@westbayberry/dg 1.0.51 → 1.0.53

package/dist/index.mjs

@@ -19192,9 +19192,9 @@ function handleContentBlockStart(event, state) {
 function handleContentBlockDelta(event, state, recordOutputs) {
   if (event.type !== "content_block_delta" || !event.delta) return;
   if (typeof event.index === "number" && "partial_json" in event.delta && typeof event.delta.partial_json === "string") {
-    const active = state.activeToolBlocks[event.index];
-    if (active) {
-      active.inputJsonParts.push(event.delta.partial_json);
+    const active2 = state.activeToolBlocks[event.index];
+    if (active2) {
+      active2.inputJsonParts.push(event.delta.partial_json);
     }
   }
   if (recordOutputs && typeof event.delta.text === "string") {
@@ -19203,9 +19203,9 @@ function handleContentBlockDelta(event, state, recordOutputs) {
 }
 function handleContentBlockStop(event, state) {
   if (event.type !== "content_block_stop" || typeof event.index !== "number") return;
-  const active = state.activeToolBlocks[event.index];
-  if (!active) return;
-  const raw = active.inputJsonParts.join("");
+  const active2 = state.activeToolBlocks[event.index];
+  if (!active2) return;
+  const raw = active2.inputJsonParts.join("");
   let parsedInput;
   try {
     parsedInput = raw ? JSON.parse(raw) : {};
@@ -19214,8 +19214,8 @@ function handleContentBlockStop(event, state) {
   }
   state.toolCalls.push({
     type: "tool_use",
-    id: active.id,
-    name: active.name,
+    id: active2.id,
+    name: active2.name,
     input: parsedInput
   });
   delete state.activeToolBlocks[event.index];
@@ -48378,6 +48378,34 @@ var init_update_check = __esm({
   }
 });
 
+// src/alt-screen.ts
+var alt_screen_exports = {};
+__export(alt_screen_exports, {
+  altScreenActive: () => altScreenActive,
+  enterAltScreen: () => enterAltScreen,
+  leaveAltScreen: () => leaveAltScreen
+});
+function enterAltScreen() {
+  if (!process.stdout.isTTY || active) return;
+  process.stdout.write("\x1B[?1049h\x1B[2J\x1B[H");
+  active = true;
+}
+function leaveAltScreen() {
+  if (!active) return;
+  process.stdout.write("\x1B[?1049l\x1B[?25h");
+  active = false;
+}
+function altScreenActive() {
+  return active;
+}
+var active;
+var init_alt_screen = __esm({
+  "src/alt-screen.ts"() {
+    "use strict";
+    active = false;
+  }
+});
+
 // node_modules/react/cjs/react.production.min.js
 var require_react_production_min = __commonJS({
   "node_modules/react/cjs/react.production.min.js"(exports) {
@@ -49718,7 +49746,7 @@ var require_react_development = __commonJS({
           var dispatcher = resolveDispatcher();
           return dispatcher.useReducer(reducer7, initialArg, init3);
         }
-        function useRef9(initialValue) {
+        function useRef10(initialValue) {
           var dispatcher = resolveDispatcher();
           return dispatcher.useRef(initialValue);
         }
@@ -50512,7 +50540,7 @@ var require_react_development = __commonJS({
         exports.useLayoutEffect = useLayoutEffect2;
         exports.useMemo = useMemo5;
         exports.useReducer = useReducer8;
-        exports.useRef = useRef9;
+        exports.useRef = useRef10;
         exports.useState = useState11;
         exports.useSyncExternalStore = useSyncExternalStore;
         exports.useTransition = useTransition;
@@ -83514,6 +83542,7 @@ async function callAnalyzeAPI(packages, config3, onProgress) {
   const results = [];
   let completed = 0;
   const tTotal = Date.now();
+  if (onProgress) onProgress(0, packages.length, []);
   for (let i = 0; i < batches.length; i++) {
     const batch = batches[i];
     const tBatch = Date.now();
@@ -83775,7 +83804,7 @@ var init_api3 = __esm({
 });
 
 // src/scan-core.ts
-async function scanProjectAtPath(cwd2, config3) {
+async function scanProjectAtPath(cwd2, config3, onProgress) {
   const startNs = process.hrtime.bigint();
   const elapsedMs = () => Number((process.hrtime.bigint() - startNs) / 1000000n);
   try {
@@ -83799,13 +83828,26 @@ async function scanProjectAtPath(cwd2, config3) {
       };
     }
     const responses = [];
+    let cumulativeDone = 0;
     if (npmPackages.length > 0) {
-      const npmResp = await callAnalyzeAPI(npmPackages, config3);
+      const npmOnProgress = onProgress ? (done, _total, currentBatch) => {
+        onProgress({
+          done: cumulativeDone + done,
+          total: totalDiscovered,
+          current: currentBatch ?? []
+        });
+      } : void 0;
+      const npmResp = await callAnalyzeAPI(npmPackages, config3, npmOnProgress);
       responses.push(npmResp);
+      cumulativeDone += npmPackages.length;
     }
     if (pyPackages.length > 0) {
-      const pyResp = await callPyPIAnalyzeAPI(pyPackages, config3);
+      const pyOnProgress = onProgress ? (done, _total) => {
+        onProgress({ done: cumulativeDone + done, total: totalDiscovered, current: [] });
+      } : void 0;
+      const pyResp = await callPyPIAnalyzeAPI(pyPackages, config3, pyOnProgress);
       responses.push(pyResp);
+      cumulativeDone += pyPackages.length;
     }
     const allPackages = responses.flatMap((r) => r.packages);
     const maxScore = allPackages.length > 0 ? Math.max(0, ...allPackages.map((p) => p.score)) : 0;
@@ -83882,10 +83924,15 @@ function initialState(dryRun, firstRun) {
     hookError: null,
     scanRan: false,
     scanResult: null,
+    scanProgress: null,
     skipped: /* @__PURE__ */ new Set()
   };
 }
 function reducer(state, action) {
+  if (process.env.DG_DEBUG_WIZARD && action.type !== "scan_progress") {
+    process.stderr.write(`[wizard] action=${action.type} phase=${state.phase}
+`);
+  }
   switch (action.type) {
     // ── First-run guided tour transitions ──────────────────────────────────
     case "welcome_yes":
@@ -83982,12 +84029,15 @@ function reducer(state, action) {
         skipped
       };
     }
+    case "scan_progress":
+      return { ...state, scanProgress: action.progress };
     case "scan_done":
       return {
         ...state,
         phase: state.firstRun ? "result_first_scan" : "show_app_link",
         scanRan: true,
-        scanResult: action.outcome
+        scanResult: action.outcome,
+        scanProgress: null
       };
     case "app_link_acked":
       return { ...state, phase: "done" };
@@ -84101,7 +84151,13 @@ function useInit(opts = {}) {
       const projects = state.projects.length > 0 ? state.projects : [{ path: opts.cwd ?? process.cwd() }];
       const allOutcomes = [];
       for (const proj of projects) {
-        const outcome = await scanFn(proj.path, config3);
+        if (process.env.DG_DEBUG_WIZARD) process.stderr.write(`[wizard] scanning ${proj.path}
+`);
+        const outcome = await scanFn(proj.path, config3, (p) => {
+          dispatch({ type: "scan_progress", progress: p });
+        });
+        if (process.env.DG_DEBUG_WIZARD) process.stderr.write(`[wizard] scan done ${proj.path} status=${outcome.status}
+`);
         allOutcomes.push(outcome);
       }
       const allPackages = allOutcomes.flatMap(
@@ -86834,13 +86890,93 @@ var init_Spinner = __esm({
   }
 });
 
+// src/ui/components/ProgressBar.tsx
+function estimateScanSeconds(packageCount) {
+  return Math.ceil(Math.max(5, packageCount * 0.35 - 10));
+}
+function formatTime(seconds) {
+  if (seconds < 60) return `${seconds}s`;
+  const m = Math.floor(seconds / 60);
+  const s = seconds % 60;
+  return s > 0 ? `${m}m ${s}s` : `${m}m`;
+}
+var import_react25, import_chalk4, import_jsx_runtime2, ProgressBar;
+var init_ProgressBar = __esm({
+  async "src/ui/components/ProgressBar.tsx"() {
+    "use strict";
+    import_react25 = __toESM(require_react());
+    await init_build2();
+    await init_build3();
+    import_chalk4 = __toESM(require_source());
+    await init_useTerminalSize();
+    import_jsx_runtime2 = __toESM(require_jsx_runtime());
+    ProgressBar = ({
+      value,
+      total,
+      label
+    }) => {
+      const startRef = (0, import_react25.useRef)(Date.now());
+      const [elapsed, setElapsed] = (0, import_react25.useState)(0);
+      (0, import_react25.useEffect)(() => {
+        const timer = setInterval(() => {
+          setElapsed(Math.floor((Date.now() - startRef.current) / 1e3));
+        }, 1e3);
+        return () => clearInterval(timer);
+      }, []);
+      const { cols: termWidth } = useTerminalSize();
+      const percent = total > 0 ? Math.round(value / total * 100) : 0;
+      const estimate = estimateScanSeconds(total);
+      const timeInfo = `${formatTime(elapsed)} / ~${formatTime(estimate)}`;
+      const counter = `${value}/${total}  ${percent}%`;
+      const barWidth = Math.max(10, termWidth - counter.length - 8);
+      const fraction = total > 0 ? Math.min(1, value / total) : 0;
+      const filled = Math.round(fraction * barWidth);
+      const empty = barWidth - filled;
+      const filledBar = "\u2501".repeat(filled);
+      const emptyBar = "\u2501".repeat(empty);
+      return /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 2, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Text, { children: [
+          import_chalk4.default.cyan("\u25C6"),
+          " ",
+          import_chalk4.default.bold("Dependency Guardian")
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { children: "" }),
+        /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Box_default, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { color: "cyan", children: /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(build_default, { type: "dots" }) }),
+          /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Text, { children: [
+            " Scanning ",
+            total,
+            " packages...  "
+          ] }),
+          /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { dimColor: true, children: timeInfo })
+        ] }),
+        /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Box_default, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { children: "  " }),
+          /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { color: "green", children: filledBar }),
+          /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { dimColor: true, children: emptyBar }),
+          /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Text, { children: [
+            "  ",
+            counter
+          ] })
+        ] }),
+        label && /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Box_default, { children: /* @__PURE__ */ (0, import_jsx_runtime2.jsxs)(Text, { dimColor: true, children: [
+          "  ",
+          import_chalk4.default.dim("\u203A"),
+          " ",
+          label
+        ] }) })
+      ] });
+    };
+  }
+});
+
 // src/ui/components/Mascot.tsx
-var import_jsx_runtime2, FACES, Mascot;
+var import_jsx_runtime3, FACES, Mascot;
 var init_Mascot = __esm({
   async "src/ui/components/Mascot.tsx"() {
     "use strict";
     await init_build2();
-    import_jsx_runtime2 = __toESM(require_jsx_runtime());
+    import_jsx_runtime3 = __toESM(require_jsx_runtime());
     FACES = {
       idle: { left: "o", right: "o", mouth: "^" },
       alert: { left: "O", right: "O", mouth: "^" },
