@node9/proxy 2.45.0 → 2.47.0

package/dist/dashboard.mjs

@@ -106,22 +106,16 @@ var init_forecast_context = __esm({
 });
 
 // packages/policy-engine/dist/index.mjs
-import mvdanSh3 from "mvdan-sh";
 import picomatch from "picomatch";
 import safeRegex from "safe-regex2";
 import pm from "picomatch";
-import mvdanSh from "mvdan-sh";
 import mvdanSh2 from "mvdan-sh";
+import mvdanSh from "mvdan-sh";
+import mvdanSh3 from "mvdan-sh";
 import safeRegex2 from "safe-regex2";
 import { createHash as createHash2 } from "crypto";
 import { createHash as createHash22 } from "crypto";
-import mvdanSh4 from "mvdan-sh";
-import mvdanSh5 from "mvdan-sh";
-import mvdanSh6 from "mvdan-sh";
-import mvdanSh8 from "mvdan-sh";
-import mvdanSh7 from "mvdan-sh";
 import { createHash as createHash3 } from "crypto";
-import mvdanSh9 from "mvdan-sh";
 import crypto from "crypto";
 function validateRegex(pattern) {
   if (!pattern) return "Pattern is required";
@@ -703,6 +697,62 @@ function resolveCheckMap(settings) {
   for (const c of CHECKS) out[c.id] = checkValue(settings, c.id);
   return out;
 }
+function isGoNode(v) {
+  return v !== null && typeof v === "object" && typeof v.Pos === "function";
+}
+function toPlainTree(goNode) {
+  const kind = syntax.NodeType(goNode);
+  const out = { kind, pos: goNode.Pos().Offset(), end: goNode.End().Offset() };
+  const spec = KINDS[kind];
+  if (!spec) {
+    unknownKinds.add(kind);
+    return out;
+  }
+  convertFields(goNode, spec, out, kind);
+  return out;
+}
+function convertFields(goNode, spec, out, kind) {
+  for (const f of spec.scalars ?? []) out[f] = goNode[f];
+  for (const f of spec.nodes ?? []) {
+    const v = goNode[f];
+    if (v === void 0 || v === null) {
+      out[f] = null;
+    } else if (Array.isArray(v)) {
+      out[f] = v.map((c) => isGoNode(c) ? toPlainTree(c) : c);
+    } else if (isGoNode(v)) {
+      out[f] = toPlainTree(v);
+    } else if (typeof v === "object" && STRUCTS[`${kind}.${f}`]) {
+      const sub = { struct: `${kind}.${f}` };
+      convertFields(v, STRUCTS[`${kind}.${f}`], sub, `${kind}.${f}`);
+      out[f] = sub;
+    } else {
+      out[f] = v;
+    }
+  }
+}
+function childrenOf(n) {
+  const spec = n.kind ? KINDS[n.kind] : STRUCTS[n.struct];
+  if (!spec?.nodes) return [];
+  const out = [];
+  for (const f of spec.nodes) {
+    if (spec.notWalked?.includes(f)) continue;
+    const v = n[f];
+    if (!v) continue;
+    if (Array.isArray(v)) {
+      for (const c of v) if (c) out.push(c);
+    } else if (v.kind) {
+      out.push(v);
+    } else if (v.struct) {
+      out.push(...childrenOf(v));
+    }
+  }
+  return out;
+}
+function walk(root, fn) {
+  if (!root) return;
+  if (!fn(root)) return;
+  for (const c of childrenOf(root)) walk(c, fn);
+}
 function isInvisibleChar(char) {
   return INVISIBLE_ONE.test(char);
 }
@@ -858,7 +908,7 @@ function judgeInlineCode(language, code, isProtected) {
 }
 function isCatHeredocOrLit(part) {
   if (!part) return false;
-  const t = syntax.NodeType(part);
+  const t = part.kind;
   if (t === "Lit") return true;
   if (t !== "CmdSubst") return false;
   const stmts = part.Stmts || [];
@@ -868,9 +918,9 @@ function isCatHeredocOrLit(part) {
   const hasHeredoc = redirs.some((r) => r && r.Hdoc);
   if (!hasHeredoc) return false;
   const cmd = stmt.Cmd;
-  if (!cmd || syntax.NodeType(cmd) !== "CallExpr") return false;
+  if (!cmd || cmd.kind !== "CallExpr") return false;
   const firstArg = cmd.Args?.[0]?.Parts || [];
-  if (firstArg.length !== 1 || syntax.NodeType(firstArg[0]) !== "Lit") return false;
+  if (firstArg.length !== 1 || firstArg[0].kind !== "Lit") return false;
   return (firstArg[0].Value || "").toLowerCase() === "cat";
 }
 function parseShared(command) {
@@ -882,7 +932,7 @@ function parseShared(command) {
   }
   let parsed;
   try {
-    parsed = sharedParser.Parse(command, "cmd");
+    parsed = toPlainTree(sharedParser.Parse(command, "cmd"));
   } catch {
     parsed = PARSE_FAIL;
   }
@@ -943,10 +993,10 @@ function fileAccessViewImpl(command) {
   const at = (byteOffset) => toCharIndex === null ? byteOffset : toCharIndex(byteOffset);
   const edits = [];
   try {
-    syntax.Walk(f, (node) => {
+    walk(f, (node) => {
       if (!node) return false;
       const n = node;
-      if (syntax.NodeType(n) !== "CallExpr") return true;
+      if (n.kind !== "CallExpr") return true;
       const args = n.Args || [];
       const words = args.map((a) => resolveWordLiteral(a));
       const head = unwrapCommandHead(words);
@@ -958,8 +1008,8 @@ function fileAccessViewImpl(command) {
         if (!PROGRAM_DIR.test(word)) continue;
         const name = word.split(/[\\/]/).pop() ?? "";
         if (!name) continue;
-        const s = at(args[i].Pos().Offset());
-        const e = at(args[i].End().Offset());
+        const s = at(args[i].pos);
+        const e = at(args[i].end);
         if (s < 0 || e < 0) continue;
         edits.push([s, e, name]);
       }
@@ -987,10 +1037,10 @@ function literalPayloadsOf(command, depth) {
   if (f === PARSE_FAIL) return [];
   const out = [];
   try {
-    syntax.Walk(f, (node) => {
+    walk(f, (node) => {
       if (!node || out.length >= MAX_READING_PAYLOADS) return false;
       const n = node;
-      if (syntax.NodeType(n) !== "CallExpr") return true;
+      if (n.kind !== "CallExpr") return true;
       const words = (n.Args || []).map((a) => resolveWordLiteral(a));
       if (words.length === 0) return true;
       const payload = literalShellPayload(words, baseWord(words[0]));
@@ -1010,23 +1060,23 @@ function foldCommandWords(reading) {
   const at = (byteOffset) => toCharIndex === null ? byteOffset : toCharIndex(byteOffset);
   const edits = [];
   try {
-    syntax.Walk(f, (node) => {
+    walk(f, (node) => {
       if (!node) return false;
       const n = node;
-      if (syntax.NodeType(n) !== "CallExpr") return true;
+      if (n.kind !== "CallExpr") return true;
       const args = n.Args || [];
       const words = args.map((a) => resolveWordLiteral(a));
       const folded = words.map((w) => w === null ? null : foldHomoglyphs(w));
       const head = unwrapCommandHead(folded);
       for (let i = 0; i <= head && i < args.length; i++) {
         const parts = args[i].Parts || [];
-        if (parts.length !== 1 || syntax.NodeType(parts[0]) !== "Lit") continue;
+        if (parts.length !== 1 || parts[0].kind !== "Lit") continue;
         const value = parts[0].Value ?? "";
         const word = folded[i];
         if (word === null || word === value || !/[^\x00-\x7f]/.test(value)) continue;
         if (!/^[A-Za-z0-9._/-]+$/.test(word)) continue;
-        const s = at(args[i].Pos().Offset());
-        const e = at(args[i].End().Offset());
+        const s = at(args[i].pos);
+        const e = at(args[i].end);
         if (s < 0 || e < 0) continue;
         edits.push([s, e, word]);
       }
@@ -1063,10 +1113,10 @@ function interpreterHeredocSpans(f, at) {
   const stmts = f?.Stmts || [];
   const candidates = [];
   let unsafe = false;
-  syntax.Walk(f, (node) => {
+  walk(f, (node) => {
     if (!node || unsafe) return false;
     const n = node;
-    const t = syntax.NodeType(n);
+    const t = n.kind;
     if (t === "FuncDecl") {
       unsafe = true;
       return false;
@@ -1086,7 +1136,7 @@ function interpreterHeredocSpans(f, at) {
   });
   if (unsafe) return [];
   for (const st of stmts) {
-    if (!st?.Cmd || syntax.NodeType(st.Cmd) !== "CallExpr") continue;
+    if (!st?.Cmd || st.Cmd.kind !== "CallExpr") continue;
     const words = (st.Cmd.Args || []).map((a) => resolveWordLiteral(a));
     const name = (words[0] ?? "").toLowerCase();
     if (!STDIN_CODE_INTERPRETERS.test(name)) continue;
@@ -1101,8 +1151,8 @@ function interpreterHeredocSpans(f, at) {
     if (stdin.length !== 1 || others > 0) continue;
     const r = stdin[0];
     if (heredocText(r.Hdoc) === null) continue;
-    const hs = at(r.Hdoc.Pos().Offset());
-    const he = at(r.Hdoc.End().Offset());
+    const hs = at(r.Hdoc.pos);
+    const he = at(r.Hdoc.end);
     if (hs < 0 || he < 0 || he <= hs) continue;
     spans.push([hs, he]);
   }
@@ -1122,24 +1172,24 @@ function normalizeCommandForPolicyImpl(command, codeBodies) {
       strips.push([hs, he]);
       msgSpans.add(`${hs}:${he}`);
     }
-    syntax.Walk(f, (node) => {
+    walk(f, (node) => {
       if (!node) return false;
       const n = node;
-      if (syntax.NodeType(n) !== "CallExpr") return true;
+      if (n.kind !== "CallExpr") return true;
       const args = n.Args || [];
       for (let i = 0; i < args.length - 1; i++) {
         const argParts = args[i].Parts || [];
-        if (argParts.length !== 1 || syntax.NodeType(argParts[0]) !== "Lit") continue;
+        if (argParts.length !== 1 || argParts[0].kind !== "Lit") continue;
         const flagVal = argParts[0].Value || "";
         if (!MESSAGE_FLAGS.has(flagVal.toLowerCase())) continue;
         const next = args[i + 1];
         const nextParts = next.Parts || [];
         if (nextParts.length !== 1) continue;
         const quotedNode = nextParts[0];
-        const nt = syntax.NodeType(quotedNode);
+        const nt = quotedNode.kind;
         const markStrip = () => {
-          const s = at(next.Pos().Offset());
-          const e = at(next.End().Offset());
+          const s = at(next.pos);
+          const e = at(next.end);
           if (s < 0 || e < 0) return;
           strips.push([s, e]);
           msgSpans.add(`${s}:${e}`);
@@ -1148,7 +1198,7 @@ function normalizeCommandForPolicyImpl(command, codeBodies) {
           markStrip();
         } else if (nt === "DblQuoted") {
           const innerParts = quotedNode.Parts || [];
-          const allLit = innerParts.length === 0 || innerParts.every((p) => syntax.NodeType(p) === "Lit");
+          const allLit = innerParts.length === 0 || innerParts.every((p) => p.kind === "Lit");
           if (allLit) {
             markStrip();
           } else if (innerParts.every((p) => isCatHeredocOrLit(p))) {
@@ -1157,8 +1207,8 @@ function normalizeCommandForPolicyImpl(command, codeBodies) {
         }
       }
       for (const arg of args) {
-        const s = at(arg.Pos().Offset());
-        const e = at(arg.End().Offset());
+        const s = at(arg.pos);
+        const e = at(arg.end);
         if (s < 0 || e < 0) continue;
         if (msgSpans.has(`${s}:${e}`)) continue;
         const resolved = resolveWordLiteral(arg);
@@ -1198,10 +1248,10 @@ function scanArgsForDynamicExec(args, startIdx) {
   let hasParamExp = false;
   let hasCurl = false;
   for (let i = startIdx; i < args.length; i++) {
-    syntax.Walk(args[i], (inner) => {
+    walk(args[i], (inner) => {
       if (!inner) return false;
       const inn = inner;
-      const it = syntax.NodeType(inn);
+      const it = inn.kind;
       if (it === "CmdSubst") hasCmdSubst = true;
       if (it === "ParamExp") hasParamExp = true;
       if (it === "Lit" && DOWNLOAD_CMDS.has(inn.Value?.toLowerCase())) hasCurl = true;
@@ -1214,15 +1264,16 @@ function scanArgsForDynamicExec(args, startIdx) {
 }
 function detectDangerousShellExec(command) {
   try {
-    const f = sharedParser.Parse(command, "cmd");
+    const f = parseShared(command);
+    if (f === PARSE_FAIL) return null;
     let result = null;
     const assigned = assignedNames(f);
-    syntax.Walk(f, (node) => {
+    walk(f, (node) => {
       if (!node || result === "block") return false;
       const n = node;
-      if (syntax.NodeType(n) === "BinaryCmd" && n.Y && !listOps().has(n.Op)) {
+      if (n.kind === "BinaryCmd" && n.Y && !listOps().has(n.Op)) {
         const call = n.Y.Cmd;
-        if (call && syntax.NodeType(call) === "CallExpr") {
+        if (call && call.kind === "CallExpr") {
           const words = (call.Args || []).map((a) => resolveWordLiteral(a));
           const head2 = unwrapCommandHead(words);
           const name = (words[head2] ?? "").split("/").pop() ?? "";
@@ -1235,7 +1286,7 @@ function detectDangerousShellExec(command) {
             result = "review";
         }
       }
-      if (syntax.NodeType(n) !== "CallExpr") return true;
+      if (n.kind !== "CallExpr") return true;
       const args = n.Args || [];
       if (args.length === 0) return true;
       const headWords = args.map(
@@ -1246,7 +1297,7 @@ function detectDangerousShellExec(command) {
       if (!lookup && (opaqueExecutable(args[0], assigned) || opaqueExecutable(args[head], assigned)))
         result = "review";
       const firstParts = args[0].Parts || [];
-      if (firstParts.length !== 1 || syntax.NodeType(firstParts[0]) !== "Lit") return true;
+      if (firstParts.length !== 1 || firstParts[0].kind !== "Lit") return true;
       const cmdName = firstParts[0].Value?.toLowerCase() ?? "";
       if (cmdName === "eval") {
         const v = scanArgsForDynamicExec(args, 1);
@@ -1254,7 +1305,7 @@ function detectDangerousShellExec(command) {
       } else if (SHELL_INTERPRETERS.has(cmdName)) {
         for (let i = 1; i < args.length - 1; i++) {
           const flagParts = args[i].Parts || [];
-          if (flagParts.length !== 1 || syntax.NodeType(flagParts[0]) !== "Lit" || flagParts[0].Value !== "-c")
+          if (flagParts.length !== 1 || flagParts[0].kind !== "Lit" || flagParts[0].Value !== "-c")
             continue;
           const v = scanArgsForDynamicExec(args, i + 1);
           if (v === "block" || v === "review" && result === null) result = v;
@@ -1278,8 +1329,7 @@ function isDefaultExpansion(part) {
 }
 function lookupSubstitution(part) {
   const stmts = part.Stmts ?? [];
-  if (stmts.length !== 1 || !stmts[0].Cmd || syntax.NodeType(stmts[0].Cmd) !== "CallExpr")
-    return null;
+  if (stmts.length !== 1 || !stmts[0].Cmd || stmts[0].Cmd.kind !== "CallExpr") return null;
   const words = (stmts[0].Cmd.Args ?? []).map((a) => resolveWordLiteral(a));
   if (words.some((w) => w === null)) return null;
   if (words.length === 2 && words[0] === "which") return words[1];
@@ -1289,9 +1339,9 @@ function lookupSubstitution(part) {
 }
 function assignedNames(f) {
   const names = /* @__PURE__ */ new Set();
-  syntax.Walk(f, (node) => {
+  walk(f, (node) => {
     if (!node) return false;
-    const kind = syntax.NodeType(node);
+    const kind = node.kind;
     if (kind === "Assign" && node.Name?.Value) names.add(node.Name.Value);
     if (kind === "ForClause" && node.Loop?.Name?.Value) names.add(node.Loop.Name.Value);
     if (kind === "CallExpr") {
@@ -1306,7 +1356,7 @@ function assignedNames(f) {
 }
 function executableParts(word, assigned, quoted = false) {
   return (word?.Parts ?? []).flatMap((part) => {
-    const kind = syntax.NodeType(part);
+    const kind = part.kind;
     if (kind === "DblQuoted") return executableParts(part, assigned, true);
     if (kind === "Lit") return [{ kind: "Lit", value: part.Value ?? "", quoted }];
     if (kind === "SglQuoted")
@@ -1374,10 +1424,10 @@ function chmodHasOpenPermMode(command) {
   if (f === PARSE_FAIL) return false;
   let found = false;
   try {
-    syntax.Walk(f, (node) => {
+    walk(f, (node) => {
       if (!node || found) return false;
       const n = node;
-      if (syntax.NodeType(n) !== "CallExpr") return true;
+      if (n.kind !== "CallExpr") return true;
       const words = (n.Args || []).map((a) => resolveWordLiteral(a));
       if (words.length === 0) return true;
       const name = (words[0] ?? "").toLowerCase();
@@ -1430,11 +1480,11 @@ function redirStdinOps() {
 }
 function deriveBinaryOp(sample) {
   try {
-    const f = sharedParser.Parse(sample, "cmd");
+    const f = toPlainTree(sharedParser.Parse(sample, "cmd"));
     let op = -1;
-    syntax.Walk(f, (node) => {
+    walk(f, (node) => {
       const n = node;
-      if (n && syntax.NodeType(n) === "BinaryCmd" && op < 0) op = n.Op;
+      if (n && n.kind === "BinaryCmd" && op < 0) op = n.Op;
       return true;
     });
     return op;
@@ -1508,7 +1558,7 @@ function heredocText(word) {
   const parts = word?.Parts ?? [];
   let out = "";
   for (const p of parts) {
-    if (syntax.NodeType(p) !== "Lit") return null;
+    if (p.kind !== "Lit") return null;
     out += p.Value ?? "";
   }
   return out;
@@ -1544,7 +1594,7 @@ function attachedCode(interp, flag) {
 }
 function inlineExecCall(stmt, pipeFed) {
   const cmd = stmt?.Cmd;
-  if (!cmd || syntax.NodeType(cmd) !== "CallExpr") return null;
+  if (!cmd || cmd.kind !== "CallExpr") return null;
   const words = (cmd.Args || []).map((a) => resolveWordLiteral(a));
   if (words.length === 0) return null;
   const headIdx = unwrapCommandHead(words);
@@ -1625,10 +1675,10 @@ function shellPayloadNeedsReview(payload) {
   let review = false;
   payloadNesting++;
   try {
-    syntax.Walk(f, (node) => {
+    walk(f, (node) => {
       if (!node || review) return false;
       const n = node;
-      if (syntax.NodeType(n) !== "CallExpr") return true;
+      if (n.kind !== "CallExpr") return true;
       const words = (n.Args || []).map((a) => resolveWordLiteral(a));
       if (words.length === 0) return true;
       const h = unwrapCommandHead(words);
@@ -1662,10 +1712,10 @@ function inlineExecCalls(command) {
   if (f === PARSE_FAIL) return PARSE_FAIL;
   const calls = [];
   try {
-    syntax.Walk(f, (node) => {
+    walk(f, (node) => {
       if (!node || calls.length >= MAX_INLINE_CALLS) return false;
       const n = node;
-      const t = syntax.NodeType(n);
+      const t = n.kind;
       if (t === "BinaryCmd" && n.Y && !listOps().has(n.Op)) {
         const call = inlineExecCall(n.Y, true);
         if (call) calls.push(call);
@@ -1800,7 +1850,7 @@ function shellScriptOperands(command) {
     walkWithCalls(f, (node) => {
       if (!node) return false;
       const n = node;
-      if (syntax.NodeType(n) !== "CallExpr") return true;
+      if (n.kind !== "CallExpr") return true;
       const callArgs = n.Args || [];
       if (callArgs.length === 0) return true;
       const words = callArgs.map((a) => resolveWordLiteral(a));
@@ -1836,7 +1886,7 @@ function shellScriptOperands(command) {
 }
 function windowsDrivePathSpelling(word) {
   const parts = word?.Parts || [];
-  if (parts.length === 0 || !parts.every((p) => syntax.NodeType(p) === "Lit")) return null;
+  if (parts.length === 0 || !parts.every((p) => p.kind === "Lit")) return null;
   const raw = parts.map((p) => p.Value ?? "").join("");
   return /^[A-Za-z]:\\[^\s'"$`]*$/.test(raw) ? raw : null;
 }
@@ -1874,15 +1924,15 @@ function recordTopLevelAssignments(f) {
 }
 function probeBinOp(src) {
   try {
-    const cmd = syntax.NewParser().Parse(src, "probe")?.Stmts?.[0]?.Cmd;
-    if (cmd && syntax.NodeType(cmd) === "BinaryCmd") return cmd.Op;
+    const cmd = toPlainTree(syntax2.NewParser().Parse(src, "probe"))?.Stmts?.[0]?.Cmd;
+    if (cmd && cmd.kind === "BinaryCmd") return cmd.Op;
   } catch {
   }
   return null;
 }
 function recordTopLevelStmt(stmt) {
   if (!stmt || !stmt.Cmd) return false;
-  const t = syntax.NodeType(stmt.Cmd);
+  const t = stmt.Cmd.kind;
   if (t === "BinaryCmd") {
     if (!AND_OR_OPS.has(stmt.Cmd.Op)) return false;
     if (!recordTopLevelStmt(stmt.Cmd.X)) return false;
@@ -1892,7 +1942,7 @@ function recordTopLevelStmt(stmt) {
   if (t !== "CallExpr" && t !== "DeclClause") return false;
   let at = 0;
   try {
-    at = stmt.Pos().Offset();
+    at = stmt.pos;
   } catch {
     at = 0;
   }
@@ -1903,14 +1953,14 @@ function recordTopLevelStmt(stmt) {
 }
 function recordAssignments(n, at) {
   if (!assignmentTable) return;
-  const t = syntax.NodeType(n);
+  const t = n.kind;
   let assigns = [];
   if (t === "CallExpr") {
     if ((n.Args || []).length > 0) return;
     assigns = n.Assigns || [];
   } else if (t === "DeclClause") {
     if (!ASSIGNMENT_HEADS.has(n.Variant?.Value ?? "")) return;
-    assigns = (n.Args || []).filter((a) => syntax.NodeType(a) === "Assign");
+    assigns = (n.Args || []).filter((a) => a.kind === "Assign");
   } else return;
   for (const a of assigns) {
     const name = a?.Name?.Value;
@@ -1919,13 +1969,13 @@ function recordAssignments(n, at) {
   }
 }
 function resolveTrivialSubst(part) {
-  if (syntax.NodeType(part) !== "CmdSubst") return void 0;
+  if (part.kind !== "CmdSubst") return void 0;
   const stmts = part.Stmts || [];
   if (stmts.length !== 1) return void 0;
   const st = stmts[0];
   if ((st.Redirs || []).length > 0 || st.Negated || st.Background) return void 0;
   const cmd = st.Cmd;
-  if (!cmd || syntax.NodeType(cmd) !== "CallExpr") return void 0;
+  if (!cmd || cmd.kind !== "CallExpr") return void 0;
   if ((cmd.Assigns || []).length > 0) return void 0;
   const words = (cmd.Args || []).map((a) => resolveWordLiteral(a));
   if (words.length === 0 || words.some((w) => w === null)) return void 0;
@@ -1950,7 +2000,7 @@ function recordedExpansion(name) {
   return rec.value;
 }
 function isPlainParam(p) {
-  if (syntax.NodeType(p) !== "ParamExp") return false;
+  if (p.kind !== "ParamExp") return false;
   return !(p.Excl || p.Length || p.Width || p.Index || p.Slice || p.Repl || p.Exp);
 }
 function expandPlainParam(p) {
@@ -1962,9 +2012,9 @@ function expandPlainParam(p) {
 }
 function functionBodies(f) {
   const out = /* @__PURE__ */ new Map();
-  syntax.Walk(f, (node) => {
+  walk(f, (node) => {
     const n = node;
-    if (n && syntax.NodeType(n) === "FuncDecl" && n.Name?.Value && n.Body) {
+    if (n && n.kind === "FuncDecl" && n.Name?.Value && n.Body) {
       const list = out.get(n.Name.Value) ?? [];
       list.push(n.Body);
       out.set(n.Name.Value, list);
@@ -1975,10 +2025,10 @@ function functionBodies(f) {
 }
 function rebindsPositionals(body) {
   let found = false;
-  syntax.Walk(body, (node) => {
+  walk(body, (node) => {
     const n = node;
     if (found || !n) return false;
-    if (syntax.NodeType(n) === "CallExpr") {
+    if (n.kind === "CallExpr") {
       const words = (n.Args || []).map((a) => resolveWordLiteral(a));
       if (words[0] === "shift") found = true;
       else if (words[0] === "set" && words.slice(1).some((w) => w === null || w === "--" || !/^[-+]/.test(w)))
@@ -1998,7 +2048,7 @@ function tableBindings() {
 function walkWithCalls(f, visit) {
   const bodies = functionBodies(f);
   if (bodies.size === 0) {
-    syntax.Walk(f, visit);
+    walk(f, visit);
     return;
   }
   const seenCalls = /* @__PURE__ */ new Set();
@@ -2032,8 +2082,8 @@ function walkWithCalls(f, visit) {
       currentStmtOffset = Number.MAX_SAFE_INTEGER;
       callDepth++;
       try {
-        if (body.Cmd && syntax.NodeType(body.Cmd) === "Block") recordTopLevelAssignments(body.Cmd);
-        syntax.Walk(body, step);
+        if (body.Cmd && body.Cmd.kind === "Block") recordTopLevelAssignments(body.Cmd);
+        walk(body, step);
       } finally {
         callDepth--;
         assignmentTable = outerTable;
@@ -2044,10 +2094,10 @@ function walkWithCalls(f, visit) {
   const step = (node) => {
     if (!node) return false;
     const go = visit(node);
-    if (go !== false && syntax.NodeType(node) === "CallExpr") inline(node);
+    if (go !== false && node.kind === "CallExpr") inline(node);
     return go;
   };
-  syntax.Walk(f, step);
+  walk(f, step);
 }
 function withAssignments(f, body) {
   const outerTable = assignmentTable;
@@ -2072,7 +2122,7 @@ function walkCommandScope(command, visit) {
   if (f === PARSE_FAIL) return "parse-fail";
   withAssignments(f, () => {
     walkWithCalls(f, (node) => {
-      if (node && syntax.NodeType(node) === "Stmt") trackStatement(node);
+      if (node && node.kind === "Stmt") trackStatement(node);
       return visit(node);
     });
   });
@@ -2080,7 +2130,7 @@ function walkCommandScope(command, visit) {
 }
 function trackStatement(n) {
   try {
-    currentStmtOffset = n.Pos().Offset();
+    currentStmtOffset = n.pos;
   } catch {
     currentStmtOffset = Number.MAX_SAFE_INTEGER;
   }
@@ -2096,11 +2146,11 @@ function resolveWordLiteral(w) {
   return s;
 }
 function resolveWordPrefix(w) {
-  const walk2 = (parts) => {
+  const walk3 = (parts) => {
     let s = "";
