@node9/proxy 2.41.0 → 2.41.2

package/dist/dashboard.mjs

@@ -869,12 +869,12 @@ function judgeInlineCode(language, code, isProtected) {
       category
     };
   }
-  const path41 = protectedLiteral(text, isProtected);
-  if (path41) {
+  const path42 = protectedLiteral(text, isProtected);
+  if (path42) {
     return {
       outcome: "dangerous",
       what: WHAT["reads-protected"],
-      evidence: path41.slice(0, 60),
+      evidence: path42.slice(0, 60),
       category: "reads-protected"
     };
   }
@@ -1072,6 +1072,66 @@ function foldCommandWords(reading) {
 function commandReadingsImpl(command) {
   return cachedNormalize(command, () => normalizeCommandForPolicyImpl(command));
 }
+function readsStdinAsCode(interp, rest) {
+  const ok = (w) => {
+    if (w === null) return false;
+    if (w === "-") return true;
+    if (/^python/.test(interp))
+      return ["-u", "-B", "-E", "-I", "-s", "-q", "-O", "-OO"].includes(w) || /^-[WX]\S/.test(w);
+    if (interp === "perl" || interp === "ruby") return w === "-w" || w === "-W";
+    return false;
+  };
+  return rest.every(ok);
+}
+function interpreterHeredocSpans(f, at) {
+  const stmts = f?.Stmts || [];
+  const candidates = [];
+  let unsafe = false;
+  syntax.Walk(f, (node) => {
+    if (!node || unsafe) return false;
+    const n = node;
+    const t = syntax.NodeType(n);
+    if (t === "FuncDecl") {
+      unsafe = true;
+      return false;
+    }
+    if (t !== "CallExpr") return true;
+    const words = (n.Args || []).map((a) => resolveWordLiteral(a));
+    const head = unwrapCommandHead(words);
+    const raw = words[head];
+    if (raw === null || raw === void 0) {
+      unsafe = true;
+      return false;
+    }
+    const name = raw.split("/").pop()?.toLowerCase() ?? "";
+    if (raw.includes("/") && !STDIN_CODE_INTERPRETERS.test(name)) unsafe = true;
+    if (RUNS_TEXT_ELSEWHERE.has(name)) unsafe = true;
+    return !unsafe;
+  });
+  if (unsafe) return [];
+  for (const st of stmts) {
+    if (!st?.Cmd || syntax.NodeType(st.Cmd) !== "CallExpr") continue;
+    const words = (st.Cmd.Args || []).map((a) => resolveWordLiteral(a));
+    const name = (words[0] ?? "").toLowerCase();
+    if (!STDIN_CODE_INTERPRETERS.test(name)) continue;
+    if (!readsStdinAsCode(name, words.slice(1))) continue;
+    candidates.push(st);
+  }
+  const spans = [];
+  for (const st of candidates) {
+    const heredocs = (st.Redirs || []).filter((r2) => r2?.Hdoc);
+    const stdin = heredocs.filter((r2) => r2.N == null || r2.N.Value === "0");
+    const others = heredocs.length - stdin.length;
+    if (stdin.length !== 1 || others > 0) continue;
+    const r = stdin[0];
+    if (heredocText(r.Hdoc) === null) continue;
+    const hs = at(r.Hdoc.Pos().Offset());
+    const he = at(r.Hdoc.End().Offset());
+    if (hs < 0 || he < 0 || he <= hs) continue;
+    spans.push([hs, he]);
+  }
+  return spans;
+}
 function normalizeCommandForPolicyImpl(command) {
   const f = parseShared(command);
   if (f === PARSE_FAIL) return { posix: command, separator: command, folded: command };
@@ -1082,6 +1142,10 @@ function normalizeCommandForPolicyImpl(command) {
     const rewrites = [];
     const quoteOnlyRewrites = [];
     const msgSpans = /* @__PURE__ */ new Set();
+    for (const [hs, he] of interpreterHeredocSpans(f, at)) {
+      strips.push([hs, he]);
+      msgSpans.add(`${hs}:${he}`);
+    }
     syntax.Walk(f, (node) => {
       if (!node) return false;
       const n = node;
@@ -1135,7 +1199,12 @@ function normalizeCommandForPolicyImpl(command) {
     });
     const stripEdits = strips.map(([s, e]) => [s, e, '""']);
     const apply = (extra) => {
-      const edits = [...stripEdits, ...extra];
+      const all = [...stripEdits, ...extra];
+      const edits = all.filter(
+        (e, i) => !all.some(
+          (o, k) => k !== i && o[0] <= e[0] && e[1] <= o[1] && (o[0] < e[0] || e[1] < o[1] || k < i)
+        )
+      );
       if (edits.length === 0) return command;
       edits.sort((a, b) => b[0] - a[0]);
       let out = command;
@@ -2950,9 +3019,9 @@ function ruleServerMatches(rule, serverLabel) {
   if (rule.notServer && label2 && matchesPattern(label2, rule.notServer)) return false;
   return true;
 }
-function getNestedValue(obj, path41) {
+function getNestedValue(obj, path42) {
   if (!obj || typeof obj !== "object") return null;
-  const segments2 = path41.split(".");
+  const segments2 = path42.split(".");
   for (const seg of segments2) {
     if (FORBIDDEN_PATH_SEGMENTS.has(seg)) return null;
   }
@@ -3909,8 +3978,8 @@ function collectFileAccesses(tool, args, context = {}, inspection = {}) {
   }
   return out;
 }
-function within(path41, root) {
-  return path41 === root || path41.startsWith(root === "/" ? "/" : root + "/");
+function within(path42, root) {
+  return path42 === root || path42.startsWith(root === "/" ? "/" : root + "/");
 }
 function hits(access, paths, directories, context) {
   const home = context.homeDirs?.[0] ?? "~";
@@ -5882,9 +5951,9 @@ function bareToolName(toolName) {
   const parts = toolName.split("__");
   return (parts.length >= 3 ? parts.slice(2).join("__") : toolName).toLowerCase();
 }
-function valuesAt(args, path41) {
+function valuesAt(args, path42) {
   let cursors = [args];
-  for (const rawSegment of path41.split(".")) {
+  for (const rawSegment of path42.split(".")) {
     const isArray = rawSegment.endsWith("[]");
     const key = isArray ? rawSegment.slice(0, -2) : rawSegment;
     const next = [];
@@ -5915,8 +5984,8 @@ function extractToolDestinations(toolName, args) {
   try {
     const out = [];
     const paths = DESTINATION_ARGS.get(bareToolName(toolName)) ?? [];
-    for (const path41 of paths) {
-      for (const value of valuesAt(args, path41)) {
+    for (const path42 of paths) {
+      for (const value of valuesAt(args, path42)) {
         const host2 = hostOf(value);
         if (host2) out.push({ host: host2, binary: toolName, raw: value });
       }
@@ -5942,8 +6011,8 @@ function ssrfDestinationFloor(toolName, args, opts = {}) {
   try {
     const paths = DESTINATION_ARGS.get(bareToolName(toolName));
     if (!paths) return null;
-    for (const path41 of paths) {
-      for (const value of valuesAt(args, path41)) {
+    for (const path42 of paths) {
+      for (const value of valuesAt(args, path42)) {
         const host2 = hostOf(value);
         if (!host2) continue;
         const m = classifySsrf(host2);
@@ -5952,7 +6021,7 @@ function ssrfDestinationFloor(toolName, args, opts = {}) {
         const decision = ssrfFloorDecision(m, written, opts);
         if (decision === null) continue;
         const reason = decision === "review" ? ssrfDisguisedReason(m, written) : ssrfReason(m, host2);
-        return { ...m, argPath: path41, host: host2, reason, decision };
+        return { ...m, argPath: path42, host: host2, reason, decision };
       }
     }
     return null;
@@ -7520,7 +7589,7 @@ function matchCanaryArgs(args, values) {
     return null;
   }
 }
-var MAX_REGEX_LENGTH, REGEX_CACHE_MAX, regexCache, aws_default, bash_safe_default, docker_default, filesystem_default, github_default, k8s_default, mongodb_default, postgres_default, project_jail_default, redis_default, finance_default, identity_default, publishing_default, ACTION_TEMPLATES, ACTION_CHECKS, GAP, prog, httpTo, httpWrite, HTTP_WRITE, HTTP_WRITE_ANY, NOT_STRIPE_TEST, postTo, STRIPE_OBJECTS, APP_SHIELD_SPECS, APP_SHIELDS, APP_SHIELD_NAMES, APP_SERVER_GLOB, GENERAL_ACTION_RULES, BUILTIN_SHIELDS, SSRF_MAX_HOST, METADATA_ADDRESSES, STRICT_TIERS, METADATA_HOSTNAMES, v4Octets, TIER_REASON, CHECK_TEXT, LEVELS, MODE_VALUES, SOFT, STRICT, BLOCK_ALL, LEVEL_CHECKS, VERDICTS, CHECK_VERDICT_RANK, ALL, BUILTIN_DANGEROUS_WORDS, PRODUCT_CHECKS, SHIELD_RULE_NAME, SHIELD_RULES_FOLDED_INTO_PRODUCT, CHECKS, CHECK_BY_ID, LEGACY_TO_ID, PROJECT_JAIL_BLOCK_READ, OVERRIDE_PREFIX, LABEL_WRAPPERS, LEGACY_READERS, INVISIBLE_RE, INVISIBLE_ONE, HOMOGLYPHS, HOMOGLYPH_RE, MAX_BLOBS, MIN_DECODED, BASE64_RUN_RE, HEX_RUN_RE, HEX_ESCAPE_RUN_RE, SYSTEM_AUTH_FILES, SYSTEM_AUTH_DIRS, PASSWORD_HASH_FILES, STARTUP_NAMES, SYSTEM_DIRS, SYSTEM_DIRS_EXEMPT, UPLOAD_SYSTEM_DIRS, AGENT_INSTRUCTION_FILES, AGENT_INSTRUCTION_DIRS, LEGACY_SYSTEM_PATH_RE, MAX_INLINE_CODE, WHAT, OUTSIDE, pyImport, either, PYTHON, NODE, PERL, RUBY, PHP, TABLES, STRING_LITERAL, syntax, sharedParser, MESSAGE_FLAGS, SHELL_INTERPRETERS, DOWNLOAD_CMDS, NORMALIZE_CACHE_MAX, normalizeCache, AST_CACHE_MAX, astCache, PARSE_FAIL, INTERPRETER_LINE, PROGRAM_DIR, ACCESS_VIEW_CACHE_MAX, accessViewCache, MAX_READING_PAYLOADS, defaultExpansionOps, VARIABLE_READERS, FS_READ_TOOLS, GREP_SHAPE, PATTERN_VERBS, PATTERN_VERB_NAMES, GREP_FILE_OPERANDS, READER_VALUE_LETTERS, FILE_OPERAND_FLAGS, SCP_VALUE_FLAGS, CURL_SOURCE_FLAGS, CURL_VALUE_LETTERS, WGET_VALUE_LETTERS, TAR_VALUE_LETTERS, ZIP_VALUE_LETTERS, RSYNC_VALUE_LETTERS, RSYNC_SKIP, CP_VALUE_LETTERS, INSTALL_VALUE_LETTERS, COPY_VERBS, TAR_MODE_WORD, COPY_VERB_HEADS, FS_OP_PRESCREEN_RE, HOME_CACHE_ALLOWLIST, SENSITIVE_PATH_RULES, AST_FS_REGEX_RULES, SQL_DB_CLIS, SQL_DDL_RE, CHMOD_OPEN_PERM_TOKENS, COMMAND_WRAPPERS, INLINE_INTERPRETER, RUNNER_WRAPPERS, _redirStdinOps, _listOps, WRAPPER_TAKES_TARGET, FIND_EXEC_FLAGS, FS_MUTATION_TOOLS, INTERP_LEADING_TARGET, MAX_PAYLOAD_NESTING, payloadNesting, MAX_INLINE_CALLS, INLINE_EXEC_FALLBACK, UNREADABLE_SOURCE, SCRIPT_RUNNERS, SCRIPT_RUNNER_VALUE_FLAGS, MAX_SCRIPT_OPERANDS, NET_BINARIES, VALUE_FLAGS, HOME_VARIABLES, assignmentTable, currentStmtOffset, PAYLOAD_BUDGET, payloadBudget, seenPayloads, UNANALYSABLE_NESTING, ASSIGNMENT_HEADS, AND_OP, OR_OP, AND_OR_OPS, MAX_CALL_DEPTH, MAX_CALL_WALKS, callDepth, callWalks, FS_OP_CACHE_MAX, fsOpCache, stripDotSlash, REDIR_TRUNCATE_OPS, REDIR_FILE_IN_OPS, REDIR_HEREDOC_OPS, FIND_OPTIONS, COPY_RULE_OF, isReaderWord, positionalAfter, NONE, UNKNOWN, FORBIDDEN_PATH_SEGMENTS, BASH_TOOL_NAMES, MCP_EXECUTORS, BUILTIN_FIELDS, ARGV_FIELDS, BARE_WORD, MAX_ARGV_CHARACTERS, syntax2, MAX_ALTERNATIVES, MAX_CALL_DEPTH2, MAX_CALL_WALKS2, POSITIONAL, MAX_DEPTH, MAX_PAYLOAD_DEPTH, unique, clone, SENDING_STDIN, DOWNLOAD_SHORT_VALUE, DOWNLOAD_LONG_VALUE, DOWNLOAD_OUTPUT_FLAGS, DOWNLOAD_DIR_FLAGS, base, quoteGlob, asWord, WRITES, READS, DUP_OUT, HERE_STRING, AND, OR, DEFAULT_OPS, exempt, RANK, BIP39_ENGLISH, BIP39_PUBLIC_VECTORS, indices, lengths, hash, MAX_MNEMONIC_HASHES, SECRET_VIEW_LIMITS, IBAN_LENGTH, IBAN_BBAN_SHAPE, B58, B58_INDEX, XPRV_VERSIONS, B62, CRC32_TABLE, GITHUB_TOKEN_RE, B64URL, B64URL_INDEX, CASK_TWO_ZERO_SUFFIX, CASK_FOUR_ZERO_SUFFIX, CF_ODD, CF_EVEN, SPANISH_LETTERS, HETU_CHARS, MAX