@node9/proxy 2.47.0 → 2.47.2

package/dist/dashboard.mjs

@@ -13,6 +13,19 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// node_modules/tsup/assets/esm_shims.js
+import path from "path";
+import { fileURLToPath } from "url";
+var getFilename, getDirname, __dirname;
+var init_esm_shims = __esm({
+  "node_modules/tsup/assets/esm_shims.js"() {
+    "use strict";
+    getFilename = () => fileURLToPath(import.meta.url);
+    getDirname = () => path.dirname(getFilename());
+    __dirname = /* @__PURE__ */ getDirname();
+  }
+});
+
 // src/tui/dashboard/types.ts
 function windowStartMs(window, openedAt) {
   if (window === "now") return openedAt;
@@ -32,6 +45,7 @@ var EMPTY_SESSION_FORENSIC, EMPTY_SESSION_ACTIVITY, EMPTY_SESSION_SHIELDS;
 var init_types = __esm({
   "src/tui/dashboard/types.ts"() {
     "use strict";
+    init_esm_shims();
     EMPTY_SESSION_FORENSIC = {
       pii: 0,
       sensitiveFileRead: 0,
@@ -83,6 +97,7 @@ function hashArgs(args) {
 var init_hasher = __esm({
   "src/audit/hasher.ts"() {
     "use strict";
+    init_esm_shims();
   }
 });
 
@@ -101,17 +116,17 @@ var als;
 var init_forecast_context = __esm({
   "src/auth/forecast-context.ts"() {
     "use strict";
+    init_esm_shims();
     als = new AsyncLocalStorage();
   }
 });
 
