@node9/proxy 2.6.2 → 2.7.1

package/dist/cli.js

@@ -243,8 +243,8 @@ function sanitizeConfig(raw) {
     }
   }
   const lines = result.error.issues.map((issue) => {
-    const path73 = issue.path.length > 0 ? issue.path.join(".") : "root";
-    return `  \u2022 ${path73}: ${issue.message}`;
+    const path74 = issue.path.length > 0 ? issue.path.join(".") : "root";
+    return `  \u2022 ${path74}: ${issue.message}`;
   });
   return {
     sanitized,
@@ -624,9 +624,9 @@ function matchesPattern(text, patterns) {
   const withoutDotSlash = text.replace(/^\.\//, "");
   return isMatch(withoutDotSlash) || isMatch(`./${withoutDotSlash}`);
 }
-function getNestedValue(obj, path73) {
+function getNestedValue(obj, path74) {
   if (!obj || typeof obj !== "object") return null;
-  const segments = path73.split(".");
+  const segments = path74.split(".");
   for (const seg of segments) {
     if (FORBIDDEN_PATH_SEGMENTS.has(seg)) return null;
   }
@@ -2561,8 +2561,7 @@ function extractSessionLevelFindings(calls, ctx) {
       occurrenceCount: 1,
       loopCount: verdict.count,
       loopKind: "loop",
-      commandPreview: previewArgs(call.args, DEDUPE_PREVIEW_LEN),
-      costUsd: verdict.count * COST_PER_LOOP_ITER_USD
+      commandPreview: previewArgs(call.args, DEDUPE_PREVIEW_LEN)
     });
   }
   return out;
@@ -2632,7 +2631,7 @@ function* stringValues(obj, depth = 0) {
   }
   for (const v of Object.values(obj)) yield* stringValues(v, depth + 1);
 }
-var import_safe_regex2, import_mvdan_sh, import_picomatch, import_safe_regex22, import_safe_regex23, import_crypto3, MAX, UNTRUSTED_TOOLS, SIGNALS, ASSIGNMENT_CONTEXT_RE, DLP_STOPWORDS, DLP_PATTERNS, DLP_PATTERNS_GLOBAL, SENSITIVE_PATH_PATTERNS, MAX_DEPTH, MAX_STRING_BYTES, MAX_JSON_PARSE_BYTES, DLP_SCAN_LIMITS, MAX_REGEX_LENGTH, REGEX_CACHE_MAX, regexCache, FORBIDDEN_PATH_SEGMENTS, syntax, sharedParser, MESSAGE_FLAGS, SHELL_INTERPRETERS, DOWNLOAD_CMDS, NORMALIZE_CACHE_MAX, normalizeCache, AST_CACHE_MAX, astCache, PARSE_FAIL, FS_READ_TOOLS, FS_OP_PRESCREEN_RE, HOME_CACHE_ALLOWLIST, SENSITIVE_PATH_RULES, BASH_TOOL_NAMES, AST_FS_REGEX_RULES, SQL_DB_CLIS, SQL_DDL_RE, CHMOD_OPEN_PERM_TOKENS, COMMAND_WRAPPERS, INLINE_INTERPRETER, RUNNER_WRAPPERS, _redirStdinOps, _listOps, WRAPPER_TAKES_TARGET, INTERP_LEADING_TARGET, NET_BINARIES, VALUE_FLAGS, FS_OP_CACHE_MAX, fsOpCache, stripDotSlash, REDIR_TRUNCATE_OPS, REDIR_HEREDOC_OPS, DEFAULT_EGRESS_ALLOWLIST, SOURCE_COMMANDS, SINK_COMMANDS, OBFUSCATORS, SENSITIVE_PATTERNS, FLAGS_WITH_VALUES, VERDICT_RANK, SQL_DML_KEYWORDS, aws_default, bash_safe_default, docker_default, filesystem_default, github_default, k8s_default, mongodb_default, postgres_default, project_jail_default, redis_default, BUILTIN_SHIELDS, LOOP_MAX_RECORDS, FINDING_TO_SIGNAL, SCAN_SIGNAL_WEIGHTS, LOOP_THRESHOLD_FOR_WASTE, COST_PER_LOOP_ITER_USD, DESTRUCTIVE_OP_RE, SENSITIVE_PATH_RE, FILE_TOOLS, PII_EMAIL_RE, PII_SSN_RE, PII_PHONE_RE, PII_CC_RE, REALTIME_PII_PATTERNS, MAX_PII_SCAN_BYTES, LONG_OUTPUT_THRESHOLD_BYTES, CANONICAL_EXTRACTOR_VERSION, DEDUPE_PREVIEW_LEN, TERMINAL_ESCAPE_RE, ENGINE_VERSION;
+var import_safe_regex2, import_mvdan_sh, import_picomatch, import_safe_regex22, import_safe_regex23, import_crypto3, MAX, UNTRUSTED_TOOLS, SIGNALS, ASSIGNMENT_CONTEXT_RE, DLP_STOPWORDS, DLP_PATTERNS, DLP_PATTERNS_GLOBAL, SENSITIVE_PATH_PATTERNS, MAX_DEPTH, MAX_STRING_BYTES, MAX_JSON_PARSE_BYTES, DLP_SCAN_LIMITS, MAX_REGEX_LENGTH, REGEX_CACHE_MAX, regexCache, FORBIDDEN_PATH_SEGMENTS, syntax, sharedParser, MESSAGE_FLAGS, SHELL_INTERPRETERS, DOWNLOAD_CMDS, NORMALIZE_CACHE_MAX, normalizeCache, AST_CACHE_MAX, astCache, PARSE_FAIL, FS_READ_TOOLS, FS_OP_PRESCREEN_RE, HOME_CACHE_ALLOWLIST, SENSITIVE_PATH_RULES, BASH_TOOL_NAMES, AST_FS_REGEX_RULES, SQL_DB_CLIS, SQL_DDL_RE, CHMOD_OPEN_PERM_TOKENS, COMMAND_WRAPPERS, INLINE_INTERPRETER, RUNNER_WRAPPERS, _redirStdinOps, _listOps, WRAPPER_TAKES_TARGET, INTERP_LEADING_TARGET, NET_BINARIES, VALUE_FLAGS, FS_OP_CACHE_MAX, fsOpCache, stripDotSlash, REDIR_TRUNCATE_OPS, REDIR_HEREDOC_OPS, DEFAULT_EGRESS_ALLOWLIST, SOURCE_COMMANDS, SINK_COMMANDS, OBFUSCATORS, SENSITIVE_PATTERNS, FLAGS_WITH_VALUES, VERDICT_RANK, SQL_DML_KEYWORDS, aws_default, bash_safe_default, docker_default, filesystem_default, github_default, k8s_default, mongodb_default, postgres_default, project_jail_default, redis_default, BUILTIN_SHIELDS, LOOP_MAX_RECORDS, FINDING_TO_SIGNAL, SCAN_SIGNAL_WEIGHTS, LOOP_THRESHOLD_FOR_WASTE, DESTRUCTIVE_OP_RE, SENSITIVE_PATH_RE, FILE_TOOLS, PII_EMAIL_RE, PII_SSN_RE, PII_PHONE_RE, PII_CC_RE, REALTIME_PII_PATTERNS, MAX_PII_SCAN_BYTES, LONG_OUTPUT_THRESHOLD_BYTES, CANONICAL_EXTRACTOR_VERSION, DEDUPE_PREVIEW_LEN, TERMINAL_ESCAPE_RE, ENGINE_VERSION;
 var init_dist = __esm({
   "packages/policy-engine/dist/index.mjs"() {
     "use strict";
@@ -4439,7 +4438,6 @@ var init_dist = __esm({
       longOutputRedactions: 1
     };
     LOOP_THRESHOLD_FOR_WASTE = 3;
-    COST_PER_LOOP_ITER_USD = 6e-3;
     DESTRUCTIVE_OP_RE = /\brm\s+-[rRf]+\b|\bDROP\s+(TABLE|DATABASE|COLLECTION|SCHEMA)\b|\bTRUNCATE\s+TABLE\b|\bgit\s+push\s+(--force|-f)\b|\bFLUSHALL\b|\bFLUSHDB\b|\bkubectl\s+delete\b|\bhelm\s+uninstall\b/i;
     SENSITIVE_PATH_RE = /\.aws\/(credentials|config)\b|\.ssh\/(id_rsa|id_ed25519|id_ecdsa|id_dsa)\b|\.env(\.|$|\b)|\.config\/gcloud\/credentials\.db\b|\.docker\/config\.json\b|\.netrc\b|\.npmrc\b|\.node9\/credentials\.json\b/i;
     FILE_TOOLS = /* @__PURE__ */ new Set([
@@ -5425,13 +5423,13 @@ function getConfig(cwd) {
         }
         if (Array.isArray(mc.jailPaths)) {
           for (const jp of mc.jailPaths) {
-            const path73 = typeof jp?.path === "string" ? jp.path.trim() : "";
-            if (!path73) continue;
+            const path74 = typeof jp?.path === "string" ? jp.path.trim() : "";
+            if (!path74) continue;
             const verdict = jp?.verdict === "review" ? "review" : "block";
-            for (const r of pathRules(path73, verdict, "org-managed jail")) {
+            for (const r of pathRules(path74, verdict, "org-managed jail")) {
               mergedPolicy.smartRules.push({ ...r, name: `org:${r.name}` });
             }
-            mergedPolicy.managedJailPaths.push({ path: path73, verdict });
+            mergedPolicy.managedJailPaths.push({ path: path74, verdict });
           }
         }
         if (Array.isArray(mc.trustedHosts)) {
@@ -11403,14 +11401,15 @@ var init_keyed_guard = __esm({
 function normalizeModel(raw) {
   return raw.replace(/-\d{8}$/, "").toLowerCase();
 }
-function readCache() {
+function readCache(opts) {
   try {
     const raw = JSON.parse(import_fs17.default.readFileSync(CACHE_FILE(), "utf-8"));
     if (typeof raw.fetchedAt !== "string" || typeof raw.prices !== "object" || raw.prices === null) {
       return null;
     }
