@node9/proxy 2.43.0 → 2.43.1

package/dist/dashboard.mjs

@@ -881,12 +881,12 @@ function judgeInlineCode(language, code, isProtected) {
       category
     };
   }
-  const path44 = protectedLiteral(text, isProtected);
-  if (path44) {
+  const path45 = protectedLiteral(text, isProtected);
+  if (path45) {
     return {
       outcome: "dangerous",
       what: WHAT["reads-protected"],
-      evidence: path44.slice(0, 60),
+      evidence: path45.slice(0, 60),
       category: "reads-protected"
     };
   }
@@ -3049,9 +3049,9 @@ function ruleServerMatches(rule, serverLabel) {
   if (rule.notServer && label2 && matchesPattern(label2, rule.notServer)) return false;
   return true;
 }
-function getNestedValue(obj, path44) {
+function getNestedValue(obj, path45) {
   if (!obj || typeof obj !== "object") return null;
-  const segments2 = path44.split(".");
+  const segments2 = path45.split(".");
   for (const seg of segments2) {
     if (FORBIDDEN_PATH_SEGMENTS.has(seg)) return null;
   }
@@ -4031,8 +4031,8 @@ function collectFileAccesses(tool, args, context = {}, inspection = {}) {
   }
   return out;
 }
-function within(path44, root) {
-  return path44 === root || path44.startsWith(root === "/" ? "/" : root + "/");
+function within(path45, root) {
+  return path45 === root || path45.startsWith(root === "/" ? "/" : root + "/");
 }
 function hits(access, paths, directories, context) {
   const home = context.homeDirs?.[0] ?? "~";
@@ -5420,7 +5420,10 @@ function classify(inv) {
     out.push({ ...f, shown: inv.shown, reason: `${f.reason}: ${inv.shown}` });
   };
   if (hooksBypass(inv)) found(HOOKS_BYPASS);
-  if (stagesEverything(inv)) found(STAGE_ALL);
+  const staged = stagesEverything(inv);
+  if (staged) {
+    found(staged.ifWorkTreeTop === void 0 ? STAGE_ALL : { ...STAGE_ALL, ...staged });
+  }
   if (inv.sub === null) {
     found(UNREADABLE);
     return out;
@@ -5481,12 +5484,35 @@ function appliedValue(env, name) {
   const word = f?.Stmts?.[0]?.Cmd?.Args?.[1];
   return word ? resolveWordLiteral(word) : null;
 }
+function lexicalPath(p) {
+  if (/^[\\/~$]/.test(p) || /^[A-Za-z]:/.test(p)) return null;
+  const parts = [];
+  let climbed = false;
+  for (const part of p.split(/[\\/]+/)) {
+    if (part === "" || part === ".") continue;
+    if (part === "..") {
+      if (parts.length === 0) climbed = true;
+      else parts.pop();
+    } else parts.push(part);
+  }
+  return { parts, climbed };
+}
+function hooksPathBypasses(value) {
+  if (value === null || value === void 0) return true;
+  const v = value.trim();
+  if (v === "" || v === "true") return true;
+  const lp = lexicalPath(v);
+  if (lp === null || lp.climbed || lp.parts.length === 0) return true;
+  return lp.parts[0] === ".git" && lp.parts[1] !== "hooks";
+}
 function hooksBypass(inv) {
-  if (inv.config.has("core.hookspath")) return true;
+  if (inv.config.has("core.hookspath") && hooksPathBypasses(inv.config.get("core.hookspath")))
+    return true;
   for (const [name, value] of inv.env) {
     if (name === "GIT_CONFIG_PARAMETERS" && value !== null && /core\.hookspath/i.test(value))
       return true;
-    if (/^GIT_CONFIG_KEY_\d+$/.test(name) && value !== null && value.toLowerCase() === "core.hookspath")
+    const key = /^GIT_CONFIG_KEY_(\d+)$/.exec(name);
+    if (key && value !== null && value.toLowerCase() === "core.hookspath" && hooksPathBypasses(inv.env.get(`GIT_CONFIG_VALUE_${key[1]}`)))
       return true;
   }
   for (const name of HOOK_KILL_SWITCHES) {
@@ -5528,7 +5554,10 @@ function configWritesHooksPath(args) {
   }
   const key = args[i];
   if (key === null || key === void 0 || key.toLowerCase() !== "core.hookspath") return false;
-  return write || i + 1 < args.length;
+  const unset = args.slice(0, i).some((w) => w === "--unset" || w === "--unset-all") || args[0] === "unset";
+  if (unset) return true;
+  if (i + 1 < args.length) return hooksPathBypasses(args[i + 1]);
+  return write;
 }
 function isHookPath(word) {
   return /(^|[\\/])(\.git[\\/]hooks|\.husky)([\\/]|$)/.test(word);
@@ -5563,31 +5592,49 @@ function chmodDisarmsHook(args, shown) {
 function wholeTree(operand) {
   if (/^:\(top\)\.?$/.test(operand) || operand === ":/" || operand === "*") return true;
   if (operand.startsWith(":")) return false;
+  const lp = lexicalPath(operand);
+  return lp !== null && lp.parts.length === 0;
+}
+function chdirPrefix(inv) {
+  const dirs = inv.chdir ?? [];
+  if (dirs.length === 0) return null;
   const parts = [];
-  for (const part of operand.split("/")) {
-    if (!part || part === ".") continue;
-    if (part === "..") parts.pop();
-    else parts.push(part);
+  for (const d of dirs) {
+    if (d === null || d === "") return null;
+    const lp = lexicalPath(d);
+    if (lp === null || lp.climbed) return null;
+    parts.push(...lp.parts);
   }
-  return parts.length === 0 && !operand.startsWith("/");
+  return parts.length === 0 ? null : parts.join("/");
 }
 function stagesEverything(inv) {
   const sub = inv.sub?.toLowerCase();
+  const prefix = chdirPrefix(inv);
+  const judge = (operands2) => {
+    let conditional = false;
+    for (const operand of operands2) {
+      if (!wholeTree(operand)) continue;
+      if (prefix === null || operand.startsWith(":") || operand.startsWith("/")) return {};
+      if (wholeTree(`${prefix}/${operand === "*" ? "." : operand}`)) return {};
+      conditional = true;
+    }
+    return conditional && prefix !== null ? { ifWorkTreeTop: prefix } : null;
+  };
   if (sub === "add") {
     const o = parseOptions(inv.args, "", ADD_LONG_VALUE);
