@node9/proxy 2.45.0 → 2.46.1

package/dist/dashboard.mjs

@@ -18747,79 +18747,6 @@ var init_credential_files = __esm({
   }
 });
 
-// src/cli/commands/blast.ts
-import chalk from "chalk";
-import fs5 from "fs";
-import path6 from "path";
-import os4 from "os";
-function buildSensitivePaths(home, cwd) {
-  const homeFiles = homeCredentialFiles(home).map(({ full, label: label2, description, score }) => ({
-    full,
-    label: label2,
-    description,
-    score
-  }));
-  return [
-    ...homeFiles,
-    {
-      full: path6.join(cwd, ".env"),
-      label: ".env  (current folder)",
-      description: "App secrets: database passwords, API keys",
-      score: 20
-    },
-    {
-      full: path6.join(cwd, ".env.local"),
-      label: ".env.local  (current folder)",
-      description: "Local overrides: often contains real credentials",
-      score: 15
-    },
-    {
-      full: path6.join(cwd, ".env.production"),
-      label: ".env.production  (current folder)",
-      description: "Production secrets",
-      score: 20
-    }
-  ];
-}
-function isReadable(filePath) {
-  try {
-    fs5.accessSync(filePath, fs5.constants.R_OK);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function runBlast() {
-  const home = os4.homedir();
-  const cwd = process.cwd();
-  const paths = buildSensitivePaths(home, cwd);
-  let scoreDeduction = 0;
-  const reachable = [];
-  for (const p of paths) {
-    if (fs5.existsSync(p.full) && isReadable(p.full)) {
-      reachable.push(p);
-      scoreDeduction += p.score;
-    }
-  }
-  const envFindings = [];
-  for (const [key, value] of Object.entries(process.env)) {
-    if (!value) continue;
-    const match = scanArgs({ [key]: value });
-    if (match) {
-      envFindings.push({ key, patternName: match.patternName });
-      scoreDeduction += 10;
-    }
-  }
-  return { reachable, envFindings, score: Math.max(0, 100 - scoreDeduction) };
-}
-var init_blast = __esm({
-  "src/cli/commands/blast.ts"() {
-    "use strict";
-    init_dlp();
-    init_credential_files();
-  }
-});
-
 // src/mcp-cmd.ts
 var init_mcp_cmd = __esm({
   "src/mcp-cmd.ts"() {
@@ -18872,14 +18799,14 @@ var init_codex_trust = __esm({
 });
 
 // src/daemon/hook-baseline.ts
-import path7 from "path";
-import os5 from "os";
+import path6 from "path";
+import os4 from "os";
 var BASELINE_FILE, NOTIFIED_FILE;
 var init_hook_baseline = __esm({
   "src/daemon/hook-baseline.ts"() {
     "use strict";
-    BASELINE_FILE = path7.join(os5.homedir(), ".node9", "hooks-baseline.json");
-    NOTIFIED_FILE = path7.join(os5.homedir(), ".node9", "hook-heal-notified.json");
+    BASELINE_FILE = path6.join(os4.homedir(), ".node9", "hooks-baseline.json");
+    NOTIFIED_FILE = path6.join(os4.homedir(), ".node9", "hook-heal-notified.json");
   }
 });
 
@@ -18898,27 +18825,27 @@ var init_setup_pi_shim = __esm({
 });
 
 // src/utils/atomic-write.ts
-import fs6 from "fs";
-import path8 from "path";
+import fs5 from "fs";
+import path7 from "path";
 import { randomUUID } from "crypto";
 function atomicWriteSync(filePath, data, options) {
-  const dir2 = path8.dirname(filePath);
-  if (!fs6.existsSync(dir2)) fs6.mkdirSync(dir2, { recursive: true });
+  const dir2 = path7.dirname(filePath);
+  if (!fs5.existsSync(dir2)) fs5.mkdirSync(dir2, { recursive: true });
   const tmpPath = `${filePath}.${randomUUID()}.tmp`;
   try {
-    fs6.writeFileSync(tmpPath, data, options);
+    fs5.writeFileSync(tmpPath, data, options);
   } catch (err) {
     try {
-      fs6.unlinkSync(tmpPath);
+      fs5.unlinkSync(tmpPath);
     } catch {
     }
     throw err;
   }
   try {
-    fs6.renameSync(tmpPath, filePath);
+    fs5.renameSync(tmpPath, filePath);
   } catch (err) {
     try {
-      fs6.unlinkSync(tmpPath);
+      fs5.unlinkSync(tmpPath);
     } catch {
     }
     throw err;
@@ -18931,10 +18858,10 @@ var init_atomic_write = __esm({
 });
 