, UNTRUSTED_TOOLS, SIGNALS, MENTION_QUOTE_RE, MENTION_WORD_RE, ASSIGNMENT_CONTEXT_RE, DLP_STOPWORDS, REFERENCE_VALUE_RE, IDENTIFIER_VALUE_RE, PATH_VALUE_RE, DOTTED_REFERENCE_RE, CONCATENATION_RE, EMAIL_VALUE_RE, FIXTURE_NAME_RE, DERIVATIVE_NAME_RE, QUERY_CREDENTIAL_VALUE_RE, OTP_SECRET_RE, OTP_DOC_SECRETS, ASSIGNED_SECRET_VALUE_RE, ASSIGNED_SECRET_NAME_RE, NAME_KEYWORD_RE, ARN_CONTEXT_RE, CIPHER_KEY_NAME_RE, CIPHER_NAME_PARTS, CIPHER_KEY_VALUE_RE, LARAVEL_KEY_VALUE_RE, SQL_PASSWORD_VALUE_RE, GRAFANA_KEY_VALUE_RE, BASIC_VALUE_RE, BASIC_PAIR_RE, OTP_CAPTURE_RE, DB_URL_PASSWORD_RE, DLP_PATTERNS, DLP_PATTERNS_GLOBAL, SENSITIVE_PATH_PATTERNS, SENSITIVE_PATH_REGEXES, MAX_DEPTH2, MAX_STRING_BYTES, MAX_JSON_PARSE_BYTES, BATCH_SEPARATOR, syntax3, NPM_INSTALL_VERBS, NPM_EXEC_VERBS, PNPM_INSTALL_VERBS, YARN_INSTALL_VERBS, BUN_INSTALL_VERBS, DLX_VERBS, NON_REGISTRY_RE, NPM_NAME_RE, EXACT_SEMVER_RE, NPM_VALUE_FLAGS, PNPM_VALUE_FLAGS, YARN_VALUE_FLAGS, BUN_VALUE_FLAGS, PIP_VALUE_FLAGS, UV_VALUE_FLAGS, POETRY_VALUE_FLAGS, PIPENV_VALUE_FLAGS, PIPX_VALUE_FLAGS, PY_SPEC_RE, PY_EXACT_RE, EXACT_VERSION_RE, GEM_NAME_RE, GEM_VALUE_FLAGS, BUNDLE_VALUE_FLAGS, CRATE_NAME_RE, CARGO_ADD_VALUE_FLAGS, CARGO_INSTALL_VALUE_FLAGS, GO_VALUE_FLAGS, GO_PATH_RE, NUGET_NAME_RE, DOTNET_ADD_VALUE_FLAGS, DOTNET_TOOL_VALUE_FLAGS, NUGET_VALUE_FLAGS, MAVEN_COORD_RE, COMPOSER_NAME_RE, COMPOSER_VALUE_FLAGS, EDITOR_HEADS, EXTENSION_ID_RE, MANAGER_HEADS, SHELLS, MAX_NESTING, SHELL_VALUE_FLAGS, TUNING_FIELDS, MAP_GOVERNED, KNOB_GOVERNED, CONFIGURABLE_CHECK_IDS, DEFAULT_EGRESS_ALLOWLIST, PRIVATE_HOST_SUFFIXES, SOURCE_COMMANDS, SINK_COMMANDS, OBFUSCATORS, SENSITIVE_PATTERNS, FLAGS_WITH_VALUES, DESTINATION_ARGS, MCP_DESTINATION_KEYS, ARGUMENT_SCAN_LIMITS, RUN_CHAR, runChar, VERDICT_RANK, SQL_DML_KEYWORDS, MAX_DESTINATIONS, MAX_SCAN_CHARS, EMAIL_RE, URL_RE, IBAN_RE, RECIPIENT_KEYS, DESTRUCTIVE_VERB_RE, PII_EMAIL_RE, PII_SSN_RE, PII_PHONE_RE, PII_CC16_RE, PII_CC15_RE, PII_CC14_RE, PII_CC13_RE, PII_CC19_RE, CARD_PATTERNS, PII_ROUTING_RE, ROUTING_LABEL_RE, ROUTING_LABEL_WINDOW, NATIONAL_ID_SHAPES, NATIONAL_ID_LABEL_RE, NATIONAL_ID_LABEL_WINDOW, NATIONAL_ID_GUARD_RE, PII_IBAN_RE, REALTIME_PII_PATTERNS, MAX_PII_SCAN_BYTES, IBAN_DESTINATION_KEYS, WHOLE_IBAN_RE, JSON_ESCAPE_RE, JSON_ESCAPES, MASKED_KINDS, ENTRY_RE, IBAN_TEXT_RE, EMAIL_TEXT_RE, ACCOUNT_KEY_RE, ACCOUNT_VALUE_RE, MAX_MASK_DEPTH, syntax4, EMPTY, CURL_SEND_FLAGS, WGET_SEND_FLAGS, IWR_SEND_FLAGS, WRITE_METHODS, GH_READ, GH_WRITE, GH_HOSTNAME_FLAGS, GH_REPO_VALUE_FLAGS, GH_API_VALUE_FLAGS, GIT_FETCH, PUBLISH, SHELLS2, OWN_HEADS, MAX_DEPTH3, CWD_CHANGERS, TERMINAL_ESCAPE_RE, LOOP_MAX_RECORDS, CANARY_MIN_LENGTH, MAX_TEXT, MAX_DEPTH4, MAX_JSON_PARSE, URL_DEPTH, B64_DEPTH, MIN_SEGMENT, SEPARATORS, stripSeparators, looksText, CANARY_DECODERS, VIEWS, LONG_OUTPUT_THRESHOLD_BYTES, CANONICAL_EXTRACTOR_VERSION;
+var MAX_REGEX_LENGTH, REGEX_CACHE_MAX, regexCache, aws_default, bash_safe_default, docker_default, filesystem_default, github_default, k8s_default, mongodb_default, postgres_default, project_jail_default, redis_default, finance_default, identity_default, publishing_default, ACTION_TEMPLATES, ACTION_CHECKS, GAP, prog, httpTo, httpWrite, HTTP_WRITE, HTTP_WRITE_ANY, NOT_STRIPE_TEST, postTo, STRIPE_OBJECTS, APP_SHIELD_SPECS, APP_SHIELDS, APP_SHIELD_NAMES, APP_SERVER_GLOB, GENERAL_ACTION_RULES, BUILTIN_SHIELDS, SSRF_MAX_HOST, METADATA_ADDRESSES, STRICT_TIERS, METADATA_HOSTNAMES, v4Octets, TIER_REASON, CHECK_TEXT, LEVELS, MODE_VALUES, SOFT, STRICT, BLOCK_ALL, LEVEL_CHECKS, VERDICTS, CHECK_VERDICT_RANK, ALL, BUILTIN_DANGEROUS_WORDS, PRODUCT_CHECKS, SHIELD_RULE_NAME, SHIELD_RULES_FOLDED_INTO_PRODUCT, CHECKS, CHECK_BY_ID, LEGACY_TO_ID, PROJECT_JAIL_BLOCK_READ, OVERRIDE_PREFIX, LABEL_WRAPPERS, LEGACY_READERS, INVISIBLE_RE, INVISIBLE_ONE, HOMOGLYPHS, HOMOGLYPH_RE, MAX_BLOBS, MIN_DECODED, BASE64_RUN_RE, HEX_RUN_RE, HEX_ESCAPE_RUN_RE, SYSTEM_AUTH_FILES, SYSTEM_AUTH_DIRS, PASSWORD_HASH_FILES, STARTUP_NAMES, SYSTEM_DIRS, SYSTEM_DIRS_EXEMPT, UPLOAD_SYSTEM_DIRS, AGENT_INSTRUCTION_FILES, AGENT_INSTRUCTION_DIRS, LEGACY_SYSTEM_PATH_RE, MAX_INLINE_CODE, WHAT, OUTSIDE, pyImport, either, PYTHON, NODE, PERL, RUBY, PHP, TABLES, STRING_LITERAL, syntax, sharedParser, MESSAGE_FLAGS, SHELL_INTERPRETERS, DOWNLOAD_CMDS, NORMALIZE_CACHE_MAX, normalizeCache, AST_CACHE_MAX, astCache, PARSE_FAIL, INTERPRETER_LINE, PROGRAM_DIR, ACCESS_VIEW_CACHE_MAX, accessViewCache, MAX_READING_PAYLOADS, STDIN_CODE_INTERPRETERS, RUNS_TEXT_ELSEWHERE, defaultExpansionOps, VARIABLE_READERS, FS_READ_TOOLS, GREP_SHAPE, PATTERN_VERBS, PATTERN_VERB_NAMES, GREP_FILE_OPERANDS, READER_VALUE_LETTERS, FILE_OPERAND_FLAGS, SCP_VALUE_FLAGS, CURL_SOURCE_FLAGS, CURL_VALUE_LETTERS, WGET_VALUE_LETTERS, TAR_VALUE_LETTERS, ZIP_VALUE_LETTERS, RSYNC_VALUE_LETTERS, RSYNC_SKIP, CP_VALUE_LETTERS, INSTALL_VALUE_LETTERS, COPY_VERBS, TAR_MODE_WORD, COPY_VERB_HEADS, FS_OP_PRESCREEN_RE, HOME_CACHE_ALLOWLIST, SENSITIVE_PATH_RULES, AST_FS_REGEX_RULES, SQL_DB_CLIS, SQL_DDL_RE, CHMOD_OPEN_PERM_TOKENS, COMMAND_WRAPPERS, INLINE_INTERPRETER, RUNNER_WRAPPERS, _redirStdinOps, _listOps, WRAPPER_TAKES_TARGET, FIND_EXEC_FLAGS, FS_MUTATION_TOOLS, INTERP_LEADING_TARGET, MAX_PAYLOAD_NESTING, payloadNesting, MAX_INLINE_CALLS, INLINE_EXEC_FALLBACK, UNREADABLE_SOURCE, SCRIPT_RUNNERS, SCRIPT_RUNNER_VALUE_FLAGS, MAX_SCRIPT_OPERANDS, NET_BINARIES, VALUE_FLAGS, HOME_VARIABLES, assignmentTable, currentStmtOffset, PAYLOAD_BUDGET, payloadBudget, seenPayloads, UNANALYSABLE_NESTING, ASSIGNMENT_HEADS, AND_OP, OR_OP, AND_OR_OPS, MAX_CALL_DEPTH, MAX_CALL_WALKS, callDepth, callWalks, FS_OP_CACHE_MAX, fsOpCache, stripDotSlash, REDIR_TRUNCATE_OPS, REDIR_FILE_IN_OPS, REDIR_HEREDOC_OPS, FIND_OPTIONS, COPY_RULE_OF, isReaderWord, positionalAfter, NONE, UNKNOWN, FORBIDDEN_PATH_SEGMENTS, BASH_TOOL_NAMES, MCP_EXECUTORS, BUILTIN_FIELDS, ARGV_FIELDS, BARE_WORD, MAX_ARGV_CHARACTERS, syntax2, MAX_ALTERNATIVES, MAX_CALL_DEPTH2, MAX_CALL_WALKS2, POSITIONAL, MAX_DEPTH, MAX_PAYLOAD_DEPTH, unique, clone, SENDING_STDIN, DOWNLOAD_SHORT_VALUE, DOWNLOAD_LONG_VALUE, DOWNLOAD_OUTPUT_FLAGS, DOWNLOAD_DIR_FLAGS, base, quoteGlob, asWord, WRITES, READS, DUP_OUT, HERE_STRING, AND, OR, DEFAULT_OPS, exempt, RANK, BIP39_ENGLISH, BIP39_PUBLIC_VECTORS, indices, lengths, hash, MAX_MNEMONIC_HASHES, SECRET_VIEW_LIMITS, IBAN_LENGTH, IBAN_BBAN_SHAPE, B58, B58_INDEX, XPRV_VERSIONS, B62, CRC32_TABLE, GITHUB_TOKEN_RE, B64URL, B64URL_INDEX, CASK_TWO_ZERO_SUFFIX, CASK_FOUR_ZERO_SUFFIX, CF_ODD, CF_EVEN, SPANISH_LETTERS, HETU_CHARS, MAX, UNTRUSTED_TOOLS, SIGNALS, MENTION_QUOTE_RE, MENTION_WORD_RE, ASSIGNMENT_CONTEXT_RE, DLP_STOPWORDS, REFERENCE_VALUE_RE, IDENTIFIER_VALUE_RE, PATH_VALUE_RE, DOTTED_REFERENCE_RE, CONCATENATION_RE, EMAIL_VALUE_RE, FIXTURE_NAME_RE, DERIVATIVE_NAME_RE, QUERY_CREDENTIAL_VALUE_RE, OTP_SECRET_RE, OTP_DOC_SECRETS, ASSIGNED_SECRET_VALUE_RE, ASSIGNED_SECRET_NAME_RE, NAME_KEYWORD_RE, ARN_CONTEXT_RE, CIPHER_KEY_NAME_RE, CIPHER_NAME_PARTS, CIPHER_KEY_VALUE_RE, LARAVEL_KEY_VALUE_RE, SQL_PASSWORD_VALUE_RE, GRAFANA_KEY_VALUE_RE, BASIC_VALUE_RE, BASIC_PAIR_RE, OTP_CAPTURE_RE, DB_URL_PASSWORD_RE, DLP_PATTERNS, DLP_PATTERNS_GLOBAL, SENSITIVE_PATH_PATTERNS, SENSITIVE_PATH_REGEXES, MAX_DEPTH2, MAX_STRING_BYTES, MAX_JSON_PARSE_BYTES, BATCH_SEPARATOR, syntax3, NPM_INSTALL_VERBS, NPM_EXEC_VERBS, PNPM_INSTALL_VERBS, YARN_INSTALL_VERBS, BUN_INSTALL_VERBS, DLX_VERBS, NON_REGISTRY_RE, NPM_NAME_RE, EXACT_SEMVER_RE, NPM_VALUE_FLAGS, PNPM_VALUE_FLAGS, YARN_VALUE_FLAGS, BUN_VALUE_FLAGS, PIP_VALUE_FLAGS, UV_VALUE_FLAGS, POETRY_VALUE_FLAGS, PIPENV_VALUE_FLAGS, PIPX_VALUE_FLAGS, PY_SPEC_RE, PY_EXACT_RE, EXACT_VERSION_RE, GEM_NAME_RE, GEM_VALUE_FLAGS, BUNDLE_VALUE_FLAGS, CRATE_NAME_RE, CARGO_ADD_VALUE_FLAGS, CARGO_INSTALL_VALUE_FLAGS, GO_VALUE_FLAGS, GO_PATH_RE, NUGET_NAME_RE, DOTNET_ADD_VALUE_FLAGS, DOTNET_TOOL_VALUE_FLAGS, NUGET_VALUE_FLAGS, MAVEN_COORD_RE, COMPOSER_NAME_RE, COMPOSER_VALUE_FLAGS, EDITOR_HEADS, EXTENSION_ID_RE, MANAGER_HEADS, SHELLS, MAX_NESTING, SHELL_VALUE_FLAGS, TUNING_FIELDS, MAP_GOVERNED, KNOB_GOVERNED, CONFIGURABLE_CHECK_IDS, DEFAULT_EGRESS_ALLOWLIST, PRIVATE_HOST_SUFFIXES, SOURCE_COMMANDS, SINK_COMMANDS, OBFUSCATORS, SENSITIVE_PATTERNS, FLAGS_WITH_VALUES, DESTINATION_ARGS, MCP_DESTINATION_KEYS, ARGUMENT_SCAN_LIMITS, RUN_CHAR, runChar, VERDICT_RANK, SQL_DML_KEYWORDS, MAX_DESTINATIONS, MAX_SCAN_CHARS, EMAIL_RE, URL_RE, IBAN_RE, RECIPIENT_KEYS, DESTRUCTIVE_VERB_RE, PII_EMAIL_RE, PII_SSN_RE, PII_PHONE_RE, PII_CC16_RE, PII_CC15_RE, PII_CC14_RE, PII_CC13_RE, PII_CC19_RE, CARD_PATTERNS, PII_ROUTING_RE, ROUTING_LABEL_RE, ROUTING_LABEL_WINDOW, NATIONAL_ID_SHAPES, NATIONAL_ID_LABEL_RE, NATIONAL_ID_LABEL_WINDOW, NATIONAL_ID_GUARD_RE, PII_IBAN_RE, REALTIME_PII_PATTERNS, MAX_PII_SCAN_BYTES, IBAN_DESTINATION_KEYS, WHOLE_IBAN_RE, JSON_ESCAPE_RE, JSON_ESCAPES, MASKED_KINDS, ENTRY_RE, IBAN_TEXT_RE, EMAIL_TEXT_RE, ACCOUNT_KEY_RE, ACCOUNT_VALUE_RE, MAX_MASK_DEPTH, syntax4, EMPTY, CURL_SEND_FLAGS, WGET_SEND_FLAGS, IWR_SEND_FLAGS, WRITE_METHODS, GH_READ, GH_WRITE, GH_HOSTNAME_FLAGS, GH_REPO_VALUE_FLAGS, GH_API_VALUE_FLAGS, GIT_FETCH, PUBLISH, SHELLS2, OWN_HEADS, MAX_DEPTH3, CWD_CHANGERS, TERMINAL_ESCAPE_RE, LOOP_MAX_RECORDS, CANARY_MIN_LENGTH, MAX_TEXT, MAX_DEPTH4, MAX_JSON_PARSE, URL_DEPTH, B64_DEPTH, MIN_SEGMENT, SEPARATORS, stripSeparators, looksText, CANARY_DECODERS, VIEWS, LONG_OUTPUT_THRESHOLD_BYTES, CANONICAL_EXTRACTOR_VERSION;
 var init_dist = __esm({
   "packages/policy-engine/dist/index.mjs"() {
     "use strict";
@@ -10196,6 +10265,37 @@ var init_dist = __esm({
     ACCESS_VIEW_CACHE_MAX = 1e3;
     accessViewCache = /* @__PURE__ */ new Map();
     MAX_READING_PAYLOADS = 8;
+    STDIN_CODE_INTERPRETERS = /^(python[0-9.]*|node|nodejs|perl|ruby|php|lua)$/;
+    RUNS_TEXT_ELSEWHERE = /* @__PURE__ */ new Set([
+      ...SHELL_INTERPRETERS,
+      "csh",
+      "tcsh",
+      "ash",
+      "mksh",
+      "busybox",
+      "eval",
+      "source",
+      ".",
+      "exec",
+      "xargs",
+      "ssh",
+      "scp",
+      "docker",
+      "podman",
+      "kubectl",
+      "su",
+      "nsenter",
+      "at",
+      "batch",
+      "crontab",
+      "flock",
+      "psql",
+      "mysql",
+      "mongo",
+      "mongosh",
+      "redis-cli",
+      "sqlite3"
+    ]);
     defaultExpansionOps = null;
     VARIABLE_READERS = /* @__PURE__ */ new Set([
       "read",
@@ -15203,7 +15303,7 @@ zoo`.split("\n");
       { view: "separators-stripped", decoder: "separators", stripped: true }
     ];
     LONG_OUTPUT_THRESHOLD_BYTES = 100 * 1024;
-    CANONICAL_EXTRACTOR_VERSION = "canonical-v30";
+    CANONICAL_EXTRACTOR_VERSION = "canonical-v31";
   }
 });
 