     if (o.flags.has("-n") || o.flags.has("--dry-run") || o.flags.has("-i") || o.flags.has("--interactive") || o.flags.has("-p") || o.flags.has("--patch") || o.flags.has("-e") || o.flags.has("--edit"))
-      return false;
+      return null;
     const all = o.flags.has("-A") || o.flags.has("--all") || o.flags.has("--no-ignore-removal") || o.flags.has("-u") || o.flags.has("--update");
-    if (all && o.operands.length === 0) return true;
-    return o.operands.some(wholeTree);
+    if (all && o.operands.length === 0) return {};
+    return judge(o.operands);
   }
   if (sub === "commit") {
     const o = parseOptions(inv.args, "mFCcut", COMMIT_LONG_VALUE);
-    if (o.flags.has("--dry-run")) return false;
-    if (o.flags.has("-a") || o.flags.has("--all")) return true;
-    return o.operands.some(wholeTree);
+    if (o.flags.has("--dry-run")) return null;
+    if (o.flags.has("-a") || o.flags.has("--all")) return {};
+    return judge(o.operands);
   }
-  return false;
+  return null;
 }
 function hookTextRunsNothing(text) {
   return text.split(/\r?\n/).every((line) => INERT_LINE_RE.test(line.trim()));
@@ -7243,9 +7290,9 @@ function bareToolName(toolName) {
   const parts = toolName.split("__");
   return (parts.length >= 3 ? parts.slice(2).join("__") : toolName).toLowerCase();
 }
-function valuesAt(args, path44) {
+function valuesAt(args, path45) {
   let cursors = [args];
-  for (const rawSegment of path44.split(".")) {
+  for (const rawSegment of path45.split(".")) {
     const isArray = rawSegment.endsWith("[]");
     const key = isArray ? rawSegment.slice(0, -2) : rawSegment;
     const next = [];
@@ -7276,8 +7323,8 @@ function extractToolDestinations(toolName, args) {
   try {
     const out = [];
     const paths = DESTINATION_ARGS.get(bareToolName(toolName)) ?? [];
-    for (const path44 of paths) {
-      for (const value of valuesAt(args, path44)) {
+    for (const path45 of paths) {
+      for (const value of valuesAt(args, path45)) {
         const host2 = hostOf(value);
         if (host2) out.push({ host: host2, binary: toolName, raw: value });
       }
@@ -7303,8 +7350,8 @@ function ssrfDestinationFloor(toolName, args, opts = {}) {
   try {
     const paths = DESTINATION_ARGS.get(bareToolName(toolName));
     if (!paths) return null;
-    for (const path44 of paths) {
-      for (const value of valuesAt(args, path44)) {
+    for (const path45 of paths) {
+      for (const value of valuesAt(args, path45)) {
         const host2 = hostOf(value);
         if (!host2) continue;
         const m = classifySsrf(host2);
@@ -7313,7 +7360,7 @@ function ssrfDestinationFloor(toolName, args, opts = {}) {
         const decision = ssrfFloorDecision(m, written, opts);
         if (decision === null) continue;
         const reason = decision === "review" ? ssrfDisguisedReason(m, written) : ssrfReason(m, host2);
-        return { ...m, argPath: path44, host: host2, reason, decision };
+        return { ...m, argPath: path45, host: host2, reason, decision };
       }
     }
     return null;
@@ -7595,7 +7642,7 @@ async function evaluatePolicy(config, toolName, args, context = {}, hostHooks =
 }
 async function evaluatePolicyCore(config, toolName, args, context = {}, hooks = {}) {
   const { agent, cwd, activeEnvironment } = context;
-  const { checkProvenance: checkProvenance2, isTrustedHost: isTrustedHost2, isConfiguredRegistry } = hooks;
+  const { checkProvenance: checkProvenance2, isTrustedHost: isTrustedHost2, isConfiguredRegistry, isGitWorkTreeTop: isGitWorkTreeTop2 } = hooks;
   const settingsView = catalogSettings(config);
   const layers = inspectionLayers(config.policy);
   const cv = (id) => checkValue(settingsView, id);
@@ -7749,6 +7796,8 @@ async function evaluatePolicyCore(config, toolName, args, context = {}, hooks =
         const action = cv(id);
         const finding = action === "off" ? void 0 : git.findings.find((f) => f.checkId === id);
         if (!finding) continue;
+        if (finding.ifWorkTreeTop !== void 0 && isGitWorkTreeTop2 && cwd && !isGitWorkTreeTop2(finding.ifWorkTreeTop, cwd))
+          continue;
         const v = applyCheckValue(action, {
           decision: "review",
           blockedByLabel: `Node9 (AST): ${finding.ruleName}`,
@@ -16360,6 +16409,7 @@ zoo`.split("\n");
       /** The words after `git`: global options, then the subcommand. */
       visitGit(rest, env, depth, viaXargs, fromAlias, shown) {
         const config = /* @__PURE__ */ new Map();
+        const chdir = [];
         let i = 0;
         while (i < rest.length) {
           const w = rest[i];
@@ -16374,6 +16424,7 @@ zoo`.split("\n");
               i++;
               value = i < rest.length ? rest[i] : null;
             }
+            if (name === "-C") chdir.push(viaXargs || (value ?? "").includes("{}") ? null : value);
             if (name === "-c" && value !== null) {
               const ceq = value.indexOf("=");
               const key = (ceq > 0 ? value.slice(0, ceq) : value).toLowerCase();
@@ -16390,7 +16441,7 @@ zoo`.split("\n");
         }
         const subWord = i < rest.length ? rest[i] : void 0;
         const args = rest.slice(i + 1);
-        const inv = { sub: null, args, config, env, shown };
+        const inv = { sub: null, args, config, env, shown, chdir };
         if (subWord === void 0) {
           if (!viaXargs) return;
           this.emit(inv);
@@ -16404,16 +16455,23 @@ zoo`.split("\n");
         const fromConfig = config.get(`alias.${subWord.toLowerCase()}`);
         const alias = fromConfig !== void 0 ? fromConfig : this.aliases.get(subWord);
