@westbayberry/dg 1.0.35 → 1.0.39

package/dist/index.mjs

@@ -226,7 +226,7 @@ function loadDgrc() {
 function validateApiUrl(url) {
   try {
     const parsed = new URL(url);
-    const isLocal = parsed.hostname === "localhost" || parsed.hostname.startsWith("127.");
+    const isLocal = parsed.hostname === "localhost" || parsed.hostname.startsWith("127.") || parsed.hostname.startsWith("100.") || parsed.hostname.startsWith("192.168.");
     if (parsed.protocol !== "https:" && !isLocal) {
       process.stderr.write(`Error: API URL must use HTTPS (got ${parsed.protocol}). Use localhost for local testing.
 `);
@@ -264,6 +264,7 @@ function parseConfig(argv, strictFlags = true) {
         "scan-all": { type: "boolean", default: false },
         "base-lockfile": { type: "string" },
         workspace: { type: "string", short: "w" },
+        output: { type: "string", short: "o" },
         debug: { type: "boolean", default: false },
         help: { type: "boolean", default: false },
         version: { type: "boolean", default: false },
@@ -329,6 +330,7 @@ function parseConfig(argv, strictFlags = true) {
     scanAll: values["scan-all"],
     baseLockfile: values["base-lockfile"] ?? null,
     workspace: values.workspace ?? process.env.DG_WORKSPACE ?? null,
+    outputFile: values.output ?? null,
     command,
     debug
   };
@@ -367,6 +369,7 @@ var init_config = __esm({
     --scan-all               Scan all packages, not just changed
     --base-lockfile <path>   Path to base lockfile for explicit diff
     --workspace <dir>        Scan a specific workspace subdirectory
+    --output, -o <file>      Save JSON results to file (use with --json)
     --debug                  Show diagnostic output (discovery, batches, timing)
     --help                   Show this help message
     --version                Show version number
@@ -1457,15 +1460,15 @@ var require_route = __commonJS({
       };
     }
     function wrapConversion(toModel, graph) {
-      const path = [graph[toModel].parent, toModel];
+      const path2 = [graph[toModel].parent, toModel];
       let fn = conversions[graph[toModel].parent][toModel];
       let cur = graph[toModel].parent;
       while (graph[cur].parent) {
-        path.unshift(graph[cur].parent);
+        path2.unshift(graph[cur].parent);
         fn = link2(conversions[graph[cur].parent][cur], fn);
         cur = graph[cur].parent;
       }
-      fn.conversion = path;
+      fn.conversion = path2;
       return fn;
     }
     module.exports = function(fromModel) {
@@ -1904,14 +1907,14 @@ var require_templates = __commonJS({
       }
       return results;
     }
-    function buildStyle(chalk10, styles8) {
+    function buildStyle(chalk8, styles8) {
       const enabled = {};
       for (const layer of styles8) {
         for (const style of layer.styles) {
           enabled[style[0]] = layer.inverse ? null : style.slice(1);
         }
       }
-      let current = chalk10;
+      let current = chalk8;
       for (const [styleName, styles9] of Object.entries(enabled)) {
         if (!Array.isArray(styles9)) {
           continue;
@@ -1923,7 +1926,7 @@ var require_templates = __commonJS({
       }
       return current;
     }
-    module.exports = (chalk10, temporary) => {
+    module.exports = (chalk8, temporary) => {
       const styles8 = [];
       const chunks = [];
       let chunk = [];
@@ -1933,13 +1936,13 @@ var require_templates = __commonJS({
         } else if (style) {
           const string = chunk.join("");
           chunk = [];
-          chunks.push(styles8.length === 0 ? string : buildStyle(chalk10, styles8)(string));
+          chunks.push(styles8.length === 0 ? string : buildStyle(chalk8, styles8)(string));
           styles8.push({ inverse, styles: parseStyle(style) });
         } else if (close) {
           if (styles8.length === 0) {
             throw new Error("Found extraneous } in Chalk template literal");
           }
-          chunks.push(buildStyle(chalk10, styles8)(chunk.join("")));
+          chunks.push(buildStyle(chalk8, styles8)(chunk.join("")));
           chunk = [];
           styles8.pop();
         } else {
@@ -1987,16 +1990,16 @@ var require_source = __commonJS({
       }
     };
     var chalkFactory2 = (options) => {
-      const chalk11 = {};
-      applyOptions2(chalk11, options);
-      chalk11.template = (...arguments_) => chalkTag(chalk11.template, ...arguments_);
-      Object.setPrototypeOf(chalk11, Chalk.prototype);
-      Object.setPrototypeOf(chalk11.template, chalk11);
-      chalk11.template.constructor = () => {
+      const chalk9 = {};
+      applyOptions2(chalk9, options);
+      chalk9.template = (...arguments_) => chalkTag(chalk9.template, ...arguments_);
+      Object.setPrototypeOf(chalk9, Chalk.prototype);
+      Object.setPrototypeOf(chalk9.template, chalk9);
+      chalk9.template.constructor = () => {
         throw new Error("`chalk.constructor()` is deprecated. Use `new chalk.Instance()` instead.");
       };
-      chalk11.template.Instance = ChalkClass;
-      return chalk11.template;
+      chalk9.template.Instance = ChalkClass;
+      return chalk9.template;
     };
     function Chalk(options) {
       return chalkFactory2(options);
@@ -2107,7 +2110,7 @@ var require_source = __commonJS({
       return openAll + string + closeAll;
     };
     var template;
-    var chalkTag = (chalk11, ...strings) => {
+    var chalkTag = (chalk9, ...strings) => {
       const [firstString] = strings;
       if (!isArray(firstString) || !isArray(firstString.raw)) {
         return strings.join(" ");
@@ -2123,14 +2126,14 @@ var require_source = __commonJS({
       if (template === void 0) {
         template = require_templates();
       }
-      return template(chalk11, parts.join(""));
+      return template(chalk9, parts.join(""));
     };
     Object.defineProperties(Chalk.prototype, styles8);
-    var chalk10 = Chalk();
-    chalk10.supportsColor = stdoutColor2;
-    chalk10.stderr = Chalk({ level: stderrColor2 ? stderrColor2.level : 0 });
-    chalk10.stderr.supportsColor = stderrColor2;
-    module.exports = chalk10;
+    var chalk8 = Chalk();
+    chalk8.supportsColor = stdoutColor2;
+    chalk8.stderr = Chalk({ level: stderrColor2 ? stderrColor2.level : 0 });
+    chalk8.stderr.supportsColor = stderrColor2;
+    module.exports = chalk8;
   }
 });
 
@@ -2261,7 +2264,7 @@ var require_react_production_min = __commonJS({
       });
       return d;
     }
-    function T2(a) {
+    function T(a) {
       if (-1 === a._status) {
         var b = a._result;
         b = b();
@@ -2344,7 +2347,7 @@ var require_react_production_min = __commonJS({
     };
     exports.isValidElement = O;
     exports.lazy = function(a) {
-      return { $$typeof: y, _payload: { _status: -1, _result: a }, _init: T2 };
+      return { $$typeof: y, _payload: { _status: -1, _result: a }, _init: T };
     };
     exports.memo = function(a, b) {
       return { $$typeof: x, type: a, compare: void 0 === b ? null : b };
@@ -3466,19 +3469,19 @@ var require_react_development = __commonJS({
           }
           return dispatcher.useContext(Context);
         }
-        function useState9(initialState) {
+        function useState3(initialState) {
           var dispatcher = resolveDispatcher();
           return dispatcher.useState(initialState);
         }
-        function useReducer6(reducer5, initialArg, init) {
+        function useReducer5(reducer5, initialArg, init) {
           var dispatcher = resolveDispatcher();
           return dispatcher.useReducer(reducer5, initialArg, init);
         }
-        function useRef9(initialValue) {
+        function useRef4(initialValue) {
           var dispatcher = resolveDispatcher();
           return dispatcher.useRef(initialValue);
         }
-        function useEffect16(create2, deps) {
+        function useEffect10(create2, deps) {
           var dispatcher = resolveDispatcher();
           return dispatcher.useEffect(create2, deps);
         }
@@ -3490,7 +3493,7 @@ var require_react_development = __commonJS({
           var dispatcher = resolveDispatcher();
           return dispatcher.useLayoutEffect(create2, deps);
         }
-        function useCallback6(callback, deps) {
+        function useCallback4(callback, deps) {
           var dispatcher = resolveDispatcher();
           return dispatcher.useCallback(callback, deps);
         }
@@ -4257,19 +4260,19 @@ var require_react_development = __commonJS({
         exports.memo = memo;
         exports.startTransition = startTransition;
         exports.unstable_act = act;
-        exports.useCallback = useCallback6;
+        exports.useCallback = useCallback4;
         exports.useContext = useContext7;
         exports.useDebugValue = useDebugValue;
         exports.useDeferredValue = useDeferredValue;
-        exports.useEffect = useEffect16;
+        exports.useEffect = useEffect10;
         exports.useId = useId;
         exports.useImperativeHandle = useImperativeHandle;
         exports.useInsertionEffect = useInsertionEffect;
         exports.useLayoutEffect = useLayoutEffect2;
         exports.useMemo = useMemo4;
-        exports.useReducer = useReducer6;
-        exports.useRef = useRef9;
-        exports.useState = useState9;
+        exports.useReducer = useReducer5;
+        exports.useRef = useRef4;
+        exports.useState = useState3;
         exports.useSyncExternalStore = useSyncExternalStore;
         exports.useTransition = useTransition;
         exports.version = ReactVersion;
@@ -5162,14 +5165,14 @@ var init_yoga_wasm_base64_esm = __esm({
           b.P && b.O || Ta("makeClassHandle requires ptr and ptrType");
           !!b.U !== !!b.T && Ta("Both smartPtrType and smartPtr must be specified");
           b.count = { value: 1 };
-          return T2(Object.create(a, { M: { value: b } }));
+          return T(Object.create(a, { M: { value: b } }));
         }
-        function T2(a) {
-          if ("undefined" === typeof FinalizationRegistry) return T2 = (b) => b, a;
+        function T(a) {
+          if ("undefined" === typeof FinalizationRegistry) return T = (b) => b, a;
           Na = new FinalizationRegistry((b) => {
             Oa(b.M);
           });
-          T2 = (b) => {
+          T = (b) => {
             var c = b.M;
             c.T && Na.register(b, { M: c }, b);
             return b;
@@ -5177,7 +5180,7 @@ var init_yoga_wasm_base64_esm = __esm({
           Ma = (b) => {
             Na.unregister(b);
           };
-          return T2(a);
+          return T(a);
         }
         var Va = {};
         function Wa(a) {
@@ -5546,7 +5549,7 @@ var init_yoga_wasm_base64_esm = __esm({
         X.prototype.clone = function() {
           this.M.O || $a(this);
           if (this.M.aa) return this.M.count.value += 1, this;
-          var a = T2, b = Object, c = b.create, d = Object.getPrototypeOf(this), e = this.M;
+          var a = T, b = Object, c = b.create, d = Object.getPrototypeOf(this), e = this.M;
           a = a(c.call(b, d, { M: { value: { count: e.count, $: e.$, aa: e.aa, O: e.O, P: e.P, T: e.T, U: e.U } } }));
           a.M.count.value += 1;
           a.M.$ = false;
@@ -5643,7 +5646,7 @@ var init_yoga_wasm_base64_esm = __esm({
               l.notifyOnDestruction();
               n.aa = true;
               Object.defineProperties(this, { M: { value: n } });
-              T2(this);
+              T(this);
               l = n.O;
               l = Ia(e, l);
               Q.hasOwnProperty(l) ? L("Tried to register registered instance: " + l) : Q[l] = this;
@@ -6471,7 +6474,7 @@ function wrapAssembly(lib) {
     lib.Node.destroy(this);
   });
   patch(lib.Node.prototype, "freeRecursive", function() {
-    for (let t = 0, T2 = this.getChildCount(); t < T2; ++t) {
+    for (let t = 0, T = this.getChildCount(); t < T; ++t) {
       this.getChild(0).freeRecursive();
     }
     this.free();
@@ -6639,15 +6642,15 @@ var require_scheduler_production_min = __commonJS({
       F(R);
     };
     else if ("undefined" !== typeof MessageChannel) {
-      T2 = new MessageChannel(), U = T2.port2;
-      T2.port1.onmessage = R;
+      T = new MessageChannel(), U = T.port2;
+      T.port1.onmessage = R;
       S = function() {
         U.postMessage(null);
       };
     } else S = function() {
       D(R, 0);
     };
-    var T2;
+    var T;
     var U;
     function I(a) {
       O = a;
@@ -9817,7 +9820,7 @@ var require_react_reconciler_production_min = __commonJS({
             return null;
         }
       }
-      var Gg = false, S = false, Hg = "function" === typeof WeakSet ? WeakSet : Set, T2 = null;
+      var Gg = false, S = false, Hg = "function" === typeof WeakSet ? WeakSet : Set, T = null;
       function Ig(a, b) {
         var c = a.ref;
         if (null !== c) if ("function" === typeof c) try {
@@ -9837,9 +9840,9 @@ var require_react_reconciler_production_min = __commonJS({
       var Kg = false;
       function Lg(a, b) {
         Ha(a.containerInfo);
-        for (T2 = b; null !== T2; ) if (a = T2, b = a.child, 0 !== (a.subtreeFlags & 1028) && null !== b) b.return = a, T2 = b;
-        else for (; null !== T2; ) {
-          a = T2;
+        for (T = b; null !== T; ) if (a = T, b = a.child, 0 !== (a.subtreeFlags & 1028) && null !== b) b.return = a, T = b;
+        else for (; null !== T; ) {
+          a = T;
           try {
             var c = a.alternate;
             if (0 !== (a.flags & 1024)) switch (a.tag) {
@@ -9870,10 +9873,10 @@ var require_react_reconciler_production_min = __commonJS({
           b = a.sibling;
           if (null !== b) {
             b.return = a.return;
-            T2 = b;
+            T = b;
             break;
           }
-          T2 = a.return;
+          T = a.return;
         }
         c = Kg;
         Kg = false;
@@ -10201,9 +10204,9 @@ var require_react_reconciler_production_min = __commonJS({
             ah(a);
             if (d & 8192) {
               c = null !== a.memoizedState;
-              if ((a.stateNode.isHidden = c) && !g && 0 !== (a.mode & 1)) for (T2 = a, d = a.child; null !== d; ) {
-                for (b = T2 = d; null !== T2; ) {
-                  g = T2;
+              if ((a.stateNode.isHidden = c) && !g && 0 !== (a.mode & 1)) for (T = a, d = a.child; null !== d; ) {
+                for (b = T = d; null !== T; ) {
+                  g = T;
                   var h = g.child;
                   switch (g.tag) {
                     case 0:
@@ -10236,7 +10239,7 @@ var require_react_reconciler_production_min = __commonJS({
                         continue;
                       }
                   }
-                  null !== h ? (h.return = g, T2 = h) : ch(b);
+                  null !== h ? (h.return = g, T = h) : ch(b);
                 }
                 d = d.sibling;
               }
@@ -10325,12 +10328,12 @@ var require_react_reconciler_production_min = __commonJS({
         b & 4096 && (a.flags &= -4097);
       }
       function dh(a, b, c) {
-        T2 = a;
+        T = a;
         eh(a, b, c);
       }
       function eh(a, b, c) {
-        for (var d = 0 !== (a.mode & 1); null !== T2; ) {
-          var e = T2, f = e.child;
+        for (var d = 0 !== (a.mode & 1); null !== T; ) {
+          var e = T, f = e.child;
           if (22 === e.tag && d) {
             var g = null !== e.memoizedState || Gg;
             if (!g) {
@@ -10338,19 +10341,19 @@ var require_react_reconciler_production_min = __commonJS({
               h = Gg;
               var l = S;
               Gg = g;
-              if ((S = k) && !l) for (T2 = e; null !== T2; ) g = T2, k = g.child, 22 === g.tag && null !== g.memoizedState ? fh(e) : null !== k ? (k.return = g, T2 = k) : fh(e);
-              for (; null !== f; ) T2 = f, eh(f, b, c), f = f.sibling;
-              T2 = e;
+              if ((S = k) && !l) for (T = e; null !== T; ) g = T, k = g.child, 22 === g.tag && null !== g.memoizedState ? fh(e) : null !== k ? (k.return = g, T = k) : fh(e);
+              for (; null !== f; ) T = f, eh(f, b, c), f = f.sibling;
+              T = e;
               Gg = h;
               S = l;
             }
             gh(a, b, c);
-          } else 0 !== (e.subtreeFlags & 8772) && null !== f ? (f.return = e, T2 = f) : gh(a, b, c);
+          } else 0 !== (e.subtreeFlags & 8772) && null !== f ? (f.return = e, T = f) : gh(a, b, c);
         }
       }
       function gh(a) {
-        for (; null !== T2; ) {
-          var b = T2;
+        for (; null !== T; ) {
+          var b = T;
           if (0 !== (b.flags & 8772)) {
             var c = b.alternate;
             try {
@@ -10422,37 +10425,37 @@ var require_react_reconciler_production_min = __commonJS({
             }
           }
           if (b === a) {
-            T2 = null;
+            T = null;
             break;
           }
           c = b.sibling;
           if (null !== c) {
             c.return = b.return;
-            T2 = c;
+            T = c;
             break;
           }
-          T2 = b.return;
+          T = b.return;
         }
       }
       function ch(a) {
-        for (; null !== T2; ) {
-          var b = T2;
+        for (; null !== T; ) {
+          var b = T;
           if (b === a) {
-            T2 = null;
+            T = null;
             break;
           }
           var c = b.sibling;
           if (null !== c) {
             c.return = b.return;
-            T2 = c;
+            T = c;
             break;
           }
-          T2 = b.return;
+          T = b.return;
         }
       }
       function fh(a) {
-        for (; null !== T2; ) {
-          var b = T2;
+        for (; null !== T; ) {
+          var b = T;
           try {
             switch (b.tag) {
               case 0:
@@ -10494,16 +10497,16 @@ var require_react_reconciler_production_min = __commonJS({
             U(b, b.return, k);
           }
           if (b === a) {
-            T2 = null;
+            T = null;
             break;
           }
           var h = b.sibling;
           if (null !== h) {
             h.return = b.return;
-            T2 = h;
+            T = h;
             break;
           }
-          T2 = b.return;
+          T = b.return;
         }
       }
       var hh = 0, ih = 1, jh = 2, kh = 3, lh = 4;
@@ -11145,15 +11148,15 @@ var require_react_reconciler_production_min = __commonJS({
               if (0 !== (H & 6)) throw Error(n(331));
               var e = H;
               H |= 4;
-              for (T2 = a.current; null !== T2; ) {
-                var f = T2, g = f.child;
-                if (0 !== (T2.flags & 16)) {
+              for (T = a.current; null !== T; ) {
+                var f = T, g = f.child;
+                if (0 !== (T.flags & 16)) {
                   var h = f.deletions;
                   if (null !== h) {
                     for (var k = 0; k < h.length; k++) {
                       var l = h[k];
-                      for (T2 = l; null !== T2; ) {
-                        var m = T2;
+                      for (T = l; null !== T; ) {
+                        var m = T;
                         switch (m.tag) {
                           case 0:
                           case 11:
@@ -11161,21 +11164,21 @@ var require_react_reconciler_production_min = __commonJS({
                             Mg(8, m, f);
                         }
                         var r = m.child;
-                        if (null !== r) r.return = m, T2 = r;
-                        else for (; null !== T2; ) {
-                          m = T2;
+                        if (null !== r) r.return = m, T = r;
+                        else for (; null !== T; ) {
+                          m = T;
                           var p = m.sibling, B = m.return;
                           Pg(m);
                           if (m === l) {
-                            T2 = null;
+                            T = null;
                             break;
                           }
                           if (null !== p) {
                             p.return = B;
-                            T2 = p;
+                            T = p;
                             break;
                           }
-                          T2 = B;
+                          T = B;
                         }
                       }
                     }
@@ -11191,12 +11194,12 @@ var require_react_reconciler_production_min = __commonJS({
                         } while (null !== Y);
                       }
                     }
-                    T2 = f;
+                    T = f;
                   }
                 }
-                if (0 !== (f.subtreeFlags & 2064) && null !== g) g.return = f, T2 = g;
-                else b: for (; null !== T2; ) {
-                  f = T2;
+                if (0 !== (f.subtreeFlags & 2064) && null !== g) g.return = f, T = g;
+                else b: for (; null !== T; ) {
+                  f = T;
                   if (0 !== (f.flags & 2048)) switch (f.tag) {
                     case 0:
                     case 11:
@@ -11206,19 +11209,19 @@ var require_react_reconciler_production_min = __commonJS({
                   var E = f.sibling;
                   if (null !== E) {
                     E.return = f.return;
-                    T2 = E;
+                    T = E;
                     break b;
                   }
-                  T2 = f.return;
+                  T = f.return;
                 }
               }
               var u = a.current;
-              for (T2 = u; null !== T2; ) {
-                g = T2;
+              for (T = u; null !== T; ) {
+                g = T;
                 var t = g.child;
-                if (0 !== (g.subtreeFlags & 2064) && null !== t) t.return = g, T2 = t;
-                else b: for (g = u; null !== T2; ) {
-                  h = T2;
+                if (0 !== (g.subtreeFlags & 2064) && null !== t) t.return = g, T = t;
+                else b: for (g = u; null !== T; ) {
+                  h = T;
                   if (0 !== (h.flags & 2048)) try {
                     switch (h.tag) {
                       case 0:
@@ -11230,16 +11233,16 @@ var require_react_reconciler_production_min = __commonJS({
                     U(h, h.return, lc);
                   }
                   if (h === g) {
-                    T2 = null;
+                    T = null;
                     break b;
                   }
                   var Db = h.sibling;
                   if (null !== Db) {
                     Db.return = h.return;
-                    T2 = Db;
+                    T = Db;
                     break b;
                   }
-                  T2 = h.return;
+                  T = h.return;
                 }
               }
               H = e;
@@ -11979,9 +11982,9 @@ var require_react_reconciler_development = __commonJS({
       module.exports = function $$$reconciler($$$hostConfig) {
         var exports2 = {};
         "use strict";
-        var React18 = require_react();
+        var React15 = require_react();
         var Scheduler = require_scheduler();
-        var ReactSharedInternals = React18.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED;
+        var ReactSharedInternals = React15.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED;
         var suppressWarning = false;
         function setSuppressWarning(newSuppressWarning) {
           {
@@ -12045,7 +12048,7 @@ var require_react_reconciler_development = __commonJS({
         var HostPortal = 4;
         var HostComponent = 5;
         var HostText = 6;
-        var Fragment7 = 7;
+        var Fragment5 = 7;
         var Mode = 8;
         var ContextConsumer = 9;
         var ContextProvider = 10;
@@ -12185,7 +12188,7 @@ var require_react_reconciler_development = __commonJS({
               return "DehydratedFragment";
             case ForwardRef:
               return getWrappedName$1(type, type.render, "ForwardRef");
-            case Fragment7:
+            case Fragment5:
               return "Fragment";
             case HostComponent:
               return type;
@@ -15319,7 +15322,7 @@ var require_react_reconciler_development = __commonJS({
             }
           }
           function updateFragment2(returnFiber, current2, fragment, lanes, key) {
-            if (current2 === null || current2.tag !== Fragment7) {
+            if (current2 === null || current2.tag !== Fragment5) {
               var created = createFiberFromFragment(fragment, returnFiber.mode, lanes, key);
               created.return = returnFiber;
               return created;
@@ -15722,7 +15725,7 @@ var require_react_reconciler_development = __commonJS({
               if (child.key === key) {
                 var elementType = element.type;
                 if (elementType === REACT_FRAGMENT_TYPE) {
-                  if (child.tag === Fragment7) {
+                  if (child.tag === Fragment5) {
                     deleteRemainingChildren(returnFiber, child.sibling);
                     var existing = useFiber(child, element.props.children);
                     existing.return = returnFiber;
@@ -21213,7 +21216,7 @@ var require_react_reconciler_development = __commonJS({
               var _resolvedProps2 = workInProgress2.elementType === type ? _unresolvedProps2 : resolveDefaultProps(type, _unresolvedProps2);
               return updateForwardRef(current2, workInProgress2, type, _resolvedProps2, renderLanes2);
             }
-            case Fragment7:
+            case Fragment5:
               return updateFragment(current2, workInProgress2, renderLanes2);
             case Mode:
               return updateMode(current2, workInProgress2, renderLanes2);
@@ -21650,7 +21653,7 @@ var require_react_reconciler_development = __commonJS({
             case SimpleMemoComponent:
             case FunctionComponent:
             case ForwardRef:
-            case Fragment7:
+            case Fragment5:
             case Mode:
             case Profiler:
             case ContextConsumer:
@@ -26418,7 +26421,7 @@ var require_react_reconciler_development = __commonJS({
           return fiber;
         }
         function createFiberFromFragment(elements, mode, lanes, key) {
-          var fiber = createFiber(Fragment7, elements, key, mode);
+          var fiber = createFiber(Fragment5, elements, key, mode);
           fiber.lanes = lanes;
           return fiber;
         }
@@ -26858,10 +26861,10 @@ var require_react_reconciler_development = __commonJS({
         var setErrorHandler = null;
         var setSuspenseHandler = null;
         {
-          var copyWithDeleteImpl = function(obj, path, index2) {
-            var key = path[index2];
+          var copyWithDeleteImpl = function(obj, path2, index2) {
+            var key = path2[index2];
             var updated = isArray(obj) ? obj.slice() : assign({}, obj);
-            if (index2 + 1 === path.length) {
+            if (index2 + 1 === path2.length) {
               if (isArray(updated)) {
                 updated.splice(key, 1);
               } else {
@@ -26869,11 +26872,11 @@ var require_react_reconciler_development = __commonJS({
               }
               return updated;
             }
-            updated[key] = copyWithDeleteImpl(obj[key], path, index2 + 1);
+            updated[key] = copyWithDeleteImpl(obj[key], path2, index2 + 1);
             return updated;
           };
-          var copyWithDelete = function(obj, path) {
-            return copyWithDeleteImpl(obj, path, 0);
+          var copyWithDelete = function(obj, path2) {
+            return copyWithDeleteImpl(obj, path2, 0);
           };
           var copyWithRenameImpl = function(obj, oldPath, newPath, index2) {
             var oldKey = oldPath[index2];
@@ -26911,17 +26914,17 @@ var require_react_reconciler_development = __commonJS({
             }
             return copyWithRenameImpl(obj, oldPath, newPath, 0);
           };
-          var copyWithSetImpl = function(obj, path, index2, value) {
-            if (index2 >= path.length) {
+          var copyWithSetImpl = function(obj, path2, index2, value) {
+            if (index2 >= path2.length) {
               return value;
             }
-            var key = path[index2];
+            var key = path2[index2];
             var updated = isArray(obj) ? obj.slice() : assign({}, obj);
-            updated[key] = copyWithSetImpl(obj[key], path, index2 + 1, value);
+            updated[key] = copyWithSetImpl(obj[key], path2, index2 + 1, value);
             return updated;
           };
-          var copyWithSet = function(obj, path, value) {
-            return copyWithSetImpl(obj, path, 0, value);
+          var copyWithSet = function(obj, path2, value) {
+            return copyWithSetImpl(obj, path2, 0, value);
           };
           var findHook = function(fiber, id) {
             var currentHook2 = fiber.memoizedState;
@@ -26931,10 +26934,10 @@ var require_react_reconciler_development = __commonJS({
             }
             return currentHook2;
           };
-          overrideHookState = function(fiber, id, path, value) {
+          overrideHookState = function(fiber, id, path2, value) {
             var hook = findHook(fiber, id);
             if (hook !== null) {
-              var newState = copyWithSet(hook.memoizedState, path, value);
+              var newState = copyWithSet(hook.memoizedState, path2, value);
               hook.memoizedState = newState;
               hook.baseState = newState;
               fiber.memoizedProps = assign({}, fiber.memoizedProps);
@@ -26944,10 +26947,10 @@ var require_react_reconciler_development = __commonJS({
               }
             }
           };
-          overrideHookStateDeletePath = function(fiber, id, path) {
+          overrideHookStateDeletePath = function(fiber, id, path2) {
             var hook = findHook(fiber, id);
             if (hook !== null) {
-              var newState = copyWithDelete(hook.memoizedState, path);
+              var newState = copyWithDelete(hook.memoizedState, path2);
               hook.memoizedState = newState;
               hook.baseState = newState;
               fiber.memoizedProps = assign({}, fiber.memoizedProps);
@@ -26970,8 +26973,8 @@ var require_react_reconciler_development = __commonJS({
               }
             }
           };
-          overrideProps = function(fiber, path, value) {
-            fiber.pendingProps = copyWithSet(fiber.memoizedProps, path, value);
+          overrideProps = function(fiber, path2, value) {
+            fiber.pendingProps = copyWithSet(fiber.memoizedProps, path2, value);
             if (fiber.alternate) {
               fiber.alternate.pendingProps = fiber.pendingProps;
             }
@@ -26980,8 +26983,8 @@ var require_react_reconciler_development = __commonJS({
               scheduleUpdateOnFiber(root, fiber, SyncLane, NoTimestamp);
             }
           };
-          overridePropsDeletePath = function(fiber, path) {
-            fiber.pendingProps = copyWithDelete(fiber.memoizedProps, path);
+          overridePropsDeletePath = function(fiber, path2) {
+            fiber.pendingProps = copyWithDelete(fiber.memoizedProps, path2);
             if (fiber.alternate) {
               fiber.alternate.pendingProps = fiber.pendingProps;
             }
@@ -33042,10 +33045,10 @@ var init_source = __esm({
       object.level = options.level === void 0 ? colorLevel : options.level;
     };
     chalkFactory = (options) => {
-      const chalk10 = (...strings) => strings.join(" ");
-      applyOptions(chalk10, options);
-      Object.setPrototypeOf(chalk10, createChalk.prototype);
-      return chalk10;
+      const chalk8 = (...strings) => strings.join(" ");
+      applyOptions(chalk8, options);
+      Object.setPrototypeOf(chalk8, createChalk.prototype);
+      return chalk8;
     };
     Object.setPrototypeOf(createChalk.prototype, Function.prototype);
     for (const [styleName, style] of Object.entries(ansi_styles_default3)) {
@@ -35049,8 +35052,8 @@ var init_ErrorOverview = __esm({
     init_dist3();
     init_Box();
     init_Text();
-    cleanupPath = (path) => {
-      return path?.replace(`file://${cwd()}/`, "");
+    cleanupPath = (path2) => {
+      return path2?.replace(`file://${cwd()}/`, "");
     };
     stackUtils = new import_stack_utils.default({
       cwd: cwd(),
@@ -37932,7 +37935,7 @@ var require_react_jsx_runtime_development = __commonJS({
     if (process.env.NODE_ENV !== "production") {
       (function() {
         "use strict";
-        var React18 = require_react();
+        var React15 = require_react();
         var REACT_ELEMENT_TYPE = Symbol.for("react.element");
         var REACT_PORTAL_TYPE = Symbol.for("react.portal");
         var REACT_FRAGMENT_TYPE = Symbol.for("react.fragment");
@@ -37958,7 +37961,7 @@ var require_react_jsx_runtime_development = __commonJS({
           }
           return null;
         }
-        var ReactSharedInternals = React18.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED;
+        var ReactSharedInternals = React15.__SECRET_INTERNALS_DO_NOT_USE_OR_YOU_WILL_BE_FIRED;
         function error(format) {
           {
             {
@@ -38808,11 +38811,11 @@ var require_react_jsx_runtime_development = __commonJS({
             return jsxWithValidation(type, props, key, false);
           }
         }
-        var jsx12 = jsxWithValidationDynamic;
-        var jsxs14 = jsxWithValidationStatic;
+        var jsx9 = jsxWithValidationDynamic;
+        var jsxs11 = jsxWithValidationStatic;
         exports.Fragment = REACT_FRAGMENT_TYPE;
-        exports.jsx = jsx12;
-        exports.jsxs = jsxs14;
+        exports.jsx = jsx9;
+        exports.jsxs = jsxs11;
       })();
     }
   }
@@ -38955,25 +38958,29 @@ function sanitize(s) {
   return stripVTControlCharacters(s);
 }
 function sanitizeResponse(response) {
-  return {
-    ...response,
-    packages: response.packages.map((pkg) => ({
-      ...pkg,
-      name: sanitize(pkg.name),
-      version: sanitize(pkg.version),
-      findings: pkg.findings.map((f) => ({
-        ...f,
-        id: sanitize(f.id ?? ""),
-        title: sanitize(f.title),
-        evidence: f.evidence.map(sanitize)
-      })),
-      reasons: (pkg.reasons ?? []).map(sanitize),
-      recommendation: pkg.recommendation ? sanitize(pkg.recommendation) : void 0
-    })),
-    safeVersions: Object.fromEntries(
-      Object.entries(response.safeVersions).map(([k, v]) => [sanitize(k), sanitize(v)])
-    )
+  const sanitized = {
+    score: response.score,
+    action: response.action,
+    packages: response.packages.map((pkg) => {
+      const clean = {
+        name: sanitize(pkg.name),
+        version: sanitize(pkg.version),
+        score: pkg.score,
+        findings: pkg.findings.map((f) => ({
+          ...f,
+          id: sanitize(f.id ?? ""),
+          title: sanitize(f.title),
+          evidence: f.evidence.map(sanitize)
+        })),
+        reasons: (pkg.reasons ?? []).map(sanitize)
+      };
+      if (pkg.recommendation) clean.recommendation = sanitize(pkg.recommendation);
+      if (pkg.license) clean.license = pkg.license;
+      return clean;
+    })
   };
+  if (response.durationMs) sanitized.durationMs = response.durationMs;
+  return sanitized;
 }
 var init_sanitize = __esm({
   "src/sanitize.ts"() {
@@ -39237,9 +39244,9 @@ function parseLockfile(content) {
   const lockfileVersion = json.lockfileVersion ?? 1;
   const packages = /* @__PURE__ */ new Map();
   if (lockfileVersion >= 2 && json.packages) {
-    for (const [path, entry] of Object.entries(json.packages)) {
-      if (path === "") continue;
-      const name = extractPackageName(path);
+    for (const [path2, entry] of Object.entries(json.packages)) {
+      if (path2 === "") continue;
+      const name = extractPackageName(path2);
       if (name && !packages.has(name)) {
         const e = entry;
         const deps = e.dependencies;
@@ -39475,23 +39482,38 @@ var init_parse_package_json = __esm({
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { readFileSync as readFileSync6, existsSync as existsSync5, statSync } from "node:fs";
 import { join as join5 } from "node:path";
-function readFileSafe(path) {
-  const size = statSync(path).size;
+function readFileSafe(path2) {
+  const size = statSync(path2).size;
   if (size > MAX_LOCKFILE_BYTES) {
-    throw new Error(`Lockfile too large (${(size / 1024 / 1024).toFixed(0)} MB, max 50 MB): ${path}`);
+    throw new Error(`Lockfile too large (${(size / 1024 / 1024).toFixed(0)} MB, max 50 MB): ${path2}`);
   }
-  return readFileSync6(path, "utf-8");
+  return readFileSync6(path2, "utf-8");
 }
 function discoverChanges(cwd2, config) {
   if (config.workspace) {
     cwd2 = join5(cwd2, config.workspace);
   }
   const lockfileInfo = findLockfile(cwd2);
+  const pythonDepFiles = ["requirements.txt", "Pipfile.lock", "poetry.lock"];
+  let pythonPackages = [];
+  for (const pyFile of pythonDepFiles) {
+    if (existsSync5(join5(cwd2, pyFile))) {
+      const pyPkgs = parsePythonDepFile(cwd2, pyFile);
+      for (const p of pyPkgs) {
+        if (p.version === "latest") continue;
+        pythonPackages.push({ name: p.name, version: p.version, previousVersion: null, isNew: true });
+      }
+      break;
+    }
+  }
   if (!lockfileInfo) {
-    const pythonFiles = ["requirements.txt", "Pipfile.lock", "poetry.lock"];
-    const hasPython = pythonFiles.some((f) => existsSync5(join5(cwd2, f)));
-    if (hasPython) {
-      return { packages: [], method: "fallback", skipped: [] };
+    if (pythonPackages.length > 0) {
+      const skipped = [];
+      if (pythonPackages.length > config.maxPackages) {
+        skipped.push(...pythonPackages.slice(config.maxPackages).map((p) => `${p.name}@${p.version}`));
+        pythonPackages = pythonPackages.slice(0, config.maxPackages);
+      }
+      return { packages: [], pythonPackages, method: "scan-all", skipped };
     }
     throw new Error(
       "No lockfile found (package-lock.json, yarn.lock, pnpm-lock.yaml, requirements.txt, Pipfile.lock, or poetry.lock). Run from your project root or use --base-lockfile."
@@ -39513,7 +39535,7 @@ function discoverChanges(cwd2, config) {
         isNew: true
       });
     }
-    return { packages: packages2, method: "scan-all", skipped: [] };
+    return { packages: packages2, pythonPackages, method: "scan-all", skipped: [] };
   }
   if (config.baseLockfile) {
     if (!existsSync5(config.baseLockfile)) {
@@ -39524,6 +39546,7 @@ function discoverChanges(cwd2, config) {
     const diff2 = diffLockfiles(baseParsed, headParsed, config.maxPackages, directDeps);
     return {
       packages: diff2.changes.map(toPackageInput).filter((p) => p.name !== SELF_PACKAGE),
+      pythonPackages,
       method: "base-lockfile",
       skipped: diff2.skipped
     };
@@ -39534,6 +39557,7 @@ function discoverChanges(cwd2, config) {
     const diff2 = diffLockfiles(baseParsed, headParsed, config.maxPackages, directDeps);
     return {
       packages: diff2.changes.map(toPackageInput).filter((p) => p.name !== SELF_PACKAGE),
+      pythonPackages,
       method: "git-diff",
       skipped: diff2.skipped
     };
@@ -39553,6 +39577,7 @@ function discoverChanges(cwd2, config) {
       });
       return {
         packages: resolved.map(toPackageInput).filter((p) => p.name !== SELF_PACKAGE),
+        pythonPackages,
         method: "fallback",
         skipped: []
       };
@@ -39570,7 +39595,7 @@ function discoverChanges(cwd2, config) {
       isNew: true
     });
   }
-  return { packages, method: "fallback", skipped: [] };
+  return { packages, pythonPackages, method: "fallback", skipped: [] };
 }
 function findLockfile(cwd2) {
   const candidates = [
@@ -39919,13 +39944,272 @@ var init_pip_wrapper = __esm({
   }
 });
 
