@node9/proxy 2.6.2 → 2.7.1

package/dist/dashboard.mjs

@@ -228,9 +228,9 @@ function matchesPattern(text, patterns) {
   const withoutDotSlash = text.replace(/^\.\//, "");
   return isMatch(withoutDotSlash) || isMatch(`./${withoutDotSlash}`);
 }
-function getNestedValue(obj, path12) {
+function getNestedValue(obj, path13) {
   if (!obj || typeof obj !== "object") return null;
-  const segments = path12.split(".");
+  const segments = path13.split(".");
   for (const seg of segments) {
     if (FORBIDDEN_PATH_SEGMENTS.has(seg)) return null;
   }
@@ -2333,8 +2333,8 @@ function sanitizeConfig(raw) {
     }
   }
   const lines = result.error.issues.map((issue) => {
-    const path12 = issue.path.length > 0 ? issue.path.join(".") : "root";
-    return `  \u2022 ${path12}: ${issue.message}`;
+    const path13 = issue.path.length > 0 ? issue.path.join(".") : "root";
+    return `  \u2022 ${path13}: ${issue.message}`;
   });
   return {
     sanitized,
@@ -3213,13 +3213,13 @@ function getConfig(cwd) {
         }
         if (Array.isArray(mc.jailPaths)) {
           for (const jp of mc.jailPaths) {
-            const path12 = typeof jp?.path === "string" ? jp.path.trim() : "";
-            if (!path12) continue;
+            const path13 = typeof jp?.path === "string" ? jp.path.trim() : "";
+            if (!path13) continue;
             const verdict = jp?.verdict === "review" ? "review" : "block";
-            for (const r of pathRules(path12, verdict, "org-managed jail")) {
+            for (const r of pathRules(path13, verdict, "org-managed jail")) {
               mergedPolicy.smartRules.push({ ...r, name: `org:${r.name}` });
             }
-            mergedPolicy.managedJailPaths.push({ path: path12, verdict });
+            mergedPolicy.managedJailPaths.push({ path: path13, verdict });
           }
         }
         if (Array.isArray(mc.trustedHosts)) {
@@ -3718,14 +3718,15 @@ import os6 from "os";
 function normalizeModel(raw) {
   return raw.replace(/-\d{8}$/, "").toLowerCase();
 }
-function readCache() {
+function readCache(opts) {
   try {
     const raw = JSON.parse(fs5.readFileSync(CACHE_FILE(), "utf-8"));
     if (typeof raw.fetchedAt !== "string" || typeof raw.prices !== "object" || raw.prices === null) {
       return null;
     }
     const ageMs = Date.now() - new Date(raw.fetchedAt).getTime();
-    if (ageMs < 0 || ageMs > TTL_MS) return null;
+    if (!Number.isFinite(ageMs) || ageMs < 0) return null;
+    if (opts.requireFresh && ageMs > TTL_MS) return null;
     return raw.prices;
   } catch {
     return null;
@@ -3791,7 +3792,7 @@ async function fetchLiteLLMPricing() {
 }
 async function ensurePricingLoaded() {
   if (memCache !== null && Date.now() - memCacheAt < TTL_MS) return;
-  const fromDisk = readCache();
+  const fromDisk = readCache({ requireFresh: true });
   if (fromDisk && Object.keys(fromDisk).length > 0) {
     memCache = fromDisk;
     memCacheAt = Date.now();
@@ -3816,7 +3817,7 @@ function pricingFor(model) {
   if (cached !== void 0) return cached;
   if (memCache === null && !diskChecked) {
     diskChecked = true;
-    const disk = readCache();
+    const disk = readCache({ requireFresh: false });
     if (disk && Object.keys(disk).length > 0) {
       memCache = disk;
       memCacheAt = Date.now();
@@ -3945,6 +3946,37 @@ var init_cost_copilot = __esm({
   }
 });
 
+// src/session-files.ts
+import * as fs6 from "fs";
+import * as path7 from "path";
+function listSessionFiles(dir, maxDepth = 6) {
+  const out = [];
+  const walk = (d, rel, depth) => {
+    if (depth > maxDepth) return;
