@node9/proxy 1.51.0 → 1.53.0

package/dist/cli.js

@@ -240,8 +240,8 @@ function sanitizeConfig(raw) {
     }
   }
   const lines = result.error.issues.map((issue) => {
-    const path65 = issue.path.length > 0 ? issue.path.join(".") : "root";
-    return `  \u2022 ${path65}: ${issue.message}`;
+    const path66 = issue.path.length > 0 ? issue.path.join(".") : "root";
+    return `  \u2022 ${path66}: ${issue.message}`;
   });
   return {
     sanitized,
@@ -1362,9 +1362,9 @@ function matchesPattern(text, patterns) {
   const withoutDotSlash = text.replace(/^\.\//, "");
   return isMatch(withoutDotSlash) || isMatch(`./${withoutDotSlash}`);
 }
-function getNestedValue(obj, path65) {
+function getNestedValue(obj, path66) {
   if (!obj || typeof obj !== "object") return null;
-  const segments = path65.split(".");
+  const segments = path66.split(".");
   for (const seg of segments) {
     if (FORBIDDEN_PATH_SEGMENTS.has(seg)) return null;
   }
@@ -4297,11 +4297,11 @@ function getGlobalSettings() {
   };
 }
 function getCredentials() {
-  const DEFAULT_API_URL2 = "https://api.node9.ai/api/v1/intercept";
+  const DEFAULT_API_URL3 = "https://api.node9.ai/api/v1/intercept";
   if (process.env.NODE9_API_KEY) {
     return {
       apiKey: process.env.NODE9_API_KEY,
-      apiUrl: process.env.NODE9_API_URL || DEFAULT_API_URL2
+      apiUrl: process.env.NODE9_API_URL || DEFAULT_API_URL3
     };
   }
   try {
@@ -4313,13 +4313,13 @@ function getCredentials() {
       if (profile?.apiKey) {
         return {
           apiKey: profile.apiKey,
-          apiUrl: profile.apiUrl || DEFAULT_API_URL2
+          apiUrl: profile.apiUrl || DEFAULT_API_URL3
         };
       }
       if (creds.apiKey) {
         return {
           apiKey: creds.apiKey,
-          apiUrl: creds.apiUrl || DEFAULT_API_URL2
+          apiUrl: creds.apiUrl || DEFAULT_API_URL3
         };
       }
     }
@@ -7787,6 +7787,35 @@ var init_setup_pi_shim = __esm({
 });
 
 // src/setup.ts
+function isNonInteractive() {
+  return process.env.NODE9_NONINTERACTIVE === "1";
+}
+async function confirm(opts) {
+  if (isNonInteractive()) return opts.default ?? false;
+  return (0, import_prompts.confirm)(opts);
+}
+async function setupAgent(agent) {
+  if (agent === "claude") await setupClaude();
+  else if (agent === "gemini") await setupGemini();
+  else if (agent === "antigravity") await setupAntigravity();
+  else if (agent === "copilot") await setupCopilot();
+  else if (agent === "cursor") await setupCursor();
+  else if (agent === "codex") await setupCodex();
+  else if (agent === "windsurf") await setupWindsurf();
+  else if (agent === "vscode") await setupVSCode();
+  else if (agent === "claudeDesktop") await setupClaudeDesktop();
+  else if (agent === "opencode") await setupOpencode();
+  else if (agent === "pi") await setupPi();
+  else if (agent === "hermes") setupHermes();
+}
+async function setupDetectedAgents() {
+  const detected = detectAgents();
+  const found = Object.keys(detected).filter((k) => detected[k]);
+  for (const agent of found) {
+    await setupAgent(agent);
+  }
+  return found;
+}
 function hasNode9McpServer(servers) {
   const entry = servers["node9"];
   return !!entry && entry.command === "node9" && Array.isArray(entry.args) && entry.args[0] === "mcp-server";
@@ -8107,7 +8136,7 @@ async function setupClaude() {
       console.log(import_chalk.default.gray(`    \u2022 ${name}: "${upstream}" \u2192 node9 mcp --upstream "${upstream}"`));
     }
     console.log("");
-    const proceed = await (0, import_prompts.confirm)({ message: "Wrap these MCP servers?", default: true });
+    const proceed = await confirm({ message: "Wrap these MCP servers?", default: true });
     if (proceed) {
       for (const { name, upstream } of serversToWrap) {
         servers[name] = {
@@ -8212,7 +8241,7 @@ async function setupGemini() {
       console.log(import_chalk.default.gray(`    \u2022 ${name}: "${upstream}" \u2192 node9 mcp --upstream "${upstream}"`));
     }
     console.log("");
-    const proceed = await (0, import_prompts.confirm)({ message: "Wrap these MCP servers?", default: true });
+    const proceed = await confirm({ message: "Wrap these MCP servers?", default: true });
     if (proceed) {
       for (const { name, upstream } of serversToWrap) {
         servers[name] = {
@@ -8338,7 +8367,7 @@ async function setupAntigravity() {
         "  \u26A0\uFE0F  Found node9 hooks for the legacy Gemini CLI in ~/.gemini/settings.json.\n     Gemini CLI stops serving AI Pro/Ultra and free tiers on 2026-06-18.\n     Keep them only if you still use Gemini CLI (e.g. enterprise Code Assist)."
       )
     );
-    const clean = await (0, import_prompts.confirm)({
+    const clean = await confirm({
       message: "Remove the legacy Gemini CLI hooks?",
       default: false
     });
@@ -8360,7 +8389,7 @@ async function setupAntigravity() {
       console.log(import_chalk.default.gray(`    \u2022 ${name}: "${upstream}" \u2192 node9 mcp --upstream "${upstream}"`));
     }
     console.log("");
-    const proceed = await (0, import_prompts.confirm)({ message: "Wrap these MCP servers?", default: true });
+    const proceed = await confirm({ message: "Wrap these MCP servers?", default: true });
     if (proceed) {
       for (const { name, upstream } of serversToWrap) {
         servers[name] = {
@@ -8505,7 +8534,7 @@ async function setupCopilot() {
       console.log(import_chalk.default.gray(`    \u2022 ${name}: "${upstream}" \u2192 node9 mcp --upstream "${upstream}"`));
     }
     console.log("");
-    const proceed = await (0, import_prompts.confirm)({ message: "Wrap these MCP servers?", default: true });
+    const proceed = await confirm({ message: "Wrap these MCP servers?", default: true });
     if (proceed) {
       for (const { name, upstream } of serversToWrap) {
         servers[name] = {
@@ -8706,7 +8735,7 @@ async function setupCursor() {
       console.log(import_chalk.default.gray(`    \u2022 ${name}: "${upstream}" \u2192 node9 mcp --upstream "${upstream}"`));
     }
     console.log("");
-    const proceed = await (0, import_prompts.confirm)({ message: "Wrap these MCP servers?", default: true });
+    const proceed = await confirm({ message: "Wrap these MCP servers?", default: true });
     if (proceed) {
       for (const { name, upstream } of serversToWrap) {
         servers[name] = {
@@ -8857,7 +8886,7 @@ async function setupCodex() {
       console.log(import_chalk.default.gray(`    \u2022 ${name}: "${upstream}" \u2192 node9 mcp --upstream "${upstream}"`));
     }
     console.log("");
-    const proceed = await (0, import_prompts.confirm)({ message: "Wrap these MCP servers?", default: true });
+    const proceed = await confirm({ message: "Wrap these MCP servers?", default: true });
     if (proceed) {
       for (const { name, upstream } of serversToWrap) {
         servers[name] = {
@@ -9034,7 +9063,7 @@ async function setupWindsurf() {
       console.log(import_chalk.default.gray(`    \u2022 ${name}: "${upstream}" \u2192 node9 mcp --upstream "${upstream}"`));
     }
     console.log("");
-    const proceed = await (0, import_prompts.confirm)({ message: "Wrap these MCP servers?", default: true });
+    const proceed = await confirm({ message: "Wrap these MCP servers?", default: true });
     if (proceed) {
       for (const { name, upstream } of serversToWrap) {
         servers[name] = {
@@ -9138,7 +9167,7 @@ async function setupVSCode() {
       console.log(import_chalk.default.gray(`    \u2022 ${name}: "${upstream}" \u2192 node9 mcp --upstream "${upstream}"`));
     }
     console.log("");
-    const proceed = await (0, import_prompts.confirm)({ message: "Wrap these MCP servers?", default: true });
+    const proceed = await confirm({ message: "Wrap these MCP servers?", default: true });
     if (proceed) {
       for (const { name, upstream } of serversToWrap) {
         servers[name] = {
@@ -9238,7 +9267,7 @@ async function setupClaudeDesktop() {
       console.log(import_chalk.default.gray(`    \u2022 ${name}: "${upstream}" \u2192 node9 mcp --upstream "${upstream}"`));
     }
     console.log("");
-    const proceed = await (0, import_prompts.confirm)({ message: "Wrap these MCP servers?", default: true });
+    const proceed = await confirm({ message: "Wrap these MCP servers?", default: true });
     if (proceed) {
       for (const { name, upstream } of serversToWrap) {
         servers[name] = {
@@ -16880,7 +16909,7 @@ function readCredentials() {
   if (process.env.NODE9_API_KEY) {
     return {
       apiKey: process.env.NODE9_API_KEY,
-      apiUrl: process.env.NODE9_API_URL ?? DEFAULT_API_URL
+      apiUrl: process.env.NODE9_API_URL ?? DEFAULT_API_URL2
     };
   }
   try {
@@ -16899,11 +16928,11 @@ function readCredentials() {
           // Anything else is taken as-is so users can override the full
           // URL via NODE9_API_URL or a non-standard apiUrl.
           /\/intercept$/.test(profile.apiUrl) ? profile.apiUrl + "/policies/sync" : profile.apiUrl
-        ) : DEFAULT_API_URL
+        ) : DEFAULT_API_URL2
       };
     }
     if (typeof creds.apiKey === "string" && creds.apiKey.length > 0) {
-      return { apiKey: creds.apiKey, apiUrl: DEFAULT_API_URL };
+      return { apiKey: creds.apiKey, apiUrl: DEFAULT_API_URL2 };
     }
   } catch {
   }
@@ -16917,6 +16946,23 @@ function readCachedEtag() {
     return void 0;
   }
 }
+function readCachedSyncIntervalHours() {
+  try {
+    const raw = JSON.parse(import_fs32.default.readFileSync(rulesCacheFile(), "utf-8"));
+    return typeof raw.syncIntervalHours === "number" ? raw.syncIntervalHours : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function pickSyncIntervalMs(cloudHours, localSettings) {
+  if (typeof cloudHours === "number" && Number.isFinite(cloudHours)) {
+    return resolveSyncIntervalMs({ cloudSyncIntervalHours: cloudHours });
+  }
+  return resolveSyncIntervalMs(localSettings);
+}
+function effectiveSyncIntervalMs() {
+  return pickSyncIntervalMs(readCachedSyncIntervalHours(), getConfig().settings);
+}
 function fetchCloudPolicy(apiKey, apiUrl, ifNoneMatch) {
   const parsed = new URL(apiUrl);
   const headers = {
@@ -17226,11 +17272,14 @@ function getCloudRules() {
   }
 }
 function startCloudSync() {
-  const intervalMs = resolveSyncIntervalMs(getConfig().settings);
-  const initial = setTimeout(() => void syncOnce(), 3e4);
-  initial.unref();
-  const recurring = setInterval(() => void syncOnce(), intervalMs);
-  recurring.unref();
+  const scheduleNext = (ms) => {
+    const t = setTimeout(() => {
+      void syncOnce().catch(() => {
+      }).finally(() => scheduleNext(effectiveSyncIntervalMs()));
+    }, ms);
+    t.unref();
+  };
+  scheduleNext(3e4);
 }
 function startForensicBroadcast() {
   const tick = async () => {
@@ -17251,7 +17300,7 @@ function startForensicBroadcast() {
   const recurring = setInterval(() => void tick(), FORENSIC_BROADCAST_INTERVAL_MS);
   recurring.unref();
 }
-var import_fs32, import_https4, import_os29, import_path31, FINDING_TO_SIGNAL3, rulesCacheFile, DEFAULT_API_URL, DEFAULT_INTERVAL_HOURS, MIN_INTERVAL_SECONDS, MAX_INTERVAL_SECONDS, FORENSIC_BROADCAST_INTERVAL_MS, FORENSIC_INITIAL_DELAY_MS, forensicBroadcastOffsets;
+var import_fs32, import_https4, import_os29, import_path31, FINDING_TO_SIGNAL3, rulesCacheFile, DEFAULT_API_URL2, DEFAULT_INTERVAL_HOURS, MIN_INTERVAL_SECONDS, MAX_INTERVAL_SECONDS, FORENSIC_BROADCAST_INTERVAL_MS, FORENSIC_INITIAL_DELAY_MS, forensicBroadcastOffsets;
 var init_sync = __esm({
   "src/daemon/sync.ts"() {
     "use strict";
@@ -17283,7 +17332,7 @@ var init_sync = __esm({
       "long-output-redacted": "longOutputRedactions"
     };
     rulesCacheFile = () => import_path31.default.join(import_os29.default.homedir(), ".node9", "rules-cache.json");
-    DEFAULT_API_URL = "https://api.node9.ai/api/v1/intercept/policies/sync";
+    DEFAULT_API_URL2 = "https://api.node9.ai/api/v1/intercept/policies/sync";
     DEFAULT_INTERVAL_HOURS = 5;
     MIN_INTERVAL_SECONDS = 15;
     MAX_INTERVAL_SECONDS = 24 * 60 * 60;
@@ -19085,10 +19134,10 @@ function readSessionUsage() {
   }
 }
 function formatContextStat(stat) {
-  const pctColor = stat.fillPct >= 80 ? import_chalk35.default.red : stat.fillPct >= 50 ? import_chalk35.default.yellow : import_chalk35.default.cyan;
+  const pctColor = stat.fillPct >= 80 ? import_chalk36.default.red : stat.fillPct >= 50 ? import_chalk36.default.yellow : import_chalk36.default.cyan;
   const k = (n) => `${Math.round(n / 1e3)}k`;
   const modelShort = stat.model.replace(/@.*$/, "").replace(/-\d{8}$/, "").replace(/^claude-/, "");
-  return import_chalk35.default.dim("ctx: ") + pctColor(`${stat.fillPct}%`) + import_chalk35.default.dim(
+  return import_chalk36.default.dim("ctx: ") + pctColor(`${stat.fillPct}%`) + import_chalk36.default.dim(
     ` (${k(stat.inputTokens)}/${k(getModelContextLimit(stat.model))}  out ${k(stat.outputTokens)}  \xB7 ${modelShort})`
   );
 }
@@ -19111,11 +19160,11 @@ function agentLabel(agent, mcpServer, sessionId) {
   const tag = sessionTag(sessionId);
   const tagSuffix = tag ? `\xB7${tag}` : "";
   if (!agent || agent === "Terminal") {
-    return mcpServer ? import_chalk35.default.dim(`[\u2192 ${mcpServer}] `) : "";
+    return mcpServer ? import_chalk36.default.dim(`[\u2192 ${mcpServer}] `) : "";
   }
   const short = agent === "Claude Code" ? "Claude" : agent === "Gemini CLI" ? "Gemini" : agent === "Unknown Agent" ? "" : agent.split(" ")[0];
-  if (!short) return mcpServer ? import_chalk35.default.dim(`[\u2192 ${mcpServer}] `) : "";
-  return mcpServer ? import_chalk35.default.dim(`[${short}${tagSuffix} \u2192 ${mcpServer}] `) : import_chalk35.default.dim(`[${short}${tagSuffix}] `);
+  if (!short) return mcpServer ? import_chalk36.default.dim(`[\u2192 ${mcpServer}] `) : "";
+  return mcpServer ? import_chalk36.default.dim(`[${short}${tagSuffix} \u2192 ${mcpServer}] `) : import_chalk36.default.dim(`[${short}${tagSuffix}] `);
 }
 function formatBase(activity) {
   const time = new Date(activity.ts).toLocaleTimeString([], { hour12: false });
@@ -19123,20 +19172,20 @@ function formatBase(activity) {
   const toolName = activity.tool.slice(0, 16).padEnd(16);
   const argsStr = JSON.stringify(activity.args ?? {}).replace(/\s+/g, " ").replaceAll(import_os55.default.homedir(), "~");
   const argsPreview = argsStr.length > 70 ? argsStr.slice(0, 70) + "\u2026" : argsStr;
-  return `${import_chalk35.default.gray(time)} ${icon} ${agentLabel(activity.agent, activity.mcpServer, activity.sessionId)}${import_chalk35.default.white.bold(toolName)} ${import_chalk35.default.dim(argsPreview)}`;
+  return `${import_chalk36.default.gray(time)} ${icon} ${agentLabel(activity.agent, activity.mcpServer, activity.sessionId)}${import_chalk36.default.white.bold(toolName)} ${import_chalk36.default.dim(argsPreview)}`;
 }
 function renderResult(activity, result) {
   const base = formatBase(activity);
   let status;
   if (result.status === "allow") {
-    status = import_chalk35.default.green("\u2713 ALLOW");
+    status = import_chalk36.default.green("\u2713 ALLOW");
   } else if (result.status === "dlp") {
-    status = import_chalk35.default.bgRed.white.bold(" \u{1F6E1}\uFE0F  DLP ");
+    status = import_chalk36.default.bgRed.white.bold(" \u{1F6E1}\uFE0F  DLP ");
   } else {
-    status = import_chalk35.default.red("\u2717 BLOCK");
+    status = import_chalk36.default.red("\u2717 BLOCK");
   }
   const cost = result.costEstimate ?? activity.costEstimate;
-  const costSuffix = cost == null ? "" : import_chalk35.default.dim(`  ~$${cost >= 1e-3 ? cost.toFixed(3) : "0.000"}`);
+  const costSuffix = cost == null ? "" : import_chalk36.default.dim(`  ~$${cost >= 1e-3 ? cost.toFixed(3) : "0.000"}`);
   if (process.stdout.isTTY) {
     if (pendingShownForId === activity.id && pendingWrappedLines > 1) {
       import_readline6.default.moveCursor(process.stdout, 0, -(pendingWrappedLines - 1));
@@ -19153,7 +19202,7 @@ function renderResult(activity, result) {
 }
 function renderPending(activity) {
   if (!process.stdout.isTTY) return;
-  const line = `${formatBase(activity)}  ${import_chalk35.default.yellow("\u25CF \u2026")}`;
+  const line = `${formatBase(activity)}  ${import_chalk36.default.yellow("\u25CF \u2026")}`;
   pendingShownForId = activity.id;
   pendingWrappedLines = wrappedLineCount(line);
   process.stdout.write(`${line}\r`);
@@ -19165,7 +19214,7 @@ async function ensureDaemon() {
       const { port } = JSON.parse(import_fs64.default.readFileSync(PID_FILE, "utf-8"));
       pidPort = port;
     } catch {
-      console.error(import_chalk35.default.dim("\u26A0\uFE0F  Could not read PID file; falling back to default port."));
+      console.error(import_chalk36.default.dim("\u26A0\uFE0F  Could not read PID file; falling back to default port."));
     }
   }
   const checkPort = pidPort ?? DAEMON_PORT;
@@ -19176,7 +19225,7 @@ async function ensureDaemon() {
     if (res.ok) return checkPort;
   } catch {
   }
-  console.log(import_chalk35.default.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon..."));
+  console.log(import_chalk36.default.dim("\u{1F6E1}\uFE0F  Starting Node9 daemon..."));
   const child = (0, import_child_process14.spawn)(process.execPath, [process.argv[1], "daemon"], {
     detached: true,
     stdio: "ignore",
@@ -19193,7 +19242,7 @@ async function ensureDaemon() {
     } catch {
     }
   }
-  console.error(import_chalk35.default.red("\u274C Daemon failed to start. Try: node9 daemon start"));
+  console.error(import_chalk36.default.red("\u274C Daemon failed to start. Try: node9 daemon start"));
   process.exit(1);
 }
 function postDecisionHttp(id, decision, authToken, port, opts) {
@@ -19203,7 +19252,7 @@ function postDecisionHttp(id, decision, authToken, port, opts) {
     if (opts?.trustDuration) bodyObj.trustDuration = opts.trustDuration;
     if (opts?.reason) bodyObj.reason = opts.reason;
     const body = JSON.stringify(bodyObj);
-    const req = import_http4.default.request(
+    const req = import_http5.default.request(
       {
         hostname: "127.0.0.1",
         port,
@@ -19262,7 +19311,7 @@ function buildCardLines(req, localCount = 0) {
   const severityIcon = isBlock ? `${RED}\u{1F6D1}` : `${YELLOW}\u26A0 `;
   const rawDesc = req.riskMetadata?.ruleDescription ?? "";
   const description = rawDesc ? cleanReason(rawDesc) : "";
-  const agentSuffix = req.agent && req.agent !== "Terminal" ? ` ${RESET2}${import_chalk35.default.dim(`(${req.agent})`)}` : "";
+  const agentSuffix = req.agent && req.agent !== "Terminal" ? ` ${RESET2}${import_chalk36.default.dim(`(${req.agent})`)}` : "";
   const lines = [
     ``,
     `${BOLD2}${CYAN}\u2554\u2550\u2550 Node9 Approval Required \u2550\u2550\u2557${RESET2}`,
@@ -19331,7 +19380,7 @@ function approverStatusLine() {
   const a = readApproversFromDisk();
   const fmt = (label2, key) => {
     const on = a[key] !== false;
-    return `[${key[0]}]${label2.slice(1)} ${on ? import_chalk35.default.green("\u2713") : import_chalk35.default.dim("\u2717")}`;
+    return `[${key[0]}]${label2.slice(1)} ${on ? import_chalk36.default.green("\u2713") : import_chalk36.default.dim("\u2717")}`;
   };
   return `${fmt("native", "native")}  ${fmt("cloud", "cloud")}  ${fmt("terminal", "terminal")}`;
 }
@@ -19354,7 +19403,7 @@ async function startTail(options = {}) {
   const port = await ensureDaemon();
   if (options.clear) {
     const result = await new Promise((resolve) => {
-      const req2 = import_http4.default.request(
+      const req2 = import_http5.default.request(
         { method: "POST", hostname: "127.0.0.1", port, path: "/events/clear" },
         (res) => {
           const status = res.statusCode ?? 0;
@@ -19376,7 +19425,7 @@ async function startTail(options = {}) {
       req2.end();
     });
     if (result.ok) {
-      console.log(import_chalk35.default.green("\u2713 Flight Recorder buffer cleared."));
+      console.log(import_chalk36.default.green("\u2713 Flight Recorder buffer cleared."));
     } else if (result.code === "ECONNREFUSED") {
       throw new Error("Daemon is not running. Start it with: node9 daemon start");
     } else if (result.code === "ETIMEDOUT") {
@@ -19422,7 +19471,7 @@ async function startTail(options = {}) {
       const channel = name === "n" ? "native" : name === "c" ? "cloud" : name === "t" ? "terminal" : null;
       if (channel) {
         toggleApprover(channel);
-        console.log(import_chalk35.default.dim(`  Approvers: ${approverStatusLine()}`));
+        console.log(import_chalk36.default.dim(`  Approvers: ${approverStatusLine()}`));
       }
     };
     process.stdin.on("keypress", idleKeypressHandler);
@@ -19488,7 +19537,7 @@ async function startTail(options = {}) {
           localAllowCounts.get(req2.toolName) ?? 0
         )
       );
-      const decisionStamp = action === "always-allow" ? import_chalk35.default.yellow("\u2605 ALWAYS ALLOW") : action === "trust" ? import_chalk35.default.cyan("\u23F1 TRUST 30m") : action === "allow" ? import_chalk35.default.green("\u2713 ALLOWED") : action === "redirect" ? import_chalk35.default.yellow("\u21A9 REDIRECT AI") : import_chalk35.default.red("\u2717 DENIED");
+      const decisionStamp = action === "always-allow" ? import_chalk36.default.yellow("\u2605 ALWAYS ALLOW") : action === "trust" ? import_chalk36.default.cyan("\u23F1 TRUST 30m") : action === "allow" ? import_chalk36.default.green("\u2713 ALLOWED") : action === "redirect" ? import_chalk36.default.yellow("\u21A9 REDIRECT AI") : import_chalk36.default.red("\u2717 DENIED");
       stampedLines.push(`  ${BOLD2}\u2192${RESET2} ${decisionStamp} ${GRAY}(terminal)${RESET2}`, ``);
       for (const line of stampedLines) process.stdout.write(line + "\n");
       process.stdout.write(SHOW_CURSOR);
@@ -19539,7 +19588,7 @@ async function startTail(options = {}) {
       );
       const stampedLines = buildCardLines(req2, priorCount);
       if (externalDecision) {
-        const source = externalDecision === "allow" ? import_chalk35.default.green("\u2713 ALLOWED") : import_chalk35.default.red("\u2717 DENIED");
+        const source = externalDecision === "allow" ? import_chalk36.default.green("\u2713 ALLOWED") : import_chalk36.default.red("\u2717 DENIED");
         stampedLines.push(`  ${BOLD2}\u2192${RESET2} ${source} ${GRAY}(external)${RESET2}`, ``);
       }
       for (const line of stampedLines) process.stdout.write(line + "\n");
@@ -19587,25 +19636,25 @@ async function startTail(options = {}) {
     if (unackedDlp > 0) {
       console.log("");
       console.log(
-        import_chalk35.default.bgRed.white.bold(
+        import_chalk36.default.bgRed.white.bold(
           ` \u26A0\uFE0F  DLP ALERT: ${unackedDlp} secret${unackedDlp !== 1 ? "s" : ""} found in Claude response text \u2014 run: node9 dlp `
         )
       );
     }
   } catch {
   }
-  console.log(import_chalk35.default.cyan.bold(`
+  console.log(import_chalk36.default.cyan.bold(`
 \u{1F6F0}\uFE0F  Node9 tail`));
   if (canApprove) {
-    console.log(import_chalk35.default.dim("Card: [\u21B5/y] Allow  [n] Deny  [a] Always  [t] Trust 30m"));
-    console.log(import_chalk35.default.dim(`Approvers (toggle): ${approverStatusLine()}  [q] quit`));
+    console.log(import_chalk36.default.dim("Card: [\u21B5/y] Allow  [n] Deny  [a] Always  [t] Trust 30m"));
+    console.log(import_chalk36.default.dim(`Approvers (toggle): ${approverStatusLine()}  [q] quit`));
   }
   const ctxStat = readSessionUsage();
   if (ctxStat) console.log("  " + formatContextStat(ctxStat));
   if (options.history) {
-    console.log(import_chalk35.default.dim("Showing history + live events.\n"));
+    console.log(import_chalk36.default.dim("Showing history + live events.\n"));
   } else {
-    console.log(import_chalk35.default.dim("Showing live events only. Use --history to include past.\n"));
+    console.log(import_chalk36.default.dim("Showing live events only. Use --history to include past.\n"));
   }
   process.on("SIGINT", () => {
     exitIdleMode();
@@ -19615,7 +19664,7 @@ async function startTail(options = {}) {
       import_readline6.default.clearLine(process.stdout, 0);
       import_readline6.default.cursorTo(process.stdout, 0);
     }
-    console.log(import_chalk35.default.dim("\n\u{1F6F0}\uFE0F  Disconnected."));
+    console.log(import_chalk36.default.dim("\n\u{1F6F0}\uFE0F  Disconnected."));
     process.exit(0);
   });
   const STALL_THRESHOLD_MS = 6e4;
@@ -19627,7 +19676,7 @@ async function startTail(options = {}) {
       if (Date.now() - auditMtime >= STALL_THRESHOLD_MS) return;
       console.log("");
       console.log(
-        import_chalk35.default.yellow(
+        import_chalk36.default.yellow(
           "\u26A0\uFE0F  Tail appears stalled \u2014 hooks are firing but no events are arriving. Try: node9 daemon restart"
         )
       );
@@ -19637,14 +19686,14 @@ async function startTail(options = {}) {
   }, STALL_THRESHOLD_MS / 2);
   stallWatchdog.unref();
   const sseUrl = `http://127.0.0.1:${port}/events?capabilities=input`;
-  const req = import_http4.default.get(
+  const req = import_http5.default.get(
     sseUrl,
     {
       headers: authToken ? { "X-Node9-Internal": authToken } : {}
     },
     (res) => {
       if (res.statusCode !== 200) {
-        console.error(import_chalk35.default.red(`Failed to connect: HTTP ${res.statusCode}`));
+        console.error(import_chalk36.default.red(`Failed to connect: HTTP ${res.statusCode}`));
         process.exit(1);
       }
       if (canApprove) enterIdleMode();
@@ -19675,7 +19724,7 @@ async function startTail(options = {}) {
           import_readline6.default.clearLine(process.stdout, 0);
           import_readline6.default.cursorTo(process.stdout, 0);
         }
-        console.log(import_chalk35.default.red("\n\u274C Daemon disconnected."));
+        console.log(import_chalk36.default.red("\n\u274C Daemon disconnected."));
         process.exit(1);
       });
     }
@@ -19688,7 +19737,7 @@ async function startTail(options = {}) {
         const parsed = JSON.parse(rawData);
         const msg = parsed.message ?? "Flight recorder is down \u2014 run: node9 daemon restart";
         console.log("");
-        console.log(import_chalk35.default.bgRed.white.bold(` \u26A0\uFE0F  ${msg} `));
+        console.log(import_chalk36.default.bgRed.white.bold(` \u26A0\uFE0F  ${msg} `));
       } catch {
       }
       return;
@@ -19773,9 +19822,9 @@ async function startTail(options = {}) {
       const rawSummary = data.argsSummary ?? data.tool;
       const summary = shortenPathSummary(rawSummary);
       const fileCount = data.fileCount ?? 0;
-      const files = fileCount > 0 ? import_chalk35.default.dim(` \xB7 ${fileCount} file${fileCount === 1 ? "" : "s"}`) : "";
+      const files = fileCount > 0 ? import_chalk36.default.dim(` \xB7 ${fileCount} file${fileCount === 1 ? "" : "s"}`) : "";
       process.stdout.write(
-        `${import_chalk35.default.dim(time)}  ${import_chalk35.default.cyan("\u{1F4F8} snapshot")}  ${import_chalk35.default.dim(hash)}  ${summary}${files}
+        `${import_chalk36.default.dim(time)}  ${import_chalk36.default.cyan("\u{1F4F8} snapshot")}  ${import_chalk36.default.dim(hash)}  ${summary}${files}
 `
       );
       return;
@@ -19792,28 +19841,28 @@ async function startTail(options = {}) {
     if (event === "execution-result") {
       const exec = data;
       const time = new Date(Date.now()).toLocaleTimeString([], { hour12: false });
-      const arrow = exec.isError ? import_chalk35.default.red("  \u21B3 \u2717") : import_chalk35.default.green("  \u21B3 \u2713");
+      const arrow = exec.isError ? import_chalk36.default.red("  \u21B3 \u2717") : import_chalk36.default.green("  \u21B3 \u2713");
       const label2 = agentLabel(exec.agent, exec.mcpServer);
       const tool = (exec.tool ?? "").slice(0, 16);
-      const duration = typeof exec.durationMs === "number" ? import_chalk35.default.dim(` (${exec.durationMs}ms)`) : "";
+      const duration = typeof exec.durationMs === "number" ? import_chalk36.default.dim(` (${exec.durationMs}ms)`) : "";
       console.log(
-        `${import_chalk35.default.gray(time)} ${arrow} ${label2}${import_chalk35.default.dim(tool)}${import_chalk35.default.dim(" completed")}${duration}`
+        `${import_chalk36.default.gray(time)} ${arrow} ${label2}${import_chalk36.default.dim(tool)}${import_chalk36.default.dim(" completed")}${duration}`
       );
     }
   }
   req.on("error", (err2) => {
     const msg = err2.code === "ECONNREFUSED" ? "Daemon is not running. Start it with: node9 daemon start" : err2.message;
-    console.error(import_chalk35.default.red(`
+    console.error(import_chalk36.default.red(`
 \u274C ${msg}`));
     process.exit(1);
   });
 }
-var import_http4, import_chalk35, import_fs64, import_os55, import_path62, import_readline6, import_child_process14, PID_FILE, ICONS, MODEL_CONTEXT_LIMITS, RESET2, BOLD2, RED, YELLOW, CYAN, GRAY, GREEN, HIDE_CURSOR, SHOW_CURSOR, ERASE_DOWN, pendingShownForId, pendingWrappedLines, DIVIDER;
+var import_http5, import_chalk36, import_fs64, import_os55, import_path62, import_readline6, import_child_process14, PID_FILE, ICONS, MODEL_CONTEXT_LIMITS, RESET2, BOLD2, RED, YELLOW, CYAN, GRAY, GREEN, HIDE_CURSOR, SHOW_CURSOR, ERASE_DOWN, pendingShownForId, pendingWrappedLines, DIVIDER;
 var init_tail = __esm({
   "src/tui/tail.ts"() {
     "use strict";
-    import_http4 = __toESM(require("http"));
-    import_chalk35 = __toESM(require("chalk"));
+    import_http5 = __toESM(require("http"));
+    import_chalk36 = __toESM(require("chalk"));
     import_fs64 = __toESM(require("fs"));
     import_os55 = __toESM(require("os"));
     import_path62 = __toESM(require("path"));
@@ -19886,7 +19935,7 @@ function queryDaemon() {
   return new Promise((resolve) => {
     const timeout = setTimeout(() => resolve(null), 50);
     try {
-      const req = import_http5.default.get(
+      const req = import_http6.default.get(
         `http://${DAEMON_HOST}:${DAEMON_PORT}/status`,
         { timeout: 50 },
         (res) => {
@@ -20214,14 +20263,14 @@ async function main() {
     renderOffline();
   }
 }
-var import_fs65, import_path63, import_os56, import_http5, RESET3, BOLD3, DIM, RED2, GREEN2, YELLOW2, BLUE, MAGENTA, CYAN2, WHITE, BAR_FILLED, BAR_EMPTY, BAR_WIDTH, shieldsCache, SHIELDS_CACHE_TTL_MS;
+var import_fs65, import_path63, import_os56, import_http6, RESET3, BOLD3, DIM, RED2, GREEN2, YELLOW2, BLUE, MAGENTA, CYAN2, WHITE, BAR_FILLED, BAR_EMPTY, BAR_WIDTH, shieldsCache, SHIELDS_CACHE_TTL_MS;
 var init_hud = __esm({
   "src/cli/hud.ts"() {
     "use strict";
     import_fs65 = __toESM(require("fs"));
     import_path63 = __toESM(require("path"));
     import_os56 = __toESM(require("os"));
-    import_http5 = __toESM(require("http"));
+    import_http6 = __toESM(require("http"));
     init_daemon();
     RESET3 = "\x1B[0m";
     BOLD3 = "\x1B[1m";
@@ -20278,8 +20327,69 @@ function agentTeardownTargets() {
 
