@node9/proxy 2.8.0 → 2.8.2

package/README.md

@@ -5,7 +5,7 @@
   <a href="https://www.npmjs.com/package/node9-ai"><img src="https://img.shields.io/npm/dm/node9-ai.svg" alt="monthly downloads" /></a>
   <a href="https://opensource.org/licenses/Apache-2.0"><img src="https://img.shields.io/badge/License-Apache%202.0-blue.svg" alt="License: Apache 2.0" /></a>
   <a href="https://node9.ai/docs"><img src="https://img.shields.io/badge/docs-node9.ai-blue" alt="Documentation" /></a>
-  <a href="https://huggingface.co/spaces/Node9ai/node9-security-demo"><img src="https://huggingface.co/datasets/huggingface/badges/resolve/main/open-in-hf-spaces-sm.svg" alt="Try on HF Spaces" /></a>
+  <a href="https://github.com/node9-ai/node9-proxy/blob/main/.github/workflows/agent-security.yml"><img src="https://img.shields.io/badge/node9-self--scanned-a855f7?style=flat&labelColor=%231A1A2E&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAxNCAxNCI+PHBhdGggZmlsbD0iI0Y1RTlGRiIgZmlsbC1ydWxlPSJldmVub2RkIiBjbGlwLXJ1bGU9ImV2ZW5vZGQiIGQ9Ik03IDAuNCAxLjYgMi41djQuMmMwIDMuMSAyLjMgNS42IDUuNCA2LjkgMy4xLTEuMyA1LjQtMy44IDUuNC02LjlWMi41TDcgMC40Wm0wIDEuNSAzLjkgMS41djMuM2MwIDIuMy0xLjYgNC4yLTMuOSA1LjMtMi4zLTEuMS0zLjktMy0zLjktNS4zVjMuNEw3IDEuOVptMCAyLjJhMS45IDEuOSAwIDAgMC0xIDMuNXYxLjZoMlY3LjZhMS45IDEuOSAwIDAgMC0xLTMuNVoiLz48L3N2Zz4K" alt="node9 self-scanned" /></a>
 </p>
 
 Node9 sits between your AI agent and the tools it can use — **discover** what it's already been doing, **protect** against risky actions in real time, and **review** what happened over any time window.
@@ -108,12 +108,14 @@ What it checks:
 
 ```yaml
 # .github/workflows/agent-security.yml
-- uses: node9-ai/agent-security-action@v1
+- uses: node9-ai/node9-proxy@v2
   with:
     fail-on: high # or 'never' to just comment
 ```
 
-Marketplace: **[node9 Agent Security Check](https://github.com/marketplace/actions/node9-agent-security-check)**
+Marketplace: **[node9 Agent Security](https://github.com/marketplace/actions/node9-agent-security)**
+
+Running it? Add the **[`scanned by node9` badge](docs/badges.md)** to your README.
 
 ## Live monitoring
 

package/dist/cli.js

@@ -15757,6 +15757,7 @@ function registerScanCommand(program2) {
       })();
       const isWired = getAgentsStatus().some((a) => a.wired);
       const enabledShields = getConfig().policy.appliedShields ?? [];
+      const keyed = isKeyedForPolicy();
       const enabledShieldSet = new Set(enabledShields);
       const screenshotMode = options.compact || options.narrative;
       const useInk = !options.classic && !drillDown;
@@ -15909,7 +15910,8 @@ function registerScanCommand(program2) {
           blastExposures,
           blockedCount,
           reviewCount,
-          enabledShields
+          enabledShields,
+          keyed
         });
         return;
       }
@@ -15921,7 +15923,8 @@ function registerScanCommand(program2) {
           blastExposures,
           blockedCount,
           reviewCount,
-          enabledShields
+          enabledShields,
+          keyed
         });
         return;
       }
@@ -16012,7 +16015,8 @@ function registerScanCommand(program2) {
                 blastExposures,
                 blockedCount,
                 reviewCount,
-                enabledShields
+                enabledShields,
+                keyed
               },
               rangeLabel2
             );
@@ -16025,7 +16029,8 @@ function registerScanCommand(program2) {
               blastExposures,
               blockedCount,
               reviewCount,
-              enabledShields
+              enabledShields,
+              keyed
             });
           }
           const cta = isWired ? "\u2705 node9 is active" : "\u2192 install node9 to enable protection";
@@ -16248,6 +16253,7 @@ var import_chalk6, import_fs26, import_path28, import_os25, import_string_width2
 var init_scan = __esm({
   "src/cli/commands/scan.ts"() {
     "use strict";
+    init_keyed_guard();
     import_chalk6 = __toESM(require("chalk"));
     import_fs26 = __toESM(require("fs"));
     import_path28 = __toESM(require("path"));

package/dist/cli.mjs

@@ -15761,6 +15761,7 @@ function registerScanCommand(program2) {
       })();
       const isWired = getAgentsStatus().some((a) => a.wired);
       const enabledShields = getConfig().policy.appliedShields ?? [];
+      const keyed = isKeyedForPolicy();
       const enabledShieldSet = new Set(enabledShields);
       const screenshotMode = options.compact || options.narrative;
       const useInk = !options.classic && !drillDown;
@@ -15913,7 +15914,8 @@ function registerScanCommand(program2) {
           blastExposures,
           blockedCount,
           reviewCount,
-          enabledShields
+          enabledShields,
+          keyed
         });
         return;
       }
@@ -15925,7 +15927,8 @@ function registerScanCommand(program2) {
           blastExposures,
           blockedCount,
           reviewCount,
-          enabledShields
+          enabledShields,
+          keyed
         });
         return;
       }
@@ -16016,7 +16019,8 @@ function registerScanCommand(program2) {
                 blastExposures,
                 blockedCount,
                 reviewCount,
-                enabledShields
+                enabledShields,
+                keyed
               },
               rangeLabel2
             );
@@ -16029,7 +16033,8 @@ function registerScanCommand(program2) {
               blastExposures,
               blockedCount,
               reviewCount,
-              enabledShields
+              enabledShields,
+              keyed
             });
           }
           const cta = isWired ? "\u2705 node9 is active" : "\u2192 install node9 to enable protection";
@@ -16252,6 +16257,7 @@ var toolInspectionMap, CODE_EXTENSIONS, SELF_OUTPUT_MARKERS, FIXTURE_TOKEN_PATTE
 var init_scan = __esm({
   "src/cli/commands/scan.ts"() {
     "use strict";
+    init_keyed_guard();
     init_shields();
     init_config();
     init_policy();

package/dist/dashboard.mjs

@@ -4809,6 +4809,22 @@ var init_report_audit = __esm({
   }
 });
 
+// src/config/keyed-guard.ts
+import chalk2 from "chalk";
+function isKeyedForPolicy() {
+  try {
+    return getConfig().policySource === "workspace";
+  } catch {
+    return false;
+  }
+}
+var init_keyed_guard = __esm({
+  "src/config/keyed-guard.ts"() {
+    "use strict";
+    init_config();
+  }
+});
+
 // src/utils/provenance.ts
 import path9 from "path";
 import os8 from "os";
@@ -4891,7 +4907,7 @@ var init_setup_pi_shim = __esm({
 });
 
 // src/setup.ts
-import chalk2 from "chalk";
+import chalk3 from "chalk";
 import { confirm as rawConfirm } from "@inquirer/prompts";
 import { parse as parseToml, stringify as stringifyToml } from "smol-toml";
 import * as yaml from "yaml";
@@ -4906,7 +4922,7 @@ var init_setup = __esm({
 });
 
 // src/cli/render/scan-derive.ts
-import chalk3 from "chalk";
+import chalk4 from "chalk";
 import stringWidth from "string-width";
 var init_scan_derive = __esm({
   "src/cli/render/scan-derive.ts"() {
@@ -4930,7 +4946,7 @@ var init_scan_history = __esm({
 });
 
 // src/cli/commands/scan.ts
-import chalk4 from "chalk";
+import chalk5 from "chalk";
 import fs8 from "fs";
 import path11 from "path";
 import os10 from "os";
@@ -5845,6 +5861,7 @@ var toolInspectionMap, CODE_EXTENSIONS, SELF_OUTPUT_MARKERS, FIXTURE_TOKEN_PATTE
 var init_scan = __esm({
   "src/cli/commands/scan.ts"() {
     "use strict";
+    init_keyed_guard();
     init_shields();
     init_config();
     init_policy();
@@ -7093,6 +7110,22 @@ var init_Protection = __esm({
   }
 });
 