@@ -86864,7 +87000,7 @@ var init_Mascot = __esm({
         " ( (  )   (  ) )",
         "(__(__)___(__)__)"
       ];
-      return /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Box_default, { flexDirection: "column", children: lines.map((line, i) => /* @__PURE__ */ (0, import_jsx_runtime2.jsx)(Text, { color, children: line }, i)) });
+      return /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Box_default, { flexDirection: "column", children: lines.map((line, i) => /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { color, children: line }, i)) });
     };
   }
 });
@@ -86933,13 +87069,13 @@ var init_wizard_demo_data = __esm({
 });
 
 // src/ui/components/ScanResultCard.tsx
-var import_jsx_runtime3, ScanResultCard;
+var import_jsx_runtime4, ScanResultCard;
 var init_ScanResultCard = __esm({
   async "src/ui/components/ScanResultCard.tsx"() {
     "use strict";
     await init_build2();
     init_wizard_demo_data();
-    import_jsx_runtime3 = __toESM(require_jsx_runtime());
+    import_jsx_runtime4 = __toESM(require_jsx_runtime());
     ScanResultCard = ({ outcome }) => {
       let verdict;
       let verdictColor;
@@ -86979,63 +87115,63 @@ var init_ScanResultCard = __esm({
           extraNote = `Scan didn't finish: ${o.message ?? "unknown error"}`;
         }
       }
-      return /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Box_default, { flexDirection: "column", children: verdict !== "EMPTY" && packages.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(import_jsx_runtime3.Fragment, { children: [
-        packages.length === 1 ? /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { bold: true, children: packages[0].name }),
-          /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { dimColor: true, children: [
+      return /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Box_default, { flexDirection: "column", children: verdict !== "EMPTY" && packages.length > 0 ? /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(import_jsx_runtime4.Fragment, { children: [
+        packages.length === 1 ? /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(Text, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { bold: true, children: packages[0].name }),
+          /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(Text, { dimColor: true, children: [
             "@",
             packages[0].version
           ] })
-        ] }) : /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { dimColor: true, children: [
+        ] }) : /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(Text, { dimColor: true, children: [
           packages.length,
           " packages"
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { children: " " }),
-        /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { color: verdictColor, bold: true, children: verdict }),
-          /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { dimColor: true, children: "  \xB7  " }),
-          /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { bold: true, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { children: " " }),
+        /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(Text, { children: [
+          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { color: verdictColor, bold: true, children: verdict }),
+          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { dimColor: true, children: "  \xB7  " }),
+          /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(Text, { bold: true, children: [
             score,
             "/100"
           ] })
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { children: " " }),
-        packages.length === 1 ? packages[0].findings.slice(0, 3).map((f, i) => /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { dimColor: true, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { children: " " }),
+        packages.length === 1 ? packages[0].findings.slice(0, 3).map((f, i) => /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(Text, { dimColor: true, children: [
           "  \u2022 ",
           friendlyCategory(f.category),
           f.title ? ` \u2014 ${f.title}` : ""
-        ] }, `f-${i}`)) : packages.slice(0, 3).map((pkg) => /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { dimColor: true, children: [
+        ] }, `f-${i}`)) : packages.slice(0, 3).map((pkg) => /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(Text, { dimColor: true, children: [
           "  \u2022 ",
-          /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { bold: true, children: pkg.name }),
+          /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { bold: true, children: pkg.name }),
           " ",
           pkg.score,
           "/100"
         ] }, pkg.name)),
-        packages.length > 3 ? /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { dimColor: true, children: "  + " + (packages.length - 3) + " more" }) : null
-      ] }) : verdict !== "EMPTY" ? /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { color: verdictColor, bold: true, children: verdict }),
-        /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { dimColor: true, children: "  \xB7  " }),
-        /* @__PURE__ */ (0, import_jsx_runtime3.jsxs)(Text, { bold: true, children: [
+        packages.length > 3 ? /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { dimColor: true, children: "  + " + (packages.length - 3) + " more" }) : null
+      ] }) : verdict !== "EMPTY" ? /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(Text, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { color: verdictColor, bold: true, children: verdict }),
+        /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { dimColor: true, children: "  \xB7  " }),
+        /* @__PURE__ */ (0, import_jsx_runtime4.jsxs)(Text, { bold: true, children: [
           score,
           "/100"
         ] })
-      ] }) : /* @__PURE__ */ (0, import_jsx_runtime3.jsx)(Text, { dimColor: true, children: extraNote }) });
+      ] }) : /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Text, { dimColor: true, children: extraNote }) });
     };
   }
 });
 
 // src/ui/components/DemoScanAnimation.tsx
-var import_react25, import_jsx_runtime4, DemoScanAnimation;
+var import_react26, import_jsx_runtime5, DemoScanAnimation;
 var init_DemoScanAnimation = __esm({
   async "src/ui/components/DemoScanAnimation.tsx"() {
     "use strict";
-    import_react25 = __toESM(require_react());
+    import_react26 = __toESM(require_react());
     await init_Spinner();
     init_wizard_demo_data();
-    import_jsx_runtime4 = __toESM(require_jsx_runtime());
+    import_jsx_runtime5 = __toESM(require_jsx_runtime());
     DemoScanAnimation = ({ onComplete }) => {
-      const [labelIdx, setLabelIdx] = (0, import_react25.useState)(0);
-      (0, import_react25.useEffect)(() => {
+      const [labelIdx, setLabelIdx] = (0, import_react26.useState)(0);
+      (0, import_react26.useEffect)(() => {
         const tickMs = Math.floor(DEMO_SCAN_TOTAL_MS / DEMO_SCAN_LABELS.length);
         const interval = setInterval(() => {
           setLabelIdx((i) => {
@@ -87049,7 +87185,7 @@ var init_DemoScanAnimation = __esm({
         }, tickMs);
         return () => clearInterval(interval);
       }, [onComplete]);
-      return /* @__PURE__ */ (0, import_jsx_runtime4.jsx)(Spinner2, { label: DEMO_SCAN_LABELS[labelIdx] });
+      return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Spinner2, { label: DEMO_SCAN_LABELS[labelIdx] });
     };
   }
 });
@@ -87082,16 +87218,16 @@ function phaseToStep(phase) {
       return 0;
   }
 }
-var import_jsx_runtime5, TOTAL_STEPS, ProgressDots;
+var import_jsx_runtime6, TOTAL_STEPS, ProgressDots;
 var init_ProgressDots = __esm({
   async "src/ui/components/ProgressDots.tsx"() {
     "use strict";
     await init_build2();
-    import_jsx_runtime5 = __toESM(require_jsx_runtime());
+    import_jsx_runtime6 = __toESM(require_jsx_runtime());
     TOTAL_STEPS = 6;
-    ProgressDots = ({ current }) => /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Text, { children: Array.from({ length: TOTAL_STEPS }).map((_, i) => {
+    ProgressDots = ({ current }) => /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: Array.from({ length: TOTAL_STEPS }).map((_, i) => {
       const filled = i < current;
-      return /* @__PURE__ */ (0, import_jsx_runtime5.jsx)(Text, { color: filled ? "green" : void 0, dimColor: !filled, children: filled ? "\u25CF " : "\u25CB " }, i);
+      return /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { color: filled ? "green" : void 0, dimColor: !filled, children: filled ? "\u25CF " : "\u25CB " }, i);
     }) });
   }
 });
@@ -87105,22 +87241,23 @@ import { basename as basename3 } from "node:path";
 function defaultYesNoCursor(phase) {
   return phase === "confirm_wrap" ? 1 : 0;
 }
-var import_react26, import_jsx_runtime6, YES_NO_PHASES, InitApp;
+var import_react27, import_jsx_runtime7, YES_NO_PHASES, InitApp;
 var init_InitApp = __esm({
   async "src/ui/InitApp.tsx"() {
     "use strict";
-    import_react26 = __toESM(require_react());
+    import_react27 = __toESM(require_react());
     await init_build2();
     init_useInit();
     await init_useTerminalSize();
     await init_Spinner();
+    await init_ProgressBar();
     await init_Mascot();
     await init_ScanResultCard();
     await init_DemoScanAnimation();
     await init_ProgressDots();
     init_wizard_demo_data();
     init_sanitize();
-    import_jsx_runtime6 = __toESM(require_jsx_runtime());
+    import_jsx_runtime7 = __toESM(require_jsx_runtime());
     YES_NO_PHASES = /* @__PURE__ */ new Set([
       "greet",
       "confirm_hook",
@@ -87137,21 +87274,29 @@ var init_InitApp = __esm({
       const { state, canGoBack: canGoBack2, runDetect, runInstallHook, runVerifyHook, runScan, dispatch } = useInit({ dryRun, firstRun });
       const { exit } = use_app_default();
       useTerminalSize();
-      const [yesNoCursor, setYesNoCursor] = (0, import_react26.useState)(defaultYesNoCursor(state.phase));
-      (0, import_react26.useEffect)(() => {
+      const [yesNoCursor, setYesNoCursor] = (0, import_react27.useState)(defaultYesNoCursor(state.phase));
+      const prevPhaseRef = (0, import_react27.useRef)(state.phase);
+      const [, forceTick] = (0, import_react27.useState)(0);
+      (0, import_react27.useEffect)(() => {
+        if (prevPhaseRef.current === "run_scan" && state.phase === "result_first_scan") {
+          Promise.resolve().then(() => forceTick((n) => n + 1));
+        }
+        prevPhaseRef.current = state.phase;
+      }, [state.phase]);
+      (0, import_react27.useEffect)(() => {
         if (YES_NO_PHASES.has(state.phase)) {
           setYesNoCursor(defaultYesNoCursor(state.phase));
         }
       }, [state.phase]);
-      (0, import_react26.useEffect)(() => {
+      (0, import_react27.useEffect)(() => {
         if (state.phase === "detect") {
           runDetect();
         }
       }, [state.phase, runDetect]);
-      (0, import_react26.useEffect)(() => {
+      (0, import_react27.useEffect)(() => {