     const ageMs = Date.now() - new Date(raw.fetchedAt).getTime();
-    if (ageMs < 0 || ageMs > TTL_MS) return null;
+    if (!Number.isFinite(ageMs) || ageMs < 0) return null;
+    if (opts.requireFresh && ageMs > TTL_MS) return null;
     return raw.prices;
   } catch {
     return null;
@@ -11476,7 +11475,7 @@ async function fetchLiteLLMPricing() {
 }
 async function ensurePricingLoaded() {
   if (memCache !== null && Date.now() - memCacheAt < TTL_MS) return;
-  const fromDisk = readCache();
+  const fromDisk = readCache({ requireFresh: true });
   if (fromDisk && Object.keys(fromDisk).length > 0) {
     memCache = fromDisk;
     memCacheAt = Date.now();
@@ -11501,7 +11500,7 @@ function pricingFor(model) {
   if (cached !== void 0) return cached;
   if (memCache === null && !diskChecked) {
     diskChecked = true;
-    const disk = readCache();
+    const disk = readCache({ requireFresh: false });
     if (disk && Object.keys(disk).length > 0) {
       memCache = disk;
       memCacheAt = Date.now();
@@ -11962,6 +11961,31 @@ function agentColorName(agent) {
       return "cyan";
   }
 }
+function computeLoopWaste(loops, perSession) {
+  const rate = /* @__PURE__ */ new Map();
+  for (const s of perSession) {
+    if (!(s.toolCalls > 0) || !(s.costUSD > 0)) continue;
+    const r = s.costUSD / s.toolCalls;
+    if (!Number.isFinite(r) || r <= 0 || r > MAX_PLAUSIBLE_RATE_USD) continue;
+    rate.set(s.sessionId, r);
+  }
+  let usd = 0;
+  let pricedIterations = 0;
+  let unpricedIterations = 0;
+  for (const l of loops) {
+    if (l.kind === "long-iteration") continue;
+    const wasted = Math.max(0, l.count - LOOP_THRESHOLD_FOR_WASTE);
+    if (!Number.isFinite(wasted) || wasted === 0) continue;
+    const r = rate.get(l.sessionId);
+    if (r === void 0) {
+      unpricedIterations += wasted;
+      continue;
+    }
+    usd += wasted * r;
+    pricedIterations += wasted;
+  }
+  return { usd, pricedIterations, unpricedIterations };
+}
 function buildScanSummary(agents) {
   const stats = {
     sessions: 0,
@@ -12022,8 +12046,11 @@ function buildScanSummary(agents) {
     costUSD: a.scan.totalCostUSD
   })).filter((s) => s.sessions > 0 || s.findings > 0);
   const sections = buildSections(allFindings);
-  const wastedIters = allLoops.filter((l) => l.kind !== "long-iteration").reduce((sum, l) => sum + Math.max(0, l.count - LOOP_THRESHOLD_FOR_WASTE), 0);
-  const loopWastedUSD = wastedIters * COST_PER_LOOP_ITER_USD;
+  const loopWaste = computeLoopWaste(
+    allLoops,
+    agents.flatMap((a) => a.scan.perSession)
+  );
+  const loopWastedUSD = loopWaste.usd;
   return {
     stats,
     byVerdict,
@@ -12031,7 +12058,8 @@ function buildScanSummary(agents) {
     sections,
     leaks: allLeaks,
     loops: allLoops,
-    loopWastedUSD
+    loopWastedUSD,
+    loopWaste
   };
 }
 function buildSections(findings) {
@@ -12138,7 +12166,7 @@ function fullCommandOf(input) {
   const raw = input.command ?? input.query ?? input.file_path ?? JSON.stringify(input);
   return String(raw).replace(/\s+/g, " ").trim();
 }
-var AGENT_SHORT, AGENT_LONG;
+var AGENT_SHORT, AGENT_LONG, MAX_PLAUSIBLE_RATE_USD;
 var init_scan_summary = __esm({
   "src/scan-summary.ts"() {
     "use strict";
@@ -12161,6 +12189,7 @@ var init_scan_summary = __esm({
       copilot: "GitHub Copilot",
       shell: "Shell"
     };
+    MAX_PLAUSIBLE_RATE_USD = 50;
   }
 });
 
@@ -12368,7 +12397,7 @@ function topRulesByVerdict(sections, verdict, n) {
   }
   return matched.sort((a, b) => b.count - a.count).slice(0, n);
 }
-function computeLoopWaste(loops, totalToolCalls) {
+function computeLoopWaste2(loops, totalToolCalls) {
   const wastedCalls = loops.reduce((s, l) => s + Math.max(0, l.count - 1), 0);
   const wastePct = totalToolCalls > 0 ? Math.round(wastedCalls / totalToolCalls * 100) : 0;
   return { wastedCalls, wastePct };
@@ -12478,6 +12507,38 @@ var init_scan_json = __esm({
   }
 });
 
+// src/session-files.ts
+function listSessionFiles(dir, maxDepth = 6) {
+  const out = [];
+  const walk = (d, rel, depth) => {
+    if (depth > maxDepth) return;
+    let entries;
+    try {
+      entries = fs22.readdirSync(d, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const e of entries) {
+      const childRel = rel ? path24.join(rel, e.name) : e.name;
+      if (e.isDirectory()) walk(path24.join(d, e.name), childRel, depth + 1);
+      else if (e.name.endsWith(".jsonl")) out.push(childRel);
+    }
+  };
+  walk(dir, "", 0);
+  return out;
+}
+function sessionIdOf(relPath) {
+  return path24.basename(relPath).replace(/\.jsonl$/, "");
+}
+var fs22, path24;
+var init_session_files = __esm({
+  "src/session-files.ts"() {
+    "use strict";
+    fs22 = __toESM(require("fs"));
+    path24 = __toESM(require("path"));
+  }
+});
+
 // src/cli/render/scan-history.ts
 function defaultHistoryPath() {
   return import_path23.default.join(import_os20.default.homedir(), ".node9", "scan-history.json");
@@ -12841,6 +12902,7 @@ var init_costSync = __esm({
     init_cost_codex();
     init_cost_gemini();
     init_cost_copilot();
+    init_session_files();
     SYNC_INTERVAL_MS = 10 * 60 * 1e3;
     claudeSource = {
       id: "claude",
@@ -12866,7 +12928,7 @@ var init_costSync = __esm({
           }
           let files;
           try {
-            files = import_fs23.default.readdirSync(dirPath).filter((f) => f.endsWith(".jsonl"));
+            files = listSessionFiles(dirPath);
           } catch {
             continue;
           }
@@ -13920,7 +13982,7 @@ function countScanFiles() {
                 const dp = import_path28.default.join(mp, day);
                 try {
                   if (!import_fs26.default.statSync(dp).isDirectory()) continue;
-                  total += import_fs26.default.readdirSync(dp).filter((f) => f.endsWith(".jsonl")).length;
+                  total += listSessionFiles(dp).length;
                 } catch {
                   continue;
                 }
@@ -13953,7 +14015,8 @@ function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, re
   result.filesScanned++;
   result.sessions++;
   onProgress?.(result.filesScanned);
-  const sessionId = file.replace(/\.jsonl$/, "");
+  const sessionId = sessionIdOf(file);
+  const session = { sessionId, costUSD: 0, toolCalls: 0 };
   let raw;
   try {
     raw = import_fs26.default.readFileSync(import_path28.default.join(projPath, file), "utf-8");
@@ -14041,7 +14104,9 @@ function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, re
     if (usage && model) {
       const p = claudeModelPrice(model);
       if (p) {
-        result.totalCostUSD += (usage.input_tokens ?? 0) * p.i + (usage.output_tokens ?? 0) * p.o + (usage.cache_creation_input_tokens ?? 0) * p.cw + (usage.cache_read_input_tokens ?? 0) * p.cr;
