@synkro-sh/cli 1.6.53 → 1.6.55

package/dist/bootstrap.js

@@ -1670,6 +1670,13 @@ function isSafeBashSegment(seg: string, repoRoot: string): boolean {
     'jq','yq','sort','uniq','cut','tr','xxd','hexdump','od','column',
     'node','npm','pnpm','yarn','bun','python','python3','ruby','go','rustc','cargo',
     'git',
+    // Read-only system / inspection utilities (no mutation, no exec). Deliberately
+    // EXCLUDES curl/wget (exfil + -o write), sed/awk (w/e write+exec), env (command
+    // runner), tree (-o write) \u2014 those stay graded. Keep in sync with scanning/safeRead.ts.
+    'lsof','ps','df','du','uname','hostname','uptime',
+    'basename','dirname','realpath','readlink',
+    'shasum','md5','md5sum','sha256sum','cksum',
+    'docker',
   ]);
   const tokens = seg.trim().split(' ').filter(t => t.length > 0);
   const verb = tokens[0] || '';
@@ -1699,6 +1706,15 @@ function isSafeBashSegment(seg: string, repoRoot: string): boolean {
   } else if (['node','python','python3','ruby','rustc'].includes(verb)) {
     const sub = tokens[1] || '';
     if (sub !== '--version' && sub !== '-v' && sub !== '-V') return false;
+  } else if (verb === 'docker') {
+    // Read-only docker subcommands only \u2014 same gating pattern as git. Excludes
+    // run/exec/rm/rmi/kill/stop/start/build/buildx/push/pull/cp/commit/save/load/
+    // compose and every mutating verb; those fall through to the judge.
+    const SAFE_DOCKER = new Set([
+      'ps','logs','images','inspect','version','info','top','port','history','diff',
+    ]);
+    const sub = tokens[1] || '';
+    if (!SAFE_DOCKER.has(sub)) return false;
   }
   if (!repoRoot) return false;
   for (let i = 1; i < tokens.length; i++) {
@@ -7341,6 +7357,510 @@ var init_promptFetcher = __esm({
   }
 });
 
+// cli/installer/claudeDesktopTap.ts
+var claudeDesktopTap_exports = {};
+__export(claudeDesktopTap_exports, {
+  claudeDesktopInstalled: () => claudeDesktopInstalled,
+  runClaudeDesktopTap: () => runClaudeDesktopTap
+});
+import { spawn } from "child_process";
+import { writeFileSync as writeFileSync6, mkdtempSync, readFileSync as readFileSync5, existsSync as existsSync7 } from "fs";
+import { join as join5 } from "path";
+import { tmpdir, homedir as homedir5 } from "os";
+function claudeDesktopInstalled() {
+  return process.platform === "darwin" && existsSync7("/Applications/Claude.app/Contents/MacOS/Claude");
+}
+function buildRunner(sessionDir) {
+  return `#!/bin/bash
+set -e
+SESSION_DIR=${JSON.stringify(sessionDir)}
+PROXY_PORT=8080
+MITM_CA_DIR="$SESSION_DIR/ca"
+TAP_SCRIPT="$SESSION_DIR/tap.py"
+CA_FINGERPRINT=""
+MITM_PID=""
+SUDO_KEEPALIVE_PID=""
+MCP_PROXY="$SESSION_DIR/mcp_proxy.py"
+MCP_PATCH="$SESSION_DIR/mcp_patch.py"
+CLAUDE_CONFIG="$HOME/Library/Application Support/Claude/claude_desktop_config.json"
+CLAUDE_CONFIG_BACKUP="$SESSION_DIR/claude_desktop_config.backup.json"
+MCP_PATCHED=false
+
+cleanup() {
+  echo ""
+  echo "Stopping Claude Desktop observability..."
+  [ -n "$MITM_PID" ] && kill "$MITM_PID" 2>/dev/null
+  [ -n "$SUDO_KEEPALIVE_PID" ] && kill "$SUDO_KEEPALIVE_PID" 2>/dev/null
+  # Restore the original MCP config (unwrap the proxy) on exit.
+  if [ "$MCP_PATCHED" = "true" ] && [ -f "$CLAUDE_CONFIG_BACKUP" ]; then
+    cp "$CLAUDE_CONFIG_BACKUP" "$CLAUDE_CONFIG" && echo "  MCP config restored"
+  fi
+  if [ -n "$CA_FINGERPRINT" ]; then
+    # Non-interactive (-n) so teardown can NEVER hang on a sudo password prompt
+    # (which would swallow the user's Ctrl+C). The keepalive below keeps creds
+    # warm so this normally succeeds without a prompt.
+    if sudo -n security delete-certificate -Z "$CA_FINGERPRINT" -t /Library/Keychains/System.keychain 2>/dev/null; then
+      echo "  Session CA removed from keychain"
+    else
+      echo "  Could not auto-remove the session CA (sudo timed out)."
+      echo "  Remove it manually: sudo security delete-certificate -c mitmproxy /Library/Keychains/System.keychain"
+    fi
+  fi
+  echo "Done."
+  exit 0
+}
+trap cleanup INT TERM EXIT
+
+if ! command -v mitmdump &>/dev/null; then
+  echo "Installing mitmproxy..."
+  if command -v brew &>/dev/null; then brew install mitmproxy; else echo "mitmproxy required: brew install mitmproxy"; exit 1; fi
+fi
+
+mkdir -p "$MITM_CA_DIR"
+echo "Generating session CA certificate..."
+mitmdump --set confdir="$MITM_CA_DIR" --listen-port 0 </dev/null &>/dev/null &
+TMPPID=$!; sleep 2; kill $TMPPID 2>/dev/null || true
+
+echo "Trusting session CA (sudo \u2014 removed automatically on exit)..."
+sudo security add-trusted-cert -d -r trustRoot -k "/Library/Keychains/System.keychain" "$MITM_CA_DIR/mitmproxy-ca-cert.pem"
+CA_FINGERPRINT=$(openssl x509 -in "$MITM_CA_DIR/mitmproxy-ca-cert.pem" -noout -fingerprint -sha1 2>/dev/null | sed "s/.*=//;s/://g")
+
+# Keep the sudo timestamp warm for the life of the session so teardown's CA
+# removal never blocks on a password prompt (a prompt would eat Ctrl+C). Exits
+# itself if creds are ever revoked. Killed in cleanup().
+( while true; do sudo -n true 2>/dev/null || exit 0; sleep 30; done ) &
+SUDO_KEEPALIVE_PID=$!
+
+lsof -ti:$PROXY_PORT 2>/dev/null | xargs kill 2>/dev/null || true
+osascript -e 'tell app "Claude" to quit' 2>/dev/null || true
+sleep 1
+
+# Patch Claude Desktop's MCP config to wrap each server with the Synkro stdio
+# proxy (restored on exit). Capture URL + token come from the inherited env.
+if [ -f "$CLAUDE_CONFIG" ]; then
+  cp "$CLAUDE_CONFIG" "$CLAUDE_CONFIG_BACKUP"
+  if python3 "$MCP_PATCH" "$CLAUDE_CONFIG" "$MCP_PROXY" "$SYNKRO_CAPTURE_URL" "$SYNKRO_TAP_TOKEN" 2>/dev/null; then
+    MCP_PATCHED=true
+    echo "MCP servers wrapped with Synkro proxy"
+  else
+    echo "No MCP servers configured \u2014 skipping MCP proxy"
+    cp "$CLAUDE_CONFIG_BACKUP" "$CLAUDE_CONFIG" 2>/dev/null || true
+  fi
+fi
+
+echo "Starting proxy on :$PROXY_PORT..."
+# stdin from /dev/null so mitmdump can't grab the TTY in raw mode \u2014 otherwise it
+# captures keypresses (incl. Ctrl+C) instead of letting them become a signal.
+mitmdump --set confdir="$MITM_CA_DIR" --listen-port $PROXY_PORT --mode regular -s "$TAP_SCRIPT" </dev/null &>/tmp/synkro-mitm.log &
+MITM_PID=$!
+sleep 2
+
+CLAUDE_BIN=""
+for p in "/Applications/Claude.app/Contents/MacOS/Claude" "/Volumes/Claude/Claude.app/Contents/MacOS/Claude"; do
+  [ -f "$p" ] && CLAUDE_BIN="$p" && break
+done
+if [ -z "$CLAUDE_BIN" ]; then
+  CLAUDE_BIN="$(mdfind 'kMDItemFSName == "Claude.app"' 2>/dev/null | head -1)/Contents/MacOS/Claude"
+fi
+if [ ! -f "$CLAUDE_BIN" ]; then echo "Claude Desktop not found."; exit 1; fi
+
+echo "Launching Claude Desktop..."
+"$CLAUDE_BIN" --proxy-server="http://localhost:$PROXY_PORT" &>/dev/null &
+
+echo ""
+echo "  \u2713 Claude Desktop is being monitored by Synkro (local)."
+echo "    Your conversations will appear in the dashboard Events page."
+echo "    Press Ctrl+C to stop (this removes the session CA cleanly)."
+echo ""
+wait $MITM_PID
+`;
+}
+async function runClaudeDesktopTap() {
+  if (process.platform !== "darwin") {
+    console.log("  Claude Desktop observability is macOS-only \u2014 skipped.");
+    return;
+  }
+  let token = "";
+  try {
+    token = readFileSync5(JWT_PATH, "utf-8").trim();
+  } catch {
+  }
+  if (!token) {
+    console.log("  Could not read local auth token (~/.synkro/.mcp-jwt). Run `synkro install` first.");
+    return;
+  }
+  const sessionDir = mkdtempSync(join5(tmpdir(), "synkro-cd-"));
+  writeFileSync6(join5(sessionDir, "tap.py"), ADDON_PY, "utf-8");
+  writeFileSync6(join5(sessionDir, "mcp_proxy.py"), MCP_PROXY_PY, { mode: 493 });
+  writeFileSync6(join5(sessionDir, "mcp_patch.py"), MCP_PATCH_PY, "utf-8");
+  const runnerPath = join5(sessionDir, "run.sh");
+  writeFileSync6(runnerPath, buildRunner(sessionDir), { mode: 493 });
+  await new Promise((resolve4) => {
+    const child = spawn("bash", [runnerPath], {
+      stdio: "inherit",
+      env: { ...process.env, SYNKRO_CAPTURE_URL: CAPTURE_URL, SYNKRO_TAP_TOKEN: token }
+    });
+    const forward = (sig) => {
+      try {
+        child.kill(sig);
+      } catch {
+      }
+    };
+    process.on("SIGINT", forward);
+    process.on("SIGTERM", forward);
+    child.on("exit", () => {
+      process.off("SIGINT", forward);
+      process.off("SIGTERM", forward);
+      resolve4();
+    });
+  });
+}
+var CAPTURE_URL, JWT_PATH, ADDON_PY, MCP_PROXY_PY, MCP_PATCH_PY;
+var init_claudeDesktopTap = __esm({
+  "cli/installer/claudeDesktopTap.ts"() {
+    "use strict";
+    CAPTURE_URL = "http://127.0.0.1:18931/api/local/capture";
+    JWT_PATH = join5(homedir5(), ".synkro", ".mcp-jwt");
+    ADDON_PY = `import os, json, threading, urllib.request, re
+from mitmproxy import http
+
+CAPTURE_URL = os.environ.get("SYNKRO_CAPTURE_URL", "")
+TOKEN = os.environ.get("SYNKRO_TAP_TOKEN", "")
+
+# Governance signals parsed from the completion SSE (usage window + web-search
+# sources), keyed by conversation id. The completion POST always precedes the
+# tree GET for the same turn, so the tree capture below reads + clears this.
+# Guarded by a lock \u2014 tap callbacks can run concurrently across flows (CWE-362).
+_sse_meta = {}
+_sse_lock = threading.Lock()
+# Session-global MCP server registry (uuid -> {name,url,connected,tools}), parsed
+# from the mcp/v2/bootstrap SSE. All access guarded by _mcp_lock (CWE-362).
+_mcp_registry = {}
+_mcp_lock = threading.Lock()
+
+class SynkroTap:
+    def responseheaders(self, flow):
+        # Buffer the small conversation-tree GET (parsed for the dashboard).
+        # For the completion POST, TAP the SSE chunk-by-chunk and pass each
+        # through unchanged \u2014 Claude Desktop keeps streaming normally while we
+        # accumulate a bounded copy for the raw diagnostic dump. Everything else
+        # streams untouched.
+        r = flow.request
+        if "claude.ai" in (r.pretty_host or "") and "chat_conversations" in r.path:
+            if r.method == "GET" and "tree" in r.pretty_url:
+                return
+            if r.method == "POST" and "completion" in r.path:
+                cm = re.search(r"chat_conversations/([0-9a-fA-F-]+)", r.path)
+                cid = cm.group(1) if cm else ""
+                # Incremental parse: scan complete SSE lines for the small governance
+                # signals AS THEY STREAM and keep only the extracted results \u2014 never
+                # buffer the body. The carry holds at most one partial line (bounded),
+                # so there's NO cap on total stream length and no source is dropped.
+                st = {"carry": "", "usage": None, "sources": [], "seen": set(), "citations": [], "cseen": set()}
+                def _scan(line, _st=st):
+                    if _st["usage"] is None:
+                        um = re.search(r'"5h":\\{"status":"([^"]*)","resets_at":(\\d+),"utilization":([0-9.]+)', line)
+                        if um:
+                            _st["usage"] = {"window": "5h", "status": um.group(1), "resets_at": int(um.group(2)), "utilization": float(um.group(3))}
+                    if len(_st["sources"]) < 50:
+                        for sm in re.finditer(r'"webpage_metadata","site_domain":"([^"]*)"(?:,"favicon_url":"[^"]*")?,"site_name":"([^"]*)"', line):
+                            d = sm.group(1)
+                            if d and d not in _st["seen"] and len(_st["sources"]) < 50:
+                                _st["seen"].add(d)
+                                _st["sources"].append({"domain": d, "name": sm.group(2)})
+                    # Citations: the specific pages the model cited (title + url +
+                    # domain) \u2014 the real "tool result" for web search.
+                    if "citation_start_delta" in line and line.startswith("data: ") and len(_st["citations"]) < 50:
+                        try:
+                            cit = json.loads(line[6:]).get("delta", {}).get("citation", {})
+                            url = cit.get("url", "")
+                            if url and url not in _st["cseen"]:
+                                _st["cseen"].add(url)
+                                md = cit.get("metadata") or {}
+                                _st["citations"].append({"title": cit.get("title", ""), "url": url, "domain": md.get("site_domain", "")})
+                        except Exception:
+                            pass
+                def _tap(data, _st=st, _cid=cid):
+                    if data:
+                        try:
+                            txt = _st["carry"] + data.decode("utf-8", "replace")
+                        except Exception:
+                            txt = _st["carry"]
+                        lines = txt.split("\\n")
+                        _st["carry"] = lines[-1][-200000:]  # bound the carried partial line (CWE-400)
+                        for ln in lines[:-1]:
+                            _scan(ln)
+                    else:  # end of stream \u2014 flush carry + publish
+                        _scan(_st["carry"])
+                        if (_st["usage"] or _st["sources"] or _st["citations"]) and _cid:
+                            with _sse_lock:
+                                _sse_meta[_cid] = {"usage": _st["usage"], "sources": _st["sources"], "citations": _st["citations"]}
+                    return data
+                flow.response.stream = _tap
+                return
+        if "claude.ai" in (r.pretty_host or "") and "mcp" in r.path and "bootstrap" in r.path:
+            return  # buffer the MCP registry bootstrap (parsed in response())
+        flow.response.stream = True
+
+    def response(self, flow):
+        r = flow.request
+        if "claude.ai" not in (r.pretty_host or ""): return
+        # MCP server registry from the bootstrap SSE stream.