         if (state.scanRan && onScanRan) onScanRan();
       }, [state.scanRan, onScanRan]);
-      (0, import_react26.useEffect)(() => {
+      (0, import_react27.useEffect)(() => {
         if (state.phase === "install_hook") {
           runInstallHook();
         }
@@ -87301,22 +87446,22 @@ var init_InitApp = __esm({
             return;
         }
       });
-      const yesNoRow = (yesLabel = "Yes", noLabel = "No") => /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Box_default, { children: [
-        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { inverse: yesNoCursor === 0, bold: yesNoCursor === 0, color: "green", children: ` ${yesLabel} ` }),
-        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "   " }),
-        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { inverse: yesNoCursor === 1, bold: yesNoCursor === 1, color: "red", children: ` ${noLabel} ` })
+      const yesNoRow = (yesLabel = "Yes", noLabel = "No") => /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Box_default, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { inverse: yesNoCursor === 0, bold: yesNoCursor === 0, color: "green", children: ` ${yesLabel} ` }),
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "   " }),
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { inverse: yesNoCursor === 1, bold: yesNoCursor === 1, color: "red", children: ` ${noLabel} ` })
       ] });
-      const okButton = /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Box_default, { children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { inverse: true, bold: true, color: "green", children: ` OK ` }) });
+      const okButton = /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Box_default, { children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { inverse: true, bold: true, color: "green", children: ` OK ` }) });
       const isYesNo = YES_NO_PHASES.has(state.phase);
-      const stepHint = /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Box_default, { marginTop: 1, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { dimColor: true, children: [
+      const stepHint = /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Box_default, { marginTop: 1, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { dimColor: true, children: [
         isYesNo ? "\u2190 \u2192 choose \xB7 Enter confirm \xB7 " : "",
         canGoBack2 ? "[b] back \xB7 " : "",
         "[s] skip \xB7 [q] quit"
       ] }) });
       const currentStep = phaseToStep(state.phase);
-      const Scene = (props) => /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Box_default, { flexDirection: "row", paddingTop: 1, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Box_default, { flexDirection: "column", marginRight: 1, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Mascot, { mood: props.mood, color: props.color }) }),
-        /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(
+      const Scene = (props) => /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Box_default, { flexDirection: "row", paddingTop: 1, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Box_default, { flexDirection: "column", marginRight: 1, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Mascot, { mood: props.mood, color: props.color }) }),
+        /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(
           Box_default,
           {
             flexDirection: "column",
@@ -87326,8 +87471,8 @@ var init_InitApp = __esm({
             paddingY: 0,
             flexGrow: 1,
             children: [
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(ProgressDots, { current: currentStep }),
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(ProgressDots, { current: currentStep }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
               props.children
             ]
           }
@@ -87349,60 +87494,60 @@ var init_InitApp = __esm({
       })();
       switch (state.phase) {
         case "greet":
-          return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Scene, { mood: "happy", color: "green", children: [
-            returning ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+          return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Scene, { mood: "happy", color: "green", children: [
+            returning ? /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
               "Hey, welcome back \u{1F44B} I'm ",
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "green", children: "Dependency Guardian" }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "green", children: "Dependency Guardian" }),
               "."
-            ] }) : /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+            ] }) : /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
               "Hey \u{1F44B} I'm ",
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "green", children: "Dependency Guardian" }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "green", children: "Dependency Guardian" }),
               "."
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "I watch the code that gets added to your project" }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "so bad stuff doesn't sneak in." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            returning ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "Want a refresher? Takes about a minute." }) : /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "Looks like it's your first time here." }),
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "Want me to show you around? Takes about a minute." })
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "I watch the code that gets added to your project" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "so bad stuff doesn't sneak in." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            returning ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "Want a refresher? Takes about a minute." }) : /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_jsx_runtime7.Fragment, { children: [
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "Looks like it's your first time here." }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "Want me to show you around? Takes about a minute." })
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
             yesNoRow("Yes", "I know what I'm doing"),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Box_default, { marginTop: 1, children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { dimColor: true, children: "\u2190 \u2192 choose \xB7 Enter confirm \xB7 [q] quit anytime" }) })
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Box_default, { marginTop: 1, children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { dimColor: true, children: "\u2190 \u2192 choose \xB7 Enter confirm \xB7 [q] quit anytime" }) })
           ] });
         case "value_prop":
-          return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Scene, { mood: "worried", color: "yellow", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+          return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Scene, { mood: "worried", color: "yellow", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
               "In ",
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, children: "2025-2026" }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, children: "2025-2026" }),
               ", over ",
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, children: "50,000" }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, children: "50,000" }),
               " packages on"
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, children: "npm" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, children: "npm" }),
               " and ",
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, children: "PyPI" }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, children: "PyPI" }),
               " have been caught doing bad"
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "things \u2014 stealing passwords, mining crypto," }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "installing backdoors." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { dimColor: true, children: "I scan both today, with 20+ more languages planned." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "Want to see me catch one in the act?" }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "things \u2014 stealing passwords, mining crypto," }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "installing backdoors." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { dimColor: true, children: "I scan both today, with 20+ more languages planned." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "Want to see me catch one in the act?" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
             okButton,
             stepHint
           ] });
         case "demo_scanning":
-          return /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Scene, { mood: "scanning", color: "cyan", children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(DemoScanAnimation, { onComplete: () => dispatch({ type: "demo_complete" }) }) });
+          return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Scene, { mood: "scanning", color: "cyan", children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(DemoScanAnimation, { onComplete: () => dispatch({ type: "demo_complete" }) }) });
         case "demo_result":
-          return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Scene, { mood: "alarmed", color: "red", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "red", children: "Got one." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(
+          return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Scene, { mood: "alarmed", color: "red", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "red", children: "Got one." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(
               ScanResultCard,
               {
                 outcome: {
@@ -87413,200 +87558,205 @@ var init_InitApp = __esm({
                 }
               }
             ),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { color: "yellow", bold: true, children: "This one's fake. The next one won't be." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { color: "yellow", bold: true, children: "This one's fake. The next one won't be." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
             okButton,
             stepHint
           ] });
         case "scenario":
-          return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Scene, { mood: "explaining", color: "cyan", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+          return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Scene, { mood: "explaining", color: "cyan", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
               "Here's the situation in ",
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "cyan", children: projectName }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "cyan", children: projectName }),
               "."