+// src/ui/components/FileSavePrompt.tsx
+var FileSavePrompt_exports = {};
+__export(FileSavePrompt_exports, {
+  FileSavePrompt: () => FileSavePrompt
+});
+import * as fs2 from "fs";
+import * as path from "path";
+function listDirectory(dir) {
+  try {
+    const raw = fs2.readdirSync(dir, { withFileTypes: true });
+    const entries = raw.map((e) => ({ name: e.name, isDirectory: e.isDirectory() })).sort((a, b) => {
+      if (a.isDirectory !== b.isDirectory) return a.isDirectory ? -1 : 1;
+      return a.name.localeCompare(b.name);
+    });
+    if (path.dirname(dir) !== dir) {
+      entries.unshift({ name: "..", isDirectory: true });
+    }
+    return entries;
+  } catch {
+    return [{ name: "..", isDirectory: true }];
+  }
+}
+function ensureJsonExtension(name) {
+  if (!name) return "scan.json";
+  if (name.endsWith(".json")) return name;
+  return name + ".json";
+}
+function clamp(n, min, max) {
+  return Math.max(min, Math.min(max, n));
+}
+function reducer2(state, action) {
+  switch (action.type) {
+    case "SET_FILENAME":
+      return { ...state, filename: action.filename, cursorPos: action.cursorPos, focus: "filename", confirmOverwrite: false, error: null };
+    case "EDIT_FILENAME":
+      return { ...state, filename: action.filename, cursorPos: action.cursorPos, confirmOverwrite: false, error: null };
+    case "SET_DIRECTORY":
+      return { ...state, directory: action.directory, entries: action.entries, browserCursor: 0, browserViewport: 0, filterText: "", error: null };
+    case "MOVE_BROWSER": {
+      let viewport = state.browserViewport;
+      if (action.cursor < viewport) viewport = action.cursor;
+      if (action.cursor >= viewport + VISIBLE_ROWS) viewport = action.cursor - VISIBLE_ROWS + 1;
+      return { ...state, browserCursor: action.cursor, browserViewport: viewport };
+    }
+    case "FOCUS":
+      return { ...state, focus: action.target, filterText: action.target === "filename" ? "" : state.filterText };
+    case "FILTER":
+      return { ...state, filterText: action.text, browserCursor: 0, browserViewport: 0 };
+    case "CONFIRM_OVERWRITE":
+      return { ...state, confirmOverwrite: true };
+    case "RESET_OVERWRITE":
+      return { ...state, confirmOverwrite: false };
+    case "SET_ERROR":
+      return { ...state, error: action.error };
+  }
+}
+var import_react25, import_chalk4, import_jsx_runtime3, VISIBLE_ROWS, FileSavePrompt;
+var init_FileSavePrompt = __esm({
+  async "src/ui/components/FileSavePrompt.tsx"() {
+    "use strict";
+    import_react25 = __toESM(require_react());
+    await init_build2();
+    import_chalk4 = __toESM(require_source());
+    import_jsx_runtime3 = __toESM(require_jsx_runtime());
+    VISIBLE_ROWS = 15;
+    FileSavePrompt = ({
+      defaultName,
+      directory: initialDir,
+      score,
+      action: scanAction,
+      packageCount,
+      onSave,
+      onCancel
+    }) => {
+      const initialEntries = (0, import_react25.useMemo)(() => listDirectory(initialDir), [initialDir]);
+      const [state, dispatch] = (0, import_react25.useReducer)(reducer2, {
+        filename: defaultName,
+        cursorPos: defaultName.length,
+        directory: initialDir,
+        entries: initialEntries,
+        browserCursor: 0,
+        browserViewport: 0,
+        focus: "filename",
+        filterText: "",
+        confirmOverwrite: false,
+        error: null
+      });
+      const filteredEntries = (0, import_react25.useMemo)(() => {
+        const dirs = state.entries.filter((e) => e.isDirectory);
+        if (!state.filterText) return dirs;
+        const q = state.filterText.toLowerCase();
+        return dirs.filter((e) => e.name.toLowerCase().includes(q));
+      }, [state.entries, state.filterText]);
+      const visibleEntries = filteredEntries.slice(
+        state.browserViewport,
+        state.browserViewport + VISIBLE_ROWS
+      );
+      use_input_default((input, key) => {
+        if (key.escape) {
+          onCancel();
+          return;
+        }
+        if (state.focus === "filename") {
+          if (key.return) {
+            const fullName = ensureJsonExtension(state.filename);
+            const fullPath = path.join(state.directory, fullName);
+            if (!state.confirmOverwrite && fs2.existsSync(fullPath)) {
+              dispatch({ type: "CONFIRM_OVERWRITE" });
+              return;
+            }
+            onSave(fullPath);
+            return;
+          }
+          if (key.downArrow) {
+            dispatch({ type: "FOCUS", target: "browser" });
+            return;
+          }
+          if (key.backspace || key.delete) {
+            if (state.cursorPos > 0) {
+              const next = state.filename.slice(0, state.cursorPos - 1) + state.filename.slice(state.cursorPos);
+              dispatch({ type: "EDIT_FILENAME", filename: next, cursorPos: state.cursorPos - 1 });
+            }
+            return;
+          }
+          if (key.leftArrow) {
+            dispatch({ type: "EDIT_FILENAME", filename: state.filename, cursorPos: Math.max(0, state.cursorPos - 1) });
+            return;
+          }
+          if (key.rightArrow) {
+            dispatch({ type: "EDIT_FILENAME", filename: state.filename, cursorPos: Math.min(state.filename.length, state.cursorPos + 1) });
+            return;
+          }
+          if (input && /^[\x20-\x7e]+$/.test(input)) {
+            const next = state.filename.slice(0, state.cursorPos) + input + state.filename.slice(state.cursorPos);
+            dispatch({ type: "EDIT_FILENAME", filename: next, cursorPos: state.cursorPos + input.length });
+            return;
+          }
+          return;
+        }
+        if (key.upArrow) {
+          if (state.browserCursor > 0) {
+            dispatch({ type: "MOVE_BROWSER", cursor: state.browserCursor - 1 });
+          } else {
+            dispatch({ type: "FOCUS", target: "filename" });
+          }
+          return;
+        }
+        if ((key.backspace || key.delete) && !state.filterText) {
+          const parentDir = path.dirname(state.directory);
+          if (parentDir !== state.directory) {
+            dispatch({ type: "SET_DIRECTORY", directory: parentDir, entries: listDirectory(parentDir) });
+          }
+          return;
+        }
+        if (key.downArrow) {
+          dispatch({ type: "MOVE_BROWSER", cursor: clamp(state.browserCursor + 1, 0, filteredEntries.length - 1) });
+          return;
+        }
+        if (key.return) {
+          const entry = filteredEntries[state.browserCursor];
+          if (!entry || !entry.isDirectory) return;
+          const newDir = entry.name === ".." ? path.dirname(state.directory) : path.join(state.directory, entry.name);
+          dispatch({ type: "SET_DIRECTORY", directory: newDir, entries: listDirectory(newDir) });
+          return;
+        }
+        if (key.backspace || key.delete) {
+          dispatch({ type: "FILTER", text: state.filterText.slice(0, -1) });
+          return;
+        }
+        if (input && /^[\x20-\x7e]+$/.test(input)) {
+          dispatch({ type: "FILTER", text: state.filterText + input });
+        }
+      });
+      const actionColor2 = scanAction === "block" ? import_chalk4.default.red : scanAction === "warn" ? import_chalk4.default.yellow : import_chalk4.default.green;
+      const filenameDisplay = state.filename.slice(0, state.cursorPos) + (state.focus === "filename" ? import_chalk4.default.inverse(state.filename[state.cursorPos] || " ") : "") + state.filename.slice(state.cursorPos + 1);
+      const shortDir = state.directory.replace(process.env.HOME || "", "~");
+      return /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { children: [
+          import_chalk4.default.cyan("\u25C6"),
+          " ",
+          import_chalk4.default.bold("Save Scan Results")
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { children: [
+          "Score: ",
+          import_chalk4.default.bold(String(score)),
+          "  ",
+          actionColor2(scanAction.toUpperCase()),
+          "  ",
+          import_chalk4.default.dim("\u2502"),
+          "  ",
+          packageCount,
+          " packages scanned"
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { children: "" }),
+        /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { children: [
+          state.focus === "filename" ? import_chalk4.default.cyan("\u258C") : " ",
+          import_chalk4.default.bold("File:"),
+          " ",
+          filenameDisplay,
+          import_chalk4.default.dim(".json")
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { children: import_chalk4.default.dim(`  \u2500\u2500\u2500 ${shortDir} \u2500\u2500\u2500 [${state.browserCursor + 1}/${filteredEntries.length}]`) }),
+        visibleEntries.map((entry, i) => {
+          const realIdx = state.browserViewport + i;
+          const isCursor = state.focus === "browser" && realIdx === state.browserCursor;
+          const prefix = isCursor ? import_chalk4.default.cyan("\u258C") : " ";
+          const icon = entry.isDirectory ? "\u{1F4C1} " : "  ";
+          const name = entry.isDirectory ? import_chalk4.default.bold(entry.name + "/") : entry.name;
+          return /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { children: [
+            prefix,
+            icon,
+            name
+          ] }, `${entry.name}-${i}`);
+        }),
+        filteredEntries.length > VISIBLE_ROWS && /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { dimColor: true, children: [
+          "  ",
+          import_chalk4.default.dim(`\u2191\u2193 ${filteredEntries.length - VISIBLE_ROWS} more`)
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { children: "" }),
+        state.filterText && /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { dimColor: true, children: [
+          '  filter: "',
+          state.filterText,
+          '"  (',
+          filteredEntries.length,
+          " matches)"
+        ] }),
+        state.confirmOverwrite && /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { color: "yellow", children: [
+          "  ",
+          import_chalk4.default.yellow("\u26A0"),
+          " ",
+          ensureJsonExtension(state.filename),
+          " exists ",
+          import_chalk4.default.dim("\u2014"),
+          " Enter again to overwrite"
+        ] }),
+        state.error && /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { color: "red", children: [
+          "  ",
+          import_chalk4.default.red("\u2717"),
+          " ",
+          state.error
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { children: [
+          import_chalk4.default.bold.hex("#FFD700")("\u23CE"),
+          " ",
+          import_chalk4.default.bold.hex("#FFD700")("save"),
+          "   ",
+          import_chalk4.default.bold.cyan("\u2191\u2193"),
+          " ",
+          import_chalk4.default.dim("browse"),
+          "   ",
+          import_chalk4.default.bold.cyan("esc"),
+          " ",
+          import_chalk4.default.dim("cancel")
+        ] })
+      ] });
+    };
+  }
+});
+
 // src/discover.ts
 var discover_exports = {};
 __export(discover_exports, {
   discoverProjects: () => discoverProjects
 });
-import { existsSync as existsSync7, readFileSync as readFileSync8, readdirSync, lstatSync } from "node:fs";
-import { join as join6, relative, basename } from "node:path";
+import { existsSync as existsSync8, readFileSync as readFileSync8, readdirSync as readdirSync2, lstatSync } from "node:fs";
+import { join as join7, relative, basename } from "node:path";
 function discoverProjects(root) {
   const projects = [];
   walk(root, root, 0, projects);
@@ -39934,8 +40218,8 @@ function discoverProjects(root) {
 function walk(dir, root, depth, out) {
   if (depth > MAX_DEPTH) return;
   for (const lockfile of NPM_LOCKFILES) {
-    const lockPath = join6(dir, lockfile);
-    if (existsSync7(lockPath)) {
+    const lockPath = join7(dir, lockfile);
+    if (existsSync8(lockPath)) {
       const count = countNpmPackages(lockPath);
       if (count > 0) {
         out.push({
@@ -39950,8 +40234,8 @@ function walk(dir, root, depth, out) {
     }
   }
   for (const depFile of PYTHON_DEPFILES) {
-    const depPath = join6(dir, depFile);
-    if (existsSync7(depPath)) {
+    const depPath = join7(dir, depFile);
+    if (existsSync8(depPath)) {
       const count = countPythonPackages(depPath, depFile);
       if (count > 0) {
         out.push({
@@ -39967,13 +40251,13 @@ function walk(dir, root, depth, out) {
   }
   let entries;
   try {
-    entries = readdirSync(dir);
+    entries = readdirSync2(dir);
   } catch {
     return;
   }
   for (const entry of entries) {
     if (SKIP_DIRS.has(entry) || entry.startsWith(".")) continue;
-    const full = join6(dir, entry);
+    const full = join7(dir, entry);
     try {
       const st = lstatSync(full);
       if (st.isDirectory() && !st.isSymbolicLink()) {
@@ -40067,10 +40351,72 @@ __export(static_output_exports, {
   runStaticNpm: () => runStaticNpm,
   runStaticPip: () => runStaticPip
 });
+function writeJsonFile(filepath, json) {
+  const fs3 = __require("fs");
+  const path2 = __require("path");
+  const resolved = path2.resolve(filepath);
+  try {
+    fs3.writeFileSync(resolved, json + "\n");
+    process.stderr.write(import_chalk5.default.green(`  \u2713 Saved to ${resolved}
+
+`));
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    process.stderr.write(import_chalk5.default.red(`  Error saving file: ${msg}
+
+`));
+  }
+}
+async function handleJsonOutput(result, config) {
+  if (!config.json) return false;
+  const json = JSON.stringify(result, null, 2);
+  if (config.outputFile) {
+    writeJsonFile(config.outputFile, json);
+    return true;
+  }
+  if (!process.stdout.isTTY) {
+    process.stdout.write(json + "\n");
+    return true;
+  }
+  const localDate = (/* @__PURE__ */ new Date()).toLocaleDateString("sv-SE");
+  const defaultName = `dg-scan-${localDate}`;
+  const { render: render2 } = await init_build2().then(() => build_exports);
+  const React15 = await Promise.resolve().then(() => __toESM(require_react()));
+  const { FileSavePrompt: FileSavePrompt2 } = await init_FileSavePrompt().then(() => FileSavePrompt_exports);
+  await new Promise((resolve) => {
+    const inkInstance = render2(
+      React15.createElement(FileSavePrompt2, {
+        defaultName,
+        directory: process.cwd(),
+        score: result.score,
+        action: result.action,
+        packageCount: result.packages.length,
+        onSave: (filepath) => {
+          const fs3 = __require("fs");
+          try {
+            fs3.writeFileSync(filepath, json + "\n");
+            inkInstance.unmount();
+            process.stderr.write(import_chalk5.default.green(`  \u2713 Saved to ${filepath}
+
+`));
+          } catch (err) {
+          }
+          resolve();
+        },
+        onCancel: () => {
+          inkInstance.unmount();
+          process.stderr.write(import_chalk5.default.dim("  Cancelled.\n\n"));
+          resolve();
+        }
+      })
+    );
+  });
+  return true;
+}
 function printTrialBanner(result) {
   if (result.trialScansRemaining === void 0) return;
   process.stderr.write(
-    import_chalk4.default.dim(`  Free tier \xB7 Run \`dg login\` for finding details and higher rate limits.
+    import_chalk5.default.dim(`  Free tier \xB7 Run \`dg login\` for higher scan limits.
 `)
   );
 }
@@ -40082,7 +40428,7 @@ function handleTrialExhausted2(error, jsonMode = false) {
       hasKey = !!getStoredApiKey2();
     } catch {
     }
-    const message = hasKey ? "Your API key may be invalid or expired. Run `dg logout` then `dg login` to re-authenticate." : "Free trial scans used up. Run `dg login` to create a free account and continue scanning.";
+    const message = hasKey ? "Your API key may be invalid or expired. Run `dg logout` then `dg login` to re-authenticate." : "Monthly scan limit reached. Run `dg login` to create a free account for higher limits.";
     if (jsonMode) {
       process.stdout.write(JSON.stringify({
         error: true,
@@ -40093,13 +40439,13 @@ function handleTrialExhausted2(error, jsonMode = false) {
       }, null, 2) + "\n");
     } else {
       if (hasKey) {
-        process.stderr.write(import_chalk4.default.yellow(`
+        process.stderr.write(import_chalk5.default.yellow(`
   ${message}
 