 // src/setup.ts
-import fs7 from "fs";
-import path9 from "path";
-import os6 from "os";
-import chalk2 from "chalk";
+import fs6 from "fs";
+import path8 from "path";
+import os5 from "os";
+import chalk from "chalk";
 import { confirm as rawConfirm } from "@inquirer/prompts";
 import { parse as parseToml4, stringify as stringifyToml2 } from "smol-toml";
 import * as yaml from "yaml";
@@ -18946,9 +18873,9 @@ function isNode9Hook(cmd) {
   // fell into after #185.
   /[/\\]\.node9[/\\]bin[/\\]hook"? (?:check|log)/.test(cmd);
 }
-function claudeDesktopConfigPath(homeDir = os6.homedir()) {
+function claudeDesktopConfigPath(homeDir = os5.homedir()) {
   if (process.platform === "darwin") {
-    return path9.join(
+    return path8.join(
       homeDir,
       "Library",
       "Application Support",
@@ -18957,47 +18884,47 @@ function claudeDesktopConfigPath(homeDir = os6.homedir()) {
     );
   }
   if (process.platform === "linux") {
-    return path9.join(homeDir, ".config", "Claude", "claude_desktop_config.json");
+    return path8.join(homeDir, ".config", "Claude", "claude_desktop_config.json");
   }
   if (process.platform === "win32") {
-    const appData = process.env.APPDATA || path9.join(homeDir, "AppData", "Roaming");
-    return path9.join(appData, "Claude", "claude_desktop_config.json");
+    const appData = process.env.APPDATA || path8.join(homeDir, "AppData", "Roaming");
+    return path8.join(appData, "Claude", "claude_desktop_config.json");
   }
   return null;
 }
-function opencodeConfigDir(home = os6.homedir()) {
+function opencodeConfigDir(home = os5.homedir()) {
   const xdg = process.env.XDG_CONFIG_HOME;
-  const base2 = xdg && path9.isAbsolute(xdg) ? xdg : path9.join(home, ".config");
-  return path9.join(base2, "opencode");
+  const base2 = xdg && path8.isAbsolute(xdg) ? xdg : path8.join(home, ".config");
+  return path8.join(base2, "opencode");
 }
 function commonBinDirs(home) {
   return [
-    path9.join(home, ".local", "bin"),
-    path9.join(home, ".bun", "bin"),
-    path9.join(home, ".npm-global", "bin"),
+    path8.join(home, ".local", "bin"),
+    path8.join(home, ".bun", "bin"),
+    path8.join(home, ".npm-global", "bin"),
     "/usr/local/bin",
     "/opt/homebrew/bin"
   ];
 }
-function binaryInPath(binary, home = os6.homedir()) {
+function binaryInPath(binary, home = os5.homedir()) {
   const pathEnv = process.env.PATH ?? "";
-  const dirs = [...pathEnv.split(path9.delimiter), ...commonBinDirs(home)];
+  const dirs = [...pathEnv.split(path8.delimiter), ...commonBinDirs(home)];
   const seen = /* @__PURE__ */ new Set();
   for (const dir2 of dirs) {
     if (!dir2 || seen.has(dir2)) continue;
     seen.add(dir2);
     try {
-      fs7.accessSync(path9.join(dir2, binary), fs7.constants.X_OK);
+      fs6.accessSync(path8.join(dir2, binary), fs6.constants.X_OK);
       return true;
     } catch {
     }
   }
   return false;
 }
-function detectAgents(homeDir = os6.homedir()) {
+function detectAgents(homeDir = os5.homedir()) {
   const exists2 = (p) => {
     try {
-      return fs7.existsSync(p);
+      return fs6.existsSync(p);
     } catch (err) {
       const code = err.code;
       if (code !== "ENOENT") {
@@ -19009,7 +18936,7 @@ function detectAgents(homeDir = os6.homedir()) {
   };
   const desktopPath = claudeDesktopConfigPath(homeDir);
   return {
-    claude: exists2(path9.join(homeDir, ".claude")) || exists2(path9.join(homeDir, ".claude.json")),
+    claude: exists2(path8.join(homeDir, ".claude")) || exists2(path8.join(homeDir, ".claude.json")),
     // Antigravity (agy) shares the ~/.gemini root, so a bare
     // `exists(~/.gemini)` would report the (EOL'd) Gemini CLI as
     // installed on every agy machine — and `node9 init` would then
@@ -19019,19 +18946,19 @@ function detectAgents(homeDir = os6.homedir()) {
     // creates ~/.gemini/settings.json on first run; agy does not touch
     // it (it uses antigravity-cli/settings.json) — that file is the
     // legacy-CLI discriminator.
-    gemini: exists2(path9.join(homeDir, ".gemini", "settings.json")) || binaryInPath("gemini", homeDir),
+    gemini: exists2(path8.join(homeDir, ".gemini", "settings.json")) || binaryInPath("gemini", homeDir),
     // agy creates ~/.gemini/antigravity-cli/ on first launch; the IDE
     // creates antigravity-ide/. PATH fallback covers installed-but-
     // never-launched (same class as opencode #186).
-    antigravity: exists2(path9.join(homeDir, ".gemini", "antigravity-cli")) || exists2(path9.join(homeDir, ".gemini", "antigravity-ide")) || binaryInPath("agy", homeDir),
+    antigravity: exists2(path8.join(homeDir, ".gemini", "antigravity-cli")) || exists2(path8.join(homeDir, ".gemini", "antigravity-ide")) || binaryInPath("agy", homeDir),
     // GitHub Copilot CLI creates ~/.copilot on first launch; PATH
     // fallback covers installed-but-never-launched (same as opencode #186).
-    copilot: exists2(path9.join(homeDir, ".copilot")) || binaryInPath("copilot", homeDir),
-    cursor: exists2(path9.join(homeDir, ".cursor")),
-    codex: exists2(path9.join(homeDir, ".codex")),
-    windsurf: exists2(path9.join(homeDir, ".codeium", "windsurf")),
-    vscode: exists2(path9.join(homeDir, ".vscode")),
-    claudeDesktop: desktopPath !== null && exists2(path9.dirname(desktopPath)),
+    copilot: exists2(path8.join(homeDir, ".copilot")) || binaryInPath("copilot", homeDir),
+    cursor: exists2(path8.join(homeDir, ".cursor")),
+    codex: exists2(path8.join(homeDir, ".codex")),
+    windsurf: exists2(path8.join(homeDir, ".codeium", "windsurf")),
+    vscode: exists2(path8.join(homeDir, ".vscode")),
+    claudeDesktop: desktopPath !== null && exists2(path8.dirname(desktopPath)),
     // Opencode creates its config dir lazily on first launch — fall back to a
     // PATH lookup so installed-but-never-launched CLIs are still wired. Config
     // dir honors $XDG_CONFIG_HOME via opencodeConfigDir (#186, custom-XDG).
@@ -19042,7 +18969,7 @@ function detectAgents(homeDir = os6.homedir()) {
     // dir lazily on first launch — same class of bug as opencode's #186
     // (design R6) — so fall back to PATH lookup for installed-but-never-
     // launched pi.
-    pi: exists2(path9.join(homeDir, ".pi", "agent")) || binaryInPath("pi", homeDir),
+    pi: exists2(path8.join(homeDir, ".pi", "agent")) || binaryInPath("pi", homeDir),
     // Hermes Agent (https://github.com/NousResearch/hermes-agent): home dir
     // is $HERMES_HOME (default ~/.hermes) per hermes_constants.py:30. config.yaml
     // appears after `hermes setup` has run; the directory alone exists from
@@ -19051,13 +18978,13 @@ function detectAgents(homeDir = os6.homedir()) {
     hermes: exists2(hermesHomeDir(homeDir)) || binaryInPath("hermes", homeDir)
   };
 }
-function hermesHomeDir(homeDir = os6.homedir()) {
+function hermesHomeDir(homeDir = os5.homedir()) {
   const env = process.env.HERMES_HOME?.trim();
-  if (env && path9.isAbsolute(env)) return env;
-  return path9.join(homeDir, ".hermes");
+  if (env && path8.isAbsolute(env)) return env;
+  return path8.join(homeDir, ".hermes");
 }
-function hermesConfigPath(homeDir = os6.homedir()) {
-  return path9.join(hermesHomeDir(homeDir), HERMES_CONFIG_FILENAME);
+function hermesConfigPath(homeDir = os5.homedir()) {
+  return path8.join(hermesHomeDir(homeDir), HERMES_CONFIG_FILENAME);
 }
 var HERMES_CONFIG_FILENAME;
 var init_setup = __esm({
@@ -19076,15 +19003,15 @@ var init_setup = __esm({
 });
 