@@ -15873,87 +15973,69 @@ var init_dlp = __esm({
   }
 });
 
+// src/credential-files.ts
+import path5 from "path";
+function homeCredentialFiles(home) {
+  const f = (parts, description, score, kind = "credential") => ({
+    full: path5.join(home, ...parts),
+    label: "~/" + parts.join("/"),
+    description,
+    score,
+    kind
+  });
+  return [
+    f([".ssh", "id_rsa"], "RSA private key: grants SSH access to your servers", 20),
+    f([".ssh", "id_ed25519"], "Ed25519 private key: grants SSH access to your servers", 20),
+    f([".ssh", "id_ecdsa"], "ECDSA private key: grants SSH access to your servers", 20),
+    f([".ssh", "id_dsa"], "DSA private key: grants SSH access to your servers", 20),
+    f([".aws", "credentials"], "AWS access keys: full cloud account access", 20),
+    f([".aws", "config"], "AWS configuration: account and region settings", 5, "config"),
+    f([".config", "gcloud", "credentials.db"], "Google Cloud credentials", 15),
+    f(
+      [".config", "gcloud", "application_default_credentials.json"],
+      "Google Cloud application default credentials",
+      15
+    ),
+    f([".docker", "config.json"], "Docker registry auth tokens", 10),
+    f([".netrc"], "FTP/HTTP credentials in plain text", 15),
+    f([".npmrc"], "npm auth token: can publish packages as you", 10),
+    f([".node9", "credentials.json"], "Node9 cloud API key", 10)
+  ];
+}
+var init_credential_files = __esm({
+  "src/credential-files.ts"() {
+    "use strict";
+  }
+});
+
 // src/cli/commands/blast.ts
 import chalk from "chalk";
 import fs5 from "fs";
-import path5 from "path";
+import path6 from "path";
 import os4 from "os";
 function buildSensitivePaths(home, cwd) {
+  const homeFiles = homeCredentialFiles(home).map(({ full, label: label2, description, score }) => ({
+    full,
+    label: label2,
+    description,
+    score
+  }));
   return [
+    ...homeFiles,
     {
-      full: path5.join(home, ".ssh", "id_rsa"),
-      label: "~/.ssh/id_rsa",
-      description: "RSA private key \u2014 grants SSH access to your servers",
-      score: 20
-    },
-    {
-      full: path5.join(home, ".ssh", "id_ed25519"),
-      label: "~/.ssh/id_ed25519",
-      description: "Ed25519 private key \u2014 grants SSH access to your servers",
-      score: 20
-    },
-    {
-      full: path5.join(home, ".ssh", "id_ecdsa"),
-      label: "~/.ssh/id_ecdsa",
-      description: "ECDSA private key \u2014 grants SSH access to your servers",
-      score: 20
-    },
-    {
-      full: path5.join(home, ".aws", "credentials"),
-      label: "~/.aws/credentials",
-      description: "AWS access keys \u2014 full cloud account access",
-      score: 20
-    },
-    {
-      full: path5.join(home, ".aws", "config"),
-      label: "~/.aws/config",
-      description: "AWS configuration \u2014 account and region settings",
-      score: 5
-    },
-    {
-      full: path5.join(home, ".config", "gcloud", "credentials.db"),
-      label: "~/.config/gcloud/credentials.db",
-      description: "Google Cloud credentials",
-      score: 15
-    },
-    {
-      full: path5.join(home, ".docker", "config.json"),
-      label: "~/.docker/config.json",
-      description: "Docker registry auth tokens",
-      score: 10
-    },
-    {
-      full: path5.join(home, ".netrc"),
-      label: "~/.netrc",
-      description: "FTP/HTTP credentials in plain text",
-      score: 15
-    },
-    {
-      full: path5.join(home, ".npmrc"),
-      label: "~/.npmrc",
-      description: "npm auth token \u2014 can publish packages as you",
-      score: 10
-    },
-    {
-      full: path5.join(home, ".node9", "credentials.json"),
-      label: "~/.node9/credentials.json",
-      description: "Node9 cloud API key",
-      score: 10
-    },
-    {
-      full: path5.join(cwd, ".env"),
+      full: path6.join(cwd, ".env"),
       label: ".env  (current folder)",
-      description: "App secrets \u2014 database passwords, API keys",
+      description: "App secrets: database passwords, API keys",
       score: 20
     },
     {
-      full: path5.join(cwd, ".env.local"),
+      full: path6.join(cwd, ".env.local"),
       label: ".env.local  (current folder)",
-      description: "Local overrides \u2014 often contains real credentials",
+      description: "Local overrides: often contains real credentials",
       score: 15
     },
     {
-      full: path5.join(cwd, ".env.production"),
+      full: path6.join(cwd, ".env.production"),
       label: ".env.production  (current folder)",
       description: "Production secrets",
       score: 20
@@ -15995,6 +16077,7 @@ var init_blast = __esm({
   "src/cli/commands/blast.ts"() {
     "use strict";
     init_dlp();
+    init_credential_files();
   }
 });
 
@@ -16154,7 +16237,7 @@ var init_decision_record = __esm({
 // src/auth/daemon.ts
 import fs6 from "fs";
 import http from "http";
-import path6 from "path";
+import path7 from "path";
 import os5 from "os";
 async function checkStatePredicates(predicates) {
   if (predicates.length === 0) return {};
@@ -16181,7 +16264,7 @@ function resolveDaemonPort(env = process.env) {
 function getInternalToken() {
   if (forecastRun()) return null;
   try {
-    const pidFile = path6.join(os5.homedir(), ".node9", "daemon.pid");
+    const pidFile = path7.join(os5.homedir(), ".node9", "daemon.pid");
     if (!fs6.existsSync(pidFile)) return null;
     const data = JSON.parse(fs6.readFileSync(pidFile, "utf-8"));
     process.kill(data.pid, 0);
@@ -16192,7 +16275,7 @@ function getInternalToken() {
 }
 function isDaemonRunning() {
   if (forecastRun()) return false;
-  const pidFile = path6.join(os5.homedir(), ".node9", "daemon.pid");
+  const pidFile = path7.join(os5.homedir(), ".node9", "daemon.pid");
   if (fs6.existsSync(pidFile)) {
     let pid;
     let port;
@@ -16554,7 +16637,7 @@ var init_daemon = __esm({
     "use strict";
     init_forecast_context();
     init_decision_record();
-    ACTIVITY_SOCKET_PATH = process.platform === "win32" ? "\\\\.\\pipe\\node9-activity" : path6.join(os5.tmpdir(), "node9-activity.sock");
+    ACTIVITY_SOCKET_PATH = process.platform === "win32" ? "\\\\.\\pipe\\node9-activity" : path7.join(os5.tmpdir(), "node9-activity.sock");
     DEFAULT_DAEMON_PORT = 7391;
     DAEMON_PORT = resolveDaemonPort();
     DAEMON_HOST = "127.0.0.1";
@@ -16565,8 +16648,8 @@ var init_daemon = __esm({
 import { z } from "zod";
 function formatIssues(issues) {
   const lines = issues.map((issue) => {
-    const path41 = issue.path.length > 0 ? issue.path.map(String).join(".") : "root";
-    return `  \u2022 ${path41}: ${issue.message}`;
+    const path42 = issue.path.length > 0 ? issue.path.map(String).join(".") : "root";
+    return `  \u2022 ${path42}: ${issue.message}`;
   });
   return `Invalid config:
 ${lines.join("\n")}`;
@@ -16579,9 +16662,9 @@ function prunePaths(root, paths) {
     const yi = y[y.length - 1];
     return typeof xi === "number" && typeof yi === "number" ? yi - xi : 0;
   });
-  for (const path41 of ordered) {
+  for (const path42 of ordered) {
     let cur = root;
-    for (const key of path41.slice(0, -1)) {
+    for (const key of path42.slice(0, -1)) {
       if (cur === null || typeof cur !== "object") {
         cur = void 0;
         break;
@@ -16589,7 +16672,7 @@ function prunePaths(root, paths) {
       cur = cur[key];
     }
     if (cur === null || typeof cur !== "object") continue;
-    const last = path41[path41.length - 1];
+    const last = path42[path42.length - 1];
     if (Array.isArray(cur)) {
       const i = Number(last);
       if (Number.isInteger(i) && i >= 0 && i < cur.length) {
@@ -16625,7 +16708,7 @@ function sanitizeConfig(raw) {
           return issue.keys.map((k) => [...at, k]);
         }
         return [at.slice(0, -level || void 0)];
-      }).filter((path41) => path41.length > 0);
+      }).filter((path42) => path42.length > 0);
       if (paths.length === 0 || !prunePaths(working, paths)) break;
     }
     if (ConfigFileSchema.safeParse(working).success) break;
@@ -16923,7 +17006,7 @@ var init_build = __esm({
 
 // src/shields.ts
 import fs7 from "fs";
-import path7 from "path";
+import path8 from "path";
 import os6 from "os";
 function loadUserShields() {
   const result = {};
@@ -16940,7 +17023,7 @@ function loadUserShields() {
     return result;
   }
   for (const file2 of entries) {
-    const filePath = path7.join(USER_SHIELDS_DIR, file2);
+    const filePath = path8.join(USER_SHIELDS_DIR, file2);
     try {
       const raw = JSON.parse(fs7.readFileSync(filePath, "utf-8"));
       const v = validateShieldDefinition(raw);
@@ -17007,9 +17090,9 @@ var init_shields = __esm({
     init_dist();
     init_build();
     init_dist();
-    USER_SHIELDS_DIR = path7.join(os6.homedir(), ".node9", "shields");
+    USER_SHIELDS_DIR = path8.join(os6.homedir(), ".node9", "shields");
     SHIELDS = buildSHIELDS();
-    SHIELDS_STATE_FILE = path7.join(os6.homedir(), ".node9", "shields.json");
+    SHIELDS_STATE_FILE = path8.join(os6.homedir(), ".node9", "shields.json");
   }
 });
 
@@ -17143,10 +17226,10 @@ var init_managed = __esm({
 
 // src/auth/trusted-hosts.ts
 import fs8 from "fs";
-import path8 from "path";
+import path9 from "path";
 import os7 from "os";
 function getTrustedHostsPath() {
-  return path8.join(os7.homedir(), ".node9", "trusted-hosts.json");
+  return path9.join(os7.homedir(), ".node9", "trusted-hosts.json");
 }
 function readTrustedHosts() {
   try {
@@ -17379,7 +17462,7 @@ var init_api_url = __esm({
 
 // src/config/index.ts
 import fs9 from "fs";
-import path9 from "path";
+import path10 from "path";
 import os8 from "os";
 function sanitizeSsrfAllow(entries, source) {
   const kept = [];
@@ -17403,7 +17486,7 @@ function noteRejectedApiUrl(raw) {
   rejectedApiUrlsSeen.add(key);
   try {
     fs9.appendFileSync(
-      path9.join(os8.homedir(), ".node9", "hook-debug.log"),
+      path10.join(os8.homedir(), ".node9", "hook-debug.log"),
       `[${(/* @__PURE__ */ new Date()).toISOString()}] REFUSED apiUrl, using the default instead: ${String(raw).slice(0, 200).replace(/[\r\n]+/g, " ")}
 `
     );
@@ -17420,7 +17503,7 @@ function getCredentials() {
     };
   }
   try {
-    const credPath = path9.join(os8.homedir(), ".node9", "credentials.json");
+    const credPath = path10.join(os8.homedir(), ".node9", "credentials.json");
     if (fs9.existsSync(credPath)) {
       const creds = JSON.parse(fs9.readFileSync(credPath, "utf-8"));
       const profileName = process.env.NODE9_PROFILE || "default";
@@ -17469,7 +17552,7 @@ function readRulesCacheResilient(cacheFile) {
     }
   }
   if (existed || sawReadError) {
-    const backup = path9.join(path9.dirname(cacheFile), "rules-cache.last-good.json");
+    const backup = path10.join(path10.dirname(cacheFile), "rules-cache.last-good.json");
     if (backup !== cacheFile) {
       try {
         const raw = JSON.parse(fs9.readFileSync(backup, "utf-8"));
@@ -17493,7 +17576,7 @@ function logCacheReadIssue(cacheFile, kind) {
   cacheReadLastLoggedAt = now;
   try {
     fs9.appendFileSync(
-      path9.join(os8.homedir(), ".node9", "hook-debug.log"),
+      path10.join(os8.homedir(), ".node9", "hook-debug.log"),
       `[${(/* @__PURE__ */ new Date()).toISOString()}] ${kind} ${cacheFile}
 `
     );
@@ -17510,8 +17593,8 @@ function catalogSettingsFrom(settings, policy) {
 }
 function getConfig(cwd) {
   if (!cwd && cachedConfig) return cachedConfig;
-  const globalPath = path9.join(os8.homedir(), ".node9", "config.json");
-  const projectPath = path9.join(cwd ?? process.cwd(), "node9.config.json");
+  const globalPath = path10.join(os8.homedir(), ".node9", "config.json");
+  const projectPath = path10.join(cwd ?? process.cwd(), "node9.config.json");
   const globalConfig = tryLoadConfig(globalPath);
   const projectConfig = tryLoadConfig(projectPath, { project: true });
   const mergedSettings = {
@@ -17756,7 +17839,7 @@ function getConfig(cwd) {
   let cloudMandatesEnforcement = false;
   let cloudMandatesAppPerm = false;
   {
-    const cacheFile = path9.join(os8.homedir(), ".node9", "rules-cache.json");
+    const cacheFile = path10.join(os8.homedir(), ".node9", "rules-cache.json");
     try {
       const raw = readRulesCacheResilient(cacheFile);
       if (Array.isArray(raw.rules) && raw.rules.length > 0) {
@@ -17949,13 +18032,13 @@ function getConfig(cwd) {
         }
         if (Array.isArray(mc.jailPaths)) {
           for (const jp of mc.jailPaths) {
-            const path41 = typeof jp?.path === "string" ? jp.path.trim() : "";
-            if (!path41) continue;
+            const path42 = typeof jp?.path === "string" ? jp.path.trim() : "";
+            if (!path42) continue;
             const verdict = jp?.verdict === "review" ? "review" : "block";
-            for (const r of pathRules(path41, verdict, "org-managed jail")) {
+            for (const r of pathRules(path42, verdict, "org-managed jail")) {
               mergedPolicy.smartRules.push({ ...r, name: `org:${r.name}` });
             }
-            mergedPolicy.managedJailPaths.push({ path: path41, verdict });
+            mergedPolicy.managedJailPaths.push({ path: path42, verdict });
           }
         }
         if (Array.isArray(mc.trustedHosts)) {
@@ -18675,7 +18758,7 @@ var init_cost_copilot = __esm({
 