     for (const p of parts) {
       if (p && typeof p === "object" && Array.isArray(p.Parts) && p.Dollar !== void 0) {
-        const inner = walk2(p.Parts);
+        const inner = walk3(p.Parts);
         s += inner.prefix;
         if (inner.dynamic) return { prefix: s, dynamic: true };
         continue;
@@ -2111,10 +2161,10 @@ function resolveWordPrefix(w) {
     }
     return { prefix: s, dynamic: false };
   };
-  return walk2(w?.Parts || []);
+  return walk3(w?.Parts || []);
 }
 function resolvePart(p, inQuotes) {
-  const t = syntax.NodeType(p);
+  const t = p.kind;
   if (t === "Lit") {
     const raw = p.Value ?? "";
     if (!inQuotes) return raw.replace(/\\(.)/g, "$1");
@@ -2210,7 +2260,7 @@ function extractShellDestinations(command) {
       () => walkWithCalls(f, (node) => {
         if (!node) return false;
         const n = node;
-        if (syntax.NodeType(n) === "Stmt") {
+        if (n.kind === "Stmt") {
           trackStatement(n);
           for (const raw of redirectWords(n)) {
             const host2 = devNetRedirectHost(raw);
@@ -2222,7 +2272,7 @@ function extractShellDestinations(command) {
             out.push({ host: host2, binary, raw });
           }
         }
-        if (syntax.NodeType(n) !== "CallExpr") return true;
+        if (n.kind !== "CallExpr") return true;
         const callArgs = n.Args || [];
         if (callArgs.length === 0) return true;
         const words = callArgs.map((a) => resolveWordLiteral(a));
@@ -2257,7 +2307,7 @@ function extractShellDestTokens(command) {
       () => walkWithCalls(f, (node) => {
         if (!node) return false;
         const n = node;
-        if (syntax.NodeType(n) === "Stmt") {
+        if (n.kind === "Stmt") {
           trackStatement(n);
           for (const raw of redirectWords(n)) {
             const host2 = devNetRedirectHost(raw);
@@ -2269,7 +2319,7 @@ function extractShellDestTokens(command) {
             out.push({ token: host2, binary });
           }
         }
-        if (syntax.NodeType(n) !== "CallExpr") return true;
+        if (n.kind !== "CallExpr") return true;
         const callArgs = n.Args || [];
         if (callArgs.length === 0) return true;
         const words = callArgs.map((a) => resolveWordLiteral(a));
@@ -2337,11 +2387,11 @@ function isWaivableCleanupTarget(p) {
 }
 function deriveRedirOp(sample) {
   try {
-    const f = sharedParser.Parse(sample, "cmd");
+    const f = toPlainTree(sharedParser.Parse(sample, "cmd"));
     let op = -1;
-    syntax.Walk(f, (node) => {
+    walk(f, (node) => {
       const n = node;
-      if (n && syntax.NodeType(n) === "Redirect" && op < 0) op = n.Op;
+      if (n && n.kind === "Redirect" && op < 0) op = n.Op;
       return true;
     });
     return op;
@@ -2354,7 +2404,7 @@ function collectSameCommandCreations(f) {
   try {
     const stmts = Array.isArray(f?.Stmts) ? f.Stmts : [];
     for (const stmt of stmts) {
-      if (!stmt || !stmt.Cmd || syntax.NodeType(stmt.Cmd) !== "CallExpr") continue;
+      if (!stmt || !stmt.Cmd || stmt.Cmd.kind !== "CallExpr") continue;
       const redirs = stmt.Redirs || [];
       if (!redirs.some((r) => r && REDIR_HEREDOC_OPS.has(r.Op))) continue;
       for (const r of redirs) {
@@ -2378,10 +2428,10 @@ function isRmCreatedInCommandCleanup(command) {
   let sawRm = false;
   let ok = true;
   try {
-    syntax.Walk(f, (node) => {
+    walk(f, (node) => {
       if (!node || !ok) return false;
       const n = node;
-      if (syntax.NodeType(n) !== "CallExpr") return true;
+      if (n.kind !== "CallExpr") return true;
       const args = n.Args || [];
       const name = (resolveWordLiteral(args[0]) ?? "").toLowerCase();
       if (name !== "rm") return true;
@@ -2431,10 +2481,10 @@ function analyzeFsOperationImpl(command, depth = 0) {
     walkWithCalls(f, (node) => {
       if (!node || result?.verdict === "block") return false;
       const n = node;
-      const nodeType = syntax.NodeType(n);
+      const nodeType = n.kind;
       if (nodeType === "Stmt") {
         try {
-          currentStmtOffset = n.Pos().Offset();
+          currentStmtOffset = n.pos;
         } catch {
           currentStmtOffset = Number.MAX_SAFE_INTEGER;
         }
@@ -2947,11 +2997,12 @@ function analyzeShellCommand(command) {
     if (lower2.startsWith("-")) allTokens.push(lower2.replace(/^-+/, ""));
   };
   try {
-    const f = sharedParser.Parse(command, "cmd");
-    syntax.Walk(f, (node) => {
+    const f = parseShared(command);
+    if (f === PARSE_FAIL) throw new Error("parse failed");
+    walk(f, (node) => {
       if (!node) return false;
       const n = node;
-      if (syntax.NodeType(n) !== "CallExpr") return true;
+      if (n.kind !== "CallExpr") return true;
       const wordValues2 = (n.Args || []).map((arg) => {
         return (arg.Parts || []).map((p) => (p.Value ?? "").replace(/\\(.)/g, "$1")).join("");
       }).filter((s) => s.length > 0);
@@ -3223,7 +3274,7 @@ function runnablePrefix(command) {
   let text = command;
   for (let attempt = 0; attempt < 32; attempt++) {
     try {
-      return syntax2.NewParser().Parse(text, "");
+      return toPlainTree(syntax3.NewParser().Parse(text, ""));
     } catch (error) {
       const message = String(typeof error?.Error === "function" ? error.Error() : error?.message);
       const line = Number(/^(\d+):/.exec(message)?.[1]);
@@ -3291,7 +3342,7 @@ function wordValues(word, state) {
       out2 = next.slice(0, MAX_ALTERNATIVES);
     };
     for (const node of nodes) {
-      const kind = syntax2.NodeType(node);
+      const kind = node.kind;
       let pieces;
       if (kind === "ParamExp") pieces = paramValues(node, quoted);
       else if (kind === "DblQuoted") {
@@ -3359,9 +3410,9 @@ function collectShellFileAccesses(command, context = {}) {
   }
   function substitutions(word, state, depth) {
     if (!word) return;
-    syntax2.Walk(word, (node) => {
+    walk(word, (node) => {
       if (!node) return false;
-      if (["CmdSubst", "ProcSubst"].includes(syntax2.NodeType(node))) {
+      if (["CmdSubst", "ProcSubst"].includes(node.kind)) {
         statements(node.Stmts ?? [], clone(state), depth + 1);
         return false;
       }
@@ -3785,7 +3836,7 @@ function collectShellFileAccesses(command, context = {}) {
   }
   function readsScriptFromStdin(stmt) {
     const cmd = stmt?.Cmd;
-    if (!cmd || syntax2.NodeType(cmd) !== "CallExpr") return false;
+    if (!cmd || cmd.kind !== "CallExpr") return false;
     const words = (cmd.Args ?? []).map((a) => resolveWordLiteral(a));
     const head = unwrapCommandHead(words);
     return SHELL_INTERPRETERS.has(base(words[head])) && shellConsumesPipe(words.slice(head + 1));
@@ -3799,7 +3850,7 @@ function collectShellFileAccesses(command, context = {}) {
   }
   function producedText(stmt) {
     const cmd = stmt?.Cmd;
-    if (!cmd || syntax2.NodeType(cmd) !== "CallExpr") return null;
+    if (!cmd || cmd.kind !== "CallExpr") return null;
     const words = (cmd.Args ?? []).map((a) => resolveWordLiteral(a));
     if (words.some((w) => w === null)) return null;
     const head = unwrapCommandHead(words);
@@ -3818,7 +3869,7 @@ function collectShellFileAccesses(command, context = {}) {
     if (!stmt || depth > MAX_DEPTH) return;
     state.onSuccess = void 0;
     if (stmt.Background) state = clone(state);
-    const headWord = stmt.Cmd && syntax2.NodeType(stmt.Cmd) === "CallExpr" ? base(resolveWordLiteral(stmt.Cmd.Args?.[0])) : "";
+    const headWord = stmt.Cmd && stmt.Cmd.kind === "CallExpr" ? base(resolveWordLiteral(stmt.Cmd.Args?.[0])) : "";
     const sends = SENDING_STDIN.has(headWord);
     for (const redir of stmt.Redirs ?? []) {
       substitutions(redir.Word, state, depth);
@@ -3834,7 +3885,7 @@ function collectShellFileAccesses(command, context = {}) {
     const cmd = stmt.Cmd;
     if (!cmd) return;
     stdinScript(stmt, state, depth);
-    switch (syntax2.NodeType(cmd)) {
+    switch (cmd.kind) {
       case "CallExpr":
         call(cmd, state, depth);
         break;
@@ -3848,7 +3899,7 @@ function collectShellFileAccesses(command, context = {}) {
         for (; ; ) {
           segments2.unshift({ op: node.Op, part: node.Y });
           const left = node.X;
-          if (left?.Cmd && syntax2.NodeType(left.Cmd) === "BinaryCmd" && !left.Redirs?.length && !left.Negated && !left.Background)
+          if (left?.Cmd && left.Cmd.kind === "BinaryCmd" && !left.Redirs?.length && !left.Negated && !left.Background)
             node = left.Cmd;
           else {
             segments2.unshift({ op: node.Op, part: left });
@@ -5218,11 +5269,10 @@ function shellWriteUnseen(command, target) {
   let unseen = false;
   let seen = false;
   try {
-    syntax4.Walk(f, (node) => {
+    walk(f, (node) => {
       if (!node || unseen) return false;
       const n = node;
-      if (syntax4.NodeType(n) !== "Stmt" || !n.Cmd || syntax4.NodeType(n.Cmd) !== "CallExpr")
-        return true;
+      if (n.kind !== "Stmt" || !n.Cmd || n.Cmd.kind !== "CallExpr") return true;
       const words = (n.Cmd.Args || []).map(
         (a) => resolveWordLiteral(a)
       );
@@ -5277,14 +5327,14 @@ function analyzeGitImpl(command) {
     seen.add(key);
     findings.push(f);
   };
-  const walk2 = new GitWalk((inv) => classify(inv).forEach(found), found);
-  const parsed = walk2.run(command, 0);
+  const walk3 = new GitWalk((inv) => classify(inv).forEach(found), found);
+  const parsed = walk3.run(command, 0);
   return { parsed, findings };
 }
 function isPositionalParam(word) {
   let parts = word?.Parts || [];
-  if (parts.length === 1 && syntax5.NodeType(parts[0]) === "DblQuoted") parts = parts[0].Parts || [];
-  if (parts.length !== 1 || syntax5.NodeType(parts[0]) !== "ParamExp") return false;
+  if (parts.length === 1 && parts[0].kind === "DblQuoted") parts = parts[0].Parts || [];
+  if (parts.length !== 1 || parts[0].kind !== "ParamExp") return false;
   return /^(\d+|@|\*)$/.test(parts[0].Param?.Value ?? "");
 }
 function boundPositionals() {
@@ -5298,11 +5348,11 @@ function boundPositionals() {
 function plainParamName(word) {
   let parts = word?.Parts || [];
   let quoted = false;
-  if (parts.length === 1 && syntax5.NodeType(parts[0]) === "DblQuoted") {
+  if (parts.length === 1 && parts[0].kind === "DblQuoted") {
     parts = parts[0].Parts || [];
     quoted = true;
   }
-  if (parts.length !== 1 || syntax5.NodeType(parts[0]) !== "ParamExp") return null;
+  if (parts.length !== 1 || parts[0].kind !== "ParamExp") return null;
   const p = parts[0];
   if (p.Excl || p.Length || p.Width || p.Index || p.Slice || p.Repl || p.Exp) return null;
   const name = p.Param?.Value;
@@ -5327,7 +5377,7 @@ function resolveGitWords(word) {
   }
   const parts = word?.Parts || [];
   const expansion = parts.some((p) => {
-    const t = syntax5.NodeType(p);
+    const t = p.kind;
     return t === "ParamExp" || t === "CmdSubst";
   });
   return expansion ? splitFields(value) : [value];
@@ -5728,14 +5778,14 @@ function hookCommands(text) {
   const root = parsed?.hooks;
   if (!root || typeof root !== "object") return null;
   const out = [];
-  const walk2 = (v, depth) => {
+  const walk3 = (v, depth) => {
     if (depth > 8 || !v || typeof v !== "object") return;
     for (const [k, x] of Object.entries(v)) {
       if (k === "command" && typeof x === "string") out.push(x);
-      else walk2(x, depth + 1);
+      else walk3(x, depth + 1);
     }
   };
-  walk2(root, 0);
+  walk3(root, 0);
   return out;
 }
 function hooksDisarmed(text) {
@@ -5902,9 +5952,9 @@ function isDupInOp(op) {
   if (dupInOp === null) {
     let found = -1;
     try {
-      syntax6.Walk(parseShared("cat <&3"), (node) => {
+      walk(parseShared("cat <&3"), (node) => {
         const n = node;
-        if (found === -1 && n && syntax6.NodeType(n) === "Stmt" && n.Redirs?.[0]) {
+        if (found === -1 && n && n.kind === "Stmt" && n.Redirs?.[0]) {
           found = n.Redirs[0].Op;
         }
         return true;
@@ -5925,10 +5975,10 @@ function analyzeOutbound(command) {
     return hit;
   }
   const findings = [];
-  const walk2 = new OutboundWalk(findings);
-  const parsed = walk2.run(command, 0);
+  const walk3 = new OutboundWalk(findings);
+  const parsed = walk3.run(command, 0);
   const envOut = findings.find((f) => f.checkId === "data.env-exfil");
-  if (envOut) envOut.destinations = walk2.envDestinations();
+  if (envOut) envOut.destinations = walk3.envDestinations();
   const computed = { parsed, findings };
   if (cache2.size >= CACHE_MAX2) {
     const oldest = cache2.keys().next().value;
@@ -5944,7 +5994,7 @@ function wordShape(word) {
   const parts = word?.Parts || [];
   let out = "";
   for (const p of parts) {
-    const t = syntax6.NodeType(p);
+    const t = p.kind;
     if (t === "Lit" || t === "SglQuoted") out += p.Value ?? "";
     else if (t === "DblQuoted") out += wordShape(p);
     else out += "X";
@@ -6079,16 +6129,16 @@ function declDumpsEnv(decl) {
 }
 function paramName(word) {
   let parts = word?.Parts || [];
-  if (parts.length === 1 && syntax6.NodeType(parts[0]) === "DblQuoted") parts = parts[0].Parts || [];
-  if (parts.length !== 1 || syntax6.NodeType(parts[0]) !== "ParamExp") return null;
+  if (parts.length === 1 && parts[0].kind === "DblQuoted") parts = parts[0].Parts || [];
+  if (parts.length !== 1 || parts[0].kind !== "ParamExp") return null;
   return parts[0].Param?.Value ?? null;
 }
 function refersTo(word, names) {
   let hit = false;
-  syntax6.Walk(word, (node) => {
+  walk(word, (node) => {
     if (hit || !node) return false;
     const n = node;
-    if (syntax6.NodeType(n) === "ParamExp" && names.has(n.Param?.Value)) hit = true;
+    if (n.kind === "ParamExp" && names.has(n.Param?.Value)) hit = true;
     return !hit;
   });
   return hit;
@@ -6096,10 +6146,10 @@ function refersTo(word, names) {
 function runsCommandsIn(stmt) {
   const readVars = /* @__PURE__ */ new Set();
   let hit = false;
-  syntax6.Walk(stmt, (node) => {
+  walk(stmt, (node) => {
     if (hit || !node) return false;
     const n = node;
-    if (syntax6.NodeType(n) !== "CallExpr") return true;
+    if (n.kind !== "CallExpr") return true;
     const words = wordsOf(n);
     if (words.length === 0) return true;
     const { head, at } = headOf(words);
@@ -6676,7 +6726,7 @@ function localContexts(file2) {
     if (depth > 64) return null;
     if (!stmt || stmt.Background || stmt.Negated || stmt.Redirs?.length) return null;
     const cmd = stmt.Cmd;
-    const kind = syntax7.NodeType(cmd);
+    const kind = cmd.kind;
     if (kind === "BinaryCmd" && cmd.Op === andOp) {
       const next = visit(cmd.X, steps, depth + 1);
       return next === null ? null : visit(cmd.Y, next, depth + 1);
@@ -6692,7 +6742,7 @@ function localContexts(file2) {
       )
     ))
       return null;
-    contexts.set(cmd.Pos().Offset(), steps);
+    contexts.set(cmd.pos, steps);
     return null;
   }
   if (file2.Stmts?.length === 1) visit(file2.Stmts[0], []);
@@ -6703,12 +6753,12 @@ function collect(command, out, depth) {
   const f = parseShared(command);
   if (typeof f === "symbol") return;
   const contexts = depth === 0 ? localContexts(f) : /* @__PURE__ */ new Map();
-  syntax7.Walk(f, (node) => {
-    if (node && syntax7.NodeType(node) === "CallExpr") {
+  walk(f, (node) => {
+    if (node && node.kind === "CallExpr") {
       const words = (node.Args || []).map((a) => resolveWordLiteral(a));
       const start = out.length;
       if (words.length > 0) fromCall(words, out, depth);
-      const steps = contexts.get(node.Pos().Offset());
+      const steps = contexts.get(node.pos);
       for (let i = start; i < out.length; i++) {
         if (["npx", "bunx", "npm exec"].includes(out[i].manager)) {
           if (!steps) out[i].localCwd = null;
@@ -6755,7 +6805,7 @@ function collect2(command, out, depth) {
   try {
     walkCommandScope(command, (node) => {
       const n = node;
-      if (!n || syntax8.NodeType(n) !== "CallExpr") return true;
+      if (!n || n.kind !== "CallExpr") return true;
       const words = (n.Args || []).map((a) => resolveWordLiteral(a));
       if (words.length === 0) return true;
       const prefix = (n.Assigns || []).filter((a) => a?.Name?.Value).map(
@@ -8140,12 +8190,12 @@ function extractContentDestinations(text) {
 function extractArgDestinations(args) {
   const out = /* @__PURE__ */ new Set();
   try {
-    walk(args, void 0, out, 0);
+    walk2(args, void 0, out, 0);
   } catch {
   }
   return [...out];
 }
-function walk(value, key, out, depth) {
+function walk2(value, key, out, depth) {
   if (out.size >= MAX_DESTINATIONS || depth > 12) return;
   if (typeof value === "string") {
     const s = value.length > MAX_SCAN_CHARS ? value.slice(0, MAX_SCAN_CHARS) : value;
@@ -8164,12 +8214,12 @@ function walk(value, key, out, depth) {
     return;
   }
   if (Array.isArray(value)) {
-    for (const v of value) walk(v, key, out, depth + 1);
+    for (const v of value) walk2(v, key, out, depth + 1);
     return;
   }
   if (value && typeof value === "object") {
     for (const [k, v] of Object.entries(value))
-      walk(v, k, out, depth + 1);
+      walk2(v, k, out, depth + 1);
   }
 }
 function destinationDomain(dest) {
@@ -8821,9 +8871,9 @@ function classifyCall(head, args, prefixes, env, state, out) {
 function walkCalls(command, out, depth, state) {
   const f = parseShared(command);
   if (typeof f === "symbol" || !f) return;
-  syntax9.Walk(f, (node) => {
+  walk(f, (node) => {
     if (!node) return false;
-    const type = syntax9.NodeType(node);
+    const type = node.kind;
     if (type === "DeclClause") {
       for (const a of node.Args || []) if (a?.Name?.Value) state.env.add(a.Name.Value);
       return true;
@@ -8975,7 +9025,7 @@ function matchCanaryArgs(args, values) {
   if (values.length === 0) return null;
   const needles = prepare(values);
   if (needles.length === 0) return null;
-  const walk2 = (v, depth, fieldPath) => {
+  const walk3 = (v, depth, fieldPath) => {
     if (depth > MAX_DEPTH4) return null;
     if (typeof v === "string") {
       const hit = matchPrepared(v, needles);
@@ -8984,31 +9034,31 @@ function matchCanaryArgs(args, values) {
         const trimmed = v.trim();
         if (trimmed.startsWith("{") || trimmed.startsWith("[")) {
           try {
-            return walk2(JSON.parse(v), depth + 1, fieldPath);
+            return walk3(JSON.parse(v), depth + 1, fieldPath);
           } catch {
           }
         }
       }
       return null;
     }
-    if (typeof v === "number" && Number.isFinite(v)) return walk2(String(v), depth, fieldPath);
+    if (typeof v === "number" && Number.isFinite(v)) return walk3(String(v), depth, fieldPath);
     if (Array.isArray(v)) {
       for (let i = 0; i < v.length; i++) {
-        const h = walk2(v[i], depth + 1, `${fieldPath}[${i}]`);
+        const h = walk3(v[i], depth + 1, `${fieldPath}[${i}]`);
         if (h) return h;
       }
       return null;
     }
     if (v && typeof v === "object") {
       for (const [k, child] of Object.entries(v)) {
-        const h = walk2(child, depth + 1, fieldPath ? `${fieldPath}.${k}` : k);
+        const h = walk3(child, depth + 1, fieldPath ? `${fieldPath}.${k}` : k);
         if (h) return h;
       }
     }
     return null;
   };
   try {
-    return walk2(args, 0, "");
+    return walk3(args, 0, "");
   } catch (e) {
     console.error(
       "[node9 engine] canary args walk failed:",
@@ -9017,7 +9067,7 @@ function matchCanaryArgs(args, values) {
     return null;
   }
 }
-var MAX_REGEX_LENGTH, REGEX_CACHE_MAX, regexCache, aws_default, bash_safe_default, docker_default, filesystem_default, github_default, k8s_default, mongodb_default, postgres_default, project_jail_default, redis_default, finance_default, identity_default, publishing_default, settings_default, branches_default, ACTION_TEMPLATES, ACTION_CHECKS, GAP, prog, httpTo, httpWrite, HTTP_WRITE, HTTP_WRITE_ANY, NOT_STRIPE_TEST, postTo, STRIPE_OBJECTS, APP_SHIELD_SPECS, APP_SHIELDS, APP_SHIELD_NAMES, APP_SERVER_GLOB, GENERAL_ACTION_RULES, BUILTIN_SHIELDS, SSRF_MAX_HOST, METADATA_ADDRESSES, STRICT_TIERS, METADATA_HOSTNAMES, v4Octets, TIER_REASON, CHECK_TEXT, LEVELS, MODE_VALUES, SOFT, STRICT, BLOCK_ALL, LEVEL_CHECKS, VERDICTS, CHECK_VERDICT_RANK, ALL, BUILTIN_DANGEROUS_WORDS, PRODUCT_CHECKS, SHIELD_RULE_NAME, SHIELD_RULES_FOLDED_INTO_PRODUCT, CHECKS, CHECK_BY_ID, LEGACY_TO_ID, PROJECT_JAIL_BLOCK_READ, OVERRIDE_PREFIX, LABEL_WRAPPERS, LEGACY_READERS, INVISIBLE_RE, INVISIBLE_ONE, HOMOGLYPHS, HOMOGLYPH_RE, MAX_BLOBS, MIN_DECODED, BASE64_RUN_RE, HEX_RUN_RE, HEX_ESCAPE_RUN_RE, SYSTEM_AUTH_FILES, SYSTEM_AUTH_DIRS, PASSWORD_HASH_FILES, STARTUP_NAMES, SYSTEM_DIRS, SYSTEM_DIRS_EXEMPT, UPLOAD_SYSTEM_DIRS, AGENT_INSTRUCTION_FILES, AGENT_INSTRUCTION_DIRS, LEGACY_SYSTEM_PATH_RE, MAX_INLINE_CODE, WHAT, OUTSIDE, pyImport, either, PYTHON, NODE, PERL, RUBY, PHP, TABLES, STRING_LITERAL, syntax, sharedParser, MESSAGE_FLAGS, SHELL_INTERPRETERS, DOWNLOAD_CMDS, NORMALIZE_CACHE_MAX, normalizeCache, codeBodiesCache, AST_CACHE_MAX, astCache, PARSE_FAIL, INTERPRETER_LINE, PROGRAM_DIR, ACCESS_VIEW_CACHE_MAX, accessViewCache, MAX_READING_PAYLOADS, STDIN_CODE_INTERPRETERS, RUNS_TEXT_ELSEWHERE, defaultExpansionOps, VARIABLE_READERS, FS_READ_TOOLS, GREP_SHAPE, PATTERN_VERBS, PATTERN_VERB_NAMES, GREP_FILE_OPERANDS, READER_VALUE_LETTERS, FILE_OPERAND_FLAGS, SCP_VALUE_FLAGS, CURL_SOURCE_FLAGS, CURL_VALUE_LETTERS, WGET_VALUE_LETTERS, TAR_VALUE_LETTERS, ZIP_VALUE_LETTERS, RSYNC_VALUE_LETTERS, RSYNC_SKIP, CP_VALUE_LETTERS, INSTALL_VALUE_LETTERS, COPY_VERBS, TAR_MODE_WORD, COPY_VERB_HEADS, FS_OP_PRESCREEN_RE, HOME_CACHE_ALLOWLIST, SENSITIVE_PATH_RULES, AST_FS_REGEX_RULES, SQL_DB_CLIS, SQL_DDL_RE, CHMOD_OPEN_PERM_TOKENS, COMMAND_WRAPPERS, INLINE_INTERPRETER, RUNNER_WRAPPERS, _redirStdinOps, _listOps, WRAPPER_TAKES_TARGET, FIND_EXEC_FLAGS, FS_MUTATION_TOOLS, INTERP_LEADING_TARGET, MAX_PAYLOAD_NESTING, payloadNesting, MAX_INLINE_CALLS, INLINE_EXEC_FALLBACK, UNREADABLE_SOURCE, SCRIPT_RUNNERS, SCRIPT_RUNNER_VALUE_FLAGS, MAX_SCRIPT_OPERANDS, NET_BINARIES, VALUE_FLAGS, HOME_VARIABLES, assignmentTable, currentStmtOffset, PAYLOAD_BUDGET, payloadBudget, seenPayloads, UNANALYSABLE_NESTING, ASSIGNMENT_HEADS, AND_OP, OR_OP, AND_OR_OPS, MAX_CALL_DEPTH, MAX_CALL_WALKS, callDepth, callWalks, FS_OP_CACHE_MAX, fsOpCache, stripDotSlash, REDIR_TRUNCATE_OPS, REDIR_FILE_IN_OPS, REDIR_HEREDOC_OPS, FIND_OPTIONS, COPY_RULE_OF, isReaderWord, positionalAfter, NONE, UNKNOWN, FORBIDDEN_PATH_SEGMENTS, BASH_TOOL_NAMES, MCP_EXECUTORS, BUILTIN_FIELDS, ARGV_FIELDS, BARE_WORD, MAX_ARGV_CHARACTERS, syntax2, MAX_ALTERNATIVES, MAX_CALL_DEPTH2, MAX_CALL_WALKS2, POSITIONAL, MAX_DEPTH, MAX_PAYLOAD_DEPTH, unique, clone, SENDING_STDIN, DOWNLOAD_SHORT_VALUE, DOWNLOAD_LONG_VALUE, DOWNLOAD_OUTPUT_FLAGS, DOWNLOAD_DIR_FLAGS, base, quoteGlob, asWord, WRITES, APPENDS, READS, DUP_OUT, HERE_STRING, AND, OR, DEFAULT_OPS, exempt, RANK, syntax3, SEQUENCE_OPS, BIP39_ENGLISH, BIP39_PUBLIC_VECTORS, indices, lengths, hash, MAX_MNEMONIC_HASHES, SECRET_VIEW_LIMITS, IBAN_LENGTH, IBAN_BBAN_SHAPE, B58, B58_INDEX, XPRV_VERSIONS, B62, CRC32_TABLE, GITHUB_TOKEN_RE, B64URL, B64URL_INDEX, CASK_TWO_ZERO_SUFFIX, CASK_FOUR_ZERO_SUFFIX, CF_ODD, CF_EVEN, SPANISH_LETTERS, HETU_CHARS, VERHOEFF_D, VERHOEFF_P, MAX, UNTRUSTED_TOOLS, INJECTION_SIGNALS, MENTION_QUOTE_RE, MENTION_WORD_RE, ASSIGNMENT_CONTEXT_RE, DLP_STOPWORDS, REFERENCE_VALUE_RE, IDENTIFIER_VALUE_RE, PATH_VALUE_RE, DOTTED_REFERENCE_RE, CONCATENATION_RE, EMAIL_VALUE_RE, FIXTURE_NAME_RE, DERIVATIVE_NAME_RE, QUERY_CREDENTIAL_VALUE_RE, OTP_SECRET_RE, OTP_DOC_SECRETS, ASSIGNED_SECRET_VALUE_RE, ASSIGNED_SECRET_NAME_RE, NAME_KEYWORD_RE, ARN_CONTEXT_RE, CIPHER_KEY_NAME_RE, CIPHER_NAME_PARTS, CIPHER_KEY_VALUE_RE, LARAVEL_KEY_VALUE_RE, SQL_PASSWORD_VALUE_RE, GRAFANA_KEY_VALUE_RE, BASIC_VALUE_RE, BASIC_PAIR_RE, BASIC_HEADER_RE, BASIC_HEADER_PAIR_RE, BASIC_PLACEHOLDER_RE, BASIC_TEMPLATE_MARKERS, DROPBOX_SECRET_RE, OTP_CAPTURE_RE, DB_URL_PASSWORD_RE, DLP_PATTERNS, DLP_PATTERNS_GLOBAL, SENSITIVE_PATH_PATTERNS, SENSITIVE_PATH_REGEXES, MAX_DEPTH2, MAX_STRING_BYTES, MAX_JSON_PARSE_BYTES, BATCH_SEPARATOR, ENCODED_RUN_RE, IMPERATIVE, SECRET_TARGET, GUARD, SIGNALS, DESTINATION_RE, REUSED_SIGNALS, NEVER_NEGATED, NEGATION_BEFORE, syntax4, RDR_IN, COPY_VERBS2, LITERAL_VERBS, syntax5, GIT_PRESCREEN_RE, MAX_PAYLOAD_DEPTH2, MAX_ALIAS_DEPTH, CACHE_MAX, cache, PAYLOAD_SHELLS, CONFIG_SCOPE_FLAGS, CONFIG_VALUE_FLAGS, GLOBAL_VALUE_OPTIONS, GLOBAL_FLAG_OPTIONS, MAX_LOOP_ITEMS, GitWalk, POSITIONAL2, FORCE_PUSH, DESTRUCTIVE, UNREADABLE, PUSH_LONG_VALUE, BRANCH_LONG_VALUE, TAG_LONG_VALUE, CLEAN_LONG_VALUE, HOOKS_BYPASS, NO_VERIFY_SUBS, HOOK_KILL_SWITCHES, COMMIT_LONG_VALUE, CHMOD_OPTION_RE, STAGE_ALL, ADD_LONG_VALUE, CHECK_ID, RULE_NAME, INERT_LINE_RE, CHECK_ID2, INSTRUCTION_NAMES, SETTINGS_RE, HOOK_WORDS_RE, syntax6, SHELLS, NETCATS, NET_CLIENTS, SENDERS, NETCAT_EXEC_LONG, DECL_DUMPS, PROC_ENVIRON_RE, DEV_NET_RE, SOCAT_PROGRAM_RE, SOCAT_NET_RE, PRESCREEN_RE, MAX_PAYLOAD_DEPTH3, CACHE_MAX2, cache2, dupInOp, REVERSE_SHELL_DESCRIPTION, ENV_EXFIL_DESCRIPTION, DYNAMIC_WORD, MULTICALL, SHELL_VALUE_OPTIONS, INTERPRETERS, OutboundWalk, syntax7, NPM_INSTALL_VERBS, NPM_EXEC_VERBS, PNPM_INSTALL_VERBS, YARN_INSTALL_VERBS, BUN_INSTALL_VERBS, DLX_VERBS, NON_REGISTRY_RE, NPM_NAME_RE, EXACT_SEMVER_RE, NPM_VALUE_FLAGS, PNPM_VALUE_FLAGS, YARN_VALUE_FLAGS, BUN_VALUE_FLAGS, PIP_VALUE_FLAGS, UV_VALUE_FLAGS, POETRY_VALUE_FLAGS, PIPENV_VALUE_FLAGS, PIPX_VALUE_FLAGS, PY_SPEC_RE, PY_EXACT_RE, EXACT_VERSION_RE, GEM_NAME_RE, GEM_VALUE_FLAGS, BUNDLE_VALUE_FLAGS, CRATE_NAME_RE, CARGO_ADD_VALUE_FLAGS, CARGO_INSTALL_VALUE_FLAGS, GO_VALUE_FLAGS, GO_PATH_RE, NUGET_NAME_RE, DOTNET_ADD_VALUE_FLAGS, DOTNET_TOOL_VALUE_FLAGS, NUGET_VALUE_FLAGS, MAVEN_COORD_RE, COMPOSER_NAME_RE, COMPOSER_VALUE_FLAGS, EDITOR_HEADS, EXTENSION_ID_RE, MANAGER_HEADS, SHELLS2, MAX_NESTING, SHELL_VALUE_FLAGS, syntax8, NPM_FAMILY, PIP_FAMILY, NPM_FETCH_VERBS, PIP_FETCH_VERBS, NPM_FLAGS, PIP_FLAGS, NPM_VARS, PIP_VARS, PRESCREEN_RE2, PIP_ATTACHED_RE, MAX_PAYLOAD_DEPTH4, PUBLIC_REGISTRY_HOSTS, TUNING_FIELDS, MAP_GOVERNED, KNOB_GOVERNED, CONFIGURABLE_CHECK_IDS, DEFAULT_EGRESS_ALLOWLIST, PRIVATE_HOST_SUFFIXES, SOURCE_COMMANDS, SINK_COMMANDS, OBFUSCATORS, SENSITIVE_PATTERNS, FLAGS_WITH_VALUES, DESTINATION_ARGS, MCP_DESTINATION_KEYS, ARGUMENT_SCAN_LIMITS, RUN_CHAR, runChar, VERDICT_RANK, SQL_DML_KEYWORDS, MAX_DESTINATIONS, MAX_SCAN_CHARS, EMAIL_RE, URL_RE, IBAN_RE, RECIPIENT_KEYS, DESTRUCTIVE_VERB_RE, PII_EMAIL_RE, PII_SSN_RE, PII_PHONE_RE, PII_CC16_RE, PII_CC15_RE, PII_CC14_RE, PII_CC13_RE, PII_CC19_RE, CARD_PATTERNS, PII_ROUTING_RE, ROUTING_LABEL_RE, ROUTING_LABEL_WINDOW, NATIONAL_ID_SHAPES, NATIONAL_ID_LABEL_RE, NATIONAL_ID_LABEL_CS_RE, idLabelIn, NATIONAL_ID_LABEL_WINDOW, NATIONAL_ID_GUARD_RE, PII_IBAN_RE, REALTIME_PII_PATTERNS, MAX_PII_SCAN_BYTES, IBAN_DESTINATION_KEYS, WHOLE_IBAN_RE, JSON_ESCAPE_RE, JSON_ESCAPES, MASKED_KINDS, ENTRY_RE, IBAN_TEXT_RE, EMAIL_TEXT_RE, ACCOUNT_KEY_RE, ACCOUNT_VALUE_RE, MAX_MASK_DEPTH, syntax9, EMPTY, CURL_SEND_FLAGS, WGET_SEND_FLAGS, IWR_SEND_FLAGS, WRITE_METHODS, GH_READ, GH_WRITE, GH_HOSTNAME_FLAGS, GH_REPO_VALUE_FLAGS, GH_API_VALUE_FLAGS, GIT_FETCH, PUBLISH, SHELLS3, OWN_HEADS, MAX_DEPTH3, CWD_CHANGERS, TERMINAL_ESCAPE_RE, LOOP_MAX_RECORDS, CANARY_MIN_LENGTH, MAX_TEXT, MAX_DEPTH4, MAX_JSON_PARSE, URL_DEPTH, B64_DEPTH, MIN_SEGMENT, SEPARATORS, stripSeparators, looksText, CANARY_DECODERS, VIEWS, LONG_OUTPUT_THRESHOLD_BYTES, CANONICAL_EXTRACTOR_VERSION;