 // src/agent-wiring.ts
-import fs8 from "fs";
-import path10 from "path";
-import os7 from "os";
+import fs7 from "fs";
+import path9 from "path";
+import os6 from "os";
 import * as yaml2 from "yaml";
 import { parse as parseToml5 } from "smol-toml";
 function readJson(filePath) {
-  if (!fs8.existsSync(filePath)) return null;
+  if (!fs7.existsSync(filePath)) return null;
   try {
-    return JSON.parse(fs8.readFileSync(filePath, "utf-8"));
+    return JSON.parse(fs7.readFileSync(filePath, "utf-8"));
   } catch {
     return "invalid";
   }
@@ -19096,10 +19023,10 @@ function flatHaveNode9Hook(entries) {
   return (Array.isArray(entries) ? entries : []).some((h) => isNode9Hook(h.command));
 }
 function readHookRoot(filePath, format) {
-  if (!fs8.existsSync(filePath)) return "absent";
+  if (!fs7.existsSync(filePath)) return "absent";
   let raw;
   try {
-    raw = fs8.readFileSync(filePath, "utf-8");
+    raw = fs7.readFileSync(filePath, "utf-8");
   } catch {
     return "absent";
   }
@@ -19122,20 +19049,20 @@ function detectMcp(servers) {
   return { wrapped, present };
 }
 function readMcp(filePath, format) {
-  if (!fs8.existsSync(filePath)) return { wrapped: [], present: false };
+  if (!fs7.existsSync(filePath)) return { wrapped: [], present: false };
   try {
     if (format === "toml") {
-      const parsed2 = parseToml5(fs8.readFileSync(filePath, "utf-8"));
+      const parsed2 = parseToml5(fs7.readFileSync(filePath, "utf-8"));
       return detectMcp(parsed2?.mcp_servers);
     }
     const parsed = readJson(filePath);
     if (parsed === null || parsed === "invalid") return { wrapped: [], present: false };
-    return detectMcp(parsed.mcpServers);
+    return detectMcp(format === "vscode" ? parsed.servers : parsed.mcpServers);
   } catch {
     return { wrapped: [], present: false };
   }
 }
-function getAgentWiring(home = os7.homedir()) {
+function getAgentWiring(home = os6.homedir()) {
   const detected = detectAgents(home);
   return AGENT_SPECS.map((spec) => {
     const present = spec.present(home);
@@ -19179,7 +19106,8 @@ function getAgentWiring(home = os7.homedir()) {
       configFormat: spec.hookFormat === "yaml" ? "YAML" : "JSON",
       mcpServers: mcp ? mcp.wrapped : null,
       mcpProtected: mcp ? mcp.present : false,
-      isProtected: anyHookWired || (mcp?.present ?? false)
+      isProtected: anyHookWired || (mcp?.present ?? false),
+      protection: spec.hookEvents.length > 0 || spec.shimFile ? "hooks" : "mcp"
     };
   });
 }
@@ -19190,7 +19118,7 @@ var init_agent_wiring = __esm({
     init_setup();
     exists = (p) => {
       try {
-        return fs8.existsSync(p);
+        return fs7.existsSync(p);
       } catch {
         return false;
       }
@@ -19204,55 +19132,55 @@ var init_agent_wiring = __esm({
         id: "claude",
         label: "Claude Code",
         setupCommand: "node9 agents add claude",
-        hookFile: (h) => path10.join(h, ".claude", "settings.json"),
+        hookFile: (h) => path9.join(h, ".claude", "settings.json"),
         hookFormat: "matcher",
         // UserPromptSubmit is prompt DLP. setup.ts has written it for Claude since
         // that shipped; the spec must name it too, or status/doctor never show the
         // row and heal (which repairs via setupAgent) has no signal it is missing.
         hookEvents: [ck("PreToolUse"), lg("PostToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path10.join(h, ".claude.json"),
-        present: (h) => exists(path10.join(h, ".claude", "settings.json")) || exists(path10.join(h, ".claude.json"))
+        mcpFile: (h) => path9.join(h, ".claude.json"),
+        present: (h) => exists(path9.join(h, ".claude", "settings.json")) || exists(path9.join(h, ".claude.json"))
       },
       {
         id: "gemini",
         label: "Gemini CLI",
         setupCommand: "node9 agents add gemini",
-        hookFile: (h) => path10.join(h, ".gemini", "settings.json"),
+        hookFile: (h) => path9.join(h, ".gemini", "settings.json"),
         hookFormat: "matcher",
         hookEvents: [ck("BeforeTool"), lg("AfterTool")],
-        mcpFile: (h) => path10.join(h, ".gemini", "settings.json"),
-        present: (h) => exists(path10.join(h, ".gemini", "settings.json"))
+        mcpFile: (h) => path9.join(h, ".gemini", "settings.json"),
+        present: (h) => exists(path9.join(h, ".gemini", "settings.json"))
       },
       {
         id: "codex",
         label: "Codex",
         setupCommand: "node9 agents add codex",
-        hookFile: (h) => path10.join(h, ".codex", "hooks.json"),
+        hookFile: (h) => path9.join(h, ".codex", "hooks.json"),
         hookFormat: "matcher",
         hookEvents: [ck("PreToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path10.join(h, ".codex", "config.toml"),
+        mcpFile: (h) => path9.join(h, ".codex", "config.toml"),
         mcpFormat: "toml",
-        present: (h) => exists(path10.join(h, ".codex"))
+        present: (h) => exists(path9.join(h, ".codex"))
       },
       {
         id: "antigravity",
         label: "Antigravity",
         setupCommand: "node9 agents add antigravity",
-        hookFile: (h) => path10.join(h, ".gemini", "config", "hooks.json"),
+        hookFile: (h) => path9.join(h, ".gemini", "config", "hooks.json"),
         hookFormat: "matcher",
         hookEvents: [ck("PreToolUse"), lg("PostToolUse")],
-        mcpFile: (h) => path10.join(h, ".gemini", "config", "mcp_config.json"),
-        present: (h) => exists(path10.join(h, ".gemini", "config", "hooks.json")) || exists(path10.join(h, ".gemini", "antigravity-cli")) || exists(path10.join(h, ".gemini", "antigravity-ide"))
+        mcpFile: (h) => path9.join(h, ".gemini", "config", "mcp_config.json"),
+        present: (h) => exists(path9.join(h, ".gemini", "config", "hooks.json")) || exists(path9.join(h, ".gemini", "antigravity-cli")) || exists(path9.join(h, ".gemini", "antigravity-ide"))
       },
       {
         id: "copilot",
         label: "GitHub Copilot",
         setupCommand: "node9 agents add copilot",
-        hookFile: (h) => path10.join(h, ".copilot", "hooks", "node9.json"),
+        hookFile: (h) => path9.join(h, ".copilot", "hooks", "node9.json"),
         hookFormat: "flat",
         hookEvents: [ck("PreToolUse"), lg("PostToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path10.join(h, ".copilot", "mcp-config.json"),
-        present: (h) => exists(path10.join(h, ".copilot"))
+        mcpFile: (h) => path9.join(h, ".copilot", "mcp-config.json"),
+        present: (h) => exists(path9.join(h, ".copilot"))
       },
       {
         id: "cursor",
@@ -19261,8 +19189,45 @@ var init_agent_wiring = __esm({
         // MCP-only — no hook file (see note above).
         hookFormat: "flat",
         hookEvents: [],
-        mcpFile: (h) => path10.join(h, ".cursor", "mcp.json"),
-        present: (h) => exists(path10.join(h, ".cursor", "mcp.json"))
+        mcpFile: (h) => path9.join(h, ".cursor", "mcp.json"),
+        present: (h) => exists(path9.join(h, ".cursor", "mcp.json"))
+      },
+      // The three MCP-only agents below came over from `getAgentsStatus` (fw#421
+      // P3), so one registry answers every "is it wired" question.
+      {
+        id: "windsurf",
+        label: "Windsurf",
+        setupCommand: "node9 agents add windsurf",
+        hookFormat: "flat",
+        hookEvents: [],
+        mcpFile: (h) => path9.join(h, ".codeium", "windsurf", "mcp_config.json"),
+        mcpInventory: false,
+        present: (h) => exists(path9.join(h, ".codeium", "windsurf"))
+      },
+      {
+        id: "vscode",
+        label: "VSCode",
+        setupCommand: "node9 agents add vscode",
+        hookFormat: "flat",
+        hookEvents: [],
+        mcpFile: (h) => path9.join(h, ".vscode", "mcp.json"),
+        mcpFormat: "vscode",
+        mcpInventory: false,
+        present: (h) => exists(path9.join(h, ".vscode"))
+      },
+      {
+        id: "claudeDesktop",
+        label: "Claude Desktop",
+        setupCommand: "node9 agents add claudeDesktop",
+        hookFormat: "flat",
+        hookEvents: [],
+        // The per-platform config path; its parent directory is the footprint.
+        mcpFile: (h) => claudeDesktopConfigPath(h) ?? path9.join(h, ".config", "Claude", "claude_desktop_config.json"),
+        mcpInventory: false,
+        present: (h) => {
+          const p = claudeDesktopConfigPath(h);
+          return p !== null && exists(path9.dirname(p));
+        }
       },
       {
         id: "hermes",
@@ -19283,8 +19248,8 @@ var init_agent_wiring = __esm({
         setupCommand: "node9 agents add opencode",
         hookFormat: "flat",
         hookEvents: [],
-        shimFile: (h) => path10.join(opencodeConfigDir(h), "plugins", "node9.js"),
-        present: (h) => exists(opencodeConfigDir(h)) || exists(path10.join(opencodeConfigDir(h), "plugins", "node9.js"))
+        shimFile: (h) => path9.join(opencodeConfigDir(h), "plugins", "node9.js"),
+        present: (h) => exists(opencodeConfigDir(h)) || exists(path9.join(opencodeConfigDir(h), "plugins", "node9.js"))
       },
       {
         id: "pi",
@@ -19292,8 +19257,8 @@ var init_agent_wiring = __esm({
         setupCommand: "node9 agents add pi",
         hookFormat: "flat",
         hookEvents: [],
-        shimFile: (h) => path10.join(h, ".pi", "agent", "extensions", "node9.js"),
-        present: (h) => exists(path10.join(h, ".pi", "agent")) || exists(path10.join(h, ".pi", "agent", "extensions", "node9.js"))
+        shimFile: (h) => path9.join(h, ".pi", "agent", "extensions", "node9.js"),
+        present: (h) => exists(path9.join(h, ".pi", "agent")) || exists(path9.join(h, ".pi", "agent", "extensions", "node9.js"))
       }
     ];
   }
@@ -19383,14 +19348,14 @@ var init_build = __esm({
 });
 
