active.has(shield.name);
+      const isCloud = cloud.has(shield.name);
+      const status = isLocal && isCloud ? chalk10.green("\u25CF\u2601 enabled ") : isLocal ? chalk10.green("\u25CF  enabled ") : isCloud ? chalk10.cyan("\u2601  cloud   ") : chalk10.gray("\u25CB  disabled");
+      const via = isCloud && !isLocal ? chalk10.gray(" (via dashboard)") : "";
+      console.log(
+        `  ${status} ${chalk10.cyan(shield.name.padEnd(12))} ${shield.description}${via}`
+      );
       if (shield.aliases.length > 0)
         console.log(chalk10.gray(`              aliases: ${shield.aliases.join(", ")}`));
     }
@@ -22159,12 +22359,12 @@ init_config();
 init_agent_wiring();
 import chalk11 from "chalk";
 import fs47 from "fs";
-import path44 from "path";
-import os40 from "os";
+import path45 from "path";
+import os41 from "os";
 import { execSync } from "child_process";
 function registerDoctorCommand(program2, version2) {
   program2.command("doctor").description("Check that Node9 is installed and configured correctly").action(async () => {
-    const homeDir2 = os40.homedir();
+    const homeDir2 = os41.homedir();
     let failures = 0;
     function pass(msg) {
       console.log(chalk11.green("  \u2705 ") + msg);
@@ -22210,7 +22410,7 @@ function registerDoctorCommand(program2, version2) {
       );
     }
     section("Configuration");
-    const globalConfigPath = path44.join(homeDir2, ".node9", "config.json");
+    const globalConfigPath = path45.join(homeDir2, ".node9", "config.json");
     if (fs47.existsSync(globalConfigPath)) {
       try {
         JSON.parse(fs47.readFileSync(globalConfigPath, "utf-8"));
@@ -22221,7 +22421,7 @@ function registerDoctorCommand(program2, version2) {
     } else {
       warn("~/.node9/config.json not found (using defaults)", "Run: node9 init");
     }
-    const projectConfigPath = path44.join(process.cwd(), "node9.config.json");
+    const projectConfigPath = path45.join(process.cwd(), "node9.config.json");
     if (fs47.existsSync(projectConfigPath)) {
       try {
         JSON.parse(fs47.readFileSync(projectConfigPath, "utf-8"));
@@ -22233,7 +22433,7 @@ function registerDoctorCommand(program2, version2) {
         );
       }
     }
-    const credsPath = path44.join(homeDir2, ".node9", "credentials.json");
+    const credsPath = path45.join(homeDir2, ".node9", "credentials.json");
     if (fs47.existsSync(credsPath)) {
       pass("Cloud credentials found (~/.node9/credentials.json)");
     } else {
@@ -22278,7 +22478,7 @@ function registerDoctorCommand(program2, version2) {
     try {
       const { shipLagBytes: shipLagBytes2, readWatermark: readWatermark2, AUDIT_SHIP_WATERMARK: AUDIT_SHIP_WATERMARK2 } = await Promise.resolve().then(() => (init_audit_shipper(), audit_shipper_exports));
       const cfg = getConfig();
-      const creds = fs47.existsSync(path44.join(os40.homedir(), ".node9", "credentials.json"));
+      const creds = fs47.existsSync(path45.join(os41.homedir(), ".node9", "credentials.json"));
       if (!creds) {
         warn("Not logged in \u2014 audit rows stay local", "Run: node9 login <api-key>");
       } else if (!cfg.settings.approvers.cloud) {
@@ -22329,8 +22529,8 @@ function registerDoctorCommand(program2, version2) {
 // src/cli/commands/audit.ts
 import chalk12 from "chalk";
 import fs48 from "fs";
-import path45 from "path";
-import os41 from "os";
+import path46 from "path";
+import os42 from "os";
 function formatRelativeTime(timestamp) {
   const diff = Date.now() - new Date(timestamp).getTime();
   const sec = Math.floor(diff / 1e3);
@@ -22343,7 +22543,7 @@ function formatRelativeTime(timestamp) {
 }
 function registerAuditCommand(program2) {
   program2.command("audit").description("View local execution audit log").option("--tail <n>", "Number of entries to show", "20").option("--tool <pattern>", "Filter by tool name (substring match)").option("--deny", "Show only denied actions").option("--json", "Output raw JSON").action((options) => {
-    const logPath = path45.join(os41.homedir(), ".node9", "audit.log");
+    const logPath = path46.join(os42.homedir(), ".node9", "audit.log");
     if (!fs48.existsSync(logPath)) {
       console.log(
         chalk12.yellow("No audit logs found. Run node9 with an agent to generate entries.")