+        if "mcp" in r.path and "bootstrap" in r.path and flow.response:
+            try:
+                servers = {}
+                for line in (flow.response.get_text() or "").split("\\n"):
+                    if not line.startswith("data: "): continue
+                    try: dd = json.loads(line[6:])
+                    except: continue
+                    if isinstance(dd.get("servers"), list):
+                        for s in dd["servers"]:
+                            sid = s.get("uuid", "")
+                            if sid: servers[sid] = {"name": s.get("name", ""), "url": s.get("url", ""), "connected": False, "tools": []}
+                    if "uuid" in dd and "connected" in dd and dd.get("uuid") in servers:
+                        servers[dd["uuid"]]["connected"] = dd.get("connected", False)
+                    if "server_uuid" in dd and isinstance(dd.get("tools"), list) and dd.get("server_uuid") in servers:
+                        for t in dd["tools"]:
+                            servers[dd["server_uuid"]]["tools"].append({"name": t.get("name", ""), "description": (t.get("description") or "")[:200]})
+                if servers:
+                    with _mcp_lock:
+                        _mcp_registry.clear()
+                        _mcp_registry.update(servers)
+                    print("[synkro] MCP servers: " + str(len(servers)))
+            except Exception:
+                pass
+            return
+        if not ("chat_conversations" in r.path and r.method == "GET" and "tree" in r.pretty_url and flow.response): return
+        if not CAPTURE_URL or not TOKEN: return
+        try: convo = json.loads(flow.response.get_text())
+        except: return
+        m = re.search(r"chat_conversations/([0-9a-fA-F-]+)", r.path)
+        convo_id = m.group(1) if m else ""
+        model = convo.get("model", "unknown")
+        settings = convo.get("settings") or {}
+        emt = settings.get("enabled_mcp_tools")
+        enabled_mcp = list(emt.keys()) if isinstance(emt, dict) else []
+        web_search_on = bool(settings.get("enabled_web_search", False))
+        platform = convo.get("platform", "")
+        all_msgs = convo.get("chat_messages", [])
+        if not all_msgs: return
+        # Current turn only: last human message and everything after it.
+        last_human = -1
+        for i in range(len(all_msgs) - 1, -1, -1):
+            if all_msgs[i].get("sender") == "human": last_human = i; break
+        chat = all_msgs[last_human:] if last_human >= 0 else all_msgs[-2:]
+        messages = []
+        for msg in chat:
+            sender = msg.get("sender", "")
+            role = "user" if sender == "human" else "assistant"
+            blocks = msg.get("content", [])
+            text_parts = []
+            tool_calls = []
+            tool_results = []
+            thinking = ""
+            if isinstance(blocks, list):
+                for b in blocks:
+                    if isinstance(b, str): text_parts.append(b); continue
+                    if not isinstance(b, dict): continue
+                    bt = b.get("type", "")
+                    if bt == "text":
+                        text_parts.append(b.get("text", ""))
+                    elif bt == "thinking":
+                        thinking += b.get("thinking", "") or b.get("text", "")
+                    elif bt == "tool_use" or bt == "server_tool_use":
+                        tool_calls.append({"name": b.get("name", ""), "id": b.get("id", ""), "arguments": json.dumps(b.get("input", {}))})
+                    elif bt.endswith("_tool_result") or bt == "tool_result":
+                        rc = b.get("content", "")
+                        if isinstance(rc, list):
+                            rparts = []
+                            for x in rc:
+                                if not isinstance(x, dict): continue
+                                if x.get("type") == "web_search_result":
+                                    sn = x.get("page_content", "") or x.get("snippet", "") or x.get("content", "") or ""
+                                    if isinstance(sn, dict): sn = sn.get("text", "")
+                                    rparts.append((x.get("title", "") + " (" + x.get("url", "") + ")" + ((" - " + str(sn)[:200]) if sn else "")).strip())
+                                elif x.get("text"):
+                                    rparts.append(x["text"])
+                                elif isinstance(x.get("content"), str):
+                                    rparts.append(x["content"])
+                            rc = " | ".join(p for p in rparts if p and p.strip())
+                        dc = b.get("display_content")
+                        if isinstance(dc, dict):
+                            rc = rc or dc.get("json_block", "") or dc.get("text", "")
+                        # web_search results are server-side (content:[]); we surface the
+                        # sources via sse_meta instead. Only record a non-empty result.
+                        if rc and str(rc).strip():
+                            tool_results.append({"name": b.get("name", ""), "content": str(rc)})
+            elif isinstance(blocks, str):
+                text_parts.append(blocks)
+            text = " ".join(p for p in text_parts if p).strip()
+            if role == "assistant":
+                am = {"role": "assistant", "content": text}
+                if tool_calls: am["tool_calls"] = tool_calls
+                if thinking: am["thinking"] = thinking
+                if text or tool_calls or thinking: messages.append(am)
+                for tr in tool_results:
+                    messages.append({"role": "tool", "content": tr["content"], "name": tr.get("name", "")})
+            elif role == "user" and text:
+                messages.append({"role": "user", "content": text})
+        if not messages: return
+        data = {"request": {"model": model, "messages": messages}, "conversation_id": convo_id}
+        meta = {}
+        if platform: meta["platform"] = platform
+        if web_search_on: meta["web_search_enabled"] = True
+        if enabled_mcp: meta["enabled_mcp_tools"] = enabled_mcp[:20]
+        if meta: data["conversation_metadata"] = meta
+        with _sse_lock:
+            sm = _sse_meta.pop(convo_id, None)
+        if sm: data["sse_meta"] = sm
+        with _mcp_lock:
+            reg = list(_mcp_registry.values())
+        if reg: data["mcp_servers"] = reg
+        ntools = 0
+        for mm in messages:
+            ntools += len(mm.get("tool_calls") or [])
+        nsrc = len((sm or {}).get("sources") or [])
+        print("[synkro] captured chat (msgs=" + str(len(messages)) + " tools=" + str(ntools) + " sources=" + str(nsrc) + " model=" + model + ")")
+        def send(_d=data):
+            try:
+                req = urllib.request.Request(CAPTURE_URL, data=json.dumps(_d).encode(), headers={"Content-Type": "application/json", "Authorization": "Bearer " + TOKEN})
+                urllib.request.urlopen(req, timeout=5)
+            except Exception as e:
+                print("[synkro] capture error: " + str(e))
+        threading.Thread(target=send, daemon=True).start()
+
+addons = [SynkroTap()]
+`;
+    MCP_PROXY_PY = `#!/usr/bin/env python3
+"""Synkro MCP Proxy (local) \u2014 stdio passthrough that taps MCP tool calls."""
+import sys, os, json, subprocess, threading, urllib.request, time
+
+CAPTURE_URL = os.environ.get("SYNKRO_CAPTURE_URL", "")
+TOKEN = os.environ.get("SYNKRO_TAP_TOKEN", "")
+SERVER_NAME = os.environ.get("SYNKRO_MCP_SERVER", "unknown")
+
+pending = {}
+pending_lock = threading.Lock()
+
+def send_capture(tool_name, tool_args, tool_result, latency_ms):
+    if not CAPTURE_URL or not TOKEN: return
+    try:
+        payload = json.dumps({
+            "request": {
+                "model": "mcp:" + SERVER_NAME,
+                "messages": [
+                    {"role": "assistant", "content": "", "tool_calls": [{"name": tool_name, "arguments": json.dumps(tool_args)}]},
+                    {"role": "tool", "content": json.dumps(tool_result), "name": tool_name},
+                ]
+            },
+            "mcp": {"server": SERVER_NAME, "tool": tool_name, "latency_ms": latency_ms}
+        }).encode()
+        req = urllib.request.Request(CAPTURE_URL, data=payload, headers={"Content-Type": "application/json", "Authorization": "Bearer " + TOKEN})
+        urllib.request.urlopen(req, timeout=5)
+    except Exception as e:
+        print("[synkro-mcp] capture error: " + str(e), file=sys.stderr)
+
+def tap_message(data, direction):
+    if not isinstance(data, dict): return
+    method = data.get("method")
+    msg_id = data.get("id")
+    if direction == "request" and method == "tools/call":
+        params = data.get("params", {})
+        tool_name = params.get("name", "unknown")
+        tool_args = params.get("arguments", {})
+        if msg_id is not None:
+            with pending_lock:
+                if len(pending) < 1000:
+                    pending[msg_id] = {"name": tool_name, "args": tool_args, "start": time.time()}
+        print("[synkro-mcp] " + SERVER_NAME + "." + str(tool_name), file=sys.stderr)
+    if direction == "response" and msg_id is not None:
+        with pending_lock:
+            call = pending.pop(msg_id, None)
+        if call:
+            latency_ms = int((time.time() - call["start"]) * 1000)
+            result = data.get("result", data.get("error", {}))
+            threading.Thread(target=send_capture, args=(call["name"], call["args"], result, latency_ms), daemon=True).start()
+
+def read_jsonrpc(stream):
+    buf = b""
+    while True:
+        chunk = stream.read(1)
+        if not chunk: return None
+        if len(buf) < 5000000:  # bound the line buffer (CWE-400)
+            buf += chunk
+        if chunk == b"\\n":
+            line = buf.strip()
+            buf = b""
+            if not line: continue
+            try: return json.loads(line)
+            except: continue
+
+def forward_stdin(proc):
+    while True:
+        msg = read_jsonrpc(sys.stdin.buffer)
+        if msg is None: break
+        tap_message(msg, "request")
+        line = json.dumps(msg) + "\\n"
+        try:
+            proc.stdin.write(line.encode())
+            proc.stdin.flush()
+        except: break
+
+def main():
+    args = sys.argv[1:]
+    if "--" in args:
+        sep = args.index("--")
+        args = args[sep + 1:]
+    if not args:
+        print("Usage: mcp_proxy.py -- <command> [args...]", file=sys.stderr)
+        sys.exit(1)
+    # Spawn the user's own configured MCP server (from claude_desktop_config.json).
+    proc = subprocess.Popen(args, stdin=subprocess.PIPE, stdout=subprocess.PIPE, stderr=sys.stderr)
+    t = threading.Thread(target=forward_stdin, args=(proc,), daemon=True)
+    t.start()
+    while True:
+        msg = read_jsonrpc(proc.stdout)
+        if msg is None: break
+        tap_message(msg, "response")
+        line = json.dumps(msg) + "\\n"
+        try:
+            sys.stdout.buffer.write(line.encode())
+            sys.stdout.buffer.flush()
+        except: break
+    proc.wait()
+    sys.exit(proc.returncode)
+
+if __name__ == "__main__":
+    main()
+`;
+    MCP_PATCH_PY = `import json, sys
+config_path, proxy_path, capture_url, token = sys.argv[1:5]
+with open(config_path) as f: config = json.load(f)
+servers = config.get("mcpServers", {})
+if not servers:
+    print("No MCP servers configured")
+    sys.exit(1)
+patched = 0
+for name, server in servers.items():
+    if server.get("_synkro_original"): continue
+    orig_cmd = server.get("command", "")
+    orig_args = server.get("args", [])
+    if not orig_cmd: continue
+    server["_synkro_original"] = {"command": orig_cmd, "args": orig_args}
+    server["command"] = "python3"
+    server["args"] = [proxy_path, "--", orig_cmd] + orig_args
+    env = server.get("env", {})
+    env["SYNKRO_CAPTURE_URL"] = capture_url
+    env["SYNKRO_TAP_TOKEN"] = token
+    env["SYNKRO_MCP_SERVER"] = name
+    server["env"] = env
+    patched += 1
+with open(config_path, "w") as f: json.dump(config, f, indent=2)
+print("Patched " + str(patched) + " MCP servers")
+`;
+  }
+});
+
 // cli/local-cc/macKeychain.ts
 var macKeychain_exports = {};
 __export(macKeychain_exports, {
@@ -7363,9 +7883,9 @@ __export(macKeychain_exports, {
   writeCursorApiKey: () => writeCursorApiKey,
   writeRefreshAgent: () => writeRefreshAgent
 });
-import { existsSync as existsSync7, mkdirSync as mkdirSync6, writeFileSync as writeFileSync6, chmodSync, readFileSync as readFileSync5, statSync } from "fs";
-import { homedir as homedir5, platform as platform2 } from "os";
-import { join as join5 } from "path";
+import { existsSync as existsSync8, mkdirSync as mkdirSync6, writeFileSync as writeFileSync7, chmodSync, readFileSync as readFileSync6, statSync } from "fs";
+import { homedir as homedir6, platform as platform2 } from "os";
+import { join as join6 } from "path";
 import { spawnSync } from "child_process";
 function needsKeychainBridge() {
   return platform2() === "darwin";
@@ -7385,13 +7905,13 @@ function exportKeychainCreds() {
   if (!blob) return null;
   mkdirSync6(CLAUDE_CREDS_DIR, { recursive: true });
   chmodSync(CLAUDE_CREDS_DIR, 448);
-  writeFileSync6(CLAUDE_CREDS_FILE, blob, "utf-8");
+  writeFileSync7(CLAUDE_CREDS_FILE, blob, "utf-8");
   chmodSync(CLAUDE_CREDS_FILE, 384);
   return CLAUDE_CREDS_FILE;
 }
 function cursorApiKeyConfigured() {
   try {
-    return existsSync7(CURSOR_API_KEY_FILE) && readFileSync5(CURSOR_API_KEY_FILE, "utf-8").trim().length > 0;