+        const rowCost = (usage.input_tokens ?? 0) * p.i + (usage.output_tokens ?? 0) * p.o + (usage.cache_creation_input_tokens ?? 0) * p.cw + (usage.cache_read_input_tokens ?? 0) * p.cr;
+        result.totalCostUSD += rowCost;
+        session.costUSD += rowCost;
       }
     }
     const content = entry.message?.content;
@@ -14049,6 +14114,7 @@ function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, re
     for (const block of content) {
       if (block.type !== "tool_use") continue;
       result.totalToolCalls++;
+      session.toolCalls++;
       const toolName = block.name ?? "";
       const toolNameLower = toolName.toLowerCase();
       const input = block.input ?? {};
@@ -14160,6 +14226,7 @@ function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, re
   if (firstDlpTs !== null && (firstEditTs === null || firstDlpTs < firstEditTs)) {
     result.sessionsWithEarlySecrets++;
   }
+  result.perSession.push(session);
 }
 function processClaudeProject(proj, projectsDir, ruleSources, startDate, result, dedup, onProgress, onLine) {
   const projPath = import_path28.default.join(projectsDir, proj);
@@ -14174,7 +14241,7 @@ function processClaudeProject(proj, projectsDir, ruleSources, startDate, result,
   );
   let files;
   try {
-    files = import_fs26.default.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
+    files = listSessionFiles(projPath);
   } catch {
     return;
   }
@@ -14204,7 +14271,8 @@ function emptyClaudeScan() {
     totalCostUSD: 0,
     firstDate: null,
     lastDate: null,
-    sessionsWithEarlySecrets: 0
+    sessionsWithEarlySecrets: 0,
+    perSession: []
   };
 }
 function scanClaudeHistory(startDate, onProgress, onLine) {
@@ -14246,7 +14314,8 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
     totalCostUSD: 0,
     firstDate: null,
     lastDate: null,
-    sessionsWithEarlySecrets: 0
+    sessionsWithEarlySecrets: 0,
+    perSession: []
   };
   const dedup = emptyScanDedup();
   if (!import_fs26.default.existsSync(tmpDir)) return result;
@@ -14484,7 +14553,8 @@ function scanAntigravityHistory(startDate, onProgress, onLine) {
     // transcripts carry no token/model data
     firstDate: null,
     lastDate: null,
-    sessionsWithEarlySecrets: 0
+    sessionsWithEarlySecrets: 0,
+    perSession: []
   };
   const dedup = emptyScanDedup();
   const brainDirs = antigravityBrainDirs();
@@ -14680,7 +14750,8 @@ function scanCopilotHistory(startDate, onProgress, onLine) {
     // event logs carry no token/cost rollup
     firstDate: null,
     lastDate: null,
-    sessionsWithEarlySecrets: 0
+    sessionsWithEarlySecrets: 0,
+    perSession: []
   };
   const dedup = emptyScanDedup();
   if (!import_fs26.default.existsSync(sessionDir)) return result;
@@ -14862,7 +14933,8 @@ function scanCodexHistory(startDate, onProgress, onLine) {
     totalCostUSD: 0,
     firstDate: null,
     lastDate: null,
-    sessionsWithEarlySecrets: 0
+    sessionsWithEarlySecrets: 0,
+    perSession: []
   };
   const dedup = emptyScanDedup();
   if (!import_fs26.default.existsSync(sessionsBase)) return result;
@@ -15141,7 +15213,8 @@ function mergeScans(a, b) {
     totalCostUSD: a.totalCostUSD + b.totalCostUSD,
     firstDate: dates.length ? dates.sort()[0] : null,
     lastDate: lastDates.length ? lastDates.sort().at(-1) : null,
-    sessionsWithEarlySecrets: a.sessionsWithEarlySecrets + b.sessionsWithEarlySecrets
+    sessionsWithEarlySecrets: a.sessionsWithEarlySecrets + b.sessionsWithEarlySecrets,
+    perSession: [...a.perSession, ...b.perSession]
   };
 }
 function verdictIcon(verdict) {
@@ -15225,9 +15298,9 @@ function renderCompactScorecard(input) {
   const realLoops = scan.loopFindings.filter((l) => l.kind !== "long-iteration");
   const longIterations = scan.loopFindings.filter((l) => l.kind === "long-iteration");
   if (realLoops.length > 0) {
-    const { wastePct, wastedCalls } = computeLoopWaste(realLoops, scan.totalToolCalls);
+    const { wastePct, wastedCalls } = computeLoopWaste2(realLoops, scan.totalToolCalls);
     const wasteParts = [];
-    if (wastedCalls > 0) wasteParts.push(`${wastedCalls} wasted calls (${wastePct}% of all calls)`);
+    if (wastedCalls > 0) wasteParts.push(`${wastedCalls} repeat calls (${wastePct}% of all calls)`);
     if (summary.loopWastedUSD > 0) wasteParts.push("~" + fmtCost(summary.loopWastedUSD));
     const wasteSummary = wasteParts.length ? `(${wasteParts.join("  \xB7  ")})` : "";
     console.log(
@@ -15305,10 +15378,10 @@ function renderNarrativeScorecard(input) {
     });
   }
   if (scan.loopFindings.length > 0) {
-    const { wastePct, wastedCalls } = computeLoopWaste(scan.loopFindings, scan.totalToolCalls);
+    const { wastePct, wastedCalls } = computeLoopWaste2(scan.loopFindings, scan.totalToolCalls);
     const cost = summary.loopWastedUSD > 0 ? `, ~${fmtCost(summary.loopWastedUSD)} wasted` : "";
     medium.push({
-      label: `${scan.loopFindings.length} agent loops (${wastedCalls} wasted calls, ${wastePct}% of calls${cost})`,
+      label: `${scan.loopFindings.length} agent loops (${wastedCalls} repeat calls, ${wastePct}% of calls${cost})`,
       count: scan.loopFindings.length
     });
   }
@@ -15420,13 +15493,13 @@ function renderPanelScorecard(input, now = /* @__PURE__ */ new Date()) {
     );
   }
   if (scan.loopFindings.length > 0) {
-    const { wastePct, wastedCalls } = computeLoopWaste(scan.loopFindings, scan.totalToolCalls);
+    const { wastePct, wastedCalls } = computeLoopWaste2(scan.loopFindings, scan.totalToolCalls);
     const byTool = /* @__PURE__ */ new Map();
     for (const f of scan.loopFindings) {
       byTool.set(f.toolName, (byTool.get(f.toolName) ?? 0) + Math.max(0, f.count - 1));
     }
     const top = [...byTool.entries()].sort((a, b) => b[1] - a[1])[0];
-    const wasteSuffix = wastedCalls > 0 ? `, ${wastedCalls} wasted calls \xB7 ${wastePct}% of calls` : "";
+    const wasteSuffix = wastedCalls > 0 ? `, ${wastedCalls} repeat calls \xB7 ${wastePct}% of calls` : "";
     const detail = top ? `(${top[0]} dominates${wasteSuffix})` : "";
     topLines.push(
       mkLine(
@@ -15518,7 +15591,7 @@ function renderPanelScorecard(input, now = /* @__PURE__ */ new Date()) {
     console.log("");
   }
   if (scan.loopFindings.length > 0) {
-    const { wastePct, wastedCalls } = computeLoopWaste(scan.loopFindings, scan.totalToolCalls);
+    const { wastePct, wastedCalls } = computeLoopWaste2(scan.loopFindings, scan.totalToolCalls);
     const byTool = /* @__PURE__ */ new Map();
     let totalRepeats = 0;
     for (const f of scan.loopFindings) {
@@ -15548,7 +15621,7 @@ function renderPanelScorecard(input, now = /* @__PURE__ */ new Date()) {
         loopLines.push(mkLine([`\xD7${num(f.count).padEnd(4)} `, import_chalk6.default.bold], [target, import_chalk6.default.dim]));
