@swestash/agent-lens 0.7.0 → 0.8.1

package/dist/agent-lens.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { readFileSync as readFileSync8 } from "fs";
-import { dirname as dirname6, join as join12 } from "path";
+import { existsSync as existsSync9, readFileSync as readFileSync8, writeFileSync as writeFileSync3 } from "fs";
+import { dirname as dirname6, join as join13 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 
 // ../../node_modules/.pnpm/cac@6.7.14/node_modules/cac/dist/index.mjs
@@ -947,6 +947,245 @@ var SECURITY_CATEGORIES = [
   }
 ];
 
+// ../core/dist/secrets.js
+var LEAK_PATTERNS = [
+  { name: "email", re: /[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/ },
+  { name: "home-path-with-user", re: /\/(?:home|Users)\/(?!user\b)[A-Za-z0-9._-]+/ },
+  { name: "ipv4", re: /\b\d{1,3}(?:\.\d{1,3}){3}\b/ },
+  { name: "url", re: /https?:\/\/[^\s"']+/ },
+  { name: "aws-key", re: /AKIA[0-9A-Z]{16}/ },
+  { name: "bearer/token", re: /\b(?:sk|pk|ghp|gho|xox[abp])[-_][A-Za-z0-9]{8,}/ }
+];
+var SECRET_PATTERNS = [
+  { re: /-----BEGIN (?:RSA |EC |OPENSSH |DSA |PGP )?PRIVATE KEY-----/g, label: "PRIVATE-KEY" },
+  { re: /\bAKIA[0-9A-Z]{16}\b/g, label: "AWS-KEY" },
+  { re: /\bASIA[0-9A-Z]{16}\b/g, label: "AWS-KEY" },
+  { re: /\bgithub_pat_[A-Za-z0-9_]{20,}/g, label: "GITHUB-TOKEN" },
+  { re: /\bgh[pousr]_[A-Za-z0-9]{30,}\b/g, label: "GITHUB-TOKEN" },
+  { re: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/g, label: "SLACK-TOKEN" },
+  { re: /\bxapp-[0-9A-Za-z-]{10,}/g, label: "SLACK-TOKEN" },
+  { re: /\bnpm_[A-Za-z0-9]{30,}/g, label: "NPM-TOKEN" },
+  { re: /\bAIza[0-9A-Za-z_-]{35}\b/g, label: "GOOGLE-API-KEY" },
+  { re: /\b[rsp]k_(?:live|test)_[A-Za-z0-9]{10,}\b/g, label: "STRIPE-KEY" },
+  { re: /\bsk-(?:proj|ant|or|svcacct)-[A-Za-z0-9_-]{20,}/g, label: "API-KEY" },
+  { re: /\bsk-[A-Za-z0-9]{20,}\b/g, label: "API-KEY" },
+  { re: /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{6,}/g, label: "JWT" }
+];
+function maskUrlCredentials(text) {
+  return text.replace(/([a-z][a-z0-9+.-]*:\/\/)[^/\s:@"'`]+:[^/\s@"'`]+@/gi, "$1[REDACTED-AUTH]@").replace(/([?&](?:access_?token|api[_-]?key|apikey|token|secret|password|pwd|client[_-]?secret|auth|signature|sig)=)[^&\s"'`<>]+/gi, "$1[REDACTED]");
+}
+var ENV_ASSIGN = /\b([A-Za-z][A-Za-z0-9_]*_(?:TOKEN|SECRET|KEY|PASSWORD|PASSWD|PWD|PW|CREDENTIALS?)|PASSWORD|PASSWD|SECRET|TOKEN)=(["']?)(?!\$)[^\s"'`&;|<>()]+/gi;
+function maskEnvAssignments(text) {
+  return text.replace(ENV_ASSIGN, (_m, name, q) => `${name}=${q}[REDACTED]`);
+}
+var PII_PATTERNS = [
+  { re: /[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/g, label: "EMAIL" },
+  { re: /\b\d{1,3}(?:\.\d{1,3}){3}\b/g, label: "IP" }
+];
+var HOME_USER = /\/(home|Users)\/[^/\s"'`]+/g;
+var ENCODED_HOME_USER = /(?<![A-Za-z0-9])(-(?:home|Users)-)[A-Za-z0-9._]+(?=-)/g;
+var WINDOWS_USER = /([A-Za-z]:\\Users\\)[^\\/\s"'`]+/gi;
+function maskSecrets(text) {
+  let out = maskUrlCredentials(text);
+  out = maskEnvAssignments(out);
+  for (const { re, label } of SECRET_PATTERNS)
+    out = out.replace(re, `[${label}]`);
+  for (const { re, label } of PII_PATTERNS)
+    out = out.replace(re, `[${label}]`);
+  out = out.replace(HOME_USER, (_m, root) => `/${root}/user`);
+  out = out.replace(ENCODED_HOME_USER, (_m, root) => `${root}user`);
+  out = out.replace(WINDOWS_USER, (_m, root) => `${root}user`);
+  return out;
+}
+var SHARE_LEAK = [
+  ...SECRET_PATTERNS.map(({ re, label }) => ({ name: label, re: new RegExp(re.source) })),
+  { name: "email", re: /[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/ },
+  { name: "home-path-with-user", re: /\/(?:home|Users)\/(?!user\b)[A-Za-z0-9._-]+/ },
+  { name: "encoded-home-with-user", re: /(?<![A-Za-z0-9])-(?:home|Users)-(?!user-)[A-Za-z0-9._]+-/ },
+  { name: "url-credentials", re: /:\/\/[^/\s:@"'`]+:[^/\s@"'`]+@/ }
+];
+var USER_STOPLIST = /* @__PURE__ */ new Set([
+  "user",
+  "users",
+  "home",
+  "root",
+  "admin",
+  "ubuntu",
+  "runner",
+  "node",
+  "app",
+  "apps",
+  "data",
+  "tmp",
+  "shared",
+  "public",
+  "guest",
+  "vagrant",
+  "ec2-user",
+  "docker"
+]);
+var HOME_OWNER = /(?:\/(?:home|Users)\/|-(?:home|Users)-|[A-Za-z]:\\Users\\)([A-Za-z0-9._]{3,})/g;
+function deriveHomeUsers(texts) {
+  const found = /* @__PURE__ */ new Set();
+  for (const t of texts) {
+    if (!t)
+      continue;
+    const re = new RegExp(HOME_OWNER.source, "g");
+    let m;
+    while (m = re.exec(t)) {
+      const u = m[1];
+      if (u.length >= 3 && !USER_STOPLIST.has(u.toLowerCase()))
+        found.add(u);
+    }
+  }
+  return [...found];
+}
+function scrubUsernames(text, users) {
+  let out = text;
+  for (const u of users) {
+    const esc = u.replace(/[.*+?^${}()|[\]\\-]/g, "\\$&");
+    out = out.replace(new RegExp(`(?<![A-Za-z0-9])${esc}(?![A-Za-z0-9])`, "g"), "[USER]");
+  }
+  return out;
+}
+
+// ../core/dist/redact-export.js
+import { createHash } from "crypto";
+
+// ../core/dist/markdown.js
+function fence(s) {
+  return s.length > 2e3 ? s.slice(0, 2e3) + "\n\u2026 (truncated)" : s;
+}
+function sessionToMarkdown(s, events) {
+  const out = [];
+  out.push(`# ${s.title || "Session " + s.id.slice(0, 8)}`);
+  out.push("");
+  const meta = [
+    ["Session", s.id],
+    ["Source", s.source],
+    ["Project", s.project],
+    ["Model", s.model],
+    ["Started", s.started_at],
+    ["Ended", s.ended_at]
+  ].filter(([, v]) => v);
+  for (const [k, v] of meta)
+    out.push(`- **${k}:** ${v}`);
+  out.push("");
+  out.push("---");
+  out.push("");
+  for (const e of events) {
+    const who = e.role || e.type;
+    const ts = e.timestamp ? ` _(${e.timestamp})_` : "";
+    if (e.thinking) {
+      out.push(`### \u{1F9E0} thinking${ts}`);
+      out.push("");
+      out.push(fence(e.thinking));
+      out.push("");
+    }
+    if (e.text) {
+      const icon = who === "user" ? "\u{1F464}" : who === "assistant" ? "\u{1F916}" : "\u2699\uFE0F";
+      out.push(`### ${icon} ${who}${ts}`);
+      out.push("");
+      out.push(fence(e.text));
+      out.push("");
+    }
+    for (const tc of e.toolCalls) {
+      const label = tc.skill_name ? `Skill: ${tc.skill_name}` : tc.agent_type ? `${tc.tool_name} \u2192 ${tc.agent_type}` : tc.tool_name;
+      const status = tc.status ? ` _(${tc.status})_` : "";
+      out.push(`> \u{1F527} **${label}**${status}`);
+      if (tc.input_json && tc.input_json !== "{}") {
+        out.push("```json");
+        out.push(fence(tc.input_json));
+        out.push("```");
+      }
+      out.push("");
+    }
+  }
+  return out.join("\n");
+}
+
+// ../core/dist/redact-export.js
+function hash(s) {
+  return createHash("sha256").update(s).digest("hex").slice(0, 4);
+}
+function structurePath(p) {
+  if (!p)
+    return p;
+  const abs = p.startsWith("/");
+  const segs = p.split("/").filter(Boolean);
+  const out = segs.map((seg, i) => {
+    if (segs[i - 1] === "home" || segs[i - 1] === "Users")
+      return "user";
+    if (seg === "home" || seg === "Users")
+      return seg;
+    const last = i === segs.length - 1;
+    const dot = last ? seg.lastIndexOf(".") : -1;
+    return dot > 0 ? `file-${hash(seg)}${seg.slice(dot)}` : `dir-${hash(seg)}`;
+  });
+  return (abs ? "/" : "") + out.join("/");
+}
+function scrub(s) {
+  return s && s.length > 0 ? "[redacted]" : s;
+}
+function redactSession(session, events, level) {
+  const users = deriveHomeUsers([
+    session.title,
+    session.project,
+    session.source,
+    ...events.flatMap((e) => [e.text, e.thinking, ...e.toolCalls.map((t) => t.input_json)])
+  ]);
+  const unuser = (s) => s == null ? s : scrubUsernames(s, users);
+  if (level === "structure") {
+    return {
+      session: { ...session, title: session.title ? "Redacted session" : session.title, project: structurePath(session.project), source: unuser(session.source) },
+      events: events.map((e) => ({
+        ...e,
+        text: scrub(e.text),
+        thinking: scrub(e.thinking),
+        toolCalls: e.toolCalls.map((t) => ({ ...t, input_json: t.input_json ? "{}" : t.input_json }))
+      }))
+    };
+  }
+  const mask = (s) => s == null ? s : scrubUsernames(maskSecrets(s), users);
+  return {
+    session: { ...session, title: mask(session.title), project: mask(session.project), source: mask(session.source) },
+    events: events.map((e) => ({
+      ...e,
+      text: mask(e.text),
+      thinking: mask(e.thinking),
+      toolCalls: e.toolCalls.map((t) => ({ ...t, input_json: mask(t.input_json) }))
+    }))
+  };
+}
+function sweep(md, patterns) {
+  let out = md;
+  let caught = false;
+  for (const { re } of patterns) {
+    const g = new RegExp(re.source, re.flags.includes("g") ? re.flags : re.flags + "g");
+    if (g.test(out)) {
+      caught = true;
+      out = out.replace(g, "[REDACTED]");
+    }
+  }
+  return { md: out, caught };
+}
+function disclaimer(level) {
+  return `> \u{1F512} **Redacted export** (level: ${level}) \u2014 best-effort automatic masking of secrets, tokens, emails, IPs, and usernames. Not a guarantee; review before sharing. Generated locally by Agent Lens \u2014 never uploaded.`;
+}
+function exportMarkdown(session, events, opts = {}) {
+  const level = opts.level ?? "secrets";
+  if (level === "off") {
+    return { markdown: sessionToMarkdown(session, events), residualLeak: false, level: "off" };
+  }
+  const redacted = redactSession(session, events, level);
+  const rendered = sessionToMarkdown(redacted.session, redacted.events);
+  const scanSet = level === "structure" ? LEAK_PATTERNS : SHARE_LEAK;
+  const { md, caught } = sweep(rendered, scanSet);
+  return { markdown: `${disclaimer(level)}
+
+${md}`, residualLeak: caught, level };
+}
+
 // ../core/dist/errors.js
 var ERROR_CLASSIFIER_VERSION = 1;
 var REJECTION_TYPES = /* @__PURE__ */ new Set(["user-rejected", "guardrail-blocked"]);
@@ -1010,58 +1249,6 @@ function costForUsage(model, u) {
   return (u.input_tokens * r.input + u.output_tokens * r.output + u.cache_creation_input_tokens * r.cacheWrite + u.cache_read_input_tokens * r.cacheRead) / M;
 }
 