+    let entries;
+    try {
+      entries = fs6.readdirSync(d, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const e of entries) {
+      const childRel = rel ? path7.join(rel, e.name) : e.name;
+      if (e.isDirectory()) walk(path7.join(d, e.name), childRel, depth + 1);
+      else if (e.name.endsWith(".jsonl")) out.push(childRel);
+    }
+  };
+  walk(dir, "", 0);
+  return out;
+}
+function sessionIdOf(relPath) {
+  return path7.basename(relPath).replace(/\.jsonl$/, "");
+}
+var init_session_files = __esm({
+  "src/session-files.ts"() {
+    "use strict";
+  }
+});
+
 // src/costSync.ts
 function decodeProjectDirName(dirName) {
   return dirName.replace(/-/g, "/");
@@ -3959,6 +3991,7 @@ var init_costSync = __esm({
     init_cost_codex();
     init_cost_gemini();
     init_cost_copilot();
+    init_session_files();
     SYNC_INTERVAL_MS = 10 * 60 * 1e3;
   }
 });
@@ -4031,9 +4064,9 @@ var init_scan_watermark = __esm({
 });
 
 // src/cli/aggregate/report-audit.ts
-import fs6 from "fs";
+import fs7 from "fs";
 import os7 from "os";
-import path7 from "path";
+import path8 from "path";
 function buildTestTimestamps(allEntries) {
   const testTs = /* @__PURE__ */ new Set();
   for (const e of allEntries) {
@@ -4114,8 +4147,8 @@ function getDateRange(period, now) {
   }
 }
 function parseAuditLog(logPath) {
-  if (!fs6.existsSync(logPath)) return [];
-  const raw = fs6.readFileSync(logPath, "utf-8");
+  if (!fs7.existsSync(logPath)) return [];
+  const raw = fs7.readFileSync(logPath, "utf-8");
   return raw.split("\n").flatMap((line) => {
     if (!line.trim()) return [];
     try {
@@ -4169,25 +4202,25 @@ function freezeClaudeCost(acc) {
   };
 }
 function processClaudeCostProject(proj, projectsDir, start, end, acc) {
-  const projPath = path7.join(projectsDir, proj);
+  const projPath = path8.join(projectsDir, proj);
   let files;
   try {
-    const stat = fs6.statSync(projPath);
+    const stat = fs7.statSync(projPath);
     if (!stat.isDirectory()) return;
-    files = fs6.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
+    files = listSessionFiles(projPath);
   } catch {
     return;
   }
   const startMs = start.getTime();
   for (const file of files) {
-    const filePath = path7.join(projPath, file);
+    const filePath = path8.join(projPath, file);
     try {
-      if (fs6.statSync(filePath).mtimeMs < startMs) continue;
+      if (fs7.statSync(filePath).mtimeMs < startMs) continue;
     } catch {
       continue;
     }
     try {
-      const raw = fs6.readFileSync(filePath, "utf-8");
+      const raw = fs7.readFileSync(filePath, "utf-8");
       for (const line of raw.split("\n")) {
         if (!line.trim()) continue;
         let entry;
@@ -4237,10 +4270,10 @@ function processClaudeCostProject(proj, projectsDir, start, end, acc) {
 }
 function loadClaudeCost(start, end, projectsDir) {
   const acc = emptyClaudeCostAccumulator();
-  if (!fs6.existsSync(projectsDir)) return freezeClaudeCost(acc);
+  if (!fs7.existsSync(projectsDir)) return freezeClaudeCost(acc);
   let dirs;
   try {
-    dirs = fs6.readdirSync(projectsDir);
+    dirs = fs7.readdirSync(projectsDir);
   } catch {
     return freezeClaudeCost(acc);
   }
@@ -4251,10 +4284,10 @@ function loadClaudeCost(start, end, projectsDir) {
 }
 async function loadClaudeCostAsync(start, end, projectsDir) {
   const acc = emptyClaudeCostAccumulator();
-  if (!fs6.existsSync(projectsDir)) return freezeClaudeCost(acc);
+  if (!fs7.existsSync(projectsDir)) return freezeClaudeCost(acc);
   let dirs;
   try {
-    dirs = fs6.readdirSync(projectsDir);