 // src/session-files.ts
 import * as fs10 from "fs";
-import * as path10 from "path";
+import * as path11 from "path";
 function listSessionFiles(dir2, maxDepth = 6) {
   const out = [];
   const walk2 = (d, rel, depth) => {
@@ -18687,8 +18770,8 @@ function listSessionFiles(dir2, maxDepth = 6) {
       return;
     }
     for (const e of entries) {
-      const childRel = rel ? path10.join(rel, e.name) : e.name;
-      if (e.isDirectory()) walk2(path10.join(d, e.name), childRel, depth + 1);
+      const childRel = rel ? path11.join(rel, e.name) : e.name;
+      if (e.isDirectory()) walk2(path11.join(d, e.name), childRel, depth + 1);
       else if (e.name.endsWith(".jsonl")) out.push(childRel);
     }
   };
@@ -18696,7 +18779,7 @@ function listSessionFiles(dir2, maxDepth = 6) {
   return out;
 }
 function sessionIdOf(relPath) {
-  return path10.basename(relPath).replace(/\.jsonl$/, "");
+  return path11.basename(relPath).replace(/\.jsonl$/, "");
 }
 var init_session_files = __esm({
   "src/session-files.ts"() {
@@ -18802,9 +18885,9 @@ var init_decision = __esm({
 // src/shields/jail.ts
 import fs11 from "fs";
 import os9 from "os";
-import path11 from "path";
+import path12 from "path";
 function jailStorePath() {
-  return path11.join(os9.homedir(), ".node9", "jail-paths.json");
+  return path12.join(os9.homedir(), ".node9", "jail-paths.json");
 }
 function readJailPaths() {
   let text;
@@ -18849,9 +18932,9 @@ var init_jail = __esm({
 // src/canary/registry.ts
 import fs12 from "fs";
 import os10 from "os";
-import path12 from "path";
+import path13 from "path";
 function canaryStorePath() {
-  return path12.join(os10.homedir(), ".node9", "canaries.json");
+  return path13.join(os10.homedir(), ".node9", "canaries.json");
 }
 function isRecord(x) {
   if (!x || typeof x !== "object") return false;
@@ -18916,7 +18999,7 @@ var init_scan_watermark = __esm({
 // src/cli/aggregate/report-audit.ts
 import fs13 from "fs";
 import os11 from "os";
-import path13 from "path";
+import path14 from "path";
 function buildTestTimestamps(allEntries) {
   const testTs = /* @__PURE__ */ new Set();
   for (const e of allEntries) {
@@ -19052,7 +19135,7 @@ function freezeClaudeCost(acc) {
   };
 }
 function processClaudeCostProject(proj, projectsDir, start, end, acc) {
-  const projPath = path13.join(projectsDir, proj);
+  const projPath = path14.join(projectsDir, proj);
   let files;
   try {
     const stat = fs13.statSync(projPath);
@@ -19063,7 +19146,7 @@ function processClaudeCostProject(proj, projectsDir, start, end, acc) {
   }
   const startMs = start.getTime();
   for (const file2 of files) {
-    const filePath = path13.join(projPath, file2);
+    const filePath = path14.join(projPath, file2);
     try {
       if (fs13.statSync(filePath).mtimeMs < startMs) continue;
     } catch {
@@ -19302,7 +19385,7 @@ function listGeminiSessionFiles(geminiTmpDir) {
     return out;
   }
   for (const proj of dirs) {
-    const chatsDir = path13.join(geminiTmpDir, proj, "chats");
+    const chatsDir = path14.join(geminiTmpDir, proj, "chats");
     let files;
     try {
       if (!fs13.statSync(chatsDir).isDirectory()) continue;
@@ -19312,7 +19395,7 @@ function listGeminiSessionFiles(geminiTmpDir) {
     }
     for (const f of files) {
       if (!f.endsWith(".jsonl")) continue;
-      out.push({ projectKey: proj, file: path13.join(chatsDir, f) });
+      out.push({ projectKey: proj, file: path14.join(chatsDir, f) });
     }
   }
   return out;
@@ -19353,10 +19436,10 @@ function dimensionOfBlock(checkedBy, ruleName) {
 }
 function aggregateReportFromAudit(period, opts = {}) {
   const now = opts.now ?? /* @__PURE__ */ new Date();
-  const auditLogPath2 = opts.auditLogPath ?? path13.join(os11.homedir(), ".node9", "audit.log");
-  const claudeProjectsDir = opts.claudeProjectsDir ?? path13.join(os11.homedir(), ".claude", "projects");
+  const auditLogPath2 = opts.auditLogPath ?? path14.join(os11.homedir(), ".node9", "audit.log");
+  const claudeProjectsDir = opts.claudeProjectsDir ?? path14.join(os11.homedir(), ".claude", "projects");
   const codexSessionsDir2 = opts.codexSessionsDir ?? codexSessionsDir();
-  const geminiTmpDir = opts.geminiTmpDir ?? path13.join(os11.homedir(), ".gemini", "tmp");
+  const geminiTmpDir = opts.geminiTmpDir ?? path14.join(os11.homedir(), ".gemini", "tmp");
   const hasAuditFile = fs13.existsSync(auditLogPath2);
   const allEntries = opts.preloadedAuditEntries ?? parseAuditLog(auditLogPath2);
   const unackedDlp = allEntries.filter((e) => e.source === "response-dlp");
@@ -19756,10 +19839,10 @@ var init_mcp_cmd = __esm({
 
 // src/daemon/mcp-tools.ts
 import fs14 from "fs";
-import path14 from "path";
+import path15 from "path";
 import os12 from "os";
 function getMcpToolsFile() {
-  return path14.join(os12.homedir(), ".node9", "mcp-tools.json");
+  return path15.join(os12.homedir(), ".node9", "mcp-tools.json");
 }
 function readMcpToolsConfig() {
   try {
@@ -19781,9 +19864,9 @@ var init_mcp_tools = __esm({
 // src/apps/state.ts
 import fs15 from "fs";
 import os13 from "os";
-import path15 from "path";
+import path16 from "path";
 function appsFilePath(home = os13.homedir()) {
-  return path15.join(home, ".node9", "apps.json");
+  return path16.join(home, ".node9", "apps.json");
 }
 function emptyFile() {
   return { version: 1, apps: /* @__PURE__ */ Object.create(null), links: /* @__PURE__ */ Object.create(null) };
@@ -19896,7 +19979,7 @@ var init_state = __esm({
 });
 
 // src/context-sniper.ts
-import path16 from "path";
+import path17 from "path";
 function smartTruncate(str, maxLen = 500) {
   if (str.length <= maxLen) return str;
   const edge = Math.floor(maxLen / 2) - 3;
@@ -19948,7 +20031,7 @@ function computeRiskMetadata(args, tier, blockedByLabel, matchedField, matchedWo
       intent = "EDIT";
       if (obj.file_path) {
         editFilePath = String(obj.file_path);
-        editFileName = path16.basename(editFilePath);
+        editFileName = path17.basename(editFilePath);
       }
       const result = extractContext(String(obj.new_string), matchedWord);
       contextSnippet = result.snippet;
@@ -20005,7 +20088,7 @@ var init_context_sniper = __esm({
 
 // src/ui/native.ts
 import { spawn } from "child_process";
-import path17 from "path";
+import path18 from "path";
 function resolveNativeDecision(opts) {
   const { code, output, elapsedMs, locked } = opts;
   if (locked) return "deny";
@@ -20033,7 +20116,7 @@ function formatArgs(args, matchedField, matchedWord) {
   if (typeof parsed === "object" && !Array.isArray(parsed)) {
     const obj = parsed;
     if (obj.old_string !== void 0 && obj.new_string !== void 0) {
-      const file2 = obj.file_path ? path17.basename(String(obj.file_path)) : "file";
+      const file2 = obj.file_path ? path18.basename(String(obj.file_path)) : "file";
       const oldPreview = smartTruncate(String(obj.old_string), 120);
       const newPreview = extractContext(String(obj.new_string), matchedWord).snippet;
       return {
@@ -20250,16 +20333,16 @@ var init_native = __esm({
 // src/policy/file-access.ts
 import fs16 from "fs";
 import os14 from "os";
-import path18 from "path";
+import path19 from "path";
 function absoluteSpelling(p, cwd, home) {
   if (p === "~" || p.startsWith("~/")) p = home + p.slice(1);
-  return path18.isAbsolute(p) ? p : `${cwd}/${p}`;
+  return path19.isAbsolute(p) ? p : `${cwd}/${p}`;
 }
 function physical(p, followFinal, links = 0) {
   if (links > 40) throw new Error("Too many symbolic links");
   if (!followFinal) {
-    const parent = physical(path18.dirname(p), true, links);
-    return { path: `${parent.path}/${path18.basename(p)}`, missing: parent.missing };
+    const parent = physical(path19.dirname(p), true, links);
+    return { path: `${parent.path}/${path19.basename(p)}`, missing: parent.missing };
   }
   try {
     return { path: fs16.realpathSync.native(p), missing: false };
@@ -20270,7 +20353,7 @@ function physical(p, followFinal, links = 0) {
       if (fs16.lstatSync(p).isSymbolicLink()) {
         const target = fs16.readlinkSync(p);
         return physical(
-          path18.isAbsolute(target) ? target : `${path18.dirname(p)}/${target}`,
+          path19.isAbsolute(target) ? target : `${path19.dirname(p)}/${target}`,
           true,
           links + 1
         );
@@ -20279,10 +20362,10 @@ function physical(p, followFinal, links = 0) {
       if (!["ENOENT", "ENOTDIR"].includes(linkError.code ?? ""))
         throw linkError;
     }
-    const parent = path18.dirname(p);
+    const parent = path19.dirname(p);
     if (parent === p) return { path: p, missing: true };
     const resolved = physical(parent, true, links);
-    return { path: `${resolved.path}/${path18.basename(p)}`, missing: true };
+    return { path: `${resolved.path}/${path19.basename(p)}`, missing: true };
   }
 }
 function prepareFileAccesses(tool, args, cwd = process.cwd(), inspection = {}, home = os14.homedir()) {
@@ -20372,7 +20455,7 @@ var init_file_access = __esm({
 // src/auth/session-script.ts
 import fs17 from "fs";
 import os15 from "os";
-import path19 from "path";
+import path20 from "path";
 function readScriptFile(resolved) {
   let fd;
   try {
@@ -20401,7 +20484,7 @@ function readScriptFile(resolved) {
 }
 function absolute(p, cwd, home) {
   const spelled = p === "~" || p.startsWith("~/") ? home + p.slice(1) : p;
-  return path19.resolve(cwd, spelled);
+  return path20.resolve(cwd, spelled);
 }
 async function resolveSessionScript(toolName, args, cwd, layers, deps, home = os15.homedir()) {
   try {
@@ -20468,7 +20551,7 @@ var init_session_script = __esm({
 
 // src/utils/git-remotes.ts
 import fs18 from "fs";
-import path20 from "path";
+import path21 from "path";
 function readSmallFile(p, max) {
   let fd;
   try {
@@ -20500,20 +20583,20 @@ function gitRemoteHost(url) {
   return null;
 }
 function findGitConfig(dir2, walkUp = true) {
-  let cur = path20.resolve(dir2);
+  let cur = path21.resolve(dir2);
   for (let i = 0; i < (walkUp ? 64 : 1); i++) {
-    const dotGit = path20.join(cur, ".git");
-    const direct = readSmallFile(path20.join(dotGit, "config"), 1e6);
+    const dotGit = path21.join(cur, ".git");
+    const direct = readSmallFile(path21.join(dotGit, "config"), 1e6);
     if (direct !== null) return direct;
     const pointer = readSmallFile(dotGit, 4096);
     const m = pointer && /^gitdir:\s*(.+?)\s*$/m.exec(pointer);
     if (m) {
-      let gitDir = path20.resolve(cur, m[1]);
-      const common = readSmallFile(path20.join(gitDir, "commondir"), 4096);
-      if (common !== null) gitDir = path20.resolve(gitDir, common.trim());
-      return readSmallFile(path20.join(gitDir, "config"), 1e6);
+      let gitDir = path21.resolve(cur, m[1]);
+      const common = readSmallFile(path21.join(gitDir, "commondir"), 4096);
+      if (common !== null) gitDir = path21.resolve(gitDir, common.trim());
+      return readSmallFile(path21.join(gitDir, "config"), 1e6);
     }
-    const parent = path20.dirname(cur);
+    const parent = path21.dirname(cur);
     if (parent === cur) return null;
     cur = parent;
   }
@@ -20522,12 +20605,12 @@ function findGitConfig(dir2, walkUp = true) {
 function readGitRemotes(dir2, opts = {}) {
   if (!dir2) return [];
   const walkUp = opts.walkUp !== false;
-  const key = `${walkUp ? "up" : "at"}:${path20.resolve(dir2)}`;
+  const key = `${walkUp ? "up" : "at"}:${path21.resolve(dir2)}`;
   const hit = cache.get(key);
   if (hit) return hit;
   const out = [];
   try {
-    const cfg = findGitConfig(path20.resolve(dir2), walkUp);
+    const cfg = findGitConfig(path21.resolve(dir2), walkUp);
     if (cfg !== null) {
       let current = null;
       for (const line of cfg.split(/\r?\n/)) {
@@ -20563,17 +20646,17 @@ var init_git_remotes = __esm({
 
 // src/exposure/known-hosts.ts
 import fs19 from "fs";
-import path21 from "path";
+import path22 from "path";
 function manifestRoot(dir2) {
-  let cur = path21.resolve(dir2);
+  let cur = path22.resolve(dir2);
   for (let i = 0; i < 64; i++) {
     for (const [m] of ECOSYSTEMS) {
       try {
-        if (fs19.existsSync(path21.join(cur, m))) return cur;
+        if (fs19.existsSync(path22.join(cur, m))) return cur;
       } catch {
       }
     }
-    const parent = path21.dirname(cur);
+    const parent = path22.dirname(cur);
     if (parent === cur) return null;
     cur = parent;
   }
@@ -20582,7 +20665,7 @@ function manifestRoot(dir2) {
 function knownProjectHosts(dir2) {
   const empty = { hosts: /* @__PURE__ */ new Set(), repos: /* @__PURE__ */ new Set(), remotes: /* @__PURE__ */ new Map() };
   if (!dir2) return empty;
-  const key = path21.resolve(dir2);
+  const key = path22.resolve(dir2);
   const hit = cache2.get(key);
   if (hit) return hit;
   const out = { hosts: /* @__PURE__ */ new Set(), repos: /* @__PURE__ */ new Set(), remotes: /* @__PURE__ */ new Map() };
@@ -20595,7 +20678,7 @@ function knownProjectHosts(dir2) {
     const root = manifestRoot(key);
     if (root !== null) {
       for (const [m, registry] of ECOSYSTEMS) {
-        if (fs19.existsSync(path21.join(root, m))) out.hosts.add(registry);
+        if (fs19.existsSync(path22.join(root, m))) out.hosts.add(registry);
       }
       try {
         if (fs19.readdirSync(root).some((f) => f.endsWith(".gemspec")))
@@ -20627,7 +20710,7 @@ var init_known_hosts = __esm({
 // src/exposure/writes.ts
 import fs20 from "fs";
 import os16 from "os";
-import path22 from "path";
+import path23 from "path";
 function writtenContent(args) {
   if (!args || typeof args !== "object" || Array.isArray(args)) return [];
   const a = args;
@@ -20675,7 +20758,7 @@ function judgeWritesAfterExposure(opts) {
     seen.add(p);
     if (p === "/dev" || p.startsWith("/dev/")) continue;
     if (root !== null && isInside(root, p)) {
-      if (isAgentInstructionPath(p, root) && (path22.basename(p) !== "package.json" || packageScriptsTouched(opts.args, p, opts.shellCommand)))
+      if (isAgentInstructionPath(p, root) && (path23.basename(p) !== "package.json" || packageScriptsTouched(opts.args, p, opts.shellCommand)))
         holds.push({ path: p, why: "agent-instruction" });
       continue;
     }
@@ -20717,13 +20800,13 @@ var init_exposure_store = __esm({
 import crypto3 from "crypto";
 import fs21 from "fs";
 import os17 from "os";
-import path23 from "path";
+import path24 from "path";
 function dir() {
-  return path23.join(os17.homedir(), ".node9", "exposure-sessions");
+  return path24.join(os17.homedir(), ".node9", "exposure-sessions");
 }
 function file(sessionId) {
   const id = crypto3.createHash("sha256").update(sessionId).digest("hex").slice(0, 32);
-  return path23.join(dir(), id);
+  return path24.join(dir(), id);
 }
 function maybeSessionExposed(sessionId) {
   if (!sessionId) return false;
@@ -20847,10 +20930,10 @@ var init_roles = __esm({
 
 // src/auth/trusted-recipients.ts
 import fs23 from "fs";
-import path24 from "path";
+import path25 from "path";
 import os18 from "os";
 function getTrustedRecipientsPath() {
-  return path24.join(os18.homedir(), ".node9", "trusted-recipients.json");
+  return path25.join(os18.homedir(), ".node9", "trusted-recipients.json");
 }
 function readTrustedRecipients() {
   try {
@@ -20863,7 +20946,7 @@ function readTrustedRecipients() {
 }
 function writeTrustedRecipients(entries) {
   const filePath = getTrustedRecipientsPath();
-  fs23.mkdirSync(path24.dirname(filePath), { recursive: true });
+  fs23.mkdirSync(path25.dirname(filePath), { recursive: true });
   const tmp = filePath + ".node9-tmp";
   fs23.writeFileSync(tmp, JSON.stringify({ entries }, null, 2), { mode: 384 });
   fs23.renameSync(tmp, filePath);
@@ -20903,10 +20986,10 @@ var init_trusted_recipients = __esm({
 