@@ -22410,8 +22610,8 @@ init_costSync();
 init_litellm();
 init_cost_codex();
 import fs49 from "fs";
-import os42 from "os";
-import path46 from "path";
+import os43 from "os";
+import path47 from "path";
 var TEST_COMMAND_RE3 = /(?:^|\s)(npm\s+(?:run\s+)?test|npx\s+(?:vitest|jest|mocha)|yarn\s+(?:run\s+)?test|pnpm\s+(?:run\s+)?test|vitest|jest|mocha|pytest|py\.test|cargo\s+test|go\s+test|bundle\s+exec\s+rspec|rspec|phpunit|dotnet\s+test)\b/i;
 function buildTestTimestamps(allEntries) {
   const testTs = /* @__PURE__ */ new Set();
@@ -22539,7 +22739,7 @@ function freezeClaudeCost(acc) {
   };
 }
 function processClaudeCostProject(proj, projectsDir, start, end, acc) {
-  const projPath = path46.join(projectsDir, proj);
+  const projPath = path47.join(projectsDir, proj);
   let files;
   try {
     const stat = fs49.statSync(projPath);
@@ -22550,7 +22750,7 @@ function processClaudeCostProject(proj, projectsDir, start, end, acc) {
   }
   const startMs = start.getTime();
   for (const file of files) {
-    const filePath = path46.join(projPath, file);
+    const filePath = path47.join(projPath, file);
     try {
       if (fs49.statSync(filePath).mtimeMs < startMs) continue;
     } catch {
@@ -22680,28 +22880,28 @@ function listCodexSessionFiles2(sessionsBase) {
   if (!fs49.existsSync(sessionsBase)) return jsonlFiles;
   try {
     for (const year of fs49.readdirSync(sessionsBase)) {
-      const yearPath = path46.join(sessionsBase, year);
+      const yearPath = path47.join(sessionsBase, year);
       try {
         if (!fs49.statSync(yearPath).isDirectory()) continue;
       } catch {
         continue;
       }
       for (const month of fs49.readdirSync(yearPath)) {
-        const monthPath = path46.join(yearPath, month);
+        const monthPath = path47.join(yearPath, month);
         try {
           if (!fs49.statSync(monthPath).isDirectory()) continue;
         } catch {
           continue;
         }
         for (const day of fs49.readdirSync(monthPath)) {
-          const dayPath = path46.join(monthPath, day);
+          const dayPath = path47.join(monthPath, day);
           try {
             if (!fs49.statSync(dayPath).isDirectory()) continue;
           } catch {
             continue;
           }
           for (const file of fs49.readdirSync(dayPath)) {
-            if (file.endsWith(".jsonl")) jsonlFiles.push(path46.join(dayPath, file));
+            if (file.endsWith(".jsonl")) jsonlFiles.push(path47.join(dayPath, file));
           }
         }
       }
@@ -22827,7 +23027,7 @@ function listGeminiSessionFiles2(geminiTmpDir2) {
     return out;
   }
   for (const proj of dirs) {
-    const chatsDir = path46.join(geminiTmpDir2, proj, "chats");
+    const chatsDir = path47.join(geminiTmpDir2, proj, "chats");
     let files;
     try {
       if (!fs49.statSync(chatsDir).isDirectory()) continue;
@@ -22837,7 +23037,7 @@ function listGeminiSessionFiles2(geminiTmpDir2) {
     }
     for (const f of files) {
       if (!f.endsWith(".jsonl")) continue;
-      out.push({ projectKey: proj, file: path46.join(chatsDir, f) });
+      out.push({ projectKey: proj, file: path47.join(chatsDir, f) });
     }
   }
   return out;
@@ -22852,10 +23052,10 @@ function loadGeminiCost(start, end, geminiTmpDir2) {
 }
 function aggregateReportFromAudit(period, opts = {}) {
   const now = opts.now ?? /* @__PURE__ */ new Date();
-  const auditLogPath = opts.auditLogPath ?? path46.join(os42.homedir(), ".node9", "audit.log");
-  const claudeProjectsDir = opts.claudeProjectsDir ?? path46.join(os42.homedir(), ".claude", "projects");
-  const codexSessionsDir2 = opts.codexSessionsDir ?? path46.join(os42.homedir(), ".codex", "sessions");
-  const geminiTmpDir2 = opts.geminiTmpDir ?? path46.join(os42.homedir(), ".gemini", "tmp");
+  const auditLogPath = opts.auditLogPath ?? path47.join(os43.homedir(), ".node9", "audit.log");
+  const claudeProjectsDir = opts.claudeProjectsDir ?? path47.join(os43.homedir(), ".claude", "projects");
+  const codexSessionsDir2 = opts.codexSessionsDir ?? path47.join(os43.homedir(), ".codex", "sessions");
+  const geminiTmpDir2 = opts.geminiTmpDir ?? path47.join(os43.homedir(), ".gemini", "tmp");
   const hasAuditFile = fs49.existsSync(auditLogPath);
   const allEntries = opts.preloadedAuditEntries ?? parseAuditLog(auditLogPath);
   const unackedDlp = allEntries.filter((e) => e.source === "response-dlp");
@@ -23556,8 +23756,8 @@ init_daemon();
 init_agent_wiring();
 import chalk15 from "chalk";
 import fs50 from "fs";
-import path47 from "path";
-import os43 from "os";
+import path48 from "path";
+import os44 from "os";
 function printAgentSection(label2, hookPairs, wrapped) {
   console.log(chalk15.bold(`  ${label2}`));
   for (const { name, present } of hookPairs) {
@@ -23611,8 +23811,8 @@ function registerStatusCommand(program2) {
     console.log("");
     const modeLabel = settings.mode === "audit" ? chalk15.blue("audit") : settings.mode === "strict" ? chalk15.red("strict") : chalk15.white("standard");
     console.log(`  Mode:    ${modeLabel}`);
-    const projectConfig = path47.join(process.cwd(), "node9.config.json");
-    const globalConfig = path47.join(os43.homedir(), ".node9", "config.json");
+    const projectConfig = path48.join(process.cwd(), "node9.config.json");
+    const globalConfig = path48.join(os44.homedir(), ".node9", "config.json");
     console.log(
       `  Local:   ${fs50.existsSync(projectConfig) ? chalk15.green("Active (node9.config.json)") : chalk15.gray("Not present")}`