 `));
       } else {
         process.stderr.write(
-          import_chalk4.default.yellow("\n  Free trial scans used up.\n") + import_chalk4.default.white("  Run `dg login` to create a free account and continue scanning.\n\n")
+          import_chalk5.default.yellow("\n  Monthly scan limit reached (200 scans/month on free tier).\n") + import_chalk5.default.white("  Run `dg login` for higher limits, or upgrade at westbayberry.com/pricing\n\n")
         );
       }
     }
@@ -40109,9 +40455,9 @@ function handleTrialExhausted2(error, jsonMode = false) {
   return false;
 }
 function actionColor(action) {
-  if (action === "block") return import_chalk4.default.red;
-  if (action === "warn") return import_chalk4.default.yellow;
-  return import_chalk4.default.green;
+  if (action === "block") return import_chalk5.default.red;
+  if (action === "warn") return import_chalk5.default.yellow;
+  return import_chalk5.default.green;
 }
 function pad(s, len) {
   return s + " ".repeat(Math.max(0, len - s.length));
@@ -40131,21 +40477,18 @@ function groupPackages(packages) {
   return [...map.values()].map((pkgs) => ({ packages: pkgs, key: pkgs[0].name })).sort((a, b) => b.packages[0].score - a.packages[0].score);
 }
 function actionBadge(score) {
-  if (score >= 70) return { label: "BLOCK", color: import_chalk4.default.red };
-  if (score >= 60) return { label: "WARN", color: import_chalk4.default.yellow };
-  return { label: "pass", color: import_chalk4.default.green };
+  if (score >= 70) return { label: "BLOCK", color: import_chalk5.default.red };
+  if (score >= 60) return { label: "WARN", color: import_chalk5.default.yellow };
+  return { label: "pass", color: import_chalk5.default.green };
 }
-function renderResultStatic(result, config) {
-  if (config.json) {
-    return JSON.stringify(result, null, 2);
-  }
+function renderResultStatic(result, _config) {
   const lines = [];
   const actionStr = result.action.toUpperCase();
   const colorAction = actionColor(result.action);
   lines.push("");
-  lines.push(`  ${import_chalk4.default.bold("Dependency Guardian")}`);
+  lines.push(`  ${import_chalk5.default.bold("Dependency Guardian")}`);
   lines.push(
-    `  Score: ${import_chalk4.default.bold(String(result.score))}${" ".repeat(
+    `  Score: ${import_chalk5.default.bold(String(result.score))}${" ".repeat(
       Math.max(1, 50 - String(result.score).length)
     )}${colorAction(actionStr)}`
   );
@@ -40155,11 +40498,11 @@ function renderResultStatic(result, config) {
   const total = result.packages.length;
   if (flagged.length > 0) {
     lines.push(
-      `  ${total} package${total !== 1 ? "s" : ""} scanned ${import_chalk4.default.dim("\u2502")} ${import_chalk4.default.yellow(`${flagged.length} flagged`)} \u2502 ${import_chalk4.default.green(`${clean.length} clean`)}`
+      `  ${total} package${total !== 1 ? "s" : ""} scanned ${import_chalk5.default.dim("\u2502")} ${import_chalk5.default.yellow(`${flagged.length} flagged`)} \u2502 ${import_chalk5.default.green(`${clean.length} clean`)}`
     );
   } else {
     lines.push(
-      `  ${total} package${total !== 1 ? "s" : ""} scanned ${import_chalk4.default.dim("\u2502")} ${import_chalk4.default.green("all clean")}`
+      `  ${total} package${total !== 1 ? "s" : ""} scanned ${import_chalk5.default.dim("\u2502")} ${import_chalk5.default.green("all clean")}`
     );
   }
   const licensedPkgs = result.packages.filter((p) => p.license);
@@ -40168,7 +40511,7 @@ function renderResultStatic(result, config) {
   );
   if (licenseIssues.length > 0) {
     lines.push(
-      `  ${import_chalk4.default.dim("Licenses:")} ${import_chalk4.default.yellow(`${licenseIssues.length} need review`)} \u2502 ${import_chalk4.default.green(`${licensedPkgs.length - licenseIssues.length} permissive`)}`
+      `  ${import_chalk5.default.dim("Licenses:")} ${import_chalk5.default.yellow(`${licenseIssues.length} need review`)} \u2502 ${import_chalk5.default.green(`${licensedPkgs.length - licenseIssues.length} permissive`)}`
     );
   }
   lines.push("");
@@ -40179,30 +40522,30 @@ function renderResultStatic(result, config) {
   }
   const groups = groupPackages(flagged);
   if (flagged.length > 0) {
-    lines.push(`  ${import_chalk4.default.bold("Flagged Packages")}`);
-    lines.push(`  ${import_chalk4.default.dim("\u2500".repeat(60))}`);
+    lines.push(`  ${import_chalk5.default.bold("Flagged Packages")}`);
+    lines.push(`  ${import_chalk5.default.dim("\u2500".repeat(60))}`);
     for (const group of groups) {
       const rep = group.packages[0];
       const { label, color } = actionBadge(rep.score);
       const names = group.packages.length === 1 ? rep.name : group.packages.length <= 3 ? group.packages.map((p) => p.name).join(", ") : `${group.packages[0].name} + ${group.packages.length - 1} similar`;
       const lcInfo = rep.license;
       const lcStr = lcInfo ? truncate(lcInfo.spdx ?? lcInfo.raw ?? "", 14) : "";
-      const lcColor = !lcInfo ? import_chalk4.default.dim : lcInfo.riskCategory === "permissive" ? import_chalk4.default.green : lcInfo.riskCategory === "no-license" || lcInfo.riskCategory === "unlicensed" || lcInfo.riskCategory === "network-copyleft" ? import_chalk4.default.red : import_chalk4.default.yellow;
+      const lcColor = !lcInfo ? import_chalk5.default.dim : lcInfo.riskCategory === "permissive" ? import_chalk5.default.green : lcInfo.riskCategory === "no-license" || lcInfo.riskCategory === "unlicensed" || lcInfo.riskCategory === "network-copyleft" ? import_chalk5.default.red : import_chalk5.default.yellow;
       lines.push(
-        `    ${color(pad(label, 7))}${import_chalk4.default.bold(pad(truncate(names, 36), 38))}${lcColor(pad(lcStr, 16))}${import_chalk4.default.dim(`score ${rep.score}`)}`
+        `    ${color(pad(label, 7))}${import_chalk5.default.bold(pad(truncate(names, 36), 38))}${lcColor(pad(lcStr, 16))}${import_chalk5.default.dim(`score ${rep.score}`)}`
       );
     }
     lines.push("");
   }
   if (clean.length > 0) {
     lines.push(
-      `  ${import_chalk4.default.green("\u2713")} ${import_chalk4.default.dim(`${clean.length} package${clean.length !== 1 ? "s" : ""} passed with score 0`)}`
+      `  ${import_chalk5.default.green("\u2713")} ${import_chalk5.default.dim(`${clean.length} package${clean.length !== 1 ? "s" : ""} passed with score 0`)}`
     );
     lines.push("");
   }
   if (result.durationMs) {
     lines.push(
-      `  ${import_chalk4.default.dim(`Completed in ${(result.durationMs / 1e3).toFixed(1)}s`)}`
+      `  ${import_chalk5.default.dim(`Completed in ${(result.durationMs / 1e3).toFixed(1)}s`)}`
     );
     lines.push("");
   }
@@ -40211,12 +40554,12 @@ function renderResultStatic(result, config) {
 async function runStatic(config) {
   const dbg = (msg) => {
     if (config.debug)
-      process.stderr.write(import_chalk4.default.dim(`  [debug] ${msg}
+      process.stderr.write(import_chalk5.default.dim(`  [debug] ${msg}
 `));
   };
   if (config.mode === "off") {
     process.stderr.write(
-      import_chalk4.default.dim("  Dependency Guardian: mode is off \u2014 skipping.\n")
+      import_chalk5.default.dim("  Dependency Guardian: mode is off \u2014 skipping.\n")
     );
     process.exit(0);
   }
@@ -40224,40 +40567,44 @@ async function runStatic(config) {
     `mode=${config.mode} max=${config.maxPackages}`
   );
   dbg(`api=${config.apiUrl}`);
-  process.stderr.write(import_chalk4.default.dim("  Discovering package changes...\n"));
+  process.stderr.write(import_chalk5.default.dim("  Discovering package changes...\n"));
   const discovery = discoverChanges(process.cwd(), config);
   dbg(`discovery method: ${discovery.method}`);
-  if (discovery.packages.length === 0) {
+  if (discovery.pythonPackages.length > 0) {
+    dbg(`python packages: ${discovery.pythonPackages.length}`);
+  }
+  if (discovery.packages.length === 0 && discovery.pythonPackages.length === 0) {
     const { discoverProjects: discoverProjects2 } = await Promise.resolve().then(() => (init_discover(), discover_exports));
     const subProjects = discoverProjects2(process.cwd());
     if (subProjects.length > 0) {
-      process.stderr.write(import_chalk4.default.yellow("  No packages found in current directory, but found projects in subdirectories:\n\n"));
+      process.stderr.write(import_chalk5.default.yellow("  No packages found in current directory, but found projects in subdirectories:\n\n"));
       for (const proj of subProjects) {
         const pkgLabel = proj.packageCount === 1 ? "package" : "packages";
         process.stderr.write(
-          import_chalk4.default.white(`    ${proj.ecosystem}  `) + import_chalk4.default.cyan(proj.relativePath) + import_chalk4.default.dim(` (${proj.packageCount} ${pkgLabel})
+          import_chalk5.default.white(`    ${proj.ecosystem}  `) + import_chalk5.default.cyan(proj.relativePath) + import_chalk5.default.dim(` (${proj.packageCount} ${pkgLabel})
 `)
         );
       }
-      process.stderr.write(import_chalk4.default.dim("\n  Use --workspace to scan a specific project:\n"));
-      process.stderr.write(import_chalk4.default.dim(`    dg scan --workspace ${subProjects[0].relativePath}${config.scanAll ? " --scan-all" : ""}
+      process.stderr.write(import_chalk5.default.dim("\n  Use --workspace to scan a specific project:\n"));
+      process.stderr.write(import_chalk5.default.dim(`    dg scan --workspace ${subProjects[0].relativePath}${config.scanAll ? " --scan-all" : ""}
 