-// ../core/dist/markdown.js
-function fence(s) {
-  return s.length > 2e3 ? s.slice(0, 2e3) + "\n\u2026 (truncated)" : s;
-}
-function sessionToMarkdown(s, events) {
-  const out = [];
-  out.push(`# ${s.title || "Session " + s.id.slice(0, 8)}`);
-  out.push("");
-  const meta = [
-    ["Session", s.id],
-    ["Source", s.source],
-    ["Project", s.project],
-    ["Model", s.model],
-    ["Started", s.started_at],
-    ["Ended", s.ended_at]
-  ].filter(([, v]) => v);
-  for (const [k, v] of meta)
-    out.push(`- **${k}:** ${v}`);
-  out.push("");
-  out.push("---");
-  out.push("");
-  for (const e of events) {
-    const who = e.role || e.type;
-    const ts = e.timestamp ? ` _(${e.timestamp})_` : "";
-    if (e.thinking) {
-      out.push(`### \u{1F9E0} thinking${ts}`);
-      out.push("");
-      out.push(fence(e.thinking));
-      out.push("");
-    }
-    if (e.text) {
-      const icon = who === "user" ? "\u{1F464}" : who === "assistant" ? "\u{1F916}" : "\u2699\uFE0F";
-      out.push(`### ${icon} ${who}${ts}`);
-      out.push("");
-      out.push(fence(e.text));
-      out.push("");
-    }
-    for (const tc of e.toolCalls) {
-      const label = tc.skill_name ? `Skill: ${tc.skill_name}` : tc.agent_type ? `${tc.tool_name} \u2192 ${tc.agent_type}` : tc.tool_name;
-      const status = tc.status ? ` _(${tc.status})_` : "";
-      out.push(`> \u{1F527} **${label}**${status}`);
-      if (tc.input_json && tc.input_json !== "{}") {
-        out.push("```json");
-        out.push(fence(tc.input_json));
-        out.push("```");
-      }
-      out.push("");
-    }
-  }
-  return out.join("\n");
-}
-
 // ../core/dist/rawjson.js
 import { gzipSync, gunzipSync } from "zlib";
 function packRaw(json) {
@@ -1152,14 +1339,72 @@ function resolveWebDist(fromDir, repoRoot = findRepoRoot(fromDir)) {
   return installed;
 }
 
-// ../core/dist/sources.js
+// ../core/dist/config.js
 import { readFileSync as readFileSync2 } from "fs";
-function readConfig() {
+import { join as join2 } from "path";
+var DEFAULT_PORT = 4477;
+var DEFAULT_HOST = "127.0.0.1";
+var DEFAULT_DB_NAME = "agent-lens.db";
+function readConfigFile() {
   const repoRoot = findRepoRoot();
   const dataDir = resolveDataDir(repoRoot);
   const file = resolveConfigFile(repoRoot, dataDir);
   return file ? JSON.parse(readFileSync2(file, "utf8")) : null;
 }
+function resolveDbPath(override, cfg = readConfigFile()) {
+  if (override)
+    return { path: override, origin: "flag" };
+  if (process.env.AGENT_LENS_DB)
+    return { path: process.env.AGENT_LENS_DB, origin: "env" };
+  if (isSet(cfg?.db))
+    return { path: expandPath(String(cfg.db).trim()), origin: "file" };
+  return { path: join2(resolveDataDir(findRepoRoot()), DEFAULT_DB_NAME), origin: "default" };
+}
+function validatePort(value, source) {
+  const n = typeof value === "number" ? value : Number(String(value).trim());
+  if (!Number.isInteger(n) || n < 1 || n > 65535) {
+    throw new Error(`agent-lens: invalid port from ${source}: '${value}' (expected an integer 1-65535)`);
+  }
+  return n;
+}
+function isSet(v) {
+  return v !== void 0 && v !== null && String(v).trim() !== "";
+}
+function resolveServerConfig(overrides = {}, cfg = readConfigFile()) {
+  let port;
+  let portOrigin;
+  if (isSet(overrides.port)) {
+    port = validatePort(overrides.port, "--port");
+    portOrigin = "flag";
+  } else if (isSet(process.env.AGENT_LENS_PORT)) {
+    port = validatePort(process.env.AGENT_LENS_PORT, "AGENT_LENS_PORT");
+    portOrigin = "env";
+  } else if (isSet(cfg?.server?.port)) {
+    port = validatePort(cfg.server.port, "server.port (config file)");
+    portOrigin = "file";
+  } else {
+    port = DEFAULT_PORT;
+    portOrigin = "default";
+  }
+  let host;
+  let hostOrigin;
+  if (isSet(overrides.host)) {
+    host = String(overrides.host).trim();
+    hostOrigin = "flag";
+  } else if (isSet(process.env.AGENT_LENS_HOST)) {
+    host = process.env.AGENT_LENS_HOST.trim();
+    hostOrigin = "env";
+  } else if (isSet(cfg?.server?.host)) {
+    host = String(cfg.server.host).trim();
+    hostOrigin = "file";
+  } else {
+    host = DEFAULT_HOST;
+    hostOrigin = "default";
+  }
+  return { port, host, portOrigin, hostOrigin };
+}
+
+// ../core/dist/sources.js
 function loadSources() {
   if (process.env.CLAUDE_DIR) {
     return [
@@ -1170,7 +1415,7 @@ function loadSources() {
       }
     ];
   }
-  const cfg = readConfig() ?? { sources: [{ label: "default", agent: "claude-code", configDir: "$HOME/.claude" }] };
+  const cfg = readConfigFile() ?? { sources: [{ label: "default", agent: "claude-code", configDir: "$HOME/.claude" }] };
   const seen = /* @__PURE__ */ new Set();
   const out = [];
   for (const raw of cfg.sources || []) {
@@ -1190,7 +1435,7 @@ function loadExcludes() {
   const fromEnv = (process.env.AGENT_LENS_EXCLUDE || "").split(",");
   let fromCfg = [];
   if (!process.env.CLAUDE_DIR) {
-    const cfg = readConfig();
+    const cfg = readConfigFile();
     if (cfg && Array.isArray(cfg.exclude))
       fromCfg = cfg.exclude;
   }
@@ -1213,7 +1458,7 @@ function encodeProjectPath(p) {
 