+var MAX_REGEX_LENGTH, REGEX_CACHE_MAX, regexCache, aws_default, bash_safe_default, docker_default, filesystem_default, github_default, k8s_default, mongodb_default, postgres_default, project_jail_default, redis_default, finance_default, identity_default, publishing_default, settings_default, branches_default, ACTION_TEMPLATES, ACTION_CHECKS, GAP, prog, httpTo, httpWrite, HTTP_WRITE, HTTP_WRITE_ANY, NOT_STRIPE_TEST, postTo, STRIPE_OBJECTS, APP_SHIELD_SPECS, APP_SHIELDS, APP_SHIELD_NAMES, APP_SERVER_GLOB, GENERAL_ACTION_RULES, BUILTIN_SHIELDS, SSRF_MAX_HOST, METADATA_ADDRESSES, STRICT_TIERS, METADATA_HOSTNAMES, v4Octets, TIER_REASON, CHECK_TEXT, LEVELS, MODE_VALUES, SOFT, STRICT, BLOCK_ALL, LEVEL_CHECKS, VERDICTS, CHECK_VERDICT_RANK, ALL, BUILTIN_DANGEROUS_WORDS, PRODUCT_CHECKS, SHIELD_RULE_NAME, SHIELD_RULES_FOLDED_INTO_PRODUCT, CHECKS, CHECK_BY_ID, LEGACY_TO_ID, PROJECT_JAIL_BLOCK_READ, OVERRIDE_PREFIX, LABEL_WRAPPERS, LEGACY_READERS, syntax, KINDS, STRUCTS, unknownKinds, INVISIBLE_RE, INVISIBLE_ONE, HOMOGLYPHS, HOMOGLYPH_RE, MAX_BLOBS, MIN_DECODED, BASE64_RUN_RE, HEX_RUN_RE, HEX_ESCAPE_RUN_RE, SYSTEM_AUTH_FILES, SYSTEM_AUTH_DIRS, PASSWORD_HASH_FILES, STARTUP_NAMES, SYSTEM_DIRS, SYSTEM_DIRS_EXEMPT, UPLOAD_SYSTEM_DIRS, AGENT_INSTRUCTION_FILES, AGENT_INSTRUCTION_DIRS, LEGACY_SYSTEM_PATH_RE, MAX_INLINE_CODE, WHAT, OUTSIDE, pyImport, either, PYTHON, NODE, PERL, RUBY, PHP, TABLES, STRING_LITERAL, syntax2, sharedParser, MESSAGE_FLAGS, SHELL_INTERPRETERS, DOWNLOAD_CMDS, NORMALIZE_CACHE_MAX, normalizeCache, codeBodiesCache, AST_CACHE_MAX, astCache, PARSE_FAIL, INTERPRETER_LINE, PROGRAM_DIR, ACCESS_VIEW_CACHE_MAX, accessViewCache, MAX_READING_PAYLOADS, STDIN_CODE_INTERPRETERS, RUNS_TEXT_ELSEWHERE, defaultExpansionOps, VARIABLE_READERS, FS_READ_TOOLS, GREP_SHAPE, PATTERN_VERBS, PATTERN_VERB_NAMES, GREP_FILE_OPERANDS, READER_VALUE_LETTERS, FILE_OPERAND_FLAGS, SCP_VALUE_FLAGS, CURL_SOURCE_FLAGS, CURL_VALUE_LETTERS, WGET_VALUE_LETTERS, TAR_VALUE_LETTERS, ZIP_VALUE_LETTERS, RSYNC_VALUE_LETTERS, RSYNC_SKIP, CP_VALUE_LETTERS, INSTALL_VALUE_LETTERS, COPY_VERBS, TAR_MODE_WORD, COPY_VERB_HEADS, FS_OP_PRESCREEN_RE, HOME_CACHE_ALLOWLIST, SENSITIVE_PATH_RULES, AST_FS_REGEX_RULES, SQL_DB_CLIS, SQL_DDL_RE, CHMOD_OPEN_PERM_TOKENS, COMMAND_WRAPPERS, INLINE_INTERPRETER, RUNNER_WRAPPERS, _redirStdinOps, _listOps, WRAPPER_TAKES_TARGET, FIND_EXEC_FLAGS, FS_MUTATION_TOOLS, INTERP_LEADING_TARGET, MAX_PAYLOAD_NESTING, payloadNesting, MAX_INLINE_CALLS, INLINE_EXEC_FALLBACK, UNREADABLE_SOURCE, SCRIPT_RUNNERS, SCRIPT_RUNNER_VALUE_FLAGS, MAX_SCRIPT_OPERANDS, NET_BINARIES, VALUE_FLAGS, HOME_VARIABLES, assignmentTable, currentStmtOffset, PAYLOAD_BUDGET, payloadBudget, seenPayloads, UNANALYSABLE_NESTING, ASSIGNMENT_HEADS, AND_OP, OR_OP, AND_OR_OPS, MAX_CALL_DEPTH, MAX_CALL_WALKS, callDepth, callWalks, FS_OP_CACHE_MAX, fsOpCache, stripDotSlash, REDIR_TRUNCATE_OPS, REDIR_FILE_IN_OPS, REDIR_HEREDOC_OPS, FIND_OPTIONS, COPY_RULE_OF, isReaderWord, positionalAfter, NONE, UNKNOWN, FORBIDDEN_PATH_SEGMENTS, BASH_TOOL_NAMES, MCP_EXECUTORS, BUILTIN_FIELDS, ARGV_FIELDS, BARE_WORD, MAX_ARGV_CHARACTERS, syntax3, MAX_ALTERNATIVES, MAX_CALL_DEPTH2, MAX_CALL_WALKS2, POSITIONAL, MAX_DEPTH, MAX_PAYLOAD_DEPTH, unique, clone, SENDING_STDIN, DOWNLOAD_SHORT_VALUE, DOWNLOAD_LONG_VALUE, DOWNLOAD_OUTPUT_FLAGS, DOWNLOAD_DIR_FLAGS, base, quoteGlob, asWord, WRITES, APPENDS, READS, DUP_OUT, HERE_STRING, AND, OR, DEFAULT_OPS, exempt, RANK, SEQUENCE_OPS, BIP39_ENGLISH, BIP39_PUBLIC_VECTORS, indices, lengths, hash, MAX_MNEMONIC_HASHES, SECRET_VIEW_LIMITS, IBAN_LENGTH, IBAN_BBAN_SHAPE, B58, B58_INDEX, XPRV_VERSIONS, B62, CRC32_TABLE, GITHUB_TOKEN_RE, B64URL, B64URL_INDEX, CASK_TWO_ZERO_SUFFIX, CASK_FOUR_ZERO_SUFFIX, CF_ODD, CF_EVEN, SPANISH_LETTERS, HETU_CHARS, VERHOEFF_D, VERHOEFF_P, MAX, UNTRUSTED_TOOLS, INJECTION_SIGNALS, MENTION_QUOTE_RE, MENTION_WORD_RE, ASSIGNMENT_CONTEXT_RE, DLP_STOPWORDS, REFERENCE_VALUE_RE, IDENTIFIER_VALUE_RE, PATH_VALUE_RE, DOTTED_REFERENCE_RE, CONCATENATION_RE, EMAIL_VALUE_RE, FIXTURE_NAME_RE, DERIVATIVE_NAME_RE, QUERY_CREDENTIAL_VALUE_RE, OTP_SECRET_RE, OTP_DOC_SECRETS, ASSIGNED_SECRET_VALUE_RE, ASSIGNED_SECRET_NAME_RE, NAME_KEYWORD_RE, ARN_CONTEXT_RE, CIPHER_KEY_NAME_RE, CIPHER_NAME_PARTS, CIPHER_KEY_VALUE_RE, LARAVEL_KEY_VALUE_RE, SQL_PASSWORD_VALUE_RE, GRAFANA_KEY_VALUE_RE, BASIC_VALUE_RE, BASIC_PAIR_RE, BASIC_HEADER_RE, BASIC_HEADER_PAIR_RE, BASIC_PLACEHOLDER_RE, BASIC_TEMPLATE_MARKERS, DROPBOX_SECRET_RE, OTP_CAPTURE_RE, DB_URL_PASSWORD_RE, DLP_PATTERNS, DLP_PATTERNS_GLOBAL, SENSITIVE_PATH_PATTERNS, SENSITIVE_PATH_REGEXES, MAX_DEPTH2, MAX_STRING_BYTES, MAX_JSON_PARSE_BYTES, BATCH_SEPARATOR, ENCODED_RUN_RE, IMPERATIVE, SECRET_TARGET, GUARD, SIGNALS, DESTINATION_RE, REUSED_SIGNALS, NEVER_NEGATED, NEGATION_BEFORE, RDR_IN, COPY_VERBS2, LITERAL_VERBS, GIT_PRESCREEN_RE, MAX_PAYLOAD_DEPTH2, MAX_ALIAS_DEPTH, CACHE_MAX, cache, PAYLOAD_SHELLS, CONFIG_SCOPE_FLAGS, CONFIG_VALUE_FLAGS, GLOBAL_VALUE_OPTIONS, GLOBAL_FLAG_OPTIONS, MAX_LOOP_ITEMS, GitWalk, POSITIONAL2, FORCE_PUSH, DESTRUCTIVE, UNREADABLE, PUSH_LONG_VALUE, BRANCH_LONG_VALUE, TAG_LONG_VALUE, CLEAN_LONG_VALUE, HOOKS_BYPASS, NO_VERIFY_SUBS, HOOK_KILL_SWITCHES, COMMIT_LONG_VALUE, CHMOD_OPTION_RE, STAGE_ALL, ADD_LONG_VALUE, CHECK_ID, RULE_NAME, INERT_LINE_RE, CHECK_ID2, INSTRUCTION_NAMES, SETTINGS_RE, HOOK_WORDS_RE, SHELLS, NETCATS, NET_CLIENTS, SENDERS, NETCAT_EXEC_LONG, DECL_DUMPS, PROC_ENVIRON_RE, DEV_NET_RE, SOCAT_PROGRAM_RE, SOCAT_NET_RE, PRESCREEN_RE, MAX_PAYLOAD_DEPTH3, CACHE_MAX2, cache2, dupInOp, REVERSE_SHELL_DESCRIPTION, ENV_EXFIL_DESCRIPTION, DYNAMIC_WORD, MULTICALL, SHELL_VALUE_OPTIONS, INTERPRETERS, OutboundWalk, NPM_INSTALL_VERBS, NPM_EXEC_VERBS, PNPM_INSTALL_VERBS, YARN_INSTALL_VERBS, BUN_INSTALL_VERBS, DLX_VERBS, NON_REGISTRY_RE, NPM_NAME_RE, EXACT_SEMVER_RE, NPM_VALUE_FLAGS, PNPM_VALUE_FLAGS, YARN_VALUE_FLAGS, BUN_VALUE_FLAGS, PIP_VALUE_FLAGS, UV_VALUE_FLAGS, POETRY_VALUE_FLAGS, PIPENV_VALUE_FLAGS, PIPX_VALUE_FLAGS, PY_SPEC_RE, PY_EXACT_RE, EXACT_VERSION_RE, GEM_NAME_RE, GEM_VALUE_FLAGS, BUNDLE_VALUE_FLAGS, CRATE_NAME_RE, CARGO_ADD_VALUE_FLAGS, CARGO_INSTALL_VALUE_FLAGS, GO_VALUE_FLAGS, GO_PATH_RE, NUGET_NAME_RE, DOTNET_ADD_VALUE_FLAGS, DOTNET_TOOL_VALUE_FLAGS, NUGET_VALUE_FLAGS, MAVEN_COORD_RE, COMPOSER_NAME_RE, COMPOSER_VALUE_FLAGS, EDITOR_HEADS, EXTENSION_ID_RE, MANAGER_HEADS, SHELLS2, MAX_NESTING, SHELL_VALUE_FLAGS, NPM_FAMILY, PIP_FAMILY, NPM_FETCH_VERBS, PIP_FETCH_VERBS, NPM_FLAGS, PIP_FLAGS, NPM_VARS, PIP_VARS, PRESCREEN_RE2, PIP_ATTACHED_RE, MAX_PAYLOAD_DEPTH4, PUBLIC_REGISTRY_HOSTS, TUNING_FIELDS, MAP_GOVERNED, KNOB_GOVERNED, CONFIGURABLE_CHECK_IDS, DEFAULT_EGRESS_ALLOWLIST, PRIVATE_HOST_SUFFIXES, SOURCE_COMMANDS, SINK_COMMANDS, OBFUSCATORS, SENSITIVE_PATTERNS, FLAGS_WITH_VALUES, DESTINATION_ARGS, MCP_DESTINATION_KEYS, ARGUMENT_SCAN_LIMITS, RUN_CHAR, runChar, VERDICT_RANK, SQL_DML_KEYWORDS, MAX_DESTINATIONS, MAX_SCAN_CHARS, EMAIL_RE, URL_RE, IBAN_RE, RECIPIENT_KEYS, DESTRUCTIVE_VERB_RE, PII_EMAIL_RE, PII_SSN_RE, PII_PHONE_RE, PII_CC16_RE, PII_CC15_RE, PII_CC14_RE, PII_CC13_RE, PII_CC19_RE, CARD_PATTERNS, PII_ROUTING_RE, ROUTING_LABEL_RE, ROUTING_LABEL_WINDOW, NATIONAL_ID_SHAPES, NATIONAL_ID_LABEL_RE, NATIONAL_ID_LABEL_CS_RE, idLabelIn, NATIONAL_ID_LABEL_WINDOW, NATIONAL_ID_GUARD_RE, PII_IBAN_RE, REALTIME_PII_PATTERNS, MAX_PII_SCAN_BYTES, IBAN_DESTINATION_KEYS, WHOLE_IBAN_RE, JSON_ESCAPE_RE, JSON_ESCAPES, MASKED_KINDS, ENTRY_RE, IBAN_TEXT_RE, EMAIL_TEXT_RE, ACCOUNT_KEY_RE, ACCOUNT_VALUE_RE, MAX_MASK_DEPTH, EMPTY, CURL_SEND_FLAGS, WGET_SEND_FLAGS, IWR_SEND_FLAGS, WRITE_METHODS, GH_READ, GH_WRITE, GH_HOSTNAME_FLAGS, GH_REPO_VALUE_FLAGS, GH_API_VALUE_FLAGS, GIT_FETCH, PUBLISH, SHELLS3, OWN_HEADS, MAX_DEPTH3, CWD_CHANGERS, TERMINAL_ESCAPE_RE, LOOP_MAX_RECORDS, CANARY_MIN_LENGTH, MAX_TEXT, MAX_DEPTH4, MAX_JSON_PARSE, URL_DEPTH, B64_DEPTH, MIN_SEGMENT, SEPARATORS, stripSeparators, looksText, CANARY_DECODERS, VIEWS, LONG_OUTPUT_THRESHOLD_BYTES, CANONICAL_EXTRACTOR_VERSION;
 var init_dist = __esm({
   "packages/policy-engine/dist/index.mjs"() {
     "use strict";
@@ -11665,6 +11715,61 @@ var init_dist = __esm({
         return s.untrustedContent.afterExposure === "log-only" ? "log" : "review";
       }
     };
+    ({ syntax } = mvdanSh);
+    KINDS = {
+      File: { nodes: ["Stmts"] },
+      Stmt: { nodes: ["Cmd", "Redirs"], scalars: ["Negated", "Background", "Coprocess"] },
+      CallExpr: { nodes: ["Assigns", "Args"] },
+      Assign: { nodes: ["Name", "Value", "Index", "Array"], scalars: ["Append", "Naked"] },
+      Word: { nodes: ["Parts"] },
+      Lit: { scalars: ["Value"] },
+      SglQuoted: { scalars: ["Value", "Dollar"] },
+      DblQuoted: { nodes: ["Parts"], scalars: ["Dollar"] },
+      ParamExp: {
+        nodes: ["Param", "Index", "Slice", "Repl", "Exp"],
+        scalars: ["Short", "Excl", "Length", "Width"]
+      },
+      CmdSubst: { nodes: ["Stmts"], scalars: ["Backquotes", "TempFile", "ReplyVar"] },
+      ArithmExp: { nodes: ["X"], scalars: ["Bracket", "Unsigned"] },
+      ArithmCmd: { nodes: ["X"], scalars: ["Unsigned"] },
+      ProcSubst: { nodes: ["Stmts"], scalars: ["Op"] },
+      ExtGlob: { nodes: ["Pattern"], scalars: ["Op"] },
+      BraceExp: { nodes: ["Elems"], scalars: ["Sequence"] },
+      // only with SplitBraces, unused here
+      BinaryCmd: { nodes: ["X", "Y"], scalars: ["Op"] },
+      BinaryArithm: { nodes: ["X", "Y"], scalars: ["Op"] },
+      UnaryArithm: { nodes: ["X"], scalars: ["Op", "Post"] },
+      ParenArithm: { nodes: ["X"] },
+      BinaryTest: { nodes: ["X", "Y"], scalars: ["Op"] },
+      UnaryTest: { nodes: ["X"], scalars: ["Op"] },
+      ParenTest: { nodes: ["X"] },
+      Redirect: { nodes: ["N", "Word", "Hdoc"], scalars: ["Op"] },
+      Block: { nodes: ["Stmts"] },
+      Subshell: { nodes: ["Stmts"] },
+      IfClause: { nodes: ["Cond", "Then", "Else"] },
+      WhileClause: { nodes: ["Cond", "Do"], scalars: ["Until"] },
+      ForClause: { nodes: ["Loop", "Do"], scalars: ["Select"] },
+      WordIter: { nodes: ["Name", "Items"] },
+      CStyleLoop: { nodes: ["Init", "Cond", "Post"] },
+      CaseClause: { nodes: ["Word", "Items"] },
+      CaseItem: { nodes: ["Patterns", "Stmts"], scalars: ["Op"] },
+      FuncDecl: { nodes: ["Name", "Body"], scalars: ["RsrvWord"] },
+      DeclClause: { nodes: ["Variant", "Args"], notWalked: ["Variant"] },
+      LetClause: { nodes: ["Exprs"] },
+      TimeClause: { nodes: ["Stmt"], scalars: ["PosixFormat"] },
+      CoprocClause: { nodes: ["Name", "Stmt"] },
+      TestClause: { nodes: ["X"] },
+      TestDecl: { nodes: ["Description", "Body"] },
+      ArrayExpr: { nodes: ["Elems"] },
+      ArrayElem: { nodes: ["Index", "Value"] },
+      Comment: { scalars: ["Text"] }
+    };
+    STRUCTS = {
+      "ParamExp.Slice": { nodes: ["Offset", "Length"], notWalked: ["Offset", "Length"] },
+      "ParamExp.Repl": { nodes: ["Orig", "With"], scalars: ["All"] },
+      "ParamExp.Exp": { nodes: ["Word"], scalars: ["Op"] }
+    };
+    unknownKinds = /* @__PURE__ */ new Set();
     INVISIBLE_RE = /[­͏؜᠎​-‏‪-‮⁠-⁤-︀-️]|[\u{E0000}-\u{E007F}]/gu;
     INVISIBLE_ONE = new RegExp(`^(?:${INVISIBLE_RE.source.split("|")[0]})$`, "u");
     HOMOGLYPHS = {
@@ -11950,8 +12055,8 @@ var init_dist = __esm({
       php: PHP
     };
     STRING_LITERAL = /(['"`])((?:\\.|(?!\1)[^\\\n]){1,4096})\1/g;
-    ({ syntax } = mvdanSh);
-    sharedParser = syntax.NewParser();
+    ({ syntax: syntax2 } = mvdanSh2);
+    sharedParser = syntax2.NewParser();
     MESSAGE_FLAGS = /* @__PURE__ */ new Set([
       "-m",
       "--message",
@@ -11985,7 +12090,7 @@ var init_dist = __esm({
     NORMALIZE_CACHE_MAX = 5e3;
     normalizeCache = /* @__PURE__ */ new Map();
     codeBodiesCache = /* @__PURE__ */ new Map();
-    AST_CACHE_MAX = 5e3;
+    AST_CACHE_MAX = 256;
     astCache = /* @__PURE__ */ new Map();
     PARSE_FAIL = /* @__PURE__ */ Symbol("parse-fail");
     INTERPRETER_LINE = /^#![ \t]*[\w./+-]+(?:[ \t]+[\w./+=:-]+)*[ \t]*\r?(?=\n|$)/;
@@ -12970,7 +13075,7 @@ var init_dist = __esm({
     ARGV_FIELDS = ["args", "argv"];
     BARE_WORD = /^[A-Za-z0-9_./+:@%,-]+$/;
     MAX_ARGV_CHARACTERS = 262144;
-    ({ syntax: syntax2 } = mvdanSh2);
+    ({ syntax: syntax3 } = mvdanSh3);
     MAX_ALTERNATIVES = 64;
     MAX_CALL_DEPTH2 = 4;
     MAX_CALL_WALKS2 = 256;
@@ -13062,7 +13167,6 @@ var init_dist = __esm({
     );
     exempt = (p) => SYSTEM_DIRS_EXEMPT.some((d) => within(p, d));
     RANK = { allow: 0, review: 1, block: 2 };
-    ({ syntax: syntax3 } = mvdanSh3);
     SEQUENCE_OPS = (() => {
       const ops = /* @__PURE__ */ new Set();
       for (const text of ["x && y", "x || y"]) {
@@ -16224,7 +16328,6 @@ zoo`.split("\n");
     );
     NEVER_NEGATED = /* @__PURE__ */ new Set([SIGNALS[1].any[0]]);
     NEGATION_BEFORE = /\b(never|do not|don'?t|must not|mustn'?t|should not|shouldn'?t|not allowed to|forbidden to|avoid|without|no|not)\b[^.!?;:\n]{0,24}$/i;
-    ({ syntax: syntax4 } = mvdanSh4);
     RDR_IN = (() => {
       try {
         return parseShared("x <y").Stmts[0].Redirs[0].Op;
@@ -16253,7 +16356,6 @@ zoo`.split("\n");
       "tar"
     ]);
     LITERAL_VERBS = /* @__PURE__ */ new Set(["echo", "printf", ":", "true", "touch", "sed"]);
-    ({ syntax: syntax5 } = mvdanSh5);
     GIT_PRESCREEN_RE = /git|husky/i;
     MAX_PAYLOAD_DEPTH2 = 8;
     MAX_ALIAS_DEPTH = 5;
@@ -16322,7 +16424,7 @@ zoo`.split("\n");
       visit(node, depth) {
         if (!node) return false;
         const n = node;
-        const type = syntax5.NodeType(n);
+        const type = n.kind;
         if (type === "Stmt") {
           this.visitHeredocShell(n, depth);
           return true;
@@ -16330,7 +16432,7 @@ zoo`.split("\n");
         if (type === "ForClause") {
           const loop = n.Loop;
           const name = loop?.Name?.Value;
-          if (name && syntax5.NodeType(loop) === "WordIter") {
+          if (name && loop.kind === "WordIter") {
             const items = (loop.Items || []).map((w) => resolveWordLiteral(w));
             const literal = items.length > 0 && items.every((v) => v !== null);
             this.loopVars.set(name, literal ? items.slice(0, MAX_LOOP_ITEMS) : null);
@@ -16397,7 +16499,7 @@ zoo`.split("\n");
       // eslint-disable-next-line @typescript-eslint/no-explicit-any
       visitHeredocShell(stmt, depth) {
         const cmd = stmt.Cmd;
-        if (!cmd || syntax5.NodeType(cmd) !== "CallExpr" || depth >= MAX_PAYLOAD_DEPTH2) return;
+        if (!cmd || cmd.kind !== "CallExpr" || depth >= MAX_PAYLOAD_DEPTH2) return;
         const redirs = stmt.Redirs || [];
         const hdoc = redirs.find((r) => r?.Hdoc && (r.N == null || r.N.Value === "0"));
         if (!hdoc) return;
@@ -16651,7 +16753,6 @@ zoo`.split("\n");
     ]);
     SETTINGS_RE = /\/(?:\.claude\/settings(?:\.local)?\.json|\.gemini\/settings\.json|\.codex\/hooks\.json|\.cursor\/hooks\.json)$/i;
     HOOK_WORDS_RE = /"hooks"|\b(PreToolUse|PostToolUse|UserPromptSubmit|Notification|Stop|SubagentStop|SessionStart|SessionEnd|PreCompact|BeforeTool|AfterTool)\b|"command"\s*:/;
-    ({ syntax: syntax6 } = mvdanSh6);
     SHELLS = /* @__PURE__ */ new Set([...SHELL_INTERPRETERS, "mksh", "ash", "csh", "tcsh"]);
     NETCATS = /* @__PURE__ */ new Set(["nc", "ncat", "netcat", "nc.traditional", "nc.openbsd"]);
     NET_CLIENTS = /* @__PURE__ */ new Set([...NETCATS, "telnet", "socat"]);
@@ -16709,7 +16810,7 @@ zoo`.split("\n");
         const f = parseShared(command);
         if (!f || typeof f !== "object" || !f.Stmts) return false;
         try {
-          syntax6.Walk(f, (node) => this.visit(node, depth));
+          walk(f, (node) => this.visit(node, depth));
         } catch {
           return false;
         }
@@ -16748,7 +16849,7 @@ zoo`.split("\n");
       }
       visit(n, depth) {
         if (!n) return false;
-        const type = syntax6.NodeType(n);
+        const type = n.kind;
         if (type === "Stmt") {
           this.visitStmt(n, depth);
           return true;
@@ -16768,7 +16869,7 @@ zoo`.split("\n");
         const redirs = redirectWords(stmt);
         const toSocket = redirs.some((w) => w !== null && DEV_NET_RE.test(w));
         if (!cmd) return;
-        const type = syntax6.NodeType(cmd);
+        const type = cmd.kind;
         if (type !== "CallExpr" || wordsOf(cmd).length > 0) {
           if (this.readsNetFd(stmt) && runsCommandsIn(stmt)) {
             this.reverseShell("commands are read from a network socket opened with exec");
@@ -16854,7 +16955,7 @@ zoo`.split("\n");
         const stages = [];
         const flatten = (s) => {
           const c = s?.Cmd;
-          if (c && syntax6.NodeType(c) === "BinaryCmd" && isPipeOp(c.Op)) {
+          if (c && c.kind === "BinaryCmd" && isPipeOp(c.Op)) {
             flatten(c.X);
             flatten(c.Y);
           } else stages.push(s);
@@ -16876,8 +16977,8 @@ zoo`.split("\n");
             sinks.set(i, socketHosts(st));
           }
           if (!c) return;
-          if (syntax6.NodeType(c) === "DeclClause" && declDumpsEnv(c) && dump < 0) dump = i;
-          if (syntax6.NodeType(c) !== "CallExpr") {
+          if (c.kind === "DeclClause" && declDumpsEnv(c) && dump < 0) dump = i;
+          if (c.kind !== "CallExpr") {
             if (runsCommandsIn(st)) shell = i;
             return;
           }
@@ -16918,10 +17019,10 @@ zoo`.split("\n");
       /** A word (or assignment value) whose text includes an env dump's output. */
       carriesEnv(word) {
         let hit = false;
-        syntax6.Walk(word, (node) => {
+        walk(word, (node) => {
           if (hit || !node) return false;
           const n = node;
-          const t = syntax6.NodeType(n);
+          const t = n.kind;
           if (t === "ParamExp" && n.Param?.Value && this.envVars.has(n.Param.Value)) {
             hit = true;
             return false;
@@ -16938,11 +17039,11 @@ zoo`.split("\n");
       stmtsDumpEnv(stmts) {
         let hit = false;
         for (const s of stmts) {
-          syntax6.Walk(s, (node) => {
+          walk(s, (node) => {
             if (hit || !node) return false;
             const n = node;
-            const t = syntax6.NodeType(n);
-            if (t === "Stmt" && n.Cmd && syntax6.NodeType(n.Cmd) === "CallExpr") {
+            const t = n.kind;
+            if (t === "Stmt" && n.Cmd && n.Cmd.kind === "CallExpr") {
               const words = wordsOf(n.Cmd);
               if (words.length > 0 && dumpsEnv(words, n)) hit = true;
             }
@@ -16959,7 +17060,6 @@ zoo`.split("\n");
         this.run(payload, depth + 1);
       }
     };
-    ({ syntax: syntax7 } = mvdanSh7);
     NPM_INSTALL_VERBS = /* @__PURE__ */ new Set([
       "install",
       "i",
@@ -17341,7 +17441,6 @@ zoo`.split("\n");
     SHELLS2 = /* @__PURE__ */ new Set(["sh", "bash", "zsh", "dash", "ksh", "ash"]);
     MAX_NESTING = 3;
     SHELL_VALUE_FLAGS = /* @__PURE__ */ new Set(["--rcfile", "--init-file", "-O", "+O", "-o", "+o"]);
-    ({ syntax: syntax8 } = mvdanSh8);
     NPM_FAMILY = /* @__PURE__ */ new Set(["npm", "pnpm", "yarn", "bun", "npx", "pnpx", "bunx"]);
     PIP_FAMILY = /* @__PURE__ */ new Set(["pip", "pip3", "uv", "uvx", "pipx", "pipenv"]);
     NPM_FETCH_VERBS = /* @__PURE__ */ new Set([
@@ -17873,7 +17972,6 @@ zoo`.split("\n");
     ACCOUNT_KEY_RE = /("(?:iban|account|account_number|accountNumber)"\s*:\s*")([A-Za-z0-9 .-]{6,40})(")/g;
     ACCOUNT_VALUE_RE = /"([A-Z]{2}\d{2}[A-Z0-9]{11,30})"/g;
     MAX_MASK_DEPTH = 64;
-    ({ syntax: syntax9 } = mvdanSh9);
     EMPTY = {
       fetches: false,
       sends: false,
@@ -18520,18 +18618,18 @@ function statAndFirstLine(file2) {
 }
 function listCodexSessionFiles(base2 = codexSessionsDir()) {
   const files = [];
-  const walk2 = (dir2) => {
+  const walk3 = (dir2) => {
     try {
       for (const entry of fs3.readdirSync(dir2, { withFileTypes: true })) {
         const file2 = path3.join(dir2, entry.name);
-        if (entry.isDirectory()) walk2(file2);
+        if (entry.isDirectory()) walk3(file2);
         else if (entry.isFile() && entry.name.endsWith(".jsonl")) files.push(file2);
       }
     } catch {
     }
   };
-  walk2(base2);
-  if (path3.basename(base2) === "sessions") walk2(path3.join(path3.dirname(base2), "archived_sessions"));
+  walk3(base2);
+  if (path3.basename(base2) === "sessions") walk3(path3.join(path3.dirname(base2), "archived_sessions"));
   const sessions = /* @__PURE__ */ new Map();
   for (const file2 of files.sort()) {
     try {
@@ -18747,79 +18845,6 @@ var init_credential_files = __esm({
   }
 });
 