 // packages/policy-engine/dist/index.mjs
+import { fileURLToPath as fileURLToPath2 } from "url";
 import picomatch from "picomatch";
 import safeRegex from "safe-regex2";
 import pm from "picomatch";
-import mvdanSh2 from "mvdan-sh";
-import mvdanSh from "mvdan-sh";
-import mvdanSh3 from "mvdan-sh";
+import { createRequire } from "module";
 import safeRegex2 from "safe-regex2";
 import { createHash as createHash2 } from "crypto";
 import { createHash as createHash22 } from "crypto";
@@ -697,11 +712,29 @@ function resolveCheckMap(settings) {
   for (const c of CHECKS) out[c.id] = checkValue(settings, c.id);
   return out;
 }
+function getSyntax() {
+  if (syntax === null) {
+    const req = createRequire(__filename2);
+    syntax = req("mvdan-sh").syntax;
+  }
+  return syntax;
+}
+function lazy(compute) {
+  let done = false;
+  let value;
+  return () => {
+    if (!done) {
+      value = compute();
+      done = true;
+    }
+    return value;
+  };
+}
 function isGoNode(v) {
   return v !== null && typeof v === "object" && typeof v.Pos === "function";
 }
 function toPlainTree(goNode) {
-  const kind = syntax.NodeType(goNode);
+  const kind = getSyntax().NodeType(goNode);
   const out = { kind, pos: goNode.Pos().Offset(), end: goNode.End().Offset() };
   const spec = KINDS[kind];
   if (!spec) {
@@ -891,12 +924,12 @@ function judgeInlineCode(language, code, isProtected) {
       category
     };
   }
-  const path48 = protectedLiteral(text, isProtected);
-  if (path48) {
+  const path210 = protectedLiteral(text, isProtected);
+  if (path210) {
     return {
       outcome: "dangerous",
       what: WHAT["reads-protected"],
-      evidence: path48.slice(0, 60),
+      evidence: path210.slice(0, 60),
       category: "reads-protected"
     };
   }
@@ -932,7 +965,7 @@ function parseShared(command) {
   }
   let parsed;
   try {
-    parsed = toPlainTree(sharedParser.Parse(command, "cmd"));
+    parsed = toPlainTree(sharedParser().Parse(command, "cmd"));
   } catch {
     parsed = PARSE_FAIL;
   }
@@ -1480,7 +1513,7 @@ function redirStdinOps() {
 }
 function deriveBinaryOp(sample) {
   try {
-    const f = toPlainTree(sharedParser.Parse(sample, "cmd"));
+    const f = toPlainTree(sharedParser().Parse(sample, "cmd"));
     let op = -1;
     walk(f, (node) => {
       const n = node;
@@ -1924,7 +1957,7 @@ function recordTopLevelAssignments(f) {
 }
 function probeBinOp(src) {
   try {
-    const cmd = toPlainTree(syntax2.NewParser().Parse(src, "probe"))?.Stmts?.[0]?.Cmd;
+    const cmd = toPlainTree(getSyntax().NewParser().Parse(src, "probe"))?.Stmts?.[0]?.Cmd;
     if (cmd && cmd.kind === "BinaryCmd") return cmd.Op;
   } catch {
   }
@@ -1934,9 +1967,9 @@ function recordTopLevelStmt(stmt) {
   if (!stmt || !stmt.Cmd) return false;
   const t = stmt.Cmd.kind;
   if (t === "BinaryCmd") {
-    if (!AND_OR_OPS.has(stmt.Cmd.Op)) return false;
+    if (!andOrOps().AND_OR_OPS.has(stmt.Cmd.Op)) return false;
     if (!recordTopLevelStmt(stmt.Cmd.X)) return false;
-    if (stmt.Cmd.Op === AND_OP) return recordTopLevelStmt(stmt.Cmd.Y);
+    if (stmt.Cmd.Op === andOrOps().AND_OP) return recordTopLevelStmt(stmt.Cmd.Y);
     return true;
   }
   if (t !== "CallExpr" && t !== "DeclClause") return false;
@@ -2387,7 +2420,7 @@ function isWaivableCleanupTarget(p) {
 }
 function deriveRedirOp(sample) {
   try {
-    const f = toPlainTree(sharedParser.Parse(sample, "cmd"));
+    const f = toPlainTree(sharedParser().Parse(sample, "cmd"));
     let op = -1;
     walk(f, (node) => {
       const n = node;
@@ -2406,9 +2439,9 @@ function collectSameCommandCreations(f) {
     for (const stmt of stmts) {
       if (!stmt || !stmt.Cmd || stmt.Cmd.kind !== "CallExpr") continue;
       const redirs = stmt.Redirs || [];
-      if (!redirs.some((r) => r && REDIR_HEREDOC_OPS.has(r.Op))) continue;
+      if (!redirs.some((r) => r && REDIR_HEREDOC_OPS().has(r.Op))) continue;
       for (const r of redirs) {
-        if (r && REDIR_TRUNCATE_OPS.has(r.Op) && r.N == null) {
+        if (r && REDIR_TRUNCATE_OPS().has(r.Op) && r.N == null) {
           const w = resolveWordLiteral(r.Word);
           if (w) created.add(stripDotSlash(w));
         }
@@ -2978,7 +3011,7 @@ function literalShellPayload(words, name) {
 function jailedRedirectRead(stmt) {
   const redirs = stmt.Redirs || [];
   for (const r of redirs) {
-    if (!r || !REDIR_FILE_IN_OPS.has(r.Op)) continue;
+    if (!r || !REDIR_FILE_IN_OPS().has(r.Op)) continue;
     const p = resolveWordLiteral(r.Word);
     if (p === null || p === "") continue;
     const hit = matchSensitivePath(p);
@@ -3060,9 +3093,9 @@ function ruleServerMatches(rule, serverLabel) {
   if (rule.notServer && label2 && matchesPattern(label2, rule.notServer)) return false;
   return true;
 }
-function getNestedValue(obj, path48) {
+function getNestedValue(obj, path210) {
   if (!obj || typeof obj !== "object") return null;
-  const segments2 = path48.split(".");
+  const segments2 = path210.split(".");
   for (const seg of segments2) {
     if (FORBIDDEN_PATH_SEGMENTS.has(seg)) return null;
   }
@@ -3274,7 +3307,7 @@ function runnablePrefix(command) {
   let text = command;
   for (let attempt = 0; attempt < 32; attempt++) {
     try {
-      return toPlainTree(syntax3.NewParser().Parse(text, ""));
+      return toPlainTree(getSyntax().NewParser().Parse(text, ""));
     } catch (error) {
       const message = String(typeof error?.Error === "function" ? error.Error() : error?.message);
       const line = Number(/^(\d+):/.exec(message)?.[1]);
@@ -3319,7 +3352,7 @@ function wordValues(word, state) {
     const name = node.Param?.Value;
     const known = name === "PWD" ? state.cwd : state.vars.get(name);
     if (node.Exp) {
-      if (!DEFAULT_OPS.has(node.Exp.Op)) return null;
+      if (!ops().DEFAULT_OPS.has(node.Exp.Op)) return null;
       if (known && known.length) return toWords(known, quoted);
       const fallback = expand(node.Exp.Word?.Parts ?? [], quoted);
       return fallback.dynamic ? null : fallback.out.map(asWord);
@@ -3844,7 +3877,7 @@ function collectShellFileAccesses(command, context = {}) {
   function stdinText(stmt) {
     for (const redir of stmt?.Redirs ?? []) {
       if (redir.Hdoc) return resolveWordLiteral(redir.Hdoc);
-      if (redir.Op === HERE_STRING) return resolveWordLiteral(redir.Word);
+      if (redir.Op === ops().HERE_STRING) return resolveWordLiteral(redir.Word);
     }
     return null;
   }
@@ -3874,10 +3907,10 @@ function collectShellFileAccesses(command, context = {}) {
     for (const redir of stmt.Redirs ?? []) {
       substitutions(redir.Word, state, depth);
       for (const word of wordValues(redir.Word, state)) {
-        if (WRITES.has(redir.Op))
-          add("write", word, state, APPENDS.has(redir.Op) ? { append: true } : {});
-        if (READS.has(redir.Op)) add("read", word, state, sends ? { upload: true } : {});
-        if (redir.Op === DUP_OUT && word.value && !/^\d+$/.test(word.value))
+        if (ops().WRITES.has(redir.Op))
+          add("write", word, state, ops().APPENDS.has(redir.Op) ? { append: true } : {});
+        if (ops().READS.has(redir.Op)) add("read", word, state, sends ? { upload: true } : {});
+        if (redir.Op === ops().DUP_OUT && word.value && !/^\d+$/.test(word.value))
           add("write", word, state);
       }
       substitutions(redir.Hdoc, state, depth);
@@ -3909,16 +3942,17 @@ function collectShellFileAccesses(command, context = {}) {
         const seen = clone(state);
         let pureAnd = true;
         segments2.forEach(({ op, part }, i) => {
-          if (op === AND || op === OR) {
-            if (i > 0 && op === AND && pureAnd && state.onSuccess) state.cwd = state.onSuccess;
-            if (i > 0 && op === OR) merge(state, seen);
+          if (op === ops().AND || op === ops().OR) {
+            if (i > 0 && op === ops().AND && pureAnd && state.onSuccess)
+              state.cwd = state.onSuccess;
+            if (i > 0 && op === ops().OR) merge(state, seen);
             statement(part, state, depth + 1);
           } else {
             statement(part, clone(state), depth + 1);
             if (i > 0 && readsScriptFromStdin(part))
               nestedPayload(producedText(segments2[i - 1].part), clone(state), depth);
           }
-          if (i > 0 && op !== AND) pureAnd = false;
+          if (i > 0 && op !== ops().AND) pureAnd = false;
           merge(seen, state);
         });
         merge(state, seen);
@@ -4042,8 +4076,8 @@ function collectFileAccesses(tool, args, context = {}, inspection = {}) {
   }
   return out;
 }
-function within(path48, root) {
-  return path48 === root || path48.startsWith(root === "/" ? "/" : root + "/");
+function within(path210, root) {
+  return path210 === root || path210.startsWith(root === "/" ? "/" : root + "/");
 }
 function hits(access, paths, directories, context) {
   const home = context.homeDirs?.[0] ?? "~";
@@ -5278,7 +5312,7 @@ function shellWriteUnseen(command, target) {
       );
       const redirs = n.Redirs || [];
       const redirectsTo = redirs.some((r) => r.Word && resolveWordLiteral(r.Word) === target);
-      const readsFromFile = redirs.some((r) => r.Op === RDR_IN && r.Word && !r.Hdoc);
+      const readsFromFile = redirs.some((r) => r.Op === RDR_IN() && r.Word && !r.Hdoc);
       const named = words.includes(target);
       if (!redirectsTo && !named) return true;
       const head = unwrapCommandHead(words);
@@ -6394,14 +6428,14 @@ function mavenGet(words, from, out) {
   push(out, "Maven", "mvn dependency:get", coord, exact, artifact ?? coord);
 }
 function composerPackages(words, from, manager, out) {
-  const ops = operands(words, from, COMPOSER_VALUE_FLAGS);
-  const specs = manager === "composer create-project" ? ops.slice(0, 1) : ops;
+  const ops2 = operands(words, from, COMPOSER_VALUE_FLAGS);
+  const specs = manager === "composer create-project" ? ops2.slice(0, 1) : ops2;
   for (const raw of specs) {
     const sep = raw.search(/[:=]/);
     const name = sep < 0 ? raw : raw.slice(0, sep);
     if (!COMPOSER_NAME_RE.test(name)) continue;
     let ver = sep < 0 ? void 0 : raw.slice(sep + 1);
-    if (manager === "composer create-project" && ver === void 0) ver = ops[2] ?? void 0;
+    if (manager === "composer create-project" && ver === void 0) ver = ops2[2] ?? void 0;
     push(out, "Packagist", manager, name.toLowerCase(), exactVersion(ver), raw);
   }
 }
@@ -7332,9 +7366,9 @@ function bareToolName(toolName) {
   const parts = toolName.split("__");
   return (parts.length >= 3 ? parts.slice(2).join("__") : toolName).toLowerCase();
 }
-function valuesAt(args, path48) {
+function valuesAt(args, path210) {
   let cursors = [args];
-  for (const rawSegment of path48.split(".")) {
+  for (const rawSegment of path210.split(".")) {
     const isArray = rawSegment.endsWith("[]");
     const key = isArray ? rawSegment.slice(0, -2) : rawSegment;
     const next = [];
@@ -7365,8 +7399,8 @@ function extractToolDestinations(toolName, args) {
   try {
     const out = [];
     const paths = DESTINATION_ARGS.get(bareToolName(toolName)) ?? [];
-    for (const path48 of paths) {
-      for (const value of valuesAt(args, path48)) {
+    for (const path210 of paths) {
+      for (const value of valuesAt(args, path210)) {
         const host2 = hostOf(value);
         if (host2) out.push({ host: host2, binary: toolName, raw: value });
       }
@@ -7392,8 +7426,8 @@ function ssrfDestinationFloor(toolName, args, opts = {}) {
   try {
     const paths = DESTINATION_ARGS.get(bareToolName(toolName));
     if (!paths) return null;
-    for (const path48 of paths) {
-      for (const value of valuesAt(args, path48)) {
+    for (const path210 of paths) {
+      for (const value of valuesAt(args, path210)) {
         const host2 = hostOf(value);
         if (!host2) continue;
         const m = classifySsrf(host2);
@@ -7402,7 +7436,7 @@ function ssrfDestinationFloor(toolName, args, opts = {}) {
         const decision = ssrfFloorDecision(m, written, opts);
         if (decision === null) continue;
         const reason = decision === "review" ? ssrfDisguisedReason(m, written) : ssrfReason(m, host2);
-        return { ...m, argPath: path48, host: host2, reason, decision };
+        return { ...m, argPath: path210, host: host2, reason, decision };
       }
     }
     return null;
@@ -9067,10 +9101,13 @@ function matchCanaryArgs(args, values) {
     return null;
   }
 }
-var MAX_REGEX_LENGTH, REGEX_CACHE_MAX, regexCache, aws_default, bash_safe_default, docker_default, filesystem_default, github_default, k8s_default, mongodb_default, postgres_default, project_jail_default, redis_default, finance_default, identity_default, publishing_default, settings_default, branches_default, ACTION_TEMPLATES, ACTION_CHECKS, GAP, prog, httpTo, httpWrite, HTTP_WRITE, HTTP_WRITE_ANY, NOT_STRIPE_TEST, postTo, STRIPE_OBJECTS, APP_SHIELD_SPECS, APP_SHIELDS, APP_SHIELD_NAMES, APP_SERVER_GLOB, GENERAL_ACTION_RULES, BUILTIN_SHIELDS, SSRF_MAX_HOST, METADATA_ADDRESSES, STRICT_TIERS, METADATA_HOSTNAMES, v4Octets, TIER_REASON, CHECK_TEXT, LEVELS, MODE_VALUES, SOFT, STRICT, BLOCK_ALL, LEVEL_CHECKS, VERDICTS, CHECK_VERDICT_RANK, ALL, BUILTIN_DANGEROUS_WORDS, PRODUCT_CHECKS, SHIELD_RULE_NAME, SHIELD_RULES_FOLDED_INTO_PRODUCT, CHECKS, CHECK_BY_ID, LEGACY_TO_ID, PROJECT_JAIL_BLOCK_READ, OVERRIDE_PREFIX, LABEL_WRAPPERS, LEGACY_READERS, syntax, KINDS, STRUCTS, unknownKinds, INVISIBLE_RE, INVISIBLE_ONE, HOMOGLYPHS, HOMOGLYPH_RE, MAX_BLOBS, MIN_DECODED, BASE64_RUN_RE, HEX_RUN_RE, HEX_ESCAPE_RUN_RE, SYSTEM_AUTH_FILES, SYSTEM_AUTH_DIRS, PASSWORD_HASH_FILES, STARTUP_NAMES, SYSTEM_DIRS, SYSTEM_DIRS_EXEMPT, UPLOAD_SYSTEM_DIRS, AGENT_INSTRUCTION_FILES, AGENT_INSTRUCTION_DIRS, LEGACY_SYSTEM_PATH_RE, MAX_INLINE_CODE, WHAT, OUTSIDE, pyImport, either, PYTHON, NODE, PERL, RUBY, PHP, TABLES, STRING_LITERAL, syntax2, sharedParser, MESSAGE_FLAGS, SHELL_INTERPRETERS, DOWNLOAD_CMDS, NORMALIZE_CACHE_MAX, normalizeCache, codeBodiesCache, AST_CACHE_MAX, astCache, PARSE_FAIL, INTERPRETER_LINE, PROGRAM_DIR, ACCESS_VIEW_CACHE_MAX, accessViewCache, MAX_READING_PAYLOADS, STDIN_CODE_INTERPRETERS, RUNS_TEXT_ELSEWHERE, defaultExpansionOps, VARIABLE_READERS, FS_READ_TOOLS, GREP_SHAPE, PATTERN_VERBS, PATTERN_VERB_NAMES, GREP_FILE_OPERANDS, READER_VALUE_LETTERS, FILE_OPERAND_FLAGS, SCP_VALUE_FLAGS, CURL_SOURCE_FLAGS, CURL_VALUE_LETTERS, WGET_VALUE_LETTERS, TAR_VALUE_LETTERS, ZIP_VALUE_LETTERS, RSYNC_VALUE_LETTERS, RSYNC_SKIP, CP_VALUE_LETTERS, INSTALL_VALUE_LETTERS, COPY_VERBS, TAR_MODE_WORD, COPY_VERB_HEADS, FS_OP_PRESCREEN_RE, HOME_CACHE_ALLOWLIST, SENSITIVE_PATH_RULES, AST_FS_REGEX_RULES, SQL_DB_CLIS, SQL_DDL_RE, CHMOD_OPEN_PERM_TOKENS, COMMAND_WRAPPERS, INLINE_INTERPRETER, RUNNER_WRAPPERS, _redirStdinOps, _listOps, WRAPPER_TAKES_TARGET, FIND_EXEC_FLAGS, FS_MUTATION_TOOLS, INTERP_LEADING_TARGET, MAX_PAYLOAD_NESTING, payloadNesting, MAX_INLINE_CALLS, INLINE_EXEC_FALLBACK, UNREADABLE_SOURCE, SCRIPT_RUNNERS, SCRIPT_RUNNER_VALUE_FLAGS, MAX_SCRIPT_OPERANDS, NET_BINARIES, VALUE_FLAGS, HOME_VARIABLES, assignmentTable, currentStmtOffset, PAYLOAD_BUDGET, payloadBudget, seenPayloads, UNANALYSABLE_NESTING, ASSIGNMENT_HEADS, AND_OP, OR_OP, AND_OR_OPS, MAX_CALL_DEPTH, MAX_CALL_WALKS, callDepth, callWalks, FS_OP_CACHE_MAX, fsOpCache, stripDotSlash, REDIR_TRUNCATE_OPS, REDIR_FILE_IN_OPS, REDIR_HEREDOC_OPS, FIND_OPTIONS, COPY_RULE_OF, isReaderWord, positionalAfter, NONE, UNKNOWN, FORBIDDEN_PATH_SEGMENTS, BASH_TOOL_NAMES, MCP_EXECUTORS, BUILTIN_FIELDS, ARGV_FIELDS, BARE_WORD, MAX_ARGV_CHARACTERS, syntax3, MAX_ALTERNATIVES, MAX_CALL_DEPTH2, MAX_CALL_WALKS2, POSITIONAL, MAX_DEPTH, MAX_PAYLOAD_DEPTH, unique, clone, SENDING_STDIN, DOWNLOAD_SHORT_VALUE, DOWNLOAD_LONG_VALUE, DOWNLOAD_OUTPUT_FLAGS, DOWNLOAD_DIR_FLAGS, base, quoteGlob, asWord, WRITES, APPENDS, READS, DUP_OUT, HERE_STRING, AND, OR, DEFAULT_OPS, exempt, RANK, SEQUENCE_OPS, BIP39_ENGLISH, BIP39_PUBLIC_VECTORS, indices, lengths, hash, MAX_MNEMONIC_HASHES, SECRET_VIEW_LIMITS, IBAN_LENGTH, IBAN_BBAN_SHAPE, B58, B58_INDEX, XPRV_VERSIONS, B62, CRC32_TABLE, GITHUB_TOKEN_RE, B64URL, B64URL_INDEX, CASK_TWO_ZERO_SUFFIX, CASK_FOUR_ZERO_SUFFIX, CF_ODD, CF_EVEN, SPANISH_LETTERS, HETU_CHARS, VERHOEFF_D, VERHOEFF_P, MAX, UNTRUSTED_TOOLS, INJECTION_SIGNALS, MENTION_QUOTE_RE, MENTION_WORD_RE, ASSIGNMENT_CONTEXT_RE, DLP_STOPWORDS, REFERENCE_VALUE_RE, IDENTIFIER_VALUE_RE, PATH_VALUE_RE, DOTTED_REFERENCE_RE, CONCATENATION_RE, EMAIL_VALUE_RE, FIXTURE_NAME_RE, DERIVATIVE_NAME_RE, QUERY_CREDENTIAL_VALUE_RE, OTP_SECRET_RE, OTP_DOC_SECRETS, ASSIGNED_SECRET_VALUE_RE, ASSIGNED_SECRET_NAME_RE, NAME_KEYWORD_RE, ARN_CONTEXT_RE, CIPHER_KEY_NAME_RE, CIPHER_NAME_PARTS, CIPHER_KEY_VALUE_RE, LARAVEL_KEY_VALUE_RE, SQL_PASSWORD_VALUE_RE, GRAFANA_KEY_VALUE_RE, BASIC_VALUE_RE, BASIC_PAIR_RE, BASIC_HEADER_RE, BASIC_HEADER_PAIR_RE, BASIC_PLACEHOLDER_RE, BASIC_TEMPLATE_MARKERS, DROPBOX_SECRET_RE, OTP_CAPTURE_RE, DB_URL_PASSWORD_RE, DLP_PATTERNS, DLP_PATTERNS_GLOBAL, SENSITIVE_PATH_PATTERNS, SENSITIVE_PATH_REGEXES, MAX_DEPTH2, MAX_STRING_BYTES, MAX_JSON_PARSE_BYTES, BATCH_SEPARATOR, ENCODED_RUN_RE, IMPERATIVE, SECRET_TARGET, GUARD, SIGNALS, DESTINATION_RE, REUSED_SIGNALS, NEVER_NEGATED, NEGATION_BEFORE, RDR_IN, COPY_VERBS2, LITERAL_VERBS, GIT_PRESCREEN_RE, MAX_PAYLOAD_DEPTH2, MAX_ALIAS_DEPTH, CACHE_MAX, cache, PAYLOAD_SHELLS, CONFIG_SCOPE_FLAGS, CONFIG_VALUE_FLAGS, GLOBAL_VALUE_OPTIONS, GLOBAL_FLAG_OPTIONS, MAX_LOOP_ITEMS, GitWalk, POSITIONAL2, FORCE_PUSH, DESTRUCTIVE, UNREADABLE, PUSH_LONG_VALUE, BRANCH_LONG_VALUE, TAG_LONG_VALUE, CLEAN_LONG_VALUE, HOOKS_BYPASS, NO_VERIFY_SUBS, HOOK_KILL_SWITCHES, COMMIT_LONG_VALUE, CHMOD_OPTION_RE, STAGE_ALL, ADD_LONG_VALUE, CHECK_ID, RULE_NAME, INERT_LINE_RE, CHECK_ID2, INSTRUCTION_NAMES, SETTINGS_RE, HOOK_WORDS_RE, SHELLS, NETCATS, NET_CLIENTS, SENDERS, NETCAT_EXEC_LONG, DECL_DUMPS, PROC_ENVIRON_RE, DEV_NET_RE, SOCAT_PROGRAM_RE, SOCAT_NET_RE, PRESCREEN_RE, MAX_PAYLOAD_DEPTH3, CACHE_MAX2, cache2, dupInOp, REVERSE_SHELL_DESCRIPTION, ENV_EXFIL_DESCRIPTION, DYNAMIC_WORD, MULTICALL, SHELL_VALUE_OPTIONS, INTERPRETERS, OutboundWalk, NPM_INSTALL_VERBS, NPM_EXEC_VERBS, PNPM_INSTALL_VERBS, YARN_INSTALL_VERBS, BUN_INSTALL_VERBS, DLX_VERBS, NON_REGISTRY_RE, NPM_NAME_RE, EXACT_SEMVER_RE, NPM_VALUE_FLAGS, PNPM_VALUE_FLAGS, YARN_VALUE_FLAGS, BUN_VALUE_FLAGS, PIP_VALUE_FLAGS, UV_VALUE_FLAGS, POETRY_VALUE_FLAGS, PIPENV_VALUE_FLAGS, PIPX_VALUE_FLAGS, PY_SPEC_RE, PY_EXACT_RE, EXACT_VERSION_RE, GEM_NAME_RE, GEM_VALUE_FLAGS, BUNDLE_VALUE_FLAGS, CRATE_NAME_RE, CARGO_ADD_VALUE_FLAGS, CARGO_INSTALL_VALUE_FLAGS, GO_VALUE_FLAGS, GO_PATH_RE, NUGET_NAME_RE, DOTNET_ADD_VALUE_FLAGS, DOTNET_TOOL_VALUE_FLAGS, NUGET_VALUE_FLAGS, MAVEN_COORD_RE, COMPOSER_NAME_RE, COMPOSER_VALUE_FLAGS, EDITOR_HEADS, EXTENSION_ID_RE, MANAGER_HEADS, SHELLS2, MAX_NESTING, SHELL_VALUE_FLAGS, NPM_FAMILY, PIP_FAMILY, NPM_FETCH_VERBS, PIP_FETCH_VERBS, NPM_FLAGS, PIP_FLAGS, NPM_VARS, PIP_VARS, PRESCREEN_RE2, PIP_ATTACHED_RE, MAX_PAYLOAD_DEPTH4, PUBLIC_REGISTRY_HOSTS, TUNING_FIELDS, MAP_GOVERNED, KNOB_GOVERNED, CONFIGURABLE_CHECK_IDS, DEFAULT_EGRESS_ALLOWLIST, PRIVATE_HOST_SUFFIXES, SOURCE_COMMANDS, SINK_COMMANDS, OBFUSCATORS, SENSITIVE_PATTERNS, FLAGS_WITH_VALUES, DESTINATION_ARGS, MCP_DESTINATION_KEYS, ARGUMENT_SCAN_LIMITS, RUN_CHAR, runChar, VERDICT_RANK, SQL_DML_KEYWORDS, MAX_DESTINATIONS, MAX_SCAN_CHARS, EMAIL_RE, URL_RE, IBAN_RE, RECIPIENT_KEYS, DESTRUCTIVE_VERB_RE, PII_EMAIL_RE, PII_SSN_RE, PII_PHONE_RE, PII_CC16_RE, PII_CC15_RE, PII_CC14_RE, PII_CC13_RE, PII_CC19_RE, CARD_PATTERNS, PII_ROUTING_RE, ROUTING_LABEL_RE, ROUTING_LABEL_WINDOW, NATIONAL_ID_SHAPES, NATIONAL_ID_LABEL_RE, NATIONAL_ID_LABEL_CS_RE, idLabelIn, NATIONAL_ID_LABEL_WINDOW, NATIONAL_ID_GUARD_RE, PII_IBAN_RE, REALTIME_PII_PATTERNS, MAX_PII_SCAN_BYTES, IBAN_DESTINATION_KEYS, WHOLE_IBAN_RE, JSON_ESCAPE_RE, JSON_ESCAPES, MASKED_KINDS, ENTRY_RE, IBAN_TEXT_RE, EMAIL_TEXT_RE, ACCOUNT_KEY_RE, ACCOUNT_VALUE_RE, MAX_MASK_DEPTH, EMPTY, CURL_SEND_FLAGS, WGET_SEND_FLAGS, IWR_SEND_FLAGS, WRITE_METHODS, GH_READ, GH_WRITE, GH_HOSTNAME_FLAGS, GH_REPO_VALUE_FLAGS, GH_API_VALUE_FLAGS, GIT_FETCH, PUBLISH, SHELLS3, OWN_HEADS, MAX_DEPTH3, CWD_CHANGERS, TERMINAL_ESCAPE_RE, LOOP_MAX_RECORDS, CANARY_MIN_LENGTH, MAX_TEXT, MAX_DEPTH4, MAX_JSON_PARSE, URL_DEPTH, B64_DEPTH, MIN_SEGMENT, SEPARATORS, stripSeparators, looksText, CANARY_DECODERS, VIEWS, LONG_OUTPUT_THRESHOLD_BYTES, CANONICAL_EXTRACTOR_VERSION;
+var getFilename2, __filename2, MAX_REGEX_LENGTH, REGEX_CACHE_MAX, regexCache, aws_default, bash_safe_default, docker_default, filesystem_default, github_default, k8s_default, mongodb_default, postgres_default, project_jail_default, redis_default, finance_default, identity_default, publishing_default, settings_default, branches_default, ACTION_TEMPLATES, ACTION_CHECKS, GAP, prog, httpTo, httpWrite, HTTP_WRITE, HTTP_WRITE_ANY, NOT_STRIPE_TEST, postTo, STRIPE_OBJECTS, APP_SHIELD_SPECS, APP_SHIELDS, APP_SHIELD_NAMES, APP_SERVER_GLOB, GENERAL_ACTION_RULES, BUILTIN_SHIELDS, SSRF_MAX_HOST, METADATA_ADDRESSES, STRICT_TIERS, METADATA_HOSTNAMES, v4Octets, TIER_REASON, CHECK_TEXT, LEVELS, MODE_VALUES, SOFT, STRICT, BLOCK_ALL, LEVEL_CHECKS, VERDICTS, CHECK_VERDICT_RANK, ALL, BUILTIN_DANGEROUS_WORDS, PRODUCT_CHECKS, SHIELD_RULE_NAME, SHIELD_RULES_FOLDED_INTO_PRODUCT, CHECKS, CHECK_BY_ID, LEGACY_TO_ID, PROJECT_JAIL_BLOCK_READ, OVERRIDE_PREFIX, LABEL_WRAPPERS, LEGACY_READERS, syntax, KINDS, STRUCTS, unknownKinds, INVISIBLE_RE, INVISIBLE_ONE, HOMOGLYPHS, HOMOGLYPH_RE, MAX_BLOBS, MIN_DECODED, BASE64_RUN_RE, HEX_RUN_RE, HEX_ESCAPE_RUN_RE, SYSTEM_AUTH_FILES, SYSTEM_AUTH_DIRS, PASSWORD_HASH_FILES, STARTUP_NAMES, SYSTEM_DIRS, SYSTEM_DIRS_EXEMPT, UPLOAD_SYSTEM_DIRS, AGENT_INSTRUCTION_FILES, AGENT_INSTRUCTION_DIRS, LEGACY_SYSTEM_PATH_RE, MAX_INLINE_CODE, WHAT, OUTSIDE, pyImport, either, PYTHON, NODE, PERL, RUBY, PHP, TABLES, STRING_LITERAL, sharedParser, MESSAGE_FLAGS, SHELL_INTERPRETERS, DOWNLOAD_CMDS, NORMALIZE_CACHE_MAX, normalizeCache, codeBodiesCache, AST_CACHE_MAX, astCache, PARSE_FAIL, INTERPRETER_LINE, PROGRAM_DIR, ACCESS_VIEW_CACHE_MAX, accessViewCache, MAX_READING_PAYLOADS, STDIN_CODE_INTERPRETERS, RUNS_TEXT_ELSEWHERE, defaultExpansionOps, VARIABLE_READERS, FS_READ_TOOLS, GREP_SHAPE, PATTERN_VERBS, PATTERN_VERB_NAMES, GREP_FILE_OPERANDS, READER_VALUE_LETTERS, FILE_OPERAND_FLAGS, SCP_VALUE_FLAGS, CURL_SOURCE_FLAGS, CURL_VALUE_LETTERS, WGET_VALUE_LETTERS, TAR_VALUE_LETTERS, ZIP_VALUE_LETTERS, RSYNC_VALUE_LETTERS, RSYNC_SKIP, CP_VALUE_LETTERS, INSTALL_VALUE_LETTERS, COPY_VERBS, TAR_MODE_WORD, COPY_VERB_HEADS, FS_OP_PRESCREEN_RE, HOME_CACHE_ALLOWLIST, SENSITIVE_PATH_RULES, AST_FS_REGEX_RULES, SQL_DB_CLIS, SQL_DDL_RE, CHMOD_OPEN_PERM_TOKENS, COMMAND_WRAPPERS, INLINE_INTERPRETER, RUNNER_WRAPPERS, _redirStdinOps, _listOps, WRAPPER_TAKES_TARGET, FIND_EXEC_FLAGS, FS_MUTATION_TOOLS, INTERP_LEADING_TARGET, MAX_PAYLOAD_NESTING, payloadNesting, MAX_INLINE_CALLS, INLINE_EXEC_FALLBACK, UNREADABLE_SOURCE, SCRIPT_RUNNERS, SCRIPT_RUNNER_VALUE_FLAGS, MAX_SCRIPT_OPERANDS, NET_BINARIES, VALUE_FLAGS, HOME_VARIABLES, assignmentTable, currentStmtOffset, PAYLOAD_BUDGET, payloadBudget, seenPayloads, UNANALYSABLE_NESTING, ASSIGNMENT_HEADS, andOrOps, MAX_CALL_DEPTH, MAX_CALL_WALKS, callDepth, callWalks, FS_OP_CACHE_MAX, fsOpCache, stripDotSlash, REDIR_TRUNCATE_OPS, REDIR_FILE_IN_OPS, REDIR_HEREDOC_OPS, FIND_OPTIONS, COPY_RULE_OF, isReaderWord, positionalAfter, NONE, UNKNOWN, FORBIDDEN_PATH_SEGMENTS, BASH_TOOL_NAMES, MCP_EXECUTORS, BUILTIN_FIELDS, ARGV_FIELDS, BARE_WORD, MAX_ARGV_CHARACTERS, MAX_ALTERNATIVES, MAX_CALL_DEPTH2, MAX_CALL_WALKS2, POSITIONAL, MAX_DEPTH, MAX_PAYLOAD_DEPTH, unique, clone, SENDING_STDIN, DOWNLOAD_SHORT_VALUE, DOWNLOAD_LONG_VALUE, DOWNLOAD_OUTPUT_FLAGS, DOWNLOAD_DIR_FLAGS, base, quoteGlob, asWord, ops, exempt, RANK, SEQUENCE_OPS, BIP39_ENGLISH, BIP39_PUBLIC_VECTORS, indices, lengths, hash, MAX_MNEMONIC_HASHES, SECRET_VIEW_LIMITS, IBAN_LENGTH, IBAN_BBAN_SHAPE, B58, B58_INDEX, XPRV_VERSIONS, B62, CRC32_TABLE, GITHUB_TOKEN_RE, B64URL, B64URL_INDEX, CASK_TWO_ZERO_SUFFIX, CASK_FOUR_ZERO_SUFFIX, CF_ODD, CF_EVEN, SPANISH_LETTERS, HETU_CHARS, VERHOEFF_D, VERHOEFF_P, MAX, UNTRUSTED_TOOLS, INJECTION_SIGNALS, MENTION_QUOTE_RE, MENTION_WORD_RE, ASSIGNMENT_CONTEXT_RE, DLP_STOPWORDS, REFERENCE_VALUE_RE, IDENTIFIER_VALUE_RE, PATH_VALUE_RE, DOTTED_REFERENCE_RE, CONCATENATION_RE, EMAIL_VALUE_RE, FIXTURE_NAME_RE, DERIVATIVE_NAME_RE, QUERY_CREDENTIAL_VALUE_RE, OTP_SECRET_RE, OTP_DOC_SECRETS, ASSIGNED_SECRET_VALUE_RE, ASSIGNED_SECRET_NAME_RE, NAME_KEYWORD_RE, ARN_CONTEXT_RE, CIPHER_KEY_NAME_RE, CIPHER_NAME_PARTS, CIPHER_KEY_VALUE_RE, LARAVEL_KEY_VALUE_RE, SQL_PASSWORD_VALUE_RE, GRAFANA_KEY_VALUE_RE, BASIC_VALUE_RE, BASIC_PAIR_RE, BASIC_HEADER_RE, BASIC_HEADER_PAIR_RE, BASIC_PLACEHOLDER_RE, BASIC_TEMPLATE_MARKERS, DROPBOX_SECRET_RE, OTP_CAPTURE_RE, DB_URL_PASSWORD_RE, DLP_PATTERNS, DLP_PATTERNS_GLOBAL, SENSITIVE_PATH_PATTERNS, SENSITIVE_PATH_REGEXES, MAX_DEPTH2, MAX_STRING_BYTES, MAX_JSON_PARSE_BYTES, BATCH_SEPARATOR, ENCODED_RUN_RE, IMPERATIVE, SECRET_TARGET, GUARD, SIGNALS, DESTINATION_RE, REUSED_SIGNALS, NEVER_NEGATED, NEGATION_BEFORE, RDR_IN, COPY_VERBS2, LITERAL_VERBS, GIT_PRESCREEN_RE, MAX_PAYLOAD_DEPTH2, MAX_ALIAS_DEPTH, CACHE_MAX, cache, PAYLOAD_SHELLS, CONFIG_SCOPE_FLAGS, CONFIG_VALUE_FLAGS, GLOBAL_VALUE_OPTIONS, GLOBAL_FLAG_OPTIONS, MAX_LOOP_ITEMS, GitWalk, POSITIONAL2, FORCE_PUSH, DESTRUCTIVE, UNREADABLE, PUSH_LONG_VALUE, BRANCH_LONG_VALUE, TAG_LONG_VALUE, CLEAN_LONG_VALUE, HOOKS_BYPASS, NO_VERIFY_SUBS, HOOK_KILL_SWITCHES, COMMIT_LONG_VALUE, CHMOD_OPTION_RE, STAGE_ALL, ADD_LONG_VALUE, CHECK_ID, RULE_NAME, INERT_LINE_RE, CHECK_ID2, INSTRUCTION_NAMES, SETTINGS_RE, HOOK_WORDS_RE, SHELLS, NETCATS, NET_CLIENTS, SENDERS, NETCAT_EXEC_LONG, DECL_DUMPS, PROC_ENVIRON_RE, DEV_NET_RE, SOCAT_PROGRAM_RE, SOCAT_NET_RE, PRESCREEN_RE, MAX_PAYLOAD_DEPTH3, CACHE_MAX2, cache2, dupInOp, REVERSE_SHELL_DESCRIPTION, ENV_EXFIL_DESCRIPTION, DYNAMIC_WORD, MULTICALL, SHELL_VALUE_OPTIONS, INTERPRETERS, OutboundWalk, NPM_INSTALL_VERBS, NPM_EXEC_VERBS, PNPM_INSTALL_VERBS, YARN_INSTALL_VERBS, BUN_INSTALL_VERBS, DLX_VERBS, NON_REGISTRY_RE, NPM_NAME_RE, EXACT_SEMVER_RE, NPM_VALUE_FLAGS, PNPM_VALUE_FLAGS, YARN_VALUE_FLAGS, BUN_VALUE_FLAGS, PIP_VALUE_FLAGS, UV_VALUE_FLAGS, POETRY_VALUE_FLAGS, PIPENV_VALUE_FLAGS, PIPX_VALUE_FLAGS, PY_SPEC_RE, PY_EXACT_RE, EXACT_VERSION_RE, GEM_NAME_RE, GEM_VALUE_FLAGS, BUNDLE_VALUE_FLAGS, CRATE_NAME_RE, CARGO_ADD_VALUE_FLAGS, CARGO_INSTALL_VALUE_FLAGS, GO_VALUE_FLAGS, GO_PATH_RE, NUGET_NAME_RE, DOTNET_ADD_VALUE_FLAGS, DOTNET_TOOL_VALUE_FLAGS, NUGET_VALUE_FLAGS, MAVEN_COORD_RE, COMPOSER_NAME_RE, COMPOSER_VALUE_FLAGS, EDITOR_HEADS, EXTENSION_ID_RE, MANAGER_HEADS, SHELLS2, MAX_NESTING, SHELL_VALUE_FLAGS, NPM_FAMILY, PIP_FAMILY, NPM_FETCH_VERBS, PIP_FETCH_VERBS, NPM_FLAGS, PIP_FLAGS, NPM_VARS, PIP_VARS, PRESCREEN_RE2, PIP_ATTACHED_RE, MAX_PAYLOAD_DEPTH4, PUBLIC_REGISTRY_HOSTS, TUNING_FIELDS, MAP_GOVERNED, KNOB_GOVERNED, CONFIGURABLE_CHECK_IDS, DEFAULT_EGRESS_ALLOWLIST, PRIVATE_HOST_SUFFIXES, SOURCE_COMMANDS, SINK_COMMANDS, OBFUSCATORS, SENSITIVE_PATTERNS, FLAGS_WITH_VALUES, DESTINATION_ARGS, MCP_DESTINATION_KEYS, ARGUMENT_SCAN_LIMITS, RUN_CHAR, runChar, VERDICT_RANK, SQL_DML_KEYWORDS, MAX_DESTINATIONS, MAX_SCAN_CHARS, EMAIL_RE, URL_RE, IBAN_RE, RECIPIENT_KEYS, DESTRUCTIVE_VERB_RE, PII_EMAIL_RE, PII_SSN_RE, PII_PHONE_RE, PII_CC16_RE, PII_CC15_RE, PII_CC14_RE, PII_CC13_RE, PII_CC19_RE, CARD_PATTERNS, PII_ROUTING_RE, ROUTING_LABEL_RE, ROUTING_LABEL_WINDOW, NATIONAL_ID_SHAPES, NATIONAL_ID_LABEL_RE, NATIONAL_ID_LABEL_CS_RE, idLabelIn, NATIONAL_ID_LABEL_WINDOW, NATIONAL_ID_GUARD_RE, PII_IBAN_RE, REALTIME_PII_PATTERNS, MAX_PII_SCAN_BYTES, IBAN_DESTINATION_KEYS, WHOLE_IBAN_RE, JSON_ESCAPE_RE, JSON_ESCAPES, MASKED_KINDS, ENTRY_RE, IBAN_TEXT_RE, EMAIL_TEXT_RE, ACCOUNT_KEY_RE, ACCOUNT_VALUE_RE, MAX_MASK_DEPTH, EMPTY, CURL_SEND_FLAGS, WGET_SEND_FLAGS, IWR_SEND_FLAGS, WRITE_METHODS, GH_READ, GH_WRITE, GH_HOSTNAME_FLAGS, GH_REPO_VALUE_FLAGS, GH_API_VALUE_FLAGS, GIT_FETCH, PUBLISH, SHELLS3, OWN_HEADS, MAX_DEPTH3, CWD_CHANGERS, TERMINAL_ESCAPE_RE, LOOP_MAX_RECORDS, CANARY_MIN_LENGTH, MAX_TEXT, MAX_DEPTH4, MAX_JSON_PARSE, URL_DEPTH, B64_DEPTH, MIN_SEGMENT, SEPARATORS, stripSeparators, looksText, CANARY_DECODERS, VIEWS, LONG_OUTPUT_THRESHOLD_BYTES, CANONICAL_EXTRACTOR_VERSION;
 var init_dist = __esm({
   "packages/policy-engine/dist/index.mjs"() {
     "use strict";
+    init_esm_shims();
+    getFilename2 = () => fileURLToPath2(import.meta.url);
+    __filename2 = /* @__PURE__ */ getFilename2();
     MAX_REGEX_LENGTH = 256;
     REGEX_CACHE_MAX = 500;
     regexCache = /* @__PURE__ */ new Map();
@@ -11715,7 +11752,7 @@ var init_dist = __esm({
         return s.untrustedContent.afterExposure === "log-only" ? "log" : "review";
       }
     };
-    ({ syntax } = mvdanSh);
+    syntax = null;
     KINDS = {
       File: { nodes: ["Stmts"] },
       Stmt: { nodes: ["Cmd", "Redirs"], scalars: ["Negated", "Background", "Coprocess"] },
@@ -12055,8 +12092,7 @@ var init_dist = __esm({
       php: PHP
     };
     STRING_LITERAL = /(['"`])((?:\\.|(?!\1)[^\\\n]){1,4096})\1/g;
-    ({ syntax: syntax2 } = mvdanSh2);
-    sharedParser = syntax2.NewParser();
+    sharedParser = lazy(() => getSyntax().NewParser());
     MESSAGE_FLAGS = /* @__PURE__ */ new Set([
       "-m",
       "--message",
@@ -13021,9 +13057,14 @@ var init_dist = __esm({
       path: ""
     };
     ASSIGNMENT_HEADS = /* @__PURE__ */ new Set(["export", "declare", "local", "readonly", "typeset"]);
-    AND_OP = probeBinOp("a && b");
-    OR_OP = probeBinOp("a || b");
-    AND_OR_OPS = new Set([AND_OP, OR_OP].filter((o) => o !== null));
+    andOrOps = lazy(() => {
+      const and = probeBinOp("a && b");
+      const or = probeBinOp("a || b");
+      return {
+        AND_OP: and,
+        AND_OR_OPS: new Set([and, or].filter((o) => o !== null))
+      };
+    });
     MAX_CALL_DEPTH = 4;
     MAX_CALL_WALKS = 256;
     callDepth = 0;
@@ -13031,14 +13072,13 @@ var init_dist = __esm({
     FS_OP_CACHE_MAX = 5e3;
     fsOpCache = /* @__PURE__ */ new Map();
     stripDotSlash = (p) => p.replace(/^\.\//, "");
-    REDIR_TRUNCATE_OPS = /* @__PURE__ */ new Set([deriveRedirOp(">_f")]);
-    REDIR_FILE_IN_OPS = new Set(
-      [deriveRedirOp("cat < f"), deriveRedirOp("cat <> f")].filter((op) => op >= 0)
+    REDIR_TRUNCATE_OPS = lazy(() => /* @__PURE__ */ new Set([deriveRedirOp(">_f")]));
+    REDIR_FILE_IN_OPS = lazy(
+      () => new Set([deriveRedirOp("cat < f"), deriveRedirOp("cat <> f")].filter((op) => op >= 0))
+    );
+    REDIR_HEREDOC_OPS = lazy(
+      () => /* @__PURE__ */ new Set([deriveRedirOp("cat <<X\nX"), deriveRedirOp("cat <<-X\nX")])
     );
-    REDIR_HEREDOC_OPS = /* @__PURE__ */ new Set([
-      deriveRedirOp("cat <<X\nX"),
-      deriveRedirOp("cat <<-X\nX")
-    ]);
     FIND_OPTIONS = /* @__PURE__ */ new Set(["-H", "-L", "-P"]);
     COPY_RULE_OF = {
       "shield:project-jail:block-read-ssh": "shield:project-jail:review-copy-ssh",
@@ -13075,7 +13115,6 @@ var init_dist = __esm({
     ARGV_FIELDS = ["args", "argv"];
     BARE_WORD = /^[A-Za-z0-9_./+:@%,-]+$/;
     MAX_ARGV_CHARACTERS = 262144;
-    ({ syntax: syntax3 } = mvdanSh3);
     MAX_ALTERNATIVES = 64;
     MAX_CALL_DEPTH2 = 4;
     MAX_CALL_WALKS2 = 256;
@@ -13153,31 +13192,35 @@ var init_dist = __esm({
     base = (s) => (s ?? "").replace(/\/+$/, "").split("/").pop() ?? "";
     quoteGlob = (s) => s.replace(/[\\*?\[\]{}()!+@]/g, "\\$&");
     asWord = (p) => ({ value: p.value, ...p.glob ? { pattern: p.pattern } : {} });
-    WRITES = new Set([">x", ">>x", ">|x", "&>x", "&>>x", "<>x"].map(opOf));
-    APPENDS = new Set([">>x", "&>>x"].map(opOf));
-    READS = new Set(["<x", "<>x"].map(opOf));
-    DUP_OUT = opOf(">&x");
-    HERE_STRING = opOf("<<<x");
-    AND = parseShared("a && b").Stmts[0].Cmd.Op;
-    OR = parseShared("a || b").Stmts[0].Cmd.Op;
-    DEFAULT_OPS = new Set(
-      ["${x:-y}", "${x-y}", "${x:=y}", "${x=y}"].map(
-        (s) => parseShared(`echo ${s}`).Stmts[0].Cmd.Args[1].Parts[0].Exp.Op
+    ops = lazy(() => ({
+      WRITES: new Set([">x", ">>x", ">|x", "&>x", "&>>x", "<>x"].map(opOf)),
+      APPENDS: new Set([">>x", "&>>x"].map(opOf)),
+      READS: new Set(["<x", "<>x"].map(opOf)),
+      /** `>&word` with a non-numeric word is `&>word` in bash. */
+      DUP_OUT: opOf(">&x"),
+      HERE_STRING: opOf("<<<x"),
+      AND: parseShared("a && b").Stmts[0].Cmd.Op,
+      OR: parseShared("a || b").Stmts[0].Cmd.Op,
+      /** `${x:-d}` `${x-d}` `${x:=d}` `${x=d}`: the default is the value when x is unset. */
+      DEFAULT_OPS: new Set(
+        ["${x:-y}", "${x-y}", "${x:=y}", "${x=y}"].map(
+          (s) => parseShared(`echo ${s}`).Stmts[0].Cmd.Args[1].Parts[0].Exp.Op
+        )
       )
-    );
+    }));
     exempt = (p) => SYSTEM_DIRS_EXEMPT.some((d) => within(p, d));
     RANK = { allow: 0, review: 1, block: 2 };
-    SEQUENCE_OPS = (() => {
-      const ops = /* @__PURE__ */ new Set();
+    SEQUENCE_OPS = lazy(() => {
+      const ops2 = /* @__PURE__ */ new Set();
       for (const text of ["x && y", "x || y"]) {
         try {
           const f = parseShared(text);
-          if (typeof f !== "symbol") ops.add(f.Stmts[0].Cmd.Op);
+          if (typeof f !== "symbol") ops2.add(f.Stmts[0].Cmd.Op);
         } catch {
         }
       }
-      return ops;
-    })();
+      return ops2;
+    });
     BIP39_ENGLISH = `abandon
 ability
 able
@@ -16328,13 +16371,13 @@ zoo`.split("\n");
     );
     NEVER_NEGATED = /* @__PURE__ */ new Set([SIGNALS[1].any[0]]);
     NEGATION_BEFORE = /\b(never|do not|don'?t|must not|mustn'?t|should not|shouldn'?t|not allowed to|forbidden to|avoid|without|no|not)\b[^.!?;:\n]{0,24}$/i;
-    RDR_IN = (() => {
+    RDR_IN = lazy(() => {
       try {
         return parseShared("x <y").Stmts[0].Redirs[0].Op;
       } catch {
         return null;
       }
-    })();
+    });
     COPY_VERBS2 = /* @__PURE__ */ new Set([
       "cp",
       "mv",
@@ -18163,7 +18206,7 @@ __export(audit_exports, {
   truncateAuditPreview: () => truncateAuditPreview
 });
 import fs from "fs";
-import path from "path";
+import path2 from "path";
 import os from "os";
 import crypto2 from "crypto";
 function generateEventId() {
@@ -18210,7 +18253,7 @@ function truncateAuditPreview(text) {
 function appendToLog(logPath, entry) {
   if (forecastRun()) return;
   try {
-    const dir2 = path.dirname(logPath);
+    const dir2 = path2.dirname(logPath);
     if (!fs.existsSync(dir2)) fs.mkdirSync(dir2, { recursive: true });
     fs.appendFileSync(logPath, JSON.stringify(entry) + "\n");
   } catch {
@@ -18289,7 +18332,7 @@ function appendLocalAudit(toolName, args, decision, checkedBy, meta, auditHashAr
   } : {};
   const cloudLinkField = meta?.cloudRequestId ? { cloudRequestId: meta.cloudRequestId } : {};
   const workingDirField = meta?.workingDir ? { workingDir: meta.workingDir } : {};
-  const shell = process.env.SHELL ? path.basename(process.env.SHELL) : void 0;
+  const shell = process.env.SHELL ? path2.basename(process.env.SHELL) : void 0;
   const shellTypeField = shell ? { shellType: shell } : {};
   const editFilePath = filePathFromArgs(args);
   const editFilePathField = editFilePath ? { editFilePath } : {};
@@ -18349,18 +18392,19 @@ var LOCAL_AUDIT_LOG, HOOK_DEBUG_LOG, TEST_COMMAND_RE;
 var init_audit = __esm({
   "src/audit/index.ts"() {
     "use strict";
+    init_esm_shims();
     init_hasher();
     init_forecast_context();
     init_dist();
-    LOCAL_AUDIT_LOG = path.join(os.homedir(), ".node9", "audit.log");
-    HOOK_DEBUG_LOG = path.join(os.homedir(), ".node9", "hook-debug.log");
+    LOCAL_AUDIT_LOG = path2.join(os.homedir(), ".node9", "audit.log");
+    HOOK_DEBUG_LOG = path2.join(os.homedir(), ".node9", "hook-debug.log");
     TEST_COMMAND_RE = /(?:^|\s)(npm\s+(?:run\s+)?test|npx\s+(?:vitest|jest|mocha)|yarn\s+(?:run\s+)?test|pnpm\s+(?:run\s+)?test|vitest|jest|mocha|pytest|py\.test|cargo\s+test|go\s+test|bundle\s+exec\s+rspec|rspec|phpunit|dotnet\s+test)\b/i;
   }
 });
 
