@node9/proxy 2.43.0 → 2.44.0

package/dist/dashboard.mjs

@@ -881,12 +881,12 @@ function judgeInlineCode(language, code, isProtected) {
       category
     };
   }
-  const path44 = protectedLiteral(text, isProtected);
-  if (path44) {
+  const path45 = protectedLiteral(text, isProtected);
+  if (path45) {
     return {
       outcome: "dangerous",
       what: WHAT["reads-protected"],
-      evidence: path44.slice(0, 60),
+      evidence: path45.slice(0, 60),
       category: "reads-protected"
     };
   }
@@ -3049,9 +3049,9 @@ function ruleServerMatches(rule, serverLabel) {
   if (rule.notServer && label2 && matchesPattern(label2, rule.notServer)) return false;
   return true;
 }
-function getNestedValue(obj, path44) {
+function getNestedValue(obj, path45) {
   if (!obj || typeof obj !== "object") return null;
-  const segments2 = path44.split(".");
+  const segments2 = path45.split(".");
   for (const seg of segments2) {
     if (FORBIDDEN_PATH_SEGMENTS.has(seg)) return null;
   }
@@ -4031,8 +4031,8 @@ function collectFileAccesses(tool, args, context = {}, inspection = {}) {
   }
   return out;
 }
-function within(path44, root) {
-  return path44 === root || path44.startsWith(root === "/" ? "/" : root + "/");
+function within(path45, root) {
+  return path45 === root || path45.startsWith(root === "/" ? "/" : root + "/");
 }
 function hits(access, paths, directories, context) {
   const home = context.homeDirs?.[0] ?? "~";
@@ -5420,7 +5420,10 @@ function classify(inv) {
     out.push({ ...f, shown: inv.shown, reason: `${f.reason}: ${inv.shown}` });
   };
   if (hooksBypass(inv)) found(HOOKS_BYPASS);
-  if (stagesEverything(inv)) found(STAGE_ALL);
+  const staged = stagesEverything(inv);
+  if (staged) {
+    found(staged.ifWorkTreeTop === void 0 ? STAGE_ALL : { ...STAGE_ALL, ...staged });
+  }
   if (inv.sub === null) {
     found(UNREADABLE);
     return out;
@@ -5481,12 +5484,35 @@ function appliedValue(env, name) {
   const word = f?.Stmts?.[0]?.Cmd?.Args?.[1];
   return word ? resolveWordLiteral(word) : null;
 }
+function lexicalPath(p) {
+  if (/^[\\/~$]/.test(p) || /^[A-Za-z]:/.test(p)) return null;
+  const parts = [];
+  let climbed = false;
+  for (const part of p.split(/[\\/]+/)) {
+    if (part === "" || part === ".") continue;
+    if (part === "..") {
+      if (parts.length === 0) climbed = true;
+      else parts.pop();
+    } else parts.push(part);
+  }
+  return { parts, climbed };
+}
+function hooksPathBypasses(value) {
+  if (value === null || value === void 0) return true;
+  const v = value.trim();
+  if (v === "" || v === "true") return true;
+  const lp = lexicalPath(v);
+  if (lp === null || lp.climbed || lp.parts.length === 0) return true;
+  return lp.parts[0] === ".git" && lp.parts[1] !== "hooks";
+}
 function hooksBypass(inv) {
-  if (inv.config.has("core.hookspath")) return true;
+  if (inv.config.has("core.hookspath") && hooksPathBypasses(inv.config.get("core.hookspath")))
+    return true;
   for (const [name, value] of inv.env) {
     if (name === "GIT_CONFIG_PARAMETERS" && value !== null && /core\.hookspath/i.test(value))
       return true;
-    if (/^GIT_CONFIG_KEY_\d+$/.test(name) && value !== null && value.toLowerCase() === "core.hookspath")
+    const key = /^GIT_CONFIG_KEY_(\d+)$/.exec(name);
+    if (key && value !== null && value.toLowerCase() === "core.hookspath" && hooksPathBypasses(inv.env.get(`GIT_CONFIG_VALUE_${key[1]}`)))
       return true;
   }
   for (const name of HOOK_KILL_SWITCHES) {
@@ -5528,7 +5554,10 @@ function configWritesHooksPath(args) {
   }
   const key = args[i];
   if (key === null || key === void 0 || key.toLowerCase() !== "core.hookspath") return false;
-  return write || i + 1 < args.length;
+  const unset = args.slice(0, i).some((w) => w === "--unset" || w === "--unset-all") || args[0] === "unset";
+  if (unset) return true;
+  if (i + 1 < args.length) return hooksPathBypasses(args[i + 1]);
+  return write;
 }
 function isHookPath(word) {
   return /(^|[\\/])(\.git[\\/]hooks|\.husky)([\\/]|$)/.test(word);
@@ -5563,31 +5592,49 @@ function chmodDisarmsHook(args, shown) {
 function wholeTree(operand) {
   if (/^:\(top\)\.?$/.test(operand) || operand === ":/" || operand === "*") return true;
   if (operand.startsWith(":")) return false;
+  const lp = lexicalPath(operand);
+  return lp !== null && lp.parts.length === 0;
+}
+function chdirPrefix(inv) {
+  const dirs = inv.chdir ?? [];
+  if (dirs.length === 0) return null;
   const parts = [];
-  for (const part of operand.split("/")) {
-    if (!part || part === ".") continue;
-    if (part === "..") parts.pop();
-    else parts.push(part);
+  for (const d of dirs) {
+    if (d === null || d === "") return null;
+    const lp = lexicalPath(d);
+    if (lp === null || lp.climbed) return null;
+    parts.push(...lp.parts);
   }
-  return parts.length === 0 && !operand.startsWith("/");
+  return parts.length === 0 ? null : parts.join("/");
 }
 function stagesEverything(inv) {
   const sub = inv.sub?.toLowerCase();
+  const prefix = chdirPrefix(inv);
+  const judge = (operands2) => {
+    let conditional = false;
+    for (const operand of operands2) {
+      if (!wholeTree(operand)) continue;
+      if (prefix === null || operand.startsWith(":") || operand.startsWith("/")) return {};
+      if (wholeTree(`${prefix}/${operand === "*" ? "." : operand}`)) return {};
+      conditional = true;
+    }
+    return conditional && prefix !== null ? { ifWorkTreeTop: prefix } : null;
+  };
   if (sub === "add") {
     const o = parseOptions(inv.args, "", ADD_LONG_VALUE);
     if (o.flags.has("-n") || o.flags.has("--dry-run") || o.flags.has("-i") || o.flags.has("--interactive") || o.flags.has("-p") || o.flags.has("--patch") || o.flags.has("-e") || o.flags.has("--edit"))
-      return false;
+      return null;
     const all = o.flags.has("-A") || o.flags.has("--all") || o.flags.has("--no-ignore-removal") || o.flags.has("-u") || o.flags.has("--update");
-    if (all && o.operands.length === 0) return true;
-    return o.operands.some(wholeTree);
+    if (all && o.operands.length === 0) return {};
+    return judge(o.operands);
   }
   if (sub === "commit") {
     const o = parseOptions(inv.args, "mFCcut", COMMIT_LONG_VALUE);
-    if (o.flags.has("--dry-run")) return false;
-    if (o.flags.has("-a") || o.flags.has("--all")) return true;
-    return o.operands.some(wholeTree);
+    if (o.flags.has("--dry-run")) return null;
+    if (o.flags.has("-a") || o.flags.has("--all")) return {};
+    return judge(o.operands);
   }
-  return false;
+  return null;
 }
 function hookTextRunsNothing(text) {
   return text.split(/\r?\n/).every((line) => INERT_LINE_RE.test(line.trim()));
@@ -7243,9 +7290,9 @@ function bareToolName(toolName) {
   const parts = toolName.split("__");
   return (parts.length >= 3 ? parts.slice(2).join("__") : toolName).toLowerCase();
 }
-function valuesAt(args, path44) {
+function valuesAt(args, path45) {
   let cursors = [args];
-  for (const rawSegment of path44.split(".")) {
+  for (const rawSegment of path45.split(".")) {
     const isArray = rawSegment.endsWith("[]");
     const key = isArray ? rawSegment.slice(0, -2) : rawSegment;
     const next = [];
@@ -7276,8 +7323,8 @@ function extractToolDestinations(toolName, args) {
   try {
     const out = [];
     const paths = DESTINATION_ARGS.get(bareToolName(toolName)) ?? [];
-    for (const path44 of paths) {
-      for (const value of valuesAt(args, path44)) {
+    for (const path45 of paths) {
+      for (const value of valuesAt(args, path45)) {
         const host2 = hostOf(value);
         if (host2) out.push({ host: host2, binary: toolName, raw: value });
       }
@@ -7303,8 +7350,8 @@ function ssrfDestinationFloor(toolName, args, opts = {}) {
   try {
     const paths = DESTINATION_ARGS.get(bareToolName(toolName));
     if (!paths) return null;
-    for (const path44 of paths) {
-      for (const value of valuesAt(args, path44)) {
+    for (const path45 of paths) {
+      for (const value of valuesAt(args, path45)) {
         const host2 = hostOf(value);
         if (!host2) continue;
         const m = classifySsrf(host2);
@@ -7313,7 +7360,7 @@ function ssrfDestinationFloor(toolName, args, opts = {}) {
         const decision = ssrfFloorDecision(m, written, opts);
         if (decision === null) continue;
         const reason = decision === "review" ? ssrfDisguisedReason(m, written) : ssrfReason(m, host2);
-        return { ...m, argPath: path44, host: host2, reason, decision };
+        return { ...m, argPath: path45, host: host2, reason, decision };
       }
     }
     return null;
@@ -7595,7 +7642,7 @@ async function evaluatePolicy(config, toolName, args, context = {}, hostHooks =
 }
 async function evaluatePolicyCore(config, toolName, args, context = {}, hooks = {}) {
   const { agent, cwd, activeEnvironment } = context;
-  const { checkProvenance: checkProvenance2, isTrustedHost: isTrustedHost2, isConfiguredRegistry } = hooks;
+  const { checkProvenance: checkProvenance2, isTrustedHost: isTrustedHost2, isConfiguredRegistry, isGitWorkTreeTop: isGitWorkTreeTop2 } = hooks;
   const settingsView = catalogSettings(config);
   const layers = inspectionLayers(config.policy);
   const cv = (id) => checkValue(settingsView, id);
@@ -7749,6 +7796,8 @@ async function evaluatePolicyCore(config, toolName, args, context = {}, hooks =
         const action = cv(id);
         const finding = action === "off" ? void 0 : git.findings.find((f) => f.checkId === id);
         if (!finding) continue;
+        if (finding.ifWorkTreeTop !== void 0 && isGitWorkTreeTop2 && cwd && !isGitWorkTreeTop2(finding.ifWorkTreeTop, cwd))
+          continue;
         const v = applyCheckValue(action, {
           decision: "review",
           blockedByLabel: `Node9 (AST): ${finding.ruleName}`,
@@ -16360,6 +16409,7 @@ zoo`.split("\n");
       /** The words after `git`: global options, then the subcommand. */
       visitGit(rest, env, depth, viaXargs, fromAlias, shown) {
         const config = /* @__PURE__ */ new Map();
+        const chdir = [];
         let i = 0;
         while (i < rest.length) {
           const w = rest[i];
@@ -16374,6 +16424,7 @@ zoo`.split("\n");
               i++;
               value = i < rest.length ? rest[i] : null;
             }
+            if (name === "-C") chdir.push(viaXargs || (value ?? "").includes("{}") ? null : value);
             if (name === "-c" && value !== null) {
               const ceq = value.indexOf("=");
               const key = (ceq > 0 ? value.slice(0, ceq) : value).toLowerCase();
@@ -16390,7 +16441,7 @@ zoo`.split("\n");
         }
         const subWord = i < rest.length ? rest[i] : void 0;
         const args = rest.slice(i + 1);
-        const inv = { sub: null, args, config, env, shown };
+        const inv = { sub: null, args, config, env, shown, chdir };
         if (subWord === void 0) {
           if (!viaXargs) return;
           this.emit(inv);
@@ -16404,16 +16455,23 @@ zoo`.split("\n");
         const fromConfig = config.get(`alias.${subWord.toLowerCase()}`);
         const alias = fromConfig !== void 0 ? fromConfig : this.aliases.get(subWord);
         if (alias !== void 0 && !fromAlias) {
-          this.expandAlias(subWord, alias, args, env, depth, 0, shown);
+          this.expandAlias(subWord, alias, args, env, depth, 0, shown, chdir);
           return;
         }
         inv.sub = subWord;
         this.emit(inv);
         this.recordAliasDefinition(inv, env, depth);
       }
-      expandAlias(name, value, args, env, depth, level, shown) {
+      expandAlias(name, value, args, env, depth, level, shown, chdir) {
         if (value === null) {
-          this.emit({ sub: null, args, config: /* @__PURE__ */ new Map(), env, shown: `${shown} (alias ${name})` });
+          this.emit({
+            sub: null,
+            args,
+            config: /* @__PURE__ */ new Map(),
+            env,
+            shown: `${shown} (alias ${name})`,
+            chdir
+          });
           return;
         }
         if (value.startsWith("!")) {
@@ -16427,7 +16485,16 @@ zoo`.split("\n");
         const nested = this.aliases.get(sub);
         const expandedShown = `${shown} (alias ${name} = ${value})`;
         if (nested !== void 0 && level < MAX_ALIAS_DEPTH) {
-          this.expandAlias(sub, nested, [...words.slice(1), ...args], env, depth, level + 1, shown);
+          this.expandAlias(
+            sub,
+            nested,
+            [...words.slice(1), ...args],
+            env,
+            depth,
+            level + 1,
+            shown,
+            chdir
+          );
           return;
         }
         this.emit({
@@ -16435,7 +16502,8 @@ zoo`.split("\n");
           args: [...words.slice(1), ...args],
           config: /* @__PURE__ */ new Map(),
           env,
-          shown: expandedShown
+          shown: expandedShown,
+          chdir
         });
       }
       /**
@@ -16469,7 +16537,7 @@ zoo`.split("\n");
         if (i + 1 >= args.length) return;
         const value = args[i + 1];
         this.aliases.set(m[1], value);
-        this.expandAlias(m[1], value, [], env, depth, 0, `${inv.shown}`);
+        this.expandAlias(m[1], value, [], env, depth, 0, `${inv.shown}`, []);
       }
     };
     POSITIONAL2 = "\0positional";
@@ -17971,7 +18039,7 @@ zoo`.split("\n");
       { view: "separators-stripped", decoder: "separators", stripped: true }
     ];
     LONG_OUTPUT_THRESHOLD_BYTES = 100 * 1024;
-    CANONICAL_EXTRACTOR_VERSION = "canonical-v34";
+    CANONICAL_EXTRACTOR_VERSION = "canonical-v35";
   }
 });
 