-// src/cli/commands/blast.ts
-import chalk from "chalk";
-import fs5 from "fs";
-import path6 from "path";
-import os4 from "os";
-function buildSensitivePaths(home, cwd) {
-  const homeFiles = homeCredentialFiles(home).map(({ full, label: label2, description, score }) => ({
-    full,
-    label: label2,
-    description,
-    score
-  }));
-  return [
-    ...homeFiles,
-    {
-      full: path6.join(cwd, ".env"),
-      label: ".env  (current folder)",
-      description: "App secrets: database passwords, API keys",
-      score: 20
-    },
-    {
-      full: path6.join(cwd, ".env.local"),
-      label: ".env.local  (current folder)",
-      description: "Local overrides: often contains real credentials",
-      score: 15
-    },
-    {
-      full: path6.join(cwd, ".env.production"),
-      label: ".env.production  (current folder)",
-      description: "Production secrets",
-      score: 20
-    }
-  ];
-}
-function isReadable(filePath) {
-  try {
-    fs5.accessSync(filePath, fs5.constants.R_OK);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function runBlast() {
-  const home = os4.homedir();
-  const cwd = process.cwd();
-  const paths = buildSensitivePaths(home, cwd);
-  let scoreDeduction = 0;
-  const reachable = [];
-  for (const p of paths) {
-    if (fs5.existsSync(p.full) && isReadable(p.full)) {
-      reachable.push(p);
-      scoreDeduction += p.score;
-    }
-  }
-  const envFindings = [];
-  for (const [key, value] of Object.entries(process.env)) {
-    if (!value) continue;
-    const match = scanArgs({ [key]: value });
-    if (match) {
-      envFindings.push({ key, patternName: match.patternName });
-      scoreDeduction += 10;
-    }
-  }
-  return { reachable, envFindings, score: Math.max(0, 100 - scoreDeduction) };
-}
-var init_blast = __esm({
-  "src/cli/commands/blast.ts"() {
-    "use strict";
-    init_dlp();
-    init_credential_files();
-  }
-});
-
 // src/mcp-cmd.ts
 var init_mcp_cmd = __esm({
   "src/mcp-cmd.ts"() {
@@ -18872,14 +18897,14 @@ var init_codex_trust = __esm({
 });
 