+// src/cli/render/ink/panels/cost-note.ts
+function costNoteLines(keyed) {
+  return keyed ? ["Your plan and exact spend:", "dashboard \u2192 Report"] : ["To see your plan or exact spend, connect:", "node9 login (for free)"];
+}
+function costNoteLinesForThisMachine() {
+  return costNoteLines(isKeyedForPolicy());
+}
+var COST_LABEL;
+var init_cost_note = __esm({
+  "src/cli/render/ink/panels/cost-note.ts"() {
+    "use strict";
+    init_keyed_guard();
+    COST_LABEL = "COST \xB7 based on API value";
+  }
+});
+
 // src/tui/dashboard/views/report/panels/Cost.tsx
 import { Box as Box3, Text as Text3 } from "ink";
 import { Fragment as Fragment2, jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
@@ -7116,7 +7149,7 @@ function Cost({ audit }) {
       flexGrow: 1,
       flexBasis: 0,
       children: [
-        /* @__PURE__ */ jsx3(Text3, { bold: true, children: "COST \xB7 API value" }),
+        /* @__PURE__ */ jsx3(Text3, { bold: true, children: COST_LABEL }),
         audit === null ? /* @__PURE__ */ jsx3(Text3, { dimColor: true, children: "loading\u2026" }) : /* @__PURE__ */ jsxs3(Fragment2, { children: [
           /* @__PURE__ */ jsxs3(Box3, { height: 1, children: [
             /* @__PURE__ */ jsx3(Box3, { width: LABEL_W2, children: /* @__PURE__ */ jsx3(Text3, { children: "Total" }) }),
@@ -7139,7 +7172,8 @@ function Cost({ audit }) {
           /* @__PURE__ */ jsxs3(Box3, { height: 1, children: [
             /* @__PURE__ */ jsx3(Box3, { width: LABEL_W2, children: /* @__PURE__ */ jsx3(Text3, { dimColor: true, children: "Trend" }) }),
             /* @__PURE__ */ jsx3(Text3, { children: trend || /* @__PURE__ */ jsx3(Text3, { dimColor: true, children: "(no data)" }) })
-          ] })
+          ] }),
+          costNoteLinesForThisMachine().map((line) => /* @__PURE__ */ jsx3(Box3, { height: 1, children: /* @__PURE__ */ jsx3(Text3, { dimColor: true, wrap: "truncate-end", children: line }) }, line))
         ] })
       ]
     }
@@ -7151,6 +7185,7 @@ var init_Cost = __esm({
     "use strict";
     init_panels();
     init_format();
+    init_cost_note();
     init_util();
     LABEL_W2 = 10;
   }

package/dist/scan-ink.mjs

@@ -39,327 +39,169 @@ function formatCost(usd) {
   return `$${(usd / 1e3).toFixed(1)}K`;
 }
 
-// src/cli/render/ink/panels/CostPanel.tsx
-import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
-var LABEL_W = 16;
-function CostPanel({ summary, width }) {
-  const total = summary.stats.totalCostUSD;
-  return /* @__PURE__ */ jsxs3(Box3, { borderStyle: "round", borderColor: "gray", paddingX: 1, flexDirection: "column", width, children: [
-    /* @__PURE__ */ jsx3(Text3, { bold: true, children: "COST \xB7 API value" }),
-    /* @__PURE__ */ jsxs3(Box3, { children: [
-      /* @__PURE__ */ jsx3(Box3, { width: LABEL_W, children: /* @__PURE__ */ jsx3(Text3, { children: "Total" }) }),
-      /* @__PURE__ */ jsx3(Text3, { bold: true, children: formatCost(total) })
-    ] }),
-    summary.byAgent.map((agent) => /* @__PURE__ */ jsxs3(Box3, { children: [
-      /* @__PURE__ */ jsx3(Box3, { width: LABEL_W, children: /* @__PURE__ */ jsx3(Text3, { children: agent.label }) }),
-      /* @__PURE__ */ jsx3(Text3, { children: formatCost(agent.costUSD) })
-    ] }, agent.id)),
-    summary.loopWastedUSD > 0 ? /* @__PURE__ */ jsxs3(Box3, { children: [
-      /* @__PURE__ */ jsx3(Box3, { width: LABEL_W, children: /* @__PURE__ */ jsx3(Text3, { dimColor: true, children: "Wasted on loops" }) }),
-      /* @__PURE__ */ jsx3(Text3, { color: "yellow", children: "~" + formatCost(summary.loopWastedUSD) })
-    ] }) : null
-  ] });
-}
-
-// src/cli/render/ink/panels/ActivityPanel.tsx
-import { Box as Box4, Text as Text4 } from "ink";
-import { jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
-var LABEL_W2 = 16;
-function fmtNum(n) {
-  return n.toLocaleString();
-}
-function countMcpFindings(scan) {
-  let n = 0;
-  for (const f of scan.findings) {
-    if (f.toolName.startsWith("mcp__")) n++;
-  }
-  return n;
-}
-function ActivityPanel({ summary, scan, width }) {
-  const { sessions, totalToolCalls, bashCalls, totalCostUSD } = summary.stats;
-  const perSession = sessions > 0 ? totalCostUSD / sessions : 0;
-  const toolsPerSession = sessions > 0 ? Math.round(totalToolCalls / sessions) : 0;
-  const mcpCount = countMcpFindings(scan);
-  const topAgent = summary.byAgent.slice().sort((a, b) => b.sessions - a.sessions)[0];
-  return /* @__PURE__ */ jsxs4(Box4, { borderStyle: "round", borderColor: "gray", paddingX: 1, flexDirection: "column", width, children: [
-    /* @__PURE__ */ jsx4(Text4, { bold: true, children: "ACTIVITY" }),
-    /* @__PURE__ */ jsxs4(Box4, { children: [
-      /* @__PURE__ */ jsx4(Box4, { width: LABEL_W2, children: /* @__PURE__ */ jsx4(Text4, { children: "Sessions" }) }),
-      /* @__PURE__ */ jsx4(Text4, { bold: true, children: fmtNum(sessions) })
-    ] }),
-    /* @__PURE__ */ jsxs4(Box4, { children: [
-      /* @__PURE__ */ jsx4(Box4, { width: LABEL_W2, children: /* @__PURE__ */ jsx4(Text4, { children: "Tools" }) }),
-      /* @__PURE__ */ jsx4(Text4, { children: fmtNum(totalToolCalls) })
-    ] }),
-    /* @__PURE__ */ jsxs4(Box4, { children: [
-      /* @__PURE__ */ jsx4(Box4, { width: LABEL_W2, children: /* @__PURE__ */ jsx4(Text4, { dimColor: true, children: "  Shell" }) }),
-      /* @__PURE__ */ jsx4(Text4, { dimColor: true, children: fmtNum(bashCalls) })
-    ] }),
-    mcpCount > 0 ? /* @__PURE__ */ jsxs4(Box4, { children: [
-      /* @__PURE__ */ jsx4(Box4, { width: LABEL_W2, children: /* @__PURE__ */ jsx4(Text4, { dimColor: true, children: "  MCP" }) }),
-      /* @__PURE__ */ jsx4(Text4, { dimColor: true, children: fmtNum(mcpCount) })
-    ] }) : null,
-    /* @__PURE__ */ jsxs4(Box4, { children: [
-      /* @__PURE__ */ jsx4(Box4, { width: LABEL_W2, children: /* @__PURE__ */ jsx4(Text4, { children: "Tools / session" }) }),
-      /* @__PURE__ */ jsx4(Text4, { children: "~" + fmtNum(toolsPerSession) })
-    ] }),
-    /* @__PURE__ */ jsxs4(Box4, { children: [
-      /* @__PURE__ */ jsx4(Box4, { width: LABEL_W2, children: /* @__PURE__ */ jsx4(Text4, { children: "Cost / session" }) }),
-      /* @__PURE__ */ jsx4(Text4, { children: "~$" + Math.round(perSession).toLocaleString() })
-    ] }),
-    topAgent ? /* @__PURE__ */ jsxs4(Box4, { children: [
-      /* @__PURE__ */ jsx4(Box4, { width: LABEL_W2, children: /* @__PURE__ */ jsx4(Text4, { dimColor: true, children: "Top agent" }) }),
-      /* @__PURE__ */ jsx4(Text4, { dimColor: true, children: `${topAgent.label} (${fmtNum(topAgent.sessions)})` })
-    ] }) : null
-  ] });
-}
-
-// src/cli/render/ink/panels/LeaksPanel.tsx
-import { Box as Box5, Text as Text5 } from "ink";
-
-// src/cli/render/scan-derive.ts
+// src/config/keyed-guard.ts
 import chalk from "chalk";
-import stringWidth from "string-width";
-function topRulesByVerdict(sections, verdict, n) {
-  const matched = [];
-  for (const section of sections) {
-    for (const rule of section.rules) {
-      const matches = verdict === "block" ? rule.verdict === "block" : rule.verdict !== "block";
-      if (matches) matched.push({ name: rule.name, count: rule.findings.length });
-    }
-  }
-  return matched.sort((a, b) => b.count - a.count).slice(0, n);
-}
-function computeLoopWaste(loops, totalToolCalls) {
-  const wastedCalls = loops.reduce((s, l) => s + Math.max(0, l.count - 1), 0);
-  const wastePct = totalToolCalls > 0 ? Math.round(wastedCalls / totalToolCalls * 100) : 0;
-  return { wastedCalls, wastePct };
-}
-function rollupByShield(sections, topRulesPerShield = 3) {
-  const out = [];
-  for (const section of sections) {
-    if (section.sourceType !== "shield") continue;
-    if (!section.shieldKey) continue;
-    const totalCatches = section.blockedCount + section.reviewCount;
-    const topRuleLabels = [...section.rules].sort((a, b) => b.findings.length - a.findings.length).slice(0, topRulesPerShield).map((r) => r.findings.length > 1 ? `${r.name} \xD7${r.findings.length}` : r.name);
-    out.push({
-      shieldName: section.shieldKey,
-      totalCatches,
-      blockCatches: section.blockedCount,
-      reviewCatches: section.reviewCount,
-      topRuleLabels
-    });
-  }
-  return out.sort((a, b) => b.totalCatches - a.totalCatches);
-}
-function originForRule(ruleName, sections, enabled) {
-  for (const section of sections) {
-    if (section.rules.some((r) => r.name === ruleName)) {
-      if (section.sourceType === "default") return "default";
-      if (section.sourceType === "shield") {
-        const key = section.shieldKey ?? section.id;
-        return enabled.has(key) ? `\u2713 shield:${key}` : `needs shield:${key}`;
-      }
-    }
-  }
-  return "";
-}
-function relativeDate(timestamp, now = /* @__PURE__ */ new Date()) {
-  const t = new Date(timestamp).getTime();
-  if (Number.isNaN(t)) return "?";
-  const days = Math.floor((now.getTime() - t) / 864e5);
-  if (days < 1) return "today";
-  if (days > 90) return "90d+";
-  return `${days}d`;
-}
 