@@ -18666,8 +18734,7 @@ function homeCredentialFiles(home) {
     ),
     f([".docker", "config.json"], "Docker registry auth tokens", 10),
     f([".netrc"], "FTP/HTTP credentials in plain text", 15),
-    f([".npmrc"], "npm auth token: can publish packages as you", 10),
-    f([".node9", "credentials.json"], "Node9 cloud API key", 10)
+    f([".npmrc"], "npm auth token: can publish packages as you", 10)
   ];
 }
 var init_credential_files = __esm({
@@ -19316,8 +19383,8 @@ var init_daemon = __esm({
 import { z } from "zod";
 function formatIssues(issues) {
   const lines = issues.map((issue) => {
-    const path44 = issue.path.length > 0 ? issue.path.map(String).join(".") : "root";
-    return `  \u2022 ${path44}: ${issue.message}`;
+    const path45 = issue.path.length > 0 ? issue.path.map(String).join(".") : "root";
+    return `  \u2022 ${path45}: ${issue.message}`;
   });
   return `Invalid config:
 ${lines.join("\n")}`;
@@ -19330,9 +19397,9 @@ function prunePaths(root, paths) {
     const yi = y[y.length - 1];
     return typeof xi === "number" && typeof yi === "number" ? yi - xi : 0;
   });
-  for (const path44 of ordered) {
+  for (const path45 of ordered) {
     let cur = root;
-    for (const key of path44.slice(0, -1)) {
+    for (const key of path45.slice(0, -1)) {
       if (cur === null || typeof cur !== "object") {
         cur = void 0;
         break;
@@ -19340,7 +19407,7 @@ function prunePaths(root, paths) {
       cur = cur[key];
     }
     if (cur === null || typeof cur !== "object") continue;
-    const last = path44[path44.length - 1];
+    const last = path45[path45.length - 1];
     if (Array.isArray(cur)) {
       const i = Number(last);
       if (Number.isInteger(i) && i >= 0 && i < cur.length) {
@@ -19376,7 +19443,7 @@ function sanitizeConfig(raw) {
           return issue.keys.map((k) => [...at, k]);
         }
         return [at.slice(0, -level || void 0)];
-      }).filter((path44) => path44.length > 0);
+      }).filter((path45) => path45.length > 0);
       if (paths.length === 0 || !prunePaths(working, paths)) break;
     }
     if (ConfigFileSchema.safeParse(working).success) break;
@@ -20700,13 +20767,13 @@ function getConfig(cwd) {
         }
         if (Array.isArray(mc.jailPaths)) {
           for (const jp of mc.jailPaths) {
-            const path44 = typeof jp?.path === "string" ? jp.path.trim() : "";
-            if (!path44) continue;
+            const path45 = typeof jp?.path === "string" ? jp.path.trim() : "";
+            if (!path45) continue;
             const verdict = jp?.verdict === "review" ? "review" : "block";
-            for (const r of pathRules(path44, verdict, "org-managed jail")) {
+            for (const r of pathRules(path45, verdict, "org-managed jail")) {
               mergedPolicy.smartRules.push({ ...r, name: `org:${r.name}` });
             }
-            mergedPolicy.managedJailPaths.push({ path: path44, verdict });
+            mergedPolicy.managedJailPaths.push({ path: path45, verdict });
           }
         }
         if (Array.isArray(mc.trustedHosts)) {
@@ -21417,6 +21484,68 @@ var init_cost_gemini = __esm({
 });
 