 // src/daemon/hook-baseline.ts
-import path7 from "path";
-import os5 from "os";
+import path6 from "path";
+import os4 from "os";
 var BASELINE_FILE, NOTIFIED_FILE;
 var init_hook_baseline = __esm({
   "src/daemon/hook-baseline.ts"() {
     "use strict";
-    BASELINE_FILE = path7.join(os5.homedir(), ".node9", "hooks-baseline.json");
-    NOTIFIED_FILE = path7.join(os5.homedir(), ".node9", "hook-heal-notified.json");
+    BASELINE_FILE = path6.join(os4.homedir(), ".node9", "hooks-baseline.json");
+    NOTIFIED_FILE = path6.join(os4.homedir(), ".node9", "hook-heal-notified.json");
   }
 });
 
@@ -18898,27 +18923,27 @@ var init_setup_pi_shim = __esm({
 });
 
 // src/utils/atomic-write.ts
-import fs6 from "fs";
-import path8 from "path";
+import fs5 from "fs";
+import path7 from "path";
 import { randomUUID } from "crypto";
 function atomicWriteSync(filePath, data, options) {
-  const dir2 = path8.dirname(filePath);
-  if (!fs6.existsSync(dir2)) fs6.mkdirSync(dir2, { recursive: true });
+  const dir2 = path7.dirname(filePath);
+  if (!fs5.existsSync(dir2)) fs5.mkdirSync(dir2, { recursive: true });
   const tmpPath = `${filePath}.${randomUUID()}.tmp`;
   try {
-    fs6.writeFileSync(tmpPath, data, options);
+    fs5.writeFileSync(tmpPath, data, options);
   } catch (err) {
     try {
-      fs6.unlinkSync(tmpPath);
+      fs5.unlinkSync(tmpPath);
     } catch {
     }
     throw err;
   }
   try {
-    fs6.renameSync(tmpPath, filePath);
+    fs5.renameSync(tmpPath, filePath);
   } catch (err) {
     try {
-      fs6.unlinkSync(tmpPath);
+      fs5.unlinkSync(tmpPath);
     } catch {
     }
     throw err;
@@ -18931,10 +18956,10 @@ var init_atomic_write = __esm({
 });
 