         if (alias !== void 0 && !fromAlias) {
-          this.expandAlias(subWord, alias, args, env, depth, 0, shown);
+          this.expandAlias(subWord, alias, args, env, depth, 0, shown, chdir);
           return;
         }
         inv.sub = subWord;
         this.emit(inv);
         this.recordAliasDefinition(inv, env, depth);
       }
-      expandAlias(name, value, args, env, depth, level, shown) {
+      expandAlias(name, value, args, env, depth, level, shown, chdir) {
         if (value === null) {
-          this.emit({ sub: null, args, config: /* @__PURE__ */ new Map(), env, shown: `${shown} (alias ${name})` });
+          this.emit({
+            sub: null,
+            args,
+            config: /* @__PURE__ */ new Map(),
+            env,
+            shown: `${shown} (alias ${name})`,
+            chdir
+          });
           return;
         }
         if (value.startsWith("!")) {
@@ -16427,7 +16485,16 @@ zoo`.split("\n");
         const nested = this.aliases.get(sub);
         const expandedShown = `${shown} (alias ${name} = ${value})`;
         if (nested !== void 0 && level < MAX_ALIAS_DEPTH) {
-          this.expandAlias(sub, nested, [...words.slice(1), ...args], env, depth, level + 1, shown);
+          this.expandAlias(
+            sub,
+            nested,
+            [...words.slice(1), ...args],
+            env,
+            depth,
+            level + 1,
+            shown,
+            chdir
+          );
           return;
         }
         this.emit({
@@ -16435,7 +16502,8 @@ zoo`.split("\n");
           args: [...words.slice(1), ...args],
           config: /* @__PURE__ */ new Map(),
           env,
-          shown: expandedShown
+          shown: expandedShown,
+          chdir
         });
       }
       /**
@@ -16469,7 +16537,7 @@ zoo`.split("\n");
         if (i + 1 >= args.length) return;
         const value = args[i + 1];
         this.aliases.set(m[1], value);
-        this.expandAlias(m[1], value, [], env, depth, 0, `${inv.shown}`);
+        this.expandAlias(m[1], value, [], env, depth, 0, `${inv.shown}`, []);
       }
     };
     POSITIONAL2 = "\0positional";
@@ -17971,7 +18039,7 @@ zoo`.split("\n");
       { view: "separators-stripped", decoder: "separators", stripped: true }
     ];
     LONG_OUTPUT_THRESHOLD_BYTES = 100 * 1024;
-    CANONICAL_EXTRACTOR_VERSION = "canonical-v34";
+    CANONICAL_EXTRACTOR_VERSION = "canonical-v35";
   }
 });
 
@@ -19316,8 +19384,8 @@ var init_daemon = __esm({
 import { z } from "zod";
 function formatIssues(issues) {
   const lines = issues.map((issue) => {
-    const path44 = issue.path.length > 0 ? issue.path.map(String).join(".") : "root";
-    return `  \u2022 ${path44}: ${issue.message}`;
+    const path45 = issue.path.length > 0 ? issue.path.map(String).join(".") : "root";
+    return `  \u2022 ${path45}: ${issue.message}`;
   });
   return `Invalid config:
 ${lines.join("\n")}`;
@@ -19330,9 +19398,9 @@ function prunePaths(root, paths) {
     const yi = y[y.length - 1];
     return typeof xi === "number" && typeof yi === "number" ? yi - xi : 0;
   });
-  for (const path44 of ordered) {
+  for (const path45 of ordered) {
     let cur = root;
-    for (const key of path44.slice(0, -1)) {
+    for (const key of path45.slice(0, -1)) {
       if (cur === null || typeof cur !== "object") {
         cur = void 0;
         break;
@@ -19340,7 +19408,7 @@ function prunePaths(root, paths) {
       cur = cur[key];
     }
     if (cur === null || typeof cur !== "object") continue;
-    const last = path44[path44.length - 1];
+    const last = path45[path45.length - 1];
     if (Array.isArray(cur)) {
       const i = Number(last);
       if (Number.isInteger(i) && i >= 0 && i < cur.length) {
@@ -19376,7 +19444,7 @@ function sanitizeConfig(raw) {
           return issue.keys.map((k) => [...at, k]);
         }
         return [at.slice(0, -level || void 0)];
-      }).filter((path44) => path44.length > 0);
+      }).filter((path45) => path45.length > 0);
       if (paths.length === 0 || !prunePaths(working, paths)) break;
     }
     if (ConfigFileSchema.safeParse(working).success) break;
@@ -20700,13 +20768,13 @@ function getConfig(cwd) {
         }
         if (Array.isArray(mc.jailPaths)) {
           for (const jp of mc.jailPaths) {
-            const path44 = typeof jp?.path === "string" ? jp.path.trim() : "";
-            if (!path44) continue;
+            const path45 = typeof jp?.path === "string" ? jp.path.trim() : "";
+            if (!path45) continue;
             const verdict = jp?.verdict === "review" ? "review" : "block";
-            for (const r of pathRules(path44, verdict, "org-managed jail")) {
+            for (const r of pathRules(path45, verdict, "org-managed jail")) {
               mergedPolicy.smartRules.push({ ...r, name: `org:${r.name}` });
             }
-            mergedPolicy.managedJailPaths.push({ path: path44, verdict });
+            mergedPolicy.managedJailPaths.push({ path: path45, verdict });
           }
         }
         if (Array.isArray(mc.trustedHosts)) {
@@ -24920,6 +24988,7 @@ var init_provenance2 = __esm({
 
 // src/policy/index.ts
 import fs30 from "fs";
+import path32 from "path";
 async function evaluatePolicy2(toolName, args, agent, cwd, opts) {
   const config = opts?.config ?? getConfig(cwd);
   const prepared = opts?.fileAccess ?? prepareFileAccesses(toolName, args, cwd, inspectionLayers(config.policy));
@@ -24945,10 +25014,19 @@ async function evaluatePolicy2(toolName, args, agent, cwd, opts) {
       // reaches a long-lived in-process authorizer (the gateway) within seconds.