-// src/cli/render/ink/panels/title-count.ts
-function topOf(shown, total) {
-  return total > shown ? ` \xB7 top ${shown} of ${total}` : "";
-}
-
-// src/cli/render/ink/panels/LeaksPanel.tsx
-import { jsx as jsx5, jsxs as jsxs5 } from "react/jsx-runtime";
-var ROW_LIMIT = 4;
-function LeaksPanel({ summary, width, now = /* @__PURE__ */ new Date() }) {
-  const leaks = summary.leaks;
-  if (leaks.length === 0) return null;
-  return /* @__PURE__ */ jsxs5(Box5, { borderStyle: "round", borderColor: "red", paddingX: 1, flexDirection: "column", width, children: [
-    /* @__PURE__ */ jsxs5(Text5, { bold: true, color: "red", children: [
-      "CREDENTIAL LEAKS",
-      /* @__PURE__ */ jsx5(Text5, { dimColor: true, children: topOf(Math.min(leaks.length, ROW_LIMIT), leaks.length) })
-    ] }),
-    leaks.slice(0, ROW_LIMIT).map((leak, i) => /* @__PURE__ */ jsxs5(Box5, { children: [
-      /* @__PURE__ */ jsx5(Box5, { width: 5, children: /* @__PURE__ */ jsx5(Text5, { dimColor: true, children: relativeDate(leak.timestamp, now).padStart(4) }) }),
-      /* @__PURE__ */ jsx5(Box5, { width: 16, children: /* @__PURE__ */ jsx5(Text5, { color: "red", bold: true, wrap: "truncate-end", children: leak.patternName }) }),
-      /* @__PURE__ */ jsx5(Box5, { width: 15, children: /* @__PURE__ */ jsx5(Text5, { dimColor: true, wrap: "truncate-end", children: `[${leak.toolName}]` }) }),
-      /* @__PURE__ */ jsx5(Text5, { dimColor: true, wrap: "truncate-end", children: leak.agent })
-    ] }, i)),
-    /* @__PURE__ */ jsxs5(Box5, { children: [
-      /* @__PURE__ */ jsx5(Text5, { dimColor: true, children: "\u2192 " }),
-      /* @__PURE__ */ jsx5(Text5, { bold: true, color: "cyan", children: "DLP" }),
-      /* @__PURE__ */ jsx5(Text5, { dimColor: true, children: " \xB7 " }),
-      /* @__PURE__ */ jsx5(Text5, { bold: true, color: "cyan", children: "node9 mask" }),
-      /* @__PURE__ */ jsx5(Text5, { dimColor: true, wrap: "truncate-end", children: " (runtime + cleanup)" })
-    ] })
-  ] });
-}
-
-// src/cli/render/ink/panels/BlockedPanel.tsx
-import { Box as Box6, Text as Text6 } from "ink";
-import { jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
-var ROW_LIMIT2 = 12;
-function BlockedPanel({
-  summary,
-  width,
-  enabledShields = []
-}) {
-  const enabled = new Set(enabledShields);
-  const allRules = topRulesByVerdict(summary.sections, "block", Number.MAX_SAFE_INTEGER);
-  const rules = allRules.slice(0, ROW_LIMIT2);
-  if (rules.length === 0) return null;
-  const origins = rules.map((r) => originForRule(r.name, summary.sections, enabled));
-  const anyNeeds = origins.some((o) => o.startsWith("needs shield:"));
-  const footer = enabled.size === 0 ? "\u2192 install node9 + enable shields above" : anyNeeds ? "\u2192 \u2713 marks rules from enabled shields \xB7 enable the rest above" : "\u2192 \u2713 all these rules come from enabled shields";
-  return /* @__PURE__ */ jsxs6(Box6, { borderStyle: "round", borderColor: "red", paddingX: 1, flexDirection: "column", width, children: [
-    /* @__PURE__ */ jsxs6(Text6, { bold: true, color: "red", children: [
-      "WOULD HAVE BLOCKED",
-      /* @__PURE__ */ jsx6(Text6, { dimColor: true, children: topOf(rules.length, allRules.length) })
-    ] }),
-    rules.map((rule, i) => /* @__PURE__ */ jsxs6(Box6, { children: [
-      /* @__PURE__ */ jsx6(Box6, { width: 3, children: /* @__PURE__ */ jsx6(Text6, { color: "red", children: "\u2717" }) }),
-      /* @__PURE__ */ jsx6(Box6, { width: 24, children: /* @__PURE__ */ jsx6(Text6, { bold: true, wrap: "truncate-end", children: rule.name }) }),
-      /* @__PURE__ */ jsx6(Box6, { width: 6, children: /* @__PURE__ */ jsx6(Text6, { bold: true, children: `\xD7${rule.count}` }) }),
-      /* @__PURE__ */ jsx6(Text6, { dimColor: true, wrap: "truncate-end", children: originForRule(rule.name, summary.sections, enabled) })
-    ] }, i)),
-    /* @__PURE__ */ jsx6(Box6, { children: /* @__PURE__ */ jsx6(Text6, { dimColor: true, wrap: "truncate-end", children: footer }) })
-  ] });
-}
-
-// src/cli/render/ink/panels/BlastRadiusPanel.tsx
-import { Box as Box7, Text as Text7 } from "ink";
-import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
-var ROW_LIMIT3 = 4;
-var ENV_ROW_LIMIT = 3;
-function BlastRadiusPanel({
-  blast,
-  blastExposures,
-  width
-}) {
-  if (blastExposures === 0) return null;
-  const shown = Math.min(blast.reachable.length, ROW_LIMIT3) + Math.min(blast.envFindings.length, ENV_ROW_LIMIT);
-  return /* @__PURE__ */ jsxs7(Box7, { borderStyle: "round", borderColor: "yellow", paddingX: 1, flexDirection: "column", width, children: [
-    /* @__PURE__ */ jsxs7(Text7, { bold: true, color: "yellow", children: [
-      "BLAST RADIUS",
-      /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: topOf(shown, blastExposures) })
-    ] }),
-    blast.reachable.slice(0, ROW_LIMIT3).map((path, i) => {
-      const desc = path.description.split(" \u2014 ")[0].split(/—|--/)[0].trim();
-      return /* @__PURE__ */ jsxs7(Box7, { children: [
-        /* @__PURE__ */ jsx7(Box7, { width: 3, children: /* @__PURE__ */ jsx7(Text7, { color: "red", children: "\u2717" }) }),
-        /* @__PURE__ */ jsx7(Box7, { width: 36, children: /* @__PURE__ */ jsx7(Text7, { children: path.label }) }),
-        /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: desc })
-      ] }, i);
-    }),
-    blast.envFindings.slice(0, 3).map((env, i) => /* @__PURE__ */ jsxs7(Box7, { children: [
-      /* @__PURE__ */ jsx7(Box7, { width: 3, children: /* @__PURE__ */ jsx7(Text7, { color: "yellow", children: "\u26A0" }) }),
-      /* @__PURE__ */ jsx7(Text7, { children: env.key }),
-      /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: ` (${env.patternName})` })
-    ] }, `env-${i}`)),
-    /* @__PURE__ */ jsxs7(Box7, { children: [
-      /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "\u2192 " }),