+    dirs = fs7.readdirSync(projectsDir);
   } catch {
     return freezeClaudeCost(acc);
   }
@@ -4267,7 +4300,7 @@ async function loadClaudeCostAsync(start, end, projectsDir) {
 function processCodexCostFile(filePath, start, end, acc) {
   let lines;
   try {
-    lines = fs6.readFileSync(filePath, "utf-8").split("\n");
+    lines = fs7.readFileSync(filePath, "utf-8").split("\n");
   } catch {
     return;
   }
@@ -4322,31 +4355,31 @@ function processCodexCostFile(filePath, start, end, acc) {
 }
 function listCodexSessionFiles(sessionsBase) {
   const jsonlFiles = [];
-  if (!fs6.existsSync(sessionsBase)) return jsonlFiles;
+  if (!fs7.existsSync(sessionsBase)) return jsonlFiles;
   try {
-    for (const year of fs6.readdirSync(sessionsBase)) {
-      const yearPath = path7.join(sessionsBase, year);
+    for (const year of fs7.readdirSync(sessionsBase)) {
+      const yearPath = path8.join(sessionsBase, year);
       try {
-        if (!fs6.statSync(yearPath).isDirectory()) continue;
+        if (!fs7.statSync(yearPath).isDirectory()) continue;
       } catch {
         continue;
       }
-      for (const month of fs6.readdirSync(yearPath)) {
-        const monthPath = path7.join(yearPath, month);
+      for (const month of fs7.readdirSync(yearPath)) {
+        const monthPath = path8.join(yearPath, month);
         try {
-          if (!fs6.statSync(monthPath).isDirectory()) continue;
+          if (!fs7.statSync(monthPath).isDirectory()) continue;
         } catch {
           continue;
         }
-        for (const day of fs6.readdirSync(monthPath)) {
-          const dayPath = path7.join(monthPath, day);
+        for (const day of fs7.readdirSync(monthPath)) {
+          const dayPath = path8.join(monthPath, day);
           try {
-            if (!fs6.statSync(dayPath).isDirectory()) continue;
+            if (!fs7.statSync(dayPath).isDirectory()) continue;
           } catch {
             continue;
           }
-          for (const file of fs6.readdirSync(dayPath)) {
-            if (file.endsWith(".jsonl")) jsonlFiles.push(path7.join(dayPath, file));
+          for (const file of fs7.readdirSync(dayPath)) {
+            if (file.endsWith(".jsonl")) jsonlFiles.push(path8.join(dayPath, file));
           }
         }
       }
@@ -4427,13 +4460,13 @@ function freezeGeminiCost(acc) {
 function processGeminiCostFile(filePath, projectKey, start, end, acc) {
   const startMs = start.getTime();
   try {
-    if (fs6.statSync(filePath).mtimeMs < startMs) return;
+    if (fs7.statSync(filePath).mtimeMs < startMs) return;
   } catch {
     return;
   }
   let raw;
   try {
-    raw = fs6.readFileSync(filePath, "utf-8");
+    raw = fs7.readFileSync(filePath, "utf-8");
   } catch {
     return;
   }
@@ -4482,30 +4515,30 @@ function listGeminiSessionFiles(geminiTmpDir) {
   const out = [];
   let dirs;
   try {
-    if (!fs6.statSync(geminiTmpDir).isDirectory()) return out;
-    dirs = fs6.readdirSync(geminiTmpDir);
+    if (!fs7.statSync(geminiTmpDir).isDirectory()) return out;
+    dirs = fs7.readdirSync(geminiTmpDir);
   } catch {
     return out;
   }
   for (const proj of dirs) {
-    const chatsDir = path7.join(geminiTmpDir, proj, "chats");
+    const chatsDir = path8.join(geminiTmpDir, proj, "chats");
     let files;
     try {
-      if (!fs6.statSync(chatsDir).isDirectory()) continue;
-      files = fs6.readdirSync(chatsDir);
+      if (!fs7.statSync(chatsDir).isDirectory()) continue;
+      files = fs7.readdirSync(chatsDir);
     } catch {
       continue;
     }
     for (const f of files) {