       isTrustedHost: config.policy.trustedHostsManaged ? (host2) => matchesTrustedHost(host2, config.policy.trustedHosts) : isTrustedHost,
       readAgentSettings,
-      isConfiguredRegistry: (host2, at) => configuredRegistryHosts(at).has(host2)
+      isConfiguredRegistry: (host2, at) => configuredRegistryHosts(at).has(host2),
+      isGitWorkTreeTop
     }
   );
 }
+function isGitWorkTreeTop(dir2, cwd) {
+  if (!path32.isAbsolute(cwd)) return true;
+  try {
+    return fs30.existsSync(path32.join(path32.resolve(cwd, dir2), ".git"));
+  } catch {
+    return true;
+  }
+}
 function readAgentSettings(absPath) {
   const r = readCappedText(
     absPath,
@@ -24983,7 +25061,7 @@ var init_policy = __esm({
 
 // src/auth/state.ts
 import fs31 from "fs";
-import path32 from "path";
+import path33 from "path";
 import os22 from "os";
 function extractCommandPattern(toolName, args) {
   const lower2 = toolName.toLowerCase();
@@ -25061,7 +25139,7 @@ function writeTrustSession(toolName, durationMs, args) {
 }
 function getPersistentDecision(toolName) {
   try {
-    const file2 = path32.join(os22.homedir(), ".node9", "decisions.json");
+    const file2 = path33.join(os22.homedir(), ".node9", "decisions.json");
     if (!fs31.existsSync(file2)) return null;
     const decisions = JSON.parse(fs31.readFileSync(file2, "utf-8"));
     const d = decisions[toolName];
@@ -25077,15 +25155,15 @@ var init_state2 = __esm({
     init_policy();
     init_atomic_write();
     init_forecast_context();
-    PAUSED_FILE = path32.join(os22.homedir(), ".node9", "PAUSED");
-    TRUST_FILE = path32.join(os22.homedir(), ".node9", "trust.json");
+    PAUSED_FILE = path33.join(os22.homedir(), ".node9", "PAUSED");
+    TRUST_FILE = path33.join(os22.homedir(), ".node9", "trust.json");
   }
 });
 
 // src/auth/cloud.ts
 import fs32 from "fs";
 import os23 from "os";
-import path33 from "path";
+import path34 from "path";
 function maskArgsForCloud(args) {
   if (args === void 0 || args === null) return args;
   try {
@@ -25118,7 +25196,7 @@ async function initNode9SaaS(toolName, args, creds, meta, riskMetadata, agentPol
   let ciContext;
   if (process.env.CI) {
     try {
-      const ciContextPath = path33.join(os23.homedir(), ".node9", "ci-context.json");
+      const ciContextPath = path34.join(os23.homedir(), ".node9", "ci-context.json");
       const ci = readCappedText(ciContextPath, 1e4);
       if (!ci) throw new Error("ci-context.json unreadable");
       if (ci.truncated) throw new Error("ci-context.json exceeds 10 KB");
@@ -25265,10 +25343,10 @@ var init_cloud = __esm({
 
 // src/loop-detector.ts
 import fs33 from "fs";
-import path34 from "path";
+import path35 from "path";
 import os24 from "os";
 function loopStateFile() {
-  return path34.join(os24.homedir(), ".node9", "loop-state.json");
+  return path35.join(os24.homedir(), ".node9", "loop-state.json");
 }
 function readState() {
   try {
@@ -25282,7 +25360,7 @@ function readState() {
   }
 }
 function writeState(records) {
-  const dir2 = path34.dirname(loopStateFile());
+  const dir2 = path35.dirname(loopStateFile());
   if (!fs33.existsSync(dir2)) fs33.mkdirSync(dir2, { recursive: true });
   const tmpPath = `${loopStateFile()}.${os24.hostname()}.${process.pid}.tmp`;
   fs33.writeFileSync(tmpPath, JSON.stringify(records));
@@ -25445,7 +25523,7 @@ var init_card_result = __esm({
 
 // src/auth/orchestrator.ts
 import os25 from "os";
-import path35 from "path";
+import path36 from "path";
 function isProtectedPathRule(ruleName) {
   if (!ruleName) return false;
   return /^(?:org:)?block-path-/.test(ruleName) || /^shield:project-jail:block-read-/.test(ruleName);
@@ -25492,9 +25570,9 @@ function isMcpToolName(toolName) {
   return /^mcp__[^_](?:[^_]|_(?!_))*?__/i.test(toolName);
 }
 function absoluteUploadPath(spelled, cwd) {
-  const expanded = spelled === "~" || spelled.startsWith("~/") ? path35.join(os25.homedir(), spelled.slice(1)) : spelled;
-  if (path35.isAbsolute(expanded)) return expanded;
-  return cwd && path35.isAbsolute(cwd) ? path35.resolve(cwd, expanded) : expanded;
+  const expanded = spelled === "~" || spelled.startsWith("~/") ? path36.join(os25.homedir(), spelled.slice(1)) : spelled;
+  if (path36.isAbsolute(expanded)) return expanded;
+  return cwd && path36.isAbsolute(cwd) ? path36.resolve(cwd, expanded) : expanded;
 }
 function extractFilePaths(toolName, args, shellCommand) {
   const paths = [];
@@ -27111,17 +27189,17 @@ var init_forecast = __esm({
 
 // src/version.ts
 import fs34 from "fs";
-import path36 from "path";
+import path37 from "path";
 function readVersion() {
   let dir2 = __dirname;
   for (let i = 0; i < 5; i++) {
-    const p = path36.join(dir2, "package.json");
+    const p = path37.join(dir2, "package.json");
     try {
       const pkg = JSON.parse(fs34.readFileSync(p, "utf-8"));
       if (pkg.name === "@node9/proxy" && typeof pkg.version === "string") return pkg.version;
     } catch {
     }
-    const parent = path36.dirname(dir2);
+    const parent = path37.dirname(dir2);
     if (parent === dir2) break;
     dir2 = parent;
   }
@@ -27138,10 +27216,10 @@ var init_version = __esm({
 // src/cli/commands/scan-cache.ts
 import fs35 from "fs";
 import os26 from "os";
-import path37 from "path";
+import path38 from "path";
 import { createHash as createHash5 } from "crypto";
 function scanCacheRoot() {
-  return path37.join(os26.homedir(), ".node9", "scan-cache");
+  return path38.join(os26.homedir(), ".node9", "scan-cache");
 }
 function configHashOf(config) {
   const h = createHash5("sha256");
@@ -27149,7 +27227,7 @@ function configHashOf(config) {
   h.update(JSON.stringify(config.policySource));
   h.update(JSON.stringify(config.policy));
   for (const name of SIDECAR_FILES) {