       }
     }
-    const wasteSuffix = wastedCalls > 0 ? `  \xB7  ${wastedCalls} wasted calls (${wastePct}% of all calls)` : "";
+    const wasteSuffix = wastedCalls > 0 ? `  \xB7  ${wastedCalls} repeat calls (${wastePct}% of all calls)` : "";
     const title = `AGENT LOOPS  \xB7  ${scan.loopFindings.length} pattern${scan.loopFindings.length !== 1 ? "s" : ""}${wasteSuffix}`;
     for (const ln of boxPanel(title, loopLines)) console.log("  " + ln);
     console.log("");
@@ -15883,7 +15956,7 @@ function registerScanCommand(program2) {
           );
         }
         if (scan.loopFindings.length > 0) {
-          const { wastePct } = computeLoopWaste(scan.loopFindings, scan.totalToolCalls);
+          const { wastePct } = computeLoopWaste2(scan.loopFindings, scan.totalToolCalls);
           const wasteSuffix = wastePct > 0 ? import_chalk6.default.dim(` (${wastePct}% of calls)`) : "";
           cardParts.push(
             import_chalk6.default.yellow("\u{1F501} ") + import_chalk6.default.yellow.bold(String(scan.loopFindings.length)) + import_chalk6.default.dim(" loops") + wasteSuffix
@@ -16189,6 +16262,7 @@ var init_scan = __esm({
     init_protection();
     import_string_width2 = __toESM(require("string-width"));
     init_scan_json();
+    init_session_files();
     init_scan_history();
     toolInspectionMap = DEFAULT_CONFIG.policy.toolInspection;
     CODE_EXTENSIONS = /* @__PURE__ */ new Set([
@@ -18857,28 +18931,28 @@ var init_ship2 = __esm({
 
 // src/machine-id.ts
 function getMachineId(homeDir2 = os34.homedir()) {
-  const file = path37.join(homeDir2, ".node9", "machine-id");
+  const file = path38.join(homeDir2, ".node9", "machine-id");
   try {
-    const existing = fs38.readFileSync(file, "utf-8").trim();
+    const existing = fs39.readFileSync(file, "utf-8").trim();
     if (UUID_RE.test(existing)) return existing;
   } catch {
   }
   const id = crypto5.randomUUID();
   try {
-    fs38.mkdirSync(path37.dirname(file), { recursive: true });
-    fs38.writeFileSync(file, id + "\n", { mode: 384 });
+    fs39.mkdirSync(path38.dirname(file), { recursive: true });
+    fs39.writeFileSync(file, id + "\n", { mode: 384 });
   } catch {
   }
   return id;
 }
-var crypto5, fs38, os34, path37, UUID_RE;
+var crypto5, fs39, os34, path38, UUID_RE;
 var init_machine_id = __esm({
   "src/machine-id.ts"() {
     "use strict";
     crypto5 = __toESM(require("crypto"));
-    fs38 = __toESM(require("fs"));
+    fs39 = __toESM(require("fs"));
     os34 = __toESM(require("os"));
-    path37 = __toESM(require("path"));
+    path38 = __toESM(require("path"));
     UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
   }
 });
@@ -21056,7 +21130,8 @@ data: ${JSON.stringify(item.data)}
           totalCostUSD: 0,
           firstDate: null,
           lastDate: null,
-          sessionsWithEarlySecrets: 0
+          sessionsWithEarlySecrets: 0,
+          perSession: []
         };
         let claude = EMPTY_SCAN;
         let gemini = EMPTY_SCAN;
@@ -23118,14 +23193,14 @@ var require_util = __commonJS({
         }
         const port = url.port != null ? url.port : url.protocol === "https:" ? 443 : 80;
         let origin = url.origin != null ? url.origin : `${url.protocol || ""}//${url.hostname || ""}:${port}`;
-        let path73 = url.path != null ? url.path : `${url.pathname || ""}${url.search || ""}`;
+        let path74 = url.path != null ? url.path : `${url.pathname || ""}${url.search || ""}`;
         if (origin[origin.length - 1] === "/") {
           origin = origin.slice(0, origin.length - 1);
         }
-        if (path73 && path73[0] !== "/") {
-          path73 = `/${path73}`;
+        if (path74 && path74[0] !== "/") {
+          path74 = `/${path74}`;
         }
-        return new URL(`${origin}${path73}`);
+        return new URL(`${origin}${path74}`);
       }
       if (!isHttpOrHttpsPrefixed(url.origin || url.protocol)) {
         throw new InvalidArgumentError("Invalid URL protocol: the URL must start with `http:` or `https:`.");
@@ -23946,9 +24021,9 @@ var require_diagnostics = __commonJS({
         "undici:client:sendHeaders",
         (evt) => {
           const {
-            request: { method, path: path73, origin }
+            request: { method, path: path74, origin }
           } = evt;
-          debugLog("sending request to %s %s%s", method, origin, path73);
+          debugLog("sending request to %s %s%s", method, origin, path74);
         }
       );
     }
@@ -23966,14 +24041,14 @@ var require_diagnostics = __commonJS({
         "undici:request:headers",
         (evt) => {
           const {
-            request: { method, path: path73, origin },
+            request: { method, path: path74, origin },
             response: { statusCode }
           } = evt;
           debugLog(
             "received response to %s %s%s - HTTP %d",
             method,
             origin,
-            path73,
+            path74,
             statusCode
           );
         }
@@ -23982,23 +24057,23 @@ var require_diagnostics = __commonJS({
         "undici:request:trailers",
         (evt) => {
           const {
-            request: { method, path: path73, origin }
+            request: { method, path: path74, origin }
           } = evt;
-          debugLog("trailers received from %s %s%s", method, origin, path73);
+          debugLog("trailers received from %s %s%s", method, origin, path74);
         }
       );
       diagnosticsChannel.subscribe(
         "undici:request:error",
         (evt) => {
           const {
-            request: { method, path: path73, origin },
+            request: { method, path: path74, origin },
             error
           } = evt;
           debugLog(
             "request to %s %s%s errored - %s",
             method,
             origin,
-            path73,
+            path74,
             error.message
           );
         }
@@ -24101,7 +24176,7 @@ var require_request = __commonJS({
     var kHandler = /* @__PURE__ */ Symbol("handler");
     var Request = class {
       constructor(origin, {
-        path: path73,
+        path: path74,
         method,
         body,
         headers,
@@ -24118,11 +24193,11 @@ var require_request = __commonJS({
         maxRedirections,
         typeOfService
       }, handler) {
-        if (typeof path73 !== "string") {
+        if (typeof path74 !== "string") {
           throw new InvalidArgumentError("path must be a string");
-        } else if (path73[0] !== "/" && !(path73.startsWith("http://") || path73.startsWith("https://")) && method !== "CONNECT") {
+        } else if (path74[0] !== "/" && !(path74.startsWith("http://") || path74.startsWith("https://")) && method !== "CONNECT") {
           throw new InvalidArgumentError("path must be an absolute URL or start with a slash");