       if (!f.endsWith(".jsonl")) continue;
-      out.push({ projectKey: proj, file: path7.join(chatsDir, f) });
+      out.push({ projectKey: proj, file: path8.join(chatsDir, f) });
     }
   }
   return out;
 }
 function loadGeminiCost(start, end, geminiTmpDir) {
   const acc = emptyGeminiAccumulator();
-  if (!fs6.existsSync(geminiTmpDir)) return freezeGeminiCost(acc);
+  if (!fs7.existsSync(geminiTmpDir)) return freezeGeminiCost(acc);
   for (const { projectKey, file } of listGeminiSessionFiles(geminiTmpDir)) {
     processGeminiCostFile(file, projectKey, start, end, acc);
   }
@@ -4513,7 +4546,7 @@ function loadGeminiCost(start, end, geminiTmpDir) {
 }
 async function loadGeminiCostAsync(start, end, geminiTmpDir) {
   const acc = emptyGeminiAccumulator();
-  if (!fs6.existsSync(geminiTmpDir)) return freezeGeminiCost(acc);
+  if (!fs7.existsSync(geminiTmpDir)) return freezeGeminiCost(acc);
   const files = listGeminiSessionFiles(geminiTmpDir);
   const CHUNK_SIZE = 5;
   for (let i = 0; i < files.length; i++) {
@@ -4536,11 +4569,11 @@ function dimensionOfBlock(checkedBy, ruleName) {
 }
 function aggregateReportFromAudit(period, opts = {}) {
   const now = opts.now ?? /* @__PURE__ */ new Date();
-  const auditLogPath2 = opts.auditLogPath ?? path7.join(os7.homedir(), ".node9", "audit.log");
-  const claudeProjectsDir = opts.claudeProjectsDir ?? path7.join(os7.homedir(), ".claude", "projects");
-  const codexSessionsDir = opts.codexSessionsDir ?? path7.join(os7.homedir(), ".codex", "sessions");
-  const geminiTmpDir = opts.geminiTmpDir ?? path7.join(os7.homedir(), ".gemini", "tmp");
-  const hasAuditFile = fs6.existsSync(auditLogPath2);
+  const auditLogPath2 = opts.auditLogPath ?? path8.join(os7.homedir(), ".node9", "audit.log");
+  const claudeProjectsDir = opts.claudeProjectsDir ?? path8.join(os7.homedir(), ".claude", "projects");
+  const codexSessionsDir = opts.codexSessionsDir ?? path8.join(os7.homedir(), ".codex", "sessions");
+  const geminiTmpDir = opts.geminiTmpDir ?? path8.join(os7.homedir(), ".gemini", "tmp");
+  const hasAuditFile = fs7.existsSync(auditLogPath2);
   const allEntries = opts.preloadedAuditEntries ?? parseAuditLog(auditLogPath2);
   const unackedDlp = allEntries.filter((e) => e.source === "response-dlp");
   const { start, end } = getDateRange(period, now);
@@ -4770,6 +4803,7 @@ var init_report_audit = __esm({
     init_litellm();
     init_cost_codex();
     init_decision();
+    init_session_files();
     TEST_COMMAND_RE = /(?:^|\s)(npm\s+(?:run\s+)?test|npx\s+(?:vitest|jest|mocha)|yarn\s+(?:run\s+)?test|pnpm\s+(?:run\s+)?test|vitest|jest|mocha|pytest|py\.test|cargo\s+test|go\s+test|bundle\s+exec\s+rspec|rspec|phpunit|dotnet\s+test)\b/i;
     SUPERSEDE_WINDOW_MS = 6e4;
     GEMINI_FALLBACK_MODELS2 = ["gemini-2.5-flash", "gemini-2.0-flash"];
@@ -4777,18 +4811,18 @@ var init_report_audit = __esm({
 });
 
 // src/utils/provenance.ts
-import path8 from "path";
+import path9 from "path";
 import os8 from "os";
 var USER_PREFIXES;
 var init_provenance = __esm({
   "src/utils/provenance.ts"() {
     "use strict";
     USER_PREFIXES = [
-      path8.join(os8.homedir(), "bin"),
-      path8.join(os8.homedir(), ".local", "bin"),
-      path8.join(os8.homedir(), ".cargo", "bin"),
-      path8.join(os8.homedir(), ".npm-global", "bin"),
-      path8.join(os8.homedir(), ".volta", "bin")
+      path9.join(os8.homedir(), "bin"),
+      path9.join(os8.homedir(), ".local", "bin"),
+      path9.join(os8.homedir(), ".cargo", "bin"),
+      path9.join(os8.homedir(), ".npm-global", "bin"),
+      path9.join(os8.homedir(), ".volta", "bin")