 // src/shields.ts
-import fs9 from "fs";
-import path11 from "path";
-import os8 from "os";
+import fs8 from "fs";
+import path10 from "path";
+import os7 from "os";
 function loadUserShields() {
   const result = {};
   let entries;
   try {
-    entries = fs9.readdirSync(USER_SHIELDS_DIR).filter((f) => f.endsWith(".json"));
+    entries = fs8.readdirSync(USER_SHIELDS_DIR).filter((f) => f.endsWith(".json"));
   } catch (err) {
     if (err.code !== "ENOENT") {
       process.stderr.write(
@@ -19401,9 +19366,9 @@ function loadUserShields() {
     return result;
   }
   for (const file2 of entries) {
-    const filePath = path11.join(USER_SHIELDS_DIR, file2);
+    const filePath = path10.join(USER_SHIELDS_DIR, file2);
     try {
-      const raw = JSON.parse(fs9.readFileSync(filePath, "utf-8"));
+      const raw = JSON.parse(fs8.readFileSync(filePath, "utf-8"));
       const v = validateShieldDefinition(raw);
       if ("error" in v) {
         process.stderr.write(`[node9] ${v.error}: ${filePath}
@@ -19435,7 +19400,7 @@ function getShield(name) {
 }
 function readShieldsFile() {
   try {
-    const raw = fs9.readFileSync(SHIELDS_STATE_FILE, "utf-8");
+    const raw = fs8.readFileSync(SHIELDS_STATE_FILE, "utf-8");
     if (!raw.trim()) return { active: [] };
     const parsed = JSON.parse(raw);
     const active = Array.isArray(parsed.active) ? parsed.active.filter(
@@ -19468,23 +19433,23 @@ var init_shields = __esm({
     init_dist();
     init_build();
     init_dist();
-    USER_SHIELDS_DIR = path11.join(os8.homedir(), ".node9", "shields");
+    USER_SHIELDS_DIR = path10.join(os7.homedir(), ".node9", "shields");
     SHIELDS = buildSHIELDS();
-    SHIELDS_STATE_FILE = path11.join(os8.homedir(), ".node9", "shields.json");
+    SHIELDS_STATE_FILE = path10.join(os7.homedir(), ".node9", "shields.json");
   }
 });
 
 // src/shields/jail.ts
-import fs10 from "fs";
-import os9 from "os";
-import path12 from "path";
+import fs9 from "fs";
+import os8 from "os";
+import path11 from "path";
 function jailStorePath() {
-  return path12.join(os9.homedir(), ".node9", "jail-paths.json");
+  return path11.join(os8.homedir(), ".node9", "jail-paths.json");
 }
 function readJailPaths() {
   let text;
   try {
-    text = fs10.readFileSync(jailStorePath(), "utf8");
+    text = fs9.readFileSync(jailStorePath(), "utf8");
   } catch (err) {
     if (err.code === "ENOENT") return [];
     throw err;
@@ -19522,11 +19487,11 @@ var init_jail = __esm({
 });
 
 // src/canary/registry.ts
-import fs11 from "fs";
-import os10 from "os";
-import path13 from "path";
+import fs10 from "fs";
+import os9 from "os";
+import path12 from "path";
 function canaryStorePath() {
-  return path13.join(os10.homedir(), ".node9", "canaries.json");
+  return path12.join(os9.homedir(), ".node9", "canaries.json");
 }
 function isRecord(x) {
   if (!x || typeof x !== "object") return false;
@@ -19537,7 +19502,7 @@ function loadCanaries(opts) {
   const p = canaryStorePath();
   let raw;
   try {
-    raw = fs11.readFileSync(p, "utf-8");
+    raw = fs10.readFileSync(p, "utf-8");
   } catch (e) {
     if (e.code === "ENOENT") return [];
     throw e;
@@ -19576,23 +19541,23 @@ var init_registry = __esm({
 });
 
 // src/utils/read-capped.ts
-import fs12 from "fs";
+import fs11 from "fs";
 function readCapped(file2, maxBytes, openFlags = "r") {
   if (maxBytes < 0) return null;
   let fd;
   try {
-    fd = fs12.openSync(file2, openFlags);
+    fd = fs11.openSync(file2, openFlags);
   } catch {
     return null;
   }
   try {
-    const st = fs12.fstatSync(fd);
+    const st = fs11.fstatSync(fd);
     if (!st.isFile()) return null;
     const want = Math.min(st.size, maxBytes + 1);
     const buf = Buffer.alloc(want);
     let read2 = 0;
     while (read2 < want) {
-      const n = fs12.readSync(fd, buf, read2, want - read2, read2);
+      const n = fs11.readSync(fd, buf, read2, want - read2, read2);
       if (n <= 0) break;
       read2 += n;
     }
@@ -19604,7 +19569,7 @@ function readCapped(file2, maxBytes, openFlags = "r") {
     return null;
   } finally {
     try {
-      fs12.closeSync(fd);
+      fs11.closeSync(fd);
     } catch {
     }
   }
@@ -19620,13 +19585,13 @@ var init_read_capped = __esm({
 });
 
 // src/posture/secrets.ts
-import fs13 from "fs";
-import path14 from "path";
-import os11 from "os";
+import fs12 from "fs";
+import path13 from "path";
+import os10 from "os";
 function displayPath(p, home) {
   if (p === home) return "~";
-  const prefix = home.endsWith(path14.sep) ? home : home + path14.sep;
-  if (p.startsWith(prefix)) return "~" + path14.sep + p.slice(prefix.length);
+  const prefix = home.endsWith(path13.sep) ? home : home + path13.sep;
+  if (p.startsWith(prefix)) return "~" + path13.sep + p.slice(prefix.length);
   return p;
 }
 function safeRead(file2) {
@@ -19637,8 +19602,8 @@ function safeRead(file2) {
 function candidateFiles(home, cwd) {
   const files = /* @__PURE__ */ new Set();
   try {
-    for (const name of fs13.readdirSync(cwd)) {
-      if (name === ".env" || name.startsWith(".env.")) files.add(path14.join(cwd, name));
+    for (const name of fs12.readdirSync(cwd)) {
+      if (name === ".env" || name.startsWith(".env.")) files.add(path13.join(cwd, name));
     }
   } catch {
   }
@@ -19646,7 +19611,7 @@ function candidateFiles(home, cwd) {
     if (spec.hookFile) files.add(spec.hookFile(home));
     if (spec.mcpFile) files.add(spec.mcpFile(home));
   }
-  files.add(path14.join(home, ".env"));
+  files.add(path13.join(home, ".env"));
   return [...files];
 }
 function credentialMaterial(home) {
@@ -19660,7 +19625,7 @@ function plantedDecoyPaths() {
   }
 }
 function checkSecrets(ctx) {
-  const home = ctx.home || os11.homedir();
+  const home = ctx.home || os10.homedir();
   const findings = [];
   const planted = plantedDecoyPaths();
   const plaintext = [];
@@ -19696,7 +19661,7 @@ function checkSecrets(ctx) {
   for (const file2 of credentialMaterial(home)) {
     if (planted.has(file2)) continue;
     try {
-      if (fs13.statSync(file2).isFile()) {
+      if (fs12.statSync(file2).isFile()) {
         creds.push(displayPath(file2, home));
         credPaths.push(file2);
       }
@@ -19717,6 +19682,25 @@ function checkSecrets(ctx) {
       coverageProbe: { kind: "fileRead", paths: credPaths }
     });
   }
+  const envSecrets = [];
+  for (const [key, value] of Object.entries(ctx.env ?? process.env)) {
+    if (!value) continue;
+    const match = scanArgs({ [key]: value });
+    if (match) envSecrets.push(`${key} (${match.patternName})`);
+  }
+  if (envSecrets.length > 0) {
+    findings.push({
+      category: "Secrets",
+      severity: "high",
+      title: `${envSecrets.length} secret environment variable${envSecrets.length === 1 ? "" : "s"} visible to the agent`,
+      what: "A key or token is exported in the shell the agent runs from.",
+      why: "Every program the agent starts inherits the environment, so the value is one `env` away.",
+      who: "A tricked agent can read it and send it anywhere a command can reach.",
+      detail: envSecrets,
+      fix: "Unset it in the shell that starts the agent, or pass it to the one command that needs it (`env KEY=... cmd`) or a secrets manager.",
+      owner: "os"
+    });
+  }
   if (planted.size > 0) {
     findings.push({
       category: "Secrets",
@@ -19739,6 +19723,7 @@ var init_secrets = __esm({
     init_registry();
     init_read_capped();
     init_credential_files();
+    init_dlp();
     MAX_FILE_BYTES = 256 * 1024;
   }
 });
@@ -20149,15 +20134,15 @@ var init_managed = __esm({
 });
 