-      /* @__PURE__ */ jsx7(Text7, { bold: true, color: "cyan", children: "project-jail" }),
-      /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: " shield blocks agent reads of these paths" })
-    ] })
-  ] });
-}
-
-// src/cli/render/ink/panels/ReviewQueuePanel.tsx
-import { Box as Box8, Text as Text8 } from "ink";
-import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
-var ROW_LIMIT4 = 5;
-function ReviewQueuePanel({
-  summary,
-  width,
-  enabledShields = []
-}) {
-  const enabled = new Set(enabledShields);
-  const rules = topRulesByVerdict(summary.sections, "review", ROW_LIMIT4);
-  if (rules.length === 0) return null;
-  return /* @__PURE__ */ jsxs8(Box8, { borderStyle: "round", borderColor: "gray", paddingX: 1, flexDirection: "column", width, children: [
-    /* @__PURE__ */ jsx8(Text8, { bold: true, children: "REVIEW QUEUE" }),
-    rules.map((rule, i) => /* @__PURE__ */ jsxs8(Box8, { children: [
-      /* @__PURE__ */ jsx8(Box8, { width: 22, children: /* @__PURE__ */ jsx8(Text8, { wrap: "truncate-end", children: rule.name }) }),
-      /* @__PURE__ */ jsx8(Box8, { width: 6, children: /* @__PURE__ */ jsx8(Text8, { bold: true, children: `\xD7${rule.count}` }) }),
-      /* @__PURE__ */ jsx8(Text8, { dimColor: true, wrap: "truncate-end", children: originForRule(rule.name, summary.sections, enabled) })
-    ] }, i)),
-    /* @__PURE__ */ jsxs8(Box8, { children: [
-      /* @__PURE__ */ jsx8(Text8, { dimColor: true, wrap: "truncate-end", children: "\u2192 " }),
-      /* @__PURE__ */ jsx8(Text8, { bold: true, color: "cyan", wrap: "truncate-end", children: "runtime approval" })
-    ] })
-  ] });
-}
-
-// src/cli/render/ink/panels/AgentLoopsPanel.tsx
-import { Box as Box9, Text as Text9 } from "ink";
-import { Fragment, jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
-var TOOL_ROW_LIMIT = 5;
-var STUCK_ROW_LIMIT = 1;
-function fmtNum2(n) {
-  return n.toLocaleString();
-}
-function trimRight(s, width) {
-  if (s.length <= width) return s;
-  return "\u2026" + s.slice(s.length - (width - 1));
-}
-function AgentLoopsPanel({ loopFindings, width }) {
-  if (loopFindings.length === 0) return null;
-  const byTool = /* @__PURE__ */ new Map();
-  let totalRepeats = 0;
-  for (const f of loopFindings) {
-    const repeats = Math.max(0, f.count - 1);
-    byTool.set(f.toolName, (byTool.get(f.toolName) ?? 0) + repeats);
-    totalRepeats += repeats;
-  }
-  const toolEntries = [...byTool.entries()].sort((a, b) => b[1] - a[1]).slice(0, TOOL_ROW_LIMIT);
-  const topStuck = [...loopFindings].sort((a, b) => b.count - a.count).slice(0, STUCK_ROW_LIMIT);
-  return /* @__PURE__ */ jsxs9(Box9, { borderStyle: "round", borderColor: "gray", paddingX: 1, flexDirection: "column", width, children: [
-    /* @__PURE__ */ jsxs9(Text9, { bold: true, children: [
-      "AGENT LOOPS",
-      /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: topOf(toolEntries.length, byTool.size) })
-    ] }),
-    toolEntries.map(([tool, repeats]) => {
-      const pct = totalRepeats > 0 ? Math.round(repeats / totalRepeats * 100) : 0;
-      return /* @__PURE__ */ jsxs9(Box9, { children: [
-        /* @__PURE__ */ jsx9(Box9, { width: 10, children: /* @__PURE__ */ jsx9(Text9, { bold: true, children: tool }) }),
-        /* @__PURE__ */ jsx9(Box9, { width: 14, children: /* @__PURE__ */ jsx9(Text9, { children: `\xD7${fmtNum2(repeats)}` }) }),
-        /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: `${pct}%` })
-      ] }, tool);
-    }),
-    topStuck.length > 0 ? /* @__PURE__ */ jsxs9(Fragment, { children: [
-      /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: "Top stuck:" }),
-      topStuck.map((f, i) => {
-        const target = trimRight(f.commandPreview || f.toolName, 32);
-        return /* @__PURE__ */ jsxs9(Box9, { children: [
-          /* @__PURE__ */ jsx9(Box9, { width: 8, children: /* @__PURE__ */ jsx9(Text9, { bold: true, children: `\xD7${fmtNum2(f.count)}` }) }),
-          /* @__PURE__ */ jsx9(Text9, { dimColor: true, wrap: "truncate-end", children: target })
-        ] }, `stuck-${i}`);
+// src/config-schema.ts
+import { z } from "zod";
+var noNewlines = z.string().refine((s) => !s.includes("\n") && !s.includes("\r"), {
+  message: "Value must not contain literal newline characters (use \\n instead)"
+});
+var SmartConditionSchema = z.object({
+  field: z.string().min(1, "Condition field must not be empty"),
+  op: z.enum(
+    [
+      "matches",
+      "notMatches",
+      "contains",
+      "notContains",
+      "exists",
+      "notExists",
+      "matchesGlob",
+      "notMatchesGlob"
+    ],
+    {
+      errorMap: () => ({
+        message: "op must be one of: matches, notMatches, contains, notContains, exists, notExists, matchesGlob, notMatchesGlob"
       })
-    ] }) : null,
-    /* @__PURE__ */ jsxs9(Box9, { children: [
-      /* @__PURE__ */ jsx9(Text9, { dimColor: true, wrap: "truncate-end", children: "\u2192 " }),
-      /* @__PURE__ */ jsx9(Text9, { bold: true, color: "cyan", wrap: "truncate-end", children: "live loop-detector" })
-    ] })
-  ] });
-}
-
-// src/cli/render/ink/panels/ShieldsPanel.tsx
-import { Box as Box10, Text as Text10 } from "ink";
+    }
+  ),
+  value: z.string().optional(),
+  flags: z.string().optional()
+}).refine(
+  (c) => {
+    if (c.op === "matchesGlob" || c.op === "notMatchesGlob") return c.value !== void 0;
+    return true;
+  },
+  { message: "matchesGlob and notMatchesGlob conditions require a value field" }
+);
+var SmartRuleSchema = z.object({
+  name: z.string().optional(),
+  tool: z.string().min(1, "Smart rule tool must not be empty"),
+  conditions: z.array(SmartConditionSchema).min(1, "Smart rule must have at least one condition"),
+  conditionMode: z.enum(["all", "any"]).optional(),
+  verdict: z.enum(["allow", "review", "block"], {