 // ../core/dist/collect.js
 import { appendFileSync, closeSync, copyFileSync, existsSync as existsSync2, mkdirSync, openSync, readSync, readdirSync, statSync, unlinkSync, utimesSync, writeSync, chmodSync } from "fs";
-import { basename, dirname as dirname2, join as join2, relative, sep } from "path";
+import { basename, dirname as dirname2, join as join3, relative, sep } from "path";
 import { platform as platform2 } from "os";
 var POSIX = platform2() !== "win32";
 var DIR_MODE = 448;
@@ -1293,19 +1538,19 @@ function filesEqual(a, b) {
   return prefixEquals(a, b, sa.size);
 }
 function latestSnapshot(archive, relParts) {
-  const versRoot = join2(archive, ".versions");
+  const versRoot = join3(archive, ".versions");
   if (!existsSync2(versRoot))
     return null;
   const stamps = readdirSync(versRoot).sort();
   for (let i = stamps.length - 1; i >= 0; i--) {
-    const p = join2(versRoot, stamps[i], ...relParts);
+    const p = join3(versRoot, stamps[i], ...relParts);
     if (existsSync2(p))
       return p;
   }
   return null;
 }
 function snapshot(absPath, relParts, versionsDir, stats) {
-  const dst = join2(versionsDir, ...relParts);
+  const dst = join3(versionsDir, ...relParts);
   ensureDir(dirname2(dst));
   copyFileSync(absPath, dst);
   syncMeta(dst, statSync(absPath));
@@ -1313,7 +1558,7 @@ function snapshot(absPath, relParts, versionsDir, stats) {
 }
 function walkCollectable(dir, out, inWorkflows = false, inToolResults = false) {
   for (const e of readdirSync(dir, { withFileTypes: true })) {
-    const p = join2(dir, e.name);
+    const p = join3(dir, e.name);
     if (e.isDirectory()) {
       walkCollectable(p, out, inWorkflows || e.name === "workflows", inToolResults || e.name === "tool-results");
     } else if (e.isFile() && (e.name.endsWith(".jsonl") || inWorkflows || inToolResults || e.name.endsWith(".meta.json"))) {
@@ -1354,7 +1599,7 @@ function removeCredentials(dir) {
   if (!existsSync2(dir))
     return;
   for (const e of readdirSync(dir, { withFileTypes: true })) {
-    const p = join2(dir, e.name);
+    const p = join3(dir, e.name);
     if (e.isDirectory())
       removeCredentials(p);
     else if (e.name === ".credentials.json") {
@@ -1367,19 +1612,19 @@ function removeCredentials(dir) {
 }
 function collectSource(source, archiveBase, excludedDirs, runTs, stats, log) {
   const { label, configDir } = source;
-  const archive = join2(archiveBase, label);
-  const versionsDir = join2(archive, ".versions", runTs);
+  const archive = join3(archiveBase, label);
+  const versionsDir = join3(archive, ".versions", runTs);
   if (!existsSync2(configDir)) {
     log(`agent-lens: [${label}] source not found: ${configDir} (skipping)`);
     return;
   }
-  ensureDir(join2(archive, "projects"));
-  ensureDir(join2(archive, "settings"));
+  ensureDir(join3(archive, "projects"));
+  ensureDir(join3(archive, "settings"));
   const files = [];
-  const projectsDir = join2(configDir, "projects");
+  const projectsDir = join3(configDir, "projects");
   if (existsSync2(projectsDir))
     walkCollectable(projectsDir, files);
-  const historySrc = join2(configDir, "history.jsonl");
+  const historySrc = join3(configDir, "history.jsonl");
   if (existsSync2(historySrc))
     files.push(historySrc);
   const before = { scanned: stats.scanned, snapshots: stats.snapshots };
@@ -1392,13 +1637,13 @@ function collectSource(source, archiveBase, excludedDirs, runTs, stats, log) {
     if (excludedDirs.some((enc) => relPosix.startsWith(`projects/${enc}/`)))
       continue;
     stats.scanned++;
-    syncFile(src, join2(archive, ...relParts), relParts, archive, versionsDir, stats, base.endsWith(".jsonl"));
+    syncFile(src, join3(archive, ...relParts), relParts, archive, versionsDir, stats, base.endsWith(".jsonl"));
   }
   for (const f of ["settings.json", "settings.local.json"]) {
-    const s = join2(configDir, f);
+    const s = join3(configDir, f);
     if (!existsSync2(s))
       continue;
-    const a = join2(archive, "settings", f);
+    const a = join3(archive, "settings", f);
     if (existsSync2(a) && !filesEqual(s, a))
       snapshot(a, ["settings", f], versionsDir, stats);
     ensureDir(dirname2(a));
@@ -1411,13 +1656,13 @@ function collectSource(source, archiveBase, excludedDirs, runTs, stats, log) {
   const line = `${(/* @__PURE__ */ new Date()).toISOString()} run=${runTs} source=${label} scanned=${scanned} snapshots=${snapshots} archive=${archive}`;
   log(`agent-lens: ${line}`);
   try {
-    appendFileSync(join2(archiveBase, ".collect.log"), line + "\n");
+    appendFileSync(join3(archiveBase, ".collect.log"), line + "\n");
   } catch {
   }
 }
 function collectAll(opts = {}) {
   const log = opts.log ?? ((m) => console.log(m));
-  const archiveBase = opts.archiveBase ?? join2(resolveDataDir(findRepoRoot()), "archive");
+  const archiveBase = opts.archiveBase ?? join3(resolveDataDir(findRepoRoot()), "archive");
   const sources = opts.sources ?? loadSources();
   const excludedDirs = (opts.excludes ?? loadExcludes()).map(encodeProjectPath);
   const runTs = opts.runTimestamp ?? collectTimestamp();
@@ -1478,7 +1723,7 @@ function acquireLock(lockPath, staleMs = 6 * 60 * 60 * 1e3) {
 import { spawnSync } from "child_process";
 import { mkdirSync as mkdirSync3, rmSync, writeFileSync as writeFileSync2 } from "fs";
 import { homedir as homedir2, platform as platform3 } from "os";
-import { join as join3 } from "path";
+import { join as join4 } from "path";
 var DEFAULT_HOURS = [9, 13, 17, 21];
 var SYSTEMD_COLLECTOR_TIMER = "agent-lens-collect.timer";
 var SYSTEMD_COLLECTOR_SERVICE = "agent-lens-collect.service";
@@ -1504,10 +1749,11 @@ function parseHours(spec) {
 }
 function serverEnv() {
   const env = {};
-  if (process.env.AGENT_LENS_PORT)
-    env.AGENT_LENS_PORT = process.env.AGENT_LENS_PORT;
-  if (process.env.AGENT_LENS_HOST)
-    env.AGENT_LENS_HOST = process.env.AGENT_LENS_HOST;
+  const { port, host, portOrigin, hostOrigin } = resolveServerConfig();
+  if (portOrigin !== "default")
+    env.AGENT_LENS_PORT = String(port);
+  if (hostOrigin !== "default")
+    env.AGENT_LENS_HOST = host;
   return env;
 }
 function onCalendarHours(hours) {
@@ -1550,8 +1796,11 @@ After=network.target
 Type=simple
 # Absolute node + CLI paths: systemd user services don't inherit the interactive PATH.
 ExecStart=${node} ${cli2} serve
-${envLines}# Long-running: restart if it crashes.
-Restart=on-failure
+${envLines}# Long-running: always come back, including after a bare SIGTERM. systemd counts SIGTERM as a
+# clean exit, so Restart=on-failure would leave the server dead after a stray "pkill -f ... serve"
+# aimed at an ad-hoc test server \u2014 the unit's ExecStart matches that pattern too. Matches the
+# launchd KeepAlive=true behaviour. An explicit "systemctl --user stop" still stops it for good.
+Restart=always
 RestartSec=5
 Nice=10
 
@@ -1617,7 +1866,7 @@ function have(cmd) {
   return r.status === 0 || r.error === void 0;
 }
 function systemdUnitDir() {
-  return join3(process.env.XDG_CONFIG_HOME || join3(homedir2(), ".config"), "systemd", "user");
+  return join4(process.env.XDG_CONFIG_HOME || join4(homedir2(), ".config"), "systemd", "user");
 }
 function linuxInstall(targets, node, cli2, hours) {
   if (!have("systemctl")) {
@@ -1628,11 +1877,11 @@ function linuxInstall(targets, node, cli2, hours) {
   const dir = systemdUnitDir();
   mkdirSync3(dir, { recursive: true });
   if (targets.includes("collector")) {
-    writeFileSync2(join3(dir, SYSTEMD_COLLECTOR_SERVICE), systemdCollectorService(node, cli2));
-    writeFileSync2(join3(dir, SYSTEMD_COLLECTOR_TIMER), systemdCollectorTimer(hours));
+    writeFileSync2(join4(dir, SYSTEMD_COLLECTOR_SERVICE), systemdCollectorService(node, cli2));
+    writeFileSync2(join4(dir, SYSTEMD_COLLECTOR_TIMER), systemdCollectorTimer(hours));
   }
   if (targets.includes("server")) {
-    writeFileSync2(join3(dir, SYSTEMD_SERVER_SERVICE), systemdServerService(node, cli2, serverEnv()));
+    writeFileSync2(join4(dir, SYSTEMD_SERVER_SERVICE), systemdServerService(node, cli2, serverEnv()));
   }
   sh("systemctl", ["--user", "daemon-reload"]);
   if (targets.includes("collector")) {
@@ -1656,12 +1905,12 @@ function linuxUninstall(targets) {
   if (targets.includes("collector")) {
     sh("systemctl", ["--user", "disable", "--now", SYSTEMD_COLLECTOR_TIMER], true);
     for (const u of [SYSTEMD_COLLECTOR_TIMER, SYSTEMD_COLLECTOR_SERVICE])
-      rmSync(join3(dir, u), { force: true });
+      rmSync(join4(dir, u), { force: true });
     sh("systemctl", ["--user", "reset-failed", SYSTEMD_COLLECTOR_SERVICE], true);
   }
   if (targets.includes("server")) {
     sh("systemctl", ["--user", "disable", "--now", SYSTEMD_SERVER_SERVICE], true);
-    rmSync(join3(dir, SYSTEMD_SERVER_SERVICE), { force: true });
+    rmSync(join4(dir, SYSTEMD_SERVER_SERVICE), { force: true });
     sh("systemctl", ["--user", "reset-failed", SYSTEMD_SERVER_SERVICE], true);
   }
   sh("systemctl", ["--user", "daemon-reload"]);
@@ -1676,7 +1925,7 @@ function linuxStatus(targets) {
     sh("systemctl", ["--user", "status", SYSTEMD_SERVER_SERVICE, "--no-pager"]);
 }
 function launchdPlistPath(label) {
-  return join3(homedir2(), "Library", "LaunchAgents", `${label}.plist`);
+  return join4(homedir2(), "Library", "LaunchAgents", `${label}.plist`);
 }
 function macBootstrap(plist) {
   const uid = typeof process.getuid === "function" ? process.getuid() : 0;
@@ -1690,18 +1939,18 @@ function macBootout(label, plist) {
   rmSync(plist, { force: true });
 }
 function macInstall(targets, node, cli2, hours) {
-  const agents = join3(homedir2(), "Library", "LaunchAgents");
+  const agents = join4(homedir2(), "Library", "LaunchAgents");
   mkdirSync3(agents, { recursive: true });
   const dataDir = resolveDataDir(findRepoRoot());
   if (targets.includes("collector")) {
     const plist = launchdPlistPath(LAUNCHD_COLLECTOR_LABEL);
-    writeFileSync2(plist, launchdCollectorPlist(node, cli2, hours, join3(dataDir, "schedule.log")));
+    writeFileSync2(plist, launchdCollectorPlist(node, cli2, hours, join4(dataDir, "schedule.log")));
     macBootstrap(plist);
     console.log(`agent-lens service: installed collector agent ${LAUNCHD_COLLECTOR_LABEL} (hours ${hours.join(",")})`);
   }
   if (targets.includes("server")) {
     const plist = launchdPlistPath(LAUNCHD_SERVER_LABEL);
-    writeFileSync2(plist, launchdServerPlist(node, cli2, join3(dataDir, "server.log"), serverEnv()));
+    writeFileSync2(plist, launchdServerPlist(node, cli2, join4(dataDir, "server.log"), serverEnv()));
     macBootstrap(plist);
     console.log(`agent-lens service: installed server agent ${LAUNCHD_SERVER_LABEL}`);
   }
@@ -1792,7 +2041,7 @@ function runService(action, params) {
 