 // src/auth/trusted-hosts.ts
-import fs14 from "fs";
-import path15 from "path";
-import os12 from "os";
+import fs13 from "fs";
+import path14 from "path";
+import os11 from "os";
 function getTrustedHostsPath() {
-  return path15.join(os12.homedir(), ".node9", "trusted-hosts.json");
+  return path14.join(os11.homedir(), ".node9", "trusted-hosts.json");
 }
 function readTrustedHosts() {
   try {
-    const raw = fs14.readFileSync(getTrustedHostsPath(), "utf8");
+    const raw = fs13.readFileSync(getTrustedHostsPath(), "utf8");
     const parsed = JSON.parse(raw);
     return Array.isArray(parsed.hosts) ? parsed.hosts : [];
   } catch {
@@ -20166,7 +20151,7 @@ function readTrustedHosts() {
 }
 function getFileMtime() {
   try {
-    return fs14.statSync(getTrustedHostsPath()).mtimeMs;
+    return fs13.statSync(getTrustedHostsPath()).mtimeMs;
   } catch {
     return 0;
   }
@@ -20385,9 +20370,9 @@ var init_api_url = __esm({
 });
 
 // src/config/index.ts
-import fs15 from "fs";
-import path16 from "path";
-import os13 from "os";
+import fs14 from "fs";
+import path15 from "path";
+import os12 from "os";
 function sanitizeSsrfAllow(entries, source) {
   const kept = [];
   for (const entry of entries) {
@@ -20409,8 +20394,8 @@ function noteRejectedApiUrl(raw) {
   if (rejectedApiUrlsSeen.has(key)) return;
   rejectedApiUrlsSeen.add(key);
   try {
-    fs15.appendFileSync(
-      path16.join(os13.homedir(), ".node9", "hook-debug.log"),
+    fs14.appendFileSync(
+      path15.join(os12.homedir(), ".node9", "hook-debug.log"),
       `[${(/* @__PURE__ */ new Date()).toISOString()}] REFUSED apiUrl, using the default instead: ${String(raw).slice(0, 200).replace(/[\r\n]+/g, " ")}
 `
     );
@@ -20427,9 +20412,9 @@ function getCredentials() {
     };
   }
   try {
-    const credPath = path16.join(os13.homedir(), ".node9", "credentials.json");
-    if (fs15.existsSync(credPath)) {
-      const creds = JSON.parse(fs15.readFileSync(credPath, "utf-8"));
+    const credPath = path15.join(os12.homedir(), ".node9", "credentials.json");
+    if (fs14.existsSync(credPath)) {
+      const creds = JSON.parse(fs14.readFileSync(credPath, "utf-8"));
       const profileName = process.env.NODE9_PROFILE || "default";
       const profile = creds[profileName];
       if (typeof profile?.apiKey === "string" && profile.apiKey.length > 0) {
@@ -20461,7 +20446,7 @@ function readRulesCacheResilient(cacheFile) {
   for (let attempt = 0; attempt < 3; attempt++) {
     let content;
     try {
-      content = fs15.readFileSync(cacheFile, "utf-8");
+      content = fs14.readFileSync(cacheFile, "utf-8");
       existed = true;
     } catch (err) {
       if (err.code === "ENOENT") return {};
@@ -20476,10 +20461,10 @@ function readRulesCacheResilient(cacheFile) {
     }
   }
   if (existed || sawReadError) {
-    const backup = path16.join(path16.dirname(cacheFile), "rules-cache.last-good.json");
+    const backup = path15.join(path15.dirname(cacheFile), "rules-cache.last-good.json");
     if (backup !== cacheFile) {
       try {
-        const raw = JSON.parse(fs15.readFileSync(backup, "utf-8"));
+        const raw = JSON.parse(fs14.readFileSync(backup, "utf-8"));
         logCacheReadIssue(cacheFile, "RULES_CACHE_CORRUPT_USED_BACKUP");
         lastParsedRulesCache = raw;
         return raw;
@@ -20499,8 +20484,8 @@ function logCacheReadIssue(cacheFile, kind) {
   if (now - cacheReadLastLoggedAt < CACHE_LOG_REARM_MS) return;
   cacheReadLastLoggedAt = now;
   try {
-    fs15.appendFileSync(
-      path16.join(os13.homedir(), ".node9", "hook-debug.log"),
+    fs14.appendFileSync(
+      path15.join(os12.homedir(), ".node9", "hook-debug.log"),
       `[${(/* @__PURE__ */ new Date()).toISOString()}] ${kind} ${cacheFile}
 `
     );
@@ -20517,8 +20502,8 @@ function catalogSettingsFrom(settings, policy) {
 }
 function getConfig(cwd) {
   if (!cwd && cachedConfig) return cachedConfig;
-  const globalPath = path16.join(os13.homedir(), ".node9", "config.json");
-  const projectPath = path16.join(cwd ?? process.cwd(), "node9.config.json");
+  const globalPath = path15.join(os12.homedir(), ".node9", "config.json");
+  const projectPath = path15.join(cwd ?? process.cwd(), "node9.config.json");
   const globalConfig = tryLoadConfig(globalPath);
   const projectConfig = tryLoadConfig(projectPath, { project: true });
   const mergedSettings = {
@@ -20763,7 +20748,7 @@ function getConfig(cwd) {
   let cloudMandatesEnforcement = false;
   let cloudMandatesAppPerm = false;
   {
-    const cacheFile = path16.join(os13.homedir(), ".node9", "rules-cache.json");
+    const cacheFile = path15.join(os12.homedir(), ".node9", "rules-cache.json");
     try {
       const raw = readRulesCacheResilient(cacheFile);
       if (Array.isArray(raw.rules) && raw.rules.length > 0) {
@@ -21195,10 +21180,10 @@ function getConfig(cwd) {
 }
 function tryLoadConfig(filePath, options = {}) {
   v2ChecksByPath.delete(filePath);
-  if (!fs15.existsSync(filePath)) return null;
+  if (!fs14.existsSync(filePath)) return null;
   let raw;
   try {
-    raw = JSON.parse(fs15.readFileSync(filePath, "utf-8"));
+    raw = JSON.parse(fs14.readFileSync(filePath, "utf-8"));
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     process.stderr.write(
@@ -21661,10 +21646,10 @@ var init_templates = __esm({
 });
 
 // src/posture/egress.ts
-import fs16 from "fs";
+import fs15 from "fs";
 function sandboxEgressWallActive() {
   try {
-    return fs16.existsSync(ALLOWED_DOMAINS_PATH);
+    return fs15.existsSync(ALLOWED_DOMAINS_PATH);
   } catch {
     return false;
   }
@@ -22011,29 +21996,29 @@ var init_gate_order = __esm({
 });
 
 // src/policy/file-access.ts
-import fs17 from "fs";
-import os14 from "os";
-import path17 from "path";
+import fs16 from "fs";
+import os13 from "os";
+import path16 from "path";
 function absoluteSpelling(p, cwd, home) {
   if (p === "~" || p.startsWith("~/")) p = home + p.slice(1);
-  return path17.isAbsolute(p) ? p : `${cwd}/${p}`;
+  return path16.isAbsolute(p) ? p : `${cwd}/${p}`;
 }
 function physical(p, followFinal, links = 0) {
   if (links > 40) throw new Error("Too many symbolic links");
   if (!followFinal) {
-    const parent = physical(path17.dirname(p), true, links);
-    return { path: `${parent.path}/${path17.basename(p)}`, missing: parent.missing };
+    const parent = physical(path16.dirname(p), true, links);
+    return { path: `${parent.path}/${path16.basename(p)}`, missing: parent.missing };
   }
   try {
-    return { path: fs17.realpathSync.native(p), missing: false };
+    return { path: fs16.realpathSync.native(p), missing: false };
   } catch (error) {
     const code = error.code;
     if (!["ENOENT", "ENOTDIR"].includes(code ?? "")) throw error;
     try {
-      if (fs17.lstatSync(p).isSymbolicLink()) {
-        const target = fs17.readlinkSync(p);
+      if (fs16.lstatSync(p).isSymbolicLink()) {
+        const target = fs16.readlinkSync(p);
         return physical(
-          path17.isAbsolute(target) ? target : `${path17.dirname(p)}/${target}`,
+          path16.isAbsolute(target) ? target : `${path16.dirname(p)}/${target}`,
           true,
           links + 1
         );
@@ -22042,13 +22027,13 @@ function physical(p, followFinal, links = 0) {
       if (!["ENOENT", "ENOTDIR"].includes(linkError.code ?? ""))
         throw linkError;
     }
-    const parent = path17.dirname(p);
+    const parent = path16.dirname(p);
     if (parent === p) return { path: p, missing: true };
     const resolved = physical(parent, true, links);
-    return { path: `${resolved.path}/${path17.basename(p)}`, missing: true };
+    return { path: `${resolved.path}/${path16.basename(p)}`, missing: true };
   }
 }
-function prepareFileAccesses(tool, args, cwd = process.cwd(), inspection = {}, home = os14.homedir()) {
+function prepareFileAccesses(tool, args, cwd = process.cwd(), inspection = {}, home = os13.homedir()) {
   const context = { cwd, homeDirs: [home, "/root"] };
   const accesses = collectFileAccesses(tool, args, context, inspection);
   const handledPaths = /* @__PURE__ */ new Set();
@@ -22071,14 +22056,14 @@ function prepareFileAccesses(tool, args, cwd = process.cwd(), inspection = {}, h
     const raw = absoluteSpelling(access.path, access.cwd ?? cwd, home);
     if (access.directoryTarget) {
       try {
-        if (!fs17.statSync(absoluteSpelling(access.directoryTarget, access.cwd ?? cwd, home)).isDirectory())
+        if (!fs16.statSync(absoluteSpelling(access.directoryTarget, access.cwd ?? cwd, home)).isDirectory())
           continue;
       } catch {
       }
     }
     if (access.operation === "create") {
       try {
-        fs17.statSync(raw);
+        fs16.statSync(raw);
         continue;
       } catch {
       }
@@ -22133,15 +22118,15 @@ var init_file_access = __esm({
 });
 