-        } else if (invalidPathRegex.test(path73)) {
+        } else if (invalidPathRegex.test(path74)) {
           throw new InvalidArgumentError("invalid request path");
         }
         if (typeof method !== "string") {
@@ -24197,7 +24272,7 @@ var require_request = __commonJS({
         this.completed = false;
         this.aborted = false;
         this.upgrade = upgrade || null;
-        this.path = query ? serializePathWithQuery(path73, query) : path73;
+        this.path = query ? serializePathWithQuery(path74, query) : path74;
         this.origin = origin;
         this.protocol = getProtocolFromUrlString(origin);
         this.idempotent = idempotent == null ? method === "HEAD" || method === "GET" : idempotent;
@@ -29236,7 +29311,7 @@ var require_client_h1 = __commonJS({
       return method !== "GET" && method !== "HEAD" && method !== "OPTIONS" && method !== "TRACE" && method !== "CONNECT";
     }
     function writeH1(client, request2) {
-      const { method, path: path73, host, upgrade, blocking, reset } = request2;
+      const { method, path: path74, host, upgrade, blocking, reset } = request2;
       let { body, headers, contentLength } = request2;
       const expectsPayload = method === "PUT" || method === "POST" || method === "PATCH" || method === "QUERY" || method === "PROPFIND" || method === "PROPPATCH";
       if (util.isFormDataLike(body)) {
@@ -29305,7 +29380,7 @@ var require_client_h1 = __commonJS({
       if (socket.setTypeOfService) {
         socket.setTypeOfService(request2.typeOfService);
       }
-      let header = `${method} ${path73} HTTP/1.1\r
+      let header = `${method} ${path74} HTTP/1.1\r
 `;
       if (typeof host === "string") {
         header += `host: ${host}\r
@@ -29958,7 +30033,7 @@ var require_client_h2 = __commonJS({
     function writeH2(client, request2) {
       const requestTimeout = request2.bodyTimeout ?? client[kBodyTimeout];
       const session = client[kHTTP2Session];
-      const { method, path: path73, host, upgrade, expectContinue, signal, protocol, headers: reqHeaders } = request2;
+      const { method, path: path74, host, upgrade, expectContinue, signal, protocol, headers: reqHeaders } = request2;
       let { body } = request2;
       if (upgrade != null && upgrade !== "websocket") {
         util.errorRequest(client, request2, new InvalidArgumentError(`Custom upgrade "${upgrade}" not supported over HTTP/2`));
@@ -30026,7 +30101,7 @@ var require_client_h2 = __commonJS({
           }
           headers[HTTP2_HEADER_METHOD] = "CONNECT";
           headers[HTTP2_HEADER_PROTOCOL] = "websocket";
-          headers[HTTP2_HEADER_PATH] = path73;
+          headers[HTTP2_HEADER_PATH] = path74;
           if (protocol === "ws:" || protocol === "wss:") {
             headers[HTTP2_HEADER_SCHEME] = protocol === "ws:" ? "http" : "https";
           } else {
@@ -30067,7 +30142,7 @@ var require_client_h2 = __commonJS({
         stream.setTimeout(requestTimeout);
         return true;
       }
-      headers[HTTP2_HEADER_PATH] = path73;
+      headers[HTTP2_HEADER_PATH] = path74;
       headers[HTTP2_HEADER_SCHEME] = protocol === "http:" ? "http" : "https";
       const expectsPayload = method === "PUT" || method === "POST" || method === "PATCH";
       if (body && typeof body.read === "function") {
@@ -32369,10 +32444,10 @@ var require_proxy_agent = __commonJS({
         };
         const {
           origin,
-          path: path73 = "/",
+          path: path74 = "/",
           headers = {}
         } = opts;
-        opts.path = origin + path73;
+        opts.path = origin + path74;
         if (!("host" in headers) && !("Host" in headers)) {
           const { host } = new URL(origin);
           headers.host = host;
@@ -34435,20 +34510,20 @@ var require_mock_utils = __commonJS({
       }
       return normalizedQp;
     }
-    function safeUrl(path73) {
-      if (typeof path73 !== "string") {
-        return path73;
+    function safeUrl(path74) {
+      if (typeof path74 !== "string") {
+        return path74;
       }
-      const pathSegments = path73.split("?", 3);
+      const pathSegments = path74.split("?", 3);
       if (pathSegments.length !== 2) {
-        return path73;
+        return path74;
       }
       const qp = new URLSearchParams(pathSegments.pop());
       qp.sort();
       return [...pathSegments, qp.toString()].join("?");
     }
-    function matchKey(mockDispatch2, { path: path73, method, body, headers }) {
-      const pathMatch = matchValue(mockDispatch2.path, path73);
+    function matchKey(mockDispatch2, { path: path74, method, body, headers }) {
+      const pathMatch = matchValue(mockDispatch2.path, path74);
       const methodMatch = matchValue(mockDispatch2.method, method);
       const bodyMatch = typeof mockDispatch2.body !== "undefined" ? matchValue(mockDispatch2.body, body) : true;
       const headersMatch = matchHeaders(mockDispatch2, headers);
@@ -34473,8 +34548,8 @@ var require_mock_utils = __commonJS({
       const basePath = key.query ? serializePathWithQuery(key.path, key.query) : key.path;
       const resolvedPath = typeof basePath === "string" ? safeUrl(basePath) : basePath;
       const resolvedPathWithoutTrailingSlash = removeTrailingSlash(resolvedPath);
-      let matchedMockDispatches = mockDispatches.filter(({ consumed }) => !consumed).filter(({ path: path73, ignoreTrailingSlash }) => {
-        return ignoreTrailingSlash ? matchValue(removeTrailingSlash(safeUrl(path73)), resolvedPathWithoutTrailingSlash) : matchValue(safeUrl(path73), resolvedPath);
+      let matchedMockDispatches = mockDispatches.filter(({ consumed }) => !consumed).filter(({ path: path74, ignoreTrailingSlash }) => {
+        return ignoreTrailingSlash ? matchValue(removeTrailingSlash(safeUrl(path74)), resolvedPathWithoutTrailingSlash) : matchValue(safeUrl(path74), resolvedPath);
       });
       if (matchedMockDispatches.length === 0) {
         throw new MockNotMatchedError(`Mock dispatch not matched for path '${resolvedPath}'`);
@@ -34513,19 +34588,19 @@ var require_mock_utils = __commonJS({
         mockDispatches.splice(index, 1);
       }
     }
-    function removeTrailingSlash(path73) {
-      while (path73.endsWith("/")) {
-        path73 = path73.slice(0, -1);
+    function removeTrailingSlash(path74) {
+      while (path74.endsWith("/")) {
+        path74 = path74.slice(0, -1);
       }
-      if (path73.length === 0) {
-        path73 = "/";
+      if (path74.length === 0) {
+        path74 = "/";
       }
-      return path73;
+      return path74;
     }
     function buildKey(opts) {
-      const { path: path73, method, body, headers, query } = opts;
+      const { path: path74, method, body, headers, query } = opts;