 // src/utils/atomic-write.ts
 import fs24 from "fs";
-import path25 from "path";
+import path26 from "path";
 import { randomUUID } from "crypto";
 function atomicWriteSync(filePath, data, options) {
-  const dir2 = path25.dirname(filePath);
+  const dir2 = path26.dirname(filePath);
   if (!fs24.existsSync(dir2)) fs24.mkdirSync(dir2, { recursive: true });
   const tmpPath = `${filePath}.${randomUUID()}.tmp`;
   try {
@@ -20937,13 +21020,13 @@ var init_atomic_write = __esm({
 // src/supply-chain/osv-index.ts
 import fs25 from "fs";
 import os19 from "os";
-import path26 from "path";
+import path27 from "path";
 import { createHash as createHash4 } from "crypto";
 function osvRoot() {
-  return path26.join(os19.homedir(), ".node9", "osv");
+  return path27.join(os19.homedir(), ".node9", "osv");
 }
 function ecoDir(eco) {
-  return path26.join(osvRoot(), eco);
+  return path27.join(osvRoot(), eco);
 }
 function indexKey(eco, name) {
   switch (eco) {
@@ -20962,11 +21045,11 @@ function shardOf(key) {
   return createHash4("sha1").update(key).digest("hex").slice(0, 2);
 }
 function shardPath(eco, shard) {
-  return path26.join(ecoDir(eco), "shards", `${shard}.json`);
+  return path27.join(ecoDir(eco), "shards", `${shard}.json`);
 }
 function readMeta(eco) {
   try {
-    const m = JSON.parse(fs25.readFileSync(path26.join(ecoDir(eco), "meta.json"), "utf8"));
+    const m = JSON.parse(fs25.readFileSync(path27.join(ecoDir(eco), "meta.json"), "utf8"));
     if (typeof m?.syncedAt !== "string" || typeof m?.lastModifiedMs !== "number") return null;
     return m;
   } catch {
@@ -21358,14 +21441,14 @@ var init_registry2 = __esm({
 
 // src/supply-chain/local-resolve.ts
 import fs26 from "fs";
-import path27 from "path";
+import path28 from "path";
 function resolveInstalled(name, cwd) {
-  if (!cwd || !path27.isAbsolute(cwd)) return null;
+  if (!cwd || !path28.isAbsolute(cwd)) return null;
   if (!/^(?:@[^/\\]+\/)?[^/\\]+$/.test(name)) return null;
-  let dir2 = path27.resolve(cwd);
+  let dir2 = path28.resolve(cwd);
   for (let i = 0; i < MAX_LEVELS; i++) {
-    const pkgDir = path27.join(dir2, "node_modules", ...name.split("/"));
-    const manifest = path27.join(pkgDir, "package.json");
+    const pkgDir = path28.join(dir2, "node_modules", ...name.split("/"));
+    const manifest = path28.join(pkgDir, "package.json");
     try {
       const raw = fs26.readFileSync(manifest, "utf8");
       const parsed = JSON.parse(raw);
@@ -21375,7 +21458,7 @@ function resolveInstalled(name, cwd) {
       return null;
     } catch {
     }
-    const parent = path27.dirname(dir2);
+    const parent = path28.dirname(dir2);
     if (parent === dir2) break;
     dir2 = parent;
   }
@@ -21392,7 +21475,7 @@ var init_local_resolve = __esm({
 
 // src/supply-chain/check.ts
 import picomatch2 from "picomatch";
-import path28 from "path";
+import path29 from "path";
 function commandOf(toolName, args) {
   if (!isBashTool(toolName) || !args || typeof args !== "object") return null;
   const a = args;
@@ -21494,7 +21577,7 @@ function checkInstalled(p, version, misses) {
 }
 async function checkOne(p, cfg, misses, networkCapped, cwd) {
   if (p.ecosystem === "npm" && LOCAL_FIRST_MANAGERS.has(p.manager) && p.localCwd !== null && (p.raw === p.name || p.version)) {
-    const localCwd = cwd && path28.isAbsolute(cwd) ? (p.localCwd ?? []).reduce((dir2, step) => path28.resolve(dir2, step), cwd) : void 0;
+    const localCwd = cwd && path29.isAbsolute(cwd) ? (p.localCwd ?? []).reduce((dir2, step) => path29.resolve(dir2, step), cwd) : void 0;
     const installed = resolveInstalled(p.name, localCwd);
     if (installed && (!p.version || p.version === installed.version))
       return checkInstalled(p, installed.version, misses);
@@ -21664,14 +21747,14 @@ var init_check = __esm({
 
 // src/utils/provenance.ts
 import fs27 from "fs";
-import path29 from "path";
+import path30 from "path";
 import os20 from "os";
 function findInPath(cmd) {
-  if (path29.posix.isAbsolute(cmd)) return cmd;
+  if (path30.posix.isAbsolute(cmd)) return cmd;
   const pathEnv = process.env.PATH ?? "";
-  for (const dir2 of pathEnv.split(path29.delimiter)) {
+  for (const dir2 of pathEnv.split(path30.delimiter)) {
     if (!dir2) continue;
-    const full = path29.join(dir2, cmd);
+    const full = path30.join(dir2, cmd);
     try {
       fs27.accessSync(full, fs27.constants.X_OK);
       return full;
@@ -21702,7 +21785,7 @@ function _classifyPath(resolved, cwd) {
 }
 function checkProvenance(cmd, cwd) {
   const bare = cmd.startsWith("./") ? cmd.slice(2) : cmd;
-  if (path29.posix.isAbsolute(bare)) {
+  if (path30.posix.isAbsolute(bare)) {
     const early = _classifyPath(bare, cwd);
     if (early.trustLevel === "suspect") {
       return { resolvedPath: bare, ...early };
@@ -21752,11 +21835,11 @@ var init_provenance2 = __esm({
     SYSTEM_PREFIXES = ["/usr/bin", "/usr/sbin", "/bin", "/sbin"];
     MANAGED_PREFIXES = ["/usr/local/bin", "/opt/homebrew", "/home/linuxbrew", "/nix/store"];
     USER_PREFIXES = [
-      path29.join(os20.homedir(), "bin"),
-      path29.join(os20.homedir(), ".local", "bin"),
-      path29.join(os20.homedir(), ".cargo", "bin"),
-      path29.join(os20.homedir(), ".npm-global", "bin"),
-      path29.join(os20.homedir(), ".volta", "bin")
+      path30.join(os20.homedir(), "bin"),
+      path30.join(os20.homedir(), ".local", "bin"),
+      path30.join(os20.homedir(), ".cargo", "bin"),
+      path30.join(os20.homedir(), ".npm-global", "bin"),
+      path30.join(os20.homedir(), ".volta", "bin")
     ];
     SUSPECT_PREFIXES = ["/tmp", "/var/tmp", "/dev/shm"];
   }
@@ -21811,7 +21894,7 @@ var init_policy = __esm({
 
 // src/auth/state.ts
 import fs28 from "fs";
-import path30 from "path";
+import path31 from "path";
 import os21 from "os";
 function extractCommandPattern(toolName, args) {
   const lower2 = toolName.toLowerCase();
@@ -21889,7 +21972,7 @@ function writeTrustSession(toolName, durationMs, args) {
 }
 function getPersistentDecision(toolName) {
   try {
-    const file2 = path30.join(os21.homedir(), ".node9", "decisions.json");
+    const file2 = path31.join(os21.homedir(), ".node9", "decisions.json");
     if (!fs28.existsSync(file2)) return null;
     const decisions = JSON.parse(fs28.readFileSync(file2, "utf-8"));
     const d = decisions[toolName];
@@ -21905,8 +21988,8 @@ var init_state2 = __esm({
     init_policy();
     init_atomic_write();
     init_forecast_context();
-    PAUSED_FILE = path30.join(os21.homedir(), ".node9", "PAUSED");
-    TRUST_FILE = path30.join(os21.homedir(), ".node9", "trust.json");
+    PAUSED_FILE = path31.join(os21.homedir(), ".node9", "PAUSED");
+    TRUST_FILE = path31.join(os21.homedir(), ".node9", "trust.json");
   }
 });
 
@@ -21957,7 +22040,7 @@ var init_read_capped = __esm({
 // src/auth/cloud.ts
 import fs30 from "fs";
 import os22 from "os";
-import path31 from "path";
+import path32 from "path";
 function maskArgsForCloud(args) {
   if (args === void 0 || args === null) return args;
   try {
@@ -21990,7 +22073,7 @@ async function initNode9SaaS(toolName, args, creds, meta, riskMetadata, agentPol
   let ciContext;
   if (process.env.CI) {
     try {
-      const ciContextPath = path31.join(os22.homedir(), ".node9", "ci-context.json");
+      const ciContextPath = path32.join(os22.homedir(), ".node9", "ci-context.json");
       const ci = readCappedText(ciContextPath, 1e4);
       if (!ci) throw new Error("ci-context.json unreadable");
       if (ci.truncated) throw new Error("ci-context.json exceeds 10 KB");
@@ -22137,10 +22220,10 @@ var init_cloud = __esm({
 
 // src/loop-detector.ts
 import fs31 from "fs";
-import path32 from "path";
+import path33 from "path";
 import os23 from "os";
 function loopStateFile() {
-  return path32.join(os23.homedir(), ".node9", "loop-state.json");
+  return path33.join(os23.homedir(), ".node9", "loop-state.json");
 }
 function readState() {
   try {
@@ -22154,7 +22237,7 @@ function readState() {
   }
 }
 function writeState(records) {
-  const dir2 = path32.dirname(loopStateFile());
+  const dir2 = path33.dirname(loopStateFile());
   if (!fs31.existsSync(dir2)) fs31.mkdirSync(dir2, { recursive: true });
   const tmpPath = `${loopStateFile()}.${os23.hostname()}.${process.pid}.tmp`;
   fs31.writeFileSync(tmpPath, JSON.stringify(records));
@@ -23954,17 +24037,17 @@ var init_forecast = __esm({
 