 // src/supply-chain/osv-index.ts
-import fs18 from "fs";
-import os15 from "os";
-import path18 from "path";
+import fs17 from "fs";
+import os14 from "os";
+import path17 from "path";
 import { createHash as createHash4 } from "crypto";
 function osvRoot() {
-  return path18.join(os15.homedir(), ".node9", "osv");
+  return path17.join(os14.homedir(), ".node9", "osv");
 }
 function ecoDir(eco) {
-  return path18.join(osvRoot(), eco);
+  return path17.join(osvRoot(), eco);
 }
 function indexKey(eco, name) {
   switch (eco) {
@@ -22160,11 +22145,11 @@ function shardOf(key) {
   return createHash4("sha1").update(key).digest("hex").slice(0, 2);
 }
 function shardPath(eco, shard) {
-  return path18.join(ecoDir(eco), "shards", `${shard}.json`);
+  return path17.join(ecoDir(eco), "shards", `${shard}.json`);
 }
 function readMeta(eco) {
   try {
-    const m = JSON.parse(fs18.readFileSync(path18.join(ecoDir(eco), "meta.json"), "utf8"));
+    const m = JSON.parse(fs17.readFileSync(path17.join(ecoDir(eco), "meta.json"), "utf8"));
     if (typeof m?.syncedAt !== "string" || typeof m?.lastModifiedMs !== "number") return null;
     return m;
   } catch {
@@ -22173,7 +22158,7 @@ function readMeta(eco) {
 }
 function readShard(eco, shard) {
   try {
-    const s = JSON.parse(fs18.readFileSync(shardPath(eco, shard), "utf8"));
+    const s = JSON.parse(fs17.readFileSync(shardPath(eco, shard), "utf8"));
     return s && typeof s === "object" && !Array.isArray(s) ? s : {};
   } catch {
     return {};
@@ -22555,17 +22540,17 @@ var init_registry2 = __esm({
 });
 
 // src/supply-chain/local-resolve.ts
-import fs19 from "fs";
-import path19 from "path";
+import fs18 from "fs";
+import path18 from "path";
 function resolveInstalled(name, cwd) {
-  if (!cwd || !path19.isAbsolute(cwd)) return null;
+  if (!cwd || !path18.isAbsolute(cwd)) return null;
   if (!/^(?:@[^/\\]+\/)?[^/\\]+$/.test(name)) return null;
-  let dir2 = path19.resolve(cwd);
+  let dir2 = path18.resolve(cwd);
   for (let i = 0; i < MAX_LEVELS; i++) {
-    const pkgDir = path19.join(dir2, "node_modules", ...name.split("/"));
-    const manifest = path19.join(pkgDir, "package.json");
+    const pkgDir = path18.join(dir2, "node_modules", ...name.split("/"));
+    const manifest = path18.join(pkgDir, "package.json");
     try {
-      const raw = fs19.readFileSync(manifest, "utf8");
+      const raw = fs18.readFileSync(manifest, "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.version === "string" && parsed.version.length > 0) {
         return { version: parsed.version, dir: pkgDir };
@@ -22573,7 +22558,7 @@ function resolveInstalled(name, cwd) {
       return null;
     } catch {
     }
-    const parent = path19.dirname(dir2);
+    const parent = path18.dirname(dir2);
     if (parent === dir2) break;
     dir2 = parent;
   }
@@ -22590,7 +22575,7 @@ var init_local_resolve = __esm({
 
 // src/supply-chain/check.ts
 import picomatch2 from "picomatch";
-import path20 from "path";
+import path19 from "path";
 function commandOf(toolName, args) {
   if (!isBashTool(toolName) || !args || typeof args !== "object") return null;
   const a = args;
@@ -22692,7 +22677,7 @@ function checkInstalled(p, version, misses) {
 }
 async function checkOne(p, cfg, misses, networkCapped, cwd) {
   if (p.ecosystem === "npm" && LOCAL_FIRST_MANAGERS.has(p.manager) && p.localCwd !== null && (p.raw === p.name || p.version)) {
-    const localCwd = cwd && path20.isAbsolute(cwd) ? (p.localCwd ?? []).reduce((dir2, step) => path20.resolve(dir2, step), cwd) : void 0;
+    const localCwd = cwd && path19.isAbsolute(cwd) ? (p.localCwd ?? []).reduce((dir2, step) => path19.resolve(dir2, step), cwd) : void 0;
     const installed = resolveInstalled(p.name, localCwd);
     if (installed && (!p.version || p.version === installed.version))
       return checkInstalled(p, installed.version, misses);
@@ -22861,33 +22846,33 @@ var init_check = __esm({
 });
 
 // src/supply-chain/registries.ts
-import os16 from "os";
-import path21 from "path";
-import fs20 from "fs";
+import os15 from "os";
+import path20 from "path";
+import fs19 from "fs";
 function userFiles(home, env) {
-  const xdg = env.XDG_CONFIG_HOME || path21.join(home, ".config");
+  const xdg = env.XDG_CONFIG_HOME || path20.join(home, ".config");
   return [
-    env.NPM_CONFIG_USERCONFIG || env.npm_config_userconfig || path21.join(home, ".npmrc"),
-    path21.join(home, ".yarnrc"),
-    path21.join(home, ".yarnrc.yml"),
-    path21.join(home, ".bunfig.toml"),
+    env.NPM_CONFIG_USERCONFIG || env.npm_config_userconfig || path20.join(home, ".npmrc"),
+    path20.join(home, ".yarnrc"),
+    path20.join(home, ".yarnrc.yml"),
+    path20.join(home, ".bunfig.toml"),
     env.PIP_CONFIG_FILE || "",
-    path21.join(xdg, "pip", "pip.conf"),
-    path21.join(home, ".pip", "pip.conf"),
+    path20.join(xdg, "pip", "pip.conf"),
+    path20.join(home, ".pip", "pip.conf"),
     "/etc/pip.conf",
-    env.VIRTUAL_ENV ? path21.join(env.VIRTUAL_ENV, "pip.conf") : "",
+    env.VIRTUAL_ENV ? path20.join(env.VIRTUAL_ENV, "pip.conf") : "",
     env.UV_CONFIG_FILE || "",
-    path21.join(xdg, "uv", "uv.toml"),
+    path20.join(xdg, "uv", "uv.toml"),
     "/etc/uv/uv.toml"
   ].filter(Boolean);
 }
 function projectFiles(cwd) {
-  if (!cwd || !path21.isAbsolute(cwd)) return [];
+  if (!cwd || !path20.isAbsolute(cwd)) return [];
   const out = [];
   let dir2 = cwd;
   for (let i = 0; i < MAX_PARENT_DIRS; i++) {
-    for (const f of PROJECT_FILES) out.push(path21.join(dir2, f));
-    const parent = path21.dirname(dir2);
+    for (const f of PROJECT_FILES) out.push(path20.join(dir2, f));
+    const parent = path20.dirname(dir2);
     if (parent === dir2) break;
     dir2 = parent;
   }
@@ -22926,7 +22911,7 @@ function hostsInText(text, out) {
     }
   }
 }
-function configuredRegistryHosts(cwd, env = process.env, home = os16.homedir()) {
+function configuredRegistryHosts(cwd, env = process.env, home = os15.homedir()) {
   const key = [
     cwd ?? "",
     home,
@@ -22948,7 +22933,7 @@ function configuredRegistryHosts(cwd, env = process.env, home = os16.homedir())
     const r = readCappedText(
       file2,
       MAX_CONFIG_BYTES,
-      fs20.constants.O_RDONLY | (fs20.constants.O_NONBLOCK ?? 0)
+      fs19.constants.O_RDONLY | (fs19.constants.O_NONBLOCK ?? 0)
     );
     if (r) hostsInText(r.text, hosts);
   }
@@ -23005,17 +22990,17 @@ var init_registries = __esm({
 });
 