 `));
     } else {
-      process.stderr.write(import_chalk4.default.dim("  No package changes detected.\n"));
+      process.stderr.write(import_chalk5.default.dim("  No package changes detected.\n"));
     }
     process.exit(0);
   }
   const packages = discovery.packages;
+  const totalToScan = packages.length + discovery.pythonPackages.length;
   process.stderr.write(
-    import_chalk4.default.dim(
-      `  Scanning ${packages.length} package${packages.length !== 1 ? "s" : ""} (${discovery.method})...
+    import_chalk5.default.dim(
+      `  Scanning ${totalToScan} package${totalToScan !== 1 ? "s" : ""}${discovery.pythonPackages.length > 0 ? ` (${packages.length} npm + ${discovery.pythonPackages.length} Python)` : ""} (${discovery.method})...
 `
     )
   );
   if (discovery.skipped.length > 0) {
     process.stderr.write(
-      import_chalk4.default.yellow(
+      import_chalk5.default.yellow(
         `  Warning: ${discovery.skipped.length} package(s) skipped (max-packages=${config.maxPackages})
 `
       )
@@ -40269,10 +40616,29 @@ async function runStatic(config) {
   let result;
   try {
     const startMs = Date.now();
-    result = await callAnalyzeAPI(packages, config, (done, total) => {
-      process.stderr.write(import_chalk4.default.dim(`  Analyzed ${done}/${total}...
+    if (packages.length > 0) {
+      result = await callAnalyzeAPI(packages, config, (done, total) => {
+        process.stderr.write(import_chalk5.default.dim(`  Analyzed ${done}/${total}...
 `));
-    });
+      });
+    } else {
+      result = { score: 0, action: "pass", packages: [], safeVersions: {} };
+    }
+    if (discovery.pythonPackages.length > 0) {
+      process.stderr.write(
+        import_chalk5.default.dim(`  Scanning ${discovery.pythonPackages.length} Python package${discovery.pythonPackages.length !== 1 ? "s" : ""}...
+`)
+      );
+      const pyResult = await callPyPIAnalyzeAPI(discovery.pythonPackages, config);
+      result.packages.push(...pyResult.packages);
+      result.score = Math.max(result.score, pyResult.score);
+      if (pyResult.action === "block" || pyResult.action === "warn" && result.action === "pass") {
+        result.action = pyResult.action;
+      }
+      if (pyResult.trialScansRemaining !== void 0) {
+        result.trialScansRemaining = pyResult.trialScansRemaining;
+      }
+    }
     dbg(
       `API responded in ${Date.now() - startMs}ms, action=${result.action}, score=${result.score}`
     );
@@ -40280,6 +40646,13 @@ async function runStatic(config) {
     if (handleTrialExhausted2(error, config.json)) return;
     throw error;
   }
+  const jsonHandled = await handleJsonOutput(result, config);
+  if (jsonHandled) {
+    printTrialBanner(result);
+    if (result.action === "block" && config.mode === "block") process.exit(2);
+    else if (result.action === "block" || result.action === "warn") process.exit(1);
+    process.exit(0);
+  }
   const output = renderResultStatic(result, config);
   process.stdout.write(output + "\n");
   printTrialBanner(result);
@@ -40300,7 +40673,7 @@ async function runStaticNpm(npmArgs, config) {
     const bareSpecs = readBareInstallPackages(process.cwd());
     if (bareSpecs.length === 0) {
       process.stderr.write(
-        import_chalk4.default.dim(
+        import_chalk5.default.dim(
           "  Dependency Guardian: no packages to scan, passing through to npm.\n"
         )
       );
@@ -40308,7 +40681,7 @@ async function runStaticNpm(npmArgs, config) {
       process.exit(code);
     }
     process.stderr.write(
-      import_chalk4.default.dim(
+      import_chalk5.default.dim(
         `  Resolving ${bareSpecs.length} package${bareSpecs.length !== 1 ? "s" : ""} from package.json...
 `
       )
@@ -40316,7 +40689,7 @@ async function runStaticNpm(npmArgs, config) {
     const { resolved: resolved2, failed: failed2 } = await resolvePackages(bareSpecs);
     if (failed2.length > 0 && config.debug) {
       process.stderr.write(
-        import_chalk4.default.dim(
+        import_chalk5.default.dim(
           `  [debug] Could not resolve: ${failed2.slice(0, 5).join(", ")}${failed2.length > 5 ? ` (+${failed2.length - 5} more)` : ""}
 `
         )
@@ -40325,7 +40698,7 @@ async function runStaticNpm(npmArgs, config) {
     return scanAndInstallStatic(resolved2, parsed, config);
   }
   process.stderr.write(
-    import_chalk4.default.dim(
+    import_chalk5.default.dim(
       `  Resolving ${parsed.packages.length} package${parsed.packages.length !== 1 ? "s" : ""}...
 `
     )
@@ -40333,7 +40706,7 @@ async function runStaticNpm(npmArgs, config) {
   const { resolved, failed } = await resolvePackages(parsed.packages);
   if (failed.length > 0) {
     process.stderr.write(
-      import_chalk4.default.yellow(
+      import_chalk5.default.yellow(
         `  Warning: Could not resolve versions for: ${failed.join(", ")}
 `
       )
@@ -40341,7 +40714,7 @@ async function runStaticNpm(npmArgs, config) {
   }
   if (resolved.length === 0) {
     process.stderr.write(
-      import_chalk4.default.dim("  No packages to scan. Passing through to npm.\n")
+      import_chalk5.default.dim("  No packages to scan. Passing through to npm.\n")
     );
     const code = await runNpm(parsed.rawArgs);
     process.exit(code);
@@ -40350,7 +40723,7 @@ async function runStaticNpm(npmArgs, config) {
 }
 async function scanAndInstallStatic(resolved, parsed, config) {
   process.stderr.write(
-    import_chalk4.default.dim(
+    import_chalk5.default.dim(
       `  Scanning ${resolved.length} package${resolved.length !== 1 ? "s" : ""}...
 `
     )
@@ -40362,7 +40735,7 @@ async function scanAndInstallStatic(resolved, parsed, config) {
     const elapsed = Date.now() - startMs;
     if (config.debug) {
       process.stderr.write(
-        import_chalk4.default.dim(
+        import_chalk5.default.dim(
           `  [debug] API responded in ${elapsed}ms, action=${result.action}, score=${result.score}
 `
         )
@@ -40372,7 +40745,7 @@ async function scanAndInstallStatic(resolved, parsed, config) {
     if (handleTrialExhausted2(error, config.json)) return;
     const msg = error instanceof Error ? error.message : String(error);
     process.stderr.write(
-      import_chalk4.default.yellow(
+      import_chalk5.default.yellow(
         `  Warning: Scan failed (${msg}). Proceeding with install.
 `
       )
@@ -40383,8 +40756,8 @@ async function scanAndInstallStatic(resolved, parsed, config) {
   }
   if (result.action === "pass") {
     process.stderr.write(
-      import_chalk4.default.green(
-        `  ${import_chalk4.default.bold("\u2713")} ${resolved.length} package${resolved.length !== 1 ? "s" : ""} scanned \u2014 all clear
+      import_chalk5.default.green(
+        `  ${import_chalk5.default.bold("\u2713")} ${resolved.length} package${resolved.length !== 1 ? "s" : ""} scanned \u2014 all clear
 `
       )
     );
@@ -40398,7 +40771,7 @@ async function scanAndInstallStatic(resolved, parsed, config) {
   printTrialBanner(result);
   if (result.action === "warn") {
     process.stderr.write(
-      import_chalk4.default.yellow("  Warnings detected. Proceeding with install.\n\n")
+      import_chalk5.default.yellow("  Warnings detected. Proceeding with install.\n\n")
     );
     const code = await runNpm(parsed.rawArgs);
     process.exit(code);
@@ -40406,8 +40779,8 @@ async function scanAndInstallStatic(resolved, parsed, config) {
   if (result.action === "block") {
     if (parsed.dgForce) {
       process.stderr.write(
-        import_chalk4.default.yellow(
-          import_chalk4.default.bold(
+        import_chalk5.default.yellow(
+          import_chalk5.default.bold(
             "  --dg-force: Bypassing block. Install at your own risk.\n\n"
           )
         )
@@ -40416,10 +40789,10 @@ async function scanAndInstallStatic(resolved, parsed, config) {
       process.exit(code);
     }
     process.stderr.write(
-      import_chalk4.default.red(import_chalk4.default.bold("  BLOCKED: ")) + import_chalk4.default.red("High-risk packages detected. Install aborted.\n")
+      import_chalk5.default.red(import_chalk5.default.bold("  BLOCKED: ")) + import_chalk5.default.red("High-risk packages detected. Install aborted.\n")
     );
     process.stderr.write(
-      import_chalk4.default.dim("  Use --dg-force to bypass this check.\n\n")
+      import_chalk5.default.dim("  Use --dg-force to bypass this check.\n\n")
     );
     process.exit(2);
   }
@@ -40436,13 +40809,13 @@ async function runStaticPip(pipArgs, config) {
   }
   if (specs.length === 0) {
     process.stderr.write(
-      import_chalk4.default.dim("  Dependency Guardian: no packages to scan, passing through to pip.\n")
+      import_chalk5.default.dim("  Dependency Guardian: no packages to scan, passing through to pip.\n")
     );
     const code = await runPip(parsed.rawArgs);
     process.exit(code);
   }
   process.stderr.write(
-    import_chalk4.default.dim(
+    import_chalk5.default.dim(
       `  Resolving ${specs.length} package${specs.length !== 1 ? "s" : ""} from PyPI...
 `
     )
@@ -40450,19 +40823,19 @@ async function runStaticPip(pipArgs, config) {
   const { resolved, failed } = await resolvePackages2(specs);
   if (failed.length > 0) {
     process.stderr.write(
-      import_chalk4.default.yellow(`  Warning: Could not resolve versions for: ${failed.join(", ")}
+      import_chalk5.default.yellow(`  Warning: Could not resolve versions for: ${failed.join(", ")}
 `)
     );
   }
   if (resolved.length === 0) {
     process.stderr.write(
-      import_chalk4.default.dim("  No packages to scan. Passing through to pip.\n")
+      import_chalk5.default.dim("  No packages to scan. Passing through to pip.\n")
     );
     const code = await runPip(parsed.rawArgs);
     process.exit(code);
   }
   process.stderr.write(
-    import_chalk4.default.dim(
+    import_chalk5.default.dim(
       `  Scanning ${resolved.length} Python package${resolved.length !== 1 ? "s" : ""}...
 `
     )
@@ -40474,7 +40847,7 @@ async function runStaticPip(pipArgs, config) {
     if (handleTrialExhausted2(error, config.json)) return;
     const msg = error instanceof Error ? error.message : String(error);
     process.stderr.write(
-      import_chalk4.default.yellow(`  Warning: Scan failed (${msg}). Proceeding with install.
+      import_chalk5.default.yellow(`  Warning: Scan failed (${msg}). Proceeding with install.
 `)
     );
     const code = await runPip(parsed.rawArgs);
@@ -40483,8 +40856,8 @@ async function runStaticPip(pipArgs, config) {
   }
   if (result.action === "pass") {
     process.stderr.write(
-      import_chalk4.default.green(
-        `  ${import_chalk4.default.bold("\u2713")} ${resolved.length} package${resolved.length !== 1 ? "s" : ""} scanned \u2014 all clear
+      import_chalk5.default.green(
+        `  ${import_chalk5.default.bold("\u2713")} ${resolved.length} package${resolved.length !== 1 ? "s" : ""} scanned \u2014 all clear
 `
       )
     );
@@ -40498,7 +40871,7 @@ async function runStaticPip(pipArgs, config) {
   printTrialBanner(result);
   if (result.action === "warn") {
     process.stderr.write(
-      import_chalk4.default.yellow("  Warnings detected. Proceeding with install.\n\n")
+      import_chalk5.default.yellow("  Warnings detected. Proceeding with install.\n\n")
     );
     const code = await runPip(parsed.rawArgs);
     process.exit(code);
@@ -40506,16 +40879,16 @@ async function runStaticPip(pipArgs, config) {
   if (result.action === "block") {
     if (parsed.dgForce) {
       process.stderr.write(
-        import_chalk4.default.yellow(import_chalk4.default.bold("  --dg-force: Bypassing block. Install at your own risk.\n\n"))
+        import_chalk5.default.yellow(import_chalk5.default.bold("  --dg-force: Bypassing block. Install at your own risk.\n\n"))
       );
       const code = await runPip(parsed.rawArgs);
       process.exit(code);
     }
     process.stderr.write(
-      import_chalk4.default.red(import_chalk4.default.bold("  BLOCKED: ")) + import_chalk4.default.red("High-risk packages detected. Install aborted.\n")
+      import_chalk5.default.red(import_chalk5.default.bold("  BLOCKED: ")) + import_chalk5.default.red("High-risk packages detected. Install aborted.\n")
     );
     process.stderr.write(
-      import_chalk4.default.dim("  Use --dg-force to bypass this check.\n\n")
+      import_chalk5.default.dim("  Use --dg-force to bypass this check.\n\n")
     );
     process.exit(2);
   }
@@ -40531,17 +40904,17 @@ async function runStaticLogin() {
   const existing = getStoredApiKey2();
   if (existing) {
     process.stderr.write(
-      import_chalk4.default.yellow("  Already authenticated.\n") + import_chalk4.default.dim("  Run `dg logout` first to re-authenticate.\n")
+      import_chalk5.default.yellow("  Already authenticated.\n") + import_chalk5.default.dim("  Run `dg logout` first to re-authenticate.\n")
     );
     return;
   }
-  process.stderr.write(import_chalk4.default.dim("  Creating login session...\n"));
+  process.stderr.write(import_chalk5.default.dim("  Creating login session...\n"));
   let session;
   try {
     session = await createAuthSession2();
   } catch (err) {
     process.stderr.write(
-      import_chalk4.default.red(`  Error: ${err instanceof Error ? err.message : String(err)}
+      import_chalk5.default.red(`  Error: ${err instanceof Error ? err.message : String(err)}
 `)
     );
     process.exit(1);
@@ -40549,10 +40922,10 @@ async function runStaticLogin() {
   process.stderr.write(`
   Authenticate your account at:
 `);
-  process.stderr.write(`  ${import_chalk4.default.cyan(session.verifyUrl)}
+  process.stderr.write(`  ${import_chalk5.default.cyan(session.verifyUrl)}
 
 `);
-  process.stderr.write(import_chalk4.default.dim("  Press ENTER to open in the browser...\n"));
+  process.stderr.write(import_chalk5.default.dim("  Press ENTER to open in the browser...\n"));
   await new Promise((resolve) => {
     const onData = () => {
       process.stdin.removeListener("data", onData);
@@ -40567,7 +40940,7 @@ async function runStaticLogin() {
     openBrowser2(session.verifyUrl);
   } catch {
   }
-  process.stderr.write(import_chalk4.default.dim("  Waiting for authorization...\n"));
+  process.stderr.write(import_chalk5.default.dim("  Waiting for authorization...\n"));
   const POLL_INTERVAL = 2e3;
   const MAX_ATTEMPTS = 150;
   for (let i = 0; i < MAX_ATTEMPTS; i++) {
@@ -40577,15 +40950,15 @@ async function runStaticLogin() {
       if (result.status === "complete" && result.apiKey) {
         saveCredentials2(result.apiKey);
         process.stderr.write(
-          import_chalk4.default.green(`
+          import_chalk5.default.green(`
   Logged in as ${result.email ?? "unknown"}
-`) + import_chalk4.default.dim("  Credentials saved.\n\n")
+`) + import_chalk5.default.dim("  Credentials saved.\n\n")
         );
         return;
       }
       if (result.status === "expired") {
         process.stderr.write(
-          import_chalk4.default.yellow("\n  Session expired. Run `dg login` to try again.\n")
+          import_chalk5.default.yellow("\n  Session expired. Run `dg login` to try again.\n")
         );
         process.exit(1);
       }
@@ -40593,15 +40966,15 @@ async function runStaticLogin() {
     }
   }
   process.stderr.write(
-    import_chalk4.default.yellow("\n  Timed out waiting for authorization.\n")
+    import_chalk5.default.yellow("\n  Timed out waiting for authorization.\n")
   );
   process.exit(1);
 }
-var import_chalk4;
+var import_chalk5;
 var init_static_output = __esm({
   "src/static-output.ts"() {
     "use strict";
-    import_chalk4 = __toESM(require_source());
+    import_chalk5 = __toESM(require_source());
     init_api();
     init_lockfile();
     init_npm_wrapper();
@@ -40616,14 +40989,14 @@ __export(hook_exports, {
 });
 import { execFileSync as execFileSync3 } from "node:child_process";
 import {
-  existsSync as existsSync8,
+  existsSync as existsSync9,
   readFileSync as readFileSync9,
   writeFileSync as writeFileSync3,
   mkdirSync,
   chmodSync as chmodSync2,
   unlinkSync as unlinkSync2
 } from "node:fs";
-import { join as join7 } from "node:path";
+import { join as join8 } from "node:path";
 function findGitDir() {
   try {
     return execFileSync3("git", ["rev-parse", "--git-dir"], {
@@ -40636,10 +41009,10 @@ function findGitDir() {
 }
 function installHook() {
   const gitDir = findGitDir();
-  const hooksDir = join7(gitDir, "hooks");
-  const hookPath = join7(hooksDir, "pre-commit");
+  const hooksDir = join8(gitDir, "hooks");
+  const hookPath = join8(hooksDir, "pre-commit");
   mkdirSync(hooksDir, { recursive: true });
-  if (existsSync8(hookPath)) {
+  if (existsSync9(hookPath)) {
     const existing = readFileSync9(hookPath, "utf-8");
     if (existing.includes(HOOK_MARKER)) {
       process.stderr.write("  Hook already installed.\n");
@@ -40660,8 +41033,8 @@ function installHook() {
 }
 function uninstallHook() {
   const gitDir = findGitDir();
-  const hookPath = join7(gitDir, "hooks", "pre-commit");
-  if (!existsSync8(hookPath)) {
+  const hookPath = join8(gitDir, "hooks", "pre-commit");
+  if (!existsSync9(hookPath)) {
     process.stderr.write("  No hook to remove.\n");
     return;
   }
@@ -40784,7 +41157,7 @@ ${HOOK_SCRIPT.split("\n").slice(1).join("\n")}${MARKER_END}
 });
 
 // src/ui/hooks/useNpmWrapper.ts
-function reducer2(_state, action) {
+function reducer3(_state, action) {
   switch (action.type) {
     case "PASSTHROUGH":
       return { phase: "passthrough" };
@@ -40808,12 +41181,12 @@ function reducer2(_state, action) {
       return { phase: "trial_exhausted" };
   }
 }
-function useNpmWrapper(npmArgs, config) {
-  const [state, dispatch] = (0, import_react25.useReducer)(reducer2, { phase: "resolving", count: 0 });
-  const started = (0, import_react25.useRef)(false);
-  const parsedRef = (0, import_react25.useRef)(parseNpmArgs(npmArgs));
-  const pendingInstall = (0, import_react25.useRef)(null);
-  const rejectRef = (0, import_react25.useRef)(null);
+function useNpmWrapper(npmArgs, config, exit) {
+  const [state, dispatch] = (0, import_react26.useReducer)(reducer3, { phase: "resolving", count: 0 });
+  const started = (0, import_react26.useRef)(false);
+  const parsedRef = (0, import_react26.useRef)(parseNpmArgs(npmArgs));
+  const pendingInstall = (0, import_react26.useRef)(null);
+  const rejectRef = (0, import_react26.useRef)(null);
   const confirmInstall = () => {
     if (pendingInstall.current) {
       pendingInstall.current();
@@ -40828,7 +41201,7 @@ function useNpmWrapper(npmArgs, config) {
       rejectRef.current = null;
     }
   };
-  (0, import_react25.useEffect)(() => {
+  (0, import_react26.useEffect)(() => {
     if (started.current) return;
     started.current = true;
     const parsed = parsedRef.current;
@@ -40863,18 +41236,24 @@ function useNpmWrapper(npmArgs, config) {
         dispatch({ type: "SCANNING", count: resolved.length });
         const result = await callAnalyzeAPI(resolved, config);
         if (result.action === "pass") {
-          dispatch({ type: "PASS", count: resolved.length });
-          dispatch({ type: "INSTALLING" });
+          if (exit) exit();
+          const chalk8 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
+          process.stderr.write(
+            chalk8.green(`  \u2713 ${resolved.length} package${resolved.length !== 1 ? "s" : ""} scanned \u2014 all clear
+`)
+          );
+          process.stderr.write("\n");
           const code = await runNpm(parsed.rawArgs);
-          dispatch({ type: "DONE", exitCode: code });
+          process.exit(code);
           return;
         }
         if (result.action === "warn") {
-          dispatch({ type: "WARN", result });
+          if (exit) exit();
           process.stdout.write(renderResultStatic(result, config) + "\n");
-          dispatch({ type: "INSTALLING" });
+          const chalk8 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
+          process.stderr.write(chalk8.yellow("  Warnings detected. Proceeding with install.\n\n"));
           const code = await runNpm(parsed.rawArgs);
-          dispatch({ type: "DONE", exitCode: code });
+          process.exit(code);
           return;
         }
         if (result.action === "block") {
@@ -40915,11 +41294,11 @@ function useNpmWrapper(npmArgs, config) {
   }, [npmArgs, config]);
   return { state, confirmInstall, rejectInstall };
 }
-var import_react25;
+var import_react26;
 var init_useNpmWrapper = __esm({
   "src/ui/hooks/useNpmWrapper.ts"() {
     "use strict";
-    import_react25 = __toESM(require_react());
+    import_react26 = __toESM(require_react());
     init_npm_wrapper();
     init_api();
     init_static_output();
@@ -40928,7 +41307,7 @@ var init_useNpmWrapper = __esm({
 
 // src/ui/components/ScoreHeader.tsx
 function scoreColor(score, action) {
-  const colorFn = action === "block" ? import_chalk5.default.red.bold : action === "warn" ? import_chalk5.default.yellow.bold : import_chalk5.default.green.bold;
+  const colorFn = action === "block" ? import_chalk6.default.red.bold : action === "warn" ? import_chalk6.default.yellow.bold : import_chalk6.default.green.bold;
   return colorFn(String(score));
 }
 function severityBar(counts) {
@@ -40942,7 +41321,7 @@ function severityBar(counts) {
     if (count === 0) continue;
     const width = Math.max(2, Math.round(count / total * BAR_WIDTH));
     const bar = "\u2501".repeat(width);
-    const colorFn = SEV_COLORS[lv] ?? import_chalk5.default.dim;
+    const colorFn = SEV_COLORS[lv] ?? import_chalk6.default.dim;
     parts.push(`${colorFn(bar)} ${count} ${SEV_LABELS[lv] ?? ""}`);
   }
   return parts.join("  ");
@@ -40976,10 +41355,10 @@ function fillCircle(grid, cx, cy, r, type) {
 }
 function renderLogo(action) {
   const colors = {
-    1: import_chalk5.default.dim,
-    2: import_chalk5.default.white,
-    3: (s) => import_chalk5.default.bold.white(s),
-    4: action === "block" ? import_chalk5.default.red : action === "warn" ? import_chalk5.default.yellow : import_chalk5.default.green
+    1: import_chalk6.default.dim,
+    2: import_chalk6.default.white,
+    3: (s) => import_chalk6.default.bold.white(s),
+    4: action === "block" ? import_chalk6.default.red : action === "warn" ? import_chalk6.default.yellow : import_chalk6.default.green
   };
   const result = [];
   const { chars, types, cols } = LOGO_DATA;
@@ -40988,24 +41367,24 @@ function renderLogo(action) {
     for (let j = 0; j < cols; j++) {
       const ch = chars[i + j];
       const t = types[i + j];
-      row += t > 0 ? (colors[t] ?? import_chalk5.default.dim)(ch) : ch;
+      row += t > 0 ? (colors[t] ?? import_chalk6.default.dim)(ch) : ch;
     }
     result.push(row);
   }
   return result;
 }
-var import_chalk5, import_jsx_runtime3, SEV_COLORS, SEV_LABELS, LOGO_DATA, ScoreHeader;
+var import_chalk6, import_jsx_runtime4, SEV_COLORS, SEV_LABELS, LOGO_DATA, ScoreHeader;
 var init_ScoreHeader = __esm({
   async "src/ui/components/ScoreHeader.tsx"() {
     "use strict";
     await init_build2();
-    import_chalk5 = __toESM(require_source());
-    import_jsx_runtime3 = __toESM(require_jsx_runtime());
+    import_chalk6 = __toESM(require_source());
+    import_jsx_runtime4 = __toESM(require_jsx_runtime());
     SEV_COLORS = {
-      5: (s) => import_chalk5.default.red(s),
-      4: (s) => import_chalk5.default.magenta(s),
-      3: (s) => import_chalk5.default.yellow(s),
-      2: (s) => import_chalk5.default.dim(s)
+      5: (s) => import_chalk6.default.red(s),
+      4: (s) => import_chalk6.default.magenta(s),
+      3: (s) => import_chalk6.default.yellow(s),
+      2: (s) => import_chalk6.default.dim(s)
     };
     SEV_LABELS = {
       5: "crit",
@@ -41063,7 +41442,7 @@ var init_ScoreHeader = __esm({
     }) => {
       const logo = renderLogo(action);
       const showLogo = (process.stdout.columns ?? 80) >= 60;
-      return /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(
+      return /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(
         Box_default,
         {
           flexDirection: "column",
@@ -41072,37 +41451,37 @@ var init_ScoreHeader = __esm({
           paddingLeft: 1,
           paddingRight: 1,
           width: "100%",
-          children: /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Box_default, { flexDirection: "row", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Box_default, { flexDirection: "column", flexGrow: 1, children: [
-              /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { bold: true, children: [
-                import_chalk5.default.cyan("\u25C6"),
+          children: /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(Box_default, { flexDirection: "row", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(Box_default, { flexDirection: "column", flexGrow: 1, children: [
+              /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(Text, { bold: true, children: [
+                import_chalk6.default.cyan("\u25C6"),
                 " Dependency Guardian"
               ] }),
-              /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { children: " " }),
-              /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { children: [
-                import_chalk5.default.dim("Score"),
+              /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { children: " " }),
+              /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(Text, { children: [
+                import_chalk6.default.dim("Score"),
                 "  ",
                 scoreColor(score, action)
               ] }),
-              total !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(import_jsx_runtime3.Fragment, { children: [
-                /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { children: " " }),
-                /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { children: [
-                  import_chalk5.default.dim(`${total} package${total !== 1 ? "s" : ""} scanned`),
-                  flagged !== void 0 && flagged > 0 ? /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(import_jsx_runtime3.Fragment, { children: [
+              total !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(import_jsx_runtime4.Fragment, { children: [
+                /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { children: " " }),
+                /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(Text, { children: [
+                  import_chalk6.default.dim(`${total} package${total !== 1 ? "s" : ""} scanned`),
+                  flagged !== void 0 && flagged > 0 ? /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(import_jsx_runtime4.Fragment, { children: [
                     "    ",
-                    import_chalk5.default.yellow(`${flagged} flagged`),
+                    import_chalk6.default.yellow(`${flagged} flagged`),
                     "    ",
-                    import_chalk5.default.green(`${clean ?? 0} clean`)
-                  ] }) : /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(import_jsx_runtime3.Fragment, { children: [
+                    import_chalk6.default.green(`${clean ?? 0} clean`)
+                  ] }) : /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(import_jsx_runtime4.Fragment, { children: [
                     "    ",
-                    import_chalk5.default.green("all clean")
+                    import_chalk6.default.green("all clean")
                   ] })
                 ] }),
-                severityCounts && Object.values(severityCounts).some((v) => v > 0) && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { children: severityBar(severityCounts) }),
-                /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { dimColor: true, children: `\x1B]8;;https://westbayberry.com\x07westbayberry.com\x1B]8;;\x07` })
+                severityCounts && Object.values(severityCounts).some((v) => v > 0) && /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { children: severityBar(severityCounts) }),
+                /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { dimColor: true, children: `\x1B]8;;https://westbayberry.com\x07westbayberry.com\x1B]8;;\x07` })
               ] })
             ] }),
-            showLogo && /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Box_default, { flexDirection: "column", marginLeft: 2, children: logo.map((line, i) => /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { children: line }, i)) })
+            showLogo && /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Box_default, { flexDirection: "column", marginLeft: 2, children: logo.map((line, i) => /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { children: line }, i)) })
           ] })
         }
       );
@@ -41111,13 +41490,13 @@ var init_ScoreHeader = __esm({
 });
 