 // src/cost-copilot.ts
+function priceTokens(model, u) {
+  const tuple = pricingFor(model);
+  if (!tuple || !u) return 0;
+  const [pin, pout, pcw, pcr] = tuple;
+  return (u.inputTokens ?? 0) * pin + (u.outputTokens ?? 0) * pout + (u.cacheWriteTokens ?? 0) * pcw + (u.cacheReadTokens ?? 0) * pcr;
+}
+function parseCopilotSession(lines) {
+  let sessionId = "";
+  let cwd = "";
+  let startDate = "";
+  let shutdownDate = "";
+  let modelMetrics = null;
+  for (const raw of lines) {
+    if (!raw.trim()) continue;
+    let o;
+    try {
+      o = JSON.parse(raw);
+    } catch {
+      continue;
+    }
+    const d = o.data ?? {};
+    if (o.type === "session.start") {
+      if (typeof d["sessionId"] === "string") sessionId = d["sessionId"];
+      if (typeof d["startTime"] === "string") startDate = d["startTime"];
+      const ctx = d["context"] ?? {};
+      if (typeof ctx["cwd"] === "string") cwd = ctx["cwd"];
+    } else if (o.type === "session.shutdown") {
+      if (d["modelMetrics"] && typeof d["modelMetrics"] === "object") {
+        modelMetrics = d["modelMetrics"];
+      }
+      if (typeof o.timestamp === "string") shutdownDate = o.timestamp;
+    }
+  }
+  if (!modelMetrics) return [];
+  const date = (startDate || shutdownDate).slice(0, 10);
+  if (!date) return [];
+  const rows = [];
+  for (const [rawModel, m] of Object.entries(modelMetrics)) {
+    const u = m.usage ?? {};
+    const inputTokens = u.inputTokens ?? 0;
+    const outputTokens = u.outputTokens ?? 0;
+    const cacheReadTokens = u.cacheReadTokens ?? 0;
+    const cacheWriteTokens = u.cacheWriteTokens ?? 0;
+    if (inputTokens === 0 && outputTokens === 0 && cacheReadTokens === 0 && cacheWriteTokens === 0) {
+      continue;
+    }
+    const model = normalizeModel(rawModel);
+    const costUSD = typeof m.requests?.cost === "number" && m.requests.cost > 0 ? m.requests.cost : priceTokens(rawModel, u);
+    rows.push({
+      date,
+      model,
+      workingDir: cwd,
+      runId: sessionId,
+      costUSD,
+      inputTokens,
+      outputTokens,
+      cacheReadTokens,
+      cacheWriteTokens
+    });
+  }
+  return rows;
+}
 var init_cost_copilot = __esm({
   "src/cost-copilot.ts"() {
     "use strict";
@@ -24920,6 +25049,7 @@ var init_provenance2 = __esm({
 
 // src/policy/index.ts
 import fs30 from "fs";
+import path32 from "path";
 async function evaluatePolicy2(toolName, args, agent, cwd, opts) {
   const config = opts?.config ?? getConfig(cwd);
   const prepared = opts?.fileAccess ?? prepareFileAccesses(toolName, args, cwd, inspectionLayers(config.policy));
@@ -24945,10 +25075,19 @@ async function evaluatePolicy2(toolName, args, agent, cwd, opts) {
       // reaches a long-lived in-process authorizer (the gateway) within seconds.
       isTrustedHost: config.policy.trustedHostsManaged ? (host2) => matchesTrustedHost(host2, config.policy.trustedHosts) : isTrustedHost,
       readAgentSettings,
-      isConfiguredRegistry: (host2, at) => configuredRegistryHosts(at).has(host2)
+      isConfiguredRegistry: (host2, at) => configuredRegistryHosts(at).has(host2),
+      isGitWorkTreeTop
     }
   );
 }
+function isGitWorkTreeTop(dir2, cwd) {
+  if (!path32.isAbsolute(cwd)) return true;
+  try {
+    return fs30.existsSync(path32.join(path32.resolve(cwd, dir2), ".git"));
+  } catch {
+    return true;
+  }
+}
 function readAgentSettings(absPath) {
   const r = readCappedText(
     absPath,
@@ -24983,7 +25122,7 @@ var init_policy = __esm({
 
 // src/auth/state.ts
 import fs31 from "fs";
-import path32 from "path";
+import path33 from "path";
 import os22 from "os";
 function extractCommandPattern(toolName, args) {
   const lower2 = toolName.toLowerCase();
@@ -25061,7 +25200,7 @@ function writeTrustSession(toolName, durationMs, args) {
 }
 function getPersistentDecision(toolName) {
   try {
-    const file2 = path32.join(os22.homedir(), ".node9", "decisions.json");
+    const file2 = path33.join(os22.homedir(), ".node9", "decisions.json");
     if (!fs31.existsSync(file2)) return null;
     const decisions = JSON.parse(fs31.readFileSync(file2, "utf-8"));
     const d = decisions[toolName];
@@ -25077,15 +25216,15 @@ var init_state2 = __esm({
     init_policy();
     init_atomic_write();
     init_forecast_context();
-    PAUSED_FILE = path32.join(os22.homedir(), ".node9", "PAUSED");
-    TRUST_FILE = path32.join(os22.homedir(), ".node9", "trust.json");
+    PAUSED_FILE = path33.join(os22.homedir(), ".node9", "PAUSED");
+    TRUST_FILE = path33.join(os22.homedir(), ".node9", "trust.json");
   }
 });
 
 // src/auth/cloud.ts
 import fs32 from "fs";
 import os23 from "os";
-import path33 from "path";
+import path34 from "path";
 function maskArgsForCloud(args) {
   if (args === void 0 || args === null) return args;
   try {
@@ -25118,7 +25257,7 @@ async function initNode9SaaS(toolName, args, creds, meta, riskMetadata, agentPol
   let ciContext;
   if (process.env.CI) {
     try {
-      const ciContextPath = path33.join(os23.homedir(), ".node9", "ci-context.json");
+      const ciContextPath = path34.join(os23.homedir(), ".node9", "ci-context.json");
       const ci = readCappedText(ciContextPath, 1e4);
       if (!ci) throw new Error("ci-context.json unreadable");
       if (ci.truncated) throw new Error("ci-context.json exceeds 10 KB");
@@ -25265,10 +25404,10 @@ var init_cloud = __esm({
 
 // src/loop-detector.ts
 import fs33 from "fs";
-import path34 from "path";
+import path35 from "path";
 import os24 from "os";
 function loopStateFile() {
-  return path34.join(os24.homedir(), ".node9", "loop-state.json");
+  return path35.join(os24.homedir(), ".node9", "loop-state.json");
 }
 function readState() {
   try {
@@ -25282,7 +25421,7 @@ function readState() {
   }
 }
 function writeState(records) {
-  const dir2 = path34.dirname(loopStateFile());
+  const dir2 = path35.dirname(loopStateFile());
   if (!fs33.existsSync(dir2)) fs33.mkdirSync(dir2, { recursive: true });
   const tmpPath = `${loopStateFile()}.${os24.hostname()}.${process.pid}.tmp`;
   fs33.writeFileSync(tmpPath, JSON.stringify(records));
@@ -25445,7 +25584,7 @@ var init_card_result = __esm({
 