 // ../ingest/dist/run.js
 import { readFileSync as readFileSync7, statSync as statSync5, mkdirSync as mkdirSync4, existsSync as existsSync4 } from "fs";
-import { dirname as dirname4, join as join8 } from "path";
+import { dirname as dirname4, join as join9 } from "path";
 
 // ../ingest/dist/db.js
 import Database from "better-sqlite3";
@@ -1848,7 +2097,7 @@ function resetSchema(db) {
 
 // ../ingest/dist/adapters/claude-code.js
 import { readdirSync as readdirSync2 } from "fs";
-import { basename as basename2, join as join4 } from "path";
+import { basename as basename2, join as join5 } from "path";
 function flattenText(content) {
   if (content == null)
     return null;
@@ -1913,13 +2162,13 @@ function asString(v) {
 function asInt(v) {
   return typeof v === "number" && Number.isFinite(v) ? Math.trunc(v) : 0;
 }
-function parentSessionFromPath(path) {
-  const parts = path.split("/");
+function parentSessionFromPath(path2) {
+  const parts = path2.split("/");
   const i = parts.indexOf("subagents");
   return i > 0 ? parts[i - 1] : null;
 }
-function workflowRunFromPath(path) {
-  const parts = path.split("/");
+function workflowRunFromPath(path2) {
+  const parts = path2.split("/");
   const i = parts.indexOf("workflows");
   return i >= 0 && i + 1 < parts.length ? parts[i + 1] : null;
 }
@@ -1931,7 +2180,7 @@ function recurseJsonl(dir, out) {
     return;
   }
   for (const e of entries) {
-    const p = join4(dir, e.name);
+    const p = join5(dir, e.name);
     if (e.isDirectory())
       recurseJsonl(p, out);
     else if (e.isFile() && e.name.endsWith(".jsonl"))
@@ -1947,27 +2196,27 @@ var ClaudeCodeAdapter = class {
     const addFrom = (projectsDir, isVersion) => {
       const found = [];
       recurseJsonl(projectsDir, found);
-      for (const path of found) {
-        const parts = path.split("/");
-        const sessionId = basename2(path, ".jsonl");
+      for (const path2 of found) {
+        const parts = path2.split("/");
+        const sessionId = basename2(path2, ".jsonl");
         const encodedDir = parts[parts.length - 2] ?? "";
         files.push({
-          path,
+          path: path2,
           sessionId,
           encodedDir,
           isVersion,
           sourceId,
-          parentSessionId: parentSessionFromPath(path),
-          workflowRunId: workflowRunFromPath(path)
+          parentSessionId: parentSessionFromPath(path2),
+          workflowRunId: workflowRunFromPath(path2)
         });
       }
     };
-    addFrom(join4(archiveRoot, "projects"), false);
-    const versionsRoot = join4(archiveRoot, ".versions");
+    addFrom(join5(archiveRoot, "projects"), false);
+    const versionsRoot = join5(archiveRoot, ".versions");
     try {
       for (const ts of readdirSync2(versionsRoot, { withFileTypes: true })) {
         if (ts.isDirectory())
-          addFrom(join4(versionsRoot, ts.name, "projects"), true);
+          addFrom(join5(versionsRoot, ts.name, "projects"), true);
       }
     } catch {
     }
@@ -2354,14 +2603,15 @@ function classify(db, dirty) {
 }
 
 // ../ingest/dist/detect.js
-import { createHash } from "crypto";
-var DETECTOR_VERSION = 7;
+import { createHash as createHash2 } from "crypto";
+import { posix as path } from "path";
+var DETECTOR_VERSION = 8;
 function evidence(s, max = 200) {
   const one = s.replace(/\s+/g, " ").trim();
   return one.length > max ? one.slice(0, max - 1) + "\u2026" : one;
 }
 function findingId(toolCallId, ruleId) {
-  return createHash("sha1").update(toolCallId).update("\0").update(ruleId).digest("hex").slice(0, 16);
+  return createHash2("sha1").update(toolCallId).update("\0").update(ruleId).digest("hex").slice(0, 16);
 }
 var SYSTEM_PATH = /(^|\s)(\/etc\/|\/usr\/|\/bin\/|\/sbin\/|\/boot\/|\/var\/|\/root\/|~\/\.ssh\/|~\/\.aws\/)/;
 var HOME_OR_ROOT_TARGET = /(\s|^)(~\/?|\/|\/\*|\$HOME\/?|\*)(\s|$)/;
@@ -2395,8 +2645,8 @@ function execGeneratedScript(cmd) {
     const e = t.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
     const interp = new RegExp(`\\b(?:sh|bash|zsh|ksh|dash|source)\\s+["']?${e}\\b|(?:^|[\\n;|&(])\\s*\\.\\s+["']?${e}\\b`);
     const hasPath = /^(\.\/|\/|~\/)/.test(t);
-    const path = hasPath ? new RegExp(`(?:^|[\\n;|&(])\\s*${e}(?:\\s|$|[;&|<>])`) : new RegExp(`(?:^|[\\n;|&(])\\s*\\.\\/${e}\\b`);
-    if (interp.test(cmd) || path.test(cmd))
+    const path2 = hasPath ? new RegExp(`(?:^|[\\n;|&(])\\s*${e}(?:\\s|$|[;&|<>])`) : new RegExp(`(?:^|[\\n;|&(])\\s*\\.\\/${e}\\b`);
+    if (interp.test(cmd) || path2.test(cmd))
       return t;
   }
   return null;
@@ -2410,14 +2660,21 @@ function isAgentOwnedPath(p, configDirs) {
   const tmp = process.env.TMPDIR;
   return !!tmp && p.startsWith(tmp.replace(/\/$/, "") + "/");
 }
-function outsideProject(filePath, projectPath, configDirs) {
-  if (!filePath || !filePath.startsWith("/"))
-    return false;
-  if (isAgentOwnedPath(filePath, configDirs))
-    return false;
+function outsideProjectPath(filePath, projectPath, configDirs) {
+  if (!filePath)
+    return null;
+  let abs = filePath;
+  if (!filePath.startsWith("/")) {
+    if (!projectPath || !filePath.includes("../"))
+      return null;
+    abs = path.normalize(projectPath.replace(/\/$/, "") + "/" + filePath);
+  }
+  if (isAgentOwnedPath(abs, configDirs))
+    return null;
   if (!projectPath)
-    return false;
-  return filePath !== projectPath && !filePath.startsWith(projectPath.replace(/\/$/, "") + "/");
+    return null;
+  const root = projectPath.replace(/\/$/, "");
+  return abs !== root && !abs.startsWith(root + "/") ? abs : null;
 }
 var SCOPE_RANK = { unknown: 0, loopback: 1, internal: 2, external: 3 };
 function netTargetScope(rawCommand) {
@@ -2697,6 +2954,34 @@ var RULES = [
       return { evidence: evidence(ctx.command) };
     }
   },
+  {
+    id: "obfuscated.decode_exec",
+    category: "privilege-bypass",
+    framework_ref: "OWASP LLM06",
+    title: "Decodes and executes obfuscated content (base64 -d | sh)",
+    tools: ["Bash"],
+    baseSeverity: "high",
+    test(ctx) {
+      const c = ctx.commandBare;
+      if (!c)
+        return null;
+      const decoder = /\b(base64\s+(?:-d|-D|--decode)|xxd\s+-r|openssl\s+(?:base64\s+-d|enc\b[^|]*\s-d\b)|uudecode)\b/i.exec(c);
+      if (!decoder)
+        return null;
+      const downstream = c.slice(decoder.index + decoder[0].length);
+      const piped = /\|\s*(?:sudo\s+)?(sh|bash|zsh|dash|ksh|python\d?|node|perl|ruby)\b([^|;&\n]*)/i.exec(downstream);
+      if (!piped)
+        return null;
+      const interp = piped[1].toLowerCase();
+      const args = piped[2] || "";
+      if (/^(?:node|python|perl|ruby)/.test(interp) && /(?:^|\s)-(?:e|c|m|p)\b|(?:^|\s)--(?:eval|command|module|print)\b/.test(args))
+        return null;
+      const sudo = /\|\s*sudo\b/i.test(downstream);
+      const d = decoder[0].toLowerCase();
+      const decoderName = d.startsWith("base64") ? "base64" : d.startsWith("xxd") ? "xxd" : d.startsWith("openssl") ? "openssl" : "uudecode";
+      return { evidence: evidence(ctx.command), severity: sudo ? "critical" : "high", mods: { decoder: decoderName, interpreter: interp } };
+    }
+  },
   {
     id: "privilege.sudo",
     category: "privilege-bypass",
@@ -2770,10 +3055,16 @@ var RULES = [
     // writing to /tmp, scratch dirs, adjacent repos is routine; only a system path (below) is high
     test(ctx) {
       const f = ctx.filePath;
-      if (!outsideProject(f, ctx.projectPath, ctx.ownedConfigDirs))
+      const abs = outsideProjectPath(f, ctx.projectPath, ctx.ownedConfigDirs);
+      if (!abs)
         return null;
-      const system = !!f && SYSTEM_PATH.test(f);
-      return { evidence: evidence(f), severity: system ? "high" : "low", mods: { project: ctx.projectPath, system_path: system } };
+      const system = SYSTEM_PATH.test(abs);
+      const traversal = !!f && !f.startsWith("/") && f.includes("../");
+      return {
+        evidence: evidence(f),
+        severity: system ? "high" : "low",
+        mods: { project: ctx.projectPath, system_path: system, ...traversal ? { traversal: true } : {} }
+      };
     }
   }
 ];
@@ -2896,7 +3187,7 @@ function classifyErrors(db, dirty) {
 }
 