+    errorMap: () => ({ message: "verdict must be one of: allow, review, block" })
+  }),
+  reason: z.string().optional(),
+  description: z.string().optional(),
+  // Unknown predicate names are filtered out rather than failing the whole rule.
+  // Failing the whole z.array() would cause sanitizeConfig to drop the entire
+  // `policy` top-level key, silently disabling ALL smart rules in the config.
+  dependsOnState: z.array(z.string()).transform(
+    (arr) => arr.filter(
+      (p) => p === "no_test_passed_since_last_edit"
+    )
+  ).optional(),
+  recoveryCommand: z.string().optional()
+});
+var ConfigFileSchema = z.object({
+  version: z.string().optional(),
+  settings: z.object({
+    mode: z.enum(["standard", "strict", "audit", "observe"]).optional(),
+    autoStartDaemon: z.boolean().optional(),
+    // enableUndo / policy.snapshot: removed with the undo feature. The
+    // schema strips undeclared keys silently (plain zod object — no
+    // .strict(), no .passthrough()), so a config still carrying them stays
+    // valid and simply loses them. Keeping the fields would instead make
+    // `node9_config_get` advertise a removed feature as a live knob.
+    enableHookLogDebug: z.boolean().optional(),
+    approvalTimeoutMs: z.number().nonnegative().optional(),
+    approvalTimeoutSeconds: z.number().nonnegative().optional(),
+    flightRecorder: z.boolean().optional(),
+    approvers: z.object({
+      native: z.boolean().optional(),
+      browser: z.boolean().optional(),
+      cloud: z.boolean().optional(),
+      terminal: z.boolean().optional()
+    }).optional(),
+    environment: z.string().optional(),
+    slackEnabled: z.boolean().optional(),
+    enableTrustSessions: z.boolean().optional(),
+    allowGlobalPause: z.boolean().optional(),
+    auditHashArgs: z.boolean().optional(),
+    agentPolicy: z.enum(["require_approval", "block_on_rules"]).optional(),
+    // Where a `review` verdict's prompt is rendered: 'ask' = the agent's own
+    // inline approve/deny prompt (Claude Code / GitHub Copilot); 'approver' =
+    // node9's own approver (terminal/native/cloud). Unset → default ASK for
+    // ask-capable agents (v2: cloud no longer disables inline — the outcome
+    // ships to the dashboard as audit; admins force routing via managed
+    // reviewChannel, which outranks the local --ask flag).
+    reviewChannel: z.enum(["ask", "approver"]).optional(),
+    // When true, agents may call WEAKENING node9 MCP tools (shield_disable,
+    // approver_set). Default (unset/false): those tools refuse over MCP — a human
+    // must run them from the CLI. node9's threat model is the agent itself.
+    mcpAllowWeakening: z.boolean().optional(),
+    // Auto-wire reconciler (P3 2.6): auto-wrap new ungoverned MCP servers vs
+    // nudge-only (default), and the scan cadence in minutes.
+    mcpAutoWrap: z.boolean().optional(),
+    mcpReconcileIntervalMinutes: z.number().positive().optional(),
+    mcpStaleAfterDays: z.number().min(0).optional(),
+    cloudSyncIntervalHours: z.number().positive().optional(),
+    // Seconds-granular override for the cloud policy sync cadence. Wins over
+    // cloudSyncIntervalHours when set. Lets you opt into fast apply (e.g. 20)
+    // for an incident; clamped to a 15s floor so it can't hammer the API.
+    // Unset → falls back to hours, then the 5h default.
+    cloudSyncIntervalSeconds: z.number().positive().optional(),
+    // Outbox shipper (audit.log → SaaS batch ingest). enabled defaults
+    // to true; set false to fall back to local-only auditing.
+    shipper: z.object({
+      enabled: z.boolean().optional(),
+      intervalSeconds: z.number().min(5).optional()
+    }).optional()
+  }).optional(),
+  policy: z.object({
+    sandboxPaths: z.array(z.string()).optional(),
+    dangerousWords: z.array(noNewlines).optional(),
+    ignoredTools: z.array(z.string()).optional(),
+    toolInspection: z.record(z.string()).optional(),
+    smartRules: z.array(SmartRuleSchema).optional(),
+    dlp: z.object({
+      enabled: z.boolean().optional(),
+      scanIgnoredTools: z.boolean().optional(),
+      pii: z.enum(["off", "block"]).optional(),
+      reviewAction: z.enum(["review", "block"]).optional()
+    }).optional(),
+    // Command-checks governance. Class-B keys (evalDynamic, pipeChainHigh)
+    // deliberately exclude 'off' — tighten-only.
+    commandChecks: z.object({
+      inlineExec: z.enum(["off", "review", "block"]).optional(),
+      rmAdvisory: z.enum(["off", "review", "block"]).optional(),
+      chmod: z.enum(["off", "review", "block"]).optional(),
+      sqlDdl: z.enum(["off", "review", "block"]).optional(),
+      evalDynamic: z.enum(["review", "block"]).optional(),
+      pipeChainHigh: z.enum(["review", "block"]).optional()
+    }).optional(),
+    egress: z.object({
+      enabled: z.boolean().optional(),
+      mode: z.enum(["off", "review", "block"]).optional(),
+      allow: z.array(z.string()).optional(),
+      deny: z.array(z.string()).optional(),
+      allowPrivate: z.boolean().optional()
+    }).optional(),
+    loopDetection: z.object({
+      enabled: z.boolean().optional(),
+      threshold: z.number().min(2).optional(),
+      windowSeconds: z.number().min(10).optional()
+    }).optional(),
+    injectionScan: z.object({
+      enabled: z.boolean().optional(),
+      minConfidence: z.enum(["medium", "high"]).optional(),
+      allow: z.array(z.string()).optional()
+    }).optional(),
+    skillPinning: z.object({
+      enabled: z.boolean().optional(),
+      mode: z.enum(["warn", "block"]).optional(),
+      roots: z.array(z.string()).optional()
+    }).optional()
+  }).optional(),
+  environments: z.record(z.object({ requireApproval: z.boolean().optional() })).optional()
+}).strict({ message: "Config contains unknown top-level keys" });
 