-    const st = fileStamp(path37.join(os26.homedir(), ".node9", name));
+    const st = fileStamp(path38.join(os26.homedir(), ".node9", name));
     h.update(`|${name}:${st ? `${st.size}:${st.mtimeMs}` : "absent"}`);
   }
   return h.digest("hex").slice(0, 16);
@@ -27180,8 +27258,8 @@ var init_scan_cache = __esm({
       "trusted-hosts.json",
       "trusted-recipients.json",
       "rules-cache.json",
-      path37.join("osv", "npm", "meta.json"),
-      path37.join("osv", "PyPI", "meta.json")
+      path38.join("osv", "npm", "meta.json"),
+      path38.join("osv", "PyPI", "meta.json")
     ];
     ScanCache = class {
       root;
@@ -27210,7 +27288,7 @@ var init_scan_cache = __esm({
         if (!this.enabled) return fresh;
         try {
           const raw = JSON.parse(
-            fs35.readFileSync(path37.join(this.root, "index.json"), "utf8")
+            fs35.readFileSync(path38.join(this.root, "index.json"), "utf8")
           );
           if (raw.cacheVersion !== SCAN_CACHE_VERSION || raw.engineVersion !== CANONICAL_EXTRACTOR_VERSION || raw.proxyVersion !== PROXY_VERSION || raw.configHash !== configHash || typeof raw.files !== "object") {
             this.dropAll();
@@ -27247,7 +27325,7 @@ var init_scan_cache = __esm({
           }
         }
         try {
-          const stored = JSON.parse(fs35.readFileSync(path37.join(this.root, e.result), "utf8"));
+          const stored = JSON.parse(fs35.readFileSync(path38.join(this.root, e.result), "utf8"));
           if ((stored.judgedFrom ?? null) !== (e.judgedFrom ?? null) || !stored.result) {
             this.misses++;
             return null;
@@ -27262,13 +27340,13 @@ var init_scan_cache = __esm({
       put(filePath, stamp, agent, result, hasher, judgeFrom = null) {
         if (!this.enabled) return;
         const name = createHash5("sha256").update(`${agent}|${filePath}`).digest("hex").slice(0, 40);
-        const rel = path37.join("files", name.slice(0, 2), `${name}.json`);
+        const rel = path38.join("files", name.slice(0, 2), `${name}.json`);
         const configHashes = {};
         if (hasher)
           for (const cwd of result.configCwds ?? []) configHashes[cwd] = hasher.configHashFor(cwd);
         try {
-          const abs = path37.join(this.root, rel);
-          fs35.mkdirSync(path37.dirname(abs), { recursive: true, mode: 448 });
+          const abs = path38.join(this.root, rel);
+          fs35.mkdirSync(path38.dirname(abs), { recursive: true, mode: 448 });
           fs35.writeFileSync(
             abs,
             JSON.stringify({ judgedFrom: judgeFrom ? judgeFrom.toISOString() : null, result }),
@@ -27294,7 +27372,7 @@ var init_scan_cache = __esm({
         for (const [key, e] of Object.entries(this.index.files)) {
           if (fs35.existsSync(key)) continue;
           try {
-            fs35.rmSync(path37.join(this.root, e.result), { force: true });
+            fs35.rmSync(path38.join(this.root, e.result), { force: true });
           } catch {
           }
           delete this.index.files[key];
@@ -27316,9 +27394,9 @@ var init_scan_cache = __esm({
         if (!this.dirty) return;
         try {
           fs35.mkdirSync(this.root, { recursive: true, mode: 448 });
-          const tmp = path37.join(this.root, `index.${process.pid}.tmp`);
+          const tmp = path38.join(this.root, `index.${process.pid}.tmp`);
           fs35.writeFileSync(tmp, JSON.stringify(this.index), { mode: 384 });
-          fs35.renameSync(tmp, path37.join(this.root, "index.json"));
+          fs35.renameSync(tmp, path38.join(this.root, "index.json"));
           this.dirty = false;
         } catch {
         }
@@ -27330,7 +27408,7 @@ var init_scan_cache = __esm({
 // src/cli/commands/scan-judge.ts
 import fs36 from "fs";
 import os27 from "os";
-import path38 from "path";
+import path39 from "path";
 function findingDedupKey(f) {
   return `${f.source.rule.name ?? "<unnamed>"}|${preview(f.input)}|${f.project}|${f.repo ?? ""}`;
 }
@@ -27429,20 +27507,20 @@ var init_scan_judge = __esm({
        *  file, so worktrees count), home-relative; undefined when none. Cached per
        *  directory: history repeats the same few cwds thousands of times. */
       repoOf(cwd) {
-        if (!cwd || !path38.isAbsolute(cwd)) return void 0;
+        if (!cwd || !path39.isAbsolute(cwd)) return void 0;
         if (this.repos.has(cwd)) return this.repos.get(cwd);
         let dir2 = cwd;
         let found;
         for (; ; ) {
           try {
-            if (fs36.existsSync(path38.join(dir2, ".git"))) {
+            if (fs36.existsSync(path39.join(dir2, ".git"))) {
               found = dir2;
               break;
             }
           } catch {
             break;
           }
-          const parent = path38.dirname(dir2);
+          const parent = path39.dirname(dir2);
           if (parent === dir2) break;
           dir2 = parent;
         }
@@ -27609,7 +27687,7 @@ var init_scan_summary = __esm({
 
 // src/agent-wiring.ts
 import fs37 from "fs";
-import path39 from "path";
+import path40 from "path";
 import * as yaml from "yaml";
 import { parse as parseToml } from "smol-toml";
 var exists, ck, lg, AGENT_SPECS;
@@ -27631,55 +27709,55 @@ var init_agent_wiring = __esm({
         id: "claude",
         label: "Claude Code",
         setupCommand: "node9 agents add claude",
-        hookFile: (h) => path39.join(h, ".claude", "settings.json"),
+        hookFile: (h) => path40.join(h, ".claude", "settings.json"),
         hookFormat: "matcher",
         // UserPromptSubmit is prompt DLP. setup.ts has written it for Claude since
         // that shipped; the spec must name it too, or status/doctor never show the
         // row and heal (which repairs via setupAgent) has no signal it is missing.