       return {
-        path: path73,
+        path: path74,
         method,
         body,
         headers,
@@ -35215,10 +35290,10 @@ var require_pending_interceptors_formatter = __commonJS({
       }
       format(pendingInterceptors) {
         const withPrettyHeaders = pendingInterceptors.map(
-          ({ method, path: path73, data: { statusCode }, persist, times, timesInvoked, origin }) => ({
+          ({ method, path: path74, data: { statusCode }, persist, times, timesInvoked, origin }) => ({
             Method: method,
             Origin: origin,
-            Path: path73,
+            Path: path74,
             "Status code": statusCode,
             Persistent: persist ? PERSISTENT : NOT_PERSISTENT,
             Invocations: timesInvoked,
@@ -35300,9 +35375,9 @@ var require_mock_agent = __commonJS({
         const acceptNonStandardSearchParameters = this[kMockAgentAcceptsNonStandardSearchParameters];
         const dispatchOpts = { ...opts };
         if (acceptNonStandardSearchParameters && dispatchOpts.path) {
-          const [path73, searchParams] = dispatchOpts.path.split("?");
+          const [path74, searchParams] = dispatchOpts.path.split("?");
           const normalizedSearchParams = normalizeSearchParams(searchParams, acceptNonStandardSearchParameters);
-          dispatchOpts.path = `${path73}?${normalizedSearchParams}`;
+          dispatchOpts.path = `${path74}?${normalizedSearchParams}`;
         }
         return this[kAgent].dispatch(dispatchOpts, handler);
       }
@@ -35703,12 +35778,12 @@ var require_snapshot_recorder = __commonJS({
        * @return {Promise<void>} - Resolves when snapshots are loaded
        */
       async loadSnapshots(filePath) {
-        const path73 = filePath || this.#snapshotPath;
-        if (!path73) {
+        const path74 = filePath || this.#snapshotPath;
+        if (!path74) {
           throw new InvalidArgumentError("Snapshot path is required");
         }
         try {
-          const data = await readFile(resolve2(path73), "utf8");
+          const data = await readFile(resolve2(path74), "utf8");
           const parsed = JSON.parse(data);
           if (Array.isArray(parsed)) {
             this.#snapshots.clear();
@@ -35722,7 +35797,7 @@ var require_snapshot_recorder = __commonJS({
           if (error.code === "ENOENT") {
             this.#snapshots.clear();
           } else {
-            throw new UndiciError(`Failed to load snapshots from ${path73}`, { cause: error });
+            throw new UndiciError(`Failed to load snapshots from ${path74}`, { cause: error });
           }
         }
       }
@@ -35733,11 +35808,11 @@ var require_snapshot_recorder = __commonJS({
        * @returns {Promise<void>} - Resolves when snapshots are saved
        */
       async saveSnapshots(filePath) {
-        const path73 = filePath || this.#snapshotPath;
-        if (!path73) {
+        const path74 = filePath || this.#snapshotPath;
+        if (!path74) {
           throw new InvalidArgumentError("Snapshot path is required");
         }
-        const resolvedPath = resolve2(path73);
+        const resolvedPath = resolve2(path74);
         await mkdir(dirname3(resolvedPath), { recursive: true });
         const data = Array.from(this.#snapshots.entries()).map(([hash, snapshot]) => ({
           hash,
@@ -36362,15 +36437,15 @@ var require_redirect_handler = __commonJS({
           return;
         }
         const { origin, pathname, search } = util.parseURL(new URL(this.location, this.opts.origin && new URL(this.opts.path, this.opts.origin)));
-        const path73 = search ? `${pathname}${search}` : pathname;
-        const redirectUrlString = `${origin}${path73}`;
+        const path74 = search ? `${pathname}${search}` : pathname;
+        const redirectUrlString = `${origin}${path74}`;
         for (const historyUrl of this.history) {
           if (historyUrl.toString() === redirectUrlString) {
             throw new InvalidArgumentError(`Redirect loop detected. Cannot redirect to ${origin}. This typically happens when using a Client or Pool with cross-origin redirects. Use an Agent for cross-origin redirects.`);
           }
         }
         this.opts.headers = cleanRequestHeaders(this.opts.headers, statusCode === 303, this.opts.origin !== origin);
-        this.opts.path = path73;
+        this.opts.path = path74;
         this.opts.origin = origin;
         this.opts.query = null;
       }
@@ -42577,11 +42652,11 @@ var require_fetch = __commonJS({
       function dispatch({ body }) {
         const url = requestCurrentURL(request2);
         const agent = fetchParams.controller.dispatcher;
-        const path73 = url.pathname + url.search;
+        const path74 = url.pathname + url.search;
         const hasTrailingQuestionMark = url.search.length === 0 && url.href[url.href.length - url.hash.length - 1] === "?";
         return new Promise((resolve2, reject) => agent.dispatch(
           {
-            path: hasTrailingQuestionMark ? `${path73}?` : path73,
+            path: hasTrailingQuestionMark ? `${path74}?` : path74,
             origin: url.origin,
             method: request2.method,
             body: agent.isMockActive ? request2.body && (request2.body.source || request2.body.stream) : body,
@@ -43512,9 +43587,9 @@ var require_util4 = __commonJS({
         }
       }
     }
-    function validateCookiePath(path73) {
-      for (let i = 0; i < path73.length; ++i) {
-        const code = path73.charCodeAt(i);
+    function validateCookiePath(path74) {
+      for (let i = 0; i < path74.length; ++i) {
+        const code = path74.charCodeAt(i);
         if (code < 32 || // exclude CTLs (0-31)
         code === 127 || // DEL
         code === 59) {
@@ -46684,11 +46759,11 @@ var require_undici = __commonJS({
           if (typeof opts.path !== "string") {
             throw new InvalidArgumentError("invalid opts.path");
           }
-          let path73 = opts.path;
+          let path74 = opts.path;
           if (!opts.path.startsWith("/")) {
-            path73 = `/${path73}`;
+            path74 = `/${path74}`;
           }
-          url = new URL(util.parseOrigin(url).origin + path73);
+          url = new URL(util.parseOrigin(url).origin + path74);
         } else {
           if (!opts) {
             opts = typeof url === "object" ? url : {};
@@ -48676,9 +48751,9 @@ async function runDeviceLogin(opts = {}) {
 }
 
 // src/cli/commands/logout.ts
-var fs48 = __toESM(require("fs"));
+var fs49 = __toESM(require("fs"));
 var os44 = __toESM(require("os"));
-var path46 = __toESM(require("path"));
+var path47 = __toESM(require("path"));
 var import_chalk12 = __toESM(require("chalk"));
 async function revokeSelf(creds) {
   const url = creds.apiUrl.replace(/\/$/, "") + "/machines/self/disconnect";