     ];
   }
 });
@@ -4832,14 +4866,14 @@ var init_mcp_pin = __esm({
 });
 
 // src/daemon/hook-baseline.ts
-import path9 from "path";
+import path10 from "path";
 import os9 from "os";
 var BASELINE_FILE, NOTIFIED_FILE;
 var init_hook_baseline = __esm({
   "src/daemon/hook-baseline.ts"() {
     "use strict";
-    BASELINE_FILE = path9.join(os9.homedir(), ".node9", "hooks-baseline.json");
-    NOTIFIED_FILE = path9.join(os9.homedir(), ".node9", "hook-heal-notified.json");
+    BASELINE_FILE = path10.join(os9.homedir(), ".node9", "hooks-baseline.json");
+    NOTIFIED_FILE = path10.join(os9.homedir(), ".node9", "hook-heal-notified.json");
   }
 });
 
@@ -4898,8 +4932,8 @@ var init_scan_history = __esm({
 
 // src/cli/commands/scan.ts
 import chalk4 from "chalk";
-import fs7 from "fs";
-import path10 from "path";
+import fs8 from "fs";
+import path11 from "path";
 import os10 from "os";
 import stringWidth2 from "string-width";
 function claudeModelPrice2(model) {
@@ -5046,10 +5080,11 @@ function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, re
   result.filesScanned++;
   result.sessions++;
   onProgress?.(result.filesScanned);
-  const sessionId = file.replace(/\.jsonl$/, "");
+  const sessionId = sessionIdOf(file);
+  const session = { sessionId, costUSD: 0, toolCalls: 0 };
   let raw;
   try {
-    raw = fs7.readFileSync(path10.join(projPath, file), "utf-8");
+    raw = fs8.readFileSync(path11.join(projPath, file), "utf-8");
   } catch {
     return;
   }
@@ -5101,7 +5136,7 @@ function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, re
           if (block.type !== "tool_result") continue;
           const filePath = block.tool_use_id ? toolUseFilePaths.get(block.tool_use_id) : void 0;
           if (filePath) {
-            const ext = path10.extname(filePath).toLowerCase();
+            const ext = path11.extname(filePath).toLowerCase();
             if (CODE_EXTENSIONS.has(ext)) continue;
           }
           const resultText = typeof block.content === "string" ? block.content : Array.isArray(block.content) ? block.content.map((c) => c.text ?? "").join("\n") : null;
@@ -5134,7 +5169,9 @@ function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, re
     if (usage && model) {
       const p = claudeModelPrice2(model);
       if (p) {
-        result.totalCostUSD += (usage.input_tokens ?? 0) * p.i + (usage.output_tokens ?? 0) * p.o + (usage.cache_creation_input_tokens ?? 0) * p.cw + (usage.cache_read_input_tokens ?? 0) * p.cr;
+        const rowCost = (usage.input_tokens ?? 0) * p.i + (usage.output_tokens ?? 0) * p.o + (usage.cache_creation_input_tokens ?? 0) * p.cw + (usage.cache_read_input_tokens ?? 0) * p.cr;
+        result.totalCostUSD += rowCost;
+        session.costUSD += rowCost;
       }
     }
     const content = entry.message?.content;
@@ -5142,6 +5179,7 @@ function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, re
     for (const block of content) {
       if (block.type !== "tool_use") continue;
       result.totalToolCalls++;
+      session.toolCalls++;
       const toolName = block.name ?? "";
       const toolNameLower = toolName.toLowerCase();
       const input = block.input ?? {};
@@ -5158,7 +5196,7 @@ function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, re
       const rawCmd = String(input.command ?? "").trimStart();
       if (/^node9\s+(scan|explain|report|tail|dlp|status|sessions|audit)\b/.test(rawCmd)) continue;
       const inputFilePath = typeof input.file_path === "string" ? input.file_path : "";