 // src/pricing/litellm.ts
 import fs2 from "fs";
-import path2 from "path";
+import path3 from "path";
 import os2 from "os";
 function normalizeModel(raw) {
   return raw.replace(/-\d{8}$/, "").toLowerCase();
@@ -18382,7 +18426,7 @@ function readCache(opts) {
 function writeCache(prices) {
   try {
     const target = CACHE_FILE();
-    const dir2 = path2.dirname(target);
+    const dir2 = path3.dirname(target);
     if (!fs2.existsSync(dir2)) fs2.mkdirSync(dir2, { recursive: true });
     const tmp = target + ".tmp";
     const body = {
@@ -18500,6 +18544,7 @@ var LITELLM_URL, BUNDLED_PRICING, CACHE_FILE, TTL_MS, memCache, memCacheAt, disk
 var init_litellm = __esm({
   "src/pricing/litellm.ts"() {
     "use strict";
+    init_esm_shims();
     init_audit();
     LITELLM_URL = "https://raw.githubusercontent.com/BerriAI/litellm/main/model_prices_and_context_window.json";
     BUNDLED_PRICING = {
@@ -18551,7 +18596,7 @@ var init_litellm = __esm({
       "gemini-2.0-flash": [75e-9, 3e-7, 0, 0],
       "gemini-1.5-pro": [125e-8, 5e-6, 0, 0]
     };
-    CACHE_FILE = () => path2.join(os2.homedir(), ".node9", "model-pricing.json");
+    CACHE_FILE = () => path3.join(os2.homedir(), ".node9", "model-pricing.json");
     TTL_MS = 24 * 60 * 60 * 1e3;
     memCache = null;
     memCacheAt = 0;
@@ -18563,9 +18608,9 @@ var init_litellm = __esm({
 // src/cost-codex.ts
 import fs3 from "fs";
 import os3 from "os";
-import path3 from "path";
+import path4 from "path";
 function codexSessionsDir() {
-  return path3.join(process.env.CODEX_HOME?.trim() || path3.join(os3.homedir(), ".codex"), "sessions");
+  return path4.join(process.env.CODEX_HOME?.trim() || path4.join(os3.homedir(), ".codex"), "sessions");
 }
 function codexPriceFor(model) {
   return pricingFor(codexModel(model), { exact: true }) ?? CODEX_FALLBACK;
@@ -18621,7 +18666,7 @@ function listCodexSessionFiles(base2 = codexSessionsDir()) {
   const walk3 = (dir2) => {
     try {
       for (const entry of fs3.readdirSync(dir2, { withFileTypes: true })) {
-        const file2 = path3.join(dir2, entry.name);
+        const file2 = path4.join(dir2, entry.name);
         if (entry.isDirectory()) walk3(file2);
         else if (entry.isFile() && entry.name.endsWith(".jsonl")) files.push(file2);
       }
@@ -18629,7 +18674,7 @@ function listCodexSessionFiles(base2 = codexSessionsDir()) {
     }
   };
   walk3(base2);
-  if (path3.basename(base2) === "sessions") walk3(path3.join(path3.dirname(base2), "archived_sessions"));
+  if (path4.basename(base2) === "sessions") walk3(path4.join(path4.dirname(base2), "archived_sessions"));
   const sessions = /* @__PURE__ */ new Map();
   for (const file2 of files.sort()) {
     try {
@@ -18779,6 +18824,7 @@ var CODEX_FALLBACK;
 var init_cost_codex = __esm({
   "src/cost-codex.ts"() {
     "use strict";
+    init_esm_shims();
     init_litellm();
     CODEX_FALLBACK = [5e-6, 15e-6, 0, 25e-7];
   }
@@ -18786,17 +18832,17 @@ var init_cost_codex = __esm({
 
 // src/dlp.ts
 import fs4 from "fs";
-import path4 from "path";
+import path5 from "path";
 function scanFilePath(filePath, cwd = process.cwd(), options = {}) {
   if (!filePath) return null;
   let resolved;
   try {
-    const absolute2 = path4.resolve(cwd, filePath);
+    const absolute2 = path5.resolve(cwd, filePath);
     resolved = fs4.realpathSync.native(absolute2);
   } catch (err) {
     const code = err.code;
     if (code === "ENOENT" || code === "ENOTDIR") {
-      resolved = path4.resolve(cwd, filePath);
+      resolved = path5.resolve(cwd, filePath);
     } else {
       return sensitivePathMatch(filePath);
     }
@@ -18806,16 +18852,17 @@ function scanFilePath(filePath, cwd = process.cwd(), options = {}) {
 var init_dlp = __esm({
   "src/dlp.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
     init_dist();
   }
 });
 
 // src/credential-files.ts
-import path5 from "path";
+import path6 from "path";
 function homeCredentialFiles(home) {
   const f = (parts, description, score, kind = "credential") => ({
-    full: path5.join(home, ...parts),
+    full: path6.join(home, ...parts),
     label: "~/" + parts.join("/"),
     description,
     score,
@@ -18842,6 +18889,7 @@ function homeCredentialFiles(home) {
 var init_credential_files = __esm({
   "src/credential-files.ts"() {
     "use strict";
+    init_esm_shims();
   }
 });
 
@@ -18849,6 +18897,7 @@ var init_credential_files = __esm({
 var init_mcp_cmd = __esm({
   "src/mcp-cmd.ts"() {
     "use strict";
+    init_esm_shims();
   }
 });
 
@@ -18856,6 +18905,7 @@ var init_mcp_cmd = __esm({
 var init_mcp_pin = __esm({
   "src/mcp-pin.ts"() {
     "use strict";
+    init_esm_shims();
   }
 });
 
@@ -18864,6 +18914,7 @@ import { parse as parseToml, stringify as stringifyToml } from "smol-toml";
 var init_mcp_wrap = __esm({
   "src/mcp-wrap.ts"() {
     "use strict";
+    init_esm_shims();
     init_agent_wiring();
     init_mcp_cmd();
     init_mcp_pin();
@@ -18875,6 +18926,7 @@ var init_mcp_wrap = __esm({
 var init_platform_shell = __esm({
   "src/utils/platform-shell.ts"() {
     "use strict";
+    init_esm_shims();
   }
 });
 
@@ -18883,6 +18935,7 @@ import { parse as parseToml2 } from "smol-toml";
 var init_codex_app_server = __esm({
   "src/codex-app-server.ts"() {
     "use strict";
+    init_esm_shims();
   }
 });
 
@@ -18891,20 +18944,22 @@ import { parse as parseToml3 } from "smol-toml";
 var init_codex_trust = __esm({
   "src/codex-trust.ts"() {
     "use strict";
+    init_esm_shims();
     init_platform_shell();
     init_codex_app_server();
   }
 });
 
 // src/daemon/hook-baseline.ts
-import path6 from "path";
+import path7 from "path";
 import os4 from "os";
 var BASELINE_FILE, NOTIFIED_FILE;
 var init_hook_baseline = __esm({
   "src/daemon/hook-baseline.ts"() {
     "use strict";
-    BASELINE_FILE = path6.join(os4.homedir(), ".node9", "hooks-baseline.json");
-    NOTIFIED_FILE = path6.join(os4.homedir(), ".node9", "hook-heal-notified.json");
+    init_esm_shims();
+    BASELINE_FILE = path7.join(os4.homedir(), ".node9", "hooks-baseline.json");
+    NOTIFIED_FILE = path7.join(os4.homedir(), ".node9", "hook-heal-notified.json");
   }
 });
 
@@ -18912,6 +18967,7 @@ var init_hook_baseline = __esm({
 var init_setup_opencode_shim = __esm({
   "src/setup-opencode-shim.ts"() {
     "use strict";
+    init_esm_shims();
   }
 });
 
@@ -18919,15 +18975,16 @@ var init_setup_opencode_shim = __esm({
 var init_setup_pi_shim = __esm({
   "src/setup-pi-shim.ts"() {
     "use strict";
+    init_esm_shims();
   }
 });
 
 // src/utils/atomic-write.ts
 import fs5 from "fs";
-import path7 from "path";
+import path8 from "path";
 import { randomUUID } from "crypto";
 function atomicWriteSync(filePath, data, options) {
-  const dir2 = path7.dirname(filePath);
+  const dir2 = path8.dirname(filePath);
   if (!fs5.existsSync(dir2)) fs5.mkdirSync(dir2, { recursive: true });
   const tmpPath = `${filePath}.${randomUUID()}.tmp`;
   try {
@@ -18952,12 +19009,13 @@ function atomicWriteSync(filePath, data, options) {
 var init_atomic_write = __esm({
   "src/utils/atomic-write.ts"() {
     "use strict";
+    init_esm_shims();
   }
 });
 