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: 'npm packages can ship "install scripts" \u2014 code that' }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: 'npm packages can ship "install scripts" \u2014 code that' }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
               "runs the moment you ",
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, children: "npm install" }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, children: "npm install" }),
               " them."
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
               "To catch that, use ",
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "cyan", children: "dg npm install" }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "cyan", children: "dg npm install" }),
               " or"
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "cyan", children: "dg pip install" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "cyan", children: "dg pip install" }),
               " instead of the normal command."
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "I scan the package first, before any code runs" }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "on your machine." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "I can also add a safety net to git so nothing" }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "slips through at commit time." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "I scan the package first, before any code runs" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "on your machine." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "I can also add a safety net to git so nothing" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "slips through at commit time." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
             okButton,
             stepHint
           ] });
         case "detect":
           if (!state.firstRun) {
-            return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "green", children: "Dependency Guardian" }),
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { dimColor: true, children: "Looking around..." })
+            return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "green", children: "Dependency Guardian" }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { dimColor: true, children: "Looking around..." })
             ] });
           }
-          return /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Scene, { mood: "scanning", color: "cyan", children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Spinner2, { label: "Looking around..." }) });
+          return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Scene, { mood: "scanning", color: "cyan", children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Spinner2, { label: "Looking around..." }) });
         case "confirm_hook":
-          if (!state.hookInfo) return /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "..." });
+          if (!state.hookInfo) return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "..." });
           if (state.hookInfo.alreadyInstalled) {
-            return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Scene, { mood: "happy", color: "green", children: [
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { color: "green", children: "Looks like you already did this step." }),
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "The pre-commit hook is already installed in" }),
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
-                /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "cyan", children: hookTargetFile }),
+            return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Scene, { mood: "happy", color: "green", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { color: "green", children: "Looks like you already did this step." }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "The pre-commit hook is already installed in" }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
+                /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "cyan", children: hookTargetFile }),
                 "."
               ] }),
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "Every commit that adds a package gets scanned." }),
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "Every commit that adds a package gets scanned." }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
               okButton,
               stepHint
             ] });
           }
-          return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Scene, { mood: "curious", color: "green", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "Git can run a safety check before each commit." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "I'd add my scan to that check \u2014 one line of code." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "After that, every commit that adds a package" }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "gets scanned first. If I find malware, the" }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "commit stops before your code ships anywhere." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "Want me to set it up?" }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
+          return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Scene, { mood: "curious", color: "green", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "Git can run a safety check before each commit." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "I'd add my scan to that check \u2014 one line of code." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "After that, every commit that adds a package" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "gets scanned first. If I find malware, the" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "commit stops before your code ships anywhere." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "Want me to set it up?" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
             yesNoRow("Yes", "No"),
             stepHint
           ] });
         case "install_hook":
-          return /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Scene, { mood: "scanning", color: "cyan", children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Spinner2, { label: "Adding the hook..." }) });
+          return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Scene, { mood: "scanning", color: "cyan", children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Spinner2, { label: "Adding the hook..." }) });
         case "verify_hook":
-          return /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Scene, { mood: "scanning", color: "cyan", children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Spinner2, { label: "Testing it..." }) });
+          return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Scene, { mood: "scanning", color: "cyan", children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Spinner2, { label: "Testing it..." }) });
         case "confirm_wrap":
-          return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Scene, { mood: state.hookError ? "alert" : "happy", color: state.hookError ? "yellow" : "green", children: [
-            state.hookVerifyMs !== null ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { color: "green", children: [
+          return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Scene, { mood: state.hookError ? "alert" : "happy", color: state.hookError ? "yellow" : "green", children: [
+            state.hookVerifyMs !== null ? /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { color: "green", children: [
               "\u2713 Hook works. ",
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { bold: true, children: [
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { bold: true, children: [
                 state.hookVerifyMs,
                 "ms"
               ] }),
               "."
             ] }) : null,
-            state.hookError ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { color: "yellow", children: [
+            state.hookError ? /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { color: "yellow", children: [
               "\u26A0 ",
               state.hookError
             ] }) : null,
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { dimColor: true, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { dimColor: true, children: [
               "I can also catch packages at ",
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, children: "npm install" }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, children: "npm install" }),
               " time, before"
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { dimColor: true, children: "they hit your package.json. Adds one line to your shell config." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "Want it?" }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { dimColor: true, children: "they hit your package.json. Adds one line to your shell config." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "Want it?" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
             yesNoRow(),
             stepHint
           ] });
         case "confirm_scan":
-          return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Scene, { mood: "happy", color: "green", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+          return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Scene, { mood: "happy", color: "green", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
               "Can I scan ",
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "cyan", children: projectName }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "cyan", children: projectName }),
               " now?"
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "I'll check what's already installed and show" }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "you what I see." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "I'll check what's already installed and show" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "you what I see." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
             yesNoRow("Scan", "Skip"),
             stepHint
           ] });
-        case "run_scan":
-          return /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Scene, { mood: "scanning", color: "cyan", children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Spinner2, { label: "Looking..." }) });
+        case "run_scan": {
+          const p = state.scanProgress;
+          if (p && p.total > 0) {
+            return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(ProgressBar, { value: p.done, total: p.total });
+          }
+          return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Scene, { mood: "scanning", color: "cyan", children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Spinner2, { label: "Scanning..." }) });
+        }
         case "result_first_scan": {
           const r = state.scanResult;
           const okScan = r?.status === "ok" && r.result;
           const empty = r?.status === "no_packages";
-          return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Scene, { mood: resultMood, color: resultMood === "alarmed" ? "red" : resultMood === "alert" ? "yellow" : "green", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, children: "Done." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            okScan ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+          return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Scene, { mood: resultMood, color: resultMood === "alarmed" ? "red" : resultMood === "alert" ? "yellow" : "green", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, children: "Done." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            okScan ? /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
               "I scanned ",
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "cyan", children: projectName }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "cyan", children: projectName }),
               "."
-            ] }) : empty ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+            ] }) : empty ? /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
               "I didn't find any packages to scan in ",
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "cyan", children: projectName }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "cyan", children: projectName }),
               "."
-            ] }) : /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+            ] }) : /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
               "I tried to scan ",
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "cyan", children: projectName }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "cyan", children: projectName }),
               " but ran into a snag."