+    return existsSync8(CURSOR_API_KEY_FILE) && readFileSync6(CURSOR_API_KEY_FILE, "utf-8").trim().length > 0;
   } catch {
     return false;
   }
@@ -7401,13 +7921,13 @@ function writeCursorApiKey(key) {
   if (!trimmed) return;
   mkdirSync6(CURSOR_CREDS_DIR, { recursive: true });
   chmodSync(CURSOR_CREDS_DIR, 448);
-  writeFileSync6(CURSOR_API_KEY_FILE, trimmed, "utf-8");
+  writeFileSync7(CURSOR_API_KEY_FILE, trimmed, "utf-8");
   chmodSync(CURSOR_API_KEY_FILE, 384);
 }
 async function validateCursorApiKey() {
   let key;
   try {
-    key = readFileSync5(CURSOR_API_KEY_FILE, "utf-8").trim();
+    key = readFileSync6(CURSOR_API_KEY_FILE, "utf-8").trim();
   } catch {
     return null;
   }
@@ -7426,7 +7946,7 @@ async function validateCursorApiKey() {
   }
 }
 function credsAreStale() {
-  if (!existsSync7(CLAUDE_CREDS_FILE)) return true;
+  if (!existsSync8(CLAUDE_CREDS_FILE)) return true;
   try {
     const ageMs = Date.now() - statSync(CLAUDE_CREDS_FILE).mtimeMs;
     return ageMs > REFRESH_INTERVAL_SECONDS * 1e3;
@@ -7438,7 +7958,7 @@ function writeRefreshAgent(synkroBinPath) {
   if (platform2() !== "darwin") {
     throw new KeychainExportError("writeRefreshAgent is darwin-only");
   }
-  mkdirSync6(join5(homedir5(), "Library", "LaunchAgents"), { recursive: true });
+  mkdirSync6(join6(homedir6(), "Library", "LaunchAgents"), { recursive: true });
   const shellCmd = `export PATH="/opt/homebrew/bin:/usr/local/bin:$PATH" && { "${synkroBinPath}" local-cc refresh-creds || synkro local-cc refresh-creds; }`;
   const plist = `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
@@ -7457,13 +7977,13 @@ function writeRefreshAgent(synkroBinPath) {
   <key>RunAtLoad</key>
   <true/>
   <key>StandardErrorPath</key>
-  <string>${join5(SYNKRO_DIR, "claude-creds-refresh.log")}</string>
+  <string>${join6(SYNKRO_DIR, "claude-creds-refresh.log")}</string>
   <key>StandardOutPath</key>
-  <string>${join5(SYNKRO_DIR, "claude-creds-refresh.log")}</string>
+  <string>${join6(SYNKRO_DIR, "claude-creds-refresh.log")}</string>
 </dict>
 </plist>
 `;
-  writeFileSync6(LAUNCHD_PLIST, plist, "utf-8");
+  writeFileSync7(LAUNCHD_PLIST, plist, "utf-8");
   return LAUNCHD_PLIST;
 }
 function loadRefreshAgent() {
@@ -7489,7 +8009,7 @@ function uninstallRefreshAgent() {
     timeout: 5e3
   });
   try {
-    if (existsSync7(LAUNCHD_PLIST)) {
+    if (existsSync8(LAUNCHD_PLIST)) {
       __require("fs").unlinkSync(LAUNCHD_PLIST);
     }
   } catch {
@@ -7501,7 +8021,7 @@ function refreshCreds() {
 }
 function readExportedCreds() {
   try {
-    return readFileSync5(CLAUDE_CREDS_FILE, "utf-8");
+    return readFileSync6(CLAUDE_CREDS_FILE, "utf-8");
   } catch {
     return null;
   }
@@ -7510,14 +8030,14 @@ var SYNKRO_DIR, CLAUDE_CREDS_DIR, CLAUDE_CREDS_FILE, CURSOR_CREDS_DIR, CURSOR_AP
 var init_macKeychain = __esm({
   "cli/local-cc/macKeychain.ts"() {
     "use strict";
-    SYNKRO_DIR = join5(homedir5(), ".synkro");
-    CLAUDE_CREDS_DIR = join5(SYNKRO_DIR, "claude-creds");
-    CLAUDE_CREDS_FILE = join5(CLAUDE_CREDS_DIR, ".credentials.json");
-    CURSOR_CREDS_DIR = join5(SYNKRO_DIR, "cursor-creds");
-    CURSOR_API_KEY_FILE = join5(CURSOR_CREDS_DIR, "api-key");
+    SYNKRO_DIR = join6(homedir6(), ".synkro");
+    CLAUDE_CREDS_DIR = join6(SYNKRO_DIR, "claude-creds");
+    CLAUDE_CREDS_FILE = join6(CLAUDE_CREDS_DIR, ".credentials.json");
+    CURSOR_CREDS_DIR = join6(SYNKRO_DIR, "cursor-creds");
+    CURSOR_API_KEY_FILE = join6(CURSOR_CREDS_DIR, "api-key");
     KEYCHAIN_SERVICE = "Claude Code-credentials";
     LAUNCHD_LABEL = "com.synkro.cli.claude-creds-refresh";
-    LAUNCHD_PLIST = join5(homedir5(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
+    LAUNCHD_PLIST = join6(homedir6(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
     REFRESH_INTERVAL_SECONDS = 45 * 60;
     KeychainExportError = class extends Error {
       constructor(message, cause) {
@@ -7554,9 +8074,9 @@ __export(dockerInstall_exports, {
   waitForContainerReady: () => waitForContainerReady,
   waitForWorkersReady: () => waitForWorkersReady
 });
-import { copyFileSync, existsSync as existsSync8, mkdirSync as mkdirSync7, readFileSync as readFileSync6, readdirSync as readdirSync2 } from "fs";
-import { homedir as homedir6 } from "os";
-import { join as join6 } from "path";
+import { copyFileSync, existsSync as existsSync9, mkdirSync as mkdirSync7, readFileSync as readFileSync7, readdirSync as readdirSync2 } from "fs";
+import { homedir as homedir7 } from "os";
+import { join as join7 } from "path";
 import { execSync as execSync4, spawnSync as spawnSync2 } from "child_process";
 function splitWorkers(total, providers) {
   const t = Math.max(0, Math.floor(total));
@@ -7651,9 +8171,9 @@ function readSynkroFileConfig() {
   try {
     const root = execSync4("git rev-parse --show-toplevel 2>/dev/null", { encoding: "utf-8", timeout: 3e3, stdio: ["pipe", "pipe", "pipe"] }).trim();
     if (!root) return { pool: "auto", warnings: [] };
-    const fp = join6(root, "synkro.toml");
-    if (!existsSync8(fp)) return { pool: "auto", warnings: [] };
-    const parsed = parseSynkroToml(readFileSync6(fp, "utf-8"));
+    const fp = join7(root, "synkro.toml");
+    if (!existsSync9(fp)) return { pool: "auto", warnings: [] };
+    const parsed = parseSynkroToml(readFileSync7(fp, "utf-8"));
     return resolveGraderPool(parsed);
   } catch {
   }
@@ -7728,7 +8248,7 @@ function assertDockerAvailable() {
 }
 function claudeCredsHostDir() {
   if (needsKeychainBridge()) return CLAUDE_CREDS_DIR;
-  return join6(homedir6(), ".claude");
+  return join7(homedir7(), ".claude");
 }
 function resolveSynkroBin() {
   const which2 = spawnSync2("which", ["synkro"], { encoding: "utf-8", timeout: 5e3 });
@@ -7784,11 +8304,11 @@ async function dockerInstall(opts = {}) {
   mkdirSync7(PGDATA_PATH, { recursive: true });
   mkdirSync7(BACKUP_DIR, { recursive: true });
   mkdirSync7(CLAUDE_HOST_STATE_DIR, { recursive: true });
-  const hostClaudeJson = join6(homedir6(), ".claude.json");
-  if (existsSync8(hostClaudeJson)) {
+  const hostClaudeJson = join7(homedir7(), ".claude.json");
+  if (existsSync9(hostClaudeJson)) {
     copyFileSync(hostClaudeJson, CLAUDE_HOST_STATE_FILE);
   }
-  if (!existsSync8(MCP_JWT_PATH)) {
+  if (!existsSync9(MCP_JWT_PATH)) {
     throw new DockerInstallError(
       `MCP JWT missing at ${MCP_JWT_PATH}. The installer should mint this before calling dockerInstall.`
     );
@@ -7816,7 +8336,7 @@ async function dockerInstall(opts = {}) {
       console.warn(`    Plist written to ${plist} \u2014 load manually with launchctl bootstrap when ready.`);
     }
   } else {
-    mkdirSync7(join6(homedir6(), ".claude"), { recursive: true });
+    mkdirSync7(join7(homedir7(), ".claude"), { recursive: true });
   }
   const imageExistsLocally = () => spawnSync2("docker", ["image", "inspect", image], { stdio: "ignore", timeout: 3e4 }).status === 0;
   const skipPull = process.env.SYNKRO_SKIP_PULL === "1" || process.env.SYNKRO_SKIP_PULL === "true";
@@ -7869,7 +8389,7 @@ async function dockerInstall(opts = {}) {
     "-v",
     `${credsDir}:/home/synkro/.claude:rw`,
     "-v",
-    `${join6(homedir6(), ".claude")}:/data/claude-host:ro`,
+    `${join7(homedir7(), ".claude")}:/data/claude-host:ro`,
     "-v",
     `${CLAUDE_HOST_STATE_DIR}:/data/claude-host-state:ro`,
     // Cursor creds — mounted RW so the in-container refresher can rotate the
@@ -8049,7 +8569,7 @@ async function dockerSafeStart() {
     return { ok: false, pgdataState: "no_container", error: "No synkro-server container found. Run `synkro install` first." };
   }
   const pgCheck = checkPgdata();
-  if (existsSync8(PGDATA_PATH) && readdirSync2(PGDATA_PATH).length > 0) {
+  if (existsSync9(PGDATA_PATH) && readdirSync2(PGDATA_PATH).length > 0) {
     if (pgCheck.healthy) {
       console.log(`  pgdata: existing data found \u2014 ${pgCheck.details}`);
     } else {
@@ -8089,7 +8609,7 @@ async function dockerSafeRestart() {
   return { ok: startResult.ok, stop: stopResult, start: startResult };
 }
 function checkPgdata() {
-  if (!existsSync8(PGDATA_PATH)) return { healthy: false, details: "pgdata directory does not exist" };
+  if (!existsSync9(PGDATA_PATH)) return { healthy: false, details: "pgdata directory does not exist" };
   const entries = readdirSync2(PGDATA_PATH);
   if (entries.length === 0) return { healthy: true, details: "empty (fresh start)" };
   const hasPidFile = entries.includes("postmaster.pid");
@@ -8106,11 +8626,11 @@ var init_dockerInstall = __esm({
     "use strict";
     init_agentDetect();
     init_macKeychain();
-    SYNKRO_DIR2 = join6(homedir6(), ".synkro");
-    MCP_JWT_PATH = join6(SYNKRO_DIR2, ".mcp-jwt");
-    PGDATA_PATH = join6(SYNKRO_DIR2, "pgdata");
-    CLAUDE_HOST_STATE_DIR = join6(SYNKRO_DIR2, "claude-host-state");
-    CLAUDE_HOST_STATE_FILE = join6(CLAUDE_HOST_STATE_DIR, ".claude.json");
+    SYNKRO_DIR2 = join7(homedir7(), ".synkro");
+    MCP_JWT_PATH = join7(SYNKRO_DIR2, ".mcp-jwt");
+    PGDATA_PATH = join7(SYNKRO_DIR2, "pgdata");
+    CLAUDE_HOST_STATE_DIR = join7(SYNKRO_DIR2, "claude-host-state");
+    CLAUDE_HOST_STATE_FILE = join7(CLAUDE_HOST_STATE_DIR, ".claude.json");
     HOST_MCP_PORT = parseInt(process.env.SYNKRO_HOST_MCP_PORT || "18931", 10);
     HOST_GRADER_PORT = parseInt(process.env.SYNKRO_HOST_GRADER_PORT || "18929", 10);
     HOST_CWE_PORT = parseInt(process.env.SYNKRO_HOST_CWE_PORT || "18930", 10);
@@ -8125,7 +8645,7 @@ var init_dockerInstall = __esm({
       }
       cause;
     };
-    BACKUP_DIR = join6(SYNKRO_DIR2, "pgdata-backups");
+    BACKUP_DIR = join7(SYNKRO_DIR2, "pgdata-backups");
   }
 });
 
@@ -8138,14 +8658,14 @@ __export(setupGithub_exports, {
 import { createInterface as createInterface2 } from "readline/promises";
 import { stdin as input, stdout as output } from "process";
 import { execSync as execSync5, spawn as nodeSpawn } from "child_process";
-import { existsSync as existsSync9, readFileSync as readFileSync7, unlinkSync as unlinkSync3 } from "fs";
-import { homedir as homedir7, platform as platform3 } from "os";
-import { join as join7 } from "path";
+import { existsSync as existsSync10, readFileSync as readFileSync8, unlinkSync as unlinkSync3 } from "fs";
+import { homedir as homedir8, platform as platform3 } from "os";
+import { join as join8 } from "path";
 import { execFile as execFile2 } from "child_process";
 function readConfig() {
-  if (!existsSync9(CONFIG_PATH)) return {};
+  if (!existsSync10(CONFIG_PATH)) return {};
   const out = {};
-  for (const line of readFileSync7(CONFIG_PATH, "utf-8").split("\n")) {
+  for (const line of readFileSync8(CONFIG_PATH, "utf-8").split("\n")) {
     const t = line.trim();
     if (!t || t.startsWith("#")) continue;
     const eq = t.indexOf("=");
@@ -8206,7 +8726,7 @@ function sleep(ms) {
   return new Promise((r) => setTimeout(r, ms));
 }
 function captureClaudeSetupToken() {
-  const tmpFile = join7(SYNKRO_DIR3, `token-capture-${Date.now()}.raw`);
+  const tmpFile = join8(SYNKRO_DIR3, `token-capture-${Date.now()}.raw`);
   return new Promise((resolve4, reject) => {
     const proc = nodeSpawn("script", ["-q", tmpFile, "claude", "setup-token"], {
       stdio: "inherit"
@@ -8215,7 +8735,7 @@ function captureClaudeSetupToken() {
     proc.on("close", (code) => {
       let raw = "";
       try {
-        raw = readFileSync7(tmpFile, "utf-8");
+        raw = readFileSync8(tmpFile, "utf-8");
       } catch (e) {
         reject(new Error(`Could not read script output file: ${e.message}`));
         return;
@@ -8487,8 +9007,8 @@ var init_setupGithub = __esm({
     "use strict";
     init_githubSetup();
     init_stub();
-    SYNKRO_DIR3 = join7(homedir7(), ".synkro");
-    CONFIG_PATH = join7(SYNKRO_DIR3, "config.env");
+    SYNKRO_DIR3 = join8(homedir8(), ".synkro");
+    CONFIG_PATH = join8(SYNKRO_DIR3, "config.env");
   }
 });
 
@@ -8502,16 +9022,16 @@ __export(install_exports, {
   syncSkillFiles: () => syncSkillFiles,
   writeHookScripts: () => writeHookScripts
 });
-import { existsSync as existsSync10, mkdirSync as mkdirSync8, writeFileSync as writeFileSync7, chmodSync as chmodSync2, readFileSync as readFileSync8, readdirSync as readdirSync3, unlinkSync as unlinkSync4, statSync as statSync2 } from "fs";
-import { homedir as homedir8 } from "os";
-import { join as join8 } from "path";
+import { existsSync as existsSync11, mkdirSync as mkdirSync8, writeFileSync as writeFileSync8, chmodSync as chmodSync2, readFileSync as readFileSync9, readdirSync as readdirSync3, unlinkSync as unlinkSync4, statSync as statSync2 } from "fs";
+import { homedir as homedir9 } from "os";
+import { join as join9 } from "path";
 import { execSync as execSync6 } from "child_process";
 import { createInterface as createInterface3 } from "readline";
 function resolvePersistedHookMode() {
   if (process.env.SYNKRO_HOOK_MODE === "full") return "full";
   if (process.env.SYNKRO_HOOK_MODE === "stub") return "stub";
   try {
-    const env = readFileSync8(CONFIG_PATH2, "utf-8");
+    const env = readFileSync9(CONFIG_PATH2, "utf-8");
     if (/^SYNKRO_HOOK_MODE=['"]?full['"]?\s*$/m.test(env)) return "full";
   } catch {
   }
@@ -8664,31 +9184,31 @@ function ensureSynkroDir() {
   mkdirSync8(HOOKS_DIR, { recursive: true });
   mkdirSync8(BIN_DIR, { recursive: true });
   mkdirSync8(OFFSETS_DIR, { recursive: true });
-  mkdirSync8(join8(SYNKRO_DIR4, "sessions"), { recursive: true });
+  mkdirSync8(join9(SYNKRO_DIR4, "sessions"), { recursive: true });
 }
 function writeHookScripts(mode = "stub") {
-  const installExtractCorePath = join8(HOOKS_DIR, "installExtractCore.ts");
-  const bashScriptPath = join8(HOOKS_DIR, "cc-bash-judge.ts");
-  const bashFollowupScriptPath = join8(HOOKS_DIR, "cc-bash-followup.ts");