 // src/ui/components/DurationLine.tsx
-var import_jsx_runtime4, DurationLine;
+var import_jsx_runtime5, DurationLine;
 var init_DurationLine = __esm({
   async "src/ui/components/DurationLine.tsx"() {
     "use strict";
     await init_build2();
-    import_jsx_runtime4 = __toESM(require_jsx_runtime());
-    DurationLine = ({ ms }) => /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(Text, { dimColor: true, children: [
+    import_jsx_runtime5 = __toESM(require_jsx_runtime());
+    DurationLine = ({ ms }) => /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(Text, { dimColor: true, children: [
       "Completed in ",
       (ms / 1e3).toFixed(1),
       "s"
@@ -41137,16 +41516,16 @@ function groupPackages2(packages) {
   return [...map.values()].map((pkgs) => ({ packages: pkgs, key: pkgs[0].name })).sort((a, b) => b.packages[0].score - a.packages[0].score);
 }
 function severityColor(sev) {
-  if (sev >= 5) return (s) => import_chalk6.default.bold.red(s);
-  if (sev >= 4) return import_chalk6.default.magenta;
-  if (sev >= 3) return import_chalk6.default.yellow;
-  if (sev >= 2) return import_chalk6.default.dim;
-  return import_chalk6.default.dim;
+  if (sev >= 5) return (s) => import_chalk7.default.bold.red(s);
+  if (sev >= 4) return import_chalk7.default.magenta;
+  if (sev >= 3) return import_chalk7.default.yellow;
+  if (sev >= 2) return import_chalk7.default.dim;
+  return import_chalk7.default.dim;
 }
 function actionBadge2(score) {
-  if (score >= 70) return { label: "BLOCK", color: import_chalk6.default.red };
-  if (score >= 60) return { label: "WARN", color: import_chalk6.default.yellow };
-  return { label: "PASS", color: import_chalk6.default.green };
+  if (score >= 70) return { label: "BLOCK", color: import_chalk7.default.red };
+  if (score >= 60) return { label: "WARN", color: import_chalk7.default.yellow };
+  return { label: "PASS", color: import_chalk7.default.green };
 }
 function truncate2(s, max) {
   return s.length <= max ? s : s.slice(0, max - 1) + "\u2026";
@@ -41154,15 +41533,15 @@ function truncate2(s, max) {
 function pad2(s, len) {
   return s + " ".repeat(Math.max(0, len - s.length));
 }
-var import_chalk6, import_jsx_runtime5, SEVERITY_LABELS, EVIDENCE_LIMIT, ResultsView;
+var import_chalk7, import_jsx_runtime6, SEVERITY_LABELS, EVIDENCE_LIMIT, ResultsView;
 var init_ResultsView = __esm({
   async "src/ui/components/ResultsView.tsx"() {
     "use strict";
     await init_build2();
-    import_chalk6 = __toESM(require_source());
+    import_chalk7 = __toESM(require_source());
     await init_ScoreHeader();
     await init_DurationLine();
-    import_jsx_runtime5 = __toESM(require_jsx_runtime());
+    import_jsx_runtime6 = __toESM(require_jsx_runtime());
     SEVERITY_LABELS = {
       5: "CRITICAL",
       4: "HIGH",
@@ -41180,70 +41559,70 @@ var init_ResultsView = __esm({
       const clean = result.packages.filter((p) => p.score === 0);
       const total = result.packages.length;
       const groups = groupPackages2(flagged);
-      return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 2, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Newline, {}),
-        /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(ScoreHeader, { score: result.score, action: result.action }),
-        /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Newline, {}),
-        /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(Text, { children: [
-          import_chalk6.default.dim(`${total} package${total !== 1 ? "s" : ""} scanned`),
-          flagged.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(import_jsx_runtime5.Fragment, { children: [
+      return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 2, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Newline, {}),
+        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(ScoreHeader, { score: result.score, action: result.action }),
+        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Newline, {}),
+        /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+          import_chalk7.default.dim(`${total} package${total !== 1 ? "s" : ""} scanned`),
+          flagged.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
             "    ",
-            import_chalk6.default.yellow(`${flagged.length} flagged`),
+            import_chalk7.default.yellow(`${flagged.length} flagged`),
             "    ",
-            import_chalk6.default.green(`${clean.length} clean`)
-          ] }) : /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(import_jsx_runtime5.Fragment, { children: [
+            import_chalk7.default.green(`${clean.length} clean`)
+          ] }) : /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
             "    ",
-            import_chalk6.default.green("all clean")
+            import_chalk7.default.green("all clean")
           ] })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Newline, {}),
-        flagged.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(Box_default, { flexDirection: "column", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Text, { bold: true, children: "Flagged Packages" }),
-          /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Text, { dimColor: true, children: "\u2500".repeat(60) }),
+        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Newline, {}),
+        flagged.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Box_default, { flexDirection: "column", children: [
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, children: "Flagged Packages" }),
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { dimColor: true, children: "\u2500".repeat(60) }),
           groups.map((group) => {
             const rep = group.packages[0];
             const { label, color } = actionBadge2(rep.score);
             const names = group.packages.length === 1 ? rep.name : group.packages.length <= 3 ? group.packages.map((p) => p.name).join(", ") : `${group.packages[0].name} + ${group.packages.length - 1} similar`;
-            return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(Text, { children: [
+            return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
               "  ",
               color(pad2(label, 7)),
-              import_chalk6.default.bold(pad2(truncate2(names, 50), 52)),
-              import_chalk6.default.dim(`score ${rep.score}`)
+              import_chalk7.default.bold(pad2(truncate2(names, 50), 52)),
+              import_chalk7.default.dim(`score ${rep.score}`)
             ] }, group.key);
           }),
-          /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Newline, {})
+          /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Newline, {})
         ] }),
-        clean.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(Text, { children: [
-          import_chalk6.default.green("\u2713"),
+        clean.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+          import_chalk7.default.green("\u2713"),
           " ",
-          import_chalk6.default.green.bold(String(clean.length)),
+          import_chalk7.default.green.bold(String(clean.length)),
           " ",
-          import_chalk6.default.dim(`package${clean.length !== 1 ? "s" : ""} passed with score 0`)
+          import_chalk7.default.dim(`package${clean.length !== 1 ? "s" : ""} passed with score 0`)
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Newline, {}),
+        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Newline, {}),
         groups.filter((g) => g.packages[0].score > 0).map((group) => {
           const rep = group.packages[0];
           const names = group.packages.length === 1 ? `${rep.name}@${rep.version}` : group.packages.length <= 3 ? group.packages.map((p) => `${p.name}@${p.version}`).join(", ") : `${rep.name}@${rep.version} + ${group.packages.length - 1} identical packages`;
           const visibleFindings = rep.findings.filter((f) => f.severity > 1 || f.critical).sort((a, b) => b.severity - a.severity);
           const safeVersion = result.safeVersions[rep.name];
-          return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(Box_default, { flexDirection: "column", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(Text, { children: [
-              import_chalk6.default.dim("\u2500\u2500"),
+          return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Box_default, { flexDirection: "column", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+              import_chalk7.default.dim("\u2500\u2500"),
               " ",
-              import_chalk6.default.bold(`${names} (score: ${rep.score})`)
+              import_chalk7.default.bold(`${names} (score: ${rep.score})`)
             ] }),
-            group.packages.length > 3 && /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(Text, { dimColor: true, children: [
+            group.packages.length > 3 && /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { dimColor: true, children: [
               "   Affects: ",
               group.packages.map((p) => p.name).join(", ")
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
             visibleFindings.map((finding, idx) => {
               const sevLabel = SEVERITY_LABELS[finding.severity] ?? "INFO";
               const colorFn = severityColor(finding.severity);
               const evidenceSlice = finding.evidence.slice(0, EVIDENCE_LIMIT);
               const overflow = finding.evidence.length - EVIDENCE_LIMIT;
-              return /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(Box_default, { flexDirection: "column", children: [
-                /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(Text, { children: [
+              return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Box_default, { flexDirection: "column", children: [
+                /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
                   "  ",
                   colorFn(pad2(sevLabel, 10)),
                   finding.id,
@@ -41252,40 +41631,40 @@ var init_ResultsView = __esm({
                   " ",
                   finding.title
                 ] }),
-                evidenceSlice.map((ev, i) => /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(Text, { children: [
+                evidenceSlice.map((ev, i) => /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
                   "              ",
-                  import_chalk6.default.dim(truncate2(ev, 76))
+                  import_chalk7.default.dim(truncate2(ev, 76))
                 ] }, i)),
-                overflow > 0 && /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(Text, { children: [
+                overflow > 0 && /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
                   "              ",
-                  import_chalk6.default.dim(`... and ${overflow} more`)
+                  import_chalk7.default.dim(`... and ${overflow} more`)
                 ] }),
-                /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Text, { children: " " })
+                /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " })
               ] }, `${finding.id}-${idx}`);
             }),
-            safeVersion && /* @__PURE__ */ (0, import_jsx_runtime5.jsxs)(Text, { children: [
+            safeVersion && /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
               "  ",
-              import_chalk6.default.green(`Safe version: ${rep.name}@${safeVersion}`)
+              import_chalk7.default.green(`Safe version: ${rep.name}@${safeVersion}`)
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Newline, {})
+            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Newline, {})
           ] }, group.key);
         }),
-        /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(DurationLine, { ms: durationMs }),
-        /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Newline, {})
+        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(DurationLine, { ms: durationMs }),
+        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Newline, {})
       ] });
     };
   }
 });
 
 // src/ui/components/ConfirmPrompt.tsx
-var import_chalk7, import_jsx_runtime6, ConfirmPrompt;
+var import_chalk8, import_jsx_runtime7, ConfirmPrompt;
 var init_ConfirmPrompt = __esm({
   async "src/ui/components/ConfirmPrompt.tsx"() {
     "use strict";
     await init_build2();
     await init_build2();
-    import_chalk7 = __toESM(require_source());
-    import_jsx_runtime6 = __toESM(require_jsx_runtime());
+    import_chalk8 = __toESM(require_source());
+    import_jsx_runtime7 = __toESM(require_jsx_runtime());
     ConfirmPrompt = ({
       message,
       onConfirm,
@@ -41298,17 +41677,17 @@ var init_ConfirmPrompt = __esm({
           onReject();
         }
       });
-      return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Box_default, { flexDirection: "column", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
-          import_chalk7.default.red.bold("\u26A0"),
+      return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Box_default, { flexDirection: "column", children: [
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
+          import_chalk8.default.red.bold("\u26A0"),
           " ",
-          import_chalk7.default.bold(message)
+          import_chalk8.default.bold(message)
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
           "Install anyway? [",
-          import_chalk7.default.bold.green("y"),
+          import_chalk8.default.bold.green("y"),
           "es / ",
-          import_chalk7.default.bold.red("N"),
+          import_chalk8.default.bold.red("N"),
           "o]"
         ] })
       ] });
@@ -41331,17 +41710,17 @@ function getHint(error) {
       return null;
   }
 }
-var import_chalk8, import_jsx_runtime7, ErrorView;
+var import_chalk9, import_jsx_runtime8, ErrorView;
 var init_ErrorView = __esm({
   async "src/ui/components/ErrorView.tsx"() {
     "use strict";
     await init_build2();
-    import_chalk8 = __toESM(require_source());
+    import_chalk9 = __toESM(require_source());
     init_sanitize();
-    import_jsx_runtime7 = __toESM(require_jsx_runtime());
+    import_jsx_runtime8 = __toESM(require_jsx_runtime());
     ErrorView = ({ error }) => {
       const hint = getHint(error);
-      return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(
+      return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(
         Box_default,
         {
           flexDirection: "column",
@@ -41350,10 +41729,10 @@ var init_ErrorView = __esm({
           paddingLeft: 1,
           paddingRight: 1,
           children: [
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: import_chalk8.default.red.bold("\u2718 Error") }),
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: sanitize(error.message) }),
-            hint && /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
-              import_chalk8.default.yellow("\u2192"),
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { children: import_chalk9.default.red.bold("\u2718 Error") }),
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { children: sanitize(error.message) }),
+            hint && /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { children: [
+              import_chalk9.default.yellow("\u2192"),
               " ",
               hint
             ] })
@@ -41369,25 +41748,25 @@ var NpmWrapperApp_exports = {};
 __export(NpmWrapperApp_exports, {
   NpmWrapperApp: () => NpmWrapperApp
 });
-var import_react26, import_jsx_runtime8, NpmWrapperApp;
+var import_react27, import_jsx_runtime9, NpmWrapperApp;
 var init_NpmWrapperApp = __esm({
   async "src/ui/NpmWrapperApp.tsx"() {
     "use strict";
-    import_react26 = __toESM(require_react());
+    import_react27 = __toESM(require_react());
     await init_build2();
     init_useNpmWrapper();
     await init_Spinner();
     await init_ResultsView();
     await init_ConfirmPrompt();
     await init_ErrorView();
-    import_jsx_runtime8 = __toESM(require_jsx_runtime());
+    import_jsx_runtime9 = __toESM(require_jsx_runtime());
     NpmWrapperApp = ({
       npmArgs,
       config
     }) => {
-      const { state, confirmInstall, rejectInstall } = useNpmWrapper(npmArgs, config);
       const { exit } = use_app_default();
-      (0, import_react26.useEffect)(() => {
+      const { state, confirmInstall, rejectInstall } = useNpmWrapper(npmArgs, config, exit);
+      (0, import_react27.useEffect)(() => {
         if (state.phase === "done") {
           process.exitCode = state.exitCode;
           const timer = setTimeout(() => exit(), 0);
@@ -41401,29 +41780,29 @@ var init_NpmWrapperApp = __esm({
         if (state.phase === "passthrough") {
         }
       }, [state, exit]);
-      const handleConfirm = (0, import_react26.useCallback)(() => {
+      const handleConfirm = (0, import_react27.useCallback)(() => {
         confirmInstall();
       }, [confirmInstall]);
-      const handleReject = (0, import_react26.useCallback)(() => {
+      const handleReject = (0, import_react27.useCallback)(() => {
         rejectInstall();
       }, [rejectInstall]);
       switch (state.phase) {
         case "resolving":
-          return /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(
+          return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
             Spinner2,
             {
               label: `Resolving ${state.count} package${state.count !== 1 ? "s" : ""}...`
             }
           );
         case "scanning":
-          return /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(
+          return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
             Spinner2,
             {
               label: `Scanning ${state.count} package${state.count !== 1 ? "s" : ""}...`
             }
           );
         case "pass":
-          return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { color: "green", children: [
+          return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { color: "green", children: [
             "\u2713",
             " ",
             state.count,
@@ -41434,8 +41813,8 @@ var init_NpmWrapperApp = __esm({
             "all clear"
           ] });
         case "warn":
-          return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Box_default, { flexDirection: "column", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(
+          return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Box_default, { flexDirection: "column", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
               ResultsView,
               {
                 result: state.result,
@@ -41443,12 +41822,12 @@ var init_NpmWrapperApp = __esm({
                 durationMs: state.result.durationMs
               }
             ),
-            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { color: "yellow", children: "Warnings detected. Proceeding with install..." })
+            /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "yellow", children: "Warnings detected. Proceeding with install..." })
           ] });
         case "blocked":
           if (state.dgForce) {
-            return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Box_default, { flexDirection: "column", children: [
-              /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(
+            return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Box_default, { flexDirection: "column", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
                 ResultsView,
                 {
                   result: state.result,
@@ -41456,11 +41835,11 @@ var init_NpmWrapperApp = __esm({
                   durationMs: state.result.durationMs
                 }
               ),
-              /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { color: "yellow", bold: true, children: "--dg-force: Bypassing block. Install at your own risk." })
+              /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "yellow", bold: true, children: "--dg-force: Bypassing block. Install at your own risk." })
             ] });
           }
-          return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Box_default, { flexDirection: "column", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(
+          return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Box_default, { flexDirection: "column", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
               ResultsView,
               {
                 result: state.result,
@@ -41468,12 +41847,12 @@ var init_NpmWrapperApp = __esm({
                 durationMs: state.result.durationMs
               }
             ),
-            /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { color: "red", bold: true, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { color: "red", bold: true, children: [
               "BLOCKED:",
               " ",
-              /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { color: "red", children: "High-risk packages detected." })
+              /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "red", children: "High-risk packages detected." })
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(
+            /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
               ConfirmPrompt,
               {
                 message: "Proceed with install anyway?",
@@ -41483,18 +41862,18 @@ var init_NpmWrapperApp = __esm({
             )
           ] });
         case "installing":
-          return /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Spinner2, { label: "Installing..." });
+          return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Spinner2, { label: "Installing..." });
         case "done":
           return null;
         case "error":
           if (state.proceed) {
-            return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { color: "yellow", children: [
+            return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { color: "yellow", children: [
               "Warning: Scan failed (",
               state.message,
               "). Proceeding with install."
             ] });
           }
-          return /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(ErrorView, { error: new Error(state.message) });
+          return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(ErrorView, { error: new Error(state.message) });
         case "passthrough":
           return null;
         case "trial_exhausted": {
@@ -41504,20 +41883,20 @@ var init_NpmWrapperApp = __esm({
             hasKey = !!getStoredApiKey2();
           } catch {
           }
-          return /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Box_default, { flexDirection: "column", paddingLeft: 2, children: hasKey ? /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(import_jsx_runtime8.Fragment, { children: [
-            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { color: "yellow", bold: true, children: "Your API key may be invalid or expired." }),
-            /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { children: [
+          return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Box_default, { flexDirection: "column", paddingLeft: 2, children: hasKey ? /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(import_jsx_runtime9.Fragment, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "yellow", bold: true, children: "Your API key may be invalid or expired." }),
+            /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { children: [
               "Run ",
-              /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { color: "cyan", bold: true, children: "dg logout" }),
+              /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "cyan", bold: true, children: "dg logout" }),
               " then ",
-              /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { color: "cyan", bold: true, children: "dg login" }),
+              /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "cyan", bold: true, children: "dg login" }),
               " to re-authenticate."
             ] })
-          ] }) : /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(import_jsx_runtime8.Fragment, { children: [
-            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { color: "yellow", bold: true, children: "Free trial scans used up." }),
-            /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { children: [
+          ] }) : /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(import_jsx_runtime9.Fragment, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "yellow", bold: true, children: "Free trial scans used up." }),
+            /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { children: [
               "Run ",
-              /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { color: "cyan", bold: true, children: "dg login" }),
+              /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "cyan", bold: true, children: "dg login" }),
               " to create a free account and continue scanning."
             ] })
           ] }) });
@@ -41528,7 +41907,7 @@ var init_NpmWrapperApp = __esm({
 });
 
 // src/ui/hooks/usePipWrapper.ts
-function reducer3(_state, action) {
+function reducer4(_state, action) {
   switch (action.type) {
     case "PASSTHROUGH":
       return { phase: "passthrough" };
@@ -41552,12 +41931,12 @@ function reducer3(_state, action) {
       return { phase: "trial_exhausted" };
   }
 }
-function usePipWrapper(pipArgs, config) {
-  const [state, dispatch] = (0, import_react27.useReducer)(reducer3, { phase: "resolving", count: 0 });
-  const started = (0, import_react27.useRef)(false);
-  const parsedRef = (0, import_react27.useRef)(parsePipArgs(pipArgs));
-  const pendingInstall = (0, import_react27.useRef)(null);
-  const rejectRef = (0, import_react27.useRef)(null);
+function usePipWrapper(pipArgs, config, exit) {
+  const [state, dispatch] = (0, import_react28.useReducer)(reducer4, { phase: "resolving", count: 0 });
+  const started = (0, import_react28.useRef)(false);
+  const parsedRef = (0, import_react28.useRef)(parsePipArgs(pipArgs));
+  const pendingInstall = (0, import_react28.useRef)(null);
+  const rejectRef = (0, import_react28.useRef)(null);
   const confirmInstall = () => {
     if (pendingInstall.current) {
       pendingInstall.current();
@@ -41572,7 +41951,7 @@ function usePipWrapper(pipArgs, config) {
       rejectRef.current = null;
     }
   };
-  (0, import_react27.useEffect)(() => {
+  (0, import_react28.useEffect)(() => {
     if (started.current) return;
     started.current = true;
     const parsed = parsedRef.current;
@@ -41612,18 +41991,24 @@ function usePipWrapper(pipArgs, config) {
         dispatch({ type: "SCANNING", count: resolved.length });
         const result = await callPyPIAnalyzeAPI(resolved, config);
         if (result.action === "pass") {
-          dispatch({ type: "PASS", count: resolved.length });
-          dispatch({ type: "INSTALLING" });
+          if (exit) exit();
+          const chalk8 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
+          process.stderr.write(
+            chalk8.green(`  \u2713 ${resolved.length} package${resolved.length !== 1 ? "s" : ""} scanned \u2014 all clear
+`)
+          );
+          process.stderr.write("\n");
           const code = await runPip(parsed.rawArgs);
-          dispatch({ type: "DONE", exitCode: code });
+          process.exit(code);
           return;
         }
         if (result.action === "warn") {
-          dispatch({ type: "WARN", result });
+          if (exit) exit();
           process.stdout.write(renderResultStatic(result, config) + "\n");
-          dispatch({ type: "INSTALLING" });
+          const chalk8 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
+          process.stderr.write(chalk8.yellow("  Warnings detected. Proceeding with install.\n\n"));
           const code = await runPip(parsed.rawArgs);
-          dispatch({ type: "DONE", exitCode: code });
+          process.exit(code);
           return;
         }
         if (result.action === "block") {
@@ -41664,11 +42049,11 @@ function usePipWrapper(pipArgs, config) {
   }, [pipArgs, config]);
   return { state, confirmInstall, rejectInstall };
 }
-var import_react27;
+var import_react28;
 var init_usePipWrapper = __esm({
   "src/ui/hooks/usePipWrapper.ts"() {
     "use strict";
-    import_react27 = __toESM(require_react());
+    import_react28 = __toESM(require_react());
     init_pip_wrapper();
     init_api();
     init_static_output();
@@ -41680,25 +42065,25 @@ var PipWrapperApp_exports = {};
 __export(PipWrapperApp_exports, {
   PipWrapperApp: () => PipWrapperApp
 });
-var import_react28, import_jsx_runtime9, PipWrapperApp;
+var import_react29, import_jsx_runtime10, PipWrapperApp;
 var init_PipWrapperApp = __esm({
   async "src/ui/PipWrapperApp.tsx"() {
     "use strict";
-    import_react28 = __toESM(require_react());
+    import_react29 = __toESM(require_react());
     await init_build2();
     init_usePipWrapper();
     await init_Spinner();
     await init_ResultsView();
     await init_ConfirmPrompt();
     await init_ErrorView();
-    import_jsx_runtime9 = __toESM(require_jsx_runtime());
+    import_jsx_runtime10 = __toESM(require_jsx_runtime());
     PipWrapperApp = ({
       pipArgs,
       config
     }) => {
-      const { state, confirmInstall, rejectInstall } = usePipWrapper(pipArgs, config);
       const { exit } = use_app_default();
-      (0, import_react28.useEffect)(() => {
+      const { state, confirmInstall, rejectInstall } = usePipWrapper(pipArgs, config, exit);
+      (0, import_react29.useEffect)(() => {
         if (state.phase === "done") {
           process.exitCode = state.exitCode;
           const timer = setTimeout(() => exit(), 0);
@@ -41712,29 +42097,29 @@ var init_PipWrapperApp = __esm({
         if (state.phase === "passthrough") {
         }
       }, [state, exit]);
-      const handleConfirm = (0, import_react28.useCallback)(() => {
+      const handleConfirm = (0, import_react29.useCallback)(() => {
         confirmInstall();
       }, [confirmInstall]);
-      const handleReject = (0, import_react28.useCallback)(() => {
+      const handleReject = (0, import_react29.useCallback)(() => {
         rejectInstall();
       }, [rejectInstall]);
       switch (state.phase) {
         case "resolving":
-          return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
+          return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
             Spinner2,
             {
               label: `Resolving ${state.count} package${state.count !== 1 ? "s" : ""} from PyPI...`
             }
           );
         case "scanning":
-          return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
+          return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
             Spinner2,
             {
               label: `Scanning ${state.count} Python package${state.count !== 1 ? "s" : ""}...`
             }
           );
         case "pass":
-          return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { color: "green", children: [
+          return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { color: "green", children: [
             "\u2713",
             " ",
             state.count,
@@ -41745,8 +42130,8 @@ var init_PipWrapperApp = __esm({
             "all clear"
           ] });
         case "warn":
-          return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Box_default, { flexDirection: "column", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
+          return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Box_default, { flexDirection: "column", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
               ResultsView,
               {
                 result: state.result,
@@ -41754,12 +42139,12 @@ var init_PipWrapperApp = __esm({
                 durationMs: state.result.durationMs
               }
             ),
-            /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "yellow", children: "Warnings detected. Proceeding with install..." })
+            /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Text, { color: "yellow", children: "Warnings detected. Proceeding with install..." })
           ] });
         case "blocked":
           if (state.dgForce) {
-            return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Box_default, { flexDirection: "column", children: [
-              /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
+            return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Box_default, { flexDirection: "column", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
                 ResultsView,
                 {
                   result: state.result,
@@ -41767,11 +42152,11 @@ var init_PipWrapperApp = __esm({
                   durationMs: state.result.durationMs
                 }
               ),
-              /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "yellow", bold: true, children: "--dg-force: Bypassing block. Install at your own risk." })
+              /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Text, { color: "yellow", bold: true, children: "--dg-force: Bypassing block. Install at your own risk." })
             ] });
           }
-          return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Box_default, { flexDirection: "column", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
+          return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Box_default, { flexDirection: "column", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
               ResultsView,
               {
                 result: state.result,
@@ -41779,12 +42164,12 @@ var init_PipWrapperApp = __esm({
                 durationMs: state.result.durationMs
               }
             ),
-            /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { color: "red", bold: true, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { color: "red", bold: true, children: [
               "BLOCKED:",
               " ",
-              /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "red", children: "High-risk packages detected." })
+              /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Text, { color: "red", children: "High-risk packages detected." })
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(
+            /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(
               ConfirmPrompt,
               {
                 message: "Proceed with install anyway?",
@@ -41794,18 +42179,18 @@ var init_PipWrapperApp = __esm({
             )
           ] });
         case "installing":
-          return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Spinner2, { label: "Installing with pip..." });
+          return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Spinner2, { label: "Installing with pip..." });
         case "done":
           return null;
         case "error":
           if (state.proceed) {
-            return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { color: "yellow", children: [
+            return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { color: "yellow", children: [
               "Warning: Scan failed (",
               state.message,
               "). Proceeding with install."
             ] });
           }
-          return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(ErrorView, { error: new Error(state.message) });
+          return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(ErrorView, { error: new Error(state.message) });
         case "passthrough":
           return null;
         case "trial_exhausted": {
@@ -41815,20 +42200,20 @@ var init_PipWrapperApp = __esm({
             hasKey = !!getStoredApiKey2();
           } catch {
           }
-          return /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Box_default, { flexDirection: "column", paddingLeft: 2, children: hasKey ? /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(import_jsx_runtime9.Fragment, { children: [
-            /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "yellow", bold: true, children: "Your API key may be invalid or expired." }),
-            /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { children: [
+          return /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Box_default, { flexDirection: "column", paddingLeft: 2, children: hasKey ? /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_jsx_runtime10.Fragment, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Text, { color: "yellow", bold: true, children: "Your API key may be invalid or expired." }),
+            /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { children: [
               "Run ",
-              /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "cyan", bold: true, children: "dg logout" }),
+              /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Text, { color: "cyan", bold: true, children: "dg logout" }),
               " then ",
-              /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "cyan", bold: true, children: "dg login" }),
+              /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Text, { color: "cyan", bold: true, children: "dg login" }),
               " to re-authenticate."
             ] })
-          ] }) : /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(import_jsx_runtime9.Fragment, { children: [
-            /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "yellow", bold: true, children: "Free trial scans used up." }),
-            /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { children: [
+          ] }) : /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(import_jsx_runtime10.Fragment, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Text, { color: "yellow", bold: true, children: "Free trial scans used up." }),
+            /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { children: [
               "Run ",
-              /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "cyan", bold: true, children: "dg login" }),
+              /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Text, { color: "cyan", bold: true, children: "dg login" }),
               " to create a free account and continue scanning."
             ] })
           ] }) });
@@ -41838,1483 +42223,6 @@ var init_PipWrapperApp = __esm({
   }
 });
 