-      const inputFileExt = inputFilePath ? path10.extname(inputFilePath).toLowerCase() : "";
+      const inputFileExt = inputFilePath ? path11.extname(inputFilePath).toLowerCase() : "";
       if (CODE_EXTENSIONS.has(inputFileExt)) continue;
       const dlpMatch = scanArgs(input);
       if (dlpMatch) {
@@ -5253,11 +5291,12 @@ function processClaudeFile(file, projPath, projLabel, ruleSources, startDate, re
   if (firstDlpTs !== null && (firstEditTs === null || firstDlpTs < firstEditTs)) {
     result.sessionsWithEarlySecrets++;
   }
+  result.perSession.push(session);
 }
 async function processClaudeProjectAsync(proj, projectsDir, ruleSources, startDate, result, dedup, onProgress, onLine) {
-  const projPath = path10.join(projectsDir, proj);
+  const projPath = path11.join(projectsDir, proj);
   try {
-    if (!fs7.statSync(projPath).isDirectory()) return;
+    if (!fs8.statSync(projPath).isDirectory()) return;
   } catch {
     return;
   }
@@ -5267,7 +5306,7 @@ async function processClaudeProjectAsync(proj, projectsDir, ruleSources, startDa
   );
   let files;
   try {
-    files = fs7.readdirSync(projPath).filter((f) => f.endsWith(".jsonl") && !f.startsWith("agent-"));
+    files = listSessionFiles(projPath);
   } catch {
     return;
   }
@@ -5301,16 +5340,17 @@ function emptyClaudeScan() {
     totalCostUSD: 0,
     firstDate: null,
     lastDate: null,
-    sessionsWithEarlySecrets: 0
+    sessionsWithEarlySecrets: 0,
+    perSession: []
   };
 }
 async function scanClaudeHistoryAsync(startDate, onProgress, onLine) {
-  const projectsDir = path10.join(os10.homedir(), ".claude", "projects");
+  const projectsDir = path11.join(os10.homedir(), ".claude", "projects");
   const result = emptyClaudeScan();
-  if (!fs7.existsSync(projectsDir)) return result;
+  if (!fs8.existsSync(projectsDir)) return result;
   let projDirs;
   try {
-    projDirs = fs7.readdirSync(projectsDir);
+    projDirs = fs8.readdirSync(projectsDir);
   } catch {
     return result;
   }
@@ -5331,7 +5371,7 @@ async function scanClaudeHistoryAsync(startDate, onProgress, onLine) {
   return result;
 }
 function scanGeminiHistory(startDate, onProgress, onLine) {
-  const tmpDir = path10.join(os10.homedir(), ".gemini", "tmp");
+  const tmpDir = path11.join(os10.homedir(), ".gemini", "tmp");
   const result = {
     filesScanned: 0,
     sessions: 0,
@@ -5343,36 +5383,37 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
     totalCostUSD: 0,
     firstDate: null,
     lastDate: null,
-    sessionsWithEarlySecrets: 0
+    sessionsWithEarlySecrets: 0,
+    perSession: []
   };
   const dedup = emptyScanDedup();
-  if (!fs7.existsSync(tmpDir)) return result;
+  if (!fs8.existsSync(tmpDir)) return result;
   let slugDirs;
   try {
-    slugDirs = fs7.readdirSync(tmpDir);
+    slugDirs = fs8.readdirSync(tmpDir);
   } catch {
     return result;
   }
   const ruleSources = buildRuleSources();
   for (const slug2 of slugDirs) {
-    const slugPath = path10.join(tmpDir, slug2);
+    const slugPath = path11.join(tmpDir, slug2);
     try {
-      if (!fs7.statSync(slugPath).isDirectory()) continue;
+      if (!fs8.statSync(slugPath).isDirectory()) continue;
     } catch {
       continue;
     }
     let projLabel = stripTerminalEscapes(slug2).slice(0, 40);
     try {
       projLabel = stripTerminalEscapes(
-        fs7.readFileSync(path10.join(slugPath, ".project_root"), "utf-8").trim()
+        fs8.readFileSync(path11.join(slugPath, ".project_root"), "utf-8").trim()
       ).replace(os10.homedir(), "~").slice(0, 40);
     } catch {
     }
-    const chatsDir = path10.join(slugPath, "chats");