-  const editPrecheckScriptPath = join8(HOOKS_DIR, "cc-edit-precheck.ts");
-  const cwePrecheckScriptPath = join8(HOOKS_DIR, "cc-cwe-precheck.ts");
-  const cvePrecheckScriptPath = join8(HOOKS_DIR, "cc-cve-precheck.ts");
-  const planJudgeScriptPath = join8(HOOKS_DIR, "cc-plan-judge.ts");
-  const agentJudgeScriptPath = join8(HOOKS_DIR, "cc-agent-judge.ts");
-  const stopSummaryScriptPath = join8(HOOKS_DIR, "cc-stop-summary.ts");
-  const sessionStartScriptPath = join8(HOOKS_DIR, "cc-session-start.ts");
-  const transcriptSyncScriptPath = join8(HOOKS_DIR, "cc-transcript-sync.ts");
-  const userPromptSubmitScriptPath = join8(HOOKS_DIR, "cc-user-prompt-submit.ts");
-  const commonScriptPath = join8(HOOKS_DIR, "_synkro-common.ts");
-  const commonBashScriptPath = join8(HOOKS_DIR, "_synkro-common.sh");
-  const installScanScriptPath = join8(HOOKS_DIR, "cc-install-scan.ts");
-  const cursorBashJudgePath = join8(HOOKS_DIR, "cursor-bash-judge.ts");
-  const cursorEditCapturePath = join8(HOOKS_DIR, "cursor-edit-capture.ts");
-  const cursorAgentCapturePath = join8(HOOKS_DIR, "cursor-agent-capture.ts");
-  const mcpStdioProxyPath = join8(HOOKS_DIR, "mcp-stdio-proxy.ts");
-  const taskActivateIntentScriptPath = join8(HOOKS_DIR, "cc-task-activate-intent.ts");
+  const installExtractCorePath = join9(HOOKS_DIR, "installExtractCore.ts");
+  const bashScriptPath = join9(HOOKS_DIR, "cc-bash-judge.ts");
+  const bashFollowupScriptPath = join9(HOOKS_DIR, "cc-bash-followup.ts");
+  const editPrecheckScriptPath = join9(HOOKS_DIR, "cc-edit-precheck.ts");
+  const cwePrecheckScriptPath = join9(HOOKS_DIR, "cc-cwe-precheck.ts");
+  const cvePrecheckScriptPath = join9(HOOKS_DIR, "cc-cve-precheck.ts");
+  const planJudgeScriptPath = join9(HOOKS_DIR, "cc-plan-judge.ts");
+  const agentJudgeScriptPath = join9(HOOKS_DIR, "cc-agent-judge.ts");
+  const stopSummaryScriptPath = join9(HOOKS_DIR, "cc-stop-summary.ts");
+  const sessionStartScriptPath = join9(HOOKS_DIR, "cc-session-start.ts");
+  const transcriptSyncScriptPath = join9(HOOKS_DIR, "cc-transcript-sync.ts");
+  const userPromptSubmitScriptPath = join9(HOOKS_DIR, "cc-user-prompt-submit.ts");
+  const commonScriptPath = join9(HOOKS_DIR, "_synkro-common.ts");
+  const commonBashScriptPath = join9(HOOKS_DIR, "_synkro-common.sh");
+  const installScanScriptPath = join9(HOOKS_DIR, "cc-install-scan.ts");
+  const cursorBashJudgePath = join9(HOOKS_DIR, "cursor-bash-judge.ts");
+  const cursorEditCapturePath = join9(HOOKS_DIR, "cursor-edit-capture.ts");
+  const cursorAgentCapturePath = join9(HOOKS_DIR, "cursor-agent-capture.ts");
+  const mcpStdioProxyPath = join9(HOOKS_DIR, "mcp-stdio-proxy.ts");
+  const taskActivateIntentScriptPath = join9(HOOKS_DIR, "cc-task-activate-intent.ts");
   if (mode === "stub") {
-    const stubCommonPath = join8(HOOKS_DIR, "_synkro-stub-common.ts");
+    const stubCommonPath = join9(HOOKS_DIR, "_synkro-stub-common.ts");
     const stubFiles = [
       [stubCommonPath, STUB_COMMON_TS],
       [bashScriptPath, STUB_BASH_JUDGE_TS],
@@ -8709,14 +9229,14 @@ function writeHookScripts(mode = "stub") {
       [cursorAgentCapturePath, STUB_CURSOR_AGENT_CAPTURE_TS]
     ];
     for (const [p, content] of stubFiles) {
-      writeFileSync7(p, content, "utf-8");
+      writeFileSync8(p, content, "utf-8");
       chmodSync2(p, 493);
     }
-    writeFileSync7(mcpStdioProxyPath, MCP_STDIO_PROXY_SRC, "utf-8");
+    writeFileSync8(mcpStdioProxyPath, MCP_STDIO_PROXY_SRC, "utf-8");
     chmodSync2(mcpStdioProxyPath, 493);
     for (const stale of ["_synkro-common.ts", "_synkro-common.sh", "installExtractCore.ts"]) {
       try {
-        unlinkSync4(join8(HOOKS_DIR, stale));
+        unlinkSync4(join9(HOOKS_DIR, stale));
       } catch {
       }
     }
@@ -8739,26 +9259,26 @@ function writeHookScripts(mode = "stub") {
       taskActivateIntentScript: taskActivateIntentScriptPath
     };
   }
-  writeFileSync7(bashScriptPath, BASH_JUDGE_TS, "utf-8");
-  writeFileSync7(bashFollowupScriptPath, BASH_FOLLOWUP_TS, "utf-8");
-  writeFileSync7(editPrecheckScriptPath, EDIT_PRECHECK_TS, "utf-8");
-  writeFileSync7(cwePrecheckScriptPath, CWE_PRECHECK_TS, "utf-8");
-  writeFileSync7(cvePrecheckScriptPath, CVE_PRECHECK_TS, "utf-8");
-  writeFileSync7(planJudgeScriptPath, PLAN_JUDGE_TS, "utf-8");
-  writeFileSync7(agentJudgeScriptPath, AGENT_JUDGE_TS, "utf-8");
-  writeFileSync7(stopSummaryScriptPath, STOP_SUMMARY_TS, "utf-8");
-  writeFileSync7(sessionStartScriptPath, SESSION_START_TS, "utf-8");
-  writeFileSync7(transcriptSyncScriptPath, TRANSCRIPT_SYNC_TS, "utf-8");
-  writeFileSync7(userPromptSubmitScriptPath, USER_PROMPT_SUBMIT_TS, "utf-8");
-  writeFileSync7(commonScriptPath, SYNKRO_COMMON_TS, "utf-8");
-  writeFileSync7(commonBashScriptPath, SYNKRO_COMMON_SCRIPT, "utf-8");
-  writeFileSync7(installScanScriptPath, INSTALL_SCAN_TS, "utf-8");
-  writeFileSync7(cursorBashJudgePath, CURSOR_BASH_JUDGE_TS, "utf-8");
-  writeFileSync7(cursorEditCapturePath, CURSOR_EDIT_CAPTURE_TS, "utf-8");
-  writeFileSync7(cursorAgentCapturePath, CURSOR_AGENT_CAPTURE_TS, "utf-8");
-  writeFileSync7(mcpStdioProxyPath, MCP_STDIO_PROXY_SRC, "utf-8");
-  writeFileSync7(installExtractCorePath, "/**\n * Deterministic install-command extraction \u2014 no LLM, no network.\n * Shared by the API pkg-scan route and the hook scripts (copied to ~/.synkro/hooks/).\n */\nimport { parse as shellParse } from 'shell-quote';\n\nexport interface DeterministicPkgRequest {\n  name: string;\n  version: string;\n  ecosystem: string;\n}\n\ninterface RawInstall {\n  ecosystem: string;\n  name: string;\n  versionSpec: string | null;\n  source: 'registry' | 'git' | 'local' | 'url' | 'unknown';\n}\n\nconst SEPARATOR_OPS = new Set(['&&', '||', ';', '|', '&', '\\n']);\n\n/** Split a shell command into command segments (each an argv string array). */\nexport function segmentCommand(command: string): string[][] {\n  let tokens: unknown[];\n  try {\n    tokens = shellParse(command) as unknown[];\n  } catch {\n    return [command.split(/\\s+/).filter(Boolean)];\n  }\n  const segments: string[][] = [];\n  let current: string[] = [];\n  for (const tok of tokens) {\n    if (typeof tok === 'string') {\n      current.push(tok);\n      continue;\n    }\n    if (tok && typeof tok === 'object') {\n      const op = (tok as { op?: string }).op;\n      const pattern = (tok as { pattern?: string }).pattern;\n      if (op && SEPARATOR_OPS.has(op)) {\n        if (current.length) segments.push(current);\n        current = [];\n      } else if (typeof pattern === 'string') {\n        current.push(pattern);\n      }\n    }\n  }\n  if (current.length) segments.push(current);\n  return segments;\n}\n\nconst PM_TABLE: Record<string, { subs: Set<string>; ecosystem: string }> = {\n  npm:      { subs: new Set(['install', 'i', 'add', 'ci']),  ecosystem: 'npm' },\n  pnpm:     { subs: new Set(['add', 'install', 'i', 'dlx']), ecosystem: 'npm' },\n  yarn:     { subs: new Set(['add', 'install']),             ecosystem: 'npm' },\n  bun:      { subs: new Set(['add', 'install', 'i']),        ecosystem: 'npm' },\n  pip:      { subs: new Set(['install']),                    ecosystem: 'PyPI' },\n  pip3:     { subs: new Set(['install']),                    ecosystem: 'PyPI' },\n  cargo:    { subs: new Set(['add', 'install']),             ecosystem: 'crates.io' },\n  go:       { subs: new Set(['get', 'install']),             ecosystem: 'Go' },\n  gem:      { subs: new Set(['install']),                    ecosystem: 'RubyGems' },\n  composer: { subs: new Set(['require']),                    ecosystem: 'Packagist' },\n};\nconst SYSTEM_PMS = new Set(['apt', 'apt-get', 'apk', 'brew', 'dnf', 'yum', 'pacman']);\nconst SYSTEM_SUBS = new Set(['install', 'add']);\n\nconst WRAPPERS = new Set(['sudo', 'doas', 'command', 'env', 'xargs', 'nice', 'time']);\nconst VALUE_FLAGS = new Set([\n  '--filter', '-F', '-C', '--dir', '--prefix', '--registry', '--tag', '--features',\n  '-v', '--version', '--index-url', '--extra-index-url', '--target', '-t',\n]);\n\nfunction basename(p: string): string {\n  const i = p.lastIndexOf('/');\n  return i >= 0 ? p.slice(i + 1) : p;\n}\n\nfunction stripPrefixes(argv: string[]): string[] {\n  let i = 0;\n  while (i < argv.length) {\n    const t = argv[i];\n    if (WRAPPERS.has(basename(t).toLowerCase())) { i++; continue; }\n    if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(t)) { i++; continue; }\n    break;\n  }\n  return argv.slice(i);\n}\n\nfunction looksLikePath(tok: string): boolean {\n  return tok === '.' || tok === '..' || /^\\.{0,2}\\//.test(tok) || tok.startsWith('~/') || tok.startsWith('file:');\n}\n\n/** Shell redirect fragments (e.g. `2>&1` \u2192 argv `2`, `1`) \u2014 not package names. */\nfunction isRedirectFragment(tok: string): boolean {\n  if (/^\\d+$/.test(tok)) return true;\n  if (/^[<>]|[<>]$/.test(tok)) return true;\n  if (tok === '&' || tok === '|') return true;\n  if (/^\\d*[<>]/.test(tok)) return true;\n  return false;\n}\n\nfunction parsePackageToken(tok: string, ecosystem: string): RawInstall | null {\n  if (/^(https?:)?\\/\\//.test(tok) || tok.startsWith('git+') || tok.startsWith('git:')) {\n    return { ecosystem, name: tok, versionSpec: null, source: tok.includes('git') ? 'git' : 'url' };\n  }\n  if (looksLikePath(tok)) {\n    return { ecosystem, name: basename(tok.replace(/\\/+$/, '')) || tok, versionSpec: null, source: 'local' };\n  }\n  if (ecosystem === 'PyPI') {\n    const noExtras = tok.replace(/\\[[^\\]]*\\]/g, '');\n    const m = noExtras.match(/^([A-Za-z0-9_.-]+)\\s*([=~!<>].*)?$/);\n    if (!m) return null;\n    return { ecosystem, name: m[1], versionSpec: m[2] ? m[2].trim() : null, source: 'registry' };\n  }\n  if (ecosystem === 'Packagist') {\n    // composer uses vendor/package:version-constraint (e.g. monolog/monolog:1.0.0).\n    // Split on the first ':' after the vendor/ slash; never on the '/'.\n    const ci = tok.indexOf(':');\n    if (ci > 0) return { ecosystem, name: tok.slice(0, ci), versionSpec: tok.slice(ci + 1) || null, source: 'registry' };\n    return { ecosystem, name: tok, versionSpec: null, source: 'registry' };\n  }\n  const at = tok.lastIndexOf('@');\n  if (at > 0) {\n    return { ecosystem, name: tok.slice(0, at), versionSpec: tok.slice(at + 1) || null, source: 'registry' };\n  }\n  return { ecosystem, name: tok, versionSpec: null, source: 'registry' };\n}\n\n/** Deterministic extraction for a single command segment. */\nexport function extractSegment(rawArgv: string[]): RawInstall[] {\n  let argv = stripPrefixes(rawArgv);\n  if (argv.length < 2) return [];\n  let bin = basename(argv[0]).toLowerCase();\n\n  if (bin === 'uv' && argv[1] === 'pip') { argv = argv.slice(1); bin = 'pip'; }\n  if ((bin === 'python' || bin === 'python3') && argv.includes('-m')) {\n    const mi = argv.indexOf('-m');\n    if (argv[mi + 1] === 'pip') { argv = ['pip', ...argv.slice(mi + 2)]; bin = 'pip'; }\n  }\n\n  const isSystem = SYSTEM_PMS.has(bin);\n  const entry = PM_TABLE[bin];\n  if (!entry && !isSystem) return [];\n  const ecosystem = entry ? entry.ecosystem : 'system';\n  const subs = entry ? entry.subs : SYSTEM_SUBS;\n\n  let subIdx = -1;\n  for (let i = 1; i < argv.length; i++) {\n    if (subs.has(argv[i].toLowerCase())) { subIdx = i; break; }\n  }\n  if (subIdx === -1) return [];\n\n  const installs: RawInstall[] = [];\n  // gem pins the version with a separate `-v`/`--version` flag rather than an\n  // inline spec; capture it and apply to the package(s) in this segment.\n  let flagVersion: string | null = null;\n  for (let i = subIdx + 1; i < argv.length; i++) {\n    const tok = argv[i];\n    if (isRedirectFragment(tok)) break;\n    if (tok.startsWith('-')) {\n      const lower = tok.toLowerCase();\n      if (ecosystem === 'RubyGems' && (lower === '-v' || lower === '--version')) {\n        flagVersion = (argv[i + 1] || '').replace(/^[v=\\s]+/, '') || null;\n        i++;\n        continue;\n      }\n      if (VALUE_FLAGS.has(tok)) i++;\n      continue;\n    }\n    const parsed = parsePackageToken(tok, ecosystem);\n    if (parsed) installs.push(parsed);\n  }\n  if (flagVersion) {\n    for (const ins of installs) {\n      if (ins.source === 'registry' && !ins.versionSpec) ins.versionSpec = flagVersion;\n    }\n  }\n  return installs;\n}\n\nconst ECO_TO_OSV: Record<string, string | null> = {\n  npm: 'npm',\n  pypi: 'PyPI', PyPI: 'PyPI',\n  cargo: 'crates.io', 'crates.io': 'crates.io',\n  go: 'Go', Go: 'Go',\n  rubygems: 'RubyGems', RubyGems: 'RubyGems',\n  packagist: 'Packagist', Packagist: 'Packagist',\n  maven: 'Maven', Maven: 'Maven',\n  nuget: 'NuGet', NuGet: 'NuGet',\n  apt: null, brew: null, system: null, other: null,\n};\n\nfunction normalizeName(name: string, osvEco: string): string {\n  const n = name.trim();\n  if (osvEco === 'npm') return n.toLowerCase();\n  if (osvEco === 'PyPI') return n.toLowerCase().replace(/[-_.]+/g, '-');\n  return n;\n}\n\nfunction concretePin(spec: string | null): string | null {\n  if (!spec) return null;\n  const c = spec.trim().replace(/^[v=\\s]+/, '');\n  if (c.toLowerCase() === 'latest' || c === '') return null;\n  if (/[\\^~><|*\\sx]/i.test(c)) return null;\n  return /^\\d[\\w.\\-+]*$/.test(c) ? c : null;\n}\n\nconst PKG_JSON_DEP_FIELDS = ['dependencies', 'devDependencies', 'peerDependencies', 'optionalDependencies'];\n\nfunction safeParseObject(text: string): Record<string, any> | null {\n  try {\n    const v = JSON.parse(text);\n    return v && typeof v === 'object' && !Array.isArray(v) ? v : null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Diff two package.json contents and return the registry packages that are\n * newly added or whose version spec changed in the new content. The caller\n * scans these against the vuln DB before letting the edit land \u2014 so a bare\n * `pnpm install` afterwards has nothing left to vet. Non-registry sources\n * (file:, link:, workspace:, git, http, relative paths) are skipped.