@@ -48696,10 +48771,10 @@ function registerLogoutCommand(program2) {
     "Disconnect this machine from the cloud (revokes its key; local enforcement keeps running)"
   ).action(async () => {
     const profile = process.env.NODE9_PROFILE || "default";
-    const credPath = path46.join(os44.homedir(), ".node9", "credentials.json");
+    const credPath = path47.join(os44.homedir(), ".node9", "credentials.json");
     let all = {};
     try {
-      all = JSON.parse(fs48.readFileSync(credPath, "utf-8"));
+      all = JSON.parse(fs49.readFileSync(credPath, "utf-8"));
     } catch {
     }
     const entry = all[profile];
@@ -48729,11 +48804,11 @@ function registerLogoutCommand(program2) {
     delete all[profile];
     if (Object.keys(all).length === 0) {
       try {
-        fs48.unlinkSync(credPath);
+        fs49.unlinkSync(credPath);
       } catch {
       }
     } else {
-      fs48.writeFileSync(credPath, JSON.stringify(all, null, 2), { mode: 384 });
+      fs49.writeFileSync(credPath, JSON.stringify(all, null, 2), { mode: 384 });
     }
     console.log(import_chalk12.default.green("\u2713 Local: credentials removed."));
     console.log(
@@ -50871,6 +50946,7 @@ init_costSync();
 init_litellm();
 init_cost_codex();
 init_decision();
+init_session_files();
 var TEST_COMMAND_RE3 = /(?:^|\s)(npm\s+(?:run\s+)?test|npx\s+(?:vitest|jest|mocha)|yarn\s+(?:run\s+)?test|pnpm\s+(?:run\s+)?test|vitest|jest|mocha|pytest|py\.test|cargo\s+test|go\s+test|bundle\s+exec\s+rspec|rspec|phpunit|dotnet\s+test)\b/i;
 function buildTestTimestamps(allEntries) {
   const testTs = /* @__PURE__ */ new Set();
@@ -51010,7 +51086,7 @@ function processClaudeCostProject(proj, projectsDir, start, end, acc) {
   try {
     const stat = import_fs55.default.statSync(projPath);
     if (!stat.isDirectory()) return;
-    files = import_fs55.default.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
+    files = listSessionFiles(projPath);
   } catch {
     return;
   }
@@ -55479,7 +55555,7 @@ function severityFromScore(score) {
   if (score >= 1) return "advisory";
   return null;
 }
-function analyzeWorkflow(path73, content) {
+function analyzeWorkflow(path74, content) {
   let raw;
   try {
     raw = (0, import_yaml.parse)(content) ?? {};
@@ -55605,7 +55681,7 @@ function analyzeWorkflow(path73, content) {
     dimension: "workflows",
     severity,
     title,
-    file: path73,
+    file: path74,
     signals,
     mitigations: mitigations.length ? mitigations : void 0,
     fix: head === "root" && privileged ? "Do not check out the untrusted PR head into the workspace root under a privileged trigger (pull_request_target/workflow_run) \u2014 check out the base ref, or isolate the head in a subdir (--add-dir). Add an actor gate and scope the agent tools." : head === "root" ? "This runs under `pull_request` (fork PRs get a read-only token), so the head checkout is low-risk today \u2014 keep it on `pull_request` (not `pull_request_target`) and keep the actor gate + scoped tools." : "Add/verify an actor gate, scope the agent tools to read-only, and env-deny secrets. See Anthropic\u2019s claude-code-action security doc."
@@ -55681,7 +55757,7 @@ function evalAgentJob(job, wf, raw, untrustedTrigger, reusable) {
   if (reusable && !loadedGun && SEVERITY_RANK2[severity] > SEVERITY_RANK2.medium) severity = "medium";
   return { severity, secrets, injectable, canReadEnv };
 }
-function analyzeWorkflowSecrets(path73, content) {
+function analyzeWorkflowSecrets(path74, content) {
   let raw;
   try {
     raw = (0, import_yaml.parse)(content) ?? {};
@@ -55701,7 +55777,7 @@ function analyzeWorkflowSecrets(path73, content) {
     dimension: "data",
     severity: worst.severity,
     title: worst.severity === "advisory" ? "Secrets reachable by the agent \u2014 hardening" : "Exfiltratable secrets reachable by an injectable agent",
-    file: path73,
+    file: path74,
     signals: [
       `agent can reach: ${worst.secrets.map((s) => s.name).join(", ")}`,
       worst.injectable ? "the agent is externally triggerable (untrusted trigger, no gate)" : "gated / not externally triggerable \u2014 latent risk only",
@@ -55728,7 +55804,7 @@ function hookCommands(hooks) {
   }
   return out;
 }
-function analyzeAgentConfig(path73, content) {
+function analyzeAgentConfig(path74, content) {
   let cfg;
   try {
     cfg = JSON.parse(content);
@@ -55747,7 +55823,7 @@ function analyzeAgentConfig(path73, content) {
       dimension: "toolRules",
       severity: high ? "high" : "medium",
       title: high ? "Agent hook runs UNPINNED/remote third-party code on every action" : "Agent hook runs third-party code in the agent hot path",
-      file: path73,
+      file: path74,
       signals: [
         `hook command: \`${cmd.slice(0, 120)}\``,
         remoteExec ? "fetch-and-run (curl|wget / pipe-to-shell) \u2014 unpinnable remote code execution on every contributor" : unpinned ? "unpinned \u2014 a compromised/yanked package = code execution on every contributor" : "pinned, but still a standing supply-chain dependency in the agent hot path"
@@ -55767,7 +55843,7 @@ function analyzeAgentConfig(path73, content) {
       dimension: "toolRules",
       severity: hasBackstop ? "medium" : "high",
       title: hasBackstop ? "Committed agent config pre-authorizes broad tools" : "Committed agent config pre-authorizes broad tools with no deny backstop",
-      file: path73,
+      file: path74,
       signals: [
         `broad allow(s): ${broad.slice(0, 5).join(", ")}`,
         hasBackstop ? "a `deny` list backstops the broad allow" : "no `deny` entry covers Bash/Write/Edit \u2014 every contributor is pre-authorized for catastrophic tools"
@@ -55780,16 +55856,16 @@ function analyzeAgentConfig(path73, content) {
 
 // src/ci-check/mcp.ts
 init_dist();
-function analyzeMcp(path73, content) {
+function analyzeMcp(path74, content) {
   let cfg;
   try {
     cfg = JSON.parse(content);
   } catch {
     return [];
   }
-  return analyzeMcpServers(cfg.mcpServers ?? {}, path73);
+  return analyzeMcpServers(cfg.mcpServers ?? {}, path74);
 }
-function analyzeMcpServers(servers, path73) {
+function analyzeMcpServers(servers, path74) {
   const findings = [];
   for (const [name, srv] of Object.entries(servers ?? {})) {
     if (!srv || srv.disabled) continue;
@@ -55800,7 +55876,7 @@ function analyzeMcpServers(servers, path73) {
         dimension: "mcp",
         severity: "medium",
         title: `MCP server "${name}" runs an unpinned executable`,
-        file: path73,
+        file: path74,
         signals: [`\`${argv.slice(0, 120)}\` \u2014 unversioned/@latest npx`],
         fix: "Pin the MCP server package to an exact version so a PR (or a registry compromise) can\u2019t swap the toolchain."