 // src/setup.ts
 import fs6 from "fs";
-import path8 from "path";
+import path9 from "path";
 import os5 from "os";
 import chalk from "chalk";
 import { confirm as rawConfirm } from "@inquirer/prompts";
@@ -18973,7 +19031,7 @@ function isNode9Hook(cmd) {
 }
 function claudeDesktopConfigPath(homeDir = os5.homedir()) {
   if (process.platform === "darwin") {
-    return path8.join(
+    return path9.join(
       homeDir,
       "Library",
       "Application Support",
@@ -18982,37 +19040,37 @@ function claudeDesktopConfigPath(homeDir = os5.homedir()) {
     );
   }
   if (process.platform === "linux") {
-    return path8.join(homeDir, ".config", "Claude", "claude_desktop_config.json");
+    return path9.join(homeDir, ".config", "Claude", "claude_desktop_config.json");
   }
   if (process.platform === "win32") {
-    const appData = process.env.APPDATA || path8.join(homeDir, "AppData", "Roaming");
-    return path8.join(appData, "Claude", "claude_desktop_config.json");
+    const appData = process.env.APPDATA || path9.join(homeDir, "AppData", "Roaming");
+    return path9.join(appData, "Claude", "claude_desktop_config.json");
   }
   return null;
 }
 function opencodeConfigDir(home = os5.homedir()) {
   const xdg = process.env.XDG_CONFIG_HOME;
-  const base2 = xdg && path8.isAbsolute(xdg) ? xdg : path8.join(home, ".config");
-  return path8.join(base2, "opencode");
+  const base2 = xdg && path9.isAbsolute(xdg) ? xdg : path9.join(home, ".config");
+  return path9.join(base2, "opencode");
 }
 function commonBinDirs(home) {
   return [
-    path8.join(home, ".local", "bin"),
-    path8.join(home, ".bun", "bin"),
-    path8.join(home, ".npm-global", "bin"),
+    path9.join(home, ".local", "bin"),
+    path9.join(home, ".bun", "bin"),
+    path9.join(home, ".npm-global", "bin"),
     "/usr/local/bin",
     "/opt/homebrew/bin"
   ];
 }
 function binaryInPath(binary, home = os5.homedir()) {
   const pathEnv = process.env.PATH ?? "";
-  const dirs = [...pathEnv.split(path8.delimiter), ...commonBinDirs(home)];
+  const dirs = [...pathEnv.split(path9.delimiter), ...commonBinDirs(home)];
   const seen = /* @__PURE__ */ new Set();
   for (const dir2 of dirs) {
     if (!dir2 || seen.has(dir2)) continue;
     seen.add(dir2);
     try {
-      fs6.accessSync(path8.join(dir2, binary), fs6.constants.X_OK);
+      fs6.accessSync(path9.join(dir2, binary), fs6.constants.X_OK);
       return true;
     } catch {
     }
@@ -19034,7 +19092,7 @@ function detectAgents(homeDir = os5.homedir()) {
   };
   const desktopPath = claudeDesktopConfigPath(homeDir);
   return {
-    claude: exists2(path8.join(homeDir, ".claude")) || exists2(path8.join(homeDir, ".claude.json")),
+    claude: exists2(path9.join(homeDir, ".claude")) || exists2(path9.join(homeDir, ".claude.json")),
     // Antigravity (agy) shares the ~/.gemini root, so a bare
     // `exists(~/.gemini)` would report the (EOL'd) Gemini CLI as
     // installed on every agy machine — and `node9 init` would then
@@ -19044,19 +19102,19 @@ function detectAgents(homeDir = os5.homedir()) {
     // creates ~/.gemini/settings.json on first run; agy does not touch
     // it (it uses antigravity-cli/settings.json) — that file is the
     // legacy-CLI discriminator.
-    gemini: exists2(path8.join(homeDir, ".gemini", "settings.json")) || binaryInPath("gemini", homeDir),
+    gemini: exists2(path9.join(homeDir, ".gemini", "settings.json")) || binaryInPath("gemini", homeDir),
     // agy creates ~/.gemini/antigravity-cli/ on first launch; the IDE
     // creates antigravity-ide/. PATH fallback covers installed-but-
     // never-launched (same class as opencode #186).
-    antigravity: exists2(path8.join(homeDir, ".gemini", "antigravity-cli")) || exists2(path8.join(homeDir, ".gemini", "antigravity-ide")) || binaryInPath("agy", homeDir),
+    antigravity: exists2(path9.join(homeDir, ".gemini", "antigravity-cli")) || exists2(path9.join(homeDir, ".gemini", "antigravity-ide")) || binaryInPath("agy", homeDir),
     // GitHub Copilot CLI creates ~/.copilot on first launch; PATH
     // fallback covers installed-but-never-launched (same as opencode #186).
-    copilot: exists2(path8.join(homeDir, ".copilot")) || binaryInPath("copilot", homeDir),
-    cursor: exists2(path8.join(homeDir, ".cursor")),
-    codex: exists2(path8.join(homeDir, ".codex")),
-    windsurf: exists2(path8.join(homeDir, ".codeium", "windsurf")),
-    vscode: exists2(path8.join(homeDir, ".vscode")),
-    claudeDesktop: desktopPath !== null && exists2(path8.dirname(desktopPath)),
+    copilot: exists2(path9.join(homeDir, ".copilot")) || binaryInPath("copilot", homeDir),
+    cursor: exists2(path9.join(homeDir, ".cursor")),
+    codex: exists2(path9.join(homeDir, ".codex")),
+    windsurf: exists2(path9.join(homeDir, ".codeium", "windsurf")),
+    vscode: exists2(path9.join(homeDir, ".vscode")),
+    claudeDesktop: desktopPath !== null && exists2(path9.dirname(desktopPath)),
     // Opencode creates its config dir lazily on first launch — fall back to a
     // PATH lookup so installed-but-never-launched CLIs are still wired. Config
     // dir honors $XDG_CONFIG_HOME via opencodeConfigDir (#186, custom-XDG).
@@ -19067,7 +19125,7 @@ function detectAgents(homeDir = os5.homedir()) {
     // dir lazily on first launch — same class of bug as opencode's #186
     // (design R6) — so fall back to PATH lookup for installed-but-never-
     // launched pi.
-    pi: exists2(path8.join(homeDir, ".pi", "agent")) || binaryInPath("pi", homeDir),
+    pi: exists2(path9.join(homeDir, ".pi", "agent")) || binaryInPath("pi", homeDir),
     // Hermes Agent (https://github.com/NousResearch/hermes-agent): home dir
     // is $HERMES_HOME (default ~/.hermes) per hermes_constants.py:30. config.yaml
     // appears after `hermes setup` has run; the directory alone exists from
@@ -19078,16 +19136,17 @@ function detectAgents(homeDir = os5.homedir()) {
 }
 function hermesHomeDir(homeDir = os5.homedir()) {
   const env = process.env.HERMES_HOME?.trim();
-  if (env && path8.isAbsolute(env)) return env;
-  return path8.join(homeDir, ".hermes");
+  if (env && path9.isAbsolute(env)) return env;
+  return path9.join(homeDir, ".hermes");
 }
 function hermesConfigPath(homeDir = os5.homedir()) {
-  return path8.join(hermesHomeDir(homeDir), HERMES_CONFIG_FILENAME);
+  return path9.join(hermesHomeDir(homeDir), HERMES_CONFIG_FILENAME);
 }
 var HERMES_CONFIG_FILENAME;
 var init_setup = __esm({
   "src/setup.ts"() {
     "use strict";
+    init_esm_shims();
     init_mcp_wrap();
     init_codex_trust();
     init_codex_app_server();
@@ -19102,7 +19161,7 @@ var init_setup = __esm({
 
 // src/agent-wiring.ts
 import fs7 from "fs";
-import path9 from "path";
+import path10 from "path";
 import os6 from "os";
 import * as yaml2 from "yaml";
 import { parse as parseToml5 } from "smol-toml";
@@ -19213,6 +19272,7 @@ var exists, ck, lg, DEFAULT_LABEL_PAD, hookLabelOf, AGENT_SPECS;
 var init_agent_wiring = __esm({
   "src/agent-wiring.ts"() {
     "use strict";
+    init_esm_shims();
     init_setup();
     exists = (p) => {
       try {
@@ -19230,55 +19290,55 @@ var init_agent_wiring = __esm({
         id: "claude",
         label: "Claude Code",
         setupCommand: "node9 agents add claude",
-        hookFile: (h) => path9.join(h, ".claude", "settings.json"),
+        hookFile: (h) => path10.join(h, ".claude", "settings.json"),
         hookFormat: "matcher",
         // UserPromptSubmit is prompt DLP. setup.ts has written it for Claude since
         // that shipped; the spec must name it too, or status/doctor never show the
         // row and heal (which repairs via setupAgent) has no signal it is missing.
         hookEvents: [ck("PreToolUse"), lg("PostToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path9.join(h, ".claude.json"),
-        present: (h) => exists(path9.join(h, ".claude", "settings.json")) || exists(path9.join(h, ".claude.json"))
+        mcpFile: (h) => path10.join(h, ".claude.json"),
+        present: (h) => exists(path10.join(h, ".claude", "settings.json")) || exists(path10.join(h, ".claude.json"))
       },
       {
         id: "gemini",
         label: "Gemini CLI",
         setupCommand: "node9 agents add gemini",
-        hookFile: (h) => path9.join(h, ".gemini", "settings.json"),
+        hookFile: (h) => path10.join(h, ".gemini", "settings.json"),
         hookFormat: "matcher",
         hookEvents: [ck("BeforeTool"), lg("AfterTool")],
-        mcpFile: (h) => path9.join(h, ".gemini", "settings.json"),
-        present: (h) => exists(path9.join(h, ".gemini", "settings.json"))
+        mcpFile: (h) => path10.join(h, ".gemini", "settings.json"),
+        present: (h) => exists(path10.join(h, ".gemini", "settings.json"))
       },
       {
         id: "codex",
         label: "Codex",
         setupCommand: "node9 agents add codex",
-        hookFile: (h) => path9.join(h, ".codex", "hooks.json"),
+        hookFile: (h) => path10.join(h, ".codex", "hooks.json"),
         hookFormat: "matcher",
         hookEvents: [ck("PreToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path9.join(h, ".codex", "config.toml"),
+        mcpFile: (h) => path10.join(h, ".codex", "config.toml"),
         mcpFormat: "toml",
-        present: (h) => exists(path9.join(h, ".codex"))
+        present: (h) => exists(path10.join(h, ".codex"))
       },
       {
         id: "antigravity",
         label: "Antigravity",
         setupCommand: "node9 agents add antigravity",
-        hookFile: (h) => path9.join(h, ".gemini", "config", "hooks.json"),
+        hookFile: (h) => path10.join(h, ".gemini", "config", "hooks.json"),
         hookFormat: "matcher",
         hookEvents: [ck("PreToolUse"), lg("PostToolUse")],
-        mcpFile: (h) => path9.join(h, ".gemini", "config", "mcp_config.json"),
-        present: (h) => exists(path9.join(h, ".gemini", "config", "hooks.json")) || exists(path9.join(h, ".gemini", "antigravity-cli")) || exists(path9.join(h, ".gemini", "antigravity-ide"))
+        mcpFile: (h) => path10.join(h, ".gemini", "config", "mcp_config.json"),
+        present: (h) => exists(path10.join(h, ".gemini", "config", "hooks.json")) || exists(path10.join(h, ".gemini", "antigravity-cli")) || exists(path10.join(h, ".gemini", "antigravity-ide"))
       },
       {
         id: "copilot",
         label: "GitHub Copilot",
         setupCommand: "node9 agents add copilot",
-        hookFile: (h) => path9.join(h, ".copilot", "hooks", "node9.json"),
+        hookFile: (h) => path10.join(h, ".copilot", "hooks", "node9.json"),
         hookFormat: "flat",
         hookEvents: [ck("PreToolUse"), lg("PostToolUse"), ck("UserPromptSubmit")],
-        mcpFile: (h) => path9.join(h, ".copilot", "mcp-config.json"),
-        present: (h) => exists(path9.join(h, ".copilot"))
+        mcpFile: (h) => path10.join(h, ".copilot", "mcp-config.json"),
+        present: (h) => exists(path10.join(h, ".copilot"))
       },
       {
         id: "cursor",
@@ -19287,8 +19347,8 @@ var init_agent_wiring = __esm({
         // MCP-only — no hook file (see note above).
         hookFormat: "flat",
         hookEvents: [],
-        mcpFile: (h) => path9.join(h, ".cursor", "mcp.json"),
-        present: (h) => exists(path9.join(h, ".cursor", "mcp.json"))
+        mcpFile: (h) => path10.join(h, ".cursor", "mcp.json"),
+        present: (h) => exists(path10.join(h, ".cursor", "mcp.json"))
       },
       // The three MCP-only agents below came over from `getAgentsStatus` (fw#421
       // P3), so one registry answers every "is it wired" question.
@@ -19298,9 +19358,9 @@ var init_agent_wiring = __esm({
         setupCommand: "node9 agents add windsurf",
         hookFormat: "flat",
         hookEvents: [],
-        mcpFile: (h) => path9.join(h, ".codeium", "windsurf", "mcp_config.json"),
+        mcpFile: (h) => path10.join(h, ".codeium", "windsurf", "mcp_config.json"),
         mcpInventory: false,
-        present: (h) => exists(path9.join(h, ".codeium", "windsurf"))
+        present: (h) => exists(path10.join(h, ".codeium", "windsurf"))
       },
       {
         id: "vscode",
@@ -19308,10 +19368,10 @@ var init_agent_wiring = __esm({
         setupCommand: "node9 agents add vscode",
         hookFormat: "flat",
         hookEvents: [],
-        mcpFile: (h) => path9.join(h, ".vscode", "mcp.json"),
+        mcpFile: (h) => path10.join(h, ".vscode", "mcp.json"),
         mcpFormat: "vscode",
         mcpInventory: false,
-        present: (h) => exists(path9.join(h, ".vscode"))
+        present: (h) => exists(path10.join(h, ".vscode"))
       },
       {
         id: "claudeDesktop",
@@ -19320,11 +19380,11 @@ var init_agent_wiring = __esm({
         hookFormat: "flat",
         hookEvents: [],
         // The per-platform config path; its parent directory is the footprint.
-        mcpFile: (h) => claudeDesktopConfigPath(h) ?? path9.join(h, ".config", "Claude", "claude_desktop_config.json"),
+        mcpFile: (h) => claudeDesktopConfigPath(h) ?? path10.join(h, ".config", "Claude", "claude_desktop_config.json"),
         mcpInventory: false,
         present: (h) => {
           const p = claudeDesktopConfigPath(h);
-          return p !== null && exists(path9.dirname(p));
+          return p !== null && exists(path10.dirname(p));
         }
       },
       {
@@ -19346,8 +19406,8 @@ var init_agent_wiring = __esm({
         setupCommand: "node9 agents add opencode",
         hookFormat: "flat",
         hookEvents: [],
-        shimFile: (h) => path9.join(opencodeConfigDir(h), "plugins", "node9.js"),
-        present: (h) => exists(opencodeConfigDir(h)) || exists(path9.join(opencodeConfigDir(h), "plugins", "node9.js"))
+        shimFile: (h) => path10.join(opencodeConfigDir(h), "plugins", "node9.js"),
+        present: (h) => exists(opencodeConfigDir(h)) || exists(path10.join(opencodeConfigDir(h), "plugins", "node9.js"))
       },
       {
         id: "pi",
@@ -19355,8 +19415,8 @@ var init_agent_wiring = __esm({
         setupCommand: "node9 agents add pi",
         hookFormat: "flat",
         hookEvents: [],
-        shimFile: (h) => path9.join(h, ".pi", "agent", "extensions", "node9.js"),
-        present: (h) => exists(path9.join(h, ".pi", "agent")) || exists(path9.join(h, ".pi", "agent", "extensions", "node9.js"))
+        shimFile: (h) => path10.join(h, ".pi", "agent", "extensions", "node9.js"),
+        present: (h) => exists(path10.join(h, ".pi", "agent")) || exists(path10.join(h, ".pi", "agent", "extensions", "node9.js"))
       }
     ];
   }
@@ -19438,6 +19498,7 @@ var B, SEP, LEGACY_BASH_PATH_RULE;
 var init_build = __esm({
   "src/shields/build.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
     B = "[\\s/\\\\]";
     SEP = "[/\\\\]";
@@ -19447,7 +19508,7 @@ var init_build = __esm({
 
 // src/shields.ts
 import fs8 from "fs";
-import path10 from "path";
+import path11 from "path";
 import os7 from "os";
 function loadUserShields() {
   const result = {};
@@ -19464,7 +19525,7 @@ function loadUserShields() {
     return result;
   }
   for (const file2 of entries) {
-    const filePath = path10.join(USER_SHIELDS_DIR, file2);
+    const filePath = path11.join(USER_SHIELDS_DIR, file2);
     try {
       const raw = JSON.parse(fs8.readFileSync(filePath, "utf-8"));
       const v = validateShieldDefinition(raw);
@@ -19528,21 +19589,22 @@ var USER_SHIELDS_DIR, SHIELDS, SHIELDS_STATE_FILE;
 var init_shields = __esm({
   "src/shields.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
     init_build();
     init_dist();
-    USER_SHIELDS_DIR = path10.join(os7.homedir(), ".node9", "shields");
+    USER_SHIELDS_DIR = path11.join(os7.homedir(), ".node9", "shields");
     SHIELDS = buildSHIELDS();
-    SHIELDS_STATE_FILE = path10.join(os7.homedir(), ".node9", "shields.json");
+    SHIELDS_STATE_FILE = path11.join(os7.homedir(), ".node9", "shields.json");
   }
 });
 
 // src/shields/jail.ts
 import fs9 from "fs";
 import os8 from "os";
-import path11 from "path";
+import path12 from "path";
 function jailStorePath() {
-  return path11.join(os8.homedir(), ".node9", "jail-paths.json");
+  return path12.join(os8.homedir(), ".node9", "jail-paths.json");
 }
 function readJailPaths() {
   let text;
@@ -19577,6 +19639,7 @@ var USER_JAIL_SHIELD;
 var init_jail = __esm({
   "src/shields/jail.ts"() {
     "use strict";
+    init_esm_shims();
     init_build();
     init_dist();
     init_shields();
@@ -19587,9 +19650,9 @@ var init_jail = __esm({
 // src/canary/registry.ts
 import fs10 from "fs";
 import os9 from "os";
-import path12 from "path";
+import path13 from "path";
 function canaryStorePath() {
-  return path12.join(os9.homedir(), ".node9", "canaries.json");
+  return path13.join(os9.homedir(), ".node9", "canaries.json");
 }
 function isRecord(x) {
   if (!x || typeof x !== "object") return false;
@@ -19633,6 +19696,7 @@ function canaryCtxValues() {
 var init_registry = __esm({
   "src/canary/registry.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
     init_jail();
   }
@@ -19679,17 +19743,18 @@ function readCappedText(file2, maxBytes, openFlags = "r") {
 var init_read_capped = __esm({
   "src/utils/read-capped.ts"() {
     "use strict";
+    init_esm_shims();
   }
 });
 
 // src/posture/secrets.ts
 import fs12 from "fs";
-import path13 from "path";
+import path14 from "path";
 import os10 from "os";
 function displayPath(p, home) {
   if (p === home) return "~";
-  const prefix = home.endsWith(path13.sep) ? home : home + path13.sep;
-  if (p.startsWith(prefix)) return "~" + path13.sep + p.slice(prefix.length);
+  const prefix = home.endsWith(path14.sep) ? home : home + path14.sep;
+  if (p.startsWith(prefix)) return "~" + path14.sep + p.slice(prefix.length);
   return p;
 }
 function safeRead(file2) {
@@ -19701,7 +19766,7 @@ function candidateFiles(home, cwd) {
   const files = /* @__PURE__ */ new Set();
   try {
     for (const name of fs12.readdirSync(cwd)) {
-      if (name === ".env" || name.startsWith(".env.")) files.add(path13.join(cwd, name));
+      if (name === ".env" || name.startsWith(".env.")) files.add(path14.join(cwd, name));
     }
   } catch {
   }
@@ -19709,7 +19774,7 @@ function candidateFiles(home, cwd) {
     if (spec.hookFile) files.add(spec.hookFile(home));
     if (spec.mcpFile) files.add(spec.mcpFile(home));
   }
-  files.add(path13.join(home, ".env"));
+  files.add(path14.join(home, ".env"));
   return [...files];
 }
 function credentialMaterial(home) {
@@ -19816,6 +19881,7 @@ var MAX_FILE_BYTES;
 var init_secrets = __esm({
   "src/posture/secrets.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
     init_agent_wiring();
     init_registry();
@@ -19830,8 +19896,8 @@ var init_secrets = __esm({
 import { z } from "zod";
 function formatIssues(issues) {
   const lines = issues.map((issue) => {
-    const path48 = issue.path.length > 0 ? issue.path.map(String).join(".") : "root";
-    return `  \u2022 ${path48}: ${issue.message}`;
+    const path49 = issue.path.length > 0 ? issue.path.map(String).join(".") : "root";
+    return `  \u2022 ${path49}: ${issue.message}`;
   });
   return `Invalid config:
 ${lines.join("\n")}`;
@@ -19844,9 +19910,9 @@ function prunePaths(root, paths) {
     const yi = y[y.length - 1];
     return typeof xi === "number" && typeof yi === "number" ? yi - xi : 0;
   });
-  for (const path48 of ordered) {
+  for (const path49 of ordered) {
     let cur = root;
-    for (const key of path48.slice(0, -1)) {
+    for (const key of path49.slice(0, -1)) {
       if (cur === null || typeof cur !== "object") {
         cur = void 0;
         break;
@@ -19854,7 +19920,7 @@ function prunePaths(root, paths) {
       cur = cur[key];
     }
     if (cur === null || typeof cur !== "object") continue;
-    const last = path48[path48.length - 1];
+    const last = path49[path49.length - 1];
     if (Array.isArray(cur)) {
       const i = Number(last);
       if (Number.isInteger(i) && i >= 0 && i < cur.length) {
@@ -19890,7 +19956,7 @@ function sanitizeConfig(raw) {
           return issue.keys.map((k) => [...at, k]);
         }
         return [at.slice(0, -level || void 0)];
-      }).filter((path48) => path48.length > 0);
+      }).filter((path49) => path49.length > 0);
       if (paths.length === 0 || !prunePaths(working, paths)) break;
     }
     if (ConfigFileSchema.safeParse(working).success) break;
@@ -19914,6 +19980,7 @@ var noNewlines, SmartConditionSchema, SmartRuleSchema, ConfigFileSchema;
 var init_config_schema = __esm({
   "src/config-schema.ts"() {
     "use strict";
+    init_esm_shims();
     noNewlines = z.string().refine((s) => !s.includes("\n") && !s.includes("\r"), {
       message: "Value must not contain literal newline characters (use \\n instead)"
     });
@@ -20211,6 +20278,7 @@ var MODE_ORDER, EGRESS_MODE_ORDER, DLP_PII_ORDER, DLP_REVIEW_ACTION_ORDER, COMMA
 var init_managed = __esm({
   "src/config/managed.ts"() {
     "use strict";
+    init_esm_shims();
     MODE_ORDER = ["observe", "audit", "soft", "standard", "strict", "block-all"];
     EGRESS_MODE_ORDER = ["off", "review", "block"];
     DLP_PII_ORDER = ["off", "block"];
@@ -20233,10 +20301,10 @@ var init_managed = __esm({
 