-// src/ui/hooks/useScan.ts
-function reducer4(_state, action) {
-  switch (action.type) {
-    case "PROJECTS_FOUND":
-      return { phase: "selecting", projects: action.projects };
-    case "RESTART_SELECTION":
-      return { phase: "selecting", projects: action.projects };
-    case "DISCOVERY_COMPLETE":
-      return { phase: "scanning", done: 0, total: action.packages.length, currentBatch: [] };
-    case "DISCOVERY_EMPTY":
-      return { phase: "empty", message: action.message };
-    case "SCAN_PROGRESS":
-      return { phase: "scanning", done: action.done, total: action.total, currentBatch: action.currentBatch };
-    case "SCAN_COMPLETE":
-      return { phase: "results", result: action.result, durationMs: action.durationMs, skippedCount: action.skippedCount, discoveredTotal: action.discoveredTotal };
-    case "ERROR":
-      return { phase: "error", error: action.error };
-    case "TRIAL_EXHAUSTED":
-      return { phase: "trial_exhausted", scansUsed: action.scansUsed, maxScans: action.maxScans };
-  }
-}
-function useScan(config) {
-  const [state, dispatch] = (0, import_react29.useReducer)(reducer4, { phase: "discovering" });
-  const started = (0, import_react29.useRef)(false);
-  const [multiProjects, setMultiProjects] = (0, import_react29.useState)(null);
-  (0, import_react29.useEffect)(() => {
-    if (started.current) return;
-    started.current = true;
-    const projects = discoverProjects(process.cwd());
-    if (projects.length > 1) setMultiProjects(projects);
-    if (projects.length > 1) {
-      dispatch({ type: "PROJECTS_FOUND", projects });
-      return;
-    }
-    try {
-      const discovery = discoverChanges(process.cwd(), config);
-      const packages = discovery.packages;
-      if (packages.length === 0) {
-        dispatch({ type: "DISCOVERY_EMPTY", message: "No package changes detected." });
-        return;
-      }
-      dispatch({ type: "DISCOVERY_COMPLETE", packages, skippedCount: discovery.skipped.length });
-      runNpmScan(packages, discovery.skipped.length, config, dispatch);
-    } catch {
-      if (projects.length === 0) {
-        dispatch({ type: "DISCOVERY_EMPTY", message: "No dependency files found." });
-        return;
-      }
-      dispatch({ type: "DISCOVERY_COMPLETE", packages: [], skippedCount: 0 });
-      scanProjects(projects, config, dispatch);
-    }
-  }, [config]);
-  const scanSelectedProjects = (0, import_react29.useCallback)((projects) => {
-    dispatch({ type: "DISCOVERY_COMPLETE", packages: [], skippedCount: 0 });
-    scanProjects(projects, config, dispatch);
-  }, [config]);
-  const restartSelection = (0, import_react29.useCallback)(() => {
-    if (!multiProjects) return;
-    dispatch({ type: "RESTART_SELECTION", projects: multiProjects });
-  }, [multiProjects]);
-  return {
-    state,
-    scanSelectedProjects,
-    restartSelection: multiProjects ? restartSelection : null
-  };
-}
-async function runNpmScan(packages, skippedCount, config, dispatch) {
-  try {
-    const startMs = Date.now();
-    const result = await callAnalyzeAPI(packages, config, (done, total) => {
-      const batchStart = Math.max(0, done - 15);
-      const currentBatch = packages.slice(batchStart, done).map((p) => p.name);
-      dispatch({ type: "SCAN_PROGRESS", done, total, currentBatch });
-    });
-    dispatch({ type: "SCAN_COMPLETE", result, durationMs: Date.now() - startMs, skippedCount });
-  } catch (error) {
-    if (error instanceof TrialExhaustedError) {
-      dispatch({ type: "TRIAL_EXHAUSTED", scansUsed: error.scansUsed, maxScans: error.maxScans });
-      return;
-    }
-    dispatch({ type: "ERROR", error: error instanceof Error ? error : new Error(String(error)) });
-  }
-}
-async function scanProjects(projects, config, dispatch) {
-  try {
-    const npmProjects = projects.filter((p) => p.ecosystem === "npm");
-    const pypiProjects = projects.filter((p) => p.ecosystem === "pypi");
-    const fullScanConfig = { ...config, scanAll: true };
-    const npmPackages = [];
-    const pypiPackages = [];
-    const seenNpm = /* @__PURE__ */ new Set();
-    const seenPypi = /* @__PURE__ */ new Set();
-    for (const proj of npmProjects) {
-      try {
-        const discovery = discoverChanges(proj.path, fullScanConfig);
-        for (const pkg of discovery.packages) {
-          const key = `${pkg.name}@${pkg.version}`;
-          if (!seenNpm.has(key)) {
-            seenNpm.add(key);
-            npmPackages.push(pkg);
-          }
-        }
-      } catch {
-      }
-    }
-    for (const proj of pypiProjects) {
-      try {
-        const packages = parsePythonDepFile(proj.path, proj.depFile);
-        for (const pkg of packages) {
-          const key = `${pkg.name}@${pkg.version}`;
-          if (!seenPypi.has(key)) {
-            seenPypi.add(key);
-            pypiPackages.push(pkg);
-          }
-        }
-      } catch {
-      }
-    }
-    const discoveredTotal = npmPackages.length + pypiPackages.length;
-    if (!config.apiKey) {
-      const anonLimit = 50;
-      if (npmPackages.length > anonLimit) npmPackages.length = anonLimit;
-      const pypiSlots = Math.max(0, anonLimit - npmPackages.length);
-      if (pypiPackages.length > pypiSlots) pypiPackages.length = pypiSlots;
-    }
-    const totalPackages = npmPackages.length + pypiPackages.length;
-    if (totalPackages === 0) {
-      dispatch({ type: "DISCOVERY_EMPTY", message: "No packages to scan." });
-      return;
-    }
-    const startMs = Date.now();
-    const results = [];
-    let completed = 0;
-    if (npmPackages.length > 0) {
-      const npmResult = await callAnalyzeAPI(npmPackages, config, (done, total) => {
-        completed = done;
-        dispatch({
-          type: "SCAN_PROGRESS",
-          done: completed,
-          total: totalPackages,
-          currentBatch: npmPackages.slice(Math.max(0, done - 15), done).map((p) => p.name)
-        });
-      });
-      completed = npmPackages.length;
-      results.push(npmResult);
-    }
-    if (pypiPackages.length > 0) {
-      const pypiResult = await callPyPIAnalyzeAPI(pypiPackages, config, (done) => {
-        dispatch({
-          type: "SCAN_PROGRESS",
-          done: completed + done,
-          total: totalPackages,
-          currentBatch: pypiPackages.slice(Math.max(0, done - 15), done).map((p) => p.name)
-        });
-      });
-      results.push(pypiResult);
-    }
-    const allPackages = results.flatMap((r) => r.packages);
-    const maxScore = Math.max(0, ...allPackages.map((p) => p.score));
-    const action = maxScore >= 70 ? "block" : maxScore >= 60 ? "warn" : "pass";
-    const safeVersions = {};
-    for (const r of results) Object.assign(safeVersions, r.safeVersions);
-    const merged = {
-      score: maxScore,
-      action,
-      packages: allPackages,
-      safeVersions,
-      durationMs: Date.now() - startMs
-    };
-    dispatch({ type: "SCAN_COMPLETE", result: merged, durationMs: merged.durationMs, skippedCount: 0, discoveredTotal });
-  } catch (error) {
-    if (error instanceof TrialExhaustedError) {
-      dispatch({ type: "TRIAL_EXHAUSTED", scansUsed: error.scansUsed, maxScans: error.maxScans });
-      return;
-    }
-    dispatch({ type: "ERROR", error: error instanceof Error ? error : new Error(String(error)) });
-  }
-}
-var import_react29;
-var init_useScan = __esm({
-  "src/ui/hooks/useScan.ts"() {
-    "use strict";
-    import_react29 = __toESM(require_react());
-    init_lockfile();
-    init_api();
-    init_discover();
-    init_lockfile();
-  }
-});
-
-// src/ui/components/ProgressBar.tsx
-function estimateScanSeconds(packageCount) {
-  return Math.ceil(Math.max(5, packageCount * 0.35 - 10));
-}
-function formatTime(seconds) {
-  if (seconds < 60) return `${seconds}s`;
-  const m = Math.floor(seconds / 60);
-  const s = seconds % 60;
-  return s > 0 ? `${m}m ${s}s` : `${m}m`;
-}
-var import_react30, import_chalk9, import_jsx_runtime10, ProgressBar;
-var init_ProgressBar = __esm({
-  async "src/ui/components/ProgressBar.tsx"() {
-    "use strict";
-    import_react30 = __toESM(require_react());
-    await init_build2();
-    await init_build3();
-    import_chalk9 = __toESM(require_source());
-    import_jsx_runtime10 = __toESM(require_jsx_runtime());
-    ProgressBar = ({
-      value,
-      total,
-      label
-    }) => {
-      const startRef = (0, import_react30.useRef)(Date.now());
-      const [elapsed, setElapsed] = (0, import_react30.useState)(0);
-      (0, import_react30.useEffect)(() => {
-        const timer = setInterval(() => {
-          setElapsed(Math.floor((Date.now() - startRef.current) / 1e3));
-        }, 1e3);
-        return () => clearInterval(timer);
-      }, []);
-      const termWidth = process.stdout.columns || 80;
-      const percent = total > 0 ? Math.round(value / total * 100) : 0;
-      const estimate = estimateScanSeconds(total);
-      const timeInfo = `${formatTime(elapsed)} / ~${formatTime(estimate)}`;
-      const counter = `${value}/${total}  ${percent}%`;
-      const barWidth = Math.max(10, termWidth - counter.length - 8);
-      const fraction = total > 0 ? Math.min(1, value / total) : 0;
-      const filled = Math.round(fraction * barWidth);
-      const empty = barWidth - filled;
-      const filledBar = "\u2501".repeat(filled);
-      const emptyBar = "\u2501".repeat(empty);
-      return /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 2, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { children: [
-          import_chalk9.default.cyan("\u25C6"),
-          " ",
-          import_chalk9.default.bold("Dependency Guardian")
-        ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Text, { children: "" }),
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Box_default, { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Text, { color: "cyan", children: /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(build_default, { type: "dots" }) }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { children: [
-            " Scanning ",
-            total,
-            " packages...  "
-          ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Text, { dimColor: true, children: timeInfo })
-        ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Box_default, { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Text, { children: "  " }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Text, { color: "green", children: filledBar }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Text, { dimColor: true, children: emptyBar }),
-          /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { children: [
-            "  ",
-            counter
-          ] })
-        ] }),
-        label && /* @__PURE__ */ (0, import_jsx_runtime10.jsx)(Box_default, { children: /* @__PURE__ */ (0, import_jsx_runtime10.jsxs)(Text, { dimColor: true, children: [
-          "  ",
-          import_chalk9.default.dim("\u203A"),
-          " ",
-          label
-        ] }) })
-      ] });
-    };
-  }
-});
-
-// src/ui/hooks/useExpandAnimation.ts
-function useExpandAnimation(targetHeight, active, durationMs = 180) {
-  const [visibleLines, setVisibleLines] = (0, import_react31.useState)(0);
-  const timerRef = (0, import_react31.useRef)(null);
-  (0, import_react31.useEffect)(() => {
-    if (timerRef.current) {
-      clearInterval(timerRef.current);
-      timerRef.current = null;
-    }
-    if (!active || targetHeight <= 0) {
-      setVisibleLines(0);
-      return;
-    }
-    const intervalMs = Math.max(16, Math.floor(durationMs / targetHeight));
-    let current = 1;
-    setVisibleLines(1);
-    timerRef.current = setInterval(() => {
-      current++;
-      if (current >= targetHeight) {
-        setVisibleLines(targetHeight);
-        if (timerRef.current) clearInterval(timerRef.current);
-        timerRef.current = null;
-      } else {
-        setVisibleLines(current);
-      }
-    }, intervalMs);
-    return () => {
-      if (timerRef.current) {
-        clearInterval(timerRef.current);
-        timerRef.current = null;
-      }
-    };
-  }, [active, targetHeight, durationMs]);
-  return {
-    visibleLines: active ? visibleLines : 0,
-    isAnimating: active && visibleLines > 0 && visibleLines < targetHeight
-  };
-}
-var import_react31;
-var init_useExpandAnimation = __esm({
-  "src/ui/hooks/useExpandAnimation.ts"() {
-    "use strict";
-    import_react31 = __toESM(require_react());
-  }
-});
-
-// src/ui/hooks/useTerminalSize.ts
-function useTerminalSize() {
-  const { stdout } = use_stdout_default();
-  const [size, setSize] = (0, import_react32.useState)({
-    rows: stdout?.rows ?? process.stdout.rows ?? 24,
-    cols: stdout?.columns ?? process.stdout.columns ?? 80
-  });
-  (0, import_react32.useEffect)(() => {
-    const handle = () => {
-      const rows = process.stdout.rows ?? 24;
-      const cols = process.stdout.columns ?? 80;
-      if (process.stdout.isTTY) {
-        process.stdout.write("\x1B[2J\x1B[H");
-      }
-      setSize({ rows, cols });
-    };
-    process.stdout.setMaxListeners(process.stdout.getMaxListeners() + 1);
-    process.stdout.on("resize", handle);
-    return () => {
-      process.stdout.off("resize", handle);
-      process.stdout.setMaxListeners(Math.max(0, process.stdout.getMaxListeners() - 1));
-    };
-  }, []);
-  return size;
-}
-var import_react32;
-var init_useTerminalSize = __esm({
-  async "src/ui/hooks/useTerminalSize.ts"() {
-    "use strict";
-    import_react32 = __toESM(require_react());
-    await init_build2();
-  }
-});
-
-// src/ui/components/InteractiveResultsView.tsx
-function groupPackages3(packages) {
-  const map = /* @__PURE__ */ new Map();
-  for (const pkg of packages) {
-    const fingerprint = pkg.findings.length === 0 ? `__clean_${pkg.score}` : pkg.findings.map((f) => `${f.id ?? f.category ?? "unknown"}:${f.severity}`).sort().join("|") + `|score:${pkg.score}`;
-    const group = map.get(fingerprint) ?? [];
-    group.push(pkg);
-    map.set(fingerprint, group);
-  }
-  return [...map.entries()].map(([fingerprint, pkgs]) => ({ packages: pkgs, key: fingerprint })).sort((a, b) => b.packages[0].score - a.packages[0].score);
-}
-function actionBadge3(score) {
-  if (score >= 70)
-    return { label: "BLOCK", color: import_chalk10.default.red };
-  if (score >= 60)
-    return { label: "WARN", color: import_chalk10.default.yellow };
-  return { label: "PASS", color: import_chalk10.default.green };
-}
-function truncate3(s, max) {
-  return s.length <= max ? s : s.slice(0, max - 1) + "\u2026";
-}
-function pad3(s, len) {
-  return s + " ".repeat(Math.max(0, len - s.length));
-}
-function findingsSummaryHeight(group) {
-  const rep = group.packages[0];
-  const visibleFindings = rep.findings.filter((f) => f.severity > 1 || f.critical);
-  let h = visibleFindings.length;
-  if (rep.license) h += 1;
-  if (visibleFindings.length === 0 && rep.score > 0) {
-    h += (rep.reasons ?? []).length;
-    h += 1;
-  }
-  if (group.packages.length > 3) h += 1;
-  return h;
-}
-function findingsDetailHeight(group, safeVersions) {
-  const rep = group.packages[0];
-  const visibleFindings = rep.findings.filter((f) => f.severity > 1 || f.critical).sort((a, b) => b.severity - a.severity);
-  let h = 0;
-  if (rep.license) h += 1;
-  if (group.packages.length > 3) h += 1;
-  if (visibleFindings.length === 0 && rep.score > 0) {
-    h += (rep.reasons ?? []).length;
-    h += 1;
-  }
-  const hasEvidence = visibleFindings.some((f) => f.evidence && f.evidence.length > 0);
-  for (const finding of visibleFindings) {
-    h += 1;
-    h += 1;
-    const evidence = finding.evidence ?? [];
-    h += Math.min(evidence.length, EVIDENCE_LIMIT2);
-    if (evidence.length > EVIDENCE_LIMIT2) h += 1;
-  }
-  if (visibleFindings.length > 0 && !hasEvidence) h += 1;
-  if (rep.recommendation) h += 1;
-  if (safeVersions[rep.name]) h += 1;
-  return h;
-}
-function groupRowHeight(group, level, safeVersions) {
-  if (level === null) return 1;
-  if (level === "summary") return 1 + findingsSummaryHeight(group);
-  return 1 + findingsDetailHeight(group, safeVersions);
-}
-function groupNames(group) {
-  if (group.packages.length === 1) return group.packages[0].name;
-  if (group.packages.length <= 3)
-    return group.packages.map((p) => p.name).join(", ");
-  return `${group.packages[0].name} + ${group.packages.length - 1} similar`;
-}
-function affectsLine(group) {
-  const names = group.packages.map((p) => p.name);
-  if (names.length <= 5) return names.join(", ");
-  return names.slice(0, 5).join(", ") + ` + ${names.length - 5} more`;
-}
-function buildDetailLines(group, safeVersion, maxWidth) {
-  const rep = group.packages[0];
-  const visibleFindings = rep.findings.filter((f) => f.severity > 1 || f.critical).sort((a, b) => b.severity - a.severity);
-  const lines = [];
-  const evidenceWidth = Math.max(30, maxWidth - 12);
-  if (group.packages.length > 3) {
-    lines.push(
-      /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { dimColor: true, children: [
-        "Affects: ",
-        affectsLine(group)
-      ] }, "affects")
-    );
-    lines.push(/* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Text, { children: "" }, "affects-gap"));
-  }
-  if (rep.score > 0) {
-    lines.push(
-      /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { dimColor: true, children: [
-        "Score: ",
-        rep.score,
-        "/100"
-      ] }, "score-info")
-    );
-  }
-  if (rep.recommendation) {
-    lines.push(/* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Text, { children: "" }, "rec-gap"));
-    lines.push(
-      /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-        import_chalk10.default.dim("Rec:"),
-        " ",
-        import_chalk10.default.cyan(truncate3(rep.recommendation, maxWidth - 8))
-      ] }, "recommendation")
-    );
-  }
-  if (safeVersion) {
-    lines.push(
-      /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Text, { children: import_chalk10.default.green(`Safe: ${rep.name}@${safeVersion}`) }, "safe")
-    );
-  }
-  return lines;
-}
-function viewReducer(_state, action) {
-  switch (action.type) {
-    case "MOVE":
-      return { ..._state, cursor: action.cursor, viewport: action.viewport };
-    case "EXPAND":
-      return { ..._state, expandedIndex: action.expandedIndex, expandLevel: action.expandLevel, viewport: action.viewport };
-    case "MOVE_EXPAND":
-      return { cursor: action.cursor, expandedIndex: action.expandedIndex, expandLevel: action.expandLevel, viewport: action.viewport };
-  }
-}
-function licenseLine(rep) {
-  const lc = rep.license;
-  if (!lc) return null;
-  const spdx = lc.spdx ?? lc.raw ?? "";
-  const desc = LICENSE_DESCRIPTIONS[lc.riskCategory] ?? "";
-  const lcColor = lc.riskCategory === "permissive" ? import_chalk10.default.green : lc.riskCategory === "no-license" || lc.riskCategory === "unlicensed" || lc.riskCategory === "network-copyleft" ? import_chalk10.default.red : import_chalk10.default.yellow;
-  return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-    T.branch,
-    " ",
-    lcColor(spdx),
-    " ",
-    import_chalk10.default.dim("\u2014"),
-    " ",
-    import_chalk10.default.dim(desc)
-  ] }, "license-info");
-}
-var import_react33, import_chalk10, import_jsx_runtime11, SEVERITY_LABELS2, SEVERITY_COLORS, EVIDENCE_LIMIT2, FIXED_CHROME, DETAIL_PANE_CHROME, InteractiveResultsView, T, LICENSE_DESCRIPTIONS, FindingsSummary;
-var init_InteractiveResultsView = __esm({
-  async "src/ui/components/InteractiveResultsView.tsx"() {
-    "use strict";
-    import_react33 = __toESM(require_react());
-    await init_build2();
-    import_chalk10 = __toESM(require_source());
-    await init_ScoreHeader();
-    init_useExpandAnimation();
-    await init_useTerminalSize();
-    import_jsx_runtime11 = __toESM(require_jsx_runtime());
-    SEVERITY_LABELS2 = {
-      5: "CRIT",
-      4: "HIGH",
-      3: "MED",
-      2: "LOW",
-      1: "INFO"
-    };
-    SEVERITY_COLORS = {
-      5: (s) => import_chalk10.default.red.bold(s),
-      4: (s) => import_chalk10.default.magenta(s),
-      3: (s) => import_chalk10.default.yellow(s),
-      2: (s) => import_chalk10.default.dim(s),
-      1: (s) => import_chalk10.default.gray(s)
-    };
-    EVIDENCE_LIMIT2 = 2;
-    FIXED_CHROME = 21;
-    DETAIL_PANE_CHROME = 20;
-    InteractiveResultsView = ({
-      result,
-      config,
-      durationMs,
-      onExit,
-      onBack,
-      discoveredTotal
-    }) => {
-      const flagged = (0, import_react33.useMemo)(
-        () => result.packages.filter((p) => p.score > 0),
-        [result.packages]
-      );
-      const clean = (0, import_react33.useMemo)(
-        () => result.packages.filter((p) => p.score === 0),
-        [result.packages]
-      );
-      const total = result.packages.length;
-      const [searchQuery, setSearchQuery] = (0, import_react33.useState)("");
-      const allGroups = (0, import_react33.useMemo)(() => groupPackages3(flagged), [flagged]);
-      const allGroupCount = allGroups.length;
-      const groups = (0, import_react33.useMemo)(() => {
-        if (!searchQuery) return allGroups;
-        const q = searchQuery.toLowerCase();
-        return allGroups.filter((g) => g.packages.some((p) => p.name.toLowerCase().includes(q)));
-      }, [allGroups, searchQuery]);
-      const severityCounts = (0, import_react33.useMemo)(() => {
-        const counts = {};
-        for (const pkg of flagged) {
-          const maxSev = pkg.findings.reduce((m, f) => Math.max(m, f.severity), 0);
-          if (maxSev >= 2) counts[maxSev] = (counts[maxSev] ?? 0) + 1;
-        }
-        return counts;
-      }, [flagged]);
-      const [view, dispatchView] = (0, import_react33.useReducer)(viewReducer, {
-        cursor: 0,
-        expandLevel: null,
-        expandedIndex: null,
-        viewport: 0
-      });
-      const viewRef = (0, import_react33.useRef)(view);
-      viewRef.current = view;
-      const [detailPane, setDetailPane] = (0, import_react33.useState)(null);
-      const detailPaneRef = (0, import_react33.useRef)(detailPane);
-      detailPaneRef.current = detailPane;
-      const [showHelp, setShowHelp] = (0, import_react33.useState)(false);
-      const showHelpRef = (0, import_react33.useRef)(showHelp);
-      showHelpRef.current = showHelp;
-      const [searchMode, setSearchMode] = (0, import_react33.useState)(false);
-      const searchModeRef = (0, import_react33.useRef)(searchMode);
-      searchModeRef.current = searchMode;
-      const { rows: termRows, cols: termCols } = useTerminalSize();
-      const availableRows = Math.max(5, termRows - FIXED_CHROME);
-      const innerWidth = Math.max(40, termCols - 6);
-      const detailGroupIdx = detailPane?.groupIndex ?? -1;
-      const detailLines = (0, import_react33.useMemo)(() => {
-        if (detailGroupIdx < 0) return [];
-        const group = groups[detailGroupIdx];
-        if (!group) return [];
-        return buildDetailLines(group, result.safeVersions[group.packages[0].name], innerWidth);
-      }, [detailGroupIdx, groups, result.safeVersions, innerWidth]);
-      const detailContentRows = Math.max(3, termRows - DETAIL_PANE_CHROME);
-      const getLevel = (idx) => {
-        return view.expandedIndex === idx ? view.expandLevel : null;
-      };
-      const expandTargetHeight = (0, import_react33.useMemo)(() => {
-        if (view.expandedIndex === null || view.expandLevel === null) return 0;
-        const group = groups[view.expandedIndex];
-        if (!group) return 0;
-        if (view.expandLevel === "summary") return findingsSummaryHeight(group);
-        return findingsDetailHeight(group, result.safeVersions);
-      }, [view.expandedIndex, view.expandLevel, groups, result.safeVersions]);
-      const { visibleLines: animVisibleLines } = useExpandAnimation(
-        expandTargetHeight,
-        view.expandedIndex !== null
-      );
-      const animatedGroupHeight = (group, level, idx) => {
-        if (level === null) return 1;
-        if (idx === view.expandedIndex) return 1 + animVisibleLines;
-        return groupRowHeight(group, level, result.safeVersions);
-      };
-      const visibleEnd = (0, import_react33.useMemo)(() => {
-        let consumed = 0;
-        let end = view.viewport;
-        while (end < groups.length) {
-          const level = getLevel(end);
-          const h = animatedGroupHeight(groups[end], level, end);
-          if (consumed + h > availableRows) break;
-          consumed += h;
-          end++;
-        }
-        if (end === view.viewport && groups.length > 0) end = view.viewport + 1;
-        return end;
-      }, [view.viewport, groups, view.expandedIndex, view.expandLevel, animVisibleLines, availableRows, result.safeVersions]);
-      const adjustViewport = (cursor, expIdx, expLvl, currentStart) => {
-        if (cursor < currentStart) return cursor;
-        const getLvl = (i) => expIdx === i ? expLvl : null;
-        let consumed = 0;
-        for (let i = currentStart; i <= cursor && i < groups.length; i++) {
-          consumed += groupRowHeight(groups[i], getLvl(i), result.safeVersions);
-        }
-        if (consumed <= availableRows) return currentStart;
-        let newStart = currentStart;
-        while (newStart < cursor) {
-          newStart++;
-          consumed = 0;
-          for (let i = newStart; i <= cursor; i++) {
-            consumed += groupRowHeight(groups[i], getLvl(i), result.safeVersions);
-          }
-          if (consumed <= availableRows) break;
-        }
-        return newStart;
-      };
-      (0, import_react33.useEffect)(() => {
-        if (groups.length === 0) return;
-        const { cursor, expandedIndex, expandLevel, viewport } = viewRef.current;
-        const clamped = Math.min(viewport, Math.max(0, groups.length - 1));
-        const newVp = adjustViewport(cursor, expandedIndex, expandLevel, clamped);
-        dispatchView({ type: "MOVE", cursor, viewport: newVp });
-      }, [availableRows]);
-      (0, import_react33.useEffect)(() => {
-        const dp = detailPaneRef.current;
-        if (dp && detailLines.length > 0) {
-          const maxScroll = Math.max(0, detailLines.length - detailContentRows);
-          if (dp.scroll > maxScroll) {
-            setDetailPane({ groupIndex: dp.groupIndex, scroll: maxScroll });
-          }
-        }
-      }, [detailContentRows, detailLines.length]);
-      use_input_default((input, key) => {
-        if (groups.length === 0) {
-          if (input === "q" || key.return) onExit();
-          return;
-        }
-        if (showHelpRef.current) {
-          if (input === "?" || key.escape) setShowHelp(false);
-          else if (input === "q") onExit();
-          return;
-        }
-        if (input === "?") {
-          setShowHelp(true);
-          return;
-        }
-        if (searchModeRef.current) {
-          if (key.escape) {
-            setSearchMode(false);
-            setSearchQuery("");
-            dispatchView({ type: "MOVE", cursor: 0, viewport: 0 });
-          } else if (key.return) {
-            setSearchMode(false);
-          } else if (key.backspace || key.delete) {
-            setSearchQuery((prev) => prev.slice(0, -1));
-            dispatchView({ type: "MOVE", cursor: 0, viewport: 0 });
-          } else if (input && !key.upArrow && !key.downArrow && /^[\x20-\x7e]+$/.test(input)) {
-            setSearchQuery((prev) => prev + input);
-            dispatchView({ type: "MOVE", cursor: 0, viewport: 0 });
-          }
-          return;
-        }
-        const dp = detailPaneRef.current;
-        if (dp !== null) {
-          const maxScroll = Math.max(0, detailLines.length - detailContentRows);
-          if (key.upArrow || input === "k") {
-            setDetailPane({ groupIndex: dp.groupIndex, scroll: Math.max(0, dp.scroll - 1) });
-          } else if (key.downArrow || input === "j") {
-            setDetailPane({ groupIndex: dp.groupIndex, scroll: Math.min(maxScroll, dp.scroll + 1) });
-          } else if (input === "g") {
-            setDetailPane({ groupIndex: dp.groupIndex, scroll: 0 });
-          } else if (input === "G") {
-            setDetailPane({ groupIndex: dp.groupIndex, scroll: maxScroll });
-          } else if (input === " " || input === "e" || input === "b" || key.escape) {
-            setDetailPane(null);
-          } else if (input === "q") {
-            onExit();
-          }
-          return;
-        }
-        if (groups.length === 0) {
-          if (input === "q") onExit();
-          else if (input === "/") setSearchMode(true);
-          return;
-        }
-        const { cursor, expandLevel: expLvl, expandedIndex: expIdx, viewport: vpStart } = viewRef.current;
-        if (key.upArrow || input === "k") {
-          const next = Math.max(0, cursor - 1);
-          const newVp = adjustViewport(next, expIdx, expLvl, vpStart < next ? vpStart : next);
-          dispatchView({ type: "MOVE", cursor: next, viewport: newVp });
-        } else if (key.downArrow || input === "j") {
-          const next = Math.min(groups.length - 1, cursor + 1);
-          const newVp = adjustViewport(next, expIdx, expLvl, vpStart);
-          dispatchView({ type: "MOVE", cursor: next, viewport: newVp });
-        } else if (input === "g") {
-          const newVp = adjustViewport(0, expIdx, expLvl, 0);
-          dispatchView({ type: "MOVE", cursor: 0, viewport: newVp });
-        } else if (input === "G") {
-          const last = groups.length - 1;
-          const newVp = adjustViewport(last, expIdx, expLvl, vpStart);
-          dispatchView({ type: "MOVE", cursor: last, viewport: newVp });
-        } else if (key.pageDown) {
-          const next = Math.min(groups.length - 1, cursor + availableRows);
-          const newVp = adjustViewport(next, expIdx, expLvl, vpStart);
-          dispatchView({ type: "MOVE", cursor: next, viewport: newVp });
-        } else if (key.pageUp) {
-          const next = Math.max(0, cursor - availableRows);
-          const newVp = adjustViewport(next, expIdx, expLvl, next);
-          dispatchView({ type: "MOVE", cursor: next, viewport: newVp });
-        } else if (key.return) {
-          let newExpIdx;
-          let newExpLvl;
-          if (expIdx === cursor && expLvl !== null) {
-            newExpIdx = null;
-            newExpLvl = null;
-          } else {
-            newExpIdx = cursor;
-            newExpLvl = "summary";
-          }
-          const newVp = adjustViewport(cursor, newExpIdx, newExpLvl, vpStart);
-          dispatchView({ type: "EXPAND", expandedIndex: newExpIdx, expandLevel: newExpLvl, viewport: newVp });
-        } else if (input === " " || input === "e") {
-          setDetailPane({ groupIndex: view.cursor, scroll: 0 });
-        } else if (input === "/") {
-          setSearchMode(true);
-        } else if (input === "b" && onBack) {
-          onBack();
-        } else if (input === "q") {
-          onExit();
-        }
-      });
-      const visibleGroups = groups.slice(view.viewport, visibleEnd);
-      const aboveCount = view.viewport;
-      const belowCount = groups.length - visibleEnd;
-      const lcCol = 16;
-      const nameCol = Math.max(20, innerWidth - 22 - lcCol);
-      const clampedCursor = groups.length > 0 ? Math.min(view.cursor, groups.length - 1) : 0;
-      if (showHelp) {
-        const isDetail = detailPane !== null;
-        return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Box_default, { flexDirection: "column", children: [
-          /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
-            ScoreHeader,
-            {
-              score: result.score,
-              action: result.action,
-              total,
-              flagged: flagged.length,
-              clean: clean.length,
-              severityCounts
-            }
-          ),
-          /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(
-            Box_default,
-            {
-              flexDirection: "column",
-              borderStyle: "round",
-              borderColor: "cyan",
-              paddingLeft: 2,
-              paddingRight: 2,
-              width: "100%",
-              children: [
-                /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { bold: true, children: [
-                  import_chalk10.default.cyan("\u25C6"),
-                  " Keyboard Shortcuts"
-                ] }),
-                /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Text, { children: "" }),
-                /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Text, { bold: true, children: " Navigation" }),
-                /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-                  "   ",
-                  import_chalk10.default.cyan("\u2191 k"),
-                  "     ",
-                  import_chalk10.default.dim("Move up")
-                ] }),
-                /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-                  "   ",
-                  import_chalk10.default.cyan("\u2193 j"),
-                  "     ",
-                  import_chalk10.default.dim("Move down")
-                ] }),
-                /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-                  "   ",
-                  import_chalk10.default.cyan("g"),
-                  "       ",
-                  import_chalk10.default.dim("Jump to top")
-                ] }),
-                /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-                  "   ",
-                  import_chalk10.default.cyan("G"),
-                  "       ",
-                  import_chalk10.default.dim("Jump to bottom")
-                ] }),
-                !isDetail && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-                  "   ",
-                  import_chalk10.default.cyan("PgUp"),
-                  "    ",
-                  import_chalk10.default.dim("Page up")
-                ] }),
-                !isDetail && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-                  "   ",
-                  import_chalk10.default.cyan("PgDn"),
-                  "    ",
-                  import_chalk10.default.dim("Page down")
-                ] }),
-                /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Text, { children: "" }),
-                /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Text, { bold: true, children: " Actions" }),
-                !isDetail && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-                  "   ",
-                  import_chalk10.default.cyan("\u23CE"),
-                  "       ",
-                  import_chalk10.default.dim("Toggle summary")
-                ] }),
-                /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-                  "   ",
-                  import_chalk10.default.cyan("space"),
-                  "   ",
-                  import_chalk10.default.dim(isDetail ? "Back to list" : "Open detail view")
-                ] }),
-                !isDetail && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-                  "   ",