 // src/setup.ts
-import fs7 from "fs";
-import path9 from "path";
-import os6 from "os";
-import chalk2 from "chalk";
+import fs6 from "fs";
+import path8 from "path";
+import os5 from "os";
+import chalk from "chalk";
 import { confirm as rawConfirm } from "@inquirer/prompts";
 import { parse as parseToml4, stringify as stringifyToml2 } from "smol-toml";
 import * as yaml from "yaml";
@@ -18946,9 +18971,9 @@ function isNode9Hook(cmd) {
   // fell into after #185.
   /[/\\]\.node9[/\\]bin[/\\]hook"? (?:check|log)/.test(cmd);
 }
-function claudeDesktopConfigPath(homeDir = os6.homedir()) {
+function claudeDesktopConfigPath(homeDir = os5.homedir()) {
   if (process.platform === "darwin") {
-    return path9.join(
+    return path8.join(
       homeDir,
       "Library",
       "Application Support",
@@ -18957,47 +18982,47 @@ function claudeDesktopConfigPath(homeDir = os6.homedir()) {
     );
   }
   if (process.platform === "linux") {
-    return path9.join(homeDir, ".config", "Claude", "claude_desktop_config.json");
+    return path8.join(homeDir, ".config", "Claude", "claude_desktop_config.json");
   }
   if (process.platform === "win32") {
-    const appData = process.env.APPDATA || path9.join(homeDir, "AppData", "Roaming");
-    return path9.join(appData, "Claude", "claude_desktop_config.json");
+    const appData = process.env.APPDATA || path8.join(homeDir, "AppData", "Roaming");
+    return path8.join(appData, "Claude", "claude_desktop_config.json");
   }
   return null;
 }
-function opencodeConfigDir(home = os6.homedir()) {
+function opencodeConfigDir(home = os5.homedir()) {
   const xdg = process.env.XDG_CONFIG_HOME;
-  const base2 = xdg && path9.isAbsolute(xdg) ? xdg : path9.join(home, ".config");
-  return path9.join(base2, "opencode");
+  const base2 = xdg && path8.isAbsolute(xdg) ? xdg : path8.join(home, ".config");
+  return path8.join(base2, "opencode");
 }
 function commonBinDirs(home) {
   return [
-    path9.join(home, ".local", "bin"),
-    path9.join(home, ".bun", "bin"),
-    path9.join(home, ".npm-global", "bin"),
+    path8.join(home, ".local", "bin"),
+    path8.join(home, ".bun", "bin"),
+    path8.join(home, ".npm-global", "bin"),
     "/usr/local/bin",
     "/opt/homebrew/bin"
   ];
 }
-function binaryInPath(binary, home = os6.homedir()) {
+function binaryInPath(binary, home = os5.homedir()) {
   const pathEnv = process.env.PATH ?? "";
-  const dirs = [...pathEnv.split(path9.delimiter), ...commonBinDirs(home)];
+  const dirs = [...pathEnv.split(path8.delimiter), ...commonBinDirs(home)];
   const seen = /* @__PURE__ */ new Set();
   for (const dir2 of dirs) {
     if (!dir2 || seen.has(dir2)) continue;
     seen.add(dir2);
     try {
-      fs7.accessSync(path9.join(dir2, binary), fs7.constants.X_OK);
+      fs6.accessSync(path8.join(dir2, binary), fs6.constants.X_OK);
       return true;
     } catch {
     }
   }
   return false;
 }
-function detectAgents(homeDir = os6.homedir()) {
+function detectAgents(homeDir = os5.homedir()) {
   const exists2 = (p) => {
     try {
-      return fs7.existsSync(p);
+      return fs6.existsSync(p);
     } catch (err) {
       const code = err.code;
       if (code !== "ENOENT") {
@@ -19009,7 +19034,7 @@ function detectAgents(homeDir = os6.homedir()) {
   };
   const desktopPath = claudeDesktopConfigPath(homeDir);
   return {
-    claude: exists2(path9.join(homeDir, ".claude")) || exists2(path9.join(homeDir, ".claude.json")),
+    claude: exists2(path8.join(homeDir, ".claude")) || exists2(path8.join(homeDir, ".claude.json")),
     // Antigravity (agy) shares the ~/.gemini root, so a bare
     // `exists(~/.gemini)` would report the (EOL'd) Gemini CLI as
     // installed on every agy machine — and `node9 init` would then
@@ -19019,19 +19044,19 @@ function detectAgents(homeDir = os6.homedir()) {
     // creates ~/.gemini/settings.json on first run; agy does not touch
     // it (it uses antigravity-cli/settings.json) — that file is the
     // legacy-CLI discriminator.
-    gemini: exists2(path9.join(homeDir, ".gemini", "settings.json")) || binaryInPath("gemini", homeDir),
+    gemini: exists2(path8.join(homeDir, ".gemini", "settings.json")) || binaryInPath("gemini", homeDir),
     // agy creates ~/.gemini/antigravity-cli/ on first launch; the IDE
     // creates antigravity-ide/. PATH fallback covers installed-but-
     // never-launched (same class as opencode #186).
-    antigravity: exists2(path9.join(homeDir, ".gemini", "antigravity-cli")) || exists2(path9.join(homeDir, ".gemini", "antigravity-ide")) || binaryInPath("agy", homeDir),
+    antigravity: exists2(path8.join(homeDir, ".gemini", "antigravity-cli")) || exists2(path8.join(homeDir, ".gemini", "antigravity-ide")) || binaryInPath("agy", homeDir),
     // GitHub Copilot CLI creates ~/.copilot on first launch; PATH
     // fallback covers installed-but-never-launched (same as opencode #186).
-    copilot: exists2(path9.join(homeDir, ".copilot")) || binaryInPath("copilot", homeDir),
-    cursor: exists2(path9.join(homeDir, ".cursor")),
-    codex: exists2(path9.join(homeDir, ".codex")),
-    windsurf: exists2(path9.join(homeDir, ".codeium", "windsurf")),
-    vscode: exists2(path9.join(homeDir, ".vscode")),
-    claudeDesktop: desktopPath !== null && exists2(path9.dirname(desktopPath)),
+    copilot: exists2(path8.join(homeDir, ".copilot")) || binaryInPath("copilot", homeDir),
+    cursor: exists2(path8.join(homeDir, ".cursor")),
+    codex: exists2(path8.join(homeDir, ".codex")),
+    windsurf: exists2(path8.join(homeDir, ".codeium", "windsurf")),
+    vscode: exists2(path8.join(homeDir, ".vscode")),
+    claudeDesktop: desktopPath !== null && exists2(path8.dirname(desktopPath)),
     // Opencode creates its config dir lazily on first launch — fall back to a
     // PATH lookup so installed-but-never-launched CLIs are still wired. Config
     // dir honors $XDG_CONFIG_HOME via opencodeConfigDir (#186, custom-XDG).
@@ -19042,7 +19067,7 @@ function detectAgents(homeDir = os6.homedir()) {
     // dir lazily on first launch — same class of bug as opencode's #186
     // (design R6) — so fall back to PATH lookup for installed-but-never-
     // launched pi.
-    pi: exists2(path9.join(homeDir, ".pi", "agent")) || binaryInPath("pi", homeDir),
+    pi: exists2(path8.join(homeDir, ".pi", "agent")) || binaryInPath("pi", homeDir),
     // Hermes Agent (https://github.com/NousResearch/hermes-agent): home dir
     // is $HERMES_HOME (default ~/.hermes) per hermes_constants.py:30. config.yaml
     // appears after `hermes setup` has run; the directory alone exists from
@@ -19051,13 +19076,13 @@ function detectAgents(homeDir = os6.homedir()) {
     hermes: exists2(hermesHomeDir(homeDir)) || binaryInPath("hermes", homeDir)
   };
 }
-function hermesHomeDir(homeDir = os6.homedir()) {
+function hermesHomeDir(homeDir = os5.homedir()) {
   const env = process.env.HERMES_HOME?.trim();
-  if (env && path9.isAbsolute(env)) return env;
-  return path9.join(homeDir, ".hermes");
+  if (env && path8.isAbsolute(env)) return env;
+  return path8.join(homeDir, ".hermes");
 }
-function hermesConfigPath(homeDir = os6.homedir()) {
-  return path9.join(hermesHomeDir(homeDir), HERMES_CONFIG_FILENAME);
+function hermesConfigPath(homeDir = os5.homedir()) {
+  return path8.join(hermesHomeDir(homeDir), HERMES_CONFIG_FILENAME);
 }
 var HERMES_CONFIG_FILENAME;
 var init_setup = __esm({
@@ -19076,15 +19101,15 @@ var init_setup = __esm({
 });
 
 // src/agent-wiring.ts
-import fs8 from "fs";
-import path10 from "path";
-import os7 from "os";
+import fs7 from "fs";
+import path9 from "path";
+import os6 from "os";
 import * as yaml2 from "yaml";
 import { parse as parseToml5 } from "smol-toml";
 function readJson(filePath) {
-  if (!fs8.existsSync(filePath)) return null;
+  if (!fs7.existsSync(filePath)) return null;
   try {
-    return JSON.parse(fs8.readFileSync(filePath, "utf-8"));
+    return JSON.parse(fs7.readFileSync(filePath, "utf-8"));
   } catch {
     return "invalid";
   }
@@ -19096,10 +19121,10 @@ function flatHaveNode9Hook(entries) {
   return (Array.isArray(entries) ? entries : []).some((h) => isNode9Hook(h.command));
 }
 function readHookRoot(filePath, format) {
-  if (!fs8.existsSync(filePath)) return "absent";
+  if (!fs7.existsSync(filePath)) return "absent";
   let raw;
   try {
-    raw = fs8.readFileSync(filePath, "utf-8");
+    raw = fs7.readFileSync(filePath, "utf-8");
   } catch {
     return "absent";
   }
@@ -19122,20 +19147,20 @@ function detectMcp(servers) {
   return { wrapped, present };
 }
 function readMcp(filePath, format) {
-  if (!fs8.existsSync(filePath)) return { wrapped: [], present: false };
+  if (!fs7.existsSync(filePath)) return { wrapped: [], present: false };
   try {
     if (format === "toml") {
-      const parsed2 = parseToml5(fs8.readFileSync(filePath, "utf-8"));
+      const parsed2 = parseToml5(fs7.readFileSync(filePath, "utf-8"));
       return detectMcp(parsed2?.mcp_servers);
     }
     const parsed = readJson(filePath);
     if (parsed === null || parsed === "invalid") return { wrapped: [], present: false };
-    return detectMcp(parsed.mcpServers);
+    return detectMcp(format === "vscode" ? parsed.servers : parsed.mcpServers);
   } catch {
     return { wrapped: [], present: false };
   }
 }
-function getAgentWiring(home = os7.homedir()) {
+function getAgentWiring(home = os6.homedir()) {
   const detected = detectAgents(home);
   return AGENT_SPECS.map((spec) => {
     const present = spec.present(home);
@@ -19179,7 +19204,8 @@ function getAgentWiring(home = os7.homedir()) {
       configFormat: spec.hookFormat === "yaml" ? "YAML" : "JSON",
       mcpServers: mcp ? mcp.wrapped : null,
       mcpProtected: mcp ? mcp.present : false,
-      isProtected: anyHookWired || (mcp?.present ?? false)
+      isProtected: anyHookWired || (mcp?.present ?? false),
+      protection: spec.hookEvents.length > 0 || spec.shimFile ? "hooks" : "mcp"
     };
   });
 }
@@ -19190,7 +19216,7 @@ var init_agent_wiring = __esm({
     init_setup();
     exists = (p) => {
       try {
-        return fs8.existsSync(p);
+        return fs7.existsSync(p);
       } catch {
         return false;
       }
@@ -19204,55 +19230,55 @@ var init_agent_wiring = __esm({
         id: "claude",
         label: "Claude Code",
         setupCommand: "node9 agents add claude",
-        hookFile: (h) => path10.join(h, ".claude", "settings.json"),
+        hookFile: (h) => path9.join(h, ".claude", "settings.json"),
         hookFormat: "matcher",
         // UserPromptSubmit is prompt DLP. setup.ts has written it for Claude since
         // that shipped; the spec must name it too, or status/doctor never show the
         // row and heal (which repairs via setupAgent) has no signal it is missing.
         hookEvents: [ck("PreToolUse"), lg("PostToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path10.join(h, ".claude.json"),
-        present: (h) => exists(path10.join(h, ".claude", "settings.json")) || exists(path10.join(h, ".claude.json"))
+        mcpFile: (h) => path9.join(h, ".claude.json"),
+        present: (h) => exists(path9.join(h, ".claude", "settings.json")) || exists(path9.join(h, ".claude.json"))
       },
       {
         id: "gemini",
         label: "Gemini CLI",
         setupCommand: "node9 agents add gemini",
-        hookFile: (h) => path10.join(h, ".gemini", "settings.json"),
+        hookFile: (h) => path9.join(h, ".gemini", "settings.json"),
         hookFormat: "matcher",
         hookEvents: [ck("BeforeTool"), lg("AfterTool")],
-        mcpFile: (h) => path10.join(h, ".gemini", "settings.json"),
-        present: (h) => exists(path10.join(h, ".gemini", "settings.json"))
+        mcpFile: (h) => path9.join(h, ".gemini", "settings.json"),
+        present: (h) => exists(path9.join(h, ".gemini", "settings.json"))
       },
       {
         id: "codex",
         label: "Codex",
         setupCommand: "node9 agents add codex",
-        hookFile: (h) => path10.join(h, ".codex", "hooks.json"),
+        hookFile: (h) => path9.join(h, ".codex", "hooks.json"),
         hookFormat: "matcher",
         hookEvents: [ck("PreToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path10.join(h, ".codex", "config.toml"),
+        mcpFile: (h) => path9.join(h, ".codex", "config.toml"),
         mcpFormat: "toml",
-        present: (h) => exists(path10.join(h, ".codex"))
+        present: (h) => exists(path9.join(h, ".codex"))
       },
       {
         id: "antigravity",
         label: "Antigravity",
         setupCommand: "node9 agents add antigravity",
-        hookFile: (h) => path10.join(h, ".gemini", "config", "hooks.json"),
+        hookFile: (h) => path9.join(h, ".gemini", "config", "hooks.json"),
         hookFormat: "matcher",
         hookEvents: [ck("PreToolUse"), lg("PostToolUse")],
-        mcpFile: (h) => path10.join(h, ".gemini", "config", "mcp_config.json"),
-        present: (h) => exists(path10.join(h, ".gemini", "config", "hooks.json")) || exists(path10.join(h, ".gemini", "antigravity-cli")) || exists(path10.join(h, ".gemini", "antigravity-ide"))
+        mcpFile: (h) => path9.join(h, ".gemini", "config", "mcp_config.json"),
+        present: (h) => exists(path9.join(h, ".gemini", "config", "hooks.json")) || exists(path9.join(h, ".gemini", "antigravity-cli")) || exists(path9.join(h, ".gemini", "antigravity-ide"))
       },
       {
         id: "copilot",
         label: "GitHub Copilot",
         setupCommand: "node9 agents add copilot",
-        hookFile: (h) => path10.join(h, ".copilot", "hooks", "node9.json"),
+        hookFile: (h) => path9.join(h, ".copilot", "hooks", "node9.json"),
         hookFormat: "flat",
         hookEvents: [ck("PreToolUse"), lg("PostToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path10.join(h, ".copilot", "mcp-config.json"),
-        present: (h) => exists(path10.join(h, ".copilot"))
+        mcpFile: (h) => path9.join(h, ".copilot", "mcp-config.json"),
+        present: (h) => exists(path9.join(h, ".copilot"))
       },
       {
         id: "cursor",
@@ -19261,8 +19287,45 @@ var init_agent_wiring = __esm({
         // MCP-only — no hook file (see note above).
         hookFormat: "flat",
         hookEvents: [],
-        mcpFile: (h) => path10.join(h, ".cursor", "mcp.json"),
-        present: (h) => exists(path10.join(h, ".cursor", "mcp.json"))
+        mcpFile: (h) => path9.join(h, ".cursor", "mcp.json"),
+        present: (h) => exists(path9.join(h, ".cursor", "mcp.json"))
+      },
+      // The three MCP-only agents below came over from `getAgentsStatus` (fw#421
+      // P3), so one registry answers every "is it wired" question.
+      {
+        id: "windsurf",
+        label: "Windsurf",
+        setupCommand: "node9 agents add windsurf",
+        hookFormat: "flat",
+        hookEvents: [],
+        mcpFile: (h) => path9.join(h, ".codeium", "windsurf", "mcp_config.json"),
+        mcpInventory: false,
+        present: (h) => exists(path9.join(h, ".codeium", "windsurf"))
+      },
+      {
+        id: "vscode",
+        label: "VSCode",
+        setupCommand: "node9 agents add vscode",
+        hookFormat: "flat",
+        hookEvents: [],
+        mcpFile: (h) => path9.join(h, ".vscode", "mcp.json"),
+        mcpFormat: "vscode",
+        mcpInventory: false,
+        present: (h) => exists(path9.join(h, ".vscode"))
+      },
+      {
+        id: "claudeDesktop",
+        label: "Claude Desktop",
+        setupCommand: "node9 agents add claudeDesktop",
+        hookFormat: "flat",
+        hookEvents: [],
+        // The per-platform config path; its parent directory is the footprint.
+        mcpFile: (h) => claudeDesktopConfigPath(h) ?? path9.join(h, ".config", "Claude", "claude_desktop_config.json"),
+        mcpInventory: false,
+        present: (h) => {
+          const p = claudeDesktopConfigPath(h);
+          return p !== null && exists(path9.dirname(p));
+        }
       },
       {
         id: "hermes",
@@ -19283,8 +19346,8 @@ var init_agent_wiring = __esm({
         setupCommand: "node9 agents add opencode",
         hookFormat: "flat",
         hookEvents: [],
-        shimFile: (h) => path10.join(opencodeConfigDir(h), "plugins", "node9.js"),
-        present: (h) => exists(opencodeConfigDir(h)) || exists(path10.join(opencodeConfigDir(h), "plugins", "node9.js"))
+        shimFile: (h) => path9.join(opencodeConfigDir(h), "plugins", "node9.js"),
+        present: (h) => exists(opencodeConfigDir(h)) || exists(path9.join(opencodeConfigDir(h), "plugins", "node9.js"))
       },
       {
         id: "pi",
@@ -19292,8 +19355,8 @@ var init_agent_wiring = __esm({
         setupCommand: "node9 agents add pi",
         hookFormat: "flat",
         hookEvents: [],
-        shimFile: (h) => path10.join(h, ".pi", "agent", "extensions", "node9.js"),
-        present: (h) => exists(path10.join(h, ".pi", "agent")) || exists(path10.join(h, ".pi", "agent", "extensions", "node9.js"))
+        shimFile: (h) => path9.join(h, ".pi", "agent", "extensions", "node9.js"),
+        present: (h) => exists(path9.join(h, ".pi", "agent")) || exists(path9.join(h, ".pi", "agent", "extensions", "node9.js"))
       }
     ];
   }
@@ -19383,14 +19446,14 @@ var init_build = __esm({
 });
 
 // src/shields.ts
-import fs9 from "fs";
-import path11 from "path";
-import os8 from "os";
+import fs8 from "fs";
+import path10 from "path";
+import os7 from "os";
 function loadUserShields() {
   const result = {};
   let entries;
   try {
-    entries = fs9.readdirSync(USER_SHIELDS_DIR).filter((f) => f.endsWith(".json"));
+    entries = fs8.readdirSync(USER_SHIELDS_DIR).filter((f) => f.endsWith(".json"));
   } catch (err) {
     if (err.code !== "ENOENT") {
       process.stderr.write(
@@ -19401,9 +19464,9 @@ function loadUserShields() {
     return result;
   }
   for (const file2 of entries) {
-    const filePath = path11.join(USER_SHIELDS_DIR, file2);
+    const filePath = path10.join(USER_SHIELDS_DIR, file2);
     try {
-      const raw = JSON.parse(fs9.readFileSync(filePath, "utf-8"));
+      const raw = JSON.parse(fs8.readFileSync(filePath, "utf-8"));
       const v = validateShieldDefinition(raw);
       if ("error" in v) {
         process.stderr.write(`[node9] ${v.error}: ${filePath}
@@ -19435,7 +19498,7 @@ function getShield(name) {
 }
 function readShieldsFile() {
   try {
-    const raw = fs9.readFileSync(SHIELDS_STATE_FILE, "utf-8");
+    const raw = fs8.readFileSync(SHIELDS_STATE_FILE, "utf-8");
     if (!raw.trim()) return { active: [] };
     const parsed = JSON.parse(raw);
     const active = Array.isArray(parsed.active) ? parsed.active.filter(
@@ -19468,23 +19531,23 @@ var init_shields = __esm({
     init_dist();
     init_build();
     init_dist();
-    USER_SHIELDS_DIR = path11.join(os8.homedir(), ".node9", "shields");
+    USER_SHIELDS_DIR = path10.join(os7.homedir(), ".node9", "shields");
     SHIELDS = buildSHIELDS();
-    SHIELDS_STATE_FILE = path11.join(os8.homedir(), ".node9", "shields.json");
+    SHIELDS_STATE_FILE = path10.join(os7.homedir(), ".node9", "shields.json");
   }
 });
 
 // src/shields/jail.ts
-import fs10 from "fs";
-import os9 from "os";
-import path12 from "path";
+import fs9 from "fs";
+import os8 from "os";
+import path11 from "path";
 function jailStorePath() {
-  return path12.join(os9.homedir(), ".node9", "jail-paths.json");
+  return path11.join(os8.homedir(), ".node9", "jail-paths.json");
 }
 function readJailPaths() {
   let text;
   try {
-    text = fs10.readFileSync(jailStorePath(), "utf8");
+    text = fs9.readFileSync(jailStorePath(), "utf8");
   } catch (err) {
     if (err.code === "ENOENT") return [];
     throw err;
@@ -19522,11 +19585,11 @@ var init_jail = __esm({
 });
 