       });
@@ -55814,7 +55890,7 @@ function analyzeMcpServers(servers, path73) {
           dimension: "mcp",
           severity: "high",
           title: `MCP server "${name}" has an inline credential`,
-          file: path73,
+          file: path74,
           signals: [
             `env.${k} matches ${hit.patternName} \u2014 agent-reachable secret committed to the repo`
           ],
@@ -55828,7 +55904,7 @@ function analyzeMcpServers(servers, path73) {
 
 // src/ci-check/codex.ts
 var import_smol_toml5 = require("smol-toml");
-function analyzeCodexConfig(path73, content) {
+function analyzeCodexConfig(path74, content) {
   let cfg;
   try {
     cfg = (0, import_smol_toml5.parse)(content);
@@ -55836,7 +55912,7 @@ function analyzeCodexConfig(path73, content) {
     return [];
   }
   const findings = [];
-  findings.push(...analyzeMcpServers(cfg.mcp_servers ?? {}, path73));
+  findings.push(...analyzeMcpServers(cfg.mcp_servers ?? {}, path74));
   const sandbox = typeof cfg.sandbox_mode === "string" ? cfg.sandbox_mode : "";
   const approval = typeof cfg.approval_policy === "string" ? cfg.approval_policy : "";
   const fullAccess = /danger-full-access/i.test(sandbox);
@@ -55851,7 +55927,7 @@ function analyzeCodexConfig(path73, content) {
       dimension: "toolRules",
       severity: fullAccess ? "high" : "medium",
       title: fullAccess ? "Codex config grants a full-access sandbox" : "Codex config never requires approval",
-      file: path73,
+      file: path74,
       signals,
       fix: 'Commit a least-privilege Codex config: prefer `sandbox_mode = "read-only"` (or `"workspace-write"`) and `approval_policy = "on-request"`/`"on-failure"`. A repo-committed config applies to every contributor who runs Codex here.'
     });
@@ -55907,10 +55983,10 @@ function decodeSuspiciousBase64(text) {
   }
   return out;
 }
-function mk(severity, title, signals, fix, path73) {
-  return { check: "CI-6", dimension: "instructions", severity, title, file: path73, signals, fix };
+function mk(severity, title, signals, fix, path74) {
+  return { check: "CI-6", dimension: "instructions", severity, title, file: path74, signals, fix };
 }
-function analyzeInstructionFile(path73, content) {
+function analyzeInstructionFile(path74, content) {
   const findings = [];
   const decoded = decodeSuspiciousBase64(content);
   if (TAG_CHARS.test(content))
@@ -55922,7 +55998,7 @@ function analyzeInstructionFile(path73, content) {
           "contains Unicode tag characters (U+E0000\u2013E007F) \u2014 an invisible instruction-smuggling channel with no legitimate use in text"
         ],
         "Remove the tag characters. Instruction files must be plain, reviewable text.",
-        path73
+        path74
       )
     );
   if (BIDI_OVERRIDE.test(content))
@@ -55934,7 +56010,7 @@ function analyzeInstructionFile(path73, content) {
           "contains a bidi override (U+202D/U+202E) \u2014 a Trojan-Source technique that visually reorders text so a human reads something different from what the agent parses"
         ],
         "Remove the bidi override characters.",
-        path73
+        path74
       )
     );
   else if (BIDI_EMBED_ISOLATE.test(content))
@@ -55946,7 +56022,7 @@ function analyzeInstructionFile(path73, content) {
           "contains bidi embed/isolate characters (U+202A\u2013202C / U+2066\u20132069) \u2014 legitimate in right-to-left text, but confirm they are not being used to hide or reorder instructions"
         ],
         "Confirm the bidi marks are legitimate RTL formatting; remove otherwise.",
-        path73
+        path74
       )
     );
   const zw = suspiciousZeroWidth(content);
@@ -55960,7 +56036,7 @@ function analyzeInstructionFile(path73, content) {
           revealed ? "a zero-width character conceals a prompt-override directive that only appears once the hidden characters are stripped" : "a zero-width character splits a visible Latin word \u2014 a concealment technique (hides text from human review while the agent reads it as contiguous)"
         ],
         "Remove the zero-width characters. Instruction files must be plain, reviewable text.",
-        path73
+        path74
       )
     );
   }
@@ -55976,7 +56052,7 @@ function analyzeInstructionFile(path73, content) {
           `contains a prompt-override / role-impersonation directive (\`${m[0].slice(0, 60).trim()}\`)${ovEnc ? " \u2014 concealed in a base64 blob" : ""}`
         ],
         "Remove the override text. An instruction file should not tell the agent to ignore its own rules.",
-        path73
+        path74
       )
     );
   }
@@ -55988,7 +56064,7 @@ function analyzeInstructionFile(path73, content) {
         "Instruction directs the agent to fetch and run remote code",
         [`\`${fo[0].slice(0, 70).trim()}\` \u2014 fetch-and-obey, outside an install/setup section`],
         "Do not instruct the agent to pipe remote content into a shell; pin and vendor scripts instead.",
-        path73
+        path74
       )
     );
   }
@@ -56000,7 +56076,7 @@ function analyzeInstructionFile(path73, content) {
         "Instruction points the agent at credential material",
         [`references \`${sp[0].slice(0, 50).trim()}\` \u2014 directs the agent toward secrets`],
         "Do not reference credential files or paths in agent instructions.",
-        path73
+        path74
       )
     );
   }
@@ -56012,7 +56088,7 @@ function analyzeInstructionFile(path73, content) {
         "Instruction directs the agent to send data to an external endpoint",
         [`\`${ex[0].slice(0, 70).trim()}\` \u2014 possible exfiltration directive`],
         "Remove external post/upload directives from agent instructions.",
-        path73
+        path74
       )
     );
   }