         hookEvents: [ck("PreToolUse"), lg("PostToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path39.join(h, ".claude.json"),
-        present: (h) => exists(path39.join(h, ".claude", "settings.json")) || exists(path39.join(h, ".claude.json"))
+        mcpFile: (h) => path40.join(h, ".claude.json"),
+        present: (h) => exists(path40.join(h, ".claude", "settings.json")) || exists(path40.join(h, ".claude.json"))
       },
       {
         id: "gemini",
         label: "Gemini CLI",
         setupCommand: "node9 agents add gemini",
-        hookFile: (h) => path39.join(h, ".gemini", "settings.json"),
+        hookFile: (h) => path40.join(h, ".gemini", "settings.json"),
         hookFormat: "matcher",
         hookEvents: [ck("BeforeTool"), lg("AfterTool")],
-        mcpFile: (h) => path39.join(h, ".gemini", "settings.json"),
-        present: (h) => exists(path39.join(h, ".gemini", "settings.json"))
+        mcpFile: (h) => path40.join(h, ".gemini", "settings.json"),
+        present: (h) => exists(path40.join(h, ".gemini", "settings.json"))
       },
       {
         id: "codex",
         label: "Codex",
         setupCommand: "node9 agents add codex",
-        hookFile: (h) => path39.join(h, ".codex", "hooks.json"),
+        hookFile: (h) => path40.join(h, ".codex", "hooks.json"),
         hookFormat: "matcher",
         hookEvents: [ck("PreToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path39.join(h, ".codex", "config.toml"),
+        mcpFile: (h) => path40.join(h, ".codex", "config.toml"),
         mcpFormat: "toml",
-        present: (h) => exists(path39.join(h, ".codex"))
+        present: (h) => exists(path40.join(h, ".codex"))
       },
       {
         id: "antigravity",
         label: "Antigravity",
         setupCommand: "node9 agents add antigravity",
-        hookFile: (h) => path39.join(h, ".gemini", "config", "hooks.json"),
+        hookFile: (h) => path40.join(h, ".gemini", "config", "hooks.json"),
         hookFormat: "matcher",
         hookEvents: [ck("PreToolUse"), lg("PostToolUse")],
-        mcpFile: (h) => path39.join(h, ".gemini", "config", "mcp_config.json"),
-        present: (h) => exists(path39.join(h, ".gemini", "config", "hooks.json")) || exists(path39.join(h, ".gemini", "antigravity-cli")) || exists(path39.join(h, ".gemini", "antigravity-ide"))
+        mcpFile: (h) => path40.join(h, ".gemini", "config", "mcp_config.json"),
+        present: (h) => exists(path40.join(h, ".gemini", "config", "hooks.json")) || exists(path40.join(h, ".gemini", "antigravity-cli")) || exists(path40.join(h, ".gemini", "antigravity-ide"))
       },
       {
         id: "copilot",
         label: "GitHub Copilot",
         setupCommand: "node9 agents add copilot",
-        hookFile: (h) => path39.join(h, ".copilot", "hooks", "node9.json"),
+        hookFile: (h) => path40.join(h, ".copilot", "hooks", "node9.json"),
         hookFormat: "flat",
         hookEvents: [ck("PreToolUse"), lg("PostToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path39.join(h, ".copilot", "mcp-config.json"),
-        present: (h) => exists(path39.join(h, ".copilot"))
+        mcpFile: (h) => path40.join(h, ".copilot", "mcp-config.json"),
+        present: (h) => exists(path40.join(h, ".copilot"))
       },
       {
         id: "cursor",
@@ -27688,8 +27766,8 @@ var init_agent_wiring = __esm({
         // MCP-only — no hook file (see note above).