\n */\nexport function extractPackageJsonDelta(oldText: string, newText: string): DeterministicPkgRequest[] {\n  const newJson = safeParseObject(newText);\n  if (!newJson) return [];\n  const oldJson = safeParseObject(oldText) || {};\n\n  const out = new Map<string, DeterministicPkgRequest>();\n  for (const field of PKG_JSON_DEP_FIELDS) {\n    const oldDeps = (oldJson[field] && typeof oldJson[field] === 'object') ? oldJson[field] : {};\n    const newDeps = (newJson[field] && typeof newJson[field] === 'object') ? newJson[field] : {};\n    for (const [rawName, version] of Object.entries(newDeps)) {\n      if (typeof version !== 'string') continue;\n      if (oldDeps[rawName] === version) continue;\n      const spec = version.trim();\n      if (\n        spec.startsWith('file:') || spec.startsWith('link:') ||\n        spec.startsWith('http') || spec.startsWith('git') ||\n        spec.startsWith('workspace:') || spec.startsWith('catalog:') ||\n        spec.startsWith('npm:') ||\n        spec.startsWith('./') || spec.startsWith('../') ||\n        spec === '' || spec === '*'\n      ) continue;\n      const name = rawName.toLowerCase();\n      out.set(name, {\n        name,\n        version: concretePin(spec) ?? '*',\n        ecosystem: 'npm',\n      });\n    }\n  }\n  return [...out.values()];\n}\n\n/**\n * Parse registry installs from a shell command without LLM/network.\n * Unpinned versions use '*' so OSV scans the full advisory history.\n */\nexport function extractDeterministicPkgRequests(command: string): DeterministicPkgRequest[] {\n  const merged = new Map<string, DeterministicPkgRequest>();\n  for (const r of segmentCommand(command).flatMap(extractSegment)) {\n    if (r.source !== 'registry') continue;\n    const osvEco = ECO_TO_OSV[r.ecosystem] ?? ECO_TO_OSV[r.ecosystem.toLowerCase()] ?? null;\n    if (!osvEco) continue;\n    const name = normalizeName(r.name, osvEco);\n    if (!name) continue;\n    const key = osvEco + '|' + name.toLowerCase();\n    const version = concretePin(r.versionSpec) ?? '*';\n    const prev = merged.get(key);\n    if (!prev || (prev.version === '*' && version !== '*')) {\n      merged.set(key, { name, version, ecosystem: osvEco });\n    }\n  }\n  return [...merged.values()];\n}\n", "utf-8");
-  writeFileSync7(taskActivateIntentScriptPath, STUB_TASK_ACTIVATE_INTENT_TS, "utf-8");
+  writeFileSync8(bashScriptPath, BASH_JUDGE_TS, "utf-8");
+  writeFileSync8(bashFollowupScriptPath, BASH_FOLLOWUP_TS, "utf-8");
+  writeFileSync8(editPrecheckScriptPath, EDIT_PRECHECK_TS, "utf-8");
+  writeFileSync8(cwePrecheckScriptPath, CWE_PRECHECK_TS, "utf-8");
+  writeFileSync8(cvePrecheckScriptPath, CVE_PRECHECK_TS, "utf-8");
+  writeFileSync8(planJudgeScriptPath, PLAN_JUDGE_TS, "utf-8");
+  writeFileSync8(agentJudgeScriptPath, AGENT_JUDGE_TS, "utf-8");
+  writeFileSync8(stopSummaryScriptPath, STOP_SUMMARY_TS, "utf-8");
+  writeFileSync8(sessionStartScriptPath, SESSION_START_TS, "utf-8");
+  writeFileSync8(transcriptSyncScriptPath, TRANSCRIPT_SYNC_TS, "utf-8");
+  writeFileSync8(userPromptSubmitScriptPath, USER_PROMPT_SUBMIT_TS, "utf-8");
+  writeFileSync8(commonScriptPath, SYNKRO_COMMON_TS, "utf-8");
+  writeFileSync8(commonBashScriptPath, SYNKRO_COMMON_SCRIPT, "utf-8");
+  writeFileSync8(installScanScriptPath, INSTALL_SCAN_TS, "utf-8");
+  writeFileSync8(cursorBashJudgePath, CURSOR_BASH_JUDGE_TS, "utf-8");
+  writeFileSync8(cursorEditCapturePath, CURSOR_EDIT_CAPTURE_TS, "utf-8");
+  writeFileSync8(cursorAgentCapturePath, CURSOR_AGENT_CAPTURE_TS, "utf-8");
+  writeFileSync8(mcpStdioProxyPath, MCP_STDIO_PROXY_SRC, "utf-8");
+  writeFileSync8(installExtractCorePath, "/**\n * Deterministic install-command extraction \u2014 no LLM, no network.\n * Shared by the API pkg-scan route and the hook scripts (copied to ~/.synkro/hooks/).\n */\nimport { parse as shellParse } from 'shell-quote';\n\nexport interface DeterministicPkgRequest {\n  name: string;\n  version: string;\n  ecosystem: string;\n}\n\ninterface RawInstall {\n  ecosystem: string;\n  name: string;\n  versionSpec: string | null;\n  source: 'registry' | 'git' | 'local' | 'url' | 'unknown';\n}\n\nconst SEPARATOR_OPS = new Set(['&&', '||', ';', '|', '&', '\\n']);\n\n/** Split a shell command into command segments (each an argv string array). */\nexport function segmentCommand(command: string): string[][] {\n  let tokens: unknown[];\n  try {\n    tokens = shellParse(command) as unknown[];\n  } catch {\n    return [command.split(/\\s+/).filter(Boolean)];\n  }\n  const segments: string[][] = [];\n  let current: string[] = [];\n  for (const tok of tokens) {\n    if (typeof tok === 'string') {\n      current.push(tok);\n      continue;\n    }\n    if (tok && typeof tok === 'object') {\n      const op = (tok as { op?: string }).op;\n      const pattern = (tok as { pattern?: string }).pattern;\n      if (op && SEPARATOR_OPS.has(op)) {\n        if (current.length) segments.push(current);\n        current = [];\n      } else if (typeof pattern === 'string') {\n        current.push(pattern);\n      }\n    }\n  }\n  if (current.length) segments.push(current);\n  return segments;\n}\n\nconst PM_TABLE: Record<string, { subs: Set<string>; ecosystem: string }> = {\n  npm:      { subs: new Set(['install', 'i', 'add', 'ci']),  ecosystem: 'npm' },\n  pnpm:     { subs: new Set(['add', 'install', 'i', 'dlx']), ecosystem: 'npm' },\n  yarn:     { subs: new Set(['add', 'install']),             ecosystem: 'npm' },\n  bun:      { subs: new Set(['add', 'install', 'i']),        ecosystem: 'npm' },\n  pip:      { subs: new Set(['install']),                    ecosystem: 'PyPI' },\n  pip3:     { subs: new Set(['install']),                    ecosystem: 'PyPI' },\n  cargo:    { subs: new Set(['add', 'install']),             ecosystem: 'crates.io' },\n  go:       { subs: new Set(['get', 'install']),             ecosystem: 'Go' },\n  gem:      { subs: new Set(['install']),                    ecosystem: 'RubyGems' },\n  composer: { subs: new Set(['require']),                    ecosystem: 'Packagist' },\n};\nconst SYSTEM_PMS = new Set(['apt', 'apt-get', 'apk', 'brew', 'dnf', 'yum', 'pacman']);\nconst SYSTEM_SUBS = new Set(['install', 'add']);\n\nconst WRAPPERS = new Set(['sudo', 'doas', 'command', 'env', 'xargs', 'nice', 'time']);\nconst VALUE_FLAGS = new Set([\n  '--filter', '-F', '-C', '--dir', '--prefix', '--registry', '--tag', '--features',\n  '-v', '--version', '--index-url', '--extra-index-url', '--target', '-t',\n]);\n\nfunction basename(p: string): string {\n  const i = p.lastIndexOf('/');\n  return i >= 0 ? p.slice(i + 1) : p;\n}\n\nfunction stripPrefixes(argv: string[]): string[] {\n  let i = 0;\n  while (i < argv.length) {\n    const t = argv[i];\n    if (WRAPPERS.has(basename(t).toLowerCase())) { i++; continue; }\n    if (/^[A-Za-z_][A-Za-z0-9_]*=/.test(t)) { i++; continue; }\n    break;\n  }\n  return argv.slice(i);\n}\n\nfunction looksLikePath(tok: string): boolean {\n  return tok === '.' || tok === '..' || /^\\.{0,2}\\//.test(tok) || tok.startsWith('~/') || tok.startsWith('file:');\n}\n\n/** Shell redirect fragments (e.g. `2>&1` \u2192 argv `2`, `1`) \u2014 not package names. */\nfunction isRedirectFragment(tok: string): boolean {\n  if (/^\\d+$/.test(tok)) return true;\n  if (/^[<>]|[<>]$/.test(tok)) return true;\n  if (tok === '&' || tok === '|') return true;\n  if (/^\\d*[<>]/.test(tok)) return true;\n  return false;\n}\n\nfunction parsePackageToken(tok: string, ecosystem: string): RawInstall | null {\n  if (/^(https?:)?\\/\\//.test(tok) || tok.startsWith('git+') || tok.startsWith('git:')) {\n    return { ecosystem, name: tok, versionSpec: null, source: tok.includes('git') ? 'git' : 'url' };\n  }\n  if (looksLikePath(tok)) {\n    return { ecosystem, name: basename(tok.replace(/\\/+$/, '')) || tok, versionSpec: null, source: 'local' };\n  }\n  if (ecosystem === 'PyPI') {\n    const noExtras = tok.replace(/\\[[^\\]]*\\]/g, '');\n    const m = noExtras.match(/^([A-Za-z0-9_.-]+)\\s*([=~!<>].*)?$/);\n    if (!m) return null;\n    return { ecosystem, name: m[1], versionSpec: m[2] ? m[2].trim() : null, source: 'registry' };\n  }\n  if (ecosystem === 'Packagist') {\n    // composer uses vendor/package:version-constraint (e.g. monolog/monolog:1.0.0).\n    // Split on the first ':' after the vendor/ slash; never on the '/'.\n    const ci = tok.indexOf(':');\n    if (ci > 0) return { ecosystem, name: tok.slice(0, ci), versionSpec: tok.slice(ci + 1) || null, source: 'registry' };\n    return { ecosystem, name: tok, versionSpec: null, source: 'registry' };\n  }\n  const at = tok.lastIndexOf('@');\n  if (at > 0) {\n    return { ecosystem, name: tok.slice(0, at), versionSpec: tok.slice(at + 1) || null, source: 'registry' };\n  }\n  return { ecosystem, name: tok, versionSpec: null, source: 'registry' };\n}\n\n/** Deterministic extraction for a single command segment. */\nexport function extractSegment(rawArgv: string[]): RawInstall[] {\n  let argv = stripPrefixes(rawArgv);\n  if (argv.length < 2) return [];\n  let bin = basename(argv[0]).toLowerCase();\n\n  if (bin === 'uv' && argv[1] === 'pip') { argv = argv.slice(1); bin = 'pip'; }\n  if ((bin === 'python' || bin === 'python3') && argv.includes('-m')) {\n    const mi = argv.indexOf('-m');\n    if (argv[mi + 1] === 'pip') { argv = ['pip', ...argv.slice(mi + 2)]; bin = 'pip'; }\n  }\n\n  const isSystem = SYSTEM_PMS.has(bin);\n  const entry = PM_TABLE[bin];\n  if (!entry && !isSystem) return [];\n  const ecosystem = entry ? entry.ecosystem : 'system';\n  const subs = entry ? entry.subs : SYSTEM_SUBS;\n\n  let subIdx = -1;\n  for (let i = 1; i < argv.length; i++) {\n    if (subs.has(argv[i].toLowerCase())) { subIdx = i; break; }\n  }\n  if (subIdx === -1) return [];\n\n  const installs: RawInstall[] = [];\n  // gem pins the version with a separate `-v`/`--version` flag rather than an\n  // inline spec; capture it and apply to the package(s) in this segment.\n  let flagVersion: string | null = null;\n  for (let i = subIdx + 1; i < argv.length; i++) {\n    const tok = argv[i];\n    if (isRedirectFragment(tok)) break;\n    if (tok.startsWith('-')) {\n      const lower = tok.toLowerCase();\n      if (ecosystem === 'RubyGems' && (lower === '-v' || lower === '--version')) {\n        flagVersion = (argv[i + 1] || '').replace(/^[v=\\s]+/, '') || null;\n        i++;\n        continue;\n      }\n      if (VALUE_FLAGS.has(tok)) i++;\n      continue;\n    }\n    const parsed = parsePackageToken(tok, ecosystem);\n    if (parsed) installs.push(parsed);\n  }\n  if (flagVersion) {\n    for (const ins of installs) {\n      if (ins.source === 'registry' && !ins.versionSpec) ins.versionSpec = flagVersion;\n    }\n  }\n  return installs;\n}\n\nconst ECO_TO_OSV: Record<string, string | null> = {\n  npm: 'npm',\n  pypi: 'PyPI', PyPI: 'PyPI',\n  cargo: 'crates.io', 'crates.io': 'crates.io',\n  go: 'Go', Go: 'Go',\n  rubygems: 'RubyGems', RubyGems: 'RubyGems',\n  packagist: 'Packagist', Packagist: 'Packagist',\n  maven: 'Maven', Maven: 'Maven',\n  nuget: 'NuGet', NuGet: 'NuGet',\n  apt: null, brew: null, system: null, other: null,\n};\n\nfunction normalizeName(name: string, osvEco: string): string {\n  const n = name.trim();\n  if (osvEco === 'npm') return n.toLowerCase();\n  if (osvEco === 'PyPI') return n.toLowerCase().replace(/[-_.]+/g, '-');\n  return n;\n}\n\nfunction concretePin(spec: string | null): string | null {\n  if (!spec) return null;\n  const c = spec.trim().replace(/^[v=\\s]+/, '');\n  if (c.toLowerCase() === 'latest' || c === '') return null;\n  if (/[\\^~><|*\\sx]/i.test(c)) return null;\n  return /^\\d[\\w.\\-+]*$/.test(c) ? c : null;\n}\n\nconst PKG_JSON_DEP_FIELDS = ['dependencies', 'devDependencies', 'peerDependencies', 'optionalDependencies'];\n\nfunction safeParseObject(text: string): Record<string, any> | null {\n  try {\n    const v = JSON.parse(text);\n    return v && typeof v === 'object' && !Array.isArray(v) ? v : null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Diff two package.json contents and return the registry packages that are\n * newly added or whose version spec changed in the new content. The caller\n * scans these against the vuln DB before letting the edit land \u2014 so a bare\n * `pnpm install` afterwards has nothing left to vet. Non-registry sources\n * (file:, link:, workspace:, git, http, relative paths) are skipped.\n */\nexport function extractPackageJsonDelta(oldText: string, newText: string): DeterministicPkgRequest[] {\n  const newJson = safeParseObject(newText);\n  if (!newJson) return [];\n  const oldJson = safeParseObject(oldText) || {};\n\n  const out = new Map<string, DeterministicPkgRequest>();\n  for (const field of PKG_JSON_DEP_FIELDS) {\n    const oldDeps = (oldJson[field] && typeof oldJson[field] === 'object') ? oldJson[field] : {};\n    const newDeps = (newJson[field] && typeof newJson[field] === 'object') ? newJson[field] : {};\n    for (const [rawName, version] of Object.entries(newDeps)) {\n      if (typeof version !== 'string') continue;\n      if (oldDeps[rawName] === version) continue;\n      const spec = version.trim();\n      if (\n        spec.startsWith('file:') || spec.startsWith('link:') ||\n        spec.startsWith('http') || spec.startsWith('git') ||\n        spec.startsWith('workspace:') || spec.startsWith('catalog:') ||\n        spec.startsWith('npm:') ||\n        spec.startsWith('./') || spec.startsWith('../') ||\n        spec === '' || spec === '*'\n      ) continue;\n      const name = rawName.toLowerCase();\n      out.set(name, {\n        name,\n        version: concretePin(spec) ?? '*',\n        ecosystem: 'npm',\n      });\n    }\n  }\n  return [...out.values()];\n}\n\n/**\n * Parse registry installs from a shell command without LLM/network.\n * Unpinned versions use '*' so OSV scans the full advisory history.\n */\nexport function extractDeterministicPkgRequests(command: string): DeterministicPkgRequest[] {\n  const merged = new Map<string, DeterministicPkgRequest>();\n  for (const r of segmentCommand(command).flatMap(extractSegment)) {\n    if (r.source !== 'registry') continue;\n    const osvEco = ECO_TO_OSV[r.ecosystem] ?? ECO_TO_OSV[r.ecosystem.toLowerCase()] ?? null;\n    if (!osvEco) continue;\n    const name = normalizeName(r.name, osvEco);\n    if (!name) continue;\n    const key = osvEco + '|' + name.toLowerCase();\n    const version = concretePin(r.versionSpec) ?? '*';\n    const prev = merged.get(key);\n    if (!prev || (prev.version === '*' && version !== '*')) {\n      merged.set(key, { name, version, ecosystem: osvEco });\n    }\n  }\n  return [...merged.values()];\n}\n", "utf-8");