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            state.scanResult ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(ScanResultCard, { outcome: { kind: "real", outcome: state.scanResult } }) : null,
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            okScan && resultMood === "happy" ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { color: "green", children: "You're already in good shape." }) : null,
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            state.scanResult ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(ScanResultCard, { outcome: { kind: "real", outcome: state.scanResult } }) : null,
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            okScan && resultMood === "happy" ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { color: "green", children: "You're already in good shape." }) : null,
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
             okButton,
             stepHint
           ] });
         }
         case "what_happens_next":
-          return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Scene, { mood: "explaining", color: "cyan", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, children: "What happens from here." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "You commit normally. If I find nothing, you" }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "won't even see me \u2014 the commit just goes through." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "If I find something bad, you'll see a card like" }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "the demo I showed you. Read it. If it's a real" }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "threat, investigate." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+          return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Scene, { mood: "explaining", color: "cyan", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, children: "What happens from here." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "You commit normally. If I find nothing, you" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "won't even see me \u2014 the commit just goes through." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "If I find something bad, you'll see a card like" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "the demo I showed you. Read it. If it's a real" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "threat, investigate." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
               "If it's a false alarm, just add ",
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "cyan", children: "--no-verify" }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "cyan", children: "--no-verify" }),
               ":"
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
               "  ",
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "cyan", children: 'git commit -m "your message" --no-verify' })
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "cyan", children: 'git commit -m "your message" --no-verify' })
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "I won't be offended." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "I won't be offended." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
             okButton,
             stepHint
           ] });
         case "pitch_app":
-          return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Scene, { mood: "idle", color: "green", children: [
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, children: "One last thing." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "I'm watching your laptop. For your team," }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "there's a GitHub App that watches every pull" }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "request the same way. Optional \u2014 install it" }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "whenever:" }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+          return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Scene, { mood: "idle", color: "green", children: [
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, children: "One last thing." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "I'm watching your laptop. For your team," }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "there's a GitHub App that watches every pull" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "request the same way. Optional \u2014 install it" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "whenever:" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
               "  ",
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "cyan", children: "https://github.com/apps/dependency-guardian" })
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "cyan", children: "https://github.com/apps/dependency-guardian" })
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
             okButton,
             stepHint
           ] });
@@ -87619,7 +87769,7 @@ var init_InitApp = __esm({
               const verdict = r.action === "block" ? "BLOCKED" : r.action === "warn" ? "WARNING" : "PASSED";
               const color = r.action === "block" ? "red" : r.action === "warn" ? "yellow" : "green";
               scanLine.push(
-                /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { color, children: [
+                /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { color, children: [
                   "\u2713 Scanned ",
                   scan.result.scannedCount,
                   " package",
@@ -87634,136 +87784,136 @@ var init_InitApp = __esm({
                 ] }, "scan-summary")
               );
             } else if (scan.status === "no_packages") {
-              scanLine.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { dimColor: true, children: [
+              scanLine.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { dimColor: true, children: [
                 "\u2713 Scan ran \u2014 nothing to check yet (",
                 scan.result?.durationMs ?? 0,
                 "ms)"
               ] }, "scan-empty"));
             } else if (scan.status === "trial_exhausted") {
-              scanLine.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { color: "yellow", children: "\u26A0 Free trial scans used up \u2014 `dg login` to continue" }, "scan-trial"));
+              scanLine.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { color: "yellow", children: "\u26A0 Free trial scans used up \u2014 `dg login` to continue" }, "scan-trial"));
             } else if (scan.status === "error") {
-              scanLine.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { color: "yellow", children: [
+              scanLine.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { color: "yellow", children: [
                 "\u26A0 Scan didn't finish: ",
                 scan.message
               ] }, "scan-err"));
             }
-            scanLine.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }, "sp"));
+            scanLine.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }, "sp"));
           }
-          return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "green", children: "Server-side coverage (optional)" }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
+          return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "green", children: "Server-side coverage (optional)" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
             scanLine,
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { dimColor: true, children: "The CLI protects you on this laptop. Install the GitHub App" }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { dimColor: true, children: "too for server-side scanning on every PR." }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { color: "cyan", children: "https://github.com/apps/dependency-guardian/installations/new" }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { dimColor: true, children: "Press Enter to continue." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { dimColor: true, children: "The CLI protects you on this laptop. Install the GitHub App" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { dimColor: true, children: "too for server-side scanning on every PR." }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { color: "cyan", children: "https://github.com/apps/dependency-guardian/installations/new" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { dimColor: true, children: "Press Enter to continue." }),
             stepHint
           ] });
         }
         case "done": {
           const lines = [];
           if (state.firstRun && state.skipped.has("scenario") && state.engaged) {
-            return /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Scene, { mood: "wink", color: "cyan", children: [
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "No worries." }),
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
-              returning ? /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+            return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Scene, { mood: "wink", color: "cyan", children: [
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "No worries." }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
+              returning ? /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
                 "Catch you later. ",
-                /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "cyan", children: "dg kitty" }),
+                /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "cyan", children: "dg kitty" }),
                 " any time."
-              ] }) : /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(import_jsx_runtime6.Fragment, { children: [
-                /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: "Running your command now. If you change your" }),
-                /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+              ] }) : /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(import_jsx_runtime7.Fragment, { children: [
+                /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "Running your command now. If you change your" }),
+                /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
                   "mind later, ",
-                  /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "cyan", children: "dg kitty" }),
+                  /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "cyan", children: "dg kitty" }),
                   " brings me back."
                 ] })
               ] }),
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
               okButton
             ] });
           }
-          lines.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "green", children: "You're set." }, "header"));
-          lines.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }, "sp1"));
+          lines.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "green", children: "You're set." }, "header"));
+          lines.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }, "sp1"));
           if (state.hookInstalled && !state.skipped.has("install_hook")) {
             lines.push(
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
                 "  ",
-                /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { color: "green", children: "\u2713" }),
+                /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { color: "green", children: "\u2713" }),
                 " I'm running on every commit"
               ] }, "hook")
             );
           } else {
-            lines.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { dimColor: true, children: "  \u25CB Hook (skipped)" }, "hook"));
+            lines.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { dimColor: true, children: "  \u25CB Hook (skipped)" }, "hook"));
           }
           if (state.scanRan && state.scanResult) {
             const scan = state.scanResult;
             if (scan.status === "ok" && scan.result) {
               const r = scan.result.result;
-              const tail = r.action === "block" ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { color: "red", bold: true, children: "found something to block" }) : r.action === "warn" ? /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { color: "yellow", bold: true, children: "flagged a few things" }) : /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { color: "green", children: "all clean" });
+              const tail = r.action === "block" ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { color: "red", bold: true, children: "found something to block" }) : r.action === "warn" ? /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { color: "yellow", bold: true, children: "flagged a few things" }) : /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { color: "green", children: "all clean" });
               lines.push(
-                /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+                /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
                   "  ",
-                  /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { color: "green", children: "\u2713" }),
+                  /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { color: "green", children: "\u2713" }),
                   " Scanned ",
-                  /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, children: scan.result.scannedCount }),
+                  /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, children: scan.result.scannedCount }),
                   " packages \u2014 ",
                   tail
                 ] }, "scan")
               );
             } else if (scan.status === "no_packages") {
-              lines.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { dimColor: true, children: "  \u25CB Nothing to scan yet" }, "scan"));
+              lines.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { dimColor: true, children: "  \u25CB Nothing to scan yet" }, "scan"));
             } else {
-              lines.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { color: "yellow", children: [
+              lines.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { color: "yellow", children: [
                 "  \u26A0 ",
                 scan.message ?? "scan didn't finish"
               ] }, "scan"));
             }
           } else if (state.skipped.has("run_scan")) {
-            lines.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { dimColor: true, children: "  \u25CB First scan (skipped)" }, "scan"));
+            lines.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { dimColor: true, children: "  \u25CB First scan (skipped)" }, "scan"));
           }
           lines.push(
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
               "  ",
-              /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { color: "green", children: "\u2713" }),
+              /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { color: "green", children: "\u2713" }),
               " You know how to bypass me if I'm wrong"
             ] }, "bypass")
           );
-          lines.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }, "sp2"));
-          lines.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+          lines.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }, "sp2"));
+          lines.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
             "Forget anything? ",
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "cyan", children: "dg kitty" }),
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "cyan", children: "dg kitty" }),
             " brings me back."