 // src/auth/orchestrator.ts
 import os25 from "os";
-import path35 from "path";
+import path36 from "path";
 function isProtectedPathRule(ruleName) {
   if (!ruleName) return false;
   return /^(?:org:)?block-path-/.test(ruleName) || /^shield:project-jail:block-read-/.test(ruleName);
@@ -25492,9 +25631,9 @@ function isMcpToolName(toolName) {
   return /^mcp__[^_](?:[^_]|_(?!_))*?__/i.test(toolName);
 }
 function absoluteUploadPath(spelled, cwd) {
-  const expanded = spelled === "~" || spelled.startsWith("~/") ? path35.join(os25.homedir(), spelled.slice(1)) : spelled;
-  if (path35.isAbsolute(expanded)) return expanded;
-  return cwd && path35.isAbsolute(cwd) ? path35.resolve(cwd, expanded) : expanded;
+  const expanded = spelled === "~" || spelled.startsWith("~/") ? path36.join(os25.homedir(), spelled.slice(1)) : spelled;
+  if (path36.isAbsolute(expanded)) return expanded;
+  return cwd && path36.isAbsolute(cwd) ? path36.resolve(cwd, expanded) : expanded;
 }
 function extractFilePaths(toolName, args, shellCommand) {
   const paths = [];
@@ -27111,17 +27250,17 @@ var init_forecast = __esm({
 
 // src/version.ts
 import fs34 from "fs";
-import path36 from "path";
+import path37 from "path";
 function readVersion() {
   let dir2 = __dirname;
   for (let i = 0; i < 5; i++) {
-    const p = path36.join(dir2, "package.json");
+    const p = path37.join(dir2, "package.json");
     try {
       const pkg = JSON.parse(fs34.readFileSync(p, "utf-8"));
       if (pkg.name === "@node9/proxy" && typeof pkg.version === "string") return pkg.version;
     } catch {
     }
-    const parent = path36.dirname(dir2);
+    const parent = path37.dirname(dir2);
     if (parent === dir2) break;
     dir2 = parent;
   }
@@ -27138,10 +27277,10 @@ var init_version = __esm({
 // src/cli/commands/scan-cache.ts
 import fs35 from "fs";
 import os26 from "os";
-import path37 from "path";
+import path38 from "path";
 import { createHash as createHash5 } from "crypto";
 function scanCacheRoot() {
-  return path37.join(os26.homedir(), ".node9", "scan-cache");
+  return path38.join(os26.homedir(), ".node9", "scan-cache");
 }
 function configHashOf(config) {
   const h = createHash5("sha256");
@@ -27149,7 +27288,7 @@ function configHashOf(config) {
   h.update(JSON.stringify(config.policySource));
   h.update(JSON.stringify(config.policy));
   for (const name of SIDECAR_FILES) {
-    const st = fileStamp(path37.join(os26.homedir(), ".node9", name));
+    const st = fileStamp(path38.join(os26.homedir(), ".node9", name));
     h.update(`|${name}:${st ? `${st.size}:${st.mtimeMs}` : "absent"}`);
   }
   return h.digest("hex").slice(0, 16);
@@ -27180,8 +27319,8 @@ var init_scan_cache = __esm({
       "trusted-hosts.json",
       "trusted-recipients.json",
       "rules-cache.json",
-      path37.join("osv", "npm", "meta.json"),
-      path37.join("osv", "PyPI", "meta.json")
+      path38.join("osv", "npm", "meta.json"),
+      path38.join("osv", "PyPI", "meta.json")
     ];
     ScanCache = class {
       root;
@@ -27210,7 +27349,7 @@ var init_scan_cache = __esm({
         if (!this.enabled) return fresh;
         try {
           const raw = JSON.parse(
-            fs35.readFileSync(path37.join(this.root, "index.json"), "utf8")
+            fs35.readFileSync(path38.join(this.root, "index.json"), "utf8")
           );
           if (raw.cacheVersion !== SCAN_CACHE_VERSION || raw.engineVersion !== CANONICAL_EXTRACTOR_VERSION || raw.proxyVersion !== PROXY_VERSION || raw.configHash !== configHash || typeof raw.files !== "object") {
             this.dropAll();
@@ -27247,7 +27386,7 @@ var init_scan_cache = __esm({
           }
         }
         try {
-          const stored = JSON.parse(fs35.readFileSync(path37.join(this.root, e.result), "utf8"));
+          const stored = JSON.parse(fs35.readFileSync(path38.join(this.root, e.result), "utf8"));
           if ((stored.judgedFrom ?? null) !== (e.judgedFrom ?? null) || !stored.result) {
             this.misses++;
             return null;
@@ -27262,13 +27401,13 @@ var init_scan_cache = __esm({
       put(filePath, stamp, agent, result, hasher, judgeFrom = null) {
         if (!this.enabled) return;
         const name = createHash5("sha256").update(`${agent}|${filePath}`).digest("hex").slice(0, 40);
-        const rel = path37.join("files", name.slice(0, 2), `${name}.json`);
+        const rel = path38.join("files", name.slice(0, 2), `${name}.json`);
         const configHashes = {};
         if (hasher)
           for (const cwd of result.configCwds ?? []) configHashes[cwd] = hasher.configHashFor(cwd);
         try {
-          const abs = path37.join(this.root, rel);
-          fs35.mkdirSync(path37.dirname(abs), { recursive: true, mode: 448 });
+          const abs = path38.join(this.root, rel);
+          fs35.mkdirSync(path38.dirname(abs), { recursive: true, mode: 448 });
           fs35.writeFileSync(
             abs,
             JSON.stringify({ judgedFrom: judgeFrom ? judgeFrom.toISOString() : null, result }),
@@ -27294,7 +27433,7 @@ var init_scan_cache = __esm({
         for (const [key, e] of Object.entries(this.index.files)) {
           if (fs35.existsSync(key)) continue;
           try {
-            fs35.rmSync(path37.join(this.root, e.result), { force: true });
+            fs35.rmSync(path38.join(this.root, e.result), { force: true });
           } catch {
           }
           delete this.index.files[key];
@@ -27316,9 +27455,9 @@ var init_scan_cache = __esm({
         if (!this.dirty) return;
         try {
           fs35.mkdirSync(this.root, { recursive: true, mode: 448 });
-          const tmp = path37.join(this.root, `index.${process.pid}.tmp`);
+          const tmp = path38.join(this.root, `index.${process.pid}.tmp`);
           fs35.writeFileSync(tmp, JSON.stringify(this.index), { mode: 384 });
-          fs35.renameSync(tmp, path37.join(this.root, "index.json"));
+          fs35.renameSync(tmp, path38.join(this.root, "index.json"));
           this.dirty = false;
         } catch {
         }
@@ -27330,7 +27469,7 @@ var init_scan_cache = __esm({
 // src/cli/commands/scan-judge.ts
 import fs36 from "fs";
 import os27 from "os";
-import path38 from "path";
+import path39 from "path";
 function findingDedupKey(f) {
   return `${f.source.rule.name ?? "<unnamed>"}|${preview(f.input)}|${f.project}|${f.repo ?? ""}`;
 }
@@ -27429,20 +27568,20 @@ var init_scan_judge = __esm({
        *  file, so worktrees count), home-relative; undefined when none. Cached per
        *  directory: history repeats the same few cwds thousands of times. */
       repoOf(cwd) {
-        if (!cwd || !path38.isAbsolute(cwd)) return void 0;
+        if (!cwd || !path39.isAbsolute(cwd)) return void 0;
         if (this.repos.has(cwd)) return this.repos.get(cwd);
         let dir2 = cwd;
         let found;
         for (; ; ) {
           try {
-            if (fs36.existsSync(path38.join(dir2, ".git"))) {
+            if (fs36.existsSync(path39.join(dir2, ".git"))) {
               found = dir2;
               break;
             }
           } catch {
             break;
           }
-          const parent = path38.dirname(dir2);
+          const parent = path39.dirname(dir2);
           if (parent === dir2) break;
           dir2 = parent;
         }
@@ -27591,6 +27730,16 @@ var init_scan_judge = __esm({
 });
 
 // src/utils/hook-payload.ts
+function canonicalToolInput(rawToolName, input) {
+  if (rawToolName !== "run_command") return input;
+  if (typeof input !== "object" || input === null || Array.isArray(input)) return input;
+  const args = input;
+  if (typeof args.CommandLine !== "string") return input;
+  const { CommandLine, Cwd, ...rest } = args;
+  const canonical = { ...rest, command: CommandLine };
+  if (typeof Cwd === "string" && Cwd.length > 0) canonical.cwd = Cwd;
+  return canonical;
+}
 var init_hook_payload = __esm({
   "src/utils/hook-payload.ts"() {
     "use strict";
@@ -27609,7 +27758,7 @@ var init_scan_summary = __esm({
 