     );
@@ -23624,7 +23824,7 @@ function registerStatusCommand(program2) {
         `  Sandbox: ${chalk15.green(`${mergedConfig.policy.sandboxPaths.length} safe zones active`)}`
       );
     }
-    const wiring = getAgentWiring(os43.homedir()).filter((a) => a.present);
+    const wiring = getAgentWiring(os44.homedir()).filter((a) => a.present);
     if (wiring.length > 0) {
       console.log("");
       console.log(chalk15.bold("  Agent Wiring:"));
@@ -23664,9 +23864,9 @@ init_shields();
 init_service();
 import chalk16 from "chalk";
 import fs51 from "fs";
-import path48 from "path";
-import os44 from "os";
-import https5 from "https";
+import path49 from "path";
+import os45 from "os";
+import https6 from "https";
 var DEFAULT_SHIELDS = ["bash-safe", "filesystem", "project-jail"];
 function buildTelemetryPayload(agents, firstInstall) {
   return {
@@ -23680,7 +23880,7 @@ function buildTelemetryPayload(agents, firstInstall) {
 function fireTelemetryPing(agents, firstInstall) {
   try {
     const body = JSON.stringify(buildTelemetryPayload(agents, firstInstall));
-    const req = https5.request(
+    const req = https6.request(
       {
         hostname: "api.node9.ai",
         path: "/api/v1/telemetry",
@@ -23751,7 +23951,7 @@ function registerInitCommand(program2) {
         }
         console.log("");
       }
-      const configPath = path48.join(os44.homedir(), ".node9", "config.json");
+      const configPath = path49.join(os45.homedir(), ".node9", "config.json");
       const isFirstInstall = !fs51.existsSync(configPath);
       if (fs51.existsSync(configPath) && !options.force) {
         try {
@@ -23773,7 +23973,7 @@ function registerInitCommand(program2) {
           ...DEFAULT_CONFIG,
           settings: { ...DEFAULT_CONFIG.settings, mode: chosenMode }
         };
-        const dir = path48.dirname(configPath);
+        const dir = path49.dirname(configPath);
         if (!fs51.existsSync(dir)) fs51.mkdirSync(dir, { recursive: true });
         fs51.writeFileSync(configPath, JSON.stringify(configToSave, null, 2) + "\n");
         console.log(chalk16.green(`\u2705 Config created: ${configPath}`));
@@ -23880,7 +24080,7 @@ function registerInitCommand(program2) {
 }
 
 // src/cli/commands/undo.ts
-import path49 from "path";
+import path50 from "path";
 import chalk18 from "chalk";
 
 // src/tui/undo-navigator.ts
@@ -24039,7 +24239,7 @@ function findMatchingCwd(startDir, history) {
   let dir = startDir;
   while (true) {
     if (cwds.has(dir)) return dir;
-    const parent = path49.dirname(dir);
+    const parent = path50.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -24675,8 +24875,8 @@ function registerMcpGatewayCommand(program2) {
 // src/mcp-server/index.ts
 import readline5 from "readline";
 import fs53 from "fs";
-import os46 from "os";
-import path51 from "path";
+import os47 from "os";
+import path52 from "path";
 import { spawnSync as spawnSync4 } from "child_process";
 init_core();
 init_daemon();
@@ -24684,8 +24884,8 @@ init_shields();
 
 // src/auth/egress-config.ts
 import fs52 from "fs";
-import os45 from "os";
-import path50 from "path";
+import os46 from "os";
+import path51 from "path";
 var DEFAULT_EGRESS = {
   enabled: false,
   mode: "review",
@@ -24694,7 +24894,7 @@ var DEFAULT_EGRESS = {
   allowPrivate: true
 };
 function egressConfigPath() {
-  return path50.join(os45.homedir(), ".node9", "config.json");
+  return path51.join(os46.homedir(), ".node9", "config.json");
 }
 function readEgressRawConfig() {
   let text;
@@ -24714,7 +24914,7 @@ function readEgressRawConfig() {
 }
 function writeEgressRawConfig(config) {
   const p = egressConfigPath();
-  fs52.mkdirSync(path50.dirname(p), { recursive: true });
+  fs52.mkdirSync(path51.dirname(p), { recursive: true });
   fs52.writeFileSync(p, JSON.stringify(config, null, 2) + "\n", { mode: 384 });
 }
 function applyEgress(config, change) {
@@ -25100,8 +25300,8 @@ function handleStatus() {
   lines.push(`Active shields: ${activeShields.length > 0 ? activeShields.join(", ") : "none"}`);
   lines.push(`Smart rules: ${config.policy.smartRules.length} loaded`);
   lines.push(`DLP: ${config.policy.dlp?.enabled !== false ? "enabled" : "disabled"}`);
-  const projectConfig = path51.join(process.cwd(), "node9.config.json");
-  const globalConfig = path51.join(os46.homedir(), ".node9", "config.json");
+  const projectConfig = path52.join(process.cwd(), "node9.config.json");
+  const globalConfig = path52.join(os47.homedir(), ".node9", "config.json");
   lines.push(
     `Project config (node9.config.json): ${fs53.existsSync(projectConfig) ? "present" : "not found"}`
   );
@@ -25212,7 +25412,7 @@ function handleEgressDeny(args) {
   addEgressHost("deny", host);
   return `Denied egress to ${host} (deny always wins over allow).`;
 }
-var GLOBAL_CONFIG_PATH = path51.join(os46.homedir(), ".node9", "config.json");
+var GLOBAL_CONFIG_PATH = path52.join(os47.homedir(), ".node9", "config.json");
 var APPROVER_CHANNELS = ["native", "browser", "cloud", "terminal"];
 function readGlobalConfigRaw() {
   try {
@@ -25224,7 +25424,7 @@ function readGlobalConfigRaw() {
   return {};
 }
 function writeGlobalConfigRaw(data) {
-  const dir = path51.dirname(GLOBAL_CONFIG_PATH);
+  const dir = path52.dirname(GLOBAL_CONFIG_PATH);
   if (!fs53.existsSync(dir)) fs53.mkdirSync(dir, { recursive: true });
   fs53.writeFileSync(GLOBAL_CONFIG_PATH, JSON.stringify(data, null, 2) + "\n");
 }