           ] }, "kitty"));
-          lines.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+          lines.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
             "Full command list: ",
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "cyan", children: "dg help" })
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "cyan", children: "dg help" })
           ] }, "help"));
-          lines.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { children: [
+          lines.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
             "Curious about more? ",
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "cyan", children: "https://westbayberry.com/docs" })
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "cyan", children: "https://westbayberry.com/docs" })
           ] }, "docs"));
           if (state.hookError) {
-            lines.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }, "sp3"));
-            lines.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsxs)(Text, { color: "yellow", children: [
+            lines.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }, "sp3"));
+            lines.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { color: "yellow", children: [
               "Note: ",
               state.hookError
             ] }, "err"));
           }
-          lines.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }, "sp4"));
-          lines.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { bold: true, color: "green", children: "Build fast, don't get hacked." }, "signoff"));
+          lines.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }, "sp4"));
+          lines.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { bold: true, color: "green", children: "Build fast, don't get hacked." }, "signoff"));
           if (state.dryRun) {
-            lines.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { color: "yellow", children: "(dry run \u2014 no files were modified)" }, "dry"));
+            lines.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { color: "yellow", children: "(dry run \u2014 no files were modified)" }, "dry"));
           }
-          lines.push(/* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { children: " " }, "sp5"));
+          lines.push(/* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }, "sp5"));
           lines.push(
-            /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Box_default, { children: /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Text, { inverse: true, bold: true, color: "green", children: ` OK ` }) }, "ok-btn")
+            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Box_default, { children: /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { inverse: true, bold: true, color: "green", children: ` OK ` }) }, "ok-btn")
           );
           if (!state.firstRun) {
-            return /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Box_default, { flexDirection: "column", paddingLeft: 1, children: lines });
+            return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Box_default, { flexDirection: "column", paddingLeft: 1, children: lines });
           }
-          return /* @__PURE__ */ (0, import_jsx_runtime6.jsx)(Scene, { mood: state.hookError ? "worried" : "proud", color: state.hookError ? "yellow" : "green", children: lines });
+          return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Scene, { mood: state.hookError ? "worried" : "proud", color: state.hookError ? "yellow" : "green", children: lines });
         }
       }
     };
@@ -87786,19 +87936,25 @@ async function maybeOfferFirstRunWizard(opts) {
     const { render: render2 } = await init_build2().then(() => build_exports);
     const React21 = await Promise.resolve().then(() => __toESM(require_react()));
     const { InitApp: InitApp2 } = await init_InitApp().then(() => InitApp_exports);
-    const { waitUntilExit } = render2(
-      React21.createElement(InitApp2, {
-        firstRun: true,
-        onReachedDone: () => {
-          reachedDone = true;
-        },
-        onScanRan: () => {
-          scanRanInWizard = true;
-        }
-      })
-    );
-    mounted = true;
-    await waitUntilExit();
+    const { enterAltScreen: enterAltScreen2, leaveAltScreen: leaveAltScreen2 } = await Promise.resolve().then(() => (init_alt_screen(), alt_screen_exports));
+    enterAltScreen2();
+    try {
+      const { waitUntilExit } = render2(
+        React21.createElement(InitApp2, {
+          firstRun: true,
+          onReachedDone: () => {
+            reachedDone = true;
+          },
+          onScanRan: () => {
+            scanRanInWizard = true;
+          }
+        })
+      );
+      mounted = true;
+      await waitUntilExit();
+    } finally {
+      leaveAltScreen2();
+    }
   } catch {
     return;
   }
@@ -87850,11 +88006,11 @@ function reducer2(state, action) {
   }
 }
 function useLogin() {
-  const [state, dispatch] = (0, import_react27.useReducer)(reducer2, { phase: "creating" });
-  const started = (0, import_react27.useRef)(false);
-  const sessionRef = (0, import_react27.useRef)(null);
-  const cancelledRef = (0, import_react27.useRef)(false);
-  (0, import_react27.useEffect)(() => {
+  const [state, dispatch] = (0, import_react28.useReducer)(reducer2, { phase: "creating" });
+  const started = (0, import_react28.useRef)(false);
+  const sessionRef = (0, import_react28.useRef)(null);
+  const cancelledRef = (0, import_react28.useRef)(false);
+  (0, import_react28.useEffect)(() => {
     if (started.current) return;
     started.current = true;
     (async () => {
@@ -87898,7 +88054,7 @@ function useLogin() {
       cancelledRef.current = true;
     };
   }, []);
-  const openAndPoll = (0, import_react27.useCallback)(() => {
+  const openAndPoll = (0, import_react28.useCallback)(() => {
     const session = sessionRef.current;
     if (!session) return;
     dispatch({ type: "BROWSER_OPENED" });
@@ -87934,11 +88090,11 @@ function useLogin() {
   }, []);
   return { state, openAndPoll };
 }
-var import_react27, POLL_INTERVAL_MS, MAX_POLL_ATTEMPTS;
+var import_react28, POLL_INTERVAL_MS, MAX_POLL_ATTEMPTS;
 var init_useLogin = __esm({
   "src/ui/hooks/useLogin.ts"() {
     "use strict";
-    import_react27 = __toESM(require_react());
+    import_react28 = __toESM(require_react());
     init_auth();
     POLL_INTERVAL_MS = 2e3;
     MAX_POLL_ATTEMPTS = 150;
@@ -87950,19 +88106,19 @@ var LoginApp_exports = {};
 __export(LoginApp_exports, {
   LoginApp: () => LoginApp
 });
-var import_react28, import_jsx_runtime7, LoginApp;
+var import_react29, import_jsx_runtime8, LoginApp;
 var init_LoginApp = __esm({
   async "src/ui/LoginApp.tsx"() {
     "use strict";
-    import_react28 = __toESM(require_react());
+    import_react29 = __toESM(require_react());
     await init_build2();
     init_useLogin();
     await init_Spinner();
-    import_jsx_runtime7 = __toESM(require_jsx_runtime());
+    import_jsx_runtime8 = __toESM(require_jsx_runtime());
     LoginApp = () => {
       const { state, openAndPoll } = useLogin();
       const { exit } = use_app_default();
-      (0, import_react28.useEffect)(() => {
+      (0, import_react29.useEffect)(() => {
         if (state.phase === "success") {
           process.exitCode = 0;
           const timer = setTimeout(() => exit(), 0);
@@ -87986,60 +88142,60 @@ var init_LoginApp = __esm({
       });
       switch (state.phase) {
         case "creating":
-          return /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Spinner2, { label: "Creating login session..." });
+          return /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Spinner2, { label: "Creating login session..." });
         case "already_logged_in":
-          return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { color: "yellow", children: "Already authenticated." }),
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { dimColor: true, children: [
+          return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { color: "yellow", children: "Already authenticated." }),
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { dimColor: true, children: [
               "Run ",
               "`dg logout`",
               " first to re-authenticate."
             ] })
           ] });
         case "ready":
-          return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "Authenticate your account at:" }),
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { color: "cyan", children: state.verifyUrl }),
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { dimColor: true, children: "Press ENTER to open in the browser..." })
+          return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { children: "Authenticate your account at:" }),
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { color: "cyan", children: state.verifyUrl }),
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { dimColor: true, children: "Press ENTER to open in the browser..." })
           ] });
         case "waiting":
-          return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: "Authenticate your account at:" }),
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { color: "cyan", children: state.verifyUrl }),
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Spinner2, { label: "Waiting for authorization..." })
+          return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { children: "Authenticate your account at:" }),
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { color: "cyan", children: state.verifyUrl }),
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Spinner2, { label: "Waiting for authorization..." })
           ] });
         case "success":
-          return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { color: "green", bold: true, children: [
+          return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { color: "green", bold: true, children: [
               "Logged in as ",
               state.email
             ] }),
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { dimColor: true, children: "Credentials saved." }),
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { children: " " }),
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { children: [
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { dimColor: true, children: "Credentials saved." }),
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { children: " " }),
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { children: [
               "Run ",
               "`dg scan`",
               " to scan your dependencies."
             ] })
           ] });
         case "expired":
-          return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { color: "yellow", children: "Session expired." }),
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Text, { dimColor: true, children: [
+          return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { color: "yellow", children: "Session expired." }),