-    if (!fs7.existsSync(chatsDir)) continue;
+    const chatsDir = path11.join(slugPath, "chats");
+    if (!fs8.existsSync(chatsDir)) continue;
     let chatFiles;
     try {
-      chatFiles = fs7.readdirSync(chatsDir).filter((f) => f.endsWith(".json") || f.endsWith(".jsonl")).sort((a, b) => Number(b.endsWith(".jsonl")) - Number(a.endsWith(".jsonl")));
+      chatFiles = fs8.readdirSync(chatsDir).filter((f) => f.endsWith(".json") || f.endsWith(".jsonl")).sort((a, b) => Number(b.endsWith(".jsonl")) - Number(a.endsWith(".jsonl")));
     } catch {
       continue;
     }
@@ -5385,7 +5426,7 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
       onProgress?.(result.filesScanned);
       let raw;
       try {
-        raw = fs7.readFileSync(path10.join(chatsDir, chatFile), "utf-8");
+        raw = fs8.readFileSync(path11.join(chatsDir, chatFile), "utf-8");
       } catch {
         continue;
       }
@@ -5558,7 +5599,7 @@ function scanGeminiHistory(startDate, onProgress, onLine) {
   return result;
 }
 function scanCodexHistory(startDate, onProgress, onLine) {
-  const sessionsBase = path10.join(os10.homedir(), ".codex", "sessions");
+  const sessionsBase = path11.join(os10.homedir(), ".codex", "sessions");
   const result = {
     filesScanned: 0,
     sessions: 0,
@@ -5570,35 +5611,36 @@ function scanCodexHistory(startDate, onProgress, onLine) {
     totalCostUSD: 0,
     firstDate: null,
     lastDate: null,
-    sessionsWithEarlySecrets: 0
+    sessionsWithEarlySecrets: 0,
+    perSession: []
   };
   const dedup = emptyScanDedup();
-  if (!fs7.existsSync(sessionsBase)) return result;
+  if (!fs8.existsSync(sessionsBase)) return result;
   const jsonlFiles = [];
   try {
-    for (const year of fs7.readdirSync(sessionsBase)) {
-      const yearPath = path10.join(sessionsBase, year);
+    for (const year of fs8.readdirSync(sessionsBase)) {
+      const yearPath = path11.join(sessionsBase, year);
       try {
-        if (!fs7.statSync(yearPath).isDirectory()) continue;
+        if (!fs8.statSync(yearPath).isDirectory()) continue;
       } catch {
         continue;
       }
-      for (const month of fs7.readdirSync(yearPath)) {
-        const monthPath = path10.join(yearPath, month);
+      for (const month of fs8.readdirSync(yearPath)) {
+        const monthPath = path11.join(yearPath, month);
         try {
-          if (!fs7.statSync(monthPath).isDirectory()) continue;
+          if (!fs8.statSync(monthPath).isDirectory()) continue;
         } catch {
           continue;
         }
-        for (const day of fs7.readdirSync(monthPath)) {
-          const dayPath = path10.join(monthPath, day);
+        for (const day of fs8.readdirSync(monthPath)) {
+          const dayPath = path11.join(monthPath, day);
           try {
-            if (!fs7.statSync(dayPath).isDirectory()) continue;
+            if (!fs8.statSync(dayPath).isDirectory()) continue;
           } catch {
             continue;
           }
-          for (const file of fs7.readdirSync(dayPath)) {
-            if (file.endsWith(".jsonl")) jsonlFiles.push(path10.join(dayPath, file));
+          for (const file of fs8.readdirSync(dayPath)) {
+            if (file.endsWith(".jsonl")) jsonlFiles.push(path11.join(dayPath, file));
           }
         }
       }
@@ -5612,7 +5654,7 @@ function scanCodexHistory(startDate, onProgress, onLine) {
     onProgress?.(result.filesScanned);
     let lines;
     try {
-      lines = fs7.readFileSync(filePath, "utf-8").split("\n");
+      lines = fs8.readFileSync(filePath, "utf-8").split("\n");