+  writeFileSync8(taskActivateIntentScriptPath, STUB_TASK_ACTIVATE_INTENT_TS, "utf-8");
   chmodSync2(bashScriptPath, 493);
   chmodSync2(bashFollowupScriptPath, 493);
   chmodSync2(editPrecheckScriptPath, 493);
@@ -8780,7 +9300,7 @@ function writeHookScripts(mode = "stub") {
   chmodSync2(installExtractCorePath, 493);
   chmodSync2(taskActivateIntentScriptPath, 493);
   try {
-    unlinkSync4(join8(HOOKS_DIR, "_synkro-stub-common.ts"));
+    unlinkSync4(join9(HOOKS_DIR, "_synkro-stub-common.ts"));
   } catch {
   }
   return {
@@ -8811,11 +9331,11 @@ function shellQuoteSingle(value) {
 }
 function resolveSynkroBundle() {
   const scriptPath = process.argv[1];
-  if (scriptPath && existsSync10(scriptPath)) return scriptPath;
+  if (scriptPath && existsSync11(scriptPath)) return scriptPath;
   return null;
 }
 function writeConfigEnv(opts) {
-  const credsPath = join8(SYNKRO_DIR4, "credentials.json");
+  const credsPath = join9(SYNKRO_DIR4, "credentials.json");
   const safeGateway = sanitizeConfigValue(opts.gatewayUrl);
   const safeUserId = sanitizeConfigValue(opts.userId);
   const safeOrgId = sanitizeConfigValue(opts.orgId);
@@ -8831,7 +9351,7 @@ function writeConfigEnv(opts) {
     `SYNKRO_CREDENTIALS_PATH=${shellQuoteSingle(credsPath)}`,
     `SYNKRO_TIER=${shellQuoteSingle(safeTier)}`,
     `SYNKRO_INFERENCE=${shellQuoteSingle(safeInference)}`,
-    `SYNKRO_VERSION=${shellQuoteSingle("1.6.53")}`
+    `SYNKRO_VERSION=${shellQuoteSingle("1.6.55")}`
   ];
   if (safeSynkroBin) lines.push(`SYNKRO_CLI_BIN=${shellQuoteSingle(safeSynkroBin)}`);
   if (safeUserId) lines.push(`SYNKRO_USER_ID=${shellQuoteSingle(safeUserId)}`);
@@ -8847,15 +9367,15 @@ function writeConfigEnv(opts) {
   lines.push(`SYNKRO_STORAGE_MODE=${shellQuoteSingle(sanitizeConfigValue(opts.storageMode ?? "local", 16))}`);
   lines.push(`SYNKRO_HOOK_MODE=${shellQuoteSingle(sanitizeConfigValue(opts.hookMode ?? "stub", 8))}`);
   lines.push("");
-  writeFileSync7(CONFIG_PATH2, lines.join("\n"), "utf-8");
+  writeFileSync8(CONFIG_PATH2, lines.join("\n"), "utf-8");
   chmodSync2(CONFIG_PATH2, 384);
 }
 function resolveDeploymentMode() {
   const envOverride = process.env.SYNKRO_DEPLOYMENT_MODE?.toLowerCase();
   if (envOverride === "bare-host" || envOverride === "docker") return envOverride;
   try {
-    if (existsSync10(CONFIG_PATH2)) {
-      const m = readFileSync8(CONFIG_PATH2, "utf-8").match(/^SYNKRO_DEPLOYMENT_MODE='([^']*)'/m);
+    if (existsSync11(CONFIG_PATH2)) {
+      const m = readFileSync9(CONFIG_PATH2, "utf-8").match(/^SYNKRO_DEPLOYMENT_MODE='([^']*)'/m);
       const val = m?.[1]?.toLowerCase();
       if (val === "bare-host" || val === "docker") return val;
     }
@@ -8882,16 +9402,16 @@ function collectLocalMetadata(includeClaudeCode = true) {
     meta.cc_version = execSync6("claude --version", { encoding: "utf-8", timeout: 5e3 }).trim().split("\n")[0];
   } catch {
   }
-  const claudeDir = join8(homedir8(), ".claude");
+  const claudeDir = join9(homedir9(), ".claude");
   try {
-    const settings = JSON.parse(readFileSync8(join8(claudeDir, "settings.json"), "utf-8"));
+    const settings = JSON.parse(readFileSync9(join9(claudeDir, "settings.json"), "utf-8"));
     const plugins = Object.keys(settings.enabledPlugins ?? {}).filter((k) => settings.enabledPlugins[k]);
     if (plugins.length) meta.enabled_plugins = plugins;
     if (settings.permissions?.defaultMode) meta.permissions_mode = settings.permissions.defaultMode;
   } catch {
   }
   try {
-    const mcpCache = JSON.parse(readFileSync8(join8(claudeDir, "mcp-needs-auth-cache.json"), "utf-8"));
+    const mcpCache = JSON.parse(readFileSync9(join9(claudeDir, "mcp-needs-auth-cache.json"), "utf-8"));
     const mcpNames = Object.keys(mcpCache);
     if (mcpNames.length) meta.mcp_servers = mcpNames;
   } catch {
@@ -8903,10 +9423,10 @@ function collectLocalMetadata(includeClaudeCode = true) {
   } catch {
   }
   try {
-    const sessionsDir = join8(claudeDir, "sessions");
+    const sessionsDir = join9(claudeDir, "sessions");
     const files = readdirSync3(sessionsDir).filter((f) => f.endsWith(".json")).slice(-5);
     for (const f of files) {
-      const s = JSON.parse(readFileSync8(join8(sessionsDir, f), "utf-8"));
+      const s = JSON.parse(readFileSync9(join9(sessionsDir, f), "utf-8"));
       if (s.version) {
         meta.cc_version = meta.cc_version || s.version;
         break;
@@ -9081,9 +9601,9 @@ async function installCommand(opts = {}) {
   const scripts = writeHookScripts(hookMode);
   console.log("Wrote hook scripts to ~/.synkro/hooks/\n");
   for (const mode of ["edit", "bash"]) {
-    const pidFile = join8(SYNKRO_DIR4, "daemon", mode, "daemon.pid");
+    const pidFile = join9(SYNKRO_DIR4, "daemon", mode, "daemon.pid");
     try {
-      const pid = parseInt(readFileSync8(pidFile, "utf-8").trim(), 10);
+      const pid = parseInt(readFileSync9(pidFile, "utf-8").trim(), 10);
       if (pid > 0) {
         process.kill(pid, "SIGTERM");
         console.log(`Stopped stale ${mode} grader daemon (pid ${pid})`);
@@ -9163,7 +9683,7 @@ async function installCommand(opts = {}) {
         if (mintResp.ok) {
           const minted = await mintResp.json();
           mcpJwt = minted.token;
-          writeFileSync7(join8(SYNKRO_DIR4, ".mcp-jwt"), mcpJwt + "\n", { mode: 384 });
+          writeFileSync8(join9(SYNKRO_DIR4, ".mcp-jwt"), mcpJwt + "\n", { mode: 384 });
         } else {
           console.warn("  \u26A0 Could not mint MCP token \u2014 local server will reject requests until re-installed.");
         }
@@ -9191,7 +9711,7 @@ async function installCommand(opts = {}) {
           throw new Error(`mcp-token mint failed (${mintResp.status}): ${errText.slice(0, 200)}`);
         }
         const minted = await mintResp.json();
-        writeFileSync7(join8(SYNKRO_DIR4, ".mcp-jwt"), minted.token + "\n", { mode: 384 });
+        writeFileSync8(join9(SYNKRO_DIR4, ".mcp-jwt"), minted.token + "\n", { mode: 384 });
         const mcp = installMcpConfig({ gatewayUrl, bearerToken: minted.token });
         console.log(`Registered Synkro guardrails MCP server in ${mcp.path}`);
         console.log(`  url:        ${mcp.url}`);
@@ -9208,8 +9728,8 @@ async function installCommand(opts = {}) {
   if (hasCursor && !opts.noMcp) {
     try {
       if (useLocalMcp) {
-        const jwtPath = join8(SYNKRO_DIR4, ".mcp-jwt");
-        if (!existsSync10(jwtPath)) {
+        const jwtPath = join9(SYNKRO_DIR4, ".mcp-jwt");
+        if (!existsSync11(jwtPath)) {
           const mintResp = await fetch(`${gatewayUrl}/api/v1/cli/mcp-token`, {
             method: "POST",
             headers: { "Authorization": `Bearer ${token}`, "Content-Type": "application/json" },
@@ -9217,7 +9737,7 @@ async function installCommand(opts = {}) {
           });
           if (mintResp.ok) {
             const minted = await mintResp.json();
-            writeFileSync7(jwtPath, minted.token + "\n", { mode: 384 });
+            writeFileSync8(jwtPath, minted.token + "\n", { mode: 384 });
           }
         }
         const mcp = installCursorMcpConfig({ gatewayUrl, bearerToken: "", local: true });
@@ -9237,7 +9757,7 @@ async function installCommand(opts = {}) {
           throw new Error(`mcp-token mint failed (${mintResp.status}): ${errText.slice(0, 200)}`);
         }
         const minted = await mintResp.json();
-        writeFileSync7(join8(SYNKRO_DIR4, ".mcp-jwt"), minted.token + "\n", { mode: 384 });
+        writeFileSync8(join9(SYNKRO_DIR4, ".mcp-jwt"), minted.token + "\n", { mode: 384 });
         const mcp = installCursorMcpConfig({ gatewayUrl, bearerToken: minted.token });
         console.log(`Registered Synkro guardrails MCP server in ${mcp.path}`);
         console.log(`  url:        ${mcp.url}`);
@@ -9313,7 +9833,7 @@ async function installCommand(opts = {}) {
     const ready = await waitForContainerReady(6e4);
     if (ready) {
       console.log("  \u2713 container ready");
-      const mcpJwt = readFileSync8(join8(SYNKRO_DIR4, ".mcp-jwt"), "utf-8").trim();
+      const mcpJwt = readFileSync9(join9(SYNKRO_DIR4, ".mcp-jwt"), "utf-8").trim();
       try {
         const ingestResp = await fetch(`http://127.0.0.1:${hostMcpPort}/api/ingest`, {
           method: "POST",
@@ -9351,7 +9871,7 @@ async function installCommand(opts = {}) {
         try {
           let mcpToken = "";
           try {
-            mcpToken = readFileSync8(join8(SYNKRO_DIR4, ".mcp-jwt"), "utf-8").trim();
+            mcpToken = readFileSync9(join9(SYNKRO_DIR4, ".mcp-jwt"), "utf-8").trim();
           } catch {
           }
           if (mcpToken) {
@@ -9432,6 +9952,9 @@ async function installCommand(opts = {}) {
     await setupGithubCommand2({ nonInteractive: true, githubToken: ghToken });
   }
   console.log("\u2713 Synkro installed.");
+  if (process.stdin.isTTY && claudeDesktopInstalled()) {
+    console.log("\n  Claude Desktop detected \u2014 to monitor its conversations in your dashboard, run: synkro claude-desktop");
+  }
 }
 function parseTomlValue2(raw) {
   const v = raw.trim();
@@ -9476,8 +9999,8 @@ function writeSynkroFileIfMissing(opts) {
   try {
     const root = execSync6("git rev-parse --show-toplevel", { encoding: "utf-8", timeout: 3e3, stdio: ["pipe", "pipe", "pipe"] }).trim();
     if (!root) return;
-    if (root === homedir8()) return;
-    const fp = join8(root, "synkro.toml");
+    if (root === homedir9()) return;
+    const fp = join9(root, "synkro.toml");
     let hasFile = false;
     try {
       hasFile = statSync2(fp).isFile();
@@ -9516,7 +10039,7 @@ function writeSynkroFileIfMissing(opts) {
       "cve = true",
       ""
     ].join("\n");
-    writeFileSync7(fp, toml, "utf-8");
+    writeFileSync8(fp, toml, "utf-8");
     console.log(`  synkro.toml: wrote ${fp} (pool=${pool}, mode=${mode})`);
   } catch {
   }
@@ -9525,9 +10048,9 @@ function readFullSynkroFile() {
   try {
     const root = execSync6("git rev-parse --show-toplevel", { encoding: "utf-8", timeout: 3e3, stdio: ["pipe", "pipe", "pipe"] }).trim();
     if (!root) return null;
-    const fp = join8(root, "synkro.toml");
-    if (!existsSync10(fp)) return null;
-    const parsed = parseSynkroToml2(readFileSync8(fp, "utf-8"));
+    const fp = join9(root, "synkro.toml");
+    if (!existsSync11(fp)) return null;
+    const parsed = parseSynkroToml2(readFileSync9(fp, "utf-8"));
     const valid = ["claude-code", "cursor"];
     const harness = Array.isArray(parsed.harness) ? parsed.harness.filter((h) => valid.includes(h)) : ["claude-code", "cursor"];
     const resolved = resolveGraderPool(parsed);
@@ -9563,7 +10086,7 @@ function reconcileHarness() {
   console.log(`synkro.toml: harness=[${sf.harness.join(", ")}] pool=${poolLabel(sf.grader.pool)} mode=${sf.grader.mode}`);
   const scripts = writeHookScripts(resolvePersistedHookMode());
   console.log("Wrote hook scripts to ~/.synkro/hooks/");
-  const ccSettings = join8(homedir8(), ".claude", "settings.json");
+  const ccSettings = join9(homedir9(), ".claude", "settings.json");
   if (wantCC) {
     installCCHooks(ccSettings, {
       bashJudgeScriptPath: scripts.bashScript,
@@ -9582,7 +10105,7 @@ function reconcileHarness() {
     });
     console.log("  \u2713 Claude Code hooks registered");
     try {
-      const mcpJwt = readFileSync8(join8(SYNKRO_DIR4, ".mcp-jwt"), "utf-8").trim();
+      const mcpJwt = readFileSync9(join9(SYNKRO_DIR4, ".mcp-jwt"), "utf-8").trim();
       if (mcpJwt) {
         installMcpConfig({ gatewayUrl: "", bearerToken: mcpJwt, local: true });
         console.log("  \u2713 Claude Code MCP registered");
@@ -9593,7 +10116,7 @@ function reconcileHarness() {
     if (uninstallCCHooks(ccSettings)) console.log("  \u2717 Claude Code hooks removed");
     if (uninstallMcpConfig()) console.log("  \u2717 Claude Code MCP removed");
   }
-  const cursorHooks = join8(homedir8(), ".cursor", "hooks.json");
+  const cursorHooks = join9(homedir9(), ".cursor", "hooks.json");
   if (wantCursor) {
     installCursorHooks(cursorHooks, {
       bashJudgeScriptPath: scripts.cursorBashJudgeScript,
@@ -9646,7 +10169,7 @@ async function syncSkillFiles() {
   if (resolved.length === 0) return;
   const mcpPort = process.env.SYNKRO_MCP_PORT || "18931";
   const tasks = resolved.map((fp) => {
-    const content = readFileSync8(fp, "utf-8");
+    const content = readFileSync9(fp, "utf-8");
     const source = `skill:${fp.split("/").pop()}`;
     if (!content.trim()) {
       console.log(`  \u2298 skill ${source}: empty file, skipped`);