 // src/agent-wiring.ts
 import fs37 from "fs";
-import path39 from "path";
+import path40 from "path";
 import * as yaml from "yaml";
 import { parse as parseToml } from "smol-toml";
 var exists, ck, lg, AGENT_SPECS;
@@ -27631,55 +27780,55 @@ var init_agent_wiring = __esm({
         id: "claude",
         label: "Claude Code",
         setupCommand: "node9 agents add claude",
-        hookFile: (h) => path39.join(h, ".claude", "settings.json"),
+        hookFile: (h) => path40.join(h, ".claude", "settings.json"),
         hookFormat: "matcher",
         // UserPromptSubmit is prompt DLP. setup.ts has written it for Claude since
         // that shipped; the spec must name it too, or status/doctor never show the
         // row and heal (which repairs via setupAgent) has no signal it is missing.
         hookEvents: [ck("PreToolUse"), lg("PostToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path39.join(h, ".claude.json"),
-        present: (h) => exists(path39.join(h, ".claude", "settings.json")) || exists(path39.join(h, ".claude.json"))
+        mcpFile: (h) => path40.join(h, ".claude.json"),
+        present: (h) => exists(path40.join(h, ".claude", "settings.json")) || exists(path40.join(h, ".claude.json"))
       },
       {
         id: "gemini",
         label: "Gemini CLI",
         setupCommand: "node9 agents add gemini",
-        hookFile: (h) => path39.join(h, ".gemini", "settings.json"),
+        hookFile: (h) => path40.join(h, ".gemini", "settings.json"),
         hookFormat: "matcher",
         hookEvents: [ck("BeforeTool"), lg("AfterTool")],
-        mcpFile: (h) => path39.join(h, ".gemini", "settings.json"),
-        present: (h) => exists(path39.join(h, ".gemini", "settings.json"))
+        mcpFile: (h) => path40.join(h, ".gemini", "settings.json"),
+        present: (h) => exists(path40.join(h, ".gemini", "settings.json"))
       },
       {
         id: "codex",
         label: "Codex",
         setupCommand: "node9 agents add codex",
-        hookFile: (h) => path39.join(h, ".codex", "hooks.json"),
+        hookFile: (h) => path40.join(h, ".codex", "hooks.json"),
         hookFormat: "matcher",
         hookEvents: [ck("PreToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path39.join(h, ".codex", "config.toml"),
+        mcpFile: (h) => path40.join(h, ".codex", "config.toml"),
         mcpFormat: "toml",
-        present: (h) => exists(path39.join(h, ".codex"))
+        present: (h) => exists(path40.join(h, ".codex"))
       },
       {
         id: "antigravity",
         label: "Antigravity",
         setupCommand: "node9 agents add antigravity",
-        hookFile: (h) => path39.join(h, ".gemini", "config", "hooks.json"),
+        hookFile: (h) => path40.join(h, ".gemini", "config", "hooks.json"),
         hookFormat: "matcher",
         hookEvents: [ck("PreToolUse"), lg("PostToolUse")],
-        mcpFile: (h) => path39.join(h, ".gemini", "config", "mcp_config.json"),
-        present: (h) => exists(path39.join(h, ".gemini", "config", "hooks.json")) || exists(path39.join(h, ".gemini", "antigravity-cli")) || exists(path39.join(h, ".gemini", "antigravity-ide"))
+        mcpFile: (h) => path40.join(h, ".gemini", "config", "mcp_config.json"),
+        present: (h) => exists(path40.join(h, ".gemini", "config", "hooks.json")) || exists(path40.join(h, ".gemini", "antigravity-cli")) || exists(path40.join(h, ".gemini", "antigravity-ide"))
       },
       {
         id: "copilot",
         label: "GitHub Copilot",
         setupCommand: "node9 agents add copilot",
-        hookFile: (h) => path39.join(h, ".copilot", "hooks", "node9.json"),
+        hookFile: (h) => path40.join(h, ".copilot", "hooks", "node9.json"),
         hookFormat: "flat",
         hookEvents: [ck("PreToolUse"), lg("PostToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path39.join(h, ".copilot", "mcp-config.json"),
-        present: (h) => exists(path39.join(h, ".copilot"))
+        mcpFile: (h) => path40.join(h, ".copilot", "mcp-config.json"),
+        present: (h) => exists(path40.join(h, ".copilot"))
       },
       {
         id: "cursor",
@@ -27688,8 +27837,8 @@ var init_agent_wiring = __esm({
         // MCP-only — no hook file (see note above).
         hookFormat: "flat",
         hookEvents: [],
-        mcpFile: (h) => path39.join(h, ".cursor", "mcp.json"),
-        present: (h) => exists(path39.join(h, ".cursor", "mcp.json"))
+        mcpFile: (h) => path40.join(h, ".cursor", "mcp.json"),
+        present: (h) => exists(path40.join(h, ".cursor", "mcp.json"))
       },
       {
         id: "hermes",
@@ -27710,8 +27859,8 @@ var init_agent_wiring = __esm({
         setupCommand: "node9 agents add opencode",
         hookFormat: "flat",
         hookEvents: [],
-        shimFile: (h) => path39.join(opencodeConfigDir(h), "plugins", "node9.js"),
-        present: (h) => exists(opencodeConfigDir(h)) || exists(path39.join(opencodeConfigDir(h), "plugins", "node9.js"))
+        shimFile: (h) => path40.join(opencodeConfigDir(h), "plugins", "node9.js"),
+        present: (h) => exists(opencodeConfigDir(h)) || exists(path40.join(opencodeConfigDir(h), "plugins", "node9.js"))
       },
       {
         id: "pi",
@@ -27719,8 +27868,8 @@ var init_agent_wiring = __esm({
         setupCommand: "node9 agents add pi",
         hookFormat: "flat",
         hookEvents: [],
-        shimFile: (h) => path39.join(h, ".pi", "agent", "extensions", "node9.js"),
-        present: (h) => exists(path39.join(h, ".pi", "agent")) || exists(path39.join(h, ".pi", "agent", "extensions", "node9.js"))
+        shimFile: (h) => path40.join(h, ".pi", "agent", "extensions", "node9.js"),
+        present: (h) => exists(path40.join(h, ".pi", "agent")) || exists(path40.join(h, ".pi", "agent", "extensions", "node9.js"))
       }
     ];
   }
@@ -27771,14 +27920,14 @@ var init_codex_trust = __esm({
 });
 
 // src/daemon/hook-baseline.ts
-import path40 from "path";
+import path41 from "path";
 import os28 from "os";
 var BASELINE_FILE, NOTIFIED_FILE;
 var init_hook_baseline = __esm({
   "src/daemon/hook-baseline.ts"() {
     "use strict";
-    BASELINE_FILE = path40.join(os28.homedir(), ".node9", "hooks-baseline.json");
-    NOTIFIED_FILE = path40.join(os28.homedir(), ".node9", "hook-heal-notified.json");
+    BASELINE_FILE = path41.join(os28.homedir(), ".node9", "hooks-baseline.json");
+    NOTIFIED_FILE = path41.join(os28.homedir(), ".node9", "hook-heal-notified.json");
   }
 });
 
@@ -27797,7 +27946,7 @@ var init_setup_pi_shim = __esm({
 });
 