 // src/utils/provenance.ts
-import fs21 from "fs";
-import path22 from "path";
-import os17 from "os";
+import fs20 from "fs";
+import path21 from "path";
+import os16 from "os";
 function findInPath(cmd) {
-  if (path22.posix.isAbsolute(cmd)) return cmd;
+  if (path21.posix.isAbsolute(cmd)) return cmd;
   const pathEnv = process.env.PATH ?? "";
-  for (const dir2 of pathEnv.split(path22.delimiter)) {
+  for (const dir2 of pathEnv.split(path21.delimiter)) {
     if (!dir2) continue;
-    const full = path22.join(dir2, cmd);
+    const full = path21.join(dir2, cmd);
     try {
-      fs21.accessSync(full, fs21.constants.X_OK);
+      fs20.accessSync(full, fs20.constants.X_OK);
       return full;
     } catch {
     }
@@ -23026,7 +23011,7 @@ function _classifyPath(resolved, cwd) {
   if (cwd && resolved.startsWith(cwd + "/")) {
     return { trustLevel: "user", reason: "binary in project directory" };
   }
-  const osTmp = os17.tmpdir();
+  const osTmp = os16.tmpdir();
   const allSuspect = osTmp ? [...SUSPECT_PREFIXES, osTmp] : SUSPECT_PREFIXES;
   if (allSuspect.some((p) => resolved === p || resolved.startsWith(p + "/"))) {
     return { trustLevel: "suspect", reason: `binary in temp directory: ${resolved}` };
@@ -23044,7 +23029,7 @@ function _classifyPath(resolved, cwd) {
 }
 function checkProvenance(cmd, cwd) {
   const bare = cmd.startsWith("./") ? cmd.slice(2) : cmd;
-  if (path22.posix.isAbsolute(bare)) {
+  if (path21.posix.isAbsolute(bare)) {
     const early = _classifyPath(bare, cwd);
     if (early.trustLevel === "suspect") {
       return { resolvedPath: bare, ...early };
@@ -23060,7 +23045,7 @@ function checkProvenance(cmd, cwd) {
         reason: "binary not found in PATH"
       };
     }
-    resolved = fs21.realpathSync(found);
+    resolved = fs20.realpathSync(found);
   } catch {
     return {
       resolvedPath: cmd,
@@ -23069,7 +23054,7 @@ function checkProvenance(cmd, cwd) {
     };
   }
   try {
-    const stat = fs21.statSync(resolved);
+    const stat = fs20.statSync(resolved);
     if (stat.mode & 2) {
       return {
         resolvedPath: resolved,
@@ -23094,19 +23079,19 @@ var init_provenance2 = __esm({
     SYSTEM_PREFIXES = ["/usr/bin", "/usr/sbin", "/bin", "/sbin"];
     MANAGED_PREFIXES = ["/usr/local/bin", "/opt/homebrew", "/home/linuxbrew", "/nix/store"];
     USER_PREFIXES = [
-      path22.join(os17.homedir(), "bin"),
-      path22.join(os17.homedir(), ".local", "bin"),
-      path22.join(os17.homedir(), ".cargo", "bin"),
-      path22.join(os17.homedir(), ".npm-global", "bin"),
-      path22.join(os17.homedir(), ".volta", "bin")
+      path21.join(os16.homedir(), "bin"),
+      path21.join(os16.homedir(), ".local", "bin"),
+      path21.join(os16.homedir(), ".cargo", "bin"),
+      path21.join(os16.homedir(), ".npm-global", "bin"),
+      path21.join(os16.homedir(), ".volta", "bin")
     ];
     SUSPECT_PREFIXES = ["/tmp", "/var/tmp", "/dev/shm"];
   }
 });
 
 // src/policy/index.ts
-import fs22 from "fs";
-import path23 from "path";
+import fs21 from "fs";
+import path22 from "path";
 async function evaluatePolicy2(toolName, args, agent, cwd, opts) {
   const config = opts?.config ?? getConfig(cwd);
   const prepared = opts?.fileAccess ?? prepareFileAccesses(toolName, args, cwd, inspectionLayers(config.policy));
@@ -23138,9 +23123,9 @@ async function evaluatePolicy2(toolName, args, agent, cwd, opts) {
   );
 }
 function isGitWorkTreeTop(dir2, cwd) {
-  if (!path23.isAbsolute(cwd)) return true;
+  if (!path22.isAbsolute(cwd)) return true;
   try {
-    return fs22.existsSync(path23.join(path23.resolve(cwd, dir2), ".git"));
+    return fs21.existsSync(path22.join(path22.resolve(cwd, dir2), ".git"));
   } catch {
     return true;
   }
@@ -23149,7 +23134,7 @@ function readAgentSettings(absPath) {
   const r = readCappedText(
     absPath,
     MAX_AGENT_SETTINGS_BYTES,
-    fs22.constants.O_RDONLY | (fs22.constants.O_NONBLOCK ?? 0)
+    fs21.constants.O_RDONLY | (fs21.constants.O_NONBLOCK ?? 0)
   );
   return r && !r.truncated ? r.text : null;
 }
@@ -23218,14 +23203,14 @@ var init_gate = __esm({
 });
 
 // src/posture/supply-chain.ts
-import os18 from "os";
-import path24 from "path";
+import os17 from "os";
+import path23 from "path";
 import { parse as parseToml6 } from "smol-toml";
 function isNode9Managed(command, args = []) {
   if (!command) return false;
-  if (path24.basename(command).toLowerCase() === "node9") return true;
-  if (PACKAGE_RUNNERS.has(path24.basename(command).toLowerCase())) {
-    return args.some((a) => a === "node9" || path24.basename(a).toLowerCase() === "node9");
+  if (path23.basename(command).toLowerCase() === "node9") return true;
+  if (PACKAGE_RUNNERS.has(path23.basename(command).toLowerCase())) {
+    return args.some((a) => a === "node9" || path23.basename(a).toLowerCase() === "node9");
   }
   return false;
 }
@@ -23247,10 +23232,10 @@ function readServers(file2, format, agent) {
   }
 }
 function checkSupplyChain(ctx) {
-  const home = ctx.home || os18.homedir();
+  const home = ctx.home || os17.homedir();
   const servers = [];
   for (const spec of AGENT_SPECS) {
-    if (!spec.mcpFile) continue;
+    if (!spec.mcpFile || spec.mcpInventory === false) continue;
     servers.push(...readServers(spec.mcpFile(home), spec.mcpFormat ?? "json", spec.label));
   }
   if (servers.length === 0) return [];
@@ -23346,11 +23331,11 @@ var init_privilege = __esm({
 });
 
 // src/posture/containment.ts
-import fs23 from "fs";
+import fs22 from "fs";
 function inContainer() {
-  if (fs23.existsSync("/.dockerenv") || fs23.existsSync("/run/.containerenv")) return true;
+  if (fs22.existsSync("/.dockerenv") || fs22.existsSync("/run/.containerenv")) return true;
   try {
-    const cgroup = fs23.readFileSync("/proc/1/cgroup", "utf8");
+    const cgroup = fs22.readFileSync("/proc/1/cgroup", "utf8");
     if (/docker|kubepods|containerd|lxc|libpod/.test(cgroup)) return true;
   } catch {
   }
@@ -23396,7 +23381,7 @@ var init_containment = __esm({
 });
 