@@ -25270,7 +25470,7 @@ function handleApproverSet(args) {
 function handleAuditGet(args) {
   const limit = Math.min(typeof args.limit === "number" ? args.limit : 20, 100);
   const filter = typeof args.filter === "string" && args.filter !== "all" ? args.filter : null;
-  const auditPath = path51.join(os46.homedir(), ".node9", "audit.log");
+  const auditPath = path52.join(os47.homedir(), ".node9", "audit.log");
   if (!fs53.existsSync(auditPath)) return "No audit log found.";
   const rawLines = fs53.readFileSync(auditPath, "utf-8").trim().split("\n").filter(Boolean);
   const parsed = [];
@@ -25778,6 +25978,17 @@ init_sync();
 import chalk22 from "chalk";
 function registerSyncCommand(program2) {
   const policy = program2.command("policy").description("Manage cloud policy rules");
+  policy.command("push").description("Push this machine's effective policy to the node9 dashboard").action(async () => {
+    process.stdout.write(chalk22.cyan("Pushing policy to the dashboard\u2026"));
+    const result = await runPolicyPush();
+    process.stdout.write("\n");
+    if (!result.ok) {
+      console.error(chalk22.red(`\u2717 ${result.reason}`));
+      process.exit(1);
+    }
+    console.log(chalk22.green("\u2713 Policy mirrored to the dashboard"));
+    console.log(chalk22.gray("  See it under Security Policy \u2192 Machines"));
+  });
   policy.command("sync").description("Sync cloud policy rules to local cache (~/.node9/rules-cache.json)").action(async () => {
     process.stdout.write(chalk22.cyan("Syncing cloud policy rules\u2026"));
     const result = await runCloudSync();
@@ -26226,12 +26437,12 @@ import chalk27 from "chalk";
 
 // src/shields/jail.ts
 import fs55 from "fs";
-import os47 from "os";
-import path52 from "path";
+import os48 from "os";
+import path53 from "path";
 init_shields();
 var USER_JAIL_SHIELD = "user-jail";
 function jailStorePath() {
-  return path52.join(os47.homedir(), ".node9", "jail-paths.json");
+  return path53.join(os48.homedir(), ".node9", "jail-paths.json");
 }
 function readJailPaths() {
   let text;
@@ -26254,7 +26465,7 @@ function readJailPaths() {
 }
 function writeJailPaths(paths) {
   const p = jailStorePath();
-  fs55.mkdirSync(path52.dirname(p), { recursive: true });
+  fs55.mkdirSync(path53.dirname(p), { recursive: true });
   fs55.writeFileSync(p, JSON.stringify({ paths }, null, 2) + "\n", { mode: 384 });
 }
 function addJailPath(rawPath, verdict) {
@@ -26277,7 +26488,7 @@ function removeJailPath(rawPath) {
   return { removed, paths: after };
 }
 function regenerateUserJail(paths) {
-  const file = path52.join(USER_SHIELDS_DIR_PATH, `${USER_JAIL_SHIELD}.json`);
+  const file = path53.join(USER_SHIELDS_DIR_PATH, `${USER_JAIL_SHIELD}.json`);
   if (paths.length === 0) {
     const active2 = readActiveShields();
     if (active2.includes(USER_JAIL_SHIELD)) {
@@ -26400,12 +26611,12 @@ function registerJailCommand(program2) {
 init_config();
 import chalk28 from "chalk";
 import fs58 from "fs";
-import path55 from "path";
+import path56 from "path";
 import { spawnSync as spawnSync6 } from "child_process";
 
 // src/sandbox/config.ts
 import fs56 from "fs";
-import path53 from "path";
+import path54 from "path";
 import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
 var SANDBOX_CONFIG_FILE = "node9.sandbox.yaml";
 var FORBIDDEN_ENV = /* @__PURE__ */ new Set(["NODE9_API_KEY", "NODE9_API_URL"]);
@@ -26478,7 +26689,7 @@ function scaffoldSandboxYaml(agent) {
   return header + stringifyYaml(defaultSandboxConfig(agent));
 }
 function sandboxConfigPath(cwd = process.cwd()) {
-  return path53.join(cwd, SANDBOX_CONFIG_FILE);
+  return path54.join(cwd, SANDBOX_CONFIG_FILE);
 }
 function loadSandboxConfig(cwd = process.cwd(), fallbackAgent = "claude") {
   const p = sandboxConfigPath(cwd);
@@ -26547,12 +26758,12 @@ init_templates();
 // src/sandbox/runtime.ts
 init_templates();
 import fs57 from "fs";
-import os48 from "os";
-import path54 from "path";
+import os49 from "os";
+import path55 from "path";
 import crypto8 from "crypto";
 import { spawnSync as spawnSync5 } from "child_process";
 function sandboxDataDir(cwd = process.cwd()) {
-  return path54.join(cwd, ".node9", "sandbox", "data");
+  return path55.join(cwd, ".node9", "sandbox", "data");
 }
 function detectEngine(engine) {
   const r = spawnSync5(engine, ["--version"], { encoding: "utf-8" });
@@ -26563,7 +26774,7 @@ function detectEngine(engine) {
 }
 function agentCredentialsMount(agent) {
   const rel = agent === "codex" ? ".codex/auth.json" : ".claude/.credentials.json";
-  return { hostPath: path54.join(os48.homedir(), rel), target: `/home/${RUN_AS_USER}/${rel}` };
+  return { hostPath: path55.join(os49.homedir(), rel), target: `/home/${RUN_AS_USER}/${rel}` };
 }
 function buildRunArgs(opts) {
   const { config, workspaceHostPath, dataHostPath, allowlistHostPath, agentArgs } = opts;
@@ -26591,30 +26802,30 @@ function imageContentHash(dockerfile, entrypoint) {
   return crypto8.createHash("sha256").update(dockerfile).update("\0").update(entrypoint).digest("hex").slice(0, 16);
 }
 function sandboxBuildDir(cwd = process.cwd()) {
-  return path54.join(cwd, ".node9", "sandbox", "build");
+  return path55.join(cwd, ".node9", "sandbox", "build");
 }
 function writeBuildContext(cwd, dockerfile, entrypoint) {
   const dir = sandboxBuildDir(cwd);
   fs57.mkdirSync(dir, { recursive: true });
-  fs57.writeFileSync(path54.join(dir, "Dockerfile"), dockerfile);
-  fs57.writeFileSync(path54.join(dir, "entrypoint.sh"), entrypoint);