     } catch {
       continue;
     }
@@ -5817,6 +5859,7 @@ var init_scan = __esm({
     init_scan_derive();
     init_protection();
     init_scan_json();
+    init_session_files();
     init_scan_history();
     toolInspectionMap = DEFAULT_CONFIG.policy.toolInspection;
     CODE_EXTENSIONS = /* @__PURE__ */ new Set([
@@ -5881,23 +5924,23 @@ var init_scan = __esm({
 });
 
 // src/tui/dashboard/data.ts
-import fs8 from "fs";
+import fs9 from "fs";
 import os11 from "os";
-import path11 from "path";
+import path12 from "path";
 import http from "http";
 function auditLogPath() {
-  return path11.join(os11.homedir(), ".node9", "audit.log");
+  return path12.join(os11.homedir(), ".node9", "audit.log");
 }
 function readAuditEntriesAsync(chunkSize = 1e3, customPath) {
   return new Promise((resolve) => {
     const p = customPath ?? auditLogPath();
-    if (!fs8.existsSync(p)) {
+    if (!fs9.existsSync(p)) {
       resolve([]);
       return;
     }
     let raw;
     try {
-      raw = fs8.readFileSync(p, "utf8");
+      raw = fs9.readFileSync(p, "utf8");
     } catch {
       resolve([]);
       return;
@@ -6033,9 +6076,9 @@ function shortenPath(p) {
   return p.startsWith(home) ? p.replace(home, "~") : p;
 }
 async function loadReportAuditAsync(period) {
-  const claudeProjectsDir = path11.join(os11.homedir(), ".claude", "projects");
-  const codexSessionsDir = path11.join(os11.homedir(), ".codex", "sessions");
-  const geminiTmpDir = path11.join(os11.homedir(), ".gemini", "tmp");
+  const claudeProjectsDir = path12.join(os11.homedir(), ".claude", "projects");
+  const codexSessionsDir = path12.join(os11.homedir(), ".codex", "sessions");
+  const geminiTmpDir = path12.join(os11.homedir(), ".gemini", "tmp");
   const { start, end } = getDateRange(period, /* @__PURE__ */ new Date());
   const entries = await readAuditEntriesAsync();
   void ensurePricingLoaded();
@@ -7070,7 +7113,7 @@ function Cost({ audit }) {
       flexGrow: 1,
       flexBasis: 0,
       children: [
-        /* @__PURE__ */ jsx3(Text3, { bold: true, children: "COST" }),
+        /* @__PURE__ */ jsx3(Text3, { bold: true, children: "COST \xB7 API value" }),
         audit === null ? /* @__PURE__ */ jsx3(Text3, { dimColor: true, children: "loading\u2026" }) : /* @__PURE__ */ jsxs3(Fragment2, { children: [
           /* @__PURE__ */ jsxs3(Box3, { height: 1, children: [
             /* @__PURE__ */ jsx3(Box3, { width: LABEL_W2, children: /* @__PURE__ */ jsx3(Text3, { children: "Total" }) }),
@@ -7116,8 +7159,8 @@ import { Fragment as Fragment3, jsx as jsx4, jsxs as jsxs4 } from "react/jsx-run
 function TopToolsProjects({ audit }) {
   const data = audit?.data;
   const tools = data ? [...data.toolMap.entries()].sort(([, a], [, b]) => b.calls - a.calls).slice(0, ROW_LIMIT) : [];
-  const projects = data ? [...data.cost.byProject.entries()].map(([path12, r]) => ({
-    name: basenameOf(path12),
+  const projects = data ? [...data.cost.byProject.entries()].map(([path13, r]) => ({
+    name: basenameOf(path13),
     cost: r.cost,
     tokens: r.inputTokens + r.outputTokens
   })).sort((a, b) => b.cost - a.cost).slice(0, ROW_LIMIT) : [];
@@ -7554,8 +7597,8 @@ function pickTopLoopFile(loops) {
     map.set(k, (map.get(k) ?? 0) + (l.count ?? 0));
   }
   if (map.size === 0) return void 0;
-  const [path12, count] = [...map.entries()].sort((a, b) => b[1] - a[1])[0];
-  return { path: path12, count };
+  const [path13, count] = [...map.entries()].sort((a, b) => b[1] - a[1])[0];
+  return { path: path13, count };
 }
 var EMPTY_FILTERED_SCAN;
 var init_derive = __esm({