 // ../ingest/dist/pipeline.js
-import { createHash as createHash2 } from "crypto";
+import { createHash as createHash3 } from "crypto";
 function newStats() {
   return { files: 0, skipped: 0, malformed: 0, newEvents: 0 };
 }
@@ -2934,7 +3225,7 @@ function skillSummary(body) {
   return null;
 }
 function skillVersionId(name, body) {
-  return createHash2("sha1").update(name).update("\0").update(body).digest("hex").slice(0, 16);
+  return createHash3("sha1").update(name).update("\0").update(body).digest("hex").slice(0, 16);
 }
 function pruneExcluded(db, excludedPaths) {
   if (!excludedPaths.length)
@@ -3316,7 +3607,7 @@ function ingestFile(db, stmts, adapter, file, lines, meta, now2, stats) {
     }
     let projectId = null;
     if (sessionMeta.cwd) {
-      projectId = createHash2("sha1").update(`${adapter.agentId}\0${sessionMeta.cwd}`).digest("hex").slice(0, 16);
+      projectId = createHash3("sha1").update(`${adapter.agentId}\0${sessionMeta.cwd}`).digest("hex").slice(0, 16);
       stmts.upsertProject.run({
         id: projectId,
         agent_id: adapter.agentId,
@@ -3352,10 +3643,10 @@ function ingestFile(db, stmts, adapter, file, lines, meta, now2, stats) {
 
 // ../ingest/dist/workflows.js
 import { readdirSync as readdirSync3, readFileSync as readFileSync4, statSync as statSync2 } from "fs";
-import { basename as basename3, join as join5 } from "path";
+import { basename as basename3, join as join6 } from "path";
 
 // ../ingest/dist/redact.js
-import { createHash as createHash3, randomBytes } from "crypto";
+import { createHash as createHash4, randomBytes } from "crypto";
 function parseExcludes(csv) {
   return (csv ?? "").split(",").map((s) => s.trim()).filter(Boolean).map(encodeProjectPath);
 }
@@ -3364,17 +3655,17 @@ function isExcludedArchivePath(filePath, excluded) {
 }
 
 // ../ingest/dist/fileread.js
-import { createHash as createHash4 } from "crypto";
+import { createHash as createHash5 } from "crypto";
 import { openSync as openSync2, readSync as readSync2, closeSync as closeSync2 } from "fs";
 import { StringDecoder } from "string_decoder";
 var STREAM_THRESHOLD = 8 * 1024 * 1024;
 var CHUNK2 = 64 * 1024;
 function sha256(buf) {
-  return createHash4("sha256").update(buf).digest("hex");
+  return createHash5("sha256").update(buf).digest("hex");
 }
-function sha256File(path) {
-  const fd = openSync2(path, "r");
-  const h = createHash4("sha256");
+function sha256File(path2) {
+  const fd = openSync2(path2, "r");
+  const h = createHash5("sha256");
   const buf = Buffer.allocUnsafe(CHUNK2);
   try {
     let n;
@@ -3385,8 +3676,8 @@ function sha256File(path) {
   }
   return h.digest("hex");
 }
-function* streamLines(path) {
-  const fd = openSync2(path, "r");
+function* streamLines(path2) {
+  const fd = openSync2(path2, "r");
   const decoder = new StringDecoder("utf8");
   const buf = Buffer.allocUnsafe(CHUNK2);
   let leftover = "";
@@ -3420,7 +3711,7 @@ function walkSidecars(dir, inWorkflows, out) {
     return;
   }
   for (const e of entries) {
-    const p = join5(dir, e.name);
+    const p = join6(dir, e.name);
     if (e.isDirectory())
       walkSidecars(p, inWorkflows || e.name === "workflows", out);
     else if (e.isFile() && inWorkflows && /^wf_.+\.json$/.test(e.name))
@@ -3429,17 +3720,17 @@ function walkSidecars(dir, inWorkflows, out) {
 }
 function discoverSidecars(sourceArchiveDir) {
   const out = [];
-  walkSidecars(join5(sourceArchiveDir, "projects"), false, out);
+  walkSidecars(join6(sourceArchiveDir, "projects"), false, out);
   try {
-    for (const ts of readdirSync3(join5(sourceArchiveDir, ".versions"), { withFileTypes: true }))
+    for (const ts of readdirSync3(join6(sourceArchiveDir, ".versions"), { withFileTypes: true }))
       if (ts.isDirectory())
-        walkSidecars(join5(sourceArchiveDir, ts.name, "projects"), false, out);
+        walkSidecars(join6(sourceArchiveDir, ts.name, "projects"), false, out);
   } catch {
   }
   return out;
 }
-function sessionFromPath(path) {
-  const parts = path.split("/");
+function sessionFromPath(path2) {
+  const parts = path2.split("/");
   const i = parts.indexOf("workflows");
   return i > 0 ? parts[i - 1] : null;
 }
@@ -3486,25 +3777,25 @@ function ingestWorkflowResults(db, sourceArchiveDir, sourceId, excludedDirs, now
        total_tokens=excluded.total_tokens, total_tool_calls=excluded.total_tool_calls,
        duration_ms=excluded.duration_ms, started_at=excluded.started_at, ended_at=excluded.ended_at,
        ingested_at=excluded.ingested_at`);
-  for (const path of paths) {
+  for (const path2 of paths) {
     stats.files++;
-    const st = statSync2(path);
+    const st = statSync2(path2);
     const mtimeMs = Math.trunc(st.mtimeMs);
-    const prev = full ? void 0 : getState.get(path);
+    const prev = full ? void 0 : getState.get(path2);
     if (prev && prev.size === st.size && prev.mtime_ms === mtimeMs) {
       stats.skipped++;
       continue;
     }
     let buf;
     try {
-      buf = readFileSync4(path);
+      buf = readFileSync4(path2);
     } catch {
       stats.malformed++;
       continue;
     }
-    const hash = sha256(buf);
-    if (prev && prev.sha256 === hash) {
-      setState.run({ file_path: path, size: st.size, mtime_ms: mtimeMs, sha256: hash, ingested_at: now2 });
+    const hash2 = sha256(buf);
+    if (prev && prev.sha256 === hash2) {
+      setState.run({ file_path: path2, size: st.size, mtime_ms: mtimeMs, sha256: hash2, ingested_at: now2 });
       stats.skipped++;
       continue;
     }
@@ -3519,14 +3810,14 @@ function ingestWorkflowResults(db, sourceArchiveDir, sourceId, excludedDirs, now
       stats.malformed++;
       continue;
     }
-    const runId = strOrNull(d.runId) ?? basename3(path, ".json");
+    const runId = strOrNull(d.runId) ?? basename3(path2, ".json");
     const startedAt = toIso(d.startTime) ?? toIso(d.timestamp);
     const durationMs2 = intOrNull(d.durationMs);
     const endedAt = startedAt && durationMs2 != null ? new Date(Date.parse(startedAt) + durationMs2).toISOString() : null;
     upsert.run({
       run_id: runId,
       source_id: sourceId,
-      session_id: sessionFromPath(path),
+      session_id: sessionFromPath(path2),
       task_id: strOrNull(d.taskId),
       workflow_name: strOrNull(d.workflowName),
       status: strOrNull(d.status),
@@ -3544,14 +3835,14 @@ function ingestWorkflowResults(db, sourceArchiveDir, sourceId, excludedDirs, now
       ended_at: endedAt,
       ingested_at: now2
     });
-    setState.run({ file_path: path, size: st.size, mtime_ms: mtimeMs, sha256: hash, ingested_at: now2 });
+    setState.run({ file_path: path2, size: st.size, mtime_ms: mtimeMs, sha256: hash2, ingested_at: now2 });
     stats.upserted++;
   }
 }
 