 // src/cli.ts
 init_agent_wiring();
+
+// src/credentials.ts
+var fs15 = __toESM(require("fs"));
+var os14 = __toESM(require("os"));
+var path17 = __toESM(require("path"));
+var DEFAULT_API_URL = "https://api.node9.ai/api/v1/intercept";
+function writeCredentialsAndConfig(apiKey, opts = {}) {
+  const profileName = opts.profileName || "default";
+  const home = opts.homeDir ?? os14.homedir();
+  const credPath = path17.join(home, ".node9", "credentials.json");
+  if (!fs15.existsSync(path17.dirname(credPath))) {
+    fs15.mkdirSync(path17.dirname(credPath), { recursive: true });
+  }
+  let existingCreds = {};
+  try {
+    if (fs15.existsSync(credPath)) {
+      const raw = JSON.parse(fs15.readFileSync(credPath, "utf-8"));
+      existingCreds = raw.apiKey ? { default: { apiKey: raw.apiKey, apiUrl: raw.apiUrl || DEFAULT_API_URL } } : raw;
+    }
+  } catch {
+  }
+  existingCreds[profileName] = { apiKey, apiUrl: DEFAULT_API_URL };
+  fs15.writeFileSync(credPath, JSON.stringify(existingCreds, null, 2), {
+    mode: 384
+  });
+  let effectiveCloud = null;
+  if (profileName === "default") {
+    const configPath = path17.join(home, ".node9", "config.json");
+    let config = {};
+    try {
+      if (fs15.existsSync(configPath)) {
+        config = JSON.parse(fs15.readFileSync(configPath, "utf-8"));
+      }
+    } catch {
+    }
+    if (!config.settings || typeof config.settings !== "object") {
+      config.settings = {};
+    }
+    const s = config.settings;
+    const approvers = s.approvers || {
+      native: true,
+      browser: true,
+      cloud: true,
+      terminal: true
+    };
+    if (opts.isLocal) {
+      approvers.cloud = false;
+    }
+    s.approvers = approvers;
+    if (!fs15.existsSync(path17.dirname(configPath))) {
+      fs15.mkdirSync(path17.dirname(configPath), { recursive: true });
+    }
+    fs15.writeFileSync(configPath, JSON.stringify(config, null, 2), {
+      mode: 384
+    });
+    effectiveCloud = approvers.cloud === true;
+  }
+  return { profileName, effectiveCloud };
+}
+
+// src/cli.ts
 init_daemon2();
-var import_chalk36 = __toESM(require("chalk"));
+var import_chalk37 = __toESM(require("chalk"));
 var import_fs66 = __toESM(require("fs"));
 var import_path64 = __toESM(require("path"));
 var import_os57 = __toESM(require("os"));
@@ -24154,18 +24264,7 @@ function registerInitCommand(program2) {
       console.log("");
       for (const agent of found) {
         console.log(import_chalk16.default.bold(`Wiring ${agent}...`));
-        if (agent === "claude") await setupClaude();
-        else if (agent === "gemini") await setupGemini();
-        else if (agent === "antigravity") await setupAntigravity();
-        else if (agent === "copilot") await setupCopilot();
-        else if (agent === "cursor") await setupCursor();
-        else if (agent === "codex") await setupCodex();
-        else if (agent === "windsurf") await setupWindsurf();
-        else if (agent === "vscode") await setupVSCode();
-        else if (agent === "claudeDesktop") await setupClaudeDesktop();
-        else if (agent === "opencode") await setupOpencode();
-        else if (agent === "pi") await setupPi();
-        else if (agent === "hermes") setupHermes();
+        await setupAgent(agent);
         console.log("");
       }
       if ((process.platform === "darwin" || process.platform === "linux") && process.stdout.isTTY) {
@@ -24228,13 +24327,110 @@ function registerInitCommand(program2) {
   );
 }
 
+// src/cli/commands/connect.ts
+var import_http4 = __toESM(require("http"));
+var import_https7 = __toESM(require("https"));
+var import_url3 = require("url");
+var import_chalk17 = __toESM(require("chalk"));
+init_setup();
+init_sync();
+var DEFAULT_CONNECT_URL = "https://api.node9.ai/api/v1/cli/connect";
+function resolveConnectUrl(apiUrl) {
+  if (apiUrl) return apiUrl;
+  const base = process.env.NODE9_API_URL;
+  if (base) return base.replace(/\/intercept\/?$/, "") + "/cli/connect";
+  return DEFAULT_CONNECT_URL;
+}
+function postConnect(url, token) {
+  return new Promise((resolve, reject) => {
+    const body = JSON.stringify({ token });
+    const u = new import_url3.URL(url);
+    const lib = u.protocol === "http:" ? import_http4.default : import_https7.default;
+    const req = lib.request(
+      {
+        method: "POST",
+        hostname: u.hostname,
+        port: u.port || (u.protocol === "http:" ? 80 : 443),
+        path: u.pathname + u.search,
+        headers: {
+          "Content-Type": "application/json",
+          "Content-Length": Buffer.byteLength(body)
+        },
+        timeout: 15e3
+      },
+      (res) => {
+        let data = "";
+        res.on("data", (c) => data += c);
+        res.on("end", () => {
+          const code = res.statusCode ?? 0;
+          if (code >= 200 && code < 300) {
+            try {
+              resolve(JSON.parse(data));
+            } catch {
+              reject(new Error("Unexpected response from the server."));
+            }
+          } else if (code === 400 || code === 401) {
+            reject(
+              new Error(
+                "This connect link expired or was already used \u2014 generate a new one in the dashboard."
+              )
+            );
+          } else {
+            reject(new Error(`Connect failed (HTTP ${code}).`));
+          }
+        });
+      }
+    );
+    req.on("error", (e) => reject(e));
+    req.on("timeout", () => {
+      req.destroy();
+      reject(new Error("Connection timed out."));
+    });
+    req.write(body);
+    req.end();
+  });
+}
+function registerConnectCommand(program2) {
+  program2.command("connect").argument("<token>", "A connect token from the dashboard").option("--profile <name>", 'Save as a named profile (default: "default")').option("--api-url <url>", "Override the connect endpoint (self-host / dev)").description("Connect this machine to a node9 workspace using a dashboard token").action(async (token, options) => {
+    let resp;
+    try {
+      resp = await postConnect(resolveConnectUrl(options.apiUrl), token);
+    } catch (e) {
+      console.error(import_chalk17.default.red(`\u2717 ${e instanceof Error ? e.message : "Connect failed."}`));
+      process.exitCode = 1;
+      return;
+    }
+    writeCredentialsAndConfig(resp.apiKey, { profileName: options.profile });
+    process.env.NODE9_NONINTERACTIVE = "1";
+    let wired = [];
+    try {
+      wired = await setupDetectedAgents();
+    } catch {
+    }
+    if (!isTestingMode()) {
+      try {
+        await runCloudSync();
+      } catch {
+      }
+    }
+    console.log(import_chalk17.default.green(`\u2705 Connected to ${resp.workspaceName}`));
+    if (wired.length) {
+      console.log(import_chalk17.default.gray(`   Wired: ${wired.join(", ")}`));
+    } else {
+      console.log(
+        import_chalk17.default.gray("   No agents detected yet \u2014 run `node9 init` after installing one.")
+      );
+    }
+  });
+}
+
 // src/cli/commands/undo.ts
 var import_path50 = __toESM(require("path"));
-var import_chalk18 = __toESM(require("chalk"));
+var import_chalk19 = __toESM(require("chalk"));
 