+  fs57.writeFileSync(path55.join(dir, "Dockerfile"), dockerfile);
+  fs57.writeFileSync(path55.join(dir, "entrypoint.sh"), entrypoint);
   return dir;
 }
 function writeAllowlist(cwd, hosts) {
-  const dir = path54.join(cwd, ".node9", "sandbox");
+  const dir = path55.join(cwd, ".node9", "sandbox");
   fs57.mkdirSync(dir, { recursive: true });
-  const p = path54.join(dir, "allowed-domains.txt");
+  const p = path55.join(dir, "allowed-domains.txt");
   fs57.writeFileSync(p, hosts.join("\n") + "\n");
   return p;
 }
 function resolveHomePath(p) {
-  return p.startsWith("~") ? path54.join(os48.homedir(), p.slice(1)) : path54.resolve(p);
+  return p.startsWith("~") ? path55.join(os49.homedir(), p.slice(1)) : path55.resolve(p);
 }
 
 // src/cli/commands/sandbox.ts
 function seedDataDirConfig(dataDir, sandbox) {
   fs58.mkdirSync(dataDir, { recursive: true });
-  const configPath = path55.join(dataDir, "config.json");
+  const configPath = path56.join(dataDir, "config.json");
   const seed = {
     settings: {
       approvers: {
@@ -26679,7 +26890,7 @@ function registerSandboxCommand(program2, version2) {
     const buildDir = writeBuildContext(cwd, dockerfile, entrypoint);
     const hash = imageContentHash(dockerfile, entrypoint);
     const image = sandbox.runtime.image;
-    const hashFile = path55.join(sandboxBuildDir(cwd), ".image-hash");
+    const hashFile = path56.join(sandboxBuildDir(cwd), ".image-hash");
     const lastHash = fs58.existsSync(hashFile) ? fs58.readFileSync(hashFile, "utf-8").trim() : "";
     const imageExists = spawnSync6(sandbox.runtime.engine, ["image", "inspect", image], { stdio: "ignore" }).status === 0;
     const needBuild = sandbox.runtime.rebuild === "always" || !imageExists || sandbox.runtime.rebuild !== "never" && lastHash !== hash;
@@ -26722,7 +26933,7 @@ function registerSandboxCommand(program2, version2) {
     process.exit(r.status ?? 0);
   });
   cmd.command("tail").description("Stream the sandbox's audit log (host-side)").action(() => {
-    const auditPath = path55.join(sandboxDataDir(), "audit.log");
+    const auditPath = path56.join(sandboxDataDir(), "audit.log");
     if (!fs58.existsSync(auditPath)) {
       console.log(chalk28.dim("  no sandbox audit yet."));
       return;
@@ -26730,7 +26941,7 @@ function registerSandboxCommand(program2, version2) {
     spawnSync6("tail", ["-f", auditPath], { stdio: "inherit" });
   });
   cmd.command("logs").description("Dump the sandbox's audit log").action(() => {
-    const auditPath = path55.join(sandboxDataDir(), "audit.log");
+    const auditPath = path56.join(sandboxDataDir(), "audit.log");
     if (!fs58.existsSync(auditPath)) {
       console.log(chalk28.dim("  no sandbox audit yet."));
       return;
@@ -26749,7 +26960,7 @@ function registerSandboxCommand(program2, version2) {
         stdio: "ignore"
       });
     }
-    fs58.rmSync(path55.join(cwd, ".node9", "sandbox"), { recursive: true, force: true });
+    fs58.rmSync(path56.join(cwd, ".node9", "sandbox"), { recursive: true, force: true });
     console.log(chalk28.green("  \u2713 sandbox image + build + data removed."));
   });
 }
@@ -26761,8 +26972,8 @@ init_cost_gemini();
 init_cost_codex();
 import chalk29 from "chalk";
 import fs59 from "fs";
-import path56 from "path";
-import os49 from "os";
+import path57 from "path";
+import os50 from "os";
 function modelPrice(model) {
   const t = pricingFor(model);
   if (!t) return null;
@@ -26779,10 +26990,10 @@ function encodeProjectPath(projectPath) {
 }
 function sessionJsonlPath(projectPath, sessionId) {
   const encoded = encodeProjectPath(projectPath);
-  return path56.join(os49.homedir(), ".claude", "projects", encoded, `${sessionId}.jsonl`);
+  return path57.join(os50.homedir(), ".claude", "projects", encoded, `${sessionId}.jsonl`);
 }
 function projectLabel(projectPath) {
-  return projectPath.replace(os49.homedir(), "~");
+  return projectPath.replace(os50.homedir(), "~");
 }
 function parseHistoryLines(lines) {
   const entries = [];
@@ -26851,7 +27062,7 @@ function parseSessionLines(lines) {
   return { toolCalls, costUSD, hasSnapshot, modifiedFiles };
 }
 function loadAuditEntries(auditPath) {
-  const aPath = auditPath ?? path56.join(os49.homedir(), ".node9", "audit.log");
+  const aPath = auditPath ?? path57.join(os50.homedir(), ".node9", "audit.log");
   let raw;
   try {
     raw = fs59.readFileSync(aPath, "utf-8");
@@ -26890,7 +27101,7 @@ function auditEntriesInWindow(entries, windowStart, windowEnd) {
   return result;
 }
 function buildGeminiSessions(days, allAuditEntries) {
-  const tmpDir = path56.join(os49.homedir(), ".gemini", "tmp");
+  const tmpDir = path57.join(os50.homedir(), ".gemini", "tmp");
   if (!fs59.existsSync(tmpDir)) return [];
   const cutoff = days !== null ? (() => {
     const d = /* @__PURE__ */ new Date();
@@ -26906,18 +27117,18 @@ function buildGeminiSessions(days, allAuditEntries) {
   }
   const summaries = [];
   for (const slug2 of slugDirs) {
-    const slugPath = path56.join(tmpDir, slug2);
+    const slugPath = path57.join(tmpDir, slug2);
     try {
       if (!fs59.statSync(slugPath).isDirectory()) continue;
     } catch {
       continue;
     }
-    let projectRoot = path56.join(os49.homedir(), slug2);
+    let projectRoot = path57.join(os50.homedir(), slug2);
     try {
-      projectRoot = fs59.readFileSync(path56.join(slugPath, ".project_root"), "utf-8").trim();
+      projectRoot = fs59.readFileSync(path57.join(slugPath, ".project_root"), "utf-8").trim();