@@ -9692,17 +10215,17 @@ function detectGitRepo2() {
 function getClaudeProjectsFolder() {
   const cwd = process.cwd();
   const sanitized = "-" + cwd.replace(/\//g, "-");
-  const projectsDir = join8(homedir8(), ".claude", "projects", sanitized);
-  return existsSync10(projectsDir) ? projectsDir : null;
+  const projectsDir = join9(homedir9(), ".claude", "projects", sanitized);
+  return existsSync11(projectsDir) ? projectsDir : null;
 }
 function extractSessionInsights(projectsDir) {
   const insights = [];
   const files = readdirSync3(projectsDir).filter((f) => f.endsWith(".jsonl"));
   for (const file of files) {
     const sessionId = file.replace(".jsonl", "");
-    const filePath = join8(projectsDir, file);
+    const filePath = join9(projectsDir, file);
     try {
-      const content = readFileSync8(filePath, "utf-8");
+      const content = readFileSync9(filePath, "utf-8");
       const lines = content.split("\n").filter(Boolean);
       for (let i = 0; i < lines.length; i++) {
         try {
@@ -9781,14 +10304,14 @@ function cursorProjectSlug(workspaceRoot) {
   return workspaceRoot.replace(/^[/]+/, "").replace(/[^a-zA-Z0-9]+/g, "-").replace(/^-+|-+$/g, "");
 }
 function getCursorTranscriptsDir() {
-  const dir = join8(homedir8(), ".cursor", "projects", cursorProjectSlug(process.cwd()), "agent-transcripts");
-  return existsSync10(dir) ? dir : null;
+  const dir = join9(homedir9(), ".cursor", "projects", cursorProjectSlug(process.cwd()), "agent-transcripts");
+  return existsSync11(dir) ? dir : null;
 }
 function isSafeConvId(id) {
   return /^[A-Za-z0-9_-]+$/.test(id);
 }
 function parseCursorTranscriptFile(filePath) {
-  const content = readFileSync8(filePath, "utf-8");
+  const content = readFileSync9(filePath, "utf-8");
   const lines = content.split("\n").filter(Boolean);
   const messages = [];
   for (let i = 0; i < lines.length; i++) {
@@ -9820,8 +10343,8 @@ async function syncCursorTranscriptsLocal(mcpPort, mcpToken, repo) {
   for (let i = 0; i < convDirs.length; i++) {
     const convId = convDirs[i];
     if (!isSafeConvId(convId)) continue;
-    const filePath = join8(dir, convId, `${convId}.jsonl`);
-    if (!existsSync10(filePath)) continue;
+    const filePath = join9(dir, convId, `${convId}.jsonl`);
+    if (!existsSync11(filePath)) continue;
     try {
       const all = parseCursorTranscriptFile(filePath);
       const messages = all.length > 500 ? all.slice(-500) : all;
@@ -9843,8 +10366,8 @@ async function syncCursorTranscriptsLocal(mcpPort, mcpToken, repo) {
       process.stdout.write(`\r  Progress: ${i + 1}/${convDirs.length} sessions (${totalMessages} messages embedded)   `);
     }
     try {
-      const lc = readFileSync8(filePath, "utf-8").split("\n").filter(Boolean).length;
-      writeFileSync7(join8(OFFSETS_DIR, convId), String(lc), "utf-8");
+      const lc = readFileSync9(filePath, "utf-8").split("\n").filter(Boolean).length;
+      writeFileSync8(join9(OFFSETS_DIR, convId), String(lc), "utf-8");
     } catch {
     }
   }
@@ -9852,7 +10375,7 @@ async function syncCursorTranscriptsLocal(mcpPort, mcpToken, repo) {
   return { sessions: totalSessions, messages: totalMessages };
 }
 function parseTranscriptFile(filePath) {
-  const content = readFileSync8(filePath, "utf-8");
+  const content = readFileSync9(filePath, "utf-8");
   const lines = content.split("\n").filter(Boolean);
   const messages = [];
   for (let i = 0; i < lines.length; i++) {
@@ -9900,7 +10423,7 @@ async function syncTranscriptsLocal(mcpPort, mcpToken, repo) {
   for (let i = 0; i < files.length; i++) {
     const file = files[i];
     const sessionId = file.replace(".jsonl", "");
-    const filePath = join8(projectsDir, file);
+    const filePath = join9(projectsDir, file);
     try {
       const allMessages = parseTranscriptFile(filePath);
       const messages = allMessages.length > 500 ? allMessages.slice(-500) : allMessages;
@@ -9922,9 +10445,9 @@ async function syncTranscriptsLocal(mcpPort, mcpToken, repo) {
       process.stdout.write(`\r  Progress: ${i + 1}/${files.length} sessions (${totalMessages} messages embedded)   `);
     }
     try {
-      const content = readFileSync8(join8(projectsDir, file), "utf-8");
+      const content = readFileSync9(join9(projectsDir, file), "utf-8");
       const lineCount = content.split("\n").filter(Boolean).length;
-      writeFileSync7(join8(OFFSETS_DIR, sessionId), String(lineCount), "utf-8");
+      writeFileSync8(join9(OFFSETS_DIR, sessionId), String(lineCount), "utf-8");
     } catch {
     }
   }
@@ -9945,7 +10468,7 @@ async function syncTranscriptsBulk(gatewayUrl, token, repo) {
     const sessions = [];
     for (const file of batch) {
       const sessionId = file.replace(".jsonl", "");
-      const filePath = join8(projectsDir, file);
+      const filePath = join9(projectsDir, file);
       try {
         const allMessages = parseTranscriptFile(filePath);
         const messages = allMessages.length > maxMessagesPerSession ? allMessages.slice(-maxMessagesPerSession) : allMessages;
@@ -9974,11 +10497,11 @@ async function syncTranscriptsBulk(gatewayUrl, token, repo) {
     }
     for (const file of batch) {
       const sessionId = file.replace(".jsonl", "");
-      const filePath = join8(projectsDir, file);
+      const filePath = join9(projectsDir, file);
       try {
-        const content = readFileSync8(filePath, "utf-8");
+        const content = readFileSync9(filePath, "utf-8");
         const lineCount = content.split("\n").filter(Boolean).length;
-        writeFileSync7(join8(OFFSETS_DIR, sessionId), String(lineCount), "utf-8");
+        writeFileSync8(join9(OFFSETS_DIR, sessionId), String(lineCount), "utf-8");
       } catch {
       }
     }
@@ -10001,11 +10524,12 @@ var init_install = __esm({
     init_repoConnect();
     init_projects();
     init_promptFetcher();
+    init_claudeDesktopTap();
     init_dockerInstall();
-    SYNKRO_DIR4 = join8(homedir8(), ".synkro");
-    HOOKS_DIR = join8(SYNKRO_DIR4, "hooks");
-    BIN_DIR = join8(SYNKRO_DIR4, "bin");
-    CONFIG_PATH2 = join8(SYNKRO_DIR4, "config.env");
+    SYNKRO_DIR4 = join9(homedir9(), ".synkro");
+    HOOKS_DIR = join9(SYNKRO_DIR4, "hooks");
+    BIN_DIR = join9(SYNKRO_DIR4, "bin");
+    CONFIG_PATH2 = join9(SYNKRO_DIR4, "config.env");
     MCP_STDIO_PROXY_SRC = `#!/usr/bin/env bun
 import { readFileSync } from 'node:fs';
 import { homedir } from 'node:os';
@@ -10116,21 +10640,21 @@ rl.on('line', async (line) => {
   }
 });
 `;
-    OFFSETS_DIR = join8(SYNKRO_DIR4, ".transcript-offsets");
+    OFFSETS_DIR = join9(SYNKRO_DIR4, ".transcript-offsets");
   }
 });
 
 // cli/local-cc/install.ts
-import { existsSync as existsSync11, mkdirSync as mkdirSync9, writeFileSync as writeFileSync8, readFileSync as readFileSync9, chmodSync as chmodSync3, copyFileSync as copyFileSync2, renameSync as renameSync4, unlinkSync as unlinkSync5, openSync, fsyncSync, closeSync } from "fs";
-import { join as join9 } from "path";
-import { homedir as homedir9 } from "os";
+import { existsSync as existsSync12, mkdirSync as mkdirSync9, writeFileSync as writeFileSync9, readFileSync as readFileSync10, chmodSync as chmodSync3, copyFileSync as copyFileSync2, renameSync as renameSync4, unlinkSync as unlinkSync5, openSync, fsyncSync, closeSync } from "fs";
+import { join as join10 } from "path";
+import { homedir as homedir10 } from "os";
 import { spawnSync as spawnSync4 } from "child_process";
 function writePluginFiles() {
   for (const c of CHANNELS) {
     mkdirSync9(c.sessionDir, { recursive: true });
     mkdirSync9(c.pluginSettingsDir, { recursive: true });
-    writeFileSync8(c.pluginPkgPath, PLUGIN_PACKAGE_JSON, "utf-8");
-    writeFileSync8(
+    writeFileSync9(c.pluginPkgPath, PLUGIN_PACKAGE_JSON, "utf-8");
+    writeFileSync9(
       c.pluginSettingsPath,
       JSON.stringify({
         fastMode: true,
@@ -10138,7 +10662,7 @@ function writePluginFiles() {
       }, null, 2) + "\n",
       "utf-8"
     );
-    writeFileSync8(c.runScriptPath, c.runScriptSource, "utf-8");
+    writeFileSync9(c.runScriptPath, c.runScriptSource, "utf-8");
     chmodSync3(c.runScriptPath, 493);
   }
 }
@@ -10157,10 +10681,10 @@ function runBunInstall() {
   }
 }
 function safelyMutateClaudeJson(mutator) {
-  if (!existsSync11(CLAUDE_JSON_PATH)) {
+  if (!existsSync12(CLAUDE_JSON_PATH)) {
     return;
   }
-  const originalText = readFileSync9(CLAUDE_JSON_PATH, "utf-8");
+  const originalText = readFileSync10(CLAUDE_JSON_PATH, "utf-8");
   let parsed;
   try {
     parsed = JSON.parse(originalText);
@@ -10192,7 +10716,7 @@ function safelyMutateClaudeJson(mutator) {
   copyFileSync2(CLAUDE_JSON_PATH, CLAUDE_JSON_BACKUP_PATH);
   const tmpPath = `${CLAUDE_JSON_PATH}.synkro-tmp.${process.pid}`;
   try {
-    writeFileSync8(tmpPath, newText, "utf-8");
+    writeFileSync9(tmpPath, newText, "utf-8");
     const fd = openSync(tmpPath, "r");
     try {
       fsyncSync(fd);
@@ -10225,7 +10749,7 @@ function writeProjectMcpJson() {
         }
       }
     };
-    writeFileSync8(c.projectMcpPath, JSON.stringify(mcp, null, 2) + "\n", "utf-8");
+    writeFileSync9(c.projectMcpPath, JSON.stringify(mcp, null, 2) + "\n", "utf-8");
   }
 }
 function patchClaudeJson() {
@@ -10302,42 +10826,42 @@ var CLAUDE_JSON_BACKUP_PATH, SESSION_DIR, PLUGIN_PATH, PLUGIN_PKG_PATH, PLUGIN_S
 var init_install2 = __esm({
   "cli/local-cc/install.ts"() {
     "use strict";
-    CLAUDE_JSON_BACKUP_PATH = join9(homedir9(), ".claude.json.synkro-bak");
-    SESSION_DIR = join9(homedir9(), ".synkro", "cc_sessions");
-    PLUGIN_PATH = join9(SESSION_DIR, "synkro-channel.ts");
-    PLUGIN_PKG_PATH = join9(SESSION_DIR, "package.json");
-    PLUGIN_SETTINGS_DIR = join9(SESSION_DIR, ".claude");
-    PLUGIN_SETTINGS_PATH = join9(PLUGIN_SETTINGS_DIR, "settings.json");
-    PROJECT_MCP_PATH = join9(SESSION_DIR, ".mcp.json");
-    CLAUDE_JSON_PATH = join9(homedir9(), ".claude.json");
-    RUN_SCRIPT_PATH = join9(SESSION_DIR, "run-claude.sh");
+    CLAUDE_JSON_BACKUP_PATH = join10(homedir10(), ".claude.json.synkro-bak");
+    SESSION_DIR = join10(homedir10(), ".synkro", "cc_sessions");
+    PLUGIN_PATH = join10(SESSION_DIR, "synkro-channel.ts");
+    PLUGIN_PKG_PATH = join10(SESSION_DIR, "package.json");
+    PLUGIN_SETTINGS_DIR = join10(SESSION_DIR, ".claude");
+    PLUGIN_SETTINGS_PATH = join10(PLUGIN_SETTINGS_DIR, "settings.json");
+    PROJECT_MCP_PATH = join10(SESSION_DIR, ".mcp.json");
+    CLAUDE_JSON_PATH = join10(homedir10(), ".claude.json");
+    RUN_SCRIPT_PATH = join10(SESSION_DIR, "run-claude.sh");
     TMUX_SESSION_NAME = "synkro-local-cc";
     CHANNEL_1_PORT = 8941;
-    SESSION_DIR_2 = join9(homedir9(), ".synkro", "cc_sessions_2");
-    PLUGIN_PATH_2 = join9(SESSION_DIR_2, "synkro-channel.ts");
-    PLUGIN_PKG_PATH_2 = join9(SESSION_DIR_2, "package.json");
-    PLUGIN_SETTINGS_DIR_2 = join9(SESSION_DIR_2, ".claude");
-    PLUGIN_SETTINGS_PATH_2 = join9(PLUGIN_SETTINGS_DIR_2, "settings.json");
-    PROJECT_MCP_PATH_2 = join9(SESSION_DIR_2, ".mcp.json");
-    RUN_SCRIPT_PATH_2 = join9(SESSION_DIR_2, "run-claude.sh");
+    SESSION_DIR_2 = join10(homedir10(), ".synkro", "cc_sessions_2");
+    PLUGIN_PATH_2 = join10(SESSION_DIR_2, "synkro-channel.ts");
+    PLUGIN_PKG_PATH_2 = join10(SESSION_DIR_2, "package.json");
+    PLUGIN_SETTINGS_DIR_2 = join10(SESSION_DIR_2, ".claude");
+    PLUGIN_SETTINGS_PATH_2 = join10(PLUGIN_SETTINGS_DIR_2, "settings.json");
+    PROJECT_MCP_PATH_2 = join10(SESSION_DIR_2, ".mcp.json");
+    RUN_SCRIPT_PATH_2 = join10(SESSION_DIR_2, "run-claude.sh");
     TMUX_SESSION_NAME_2 = "synkro-local-cc-2";
     CHANNEL_2_PORT = 8951;
-    SESSION_DIR_3 = join9(homedir9(), ".synkro", "cc_sessions_3");
-    PLUGIN_PATH_3 = join9(SESSION_DIR_3, "synkro-channel.ts");
-    PLUGIN_PKG_PATH_3 = join9(SESSION_DIR_3, "package.json");
-    PLUGIN_SETTINGS_DIR_3 = join9(SESSION_DIR_3, ".claude");
-    PLUGIN_SETTINGS_PATH_3 = join9(PLUGIN_SETTINGS_DIR_3, "settings.json");
-    PROJECT_MCP_PATH_3 = join9(SESSION_DIR_3, ".mcp.json");
-    RUN_SCRIPT_PATH_3 = join9(SESSION_DIR_3, "run-claude.sh");
+    SESSION_DIR_3 = join10(homedir10(), ".synkro", "cc_sessions_3");
+    PLUGIN_PATH_3 = join10(SESSION_DIR_3, "synkro-channel.ts");
+    PLUGIN_PKG_PATH_3 = join10(SESSION_DIR_3, "package.json");
+    PLUGIN_SETTINGS_DIR_3 = join10(SESSION_DIR_3, ".claude");
+    PLUGIN_SETTINGS_PATH_3 = join10(PLUGIN_SETTINGS_DIR_3, "settings.json");
+    PROJECT_MCP_PATH_3 = join10(SESSION_DIR_3, ".mcp.json");
+    RUN_SCRIPT_PATH_3 = join10(SESSION_DIR_3, "run-claude.sh");
     TMUX_SESSION_NAME_3 = "synkro-local-cc-3";
     CHANNEL_3_PORT = 8942;
-    SESSION_DIR_4 = join9(homedir9(), ".synkro", "cc_sessions_4");
-    PLUGIN_PATH_4 = join9(SESSION_DIR_4, "synkro-channel.ts");
-    PLUGIN_PKG_PATH_4 = join9(SESSION_DIR_4, "package.json");
-    PLUGIN_SETTINGS_DIR_4 = join9(SESSION_DIR_4, ".claude");
-    PLUGIN_SETTINGS_PATH_4 = join9(PLUGIN_SETTINGS_DIR_4, "settings.json");
-    PROJECT_MCP_PATH_4 = join9(SESSION_DIR_4, ".mcp.json");
-    RUN_SCRIPT_PATH_4 = join9(SESSION_DIR_4, "run-claude.sh");
+    SESSION_DIR_4 = join10(homedir10(), ".synkro", "cc_sessions_4");
+    PLUGIN_PATH_4 = join10(SESSION_DIR_4, "synkro-channel.ts");
+    PLUGIN_PKG_PATH_4 = join10(SESSION_DIR_4, "package.json");
+    PLUGIN_SETTINGS_DIR_4 = join10(SESSION_DIR_4, ".claude");
+    PLUGIN_SETTINGS_PATH_4 = join10(PLUGIN_SETTINGS_DIR_4, "settings.json");
+    PROJECT_MCP_PATH_4 = join10(SESSION_DIR_4, ".mcp.json");
+    RUN_SCRIPT_PATH_4 = join10(SESSION_DIR_4, "run-claude.sh");
     TMUX_SESSION_NAME_4 = "synkro-local-cc-4";
     CHANNEL_4_PORT = 8952;
     RUN_SCRIPT_SOURCE = `#!/usr/bin/env bash