 // src/setup.ts
-import path41 from "path";
+import path42 from "path";
 import os29 from "os";
 import chalk3 from "chalk";
 import { confirm as rawConfirm } from "@inquirer/prompts";
@@ -27805,16 +27954,16 @@ import { parse as parseToml5, stringify as stringifyToml2 } from "smol-toml";
 import * as yaml2 from "yaml";
 function opencodeConfigDir(home = os29.homedir()) {
   const xdg = process.env.XDG_CONFIG_HOME;
-  const base2 = xdg && path41.isAbsolute(xdg) ? xdg : path41.join(home, ".config");
-  return path41.join(base2, "opencode");
+  const base2 = xdg && path42.isAbsolute(xdg) ? xdg : path42.join(home, ".config");
+  return path42.join(base2, "opencode");
 }
 function hermesHomeDir(homeDir = os29.homedir()) {
   const env = process.env.HERMES_HOME?.trim();
-  if (env && path41.isAbsolute(env)) return env;
-  return path41.join(homeDir, ".hermes");
+  if (env && path42.isAbsolute(env)) return env;
+  return path42.join(homeDir, ".hermes");
 }
 function hermesConfigPath(homeDir = os29.homedir()) {
-  return path41.join(hermesHomeDir(homeDir), HERMES_CONFIG_FILENAME);
+  return path42.join(hermesHomeDir(homeDir), HERMES_CONFIG_FILENAME);
 }
 var HERMES_CONFIG_FILENAME;
 var init_setup = __esm({
@@ -27860,7 +28009,7 @@ var init_scan_history = __esm({
 // src/cli/commands/scan.ts
 import chalk5 from "chalk";
 import fs38 from "fs";
-import path42 from "path";
+import path43 from "path";
 import os30 from "os";
 import stringWidth2 from "string-width";
 function dayKey(ts) {
@@ -28074,7 +28223,7 @@ async function processClaudeFile(file2, projPath, projLabel, judge, judgeFrom, r
   const session = { sessionId, costUSD: 0, toolCalls: 0 };
   let raw;
   try {
-    raw = fs38.readFileSync(path42.join(projPath, file2), "utf-8");
+    raw = fs38.readFileSync(path43.join(projPath, file2), "utf-8");
   } catch {
     return false;
   }
@@ -28143,7 +28292,7 @@ async function processClaudeFile(file2, projPath, projLabel, judge, judgeFrom, r
           if (block.type !== "tool_result") continue;
           const filePath = block.tool_use_id ? toolUseFilePaths.get(block.tool_use_id) : void 0;
           if (filePath) {
-            const ext = path42.extname(filePath).toLowerCase();
+            const ext = path43.extname(filePath).toLowerCase();
             if (CODE_EXTENSIONS.has(ext)) continue;
           }
           const resultText = typeof block.content === "string" ? block.content : Array.isArray(block.content) ? block.content.map((c) => c.text ?? "").join("\n") : null;
@@ -28263,7 +28412,7 @@ async function processClaudeFile(file2, projPath, projLabel, judge, judgeFrom, r
   return true;
 }
 async function processClaudeProjectAsync(proj, projectsDir, judge, cache7, startDate, result, dedup, canaryVals, onProgress, onLine) {
-  const projPath = path42.join(projectsDir, proj);
+  const projPath = path43.join(projectsDir, proj);
   try {
     if (!fs38.statSync(projPath).isDirectory()) return;
   } catch {
@@ -28277,7 +28426,7 @@ async function processClaudeProjectAsync(proj, projectsDir, judge, cache7, start
     return;
   }
   for (const file2 of files) {
-    const filePath = path42.join(projPath, file2);
+    const filePath = path43.join(projPath, file2);
     const stamp = fileStamp(filePath);
     if (!fileMayHoldWindow(stamp, startDate)) continue;
     result.filesScanned++;
@@ -28420,7 +28569,7 @@ function mergeFileScan(result, file2, dedup, startDate = null) {
   }
 }
 async function scanClaudeHistoryAsync(startDate, onProgress, onLine, opts = {}) {
-  const projectsDir = path42.join(os30.homedir(), ".claude", "projects");
+  const projectsDir = path43.join(os30.homedir(), ".claude", "projects");
   const result = emptyClaudeScan();
   if (!fs38.existsSync(projectsDir)) return result;
   let projDirs;
@@ -28453,7 +28602,7 @@ async function scanClaudeHistoryAsync(startDate, onProgress, onLine, opts = {})
 }
 async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
   const canaryVals = safeCanaryScanValues();
-  const tmpDir = path42.join(os30.homedir(), ".gemini", "tmp");
+  const tmpDir = path43.join(os30.homedir(), ".gemini", "tmp");
   const result = {
     filesScanned: 0,
     sessions: 0,
@@ -28480,7 +28629,7 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
   const judge = new HistoryJudge();
   const cache7 = openScanCache(judge, opts);
   for (const slug2 of slugDirs) {
-    const slugPath = path42.join(tmpDir, slug2);
+    const slugPath = path43.join(tmpDir, slug2);
     try {
       if (!fs38.statSync(slugPath).isDirectory()) continue;
     } catch {
@@ -28489,11 +28638,11 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
     let projLabel = stripTerminalEscapes(slug2).slice(0, 40);
     try {
       projLabel = stripTerminalEscapes(
-        fs38.readFileSync(path42.join(slugPath, ".project_root"), "utf-8").trim()
+        fs38.readFileSync(path43.join(slugPath, ".project_root"), "utf-8").trim()
       ).replace(os30.homedir(), "~").slice(0, 40);
     } catch {
     }
-    const chatsDir = path42.join(slugPath, "chats");
+    const chatsDir = path43.join(slugPath, "chats");
     if (!fs38.existsSync(chatsDir)) continue;
     let chatFiles;
     try {
@@ -28503,7 +28652,7 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
     }
     for (const chatFile of chatFiles) {
       const sessionId = chatFile.replace(/\.jsonl?$/, "");
-      const filePath = path42.join(chatsDir, chatFile);
+      const filePath = path43.join(chatsDir, chatFile);
       const stamp = fileStamp(filePath);
       if (!fileMayHoldWindow(stamp, startDate)) continue;
       result.filesScanned++;
@@ -28517,7 +28666,7 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
       const fileDedup = emptyScanDedup();
       let raw;
       try {
-        raw = fs38.readFileSync(path42.join(chatsDir, chatFile), "utf-8");
+        raw = fs38.readFileSync(path43.join(chatsDir, chatFile), "utf-8");
       } catch {
         continue;
       }
@@ -28653,6 +28802,360 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
   result.policy = judge.policy(result.unknownInputs ?? {});
   return result;
 }
+function antigravityBrainDirs() {
+  return ["antigravity-cli", "antigravity-ide"].map((surface) => path43.join(os30.homedir(), ".gemini", surface, "brain")).filter((p) => fs38.existsSync(p));
+}
+function antigravityTranscriptPath(convPath) {
+  const logsDir = path43.join(convPath, ".system_generated", "logs");
+  for (const name of ["transcript_full.jsonl", "transcript.jsonl"]) {
+    const p = path43.join(logsDir, name);
+    if (fs38.existsSync(p)) return p;
+  }
+  return null;
+}
+async function scanAntigravityHistory(startDate, onProgress, onLine, opts = {}) {
+  const canaryVals = safeCanaryScanValues();
+  const result = {
+    filesScanned: 0,
+    sessions: 0,
+    totalToolCalls: 0,
+    bashCalls: 0,
+    findings: [],
+    dlpFindings: [],
+    canaryFindings: [],
+    loopFindings: [],
+    totalCostUSD: 0,
+    // transcripts carry no token/model data
+    firstDate: null,
+    lastDate: null,
+    sessionsWithEarlySecrets: 0,
+    perSession: []
+  };
+  const dedup = emptyScanDedup();
+  const brainDirs = antigravityBrainDirs();
+  if (brainDirs.length === 0) return result;
+  const judge = new HistoryJudge();
+  const cache7 = openScanCache(judge, opts);
+  for (const brainDir of brainDirs) {
+    let convDirs;
+    try {
+      convDirs = fs38.readdirSync(brainDir);
+    } catch {
+      continue;
+    }
+    for (const conv of convDirs) {
+      const convPath = path43.join(brainDir, conv);
+      try {
+        if (!fs38.statSync(convPath).isDirectory()) continue;
+      } catch {
+        continue;
+      }
+      const transcriptFile = antigravityTranscriptPath(convPath);
+      if (!transcriptFile) continue;
+      const stamp = fileStamp(transcriptFile);
+      if (!fileMayHoldWindow(stamp, startDate)) continue;
+      result.filesScanned++;
+      onProgress?.(result.filesScanned);
+      const cached = stamp ? cache7.get(transcriptFile, stamp, judge, judgeFromFor(startDate)) : null;
+      if (cached) {
+        mergeFileScan(result, cached, dedup, startDate);
+        continue;
+      }