 // src/canary/registry.ts
-import fs11 from "fs";
-import os10 from "os";
-import path13 from "path";
+import fs10 from "fs";
+import os9 from "os";
+import path12 from "path";
 function canaryStorePath() {
-  return path13.join(os10.homedir(), ".node9", "canaries.json");
+  return path12.join(os9.homedir(), ".node9", "canaries.json");
 }
 function isRecord(x) {
   if (!x || typeof x !== "object") return false;
@@ -19537,7 +19600,7 @@ function loadCanaries(opts) {
   const p = canaryStorePath();
   let raw;
   try {
-    raw = fs11.readFileSync(p, "utf-8");
+    raw = fs10.readFileSync(p, "utf-8");
   } catch (e) {
     if (e.code === "ENOENT") return [];
     throw e;
@@ -19576,23 +19639,23 @@ var init_registry = __esm({
 });
 
 // src/utils/read-capped.ts
-import fs12 from "fs";
+import fs11 from "fs";
 function readCapped(file2, maxBytes, openFlags = "r") {
   if (maxBytes < 0) return null;
   let fd;
   try {
-    fd = fs12.openSync(file2, openFlags);
+    fd = fs11.openSync(file2, openFlags);
   } catch {
     return null;
   }
   try {
-    const st = fs12.fstatSync(fd);
+    const st = fs11.fstatSync(fd);
     if (!st.isFile()) return null;
     const want = Math.min(st.size, maxBytes + 1);
     const buf = Buffer.alloc(want);
     let read2 = 0;
     while (read2 < want) {
-      const n = fs12.readSync(fd, buf, read2, want - read2, read2);
+      const n = fs11.readSync(fd, buf, read2, want - read2, read2);
       if (n <= 0) break;
       read2 += n;
     }
@@ -19604,7 +19667,7 @@ function readCapped(file2, maxBytes, openFlags = "r") {
     return null;
   } finally {
     try {
-      fs12.closeSync(fd);
+      fs11.closeSync(fd);
     } catch {
     }
   }
@@ -19620,13 +19683,13 @@ var init_read_capped = __esm({
 });
 
 // src/posture/secrets.ts
-import fs13 from "fs";
-import path14 from "path";
-import os11 from "os";
+import fs12 from "fs";
+import path13 from "path";
+import os10 from "os";
 function displayPath(p, home) {
   if (p === home) return "~";
-  const prefix = home.endsWith(path14.sep) ? home : home + path14.sep;
-  if (p.startsWith(prefix)) return "~" + path14.sep + p.slice(prefix.length);
+  const prefix = home.endsWith(path13.sep) ? home : home + path13.sep;
+  if (p.startsWith(prefix)) return "~" + path13.sep + p.slice(prefix.length);
   return p;
 }
 function safeRead(file2) {
@@ -19637,8 +19700,8 @@ function safeRead(file2) {
 function candidateFiles(home, cwd) {
   const files = /* @__PURE__ */ new Set();
   try {
-    for (const name of fs13.readdirSync(cwd)) {
-      if (name === ".env" || name.startsWith(".env.")) files.add(path14.join(cwd, name));
+    for (const name of fs12.readdirSync(cwd)) {
+      if (name === ".env" || name.startsWith(".env.")) files.add(path13.join(cwd, name));
     }
   } catch {
   }
@@ -19646,7 +19709,7 @@ function candidateFiles(home, cwd) {
     if (spec.hookFile) files.add(spec.hookFile(home));
     if (spec.mcpFile) files.add(spec.mcpFile(home));
   }
-  files.add(path14.join(home, ".env"));
+  files.add(path13.join(home, ".env"));
   return [...files];
 }
 function credentialMaterial(home) {
@@ -19660,7 +19723,7 @@ function plantedDecoyPaths() {
   }
 }
 function checkSecrets(ctx) {
-  const home = ctx.home || os11.homedir();
+  const home = ctx.home || os10.homedir();
   const findings = [];
   const planted = plantedDecoyPaths();
   const plaintext = [];
@@ -19696,7 +19759,7 @@ function checkSecrets(ctx) {
   for (const file2 of credentialMaterial(home)) {
     if (planted.has(file2)) continue;
     try {
-      if (fs13.statSync(file2).isFile()) {
+      if (fs12.statSync(file2).isFile()) {
         creds.push(displayPath(file2, home));
         credPaths.push(file2);
       }
@@ -19717,6 +19780,25 @@ function checkSecrets(ctx) {
       coverageProbe: { kind: "fileRead", paths: credPaths }
     });
   }
+  const envSecrets = [];
+  for (const [key, value] of Object.entries(ctx.env ?? process.env)) {
+    if (!value) continue;
+    const match = scanArgs({ [key]: value });
+    if (match) envSecrets.push(`${key} (${match.patternName})`);
+  }
+  if (envSecrets.length > 0) {
+    findings.push({
+      category: "Secrets",
+      severity: "high",
+      title: `${envSecrets.length} secret environment variable${envSecrets.length === 1 ? "" : "s"} visible to the agent`,
+      what: "A key or token is exported in the shell the agent runs from.",
+      why: "Every program the agent starts inherits the environment, so the value is one `env` away.",
+      who: "A tricked agent can read it and send it anywhere a command can reach.",
+      detail: envSecrets,
+      fix: "Unset it in the shell that starts the agent, or pass it to the one command that needs it (`env KEY=... cmd`) or a secrets manager.",
+      owner: "os"
+    });
+  }
   if (planted.size > 0) {
     findings.push({
       category: "Secrets",
@@ -19739,6 +19821,7 @@ var init_secrets = __esm({
     init_registry();
     init_read_capped();
     init_credential_files();
+    init_dlp();
     MAX_FILE_BYTES = 256 * 1024;
   }
 });
@@ -20149,15 +20232,15 @@ var init_managed = __esm({
 });
 
 // src/auth/trusted-hosts.ts
-import fs14 from "fs";
-import path15 from "path";
-import os12 from "os";
+import fs13 from "fs";
+import path14 from "path";
+import os11 from "os";
 function getTrustedHostsPath() {
-  return path15.join(os12.homedir(), ".node9", "trusted-hosts.json");
+  return path14.join(os11.homedir(), ".node9", "trusted-hosts.json");
 }
 function readTrustedHosts() {
   try {
-    const raw = fs14.readFileSync(getTrustedHostsPath(), "utf8");
+    const raw = fs13.readFileSync(getTrustedHostsPath(), "utf8");
     const parsed = JSON.parse(raw);
     return Array.isArray(parsed.hosts) ? parsed.hosts : [];
   } catch {
@@ -20166,7 +20249,7 @@ function readTrustedHosts() {
 }
 function getFileMtime() {
   try {
-    return fs14.statSync(getTrustedHostsPath()).mtimeMs;
+    return fs13.statSync(getTrustedHostsPath()).mtimeMs;
   } catch {
     return 0;
   }
@@ -20385,9 +20468,9 @@ var init_api_url = __esm({
 });
 
 // src/config/index.ts
-import fs15 from "fs";
-import path16 from "path";
-import os13 from "os";
+import fs14 from "fs";
+import path15 from "path";
+import os12 from "os";
 function sanitizeSsrfAllow(entries, source) {
   const kept = [];
   for (const entry of entries) {
@@ -20409,8 +20492,8 @@ function noteRejectedApiUrl(raw) {
   if (rejectedApiUrlsSeen.has(key)) return;
   rejectedApiUrlsSeen.add(key);
   try {
-    fs15.appendFileSync(
-      path16.join(os13.homedir(), ".node9", "hook-debug.log"),
+    fs14.appendFileSync(
+      path15.join(os12.homedir(), ".node9", "hook-debug.log"),
       `[${(/* @__PURE__ */ new Date()).toISOString()}] REFUSED apiUrl, using the default instead: ${String(raw).slice(0, 200).replace(/[\r\n]+/g, " ")}
 `
     );
@@ -20427,9 +20510,9 @@ function getCredentials() {
     };
   }
   try {
-    const credPath = path16.join(os13.homedir(), ".node9", "credentials.json");
-    if (fs15.existsSync(credPath)) {
-      const creds = JSON.parse(fs15.readFileSync(credPath, "utf-8"));
+    const credPath = path15.join(os12.homedir(), ".node9", "credentials.json");
+    if (fs14.existsSync(credPath)) {
+      const creds = JSON.parse(fs14.readFileSync(credPath, "utf-8"));
       const profileName = process.env.NODE9_PROFILE || "default";
       const profile = creds[profileName];
       if (typeof profile?.apiKey === "string" && profile.apiKey.length > 0) {
@@ -20461,7 +20544,7 @@ function readRulesCacheResilient(cacheFile) {
   for (let attempt = 0; attempt < 3; attempt++) {
     let content;
     try {
-      content = fs15.readFileSync(cacheFile, "utf-8");
+      content = fs14.readFileSync(cacheFile, "utf-8");
       existed = true;
     } catch (err) {
       if (err.code === "ENOENT") return {};
@@ -20476,10 +20559,10 @@ function readRulesCacheResilient(cacheFile) {
     }
   }
   if (existed || sawReadError) {
-    const backup = path16.join(path16.dirname(cacheFile), "rules-cache.last-good.json");
+    const backup = path15.join(path15.dirname(cacheFile), "rules-cache.last-good.json");
     if (backup !== cacheFile) {
       try {
-        const raw = JSON.parse(fs15.readFileSync(backup, "utf-8"));
+        const raw = JSON.parse(fs14.readFileSync(backup, "utf-8"));
         logCacheReadIssue(cacheFile, "RULES_CACHE_CORRUPT_USED_BACKUP");
         lastParsedRulesCache = raw;
         return raw;
@@ -20499,8 +20582,8 @@ function logCacheReadIssue(cacheFile, kind) {
   if (now - cacheReadLastLoggedAt < CACHE_LOG_REARM_MS) return;
   cacheReadLastLoggedAt = now;
   try {
-    fs15.appendFileSync(
-      path16.join(os13.homedir(), ".node9", "hook-debug.log"),
+    fs14.appendFileSync(
+      path15.join(os12.homedir(), ".node9", "hook-debug.log"),
       `[${(/* @__PURE__ */ new Date()).toISOString()}] ${kind} ${cacheFile}
 `
     );
@@ -20517,8 +20600,8 @@ function catalogSettingsFrom(settings, policy) {
 }
 function getConfig(cwd) {
   if (!cwd && cachedConfig) return cachedConfig;
-  const globalPath = path16.join(os13.homedir(), ".node9", "config.json");
-  const projectPath = path16.join(cwd ?? process.cwd(), "node9.config.json");
+  const globalPath = path15.join(os12.homedir(), ".node9", "config.json");
+  const projectPath = path15.join(cwd ?? process.cwd(), "node9.config.json");
   const globalConfig = tryLoadConfig(globalPath);
   const projectConfig = tryLoadConfig(projectPath, { project: true });
   const mergedSettings = {
@@ -20763,7 +20846,7 @@ function getConfig(cwd) {
   let cloudMandatesEnforcement = false;
   let cloudMandatesAppPerm = false;
   {
-    const cacheFile = path16.join(os13.homedir(), ".node9", "rules-cache.json");
+    const cacheFile = path15.join(os12.homedir(), ".node9", "rules-cache.json");
     try {
       const raw = readRulesCacheResilient(cacheFile);
       if (Array.isArray(raw.rules) && raw.rules.length > 0) {
@@ -21195,10 +21278,10 @@ function getConfig(cwd) {
 }
 function tryLoadConfig(filePath, options = {}) {
   v2ChecksByPath.delete(filePath);
-  if (!fs15.existsSync(filePath)) return null;
+  if (!fs14.existsSync(filePath)) return null;
   let raw;
   try {
-    raw = JSON.parse(fs15.readFileSync(filePath, "utf-8"));
+    raw = JSON.parse(fs14.readFileSync(filePath, "utf-8"));
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     process.stderr.write(
@@ -21661,10 +21744,10 @@ var init_templates = __esm({
 });
 
 // src/posture/egress.ts
-import fs16 from "fs";
+import fs15 from "fs";
 function sandboxEgressWallActive() {
   try {
-    return fs16.existsSync(ALLOWED_DOMAINS_PATH);
+    return fs15.existsSync(ALLOWED_DOMAINS_PATH);
   } catch {
     return false;
   }
@@ -22011,29 +22094,29 @@ var init_gate_order = __esm({
 });
 
 // src/policy/file-access.ts
-import fs17 from "fs";
-import os14 from "os";
-import path17 from "path";
+import fs16 from "fs";
+import os13 from "os";
+import path16 from "path";
 function absoluteSpelling(p, cwd, home) {
   if (p === "~" || p.startsWith("~/")) p = home + p.slice(1);
-  return path17.isAbsolute(p) ? p : `${cwd}/${p}`;
+  return path16.isAbsolute(p) ? p : `${cwd}/${p}`;
 }
 function physical(p, followFinal, links = 0) {
   if (links > 40) throw new Error("Too many symbolic links");
   if (!followFinal) {
-    const parent = physical(path17.dirname(p), true, links);
-    return { path: `${parent.path}/${path17.basename(p)}`, missing: parent.missing };
+    const parent = physical(path16.dirname(p), true, links);
+    return { path: `${parent.path}/${path16.basename(p)}`, missing: parent.missing };
   }
   try {
-    return { path: fs17.realpathSync.native(p), missing: false };
+    return { path: fs16.realpathSync.native(p), missing: false };
   } catch (error) {
     const code = error.code;
     if (!["ENOENT", "ENOTDIR"].includes(code ?? "")) throw error;
     try {
-      if (fs17.lstatSync(p).isSymbolicLink()) {
-        const target = fs17.readlinkSync(p);
+      if (fs16.lstatSync(p).isSymbolicLink()) {
+        const target = fs16.readlinkSync(p);
         return physical(
-          path17.isAbsolute(target) ? target : `${path17.dirname(p)}/${target}`,
+          path16.isAbsolute(target) ? target : `${path16.dirname(p)}/${target}`,
           true,
           links + 1
         );
@@ -22042,13 +22125,13 @@ function physical(p, followFinal, links = 0) {
       if (!["ENOENT", "ENOTDIR"].includes(linkError.code ?? ""))
         throw linkError;
     }
-    const parent = path17.dirname(p);
+    const parent = path16.dirname(p);
     if (parent === p) return { path: p, missing: true };
     const resolved = physical(parent, true, links);
-    return { path: `${resolved.path}/${path17.basename(p)}`, missing: true };
+    return { path: `${resolved.path}/${path16.basename(p)}`, missing: true };
   }
 }
-function prepareFileAccesses(tool, args, cwd = process.cwd(), inspection = {}, home = os14.homedir()) {
+function prepareFileAccesses(tool, args, cwd = process.cwd(), inspection = {}, home = os13.homedir()) {
   const context = { cwd, homeDirs: [home, "/root"] };
   const accesses = collectFileAccesses(tool, args, context, inspection);
   const handledPaths = /* @__PURE__ */ new Set();
@@ -22071,14 +22154,14 @@ function prepareFileAccesses(tool, args, cwd = process.cwd(), inspection = {}, h
     const raw = absoluteSpelling(access.path, access.cwd ?? cwd, home);
     if (access.directoryTarget) {
       try {
-        if (!fs17.statSync(absoluteSpelling(access.directoryTarget, access.cwd ?? cwd, home)).isDirectory())
+        if (!fs16.statSync(absoluteSpelling(access.directoryTarget, access.cwd ?? cwd, home)).isDirectory())
           continue;
       } catch {
       }
     }
     if (access.operation === "create") {
       try {
-        fs17.statSync(raw);
+        fs16.statSync(raw);
         continue;
       } catch {
       }
@@ -22133,15 +22216,15 @@ var init_file_access = __esm({
 });
 
 // src/supply-chain/osv-index.ts
-import fs18 from "fs";
-import os15 from "os";
-import path18 from "path";
+import fs17 from "fs";
+import os14 from "os";
+import path17 from "path";
 import { createHash as createHash4 } from "crypto";
 function osvRoot() {
-  return path18.join(os15.homedir(), ".node9", "osv");
+  return path17.join(os14.homedir(), ".node9", "osv");
 }
 function ecoDir(eco) {
-  return path18.join(osvRoot(), eco);
+  return path17.join(osvRoot(), eco);
 }
 function indexKey(eco, name) {
   switch (eco) {
@@ -22160,11 +22243,11 @@ function shardOf(key) {
   return createHash4("sha1").update(key).digest("hex").slice(0, 2);
 }
 function shardPath(eco, shard) {
-  return path18.join(ecoDir(eco), "shards", `${shard}.json`);
+  return path17.join(ecoDir(eco), "shards", `${shard}.json`);
 }
 function readMeta(eco) {
   try {
-    const m = JSON.parse(fs18.readFileSync(path18.join(ecoDir(eco), "meta.json"), "utf8"));
+    const m = JSON.parse(fs17.readFileSync(path17.join(ecoDir(eco), "meta.json"), "utf8"));
     if (typeof m?.syncedAt !== "string" || typeof m?.lastModifiedMs !== "number") return null;
     return m;
   } catch {
@@ -22173,7 +22256,7 @@ function readMeta(eco) {
 }
 function readShard(eco, shard) {
   try {
-    const s = JSON.parse(fs18.readFileSync(shardPath(eco, shard), "utf8"));
+    const s = JSON.parse(fs17.readFileSync(shardPath(eco, shard), "utf8"));
     return s && typeof s === "object" && !Array.isArray(s) ? s : {};
   } catch {
     return {};
@@ -22555,17 +22638,17 @@ var init_registry2 = __esm({
 });
 
 // src/supply-chain/local-resolve.ts
-import fs19 from "fs";
-import path19 from "path";
+import fs18 from "fs";
+import path18 from "path";
 function resolveInstalled(name, cwd) {
-  if (!cwd || !path19.isAbsolute(cwd)) return null;
+  if (!cwd || !path18.isAbsolute(cwd)) return null;
   if (!/^(?:@[^/\\]+\/)?[^/\\]+$/.test(name)) return null;
-  let dir2 = path19.resolve(cwd);
+  let dir2 = path18.resolve(cwd);
   for (let i = 0; i < MAX_LEVELS; i++) {
-    const pkgDir = path19.join(dir2, "node_modules", ...name.split("/"));
-    const manifest = path19.join(pkgDir, "package.json");
+    const pkgDir = path18.join(dir2, "node_modules", ...name.split("/"));
+    const manifest = path18.join(pkgDir, "package.json");
     try {
-      const raw = fs19.readFileSync(manifest, "utf8");
+      const raw = fs18.readFileSync(manifest, "utf8");
       const parsed = JSON.parse(raw);
       if (typeof parsed.version === "string" && parsed.version.length > 0) {
         return { version: parsed.version, dir: pkgDir };
@@ -22573,7 +22656,7 @@ function resolveInstalled(name, cwd) {
       return null;
     } catch {
     }
-    const parent = path19.dirname(dir2);
+    const parent = path18.dirname(dir2);
     if (parent === dir2) break;
     dir2 = parent;
   }
@@ -22590,7 +22673,7 @@ var init_local_resolve = __esm({
 
 // src/supply-chain/check.ts
 import picomatch2 from "picomatch";
-import path20 from "path";
+import path19 from "path";
 function commandOf(toolName, args) {
   if (!isBashTool(toolName) || !args || typeof args !== "object") return null;
   const a = args;
@@ -22692,7 +22775,7 @@ function checkInstalled(p, version, misses) {
 }
 async function checkOne(p, cfg, misses, networkCapped, cwd) {
   if (p.ecosystem === "npm" && LOCAL_FIRST_MANAGERS.has(p.manager) && p.localCwd !== null && (p.raw === p.name || p.version)) {
-    const localCwd = cwd && path20.isAbsolute(cwd) ? (p.localCwd ?? []).reduce((dir2, step) => path20.resolve(dir2, step), cwd) : void 0;
+    const localCwd = cwd && path19.isAbsolute(cwd) ? (p.localCwd ?? []).reduce((dir2, step) => path19.resolve(dir2, step), cwd) : void 0;
     const installed = resolveInstalled(p.name, localCwd);
     if (installed && (!p.version || p.version === installed.version))
       return checkInstalled(p, installed.version, misses);
@@ -22861,33 +22944,33 @@ var init_check = __esm({
 });
 