 // src/version.ts
 import fs32 from "fs";
-import path33 from "path";
+import path34 from "path";
 function readVersion() {
   let dir2 = __dirname;
   for (let i = 0; i < 5; i++) {
-    const p = path33.join(dir2, "package.json");
+    const p = path34.join(dir2, "package.json");
     try {
       const pkg = JSON.parse(fs32.readFileSync(p, "utf-8"));
       if (pkg.name === "@node9/proxy" && typeof pkg.version === "string") return pkg.version;
     } catch {
     }
-    const parent = path33.dirname(dir2);
+    const parent = path34.dirname(dir2);
     if (parent === dir2) break;
     dir2 = parent;
   }
@@ -23981,10 +24064,10 @@ var init_version = __esm({
 // src/cli/commands/scan-cache.ts
 import fs33 from "fs";
 import os25 from "os";
-import path34 from "path";
+import path35 from "path";
 import { createHash as createHash5 } from "crypto";
 function scanCacheRoot() {
-  return path34.join(os25.homedir(), ".node9", "scan-cache");
+  return path35.join(os25.homedir(), ".node9", "scan-cache");
 }
 function configHashOf(config) {
   const h = createHash5("sha256");
@@ -23992,7 +24075,7 @@ function configHashOf(config) {
   h.update(JSON.stringify(config.policySource));
   h.update(JSON.stringify(config.policy));
   for (const name of SIDECAR_FILES) {
-    const st = fileStamp(path34.join(os25.homedir(), ".node9", name));
+    const st = fileStamp(path35.join(os25.homedir(), ".node9", name));
     h.update(`|${name}:${st ? `${st.size}:${st.mtimeMs}` : "absent"}`);
   }
   return h.digest("hex").slice(0, 16);
@@ -24005,17 +24088,16 @@ function fileStamp(filePath) {
     return null;
   }
 }
-function windowKey(startDate) {
-  return startDate ? startDate.toISOString().slice(0, 10) : "all";
-}
-var SCAN_CACHE_VERSION, KEPT_WINDOWS, SIDECAR_FILES, ScanCache;
+var SCAN_CACHE_VERSION, FLUSH_EVERY_FILES, FLUSH_EVERY_MS, activeCaches, SIDECAR_FILES, ScanCache;
 var init_scan_cache = __esm({
   "src/cli/commands/scan-cache.ts"() {
     "use strict";
     init_dist();
     init_version();
-    SCAN_CACHE_VERSION = 1;
-    KEPT_WINDOWS = 3;
+    SCAN_CACHE_VERSION = 3;
+    FLUSH_EVERY_FILES = 25;
+    FLUSH_EVERY_MS = 1e4;
+    activeCaches = /* @__PURE__ */ new Set();
     SIDECAR_FILES = [
       "canaries.json",
       "shields.json",
@@ -24024,8 +24106,8 @@ var init_scan_cache = __esm({
       "trusted-hosts.json",
       "trusted-recipients.json",
       "rules-cache.json",
-      path34.join("osv", "npm", "meta.json"),
-      path34.join("osv", "PyPI", "meta.json")
+      path35.join("osv", "npm", "meta.json"),
+      path35.join("osv", "PyPI", "meta.json")
     ];
     ScanCache = class {
       root;
@@ -24035,10 +24117,13 @@ var init_scan_cache = __esm({
       /** Counters for the run, so a caller can say what was reused. */
       hits = 0;
       misses = 0;
+      pendingPuts = 0;
+      lastFlush = Date.now();
       constructor(opts) {
         this.root = opts.root ?? scanCacheRoot();
         this.enabled = opts.enabled ?? process.env.NODE9_SCAN_CACHE !== "0";
         this.index = this.load(opts.configHash);
+        activeCaches.add(this);
       }
       load(configHash) {
         const fresh = {
@@ -24051,7 +24136,7 @@ var init_scan_cache = __esm({
         if (!this.enabled) return fresh;
         try {
           const raw = JSON.parse(
-            fs33.readFileSync(path34.join(this.root, "index.json"), "utf8")
+            fs33.readFileSync(path35.join(this.root, "index.json"), "utf8")
           );
           if (raw.cacheVersion !== SCAN_CACHE_VERSION || raw.engineVersion !== CANONICAL_EXTRACTOR_VERSION || raw.proxyVersion !== PROXY_VERSION || raw.configHash !== configHash || typeof raw.files !== "object") {
             this.dropAll();
@@ -24068,15 +24153,19 @@ var init_scan_cache = __esm({
         } catch {
         }
       }
-      /** The cached result for an unchanged file in this window, judged under
+      /** The cached whole-file result for an unchanged file, judged under
        *  configurations that have not changed either, or null. */
-      get(filePath, stamp, window, hasher) {
+      get(filePath, stamp, hasher, judgeFrom = null) {
         if (!this.enabled) return null;
-        const e = this.index.files[`${filePath}|${window}`];
+        const e = this.index.files[filePath];
         if (!e || e.size !== stamp.size || e.mtimeMs !== stamp.mtimeMs) {
           this.misses++;
           return null;
         }
+        if (e.judgedFrom && (!judgeFrom || judgeFrom.getTime() < Date.parse(e.judgedFrom))) {
+          this.misses++;
+          return null;
+        }
         for (const [cwd, hash2] of Object.entries(e.configHashes ?? {})) {
           if (hasher && hasher.configHashFor(cwd) !== hash2) {
             this.misses++;
@@ -24084,67 +24173,78 @@ var init_scan_cache = __esm({
           }
         }
         try {
-          const r = JSON.parse(fs33.readFileSync(path34.join(this.root, e.result), "utf8"));
+          const stored = JSON.parse(fs33.readFileSync(path35.join(this.root, e.result), "utf8"));
+          if ((stored.judgedFrom ?? null) !== (e.judgedFrom ?? null) || !stored.result) {
+            this.misses++;
+            return null;
+          }
           this.hits++;
-          return r;
+          return stored.result;
         } catch {
           this.misses++;
           return null;
         }
       }
-      put(filePath, stamp, window, agent, result, hasher) {
+      put(filePath, stamp, agent, result, hasher, judgeFrom = null) {
         if (!this.enabled) return;
-        const name = createHash5("sha256").update(`${agent}|${filePath}|${window}`).digest("hex").slice(0, 40);
-        const rel = path34.join("files", name.slice(0, 2), `${name}.json`);
+        const name = createHash5("sha256").update(`${agent}|${filePath}`).digest("hex").slice(0, 40);
+        const rel = path35.join("files", name.slice(0, 2), `${name}.json`);
         const configHashes = {};
         if (hasher)
           for (const cwd of result.configCwds ?? []) configHashes[cwd] = hasher.configHashFor(cwd);
         try {
-          const abs = path34.join(this.root, rel);
-          fs33.mkdirSync(path34.dirname(abs), { recursive: true, mode: 448 });
-          fs33.writeFileSync(abs, JSON.stringify(result), { mode: 384 });
-          this.index.files[`${filePath}|${window}`] = {
+          const abs = path35.join(this.root, rel);
+          fs33.mkdirSync(path35.dirname(abs), { recursive: true, mode: 448 });
+          fs33.writeFileSync(
+            abs,
+            JSON.stringify({ judgedFrom: judgeFrom ? judgeFrom.toISOString() : null, result }),
+            { mode: 384 }
+          );
+          this.index.files[filePath] = {
             ...stamp,
-            window,
             agent,
             result: rel,
             configHashes,
-            at: Date.now()
+            at: Date.now(),
+            ...judgeFrom && { judgedFrom: judgeFrom.toISOString() }
           };
           this.dirty = true;
+          this.pendingPuts++;
+          if (this.pendingPuts >= FLUSH_EVERY_FILES || Date.now() - this.lastFlush > FLUSH_EVERY_MS)
+            this.flush();
         } catch {
         }
       }
-      /** Drop the entries and files of every window but the most recent few: a
-       *  daily `--days 30` moves the window every day and would otherwise leave
-       *  one orphan set per day. */
+      /** Drop the entries of transcripts that no longer exist, and their files. */
       prune() {
-        const byWindow = /* @__PURE__ */ new Map();
-        for (const e of Object.values(this.index.files))
-          byWindow.set(e.window, Math.max(byWindow.get(e.window) ?? 0, e.at ?? 0));
-        const keep = new Set(
-          [...byWindow.entries()].sort((a, b) => b[1] - a[1]).slice(0, KEPT_WINDOWS).map(([w]) => w)
-        );
         for (const [key, e] of Object.entries(this.index.files)) {
-          if (keep.has(e.window)) continue;
+          if (fs33.existsSync(key)) continue;
           try {
-            fs33.rmSync(path34.join(this.root, e.result), { force: true });
+            fs33.rmSync(path35.join(this.root, e.result), { force: true });
           } catch {
           }
           delete this.index.files[key];
           this.dirty = true;
         }
       }
-      /** Write the index once per run. */
+      /** The final flush of a run: the cache leaves the interrupt registry, so a
+       *  long-lived daemon does not keep every index it ever opened. */
+      close() {
+        this.flush();
+        activeCaches.delete(this);
+      }
+      /** Write the index: every few files, on an interrupt, and at the end. */
       flush() {
         if (!this.enabled) return;
-        this.prune();
+        if (this.pendingPuts === 0) this.prune();
+        this.pendingPuts = 0;
+        this.lastFlush = Date.now();
         if (!this.dirty) return;
         try {
           fs33.mkdirSync(this.root, { recursive: true, mode: 448 });
-          const tmp = path34.join(this.root, `index.${process.pid}.tmp`);
+          const tmp = path35.join(this.root, `index.${process.pid}.tmp`);
           fs33.writeFileSync(tmp, JSON.stringify(this.index), { mode: 384 });
-          fs33.renameSync(tmp, path34.join(this.root, "index.json"));
+          fs33.renameSync(tmp, path35.join(this.root, "index.json"));
           this.dirty = false;
         } catch {
         }
@@ -24156,7 +24256,7 @@ var init_scan_cache = __esm({
 // src/cli/commands/scan-judge.ts
 import fs34 from "fs";
 import os26 from "os";
-import path35 from "path";
+import path36 from "path";
 function findingDedupKey(f) {
   return `${f.source.rule.name ?? "<unnamed>"}|${preview(f.input)}|${f.project}|${f.repo ?? ""}`;
 }
@@ -24234,6 +24334,7 @@ var init_scan_judge = __esm({
     init_roles();
     init_scan_cache();
     init_dlp();
+    init_scan();
     PREVIEW_LEN = 120;
     HistoryJudge = class {
       configs = /* @__PURE__ */ new Map();
@@ -24254,20 +24355,20 @@ var init_scan_judge = __esm({
        *  file, so worktrees count), home-relative; undefined when none. Cached per
        *  directory: history repeats the same few cwds thousands of times. */
       repoOf(cwd) {
-        if (!cwd || !path35.isAbsolute(cwd)) return void 0;
+        if (!cwd || !path36.isAbsolute(cwd)) return void 0;
         if (this.repos.has(cwd)) return this.repos.get(cwd);
         let dir2 = cwd;
         let found;
         for (; ; ) {
           try {
-            if (fs34.existsSync(path35.join(dir2, ".git"))) {
+            if (fs34.existsSync(path36.join(dir2, ".git"))) {
               found = dir2;
               break;
             }
           } catch {
             break;
           }
-          const parent = path35.dirname(dir2);
+          const parent = path36.dirname(dir2);
           if (parent === dir2) break;
           dir2 = parent;
         }
@@ -24346,7 +24447,7 @@ var init_scan_judge = __esm({
             agent: call.agent,
             ...where
           };
-          const k = `${finding.patternName}|${finding.redactedSample}|${call.project}`;
+          const k = `${finding.patternName}|${finding.redactedSample}|${call.project}|${dayKey(call.timestamp || void 0)}`;
           if (!dedup.dlpKeys.has(k)) {
             dedup.dlpKeys.add(k);
             result.dlpFindings.push(finding);
@@ -24356,7 +24457,7 @@ var init_scan_judge = __esm({
           const m = scanArgs(call.scrubbed);
           if (m) {
             dlpMatched = true;
-            const k = `${m.patternName}|${m.redactedSample}|${call.project}`;
+            const k = `${m.patternName}|${m.redactedSample}|${call.project}|${dayKey(call.timestamp || void 0)}`;
             if (!dedup.dlpKeys.has(k)) {
               dedup.dlpKeys.add(k);
               result.dlpFindings.push({
@@ -24374,7 +24475,7 @@ var init_scan_judge = __esm({
         }
         if (verdict.decision !== "allow" && verdict.layer !== "dlp" && verdict.layer !== "canary") {
           const source = ruleSourceFor(verdict, call.toolName, config);
-          const k = `${source.rule.name ?? "<unnamed>"}|${preview(call.input)}|${call.project}|${repo ?? ""}`;
+          const k = `${source.rule.name ?? "<unnamed>"}|${preview(call.input)}|${call.project}|${repo ?? ""}|${dayKey(call.timestamp || void 0)}`;
           if (!dedup.findingsKeys.has(k)) {
             dedup.findingsKeys.add(k);
             result.findings.push({
@@ -24434,7 +24535,7 @@ var init_scan_summary = __esm({
 
 // src/agent-wiring.ts
 import fs35 from "fs";
-import path36 from "path";
+import path37 from "path";
 import * as yaml from "yaml";
 import { parse as parseToml } from "smol-toml";
 var exists, ck, lg, AGENT_SPECS;
@@ -24456,55 +24557,55 @@ var init_agent_wiring = __esm({
         id: "claude",
         label: "Claude Code",
         setupCommand: "node9 agents add claude",
-        hookFile: (h) => path36.join(h, ".claude", "settings.json"),
+        hookFile: (h) => path37.join(h, ".claude", "settings.json"),
         hookFormat: "matcher",
         // UserPromptSubmit is prompt DLP. setup.ts has written it for Claude since
         // that shipped; the spec must name it too, or status/doctor never show the
         // row and heal (which repairs via setupAgent) has no signal it is missing.
         hookEvents: [ck("PreToolUse"), lg("PostToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path36.join(h, ".claude.json"),
-        present: (h) => exists(path36.join(h, ".claude", "settings.json")) || exists(path36.join(h, ".claude.json"))
+        mcpFile: (h) => path37.join(h, ".claude.json"),
+        present: (h) => exists(path37.join(h, ".claude", "settings.json")) || exists(path37.join(h, ".claude.json"))
       },
       {
         id: "gemini",
         label: "Gemini CLI",
         setupCommand: "node9 agents add gemini",
-        hookFile: (h) => path36.join(h, ".gemini", "settings.json"),
+        hookFile: (h) => path37.join(h, ".gemini", "settings.json"),
         hookFormat: "matcher",
         hookEvents: [ck("BeforeTool"), lg("AfterTool")],
-        mcpFile: (h) => path36.join(h, ".gemini", "settings.json"),
-        present: (h) => exists(path36.join(h, ".gemini", "settings.json"))
+        mcpFile: (h) => path37.join(h, ".gemini", "settings.json"),
+        present: (h) => exists(path37.join(h, ".gemini", "settings.json"))
       },
       {
         id: "codex",
         label: "Codex",
         setupCommand: "node9 agents add codex",
-        hookFile: (h) => path36.join(h, ".codex", "hooks.json"),
+        hookFile: (h) => path37.join(h, ".codex", "hooks.json"),
         hookFormat: "matcher",
         hookEvents: [ck("PreToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path36.join(h, ".codex", "config.toml"),
+        mcpFile: (h) => path37.join(h, ".codex", "config.toml"),
         mcpFormat: "toml",
-        present: (h) => exists(path36.join(h, ".codex"))
+        present: (h) => exists(path37.join(h, ".codex"))
       },
       {
         id: "antigravity",
         label: "Antigravity",
         setupCommand: "node9 agents add antigravity",
-        hookFile: (h) => path36.join(h, ".gemini", "config", "hooks.json"),
+        hookFile: (h) => path37.join(h, ".gemini", "config", "hooks.json"),
         hookFormat: "matcher",
         hookEvents: [ck("PreToolUse"), lg("PostToolUse")],
-        mcpFile: (h) => path36.join(h, ".gemini", "config", "mcp_config.json"),
-        present: (h) => exists(path36.join(h, ".gemini", "config", "hooks.json")) || exists(path36.join(h, ".gemini", "antigravity-cli")) || exists(path36.join(h, ".gemini", "antigravity-ide"))
+        mcpFile: (h) => path37.join(h, ".gemini", "config", "mcp_config.json"),
+        present: (h) => exists(path37.join(h, ".gemini", "config", "hooks.json")) || exists(path37.join(h, ".gemini", "antigravity-cli")) || exists(path37.join(h, ".gemini", "antigravity-ide"))
       },
       {
         id: "copilot",
         label: "GitHub Copilot",
         setupCommand: "node9 agents add copilot",
-        hookFile: (h) => path36.join(h, ".copilot", "hooks", "node9.json"),
+        hookFile: (h) => path37.join(h, ".copilot", "hooks", "node9.json"),
         hookFormat: "flat",
         hookEvents: [ck("PreToolUse"), lg("PostToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path36.join(h, ".copilot", "mcp-config.json"),
-        present: (h) => exists(path36.join(h, ".copilot"))
+        mcpFile: (h) => path37.join(h, ".copilot", "mcp-config.json"),
+        present: (h) => exists(path37.join(h, ".copilot"))
       },
       {
         id: "cursor",
@@ -24513,8 +24614,8 @@ var init_agent_wiring = __esm({
         // MCP-only — no hook file (see note above).
         hookFormat: "flat",
         hookEvents: [],
-        mcpFile: (h) => path36.join(h, ".cursor", "mcp.json"),
-        present: (h) => exists(path36.join(h, ".cursor", "mcp.json"))
+        mcpFile: (h) => path37.join(h, ".cursor", "mcp.json"),
+        present: (h) => exists(path37.join(h, ".cursor", "mcp.json"))
       },
       {
         id: "hermes",
@@ -24535,8 +24636,8 @@ var init_agent_wiring = __esm({
         setupCommand: "node9 agents add opencode",
         hookFormat: "flat",
         hookEvents: [],
-        shimFile: (h) => path36.join(opencodeConfigDir(h), "plugins", "node9.js"),
-        present: (h) => exists(opencodeConfigDir(h)) || exists(path36.join(opencodeConfigDir(h), "plugins", "node9.js"))
+        shimFile: (h) => path37.join(opencodeConfigDir(h), "plugins", "node9.js"),
+        present: (h) => exists(opencodeConfigDir(h)) || exists(path37.join(opencodeConfigDir(h), "plugins", "node9.js"))
       },
       {
         id: "pi",
@@ -24544,8 +24645,8 @@ var init_agent_wiring = __esm({
         setupCommand: "node9 agents add pi",
         hookFormat: "flat",
         hookEvents: [],
-        shimFile: (h) => path36.join(h, ".pi", "agent", "extensions", "node9.js"),
-        present: (h) => exists(path36.join(h, ".pi", "agent")) || exists(path36.join(h, ".pi", "agent", "extensions", "node9.js"))
+        shimFile: (h) => path37.join(h, ".pi", "agent", "extensions", "node9.js"),
+        present: (h) => exists(path37.join(h, ".pi", "agent")) || exists(path37.join(h, ".pi", "agent", "extensions", "node9.js"))
       }
     ];
   }
@@ -24596,14 +24697,14 @@ var init_codex_trust = __esm({
 });
 
 // src/daemon/hook-baseline.ts
-import path37 from "path";
+import path38 from "path";
 import os27 from "os";
 var BASELINE_FILE, NOTIFIED_FILE;
 var init_hook_baseline = __esm({
   "src/daemon/hook-baseline.ts"() {
     "use strict";
-    BASELINE_FILE = path37.join(os27.homedir(), ".node9", "hooks-baseline.json");
-    NOTIFIED_FILE = path37.join(os27.homedir(), ".node9", "hook-heal-notified.json");
+    BASELINE_FILE = path38.join(os27.homedir(), ".node9", "hooks-baseline.json");
+    NOTIFIED_FILE = path38.join(os27.homedir(), ".node9", "hook-heal-notified.json");
   }
 });
 
@@ -24622,7 +24723,7 @@ var init_setup_pi_shim = __esm({
 });
 