         hookFormat: "flat",
         hookEvents: [],
-        mcpFile: (h) => path39.join(h, ".cursor", "mcp.json"),
-        present: (h) => exists(path39.join(h, ".cursor", "mcp.json"))
+        mcpFile: (h) => path40.join(h, ".cursor", "mcp.json"),
+        present: (h) => exists(path40.join(h, ".cursor", "mcp.json"))
       },
       {
         id: "hermes",
@@ -27710,8 +27788,8 @@ var init_agent_wiring = __esm({
         setupCommand: "node9 agents add opencode",
         hookFormat: "flat",
         hookEvents: [],
-        shimFile: (h) => path39.join(opencodeConfigDir(h), "plugins", "node9.js"),
-        present: (h) => exists(opencodeConfigDir(h)) || exists(path39.join(opencodeConfigDir(h), "plugins", "node9.js"))
+        shimFile: (h) => path40.join(opencodeConfigDir(h), "plugins", "node9.js"),
+        present: (h) => exists(opencodeConfigDir(h)) || exists(path40.join(opencodeConfigDir(h), "plugins", "node9.js"))
       },
       {
         id: "pi",
@@ -27719,8 +27797,8 @@ var init_agent_wiring = __esm({
         setupCommand: "node9 agents add pi",
         hookFormat: "flat",
         hookEvents: [],
-        shimFile: (h) => path39.join(h, ".pi", "agent", "extensions", "node9.js"),
-        present: (h) => exists(path39.join(h, ".pi", "agent")) || exists(path39.join(h, ".pi", "agent", "extensions", "node9.js"))
+        shimFile: (h) => path40.join(h, ".pi", "agent", "extensions", "node9.js"),
+        present: (h) => exists(path40.join(h, ".pi", "agent")) || exists(path40.join(h, ".pi", "agent", "extensions", "node9.js"))
       }
     ];
   }
@@ -27771,14 +27849,14 @@ var init_codex_trust = __esm({
 });
 
 // src/daemon/hook-baseline.ts
-import path40 from "path";
+import path41 from "path";
 import os28 from "os";
 var BASELINE_FILE, NOTIFIED_FILE;
 var init_hook_baseline = __esm({
   "src/daemon/hook-baseline.ts"() {
     "use strict";
-    BASELINE_FILE = path40.join(os28.homedir(), ".node9", "hooks-baseline.json");
-    NOTIFIED_FILE = path40.join(os28.homedir(), ".node9", "hook-heal-notified.json");
+    BASELINE_FILE = path41.join(os28.homedir(), ".node9", "hooks-baseline.json");
+    NOTIFIED_FILE = path41.join(os28.homedir(), ".node9", "hook-heal-notified.json");
   }
 });
 
@@ -27797,7 +27875,7 @@ var init_setup_pi_shim = __esm({
 });
 
 // src/setup.ts
-import path41 from "path";
+import path42 from "path";
 import os29 from "os";
 import chalk3 from "chalk";
 import { confirm as rawConfirm } from "@inquirer/prompts";
@@ -27805,16 +27883,16 @@ import { parse as parseToml5, stringify as stringifyToml2 } from "smol-toml";
 import * as yaml2 from "yaml";
 function opencodeConfigDir(home = os29.homedir()) {
   const xdg = process.env.XDG_CONFIG_HOME;
-  const base2 = xdg && path41.isAbsolute(xdg) ? xdg : path41.join(home, ".config");
-  return path41.join(base2, "opencode");
+  const base2 = xdg && path42.isAbsolute(xdg) ? xdg : path42.join(home, ".config");
+  return path42.join(base2, "opencode");
 }
 function hermesHomeDir(homeDir = os29.homedir()) {
   const env = process.env.HERMES_HOME?.trim();
-  if (env && path41.isAbsolute(env)) return env;
-  return path41.join(homeDir, ".hermes");
+  if (env && path42.isAbsolute(env)) return env;
+  return path42.join(homeDir, ".hermes");
 }
 function hermesConfigPath(homeDir = os29.homedir()) {
-  return path41.join(hermesHomeDir(homeDir), HERMES_CONFIG_FILENAME);
+  return path42.join(hermesHomeDir(homeDir), HERMES_CONFIG_FILENAME);
 }
 var HERMES_CONFIG_FILENAME;
 var init_setup = __esm({
@@ -27860,7 +27938,7 @@ var init_scan_history = __esm({
 // src/cli/commands/scan.ts
 import chalk5 from "chalk";
 import fs38 from "fs";
-import path42 from "path";
+import path43 from "path";
 import os30 from "os";
 import stringWidth2 from "string-width";
 function dayKey(ts) {
@@ -28074,7 +28152,7 @@ async function processClaudeFile(file2, projPath, projLabel, judge, judgeFrom, r
   const session = { sessionId, costUSD: 0, toolCalls: 0 };
   let raw;
   try {
-    raw = fs38.readFileSync(path42.join(projPath, file2), "utf-8");
+    raw = fs38.readFileSync(path43.join(projPath, file2), "utf-8");
   } catch {
     return false;
   }
@@ -28143,7 +28221,7 @@ async function processClaudeFile(file2, projPath, projLabel, judge, judgeFrom, r
           if (block.type !== "tool_result") continue;
           const filePath = block.tool_use_id ? toolUseFilePaths.get(block.tool_use_id) : void 0;
           if (filePath) {
-            const ext = path42.extname(filePath).toLowerCase();
+            const ext = path43.extname(filePath).toLowerCase();
             if (CODE_EXTENSIONS.has(ext)) continue;
           }
           const resultText = typeof block.content === "string" ? block.content : Array.isArray(block.content) ? block.content.map((c) => c.text ?? "").join("\n") : null;
@@ -28263,7 +28341,7 @@ async function processClaudeFile(file2, projPath, projLabel, judge, judgeFrom, r
   return true;
 }
 async function processClaudeProjectAsync(proj, projectsDir, judge, cache7, startDate, result, dedup, canaryVals, onProgress, onLine) {
-  const projPath = path42.join(projectsDir, proj);
+  const projPath = path43.join(projectsDir, proj);
   try {
     if (!fs38.statSync(projPath).isDirectory()) return;
   } catch {
@@ -28277,7 +28355,7 @@ async function processClaudeProjectAsync(proj, projectsDir, judge, cache7, start
     return;
   }
   for (const file2 of files) {
-    const filePath = path42.join(projPath, file2);
+    const filePath = path43.join(projPath, file2);