 // ../ingest/dist/meta.js
 import { readdirSync as readdirSync4, readFileSync as readFileSync5, statSync as statSync3 } from "fs";
-import { basename as basename4, join as join6 } from "path";
+import { basename as basename4, join as join7 } from "path";
 function newMetaStats() {
   return { files: 0, upserted: 0, skipped: 0, malformed: 0 };
 }
@@ -3563,7 +3854,7 @@ function walkMeta(dir, inSubagents, out) {
     return;
   }
   for (const e of entries) {
-    const p = join6(dir, e.name);
+    const p = join7(dir, e.name);
     if (e.isDirectory())
       walkMeta(p, inSubagents || e.name === "subagents", out);
     else if (e.isFile() && inSubagents && /^agent-.+\.meta\.json$/.test(e.name))
@@ -3572,11 +3863,11 @@ function walkMeta(dir, inSubagents, out) {
 }
 function discoverMeta(sourceArchiveDir) {
   const out = [];
-  walkMeta(join6(sourceArchiveDir, "projects"), false, out);
+  walkMeta(join7(sourceArchiveDir, "projects"), false, out);
   try {
-    for (const ts of readdirSync4(join6(sourceArchiveDir, ".versions"), { withFileTypes: true }))
+    for (const ts of readdirSync4(join7(sourceArchiveDir, ".versions"), { withFileTypes: true }))
       if (ts.isDirectory())
-        walkMeta(join6(sourceArchiveDir, ts.name, "projects"), false, out);
+        walkMeta(join7(sourceArchiveDir, ts.name, "projects"), false, out);
   } catch {
   }
   return out;
@@ -3600,25 +3891,25 @@ function ingestSubagentMeta(db, sourceArchiveDir, sourceId, excludedDirs, now2,
        source_id=excluded.source_id, agent_type=excluded.agent_type,
        agent_description=excluded.agent_description, spawn_depth=excluded.spawn_depth,
        tool_use_id=excluded.tool_use_id, ingested_at=excluded.ingested_at`);
-  for (const path of paths) {
+  for (const path2 of paths) {
     stats.files++;
-    const st = statSync3(path);
+    const st = statSync3(path2);
     const mtimeMs = Math.trunc(st.mtimeMs);
-    const prev = full ? void 0 : getState.get(path);
+    const prev = full ? void 0 : getState.get(path2);
     if (prev && prev.size === st.size && prev.mtime_ms === mtimeMs) {
       stats.skipped++;
       continue;
     }
     let buf;
     try {
-      buf = readFileSync5(path);
+      buf = readFileSync5(path2);
     } catch {
       stats.malformed++;
       continue;
     }
-    const hash = sha256(buf);
-    if (prev && prev.sha256 === hash) {
-      setState.run({ file_path: path, size: st.size, mtime_ms: mtimeMs, sha256: hash, ingested_at: now2 });
+    const hash2 = sha256(buf);
+    if (prev && prev.sha256 === hash2) {
+      setState.run({ file_path: path2, size: st.size, mtime_ms: mtimeMs, sha256: hash2, ingested_at: now2 });
       stats.skipped++;
       continue;
     }
@@ -3633,7 +3924,7 @@ function ingestSubagentMeta(db, sourceArchiveDir, sourceId, excludedDirs, now2,
       stats.malformed++;
       continue;
     }
-    const sessionId = basename4(path, ".meta.json");
+    const sessionId = basename4(path2, ".meta.json");
     upsert.run({
       session_id: sessionId,
       source_id: sourceId,
@@ -3643,14 +3934,14 @@ function ingestSubagentMeta(db, sourceArchiveDir, sourceId, excludedDirs, now2,
       tool_use_id: strOrNull2(d.toolUseId),
       ingested_at: now2
     });
-    setState.run({ file_path: path, size: st.size, mtime_ms: mtimeMs, sha256: hash, ingested_at: now2 });
+    setState.run({ file_path: path2, size: st.size, mtime_ms: mtimeMs, sha256: hash2, ingested_at: now2 });
     stats.upserted++;
   }
 }
 
 // ../ingest/dist/toolResults.js
 import { readdirSync as readdirSync5, readFileSync as readFileSync6, statSync as statSync4 } from "fs";
-import { basename as basename5, join as join7 } from "path";
+import { basename as basename5, join as join8 } from "path";
 function newToolResultStats() {
   return { files: 0, upserted: 0, skipped: 0, malformed: 0 };
 }
@@ -3662,7 +3953,7 @@ function walkResults(dir, inResults, out) {
     return;
   }
   for (const e of entries) {
-    const p = join7(dir, e.name);
+    const p = join8(dir, e.name);
     if (e.isDirectory())
       walkResults(p, inResults || e.name === "tool-results", out);
     else if (e.isFile() && inResults && e.name.endsWith(".txt"))
@@ -3671,17 +3962,17 @@ function walkResults(dir, inResults, out) {
 }
 function discoverResults(sourceArchiveDir) {
   const out = [];
-  walkResults(join7(sourceArchiveDir, "projects"), false, out);
+  walkResults(join8(sourceArchiveDir, "projects"), false, out);
   try {
-    for (const ts of readdirSync5(join7(sourceArchiveDir, ".versions"), { withFileTypes: true }))
+    for (const ts of readdirSync5(join8(sourceArchiveDir, ".versions"), { withFileTypes: true }))
       if (ts.isDirectory())
-        walkResults(join7(sourceArchiveDir, ts.name, "projects"), false, out);
+        walkResults(join8(sourceArchiveDir, ts.name, "projects"), false, out);
   } catch {
   }
   return out;
 }
-function sessionFromPath2(path) {
-  const parts = path.split("/");
+function sessionFromPath2(path2) {
+  const parts = path2.split("/");
   const i = parts.indexOf("tool-results");
   return i > 0 ? parts[i - 1] : null;
 }
@@ -3698,40 +3989,40 @@ function ingestToolResults(db, sourceArchiveDir, excludedDirs, now2, stats, full
      VALUES (@session_id, @name, @path, @bytes, @text, @ingested_at)
      ON CONFLICT(session_id, name) DO UPDATE SET
        path=excluded.path, bytes=excluded.bytes, text=excluded.text, ingested_at=excluded.ingested_at`);
-  for (const path of paths) {
-    const sessionId = sessionFromPath2(path);
+  for (const path2 of paths) {
+    const sessionId = sessionFromPath2(path2);
     if (!sessionId)
       continue;
     stats.files++;
-    const st = statSync4(path);
+    const st = statSync4(path2);
     const mtimeMs = Math.trunc(st.mtimeMs);
-    const prev = full ? void 0 : getState.get(path);
+    const prev = full ? void 0 : getState.get(path2);
     if (prev && prev.size === st.size && prev.mtime_ms === mtimeMs) {
       stats.skipped++;
       continue;
     }
     let buf;
     try {
-      buf = readFileSync6(path);
+      buf = readFileSync6(path2);
     } catch {
       stats.malformed++;
       continue;
     }
-    const hash = sha256(buf);
-    if (prev && prev.sha256 === hash) {
-      setState.run({ file_path: path, size: st.size, mtime_ms: mtimeMs, sha256: hash, ingested_at: now2 });
+    const hash2 = sha256(buf);
+    if (prev && prev.sha256 === hash2) {
+      setState.run({ file_path: path2, size: st.size, mtime_ms: mtimeMs, sha256: hash2, ingested_at: now2 });
       stats.skipped++;
       continue;
     }
     upsert.run({
       session_id: sessionId,
-      name: basename5(path, ".txt"),
-      path,
+      name: basename5(path2, ".txt"),
+      path: path2,
       bytes: st.size,
       text: buf.toString("utf8"),
       ingested_at: now2
     });
-    setState.run({ file_path: path, size: st.size, mtime_ms: mtimeMs, sha256: hash, ingested_at: now2 });
+    setState.run({ file_path: path2, size: st.size, mtime_ms: mtimeMs, sha256: hash2, ingested_at: now2 });
     stats.upserted++;
   }
 }
@@ -3752,8 +4043,8 @@ function parseIngestArgs(argv) {
 function runIngest(argv = process.argv.slice(2)) {
   const args = parseIngestArgs(argv);
   const dataDir = resolveDataDir(findRepoRoot());
-  const archiveRoot = args.archive || process.env.AGENT_LENS_ARCHIVE || join8(dataDir, "archive");
-  const dbPath = args.db || process.env.AGENT_LENS_DB || join8(dataDir, "agent-lens.db");
+  const archiveRoot = args.archive || process.env.AGENT_LENS_ARCHIVE || join9(dataDir, "archive");
+  const { path: dbPath } = resolveDbPath(args.db);
   if (!existsSync4(archiveRoot)) {
     console.error(`agent-lens-ingest: archive not found: ${archiveRoot} (run 'agent-lens collect' first)`);
     process.exit(1);
@@ -3791,7 +4082,7 @@ function runIngest(argv = process.argv.slice(2)) {
     }
     stmts.insAgent.run(adapter.agentId, adapter.agentName);
     stmts.insSource.run({ id: source.label, label: source.label, agent_id: adapter.agentId, config_dir: source.configDir });
-    let files = adapter.discover(join8(archiveRoot, source.label), source.label);
+    let files = adapter.discover(join9(archiveRoot, source.label), source.label);
     if (excludedDirs.length)
       files = files.filter((f) => !isExcludedArchivePath(f.path, excludedDirs));
     files.sort((a, b) => Number(a.isVersion) - Number(b.isVersion));
@@ -3806,13 +4097,13 @@ function runIngest(argv = process.argv.slice(2)) {
       }
       const small = st.size <= STREAM_THRESHOLD;
       const buf = small ? readFileSync7(file.path) : null;
-      const hash = small ? sha256(buf) : sha256File(file.path);
-      if (prev && prev.sha256 === hash) {
+      const hash2 = small ? sha256(buf) : sha256File(file.path);
+      if (prev && prev.sha256 === hash2) {
         stmts.setState.run({
           file_path: file.path,
           size: st.size,
           mtime_ms: mtimeMs,
-          sha256: hash,
+          sha256: hash2,
           events_ingested: prev.events_ingested,
           ingested_at: now2
         });
@@ -3820,12 +4111,12 @@ function runIngest(argv = process.argv.slice(2)) {
         continue;
       }
       const lines = small ? buf.toString("utf8").split("\n") : streamLines(file.path);
-      ingestFile(db, stmts, adapter, file, lines, { size: st.size, mtimeMs, hash }, now2, stats);
+      ingestFile(db, stmts, adapter, file, lines, { size: st.size, mtimeMs, hash: hash2 }, now2, stats);
       dirty.add(file.sessionId);
     }
-    ingestWorkflowResults(db, join8(archiveRoot, source.label), source.label, excludedDirs, now2, wfStats, args.full);
-    ingestSubagentMeta(db, join8(archiveRoot, source.label), source.label, excludedDirs, now2, metaStats, args.full);
-    ingestToolResults(db, join8(archiveRoot, source.label), excludedDirs, now2, trStats, args.full);
+    ingestWorkflowResults(db, join9(archiveRoot, source.label), source.label, excludedDirs, now2, wfStats, args.full);
+    ingestSubagentMeta(db, join9(archiveRoot, source.label), source.label, excludedDirs, now2, metaStats, args.full);
+    ingestToolResults(db, join9(archiveRoot, source.label), excludedDirs, now2, trStats, args.full);
   }
   const expanded = rebuildDerived(db, args.full ? null : dirty);
   const classified = classify(db, args.full ? null : expanded);
@@ -3863,8 +4154,7 @@ function runMetrics(argv = process.argv.slice(2)) {
   for (let i = 0; i < argv.length; i++)
     if (argv[i] === "--db")
       dbArg = argv[++i] ?? "";
-  const dataDir = resolveDataDir(findRepoRoot());
-  const dbPath = dbArg || process.env.AGENT_LENS_DB || join8(dataDir, "agent-lens.db");
+  const { path: dbPath } = resolveDbPath(dbArg);
   if (!existsSync4(dbPath)) {
     console.error(`agent-lens-metrics: db not found: ${dbPath} (run ingest first)`);
     process.exit(1);
@@ -3879,7 +4169,7 @@ function runMetrics(argv = process.argv.slice(2)) {
 