     } catch {
     }
-    const chatsDir = path56.join(slugPath, "chats");
+    const chatsDir = path57.join(slugPath, "chats");
     if (!fs59.existsSync(chatsDir)) continue;
     let chatFiles;
     try {
@@ -26928,7 +27139,7 @@ function buildGeminiSessions(days, allAuditEntries) {
     for (const chatFile of chatFiles) {
       let raw;
       try {
-        raw = fs59.readFileSync(path56.join(chatsDir, chatFile), "utf-8");
+        raw = fs59.readFileSync(path57.join(chatsDir, chatFile), "utf-8");
       } catch {
         continue;
       }
@@ -27008,7 +27219,7 @@ function buildGeminiSessions(days, allAuditEntries) {
   return summaries;
 }
 function buildCodexSessions(days, allAuditEntries) {
-  const sessionsBase = path56.join(os49.homedir(), ".codex", "sessions");
+  const sessionsBase = path57.join(os50.homedir(), ".codex", "sessions");
   if (!fs59.existsSync(sessionsBase)) return [];
   const cutoff = days !== null ? (() => {
     const d = /* @__PURE__ */ new Date();
@@ -27019,28 +27230,28 @@ function buildCodexSessions(days, allAuditEntries) {
   const jsonlFiles = [];
   try {
     for (const year of fs59.readdirSync(sessionsBase)) {
-      const yearPath = path56.join(sessionsBase, year);
+      const yearPath = path57.join(sessionsBase, year);
       try {
         if (!fs59.statSync(yearPath).isDirectory()) continue;
       } catch {
         continue;
       }
       for (const month of fs59.readdirSync(yearPath)) {
-        const monthPath = path56.join(yearPath, month);
+        const monthPath = path57.join(yearPath, month);
         try {
           if (!fs59.statSync(monthPath).isDirectory()) continue;
         } catch {
           continue;
         }
         for (const day of fs59.readdirSync(monthPath)) {
-          const dayPath = path56.join(monthPath, day);
+          const dayPath = path57.join(monthPath, day);
           try {
             if (!fs59.statSync(dayPath).isDirectory()) continue;
           } catch {
             continue;
           }
           for (const file of fs59.readdirSync(dayPath)) {
-            if (file.endsWith(".jsonl")) jsonlFiles.push(path56.join(dayPath, file));
+            if (file.endsWith(".jsonl")) jsonlFiles.push(path57.join(dayPath, file));
           }
         }
       }
@@ -27138,7 +27349,7 @@ function buildCodexSessions(days, allAuditEntries) {
   return summaries;
 }
 function buildSessions(days, historyPath) {
-  const hPath = historyPath ?? path56.join(os49.homedir(), ".claude", "history.jsonl");
+  const hPath = historyPath ?? path57.join(os50.homedir(), ".claude", "history.jsonl");
   let historyRaw = "";
   try {
     historyRaw = fs59.readFileSync(hPath, "utf-8");
@@ -27560,11 +27771,11 @@ function registerSessionTaintCommand(program2) {
 // src/cli/commands/skill-pin.ts
 import chalk31 from "chalk";
 import fs60 from "fs";
-import os50 from "os";
-import path57 from "path";
+import os51 from "os";
+import path58 from "path";
 function wipeSkillSessions() {
   try {
-    fs60.rmSync(path57.join(os50.homedir(), ".node9", "skill-sessions"), {
+    fs60.rmSync(path58.join(os51.homedir(), ".node9", "skill-sessions"), {
       recursive: true,
       force: true
     });
@@ -27647,10 +27858,10 @@ function registerSkillPinCommand(program2) {
 
 // src/cli/commands/decisions.ts
 import fs61 from "fs";
-import os51 from "os";
-import path58 from "path";
+import os52 from "os";
+import path59 from "path";
 import chalk32 from "chalk";
-var DECISIONS_FILE2 = path58.join(os51.homedir(), ".node9", "decisions.json");
+var DECISIONS_FILE2 = path59.join(os52.homedir(), ".node9", "decisions.json");
 function readDecisions() {
   try {
     if (!fs61.existsSync(DECISIONS_FILE2)) return {};
@@ -27666,7 +27877,7 @@ function readDecisions() {
   }
 }
 function writeDecisions(d) {
-  const dir = path58.dirname(DECISIONS_FILE2);
+  const dir = path59.dirname(DECISIONS_FILE2);
   if (!fs61.existsSync(dir)) fs61.mkdirSync(dir, { recursive: true });
   const tmp = `${DECISIONS_FILE2}.${process.pid}.tmp`;
   fs61.writeFileSync(tmp, JSON.stringify(d, null, 2));
@@ -27728,10 +27939,10 @@ Persistent decisions  (${entries.length})
 // src/cli/commands/dlp.ts
 import chalk33 from "chalk";
 import fs62 from "fs";
-import path59 from "path";
-import os52 from "os";
-var AUDIT_LOG = path59.join(os52.homedir(), ".node9", "audit.log");
-var RESOLVED_FILE = path59.join(os52.homedir(), ".node9", "dlp-resolved.json");
+import path60 from "path";
+import os53 from "os";
+var AUDIT_LOG = path60.join(os53.homedir(), ".node9", "audit.log");
+var RESOLVED_FILE = path60.join(os53.homedir(), ".node9", "dlp-resolved.json");
 var ANSI_RE = /\x1b(?:\[[0-9;?]*[a-zA-Z]|\][^\x07\x1b]*(?:\x07|\x1b\\)|[@-_])/g;
 function stripAnsi(s) {
   return s.replace(ANSI_RE, "");
@@ -27852,13 +28063,13 @@ function registerDlpCommand(program2) {
 init_dlp();
 import chalk34 from "chalk";
 import fs63 from "fs";
-import path60 from "path";
-import os53 from "os";
+import path61 from "path";
+import os54 from "os";
 function findJsonlFiles(dir) {
   const results = [];
   if (!fs63.existsSync(dir)) return results;
   for (const entry of fs63.readdirSync(dir, { withFileTypes: true })) {
-    const full = path60.join(dir, entry.name);
+    const full = path61.join(dir, entry.name);
     if (entry.isDirectory()) results.push(...findJsonlFiles(full));
     else if (entry.isFile() && entry.name.endsWith(".jsonl")) results.push(full);
   }