-// src/protection.ts
-var PROTECTIVE_SHIELD_DISCOUNTS = {
-  "project-jail": 0.7
-};
+// src/shields.ts
+import fs from "fs";
+import path from "path";
+import os from "os";
 
 // packages/policy-engine/dist/index.mjs
 import safeRegex from "safe-regex2";
@@ -1637,40 +1479,425 @@ var redis_default = {
       verdict: "review",
       reason: "Wildcard key deletion requires human approval (Redis shield)"
     }
-  ],
-  dangerousWords: ["FLUSHALL", "FLUSHDB"]
-};
-var BUILTIN_SHIELDS = {
-  [aws_default.name]: aws_default,
-  [bash_safe_default.name]: bash_safe_default,
-  [docker_default.name]: docker_default,
-  [filesystem_default.name]: filesystem_default,
-  [github_default.name]: github_default,
-  [k8s_default.name]: k8s_default,
-  [mongodb_default.name]: mongodb_default,
-  [postgres_default.name]: postgres_default,
-  [project_jail_default.name]: project_jail_default,
-  [redis_default.name]: redis_default
-};
-function assertBuiltinShieldRegexesAreSafe() {
-  for (const shield of Object.values(BUILTIN_SHIELDS)) {
-    for (const rule of shield.smartRules) {
-      const conditions = rule.conditions ?? [];
-      for (const cond of conditions) {
-        if (cond.op !== "matches" && cond.op !== "notMatches") continue;
-        const pattern = cond.value;
-        if (!pattern) continue;
-        if (!safeRegex3(pattern)) {
-          throw new Error(
-            `[node9 engine] Shield '${shield.name}' rule '${rule.name ?? rule.tool}' has unsafe regex: ${pattern}`
-          );
-        }
+  ],
+  dangerousWords: ["FLUSHALL", "FLUSHDB"]
+};
+function validateShieldDefinition(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+    return { error: "Shield file is not an object" };
+  }
+  const r = raw;
+  if (typeof r.name !== "string" || !r.name) return { error: "Shield file missing 'name'" };
+  if (typeof r.description !== "string") return { error: "Shield file missing 'description'" };
+  if (!Array.isArray(r.aliases)) return { error: "Shield file missing 'aliases' array" };
+  if (!Array.isArray(r.smartRules)) return { error: "Shield file missing 'smartRules' array" };
+  if (!Array.isArray(r.dangerousWords))
+    return { error: "Shield file missing 'dangerousWords' array" };
+  return { ok: r };
+}
+var BUILTIN_SHIELDS = {
+  [aws_default.name]: aws_default,
+  [bash_safe_default.name]: bash_safe_default,
+  [docker_default.name]: docker_default,
+  [filesystem_default.name]: filesystem_default,
+  [github_default.name]: github_default,
+  [k8s_default.name]: k8s_default,
+  [mongodb_default.name]: mongodb_default,
+  [postgres_default.name]: postgres_default,
+  [project_jail_default.name]: project_jail_default,
+  [redis_default.name]: redis_default
+};
+function assertBuiltinShieldRegexesAreSafe() {
+  for (const shield of Object.values(BUILTIN_SHIELDS)) {
+    for (const rule of shield.smartRules) {
+      const conditions = rule.conditions ?? [];
+      for (const cond of conditions) {
+        if (cond.op !== "matches" && cond.op !== "notMatches") continue;
+        const pattern = cond.value;
+        if (!pattern) continue;
+        if (!safeRegex3(pattern)) {
+          throw new Error(
+            `[node9 engine] Shield '${shield.name}' rule '${rule.name ?? rule.tool}' has unsafe regex: ${pattern}`
+          );
+        }
+      }
+    }
+  }
+}
+assertBuiltinShieldRegexesAreSafe();
+var LONG_OUTPUT_THRESHOLD_BYTES = 100 * 1024;
+
+// src/shields.ts
+var USER_SHIELDS_DIR = path.join(os.homedir(), ".node9", "shields");
+function loadUserShields() {
+  const result = {};
+  let entries;
+  try {
+    entries = fs.readdirSync(USER_SHIELDS_DIR).filter((f) => f.endsWith(".json"));
+  } catch (err) {
+    if (err.code !== "ENOENT") {
+      process.stderr.write(
+        `[node9] Could not read user shields dir ${USER_SHIELDS_DIR}: ${String(err)}
+`
+      );
+    }
+    return result;
+  }
+  for (const file of entries) {
+    const filePath = path.join(USER_SHIELDS_DIR, file);
+    try {
+      const raw = JSON.parse(fs.readFileSync(filePath, "utf-8"));
+      const v = validateShieldDefinition(raw);
+      if ("error" in v) {
+        process.stderr.write(`[node9] ${v.error}: ${filePath}
+`);
+        continue;
+      }
+      result[v.ok.name] = v.ok;
+    } catch (err) {
+      process.stderr.write(`[node9] Failed to load user shield ${file}: ${String(err)}
+`);
+    }
+  }
+  return result;
+}
+function buildSHIELDS() {
+  return { ...BUILTIN_SHIELDS, ...loadUserShields() };
+}
+var SHIELDS = buildSHIELDS();
+var SHIELDS_STATE_FILE = path.join(os.homedir(), ".node9", "shields.json");
+
+// src/config/index.ts
+var CACHE_LOG_REARM_MS = 5 * 60 * 1e3;
+
+// src/cli/render/ink/panels/cost-note.ts
+var COST_LABEL = "COST \xB7 based on API value";
+function costNoteLines(keyed) {
+  return keyed ? ["Your plan and exact spend:", "dashboard \u2192 Report"] : ["To see your plan or exact spend, connect:", "node9 login (for free)"];
+}
+
+// src/cli/render/ink/panels/CostPanel.tsx
+import { jsx as jsx3, jsxs as jsxs3 } from "react/jsx-runtime";
+var LABEL_W = 16;
+function CostPanel({ summary, width, keyed }) {
+  const total = summary.stats.totalCostUSD;
+  return /* @__PURE__ */ jsxs3(Box3, { borderStyle: "round", borderColor: "gray", paddingX: 1, flexDirection: "column", width, children: [
+    /* @__PURE__ */ jsx3(Text3, { bold: true, children: COST_LABEL }),
+    /* @__PURE__ */ jsxs3(Box3, { children: [
+      /* @__PURE__ */ jsx3(Box3, { width: LABEL_W, children: /* @__PURE__ */ jsx3(Text3, { children: "Total" }) }),
+      /* @__PURE__ */ jsx3(Text3, { bold: true, children: formatCost(total) })
+    ] }),
+    summary.byAgent.map((agent) => /* @__PURE__ */ jsxs3(Box3, { children: [
+      /* @__PURE__ */ jsx3(Box3, { width: LABEL_W, children: /* @__PURE__ */ jsx3(Text3, { children: agent.label }) }),
+      /* @__PURE__ */ jsx3(Text3, { children: formatCost(agent.costUSD) })
+    ] }, agent.id)),
+    summary.loopWastedUSD > 0 ? /* @__PURE__ */ jsxs3(Box3, { children: [
+      /* @__PURE__ */ jsx3(Box3, { width: LABEL_W, children: /* @__PURE__ */ jsx3(Text3, { dimColor: true, children: "Wasted on loops" }) }),
+      /* @__PURE__ */ jsx3(Text3, { color: "yellow", children: "~" + formatCost(summary.loopWastedUSD) })
+    ] }) : null,
+    costNoteLines(keyed ?? false).map((line) => /* @__PURE__ */ jsx3(Text3, { dimColor: true, wrap: "truncate-end", children: line }, line))
+  ] });
+}
+
+// src/cli/render/ink/panels/ActivityPanel.tsx
+import { Box as Box4, Text as Text4 } from "ink";
+import { jsx as jsx4, jsxs as jsxs4 } from "react/jsx-runtime";
+var LABEL_W2 = 16;
+function fmtNum(n) {
+  return n.toLocaleString();
+}
+function countMcpFindings(scan) {
+  let n = 0;
+  for (const f of scan.findings) {
+    if (f.toolName.startsWith("mcp__")) n++;
+  }
+  return n;
+}
+function ActivityPanel({ summary, scan, width }) {
+  const { sessions, totalToolCalls, bashCalls, totalCostUSD } = summary.stats;
+  const perSession = sessions > 0 ? totalCostUSD / sessions : 0;
+  const toolsPerSession = sessions > 0 ? Math.round(totalToolCalls / sessions) : 0;
+  const mcpCount = countMcpFindings(scan);
+  const topAgent = summary.byAgent.slice().sort((a, b) => b.sessions - a.sessions)[0];
+  return /* @__PURE__ */ jsxs4(Box4, { borderStyle: "round", borderColor: "gray", paddingX: 1, flexDirection: "column", width, children: [
+    /* @__PURE__ */ jsx4(Text4, { bold: true, children: "ACTIVITY" }),
+    /* @__PURE__ */ jsxs4(Box4, { children: [
+      /* @__PURE__ */ jsx4(Box4, { width: LABEL_W2, children: /* @__PURE__ */ jsx4(Text4, { children: "Sessions" }) }),
+      /* @__PURE__ */ jsx4(Text4, { bold: true, children: fmtNum(sessions) })
+    ] }),
+    /* @__PURE__ */ jsxs4(Box4, { children: [