 // src/tui/undo-navigator.ts
 var import_readline3 = __toESM(require("readline"));
-var import_chalk17 = __toESM(require("chalk"));
+var import_chalk18 = __toESM(require("chalk"));
 var RESET = "\x1B[0m";
 var BOLD = "\x1B[1m";
 var CLEAR_SCREEN = "\x1B[2J\x1B[H";
@@ -24252,15 +24448,15 @@ function renderDiff(raw) {
   );
   for (const line of lines) {
     if (line.startsWith("+++") || line.startsWith("---")) {
-      process.stdout.write(import_chalk17.default.bold(line) + "\n");
+      process.stdout.write(import_chalk18.default.bold(line) + "\n");
     } else if (line.startsWith("+")) {
-      process.stdout.write(import_chalk17.default.green(line) + "\n");
+      process.stdout.write(import_chalk18.default.green(line) + "\n");
     } else if (line.startsWith("-")) {
-      process.stdout.write(import_chalk17.default.red(line) + "\n");
+      process.stdout.write(import_chalk18.default.red(line) + "\n");
     } else if (line.startsWith("@@")) {
-      process.stdout.write(import_chalk17.default.cyan(line) + "\n");
+      process.stdout.write(import_chalk18.default.cyan(line) + "\n");
     } else {
-      process.stdout.write(import_chalk17.default.gray(line) + "\n");
+      process.stdout.write(import_chalk18.default.gray(line) + "\n");
     }
   }
 }
@@ -24279,23 +24475,23 @@ function render(entries, idx) {
   const step = idx + 1;
   process.stdout.write(CLEAR_SCREEN);
   process.stdout.write(
-    import_chalk17.default.magenta.bold(`\u23EA  Node9 Undo`) + import_chalk17.default.gray(`  \u2500\u2500  step ${step} of ${total}`) + (entry.files?.length ? import_chalk17.default.gray(
+    import_chalk18.default.magenta.bold(`\u23EA  Node9 Undo`) + import_chalk18.default.gray(`  \u2500\u2500  step ${step} of ${total}`) + (entry.files?.length ? import_chalk18.default.gray(
       `  \u2500\u2500  ${entry.files.slice(0, 2).join(", ")}${entry.files.length > 2 ? ` +${entry.files.length - 2} more` : ""}`
     ) : "") + "\n\n"
   );
   process.stdout.write(
-    `  ${BOLD}Tool:${RESET}  ${import_chalk17.default.cyan(entry.tool)}` + (entry.argsSummary ? import_chalk17.default.gray("  \u2192  " + entry.argsSummary) : "") + "\n"
+    `  ${BOLD}Tool:${RESET}  ${import_chalk18.default.cyan(entry.tool)}` + (entry.argsSummary ? import_chalk18.default.gray("  \u2192  " + entry.argsSummary) : "") + "\n"
   );
-  process.stdout.write(`  ${BOLD}When:${RESET}  ${import_chalk17.default.gray(formatAge(entry.timestamp))}
+  process.stdout.write(`  ${BOLD}When:${RESET}  ${import_chalk18.default.gray(formatAge(entry.timestamp))}
 `);
-  process.stdout.write(`  ${BOLD}Dir: ${RESET}  ${import_chalk17.default.gray(entry.cwd)}
+  process.stdout.write(`  ${BOLD}Dir: ${RESET}  ${import_chalk18.default.gray(entry.cwd)}
 `);
   if (entry.files && entry.files.length > 0) {
-    process.stdout.write(`  ${BOLD}Files:${RESET} ${import_chalk17.default.gray(entry.files.join(", "))}
+    process.stdout.write(`  ${BOLD}Files:${RESET} ${import_chalk18.default.gray(entry.files.join(", "))}
 `);
   }
   if (idx < total - 1 && isSessionBoundary(entries, idx + 1)) {
-    process.stdout.write(import_chalk17.default.gray("\n  \u2500\u2500 session boundary above \u2500\u2500\n"));
+    process.stdout.write(import_chalk18.default.gray("\n  \u2500\u2500 session boundary above \u2500\u2500\n"));
   }
   process.stdout.write("\n");
   const diff = entry.diff ?? computeUndoDiff(entry.hash, entry.cwd);
@@ -24303,12 +24499,12 @@ function render(entries, idx) {
     renderDiff(diff);
   } else {
     process.stdout.write(
-      import_chalk17.default.gray("  (no diff \u2014 working tree may already match this snapshot)\n")
+      import_chalk18.default.gray("  (no diff \u2014 working tree may already match this snapshot)\n")
     );
   }
   process.stdout.write("\n");
   process.stdout.write(
-    import_chalk17.default.gray("  ") + (idx < total - 1 ? import_chalk17.default.white("[\u2190] older") : import_chalk17.default.gray("[\u2190] older")) + import_chalk17.default.gray("   ") + (idx > 0 ? import_chalk17.default.white("[\u2192] newer") : import_chalk17.default.gray("[\u2192] newer")) + import_chalk17.default.gray("   ") + import_chalk17.default.green("[\u21B5] restore here") + import_chalk17.default.gray("   ") + import_chalk17.default.yellow("[s] session start") + import_chalk17.default.gray("   ") + import_chalk17.default.gray("[q] quit") + "\n"
+    import_chalk18.default.gray("  ") + (idx < total - 1 ? import_chalk18.default.white("[\u2190] older") : import_chalk18.default.gray("[\u2190] older")) + import_chalk18.default.gray("   ") + (idx > 0 ? import_chalk18.default.white("[\u2192] newer") : import_chalk18.default.gray("[\u2192] newer")) + import_chalk18.default.gray("   ") + import_chalk18.default.green("[\u21B5] restore here") + import_chalk18.default.gray("   ") + import_chalk18.default.yellow("[s] session start") + import_chalk18.default.gray("   ") + import_chalk18.default.gray("[q] quit") + "\n"
   );
 }
 async function runUndoNavigator(entries) {
@@ -24362,19 +24558,19 @@ async function runUndoNavigator(entries) {
         cleanup();
         process.stdout.write(CLEAR_SCREEN);
         const entry = display[idx];
-        process.stdout.write(import_chalk17.default.magenta.bold("\n\u23EA  Restoring snapshot...\n\n"));
+        process.stdout.write(import_chalk18.default.magenta.bold("\n\u23EA  Restoring snapshot...\n\n"));
         if (applyUndo(entry.hash, entry.cwd)) {
-          process.stdout.write(import_chalk17.default.green("\u2705  Reverted successfully.\n\n"));
+          process.stdout.write(import_chalk18.default.green("\u2705  Reverted successfully.\n\n"));
           resolve({ restored: true });
         } else {
-          process.stdout.write(import_chalk17.default.red("\u274C  Undo failed.\n\n"));
+          process.stdout.write(import_chalk18.default.red("\u274C  Undo failed.\n\n"));
           resolve({ restored: false });
         }
       } else if (name === "q" || key?.ctrl && name === "c") {
         done = true;
         cleanup();
         process.stdout.write(CLEAR_SCREEN);
-        process.stdout.write(import_chalk17.default.gray("\nCancelled.\n\n"));
+        process.stdout.write(import_chalk18.default.gray("\nCancelled.\n\n"));
         resolve({ restored: false });
       }
     };
@@ -24410,39 +24606,39 @@ function registerUndoCommand(program2) {
     if (history.length === 0) {
       if (!options.all && allHistory.length > 0) {
         console.log(
-          import_chalk18.default.yellow(
+          import_chalk19.default.yellow(
             `
 \u2139\uFE0F  No snapshots found for the current directory (${process.cwd()}).
-    Run ${import_chalk18.default.cyan("node9 undo --all")} to see snapshots from all projects.
+    Run ${import_chalk19.default.cyan("node9 undo --all")} to see snapshots from all projects.
 `
           )
         );
       } else {
-        console.log(import_chalk18.default.yellow("\n\u2139\uFE0F  No undo snapshots found.\n"));
+        console.log(import_chalk19.default.yellow("\n\u2139\uFE0F  No undo snapshots found.\n"));
       }
       return;
     }
     if (options.list) {
-      console.log(import_chalk18.default.magenta.bold("\n\u23EA  Snapshot History\n"));
+      console.log(import_chalk19.default.magenta.bold("\n\u23EA  Snapshot History\n"));
       console.log(
-        import_chalk18.default.gray(
+        import_chalk19.default.gray(
           `  ${"#".padEnd(3)}  ${"File / Command".padEnd(30)}  ${"Tool".padEnd(8)}  ${"When".padEnd(10)}  Dir`
         )
       );
-      console.log(import_chalk18.default.gray("  " + "\u2500".repeat(80)));
+      console.log(import_chalk19.default.gray("  " + "\u2500".repeat(80)));
       const display = [...history].reverse();
       let prevTs = null;
       for (let i = 0; i < display.length; i++) {
         const e = display[i];
         const isGap = prevTs !== null && prevTs - e.timestamp > 6e4;
-        if (isGap) console.log(import_chalk18.default.gray("  \u2500\u2500 earlier \u2500\u2500"));
+        if (isGap) console.log(import_chalk19.default.gray("  \u2500\u2500 earlier \u2500\u2500"));
         const label2 = (e.argsSummary || e.files?.[0] || "\u2014").slice(0, 30).padEnd(30);
         const tool = e.tool.slice(0, 8).padEnd(8);
         const when = formatAge2(e.timestamp).padEnd(10);
         const dir = e.cwd.length > 30 ? "\u2026" + e.cwd.slice(-29) : e.cwd;
         console.log(
-          import_chalk18.default.white(
-            `  ${String(i + 1).padEnd(3)}  ${label2}  ${import_chalk18.default.cyan(tool)}  ${import_chalk18.default.gray(when)}  ${import_chalk18.default.gray(dir)}`
+          import_chalk19.default.white(
+            `  ${String(i + 1).padEnd(3)}  ${label2}  ${import_chalk19.default.cyan(tool)}  ${import_chalk19.default.gray(when)}  ${import_chalk19.default.gray(dir)}`
           )
         );
         prevTs = e.timestamp;
@@ -24455,7 +24651,7 @@ function registerUndoCommand(program2) {
       const idx = history.length - steps;
       if (idx < 0) {
         console.log(
-          import_chalk18.default.yellow(
+          import_chalk19.default.yellow(
             `
 \u2139\uFE0F  Only ${history.length} snapshot(s) available, cannot go back ${steps}.
 `
@@ -24466,47 +24662,47 @@ function registerUndoCommand(program2) {
       const snapshot = history[idx];
       const ageStr = formatAge2(snapshot.timestamp);
       console.log(
-        import_chalk18.default.magenta.bold(`
+        import_chalk19.default.magenta.bold(`
 \u23EA  Node9 Undo${steps > 1 ? ` (${steps} steps back)` : ""}`)
       );
       console.log(
-        import_chalk18.default.white(
-          `    Tool:  ${import_chalk18.default.cyan(snapshot.tool)}${snapshot.argsSummary ? import_chalk18.default.gray(" \u2192 " + snapshot.argsSummary) : ""}`
+        import_chalk19.default.white(
+          `    Tool:  ${import_chalk19.default.cyan(snapshot.tool)}${snapshot.argsSummary ? import_chalk19.default.gray(" \u2192 " + snapshot.argsSummary) : ""}`
         )
       );
-      console.log(import_chalk18.default.white(`    When:  ${import_chalk18.default.gray(ageStr)}`));
-      console.log(import_chalk18.default.white(`    Dir:   ${import_chalk18.default.gray(snapshot.cwd)}`));
+      console.log(import_chalk19.default.white(`    When:  ${import_chalk19.default.gray(ageStr)}`));
+      console.log(import_chalk19.default.white(`    Dir:   ${import_chalk19.default.gray(snapshot.cwd)}`));
       if (steps > 1)
         console.log(
-          import_chalk18.default.yellow(`    Note:  This will also undo the ${steps - 1} action(s) after it.`)
+          import_chalk19.default.yellow(`    Note:  This will also undo the ${steps - 1} action(s) after it.`)
         );
       console.log("");
       const diff = snapshot.diff ?? computeUndoDiff(snapshot.hash, snapshot.cwd);
       if (diff) {
         const lines = diff.split("\n").filter((l) => !l.startsWith("diff --git") && !l.startsWith("index "));
         for (const line of lines) {
-          if (line.startsWith("+++") || line.startsWith("---")) console.log(import_chalk18.default.bold(line));
-          else if (line.startsWith("+")) console.log(import_chalk18.default.green(line));
-          else if (line.startsWith("-")) console.log(import_chalk18.default.red(line));
-          else if (line.startsWith("@@")) console.log(import_chalk18.default.cyan(line));
-          else console.log(import_chalk18.default.gray(line));
+          if (line.startsWith("+++") || line.startsWith("---")) console.log(import_chalk19.default.bold(line));
+          else if (line.startsWith("+")) console.log(import_chalk19.default.green(line));
+          else if (line.startsWith("-")) console.log(import_chalk19.default.red(line));
+          else if (line.startsWith("@@")) console.log(import_chalk19.default.cyan(line));
+          else console.log(import_chalk19.default.gray(line));
         }
         console.log("");
       } else {
         console.log(
-          import_chalk18.default.gray("    (no diff available \u2014 working tree may already match snapshot)\n")
+          import_chalk19.default.gray("    (no diff available \u2014 working tree may already match snapshot)\n")
         );
       }
       const { confirm: confirm3 } = await import("@inquirer/prompts");
       const proceed = await confirm3({ message: `Revert to this snapshot?`, default: false });
       if (proceed) {
         if (applyUndo(snapshot.hash, snapshot.cwd)) {
-          console.log(import_chalk18.default.green("\n\u2705 Reverted successfully.\n"));
+          console.log(import_chalk19.default.green("\n\u2705 Reverted successfully.\n"));
         } else {
-          console.error(import_chalk18.default.red("\n\u274C Undo failed. Ensure you are in a Git repository.\n"));
+          console.error(import_chalk19.default.red("\n\u274C Undo failed. Ensure you are in a Git repository.\n"));
         }
       } else {
-        console.log(import_chalk18.default.gray("\nCancelled.\n"));
+        console.log(import_chalk19.default.gray("\nCancelled.\n"));
       }
       return;
     }
@@ -24516,7 +24712,7 @@ function registerUndoCommand(program2) {
 
 // src/mcp-gateway/index.ts
 var import_readline4 = __toESM(require("readline"));
-var import_chalk19 = __toESM(require("chalk"));
+var import_chalk20 = __toESM(require("chalk"));
 var import_child_process10 = require("child_process");
 var import_execa3 = require("execa");
 init_orchestrator();
@@ -24652,13 +24848,13 @@ async function runMcpGateway(upstreamCommand) {
   const prov = checkProvenance(executable);
   if (prov.trustLevel === "suspect") {
     console.error(
-      import_chalk19.default.red(
+      import_chalk20.default.red(
         `\u26A0\uFE0F  Node9: Upstream MCP server binary is suspect \u2014 ${prov.reason} (${prov.resolvedPath})`
       )
     );
-    console.error(import_chalk19.default.red("   Verify this binary is trusted before proceeding."));
+    console.error(import_chalk20.default.red("   Verify this binary is trusted before proceeding."));
   }
-  console.error(import_chalk19.default.green(`\u{1F680} Node9 MCP Gateway: Monitoring [${upstreamCommand}]`));
+  console.error(import_chalk20.default.green(`\u{1F680} Node9 MCP Gateway: Monitoring [${upstreamCommand}]`));
   const UPSTREAM_INJECTOR_VARS = /* @__PURE__ */ new Set([
     "NODE_OPTIONS",
     "NODE_PATH",
@@ -24771,10 +24967,10 @@ async function runMcpGateway(upstreamCommand) {
           mcpServer
         });
         if (!result.approved) {
-          console.error(import_chalk19.default.red(`
+          console.error(import_chalk20.default.red(`
 \u{1F6D1} Node9 MCP Gateway: Action Blocked`));
-          console.error(import_chalk19.default.gray(`   Tool: ${toolName}`));
-          console.error(import_chalk19.default.gray(`   Reason: ${result.reason ?? "Security Policy"}
+          console.error(import_chalk20.default.gray(`   Tool: ${toolName}`));
+          console.error(import_chalk20.default.gray(`   Reason: ${result.reason ?? "Security Policy"}
 `));
           const blockedByLabel = result.blockedByLabel ?? result.reason ?? "Security Policy";
           const isHumanDecision = blockedByLabel.toLowerCase().includes("user") || blockedByLabel.toLowerCase().includes("daemon") || blockedByLabel.toLowerCase().includes("decision");
@@ -24887,7 +25083,7 @@ async function runMcpGateway(upstreamCommand) {
           updatePin(serverKey, upstreamCommand, currentHash, toolNames);
           pinState = "validated";
           console.error(
-            import_chalk19.default.green(
+            import_chalk20.default.green(
               `\u{1F512} Node9: Pinned ${toolNames.length} tool definition(s) for this MCP server`
             )
           );
@@ -24900,11 +25096,11 @@ async function runMcpGateway(upstreamCommand) {
         } else if (pinStatus === "corrupt") {
           pinState = "quarantined";
           console.error(
-            import_chalk19.default.red("\n\u{1F6A8} Node9: MCP pin file is corrupt or unreadable \u2014 session quarantined!")
+            import_chalk20.default.red("\n\u{1F6A8} Node9: MCP pin file is corrupt or unreadable \u2014 session quarantined!")
           );
-          console.error(import_chalk19.default.red("   Tool calls are blocked until the pin file is repaired."));
+          console.error(import_chalk20.default.red("   Tool calls are blocked until the pin file is repaired."));
           console.error(
-            import_chalk19.default.yellow(`   Run: node9 mcp pin reset  (to clear and re-pin on next connect)
+            import_chalk20.default.yellow(`   Run: node9 mcp pin reset  (to clear and re-pin on next connect)
 `)
           );
           const errorResponse = {
@@ -24921,13 +25117,13 @@ async function runMcpGateway(upstreamCommand) {
         } else {
           pinState = "quarantined";
           console.error(
-            import_chalk19.default.red("\n\u{1F6A8} Node9: MCP tool definitions have changed since last verified!")
+            import_chalk20.default.red("\n\u{1F6A8} Node9: MCP tool definitions have changed since last verified!")
           );
           console.error(
-            import_chalk19.default.red("   This could indicate a supply chain attack (tool poisoning / rug pull).")
+            import_chalk20.default.red("   This could indicate a supply chain attack (tool poisoning / rug pull).")
           );
-          console.error(import_chalk19.default.red("   Session quarantined \u2014 all tool calls blocked."));
-          console.error(import_chalk19.default.yellow(`   Run: node9 mcp pin update ${serverKey}
+          console.error(import_chalk20.default.red("   Session quarantined \u2014 all tool calls blocked."));
+          console.error(import_chalk20.default.yellow(`   Run: node9 mcp pin update ${serverKey}
 `));
           reportPinMismatchToCloud(serverKey, clientName);
           const errorResponse = {
@@ -24971,7 +25167,7 @@ async function runMcpGateway(upstreamCommand) {
       const toolName = callId !== void 0 ? pendingCallNames.get(callId) ?? "unknown" : "unknown";
       if (callId !== void 0) pendingCallNames.delete(callId);
       console.error(
-        import_chalk19.default.yellow(
+        import_chalk20.default.yellow(
           `\u26A1 Node9: Large MCP response from '${toolName}' (${(line.length / 1024).toFixed(0)}KB) \u2014 context window enlarged`
         )
       );
@@ -25938,7 +26134,7 @@ function registerMcpServerCommand(program2) {
 }
 
 // src/cli/commands/trust.ts
-var import_chalk20 = __toESM(require("chalk"));
+var import_chalk21 = __toESM(require("chalk"));
 init_trusted_hosts();
 function isValidHost(host) {
   return /^(\*\.)?[a-z0-9][a-z0-9.-]*\.[a-z]{2,}$/.test(host);
@@ -25949,51 +26145,51 @@ function registerTrustCommand(program2) {
     const normalized = normalizeHost(host.trim());
     if (!isValidHost(normalized)) {
       console.error(
-        import_chalk20.default.red(`
+        import_chalk21.default.red(`
 \u274C Invalid host: "${host}"
-`) + import_chalk20.default.gray("   Use an FQDN like api.mycompany.com or *.mycompany.com\n")
+`) + import_chalk21.default.gray("   Use an FQDN like api.mycompany.com or *.mycompany.com\n")
       );
       process.exit(1);
     }
     addTrustedHost(normalized);
-    console.log(import_chalk20.default.green(`
+    console.log(import_chalk21.default.green(`
 \u2705 ${normalized} added to trusted hosts.`));
     console.log(
-      import_chalk20.default.gray("   Pipe-chain blocks to this host: critical \u2192 review, high \u2192 allow\n")
+      import_chalk21.default.gray("   Pipe-chain blocks to this host: critical \u2192 review, high \u2192 allow\n")
     );
   });
   trustCmd.command("remove <host>").description("Remove a trusted host").action((host) => {
     const normalized = normalizeHost(host.trim());
     const removed = removeTrustedHost(normalized);
     if (!removed) {
-      console.error(import_chalk20.default.yellow(`
+      console.error(import_chalk21.default.yellow(`
 \u26A0\uFE0F  "${normalized}" is not in the trusted hosts list.
 `));
       process.exit(1);
     }
-    console.log(import_chalk20.default.green(`
+    console.log(import_chalk21.default.green(`
 \u2705 ${normalized} removed from trusted hosts.
 `));
   });
   trustCmd.command("list").description("Show all trusted hosts").action(() => {
     const hosts = readTrustedHosts();
     if (hosts.length === 0) {
-      console.log(import_chalk20.default.gray("\n  No trusted hosts configured.\n"));
-      console.log(`  Add one: ${import_chalk20.default.cyan("node9 trust add api.mycompany.com")}
+      console.log(import_chalk21.default.gray("\n  No trusted hosts configured.\n"));
+      console.log(`  Add one: ${import_chalk21.default.cyan("node9 trust add api.mycompany.com")}
 `);
       return;
     }
-    console.log(import_chalk20.default.bold("\n\u{1F513} Trusted Hosts\n"));
+    console.log(import_chalk21.default.bold("\n\u{1F513} Trusted Hosts\n"));
     for (const entry of hosts) {
       const date = new Date(entry.addedAt).toLocaleDateString();
-      console.log(`  ${import_chalk20.default.cyan(entry.host.padEnd(40))} ${import_chalk20.default.gray(`added ${date}`)}`);
+      console.log(`  ${import_chalk21.default.cyan(entry.host.padEnd(40))} ${import_chalk21.default.gray(`added ${date}`)}`);
     }
     console.log("");
   });
 }
 