 // src/auth/trusted-hosts.ts
 import fs13 from "fs";
-import path14 from "path";
+import path15 from "path";
 import os11 from "os";
 function getTrustedHostsPath() {
-  return path14.join(os11.homedir(), ".node9", "trusted-hosts.json");
+  return path15.join(os11.homedir(), ".node9", "trusted-hosts.json");
 }
 function readTrustedHosts() {
   try {
@@ -20288,6 +20356,7 @@ var _cache, CACHE_TTL_MS;
 var init_trusted_hosts = __esm({
   "src/auth/trusted-hosts.ts"() {
     "use strict";
+    init_esm_shims();
     _cache = null;
     CACHE_TTL_MS = 5e3;
   }
@@ -20395,6 +20464,7 @@ var CONFIG_FILE_VERSION_2, SETTINGS_WITH_A_HOME, APPROVER_CHANNELS, KNOWN_V2_KEY
 var init_v2 = __esm({
   "src/config/v2.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
     init_dist();
     init_config();
@@ -20461,6 +20531,7 @@ var DEFAULT_API_URL, LOOPBACK, HOST_ALLOW_ENV;
 var init_api_url = __esm({
   "src/auth/api-url.ts"() {
     "use strict";
+    init_esm_shims();
     DEFAULT_API_URL = "https://api.node9.ai/api/v1/intercept";
     LOOPBACK = /* @__PURE__ */ new Set(["127.0.0.1", "localhost", "::1", "[::1]", "0.0.0.0"]);
     HOST_ALLOW_ENV = "NODE9_API_HOST_ALLOW";
@@ -20469,7 +20540,7 @@ var init_api_url = __esm({
 
 // src/config/index.ts
 import fs14 from "fs";
-import path15 from "path";
+import path16 from "path";
 import os12 from "os";
 function sanitizeSsrfAllow(entries, source) {
   const kept = [];
@@ -20493,7 +20564,7 @@ function noteRejectedApiUrl(raw) {
   rejectedApiUrlsSeen.add(key);
   try {
     fs14.appendFileSync(
-      path15.join(os12.homedir(), ".node9", "hook-debug.log"),
+      path16.join(os12.homedir(), ".node9", "hook-debug.log"),
       `[${(/* @__PURE__ */ new Date()).toISOString()}] REFUSED apiUrl, using the default instead: ${String(raw).slice(0, 200).replace(/[\r\n]+/g, " ")}
 `
     );
@@ -20510,7 +20581,7 @@ function getCredentials() {
     };
   }
   try {
-    const credPath = path15.join(os12.homedir(), ".node9", "credentials.json");
+    const credPath = path16.join(os12.homedir(), ".node9", "credentials.json");
     if (fs14.existsSync(credPath)) {
       const creds = JSON.parse(fs14.readFileSync(credPath, "utf-8"));
       const profileName = process.env.NODE9_PROFILE || "default";
@@ -20559,7 +20630,7 @@ function readRulesCacheResilient(cacheFile) {
     }
   }
   if (existed || sawReadError) {
-    const backup = path15.join(path15.dirname(cacheFile), "rules-cache.last-good.json");
+    const backup = path16.join(path16.dirname(cacheFile), "rules-cache.last-good.json");
     if (backup !== cacheFile) {
       try {
         const raw = JSON.parse(fs14.readFileSync(backup, "utf-8"));
@@ -20583,7 +20654,7 @@ function logCacheReadIssue(cacheFile, kind) {
   cacheReadLastLoggedAt = now;
   try {
     fs14.appendFileSync(
-      path15.join(os12.homedir(), ".node9", "hook-debug.log"),
+      path16.join(os12.homedir(), ".node9", "hook-debug.log"),
       `[${(/* @__PURE__ */ new Date()).toISOString()}] ${kind} ${cacheFile}
 `
     );
@@ -20600,8 +20671,8 @@ function catalogSettingsFrom(settings, policy) {
 }
 function getConfig(cwd) {
   if (!cwd && cachedConfig) return cachedConfig;
-  const globalPath = path15.join(os12.homedir(), ".node9", "config.json");
-  const projectPath = path15.join(cwd ?? process.cwd(), "node9.config.json");
+  const globalPath = path16.join(os12.homedir(), ".node9", "config.json");
+  const projectPath = path16.join(cwd ?? process.cwd(), "node9.config.json");
   const globalConfig = tryLoadConfig(globalPath);
   const projectConfig = tryLoadConfig(projectPath, { project: true });
   const mergedSettings = {
@@ -20846,7 +20917,7 @@ function getConfig(cwd) {
   let cloudMandatesEnforcement = false;
   let cloudMandatesAppPerm = false;
   {
-    const cacheFile = path15.join(os12.homedir(), ".node9", "rules-cache.json");
+    const cacheFile = path16.join(os12.homedir(), ".node9", "rules-cache.json");
     try {
       const raw = readRulesCacheResilient(cacheFile);
       if (Array.isArray(raw.rules) && raw.rules.length > 0) {
@@ -21039,13 +21110,13 @@ function getConfig(cwd) {
         }
         if (Array.isArray(mc.jailPaths)) {
           for (const jp of mc.jailPaths) {
-            const path48 = typeof jp?.path === "string" ? jp.path.trim() : "";
-            if (!path48) continue;
+            const path49 = typeof jp?.path === "string" ? jp.path.trim() : "";
+            if (!path49) continue;
             const verdict = jp?.verdict === "review" ? "review" : "block";
-            for (const r of pathRules(path48, verdict, "org-managed jail")) {
+            for (const r of pathRules(path49, verdict, "org-managed jail")) {
               mergedPolicy.smartRules.push({ ...r, name: `org:${r.name}` });
             }
-            mergedPolicy.managedJailPaths.push({ path: path48, verdict });
+            mergedPolicy.managedJailPaths.push({ path: path49, verdict });
           }
         }
         if (Array.isArray(mc.trustedHosts)) {
@@ -21383,6 +21454,7 @@ var DANGEROUS_WORDS, RUNTIME_ONLY_CONFIG_KEYS, DEFAULT_CONFIG, RM_SAFE_PATH_PATT
 var init_config = __esm({
   "src/config/index.ts"() {
     "use strict";
+    init_esm_shims();
     init_config_schema();
     init_shields();
     init_managed();
@@ -21739,6 +21811,7 @@ var ALLOWED_DOMAINS_PATH;
 var init_templates = __esm({
   "src/sandbox/templates.ts"() {
     "use strict";
+    init_esm_shims();
     ALLOWED_DOMAINS_PATH = "/etc/node9-sandbox/allowed-domains.txt";
   }
 });
@@ -21871,6 +21944,7 @@ function checkEgress(ctx) {
 var init_egress = __esm({
   "src/posture/egress.ts"() {
     "use strict";
+    init_esm_shims();
     init_config();
     init_templates();
   }
@@ -22082,6 +22156,7 @@ var PRE_ENGINE_GATES, GATE_LABELS;
 var init_gate_order = __esm({
   "src/policy/gate-order.ts"() {
     "use strict";
+    init_esm_shims();
     PRE_ENGINE_GATES = ["file", "dlp", "pii", "package"];
     GATE_LABELS = {
       dlpBlock: "\u{1F6A8} Node9 DLP (Secret Detected)",
@@ -22096,16 +22171,16 @@ var init_gate_order = __esm({
 // src/policy/file-access.ts
 import fs16 from "fs";
 import os13 from "os";
-import path16 from "path";
+import path17 from "path";
 function absoluteSpelling(p, cwd, home) {
   if (p === "~" || p.startsWith("~/")) p = home + p.slice(1);
-  return path16.isAbsolute(p) ? p : `${cwd}/${p}`;
+  return path17.isAbsolute(p) ? p : `${cwd}/${p}`;
 }
 function physical(p, followFinal, links = 0) {
   if (links > 40) throw new Error("Too many symbolic links");
   if (!followFinal) {
-    const parent = physical(path16.dirname(p), true, links);
-    return { path: `${parent.path}/${path16.basename(p)}`, missing: parent.missing };
+    const parent = physical(path17.dirname(p), true, links);
+    return { path: `${parent.path}/${path17.basename(p)}`, missing: parent.missing };
   }
   try {
     return { path: fs16.realpathSync.native(p), missing: false };
@@ -22116,7 +22191,7 @@ function physical(p, followFinal, links = 0) {
       if (fs16.lstatSync(p).isSymbolicLink()) {
         const target = fs16.readlinkSync(p);
         return physical(
-          path16.isAbsolute(target) ? target : `${path16.dirname(p)}/${target}`,
+          path17.isAbsolute(target) ? target : `${path17.dirname(p)}/${target}`,
           true,
           links + 1
         );
@@ -22125,10 +22200,10 @@ function physical(p, followFinal, links = 0) {
       if (!["ENOENT", "ENOTDIR"].includes(linkError.code ?? ""))
         throw linkError;
     }
-    const parent = path16.dirname(p);
+    const parent = path17.dirname(p);
     if (parent === p) return { path: p, missing: true };
     const resolved = physical(parent, true, links);
-    return { path: `${resolved.path}/${path16.basename(p)}`, missing: true };
+    return { path: `${resolved.path}/${path17.basename(p)}`, missing: true };
   }
 }
 function prepareFileAccesses(tool, args, cwd = process.cwd(), inspection = {}, home = os13.homedir()) {
@@ -22211,6 +22286,7 @@ function prepareFileAccesses(tool, args, cwd = process.cwd(), inspection = {}, h
 var init_file_access = __esm({
   "src/policy/file-access.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
   }
 });
@@ -22218,13 +22294,13 @@ var init_file_access = __esm({
 // src/supply-chain/osv-index.ts
 import fs17 from "fs";
 import os14 from "os";
-import path17 from "path";
+import path18 from "path";
 import { createHash as createHash4 } from "crypto";
 function osvRoot() {
-  return path17.join(os14.homedir(), ".node9", "osv");
+  return path18.join(os14.homedir(), ".node9", "osv");
 }
 function ecoDir(eco) {
-  return path17.join(osvRoot(), eco);
+  return path18.join(osvRoot(), eco);
 }
 function indexKey(eco, name) {
   switch (eco) {
@@ -22243,11 +22319,11 @@ function shardOf(key) {
   return createHash4("sha1").update(key).digest("hex").slice(0, 2);
 }
 function shardPath(eco, shard) {
-  return path17.join(ecoDir(eco), "shards", `${shard}.json`);
+  return path18.join(ecoDir(eco), "shards", `${shard}.json`);
 }
 function readMeta(eco) {
   try {
-    const m = JSON.parse(fs17.readFileSync(path17.join(ecoDir(eco), "meta.json"), "utf8"));
+    const m = JSON.parse(fs17.readFileSync(path18.join(ecoDir(eco), "meta.json"), "utf8"));
     if (typeof m?.syncedAt !== "string" || typeof m?.lastModifiedMs !== "number") return null;
     return m;
   } catch {
@@ -22303,6 +22379,7 @@ var INDEX_FRESH_MS;
 var init_osv_index = __esm({
   "src/supply-chain/osv-index.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
     init_atomic_write();
     INDEX_FRESH_MS = 72 * 60 * 60 * 1e3;
@@ -22359,6 +22436,7 @@ var DEFAULTS, OVERRIDES;
 var init_net = __esm({
   "src/supply-chain/net.ts"() {
     "use strict";
+    init_esm_shims();
     DEFAULTS = {
       osvBucket: "https://osv-vulnerabilities.storage.googleapis.com",
       osvApi: "https://api.osv.dev",
@@ -22398,6 +22476,7 @@ var TIMEOUT_MS;
 var init_osv_online = __esm({
   "src/supply-chain/osv-online.ts"() {
     "use strict";
+    init_esm_shims();
     init_net();
     TIMEOUT_MS = 2500;
   }
@@ -22489,6 +22568,7 @@ var TIMEOUT_MS2, MAX_BYTES, PYPI_FINAL;
 var init_provenance = __esm({
   "src/supply-chain/provenance.ts"() {
     "use strict";
+    init_esm_shims();
     init_net();
     TIMEOUT_MS2 = 1500;
     MAX_BYTES = 256 * 1024;
@@ -22627,6 +22707,7 @@ var TIMEOUT_MS3, MAX_BYTES2, VERSION_DOC_MAX_BYTES, INSTALL_SCRIPTS, HAS_REGISTR
 var init_registry2 = __esm({
   "src/supply-chain/registry.ts"() {
     "use strict";
+    init_esm_shims();
     init_net();
     init_provenance();
     TIMEOUT_MS3 = 1500;
@@ -22639,14 +22720,14 @@ var init_registry2 = __esm({
 
 // src/supply-chain/local-resolve.ts
 import fs18 from "fs";
-import path18 from "path";
+import path19 from "path";
 function resolveInstalled(name, cwd) {
-  if (!cwd || !path18.isAbsolute(cwd)) return null;
+  if (!cwd || !path19.isAbsolute(cwd)) return null;
   if (!/^(?:@[^/\\]+\/)?[^/\\]+$/.test(name)) return null;
-  let dir2 = path18.resolve(cwd);
+  let dir2 = path19.resolve(cwd);
   for (let i = 0; i < MAX_LEVELS; i++) {
-    const pkgDir = path18.join(dir2, "node_modules", ...name.split("/"));
-    const manifest = path18.join(pkgDir, "package.json");
+    const pkgDir = path19.join(dir2, "node_modules", ...name.split("/"));
+    const manifest = path19.join(pkgDir, "package.json");
     try {
       const raw = fs18.readFileSync(manifest, "utf8");
       const parsed = JSON.parse(raw);
@@ -22656,7 +22737,7 @@ function resolveInstalled(name, cwd) {
       return null;
     } catch {
     }
-    const parent = path18.dirname(dir2);
+    const parent = path19.dirname(dir2);
     if (parent === dir2) break;
     dir2 = parent;
   }
@@ -22666,6 +22747,7 @@ var MAX_LEVELS, LOCAL_FIRST_MANAGERS;
 var init_local_resolve = __esm({
   "src/supply-chain/local-resolve.ts"() {
     "use strict";
+    init_esm_shims();
     MAX_LEVELS = 32;
     LOCAL_FIRST_MANAGERS = /* @__PURE__ */ new Set(["npx", "bunx", "npm exec"]);
   }
@@ -22673,7 +22755,7 @@ var init_local_resolve = __esm({
 
 // src/supply-chain/check.ts
 import picomatch2 from "picomatch";
-import path19 from "path";
+import path20 from "path";
 function commandOf(toolName, args) {
   if (!isBashTool(toolName) || !args || typeof args !== "object") return null;
   const a = args;
@@ -22775,7 +22857,7 @@ function checkInstalled(p, version, misses) {
 }
 async function checkOne(p, cfg, misses, networkCapped, cwd) {
   if (p.ecosystem === "npm" && LOCAL_FIRST_MANAGERS.has(p.manager) && p.localCwd !== null && (p.raw === p.name || p.version)) {
-    const localCwd = cwd && path19.isAbsolute(cwd) ? (p.localCwd ?? []).reduce((dir2, step) => path19.resolve(dir2, step), cwd) : void 0;
+    const localCwd = cwd && path20.isAbsolute(cwd) ? (p.localCwd ?? []).reduce((dir2, step) => path20.resolve(dir2, step), cwd) : void 0;
     const installed = resolveInstalled(p.name, localCwd);
     if (installed && (!p.version || p.version === installed.version))
       return checkInstalled(p, installed.version, misses);
@@ -22920,6 +23002,7 @@ var MAX_NETWORK_PACKAGES, ALLOW, KIND, SOFT2;
 var init_check = __esm({
   "src/supply-chain/check.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
     init_osv_index();
     init_osv_online();
@@ -22945,32 +23028,32 @@ var init_check = __esm({
 
 // src/supply-chain/registries.ts
 import os15 from "os";
-import path20 from "path";
+import path21 from "path";
 import fs19 from "fs";
 function userFiles(home, env) {
-  const xdg = env.XDG_CONFIG_HOME || path20.join(home, ".config");
+  const xdg = env.XDG_CONFIG_HOME || path21.join(home, ".config");
   return [
-    env.NPM_CONFIG_USERCONFIG || env.npm_config_userconfig || path20.join(home, ".npmrc"),
-    path20.join(home, ".yarnrc"),
-    path20.join(home, ".yarnrc.yml"),
-    path20.join(home, ".bunfig.toml"),
+    env.NPM_CONFIG_USERCONFIG || env.npm_config_userconfig || path21.join(home, ".npmrc"),
+    path21.join(home, ".yarnrc"),
+    path21.join(home, ".yarnrc.yml"),
+    path21.join(home, ".bunfig.toml"),
     env.PIP_CONFIG_FILE || "",
-    path20.join(xdg, "pip", "pip.conf"),
-    path20.join(home, ".pip", "pip.conf"),
+    path21.join(xdg, "pip", "pip.conf"),
+    path21.join(home, ".pip", "pip.conf"),
     "/etc/pip.conf",
-    env.VIRTUAL_ENV ? path20.join(env.VIRTUAL_ENV, "pip.conf") : "",
+    env.VIRTUAL_ENV ? path21.join(env.VIRTUAL_ENV, "pip.conf") : "",
     env.UV_CONFIG_FILE || "",
-    path20.join(xdg, "uv", "uv.toml"),
+    path21.join(xdg, "uv", "uv.toml"),
     "/etc/uv/uv.toml"
   ].filter(Boolean);
 }
 function projectFiles(cwd) {
-  if (!cwd || !path20.isAbsolute(cwd)) return [];
+  if (!cwd || !path21.isAbsolute(cwd)) return [];
   const out = [];
   let dir2 = cwd;
   for (let i = 0; i < MAX_PARENT_DIRS; i++) {
-    for (const f of PROJECT_FILES) out.push(path20.join(dir2, f));
-    const parent = path20.dirname(dir2);
+    for (const f of PROJECT_FILES) out.push(path21.join(dir2, f));
+    const parent = path21.dirname(dir2);
     if (parent === dir2) break;
     dir2 = parent;
   }
@@ -23042,6 +23125,7 @@ var MAX_CONFIG_BYTES, MAX_PARENT_DIRS, TTL_MS2, PROJECT_FILES, ENV_VARS, PATH_VA
 var init_registries = __esm({
   "src/supply-chain/registries.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
     init_read_capped();
     MAX_CONFIG_BYTES = 256 * 1024;
@@ -23089,14 +23173,14 @@ var init_registries = __esm({
 
 // src/utils/provenance.ts
 import fs20 from "fs";
-import path21 from "path";
+import path22 from "path";
 import os16 from "os";
 function findInPath(cmd) {
-  if (path21.posix.isAbsolute(cmd)) return cmd;
+  if (path22.posix.isAbsolute(cmd)) return cmd;
   const pathEnv = process.env.PATH ?? "";
-  for (const dir2 of pathEnv.split(path21.delimiter)) {
+  for (const dir2 of pathEnv.split(path22.delimiter)) {
     if (!dir2) continue;
-    const full = path21.join(dir2, cmd);
+    const full = path22.join(dir2, cmd);
     try {
       fs20.accessSync(full, fs20.constants.X_OK);
       return full;
@@ -23127,7 +23211,7 @@ function _classifyPath(resolved, cwd) {
 }
 function checkProvenance(cmd, cwd) {
   const bare = cmd.startsWith("./") ? cmd.slice(2) : cmd;
-  if (path21.posix.isAbsolute(bare)) {
+  if (path22.posix.isAbsolute(bare)) {
     const early = _classifyPath(bare, cwd);
     if (early.trustLevel === "suspect") {
       return { resolvedPath: bare, ...early };
@@ -23174,14 +23258,15 @@ var SYSTEM_PREFIXES, MANAGED_PREFIXES, USER_PREFIXES, SUSPECT_PREFIXES;
 var init_provenance2 = __esm({
   "src/utils/provenance.ts"() {
     "use strict";
+    init_esm_shims();
     SYSTEM_PREFIXES = ["/usr/bin", "/usr/sbin", "/bin", "/sbin"];
     MANAGED_PREFIXES = ["/usr/local/bin", "/opt/homebrew", "/home/linuxbrew", "/nix/store"];
     USER_PREFIXES = [
-      path21.join(os16.homedir(), "bin"),
-      path21.join(os16.homedir(), ".local", "bin"),
-      path21.join(os16.homedir(), ".cargo", "bin"),
-      path21.join(os16.homedir(), ".npm-global", "bin"),
-      path21.join(os16.homedir(), ".volta", "bin")
+      path22.join(os16.homedir(), "bin"),
+      path22.join(os16.homedir(), ".local", "bin"),
+      path22.join(os16.homedir(), ".cargo", "bin"),
+      path22.join(os16.homedir(), ".npm-global", "bin"),
+      path22.join(os16.homedir(), ".volta", "bin")
     ];
     SUSPECT_PREFIXES = ["/tmp", "/var/tmp", "/dev/shm"];
   }
@@ -23189,7 +23274,7 @@ var init_provenance2 = __esm({
 