+      const fileResult = emptyScan();
+      const fileDedup = emptyScanDedup();
+      let raw;
+      try {
+        raw = fs38.readFileSync(transcriptFile, "utf-8");
+      } catch {
+        continue;
+      }
+      const sessionId = conv;
+      let projLabel = conv.slice(0, 8);
+      const sessionCalls = [];
+      for (const line of raw.split("\n")) {
+        if (!line.trim()) continue;
+        onLine?.();
+        let step;
+        try {
+          step = JSON.parse(line);
+        } catch {
+          continue;
+        }
+        const timestamp2 = step.created_at ?? "";
+        if (beforeJudged(judgeFromFor(startDate), timestamp2 || void 0)) continue;
+        const day = dayOf(fileResult, timestamp2 || void 0);
+        if (fileResult.sessions === 0) fileResult.sessions = 1;
+        if (step.type === "USER_INPUT") {
+          const text = typeof step.content === "string" ? step.content : "";
+          if (text) {
+            const decoysHere5 = recordCanaries(
+              { text },
+              "user-prompt",
+              timestamp2,
+              projLabel,
+              sessionId,
+              "antigravity",
+              fileResult,
+              fileDedup,
+              canaryVals
+            );
+            const dlpMatch = scanArgs(scrubDecoys({ text }, decoysHere5));
+            if (dlpMatch) {
+              const k = dlpKey(dlpMatch.patternName, dlpMatch.redactedSample, projLabel, timestamp2);
+              if (!fileDedup.dlpKeys.has(k)) {
+                fileDedup.dlpKeys.add(k);
+                fileResult.dlpFindings.push({
+                  patternName: dlpMatch.patternName,
+                  redactedSample: dlpMatch.redactedSample,
+                  toolName: "user-prompt",
+                  timestamp: timestamp2,
+                  project: projLabel,
+                  sessionId,
+                  agent: "antigravity"
+                });
+              }
+            }
+          }
+          continue;
+        }
+        if (!Array.isArray(step.tool_calls) || step.tool_calls.length === 0) continue;
+        if (timestamp2) {
+          if (!fileResult.firstDate || timestamp2 < fileResult.firstDate)
+            fileResult.firstDate = timestamp2;
+          if (!fileResult.lastDate || timestamp2 > fileResult.lastDate)
+            fileResult.lastDate = timestamp2;
+        }
+        for (const tc of step.tool_calls) {
+          fileResult.totalToolCalls++;
+          day.toolCalls++;
+          const toolName = tc.name ?? "";
+          countMcpCall(fileResult, toolName, day);
+          const toolNameLower = toolName.toLowerCase();
+          const input = canonicalToolInput(toolName, tc.args ?? {});
+          sessionCalls.push({ toolName, input, timestamp: timestamp2 });
+          const shellInput = resolveShellInput(toolNameLower, input, toolInspectionMap);
+          const isShellTool = shellInput.kind === "shell";
+          if (isShellTool) {
+            fileResult.bashCalls++;
+            day.bashCalls++;
+            const cwd = String(input.cwd ?? "");
+            if (cwd && projLabel === conv.slice(0, 8)) {
+              projLabel = stripTerminalEscapes(cwd).replace(os30.homedir(), "~").slice(0, 40);
+            }
+          }
+          const rawCmd = String(input.command ?? "").trimStart();
+          if (/^node9\s+(scan|explain|report|tail|dlp|status|sessions|audit)\b/.test(rawCmd))
+            continue;
+          const decoysHere6 = recordCanaries(
+            input,
+            toolName,
+            timestamp2,
+            projLabel,
+            sessionId,
+            "antigravity",
+            fileResult,
+            fileDedup,
+            canaryVals
+          );
+          const judged = await judge.judge(
+            {
+              agent: "antigravity",
+              toolName,
+              input,
+              scrubbed: decoysHere6.length ? scrubDecoys(input, decoysHere6) : void 0,
+              timestamp: timestamp2,
+              sessionId,
+              project: projLabel,
+              cwd: typeof input.cwd === "string" && path43.isAbsolute(input.cwd) ? input.cwd : void 0
+            },
+            fileResult,
+            fileDedup
+          );
+          addUnknown(day, judged.verdict.unknown);
+        }
+      }
+      fileResult.loopFindings.push(
+        ...detectLoops(sessionCalls, projLabel, sessionId, "antigravity")
+      );
+      if (stamp)
+        cache7.put(transcriptFile, stamp, "antigravity", fileResult, judge, judgeFromFor(startDate));
+      mergeFileScan(result, fileResult, dedup, startDate);
+      await yieldTick();
+    }
+  }
+  cache7.close();
+  result.policy = judge.policy(result.unknownInputs ?? {});
+  return result;
+}
+async function scanCopilotHistory(startDate, onProgress, onLine, opts = {}) {
+  const canaryVals = safeCanaryScanValues();
+  const sessionDir = path43.join(os30.homedir(), ".copilot", "session-state");
+  const result = {
+    filesScanned: 0,
+    sessions: 0,
+    totalToolCalls: 0,
+    bashCalls: 0,
+    findings: [],
+    dlpFindings: [],
+    canaryFindings: [],
+    loopFindings: [],
+    totalCostUSD: 0,
+    // event logs carry no token/cost rollup
+    firstDate: null,
+    lastDate: null,
+    sessionsWithEarlySecrets: 0,
+    perSession: []
+  };
+  const dedup = emptyScanDedup();
+  if (!fs38.existsSync(sessionDir)) return result;
+  let sessionIds;
+  try {
+    sessionIds = fs38.readdirSync(sessionDir);
+  } catch {
+    return result;
+  }
+  const judge = new HistoryJudge();
+  const cache7 = openScanCache(judge, opts);
+  for (const sessionId of sessionIds) {
+    const eventsPath = path43.join(sessionDir, sessionId, "events.jsonl");
+    if (!fs38.existsSync(eventsPath)) continue;
+    const stamp = fileStamp(eventsPath);
+    if (!fileMayHoldWindow(stamp, startDate)) continue;
+    result.filesScanned++;
+    onProgress?.(result.filesScanned);
+    const cached = stamp ? cache7.get(eventsPath, stamp, judge, judgeFromFor(startDate)) : null;
+    if (cached) {
+      mergeFileScan(result, cached, dedup, startDate);
+      continue;
+    }
+    const fileResult = emptyScan();
+    const fileDedup = emptyScanDedup();
+    let raw;
+    try {
+      raw = fs38.readFileSync(eventsPath, "utf-8");
+    } catch {
+      continue;
+    }
+    let projLabel = sessionId.slice(0, 8);
+    let sessionCwd;
+    const sessionCalls = [];
+    for (const row of parseCopilotSession(raw.split("\n"))) {
+      if (beforeJudged(judgeFromFor(startDate), row.date || void 0)) continue;
+      fileResult.totalCostUSD += row.costUSD;
+      dayOf(fileResult, row.date || void 0, false).costUSD += row.costUSD;
+    }
+    for (const line of raw.split("\n")) {
+      if (!line.trim()) continue;
+      onLine?.();
+      let ev;
+      try {
+        ev = JSON.parse(line);
+      } catch {
+        continue;
+      }
+      const timestamp2 = ev.timestamp ?? "";
+      if (ev.type === "session.start") {
+        const cwd = ev.data?.context?.cwd;
+        if (typeof cwd === "string" && cwd) {
+          projLabel = stripTerminalEscapes(cwd).replace(os30.homedir(), "~").slice(0, 40);
+          if (path43.isAbsolute(cwd)) sessionCwd = cwd;
+        }
+        continue;
+      }
+      if (beforeJudged(judgeFromFor(startDate), timestamp2 || void 0)) continue;
+      const day = dayOf(fileResult, timestamp2 || void 0);
+      if (fileResult.sessions === 0) fileResult.sessions = 1;
+      if (ev.type === "user.message") {
+        const text = ev.data?.content ?? ev.data?.text ?? "";
+        if (typeof text === "string" && text) {
+          const decoysHere7 = recordCanaries(
+            { text },
+            "user-prompt",
+            timestamp2,
+            projLabel,
+            sessionId,
+            "copilot",
+            fileResult,
+            fileDedup,
+            canaryVals
+          );
+          const dlpMatch = scanArgs(scrubDecoys({ text }, decoysHere7));
+          if (dlpMatch) {
+            const k = dlpKey(dlpMatch.patternName, dlpMatch.redactedSample, projLabel, timestamp2);
+            if (!fileDedup.dlpKeys.has(k)) {