 // src/cli/commands/mcp-pin.ts
-var import_chalk21 = __toESM(require("chalk"));
+var import_chalk22 = __toESM(require("chalk"));
 init_mcp_pin();
 var import_fs54 = __toESM(require("fs"));
 function registerMcpPinCommand(program2) {
@@ -26014,14 +26210,14 @@ function registerMcpPinCommand(program2) {
       }
     }
     if (repoCorrupt) {
-      console.error(import_chalk21.default.red(`
+      console.error(import_chalk22.default.red(`
 \u274C Repo pin file at ${found.path} is corrupt or unreadable.`));
       process.exit(1);
     }
     if (!homeResult.ok && homeResult.reason === "corrupt") {
-      console.error(import_chalk21.default.red(`
+      console.error(import_chalk22.default.red(`
 \u274C Home pin file is corrupt: ${homeResult.detail}`));
-      console.error(import_chalk21.default.yellow("   Run: node9 mcp pin reset\n"));
+      console.error(import_chalk22.default.yellow("   Run: node9 mcp pin reset\n"));
       process.exit(1);
     }
     const homeEntries = homeResult.ok ? homeResult.pins.servers : {};
@@ -26033,25 +26229,25 @@ function registerMcpPinCommand(program2) {
       merged.set(key, { entry, source: "repo" });
     }
     if (merged.size === 0) {
-      console.log(import_chalk21.default.gray("\nNo MCP servers are pinned yet."));
+      console.log(import_chalk22.default.gray("\nNo MCP servers are pinned yet."));
       console.log(
-        import_chalk21.default.gray("Pins are created automatically when the MCP gateway first connects.\n")
+        import_chalk22.default.gray("Pins are created automatically when the MCP gateway first connects.\n")
       );
       return;
     }
-    console.log(import_chalk21.default.bold("\n\u{1F512} Pinned MCP Servers\n"));
+    console.log(import_chalk22.default.bold("\n\u{1F512} Pinned MCP Servers\n"));
     const showSource = found.source === "repo";
     for (const [key, { entry, source }] of merged) {
-      const tag = showSource ? ` ${import_chalk21.default.yellow(`[${source}]`)}` : "";
-      console.log(`  ${import_chalk21.default.cyan(key)}${tag}  ${import_chalk21.default.gray(entry.label)}`);
-      console.log(`    Tools (${entry.toolCount}): ${import_chalk21.default.white(entry.toolNames.join(", "))}`);
-      console.log(`    Hash:  ${import_chalk21.default.gray(entry.toolsHash.slice(0, 16))}...`);
-      console.log(`    Pinned: ${import_chalk21.default.gray(entry.pinnedAt)}`);
+      const tag = showSource ? ` ${import_chalk22.default.yellow(`[${source}]`)}` : "";
+      console.log(`  ${import_chalk22.default.cyan(key)}${tag}  ${import_chalk22.default.gray(entry.label)}`);
+      console.log(`    Tools (${entry.toolCount}): ${import_chalk22.default.white(entry.toolNames.join(", "))}`);
+      console.log(`    Hash:  ${import_chalk22.default.gray(entry.toolsHash.slice(0, 16))}...`);
+      console.log(`    Pinned: ${import_chalk22.default.gray(entry.pinnedAt)}`);
       console.log("");
     }
     if (showSource) {
-      console.log(import_chalk21.default.gray(`   [repo] entries come from ${found.path}`));
-      console.log(import_chalk21.default.gray("   [home] entries come from ~/.node9/mcp-pins.json\n"));
+      console.log(import_chalk22.default.gray(`   [repo] entries come from ${found.path}`));
+      console.log(import_chalk22.default.gray("   [home] entries come from ~/.node9/mcp-pins.json\n"));
     }
   });
   pinSubCmd.command("promote <serverKey>").description(
@@ -26061,22 +26257,22 @@ function registerMcpPinCommand(program2) {
       const { repoPath, created } = promotePin(serverKey, process.cwd());
       if (created) {
         console.log(
-          import_chalk21.default.green(
+          import_chalk22.default.green(
             `
-\u2705 Created ${repoPath} with the promoted pin for ${import_chalk21.default.cyan(serverKey)}.`
+\u2705 Created ${repoPath} with the promoted pin for ${import_chalk22.default.cyan(serverKey)}.`
           )
         );
       } else {
-        console.log(import_chalk21.default.green(`
-\u2705 Promoted ${import_chalk21.default.cyan(serverKey)} into ${repoPath}.`));
+        console.log(import_chalk22.default.green(`
+\u2705 Promoted ${import_chalk22.default.cyan(serverKey)} into ${repoPath}.`));
       }
-      console.log(import_chalk21.default.gray("   Review the change and commit it:"));
-      console.log(import_chalk21.default.cyan(`     git add ${repoPath}`));
-      console.log(import_chalk21.default.cyan(`     git commit -m "pin ${serverKey} (node9)"`));
+      console.log(import_chalk22.default.gray("   Review the change and commit it:"));
+      console.log(import_chalk22.default.cyan(`     git add ${repoPath}`));
+      console.log(import_chalk22.default.cyan(`     git commit -m "pin ${serverKey} (node9)"`));
       console.log("");
     } catch (err2) {
       const msg = err2 instanceof Error ? err2.message : String(err2);
-      console.error(import_chalk21.default.red(`
+      console.error(import_chalk22.default.red(`
 \u274C ${msg}
 `));
       process.exit(1);
@@ -26089,138 +26285,138 @@ function registerMcpPinCommand(program2) {
     try {
       pins = readMcpPins();
     } catch {
-      console.error(import_chalk21.default.red("\n\u274C Pin file is corrupt."));
-      console.error(import_chalk21.default.yellow("   Run: node9 mcp pin reset\n"));
+      console.error(import_chalk22.default.red("\n\u274C Pin file is corrupt."));
+      console.error(import_chalk22.default.yellow("   Run: node9 mcp pin reset\n"));
       process.exit(1);
     }
     if (!pins.servers[serverKey]) {
-      console.error(import_chalk21.default.red(`
+      console.error(import_chalk22.default.red(`
 \u274C No pin found for server key "${serverKey}"
 `));
-      console.error(`Run ${import_chalk21.default.cyan("node9 mcp pin list")} to see pinned servers.
+      console.error(`Run ${import_chalk22.default.cyan("node9 mcp pin list")} to see pinned servers.
 `);
       process.exit(1);
     }
     const label2 = pins.servers[serverKey].label;
     removePin(serverKey);
-    console.log(import_chalk21.default.green(`
-\u{1F513} Pin removed for ${import_chalk21.default.cyan(serverKey)}`));
-    console.log(import_chalk21.default.gray(`   Server: ${label2}`));
-    console.log(import_chalk21.default.gray("   Next connection will re-pin with current tool definitions.\n"));
+    console.log(import_chalk22.default.green(`
+\u{1F513} Pin removed for ${import_chalk22.default.cyan(serverKey)}`));
+    console.log(import_chalk22.default.gray(`   Server: ${label2}`));
+    console.log(import_chalk22.default.gray("   Next connection will re-pin with current tool definitions.\n"));
   });
   pinSubCmd.command("reset").description("Clear all MCP pins (next connection to each server will re-pin)").action(() => {
     const result = readMcpPinsSafe();
     if (!result.ok && result.reason === "missing") {
-      console.log(import_chalk21.default.gray("\nNo pins to clear.\n"));
+      console.log(import_chalk22.default.gray("\nNo pins to clear.\n"));
       return;
     }
     const count = result.ok ? Object.keys(result.pins.servers).length : "?";
     clearAllPins();
-    console.log(import_chalk21.default.green(`
+    console.log(import_chalk22.default.green(`
 \u{1F513} Cleared ${count} MCP pin(s).`));
-    console.log(import_chalk21.default.gray("   Next connection to each server will re-pin.\n"));
+    console.log(import_chalk22.default.gray("   Next connection to each server will re-pin.\n"));
   });
 }
 
 // src/cli/commands/sync.ts
-var import_chalk22 = __toESM(require("chalk"));
+var import_chalk23 = __toESM(require("chalk"));
 init_sync();
 function registerSyncCommand(program2) {
   const policy = program2.command("policy").description("Manage cloud policy rules");
   policy.command("push").description("Push this machine's effective policy to the node9 dashboard").action(async () => {
-    process.stdout.write(import_chalk22.default.cyan("Pushing policy to the dashboard\u2026"));
+    process.stdout.write(import_chalk23.default.cyan("Pushing policy to the dashboard\u2026"));
     const result = await runPolicyPush();
     process.stdout.write("\n");
     if (!result.ok) {
-      console.error(import_chalk22.default.red(`\u2717 ${result.reason}`));
+      console.error(import_chalk23.default.red(`\u2717 ${result.reason}`));
       process.exit(1);
     }
-    console.log(import_chalk22.default.green("\u2713 Policy mirrored to the dashboard"));
-    console.log(import_chalk22.default.gray("  See it under Security Policy \u2192 Machines"));
+    console.log(import_chalk23.default.green("\u2713 Policy mirrored to the dashboard"));
+    console.log(import_chalk23.default.gray("  See it under Security Policy \u2192 Machines"));
   });
   policy.command("sync").description("Sync cloud policy rules to local cache (~/.node9/rules-cache.json)").action(async () => {
-    process.stdout.write(import_chalk22.default.cyan("Syncing cloud policy rules\u2026"));
+    process.stdout.write(import_chalk23.default.cyan("Syncing cloud policy rules\u2026"));
     const result = await runCloudSync();
     process.stdout.write("\n");
     if (!result.ok) {
-      console.error(import_chalk22.default.red(`\u2717 ${result.reason}`));
+      console.error(import_chalk23.default.red(`\u2717 ${result.reason}`));
       process.exit(1);
     }
     if (result.unchanged) {
       console.log(
-        import_chalk22.default.green(
+        import_chalk23.default.green(
           `\u2713 Already up to date \u2014 ${result.rules} rule${result.rules === 1 ? "" : "s"} cached`
         )
       );
-      console.log(import_chalk22.default.gray(`  Cached at: ${result.fetchedAt}`));
-      console.log(import_chalk22.default.gray(`  Server returned 304 (no changes since last sync)`));
+      console.log(import_chalk23.default.gray(`  Cached at: ${result.fetchedAt}`));
+      console.log(import_chalk23.default.gray(`  Server returned 304 (no changes since last sync)`));
     } else {
       console.log(
-        import_chalk22.default.green(`\u2713 Synced ${result.rules} rule${result.rules === 1 ? "" : "s"} from cloud`)
+        import_chalk23.default.green(`\u2713 Synced ${result.rules} rule${result.rules === 1 ? "" : "s"} from cloud`)
       );
-      console.log(import_chalk22.default.gray(`  Cached at: ${result.fetchedAt}`));
-      console.log(import_chalk22.default.gray(`  File: ~/.node9/rules-cache.json`));
+      console.log(import_chalk23.default.gray(`  Cached at: ${result.fetchedAt}`));
+      console.log(import_chalk23.default.gray(`  File: ~/.node9/rules-cache.json`));
     }
   });
   policy.command("show").description("List all cloud policy rules in the local cache").action(() => {
     const status = getCloudSyncStatus();
     if (!status.cached) {
-      console.log(import_chalk22.default.yellow("\n  No cloud rules cached \u2014 run: node9 policy sync\n"));
+      console.log(import_chalk23.default.yellow("\n  No cloud rules cached \u2014 run: node9 policy sync\n"));
       return;
     }
     const rules = getCloudRules() ?? [];
     const age = Math.round((Date.now() - new Date(status.fetchedAt).getTime()) / 6e4);
     console.log(
-      import_chalk22.default.bold(`
-  Cloud policy rules`) + import_chalk22.default.gray(
+      import_chalk23.default.bold(`
+  Cloud policy rules`) + import_chalk23.default.gray(
         ` (${rules.length} rule${rules.length === 1 ? "" : "s"}, synced ${age}m ago)
 `
       )
     );
     if (rules.length === 0) {
-      console.log(import_chalk22.default.gray("  No rules defined in cloud policy.\n"));
+      console.log(import_chalk23.default.gray("  No rules defined in cloud policy.\n"));
       return;
     }
     for (const rule of rules) {
       const r = rule;
-      const verdictColor = r.verdict === "block" ? import_chalk22.default.red : r.verdict === "allow" ? import_chalk22.default.green : import_chalk22.default.yellow;
+      const verdictColor = r.verdict === "block" ? import_chalk23.default.red : r.verdict === "allow" ? import_chalk23.default.green : import_chalk23.default.yellow;
       console.log(
         `  ${verdictColor(
           String(r.verdict ?? "unknown").toUpperCase().padEnd(6)
-        )}  ${import_chalk22.default.white(String(r.name ?? "(unnamed)"))}`
+        )}  ${import_chalk23.default.white(String(r.name ?? "(unnamed)"))}`
       );
-      if (r.reason) console.log(import_chalk22.default.gray(`           ${String(r.reason)}`));
+      if (r.reason) console.log(import_chalk23.default.gray(`           ${String(r.reason)}`));
     }
     console.log("");
   });
   policy.command("status").description("Show current cloud policy cache status").action(() => {
     const s = getCloudSyncStatus();
     if (!s.cached) {
-      console.log(import_chalk22.default.yellow("\n  No cache yet \u2014 run: node9 policy sync\n"));
+      console.log(import_chalk23.default.yellow("\n  No cache yet \u2014 run: node9 policy sync\n"));
       return;
     }
     const age = Math.round((Date.now() - new Date(s.fetchedAt).getTime()) / 6e4);
     console.log(`
-  Rules   : ${import_chalk22.default.green(String(s.rules))} cloud rules loaded`);
+  Rules   : ${import_chalk23.default.green(String(s.rules))} cloud rules loaded`);
     console.log(
-      `  Synced  : ${import_chalk22.default.gray(`${age} minute${age === 1 ? "" : "s"} ago`)} (${s.fetchedAt})`
+      `  Synced  : ${import_chalk23.default.gray(`${age} minute${age === 1 ? "" : "s"} ago`)} (${s.fetchedAt})`
     );
     if (s.workspaceId) {
-      console.log(`  Workspace: ${import_chalk22.default.gray(s.workspaceId)}`);
+      console.log(`  Workspace: ${import_chalk23.default.gray(s.workspaceId)}`);
     }
     if (s.panicMode) {
       console.log(
-        `  ${import_chalk22.default.red.bold("\u{1F6A8} Panic mode  : ON")}  ` + import_chalk22.default.dim("(every review-verdict becomes block)")
+        `  ${import_chalk23.default.red.bold("\u{1F6A8} Panic mode  : ON")}  ` + import_chalk23.default.dim("(every review-verdict becomes block)")
       );
     }
     if (s.shadowMode) {
       console.log(
-        `  ${import_chalk22.default.yellow.bold("\u{1F441}  Shadow mode : ON")}  ` + import_chalk22.default.dim("(blocks become would-block log entries)")
+        `  ${import_chalk23.default.yellow.bold("\u{1F441}  Shadow mode : ON")}  ` + import_chalk23.default.dim("(blocks become would-block log entries)")
       );
     }
     if (s.syncIntervalHours) {
       console.log(
-        import_chalk22.default.gray(
+        import_chalk23.default.gray(
           `  Polling : every ${s.syncIntervalHours} hour${s.syncIntervalHours === 1 ? "" : "s"}`
         )
       );
@@ -26230,7 +26426,7 @@ function registerSyncCommand(program2) {
 }
 
 // src/cli/commands/agents.ts
-var import_chalk23 = __toESM(require("chalk"));
+var import_chalk24 = __toESM(require("chalk"));
 init_setup();
 var SETUP_FN = {
   claude: setupClaude,
@@ -26274,30 +26470,30 @@ function registerAgentsCommand(program2) {
     console.log(`  ${"Agent".padEnd(14)}${"Installed".padEnd(11)}${"Wired".padEnd(8)}Mode`);
     console.log("  " + "\u2500".repeat(44));
     for (const s of statuses) {
-      const installed = s.installed ? import_chalk23.default.green("\u2713") : import_chalk23.default.gray("\u2717");
-      const wired = !s.installed ? import_chalk23.default.gray("\u2014") : s.wired ? import_chalk23.default.green("\u2713") : import_chalk23.default.yellow("\u2717");
-      const mode = s.mode ? import_chalk23.default.gray(s.mode) : import_chalk23.default.gray("\u2014");
-      const hint = s.installed && !s.wired ? import_chalk23.default.gray(`  \u2190 node9 agents add ${s.name}`) : "";
+      const installed = s.installed ? import_chalk24.default.green("\u2713") : import_chalk24.default.gray("\u2717");
+      const wired = !s.installed ? import_chalk24.default.gray("\u2014") : s.wired ? import_chalk24.default.green("\u2713") : import_chalk24.default.yellow("\u2717");
+      const mode = s.mode ? import_chalk24.default.gray(s.mode) : import_chalk24.default.gray("\u2014");
+      const hint = s.installed && !s.wired ? import_chalk24.default.gray(`  \u2190 node9 agents add ${s.name}`) : "";
       console.log(`  ${s.label.padEnd(14)}${installed}          ${wired}       ${mode}${hint}`);
     }
     console.log("");
     if (!anyInstalled) {
       console.log(
-        import_chalk23.default.gray("  No AI agents detected. Install Claude Code, Gemini CLI, Cursor,\n") + import_chalk23.default.gray("  Windsurf, VSCode, or Codex then run: node9 agents list\n")
+        import_chalk24.default.gray("  No AI agents detected. Install Claude Code, Gemini CLI, Cursor,\n") + import_chalk24.default.gray("  Windsurf, VSCode, or Codex then run: node9 agents list\n")
       );
       return;
     }
     const unwired = statuses.filter((s) => s.installed && !s.wired);
     if (unwired.length > 0) {
       console.log(
-        import_chalk23.default.yellow(`  ${unwired.length} agent(s) not yet wired. Run: `) + import_chalk23.default.white(`node9 agents add ${unwired[0].name}`) + "\n"
+        import_chalk24.default.yellow(`  ${unwired.length} agent(s) not yet wired. Run: `) + import_chalk24.default.white(`node9 agents add ${unwired[0].name}`) + "\n"
       );
     }
     if (statuses.some((s) => s.name === "gemini" && s.installed)) {
       console.log(
-        import_chalk23.default.yellow(
+        import_chalk24.default.yellow(
           "  \u26A0\uFE0F  Gemini CLI stops serving AI Pro/Ultra and free tiers on 2026-06-18.\n"
-        ) + import_chalk23.default.gray("     Migrate to Antigravity: ") + import_chalk23.default.white("node9 agents add antigravity") + "\n"
+        ) + import_chalk24.default.gray("     Migrate to Antigravity: ") + import_chalk24.default.white("node9 agents add antigravity") + "\n"
       );
     }
   });
@@ -26305,7 +26501,7 @@ function registerAgentsCommand(program2) {
     const name = resolveAgentName(agent);
     const fn = SETUP_FN[name];
     if (!fn) {
-      console.error(import_chalk23.default.red(`Unknown agent: "${agent}". Supported: ${AGENT_NAMES.join(", ")}`));
+      console.error(import_chalk24.default.red(`Unknown agent: "${agent}". Supported: ${AGENT_NAMES.join(", ")}`));
       process.exit(1);
     }
     await fn();
@@ -26314,14 +26510,14 @@ function registerAgentsCommand(program2) {
     const name = resolveAgentName(agent);
     const fn = TEARDOWN_FN[name];
     if (!fn) {
-      console.error(import_chalk23.default.red(`Unknown agent: "${agent}". Supported: ${AGENT_NAMES.join(", ")}`));
+      console.error(import_chalk24.default.red(`Unknown agent: "${agent}". Supported: ${AGENT_NAMES.join(", ")}`));
       process.exit(1);
     }
-    console.log(import_chalk23.default.cyan(`
+    console.log(import_chalk24.default.cyan(`
 \u{1F6E1}\uFE0F  Node9: removing from ${name}...
 `));
     fn();
-    console.log(import_chalk23.default.gray("\n  Restart the agent for changes to take effect."));
+    console.log(import_chalk24.default.gray("\n  Restart the agent for changes to take effect."));
   });
 }
 
@@ -26329,22 +26525,22 @@ function registerAgentsCommand(program2) {
 init_scan();
 
 // src/cli/commands/posture.ts
-var import_chalk25 = __toESM(require("chalk"));
+var import_chalk26 = __toESM(require("chalk"));
 init_posture();
 
 // src/posture/render.ts
-var import_chalk24 = __toESM(require("chalk"));
+var import_chalk25 = __toESM(require("chalk"));
 init_score();
 var ICON = {
-  critical: import_chalk24.default.red("\u274C"),
-  high: import_chalk24.default.red("\u274C"),
-  medium: import_chalk24.default.yellow("\u26A0\uFE0F "),
-  advisory: import_chalk24.default.gray("\u26A0\uFE0F ")
+  critical: import_chalk25.default.red("\u274C"),
+  high: import_chalk25.default.red("\u274C"),
+  medium: import_chalk25.default.yellow("\u26A0\uFE0F "),
+  advisory: import_chalk25.default.gray("\u26A0\uFE0F ")
 };
 var TIER_LABEL = {
-  good: import_chalk24.default.green("Good"),
-  "at-risk": import_chalk24.default.yellow("At risk"),
-  critical: import_chalk24.default.red("Critical")
+  good: import_chalk25.default.green("Good"),
+  "at-risk": import_chalk25.default.yellow("At risk"),
+  critical: import_chalk25.default.red("Critical")
 };
 function wrap(text, width) {
   const out = [];
@@ -26362,35 +26558,35 @@ function wrap(text, width) {
 }
 var LABEL_WIDTH = 14;
 function label(category) {
-  return import_chalk24.default.bold(category.padEnd(Math.max(LABEL_WIDTH, category.length + 1)));
+  return import_chalk25.default.bold(category.padEnd(Math.max(LABEL_WIDTH, category.length + 1)));
 }
 function renderFinding(f, showWeight = false) {
   const lines = [];
-  const wt = showWeight && f.scoreWeight ? import_chalk24.default.cyan.bold(`+${f.scoreWeight} `) : "";
+  const wt = showWeight && f.scoreWeight ? import_chalk25.default.cyan.bold(`+${f.scoreWeight} `) : "";
   lines.push(`  ${ICON[f.severity]} ${label(f.category)}${wt}${f.title}`);
   const indent = " ".repeat(2 + 3 + LABEL_WIDTH);
   const width = 80 - indent.length;
   for (const s of [f.what, f.why, f.who]) {
-    if (s) for (const l of wrap(s, width)) lines.push(indent + import_chalk24.default.gray(l));
+    if (s) for (const l of wrap(s, width)) lines.push(indent + import_chalk25.default.gray(l));
   }
-  for (const d of f.detail) lines.push(indent + import_chalk24.default.gray(d));
+  for (const d of f.detail) lines.push(indent + import_chalk25.default.gray(d));
   if (f.fix) {
     let first = true;
     for (const seg of f.fix.split("\n")) {
       for (const l of wrap(seg, width - 2)) {
-        lines.push(indent + import_chalk24.default.cyan(first ? "\u2192 " + l : "  " + l));
+        lines.push(indent + import_chalk25.default.cyan(first ? "\u2192 " + l : "  " + l));
         first = false;
       }
     }
   }
   const tradeoff = [
-    [f.gain, "gain: ", import_chalk24.default.green],
-    [f.cost, "cost: ", import_chalk24.default.yellow]
+    [f.gain, "gain: ", import_chalk25.default.green],
+    [f.cost, "cost: ", import_chalk25.default.yellow]
   ];
   for (const [text, lbl, color2] of tradeoff) {
     if (!text) continue;
     wrap(text, width - 6).forEach((l, i) => {
-      lines.push(indent + (i === 0 ? color2(lbl) : "      ") + import_chalk24.default.gray(l));
+      lines.push(indent + (i === 0 ? color2(lbl) : "      ") + import_chalk25.default.gray(l));
     });
   }
   return lines;
@@ -26400,12 +26596,12 @@ function renderPosture(result) {
   const tier = TIER_LABEL[result.tier];
   lines.push("");
   lines.push(
-    import_chalk24.default.cyan.bold(`\u{1F6E1}\uFE0F  Node9 Posture`) + import_chalk24.default.gray(` \u2014 ${result.agent}`) + `        ${import_chalk24.default.bold(`Score: ${result.score}/100`)}  (${tier})`
+    import_chalk25.default.cyan.bold(`\u{1F6E1}\uFE0F  Node9 Posture`) + import_chalk25.default.gray(` \u2014 ${result.agent}`) + `        ${import_chalk25.default.bold(`Score: ${result.score}/100`)}  (${tier})`
   );
   const headroom = openHeadroom(result.findings);
   if (headroom > 0) {
     lines.push(
-      "  " + import_chalk24.default.gray(
+      "  " + import_chalk25.default.gray(
         `${headroom} pts of headroom below \u2014 each layer adds security at some cost to flexibility. You choose which to close.`
       )
     );
@@ -26413,21 +26609,21 @@ function renderPosture(result) {
   lines.push("");
   if (result.headline) {
     const indent = "     ";
-    lines.push(`  ${import_chalk24.default.red.bold("\u{1F525} Biggest risk")}`);
-    for (const l of wrap(result.headline.risk, 74)) lines.push(indent + import_chalk24.default.white(l));
+    lines.push(`  ${import_chalk25.default.red.bold("\u{1F525} Biggest risk")}`);
+    for (const l of wrap(result.headline.risk, 74)) lines.push(indent + import_chalk25.default.white(l));
     const action = wrap(`Do this first: ${result.headline.action}`, 72);
-    action.forEach((l, i) => lines.push(indent + import_chalk24.default.cyan(i === 0 ? "\u2192 " + l : "  " + l)));
+    action.forEach((l, i) => lines.push(indent + import_chalk25.default.cyan(i === 0 ? "\u2192 " + l : "  " + l)));
     lines.push("");
   }
   const covered = result.findings.filter((f) => f.coverage?.state === "covered");
   const open = result.findings.filter((f) => f.coverage?.state !== "covered");
   if (covered.length > 0) {
-    lines.push("  " + import_chalk24.default.green("\u{1F7E2} ON NOW \u2014 node9 is enforcing these (your floor)"));
+    lines.push("  " + import_chalk25.default.green("\u{1F7E2} ON NOW \u2014 node9 is enforcing these (your floor)"));
     for (const f of covered) {
       const gated = f.coverage?.level === "review" ? "approval-gating" : "blocking";
       const via = f.coverage?.via ?? "node9";
       lines.push(
-        `  ${import_chalk24.default.green("\u2705")} ${label(f.category)}${import_chalk24.default.gray(`${via} is ${gated} this`)}`
+        `  ${import_chalk25.default.green("\u2705")} ${label(f.category)}${import_chalk25.default.gray(`${via} is ${gated} this`)}`
       );
     }
     lines.push("");
@@ -26436,24 +26632,24 @@ function renderPosture(result) {
   const reduceOpen = open.filter((f) => f.owner !== "node9" && f.node9Reduces);
   const osOpen = open.filter((f) => f.owner !== "node9" && !f.node9Reduces);
   if (node9Open.length > 0) {
-    lines.push("  " + import_chalk24.default.cyan.bold("\u{1F527} node9 can fix these \u2014 run the command"));
+    lines.push("  " + import_chalk25.default.cyan.bold("\u{1F527} node9 can fix these \u2014 run the command"));
     for (const f of node9Open) lines.push(...renderFinding(f, true));
   }
   if (reduceOpen.length > 0) {
     if (node9Open.length > 0) lines.push("");
-    lines.push("  " + import_chalk24.default.yellow.bold("\u{1F512} AVAILABLE \u2014 turn on to harden (each has a tradeoff)"));
+    lines.push("  " + import_chalk25.default.yellow.bold("\u{1F512} AVAILABLE \u2014 turn on to harden (each has a tradeoff)"));
     for (const f of reduceOpen) lines.push(...renderFinding(f, true));
   }
   if (osOpen.length > 0) {
     if (node9Open.length > 0 || reduceOpen.length > 0) lines.push("");
-    lines.push("  " + import_chalk24.default.bold("\u{1F9F1} YOUR PART \u2014 node9 can't fix these (OS-level)"));
+    lines.push("  " + import_chalk25.default.bold("\u{1F9F1} YOUR PART \u2014 node9 can't fix these (OS-level)"));
     for (const f of osOpen) lines.push(...renderFinding(f));
   }
   for (const cat of result.passedCategories) {
-    lines.push(`  ${import_chalk24.default.green("\u2705")} ${label(cat)}${import_chalk24.default.gray("no issues found")}`);
+    lines.push(`  ${import_chalk25.default.green("\u2705")} ${label(cat)}${import_chalk25.default.gray("no issues found")}`);
   }
   for (const cat of result.erroredCategories) {
-    lines.push(`  ${import_chalk24.default.gray("\u2022")}  ${label(cat)}${import_chalk24.default.gray("could not be checked")}`);
+    lines.push(`  ${import_chalk25.default.gray("\u2022")}  ${label(cat)}${import_chalk25.default.gray("could not be checked")}`);
   }
   lines.push("");
   const crit = open.filter((f) => f.severity === "critical").length;
@@ -26461,16 +26657,16 @@ function renderPosture(result) {
   const med = open.filter((f) => f.severity === "medium").length;
   const adv = open.filter((f) => f.severity === "advisory").length;
   const parts = [];
-  if (crit) parts.push(import_chalk24.default.red(`${crit} critical`));
-  if (high) parts.push(import_chalk24.default.red(`${high} high`));
-  if (med) parts.push(import_chalk24.default.yellow(`${med} medium`));
-  if (adv) parts.push(import_chalk24.default.gray(`${adv} advisory`));
-  const summary = parts.length ? parts.join(" \xB7 ") : import_chalk24.default.green("no findings");
+  if (crit) parts.push(import_chalk25.default.red(`${crit} critical`));
+  if (high) parts.push(import_chalk25.default.red(`${high} high`));
+  if (med) parts.push(import_chalk25.default.yellow(`${med} medium`));
+  if (adv) parts.push(import_chalk25.default.gray(`${adv} advisory`));
+  const summary = parts.length ? parts.join(" \xB7 ") : import_chalk25.default.green("no findings");
   lines.push(`  ${summary}`);
   lines.push("");
-  lines.push("  " + import_chalk24.default.bold("Track this across your fleet & keep it green:"));
+  lines.push("  " + import_chalk25.default.bold("Track this across your fleet & keep it green:"));
   lines.push(
-    "  " + import_chalk24.default.dim("\u2192 ") + import_chalk24.default.cyan.underline("https://node9.ai/auth/signup?ref=cli_posture")
+    "  " + import_chalk25.default.dim("\u2192 ") + import_chalk25.default.cyan.underline("https://node9.ai/auth/signup?ref=cli_posture")
   );
   lines.push("");
   return lines.join("\n");
@@ -26490,11 +26686,11 @@ function registerPostureCommand(program2) {
     if (opts.ship) {
       const creds = readCredentials();
       if (!creds) {
-        console.error(import_chalk25.default.gray("  Run `node9 login` to ship this to your dashboard."));
+        console.error(import_chalk26.default.gray("  Run `node9 login` to ship this to your dashboard."));
       } else {
         const ok2 = await shipPosture(result, creds);
         console.error(
-          ok2 ? import_chalk25.default.gray("  \u2713 Shipped to your node9 dashboard.") : import_chalk25.default.gray("  Could not reach the dashboard \u2014 saved locally only.")
+          ok2 ? import_chalk26.default.gray("  \u2713 Shipped to your node9 dashboard.") : import_chalk26.default.gray("  Could not reach the dashboard \u2014 saved locally only.")
         );
       }
     }
@@ -26503,7 +26699,7 @@ function registerPostureCommand(program2) {
 }
 