 // src/policy/index.ts
 import fs21 from "fs";
-import path22 from "path";
+import path23 from "path";
 async function evaluatePolicy2(toolName, args, agent, cwd, opts) {
   const config = opts?.config ?? getConfig(cwd);
   const prepared = opts?.fileAccess ?? prepareFileAccesses(toolName, args, cwd, inspectionLayers(config.policy));
@@ -23221,9 +23306,9 @@ async function evaluatePolicy2(toolName, args, agent, cwd, opts) {
   );
 }
 function isGitWorkTreeTop(dir2, cwd) {
-  if (!path22.isAbsolute(cwd)) return true;
+  if (!path23.isAbsolute(cwd)) return true;
   try {
-    return fs21.existsSync(path22.join(path22.resolve(cwd, dir2), ".git"));
+    return fs21.existsSync(path23.join(path23.resolve(cwd, dir2), ".git"));
   } catch {
     return true;
   }
@@ -23243,6 +23328,7 @@ var MAX_AGENT_SETTINGS_BYTES;
 var init_policy = __esm({
   "src/policy/index.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
     init_read_capped();
     init_dlp();
@@ -23295,6 +23381,7 @@ var BASELINE;
 var init_gate = __esm({
   "src/posture/gate.ts"() {
     "use strict";
+    init_esm_shims();
     init_policy();
     BASELINE = ["rm", "-rf", "/"].join(" ");
   }
@@ -23302,13 +23389,13 @@ var init_gate = __esm({
 
 // src/posture/supply-chain.ts
 import os17 from "os";
-import path23 from "path";
+import path24 from "path";
 import { parse as parseToml6 } from "smol-toml";
 function isNode9Managed(command, args = []) {
   if (!command) return false;
-  if (path23.basename(command).toLowerCase() === "node9") return true;
-  if (PACKAGE_RUNNERS.has(path23.basename(command).toLowerCase())) {
-    return args.some((a) => a === "node9" || path23.basename(a).toLowerCase() === "node9");
+  if (path24.basename(command).toLowerCase() === "node9") return true;
+  if (PACKAGE_RUNNERS.has(path24.basename(command).toLowerCase())) {
+    return args.some((a) => a === "node9" || path24.basename(a).toLowerCase() === "node9");
   }
   return false;
 }
@@ -23374,6 +23461,7 @@ var PACKAGE_RUNNERS, MAX_CONFIG_BYTES2;
 var init_supply_chain = __esm({
   "src/posture/supply-chain.ts"() {
     "use strict";
+    init_esm_shims();
     init_provenance2();
     init_agent_wiring();
     init_read_capped();
@@ -23423,6 +23511,7 @@ var SUDO_PROBE;
 var init_privilege = __esm({
   "src/posture/privilege.ts"() {
     "use strict";
+    init_esm_shims();
     init_policy();
     SUDO_PROBE = "sudo chmod 777 /etc/passwd";
   }
@@ -23474,6 +23563,7 @@ var ISOLATION_WEIGHT;
 var init_containment = __esm({
   "src/posture/containment.ts"() {
     "use strict";
+    init_esm_shims();
     ISOLATION_WEIGHT = 12;
   }
 });
@@ -23649,6 +23739,7 @@ var DB_EXPOSURE_WEIGHT, KNOWN_SERVICE_PORTS, KNOWN_SERVICE_COMMS, DB_LABEL, SHIE
 var init_inbound = __esm({
   "src/posture/inbound.ts"() {
     "use strict";
+    init_esm_shims();
     DB_EXPOSURE_WEIGHT = 4;
     KNOWN_SERVICE_PORTS = {
       5432: "PostgreSQL",
@@ -23721,6 +23812,7 @@ function checkCoverage(ctx) {
 var init_coverage = __esm({
   "src/posture/coverage.ts"() {
     "use strict";
+    init_esm_shims();
     init_config();
     init_dist();
     init_agent_wiring();
@@ -23728,7 +23820,7 @@ var init_coverage = __esm({
 });
 
 // src/posture/governance.ts
-import path24 from "path";
+import path25 from "path";
 function checkData(ctx) {
   const dlp = getConfig(ctx.cwd).policy.dlp;
   if (!dlp?.enabled) {
@@ -23871,8 +23963,9 @@ var jailProbePath;
 var init_governance = __esm({
   "src/posture/governance.ts"() {
     "use strict";
+    init_esm_shims();
     init_config();
-    jailProbePath = (home) => path24.join(home, ".aws", "credentials");
+    jailProbePath = (home) => path25.join(home, ".aws", "credentials");
   }
 });
 
@@ -23899,6 +23992,7 @@ function openHeadroom(findings) {
 var init_score = __esm({
   "src/posture/score.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
   }
 });
@@ -23965,6 +24059,7 @@ var SEVERITY_RANK;
 var init_headline = __esm({
   "src/posture/headline.ts"() {
     "use strict";
+    init_esm_shims();
     SEVERITY_RANK = {
       critical: 0,
       high: 1,
@@ -24042,6 +24137,7 @@ async function annotateCoverage(findings, ctx) {
 var init_enforcement = __esm({
   "src/posture/enforcement.ts"() {
     "use strict";
+    init_esm_shims();
     init_dlp();
     init_policy();
     init_config();
@@ -24108,6 +24204,7 @@ var POSTURE_CHECKS;
 var init_posture = __esm({
   "src/posture/index.ts"() {
     "use strict";
+    init_esm_shims();
     init_secrets();
     init_egress();
     init_gate();
@@ -24145,6 +24242,7 @@ var ICON, TIER_LABEL;
 var init_render = __esm({
   "src/posture/render.ts"() {
     "use strict";
+    init_esm_shims();
     init_score();
     ICON = {
       critical: chalk2.red("\u274C"),
@@ -24163,7 +24261,7 @@ var init_render = __esm({
 // src/cli/commands/blast.ts
 import chalk3 from "chalk";
 import fs24 from "fs";
-import path25 from "path";
+import path26 from "path";
 import os20 from "os";
 function buildSensitivePaths(home, cwd) {
   const homeFiles = homeCredentialFiles(home).map(({ full, label: label2, description, score }) => ({
@@ -24175,19 +24273,19 @@ function buildSensitivePaths(home, cwd) {
   return [
     ...homeFiles,
     {
-      full: path25.join(cwd, ".env"),
+      full: path26.join(cwd, ".env"),
       label: ".env  (current folder)",
       description: "App secrets: database passwords, API keys",
       score: 20
     },
     {
-      full: path25.join(cwd, ".env.local"),
+      full: path26.join(cwd, ".env.local"),
       label: ".env.local  (current folder)",
       description: "Local overrides: often contains real credentials",
       score: 15
     },
     {
-      full: path25.join(cwd, ".env.production"),
+      full: path26.join(cwd, ".env.production"),
       label: ".env.production  (current folder)",
       description: "Production secrets",
       score: 20
@@ -24228,6 +24326,7 @@ function runBlast() {
 var init_blast = __esm({
   "src/cli/commands/blast.ts"() {
     "use strict";
+    init_esm_shims();
     init_dlp();
     init_credential_files();
     init_posture();
@@ -24356,6 +24455,7 @@ var CHANNELS, PERSON_CHANNELS, CARD_PROTOCOL, PERSON_LABELS, REDIRECT_LABEL, TIM
 var init_decision_record = __esm({
   "src/auth/decision-record.ts"() {
     "use strict";
+    init_esm_shims();
     CHANNELS = ["terminal", "monitor", "native", "cloud"];
     PERSON_CHANNELS = /* @__PURE__ */ new Set([
       "terminal",
@@ -24391,7 +24491,7 @@ var init_decision_record = __esm({
 // src/auth/daemon.ts
 import fs25 from "fs";
 import http from "http";
-import path26 from "path";
+import path27 from "path";
 import os21 from "os";
 async function checkStatePredicates(predicates) {
   if (predicates.length === 0) return {};
@@ -24418,7 +24518,7 @@ function resolveDaemonPort(env = process.env) {
 function getInternalToken() {
   if (forecastRun()) return null;
   try {
-    const pidFile = path26.join(os21.homedir(), ".node9", "daemon.pid");
+    const pidFile = path27.join(os21.homedir(), ".node9", "daemon.pid");
     if (!fs25.existsSync(pidFile)) return null;
     const data = JSON.parse(fs25.readFileSync(pidFile, "utf-8"));
     process.kill(data.pid, 0);
@@ -24429,7 +24529,7 @@ function getInternalToken() {
 }
 function isDaemonRunning() {
   if (forecastRun()) return false;
-  const pidFile = path26.join(os21.homedir(), ".node9", "daemon.pid");
+  const pidFile = path27.join(os21.homedir(), ".node9", "daemon.pid");
   if (fs25.existsSync(pidFile)) {
     let pid;
     let port;
@@ -24789,9 +24889,10 @@ var ACTIVITY_SOCKET_PATH, DEFAULT_DAEMON_PORT, DAEMON_PORT, DAEMON_HOST;
 var init_daemon = __esm({
   "src/auth/daemon.ts"() {
     "use strict";
+    init_esm_shims();
     init_forecast_context();
     init_decision_record();
-    ACTIVITY_SOCKET_PATH = process.platform === "win32" ? "\\\\.\\pipe\\node9-activity" : path26.join(os21.tmpdir(), "node9-activity.sock");
+    ACTIVITY_SOCKET_PATH = process.platform === "win32" ? "\\\\.\\pipe\\node9-activity" : path27.join(os21.tmpdir(), "node9-activity.sock");
     DEFAULT_DAEMON_PORT = 7391;
     DAEMON_PORT = resolveDaemonPort();
     DAEMON_HOST = "127.0.0.1";
@@ -24814,6 +24915,7 @@ var GEMINI_FALLBACK_MODELS;
 var init_cost_gemini = __esm({
   "src/cost-gemini.ts"() {
     "use strict";
+    init_esm_shims();
     init_litellm();
     GEMINI_FALLBACK_MODELS = ["gemini-2.5-flash", "gemini-2.0-flash"];
   }
@@ -24885,13 +24987,14 @@ function parseCopilotSession(lines) {
 var init_cost_copilot = __esm({
   "src/cost-copilot.ts"() {
     "use strict";
+    init_esm_shims();
     init_litellm();
   }
 });
 
 // src/session-files.ts
 import * as fs26 from "fs";
-import * as path27 from "path";
+import * as path28 from "path";
 function listSessionFiles(dir2, maxDepth = 6) {
   const out = [];
   const walk3 = (d, rel, depth) => {
@@ -24903,8 +25006,8 @@ function listSessionFiles(dir2, maxDepth = 6) {
       return;
     }
     for (const e of entries) {
-      const childRel = rel ? path27.join(rel, e.name) : e.name;
-      if (e.isDirectory()) walk3(path27.join(d, e.name), childRel, depth + 1);
+      const childRel = rel ? path28.join(rel, e.name) : e.name;
+      if (e.isDirectory()) walk3(path28.join(d, e.name), childRel, depth + 1);
       else if (e.name.endsWith(".jsonl")) out.push(childRel);
     }
   };
@@ -24912,11 +25015,12 @@ function listSessionFiles(dir2, maxDepth = 6) {
   return out;
 }
 function sessionIdOf(relPath) {
-  return path27.basename(relPath).replace(/\.jsonl$/, "");
+  return path28.basename(relPath).replace(/\.jsonl$/, "");
 }
 var init_session_files = __esm({
   "src/session-files.ts"() {
     "use strict";
+    init_esm_shims();
   }
 });
 
@@ -24924,6 +25028,7 @@ var init_session_files = __esm({
 var init_safe_text = __esm({
   "src/utils/safe-text.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
   }
 });
@@ -24936,6 +25041,7 @@ var SYNC_INTERVAL_MS;
 var init_costSync = __esm({
   "src/costSync.ts"() {
     "use strict";
+    init_esm_shims();
     init_config();
     init_audit();
     init_litellm();
@@ -24998,6 +25104,7 @@ var HUMAN_SOURCES, TIMEOUT_SOURCES, NON_DECISION_SOURCES, has;
 var init_decision = __esm({
   "src/audit/decision.ts"() {
     "use strict";
+    init_esm_shims();
     HUMAN_SOURCES = /* @__PURE__ */ new Set([
       "daemon",
       "cloud",
@@ -25020,6 +25127,7 @@ var MAX_LINE_BYTES;
 var init_scan_watermark = __esm({
   "src/daemon/scan-watermark.ts"() {
     "use strict";
+    init_esm_shims();
     init_dlp();
     init_registry();
     init_config();
@@ -25031,7 +25139,7 @@ var init_scan_watermark = __esm({
 // src/cli/aggregate/report-audit.ts
 import fs27 from "fs";
 import os22 from "os";
-import path28 from "path";
+import path29 from "path";
 function buildTestTimestamps(allEntries) {
   const testTs = /* @__PURE__ */ new Set();
   for (const e of allEntries) {
@@ -25167,7 +25275,7 @@ function freezeClaudeCost(acc) {
   };
 }
 function processClaudeCostProject(proj, projectsDir, start, end, acc) {
-  const projPath = path28.join(projectsDir, proj);
+  const projPath = path29.join(projectsDir, proj);
   let files;
   try {
     const stat = fs27.statSync(projPath);
@@ -25178,7 +25286,7 @@ function processClaudeCostProject(proj, projectsDir, start, end, acc) {
   }
   const startMs = start.getTime();
   for (const file2 of files) {
-    const filePath = path28.join(projPath, file2);
+    const filePath = path29.join(projPath, file2);
     try {
       if (fs27.statSync(filePath).mtimeMs < startMs) continue;
     } catch {
@@ -25417,7 +25525,7 @@ function listGeminiSessionFiles(geminiTmpDir) {
     return out;
   }
   for (const proj of dirs) {
-    const chatsDir = path28.join(geminiTmpDir, proj, "chats");
+    const chatsDir = path29.join(geminiTmpDir, proj, "chats");
     let files;
     try {
       if (!fs27.statSync(chatsDir).isDirectory()) continue;
@@ -25427,7 +25535,7 @@ function listGeminiSessionFiles(geminiTmpDir) {
     }
     for (const f of files) {
       if (!f.endsWith(".jsonl")) continue;
-      out.push({ projectKey: proj, file: path28.join(chatsDir, f) });
+      out.push({ projectKey: proj, file: path29.join(chatsDir, f) });
     }
   }
   return out;
@@ -25468,10 +25576,10 @@ function dimensionOfBlock(checkedBy, ruleName) {
 }
 function aggregateReportFromAudit(period, opts = {}) {
   const now = opts.now ?? /* @__PURE__ */ new Date();
-  const auditLogPath2 = opts.auditLogPath ?? path28.join(os22.homedir(), ".node9", "audit.log");
-  const claudeProjectsDir = opts.claudeProjectsDir ?? path28.join(os22.homedir(), ".claude", "projects");
+  const auditLogPath2 = opts.auditLogPath ?? path29.join(os22.homedir(), ".node9", "audit.log");
+  const claudeProjectsDir = opts.claudeProjectsDir ?? path29.join(os22.homedir(), ".claude", "projects");
   const codexSessionsDir2 = opts.codexSessionsDir ?? codexSessionsDir();
-  const geminiTmpDir = opts.geminiTmpDir ?? path28.join(os22.homedir(), ".gemini", "tmp");
+  const geminiTmpDir = opts.geminiTmpDir ?? path29.join(os22.homedir(), ".gemini", "tmp");
   const hasAuditFile = fs27.existsSync(auditLogPath2);
   const allEntries = opts.preloadedAuditEntries ?? parseAuditLog(auditLogPath2);
   const unackedDlp = allEntries.filter((e) => e.source === "response-dlp");
@@ -25703,6 +25811,7 @@ var TEST_COMMAND_RE2, SUPERSEDE_WINDOW_MS, GEMINI_FALLBACK_MODELS2;
 var init_report_audit = __esm({
   "src/cli/aggregate/report-audit.ts"() {
     "use strict";
+    init_esm_shims();
     init_costSync();
     init_litellm();
     init_cost_codex();
@@ -25726,6 +25835,7 @@ function isKeyedForPolicy() {
 var init_keyed_guard = __esm({
   "src/config/keyed-guard.ts"() {
     "use strict";
+    init_esm_shims();
     init_config();
   }
 });
@@ -25735,6 +25845,7 @@ var APP_CATALOG, APP_BY_SLUG;
 var init_catalog = __esm({
   "src/apps/catalog.ts"() {
     "use strict";
+    init_esm_shims();
     APP_CATALOG = [
       {
         slug: "redis",
@@ -25864,10 +25975,10 @@ var init_catalog = __esm({
 
 // src/daemon/mcp-tools.ts
 import fs28 from "fs";
-import path29 from "path";
+import path30 from "path";
 import os23 from "os";
 function getMcpToolsFile() {
-  return path29.join(os23.homedir(), ".node9", "mcp-tools.json");
+  return path30.join(os23.homedir(), ".node9", "mcp-tools.json");
 }
 function readMcpToolsConfig() {
   try {
@@ -25882,6 +25993,7 @@ function readMcpToolsConfig() {
 var init_mcp_tools = __esm({
   "src/daemon/mcp-tools.ts"() {
     "use strict";
+    init_esm_shims();
     init_mcp_cmd();
   }
 });
@@ -25889,9 +26001,9 @@ var init_mcp_tools = __esm({
 // src/apps/state.ts
 import fs29 from "fs";
 import os24 from "os";
-import path30 from "path";
+import path31 from "path";
 function appsFilePath(home = os24.homedir()) {
-  return path30.join(home, ".node9", "apps.json");
+  return path31.join(home, ".node9", "apps.json");
 }
 function emptyFile() {
   return { version: 1, apps: /* @__PURE__ */ Object.create(null), links: /* @__PURE__ */ Object.create(null) };
@@ -25993,6 +26105,7 @@ var SIGNAL_KINDS, linkCache, NO_LINKS;
 var init_state = __esm({
   "src/apps/state.ts"() {
     "use strict";
+    init_esm_shims();
     init_catalog();
     init_shields();
     init_audit();
@@ -26004,7 +26117,7 @@ var init_state = __esm({
 });
 
 // src/context-sniper.ts
-import path31 from "path";
+import path32 from "path";
 function smartTruncate(str, maxLen = 500) {
   if (str.length <= maxLen) return str;
   const edge = Math.floor(maxLen / 2) - 3;
@@ -26056,7 +26169,7 @@ function computeRiskMetadata(args, tier, blockedByLabel, matchedField, matchedWo
       intent = "EDIT";
       if (obj.file_path) {
         editFilePath = String(obj.file_path);
-        editFileName = path31.basename(editFilePath);
+        editFileName = path32.basename(editFilePath);
       }
       const result = extractContext(String(obj.new_string), matchedWord);
       contextSnippet = result.snippet;
@@ -26092,6 +26205,7 @@ var CODE_KEYS;
 var init_context_sniper = __esm({
   "src/context-sniper.ts"() {
     "use strict";
+    init_esm_shims();
     CODE_KEYS = [
       "command",
       "cmd",
@@ -26113,7 +26227,7 @@ var init_context_sniper = __esm({
 
 // src/ui/native.ts
 import { spawn } from "child_process";
-import path32 from "path";
+import path33 from "path";
 function resolveNativeDecision(opts) {
   const { code, output, elapsedMs, locked } = opts;
   if (locked) return "deny";
@@ -26141,7 +26255,7 @@ function formatArgs(args, matchedField, matchedWord) {
   if (typeof parsed === "object" && !Array.isArray(parsed)) {
     const obj = parsed;
     if (obj.old_string !== void 0 && obj.new_string !== void 0) {
-      const file2 = obj.file_path ? path32.basename(String(obj.file_path)) : "file";
+      const file2 = obj.file_path ? path33.basename(String(obj.file_path)) : "file";
       const oldPreview = smartTruncate(String(obj.old_string), 120);
       const newPreview = extractContext(String(obj.new_string), matchedWord).snippet;
       return {
@@ -26346,6 +26460,7 @@ var isTestEnv, MIN_INTERACTION_MS;
 var init_native = __esm({
   "src/ui/native.ts"() {
     "use strict";
+    init_esm_shims();
     init_context_sniper();
     init_safe_text();
     isTestEnv = () => {
@@ -26358,7 +26473,7 @@ var init_native = __esm({
 // src/auth/session-script.ts
 import fs30 from "fs";
 import os25 from "os";
-import path33 from "path";
+import path34 from "path";
 function readScriptFile(resolved) {
   let fd;
   try {
@@ -26387,7 +26502,7 @@ function readScriptFile(resolved) {
 }
 function absolute(p, cwd, home) {
   const spelled = p === "~" || p.startsWith("~/") ? home + p.slice(1) : p;
-  return path33.resolve(cwd, spelled);
+  return path34.resolve(cwd, spelled);
 }
 async function resolveSessionScript(toolName, args, cwd, layers, deps, home = os25.homedir()) {
   try {
@@ -26444,6 +26559,7 @@ var MAX_SCRIPT_BYTES, MAX_RECORDED_WRITES;
 var init_session_script = __esm({
   "src/auth/session-script.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
     init_daemon();
     init_file_access();
@@ -26454,7 +26570,7 @@ var init_session_script = __esm({
 