+              fileDedup.dlpKeys.add(k);
+              fileResult.dlpFindings.push({
+                patternName: dlpMatch.patternName,
+                redactedSample: dlpMatch.redactedSample,
+                toolName: "user-prompt",
+                timestamp: timestamp2,
+                project: projLabel,
+                sessionId,
+                agent: "copilot"
+              });
+            }
+          }
+        }
+        continue;
+      }
+      if (ev.type !== "tool.execution_start") continue;
+      const toolName = ev.data?.toolName ?? "";
+      const toolNameLower = toolName.toLowerCase();
+      const input = ev.data?.arguments ?? {};
+      fileResult.totalToolCalls++;
+      day.toolCalls++;
+      countMcpCall(fileResult, toolName, day);
+      sessionCalls.push({ toolName, input, timestamp: timestamp2 });
+      const shellInput = resolveShellInput(toolNameLower, input, toolInspectionMap);
+      const isShellTool = shellInput.kind === "shell";
+      if (isShellTool) {
+        fileResult.bashCalls++;
+        day.bashCalls++;
+      }
+      if (timestamp2) {
+        if (!fileResult.firstDate || timestamp2 < fileResult.firstDate)
+          fileResult.firstDate = timestamp2;
+        if (!fileResult.lastDate || timestamp2 > fileResult.lastDate)
+          fileResult.lastDate = timestamp2;
+      }
+      const rawCmd = String(input.command ?? "").trimStart();
+      if (/^node9\s+(scan|explain|report|tail|dlp|status|sessions|audit)\b/.test(rawCmd)) continue;
+      const decoysHere8 = recordCanaries(
+        input,
+        toolName,
+        timestamp2,
+        projLabel,
+        sessionId,
+        "copilot",
+        fileResult,
+        fileDedup,
+        canaryVals
+      );
+      const judged = await judge.judge(
+        {
+          agent: "copilot",
+          toolName,
+          input,
+          scrubbed: decoysHere8.length ? scrubDecoys(input, decoysHere8) : void 0,
+          timestamp: timestamp2,
+          sessionId,
+          project: projLabel,
+          cwd: sessionCwd
+        },
+        fileResult,
+        fileDedup
+      );
+      addUnknown(day, judged.verdict.unknown);
+    }
+    fileResult.loopFindings.push(...detectLoops(sessionCalls, projLabel, sessionId, "copilot"));
+    if (stamp) cache7.put(eventsPath, stamp, "copilot", fileResult, judge, judgeFromFor(startDate));
+    mergeFileScan(result, fileResult, dedup, startDate);
+    await yieldTick();
+  }
+  cache7.close();
+  result.policy = judge.policy(result.unknownInputs ?? {});
+  return result;
+}
 async function scanCodexHistory(startDate, onProgress, onLine, opts = {}) {
   const canaryVals = safeCanaryScanValues();
   const result = {
@@ -28712,7 +29215,7 @@ async function scanCodexHistory(startDate, onProgress, onLine, opts = {}) {
         startTime = String(payload["timestamp"] ?? "");
         const cwd = String(payload["cwd"] ?? "");
         projLabel = stripTerminalEscapes(cwd.replace(os30.homedir(), "~")).slice(0, 40);
-        if (path42.isAbsolute(cwd)) sessionCwd = cwd;
+        if (path43.isAbsolute(cwd)) sessionCwd = cwd;
         continue;
       }
       if (entry.type === "event_msg" && payload["type"] === "user_message") {
@@ -28912,10 +29415,10 @@ var init_scan = __esm({
 // src/tui/dashboard/data.ts
 import fs39 from "fs";
 import os31 from "os";
-import path43 from "path";
+import path44 from "path";
 import http2 from "http";
 function auditLogPath() {
-  return path43.join(os31.homedir(), ".node9", "audit.log");
+  return path44.join(os31.homedir(), ".node9", "audit.log");
 }
 function readAuditEntriesAsync(chunkSize = 1e3, customPath) {
   return new Promise((resolve) => {
@@ -29062,9 +29565,9 @@ function shortenPath(p) {
   return p.startsWith(home) ? p.replace(home, "~") : p;
 }
 async function loadReportAuditAsync(period) {
-  const claudeProjectsDir = path43.join(os31.homedir(), ".claude", "projects");
+  const claudeProjectsDir = path44.join(os31.homedir(), ".claude", "projects");
   const codexSessionsDir2 = codexSessionsDir();
-  const geminiTmpDir = path43.join(os31.homedir(), ".gemini", "tmp");
+  const geminiTmpDir = path44.join(os31.homedir(), ".gemini", "tmp");
   const { start, end } = getDateRange(period, /* @__PURE__ */ new Date());
   const entries = await readAuditEntriesAsync();
   void ensurePricingLoaded();
@@ -29103,9 +29606,17 @@ function startScanWalk(onUpdate) {
       if (cancelled) return;
       const codex = await scanCodexHistory(lookbackStart);
       if (cancelled) return;
+      await yieldToEventLoop();
+      if (cancelled) return;
+      const copilot = await scanCopilotHistory(lookbackStart);
+      if (cancelled) return;
+      await yieldToEventLoop();
+      if (cancelled) return;
+      const antigravity = await scanAntigravityHistory(lookbackStart);
+      if (cancelled) return;
       onUpdate({
         status: "ready",
-        results: { claude, gemini, codex },
+        results: { claude, gemini, codex, copilot, antigravity },
         readyAt: Date.now()
       });
     } catch (err) {
@@ -30034,7 +30545,7 @@ var init_util = __esm({
     BLOCK_REASON_LABELS = {
       timeout: "Approval timeout",
       "smart-rule-block": "Smart rule",
-      "observe-mode-dlp-would-block": "DLP (observe)",
+      "observe-mode-dlp-would-block": "DLP (audit)",
       "persistent-deny": "Persistent deny",
       "local-decision": "User denied",
       "dlp-block": "DLP block",
@@ -30176,8 +30687,8 @@ import { Fragment as Fragment3, jsx as jsx4, jsxs as jsxs4 } from "react/jsx-run
 function TopToolsProjects({ audit }) {
   const data = audit?.data;
   const tools = data ? [...data.toolMap.entries()].sort(([, a], [, b]) => b.calls - a.calls).slice(0, ROW_LIMIT) : [];
-  const projects = data ? [...data.cost.byProject.entries()].map(([path44, r]) => ({
-    name: basenameOf(path44),
+  const projects = data ? [...data.cost.byProject.entries()].map(([path45, r]) => ({
+    name: basenameOf(path45),
     cost: r.cost,
     tokens: r.inputTokens + r.outputTokens
   })).sort((a, b) => b.cost - a.cost).slice(0, ROW_LIMIT) : [];
@@ -30546,23 +31057,12 @@ function filterScanByPeriod(ready, period, now = /* @__PURE__ */ new Date()) {
     if (Number.isNaN(t)) return false;
     return t >= startMs && t <= endMs;
   };
-  const allLeaks = [
-    ...ready.results.claude.dlpFindings,
-    ...ready.results.gemini.dlpFindings,
-    ...ready.results.codex.dlpFindings
-  ].filter((f) => inPeriod(f.timestamp));
-  const allLoops = [
-    ...ready.results.claude.loopFindings,
-    ...ready.results.gemini.loopFindings,
-    ...ready.results.codex.loopFindings
-  ].filter((f) => inPeriod(f.timestamp));
-  const allFindings = [
-    ...ready.results.claude.findings,
-    ...ready.results.gemini.findings,
-    ...ready.results.codex.findings
-  ].filter((f) => inPeriod(f.timestamp));
-  const totalToolCalls = ready.results.claude.totalToolCalls + ready.results.gemini.totalToolCalls + ready.results.codex.totalToolCalls;
-  const sessionsWithEarlySecrets = ready.results.claude.sessionsWithEarlySecrets + ready.results.gemini.sessionsWithEarlySecrets + ready.results.codex.sessionsWithEarlySecrets;
+  const slots = Object.values(ready.results);
+  const allLeaks = slots.flatMap((r) => r.dlpFindings).filter((f) => inPeriod(f.timestamp));
+  const allLoops = slots.flatMap((r) => r.loopFindings).filter((f) => inPeriod(f.timestamp));
+  const allFindings = slots.flatMap((r) => r.findings).filter((f) => inPeriod(f.timestamp));
+  const totalToolCalls = slots.reduce((n, r) => n + r.totalToolCalls, 0);
+  const sessionsWithEarlySecrets = slots.reduce((n, r) => n + r.sessionsWithEarlySecrets, 0);
   return {
     leaks: allLeaks,
     loops: allLoops,
@@ -30614,8 +31114,8 @@ function pickTopLoopFile(loops) {
     map.set(k, (map.get(k) ?? 0) + (l.count ?? 0));
   }
   if (map.size === 0) return void 0;
-  const [path44, count] = [...map.entries()].sort((a, b) => b[1] - a[1])[0];
-  return { path: path44, count };
+  const [path45, count] = [...map.entries()].sort((a, b) => b[1] - a[1])[0];
+  return { path: path45, count };
 }
 var EMPTY_FILTERED_SCAN;
 var init_derive = __esm({