@@ -10611,9 +11135,9 @@ var disconnect_exports = {};
 __export(disconnect_exports, {
   disconnectCommand: () => disconnectCommand
 });
-import { existsSync as existsSync12, rmSync, readdirSync as readdirSync4 } from "fs";
-import { homedir as homedir10 } from "os";
-import { join as join10 } from "path";
+import { existsSync as existsSync13, rmSync, readdirSync as readdirSync4 } from "fs";
+import { homedir as homedir11 } from "os";
+import { join as join11 } from "path";
 import { spawnSync as spawnSync5 } from "child_process";
 import { createInterface as createInterface4 } from "readline";
 async function tearDownLocalCC() {
@@ -10687,15 +11211,15 @@ async function disconnectCommand(args2 = []) {
     const cursorMcpRemoved = uninstallCursorMcpConfig();
     console.log(`${cursorMcpRemoved ? "\u2713" : "\xB7"} MCP guardrails (Cursor): ${cursorMcpRemoved ? "removed from ~/.cursor/mcp.json" : "no entry found"}`);
   }
-  if (existsSync12(SYNKRO_DIR5)) {
+  if (existsSync13(SYNKRO_DIR5)) {
     if (purge) {
       rmSync(SYNKRO_DIR5, { recursive: true, force: true });
       console.log(`\u2713 wiped ${SYNKRO_DIR5} entirely \u2014 including all scan data and backups`);
     } else {
-      const keep = /* @__PURE__ */ new Set([join10(SYNKRO_DIR5, "pgdata"), join10(SYNKRO_DIR5, "pgdata-backups")]);
+      const keep = /* @__PURE__ */ new Set([join11(SYNKRO_DIR5, "pgdata"), join11(SYNKRO_DIR5, "pgdata-backups")]);
       const preserved = [];
       for (const entry of readdirSync4(SYNKRO_DIR5)) {
-        const full = join10(SYNKRO_DIR5, entry);
+        const full = join11(SYNKRO_DIR5, entry);
         if (keep.has(full)) {
           preserved.push(entry);
           continue;
@@ -10725,14 +11249,14 @@ var init_disconnect = __esm({
     init_install2();
     init_dockerInstall();
     init_macKeychain();
-    SYNKRO_DIR5 = join10(homedir10(), ".synkro");
+    SYNKRO_DIR5 = join11(homedir11(), ".synkro");
   }
 });
 
 // cli/local-cc/turnLog.ts
-import { appendFileSync, existsSync as existsSync13, mkdirSync as mkdirSync10, openSync as openSync2, readFileSync as readFileSync10, readSync, closeSync as closeSync2, statSync as statSync3, watchFile, unwatchFile } from "fs";
-import { dirname as dirname6, join as join11 } from "path";
-import { homedir as homedir11 } from "os";
+import { appendFileSync, existsSync as existsSync14, mkdirSync as mkdirSync10, openSync as openSync2, readFileSync as readFileSync11, readSync, closeSync as closeSync2, statSync as statSync3, watchFile, unwatchFile } from "fs";
+import { dirname as dirname6, join as join12 } from "path";
+import { homedir as homedir12 } from "os";
 function truncate(s, max = PREVIEW_MAX) {
   if (s.length <= max) return s;
   return s.slice(0, max) + "\u2026 [+" + (s.length - max) + " chars]";
@@ -10768,11 +11292,11 @@ function appendTurn(args2) {
   }
 }
 function readRecentTurns(n = 20) {
-  if (!existsSync13(TURN_LOG_PATH)) return [];
+  if (!existsSync14(TURN_LOG_PATH)) return [];
   try {
     const size = statSync3(TURN_LOG_PATH).size;
     if (size === 0) return [];
-    const text = readFileSync10(TURN_LOG_PATH, "utf-8");
+    const text = readFileSync11(TURN_LOG_PATH, "utf-8");
     const lines = text.split("\n").filter(Boolean);
     const lastN = lines.slice(-n).reverse();
     return lastN.map((line) => {
@@ -10789,7 +11313,7 @@ function readRecentTurns(n = 20) {
 function followTurns(onEntry) {
   try {
     mkdirSync10(dirname6(TURN_LOG_PATH), { recursive: true });
-    if (!existsSync13(TURN_LOG_PATH)) {
+    if (!existsSync14(TURN_LOG_PATH)) {
       appendFileSync(TURN_LOG_PATH, "", "utf-8");
     }
   } catch {
@@ -10851,7 +11375,7 @@ var TURN_LOG_PATH, PREVIEW_MAX;
 var init_turnLog = __esm({
   "cli/local-cc/turnLog.ts"() {
     "use strict";
-    TURN_LOG_PATH = join11(homedir11(), ".synkro", "cc_sessions", "turns.log");
+    TURN_LOG_PATH = join12(homedir12(), ".synkro", "cc_sessions", "turns.log");
     PREVIEW_MAX = 400;
   }
 });
@@ -11000,9 +11524,9 @@ var init_grade = __esm({
 });
 
 // cli/local-cc/pueue.ts
-import { execFileSync as execFileSync3, spawnSync as spawnSync6, spawn } from "child_process";
-import { homedir as homedir12 } from "os";
-import { join as join12 } from "path";
+import { execFileSync as execFileSync3, spawnSync as spawnSync6, spawn as spawn2 } from "child_process";
+import { homedir as homedir13 } from "os";
+import { join as join13 } from "path";
 import { connect as connect2 } from "net";
 function pueueAvailable() {
   const r = spawnSync6("pueue", ["--version"], { encoding: "utf-8" });
@@ -11068,7 +11592,7 @@ function startTask(opts = {}) {
     spawnSync6("pueue", ["remove", String(existing.id)], { encoding: "utf-8" });
     existing = findTask(ch);
   }
-  const runScript = join12(cwd, "run-claude.sh");
+  const runScript = join13(cwd, "run-claude.sh");
   const args2 = [
     "add",
     "--label",
@@ -11165,7 +11689,7 @@ function assertPueueInstalled() {
   const status = spawnSync6("pueue", ["status", "--json"], { encoding: "utf-8", timeout: 5e3 });
   if (status.status !== 0) {
     console.log("  Starting pueued daemon...");
-    const child = spawn("pueued", ["-d"], { stdio: "ignore", detached: true });
+    const child = spawn2("pueued", ["-d"], { stdio: "ignore", detached: true });
     child.unref();
     spawnSync6("sleep", ["1"]);
     const retry = spawnSync6("pueue", ["status", "--json"], { encoding: "utf-8", timeout: 5e3 });
@@ -11198,12 +11722,12 @@ var init_pueue = __esm({
     "use strict";
     TASK_LABEL = "synkro-local-cc";
     TMUX_SESSION = "synkro-local-cc";
-    SESSION_DIR2 = join12(homedir12(), ".synkro", "cc_sessions");
+    SESSION_DIR2 = join13(homedir13(), ".synkro", "cc_sessions");
     TASK_LABEL_2 = "synkro-local-cc-2";
     TMUX_SESSION_2 = "synkro-local-cc-2";
-    SESSION_DIR_22 = join12(homedir12(), ".synkro", "cc_sessions_2");
-    SESSION_DIR_32 = join12(homedir12(), ".synkro", "cc_sessions_3");
-    SESSION_DIR_42 = join12(homedir12(), ".synkro", "cc_sessions_4");
+    SESSION_DIR_22 = join13(homedir13(), ".synkro", "cc_sessions_2");
+    SESSION_DIR_32 = join13(homedir13(), ".synkro", "cc_sessions_3");
+    SESSION_DIR_42 = join13(homedir13(), ".synkro", "cc_sessions_4");
     PueueError = class extends Error {
       constructor(message, cause) {
         super(message);
@@ -11218,13 +11742,13 @@ var init_pueue = __esm({
 });
 
 // cli/local-cc/settings.ts
-import { existsSync as existsSync14, readFileSync as readFileSync11 } from "fs";
-import { homedir as homedir13 } from "os";
-import { join as join13 } from "path";
+import { existsSync as existsSync15, readFileSync as readFileSync12 } from "fs";
+import { homedir as homedir14 } from "os";
+import { join as join14 } from "path";
 function isLocalCCEnabled() {
-  if (!existsSync14(CONFIG_PATH3)) return false;
+  if (!existsSync15(CONFIG_PATH3)) return false;
   try {
-    const content = readFileSync11(CONFIG_PATH3, "utf-8");
+    const content = readFileSync12(CONFIG_PATH3, "utf-8");
     const match = content.match(/^SYNKRO_LOCAL_INFERENCE='([^']*)'/m);
     return match?.[1] === "yes";
   } catch {
@@ -11235,7 +11759,7 @@ var CONFIG_PATH3;
 var init_settings = __esm({
   "cli/local-cc/settings.ts"() {
     "use strict";
-    CONFIG_PATH3 = join13(homedir13(), ".synkro", "config.env");
+    CONFIG_PATH3 = join14(homedir14(), ".synkro", "config.env");
   }
 });
 
@@ -11245,10 +11769,10 @@ __export(localCc_exports, {
   localCcCommand: () => localCcCommand
 });
 import { spawnSync as spawnSync7 } from "child_process";
-import { homedir as homedir14 } from "os";
-import { join as join14 } from "path";
+import { homedir as homedir15 } from "os";
+import { join as join15 } from "path";
 import { readFileSync as fsReadFileSync, existsSync as fsExistsSync } from "fs";
-import { existsSync as existsSync15, readFileSync as readFileSync12, writeFileSync as writeFileSync9 } from "fs";
+import { existsSync as existsSync16, readFileSync as readFileSync13, writeFileSync as writeFileSync10 } from "fs";
 function deploymentMode() {
   const env = (process.env.SYNKRO_DEPLOYMENT_MODE || "").toLowerCase();
   if (env === "docker") return "docker";
@@ -11354,15 +11878,15 @@ TROUBLESHOOTING
 `);
 }
 function readGatewayUrl() {
-  if (existsSync15(CONFIG_PATH4)) {
-    const m = readFileSync12(CONFIG_PATH4, "utf-8").match(/^SYNKRO_GATEWAY_URL='([^']*)'/m);
+  if (existsSync16(CONFIG_PATH4)) {
+    const m = readFileSync13(CONFIG_PATH4, "utf-8").match(/^SYNKRO_GATEWAY_URL='([^']*)'/m);
     if (m) return m[1];
   }
   return "https://api.synkro.sh";
 }
 function updateLocalInferenceFlag(enabled) {
-  if (!existsSync15(CONFIG_PATH4)) return;
-  let content = readFileSync12(CONFIG_PATH4, "utf-8");
+  if (!existsSync16(CONFIG_PATH4)) return;
+  let content = readFileSync13(CONFIG_PATH4, "utf-8");
   const flag = enabled ? "yes" : "no";
   if (content.includes("SYNKRO_LOCAL_INFERENCE=")) {
     content = content.replace(/^SYNKRO_LOCAL_INFERENCE='[^']*'/m, `SYNKRO_LOCAL_INFERENCE='${flag}'`);
@@ -11371,7 +11895,7 @@ function updateLocalInferenceFlag(enabled) {
 SYNKRO_LOCAL_INFERENCE='${flag}'
 `;
   }
-  writeFileSync9(CONFIG_PATH4, content, "utf-8");
+  writeFileSync10(CONFIG_PATH4, content, "utf-8");
 }
 async function setServerGradingProvider(provider) {
   await ensureValidToken();
@@ -11801,8 +12325,8 @@ var init_localCc = __esm({
     init_install();
     init_client();
     init_stub();
-    SYNKRO_CONFIG_PATH = join14(homedir14(), ".synkro", "config.env");
-    CONFIG_PATH4 = join14(homedir14(), ".synkro", "config.env");
+    SYNKRO_CONFIG_PATH = join15(homedir15(), ".synkro", "config.env");
+    CONFIG_PATH4 = join15(homedir15(), ".synkro", "config.env");
   }
 });
 
@@ -11913,13 +12437,13 @@ var config_exports = {};
 __export(config_exports, {
   configCommand: () => configCommand
 });
-import { readFileSync as readFileSync13, writeFileSync as writeFileSync10, existsSync as existsSync16 } from "fs";
-import { join as join15 } from "path";
-import { homedir as homedir15 } from "os";
+import { readFileSync as readFileSync14, writeFileSync as writeFileSync11, existsSync as existsSync17 } from "fs";
+import { join as join16 } from "path";
+import { homedir as homedir16 } from "os";
 function readConfigEnv() {
-  if (!existsSync16(CONFIG_PATH5)) return {};
+  if (!existsSync17(CONFIG_PATH5)) return {};
   const out = {};
-  for (const line of readFileSync13(CONFIG_PATH5, "utf-8").split("\n")) {
+  for (const line of readFileSync14(CONFIG_PATH5, "utf-8").split("\n")) {
     const t = line.trim();
     if (!t || t.startsWith("#")) continue;
     const eq = t.indexOf("=");
@@ -11928,11 +12452,11 @@ function readConfigEnv() {
   return out;
 }
 function updateConfigValue(key, value) {
-  if (!existsSync16(CONFIG_PATH5)) {
+  if (!existsSync17(CONFIG_PATH5)) {
     console.error("No config found. Run `synkro install` first.");
     process.exit(1);
   }
-  const lines = readFileSync13(CONFIG_PATH5, "utf-8").split("\n");
+  const lines = readFileSync14(CONFIG_PATH5, "utf-8").split("\n");
   const pattern = new RegExp(`^${key}=`);
   let found = false;
   const updated = lines.map((line) => {
@@ -11943,7 +12467,7 @@ function updateConfigValue(key, value) {
     return line;
   });
   if (!found) updated.splice(updated.length - 1, 0, `${key}='${value}'`);
-  writeFileSync10(CONFIG_PATH5, updated.join("\n"), "utf-8");
+  writeFileSync11(CONFIG_PATH5, updated.join("\n"), "utf-8");
 }
 async function reconcileContainer() {
   const cfg = readConfigEnv();
@@ -12053,20 +12577,20 @@ var init_config = __esm({
   "cli/commands/config.ts"() {
     "use strict";
     init_stub();
-    SYNKRO_DIR6 = join15(homedir15(), ".synkro");
-    CONFIG_PATH5 = join15(SYNKRO_DIR6, "config.env");
+    SYNKRO_DIR6 = join16(homedir16(), ".synkro");
+    CONFIG_PATH5 = join16(SYNKRO_DIR6, "config.env");
   }
 });
 
 // cli/bootstrap.js
-import { readFileSync as readFileSync14, existsSync as existsSync17 } from "fs";
+import { readFileSync as readFileSync15, existsSync as existsSync18 } from "fs";
 import { resolve as resolve3 } from "path";
 var envCandidates = [
   resolve3(process.env.HOME ?? "", ".synkro", "config.env")
 ];
 for (const envPath of envCandidates) {
-  if (!existsSync17(envPath)) continue;
-  const envContent = readFileSync14(envPath, "utf-8");
+  if (!existsSync18(envPath)) continue;
+  const envContent = readFileSync15(envPath, "utf-8");
   for (const line of envContent.split("\n")) {
     const trimmed = line.trim();
     if (!trimmed || trimmed.startsWith("#")) continue;
@@ -12081,7 +12605,7 @@ var args = process.argv.slice(2);
 var cmd = args[0] || "";
 var subArgs = args.slice(1);
 function printVersion() {
-  console.log("1.6.53");
+  console.log("1.6.55");
 }
 function printHelp2() {
   console.log(`Synkro CLI \u2014 runtime safety for AI coding agents
@@ -12097,6 +12621,7 @@ Commands:
   restart [opts]         Safe restart (stop \u2192 start, data preserved)
   update                 Pull the latest container image and safely restart
   config                 Show or change grading + storage modes
+  claude-desktop         Monitor Claude Desktop conversations (local, macOS)
   version                Show version
 
   config:
@@ -12192,6 +12717,11 @@ async function main() {
       await configCommand2(args.slice(1));
       break;
     }
+    case "claude-desktop": {
+      const { runClaudeDesktopTap: runClaudeDesktopTap2 } = await Promise.resolve().then(() => (init_claudeDesktopTap(), claudeDesktopTap_exports));
+      await runClaudeDesktopTap2();
+      break;
+    }
     default: {
       console.error(`Unknown command: ${cmd}`);
       printHelp2();