 // ../server/dist/run.js
 import { existsSync as existsSync7 } from "fs";
-import { dirname as dirname5, join as join10 } from "path";
+import { dirname as dirname5, join as join11 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
 // ../server/dist/db.js
@@ -4462,6 +4752,34 @@ import { existsSync as existsSync6 } from "fs";
 import Fastify from "fastify";
 import fastifyStatic from "@fastify/static";
 
+// ../server/dist/export.js
+function parseRedactionLevel(raw) {
+  return raw === "off" ? "off" : raw === "structure" ? "structure" : "secrets";
+}
+function renderSessionExport(db, id, level) {
+  const result = getSession(db, id);
+  if (!result)
+    return null;
+  const s = result.session;
+  const events = result.events.map((e) => ({
+    type: e.type,
+    role: e.role,
+    timestamp: e.timestamp,
+    text: e.text,
+    thinking: e.thinking,
+    toolCalls: e.toolCalls.map((t) => ({
+      tool_name: t.tool_name,
+      skill_name: t.skill_name,
+      agent_type: t.agent_type,
+      input_json: t.input_json,
+      status: t.status
+    }))
+  }));
+  const { markdown } = exportMarkdown({ id: s.id, title: s.title, source: s.source_id, project: s.project_path, model: null, started_at: s.started_at, ended_at: s.ended_at }, events, { level });
+  const suffix = level === "off" ? "" : ".redacted";
+  return { markdown, filename: `session-${id.slice(0, 8)}${suffix}.md` };
+}
+
 // ../server/dist/dashboard.js
 function sessionWhere(f) {
   const where = [];
@@ -4707,7 +5025,7 @@ function dashboardBreakdowns(db, f) {
 
 // ../server/dist/refresh.js
 import { existsSync as existsSync5, mkdirSync as mkdirSync5 } from "fs";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 function originAllowed(origin) {
   if (!origin)
     return true;
@@ -4718,14 +5036,22 @@ function originAllowed(origin) {
     return false;
   }
 }
+function writeBlocked(headers) {
+  const site = headers["sec-fetch-site"];
+  const s = Array.isArray(site) ? site[0] : site;
+  if (typeof s === "string" && s !== "same-origin" && s !== "none")
+    return true;
+  const origin = headers["origin"];
+  return !originAllowed(Array.isArray(origin) ? origin[0] : origin);
+}
 function runRefresh() {
   const dataDir = resolveDataDir(findRepoRoot());
-  const lock = acquireLock(join9(dataDir, ".agent-lens.lock"));
+  const lock = acquireLock(join10(dataDir, ".agent-lens.lock"));
   if (!lock)
     return null;
   try {
     const collected = collectAll();
-    const archiveRoot = process.env.AGENT_LENS_ARCHIVE || join9(dataDir, "archive");
+    const archiveRoot = process.env.AGENT_LENS_ARCHIVE || join10(dataDir, "archive");
     if (!existsSync5(archiveRoot))
       mkdirSync5(archiveRoot, { recursive: true });
     runIngest([]);
@@ -4823,8 +5149,24 @@ function setPref(db, key, value) {
 }
 
 // ../server/dist/app.js
+var LOOPBACK_HOSTS = /* @__PURE__ */ new Set(["127.0.0.1", "localhost", "[::1]"]);
 async function createApp(db, opts = {}) {
   const app = Fastify({ logger: false });
+  if (opts.enforceLoopbackHost !== false) {
+    app.addHook("onRequest", async (req, reply) => {
+      const host = (req.headers.host ?? "").replace(/:\d+$/, "");
+      if (!LOOPBACK_HOSTS.has(host)) {
+        return reply.code(403).send({ error: { code: "FORBIDDEN_HOST", message: "non-loopback Host rejected" } });
+      }
+    });
+  }
+  app.addHook("onSend", async (_req, reply, payload) => {
+    reply.header("X-Frame-Options", "DENY");
+    reply.header("X-Content-Type-Options", "nosniff");
+    reply.header("Referrer-Policy", "no-referrer");
+    reply.header("Content-Security-Policy", "frame-ancestors 'none'");
+    return payload;
+  });
   let triageDb = null;
   if (opts.triageDbPath) {
     triageDb = openTriage(opts.triageDbPath);
@@ -4833,7 +5175,7 @@ async function createApp(db, opts = {}) {
     app.addHook("onClose", async () => triageDb?.close());
   }
   const guardWrite = (req, reply) => {
-    if (!originAllowed(req.headers.origin)) {
+    if (writeBlocked(req.headers)) {
       reply.code(403).send({ error: { code: "FORBIDDEN_ORIGIN", message: "cross-origin write blocked" } });
       return false;
     }
@@ -4848,14 +5190,15 @@ async function createApp(db, opts = {}) {
     return { ok: true, last_ingested: lastIngested(db), schema_version: s.db_version, schema_stale: s.stale };
   });
   app.post("/api/refresh", async (req, reply) => {
-    if (!originAllowed(req.headers.origin)) {
+    if (writeBlocked(req.headers)) {
       return reply.code(403).send({ error: { code: "FORBIDDEN_ORIGIN", message: "cross-origin refresh blocked" } });
     }
     let result;
     try {
       result = runRefresh();
     } catch (e) {
-      return reply.code(500).send({ error: { code: "REFRESH_FAILED", message: String(e?.message ?? e) } });
+      console.error("agent-lens-server: refresh failed:", e);
+      return reply.code(500).send({ error: { code: "REFRESH_FAILED", message: "refresh failed; see server logs" } });
     }
     if (!result) {
       return reply.code(409).send({ error: { code: "REFRESH_IN_PROGRESS", message: "a collect/ingest run is already in progress" } });
@@ -5006,34 +5349,11 @@ async function createApp(db, opts = {}) {
   });
   app.get("/api/sessions/:id/export.md", async (req, reply) => {
     const { id } = req.params;
-    const result = getSession(db, id);
-    if (!result)
+    const level = parseRedactionLevel(req.query.redact);
+    const out = renderSessionExport(db, id, level);
+    if (!out)
       return reply.code(404).send({ error: "not found" });
-    const s = result.session;
-    const events = result.events.map((e) => ({
-      type: e.type,
-      role: e.role,
-      timestamp: e.timestamp,
-      text: e.text,
-      thinking: e.thinking,
-      toolCalls: e.toolCalls.map((t) => ({
-        tool_name: t.tool_name,
-        skill_name: t.skill_name,
-        agent_type: t.agent_type,
-        input_json: t.input_json,
-        status: t.status
-      }))
-    }));
-    const md = sessionToMarkdown({
-      id: s.id,
-      title: s.title,
-      source: s.source_id,
-      project: s.project_path,
-      model: null,
-      started_at: s.started_at,
-      ended_at: s.ended_at
-    }, events);
-    reply.header("content-type", "text/markdown; charset=utf-8").header("content-disposition", `attachment; filename="session-${id.slice(0, 8)}.md"`).send(md);
+    reply.header("content-type", "text/markdown; charset=utf-8").header("content-disposition", `attachment; filename="${out.filename}"`).send(out.markdown);
   });
   if (opts.webDist && existsSync6(opts.webDist)) {
     await app.register(fastifyStatic, { root: opts.webDist });
@@ -5047,12 +5367,11 @@ async function createApp(db, opts = {}) {
 }
 