-                  import_chalk10.default.cyan("/"),
-                  "       ",
-                  import_chalk10.default.dim("Search packages")
-                ] }),
-                !isDetail && onBack && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-                  "   ",
-                  import_chalk10.default.cyan("b"),
-                  "       ",
-                  import_chalk10.default.dim("Back to project selector")
-                ] }),
-                /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-                  "   ",
-                  import_chalk10.default.cyan("q"),
-                  "       ",
-                  import_chalk10.default.dim("Quit")
-                ] }),
-                /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Text, { children: "" }),
-                /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { dimColor: true, children: [
-                  " Press ",
-                  import_chalk10.default.bold.cyan("?"),
-                  " or ",
-                  import_chalk10.default.bold.cyan("Esc"),
-                  " to close"
-                ] })
-              ]
-            }
-          )
-        ] });
-      }
-      if (detailPane !== null) {
-        const dpGroup = groups[detailPane.groupIndex];
-        if (!dpGroup) {
-          setDetailPane(null);
-        } else {
-          const dpRep = dpGroup.packages[0];
-          const { color: dpColor } = actionBadge3(dpRep.score);
-          const dpScroll = detailPane.scroll;
-          const dpAbove = dpScroll;
-          const dpBelow = Math.max(0, detailLines.length - dpScroll - detailContentRows);
-          const dpVisible = detailLines.slice(dpScroll, dpScroll + detailContentRows);
-          return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Box_default, { flexDirection: "column", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
-              ScoreHeader,
-              {
-                score: result.score,
-                action: result.action,
-                total,
-                flagged: flagged.length,
-                clean: clean.length,
-                severityCounts
-              }
-            ),
-            /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(
-              Box_default,
-              {
-                flexDirection: "column",
-                borderStyle: "round",
-                borderColor: "gray",
-                paddingLeft: 1,
-                paddingRight: 1,
-                width: "100%",
-                children: [
-                  /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Box_default, { justifyContent: "space-between", children: [
-                    /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { bold: true, children: [
-                      groupNames(dpGroup),
-                      dpRep.license ? import_chalk10.default.dim(" \xB7 ") + (dpRep.license.riskCategory === "permissive" ? import_chalk10.default.green(dpRep.license.spdx ?? dpRep.license.raw ?? "") : dpRep.license.riskCategory === "no-license" || dpRep.license.riskCategory === "network-copyleft" ? import_chalk10.default.red(dpRep.license.spdx ?? dpRep.license.raw ?? "No license") : import_chalk10.default.yellow(dpRep.license.spdx ?? dpRep.license.raw ?? "")) : ""
-                    ] }),
-                    /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Text, { children: dpColor(`score ${dpRep.score}`) })
-                  ] }),
-                  dpAbove > 0 && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { dimColor: true, children: [
-                    import_chalk10.default.cyan(" \u2191"),
-                    " ",
-                    dpAbove,
-                    " more above"
-                  ] }),
-                  /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Box_default, { flexDirection: "column", marginLeft: 2, children: dpVisible }),
-                  dpBelow > 0 && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { dimColor: true, children: [
-                    import_chalk10.default.cyan(" \u2193"),
-                    " ",
-                    dpBelow,
-                    " more below"
-                  ] })
-                ]
-              }
-            ),
-            /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(
-              Box_default,
-              {
-                flexDirection: "column",
-                borderStyle: "round",
-                borderColor: "gray",
-                paddingLeft: 1,
-                paddingRight: 1,
-                width: "100%",
-                children: [
-                  clean.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-                    import_chalk10.default.green("\u2713"),
-                    " ",
-                    import_chalk10.default.green.bold(String(clean.length)),
-                    " ",
-                    import_chalk10.default.dim(`package${clean.length !== 1 ? "s" : ""} passed with score 0`)
-                  ] }),
-                  /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Box_default, { justifyContent: "space-between", children: [
-                    /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { dimColor: true, children: [
-                      (durationMs / 1e3).toFixed(1),
-                      "s"
-                    ] }),
-                    result.trialScansRemaining !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Text, { dimColor: true, children: "Free tier \xB7 dg login for finding details" })
-                  ] })
-                ]
-              }
-            ),
-            /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Text, { dimColor: true, children: import_chalk10.default.dim("\u2500".repeat(Math.min(60, termCols - 4))) }),
-            /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-              " ",
-              import_chalk10.default.bold.cyan("\u2191\u2193"),
-              " ",
-              import_chalk10.default.dim("scroll"),
-              "   ",
-              import_chalk10.default.bold.cyan("space"),
-              " ",
-              import_chalk10.default.dim("back"),
-              "   ",
-              import_chalk10.default.bold.cyan("q"),
-              " ",
-              import_chalk10.default.dim("quit")
-            ] })
-          ] });
-        }
-      }
-      return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Box_default, { flexDirection: "column", children: [
-        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
-          ScoreHeader,
-          {
-            score: result.score,
-            action: result.action,
-            total,
-            flagged: flagged.length,
-            clean: clean.length,
-            severityCounts
-          }
-        ),
-        groups.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(
-          Box_default,
-          {
-            flexDirection: "column",
-            borderStyle: "round",
-            borderColor: "gray",
-            paddingLeft: 1,
-            paddingRight: 1,
-            width: "100%",
-            children: [
-              /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Box_default, { justifyContent: "space-between", children: [
-                /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Text, { bold: true, children: "Flagged Packages" }),
-                /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Text, { dimColor: true, children: searchQuery ? `${groups.length} of ${allGroupCount}` : `${clampedCursor + 1}/${groups.length}` })
-              ] }),
-              aboveCount > 0 && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { dimColor: true, children: [
-                import_chalk10.default.cyan(" \u2191"),
-                " ",
-                aboveCount,
-                " more above"
-              ] }),
-              visibleGroups.map((group, visIdx) => {
-                const globalIdx = view.viewport + visIdx;
-                const isCursor = globalIdx === clampedCursor;
-                const level = getLevel(globalIdx);
-                const rep = group.packages[0];
-                const { label, color } = actionBadge3(rep.score);
-                const names = groupNames(group);
-                const chevron = level !== null ? "\u25BE" : "\u25B8";
-                const scoreStr = String(rep.score);
-                const lcInfo = rep.license;
-                const lcStr = lcInfo ? truncate3(lcInfo.spdx ?? lcInfo.raw ?? "", lcCol - 2) : "";
-                const lcColor = !lcInfo ? import_chalk10.default.dim : lcInfo.riskCategory === "permissive" ? import_chalk10.default.green : lcInfo.riskCategory === "no-license" || lcInfo.riskCategory === "unlicensed" || lcInfo.riskCategory === "network-copyleft" ? import_chalk10.default.red : import_chalk10.default.yellow;
-                return /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Box_default, { flexDirection: "column", children: [
-                  isCursor ? /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-                    import_chalk10.default.cyan("\u258C"),
-                    ` ${chevron}  `,
-                    color(pad3(label, 6)),
-                    import_chalk10.default.bold(pad3(truncate3(names, nameCol - 2), nameCol)),
-                    lcColor(pad3(lcStr, lcCol)),
-                    color(scoreStr.padStart(3))
-                  ] }) : /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-                    `  ${import_chalk10.default.dim(chevron)}  `,
-                    color(pad3(label, 6)),
-                    pad3(truncate3(names, nameCol - 2), nameCol),
-                    lcColor(pad3(lcStr, lcCol)),
-                    color(scoreStr.padStart(3))
-                  ] }),
-                  level === "summary" && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(
-                    FindingsSummary,
-                    {
-                      group,
-                      maxWidth: innerWidth - 8,
-                      maxLines: globalIdx === view.expandedIndex ? animVisibleLines : void 0
-                    }
-                  )
-                ] }, group.key);
-              }),
-              belowCount > 0 && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { dimColor: true, children: [
-                import_chalk10.default.cyan(" \u2193"),
-                " ",
-                belowCount,
-                " more below"
-              ] })
-            ]
-          }
-        ),
-        /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(
-          Box_default,
-          {
-            flexDirection: "column",
-            borderStyle: "round",
-            borderColor: "gray",
-            paddingLeft: 1,
-            paddingRight: 1,
-            width: "100%",
-            children: [
-              clean.length > 0 && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-                import_chalk10.default.green("\u2713"),
-                " ",
-                import_chalk10.default.green.bold(String(clean.length)),
-                " ",
-                import_chalk10.default.dim(`package${clean.length !== 1 ? "s" : ""} passed with score 0`)
-              ] }),
-              discoveredTotal !== void 0 && discoveredTotal > total && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { dimColor: true, children: [
-                "Scanned ",
-                total,
-                " of ",
-                discoveredTotal,
-                " packages ",
-                import_chalk10.default.dim("\u2014 dg login for full scans")
-              ] }),
-              /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Box_default, { justifyContent: "space-between", children: [
-                /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { dimColor: true, children: [
-                  (durationMs / 1e3).toFixed(1),
-                  "s"
-                ] }),
-                result.trialScansRemaining !== void 0 && /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Text, { dimColor: true, children: "Free tier \xB7 dg login for finding details" })
-              ] })
-            ]
-          }
-        ),
-        /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Text, { dimColor: true, children: import_chalk10.default.dim("\u2500".repeat(Math.min(60, termCols - 4))) }),
-        searchMode ? /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-          " ",
-          import_chalk10.default.bold.cyan("/"),
-          " ",
-          searchQuery,
-          import_chalk10.default.cyan("\u2588"),
-          "   ",
-          import_chalk10.default.dim("Esc clear")
-        ] }) : /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-          " ",
-          groups.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_jsx_runtime11.Fragment, { children: [
-            import_chalk10.default.bold.cyan("\u2191\u2193"),
-            " ",
-            import_chalk10.default.dim("navigate"),
-            "   ",
-            import_chalk10.default.bold.cyan("\u23CE"),
-            " ",
-            import_chalk10.default.dim("toggle"),
-            "   ",
-            import_chalk10.default.bold.cyan("space"),
-            " ",
-            import_chalk10.default.dim("detail"),
-            "   ",
-            import_chalk10.default.bold.cyan("/"),
-            " ",
-            import_chalk10.default.dim("search"),
-            "   ",
-            import_chalk10.default.bold.cyan("?"),
-            " ",
-            import_chalk10.default.dim("help"),
-            "   ",
-            onBack && /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_jsx_runtime11.Fragment, { children: [
-              import_chalk10.default.bold.cyan("b"),
-              " ",
-              import_chalk10.default.dim("back"),
-              "   "
-            ] }),
-            import_chalk10.default.bold.cyan("q"),
-            " ",
-            import_chalk10.default.dim("quit")
-          ] }) : /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(import_jsx_runtime11.Fragment, { children: [
-            "Press ",
-            import_chalk10.default.bold.cyan("q"),
-            " or ",
-            import_chalk10.default.bold.cyan("Enter"),
-            " ",
-            import_chalk10.default.dim("to exit")
-          ] })
-        ] })
-      ] });
-    };
-    T = {
-      branch: import_chalk10.default.dim("\u251C\u2500\u2500"),
-      last: import_chalk10.default.dim("\u2514\u2500\u2500"),
-      pipe: import_chalk10.default.dim("\u2502"),
-      blank: " "
-    };
-    LICENSE_DESCRIPTIONS = {
-      "permissive": "Permissive \u2014 free to use, modify, and distribute. Include the copyright notice.",
-      "weak-copyleft": "Weak copyleft \u2014 changes to this library must be shared, but your code stays private.",
-      "strong-copyleft": "Strong copyleft \u2014 your entire project must be open-sourced under the same license.",
-      "network-copyleft": "Network copyleft \u2014 even SaaS/server use requires releasing your source code.",
-      "no-license": "No license found \u2014 legally all rights reserved. Use may require permission from the author.",
-      "unlicensed": "Explicitly unlicensed \u2014 proprietary software. A commercial agreement is required.",
-      "unknown": "Unrecognized license \u2014 have your legal team review before using.",
-      "deferred": "License declared in a file \u2014 check the LICENSE file in the package."
-    };
-    FindingsSummary = ({ group, maxWidth, maxLines }) => {
-      const rep = group.packages[0];
-      const visibleFindings = rep.findings.filter((f) => f.severity > 1 || f.critical).sort((a, b) => b.severity - a.severity);
-      const hasAffects = group.packages.length > 3;
-      const allLines = [];
-      const lcLine = licenseLine(rep);
-      if (lcLine) allLines.push(lcLine);
-      if (visibleFindings.length === 0 && rep.score > 0) {
-        const reasons = rep.reasons ?? [];
-        for (let i = 0; i < reasons.length; i++) {
-          allLines.push(
-            /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { dimColor: true, children: [
-              i < reasons.length - 1 || hasAffects ? T.branch : T.branch,
-              " ",
-              truncate3(reasons[i], maxWidth - 8)
-            ] }, `reason-${i}`)
-          );
-        }
-        allLines.push(
-          /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { dimColor: true, children: [
-            import_chalk10.default.yellow("   \u2192"),
-            " ",
-            import_chalk10.default.yellow("Upgrade to Pro"),
-            " to see finding details ",
-            import_chalk10.default.dim("\u2014 dg login")
-          ] }, "upgrade")
-        );
-      }
-      for (let idx = 0; idx < visibleFindings.length; idx++) {
-        const f = visibleFindings[idx];
-        const isLast = !hasAffects && idx === visibleFindings.length - 1;
-        const connector = isLast ? T.last : T.branch;
-        const sevLabel = SEVERITY_LABELS2[f.severity] ?? "INFO";
-        const sevColor = SEVERITY_COLORS[f.severity] ?? SEVERITY_COLORS[1];
-        allLines.push(
-          /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { children: [
-            connector,
-            " ",
-            sevColor(pad3(sevLabel, 5)),
-            " ",
-            import_chalk10.default.dim(f.id ?? f.category ?? "")
-          ] }, `${f.id ?? f.category}-${idx}`)
-        );
-      }
-      if (hasAffects) {
-        allLines.push(
-          /* @__PURE__ */ (0, import_jsx_runtime11.jsxs)(Text, { dimColor: true, children: [
-            T.last,
-            " ",
-            truncate3(affectsLine(group), maxWidth - 8)
-          ] }, "affects")
-        );
-      }
-      const linesToShow = maxLines !== void 0 ? allLines.slice(0, maxLines) : allLines;
-      return /* @__PURE__ */ (0, import_jsx_runtime11.jsx)(Box_default, { flexDirection: "column", marginLeft: 5, children: linesToShow });
-    };
-  }
-});
-
-// src/ui/components/ProjectSelector.tsx
-var import_react34, import_chalk11, import_jsx_runtime12, ProjectSelector;
-var init_ProjectSelector = __esm({
-  async "src/ui/components/ProjectSelector.tsx"() {
-    "use strict";
-    import_react34 = __toESM(require_react());
-    await init_build2();
-    import_chalk11 = __toESM(require_source());
-    init_sanitize();
-    import_jsx_runtime12 = __toESM(require_jsx_runtime());
-    ProjectSelector = ({ projects, onConfirm, onCancel }) => {
-      const [cursor, setCursor] = (0, import_react34.useState)(0);
-      const [selected, setSelected] = (0, import_react34.useState)(() => new Set(projects.map((_, i) => i)));
-      use_input_default((input, key) => {
-        if (key.upArrow) {
-          setCursor((c) => Math.max(0, c - 1));
-        } else if (key.downArrow) {
-          setCursor((c) => Math.min(projects.length - 1, c + 1));
-        } else if (input === " ") {
-          setSelected((prev) => {
-            const next = new Set(prev);
-            if (next.has(cursor)) next.delete(cursor);
-            else next.add(cursor);
-            return next;
-          });
-        } else if (input === "a") {
-          setSelected((prev) => {
-            if (prev.size === projects.length) return /* @__PURE__ */ new Set();
-            return new Set(projects.map((_, i) => i));
-          });
-        } else if (key.return) {
-          const picked = projects.filter((_, i) => selected.has(i));
-          if (picked.length > 0) onConfirm(picked);
-        } else if (input === "q") {
-          onCancel();
-        }
-      });
-      const ecosystemLabel = (eco) => eco === "npm" ? import_chalk11.default.magenta("npm") : import_chalk11.default.blue("pip");
-      return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(Text, { children: [
-          import_chalk11.default.cyan("\u25C6"),
-          " ",
-          import_chalk11.default.bold("Dependency Guardian")
-        ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Text, { children: "" }),
-        /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(Text, { bold: true, children: [
-          "Found ",
-          projects.length,
-          " project",
-          projects.length !== 1 ? "s" : ""
-        ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Text, { children: "" }),
-        projects.map((proj, i) => {
-          const isCursor = i === cursor;
-          const isSelected = selected.has(i);
-          const prefix = isCursor ? import_chalk11.default.cyan("\u258C") : " ";
-          const check = isSelected ? import_chalk11.default.green("\u25C9") : import_chalk11.default.dim("\u25CB");
-          return /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(Text, { children: [
-            prefix,
-            check,
-            "  ",
-            sanitize(proj.relativePath).padEnd(40),
-            " ",
-            ecosystemLabel(proj.ecosystem).padEnd(5),
-            " ",
-            proj.packageCount,
-            " packages"
-          ] }, i);
-        }),
-        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Text, { children: "" }),
-        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Text, { dimColor: true, children: selected.size === 0 ? import_chalk11.default.yellow("Select at least 1 project to scan") : `${selected.size} of ${projects.length} selected` }),
-        /* @__PURE__ */ (0, import_jsx_runtime12.jsx)(Text, { children: "" }),
-        /* @__PURE__ */ (0, import_jsx_runtime12.jsxs)(Text, { children: [
-          import_chalk11.default.bold.cyan("space"),
-          " ",
-          import_chalk11.default.dim("toggle"),
-          "   ",
-          import_chalk11.default.bold.cyan("a"),
-          " ",
-          import_chalk11.default.dim("all"),
-          "   ",
-          import_chalk11.default.bold.hex("#FFD700")("\u23CE"),
-          " ",
-          import_chalk11.default.bold.hex("#FFD700")("scan"),
-          "   ",
-          import_chalk11.default.bold.cyan("q"),
-          " ",
-          import_chalk11.default.dim("quit")
-        ] })
-      ] });
-    };
-  }
-});
-
-// src/ui/App.tsx
-var App_exports = {};
-__export(App_exports, {
-  App: () => App2
-});
-var import_react35, import_jsx_runtime13, App2;
-var init_App2 = __esm({
-  async "src/ui/App.tsx"() {
-    "use strict";
-    import_react35 = __toESM(require_react());
-    await init_build2();
-    init_useScan();
-    await init_Spinner();
-    await init_ProgressBar();
-    await init_InteractiveResultsView();
-    await init_ErrorView();
-    await init_ProjectSelector();
-    await init_useTerminalSize();
-    import_jsx_runtime13 = __toESM(require_jsx_runtime());
-    App2 = ({ config }) => {
-      const { state, scanSelectedProjects, restartSelection } = useScan(config);
-      const { exit } = use_app_default();
-      useTerminalSize();
-      const prevPhaseRef = (0, import_react35.useRef)(state.phase);
-      const altScreenActiveRef = (0, import_react35.useRef)(false);
-      (0, import_react35.useEffect)(() => {
-        if (!process.stdout.isTTY) return;
-        process.stdout.write("\x1B[?1049h");
-        process.stdout.write("\x1B[2J\x1B[H");
-        process.stdout.write("\x1B[?1003l");
-        process.stdout.write("\x1B[?1000l");
-        altScreenActiveRef.current = true;
-        return () => {
-          if (altScreenActiveRef.current) {
-            process.stdout.write("\x1B[?1049l");
-            altScreenActiveRef.current = false;
-          }
-          process.stdout.write("\x1B[?25h");
-        };
-      }, []);
-      (0, import_react35.useEffect)(() => {
-        if (prevPhaseRef.current !== state.phase && process.stdout.isTTY) {
-          process.stdout.write("\x1B[2J\x1B[H");
-        }
-        prevPhaseRef.current = state.phase;
-      }, [state.phase]);
-      const leaveAltScreen = (0, import_react35.useCallback)(() => {
-        if (altScreenActiveRef.current && process.stdout.isTTY) {
-          process.stdout.write("\x1B[?1049l");
-          altScreenActiveRef.current = false;
-        }
-        process.stdout.write("\x1B[?25h");
-      }, []);
-      const handleResultsExit = (0, import_react35.useCallback)(() => {
-        if (state.phase === "results") {
-          const { result } = state;
-          if (result.action === "block" && config.mode === "block") {
-            process.exitCode = 2;
-          } else if (result.action === "block" || result.action === "warn") {
-            process.exitCode = 1;
-          } else {
-            process.exitCode = 0;
-          }
-        }
-        leaveAltScreen();
-        exit();
-      }, [state, config, exit, leaveAltScreen]);
-      const exitWithMessage = (0, import_react35.useCallback)((message, exitCode) => {
-        process.exitCode = exitCode;
-        leaveAltScreen();
-        process.stderr.write(message);
-        return setTimeout(() => exit(), 0);
-      }, [exit, leaveAltScreen]);
-      (0, import_react35.useEffect)(() => {
-        if (state.phase === "empty") {
-          const timer = exitWithMessage(`${state.message}
-`, 0);
-          return () => clearTimeout(timer);
-        }
-        if (state.phase === "error") {
-          const timer = exitWithMessage(`Error: ${state.error.message}
-`, 3);
-          return () => clearTimeout(timer);
-        }
-        if (state.phase === "trial_exhausted") {
-          let msg = "Free trial scans used up. Run `dg login` to create a free account and continue scanning.\n";
-          try {
-            const { getStoredApiKey: getStoredApiKey2 } = (init_auth(), __toCommonJS(auth_exports));
-            if (getStoredApiKey2()) {
-              msg = "Your API key may be invalid or expired. Run `dg logout` then `dg login` to re-authenticate.\n";
-            }
-          } catch {
-          }
-          const timer = exitWithMessage(msg, 1);
-          return () => clearTimeout(timer);
-        }
-      }, [state, exitWithMessage]);
-      use_input_default((input, key) => {
-        if (state.phase === "discovering" || state.phase === "scanning") {
-          if (input === "q" || key.escape) {
-            process.exitCode = 0;
-            leaveAltScreen();
-            exit();
-          }
-        }
-      });
-      const content = (() => {
-        switch (state.phase) {
-          case "discovering":
-            return /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Spinner2, { label: `Searching for dependencies in ${process.cwd()} ...` });
-          case "selecting":
-            return /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
-              ProjectSelector,
-              {
-                projects: state.projects,
-                onConfirm: scanSelectedProjects,
-                onCancel: () => {
-                  process.exitCode = 0;
-                  leaveAltScreen();
-                  exit();
-                }
-              }
-            );
-          case "scanning":
-            return /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
-              ProgressBar,
-              {
-                value: state.done,
-                total: state.total,
-                label: state.currentBatch.length > 0 ? state.currentBatch[state.currentBatch.length - 1] : void 0
-              }
-            );
-          case "results":
-            return /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(
-              InteractiveResultsView,
-              {
-                result: state.result,
-                config,
-                durationMs: state.durationMs,
-                onExit: handleResultsExit,
-                onBack: restartSelection ?? void 0,
-                discoveredTotal: state.discoveredTotal
-              }
-            );
-          case "empty":
-            return /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Text, { dimColor: true, children: state.message });
-          case "error":
-            return /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(ErrorView, { error: state.error });
-          case "trial_exhausted": {
-            let hasKey = false;
-            try {
-              const { getStoredApiKey: getStoredApiKey2 } = (init_auth(), __toCommonJS(auth_exports));
-              hasKey = !!getStoredApiKey2();
-            } catch {
-            }
-            return /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Box_default, { flexDirection: "column", paddingLeft: 2, children: hasKey ? /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_jsx_runtime13.Fragment, { children: [
-              /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Text, { color: "yellow", bold: true, children: "Your API key may be invalid or expired." }),
-              /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(Text, { children: [
-                "Run ",
-                /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Text, { color: "cyan", bold: true, children: "dg logout" }),
-                " then ",
-                /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Text, { color: "cyan", bold: true, children: "dg login" }),
-                " to re-authenticate."
-              ] })
-            ] }) : /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(import_jsx_runtime13.Fragment, { children: [
-              /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Text, { color: "yellow", bold: true, children: "Free trial scans used up." }),
-              /* @__PURE__ */ (0, import_jsx_runtime13.jsxs)(Text, { children: [
-                "Run ",
-                /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Text, { color: "cyan", bold: true, children: "dg login" }),
-                " to create a free account and continue scanning."
-              ] })
-            ] }) });
-          }
-        }
-      })();
-      return /* @__PURE__ */ (0, import_jsx_runtime13.jsx)(Box_default, { flexDirection: "column", children: content });
-    };
-  }
-});
-
 // src/bin.ts
 init_config();
 init_npm_wrapper();
@@ -43405,33 +42313,33 @@ async function checkForUpdate(currentVersion) {
   return null;
 }
 async function runUpdate(currentVersion) {
-  const chalk10 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
-  process.stderr.write(chalk10.dim("  Checking for updates...\n"));
+  const chalk8 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
+  process.stderr.write(chalk8.dim("  Checking for updates...\n"));
   const latest = await fetchLatestVersion();
   if (!latest) {
-    process.stderr.write(chalk10.red("  Could not reach npm registry.\n"));
+    process.stderr.write(chalk8.red("  Could not reach npm registry.\n"));
     process.exit(1);
   }
   if (!isNewer(latest, currentVersion)) {
     process.stderr.write(
-      chalk10.green(`  Already on latest version (${currentVersion}).
+      chalk8.green(`  Already on latest version (${currentVersion}).
 `)
     );
     return;
   }
-  process.stderr.write(chalk10.dim(`  Installing ${PKG_NAME}@${latest}...
+  process.stderr.write(chalk8.dim(`  Installing ${PKG_NAME}@${latest}...
 `));
   try {
     execFileSync("npm", ["install", "-g", `${PKG_NAME}@${latest}`], { stdio: "inherit" });
     writeCache({ latest, checkedAt: Date.now() });
     process.stderr.write(
-      chalk10.green(`
+      chalk8.green(`
   Updated ${currentVersion} \u2192 ${latest}
 `)
     );
   } catch {
     process.stderr.write(
-      chalk10.red(`
+      chalk8.red(`
   Update failed. Try manually: npm i -g ${PKG_NAME}@${latest}
 `)
     );
@@ -43482,9 +42390,9 @@ async function main() {
   if (rawCommand === "login") {
     if (isInteractive) {
       const { render: render3 } = await init_build2().then(() => build_exports);
-      const React19 = await Promise.resolve().then(() => __toESM(require_react()));
+      const React16 = await Promise.resolve().then(() => __toESM(require_react()));
       const { LoginApp: LoginApp2 } = await init_LoginApp().then(() => LoginApp_exports);
-      const { waitUntilExit } = render3(React19.createElement(LoginApp2));
+      const { waitUntilExit } = render3(React16.createElement(LoginApp2));
       await waitUntilExit();
     } else {
       const { runStaticLogin: runStaticLogin2 } = await Promise.resolve().then(() => (init_static_output(), static_output_exports));
@@ -43492,6 +42400,19 @@ async function main() {
     }
     return;
   }
+  if (rawCommand === "status") {
+    const { getStoredApiKey: getStoredApiKey2 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
+    const chalk8 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
+    const apiKey = getStoredApiKey2();
+    if (apiKey) {
+      process.stderr.write(chalk8.green(`  Authenticated`) + chalk8.dim(` (key: ${apiKey.slice(0, 12)}...)
+`));
+    } else {
+      process.stderr.write(chalk8.yellow(`  Not authenticated.`) + chalk8.dim(` Run \`dg login\` to sign in.
+`));
+    }
+    return;
+  }
   if (rawCommand === "hook") {
     const { handleHookCommand: handleHookCommand2 } = await Promise.resolve().then(() => (init_hook(), hook_exports));
     handleHookCommand2(process.argv.slice(3));
@@ -43502,21 +42423,32 @@ async function main() {
     return;
   }
   if (rawCommand === "logout") {
-    const { clearCredentials: clearCredentials2 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
+    const { getStoredApiKey: getStoredApiKey2, clearCredentials: clearCredentials2 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
+    const chalk8 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
+    const apiKey = getStoredApiKey2();
+    if (apiKey) {
+      try {
+        await fetch("https://api.westbayberry.com/v1/auth/revoke", {
+          method: "POST",
+          headers: { Authorization: `Bearer ${apiKey}` },
+          signal: AbortSignal.timeout(5e3)
+        });
+      } catch {
+      }
+    }
     clearCredentials2();
-    const chalk10 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
-    process.stderr.write(chalk10.green("  Logged out.\n"));
+    process.stderr.write(chalk8.green("  Logged out.\n"));
     return;
   }
-  const KNOWN_COMMANDS = ["scan", "npm", "pip", "wrap", "login", "hook", "update", "logout"];
+  const KNOWN_COMMANDS = ["scan", "npm", "pip", "wrap", "login", "logout", "status", "hook", "update"];
   if (rawCommand && !rawCommand.startsWith("-") && !KNOWN_COMMANDS.includes(rawCommand)) {
-    const chalk10 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
+    const chalk8 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
     const best = closestCommand(rawCommand, KNOWN_COMMANDS);
     const hint = best ? ` Did you mean '${best}'?` : "";
     process.stderr.write(`
-  ${chalk10.bold.red("Error:")} Unknown command '${rawCommand}'.${hint}
+  ${chalk8.bold.red("Error:")} Unknown command '${rawCommand}'.${hint}
 `);
-    process.stderr.write(chalk10.dim(`  Run 'dg --help' for available commands.
+    process.stderr.write(chalk8.dim(`  Run 'dg --help' for available commands.
 