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { dimColor: true, children: [
               "Run ",
               "`dg login`",
               " to try again."
             ] })
           ] });
         case "error":
-          return /* @__PURE__ */ (0, import_jsx_runtime7.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { color: "red", bold: true, children: "Error: " }),
-            /* @__PURE__ */ (0, import_jsx_runtime7.jsx)(Text, { color: "red", children: state.message })
+          return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { color: "red", bold: true, children: "Error: " }),
+            /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { color: "red", children: state.message })
           ] });
       }
     };
@@ -88302,14 +88458,14 @@ function reducer3(state, action) {
       return { ...state, error: action.error };
   }
 }
-var import_react29, import_chalk4, import_jsx_runtime8, VISIBLE_ROWS, FileSavePrompt;
+var import_react30, import_chalk5, import_jsx_runtime9, VISIBLE_ROWS, FileSavePrompt;
 var init_FileSavePrompt = __esm({
   async "src/ui/components/FileSavePrompt.tsx"() {
     "use strict";
-    import_react29 = __toESM(require_react());
+    import_react30 = __toESM(require_react());
     await init_build2();
-    import_chalk4 = __toESM(require_source());
-    import_jsx_runtime8 = __toESM(require_jsx_runtime());
+    import_chalk5 = __toESM(require_source());
+    import_jsx_runtime9 = __toESM(require_jsx_runtime());
     VISIBLE_ROWS = 15;
     FileSavePrompt = ({
       defaultName,
@@ -88321,8 +88477,8 @@ var init_FileSavePrompt = __esm({
       onSaved,
       onCancel
     }) => {
-      const initialEntries = (0, import_react29.useMemo)(() => listDirectory(initialDir), [initialDir]);
-      const [state, dispatch] = (0, import_react29.useReducer)(reducer3, {
+      const initialEntries = (0, import_react30.useMemo)(() => listDirectory(initialDir), [initialDir]);
+      const [state, dispatch] = (0, import_react30.useReducer)(reducer3, {
         filename: defaultName,
         cursorPos: defaultName.length,
         directory: initialDir,
@@ -88334,7 +88490,7 @@ var init_FileSavePrompt = __esm({
         confirmOverwrite: false,
         error: null
       });
-      const filteredEntries = (0, import_react29.useMemo)(() => {
+      const filteredEntries = (0, import_react30.useMemo)(() => {
         const dirs = state.entries.filter((e) => e.isDirectory);
         if (!state.filterText) return dirs;
         const q = state.filterText.toLowerCase();
@@ -88427,86 +88583,86 @@ var init_FileSavePrompt = __esm({
           dispatch({ type: "FILTER", text: state.filterText + input });
         }
       });
-      const actionColor2 = scanAction === "block" ? import_chalk4.default.red : scanAction === "warn" ? import_chalk4.default.yellow : import_chalk4.default.green;
-      const filenameDisplay = state.filename.slice(0, state.cursorPos) + (state.focus === "filename" ? import_chalk4.default.inverse(state.filename[state.cursorPos] || " ") : "") + state.filename.slice(state.cursorPos + 1);
+      const actionColor2 = scanAction === "block" ? import_chalk5.default.red : scanAction === "warn" ? import_chalk5.default.yellow : import_chalk5.default.green;
+      const filenameDisplay = state.filename.slice(0, state.cursorPos) + (state.focus === "filename" ? import_chalk5.default.inverse(state.filename[state.cursorPos] || " ") : "") + state.filename.slice(state.cursorPos + 1);
       const shortDir = state.directory.replace(process.env.HOME || "", "~");
-      return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { children: [
-          import_chalk4.default.cyan("\u25C6"),
+      return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 1, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { children: [
+          import_chalk5.default.cyan("\u25C6"),
           " ",
-          import_chalk4.default.bold("Save Scan Results")
+          import_chalk5.default.bold("Save Scan Results")
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { children: [
+        /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { children: [
           "Score: ",
-          import_chalk4.default.bold(String(score)),
+          import_chalk5.default.bold(String(score)),
           "  ",
           actionColor2(scanAction.toUpperCase()),
           "  ",
-          import_chalk4.default.dim("\u2502"),
+          import_chalk5.default.dim("\u2502"),
           "  ",
           packageCount,
           " packages scanned"
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { children: "" }),
-        /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { children: [
-          state.focus === "filename" ? import_chalk4.default.cyan("\u258C") : " ",
-          import_chalk4.default.bold("File:"),
+        /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { children: "" }),
+        /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { children: [
+          state.focus === "filename" ? import_chalk5.default.cyan("\u258C") : " ",
+          import_chalk5.default.bold("File:"),
           " ",
           filenameDisplay,
-          import_chalk4.default.dim(".json")
+          import_chalk5.default.dim(".json")
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { children: import_chalk4.default.dim(`  \u2500\u2500\u2500 ${shortDir} \u2500\u2500\u2500 [${state.browserCursor + 1}/${filteredEntries.length}]`) }),
+        /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { children: import_chalk5.default.dim(`  \u2500\u2500\u2500 ${shortDir} \u2500\u2500\u2500 [${state.browserCursor + 1}/${filteredEntries.length}]`) }),
         visibleEntries.map((entry, i) => {
           const realIdx = state.browserViewport + i;
           const isCursor = state.focus === "browser" && realIdx === state.browserCursor;
-          const prefix = isCursor ? import_chalk4.default.cyan("\u258C") : " ";
+          const prefix = isCursor ? import_chalk5.default.cyan("\u258C") : " ";
           const icon = entry.isDirectory ? "\u{1F4C1} " : "  ";
-          const name = entry.isDirectory ? import_chalk4.default.bold(entry.name + "/") : entry.name;
-          return /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { children: [
+          const name = entry.isDirectory ? import_chalk5.default.bold(entry.name + "/") : entry.name;
+          return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { children: [
             prefix,
             icon,
             name
           ] }, `${entry.name}-${i}`);
         }),
-        filteredEntries.length > VISIBLE_ROWS && /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { dimColor: true, children: [
+        filteredEntries.length > VISIBLE_ROWS && /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { dimColor: true, children: [
           "  ",
-          import_chalk4.default.dim(`\u2191\u2193 ${filteredEntries.length - VISIBLE_ROWS} more`)
+          import_chalk5.default.dim(`\u2191\u2193 ${filteredEntries.length - VISIBLE_ROWS} more`)
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime8.jsx)(Text, { children: "" }),
-        state.filterText && /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { dimColor: true, children: [
+        /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { children: "" }),
+        state.filterText && /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { dimColor: true, children: [
           '  filter: "',
           state.filterText,
           '"  (',
           filteredEntries.length,
           " matches)"
         ] }),
-        state.confirmOverwrite && /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { color: "yellow", children: [
+        state.confirmOverwrite && /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { color: "yellow", children: [
           "  ",
-          import_chalk4.default.yellow("\u26A0"),
+          import_chalk5.default.yellow("\u26A0"),
           " ",
           ensureJsonExtension(state.filename),
           " exists ",
-          import_chalk4.default.dim("\u2014"),
+          import_chalk5.default.dim("\u2014"),
           " Enter again to overwrite"
         ] }),
-        state.error && /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { color: "red", children: [
+        state.error && /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { color: "red", children: [
           "  ",
-          import_chalk4.default.red("\u2717"),
+          import_chalk5.default.red("\u2717"),
           " ",
           state.error
         ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime8.jsxs)(Text, { children: [
-          import_chalk4.default.bold.hex("#FFD700")("\u23CE"),
+        /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { children: [
+          import_chalk5.default.bold.hex("#FFD700")("\u23CE"),
           " ",
-          import_chalk4.default.bold.hex("#FFD700")("save"),
+          import_chalk5.default.bold.hex("#FFD700")("save"),
           "   ",
-          import_chalk4.default.bold.cyan("\u2191\u2193"),
+          import_chalk5.default.bold.cyan("\u2191\u2193"),
           " ",
-          import_chalk4.default.dim("browse"),
+          import_chalk5.default.dim("browse"),
           "   ",
-          import_chalk4.default.bold.cyan("esc"),
+          import_chalk5.default.bold.cyan("esc"),
           " ",
-          import_chalk4.default.dim("cancel")
+          import_chalk5.default.dim("cancel")
         ] })
       ] });
     };
@@ -88528,12 +88684,12 @@ function writeJsonFile(filepath, json) {
   const resolved = resolvePath(filepath);
   try {
     writeFileSync5(resolved, json + "\n");
-    process.stderr.write(import_chalk5.default.green(`  \u2713 Saved to ${resolved}
+    process.stderr.write(import_chalk6.default.green(`  \u2713 Saved to ${resolved}
 
 `));
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    process.stderr.write(import_chalk5.default.red(`  Error saving file: ${msg}
+    process.stderr.write(import_chalk6.default.red(`  Error saving file: ${msg}
 
 `));
   }
@@ -88565,14 +88721,14 @@ async function handleJsonOutput(result, config3) {
         json,
         onSaved: (filepath) => {
           inkInstance.unmount();
-          process.stderr.write(import_chalk5.default.green(`  \u2713 Saved to ${filepath}
+          process.stderr.write(import_chalk6.default.green(`  \u2713 Saved to ${filepath}
 
 `));
           resolve2();
         },
         onCancel: () => {
           inkInstance.unmount();
-          process.stderr.write(import_chalk5.default.dim("  Cancelled.\n\n"));
+          process.stderr.write(import_chalk6.default.dim("  Cancelled.\n\n"));
           resolve2();
         }
       })
@@ -88583,7 +88739,7 @@ async function handleJsonOutput(result, config3) {
 function printTrialBanner(result) {
   if (result.trialScansRemaining === void 0) return;
   process.stderr.write(
-    import_chalk5.default.dim(`  Free tier \xB7 Run \`dg login\` for higher scan limits.
+    import_chalk6.default.dim(`  Free tier \xB7 Run \`dg login\` for higher scan limits.