 // src/utils/git-remotes.ts
 import fs31 from "fs";
-import path34 from "path";
+import path35 from "path";
 function readSmallFile(p, max) {
   let fd;
   try {
@@ -26486,20 +26602,20 @@ function gitRemoteHost(url) {
   return null;
 }
 function findGitConfig(dir2, walkUp = true) {
-  let cur = path34.resolve(dir2);
+  let cur = path35.resolve(dir2);
   for (let i = 0; i < (walkUp ? 64 : 1); i++) {
-    const dotGit = path34.join(cur, ".git");
-    const direct = readSmallFile(path34.join(dotGit, "config"), 1e6);
+    const dotGit = path35.join(cur, ".git");
+    const direct = readSmallFile(path35.join(dotGit, "config"), 1e6);
     if (direct !== null) return direct;
     const pointer = readSmallFile(dotGit, 4096);
     const m = pointer && /^gitdir:\s*(.+?)\s*$/m.exec(pointer);
     if (m) {
-      let gitDir = path34.resolve(cur, m[1]);
-      const common = readSmallFile(path34.join(gitDir, "commondir"), 4096);
-      if (common !== null) gitDir = path34.resolve(gitDir, common.trim());
-      return readSmallFile(path34.join(gitDir, "config"), 1e6);
+      let gitDir = path35.resolve(cur, m[1]);
+      const common = readSmallFile(path35.join(gitDir, "commondir"), 4096);
+      if (common !== null) gitDir = path35.resolve(gitDir, common.trim());
+      return readSmallFile(path35.join(gitDir, "config"), 1e6);
     }
-    const parent = path34.dirname(cur);
+    const parent = path35.dirname(cur);
     if (parent === cur) return null;
     cur = parent;
   }
@@ -26508,12 +26624,12 @@ function findGitConfig(dir2, walkUp = true) {
 function readGitRemotes(dir2, opts = {}) {
   if (!dir2) return [];
   const walkUp = opts.walkUp !== false;
-  const key = `${walkUp ? "up" : "at"}:${path34.resolve(dir2)}`;
+  const key = `${walkUp ? "up" : "at"}:${path35.resolve(dir2)}`;
   const hit = cache4.get(key);
   if (hit) return hit;
   const out = [];
   try {
-    const cfg = findGitConfig(path34.resolve(dir2), walkUp);
+    const cfg = findGitConfig(path35.resolve(dir2), walkUp);
     if (cfg !== null) {
       let current = null;
       for (const line of cfg.split(/\r?\n/)) {
@@ -26542,6 +26658,7 @@ var cache4;
 var init_git_remotes = __esm({
   "src/utils/git-remotes.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
     cache4 = /* @__PURE__ */ new Map();
   }
@@ -26549,17 +26666,17 @@ var init_git_remotes = __esm({
 
 // src/exposure/known-hosts.ts
 import fs32 from "fs";
-import path35 from "path";
+import path36 from "path";
 function manifestRoot(dir2) {
-  let cur = path35.resolve(dir2);
+  let cur = path36.resolve(dir2);
   for (let i = 0; i < 64; i++) {
     for (const [m] of ECOSYSTEMS) {
       try {
-        if (fs32.existsSync(path35.join(cur, m))) return cur;
+        if (fs32.existsSync(path36.join(cur, m))) return cur;
       } catch {
       }
     }
-    const parent = path35.dirname(cur);
+    const parent = path36.dirname(cur);
     if (parent === cur) return null;
     cur = parent;
   }
@@ -26568,7 +26685,7 @@ function manifestRoot(dir2) {
 function knownProjectHosts(dir2) {
   const empty = { hosts: /* @__PURE__ */ new Set(), repos: /* @__PURE__ */ new Set(), remotes: /* @__PURE__ */ new Map() };
   if (!dir2) return empty;
-  const key = path35.resolve(dir2);
+  const key = path36.resolve(dir2);
   const hit = cache5.get(key);
   if (hit) return hit;
   const out = { hosts: /* @__PURE__ */ new Set(), repos: /* @__PURE__ */ new Set(), remotes: /* @__PURE__ */ new Map() };
@@ -26581,7 +26698,7 @@ function knownProjectHosts(dir2) {
     const root = manifestRoot(key);
     if (root !== null) {
       for (const [m, registry] of ECOSYSTEMS) {
-        if (fs32.existsSync(path35.join(root, m))) out.hosts.add(registry);
+        if (fs32.existsSync(path36.join(root, m))) out.hosts.add(registry);
       }
       try {
         if (fs32.readdirSync(root).some((f) => f.endsWith(".gemspec")))
@@ -26598,6 +26715,7 @@ var ECOSYSTEMS, cache5;
 var init_known_hosts = __esm({
   "src/exposure/known-hosts.ts"() {
     "use strict";
+    init_esm_shims();
     init_git_remotes();
     ECOSYSTEMS = [
       ["package.json", "host:registry.npmjs.org"],
@@ -26613,7 +26731,7 @@ var init_known_hosts = __esm({
 // src/exposure/writes.ts
 import fs33 from "fs";
 import os26 from "os";
-import path36 from "path";
+import path37 from "path";
 function writtenContent(args) {
   if (!args || typeof args !== "object" || Array.isArray(args)) return [];
   const a = args;
@@ -26661,7 +26779,7 @@ function judgeWritesAfterExposure(opts) {
     seen.add(p);
     if (p === "/dev" || p.startsWith("/dev/")) continue;
     if (root !== null && isInside(root, p)) {
-      if (isAgentInstructionPath(p, root) && (path36.basename(p) !== "package.json" || packageScriptsTouched(opts.args, p, opts.shellCommand)))
+      if (isAgentInstructionPath(p, root) && (path37.basename(p) !== "package.json" || packageScriptsTouched(opts.args, p, opts.shellCommand)))
         holds.push({ path: p, why: "agent-instruction" });
       continue;
     }
@@ -26684,6 +26802,7 @@ var WRITE_OPS, LIFECYCLE_RE;
 var init_writes = __esm({
   "src/exposure/writes.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
     WRITE_OPS = /* @__PURE__ */ new Set(["write", "create", "remove"]);
     LIFECYCLE_RE = /"(scripts|preinstall|install|postinstall|prepare|prepublish|prepublishOnly|prepack|postpack|publish|postpublish)"\s*:/;
@@ -26695,6 +26814,7 @@ var SESSION_EXPOSURE_TTL_MS;
 var init_exposure_store = __esm({
   "src/daemon/exposure-store.ts"() {
     "use strict";
+    init_esm_shims();
     SESSION_EXPOSURE_TTL_MS = 4 * 60 * 60 * 1e3;
   }
 });
@@ -26703,13 +26823,13 @@ var init_exposure_store = __esm({
 import crypto3 from "crypto";
 import fs34 from "fs";
 import os27 from "os";
-import path37 from "path";
+import path38 from "path";
 function dir() {
-  return path37.join(os27.homedir(), ".node9", "exposure-sessions");
+  return path38.join(os27.homedir(), ".node9", "exposure-sessions");
 }
 function file(sessionId) {
   const id = crypto3.createHash("sha256").update(sessionId).digest("hex").slice(0, 32);
-  return path37.join(dir(), id);
+  return path38.join(dir(), id);
 }
 function maybeSessionExposed(sessionId) {
   if (!sessionId) return false;
@@ -26725,6 +26845,7 @@ function maybeSessionExposed(sessionId) {
 var init_marker = __esm({
   "src/exposure/marker.ts"() {
     "use strict";
+    init_esm_shims();
     init_exposure_store();
     init_forecast_context();
   }
@@ -26804,6 +26925,7 @@ var EXPOSURE_LABEL, AGENT_INTERNAL_PREFIXES, inventoryCache, inventoryStamp, BUI
 var init_roles = __esm({
   "src/exposure/roles.ts"() {
     "use strict";
+    init_esm_shims();
     init_mcp_tools();
     EXPOSURE_LABEL = "\u{1F6E1}\uFE0F Node9 Exposure";
     AGENT_INTERNAL_PREFIXES = ["ccd_", "visualize"];
@@ -26833,10 +26955,10 @@ var init_roles = __esm({
 
 // src/auth/trusted-recipients.ts
 import fs36 from "fs";
-import path38 from "path";
+import path39 from "path";
 import os28 from "os";
 function getTrustedRecipientsPath() {
-  return path38.join(os28.homedir(), ".node9", "trusted-recipients.json");
+  return path39.join(os28.homedir(), ".node9", "trusted-recipients.json");
 }
 function readTrustedRecipients() {
   try {
@@ -26849,7 +26971,7 @@ function readTrustedRecipients() {
 }
 function writeTrustedRecipients(entries) {
   const filePath = getTrustedRecipientsPath();
-  fs36.mkdirSync(path38.dirname(filePath), { recursive: true });
+  fs36.mkdirSync(path39.dirname(filePath), { recursive: true });
   const tmp = filePath + ".node9-tmp";
   fs36.writeFileSync(tmp, JSON.stringify({ entries }, null, 2), { mode: 384 });
   fs36.renameSync(tmp, filePath);
@@ -26882,6 +27004,7 @@ var cache6;
 var init_trusted_recipients = __esm({
   "src/auth/trusted-recipients.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
     cache6 = null;
   }
@@ -26889,7 +27012,7 @@ var init_trusted_recipients = __esm({
 
 // src/auth/state.ts
 import fs37 from "fs";
-import path39 from "path";
+import path40 from "path";
 import os29 from "os";
 function extractCommandPattern(toolName, args) {
   const lower2 = toolName.toLowerCase();
@@ -26967,7 +27090,7 @@ function writeTrustSession(toolName, durationMs, args) {
 }
 function getPersistentDecision(toolName) {
   try {
-    const file2 = path39.join(os29.homedir(), ".node9", "decisions.json");
+    const file2 = path40.join(os29.homedir(), ".node9", "decisions.json");
     if (!fs37.existsSync(file2)) return null;
     const decisions = JSON.parse(fs37.readFileSync(file2, "utf-8"));
     const d = decisions[toolName];
@@ -26980,18 +27103,19 @@ var PAUSED_FILE, TRUST_FILE;
 var init_state2 = __esm({
   "src/auth/state.ts"() {
     "use strict";
+    init_esm_shims();
     init_policy();
     init_atomic_write();
     init_forecast_context();
-    PAUSED_FILE = path39.join(os29.homedir(), ".node9", "PAUSED");
-    TRUST_FILE = path39.join(os29.homedir(), ".node9", "trust.json");
+    PAUSED_FILE = path40.join(os29.homedir(), ".node9", "PAUSED");
+    TRUST_FILE = path40.join(os29.homedir(), ".node9", "trust.json");
   }
 });
 
 // src/auth/cloud.ts
 import fs38 from "fs";
 import os30 from "os";
-import path40 from "path";
+import path41 from "path";
 function maskArgsForCloud(args) {
   if (args === void 0 || args === null) return args;
   try {
@@ -27024,7 +27148,7 @@ async function initNode9SaaS(toolName, args, creds, meta, riskMetadata, agentPol
   let ciContext;
   if (process.env.CI) {
     try {
-      const ciContextPath = path40.join(os30.homedir(), ".node9", "ci-context.json");
+      const ciContextPath = path41.join(os30.homedir(), ".node9", "ci-context.json");
       const ci = readCappedText(ciContextPath, 1e4);
       if (!ci) throw new Error("ci-context.json unreadable");
       if (ci.truncated) throw new Error("ci-context.json exceeds 10 KB");
@@ -27160,6 +27284,7 @@ var CLOUD_ARRAY_KEYS;
 var init_cloud = __esm({
   "src/auth/cloud.ts"() {
     "use strict";
+    init_esm_shims();
     init_audit();
     init_safe_text();
     init_read_capped();
@@ -27171,10 +27296,10 @@ var init_cloud = __esm({
 
 // src/loop-detector.ts
 import fs39 from "fs";
-import path41 from "path";
+import path42 from "path";
 import os31 from "os";
 function loopStateFile() {
-  return path41.join(os31.homedir(), ".node9", "loop-state.json");
+  return path42.join(os31.homedir(), ".node9", "loop-state.json");
 }
 function readState() {
   try {
@@ -27188,7 +27313,7 @@ function readState() {
   }
 }
 function writeState(records) {
-  const dir2 = path41.dirname(loopStateFile());
+  const dir2 = path42.dirname(loopStateFile());
   if (!fs39.existsSync(dir2)) fs39.mkdirSync(dir2, { recursive: true });
   const tmpPath = `${loopStateFile()}.${os31.hostname()}.${process.pid}.tmp`;
   fs39.writeFileSync(tmpPath, JSON.stringify(records));
@@ -27219,6 +27344,7 @@ function recordAndCheck(tool, args, threshold = 3, windowMs = 12e4) {
 var init_loop_detector = __esm({
   "src/loop-detector.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
     init_forecast_context();
     init_dist();
@@ -27243,6 +27369,7 @@ var BLOCKED_BY, DASH_BLOCKED_BY, SHIELD;
 var init_negotiation = __esm({
   "src/policy/negotiation.ts"() {
     "use strict";
+    init_esm_shims();
     BLOCKED_BY = " is blocked by ";
     DASH_BLOCKED_BY = " \u2014 blocked by ";
     SHIELD = " shield";
@@ -27339,6 +27466,7 @@ var CHANNEL_NAMES;
 var init_card_result = __esm({
   "src/auth/card-result.ts"() {
     "use strict";
+    init_esm_shims();
     init_decision_record();
     CHANNEL_NAMES = {
       terminal: "Terminal (node9 tail)",
@@ -27351,7 +27479,7 @@ var init_card_result = __esm({
 
 // src/auth/orchestrator.ts
 import os32 from "os";
-import path42 from "path";
+import path43 from "path";
 function isProtectedPathRule(ruleName) {
   if (!ruleName) return false;
   return /^(?:org:)?block-path-/.test(ruleName) || /^shield:project-jail:block-read-/.test(ruleName);
@@ -27398,9 +27526,9 @@ function isMcpToolName(toolName) {
   return /^mcp__[^_](?:[^_]|_(?!_))*?__/i.test(toolName);
 }
 function absoluteUploadPath(spelled, cwd) {
-  const expanded = spelled === "~" || spelled.startsWith("~/") ? path42.join(os32.homedir(), spelled.slice(1)) : spelled;
-  if (path42.isAbsolute(expanded)) return expanded;
-  return cwd && path42.isAbsolute(cwd) ? path42.resolve(cwd, expanded) : expanded;
+  const expanded = spelled === "~" || spelled.startsWith("~/") ? path43.join(os32.homedir(), spelled.slice(1)) : spelled;
+  if (path43.isAbsolute(expanded)) return expanded;
+  return cwd && path43.isAbsolute(cwd) ? path43.resolve(cwd, expanded) : expanded;
 }
 function extractFilePaths(toolName, args, shellCommand) {
   const paths = [];
@@ -28747,6 +28875,7 @@ var SENSITIVE_PATH_PATTERN, WRITE_TOOLS, VERDICT_RANK2, NETWORK_COMMAND_RE;
 var init_orchestrator = __esm({
   "src/auth/orchestrator.ts"() {
     "use strict";
+    init_esm_shims();
     init_state();
     init_native();
     init_context_sniper();
@@ -28802,6 +28931,7 @@ var TAINT_TTL_MS, SESSION_TAINT_TTL_MS, EXPOSURE_TTL_MS, ForecastSessionState;
 var init_forecast_state = __esm({
   "src/auth/forecast-state.ts"() {
     "use strict";
+    init_esm_shims();
     TAINT_TTL_MS = 60 * 60 * 1e3;
     SESSION_TAINT_TTL_MS = 30 * 60 * 1e3;
     EXPOSURE_TTL_MS = 4 * 60 * 60 * 1e3;
@@ -28986,6 +29116,7 @@ var LAYER_BY_TAG, LOGGED_TAGS;
 var init_forecast = __esm({
   "src/auth/forecast.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
     init_config();
     init_orchestrator();
@@ -29017,17 +29148,17 @@ var init_forecast = __esm({
 
 // src/version.ts
 import fs40 from "fs";
-import path43 from "path";
+import path44 from "path";
 function readVersion() {
   let dir2 = __dirname;
   for (let i = 0; i < 5; i++) {
-    const p = path43.join(dir2, "package.json");
+    const p = path44.join(dir2, "package.json");
     try {
       const pkg = JSON.parse(fs40.readFileSync(p, "utf-8"));
       if (pkg.name === "@node9/proxy" && typeof pkg.version === "string") return pkg.version;
     } catch {
     }
-    const parent = path43.dirname(dir2);
+    const parent = path44.dirname(dir2);
     if (parent === dir2) break;
     dir2 = parent;
   }
@@ -29037,6 +29168,7 @@ var PROXY_VERSION;
 var init_version = __esm({
   "src/version.ts"() {
     "use strict";
+    init_esm_shims();
     PROXY_VERSION = readVersion();
   }
 });
@@ -29044,10 +29176,10 @@ var init_version = __esm({
 // src/cli/commands/scan-cache.ts
 import fs41 from "fs";
 import os33 from "os";
-import path44 from "path";
+import path45 from "path";
 import { createHash as createHash5 } from "crypto";
 function scanCacheRoot() {
-  return path44.join(os33.homedir(), ".node9", "scan-cache");
+  return path45.join(os33.homedir(), ".node9", "scan-cache");
 }
 function configHashOf(config) {
   const h = createHash5("sha256");
@@ -29055,7 +29187,7 @@ function configHashOf(config) {
   h.update(JSON.stringify(config.policySource));
   h.update(JSON.stringify(config.policy));
   for (const name of SIDECAR_FILES) {
-    const st = fileStamp(path44.join(os33.homedir(), ".node9", name));
+    const st = fileStamp(path45.join(os33.homedir(), ".node9", name));
     h.update(`|${name}:${st ? `${st.size}:${st.mtimeMs}` : "absent"}`);
   }
   return h.digest("hex").slice(0, 16);
@@ -29072,6 +29204,7 @@ var SCAN_CACHE_VERSION, FLUSH_EVERY_FILES, FLUSH_EVERY_MS, activeCaches, SIDECAR
 var init_scan_cache = __esm({
   "src/cli/commands/scan-cache.ts"() {
     "use strict";
+    init_esm_shims();
     init_dist();
     init_version();
     SCAN_CACHE_VERSION = 3;
@@ -29086,8 +29219,8 @@ var init_scan_cache = __esm({
       "trusted-hosts.json",
       "trusted-recipients.json",
       "rules-cache.json",
-      path44.join("osv", "npm", "meta.json"),
-      path44.join("osv", "PyPI", "meta.json")
+      path45.join("osv", "npm", "meta.json"),
+      path45.join("osv", "PyPI", "meta.json")
     ];
     ScanCache = class {
       root;
@@ -29116,7 +29249,7 @@ var init_scan_cache = __esm({
         if (!this.enabled) return fresh;
         try {
           const raw = JSON.parse(
-            fs41.readFileSync(path44.join(this.root, "index.json"), "utf8")
+            fs41.readFileSync(path45.join(this.root, "index.json"), "utf8")
           );
           if (raw.cacheVersion !== SCAN_CACHE_VERSION || raw.engineVersion !== CANONICAL_EXTRACTOR_VERSION || raw.proxyVersion !== PROXY_VERSION || raw.configHash !== configHash || typeof raw.files !== "object") {
             this.dropAll();
@@ -29153,7 +29286,7 @@ var init_scan_cache = __esm({
           }
         }
         try {
-          const stored = JSON.parse(fs41.readFileSync(path44.join(this.root, e.result), "utf8"));
+          const stored = JSON.parse(fs41.readFileSync(path45.join(this.root, e.result), "utf8"));
           if ((stored.judgedFrom ?? null) !== (e.judgedFrom ?? null) || !stored.result) {
             this.misses++;
             return null;
@@ -29168,13 +29301,13 @@ var init_scan_cache = __esm({
       put(filePath, stamp, agent, result, hasher, judgeFrom = null) {
         if (!this.enabled) return;
         const name = createHash5("sha256").update(`${agent}|${filePath}`).digest("hex").slice(0, 40);
-        const rel = path44.join("files", name.slice(0, 2), `${name}.json`);
+        const rel = path45.join("files", name.slice(0, 2), `${name}.json`);
         const configHashes = {};
         if (hasher)
           for (const cwd of result.configCwds ?? []) configHashes[cwd] = hasher.configHashFor(cwd);
         try {
-          const abs = path44.join(this.root, rel);
-          fs41.mkdirSync(path44.dirname(abs), { recursive: true, mode: 448 });
+          const abs = path45.join(this.root, rel);
+          fs41.mkdirSync(path45.dirname(abs), { recursive: true, mode: 448 });
           fs41.writeFileSync(
             abs,
             JSON.stringify({ judgedFrom: judgeFrom ? judgeFrom.toISOString() : null, result }),
@@ -29200,7 +29333,7 @@ var init_scan_cache = __esm({
         for (const [key, e] of Object.entries(this.index.files)) {
           if (fs41.existsSync(key)) continue;
           try {
-            fs41.rmSync(path44.join(this.root, e.result), { force: true });
+            fs41.rmSync(path45.join(this.root, e.result), { force: true });
           } catch {
           }
           delete this.index.files[key];
@@ -29222,9 +29355,9 @@ var init_scan_cache = __esm({
         if (!this.dirty) return;
         try {
           fs41.mkdirSync(this.root, { recursive: true, mode: 448 });
-          const tmp = path44.join(this.root, `index.${process.pid}.tmp`);
+          const tmp = path45.join(this.root, `index.${process.pid}.tmp`);
           fs41.writeFileSync(tmp, JSON.stringify(this.index), { mode: 384 });
-          fs41.renameSync(tmp, path44.join(this.root, "index.json"));
+          fs41.renameSync(tmp, path45.join(this.root, "index.json"));
           this.dirty = false;
         } catch {
         }
@@ -29236,7 +29369,7 @@ var init_scan_cache = __esm({
 // src/cli/commands/scan-judge.ts
 import fs42 from "fs";
 import os34 from "os";
-import path45 from "path";
+import path46 from "path";
 function findingDedupKey(f) {
   return `${f.source.rule.name ?? "<unnamed>"}|${preview(f.input)}|${f.project}|${f.repo ?? ""}`;
 }
@@ -29307,6 +29440,7 @@ var PREVIEW_LEN, HistoryJudge, CONTENT_FIELDS;
 var init_scan_judge = __esm({
   "src/cli/commands/scan-judge.ts"() {
     "use strict";
+    init_esm_shims();
     init_config();
     init_shields();
     init_forecast();
@@ -29335,20 +29469,20 @@ var init_scan_judge = __esm({
        *  file, so worktrees count), home-relative; undefined when none. Cached per
        *  directory: history repeats the same few cwds thousands of times. */
       repoOf(cwd) {
-        if (!cwd || !path45.isAbsolute(cwd)) return void 0;
+        if (!cwd || !path46.isAbsolute(cwd)) return void 0;
         if (this.repos.has(cwd)) return this.repos.get(cwd);
         let dir2 = cwd;
         let found;
         for (; ; ) {
           try {
-            if (fs42.existsSync(path45.join(dir2, ".git"))) {
+            if (fs42.existsSync(path46.join(dir2, ".git"))) {
               found = dir2;
               break;
             }
           } catch {
             break;
           }
-          const parent = path45.dirname(dir2);
+          const parent = path46.dirname(dir2);
           if (parent === dir2) break;
           dir2 = parent;
         }
@@ -29510,6 +29644,7 @@ function canonicalToolInput(rawToolName, input) {
 var init_hook_payload = __esm({
   "src/utils/hook-payload.ts"() {
     "use strict";
+    init_esm_shims();
   }
 });
 