@@ -27961,7 +28172,7 @@ function findJsonFiles(dir) {
   const results = [];
   if (!fs63.existsSync(dir)) return results;
   for (const entry of fs63.readdirSync(dir, { withFileTypes: true })) {
-    const full = path60.join(dir, entry.name);
+    const full = path61.join(dir, entry.name);
     if (entry.isDirectory()) results.push(...findJsonFiles(full));
     else if (entry.isFile() && entry.name.endsWith(".json")) results.push(full);
   }
@@ -27970,9 +28181,9 @@ function findJsonFiles(dir) {
 function registerMaskCommand(program2) {
   program2.command("mask").description("Redact plaintext secrets from local AI session history files").option("--dry-run", "show what would be redacted without making changes").option("--all", "scan all history (default: last 30 days)").action(async (options) => {
     const dryRun = !!options.dryRun;
-    const home = os53.homedir();
-    const claudeDir = path60.join(home, ".claude", "projects");
-    const geminiDir = path60.join(home, ".gemini", "tmp");
+    const home = os54.homedir();
+    const claudeDir = path61.join(home, ".claude", "projects");
+    const geminiDir = path61.join(home, ".gemini", "tmp");
     const allFiles = [
       ...findJsonlFiles(claudeDir).map((p) => ({ path: p, type: "jsonl" })),
       ...findJsonFiles(geminiDir).map((p) => ({ path: p, type: "json" }))
@@ -28036,15 +28247,15 @@ function registerMaskCommand(program2) {
 // src/cli.ts
 init_blast();
 var { version } = JSON.parse(
-  fs66.readFileSync(path63.join(__dirname, "../package.json"), "utf-8")
+  fs66.readFileSync(path64.join(__dirname, "../package.json"), "utf-8")
 );
 var program = new Command();
 program.name("node9").description("The Sudo Command for AI Agents").version(version);
 program.command("login").argument("<apiKey>").option("--local", "Save key for audit/logging only \u2014 local config still controls all decisions").option("--profile <name>", 'Save as a named profile (default: "default")').action((apiKey, options) => {
   const DEFAULT_API_URL2 = "https://api.node9.ai/api/v1/intercept";
-  const credPath = path63.join(os56.homedir(), ".node9", "credentials.json");
-  if (!fs66.existsSync(path63.dirname(credPath)))
-    fs66.mkdirSync(path63.dirname(credPath), { recursive: true });
+  const credPath = path64.join(os57.homedir(), ".node9", "credentials.json");
+  if (!fs66.existsSync(path64.dirname(credPath)))
+    fs66.mkdirSync(path64.dirname(credPath), { recursive: true });
   const profileName = options.profile || "default";
   let existingCreds = {};
   try {
@@ -28064,7 +28275,7 @@ program.command("login").argument("<apiKey>").option("--local", "Save key for au
   fs66.writeFileSync(credPath, JSON.stringify(existingCreds, null, 2), { mode: 384 });
   let effectiveCloud = null;
   if (profileName === "default") {
-    const configPath = path63.join(os56.homedir(), ".node9", "config.json");
+    const configPath = path64.join(os57.homedir(), ".node9", "config.json");
     let config = {};
     try {
       if (fs66.existsSync(configPath))
@@ -28083,8 +28294,8 @@ program.command("login").argument("<apiKey>").option("--local", "Save key for au
       approvers.cloud = false;
     }
     s.approvers = approvers;
-    if (!fs66.existsSync(path63.dirname(configPath)))
-      fs66.mkdirSync(path63.dirname(configPath), { recursive: true });
+    if (!fs66.existsSync(path64.dirname(configPath)))
+      fs66.mkdirSync(path64.dirname(configPath), { recursive: true });
     fs66.writeFileSync(configPath, JSON.stringify(config, null, 2), { mode: 384 });
     effectiveCloud = approvers.cloud === true;
   }
@@ -28194,37 +28405,21 @@ program.command("setup", { hidden: true }).description('Alias for "addto" \u2014
   );
   process.exit(1);
 });
-program.command("removefrom", { hidden: true }).description("Remove Node9 hooks from an AI agent configuration").addHelpText(
-  "after",
-  "\n  Supported targets:  claude  antigravity  copilot  gemini  cursor  codex  windsurf  vscode  hud"
-).argument(
-  "<target>",
-  "The agent to remove from: claude | antigravity | copilot | gemini | cursor | codex | windsurf | vscode | hud"
-).action((target) => {
-  let fn;
-  if (target === "claude") fn = teardownClaude;
-  else if (target === "gemini") fn = teardownGemini;
-  else if (target === "antigravity" || target === "agy") fn = teardownAntigravity;
-  else if (target === "copilot") fn = teardownCopilot;
-  else if (target === "cursor") fn = teardownCursor;
-  else if (target === "codex") fn = teardownCodex;
-  else if (target === "windsurf") fn = teardownWindsurf;
-  else if (target === "vscode") fn = teardownVSCode;
-  else if (target === "hermes") fn = teardownHermes;
-  else if (target === "hud") fn = teardownHud;
-  else {
+program.command("removefrom", { hidden: true }).description("Remove Node9 hooks from an AI agent configuration").addHelpText("after", `
+  Supported targets:  ${agentTeardownTargets().join("  ")}`).argument("<target>", `The agent to remove from: ${agentTeardownTargets().join(" | ")}`).action((target) => {
+  const agent = resolveAgentTeardown(target);
+  if (!agent) {
     console.error(
-      chalk36.red(
-        `Unknown target: "${target}". Supported: claude, antigravity, copilot, gemini, cursor, codex, windsurf, vscode, hermes, hud`
-      )
+      chalk36.red(`Unknown target: "${target}". Supported: ${agentTeardownTargets().join(", ")}`)
     );
     process.exit(1);
+    return;
   }
   console.log(chalk36.cyan(`
-\u{1F6E1}\uFE0F  Node9: removing hooks from ${target}...