 // src/setup.ts
-import path38 from "path";
+import path39 from "path";
 import os28 from "os";
 import chalk3 from "chalk";
 import { confirm as rawConfirm } from "@inquirer/prompts";
@@ -24630,16 +24731,16 @@ import { parse as parseToml5, stringify as stringifyToml2 } from "smol-toml";
 import * as yaml2 from "yaml";
 function opencodeConfigDir(home = os28.homedir()) {
   const xdg = process.env.XDG_CONFIG_HOME;
-  const base2 = xdg && path38.isAbsolute(xdg) ? xdg : path38.join(home, ".config");
-  return path38.join(base2, "opencode");
+  const base2 = xdg && path39.isAbsolute(xdg) ? xdg : path39.join(home, ".config");
+  return path39.join(base2, "opencode");
 }
 function hermesHomeDir(homeDir = os28.homedir()) {
   const env = process.env.HERMES_HOME?.trim();
-  if (env && path38.isAbsolute(env)) return env;
-  return path38.join(homeDir, ".hermes");
+  if (env && path39.isAbsolute(env)) return env;
+  return path39.join(homeDir, ".hermes");
 }
 function hermesConfigPath(homeDir = os28.homedir()) {
-  return path38.join(hermesHomeDir(homeDir), HERMES_CONFIG_FILENAME);
+  return path39.join(hermesHomeDir(homeDir), HERMES_CONFIG_FILENAME);
 }
 var HERMES_CONFIG_FILENAME;
 var init_setup = __esm({
@@ -24685,15 +24786,66 @@ var init_scan_history = __esm({
 // src/cli/commands/scan.ts
 import chalk5 from "chalk";
 import fs36 from "fs";
-import path39 from "path";
+import path40 from "path";
 import os29 from "os";
 import stringWidth2 from "string-width";
-function countMcpCall(result, toolName) {
+function dayKey(ts) {
+  if (!ts) return "unknown";
+  if (typeof ts === "string" && /^\d{4}-\d{2}-\d{2}$/.test(ts)) return ts;
+  const d = typeof ts === "string" ? new Date(ts) : ts;
+  if (Number.isNaN(d.getTime())) return "unknown";
+  const m = String(d.getMonth() + 1).padStart(2, "0");
+  const day = String(d.getDate()).padStart(2, "0");
+  return `${d.getFullYear()}-${m}-${day}`;
+}
+function dayOf(result, ts, event = true) {
+  result.days ??= {};
+  const key = dayKey(ts);
+  let d = result.days[key];
+  if (!d) {
+    d = {
+      events: 0,
+      toolCalls: 0,
+      bashCalls: 0,
+      mcpCalls: 0,
+      mcpByServer: {},
+      costUSD: 0,
+      unknownInputs: {}
+    };
+    result.days[key] = d;
+  }
+  if (!event) return d;
+  d.events++;
+  if (ts) {
+    if (!d.first || ts < d.first) d.first = ts;
+    if (!d.last || ts > d.last) d.last = ts;
+  }
+  return d;
+}
+function addUnknown(day, unknown) {
+  for (const u of unknown) day.unknownInputs[u] = (day.unknownInputs[u] ?? 0) + 1;
+}
+function countMcpCall(result, toolName, day) {
   const m = /^mcp__(.+?)__/.exec(toolName);
   if (!m) return;
   result.mcpCalls = (result.mcpCalls ?? 0) + 1;
   result.mcpByServer ??= {};
   result.mcpByServer[m[1]] = (result.mcpByServer[m[1]] ?? 0) + 1;
+  if (day) {
+    day.mcpCalls++;
+    day.mcpByServer[m[1]] = (day.mcpByServer[m[1]] ?? 0) + 1;
+  }
+}
+function judgeFromFor(startDate) {
+  return startDate ? new Date(startDate.getTime() - STATE_LOOKBACK_MS) : null;
+}
+function beforeJudged(judgeFrom, ts) {
+  if (!judgeFrom || !ts) return false;
+  const t = Date.parse(ts);
+  return Number.isFinite(t) && t < judgeFrom.getTime();
+}
+function fileMayHoldWindow(stamp, startDate) {
+  return !startDate || !stamp || stamp.mtimeMs >= startDate.getTime();
 }
 function claudeModelPrice2(model) {
   const t = pricingFor(model);
@@ -24722,8 +24874,8 @@ function preview2(input, max) {
 function emptyScanDedup() {
   return { findingsKeys: /* @__PURE__ */ new Set(), dlpKeys: /* @__PURE__ */ new Set(), canaryIndex: /* @__PURE__ */ new Map() };
 }
-function dlpKey(patternName, redactedSample, projLabel) {
-  return `${patternName}|${redactedSample}|${projLabel}`;
+function dlpKey(patternName, redactedSample, projLabel, timestamp2) {
+  return `${patternName}|${redactedSample}|${projLabel}|${dayKey(timestamp2 || void 0)}`;
 }
 function safeCanaryScanValues() {
   try {
@@ -24742,7 +24894,7 @@ function recordCanaries(scanned, toolName, timestamp2, projLabel, sessionId, age
     const v = pool.find((x) => x.id === hit.id);
     if (v) matched.push(v.value);
     pool = pool.filter((x) => x.id !== hit.id);
-    const key = `canary|${hit.id}|${sessionId}|${agent}`;
+    const key = `canary|${hit.id}|${sessionId}|${agent}|${dayKey(timestamp2 || void 0)}`;
     const existing = dedup.canaryIndex.get(key);
     if (existing) {
       existing.count++;
@@ -24843,13 +24995,12 @@ function geminiChatFiles(chatsDir) {
     return true;
   });
 }
-async function processClaudeFile(file2, projPath, projLabel, judge, startDate, result, dedup, canaryVals, onLine) {
-  let sessionCounted = false;
+async function processClaudeFile(file2, projPath, projLabel, judge, judgeFrom, result, dedup, canaryVals, onLine) {
   const sessionId = sessionIdOf(file2);
   const session = { sessionId, costUSD: 0, toolCalls: 0 };
   let raw;
   try {
-    raw = fs36.readFileSync(path39.join(projPath, file2), "utf-8");
+    raw = fs36.readFileSync(path40.join(projPath, file2), "utf-8");
   } catch {
     return false;
   }
@@ -24868,13 +25019,9 @@ async function processClaudeFile(file2, projPath, projLabel, judge, startDate, r
       continue;
     }
     if (entry.type !== "assistant" && entry.type !== "user") continue;
-    if (startDate && entry.timestamp) {
-      if (new Date(entry.timestamp) < startDate) continue;
-    }
-    if (!sessionCounted) {
-      sessionCounted = true;
-      result.sessions++;
-    }
+    if (beforeJudged(judgeFrom, entry.timestamp)) continue;
+    const day = dayOf(result, entry.timestamp);
+    if (result.sessions === 0) result.sessions = 1;
     if (entry.timestamp) {
       if (!result.firstDate || entry.timestamp < result.firstDate)
         result.firstDate = entry.timestamp;
@@ -24898,7 +25045,12 @@ async function processClaudeFile(file2, projPath, projLabel, judge, startDate, r
           );
           const dlpMatch = scanArgs(scrubDecoys({ text }, decoysHere0));
           if (dlpMatch) {
-            const k = dlpKey(dlpMatch.patternName, dlpMatch.redactedSample, projLabel);
+            const k = dlpKey(
+              dlpMatch.patternName,
+              dlpMatch.redactedSample,
+              projLabel,
+              entry.timestamp ?? ""
+            );
             if (!dedup.dlpKeys.has(k)) {
               dedup.dlpKeys.add(k);
               result.dlpFindings.push({
@@ -24917,7 +25069,7 @@ async function processClaudeFile(file2, projPath, projLabel, judge, startDate, r
           if (block.type !== "tool_result") continue;
           const filePath = block.tool_use_id ? toolUseFilePaths.get(block.tool_use_id) : void 0;
           if (filePath) {
-            const ext = path39.extname(filePath).toLowerCase();
+            const ext = path40.extname(filePath).toLowerCase();
             if (CODE_EXTENSIONS.has(ext)) continue;
           }
           const resultText = typeof block.content === "string" ? block.content : Array.isArray(block.content) ? block.content.map((c) => c.text ?? "").join("\n") : null;
@@ -24941,7 +25093,12 @@ async function processClaudeFile(file2, projPath, projLabel, judge, startDate, r
           if (dlpMatch) {
             if (firstDlpTs === null) firstDlpTs = entry.timestamp ?? null;
             judge.noteOutputSecret(sessionId, dlpMatch.patternName, entry.timestamp ?? "");
-            const k = dlpKey(dlpMatch.patternName, dlpMatch.redactedSample, projLabel);
+            const k = dlpKey(
+              dlpMatch.patternName,
+              dlpMatch.redactedSample,
+              projLabel,
+              entry.timestamp ?? ""
+            );
             if (!dedup.dlpKeys.has(k)) {
               dedup.dlpKeys.add(k);
               result.dlpFindings.push({
@@ -24967,6 +25124,7 @@ async function processClaudeFile(file2, projPath, projLabel, judge, startDate, r
         const rowCost = (usage2.input_tokens ?? 0) * p.i + (usage2.output_tokens ?? 0) * p.o + (usage2.cache_creation_input_tokens ?? 0) * p.cw + (usage2.cache_read_input_tokens ?? 0) * p.cr;
         result.totalCostUSD += rowCost;
         session.costUSD += rowCost;
+        day.costUSD += rowCost;
       }
     }
     const content = entry.message?.content;
@@ -24975,8 +25133,9 @@ async function processClaudeFile(file2, projPath, projLabel, judge, startDate, r
       if (block.type !== "tool_use") continue;
       result.totalToolCalls++;
       session.toolCalls++;
+      day.toolCalls++;
       const toolName = block.name ?? "";
-      countMcpCall(result, toolName);
+      countMcpCall(result, toolName, day);
       const toolNameLower = toolName.toLowerCase();
       const input = block.input ?? {};
       if (block.id && typeof input.file_path === "string") {
@@ -24986,6 +25145,7 @@ async function processClaudeFile(file2, projPath, projLabel, judge, startDate, r
       sessionCalls.push({ toolName, input, timestamp: entry.timestamp ?? "" });
       if (toolNameLower === "bash" || toolNameLower === "execute_bash") {
         result.bashCalls++;
+        day.bashCalls++;
       }
       if (firstEditTs === null && (toolNameLower === "edit" || toolNameLower === "write" || toolNameLower === "write_file" || toolNameLower === "edit_file" || toolNameLower === "multiedit")) {
         firstEditTs = entry.timestamp ?? null;
@@ -25017,6 +25177,7 @@ async function processClaudeFile(file2, projPath, projLabel, judge, startDate, r
         result,
         dedup
       );
+      addUnknown(day, judged.verdict.unknown);
       if (judged.dlpMatched && firstDlpTs === null) firstDlpTs = entry.timestamp ?? null;
     }
   }
@@ -25027,8 +25188,8 @@ async function processClaudeFile(file2, projPath, projLabel, judge, startDate, r
   result.perSession.push(session);
   return true;
 }
-async function processClaudeProjectAsync(proj, projectsDir, judge, cache4, window, startDate, result, dedup, canaryVals, onProgress, onLine) {
-  const projPath = path39.join(projectsDir, proj);
+async function processClaudeProjectAsync(proj, projectsDir, judge, cache4, startDate, result, dedup, canaryVals, onProgress, onLine) {
+  const projPath = path40.join(projectsDir, proj);
   try {
     if (!fs36.statSync(projPath).isDirectory()) return;
   } catch {
@@ -25042,13 +25203,15 @@ async function processClaudeProjectAsync(proj, projectsDir, judge, cache4, windo
     return;
   }
   for (const file2 of files) {
-    const filePath = path39.join(projPath, file2);
+    const filePath = path40.join(projPath, file2);
+    const stamp = fileStamp(filePath);
+    if (!fileMayHoldWindow(stamp, startDate)) continue;
     result.filesScanned++;
     onProgress?.(result.filesScanned);
-    const stamp = fileStamp(filePath);
-    const cached = stamp ? cache4.get(filePath, stamp, window, judge) : null;
+    const judgeFrom = judgeFromFor(startDate);
+    const cached = stamp ? cache4.get(filePath, stamp, judge, judgeFrom) : null;
     if (cached) {
-      mergeFileScan(result, cached, dedup);
+      mergeFileScan(result, cached, dedup, startDate);
       continue;
     }
     const fileResult = emptyScan();
@@ -25058,14 +25221,15 @@ async function processClaudeProjectAsync(proj, projectsDir, judge, cache4, windo
       projPath,
       projLabel,
       judge,
-      startDate,
+      judgeFrom,
       fileResult,
       fileDedup,
       canaryVals,
       onLine
     );
-    if (read2 && stamp) cache4.put(filePath, stamp, window, "claude", fileResult, judge);
-    mergeFileScan(result, fileResult, dedup);
+    if (read2 && stamp) cache4.put(filePath, stamp, "claude", fileResult, judge, judgeFrom);
+    mergeFileScan(result, fileResult, dedup, startDate);
+    await yieldTick();
     await yieldTick();
   }
 }
@@ -25104,40 +25268,71 @@ function openScanCache(judge, opts) {
     enabled: opts.cache !== false && process.env.NODE9_SCAN_CACHE !== "0"
   });
 }
-function mergeFileScan(result, file2, dedup) {
-  result.sessions += file2.sessions;
-  result.totalToolCalls += file2.totalToolCalls;
-  result.bashCalls += file2.bashCalls;
-  result.totalCostUSD += file2.totalCostUSD;
-  result.sessionsWithEarlySecrets += file2.sessionsWithEarlySecrets;
-  result.perSession.push(...file2.perSession);
-  result.loopFindings.push(...file2.loopFindings);
-  if (file2.firstDate && (!result.firstDate || file2.firstDate < result.firstDate))
-    result.firstDate = file2.firstDate;
-  if (file2.lastDate && (!result.lastDate || file2.lastDate > result.lastDate))
-    result.lastDate = file2.lastDate;
-  if (file2.mcpCalls) result.mcpCalls = (result.mcpCalls ?? 0) + file2.mcpCalls;
-  for (const [server, n] of Object.entries(file2.mcpByServer ?? {})) {
-    result.mcpByServer ??= {};
-    result.mcpByServer[server] = (result.mcpByServer[server] ?? 0) + n;
-  }
-  for (const [what, n] of Object.entries(file2.unknownInputs ?? {})) {
-    result.unknownInputs ??= {};
-    result.unknownInputs[what] = (result.unknownInputs[what] ?? 0) + n;
+function mergeFileScan(result, file2, dedup, startDate = null) {
+  const startKey = startDate ? dayKey(startDate) : null;
+  const dayIn = (key) => !startKey || key === "unknown" || key >= startKey;
+  const tsIn = (ts) => dayIn(dayKey(ts || void 0));
+  const days = Object.entries(file2.days ?? {}).filter(([k]) => dayIn(k));
+  const inWindow = !startKey || days.some(([, d]) => d.events > 0 || d.toolCalls > 0);
+  if (!startKey) {
+    result.sessions += file2.sessions;
+    result.totalToolCalls += file2.totalToolCalls;
+    result.bashCalls += file2.bashCalls;
+    result.totalCostUSD += file2.totalCostUSD;
+    result.sessionsWithEarlySecrets += file2.sessionsWithEarlySecrets;
+    if (file2.firstDate && (!result.firstDate || file2.firstDate < result.firstDate))
+      result.firstDate = file2.firstDate;
+    if (file2.lastDate && (!result.lastDate || file2.lastDate > result.lastDate))
+      result.lastDate = file2.lastDate;
+    if (file2.mcpCalls) result.mcpCalls = (result.mcpCalls ?? 0) + file2.mcpCalls;
+    for (const [server, n] of Object.entries(file2.mcpByServer ?? {})) {
+      result.mcpByServer ??= {};
+      result.mcpByServer[server] = (result.mcpByServer[server] ?? 0) + n;
+    }
+    for (const [what, n] of Object.entries(file2.unknownInputs ?? {})) {
+      result.unknownInputs ??= {};
+      result.unknownInputs[what] = (result.unknownInputs[what] ?? 0) + n;
+    }
+  } else {
+    if (inWindow) {
+      result.sessions += Math.min(1, file2.sessions);
+      result.sessionsWithEarlySecrets += file2.sessionsWithEarlySecrets;
+    }
+    for (const [, d] of days) {
+      result.totalToolCalls += d.toolCalls;
+      result.bashCalls += d.bashCalls;
+      result.totalCostUSD += d.costUSD;
+      if (d.mcpCalls) result.mcpCalls = (result.mcpCalls ?? 0) + d.mcpCalls;
+      for (const [server, n] of Object.entries(d.mcpByServer)) {
+        result.mcpByServer ??= {};
+        result.mcpByServer[server] = (result.mcpByServer[server] ?? 0) + n;
+      }
+      for (const [what, n] of Object.entries(d.unknownInputs)) {
+        result.unknownInputs ??= {};
+        result.unknownInputs[what] = (result.unknownInputs[what] ?? 0) + n;
+      }
+      if (d.first && (!result.firstDate || d.first < result.firstDate)) result.firstDate = d.first;
+      if (d.last && (!result.lastDate || d.last > result.lastDate)) result.lastDate = d.last;
+    }
   }
+  if (inWindow) result.perSession.push(...file2.perSession);
+  result.loopFindings.push(...file2.loopFindings.filter((l) => tsIn(l.timestamp)));
   for (const f of file2.findings) {
+    if (!tsIn(f.timestamp)) continue;
     const k = findingDedupKey(f);
     if (dedup.findingsKeys.has(k)) continue;
     dedup.findingsKeys.add(k);
     result.findings.push(f);
   }
   for (const d of file2.dlpFindings) {
+    if (!tsIn(d.timestamp)) continue;
     const k = dlpDedupKey(d);
     if (dedup.dlpKeys.has(k)) continue;
     dedup.dlpKeys.add(k);
     result.dlpFindings.push(d);
   }
   for (const c of file2.canaryFindings) {