 // src/cli/commands/egress.ts
-var import_chalk26 = __toESM(require("chalk"));
+var import_chalk27 = __toESM(require("chalk"));
 init_config();
 init_dist();
 function guard(fn) {
@@ -26511,7 +26707,7 @@ function guard(fn) {
     fn();
     return true;
   } catch (err2) {
-    console.error(import_chalk26.default.red(`
+    console.error(import_chalk27.default.red(`
   \u2717 ${err2.message}
 `));
     process.exitCode = 1;
@@ -26526,19 +26722,19 @@ function addHost(list, host) {
 }
 function showStatus() {
   const e = getConfig().policy.egress;
-  const state = !e.enabled ? import_chalk26.default.red("OFF \u2014 your agent can reach any host") : e.mode === "block" ? import_chalk26.default.green("LOCKED (block) \u2014 unknown hosts are denied") : import_chalk26.default.yellow("WATCHING (review) \u2014 unknown hosts prompt you");
-  console.log(import_chalk26.default.cyan.bold("\n\u{1F310} Egress control"));
+  const state = !e.enabled ? import_chalk27.default.red("OFF \u2014 your agent can reach any host") : e.mode === "block" ? import_chalk27.default.green("LOCKED (block) \u2014 unknown hosts are denied") : import_chalk27.default.yellow("WATCHING (review) \u2014 unknown hosts prompt you");
+  console.log(import_chalk27.default.cyan.bold("\n\u{1F310} Egress control"));
   console.log("  State: " + state);
   console.log(
-    import_chalk26.default.gray(
+    import_chalk27.default.gray(
       `  ${DEFAULT_EGRESS_ALLOWLIST.length} common dev/LLM hosts are always allowed (github, npm, pypi, anthropic, \u2026).`
     )
   );
   if (e.allow.length) console.log("  Your allow: " + e.allow.join(", "));
   if (e.deny.length) console.log("  Your deny:  " + e.deny.join(", "));
   if (!e.enabled) {
-    console.log(import_chalk26.default.gray("\n  Turn it on:  node9 egress watch   (prompt on unknown hosts)"));
-    console.log(import_chalk26.default.gray("               node9 egress lock    (hard-block unknown hosts)"));
+    console.log(import_chalk27.default.gray("\n  Turn it on:  node9 egress watch   (prompt on unknown hosts)"));
+    console.log(import_chalk27.default.gray("               node9 egress lock    (hard-block unknown hosts)"));
   }
   console.log("");
 }
@@ -26546,43 +26742,43 @@ function registerEgressCommand(program2) {
   const egress = program2.command("egress").description("Control where your agent can send data (egress allowlist)");
   egress.command("watch").description("Prompt before the agent reaches an unknown host (review mode)").action(() => {
     if (!mutate({ enabled: true, mode: "review" })) return;
-    console.log(import_chalk26.default.green("\n\u2713 Egress is now watched (review mode)."));
+    console.log(import_chalk27.default.green("\n\u2713 Egress is now watched (review mode)."));
     console.log(
-      import_chalk26.default.gray("  Routine hosts (LLM APIs, package registries, localhost) are allowed.")
+      import_chalk27.default.gray("  Routine hosts (LLM APIs, package registries, localhost) are allowed.")
     );
     console.log(
-      import_chalk26.default.gray("  An unknown host will prompt you \u2014 run `node9 egress lock` to hard-block.\n")
+      import_chalk27.default.gray("  An unknown host will prompt you \u2014 run `node9 egress lock` to hard-block.\n")
     );
   });
   egress.command("lock").description("Block the agent from reaching unknown hosts (block mode)").action(() => {
     if (!mutate({ enabled: true, mode: "block" })) return;
-    console.log(import_chalk26.default.green("\n\u2713 Egress is now locked (block mode)."));
-    console.log(import_chalk26.default.gray("  Routine hosts are still allowed; unknown hosts are denied."));
-    console.log(import_chalk26.default.gray("  Allow a specific host with `node9 egress allow <host>`.\n"));
+    console.log(import_chalk27.default.green("\n\u2713 Egress is now locked (block mode)."));
+    console.log(import_chalk27.default.gray("  Routine hosts are still allowed; unknown hosts are denied."));
+    console.log(import_chalk27.default.gray("  Allow a specific host with `node9 egress allow <host>`.\n"));
   });
   egress.command("allow <host>").description("Allow an extra host (glob, e.g. *.mycorp.com)").action((host) => {
     if (!addHost("allow", host)) return;
-    console.log(import_chalk26.default.green(`
+    console.log(import_chalk27.default.green(`
 \u2713 Allowed egress to ${host}.
 `));
   });
   egress.command("deny <host>").description("Block an extra host (deny always wins)").action((host) => {
     if (!addHost("deny", host)) return;
-    console.log(import_chalk26.default.green(`
+    console.log(import_chalk27.default.green(`
 \u2713 Denied egress to ${host}.
 `));
   });
   egress.command("off").description("Turn egress control off").action(() => {
     if (!mutate({ enabled: false })) return;
     console.log(
-      import_chalk26.default.yellow("\n\u2713 Egress control is off \u2014 the agent can reach any host again.\n")
+      import_chalk27.default.yellow("\n\u2713 Egress control is off \u2014 the agent can reach any host again.\n")
     );
   });
   egress.action(showStatus);
 }
 
 // src/cli/commands/jail.ts
-var import_chalk27 = __toESM(require("chalk"));
+var import_chalk28 = __toESM(require("chalk"));
 
 // src/shields/jail.ts
 var import_fs55 = __toESM(require("fs"));
@@ -26677,20 +26873,20 @@ function registerJailCommand(program2) {
       regenerateUserJail(paths);
       appendConfigAudit({ event: "jail-add", path: p.trim(), verdict });
     } catch (err2) {
-      console.error(import_chalk27.default.red(`
+      console.error(import_chalk28.default.red(`
 \u274C ${err2.message}
 `));
       process.exit(1);
       return;
     }
-    console.log(import_chalk27.default.green(`
+    console.log(import_chalk28.default.green(`
 \u2705 Jailed ${p} (${verdict}).`));
     console.log(
-      import_chalk27.default.gray(
+      import_chalk28.default.gray(
         `   AI reads of this path now ${verdict === "block" ? "BLOCK" : "require approval"}.`
       )
     );
-    console.log(import_chalk27.default.gray(`   Preview: ${import_chalk27.default.cyan(`node9 explain bash "cat ${p}"`)}
+    console.log(import_chalk28.default.gray(`   Preview: ${import_chalk28.default.cyan(`node9 explain bash "cat ${p}"`)}
 `));
   });
   jail.command("remove <path>").description("Remove a user-added jail path (built-in paths are not removable)").action((p) => {
@@ -26698,17 +26894,17 @@ function registerJailCommand(program2) {
     try {
       result = removeJailPath(p);
     } catch (err2) {
-      console.error(import_chalk27.default.red(`
+      console.error(import_chalk28.default.red(`
 \u274C ${err2.message}
 `));
       process.exit(1);
       return;
     }
     if (!result.removed) {
-      console.error(import_chalk27.default.yellow(`
+      console.error(import_chalk28.default.yellow(`
 \u2139\uFE0F  "${p}" is not a user-added jail path.
 `));
-      console.error(import_chalk27.default.gray(`   Run ${import_chalk27.default.cyan("node9 jail list")} to see your paths.
+      console.error(import_chalk28.default.gray(`   Run ${import_chalk28.default.cyan("node9 jail list")} to see your paths.
 `));
       process.exit(1);
       return;
@@ -26717,39 +26913,39 @@ function registerJailCommand(program2) {
       regenerateUserJail(result.paths);
       appendConfigAudit({ event: "jail-remove", path: p.trim() });
     } catch (err2) {
-      console.error(import_chalk27.default.red(`
+      console.error(import_chalk28.default.red(`
 \u274C ${err2.message}
 `));
       process.exit(1);
       return;
     }
-    console.log(import_chalk27.default.green(`
+    console.log(import_chalk28.default.green(`
 \u2705 Removed ${p} from the jail.
 `));
   });
   jail.command("list").description("Show built-in + user-added jail paths").action(() => {
-    console.log(import_chalk27.default.bold("\n\u{1F512} Credential Jail\n"));
-    console.log(import_chalk27.default.gray("  Built-in (always on, not removable):"));
-    for (const b of BUILTIN_JAIL) console.log(`    ${import_chalk27.default.gray("\u2022")} ${b}`);
+    console.log(import_chalk28.default.bold("\n\u{1F512} Credential Jail\n"));
+    console.log(import_chalk28.default.gray("  Built-in (always on, not removable):"));
+    for (const b of BUILTIN_JAIL) console.log(`    ${import_chalk28.default.gray("\u2022")} ${b}`);
     console.log("");
     let user;
     try {
       user = readJailPaths();
     } catch (err2) {
-      console.error(import_chalk27.default.red(`  \u2717 ${err2.message}
+      console.error(import_chalk28.default.red(`  \u2717 ${err2.message}
 `));
       process.exit(1);
       return;
     }
     if (user.length === 0) {
       console.log(
-        import_chalk27.default.gray("  Your paths: (none) \u2014 add one with ") + import_chalk27.default.cyan("node9 jail add <path>")
+        import_chalk28.default.gray("  Your paths: (none) \u2014 add one with ") + import_chalk28.default.cyan("node9 jail add <path>")
       );
     } else {
-      console.log(import_chalk27.default.gray("  Your paths (removable):"));
+      console.log(import_chalk28.default.gray("  Your paths (removable):"));
       for (const u of user) {
-        const v = u.verdict === "block" ? import_chalk27.default.red("block ") : import_chalk27.default.yellow("review");
-        console.log(`    ${v}  ${import_chalk27.default.cyan(u.path)}`);
+        const v = u.verdict === "block" ? import_chalk28.default.red("block ") : import_chalk28.default.yellow("review");
+        console.log(`    ${v}  ${import_chalk28.default.cyan(u.path)}`);
       }
     }
     console.log("");
@@ -26757,7 +26953,7 @@ function registerJailCommand(program2) {
 }
 
 // src/cli/commands/sandbox.ts
-var import_chalk28 = __toESM(require("chalk"));
+var import_chalk29 = __toESM(require("chalk"));
 var import_fs58 = __toESM(require("fs"));
 var import_path56 = __toESM(require("path"));
 var import_child_process13 = require("child_process");
@@ -26995,16 +27191,16 @@ function registerSandboxCommand(program2, version2) {
     const p = sandboxConfigPath();
     if (import_fs58.default.existsSync(p)) {
       console.log(
-        import_chalk28.default.yellow(`  ${SANDBOX_CONFIG_FILE} already exists \u2014 leaving it untouched.`)
+        import_chalk29.default.yellow(`  ${SANDBOX_CONFIG_FILE} already exists \u2014 leaving it untouched.`)
       );
       return;
     }
     import_fs58.default.writeFileSync(p, scaffoldSandboxYaml(agent));
     console.log(
-      import_chalk28.default.green(`  \u2713 wrote ${SANDBOX_CONFIG_FILE}`) + import_chalk28.default.dim(` (agent: ${agent})`)
+      import_chalk29.default.green(`  \u2713 wrote ${SANDBOX_CONFIG_FILE}`) + import_chalk29.default.dim(` (agent: ${agent})`)
     );
     console.log(
-      import_chalk28.default.dim("  Edit it (mounts / allow / expose), then: ") + import_chalk28.default.cyan("node9 sandbox run")
+      import_chalk29.default.dim("  Edit it (mounts / allow / expose), then: ") + import_chalk29.default.cyan("node9 sandbox run")
     );
   });
   cmd.command("run [agent]").description("Build (if needed) + run the agent jailed. Extra args after -- go to the agent.").allowUnknownOption(true).allowExcessArguments(true).action((agentArg, _opts, command) => {
@@ -27014,7 +27210,7 @@ function registerSandboxCommand(program2, version2) {
     const engine = detectEngine(sandbox.runtime.engine);
     if (!engine.available) {
       console.error(
-        import_chalk28.default.red(`  ${sandbox.runtime.engine} not found.`) + import_chalk28.default.dim(` Install it first \u2014 node9 sandbox needs a container runtime.`)
+        import_chalk29.default.red(`  ${sandbox.runtime.engine} not found.`) + import_chalk29.default.dim(` Install it first \u2014 node9 sandbox needs a container runtime.`)
       );
       process.exit(1);
     }
@@ -27027,11 +27223,11 @@ function registerSandboxCommand(program2, version2) {
     });
     if (compiled.rejected.length) {
       console.log(
-        import_chalk28.default.yellow(`  \u26A0 ignoring invalid allow hosts: ${compiled.rejected.join(", ")}`)
+        import_chalk29.default.yellow(`  \u26A0 ignoring invalid allow hosts: ${compiled.rejected.join(", ")}`)
       );
     }
     if (compiled.denied.length) {
-      console.log(import_chalk28.default.dim(`  (denied: ${compiled.denied.join(", ")})`));
+      console.log(import_chalk29.default.dim(`  (denied: ${compiled.denied.join(", ")})`));
     }
     const allowlistPath = writeAllowlist(cwd, compiled.allow);
     const dockerfile = renderDockerfile(sandbox, node9Version2);
@@ -27044,12 +27240,12 @@ function registerSandboxCommand(program2, version2) {
     const imageExists = (0, import_child_process13.spawnSync)(sandbox.runtime.engine, ["image", "inspect", image], { stdio: "ignore" }).status === 0;
     const needBuild = sandbox.runtime.rebuild === "always" || !imageExists || sandbox.runtime.rebuild !== "never" && lastHash !== hash;
     if (needBuild) {
-      console.log(import_chalk28.default.dim(`  building ${image} \u2026`));
+      console.log(import_chalk29.default.dim(`  building ${image} \u2026`));
       const b = (0, import_child_process13.spawnSync)(sandbox.runtime.engine, ["build", "-t", image, buildDir], {
         stdio: "inherit"
       });
       if (b.status !== 0) {
-        console.error(import_chalk28.default.red("  build failed."));
+        console.error(import_chalk29.default.red("  build failed."));
         process.exit(b.status ?? 1);
       }
       import_fs58.default.writeFileSync(hashFile, hash);
@@ -27067,15 +27263,15 @@ function registerSandboxCommand(program2, version2) {
     if (sandbox.node9.mountAgentCredentials) {
       const creds = agentCredentialsMount(sandbox.agent);
       if (import_fs58.default.existsSync(creds.hostPath)) {
-        console.log(import_chalk28.default.dim(`  mounting ${creds.hostPath} (agent credentials, rw)`));
+        console.log(import_chalk29.default.dim(`  mounting ${creds.hostPath} (agent credentials, rw)`));
       } else {
         console.log(
-          import_chalk28.default.yellow(`  \u26A0 ${creds.hostPath} not found \u2014 `) + import_chalk28.default.dim(`the agent must auth via an env key in env.pass.`)
+          import_chalk29.default.yellow(`  \u26A0 ${creds.hostPath} not found \u2014 `) + import_chalk29.default.dim(`the agent must auth via an env key in env.pass.`)
         );
       }
     }
     console.log(
-      import_chalk28.default.green(`  \u{1F6E1}\uFE0F  ${sandbox.agent} jailed \u2014 ${compiled.allow.length} hosts allowed
+      import_chalk29.default.green(`  \u{1F6E1}\uFE0F  ${sandbox.agent} jailed \u2014 ${compiled.allow.length} hosts allowed
 `)
     );
     const r = (0, import_child_process13.spawnSync)(sandbox.runtime.engine, runArgs, { stdio: "inherit" });
@@ -27084,7 +27280,7 @@ function registerSandboxCommand(program2, version2) {
   cmd.command("tail").description("Stream the sandbox's audit log (host-side)").action(() => {
     const auditPath = import_path56.default.join(sandboxDataDir(), "audit.log");
     if (!import_fs58.default.existsSync(auditPath)) {
-      console.log(import_chalk28.default.dim("  no sandbox audit yet."));
+      console.log(import_chalk29.default.dim("  no sandbox audit yet."));
       return;
     }
     (0, import_child_process13.spawnSync)("tail", ["-f", auditPath], { stdio: "inherit" });
@@ -27092,7 +27288,7 @@ function registerSandboxCommand(program2, version2) {
   cmd.command("logs").description("Dump the sandbox's audit log").action(() => {
     const auditPath = import_path56.default.join(sandboxDataDir(), "audit.log");
     if (!import_fs58.default.existsSync(auditPath)) {
-      console.log(import_chalk28.default.dim("  no sandbox audit yet."));
+      console.log(import_chalk29.default.dim("  no sandbox audit yet."));
       return;
     }
     process.stdout.write(import_fs58.default.readFileSync(auditPath, "utf-8"));
@@ -27110,12 +27306,12 @@ function registerSandboxCommand(program2, version2) {
       });
     }
     import_fs58.default.rmSync(import_path56.default.join(cwd, ".node9", "sandbox"), { recursive: true, force: true });
-    console.log(import_chalk28.default.green("  \u2713 sandbox image + build + data removed."));
+    console.log(import_chalk29.default.green("  \u2713 sandbox image + build + data removed."));
   });
 }
 