     const stamp = fileStamp(filePath);
     if (!fileMayHoldWindow(stamp, startDate)) continue;
     result.filesScanned++;
@@ -28420,7 +28498,7 @@ function mergeFileScan(result, file2, dedup, startDate = null) {
   }
 }
 async function scanClaudeHistoryAsync(startDate, onProgress, onLine, opts = {}) {
-  const projectsDir = path42.join(os30.homedir(), ".claude", "projects");
+  const projectsDir = path43.join(os30.homedir(), ".claude", "projects");
   const result = emptyClaudeScan();
   if (!fs38.existsSync(projectsDir)) return result;
   let projDirs;
@@ -28453,7 +28531,7 @@ async function scanClaudeHistoryAsync(startDate, onProgress, onLine, opts = {})
 }
 async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
   const canaryVals = safeCanaryScanValues();
-  const tmpDir = path42.join(os30.homedir(), ".gemini", "tmp");
+  const tmpDir = path43.join(os30.homedir(), ".gemini", "tmp");
   const result = {
     filesScanned: 0,
     sessions: 0,
@@ -28480,7 +28558,7 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
   const judge = new HistoryJudge();
   const cache7 = openScanCache(judge, opts);
   for (const slug2 of slugDirs) {
-    const slugPath = path42.join(tmpDir, slug2);
+    const slugPath = path43.join(tmpDir, slug2);
     try {
       if (!fs38.statSync(slugPath).isDirectory()) continue;
     } catch {
@@ -28489,11 +28567,11 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
     let projLabel = stripTerminalEscapes(slug2).slice(0, 40);
     try {
       projLabel = stripTerminalEscapes(
-        fs38.readFileSync(path42.join(slugPath, ".project_root"), "utf-8").trim()
+        fs38.readFileSync(path43.join(slugPath, ".project_root"), "utf-8").trim()
       ).replace(os30.homedir(), "~").slice(0, 40);
     } catch {
     }
-    const chatsDir = path42.join(slugPath, "chats");
+    const chatsDir = path43.join(slugPath, "chats");
     if (!fs38.existsSync(chatsDir)) continue;
     let chatFiles;
     try {
@@ -28503,7 +28581,7 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
     }
     for (const chatFile of chatFiles) {
       const sessionId = chatFile.replace(/\.jsonl?$/, "");
-      const filePath = path42.join(chatsDir, chatFile);
+      const filePath = path43.join(chatsDir, chatFile);
       const stamp = fileStamp(filePath);
       if (!fileMayHoldWindow(stamp, startDate)) continue;
       result.filesScanned++;
@@ -28517,7 +28595,7 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
       const fileDedup = emptyScanDedup();
       let raw;
       try {
-        raw = fs38.readFileSync(path42.join(chatsDir, chatFile), "utf-8");
+        raw = fs38.readFileSync(path43.join(chatsDir, chatFile), "utf-8");
       } catch {
         continue;
       }
@@ -28712,7 +28790,7 @@ async function scanCodexHistory(startDate, onProgress, onLine, opts = {}) {
         startTime = String(payload["timestamp"] ?? "");
         const cwd = String(payload["cwd"] ?? "");
         projLabel = stripTerminalEscapes(cwd.replace(os30.homedir(), "~")).slice(0, 40);
-        if (path42.isAbsolute(cwd)) sessionCwd = cwd;
+        if (path43.isAbsolute(cwd)) sessionCwd = cwd;
         continue;
       }
       if (entry.type === "event_msg" && payload["type"] === "user_message") {
@@ -28912,10 +28990,10 @@ var init_scan = __esm({
 // src/tui/dashboard/data.ts
 import fs39 from "fs";
 import os31 from "os";
-import path43 from "path";
+import path44 from "path";
 import http2 from "http";
 function auditLogPath() {
-  return path43.join(os31.homedir(), ".node9", "audit.log");
+  return path44.join(os31.homedir(), ".node9", "audit.log");
 }
 function readAuditEntriesAsync(chunkSize = 1e3, customPath) {
   return new Promise((resolve) => {
@@ -29062,9 +29140,9 @@ function shortenPath(p) {
   return p.startsWith(home) ? p.replace(home, "~") : p;
 }
 async function loadReportAuditAsync(period) {
-  const claudeProjectsDir = path43.join(os31.homedir(), ".claude", "projects");
+  const claudeProjectsDir = path44.join(os31.homedir(), ".claude", "projects");
   const codexSessionsDir2 = codexSessionsDir();
-  const geminiTmpDir = path43.join(os31.homedir(), ".gemini", "tmp");
+  const geminiTmpDir = path44.join(os31.homedir(), ".gemini", "tmp");
   const { start, end } = getDateRange(period, /* @__PURE__ */ new Date());
   const entries = await readAuditEntriesAsync();
   void ensurePricingLoaded();
@@ -30176,8 +30254,8 @@ import { Fragment as Fragment3, jsx as jsx4, jsxs as jsxs4 } from "react/jsx-run
 function TopToolsProjects({ audit }) {
   const data = audit?.data;
   const tools = data ? [...data.toolMap.entries()].sort(([, a], [, b]) => b.calls - a.calls).slice(0, ROW_LIMIT) : [];
-  const projects = data ? [...data.cost.byProject.entries()].map(([path44, r]) => ({
-    name: basenameOf(path44),
+  const projects = data ? [...data.cost.byProject.entries()].map(([path45, r]) => ({
+    name: basenameOf(path45),
     cost: r.cost,
     tokens: r.inputTokens + r.outputTokens
   })).sort((a, b) => b.cost - a.cost).slice(0, ROW_LIMIT) : [];
@@ -30614,8 +30692,8 @@ function pickTopLoopFile(loops) {
     map.set(k, (map.get(k) ?? 0) + (l.count ?? 0));
   }
   if (map.size === 0) return void 0;
-  const [path44, count] = [...map.entries()].sort((a, b) => b[1] - a[1])[0];
-  return { path: path44, count };
+  const [path45, count] = [...map.entries()].sort((a, b) => b[1] - a[1])[0];
+  return { path: path45, count };
 }
 var EMPTY_FILTERED_SCAN;
 var init_derive = __esm({