+      /* @__PURE__ */ jsx4(Box4, { width: LABEL_W2, children: /* @__PURE__ */ jsx4(Text4, { children: "Tools" }) }),
+      /* @__PURE__ */ jsx4(Text4, { children: fmtNum(totalToolCalls) })
+    ] }),
+    /* @__PURE__ */ jsxs4(Box4, { children: [
+      /* @__PURE__ */ jsx4(Box4, { width: LABEL_W2, children: /* @__PURE__ */ jsx4(Text4, { dimColor: true, children: "  Shell" }) }),
+      /* @__PURE__ */ jsx4(Text4, { dimColor: true, children: fmtNum(bashCalls) })
+    ] }),
+    mcpCount > 0 ? /* @__PURE__ */ jsxs4(Box4, { children: [
+      /* @__PURE__ */ jsx4(Box4, { width: LABEL_W2, children: /* @__PURE__ */ jsx4(Text4, { dimColor: true, children: "  MCP" }) }),
+      /* @__PURE__ */ jsx4(Text4, { dimColor: true, children: fmtNum(mcpCount) })
+    ] }) : null,
+    /* @__PURE__ */ jsxs4(Box4, { children: [
+      /* @__PURE__ */ jsx4(Box4, { width: LABEL_W2, children: /* @__PURE__ */ jsx4(Text4, { children: "Tools / session" }) }),
+      /* @__PURE__ */ jsx4(Text4, { children: "~" + fmtNum(toolsPerSession) })
+    ] }),
+    /* @__PURE__ */ jsxs4(Box4, { children: [
+      /* @__PURE__ */ jsx4(Box4, { width: LABEL_W2, children: /* @__PURE__ */ jsx4(Text4, { children: "Cost / session" }) }),
+      /* @__PURE__ */ jsx4(Text4, { children: "~$" + Math.round(perSession).toLocaleString() })
+    ] }),
+    topAgent ? /* @__PURE__ */ jsxs4(Box4, { children: [
+      /* @__PURE__ */ jsx4(Box4, { width: LABEL_W2, children: /* @__PURE__ */ jsx4(Text4, { dimColor: true, children: "Top agent" }) }),
+      /* @__PURE__ */ jsx4(Text4, { dimColor: true, children: `${topAgent.label} (${fmtNum(topAgent.sessions)})` })
+    ] }) : null
+  ] });
+}
+
+// src/cli/render/ink/panels/LeaksPanel.tsx
+import { Box as Box5, Text as Text5 } from "ink";
+
+// src/cli/render/scan-derive.ts
+import chalk2 from "chalk";
+import stringWidth from "string-width";
+function topRulesByVerdict(sections, verdict, n) {
+  const matched = [];
+  for (const section of sections) {
+    for (const rule of section.rules) {
+      const matches = verdict === "block" ? rule.verdict === "block" : rule.verdict !== "block";
+      if (matches) matched.push({ name: rule.name, count: rule.findings.length });
+    }
+  }
+  return matched.sort((a, b) => b.count - a.count).slice(0, n);
+}
+function computeLoopWaste(loops, totalToolCalls) {
+  const wastedCalls = loops.reduce((s, l) => s + Math.max(0, l.count - 1), 0);
+  const wastePct = totalToolCalls > 0 ? Math.round(wastedCalls / totalToolCalls * 100) : 0;
+  return { wastedCalls, wastePct };
+}
+function rollupByShield(sections, topRulesPerShield = 3) {
+  const out = [];
+  for (const section of sections) {
+    if (section.sourceType !== "shield") continue;
+    if (!section.shieldKey) continue;
+    const totalCatches = section.blockedCount + section.reviewCount;
+    const topRuleLabels = [...section.rules].sort((a, b) => b.findings.length - a.findings.length).slice(0, topRulesPerShield).map((r) => r.findings.length > 1 ? `${r.name} \xD7${r.findings.length}` : r.name);
+    out.push({
+      shieldName: section.shieldKey,
+      totalCatches,
+      blockCatches: section.blockedCount,
+      reviewCatches: section.reviewCount,
+      topRuleLabels
+    });
+  }
+  return out.sort((a, b) => b.totalCatches - a.totalCatches);
+}
+function originForRule(ruleName, sections, enabled) {
+  for (const section of sections) {
+    if (section.rules.some((r) => r.name === ruleName)) {
+      if (section.sourceType === "default") return "default";
+      if (section.sourceType === "shield") {
+        const key = section.shieldKey ?? section.id;
+        return enabled.has(key) ? `\u2713 shield:${key}` : `needs shield:${key}`;
       }
     }
   }
+  return "";
 }
-assertBuiltinShieldRegexesAreSafe();
-var LONG_OUTPUT_THRESHOLD_BYTES = 100 * 1024;
+function relativeDate(timestamp, now = /* @__PURE__ */ new Date()) {
+  const t = new Date(timestamp).getTime();
+  if (Number.isNaN(t)) return "?";
+  const days = Math.floor((now.getTime() - t) / 864e5);
+  if (days < 1) return "today";
+  if (days > 90) return "90d+";
+  return `${days}d`;
+}
+
+// src/cli/render/ink/panels/title-count.ts
+function topOf(shown, total) {
+  return total > shown ? ` \xB7 top ${shown} of ${total}` : "";
+}
+
+// src/cli/render/ink/panels/LeaksPanel.tsx
+import { jsx as jsx5, jsxs as jsxs5 } from "react/jsx-runtime";
+var ROW_LIMIT = 4;
+function LeaksPanel({ summary, width, now = /* @__PURE__ */ new Date() }) {
+  const leaks = summary.leaks;
+  if (leaks.length === 0) return null;
+  return /* @__PURE__ */ jsxs5(Box5, { borderStyle: "round", borderColor: "red", paddingX: 1, flexDirection: "column", width, children: [
+    /* @__PURE__ */ jsxs5(Text5, { bold: true, color: "red", children: [
+      "CREDENTIAL LEAKS",
+      /* @__PURE__ */ jsx5(Text5, { dimColor: true, children: topOf(Math.min(leaks.length, ROW_LIMIT), leaks.length) })
+    ] }),
+    leaks.slice(0, ROW_LIMIT).map((leak, i) => /* @__PURE__ */ jsxs5(Box5, { children: [
+      /* @__PURE__ */ jsx5(Box5, { width: 5, children: /* @__PURE__ */ jsx5(Text5, { dimColor: true, children: relativeDate(leak.timestamp, now).padStart(4) }) }),
+      /* @__PURE__ */ jsx5(Box5, { width: 16, children: /* @__PURE__ */ jsx5(Text5, { color: "red", bold: true, wrap: "truncate-end", children: leak.patternName }) }),
+      /* @__PURE__ */ jsx5(Box5, { width: 15, children: /* @__PURE__ */ jsx5(Text5, { dimColor: true, wrap: "truncate-end", children: `[${leak.toolName}]` }) }),
+      /* @__PURE__ */ jsx5(Text5, { dimColor: true, wrap: "truncate-end", children: leak.agent })
+    ] }, i)),
+    /* @__PURE__ */ jsxs5(Box5, { children: [
+      /* @__PURE__ */ jsx5(Text5, { dimColor: true, children: "\u2192 " }),
+      /* @__PURE__ */ jsx5(Text5, { bold: true, color: "cyan", children: "DLP" }),
+      /* @__PURE__ */ jsx5(Text5, { dimColor: true, children: " \xB7 " }),
+      /* @__PURE__ */ jsx5(Text5, { bold: true, color: "cyan", children: "node9 mask" }),
+      /* @__PURE__ */ jsx5(Text5, { dimColor: true, wrap: "truncate-end", children: " (runtime + cleanup)" })
+    ] })
+  ] });
+}
+
+// src/cli/render/ink/panels/BlockedPanel.tsx
+import { Box as Box6, Text as Text6 } from "ink";
+import { jsx as jsx6, jsxs as jsxs6 } from "react/jsx-runtime";
+var ROW_LIMIT2 = 12;
+function BlockedPanel({
+  summary,
+  width,
+  enabledShields = []
+}) {
+  const enabled = new Set(enabledShields);
+  const allRules = topRulesByVerdict(summary.sections, "block", Number.MAX_SAFE_INTEGER);
+  const rules = allRules.slice(0, ROW_LIMIT2);
+  if (rules.length === 0) return null;
+  const origins = rules.map((r) => originForRule(r.name, summary.sections, enabled));
+  const anyNeeds = origins.some((o) => o.startsWith("needs shield:"));
+  const footer = enabled.size === 0 ? "\u2192 install node9 + enable shields above" : anyNeeds ? "\u2192 \u2713 marks rules from enabled shields \xB7 enable the rest above" : "\u2192 \u2713 all these rules come from enabled shields";
+  return /* @__PURE__ */ jsxs6(Box6, { borderStyle: "round", borderColor: "red", paddingX: 1, flexDirection: "column", width, children: [
+    /* @__PURE__ */ jsxs6(Text6, { bold: true, color: "red", children: [
+      "WOULD HAVE BLOCKED",
+      /* @__PURE__ */ jsx6(Text6, { dimColor: true, children: topOf(rules.length, allRules.length) })
+    ] }),
+    rules.map((rule, i) => /* @__PURE__ */ jsxs6(Box6, { children: [
+      /* @__PURE__ */ jsx6(Box6, { width: 3, children: /* @__PURE__ */ jsx6(Text6, { color: "red", children: "\u2717" }) }),
+      /* @__PURE__ */ jsx6(Box6, { width: 24, children: /* @__PURE__ */ jsx6(Text6, { bold: true, wrap: "truncate-end", children: rule.name }) }),