 // src/cli/commands/sessions.ts
-var import_chalk29 = __toESM(require("chalk"));
+var import_chalk30 = __toESM(require("chalk"));
 var import_fs59 = __toESM(require("fs"));
 var import_path57 = __toESM(require("path"));
 var import_os50 = __toESM(require("os"));
@@ -27611,11 +27807,11 @@ function toolInputSummary(tool, input) {
 }
 function toolColor(tool) {
   const t = tool.toLowerCase();
-  if (t === "bash" || t === "execute_bash") return import_chalk29.default.red;
-  if (t === "write") return import_chalk29.default.green;
-  if (t === "edit" || t === "notebookedit") return import_chalk29.default.yellow;
-  if (t === "read") return import_chalk29.default.cyan;
-  return import_chalk29.default.gray;
+  if (t === "bash" || t === "execute_bash") return import_chalk30.default.red;
+  if (t === "write") return import_chalk30.default.green;
+  if (t === "edit" || t === "notebookedit") return import_chalk30.default.yellow;
+  if (t === "read") return import_chalk30.default.cyan;
+  return import_chalk30.default.gray;
 }
 function barStr2(value, max, width) {
   if (max === 0 || width <= 0) return "\u2591".repeat(width);
@@ -27625,7 +27821,7 @@ function barStr2(value, max, width) {
 function colorBar2(value, max, width) {
   const s = barStr2(value, max, width);
   const filled = Math.max(1, Math.round(max > 0 ? value / max * width : 0));
-  return import_chalk29.default.cyan(s.slice(0, filled)) + import_chalk29.default.dim(s.slice(filled));
+  return import_chalk30.default.cyan(s.slice(0, filled)) + import_chalk30.default.dim(s.slice(filled));
 }
 function renderSummary(summaries) {
   const totalTools = summaries.reduce((n, s) => n + s.toolCalls.length, 0);
@@ -27655,45 +27851,45 @@ function renderSummary(summaries) {
   }
   const topProjects = [...projCosts.entries()].sort((a, b) => b[1] - a[1]).slice(0, 3);
   const W = 20;
-  console.log(import_chalk29.default.dim("  " + "\u2500".repeat(70)));
+  console.log(import_chalk30.default.dim("  " + "\u2500".repeat(70)));
   console.log(
-    "  " + import_chalk29.default.bold.white(String(summaries.length).padEnd(4)) + import_chalk29.default.dim("sessions    ") + import_chalk29.default.bold.yellow(fmtCost3(totalCost).padEnd(10)) + import_chalk29.default.dim("total    ") + import_chalk29.default.bold.white(String(totalTools).padEnd(6)) + import_chalk29.default.dim("tool calls    ") + import_chalk29.default.bold.white(String(totalFiles)) + import_chalk29.default.dim(" files modified") + (totalBlocked > 0 ? import_chalk29.default.dim("    ") + import_chalk29.default.red.bold(String(totalBlocked)) + import_chalk29.default.dim(" blocked by node9") : "")
+    "  " + import_chalk30.default.bold.white(String(summaries.length).padEnd(4)) + import_chalk30.default.dim("sessions    ") + import_chalk30.default.bold.yellow(fmtCost3(totalCost).padEnd(10)) + import_chalk30.default.dim("total    ") + import_chalk30.default.bold.white(String(totalTools).padEnd(6)) + import_chalk30.default.dim("tool calls    ") + import_chalk30.default.bold.white(String(totalFiles)) + import_chalk30.default.dim(" files modified") + (totalBlocked > 0 ? import_chalk30.default.dim("    ") + import_chalk30.default.red.bold(String(totalBlocked)) + import_chalk30.default.dim(" blocked by node9") : "")
   );
   console.log(
-    "  " + import_chalk29.default.dim("avg ") + import_chalk29.default.white(fmtCost3(avgCost).padEnd(10)) + import_chalk29.default.dim("/session    ") + import_chalk29.default.green(String(snapshots)) + import_chalk29.default.dim(` of ${summaries.length} sessions had snapshots`)
+    "  " + import_chalk30.default.dim("avg ") + import_chalk30.default.white(fmtCost3(avgCost).padEnd(10)) + import_chalk30.default.dim("/session    ") + import_chalk30.default.green(String(snapshots)) + import_chalk30.default.dim(` of ${summaries.length} sessions had snapshots`)
   );
   console.log("");
-  console.log("  " + import_chalk29.default.dim("Tool breakdown:"));
+  console.log("  " + import_chalk30.default.dim("Tool breakdown:"));
   const maxGroup = Math.max(...Object.values(groups));
   for (const [label2, count] of Object.entries(groups)) {
     if (count === 0) continue;
     const pct = totalTools > 0 ? Math.round(count / totalTools * 100) : 0;
     console.log(
-      "    " + label2.padEnd(6) + "  " + colorBar2(count, maxGroup, W) + "  " + import_chalk29.default.white(String(count).padStart(4)) + import_chalk29.default.dim(` (${String(pct)}%)`)
+      "    " + label2.padEnd(6) + "  " + colorBar2(count, maxGroup, W) + "  " + import_chalk30.default.white(String(count).padStart(4)) + import_chalk30.default.dim(` (${String(pct)}%)`)
     );
   }
   console.log("");
   if (topProjects.length > 1) {
-    console.log("  " + import_chalk29.default.dim("Cost by project:"));
+    console.log("  " + import_chalk30.default.dim("Cost by project:"));
     const maxProjCost = topProjects[0][1];
     for (const [proj, cost] of topProjects) {
       console.log(
-        "    " + proj.slice(0, 28).padEnd(28) + "  " + colorBar2(cost, maxProjCost, W) + "  " + import_chalk29.default.yellow(fmtCost3(cost))
+        "    " + proj.slice(0, 28).padEnd(28) + "  " + colorBar2(cost, maxProjCost, W) + "  " + import_chalk30.default.yellow(fmtCost3(cost))
       );
     }
     console.log("");
   }
-  console.log(import_chalk29.default.dim("  " + "\u2500".repeat(70)));
+  console.log(import_chalk30.default.dim("  " + "\u2500".repeat(70)));
   console.log("");
 }
 function renderList(summaries, totalCost) {
   if (summaries.length === 0) {
-    console.log(import_chalk29.default.yellow("  No sessions found in the requested range.\n"));
+    console.log(import_chalk30.default.yellow("  No sessions found in the requested range.\n"));
     return;
   }
-  const totalLabel = totalCost > 0 ? import_chalk29.default.dim("  ~" + fmtCost3(totalCost) + " total") : "";
+  const totalLabel = totalCost > 0 ? import_chalk30.default.dim("  ~" + fmtCost3(totalCost) + " total") : "";
   console.log(
-    "  " + import_chalk29.default.white(String(summaries.length)) + import_chalk29.default.dim(` session${summaries.length !== 1 ? "s" : ""}`) + totalLabel
+    "  " + import_chalk30.default.white(String(summaries.length)) + import_chalk30.default.dim(` session${summaries.length !== 1 ? "s" : ""}`) + totalLabel
   );
   console.log("");
   let lastGroup = "";
@@ -27701,51 +27897,51 @@ function renderList(summaries, totalCost) {
     const activeDate = fmtDate2(s.lastActiveTime);
     const group = activeDate + "  " + s.projectLabel;
     if (group !== lastGroup) {
-      console.log(import_chalk29.default.dim("  \u2500\u2500\u2500 ") + import_chalk29.default.bold(activeDate) + import_chalk29.default.dim("  " + s.projectLabel));
+      console.log(import_chalk30.default.dim("  \u2500\u2500\u2500 ") + import_chalk30.default.bold(activeDate) + import_chalk30.default.dim("  " + s.projectLabel));
       lastGroup = group;
     }
     const startDate = fmtDate2(s.startTime);
-    const dateRange = startDate !== activeDate ? import_chalk29.default.dim(" (" + startDate + " \u2192 " + activeDate + ")") : "";
-    const timeStr = import_chalk29.default.dim(fmtTime(s.startTime));
-    const prompt = import_chalk29.default.white(truncate(s.firstPrompt.replace(/\n/g, " "), 50).padEnd(50));
-    const tools = s.toolCalls.length > 0 ? import_chalk29.default.dim(String(s.toolCalls.length).padStart(3) + " tools") : import_chalk29.default.dim("  0 tools");
-    const cost = s.costUSD > 0 ? import_chalk29.default.dim("  " + fmtCost3(s.costUSD).padEnd(8)) : "          ";
-    const blocked = s.blockedCalls.length > 0 ? import_chalk29.default.red("  \u{1F6D1} " + String(s.blockedCalls.length)) : "";
-    const snap = s.hasSnapshot ? import_chalk29.default.green("  \u{1F4F8}") : "";
-    const agentBadge = import_chalk29.default[agentColorName(s.agent ?? "claude")](
+    const dateRange = startDate !== activeDate ? import_chalk30.default.dim(" (" + startDate + " \u2192 " + activeDate + ")") : "";
+    const timeStr = import_chalk30.default.dim(fmtTime(s.startTime));
+    const prompt = import_chalk30.default.white(truncate(s.firstPrompt.replace(/\n/g, " "), 50).padEnd(50));
+    const tools = s.toolCalls.length > 0 ? import_chalk30.default.dim(String(s.toolCalls.length).padStart(3) + " tools") : import_chalk30.default.dim("  0 tools");
+    const cost = s.costUSD > 0 ? import_chalk30.default.dim("  " + fmtCost3(s.costUSD).padEnd(8)) : "          ";
+    const blocked = s.blockedCalls.length > 0 ? import_chalk30.default.red("  \u{1F6D1} " + String(s.blockedCalls.length)) : "";
+    const snap = s.hasSnapshot ? import_chalk30.default.green("  \u{1F4F8}") : "";
+    const agentBadge = import_chalk30.default[agentColorName(s.agent ?? "claude")](
       "  " + agentBadgeText(s.agent ?? "claude", 0)
     );
-    const sid = import_chalk29.default.dim("  " + s.sessionId.slice(0, 8));
+    const sid = import_chalk30.default.dim("  " + s.sessionId.slice(0, 8));
     console.log(
       `  ${timeStr}  ${prompt}  ${tools}${cost}${blocked}${snap}${agentBadge}${sid}${dateRange}`
     );
   }
   console.log("");
   console.log(
-    import_chalk29.default.dim("  Run") + " " + import_chalk29.default.cyan("node9 sessions --detail <session-id>") + import_chalk29.default.dim(" for full tool trace.")
+    import_chalk30.default.dim("  Run") + " " + import_chalk30.default.cyan("node9 sessions --detail <session-id>") + import_chalk30.default.dim(" for full tool trace.")
   );
   console.log("");
 }
 function renderDetail(s) {
   console.log("");
-  console.log(import_chalk29.default.bold("  Session  ") + import_chalk29.default.dim(s.sessionId));
+  console.log(import_chalk30.default.bold("  Session  ") + import_chalk30.default.dim(s.sessionId));
   console.log(
-    import_chalk29.default.bold("  Prompt   ") + import_chalk29.default.white(s.firstPrompt.replace(/\n/g, " ").slice(0, 120))
+    import_chalk30.default.bold("  Prompt   ") + import_chalk30.default.white(s.firstPrompt.replace(/\n/g, " ").slice(0, 120))
   );
-  console.log(import_chalk29.default.bold("  Project  ") + import_chalk29.default.white(s.projectLabel));
+  console.log(import_chalk30.default.bold("  Project  ") + import_chalk30.default.white(s.projectLabel));
   if (s.agent) {
-    const agentLabel2 = import_chalk29.default[agentColorName(s.agent)](agentDisplayName(s.agent));
-    console.log(import_chalk29.default.bold("  Agent    ") + agentLabel2);
+    const agentLabel2 = import_chalk30.default[agentColorName(s.agent)](agentDisplayName(s.agent));
+    console.log(import_chalk30.default.bold("  Agent    ") + agentLabel2);
   }
-  console.log(import_chalk29.default.bold("  When     ") + import_chalk29.default.white(fmtDateTime(s.startTime)));
+  console.log(import_chalk30.default.bold("  When     ") + import_chalk30.default.white(fmtDateTime(s.startTime)));
   if (s.costUSD > 0)
-    console.log(import_chalk29.default.bold("  Cost     ") + import_chalk29.default.yellow("~" + fmtCost3(s.costUSD)));
+    console.log(import_chalk30.default.bold("  Cost     ") + import_chalk30.default.yellow("~" + fmtCost3(s.costUSD)));
   console.log(
-    import_chalk29.default.bold("  Snapshot ") + (s.hasSnapshot ? import_chalk29.default.green("\u2713 taken") : import_chalk29.default.dim("none"))
+    import_chalk30.default.bold("  Snapshot ") + (s.hasSnapshot ? import_chalk30.default.green("\u2713 taken") : import_chalk30.default.dim("none"))
   );
   console.log("");
   if (s.toolCalls.length === 0 && s.blockedCalls.length === 0) {
-    console.log(import_chalk29.default.dim("  No tool calls recorded.\n"));
+    console.log(import_chalk30.default.dim("  No tool calls recorded.\n"));
     return;
   }
   const timeline = [
@@ -27758,32 +27954,32 @@ function renderDetail(s) {
   });
   const headerParts = [`Tool calls (${s.toolCalls.length})`];
   if (s.blockedCalls.length > 0)
-    headerParts.push(import_chalk29.default.red(`${s.blockedCalls.length} blocked by node9`));
-  console.log(import_chalk29.default.bold("  " + headerParts.join("  \xB7  ")));
+    headerParts.push(import_chalk30.default.red(`${s.blockedCalls.length} blocked by node9`));
+  console.log(import_chalk30.default.bold("  " + headerParts.join("  \xB7  ")));
   console.log("");
   for (const entry of timeline) {
     if (entry.kind === "tool") {
       const tc = entry.tc;
       const colorFn = toolColor(tc.tool);
       const toolPad = colorFn(tc.tool.padEnd(16));
-      const detail = import_chalk29.default.gray(truncate(toolInputSummary(tc.tool, tc.input), 70));
-      const ts = tc.timestamp ? import_chalk29.default.dim(fmtTime(tc.timestamp) + "  ") : "       ";
+      const detail = import_chalk30.default.gray(truncate(toolInputSummary(tc.tool, tc.input), 70));
+      const ts = tc.timestamp ? import_chalk30.default.dim(fmtTime(tc.timestamp) + "  ") : "       ";
       console.log(`    ${ts}${toolPad}  ${detail}`);
     } else {
       const bc = entry.bc;
-      const ts = bc.timestamp ? import_chalk29.default.dim(fmtTime(bc.timestamp) + "  ") : "       ";
-      const label2 = import_chalk29.default.red("\u{1F6D1} BLOCKED".padEnd(16));
-      const toolName = import_chalk29.default.red(bc.tool.padEnd(10));
-      const argsSummary = bc.args ? import_chalk29.default.gray(truncate(toolInputSummary(bc.tool, bc.args), 40)) : import_chalk29.default.dim("[args not logged]");
-      const reason = bc.checkedBy ? import_chalk29.default.dim("  \u2190 " + bc.checkedBy) : "";
+      const ts = bc.timestamp ? import_chalk30.default.dim(fmtTime(bc.timestamp) + "  ") : "       ";
+      const label2 = import_chalk30.default.red("\u{1F6D1} BLOCKED".padEnd(16));
+      const toolName = import_chalk30.default.red(bc.tool.padEnd(10));
+      const argsSummary = bc.args ? import_chalk30.default.gray(truncate(toolInputSummary(bc.tool, bc.args), 40)) : import_chalk30.default.dim("[args not logged]");
+      const reason = bc.checkedBy ? import_chalk30.default.dim("  \u2190 " + bc.checkedBy) : "";
       console.log(`    ${ts}${label2}  ${toolName}  ${argsSummary}${reason}`);
     }
   }
   console.log("");
   if (s.modifiedFiles.length > 0) {
-    console.log(import_chalk29.default.bold(`  Files modified (${s.modifiedFiles.length}):`));
+    console.log(import_chalk30.default.bold(`  Files modified (${s.modifiedFiles.length}):`));
     for (const f of s.modifiedFiles) {
-      console.log("    " + import_chalk29.default.yellow(f));
+      console.log("    " + import_chalk30.default.yellow(f));
     }
     console.log("");
   }
@@ -27791,13 +27987,13 @@ function renderDetail(s) {
 function registerSessionsCommand(program2) {
   program2.command("sessions").description("Show what your AI agent did \u2014 sessions, tool calls, cost, and file changes").option("--all", "Show all sessions (default: last 7 days)").option("--days <n>", "Show last N days of sessions", "7").option("--detail <sessionId>", "Show full tool trace for a session").action((options) => {
     console.log("");
-    console.log(import_chalk29.default.cyan.bold("\u{1F4CB}  node9 sessions") + import_chalk29.default.dim("  \u2014 what your AI agent did"));
+    console.log(import_chalk30.default.cyan.bold("\u{1F4CB}  node9 sessions") + import_chalk30.default.dim("  \u2014 what your AI agent did"));
     console.log("");
     const days = options.detail || options.all ? null : Math.max(1, parseInt(options.days, 10) || 7);
     const rangeLabel = options.detail ? "all time" : options.all ? "all time" : `last ${String(days)} days`;
-    console.log(import_chalk29.default.dim("  " + rangeLabel));
+    console.log(import_chalk30.default.dim("  " + rangeLabel));
     console.log("");
-    process.stdout.write(import_chalk29.default.dim("  Loading\u2026"));
+    process.stdout.write(import_chalk30.default.dim("  Loading\u2026"));
     const summaries = buildSessions(days);
     if (process.stdout.isTTY) {
       process.stdout.clearLine(0);
@@ -27810,8 +28006,8 @@ function registerSessionsCommand(program2) {
         (s) => s.sessionId === options.detail || s.sessionId.startsWith(options.detail)
       );
       if (!target) {
-        console.log(import_chalk29.default.red(`  Session not found: ${options.detail}`));
-        console.log(import_chalk29.default.dim("  Run `node9 sessions` to list recent sessions.\n"));
+        console.log(import_chalk30.default.red(`  Session not found: ${options.detail}`));
+        console.log(import_chalk30.default.dim("  Run `node9 sessions` to list recent sessions.\n"));
         return;
       }
       renderDetail(target);
@@ -27824,7 +28020,7 @@ function registerSessionsCommand(program2) {
 }
 
 // src/cli/commands/session-taint.ts
-var import_chalk30 = __toESM(require("chalk"));
+var import_chalk31 = __toESM(require("chalk"));
 init_daemon();
 function resolveSessionId(records, query) {
   const exact = records.find((r) => r.sessionId === query);
@@ -27851,22 +28047,22 @@ function registerSessionTaintCommand(program2) {
     const records = await listSessionTaints();
     console.log("");
     if (records.length === 0) {
-      console.log(import_chalk30.default.dim("  No tainted sessions."));
-      console.log(import_chalk30.default.dim("  (Taint lives in the daemon \u2014 a stopped daemon has none.)") + "\n");
+      console.log(import_chalk31.default.dim("  No tainted sessions."));
+      console.log(import_chalk31.default.dim("  (Taint lives in the daemon \u2014 a stopped daemon has none.)") + "\n");
       return;
     }
     console.log(
-      "  " + import_chalk30.default.bold(String(records.length)) + import_chalk30.default.dim(` tainted session${records.length !== 1 ? "s" : ""}`)
+      "  " + import_chalk31.default.bold(String(records.length)) + import_chalk31.default.dim(` tainted session${records.length !== 1 ? "s" : ""}`)
     );
     console.log("");
     for (const r of records) {
       console.log(
-        "  " + import_chalk30.default.yellow(r.sessionId.slice(0, 8).padEnd(10)) + import_chalk30.default.red(r.source) + sourceGap(r.source) + import_chalk30.default.dim("clears in " + fmtRemaining(r.expiresAt))
+        "  " + import_chalk31.default.yellow(r.sessionId.slice(0, 8).padEnd(10)) + import_chalk31.default.red(r.source) + sourceGap(r.source) + import_chalk31.default.dim("clears in " + fmtRemaining(r.expiresAt))
       );
     }
     console.log("");
     console.log(
-      import_chalk30.default.dim("  Run ") + import_chalk30.default.cyan("node9 session-taint clear <id>") + import_chalk30.default.dim(" to release one, or ") + import_chalk30.default.cyan("--all") + import_chalk30.default.dim(" for every session.") + "\n"
+      import_chalk31.default.dim("  Run ") + import_chalk31.default.cyan("node9 session-taint clear <id>") + import_chalk31.default.dim(" to release one, or ") + import_chalk31.default.cyan("--all") + import_chalk31.default.dim(" for every session.") + "\n"
     );
   });
   cmd.command("clear").description("Clear a session's taint so its next network/write action isn't held for review").argument("[sessionId]", "Session id to clear (the 8-char prefix from `list` is accepted)").option("--all", "Clear every session taint").action(async (sessionId, opts) => {
@@ -27874,32 +28070,32 @@ function registerSessionTaintCommand(program2) {
     if (opts.all) {
       const res2 = await clearSessionTaint({ all: true });
       if (res2.daemonUnavailable) {
-        console.log(import_chalk30.default.dim("  node9 daemon not running \u2014 no active taints to clear.") + "\n");
+        console.log(import_chalk31.default.dim("  node9 daemon not running \u2014 no active taints to clear.") + "\n");
         return;
       }
       console.log(
-        import_chalk30.default.green("  \u2713 ") + `Cleared ${import_chalk30.default.bold(String(res2.cleared))} session taint${res2.cleared !== 1 ? "s" : ""}.
+        import_chalk31.default.green("  \u2713 ") + `Cleared ${import_chalk31.default.bold(String(res2.cleared))} session taint${res2.cleared !== 1 ? "s" : ""}.
 `
       );
       return;
     }
     if (!sessionId) {
-      console.log(import_chalk30.default.red("  Provide a session id or --all."));
-      console.log(import_chalk30.default.dim("  Run `node9 session-taint list` to see tainted sessions.") + "\n");
+      console.log(import_chalk31.default.red("  Provide a session id or --all."));
+      console.log(import_chalk31.default.dim("  Run `node9 session-taint list` to see tainted sessions.") + "\n");
       return;
     }
     const records = await listSessionTaints();
     if (records.length === 0) {
-      console.log(import_chalk30.default.dim("  No tainted sessions \u2014 nothing to clear.") + "\n");
+      console.log(import_chalk31.default.dim("  No tainted sessions \u2014 nothing to clear.") + "\n");
       return;
     }
     const resolved = resolveSessionId(records, sessionId);
     if ("error" in resolved) {
       if (resolved.error === "not-found") {
-        console.log(import_chalk30.default.red(`  No tainted session matches "${sessionId}".`));
+        console.log(import_chalk31.default.red(`  No tainted session matches "${sessionId}".`));
       } else {
-        console.log(import_chalk30.default.red(`  "${sessionId}" is ambiguous \u2014 matches:`));
-        for (const m of resolved.matches) console.log(import_chalk30.default.dim("    " + m));
+        console.log(import_chalk31.default.red(`  "${sessionId}" is ambiguous \u2014 matches:`));
+        for (const m of resolved.matches) console.log(import_chalk31.default.dim("    " + m));
       }
       console.log("");
       return;
@@ -27907,18 +28103,18 @@ function registerSessionTaintCommand(program2) {
     const res = await clearSessionTaint({ sessionId: resolved.record.sessionId });
     if (res.cleared > 0) {
       console.log(
-        import_chalk30.default.green("  \u2713 ") + `Cleared taint for ${import_chalk30.default.yellow(resolved.record.sessionId.slice(0, 8))} ` + import_chalk30.default.dim(`(was flagged by ${resolved.record.source}).`) + "\n"
+        import_chalk31.default.green("  \u2713 ") + `Cleared taint for ${import_chalk31.default.yellow(resolved.record.sessionId.slice(0, 8))} ` + import_chalk31.default.dim(`(was flagged by ${resolved.record.source}).`) + "\n"
       );
     } else {
       console.log(
-        import_chalk30.default.dim(`  Session ${resolved.record.sessionId.slice(0, 8)} was already clear.`) + "\n"
+        import_chalk31.default.dim(`  Session ${resolved.record.sessionId.slice(0, 8)} was already clear.`) + "\n"
       );
     }
   });
 }
 