@@ -29517,6 +29652,7 @@ var init_hook_payload = __esm({
 var init_scan_summary = __esm({
   "src/scan-summary.ts"() {
     "use strict";
+    init_esm_shims();
     init_shields();
     init_dist();
     init_dist();
@@ -29529,6 +29665,7 @@ import stringWidth from "string-width";
 var init_scan_derive = __esm({
   "src/cli/render/scan-derive.ts"() {
     "use strict";
+    init_esm_shims();
   }
 });
 
@@ -29536,6 +29673,7 @@ var init_scan_derive = __esm({
 var init_protection = __esm({
   "src/protection.ts"() {
     "use strict";
+    init_esm_shims();
   }
 });
 
@@ -29543,6 +29681,7 @@ var init_protection = __esm({
 var init_scan_json = __esm({
   "src/cli/render/scan-json.ts"() {
     "use strict";
+    init_esm_shims();
   }
 });
 
@@ -29550,6 +29689,7 @@ var init_scan_json = __esm({
 var init_scan_history = __esm({
   "src/cli/render/scan-history.ts"() {
     "use strict";
+    init_esm_shims();
     init_atomic_write();
   }
 });
@@ -29557,7 +29697,7 @@ var init_scan_history = __esm({
 // src/cli/commands/scan.ts
 import chalk6 from "chalk";
 import fs43 from "fs";
-import path46 from "path";
+import path47 from "path";
 import os35 from "os";
 import stringWidth2 from "string-width";
 function dayKey(ts) {
@@ -29771,7 +29911,7 @@ async function processClaudeFile(file2, projPath, projLabel, judge, judgeFrom, r
   const session = { sessionId, costUSD: 0, toolCalls: 0 };
   let raw;
   try {
-    raw = fs43.readFileSync(path46.join(projPath, file2), "utf-8");
+    raw = fs43.readFileSync(path47.join(projPath, file2), "utf-8");
   } catch {
     return false;
   }
@@ -29840,7 +29980,7 @@ async function processClaudeFile(file2, projPath, projLabel, judge, judgeFrom, r
           if (block.type !== "tool_result") continue;
           const filePath = block.tool_use_id ? toolUseFilePaths.get(block.tool_use_id) : void 0;
           if (filePath) {
-            const ext = path46.extname(filePath).toLowerCase();
+            const ext = path47.extname(filePath).toLowerCase();
             if (CODE_EXTENSIONS.has(ext)) continue;
           }
           const resultText = typeof block.content === "string" ? block.content : Array.isArray(block.content) ? block.content.map((c) => c.text ?? "").join("\n") : null;
@@ -29960,7 +30100,7 @@ async function processClaudeFile(file2, projPath, projLabel, judge, judgeFrom, r
   return true;
 }
 async function processClaudeProjectAsync(proj, projectsDir, judge, cache7, startDate, result, dedup, canaryVals, onProgress, onLine) {
-  const projPath = path46.join(projectsDir, proj);
+  const projPath = path47.join(projectsDir, proj);
   try {
     if (!fs43.statSync(projPath).isDirectory()) return;
   } catch {
@@ -29974,7 +30114,7 @@ async function processClaudeProjectAsync(proj, projectsDir, judge, cache7, start
     return;
   }
   for (const file2 of files) {
-    const filePath = path46.join(projPath, file2);
+    const filePath = path47.join(projPath, file2);
     const stamp = fileStamp(filePath);
     if (!fileMayHoldWindow(stamp, startDate)) continue;
     result.filesScanned++;
@@ -30117,7 +30257,7 @@ function mergeFileScan(result, file2, dedup, startDate = null) {
   }
 }
 async function scanClaudeHistoryAsync(startDate, onProgress, onLine, opts = {}) {
-  const projectsDir = path46.join(os35.homedir(), ".claude", "projects");
+  const projectsDir = path47.join(os35.homedir(), ".claude", "projects");
   const result = emptyClaudeScan();
   if (!fs43.existsSync(projectsDir)) return result;
   let projDirs;
@@ -30150,7 +30290,7 @@ async function scanClaudeHistoryAsync(startDate, onProgress, onLine, opts = {})
 }
 async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
   const canaryVals = safeCanaryScanValues();
-  const tmpDir = path46.join(os35.homedir(), ".gemini", "tmp");
+  const tmpDir = path47.join(os35.homedir(), ".gemini", "tmp");
   const result = {
     filesScanned: 0,
     sessions: 0,
@@ -30177,7 +30317,7 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
   const judge = new HistoryJudge();
   const cache7 = openScanCache(judge, opts);
   for (const slug2 of slugDirs) {
-    const slugPath = path46.join(tmpDir, slug2);
+    const slugPath = path47.join(tmpDir, slug2);
     try {
       if (!fs43.statSync(slugPath).isDirectory()) continue;
     } catch {
@@ -30186,11 +30326,11 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
     let projLabel = stripTerminalEscapes(slug2).slice(0, 40);
     try {
       projLabel = stripTerminalEscapes(
-        fs43.readFileSync(path46.join(slugPath, ".project_root"), "utf-8").trim()
+        fs43.readFileSync(path47.join(slugPath, ".project_root"), "utf-8").trim()
       ).replace(os35.homedir(), "~").slice(0, 40);
     } catch {
     }
-    const chatsDir = path46.join(slugPath, "chats");
+    const chatsDir = path47.join(slugPath, "chats");
     if (!fs43.existsSync(chatsDir)) continue;
     let chatFiles;
     try {
@@ -30200,7 +30340,7 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
     }
     for (const chatFile of chatFiles) {
       const sessionId = chatFile.replace(/\.jsonl?$/, "");
-      const filePath = path46.join(chatsDir, chatFile);
+      const filePath = path47.join(chatsDir, chatFile);
       const stamp = fileStamp(filePath);
       if (!fileMayHoldWindow(stamp, startDate)) continue;
       result.filesScanned++;
@@ -30214,7 +30354,7 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
       const fileDedup = emptyScanDedup();
       let raw;
       try {
-        raw = fs43.readFileSync(path46.join(chatsDir, chatFile), "utf-8");
+        raw = fs43.readFileSync(path47.join(chatsDir, chatFile), "utf-8");
       } catch {
         continue;
       }
@@ -30351,12 +30491,12 @@ async function scanGeminiHistory(startDate, onProgress, onLine, opts = {}) {
   return result;
 }
 function antigravityBrainDirs() {
-  return ["antigravity-cli", "antigravity-ide"].map((surface) => path46.join(os35.homedir(), ".gemini", surface, "brain")).filter((p) => fs43.existsSync(p));
+  return ["antigravity-cli", "antigravity-ide"].map((surface) => path47.join(os35.homedir(), ".gemini", surface, "brain")).filter((p) => fs43.existsSync(p));
 }
 function antigravityTranscriptPath(convPath) {
-  const logsDir = path46.join(convPath, ".system_generated", "logs");
+  const logsDir = path47.join(convPath, ".system_generated", "logs");
   for (const name of ["transcript_full.jsonl", "transcript.jsonl"]) {
-    const p = path46.join(logsDir, name);
+    const p = path47.join(logsDir, name);
     if (fs43.existsSync(p)) return p;
   }
   return null;
@@ -30392,7 +30532,7 @@ async function scanAntigravityHistory(startDate, onProgress, onLine, opts = {})
       continue;
     }
     for (const conv of convDirs) {
-      const convPath = path46.join(brainDir, conv);
+      const convPath = path47.join(brainDir, conv);
       try {
         if (!fs43.statSync(convPath).isDirectory()) continue;
       } catch {
@@ -30514,7 +30654,7 @@ async function scanAntigravityHistory(startDate, onProgress, onLine, opts = {})
               timestamp: timestamp2,
               sessionId,
               project: projLabel,
-              cwd: typeof input.cwd === "string" && path46.isAbsolute(input.cwd) ? input.cwd : void 0
+              cwd: typeof input.cwd === "string" && path47.isAbsolute(input.cwd) ? input.cwd : void 0
             },
             fileResult,
             fileDedup
@@ -30537,7 +30677,7 @@ async function scanAntigravityHistory(startDate, onProgress, onLine, opts = {})
 }
 async function scanCopilotHistory(startDate, onProgress, onLine, opts = {}) {
   const canaryVals = safeCanaryScanValues();
-  const sessionDir = path46.join(os35.homedir(), ".copilot", "session-state");
+  const sessionDir = path47.join(os35.homedir(), ".copilot", "session-state");
   const result = {
     filesScanned: 0,
     sessions: 0,
@@ -30565,7 +30705,7 @@ async function scanCopilotHistory(startDate, onProgress, onLine, opts = {}) {
   const judge = new HistoryJudge();
   const cache7 = openScanCache(judge, opts);
   for (const sessionId of sessionIds) {
-    const eventsPath = path46.join(sessionDir, sessionId, "events.jsonl");
+    const eventsPath = path47.join(sessionDir, sessionId, "events.jsonl");
     if (!fs43.existsSync(eventsPath)) continue;
     const stamp = fileStamp(eventsPath);
     if (!fileMayHoldWindow(stamp, startDate)) continue;
@@ -30606,7 +30746,7 @@ async function scanCopilotHistory(startDate, onProgress, onLine, opts = {}) {
         const cwd = ev.data?.context?.cwd;
         if (typeof cwd === "string" && cwd) {
           projLabel = stripTerminalEscapes(cwd).replace(os35.homedir(), "~").slice(0, 40);
-          if (path46.isAbsolute(cwd)) sessionCwd = cwd;
+          if (path47.isAbsolute(cwd)) sessionCwd = cwd;
         }
         continue;
       }
@@ -30763,7 +30903,7 @@ async function scanCodexHistory(startDate, onProgress, onLine, opts = {}) {
         startTime = String(payload["timestamp"] ?? "");
         const cwd = String(payload["cwd"] ?? "");
         projLabel = stripTerminalEscapes(cwd.replace(os35.homedir(), "~")).slice(0, 40);
-        if (path46.isAbsolute(cwd)) sessionCwd = cwd;
+        if (path47.isAbsolute(cwd)) sessionCwd = cwd;
         continue;
       }
       if (entry.type === "event_msg" && payload["type"] === "user_message") {
@@ -30883,6 +31023,7 @@ var toolInspectionMap, STATE_LOOKBACK_MS, CODE_EXTENSIONS, SELF_OUTPUT_MARKERS,
 var init_scan = __esm({
   "src/cli/commands/scan.ts"() {
     "use strict";
+    init_esm_shims();
     init_keyed_guard();
     init_shields();
     init_config();
@@ -30963,11 +31104,11 @@ var init_scan = __esm({
 // src/tui/dashboard/data.ts
 import fs44 from "fs";
 import os36 from "os";
-import path47 from "path";
+import path48 from "path";
 import http2 from "http";
 import { execFile } from "child_process";
 function auditLogPath() {
-  return path47.join(os36.homedir(), ".node9", "audit.log");
+  return path48.join(os36.homedir(), ".node9", "audit.log");
 }
 function readAuditEntriesAsync(chunkSize = 1e3, customPath) {
   return new Promise((resolve) => {
@@ -31149,9 +31290,9 @@ function shortenPath(p) {
   return p.startsWith(home) ? p.replace(home, "~") : p;
 }
 async function loadReportAuditAsync(period) {
-  const claudeProjectsDir = path47.join(os36.homedir(), ".claude", "projects");
+  const claudeProjectsDir = path48.join(os36.homedir(), ".claude", "projects");
   const codexSessionsDir2 = codexSessionsDir();
-  const geminiTmpDir = path47.join(os36.homedir(), ".gemini", "tmp");
+  const geminiTmpDir = path48.join(os36.homedir(), ".gemini", "tmp");
   const { start, end } = getDateRange(period, /* @__PURE__ */ new Date());
   const entries = await readAuditEntriesAsync();
   void ensurePricingLoaded();
@@ -31497,6 +31638,7 @@ var TEST_TOOLS, COST_WALK_LOOKBACK_MS, FORENSIC_CATEGORIES, SHELL_TOOLS, SSE_BAC
 var init_data = __esm({
   "src/tui/dashboard/data.ts"() {
     "use strict";
+    init_esm_shims();
     init_cost_codex();
     init_blast();
     init_posture();
@@ -31585,6 +31727,7 @@ function computeHealthBadge(input) {
 var init_health = __esm({
   "src/tui/dashboard/health.ts"() {
     "use strict";
+    init_esm_shims();
   }
 });
 
@@ -31622,6 +31765,7 @@ function localTimeOf(ts) {
 var init_format = __esm({
   "src/tui/dashboard/format.ts"() {
     "use strict";
+    init_esm_shims();
   }
 });
 
@@ -32072,6 +32216,7 @@ var COL, NOTIFICATION_HEIGHT, LIVE_SECURITY_ROWS_HEIGHT, LIVE_ACTIVITY_ROWS, SHI
 var init_panels = __esm({
   "src/tui/dashboard/panels.tsx"() {
     "use strict";
+    init_esm_shims();
     init_format();
     COL = {
       brand: "#FF8C42",
@@ -32129,6 +32274,7 @@ var BLOCK_REASON_LABELS;
 var init_util = __esm({
   "src/tui/dashboard/views/report/util.ts"() {
     "use strict";
+    init_esm_shims();
     BLOCK_REASON_LABELS = {
       timeout: "Approval timeout",
       "smart-rule-block": "Smart rule",
@@ -32179,6 +32325,7 @@ var ICON_W, LABEL_W, COUNT_W;
 var init_Protection = __esm({
   "src/tui/dashboard/views/report/panels/Protection.tsx"() {
     "use strict";
+    init_esm_shims();
     init_panels();
     init_util();
     ICON_W = 2;
@@ -32198,6 +32345,7 @@ var COST_LABEL;
 var init_cost_note = __esm({
   "src/cli/render/ink/panels/cost-note.ts"() {
     "use strict";
+    init_esm_shims();
     init_keyed_guard();
     COST_LABEL = "COST \xB7 based on API value";
   }
@@ -32260,6 +32408,7 @@ var LABEL_W2;
 var init_Cost = __esm({
   "src/tui/dashboard/views/report/panels/Cost.tsx"() {
     "use strict";
+    init_esm_shims();
     init_panels();
     init_format();
     init_cost_note();
@@ -32274,8 +32423,8 @@ import { Fragment as Fragment3, jsx as jsx4, jsxs as jsxs4 } from "react/jsx-run
 function TopToolsProjects({ audit }) {
   const data = audit?.data;
   const tools = data ? [...data.toolMap.entries()].sort(([, a], [, b]) => b.calls - a.calls).slice(0, ROW_LIMIT) : [];
-  const projects = data ? [...data.cost.byProject.entries()].map(([path48, r]) => ({
-    name: basenameOf(path48),
+  const projects = data ? [...data.cost.byProject.entries()].map(([path49, r]) => ({
+    name: basenameOf(path49),
     cost: r.cost,
     tokens: r.inputTokens + r.outputTokens
   })).sort((a, b) => b.cost - a.cost).slice(0, ROW_LIMIT) : [];
@@ -32328,6 +32477,7 @@ var ROW_LIMIT, TOOL_LABEL_W, TOOL_COUNT_W, COL_GUTTER, PROJECT_LABEL_W;
 var init_TopToolsProjects = __esm({
   "src/tui/dashboard/views/report/panels/TopToolsProjects.tsx"() {
     "use strict";
+    init_esm_shims();
     init_panels();
     init_format();
     init_util();
@@ -32399,6 +32549,7 @@ var ROW_LIMIT2, LABEL_W3;
 var init_PeriodShields = __esm({
   "src/tui/dashboard/views/report/panels/PeriodShields.tsx"() {
     "use strict";
+    init_esm_shims();
     init_panels();
     init_data();
     init_util();
@@ -32460,6 +32611,7 @@ var LABEL_WIDTH, PATH_ROW_LIMIT;
 var init_BlastRadius = __esm({
   "src/tui/dashboard/views/report/panels/BlastRadius.tsx"() {
     "use strict";
+    init_esm_shims();
     init_panels();
     LABEL_WIDTH = 36;
     PATH_ROW_LIMIT = 5;
@@ -32482,6 +32634,7 @@ var FRAMES;
 var init_Spinner = __esm({
   "src/tui/dashboard/views/report/panels/Spinner.tsx"() {
     "use strict";
+    init_esm_shims();
     FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
   }
 });
@@ -32525,6 +32678,7 @@ var ROW_LIMIT3, ICON_W2, LABEL_W4, COUNT_W2;
 var init_Leaks = __esm({
   "src/tui/dashboard/views/report/panels/Leaks.tsx"() {
     "use strict";
+    init_esm_shims();
     init_panels();
     init_Spinner();
     init_util();
@@ -32590,6 +32744,7 @@ var TOOL_ROWS;
 var init_Loops = __esm({
   "src/tui/dashboard/views/report/panels/Loops.tsx"() {
     "use strict";
+    init_esm_shims();
     init_panels();
     init_util();
     init_Spinner();
@@ -32626,6 +32781,7 @@ var ROW_LIMIT4, LABEL_W5, COUNT_W3;
 var init_TopBlocks = __esm({
   "src/tui/dashboard/views/report/panels/TopBlocks.tsx"() {
     "use strict";
+    init_esm_shims();
     init_panels();
     init_util();
     ROW_LIMIT4 = 5;
@@ -32701,13 +32857,14 @@ function pickTopLoopFile(loops) {
     map.set(k, (map.get(k) ?? 0) + (l.count ?? 0));
   }
   if (map.size === 0) return void 0;
-  const [path48, count] = [...map.entries()].sort((a, b) => b[1] - a[1])[0];
-  return { path: path48, count };
+  const [path49, count] = [...map.entries()].sort((a, b) => b[1] - a[1])[0];
+  return { path: path49, count };
 }
 var EMPTY_FILTERED_SCAN;
 var init_derive = __esm({
   "src/tui/dashboard/views/report/derive.ts"() {
     "use strict";
+    init_esm_shims();
     init_report_audit();
     EMPTY_FILTERED_SCAN = {
       leaks: [],
@@ -32907,6 +33064,7 @@ var PERIOD_LONG_LABEL;
 var init_report = __esm({
   "src/tui/dashboard/views/report/index.tsx"() {
     "use strict";
+    init_esm_shims();
     init_panels();
     init_Protection();
     init_Cost();
@@ -33427,6 +33585,7 @@ var LIVE_BUFFER_CAP, AUDIT_REFRESH_MS, BLAST_REFRESH_MS, FIXED_PANELS_HEIGHT, LI
 var init_App = __esm({
   "src/tui/dashboard/App.tsx"() {
     "use strict";
+    init_esm_shims();
     init_types();
     init_data();
     init_health();
@@ -33446,6 +33605,7 @@ var init_App = __esm({
 });
 
 // src/tui/dashboard/index.ts
+init_esm_shims();
 var ENTER_ALT_SCREEN = "\x1B[?1049h";
 var EXIT_ALT_SCREEN = "\x1B[?1049l";
 var altScreenActive = false;