+    if (!tsIn(c.timestamp)) continue;
     const k = `canary|${c.canaryId}|${c.sessionId}|${c.agent}`;
     const existing = dedup.canaryIndex.get(k);
     if (existing) {
@@ -25151,7 +25346,7 @@ function mergeFileScan(result, file2, dedup) {
   }
 }
 async function scanClaudeHistoryAsync(startDate, onProgress, onLine, opts = {}) {
-  const projectsDir = path39.join(os29.homedir(), ".claude", "projects");
+  const projectsDir = path40.join(os29.homedir(), ".claude", "projects");
   const result = emptyClaudeScan();
   if (!fs36.existsSync(projectsDir)) return result;
   let projDirs;
@@ -25162,7 +25357,6 @@ async function scanClaudeHistoryAsync(startDate, onProgress, onLine, opts = {})
   }
   const judge = new HistoryJudge();
   const cache4 = openScanCache(judge, opts);
-  const window = windowKey(startDate);
   const dedup = emptyScanDedup();
   const canaryVals = safeCanaryScanValues();
   for (const proj of projDirs) {
@@ -25171,7 +25365,6 @@ async function scanClaudeHistoryAsync(startDate, onProgress, onLine, opts = {})
       projectsDir,
       judge,
       cache4,
-      window,
       startDate,
       result,
       dedup,
@@ -25180,13 +25373,13 @@ async function scanClaudeHistoryAsync(startDate, onProgress, onLine, opts = {})
       onLine
     );
   }
-  cache4.flush();
+  cache4.close();
   result.policy = judge.policy(result.unknownInputs ?? {});
   return result;
 }
 async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
   const canaryVals = safeCanaryScanValues();
-  const tmpDir = path39.join(os29.homedir(), ".gemini", "tmp");
+  const tmpDir = path40.join(os29.homedir(), ".gemini", "tmp");
   const result = {
     filesScanned: 0,
     sessions: 0,
@@ -25212,9 +25405,8 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
   }
   const judge = new HistoryJudge();
   const cache4 = openScanCache(judge, opts);
-  const window = windowKey(startDate);
   for (const slug2 of slugDirs) {
-    const slugPath = path39.join(tmpDir, slug2);
+    const slugPath = path40.join(tmpDir, slug2);
     try {
       if (!fs36.statSync(slugPath).isDirectory()) continue;
     } catch {
@@ -25223,11 +25415,11 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
     let projLabel = stripTerminalEscapes(slug2).slice(0, 40);
     try {
       projLabel = stripTerminalEscapes(
-        fs36.readFileSync(path39.join(slugPath, ".project_root"), "utf-8").trim()
+        fs36.readFileSync(path40.join(slugPath, ".project_root"), "utf-8").trim()
       ).replace(os29.homedir(), "~").slice(0, 40);
     } catch {
     }
-    const chatsDir = path39.join(slugPath, "chats");
+    const chatsDir = path40.join(slugPath, "chats");
     if (!fs36.existsSync(chatsDir)) continue;
     let chatFiles;
     try {
@@ -25237,20 +25429,21 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
     }
     for (const chatFile of chatFiles) {
       const sessionId = chatFile.replace(/\.jsonl?$/, "");
+      const filePath = path40.join(chatsDir, chatFile);
+      const stamp = fileStamp(filePath);
+      if (!fileMayHoldWindow(stamp, startDate)) continue;
       result.filesScanned++;
       onProgress?.(result.filesScanned);
-      const filePath = path39.join(chatsDir, chatFile);
-      const stamp = fileStamp(filePath);
-      const cached = stamp ? cache4.get(filePath, stamp, window, judge) : null;
+      const cached = stamp ? cache4.get(filePath, stamp, judge, judgeFromFor(startDate)) : null;
       if (cached) {
-        mergeFileScan(result, cached, dedup);
+        mergeFileScan(result, cached, dedup, startDate);
         continue;
       }
       const fileResult = emptyScan();
       const fileDedup = emptyScanDedup();
       let raw;
       try {
-        raw = fs36.readFileSync(path39.join(chatsDir, chatFile), "utf-8");
+        raw = fs36.readFileSync(path40.join(chatsDir, chatFile), "utf-8");
       } catch {
         continue;
       }
@@ -25272,7 +25465,6 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
       } catch {
         continue;
       }
-      let sessionCounted = false;
       for (const msg of session.messages ?? []) {
         onLine?.();
         if (msg.type === "user") {
@@ -25292,7 +25484,12 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
             );
             const dlpMatch = scanArgs(scrubDecoys({ text }, decoysHere3));
             if (dlpMatch) {
-              const k = dlpKey(dlpMatch.patternName, dlpMatch.redactedSample, projLabel);
+              const k = dlpKey(
+                dlpMatch.patternName,
+                dlpMatch.redactedSample,
+                projLabel,
+                msg.timestamp ?? ""
+              );
               if (!fileDedup.dlpKeys.has(k)) {
                 fileDedup.dlpKeys.add(k);
                 fileResult.dlpFindings.push({
@@ -25310,11 +25507,9 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
           continue;
         }
         if (msg.type !== "gemini") continue;
-        if (startDate && msg.timestamp && new Date(msg.timestamp) < startDate) continue;
-        if (!sessionCounted) {
-          sessionCounted = true;
-          fileResult.sessions++;
-        }
+        if (beforeJudged(judgeFromFor(startDate), msg.timestamp)) continue;
+        const day = dayOf(fileResult, msg.timestamp);
+        if (fileResult.sessions === 0) fileResult.sessions = 1;
         if (msg.timestamp) {
           if (!fileResult.firstDate || msg.timestamp < fileResult.firstDate)
             fileResult.firstDate = msg.timestamp;
@@ -25327,18 +25522,22 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
           const p = geminiModelPrice(model);
           if (p) {
             const nonCached = Math.max(0, tokens.input - tokens.cached);
-            fileResult.totalCostUSD += nonCached * p.i + tokens.cached * p.cr + tokens.output * p.o;
+            const cost = nonCached * p.i + tokens.cached * p.cr + tokens.output * p.o;
+            fileResult.totalCostUSD += cost;
+            day.costUSD += cost;
           }
         }
         for (const tc of msg.toolCalls ?? []) {
           fileResult.totalToolCalls++;
+          day.toolCalls++;
           const toolName = tc.name ?? "";
-          countMcpCall(fileResult, toolName);
+          countMcpCall(fileResult, toolName, day);
           const toolNameLower = toolName.toLowerCase();
           const input = tc.args ?? {};
           sessionCalls.push({ toolName, input, timestamp: msg.timestamp ?? "" });
           if (toolNameLower === "run_shell_command" || toolNameLower === "shell") {
             fileResult.bashCalls++;
+            day.bashCalls++;
           }
           const rawCmd = String(input.command ?? "").trimStart();
           if (/^node9\s+(scan|explain|report|tail|dlp|status|sessions|audit)\b/.test(rawCmd))
@@ -25367,15 +25566,16 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
             fileResult,
             fileDedup
           );
-          void judged;
+          addUnknown(day, judged.verdict.unknown);
         }
       }
       fileResult.loopFindings.push(...detectLoops(sessionCalls, projLabel, sessionId, "gemini"));
-      if (stamp) cache4.put(filePath, stamp, window, "gemini", fileResult, judge);
-      mergeFileScan(result, fileResult, dedup);
+      if (stamp) cache4.put(filePath, stamp, "gemini", fileResult, judge, judgeFromFor(startDate));
+      mergeFileScan(result, fileResult, dedup, startDate);
+      await yieldTick();
     }
   }
-  cache4.flush();
+  cache4.close();
   result.policy = judge.policy(result.unknownInputs ?? {});
   return result;
 }
@@ -25400,14 +25600,14 @@ async function scanCodexHistory(startDate, onProgress, onLine, opts = {}) {
   const jsonlFiles = listCodexSessionFiles();
   const judge = new HistoryJudge();
   const cache4 = openScanCache(judge, opts);
-  const window = windowKey(startDate);
   for (const filePath of jsonlFiles) {
+    const stamp = fileStamp(filePath);
+    if (!fileMayHoldWindow(stamp, startDate)) continue;
     result.filesScanned++;
     onProgress?.(result.filesScanned);
-    const stamp = fileStamp(filePath);
-    const cached = stamp ? cache4.get(filePath, stamp, window, judge) : null;
+    const cached = stamp ? cache4.get(filePath, stamp, judge, judgeFromFor(startDate)) : null;
     if (cached) {
-      mergeFileScan(result, cached, dedup);
+      mergeFileScan(result, cached, dedup, startDate);
       continue;
     }
     const fileResult = emptyScan();
@@ -25422,7 +25622,6 @@ async function scanCodexHistory(startDate, onProgress, onLine, opts = {}) {
     let startTime = "";
     let projLabel = "";
     let sessionCwd;
-    let sessionCounted = false;
     const sessionCalls = [];
     for (const line of lines) {
       if (!line.trim()) continue;
@@ -25439,7 +25638,7 @@ async function scanCodexHistory(startDate, onProgress, onLine, opts = {}) {
         startTime = String(payload["timestamp"] ?? "");
         const cwd = String(payload["cwd"] ?? "");
         projLabel = stripTerminalEscapes(cwd.replace(os29.homedir(), "~")).slice(0, 40);
-        if (path39.isAbsolute(cwd)) sessionCwd = cwd;
+        if (path40.isAbsolute(cwd)) sessionCwd = cwd;
         continue;
       }
       if (entry.type === "event_msg" && payload["type"] === "user_message") {
@@ -25458,7 +25657,12 @@ async function scanCodexHistory(startDate, onProgress, onLine, opts = {}) {
           );
           const dlpMatch = scanArgs(scrubDecoys({ text }, decoysHere9));
           if (dlpMatch) {
-            const k = dlpKey(dlpMatch.patternName, dlpMatch.redactedSample, projLabel);
+            const k = dlpKey(
+              dlpMatch.patternName,
+              dlpMatch.redactedSample,
+              projLabel,
+              entry.timestamp ?? startTime
+            );
             if (!fileDedup.dlpKeys.has(k)) {
               fileDedup.dlpKeys.add(k);
               fileResult.dlpFindings.push({
@@ -25478,18 +25682,18 @@ async function scanCodexHistory(startDate, onProgress, onLine, opts = {}) {
       if (entry.type !== "response_item") continue;
       if (payload["type"] !== "function_call") continue;
       const ts = startTime;
-      if (startDate && ts && new Date(ts) < startDate) continue;
-      if (!sessionCounted) {
-        sessionCounted = true;
-        fileResult.sessions++;
-      }
+      const callTs = typeof entry.timestamp === "string" ? entry.timestamp : ts;
+      if (beforeJudged(judgeFromFor(startDate), callTs || void 0)) continue;
+      const day = dayOf(fileResult, callTs || void 0);
+      if (fileResult.sessions === 0) fileResult.sessions = 1;
       if (ts) {
         if (!fileResult.firstDate || ts < fileResult.firstDate) fileResult.firstDate = ts;
         if (!fileResult.lastDate || ts > fileResult.lastDate) fileResult.lastDate = ts;
       }
       fileResult.totalToolCalls++;
+      day.toolCalls++;
       const toolName = String(payload["name"] ?? "");
-      countMcpCall(fileResult, toolName);
+      countMcpCall(fileResult, toolName, day);
       const toolNameLower = toolName.toLowerCase();
       let input = {};
       try {
@@ -25502,6 +25706,7 @@ async function scanCodexHistory(startDate, onProgress, onLine, opts = {}) {
       sessionCalls.push({ toolName, input, timestamp: ts });
       if (toolNameLower === "exec_command" || toolNameLower === "shell") {
         fileResult.bashCalls++;
+        day.bashCalls++;
       }
       const rawCmd = String(input["command"] ?? "").trimStart();
       if (/^node9\s+(scan|explain|report|tail|dlp|status|sessions|audit)\b/.test(rawCmd)) continue;
@@ -25525,7 +25730,7 @@ async function scanCodexHistory(startDate, onProgress, onLine, opts = {}) {
           // The window filter uses the session start (ts); the gate's clock
           // (loop window, taint expiry) is the call's own time when the line
           // carries one.
-          timestamp: typeof entry.timestamp === "string" ? entry.timestamp : ts,
+          timestamp: callTs,
           sessionId,
           project: projLabel,
           cwd: sessionCwd
@@ -25533,20 +25738,23 @@ async function scanCodexHistory(startDate, onProgress, onLine, opts = {}) {
         fileResult,
         fileDedup
       );
-      void judged;
+      addUnknown(day, judged.verdict.unknown);
     }
-    for (const event of codexUsageInWindow(parseCodexUsage(lines), startDate)) {
+    for (const event of parseCodexUsage(lines).events) {
+      if (beforeJudged(judgeFromFor(startDate), event.timestamp || void 0)) continue;
       fileResult.totalCostUSD += event.costUSD;
+      dayOf(fileResult, event.timestamp || void 0, false).costUSD += event.costUSD;
     }
     fileResult.loopFindings.push(...detectLoops(sessionCalls, projLabel, sessionId, "codex"));
-    if (stamp) cache4.put(filePath, stamp, window, "codex", fileResult, judge);
-    mergeFileScan(result, fileResult, dedup);
+    if (stamp) cache4.put(filePath, stamp, "codex", fileResult, judge, judgeFromFor(startDate));
+    mergeFileScan(result, fileResult, dedup, startDate);
+    await yieldTick();
   }
-  cache4.flush();
+  cache4.close();
   result.policy = judge.policy(result.unknownInputs ?? {});
   return result;
 }
-var toolInspectionMap, CODE_EXTENSIONS, SELF_OUTPUT_MARKERS, LOOP_TOOLS, LOOP_THRESHOLD, LOOP_TIMESPAN_THRESHOLD_MS;
+var toolInspectionMap, STATE_LOOKBACK_MS, CODE_EXTENSIONS, SELF_OUTPUT_MARKERS, LOOP_TOOLS, LOOP_THRESHOLD, LOOP_TIMESPAN_THRESHOLD_MS;
 var init_scan = __esm({
   "src/cli/commands/scan.ts"() {
     "use strict";
@@ -25576,6 +25784,7 @@ var init_scan = __esm({
     init_scan_history();
     init_safe_text();
     toolInspectionMap = DEFAULT_CONFIG.policy.toolInspection;
+    STATE_LOOKBACK_MS = 24 * 60 * 60 * 1e3;
     CODE_EXTENSIONS = /* @__PURE__ */ new Set([
       ".ts",
       ".tsx",
@@ -25629,10 +25838,10 @@ var init_scan = __esm({
 // src/tui/dashboard/data.ts
 import fs37 from "fs";
 import os30 from "os";
-import path40 from "path";
+import path41 from "path";
 import http2 from "http";
 function auditLogPath() {
-  return path40.join(os30.homedir(), ".node9", "audit.log");
+  return path41.join(os30.homedir(), ".node9", "audit.log");
 }
 function readAuditEntriesAsync(chunkSize = 1e3, customPath) {
   return new Promise((resolve) => {
@@ -25779,9 +25988,9 @@ function shortenPath(p) {
   return p.startsWith(home) ? p.replace(home, "~") : p;
 }
 async function loadReportAuditAsync(period) {
-  const claudeProjectsDir = path40.join(os30.homedir(), ".claude", "projects");
+  const claudeProjectsDir = path41.join(os30.homedir(), ".claude", "projects");
   const codexSessionsDir2 = codexSessionsDir();
-  const geminiTmpDir = path40.join(os30.homedir(), ".gemini", "tmp");
+  const geminiTmpDir = path41.join(os30.homedir(), ".gemini", "tmp");
   const { start, end } = getDateRange(period, /* @__PURE__ */ new Date());
   const entries = await readAuditEntriesAsync();
   void ensurePricingLoaded();
@@ -26893,8 +27102,8 @@ import { Fragment as Fragment3, jsx as jsx4, jsxs as jsxs4 } from "react/jsx-run
 function TopToolsProjects({ audit }) {
   const data = audit?.data;
   const tools = data ? [...data.toolMap.entries()].sort(([, a], [, b]) => b.calls - a.calls).slice(0, ROW_LIMIT) : [];
-  const projects = data ? [...data.cost.byProject.entries()].map(([path41, r]) => ({
-    name: basenameOf(path41),
+  const projects = data ? [...data.cost.byProject.entries()].map(([path42, r]) => ({
+    name: basenameOf(path42),
     cost: r.cost,
     tokens: r.inputTokens + r.outputTokens
   })).sort((a, b) => b.cost - a.cost).slice(0, ROW_LIMIT) : [];
@@ -27331,8 +27540,8 @@ function pickTopLoopFile(loops) {
     map.set(k, (map.get(k) ?? 0) + (l.count ?? 0));
   }
   if (map.size === 0) return void 0;
-  const [path41, count] = [...map.entries()].sort((a, b) => b[1] - a[1])[0];
-  return { path: path41, count };
+  const [path42, count] = [...map.entries()].sort((a, b) => b[1] - a[1])[0];
+  return { path: path42, count };
 }
 var EMPTY_FILTERED_SCAN;
 var init_derive = __esm({