 // ../server/dist/run.js
-async function startServer() {
+async function startServer(overrides = {}) {
   const here = dirname5(fileURLToPath2(import.meta.url));
   const repoRoot = findRepoRoot(here);
-  const dbPath = process.env.AGENT_LENS_DB || join10(resolveDataDir(repoRoot), "agent-lens.db");
-  const host = process.env.AGENT_LENS_HOST || "127.0.0.1";
-  const port = Number(process.env.AGENT_LENS_PORT || 4477);
+  const { path: dbPath } = resolveDbPath(overrides.db);
+  const { host, port } = resolveServerConfig({ port: overrides.port, host: overrides.host });
   const webDist = resolveWebDist(here, repoRoot);
   if (host !== "127.0.0.1" && host !== "localhost" && !process.env.AGENT_LENS_ALLOW_NONLOCAL) {
     console.error(`agent-lens-server: refusing to bind non-loopback host '${host}' (privacy). Set AGENT_LENS_ALLOW_NONLOCAL=1 to override.`);
@@ -5062,9 +5381,10 @@ async function startServer() {
     console.error(`agent-lens-server: db not found: ${dbPath} (run ingest first)`);
     process.exit(1);
   }
-  const triageDbPath = process.env.AGENT_LENS_TRIAGE_DB || join10(dirname5(dbPath), "triage.db");
+  const triageDbPath = process.env.AGENT_LENS_TRIAGE_DB || join11(dirname5(dbPath), "triage.db");
   const db = openReadonly(dbPath);
-  const app = await createApp(db, { webDist, triageDbPath });
+  const enforceLoopbackHost = host === "127.0.0.1" || host === "localhost";
+  const app = await createApp(db, { webDist, triageDbPath, enforceLoopbackHost });
   try {
     await app.listen({ host, port });
     console.log(`agent-lens-server: http://${host}:${port}  (db: ${dbPath})`);
@@ -5078,11 +5398,11 @@ async function startServer() {
 
 // src/watch.ts
 import { existsSync as existsSync8 } from "fs";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 import chokidar from "chokidar";
 async function runWatch(opts = {}) {
   const sources = loadSources();
-  const lockPath = join11(resolveDataDir(findRepoRoot()), ".agent-lens.lock");
+  const lockPath = join12(resolveDataDir(findRepoRoot()), ".agent-lens.lock");
   let running = false;
   let pending = false;
   const cycle = () => {
@@ -5115,7 +5435,7 @@ async function runWatch(opts = {}) {
     }
   };
   cycle();
-  const watchPaths = sources.map((s) => join11(s.configDir, "projects")).filter((p) => existsSync8(p));
+  const watchPaths = sources.map((s) => join12(s.configDir, "projects")).filter((p) => existsSync8(p));
   if (watchPaths.length === 0) {
     console.error("agent-lens watch: no source 'projects' directories found \u2014 nothing to watch");
   }
@@ -5143,14 +5463,14 @@ async function runWatch(opts = {}) {
 // src/index.ts
 function version() {
   try {
-    const pkg = JSON.parse(readFileSync8(join12(dirname6(fileURLToPath3(import.meta.url)), "../package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync8(join13(dirname6(fileURLToPath3(import.meta.url)), "../package.json"), "utf8"));
     return pkg.version ?? "0.0.0";
   } catch {
     return "0.0.0";
   }
 }
 function withLock(fn) {
-  const lockPath = join12(resolveDataDir(findRepoRoot()), ".agent-lens.lock");
+  const lockPath = join13(resolveDataDir(findRepoRoot()), ".agent-lens.lock");
   const lock = acquireLock(lockPath);
   if (!lock) {
     console.error("agent-lens: another collect/ingest run is in progress \u2014 skipping");
@@ -5172,22 +5492,46 @@ cli.command("collect", "Copy new session traces into the local archive").option(
     if (opts.thenIngest) runIngest([]);
   });
 });
-cli.command("ingest", "Build/update the SQLite projection from the archive").option("--full", "Ignore incremental state and re-read every file").option("--db <path>", "SQLite DB path").option("--archive <path>", "Archive directory").action((opts) => {
+cli.command("ingest", "Build/update the SQLite projection from the archive").option("--full", "Ignore incremental state and re-read every file").option("--db <path>", "SQLite DB path (overrides AGENT_LENS_DB / config db)").option("--archive <path>", "Archive directory").action((opts) => {
   const argv = [];
   if (opts.full) argv.push("--full");
   if (opts.db) argv.push("--db", opts.db);
   if (opts.archive) argv.push("--archive", opts.archive);
   withLock(() => runIngest(argv));
 });
-cli.command("serve", "Serve the web UI + read-only API on 127.0.0.1").action(async () => {
-  await startServer();
+cli.command("serve", "Serve the web UI + read-only API on 127.0.0.1").option("--port <n>", "HTTP port (overrides AGENT_LENS_PORT / config server.port; default 4477)").option("--host <host>", "Bind host (overrides AGENT_LENS_HOST / config server.host; loopback only unless AGENT_LENS_ALLOW_NONLOCAL=1)").option("--db <path>", "SQLite DB path (overrides AGENT_LENS_DB / config db)").action(async (opts) => {
+  try {
+    await startServer({ port: opts.port, host: opts.host, db: opts.db });
+  } catch (e) {
+    console.error(e instanceof Error ? e.message : String(e));
+    process.exit(1);
+  }
 });
 cli.command("watch", "Watch sources and collect + ingest on change (resident process)").option("--interval <sec>", "Also run on a fixed interval (seconds)").option("--poll", "Use polling \u2014 for network filesystems where fs events don't fire").action(async (opts) => {
   await runWatch({ intervalSec: opts.interval ? Number(opts.interval) : void 0, poll: !!opts.poll });
 });
-cli.command("metrics", "Re-run classification over an already-ingested DB").option("--db <path>", "SQLite DB path").action((opts) => {
+cli.command("metrics", "Re-run classification over an already-ingested DB").option("--db <path>", "SQLite DB path (overrides AGENT_LENS_DB / config db)").action((opts) => {
   runMetrics(opts.db ? ["--db", opts.db] : []);
 });
+cli.command("export <sessionId>", "Write a session to a shareable Markdown file (redacted by default)").option("--out <file>", "Write to this file (default: stdout)").option("--level <level>", "Redaction level: secrets (default) | structure").option("--no-redact", "Verbatim, UNREDACTED output (opt-out)").option("--db <path>", "SQLite DB path (overrides AGENT_LENS_DB / config db)").action((sessionId, opts) => {
+  const { path: dbPath } = resolveDbPath(opts.db);
+  if (!existsSync9(dbPath)) {
+    console.error(`agent-lens: db not found: ${dbPath} (run ingest first)`);
+    process.exit(1);
+  }
+  const level = opts.redact === false ? "off" : parseRedactionLevel(opts.level);
+  const out = renderSessionExport(openReadonly(dbPath), sessionId, level);
+  if (!out) {
+    console.error(`agent-lens: session not found: ${sessionId}`);
+    process.exit(1);
+  }
+  if (opts.out) {
+    writeFileSync3(opts.out, out.markdown);
+    console.error(`agent-lens: wrote ${out.filename} \u2192 ${opts.out} (redaction: ${level})`);
+  } else {
+    process.stdout.write(out.markdown);
+  }
+});
 cli.command(
   "service <action> [target]",
   "Install/uninstall/status OS services \u2014 action: install|uninstall|status; target: collector|server|all (default all)"
@@ -5196,6 +5540,39 @@ cli.command(
   const hours = action === "install" ? parseHours(opts.times) : void 0;
   runService(action, { cliEntry: fileURLToPath3(import.meta.url), hours, targets });
 });
+cli.command("config", "Show the effective configuration (sources, paths, server) and where each value came from").action(() => {
+  const repoRoot = findRepoRoot();
+  const dataDir = resolveDataDir(repoRoot);
+  const configFile = resolveConfigFile(repoRoot, dataDir);
+  let server;
+  try {
+    server = resolveServerConfig();
+  } catch (e) {
+    console.error(e instanceof Error ? e.message : String(e));
+    process.exit(1);
+  }
+  const { port, host, portOrigin, hostOrigin } = server;
+  const { path: dbPath, origin: dbOrigin } = resolveDbPath();
+  const archive = process.env.AGENT_LENS_ARCHIVE || join13(dataDir, "archive");
+  const triageDb = process.env.AGENT_LENS_TRIAGE_DB || join13(dirname6(dbPath), "triage.db");
+  const keepDays = process.env.AGENT_LENS_VERSIONS_KEEP_DAYS || "90";
+  const keepOrigin = process.env.AGENT_LENS_VERSIONS_KEEP_DAYS ? "env" : "default";
+  console.log("agent-lens config (precedence: flag > env > config file > default)\n");
+  console.log("Paths");
+  console.log(`  config file      ${configFile ?? "(none \u2014 using built-in default source)"}`);
+  console.log(`  data dir         ${dataDir}${process.env.AGENT_LENS_DATA ? "  [env]" : ""}`);
+  console.log(`  archive          ${archive}${process.env.AGENT_LENS_ARCHIVE ? "  [env]" : ""}`);
+  console.log(`  db               ${dbPath}  [${dbOrigin}]`);
+  console.log(`  triage db        ${triageDb}${process.env.AGENT_LENS_TRIAGE_DB ? "  [env]" : ""}`);
+  console.log("\nServer");
+  console.log(`  host             ${host}  [${hostOrigin}]`);
+  console.log(`  port             ${port}  [${portOrigin}]`);
+  console.log(`  non-local bind   ${process.env.AGENT_LENS_ALLOW_NONLOCAL ? "allowed (AGENT_LENS_ALLOW_NONLOCAL)" : "blocked (loopback only)"}`);
+  console.log("\nRetention");
+  console.log(`  .versions keep   ${keepDays} day(s)  [${keepOrigin}]`);
+  console.log("\nSources");
+  for (const s of loadSources()) console.log(`  ${s.label.padEnd(14)} ${s.configDir}  (${s.agent})`);
+});
 cli.help();
 cli.version(version());
 cli.parse();