 // src/posture/inbound.ts
-import fs24 from "fs";
+import fs23 from "fs";
 function buildNetworkFix(labels) {
   const shielded = [
     ...new Map(
@@ -23454,7 +23439,7 @@ function collectListeners() {
   const byPort = /* @__PURE__ */ new Map();
   for (const file2 of ["/proc/net/tcp", "/proc/net/tcp6"]) {
     try {
-      for (const l of parseListeners(fs24.readFileSync(file2, "utf8"))) {
+      for (const l of parseListeners(fs23.readFileSync(file2, "utf8"))) {
         if (!byPort.has(l.port)) byPort.set(l.port, l);
       }
     } catch {
@@ -23466,11 +23451,11 @@ function readProc(pid) {
   let comm = "unknown";
   let cmdline = "";
   try {
-    comm = fs24.readFileSync(`/proc/${pid}/comm`, "utf8").trim().replace(/-MainThread$/, "") || "unknown";
+    comm = fs23.readFileSync(`/proc/${pid}/comm`, "utf8").trim().replace(/-MainThread$/, "") || "unknown";
   } catch {
   }
   try {
-    cmdline = fs24.readFileSync(`/proc/${pid}/cmdline`).toString().replace(/\0/g, " ").trim();
+    cmdline = fs23.readFileSync(`/proc/${pid}/cmdline`).toString().replace(/\0/g, " ").trim();
   } catch {
   }
   return { comm, cmdline };
@@ -23480,21 +23465,21 @@ function resolveProcesses(inodes) {
   if (inodes.size === 0) return map;
   let pids;
   try {
-    pids = fs24.readdirSync("/proc").filter((d) => /^\d+$/.test(d));
+    pids = fs23.readdirSync("/proc").filter((d) => /^\d+$/.test(d));
   } catch {
     return map;
   }
   for (const pid of pids) {
     let fds;
     try {
-      fds = fs24.readdirSync(`/proc/${pid}/fd`);
+      fds = fs23.readdirSync(`/proc/${pid}/fd`);
     } catch {
       continue;
     }
     for (const fd of fds) {
       let link;
       try {
-        link = fs24.readlinkSync(`/proc/${pid}/fd/${fd}`);
+        link = fs23.readlinkSync(`/proc/${pid}/fd/${fd}`);
       } catch {
         continue;
       }
@@ -23599,9 +23584,9 @@ var init_inbound = __esm({
 });
 
 // src/posture/coverage.ts
-import os19 from "os";
+import os18 from "os";
 function checkCoverage(ctx) {
-  const home = ctx.home || os19.homedir();
+  const home = ctx.home || os18.homedir();
   const findings = [];
   const protectedAgents = getAgentWiring(home).filter((r) => r.isProtected);
   if (protectedAgents.length === 0) {
@@ -23645,7 +23630,7 @@ var init_coverage = __esm({
 });
 
 // src/posture/governance.ts
-import path25 from "path";
+import path24 from "path";
 function checkData(ctx) {
   const dlp = getConfig(ctx.cwd).policy.dlp;
   if (!dlp?.enabled) {
@@ -23789,7 +23774,7 @@ var init_governance = __esm({
   "src/posture/governance.ts"() {
     "use strict";
     init_config();
-    jailProbePath = (home) => path25.join(home, ".aws", "credentials");
+    jailProbePath = (home) => path24.join(home, ".aws", "credentials");
   }
 });
 
@@ -23968,7 +23953,7 @@ var init_enforcement = __esm({
 });
 
 // src/posture/index.ts
-import os20 from "os";
+import os19 from "os";
 function dropEnforcementRedundant(findings) {
   const coveragePresent = findings.some((f) => f.category === "Coverage");
   if (!coveragePresent) return findings;
@@ -23994,9 +23979,10 @@ async function runChecks(checks, ctx) {
 }
 async function runPosture(opts = {}) {
   const ctx = {
-    home: opts.home ?? os20.homedir(),
+    home: opts.home ?? os19.homedir(),
     cwd: opts.cwd ?? process.cwd(),
-    agent: opts.agent
+    agent: opts.agent,
+    env: opts.env
   };
   const {
     findings: rawFindings,
@@ -24055,6 +24041,102 @@ var init_posture = __esm({
   }
 });
 
+// src/posture/render.ts
+import chalk2 from "chalk";
+var ICON, TIER_LABEL;
+var init_render = __esm({
+  "src/posture/render.ts"() {
+    "use strict";
+    init_score();
+    ICON = {
+      critical: chalk2.red("\u274C"),
+      high: chalk2.red("\u274C"),
+      medium: chalk2.yellow("\u26A0\uFE0F "),
+      advisory: chalk2.gray("\u26A0\uFE0F ")
+    };
+    TIER_LABEL = {
+      good: chalk2.green("Good"),
+      "at-risk": chalk2.yellow("At risk"),
+      critical: chalk2.red("Critical")
+    };
+  }
+});
+
+// src/cli/commands/blast.ts
+import chalk3 from "chalk";
+import fs24 from "fs";
+import path25 from "path";
+import os20 from "os";
+function buildSensitivePaths(home, cwd) {
+  const homeFiles = homeCredentialFiles(home).map(({ full, label: label2, description, score }) => ({
+    full,
+    label: label2,
+    description,
+    score
+  }));
+  return [
+    ...homeFiles,
+    {
+      full: path25.join(cwd, ".env"),
+      label: ".env  (current folder)",
+      description: "App secrets: database passwords, API keys",
+      score: 20
+    },
+    {
+      full: path25.join(cwd, ".env.local"),
+      label: ".env.local  (current folder)",
+      description: "Local overrides: often contains real credentials",
+      score: 15
+    },
+    {
+      full: path25.join(cwd, ".env.production"),
+      label: ".env.production  (current folder)",
+      description: "Production secrets",
+      score: 20
+    }
+  ];
+}
+function isReadable(filePath) {
+  try {
+    fs24.accessSync(filePath, fs24.constants.R_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function runBlast() {
+  const home = os20.homedir();
+  const cwd = process.cwd();
+  const paths = buildSensitivePaths(home, cwd);
+  let scoreDeduction = 0;
+  const reachable = [];
+  for (const p of paths) {
+    if (fs24.existsSync(p.full) && isReadable(p.full)) {
+      reachable.push(p);
+      scoreDeduction += p.score;
+    }
+  }
+  const envFindings = [];
+  for (const [key, value] of Object.entries(process.env)) {
+    if (!value) continue;
+    const match = scanArgs({ [key]: value });
+    if (match) {
+      envFindings.push({ key, patternName: match.patternName });
+      scoreDeduction += 10;
+    }
+  }
+  return { reachable, envFindings, score: Math.max(0, 100 - scoreDeduction) };
+}
+var init_blast = __esm({
+  "src/cli/commands/blast.ts"() {
+    "use strict";
+    init_dlp();
+    init_credential_files();
+    init_posture();
+    init_render();
+  }
+});
+
 // src/auth/decision-record.ts
 function personRecord(channel, decision, extra = {}, now = Date.now()) {
   return {
@@ -25535,7 +25617,7 @@ var init_report_audit = __esm({
 });
 
 // src/config/keyed-guard.ts
-import chalk3 from "chalk";
+import chalk4 from "chalk";
 function isKeyedForPolicy() {
   try {
     return getConfig().policySource === "workspace";
@@ -29344,7 +29426,7 @@ var init_scan_summary = __esm({
 });
 
 // src/cli/render/scan-derive.ts
-import chalk4 from "chalk";
+import chalk5 from "chalk";
 import stringWidth from "string-width";
 var init_scan_derive = __esm({
   "src/cli/render/scan-derive.ts"() {
@@ -29363,7 +29445,6 @@ var init_protection = __esm({
 var init_scan_json = __esm({
   "src/cli/render/scan-json.ts"() {
     "use strict";
-    init_scan_derive();
   }
 });
 
@@ -29376,7 +29457,7 @@ var init_scan_history = __esm({
 });
 
 // src/cli/commands/scan.ts
-import chalk5 from "chalk";
+import chalk6 from "chalk";
 import fs43 from "fs";
 import path46 from "path";
 import os35 from "os";
@@ -30721,7 +30802,7 @@ var init_scan = __esm({
     init_hook_payload();
     init_dist();
     init_scan_summary();
-    init_setup();
+    init_agent_wiring();
     init_blast();
     init_scan_derive();
     init_protection();