+      /* @__PURE__ */ jsx6(Box6, { width: 6, children: /* @__PURE__ */ jsx6(Text6, { bold: true, children: `\xD7${rule.count}` }) }),
+      /* @__PURE__ */ jsx6(Text6, { dimColor: true, wrap: "truncate-end", children: originForRule(rule.name, summary.sections, enabled) })
+    ] }, i)),
+    /* @__PURE__ */ jsx6(Box6, { children: /* @__PURE__ */ jsx6(Text6, { dimColor: true, wrap: "truncate-end", children: footer }) })
+  ] });
+}
+
+// src/cli/render/ink/panels/BlastRadiusPanel.tsx
+import { Box as Box7, Text as Text7 } from "ink";
+import { jsx as jsx7, jsxs as jsxs7 } from "react/jsx-runtime";
+var ROW_LIMIT3 = 4;
+var ENV_ROW_LIMIT = 3;
+function BlastRadiusPanel({
+  blast,
+  blastExposures,
+  width
+}) {
+  if (blastExposures === 0) return null;
+  const shown = Math.min(blast.reachable.length, ROW_LIMIT3) + Math.min(blast.envFindings.length, ENV_ROW_LIMIT);
+  return /* @__PURE__ */ jsxs7(Box7, { borderStyle: "round", borderColor: "yellow", paddingX: 1, flexDirection: "column", width, children: [
+    /* @__PURE__ */ jsxs7(Text7, { bold: true, color: "yellow", children: [
+      "BLAST RADIUS",
+      /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: topOf(shown, blastExposures) })
+    ] }),
+    blast.reachable.slice(0, ROW_LIMIT3).map((path2, i) => {
+      const desc = path2.description.split(" \u2014 ")[0].split(/—|--/)[0].trim();
+      return /* @__PURE__ */ jsxs7(Box7, { children: [
+        /* @__PURE__ */ jsx7(Box7, { width: 3, children: /* @__PURE__ */ jsx7(Text7, { color: "red", children: "\u2717" }) }),
+        /* @__PURE__ */ jsx7(Box7, { width: 36, children: /* @__PURE__ */ jsx7(Text7, { children: path2.label }) }),
+        /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: desc })
+      ] }, i);
+    }),
+    blast.envFindings.slice(0, 3).map((env, i) => /* @__PURE__ */ jsxs7(Box7, { children: [
+      /* @__PURE__ */ jsx7(Box7, { width: 3, children: /* @__PURE__ */ jsx7(Text7, { color: "yellow", children: "\u26A0" }) }),
+      /* @__PURE__ */ jsx7(Text7, { children: env.key }),
+      /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: ` (${env.patternName})` })
+    ] }, `env-${i}`)),
+    /* @__PURE__ */ jsxs7(Box7, { children: [
+      /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: "\u2192 " }),
+      /* @__PURE__ */ jsx7(Text7, { bold: true, color: "cyan", children: "project-jail" }),
+      /* @__PURE__ */ jsx7(Text7, { dimColor: true, children: " shield blocks agent reads of these paths" })
+    ] })
+  ] });
+}
+
+// src/cli/render/ink/panels/ReviewQueuePanel.tsx
+import { Box as Box8, Text as Text8 } from "ink";
+import { jsx as jsx8, jsxs as jsxs8 } from "react/jsx-runtime";
+var ROW_LIMIT4 = 5;
+function ReviewQueuePanel({
+  summary,
+  width,
+  enabledShields = []
+}) {
+  const enabled = new Set(enabledShields);
+  const rules = topRulesByVerdict(summary.sections, "review", ROW_LIMIT4);
+  if (rules.length === 0) return null;
+  return /* @__PURE__ */ jsxs8(Box8, { borderStyle: "round", borderColor: "gray", paddingX: 1, flexDirection: "column", width, children: [
+    /* @__PURE__ */ jsx8(Text8, { bold: true, children: "REVIEW QUEUE" }),
+    rules.map((rule, i) => /* @__PURE__ */ jsxs8(Box8, { children: [
+      /* @__PURE__ */ jsx8(Box8, { width: 22, children: /* @__PURE__ */ jsx8(Text8, { wrap: "truncate-end", children: rule.name }) }),
+      /* @__PURE__ */ jsx8(Box8, { width: 6, children: /* @__PURE__ */ jsx8(Text8, { bold: true, children: `\xD7${rule.count}` }) }),
+      /* @__PURE__ */ jsx8(Text8, { dimColor: true, wrap: "truncate-end", children: originForRule(rule.name, summary.sections, enabled) })
+    ] }, i)),
+    /* @__PURE__ */ jsxs8(Box8, { children: [
+      /* @__PURE__ */ jsx8(Text8, { dimColor: true, wrap: "truncate-end", children: "\u2192 " }),
+      /* @__PURE__ */ jsx8(Text8, { bold: true, color: "cyan", wrap: "truncate-end", children: "runtime approval" })
+    ] })
+  ] });
+}
+
+// src/cli/render/ink/panels/AgentLoopsPanel.tsx
+import { Box as Box9, Text as Text9 } from "ink";
+import { Fragment, jsx as jsx9, jsxs as jsxs9 } from "react/jsx-runtime";
+var TOOL_ROW_LIMIT = 5;
+var STUCK_ROW_LIMIT = 1;
+function fmtNum2(n) {
+  return n.toLocaleString();
+}
+function trimRight(s, width) {
+  if (s.length <= width) return s;
+  return "\u2026" + s.slice(s.length - (width - 1));
+}
+function AgentLoopsPanel({ loopFindings, width }) {
+  if (loopFindings.length === 0) return null;
+  const byTool = /* @__PURE__ */ new Map();
+  let totalRepeats = 0;
+  for (const f of loopFindings) {
+    const repeats = Math.max(0, f.count - 1);
+    byTool.set(f.toolName, (byTool.get(f.toolName) ?? 0) + repeats);
+    totalRepeats += repeats;
+  }
+  const toolEntries = [...byTool.entries()].sort((a, b) => b[1] - a[1]).slice(0, TOOL_ROW_LIMIT);
+  const topStuck = [...loopFindings].sort((a, b) => b.count - a.count).slice(0, STUCK_ROW_LIMIT);
+  return /* @__PURE__ */ jsxs9(Box9, { borderStyle: "round", borderColor: "gray", paddingX: 1, flexDirection: "column", width, children: [
+    /* @__PURE__ */ jsxs9(Text9, { bold: true, children: [
+      "AGENT LOOPS",
+      /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: topOf(toolEntries.length, byTool.size) })
+    ] }),
+    toolEntries.map(([tool, repeats]) => {
+      const pct = totalRepeats > 0 ? Math.round(repeats / totalRepeats * 100) : 0;
+      return /* @__PURE__ */ jsxs9(Box9, { children: [
+        /* @__PURE__ */ jsx9(Box9, { width: 10, children: /* @__PURE__ */ jsx9(Text9, { bold: true, children: tool }) }),
+        /* @__PURE__ */ jsx9(Box9, { width: 14, children: /* @__PURE__ */ jsx9(Text9, { children: `\xD7${fmtNum2(repeats)}` }) }),
+        /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: `${pct}%` })
+      ] }, tool);
+    }),
+    topStuck.length > 0 ? /* @__PURE__ */ jsxs9(Fragment, { children: [
+      /* @__PURE__ */ jsx9(Text9, { dimColor: true, children: "Top stuck:" }),
+      topStuck.map((f, i) => {
+        const target = trimRight(f.commandPreview || f.toolName, 32);
+        return /* @__PURE__ */ jsxs9(Box9, { children: [
+          /* @__PURE__ */ jsx9(Box9, { width: 8, children: /* @__PURE__ */ jsx9(Text9, { bold: true, children: `\xD7${fmtNum2(f.count)}` }) }),
+          /* @__PURE__ */ jsx9(Text9, { dimColor: true, wrap: "truncate-end", children: target })
+        ] }, `stuck-${i}`);
+      })
+    ] }) : null,
+    /* @__PURE__ */ jsxs9(Box9, { children: [
+      /* @__PURE__ */ jsx9(Text9, { dimColor: true, wrap: "truncate-end", children: "\u2192 " }),
+      /* @__PURE__ */ jsx9(Text9, { bold: true, color: "cyan", wrap: "truncate-end", children: "live loop-detector" })
+    ] })
+  ] });
+}
+
+// src/cli/render/ink/panels/ShieldsPanel.tsx
+import { Box as Box10, Text as Text10 } from "ink";
+
+// src/protection.ts
+var PROTECTIVE_SHIELD_DISCOUNTS = {
+  "project-jail": 0.7
+};
 
 // src/cli/render/ink/panels/ShieldsPanel.tsx
 import { jsx as jsx10, jsxs as jsxs10 } from "react/jsx-runtime";
@@ -1739,7 +1966,7 @@ function StaticScorecard({ input, rangeLabel, now }) {
     /* @__PURE__ */ jsx11(Header, { rangeLabel }),
     /* @__PURE__ */ jsx11(SeverityBand, { label: "Spend & activity", width }),
     /* @__PURE__ */ jsxs11(Box11, { flexDirection: "row", gap: 1, children: [
-      /* @__PURE__ */ jsx11(CostPanel, { summary, width: halfWidth }),
+      /* @__PURE__ */ jsx11(CostPanel, { summary, width: halfWidth, keyed: input.keyed }),
       /* @__PURE__ */ jsx11(ActivityPanel, { summary, scan: input.scan, width: halfWidth })
     ] }),
     hasCritical ? /* @__PURE__ */ jsxs11(Fragment2, { children: [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "2.8.0",
+  "version": "2.8.2",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",