 // src/supply-chain/registries.ts
-import os16 from "os";
-import path21 from "path";
-import fs20 from "fs";
+import os15 from "os";
+import path20 from "path";
+import fs19 from "fs";
 function userFiles(home, env) {
-  const xdg = env.XDG_CONFIG_HOME || path21.join(home, ".config");
+  const xdg = env.XDG_CONFIG_HOME || path20.join(home, ".config");
   return [
-    env.NPM_CONFIG_USERCONFIG || env.npm_config_userconfig || path21.join(home, ".npmrc"),
-    path21.join(home, ".yarnrc"),
-    path21.join(home, ".yarnrc.yml"),
-    path21.join(home, ".bunfig.toml"),
+    env.NPM_CONFIG_USERCONFIG || env.npm_config_userconfig || path20.join(home, ".npmrc"),
+    path20.join(home, ".yarnrc"),
+    path20.join(home, ".yarnrc.yml"),
+    path20.join(home, ".bunfig.toml"),
     env.PIP_CONFIG_FILE || "",
-    path21.join(xdg, "pip", "pip.conf"),
-    path21.join(home, ".pip", "pip.conf"),
+    path20.join(xdg, "pip", "pip.conf"),
+    path20.join(home, ".pip", "pip.conf"),
     "/etc/pip.conf",
-    env.VIRTUAL_ENV ? path21.join(env.VIRTUAL_ENV, "pip.conf") : "",
+    env.VIRTUAL_ENV ? path20.join(env.VIRTUAL_ENV, "pip.conf") : "",
     env.UV_CONFIG_FILE || "",
-    path21.join(xdg, "uv", "uv.toml"),
+    path20.join(xdg, "uv", "uv.toml"),
     "/etc/uv/uv.toml"
   ].filter(Boolean);
 }
 function projectFiles(cwd) {
-  if (!cwd || !path21.isAbsolute(cwd)) return [];
+  if (!cwd || !path20.isAbsolute(cwd)) return [];
   const out = [];
   let dir2 = cwd;
   for (let i = 0; i < MAX_PARENT_DIRS; i++) {
-    for (const f of PROJECT_FILES) out.push(path21.join(dir2, f));
-    const parent = path21.dirname(dir2);
+    for (const f of PROJECT_FILES) out.push(path20.join(dir2, f));
+    const parent = path20.dirname(dir2);
     if (parent === dir2) break;
     dir2 = parent;
   }
@@ -22926,7 +23009,7 @@ function hostsInText(text, out) {
     }
   }
 }
-function configuredRegistryHosts(cwd, env = process.env, home = os16.homedir()) {
+function configuredRegistryHosts(cwd, env = process.env, home = os15.homedir()) {
   const key = [
     cwd ?? "",
     home,
@@ -22948,7 +23031,7 @@ function configuredRegistryHosts(cwd, env = process.env, home = os16.homedir())
     const r = readCappedText(
       file2,
       MAX_CONFIG_BYTES,
-      fs20.constants.O_RDONLY | (fs20.constants.O_NONBLOCK ?? 0)
+      fs19.constants.O_RDONLY | (fs19.constants.O_NONBLOCK ?? 0)
     );
     if (r) hostsInText(r.text, hosts);
   }
@@ -23005,17 +23088,17 @@ var init_registries = __esm({
 });
 
 // src/utils/provenance.ts
-import fs21 from "fs";
-import path22 from "path";
-import os17 from "os";
+import fs20 from "fs";
+import path21 from "path";
+import os16 from "os";
 function findInPath(cmd) {
-  if (path22.posix.isAbsolute(cmd)) return cmd;
+  if (path21.posix.isAbsolute(cmd)) return cmd;
   const pathEnv = process.env.PATH ?? "";
-  for (const dir2 of pathEnv.split(path22.delimiter)) {
+  for (const dir2 of pathEnv.split(path21.delimiter)) {
     if (!dir2) continue;
-    const full = path22.join(dir2, cmd);
+    const full = path21.join(dir2, cmd);
     try {
-      fs21.accessSync(full, fs21.constants.X_OK);
+      fs20.accessSync(full, fs20.constants.X_OK);
       return full;
     } catch {
     }
@@ -23026,7 +23109,7 @@ function _classifyPath(resolved, cwd) {
   if (cwd && resolved.startsWith(cwd + "/")) {
     return { trustLevel: "user", reason: "binary in project directory" };
   }
-  const osTmp = os17.tmpdir();
+  const osTmp = os16.tmpdir();
   const allSuspect = osTmp ? [...SUSPECT_PREFIXES, osTmp] : SUSPECT_PREFIXES;
   if (allSuspect.some((p) => resolved === p || resolved.startsWith(p + "/"))) {
     return { trustLevel: "suspect", reason: `binary in temp directory: ${resolved}` };
@@ -23044,7 +23127,7 @@ function _classifyPath(resolved, cwd) {
 }
 function checkProvenance(cmd, cwd) {
   const bare = cmd.startsWith("./") ? cmd.slice(2) : cmd;
-  if (path22.posix.isAbsolute(bare)) {
+  if (path21.posix.isAbsolute(bare)) {
     const early = _classifyPath(bare, cwd);
     if (early.trustLevel === "suspect") {
       return { resolvedPath: bare, ...early };
@@ -23060,7 +23143,7 @@ function checkProvenance(cmd, cwd) {
         reason: "binary not found in PATH"
       };
     }
-    resolved = fs21.realpathSync(found);
+    resolved = fs20.realpathSync(found);
   } catch {
     return {
       resolvedPath: cmd,
@@ -23069,7 +23152,7 @@ function checkProvenance(cmd, cwd) {
     };
   }
   try {
-    const stat = fs21.statSync(resolved);
+    const stat = fs20.statSync(resolved);
     if (stat.mode & 2) {
       return {
         resolvedPath: resolved,
@@ -23094,19 +23177,19 @@ var init_provenance2 = __esm({
     SYSTEM_PREFIXES = ["/usr/bin", "/usr/sbin", "/bin", "/sbin"];
     MANAGED_PREFIXES = ["/usr/local/bin", "/opt/homebrew", "/home/linuxbrew", "/nix/store"];
     USER_PREFIXES = [
-      path22.join(os17.homedir(), "bin"),
-      path22.join(os17.homedir(), ".local", "bin"),
-      path22.join(os17.homedir(), ".cargo", "bin"),
-      path22.join(os17.homedir(), ".npm-global", "bin"),
-      path22.join(os17.homedir(), ".volta", "bin")
+      path21.join(os16.homedir(), "bin"),
+      path21.join(os16.homedir(), ".local", "bin"),
+      path21.join(os16.homedir(), ".cargo", "bin"),
+      path21.join(os16.homedir(), ".npm-global", "bin"),
+      path21.join(os16.homedir(), ".volta", "bin")
     ];
     SUSPECT_PREFIXES = ["/tmp", "/var/tmp", "/dev/shm"];
   }
 });
 
 // src/policy/index.ts
-import fs22 from "fs";
-import path23 from "path";
+import fs21 from "fs";
+import path22 from "path";
 async function evaluatePolicy2(toolName, args, agent, cwd, opts) {
   const config = opts?.config ?? getConfig(cwd);
   const prepared = opts?.fileAccess ?? prepareFileAccesses(toolName, args, cwd, inspectionLayers(config.policy));
@@ -23138,9 +23221,9 @@ async function evaluatePolicy2(toolName, args, agent, cwd, opts) {
   );
 }
 function isGitWorkTreeTop(dir2, cwd) {
-  if (!path23.isAbsolute(cwd)) return true;
+  if (!path22.isAbsolute(cwd)) return true;
   try {
-    return fs22.existsSync(path23.join(path23.resolve(cwd, dir2), ".git"));
+    return fs21.existsSync(path22.join(path22.resolve(cwd, dir2), ".git"));
   } catch {
     return true;
   }
@@ -23149,7 +23232,7 @@ function readAgentSettings(absPath) {
   const r = readCappedText(
     absPath,
     MAX_AGENT_SETTINGS_BYTES,
-    fs22.constants.O_RDONLY | (fs22.constants.O_NONBLOCK ?? 0)
+    fs21.constants.O_RDONLY | (fs21.constants.O_NONBLOCK ?? 0)
   );
   return r && !r.truncated ? r.text : null;
 }
@@ -23218,14 +23301,14 @@ var init_gate = __esm({
 });
 
 // src/posture/supply-chain.ts
-import os18 from "os";
-import path24 from "path";
+import os17 from "os";
+import path23 from "path";
 import { parse as parseToml6 } from "smol-toml";
 function isNode9Managed(command, args = []) {
   if (!command) return false;
-  if (path24.basename(command).toLowerCase() === "node9") return true;
-  if (PACKAGE_RUNNERS.has(path24.basename(command).toLowerCase())) {
-    return args.some((a) => a === "node9" || path24.basename(a).toLowerCase() === "node9");
+  if (path23.basename(command).toLowerCase() === "node9") return true;
+  if (PACKAGE_RUNNERS.has(path23.basename(command).toLowerCase())) {
+    return args.some((a) => a === "node9" || path23.basename(a).toLowerCase() === "node9");
   }
   return false;
 }
@@ -23247,10 +23330,10 @@ function readServers(file2, format, agent) {
   }
 }
 function checkSupplyChain(ctx) {
-  const home = ctx.home || os18.homedir();
+  const home = ctx.home || os17.homedir();
   const servers = [];
   for (const spec of AGENT_SPECS) {
-    if (!spec.mcpFile) continue;
+    if (!spec.mcpFile || spec.mcpInventory === false) continue;
     servers.push(...readServers(spec.mcpFile(home), spec.mcpFormat ?? "json", spec.label));
   }
   if (servers.length === 0) return [];
@@ -23346,11 +23429,11 @@ var init_privilege = __esm({
 });
 
 // src/posture/containment.ts
-import fs23 from "fs";
+import fs22 from "fs";
 function inContainer() {
-  if (fs23.existsSync("/.dockerenv") || fs23.existsSync("/run/.containerenv")) return true;
+  if (fs22.existsSync("/.dockerenv") || fs22.existsSync("/run/.containerenv")) return true;
   try {
-    const cgroup = fs23.readFileSync("/proc/1/cgroup", "utf8");
+    const cgroup = fs22.readFileSync("/proc/1/cgroup", "utf8");
     if (/docker|kubepods|containerd|lxc|libpod/.test(cgroup)) return true;
   } catch {
   }
@@ -23396,7 +23479,7 @@ var init_containment = __esm({
 });
 
 // src/posture/inbound.ts
-import fs24 from "fs";
+import fs23 from "fs";
 function buildNetworkFix(labels) {
   const shielded = [
     ...new Map(
@@ -23454,7 +23537,7 @@ function collectListeners() {
   const byPort = /* @__PURE__ */ new Map();
   for (const file2 of ["/proc/net/tcp", "/proc/net/tcp6"]) {
     try {
-      for (const l of parseListeners(fs24.readFileSync(file2, "utf8"))) {
+      for (const l of parseListeners(fs23.readFileSync(file2, "utf8"))) {
         if (!byPort.has(l.port)) byPort.set(l.port, l);
       }
     } catch {
@@ -23466,11 +23549,11 @@ function readProc(pid) {
   let comm = "unknown";
   let cmdline = "";
   try {
-    comm = fs24.readFileSync(`/proc/${pid}/comm`, "utf8").trim().replace(/-MainThread$/, "") || "unknown";
+    comm = fs23.readFileSync(`/proc/${pid}/comm`, "utf8").trim().replace(/-MainThread$/, "") || "unknown";
   } catch {
   }
   try {
-    cmdline = fs24.readFileSync(`/proc/${pid}/cmdline`).toString().replace(/\0/g, " ").trim();
+    cmdline = fs23.readFileSync(`/proc/${pid}/cmdline`).toString().replace(/\0/g, " ").trim();
   } catch {
   }
   return { comm, cmdline };
@@ -23480,21 +23563,21 @@ function resolveProcesses(inodes) {
   if (inodes.size === 0) return map;
   let pids;
   try {
-    pids = fs24.readdirSync("/proc").filter((d) => /^\d+$/.test(d));
+    pids = fs23.readdirSync("/proc").filter((d) => /^\d+$/.test(d));
   } catch {
     return map;
   }
   for (const pid of pids) {
     let fds;
     try {
-      fds = fs24.readdirSync(`/proc/${pid}/fd`);
+      fds = fs23.readdirSync(`/proc/${pid}/fd`);
     } catch {
       continue;
     }
     for (const fd of fds) {
       let link;
       try {
-        link = fs24.readlinkSync(`/proc/${pid}/fd/${fd}`);
+        link = fs23.readlinkSync(`/proc/${pid}/fd/${fd}`);
       } catch {
         continue;
       }
@@ -23599,9 +23682,9 @@ var init_inbound = __esm({
 });
 
 // src/posture/coverage.ts
-import os19 from "os";
+import os18 from "os";
 function checkCoverage(ctx) {
-  const home = ctx.home || os19.homedir();
+  const home = ctx.home || os18.homedir();
   const findings = [];
   const protectedAgents = getAgentWiring(home).filter((r) => r.isProtected);
   if (protectedAgents.length === 0) {
@@ -23645,7 +23728,7 @@ var init_coverage = __esm({
 });
 
 // src/posture/governance.ts
-import path25 from "path";
+import path24 from "path";
 function checkData(ctx) {
   const dlp = getConfig(ctx.cwd).policy.dlp;
   if (!dlp?.enabled) {
@@ -23789,7 +23872,7 @@ var init_governance = __esm({
   "src/posture/governance.ts"() {
     "use strict";
     init_config();
-    jailProbePath = (home) => path25.join(home, ".aws", "credentials");
+    jailProbePath = (home) => path24.join(home, ".aws", "credentials");
   }
 });
 
@@ -23968,7 +24051,7 @@ var init_enforcement = __esm({
 });
 
 // src/posture/index.ts
-import os20 from "os";
+import os19 from "os";
 function dropEnforcementRedundant(findings) {
   const coveragePresent = findings.some((f) => f.category === "Coverage");
   if (!coveragePresent) return findings;
@@ -23994,9 +24077,10 @@ async function runChecks(checks, ctx) {
 }
 async function runPosture(opts = {}) {
   const ctx = {
-    home: opts.home ?? os20.homedir(),
+    home: opts.home ?? os19.homedir(),
     cwd: opts.cwd ?? process.cwd(),
-    agent: opts.agent
+    agent: opts.agent,
+    env: opts.env
   };
   const {
     findings: rawFindings,
@@ -24055,6 +24139,102 @@ var init_posture = __esm({
   }
 });
 
+// src/posture/render.ts
+import chalk2 from "chalk";
+var ICON, TIER_LABEL;
+var init_render = __esm({
+  "src/posture/render.ts"() {
+    "use strict";
+    init_score();
+    ICON = {
+      critical: chalk2.red("\u274C"),
+      high: chalk2.red("\u274C"),
+      medium: chalk2.yellow("\u26A0\uFE0F "),
+      advisory: chalk2.gray("\u26A0\uFE0F ")
+    };
+    TIER_LABEL = {
+      good: chalk2.green("Good"),
+      "at-risk": chalk2.yellow("At risk"),
+      critical: chalk2.red("Critical")
+    };
+  }
+});
+
+// src/cli/commands/blast.ts
+import chalk3 from "chalk";
+import fs24 from "fs";
+import path25 from "path";
+import os20 from "os";
+function buildSensitivePaths(home, cwd) {
+  const homeFiles = homeCredentialFiles(home).map(({ full, label: label2, description, score }) => ({
+    full,
+    label: label2,
+    description,
+    score
+  }));
+  return [
+    ...homeFiles,
+    {
+      full: path25.join(cwd, ".env"),
+      label: ".env  (current folder)",
+      description: "App secrets: database passwords, API keys",
+      score: 20
+    },
+    {
+      full: path25.join(cwd, ".env.local"),
+      label: ".env.local  (current folder)",
+      description: "Local overrides: often contains real credentials",
+      score: 15
+    },
+    {
+      full: path25.join(cwd, ".env.production"),
+      label: ".env.production  (current folder)",
+      description: "Production secrets",
+      score: 20
+    }
+  ];
+}
+function isReadable(filePath) {
+  try {
+    fs24.accessSync(filePath, fs24.constants.R_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function runBlast() {
+  const home = os20.homedir();
+  const cwd = process.cwd();
+  const paths = buildSensitivePaths(home, cwd);
+  let scoreDeduction = 0;
+  const reachable = [];
+  for (const p of paths) {
+    if (fs24.existsSync(p.full) && isReadable(p.full)) {
+      reachable.push(p);
+      scoreDeduction += p.score;
+    }
+  }
+  const envFindings = [];
+  for (const [key, value] of Object.entries(process.env)) {
+    if (!value) continue;
+    const match = scanArgs({ [key]: value });
+    if (match) {
+      envFindings.push({ key, patternName: match.patternName });
+      scoreDeduction += 10;
+    }
+  }
+  return { reachable, envFindings, score: Math.max(0, 100 - scoreDeduction) };
+}
+var init_blast = __esm({
+  "src/cli/commands/blast.ts"() {
+    "use strict";
+    init_dlp();
+    init_credential_files();
+    init_posture();
+    init_render();
+  }
+});
+
 // src/auth/decision-record.ts
 function personRecord(channel, decision, extra = {}, now = Date.now()) {
   return {
@@ -24714,7 +24894,7 @@ import * as fs26 from "fs";
 import * as path27 from "path";
 function listSessionFiles(dir2, maxDepth = 6) {
   const out = [];
-  const walk2 = (d, rel, depth) => {
+  const walk3 = (d, rel, depth) => {
     if (depth > maxDepth) return;
     let entries;
     try {
@@ -24724,11 +24904,11 @@ function listSessionFiles(dir2, maxDepth = 6) {
     }
     for (const e of entries) {
       const childRel = rel ? path27.join(rel, e.name) : e.name;
-      if (e.isDirectory()) walk2(path27.join(d, e.name), childRel, depth + 1);
+      if (e.isDirectory()) walk3(path27.join(d, e.name), childRel, depth + 1);
       else if (e.name.endsWith(".jsonl")) out.push(childRel);
     }
   };
-  walk2(dir2, "", 0);
+  walk3(dir2, "", 0);
   return out;
 }
 function sessionIdOf(relPath) {
@@ -25535,7 +25715,7 @@ var init_report_audit = __esm({
 });
 
 // src/config/keyed-guard.ts
-import chalk3 from "chalk";
+import chalk4 from "chalk";
 function isKeyedForPolicy() {
   try {
     return getConfig().policySource === "workspace";
@@ -29344,7 +29524,7 @@ var init_scan_summary = __esm({
 });
 
 // src/cli/render/scan-derive.ts
-import chalk4 from "chalk";
+import chalk5 from "chalk";
 import stringWidth from "string-width";
 var init_scan_derive = __esm({
   "src/cli/render/scan-derive.ts"() {
@@ -29363,7 +29543,6 @@ var init_protection = __esm({
 var init_scan_json = __esm({
   "src/cli/render/scan-json.ts"() {
     "use strict";
-    init_scan_derive();
   }
 });
 
@@ -29376,7 +29555,7 @@ var init_scan_history = __esm({
 });
 
 // src/cli/commands/scan.ts
-import chalk5 from "chalk";
+import chalk6 from "chalk";
 import fs43 from "fs";
 import path46 from "path";
 import os35 from "os";
@@ -29522,19 +29701,19 @@ function scrubDecoys(subject, values) {
     for (const v of values) if (v) out = out.split(v).join("[node9-decoy]");
     return out;
   };
-  const walk2 = (v, depth) => {
+  const walk3 = (v, depth) => {
     if (depth > 6) return v;
     if (typeof v === "string") return scrubText(v);
-    if (Array.isArray(v)) return v.map((x) => walk2(x, depth + 1));
+    if (Array.isArray(v)) return v.map((x) => walk3(x, depth + 1));
     if (v && typeof v === "object") {
       const out = {};
       for (const [k, child] of Object.entries(v))
-        out[k] = walk2(child, depth + 1);
+        out[k] = walk3(child, depth + 1);
       return out;
     }
     return v;
   };
-  return walk2(subject, 0);
+  return walk3(subject, 0);
 }
 function detectLoops(calls, project, sessionId, agent) {
   const counts = /* @__PURE__ */ new Map();
@@ -30721,7 +30900,7 @@ var init_scan = __esm({
     init_hook_payload();
     init_dist();
     init_scan_summary();
-    init_setup();
+    init_agent_wiring();
     init_blast();
     init_scan_derive();
     init_protection();