+\u{1F6E1}\uFE0F  Node9: removing hooks from ${agent.label}...
 `));
   try {
-    fn();
+    agent.fn();
   } catch (err2) {
     console.error(chalk36.red(`  \u26A0\uFE0F  Failed: ${err2 instanceof Error ? err2.message : String(err2)}`));
     process.exit(1);
@@ -28242,15 +28437,7 @@ program.command("uninstall").description("Remove all Node9 hooks and optionally
   }
   console.log(chalk36.bold("\nRemoving hooks..."));
   let teardownFailed = false;
-  for (const [label2, fn] of [
-    ["Claude", teardownClaude],
-    ["Gemini", teardownGemini],
-    ["Cursor", teardownCursor],
-    ["Codex", teardownCodex],
-    ["Windsurf", teardownWindsurf],
-    ["VSCode", teardownVSCode],
-    ["Hermes", teardownHermes]
-  ]) {
+  for (const { label: label2, fn } of AGENT_TEARDOWNS) {
     try {
       fn();
     } catch (err2) {
@@ -28262,8 +28449,21 @@ program.command("uninstall").description("Remove all Node9 hooks and optionally
       );
     }
   }
+  try {
+    const residual = getAgentWiring().filter((a) => a.wireState === "wired");
+    if (residual.length === 0) {
+      console.log(chalk36.green("  \u2705 Verified \u2014 no node9 hooks or plugin shims remain"));
+    } else {
+      teardownFailed = true;
+      console.error(chalk36.red("  \u26A0\uFE0F  Still wired after teardown:"));
+      for (const a of residual) {
+        console.error(chalk36.red(`     \u2022 ${a.label} \u2014 ${a.settingsPath}`));
+      }
+    }
+  } catch {
+  }
   if (options.purge) {
-    const node9Dir = path63.join(os56.homedir(), ".node9");
+    const node9Dir = path64.join(os57.homedir(), ".node9");
     if (fs66.existsSync(node9Dir)) {
       const confirmed = await confirm2({
         message: `Permanently delete ${node9Dir} (config, audit log, credentials)?`,
@@ -28394,7 +28594,7 @@ program.command("tail").description("Stream live agent activity to the terminal"
 });
 program.command("monitor").description("Live interactive dashboard \u2014 activity feed, approvals, security signals").action(async () => {
   try {
-    const dashboardPath = path63.join(__dirname, "dashboard.mjs");
+    const dashboardPath = path64.join(__dirname, "dashboard.mjs");
     const dynamicImport = new Function("id", "return import(id)");
     const mod = await dynamicImport(`file://${dashboardPath}`);
     await mod.startMonitor();
@@ -28432,9 +28632,9 @@ Claude Code spawns this command every ~300ms and writes a JSON payload to stdin.
 Run "node9 addto claude" to register it as the statusLine.`
 ).argument("[subcommand]", 'Optional: "debug on" / "debug off" to toggle stdin logging').argument("[state]", 'on|off \u2014 used with "debug" subcommand').action(async (subcommand, state) => {
   if (subcommand === "debug") {
-    const flagFile = path63.join(os56.homedir(), ".node9", "hud-debug");
+    const flagFile = path64.join(os57.homedir(), ".node9", "hud-debug");
     if (state === "on") {
-      fs66.mkdirSync(path63.dirname(flagFile), { recursive: true });
+      fs66.mkdirSync(path64.dirname(flagFile), { recursive: true });
       fs66.writeFileSync(flagFile, "");
       console.log("HUD debug logging enabled \u2192 ~/.node9/hud-debug.log");
       console.log("Tail it with: tail -f ~/.node9/hud-debug.log");
@@ -28561,7 +28761,7 @@ if (process.argv[2] !== "daemon") {
     const isCheckHook = process.argv[2] === "check";
     if (isCheckHook) {
       if (process.env.NODE9_DEBUG === "1" || getConfig().settings.enableHookLogDebug) {
-        const logPath = path63.join(os56.homedir(), ".node9", "hook-debug.log");
+        const logPath = path64.join(os57.homedir(), ".node9", "hook-debug.log");
         const msg = reason instanceof Error ? reason.message : String(reason);
         fs66.appendFileSync(logPath, `[${(/* @__PURE__ */ new Date()).toISOString()}] UNHANDLED: ${msg}
 `);