 // src/cli/commands/skill-pin.ts
-var import_chalk31 = __toESM(require("chalk"));
+var import_chalk32 = __toESM(require("chalk"));
 var import_fs60 = __toESM(require("fs"));
 var import_os51 = __toESM(require("os"));
 var import_path58 = __toESM(require("path"));
@@ -27938,29 +28134,29 @@ function registerSkillPinCommand(program2) {
     const result = readSkillPinsSafe();
     if (!result.ok) {
       if (result.reason === "missing") {
-        console.log(import_chalk31.default.gray("\nNo skill roots are pinned yet."));
+        console.log(import_chalk32.default.gray("\nNo skill roots are pinned yet."));
         console.log(
-          import_chalk31.default.gray("Pins are created automatically on the first tool call of each session.\n")
+          import_chalk32.default.gray("Pins are created automatically on the first tool call of each session.\n")
         );
         return;
       }
-      console.error(import_chalk31.default.red(`
+      console.error(import_chalk32.default.red(`
 \u274C Pin file is corrupt: ${result.detail}`));
-      console.error(import_chalk31.default.yellow("   Run: node9 skill pin reset\n"));
+      console.error(import_chalk32.default.yellow("   Run: node9 skill pin reset\n"));
       process.exit(1);
     }
     const entries = Object.entries(result.pins.roots);
     if (entries.length === 0) {
-      console.log(import_chalk31.default.gray("\nNo skill roots are pinned yet.\n"));
+      console.log(import_chalk32.default.gray("\nNo skill roots are pinned yet.\n"));
       return;
     }
-    console.log(import_chalk31.default.bold("\n\u{1F512} Pinned Skill Roots\n"));
+    console.log(import_chalk32.default.bold("\n\u{1F512} Pinned Skill Roots\n"));
     for (const [key, entry] of entries) {
-      const missing = entry.exists ? "" : import_chalk31.default.yellow(" (not present at pin time)");
-      console.log(`  ${import_chalk31.default.cyan(key)}  ${import_chalk31.default.gray(entry.rootPath)}${missing}`);
+      const missing = entry.exists ? "" : import_chalk32.default.yellow(" (not present at pin time)");
+      console.log(`  ${import_chalk32.default.cyan(key)}  ${import_chalk32.default.gray(entry.rootPath)}${missing}`);
       console.log(`    Files (${entry.fileCount})`);
-      console.log(`    Hash:  ${import_chalk31.default.gray(entry.contentHash.slice(0, 16))}...`);
-      console.log(`    Pinned: ${import_chalk31.default.gray(entry.pinnedAt)}
+      console.log(`    Hash:  ${import_chalk32.default.gray(entry.contentHash.slice(0, 16))}...`);
+      console.log(`    Pinned: ${import_chalk32.default.gray(entry.pinnedAt)}
 `);
     }
   });
@@ -27969,39 +28165,39 @@ function registerSkillPinCommand(program2) {
     try {
       pins = readSkillPins();
     } catch {
-      console.error(import_chalk31.default.red("\n\u274C Pin file is corrupt."));
-      console.error(import_chalk31.default.yellow("   Run: node9 skill pin reset\n"));
+      console.error(import_chalk32.default.red("\n\u274C Pin file is corrupt."));
+      console.error(import_chalk32.default.yellow("   Run: node9 skill pin reset\n"));
       process.exit(1);
     }
     if (!pins.roots[rootKey]) {
-      console.error(import_chalk31.default.red(`
+      console.error(import_chalk32.default.red(`
 \u274C No pin found for root key "${rootKey}"
 `));
-      console.error(`Run ${import_chalk31.default.cyan("node9 skill pin list")} to see pinned roots.
+      console.error(`Run ${import_chalk32.default.cyan("node9 skill pin list")} to see pinned roots.
 `);
       process.exit(1);
     }
     const rootPath = pins.roots[rootKey].rootPath;
     removePin2(rootKey);
     wipeSkillSessions();
-    console.log(import_chalk31.default.green(`
-\u{1F513} Pin removed for ${import_chalk31.default.cyan(rootKey)}`));
-    console.log(import_chalk31.default.gray(`   ${rootPath}`));
-    console.log(import_chalk31.default.gray("   Next session will re-pin with current state.\n"));
+    console.log(import_chalk32.default.green(`
+\u{1F513} Pin removed for ${import_chalk32.default.cyan(rootKey)}`));
+    console.log(import_chalk32.default.gray(`   ${rootPath}`));
+    console.log(import_chalk32.default.gray("   Next session will re-pin with current state.\n"));
   });
   pinSubCmd.command("reset").description("Clear all skill pins and wipe session verification flags").action(() => {
     const result = readSkillPinsSafe();
     if (!result.ok && result.reason === "missing") {
       wipeSkillSessions();
-      console.log(import_chalk31.default.gray("\nNo pins to clear.\n"));
+      console.log(import_chalk32.default.gray("\nNo pins to clear.\n"));
       return;
     }
     const count = result.ok ? Object.keys(result.pins.roots).length : "?";
     clearAllPins2();
     wipeSkillSessions();
-    console.log(import_chalk31.default.green(`
+    console.log(import_chalk32.default.green(`
 \u{1F513} Cleared ${count} skill pin(s).`));
-    console.log(import_chalk31.default.gray("   Next session will re-pin with current state.\n"));
+    console.log(import_chalk32.default.gray("   Next session will re-pin with current state.\n"));
   });
 }
 
@@ -28009,7 +28205,7 @@ function registerSkillPinCommand(program2) {
 var import_fs61 = __toESM(require("fs"));
 var import_os52 = __toESM(require("os"));
 var import_path59 = __toESM(require("path"));
-var import_chalk32 = __toESM(require("chalk"));
+var import_chalk33 = __toESM(require("chalk"));
 var DECISIONS_FILE2 = import_path59.default.join(import_os52.default.homedir(), ".node9", "decisions.json");
 function readDecisions() {
   try {
@@ -28038,55 +28234,55 @@ function registerDecisionsCommand(program2) {
     const decisions = readDecisions();
     const entries = Object.entries(decisions);
     if (entries.length === 0) {
-      console.log(import_chalk32.default.gray("  No persistent decisions stored."));
+      console.log(import_chalk33.default.gray("  No persistent decisions stored."));
       console.log(
-        import_chalk32.default.gray(`  File: ${DECISIONS_FILE2}
-`) + import_chalk32.default.gray('  Decisions are written when you click "Always Allow" or')
+        import_chalk33.default.gray(`  File: ${DECISIONS_FILE2}
+`) + import_chalk33.default.gray('  Decisions are written when you click "Always Allow" or')
       );
-      console.log(import_chalk32.default.gray('  "Always Deny" in node9 tail or the native popup.'));
+      console.log(import_chalk33.default.gray('  "Always Deny" in node9 tail or the native popup.'));
       return;
     }
-    console.log(import_chalk32.default.bold(`
+    console.log(import_chalk33.default.bold(`
 Persistent decisions  (${entries.length})
 `));
     const w = Math.max(...entries.map(([k]) => k.length));
     for (const [tool, verdict] of entries.sort()) {
-      const colored = verdict === "allow" ? import_chalk32.default.green(verdict) : import_chalk32.default.red(verdict);
+      const colored = verdict === "allow" ? import_chalk33.default.green(verdict) : import_chalk33.default.red(verdict);
       console.log(`  ${tool.padEnd(w)}  ${colored}`);
     }
     console.log(
-      import_chalk32.default.gray(`
+      import_chalk33.default.gray(`
   Stored in ${DECISIONS_FILE2}
-`) + import_chalk32.default.gray("  Run `node9 decisions clear <tool>` to remove an entry.")
+`) + import_chalk33.default.gray("  Run `node9 decisions clear <tool>` to remove an entry.")
     );
   });
   cmd.command("clear <toolName>").description("Remove a persistent decision for one tool").action((toolName) => {
     const decisions = readDecisions();
     if (!(toolName in decisions)) {
-      console.log(import_chalk32.default.yellow(`  No persistent decision for "${toolName}". Nothing to clear.`));
+      console.log(import_chalk33.default.yellow(`  No persistent decision for "${toolName}". Nothing to clear.`));
       process.exitCode = 1;
       return;
     }
     delete decisions[toolName];
     writeDecisions(decisions);
-    console.log(import_chalk32.default.green(`  \u2713 Cleared persistent decision for "${toolName}".`));
+    console.log(import_chalk33.default.green(`  \u2713 Cleared persistent decision for "${toolName}".`));
   });
   cmd.command("clear-all").description("Remove every persistent decision (irreversible)").action(() => {
     const decisions = readDecisions();
     const count = Object.keys(decisions).length;
     if (count === 0) {
-      console.log(import_chalk32.default.gray("  Nothing to clear \u2014 no persistent decisions stored."));
+      console.log(import_chalk33.default.gray("  Nothing to clear \u2014 no persistent decisions stored."));
       return;
     }
     writeDecisions({});
     console.log(
-      import_chalk32.default.green(`  \u2713 Cleared ${count} persistent decision${count === 1 ? "" : "s"}.`)
+      import_chalk33.default.green(`  \u2713 Cleared ${count} persistent decision${count === 1 ? "" : "s"}.`)
     );
   });
 }
 
 // src/cli/commands/dlp.ts
-var import_chalk33 = __toESM(require("chalk"));
+var import_chalk34 = __toESM(require("chalk"));
 var import_fs62 = __toESM(require("fs"));
 var import_path60 = __toESM(require("path"));
 var import_os53 = __toESM(require("os"));
@@ -28141,14 +28337,14 @@ function registerDlpCommand(program2) {
   cmd.command("resolve").description("Mark all current DLP findings as resolved").action(() => {
     const findings = loadDlpFindings();
     if (findings.length === 0) {
-      console.log(import_chalk33.default.green("\n  \u2705 No response-DLP findings to resolve.\n"));
+      console.log(import_chalk34.default.green("\n  \u2705 No response-DLP findings to resolve.\n"));
       return;
     }
     const resolved = loadResolved();
     for (const e of findings) resolved.add(entryKey2(e));
     saveResolved(resolved);
     console.log(
-      import_chalk33.default.green(
+      import_chalk34.default.green(
         `
   \u2705 ${findings.length} finding${findings.length !== 1 ? "s" : ""} marked as resolved.
 `
@@ -28162,54 +28358,54 @@ function registerDlpCommand(program2) {
     const resolvedCount = findings.length - open.length;
     console.log("");
     console.log(
-      import_chalk33.default.bold.cyan("\u{1F510}  node9 dlp") + import_chalk33.default.dim("  \u2014 secrets found in Claude response text")
+      import_chalk34.default.bold.cyan("\u{1F510}  node9 dlp") + import_chalk34.default.dim("  \u2014 secrets found in Claude response text")
     );
     console.log("");
     if (open.length === 0) {
       if (resolvedCount > 0) {
-        console.log(import_chalk33.default.green(`  \u2705 No open findings  \xB7  ${resolvedCount} previously resolved`));
+        console.log(import_chalk34.default.green(`  \u2705 No open findings  \xB7  ${resolvedCount} previously resolved`));
       } else {
         console.log(
-          import_chalk33.default.green("  \u2705 No findings \u2014 Claude has not leaked secrets in response text")
+          import_chalk34.default.green("  \u2705 No findings \u2014 Claude has not leaked secrets in response text")
         );
       }
       console.log("");
       return;
     }
     console.log(
-      import_chalk33.default.bgRed.white.bold(` \u26A0\uFE0F  ${open.length} open finding${open.length !== 1 ? "s" : ""} `) + import_chalk33.default.dim(resolvedCount > 0 ? `  (${resolvedCount} resolved)` : "")
+      import_chalk34.default.bgRed.white.bold(` \u26A0\uFE0F  ${open.length} open finding${open.length !== 1 ? "s" : ""} `) + import_chalk34.default.dim(resolvedCount > 0 ? `  (${resolvedCount} resolved)` : "")
     );
     console.log("");
     console.log(
-      import_chalk33.default.dim("  These secrets were included in Claude's response text \u2014 NOT blocked.")
+      import_chalk34.default.dim("  These secrets were included in Claude's response text \u2014 NOT blocked.")
     );
-    console.log(import_chalk33.default.dim("  Rotate each affected key immediately.\n"));
+    console.log(import_chalk34.default.dim("  Rotate each affected key immediately.\n"));
     for (const e of open) {
       console.log(
-        "  " + import_chalk33.default.red("\u25CF") + "  " + import_chalk33.default.white(e.dlpPattern ?? "Secret") + import_chalk33.default.dim("  " + fmtDate3(e.ts))
+        "  " + import_chalk34.default.red("\u25CF") + "  " + import_chalk34.default.white(e.dlpPattern ?? "Secret") + import_chalk34.default.dim("  " + fmtDate3(e.ts))
       );
       if (e.dlpSample) {
-        console.log("     " + import_chalk33.default.dim("Sample: ") + import_chalk33.default.yellow(stripAnsi(e.dlpSample)));
+        console.log("     " + import_chalk34.default.dim("Sample: ") + import_chalk34.default.yellow(stripAnsi(e.dlpSample)));
       }
       if (e.project) {
-        console.log("     " + import_chalk33.default.dim("Project: ") + import_chalk33.default.dim(stripAnsi(e.project)));
+        console.log("     " + import_chalk34.default.dim("Project: ") + import_chalk34.default.dim(stripAnsi(e.project)));
       }
       console.log("");
     }
-    console.log("  " + import_chalk33.default.bold("Next steps:"));
-    console.log("  " + import_chalk33.default.cyan("1.") + " Rotate any exposed keys shown above");
+    console.log("  " + import_chalk34.default.bold("Next steps:"));
+    console.log("  " + import_chalk34.default.cyan("1.") + " Rotate any exposed keys shown above");
     console.log(
-      "  " + import_chalk33.default.cyan("2.") + " Run " + import_chalk33.default.white("node9 dlp resolve") + " to acknowledge"
+      "  " + import_chalk34.default.cyan("2.") + " Run " + import_chalk34.default.white("node9 dlp resolve") + " to acknowledge"
     );
     console.log(
-      "  " + import_chalk33.default.cyan("3.") + " Run " + import_chalk33.default.white("node9 report") + " for full audit history"
+      "  " + import_chalk34.default.cyan("3.") + " Run " + import_chalk34.default.white("node9 report") + " for full audit history"
     );
     console.log("");
   });
 }
 