 `));
     process.exit(1);
@@ -43524,54 +42456,50 @@ async function main() {
   const strictFlags = rawCommand !== "npm" && rawCommand !== "pip";
   const config = parseConfig(process.argv, strictFlags);
   const updatePromise = checkForUpdate(CLI_VERSION).catch(() => null);
+  if (rawCommand !== "npm" && rawCommand !== "pip") {
+    const { runStatic: runStatic2 } = await Promise.resolve().then(() => (init_static_output(), static_output_exports));
+    await runStatic2(config);
+    const updateMsg2 = await updatePromise;
+    if (updateMsg2) {
+      const chalk8 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
+      process.stderr.write(chalk8.dim(updateMsg2));
+    }
+    return;
+  }
   if (config.json || !isInteractive) {
     if (rawCommand === "npm") {
       const { runStaticNpm: runStaticNpm2 } = await Promise.resolve().then(() => (init_static_output(), static_output_exports));
       await runStaticNpm2(process.argv.slice(3), config);
-    } else if (rawCommand === "pip") {
+    } else {
       const { runStaticPip: runStaticPip2 } = await Promise.resolve().then(() => (init_static_output(), static_output_exports));
       await runStaticPip2(process.argv.slice(3), config);
-    } else {
-      const { runStatic: runStatic2 } = await Promise.resolve().then(() => (init_static_output(), static_output_exports));
-      await runStatic2(config);
     }
     const updateMsg2 = await updatePromise;
     if (updateMsg2) {
-      const chalk10 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
-      process.stderr.write(chalk10.dim(updateMsg2));
+      const chalk8 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
+      process.stderr.write(chalk8.dim(updateMsg2));
     }
     return;
   }
   const { render: render2 } = await init_build2().then(() => build_exports);
-  const React18 = await Promise.resolve().then(() => __toESM(require_react()));
+  const React15 = await Promise.resolve().then(() => __toESM(require_react()));
   if (rawCommand === "npm") {
     const { NpmWrapperApp: NpmWrapperApp2 } = await init_NpmWrapperApp().then(() => NpmWrapperApp_exports);
     const { waitUntilExit } = render2(
-      React18.createElement(NpmWrapperApp2, { config, npmArgs: process.argv.slice(3) })
-    );
-    await waitUntilExit();
-  } else if (rawCommand === "pip") {
-    const { PipWrapperApp: PipWrapperApp2 } = await init_PipWrapperApp().then(() => PipWrapperApp_exports);
-    const { waitUntilExit } = render2(
-      React18.createElement(PipWrapperApp2, { config, pipArgs: process.argv.slice(3) })
+      React15.createElement(NpmWrapperApp2, { config, npmArgs: process.argv.slice(3) })
     );
     await waitUntilExit();
   } else {
-    if (config.mode === "off") {
-      const chalk10 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
-      process.stderr.write(chalk10.dim("  Dependency Guardian: mode is off \u2014 skipping.\n"));
-      process.exit(0);
-    }
-    const { App: App3 } = await init_App2().then(() => App_exports);
+    const { PipWrapperApp: PipWrapperApp2 } = await init_PipWrapperApp().then(() => PipWrapperApp_exports);
     const { waitUntilExit } = render2(
-      React18.createElement(App3, { config })
+      React15.createElement(PipWrapperApp2, { config, pipArgs: process.argv.slice(3) })
     );
     await waitUntilExit();
   }
   const updateMsg = await updatePromise;
   if (updateMsg) {
-    const chalk10 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
-    process.stderr.write(chalk10.dim(updateMsg));
+    const chalk8 = (await Promise.resolve().then(() => __toESM(require_source()))).default;
+    process.stderr.write(chalk8.dim(updateMsg));
   }
 }
 main().catch((err) => {
@@ -43583,9 +42511,9 @@ main().catch((err) => {
     }, null, 2) + "\n");
   } else {
     try {
-      const chalk10 = require_source();
+      const chalk8 = require_source();
       process.stderr.write(`
-  ${chalk10.bold.red("Error:")} ${err.message}
+  ${chalk8.bold.red("Error:")} ${err.message}
 
 `);
     } catch {