 // src/cli/commands/mask.ts
-var import_chalk34 = __toESM(require("chalk"));
+var import_chalk35 = __toESM(require("chalk"));
 var import_fs63 = __toESM(require("fs"));
 var import_path61 = __toESM(require("path"));
 var import_os54 = __toESM(require("os"));
@@ -28346,12 +28542,12 @@ function registerMaskCommand(program2) {
       }
     }) : allFiles;
     if (filtered.length === 0) {
-      console.log(import_chalk34.default.yellow("  No session files found."));
+      console.log(import_chalk35.default.yellow("  No session files found."));
       return;
     }
     console.log("");
     if (dryRun) {
-      console.log(import_chalk34.default.dim("  Dry run \u2014 no files will be modified.\n"));
+      console.log(import_chalk35.default.dim("  Dry run \u2014 no files will be modified.\n"));
     }
     let totalFiles = 0;
     let totalLines = 0;
@@ -28367,23 +28563,23 @@ function registerMaskCommand(program2) {
         });
         const verb = dryRun ? "Would redact" : "Redacted";
         console.log(
-          "  " + import_chalk34.default.dim(shortPath.slice(0, 60).padEnd(62)) + import_chalk34.default.red(`${verb}: `) + import_chalk34.default.yellow(patterns.join(", ")) + import_chalk34.default.dim(` (${redactedLines} line${redactedLines !== 1 ? "s" : ""})`)
+          "  " + import_chalk35.default.dim(shortPath.slice(0, 60).padEnd(62)) + import_chalk35.default.red(`${verb}: `) + import_chalk35.default.yellow(patterns.join(", ")) + import_chalk35.default.dim(` (${redactedLines} line${redactedLines !== 1 ? "s" : ""})`)
         );
       }
     }
     console.log("");
     if (totalFiles === 0) {
-      console.log(import_chalk34.default.green("  No secrets found in session history."));
+      console.log(import_chalk35.default.green("  No secrets found in session history."));
     } else {
       const verb = dryRun ? "would be modified" : "modified";
       console.log(
-        import_chalk34.default.bold(`  ${totalFiles} file${totalFiles !== 1 ? "s" : ""} ${verb}`) + import_chalk34.default.dim(`, ${totalLines} line${totalLines !== 1 ? "s" : ""} redacted`)
+        import_chalk35.default.bold(`  ${totalFiles} file${totalFiles !== 1 ? "s" : ""} ${verb}`) + import_chalk35.default.dim(`, ${totalLines} line${totalLines !== 1 ? "s" : ""} redacted`)
       );
-      console.log("  Patterns: " + import_chalk34.default.yellow(totalPatterns.join(", ")));
+      console.log("  Patterns: " + import_chalk35.default.yellow(totalPatterns.join(", ")));
       if (!dryRun) {
         console.log("");
         console.log(
-          import_chalk34.default.dim(
+          import_chalk35.default.dim(
             "  Note: secrets were already sent to the AI provider during the active session.\n        This cleans your local disk only. Rotate any exposed keys."
           )
         );
@@ -28401,77 +28597,34 @@ var { version } = JSON.parse(
 var program = new import_commander.Command();
 program.name("node9").description("The Sudo Command for AI Agents").version(version);
 program.command("login").argument("<apiKey>").option("--local", "Save key for audit/logging only \u2014 local config still controls all decisions").option("--profile <name>", 'Save as a named profile (default: "default")').action((apiKey, options) => {
-  const DEFAULT_API_URL2 = "https://api.node9.ai/api/v1/intercept";
-  const credPath = import_path64.default.join(import_os57.default.homedir(), ".node9", "credentials.json");
-  if (!import_fs66.default.existsSync(import_path64.default.dirname(credPath)))
-    import_fs66.default.mkdirSync(import_path64.default.dirname(credPath), { recursive: true });
-  const profileName = options.profile || "default";
-  let existingCreds = {};
-  try {
-    if (import_fs66.default.existsSync(credPath)) {
-      const raw = JSON.parse(import_fs66.default.readFileSync(credPath, "utf-8"));
-      if (raw.apiKey) {
-        existingCreds = {
-          default: { apiKey: raw.apiKey, apiUrl: raw.apiUrl || DEFAULT_API_URL2 }
-        };
-      } else {
-        existingCreds = raw;
-      }
-    }
-  } catch {
-  }
-  existingCreds[profileName] = { apiKey, apiUrl: DEFAULT_API_URL2 };
-  import_fs66.default.writeFileSync(credPath, JSON.stringify(existingCreds, null, 2), { mode: 384 });
-  let effectiveCloud = null;
-  if (profileName === "default") {
-    const configPath = import_path64.default.join(import_os57.default.homedir(), ".node9", "config.json");
-    let config = {};
-    try {
-      if (import_fs66.default.existsSync(configPath))
-        config = JSON.parse(import_fs66.default.readFileSync(configPath, "utf-8"));
-    } catch {
-    }
-    if (!config.settings || typeof config.settings !== "object") config.settings = {};
-    const s = config.settings;
-    const approvers = s.approvers || {
-      native: true,
-      browser: true,
-      cloud: true,
-      terminal: true
-    };
-    if (options.local) {
-      approvers.cloud = false;
-    }
-    s.approvers = approvers;
-    if (!import_fs66.default.existsSync(import_path64.default.dirname(configPath)))
-      import_fs66.default.mkdirSync(import_path64.default.dirname(configPath), { recursive: true });
-    import_fs66.default.writeFileSync(configPath, JSON.stringify(config, null, 2), { mode: 384 });
-    effectiveCloud = approvers.cloud === true;
-  }
+  const { profileName, effectiveCloud } = writeCredentialsAndConfig(apiKey, {
+    profileName: options.profile,
+    isLocal: options.local
+  });
   if (options.profile && profileName !== "default") {
-    console.log(import_chalk36.default.green(`\u2705 Profile "${profileName}" saved`));
-    console.log(import_chalk36.default.gray(`   Switch to it per-session:  NODE9_PROFILE=${profileName} claude`));
+    console.log(import_chalk37.default.green(`\u2705 Profile "${profileName}" saved`));
+    console.log(import_chalk37.default.gray(`   Switch to it per-session:  NODE9_PROFILE=${profileName} claude`));
   } else if (options.local || effectiveCloud === false) {
-    console.log(import_chalk36.default.green(`\u2705 Key saved \u2014 Privacy mode \u{1F6E1}\uFE0F`));
-    console.log(import_chalk36.default.gray(`   All decisions stay on this machine. Nothing syncs to the cloud.`));
+    console.log(import_chalk37.default.green(`\u2705 Key saved \u2014 Privacy mode \u{1F6E1}\uFE0F`));
+    console.log(import_chalk37.default.gray(`   All decisions stay on this machine. Nothing syncs to the cloud.`));
     if (!options.local) {
       console.log(
-        import_chalk36.default.yellow(`   Your config has cloud approvals OFF (settings.approvers.cloud).`)
+        import_chalk37.default.yellow(`   Your config has cloud approvals OFF (settings.approvers.cloud).`)
       );
       console.log(
-        import_chalk36.default.gray(`   To enable team policy + dashboard sync: set it to true, or re-init.`)
+        import_chalk37.default.gray(`   To enable team policy + dashboard sync: set it to true, or re-init.`)
       );
     }
   } else {
-    console.log(import_chalk36.default.green(`\u2705 Logged in \u2014 agent mode`));
-    console.log(import_chalk36.default.gray(`   Team policy enforced for all calls via Node9 cloud.`));
+    console.log(import_chalk37.default.green(`\u2705 Logged in \u2014 agent mode`));
+    console.log(import_chalk37.default.gray(`   Team policy enforced for all calls via Node9 cloud.`));
   }
 });
 program.command("signup").description("Create your node9 account / open the dashboard in your browser").option("--login", "Open the login page instead of signup").action((options) => {
   const route = options.login ? "auth/login" : "auth/signup";
   const url = `https://node9.ai/${route}?ref=cli_cmd`;
   console.log("");
-  console.log("  " + import_chalk36.default.dim("Opening ") + import_chalk36.default.cyan.underline(url));
+  console.log("  " + import_chalk37.default.dim("Opening ") + import_chalk37.default.cyan.underline(url));
   const opener = process.platform === "darwin" ? "open" : process.platform === "win32" ? "start" : "xdg-open";
   try {
     const child = (0, import_child_process15.spawn)(opener, [url], {
@@ -28504,7 +28657,7 @@ program.command("addto", { hidden: true }).description("Integrate Node9 with an
   if (target === "hermes") return setupHermes();
   if (target === "hud") return setupHud();
   console.error(
-    import_chalk36.default.red(
+    import_chalk37.default.red(
       `Unknown target: "${target}". Supported: claude, antigravity, copilot, gemini, cursor, codex, windsurf, vscode, hermes, hud`
     )
   );
@@ -28518,20 +28671,20 @@ program.command("setup", { hidden: true }).description('Alias for "addto" \u2014
   "The agent to protect: claude | antigravity | copilot | gemini | cursor | codex | windsurf | vscode | hud"
 ).action(async (target) => {
   if (!target) {
-    console.log(import_chalk36.default.cyan("\n\u{1F6E1}\uFE0F  Node9 Setup \u2014 integrate with your AI agent\n"));
-    console.log("  Usage:  " + import_chalk36.default.white("node9 setup <target>") + "\n");
+    console.log(import_chalk37.default.cyan("\n\u{1F6E1}\uFE0F  Node9 Setup \u2014 integrate with your AI agent\n"));
+    console.log("  Usage:  " + import_chalk37.default.white("node9 setup <target>") + "\n");
     console.log("  Targets:");
-    console.log("    " + import_chalk36.default.green("claude") + "    \u2014 Claude Code (hook mode)");
-    console.log("    " + import_chalk36.default.green("gemini") + "    \u2014 Gemini CLI (hook mode)");
-    console.log("    " + import_chalk36.default.green("antigravity") + " \u2014 Antigravity / agy (hook mode)");
-    console.log("    " + import_chalk36.default.green("copilot") + "   \u2014 GitHub Copilot CLI (hook mode)");
-    console.log("    " + import_chalk36.default.green("cursor") + "    \u2014 Cursor (MCP proxy)");
-    console.log("    " + import_chalk36.default.green("codex") + "     \u2014 OpenAI Codex CLI (MCP proxy)");
-    console.log("    " + import_chalk36.default.green("windsurf") + "  \u2014 Windsurf (MCP proxy)");
-    console.log("    " + import_chalk36.default.green("vscode") + "    \u2014 VSCode / Copilot (MCP proxy)");
-    console.log("    " + import_chalk36.default.green("hermes") + "    \u2014 Hermes Agent (hook mode)");
+    console.log("    " + import_chalk37.default.green("claude") + "    \u2014 Claude Code (hook mode)");
+    console.log("    " + import_chalk37.default.green("gemini") + "    \u2014 Gemini CLI (hook mode)");
+    console.log("    " + import_chalk37.default.green("antigravity") + " \u2014 Antigravity / agy (hook mode)");
+    console.log("    " + import_chalk37.default.green("copilot") + "   \u2014 GitHub Copilot CLI (hook mode)");
+    console.log("    " + import_chalk37.default.green("cursor") + "    \u2014 Cursor (MCP proxy)");
+    console.log("    " + import_chalk37.default.green("codex") + "     \u2014 OpenAI Codex CLI (MCP proxy)");
+    console.log("    " + import_chalk37.default.green("windsurf") + "  \u2014 Windsurf (MCP proxy)");
+    console.log("    " + import_chalk37.default.green("vscode") + "    \u2014 VSCode / Copilot (MCP proxy)");
+    console.log("    " + import_chalk37.default.green("hermes") + "    \u2014 Hermes Agent (hook mode)");
     process.stdout.write(
-      "    " + import_chalk36.default.green("hud") + "       \u2014 Claude Code security statusline\n"
+      "    " + import_chalk37.default.green("hud") + "       \u2014 Claude Code security statusline\n"
     );
     console.log("");
     return;
@@ -28548,7 +28701,7 @@ program.command("setup", { hidden: true }).description('Alias for "addto" \u2014
   if (t === "hermes") return setupHermes();
   if (t === "hud") return setupHud();
   console.error(
-    import_chalk36.default.red(
+    import_chalk37.default.red(
       `Unknown target: "${target}". Supported: claude, antigravity, copilot, gemini, cursor, codex, windsurf, vscode, hermes, hud`
     )
   );
@@ -28559,32 +28712,32 @@ program.command("removefrom", { hidden: true }).description("Remove Node9 hooks
   const agent = resolveAgentTeardown(target);
   if (!agent) {
     console.error(
-      import_chalk36.default.red(`Unknown target: "${target}". Supported: ${agentTeardownTargets().join(", ")}`)
+      import_chalk37.default.red(`Unknown target: "${target}". Supported: ${agentTeardownTargets().join(", ")}`)
     );
     process.exit(1);
     return;
   }
-  console.log(import_chalk36.default.cyan(`
+  console.log(import_chalk37.default.cyan(`
 \u{1F6E1}\uFE0F  Node9: removing hooks from ${agent.label}...
 `));
   try {
     agent.fn();
   } catch (err2) {
-    console.error(import_chalk36.default.red(`  \u26A0\uFE0F  Failed: ${err2 instanceof Error ? err2.message : String(err2)}`));
+    console.error(import_chalk37.default.red(`  \u26A0\uFE0F  Failed: ${err2 instanceof Error ? err2.message : String(err2)}`));
     process.exit(1);
   }
-  console.log(import_chalk36.default.gray("\n  Restart the agent for changes to take effect."));
+  console.log(import_chalk37.default.gray("\n  Restart the agent for changes to take effect."));
 });
 program.command("uninstall").description("Remove all Node9 hooks and optionally delete config files").option("--purge", "Also delete ~/.node9/ directory (config, audit log, credentials)").action(async (options) => {
-  console.log(import_chalk36.default.cyan("\n\u{1F6E1}\uFE0F  Node9 Uninstall\n"));
-  console.log(import_chalk36.default.bold("Stopping daemon..."));
+  console.log(import_chalk37.default.cyan("\n\u{1F6E1}\uFE0F  Node9 Uninstall\n"));
+  console.log(import_chalk37.default.bold("Stopping daemon..."));
   try {
     stopDaemon();
-    console.log(import_chalk36.default.green("  \u2705 Daemon stopped"));
+    console.log(import_chalk37.default.green("  \u2705 Daemon stopped"));
   } catch {
-    console.log(import_chalk36.default.blue("  \u2139\uFE0F  Daemon was not running"));
+    console.log(import_chalk37.default.blue("  \u2139\uFE0F  Daemon was not running"));
   }
-  console.log(import_chalk36.default.bold("\nRemoving hooks..."));
+  console.log(import_chalk37.default.bold("\nRemoving hooks..."));
   let teardownFailed = false;
   for (const { label: label2, fn } of AGENT_TEARDOWNS) {
     try {
@@ -28592,7 +28745,7 @@ program.command("uninstall").description("Remove all Node9 hooks and optionally
     } catch (err2) {
       teardownFailed = true;
       console.error(
-        import_chalk36.default.red(
+        import_chalk37.default.red(
           `  \u26A0\uFE0F  Failed to remove ${label2} hooks: ${err2 instanceof Error ? err2.message : String(err2)}`
         )
       );
@@ -28601,12 +28754,12 @@ program.command("uninstall").description("Remove all Node9 hooks and optionally
   try {
     const residual = getAgentWiring().filter((a) => a.wireState === "wired");
     if (residual.length === 0) {
-      console.log(import_chalk36.default.green("  \u2705 Verified \u2014 no node9 hooks or plugin shims remain"));
+      console.log(import_chalk37.default.green("  \u2705 Verified \u2014 no node9 hooks or plugin shims remain"));
     } else {
       teardownFailed = true;
-      console.error(import_chalk36.default.red("  \u26A0\uFE0F  Still wired after teardown:"));
+      console.error(import_chalk37.default.red("  \u26A0\uFE0F  Still wired after teardown:"));
       for (const a of residual) {
-        console.error(import_chalk36.default.red(`     \u2022 ${a.label} \u2014 ${a.settingsPath}`));
+        console.error(import_chalk37.default.red(`     \u2022 ${a.label} \u2014 ${a.settingsPath}`));
       }
     }
   } catch {
@@ -28622,28 +28775,28 @@ program.command("uninstall").description("Remove all Node9 hooks and optionally
         import_fs66.default.rmSync(node9Dir, { recursive: true });
         if (import_fs66.default.existsSync(node9Dir)) {
           console.error(
-            import_chalk36.default.red("\n  \u26A0\uFE0F  ~/.node9/ could not be fully deleted \u2014 remove it manually.")
+            import_chalk37.default.red("\n  \u26A0\uFE0F  ~/.node9/ could not be fully deleted \u2014 remove it manually.")
           );
         } else {
-          console.log(import_chalk36.default.green("\n  \u2705 Deleted ~/.node9/ (config, audit log, credentials)"));
+          console.log(import_chalk37.default.green("\n  \u2705 Deleted ~/.node9/ (config, audit log, credentials)"));
         }
       } else {
-        console.log(import_chalk36.default.yellow("\n  Skipped \u2014 ~/.node9/ was not deleted."));
+        console.log(import_chalk37.default.yellow("\n  Skipped \u2014 ~/.node9/ was not deleted."));
       }
     } else {
-      console.log(import_chalk36.default.blue("\n  \u2139\uFE0F  ~/.node9/ not found \u2014 nothing to delete"));
+      console.log(import_chalk37.default.blue("\n  \u2139\uFE0F  ~/.node9/ not found \u2014 nothing to delete"));
     }
   } else {
     console.log(
-      import_chalk36.default.gray("\n  ~/.node9/ kept \u2014 run with --purge to delete config and audit log")
+      import_chalk37.default.gray("\n  ~/.node9/ kept \u2014 run with --purge to delete config and audit log")
     );
   }
   if (teardownFailed) {
-    console.error(import_chalk36.default.red("\n  \u26A0\uFE0F  Some hooks could not be removed \u2014 see errors above."));
+    console.error(import_chalk37.default.red("\n  \u26A0\uFE0F  Some hooks could not be removed \u2014 see errors above."));
     process.exit(1);
   }
-  console.log(import_chalk36.default.green.bold("\n\u{1F6E1}\uFE0F  Node9 removed. Run: npm uninstall -g node9-ai"));
-  console.log(import_chalk36.default.gray("   Restart any open AI agent sessions for changes to take effect.\n"));
+  console.log(import_chalk37.default.green.bold("\n\u{1F6E1}\uFE0F  Node9 removed. Run: npm uninstall -g node9-ai"));
+  console.log(import_chalk37.default.gray("   Restart any open AI agent sessions for changes to take effect.\n"));
 });
 registerDoctorCommand(program, version);
 program.command("explain").description(
@@ -28656,7 +28809,7 @@ program.command("explain").description(
       try {
         args = JSON.parse(trimmed);
       } catch {
-        console.error(import_chalk36.default.red(`
+        console.error(import_chalk37.default.red(`
 \u274C Invalid JSON: ${trimmed}
 `));
         process.exit(1);
@@ -28667,67 +28820,68 @@ program.command("explain").description(
   }
   const result = await explainPolicy(tool, args);
   console.log("");
-  console.log(import_chalk36.default.cyan.bold("\u{1F6E1}\uFE0F  Node9 Explain"));
+  console.log(import_chalk37.default.cyan.bold("\u{1F6E1}\uFE0F  Node9 Explain"));
   console.log("");
-  console.log(`   ${import_chalk36.default.bold("Tool:")}    ${import_chalk36.default.white(result.tool)}`);
+  console.log(`   ${import_chalk37.default.bold("Tool:")}    ${import_chalk37.default.white(result.tool)}`);
   if (argsRaw) {
     const preview2 = argsRaw.length > 80 ? argsRaw.slice(0, 77) + "\u2026" : argsRaw;
-    console.log(`   ${import_chalk36.default.bold("Input:")}   ${import_chalk36.default.gray(preview2)}`);
+    console.log(`   ${import_chalk37.default.bold("Input:")}   ${import_chalk37.default.gray(preview2)}`);
   }
   console.log("");
-  console.log(import_chalk36.default.bold("Config Sources (Waterfall):"));
+  console.log(import_chalk37.default.bold("Config Sources (Waterfall):"));
   for (const tier of result.waterfall) {
-    const num3 = import_chalk36.default.gray(`  ${tier.tier}.`);
+    const num3 = import_chalk37.default.gray(`  ${tier.tier}.`);
     const label2 = tier.label.padEnd(16);
     let statusStr;
     if (tier.tier === 1) {
-      statusStr = import_chalk36.default.gray(tier.note ?? "");
+      statusStr = import_chalk37.default.gray(tier.note ?? "");
     } else if (tier.status === "active") {
-      const loc = tier.path ? import_chalk36.default.gray(tier.path) : "";
-      const note = tier.note ? import_chalk36.default.gray(`(${tier.note})`) : "";
-      statusStr = import_chalk36.default.green("\u2713 active") + (loc ? "  " + loc : "") + (note ? "  " + note : "");
+      const loc = tier.path ? import_chalk37.default.gray(tier.path) : "";
+      const note = tier.note ? import_chalk37.default.gray(`(${tier.note})`) : "";
+      statusStr = import_chalk37.default.green("\u2713 active") + (loc ? "  " + loc : "") + (note ? "  " + note : "");
     } else {
-      statusStr = import_chalk36.default.gray("\u25CB " + (tier.note ?? "not found"));
+      statusStr = import_chalk37.default.gray("\u25CB " + (tier.note ?? "not found"));
     }
-    console.log(`${num3} ${import_chalk36.default.white(label2)} ${statusStr}`);
+    console.log(`${num3} ${import_chalk37.default.white(label2)} ${statusStr}`);
   }
   console.log("");
-  console.log(import_chalk36.default.bold("Policy Evaluation:"));
+  console.log(import_chalk37.default.bold("Policy Evaluation:"));
   for (const step of result.steps) {
     const isFinal = step.isFinal;
     let icon;
-    if (step.outcome === "allow") icon = import_chalk36.default.green("  \u2705");
-    else if (step.outcome === "block") icon = import_chalk36.default.red("  \u{1F6D1}");
-    else if (step.outcome === "review") icon = import_chalk36.default.red("  \u{1F534}");
-    else if (step.outcome === "skip") icon = import_chalk36.default.gray("  \u2500 ");
-    else icon = import_chalk36.default.gray("  \u25CB ");
+    if (step.outcome === "allow") icon = import_chalk37.default.green("  \u2705");
+    else if (step.outcome === "block") icon = import_chalk37.default.red("  \u{1F6D1}");
+    else if (step.outcome === "review") icon = import_chalk37.default.red("  \u{1F534}");
+    else if (step.outcome === "skip") icon = import_chalk37.default.gray("  \u2500 ");
+    else icon = import_chalk37.default.gray("  \u25CB ");
     const name = step.name.padEnd(18);
-    const nameStr = isFinal ? import_chalk36.default.white.bold(name) : import_chalk36.default.white(name);
-    const detail = isFinal ? import_chalk36.default.white(step.detail) : import_chalk36.default.gray(step.detail);
-    const arrow = isFinal ? import_chalk36.default.yellow("  \u2190 STOP") : "";
+    const nameStr = isFinal ? import_chalk37.default.white.bold(name) : import_chalk37.default.white(name);
+    const detail = isFinal ? import_chalk37.default.white(step.detail) : import_chalk37.default.gray(step.detail);
+    const arrow = isFinal ? import_chalk37.default.yellow("  \u2190 STOP") : "";
     console.log(`${icon} ${nameStr} ${detail}${arrow}`);
   }
   console.log("");
   if (result.decision === "allow") {
-    console.log(import_chalk36.default.green.bold("  Decision: \u2705 ALLOW") + import_chalk36.default.gray("  \u2014 no approval needed"));
+    console.log(import_chalk37.default.green.bold("  Decision: \u2705 ALLOW") + import_chalk37.default.gray("  \u2014 no approval needed"));
   } else if (result.decision === "block") {
     console.log(
-      import_chalk36.default.red.bold("  Decision: \u{1F6D1} BLOCK") + import_chalk36.default.gray("  \u2014 this action is blocked")
+      import_chalk37.default.red.bold("  Decision: \u{1F6D1} BLOCK") + import_chalk37.default.gray("  \u2014 this action is blocked")
     );
     if (result.blockedByLabel) {
-      console.log(import_chalk36.default.gray(`  Reason:   ${result.blockedByLabel}`));
+      console.log(import_chalk37.default.gray(`  Reason:   ${result.blockedByLabel}`));
     }
   } else {
     console.log(
-      import_chalk36.default.red.bold("  Decision: \u{1F534} REVIEW") + import_chalk36.default.gray("  \u2014 human approval required")
+      import_chalk37.default.red.bold("  Decision: \u{1F534} REVIEW") + import_chalk37.default.gray("  \u2014 human approval required")
     );
     if (result.blockedByLabel) {
-      console.log(import_chalk36.default.gray(`  Reason:   ${result.blockedByLabel}`));
+      console.log(import_chalk37.default.gray(`  Reason:   ${result.blockedByLabel}`));
     }
   }
   console.log("");
 });
 registerInitCommand(program);
+registerConnectCommand(program);
 registerAuditCommand(program);
 registerReportCommand(program);
 registerStatusCommand(program);
@@ -28737,7 +28891,7 @@ program.command("tail").description("Stream live agent activity to the terminal"
   try {
     await startTail2(options);
   } catch (err2) {
-    console.error(import_chalk36.default.red(`\u274C ${err2 instanceof Error ? err2.message : String(err2)}`));
+    console.error(import_chalk37.default.red(`\u274C ${err2 instanceof Error ? err2.message : String(err2)}`));
     process.exit(1);
   }
 });
@@ -28748,7 +28902,7 @@ program.command("monitor").description("Live interactive dashboard \u2014 activi
     const mod = await dynamicImport(`file://${dashboardPath}`);
     await mod.startMonitor();
   } catch (err2) {
-    console.error(import_chalk36.default.red(`\u274C ${err2 instanceof Error ? err2.message : String(err2)}`));
+    console.error(import_chalk37.default.red(`\u274C ${err2 instanceof Error ? err2.message : String(err2)}`));
     process.exit(1);
   }
 });
@@ -28803,7 +28957,7 @@ program.command("pause").description("Temporarily disable Node9 protection for a
   const ms = parseDuration(options.duration);
   if (ms === null) {
     console.error(
-      import_chalk36.default.red(`
+      import_chalk37.default.red(`
 \u274C  Invalid duration: "${options.duration}". Use format like 15m, 1h, 30s.
 `)
     );
@@ -28811,20 +28965,20 @@ program.command("pause").description("Temporarily disable Node9 protection for a
   }
   pauseNode9(ms, options.duration);
   const expiresAt = new Date(Date.now() + ms).toLocaleTimeString();
-  console.log(import_chalk36.default.yellow(`
+  console.log(import_chalk37.default.yellow(`
 \u23F8  Node9 paused until ${expiresAt}`));
-  console.log(import_chalk36.default.gray(`   All tool calls will be allowed without review.`));
-  console.log(import_chalk36.default.gray(`   Run "node9 resume" to re-enable early.
+  console.log(import_chalk37.default.gray(`   All tool calls will be allowed without review.`));
+  console.log(import_chalk37.default.gray(`   Run "node9 resume" to re-enable early.
 `));
 });
 program.command("resume").description("Re-enable Node9 protection immediately").action(() => {
   const { paused } = checkPause();
   if (!paused) {
-    console.log(import_chalk36.default.gray("\nNode9 is already active \u2014 nothing to resume.\n"));
+    console.log(import_chalk37.default.gray("\nNode9 is already active \u2014 nothing to resume.\n"));
     return;
   }
   resumeNode9();
-  console.log(import_chalk36.default.green("\n\u25B6  Node9 resumed \u2014 protection is active.\n"));
+  console.log(import_chalk37.default.green("\n\u25B6  Node9 resumed \u2014 protection is active.\n"));
 });
 var HOOK_BASED_AGENTS = {
   claude: "claude",
@@ -28840,15 +28994,15 @@ program.argument("[command...]", "The agent command to run (e.g., gemini)").acti
     if (HOOK_BASED_AGENTS[firstArg2] !== void 0) {
       const target = HOOK_BASED_AGENTS[firstArg2];
       console.error(
-        import_chalk36.default.yellow(`
+        import_chalk37.default.yellow(`
 \u26A0\uFE0F  Node9 proxy mode does not support "${target}" directly.`)
       );
-      console.error(import_chalk36.default.white(`
+      console.error(import_chalk37.default.white(`
    "${target}" uses its own hook system. Use:`));
       console.error(
-        import_chalk36.default.green(`     node9 addto ${target}   `) + import_chalk36.default.gray("# one-time setup")
+        import_chalk37.default.green(`     node9 addto ${target}   `) + import_chalk37.default.gray("# one-time setup")
       );
-      console.error(import_chalk36.default.green(`     ${target}              `) + import_chalk36.default.gray("# run normally"));
+      console.error(import_chalk37.default.green(`     ${target}              `) + import_chalk37.default.gray("# run normally"));
       process.exit(1);
     }
     const runArgs = firstArg2 === "shell" ? commandArgs.slice(1) : commandArgs;
@@ -28865,7 +29019,7 @@ program.argument("[command...]", "The agent command to run (e.g., gemini)").acti
       }
     );
     if (result.noApprovalMechanism && !isDaemonRunning() && !process.env.NODE9_NO_AUTO_DAEMON && getConfig().settings.autoStartDaemon) {
-      console.error(import_chalk36.default.cyan("\n\u{1F6E1}\uFE0F  Node9: Starting approval daemon automatically..."));
+      console.error(import_chalk37.default.cyan("\n\u{1F6E1}\uFE0F  Node9: Starting approval daemon automatically..."));
       const daemonReady = await autoStartDaemonAndWait();
       if (daemonReady) result = await authorizeHeadless("shell", { command: fullCommand });
     }
@@ -28878,12 +29032,12 @@ program.argument("[command...]", "The agent command to run (e.g., gemini)").acti
     }
     if (!result.approved) {
       console.error(
-        import_chalk36.default.red(`
+        import_chalk37.default.red(`
 \u274C Node9 Blocked: ${result.reason || "Dangerous command detected."}`)
       );
       process.exit(1);
     }
-    console.error(import_chalk36.default.green("\n\u2705 Approved \u2014 running command...\n"));
+    console.error(import_chalk37.default.green("\n\u2705 Approved \u2014 running command...\n"));
     await runProxy(fullCommand);
   } else {
     program.help();