 `)
   );
 }
@@ -88605,13 +88761,13 @@ function handleTrialExhausted2(error2, jsonMode = false) {
       }, null, 2) + "\n");
     } else {
       if (hasKey) {
-        process.stderr.write(import_chalk5.default.yellow(`
+        process.stderr.write(import_chalk6.default.yellow(`
   ${message}
 
 `));
       } else {
         process.stderr.write(
-          import_chalk5.default.yellow("\n  Monthly scan limit reached (1,000 scans/month on free tier).\n") + import_chalk5.default.white("  Run `dg login` for higher limits, or upgrade at westbayberry.com/pricing\n\n")
+          import_chalk6.default.yellow("\n  Monthly scan limit reached (1,000 scans/month on free tier).\n") + import_chalk6.default.white("  Run `dg login` for higher limits, or upgrade at westbayberry.com/pricing\n\n")
         );
       }
     }
@@ -88621,9 +88777,9 @@ function handleTrialExhausted2(error2, jsonMode = false) {
   return false;
 }
 function actionColor(action) {
-  if (action === "block") return import_chalk5.default.red;
-  if (action === "warn") return import_chalk5.default.yellow;
-  return import_chalk5.default.green;
+  if (action === "block") return import_chalk6.default.red;
+  if (action === "warn") return import_chalk6.default.yellow;
+  return import_chalk6.default.green;
 }
 function pad(s, len) {
   return s + " ".repeat(Math.max(0, len - s.length));
@@ -88643,18 +88799,18 @@ function groupPackages(packages) {
   return [...map.values()].map((pkgs) => ({ packages: pkgs, key: pkgs[0].name })).sort((a, b) => b.packages[0].score - a.packages[0].score);
 }
 function actionBadge(score) {
-  if (score >= 70) return { label: "Block", color: import_chalk5.default.red };
-  if (score >= 60) return { label: "Warn", color: import_chalk5.default.yellow };
-  return { label: "Pass", color: import_chalk5.default.green };
+  if (score >= 70) return { label: "Block", color: import_chalk6.default.red };
+  if (score >= 60) return { label: "Warn", color: import_chalk6.default.yellow };
+  return { label: "Pass", color: import_chalk6.default.green };
 }
 function renderResultStatic(result, _config) {
   const lines = [];
   const actionStr = result.action.toUpperCase();
   const colorAction = actionColor(result.action);
   lines.push("");
-  lines.push(`  ${import_chalk5.default.bold("Dependency Guardian")}`);
+  lines.push(`  ${import_chalk6.default.bold("Dependency Guardian")}`);
   lines.push(
-    `  Score: ${import_chalk5.default.bold(String(result.score))}${" ".repeat(
+    `  Score: ${import_chalk6.default.bold(String(result.score))}${" ".repeat(
       Math.max(1, 50 - String(result.score).length)
     )}${colorAction(actionStr)}`
   );
@@ -88664,11 +88820,11 @@ function renderResultStatic(result, _config) {
   const total = result.packages.length;
   if (flagged.length > 0) {
     lines.push(
-      `  ${total} package${total !== 1 ? "s" : ""} scanned ${import_chalk5.default.dim("\u2502")} ${import_chalk5.default.yellow(`${flagged.length} flagged`)} \u2502 ${import_chalk5.default.green(`${clean.length} clean`)}`
+      `  ${total} package${total !== 1 ? "s" : ""} scanned ${import_chalk6.default.dim("\u2502")} ${import_chalk6.default.yellow(`${flagged.length} flagged`)} \u2502 ${import_chalk6.default.green(`${clean.length} clean`)}`
     );
   } else {
     lines.push(
-      `  ${total} package${total !== 1 ? "s" : ""} scanned ${import_chalk5.default.dim("\u2502")} ${import_chalk5.default.green("all clean")}`
+      `  ${total} package${total !== 1 ? "s" : ""} scanned ${import_chalk6.default.dim("\u2502")} ${import_chalk6.default.green("all clean")}`
     );
   }
   const licensedPkgs = result.packages.filter((p) => p.license);
@@ -88677,7 +88833,7 @@ function renderResultStatic(result, _config) {
   );
   if (licenseIssues.length > 0) {
     lines.push(
-      `  ${import_chalk5.default.dim("Licenses:")} ${import_chalk5.default.yellow(`${licenseIssues.length} need review`)} \u2502 ${import_chalk5.default.green(`${licensedPkgs.length - licenseIssues.length} permissive`)}`
+      `  ${import_chalk6.default.dim("Licenses:")} ${import_chalk6.default.yellow(`${licenseIssues.length} need review`)} \u2502 ${import_chalk6.default.green(`${licensedPkgs.length - licenseIssues.length} permissive`)}`
     );
   }
   lines.push("");
@@ -88688,30 +88844,30 @@ function renderResultStatic(result, _config) {
   }
   const groups = groupPackages(flagged);
   if (flagged.length > 0) {
-    lines.push(`  ${import_chalk5.default.bold("Flagged Packages")}`);
-    lines.push(`  ${import_chalk5.default.dim("\u2500".repeat(60))}`);
+    lines.push(`  ${import_chalk6.default.bold("Flagged Packages")}`);
+    lines.push(`  ${import_chalk6.default.dim("\u2500".repeat(60))}`);
     for (const group of groups) {
       const rep = group.packages[0];
       const { label, color } = actionBadge(rep.score);
       const names = group.packages.length === 1 ? rep.name : group.packages.length <= 3 ? group.packages.map((p) => p.name).join(", ") : `${group.packages[0].name} + ${group.packages.length - 1} similar`;
       const lcInfo = rep.license;
       const lcStr = lcInfo ? truncate2(lcInfo.spdx ?? lcInfo.raw ?? "", 14) : "";
-      const lcColor = !lcInfo ? import_chalk5.default.dim : lcInfo.riskCategory === "permissive" ? import_chalk5.default.green : lcInfo.riskCategory === "no-license" || lcInfo.riskCategory === "unlicensed" || lcInfo.riskCategory === "network-copyleft" ? import_chalk5.default.red : import_chalk5.default.yellow;
+      const lcColor = !lcInfo ? import_chalk6.default.dim : lcInfo.riskCategory === "permissive" ? import_chalk6.default.green : lcInfo.riskCategory === "no-license" || lcInfo.riskCategory === "unlicensed" || lcInfo.riskCategory === "network-copyleft" ? import_chalk6.default.red : import_chalk6.default.yellow;
       lines.push(
-        `    ${color(pad(label, 7))}${import_chalk5.default.bold(pad(truncate2(names, 36), 38))}${lcColor(pad(lcStr, 16))}${import_chalk5.default.dim(`score ${rep.score}`)}`
+        `    ${color(pad(label, 7))}${import_chalk6.default.bold(pad(truncate2(names, 36), 38))}${lcColor(pad(lcStr, 16))}${import_chalk6.default.dim(`score ${rep.score}`)}`
       );
     }
     lines.push("");
   }
   if (clean.length > 0) {
     lines.push(
-      `  ${import_chalk5.default.green("\u2713")} ${import_chalk5.default.dim(`${clean.length} package${clean.length !== 1 ? "s" : ""} passed with score 0`)}`
+      `  ${import_chalk6.default.green("\u2713")} ${import_chalk6.default.dim(`${clean.length} package${clean.length !== 1 ? "s" : ""} passed with score 0`)}`
     );
     lines.push("");
   }
   if (result.durationMs) {
     lines.push(
-      `  ${import_chalk5.default.dim(`Completed in ${(result.durationMs / 1e3).toFixed(1)}s`)}`
+      `  ${import_chalk6.default.dim(`Completed in ${(result.durationMs / 1e3).toFixed(1)}s`)}`
     );
     lines.push("");
   }
@@ -88720,12 +88876,12 @@ function renderResultStatic(result, _config) {
 async function runStatic(config3) {
   const dbg = (msg) => {
     if (config3.debug)
-      process.stderr.write(import_chalk5.default.dim(`  [debug] ${msg}
+      process.stderr.write(import_chalk6.default.dim(`  [debug] ${msg}
 `));
   };
   if (config3.mode === "off") {
     process.stderr.write(
-      import_chalk5.default.dim("  Dependency Guardian: mode is off \u2014 skipping.\n")
+      import_chalk6.default.dim("  Dependency Guardian: mode is off \u2014 skipping.\n")
     );
     process.exit(0);
   }
@@ -88733,7 +88889,7 @@ async function runStatic(config3) {
     `mode=${config3.mode} max=${config3.maxPackages}`
   );
   dbg(`api=${config3.apiUrl}`);
-  process.stderr.write(import_chalk5.default.dim("  Discovering package changes...\n"));
+  process.stderr.write(import_chalk6.default.dim("  Discovering package changes...\n"));
   let discovery = discoverChanges(process.cwd(), config3);
   dbg(`discovery method: ${discovery.method}`);
   if (discovery.pythonPackages.length > 0) {
@@ -88743,17 +88899,17 @@ async function runStatic(config3) {
     const { discoverProjects: discoverProjects2 } = await Promise.resolve().then(() => (init_discover(), discover_exports));
     const subProjects = discoverProjects2(process.cwd());
     if (subProjects.length === 0) {
-      process.stderr.write(import_chalk5.default.dim("  No package changes detected.\n"));
+      process.stderr.write(import_chalk6.default.dim("  No package changes detected.\n"));
       process.exit(0);
     }
     const totalPkgs = subProjects.reduce((s, p) => s + p.packageCount, 0);
     process.stderr.write(
-      import_chalk5.default.dim(`  Found ${subProjects.length} projects (${totalPkgs} packages total):
+      import_chalk6.default.dim(`  Found ${subProjects.length} projects (${totalPkgs} packages total):
 `)
     );
     for (const proj of subProjects) {
       process.stderr.write(
-        import_chalk5.default.dim(`    ${proj.ecosystem}  ${proj.relativePath} (${proj.packageCount})
+        import_chalk6.default.dim(`    ${proj.ecosystem}  ${proj.relativePath} (${proj.packageCount})
 `)
       );
     }
@@ -88783,7 +88939,7 @@ async function runStatic(config3) {
       }
     }
     if (allNpmPkgs.length === 0 && allPyPkgs.length === 0) {
-      process.stderr.write(import_chalk5.default.dim("  No package changes detected across projects.\n"));
+      process.stderr.write(import_chalk6.default.dim("  No package changes detected across projects.\n"));
       process.exit(0);
     }
     discovery = {
@@ -88796,14 +88952,14 @@ async function runStatic(config3) {
   const packages = discovery.packages;
   const totalToScan = packages.length + discovery.pythonPackages.length;
   process.stderr.write(
-    import_chalk5.default.dim(
+    import_chalk6.default.dim(
       `  Scanning ${totalToScan} package${totalToScan !== 1 ? "s" : ""}${discovery.pythonPackages.length > 0 ? ` (${packages.length} npm + ${discovery.pythonPackages.length} Python)` : ""} (${discovery.method})...
 `
     )
   );
   if (discovery.skipped.length > 0 && config3.maxPackages < 1e4) {
     process.stderr.write(
-      import_chalk5.default.dim(
+      import_chalk6.default.dim(
         `  Note: ${discovery.skipped.length} package(s) not scanned (--max-packages=${config3.maxPackages})
 `
       )
@@ -88817,7 +88973,7 @@ async function runStatic(config3) {
     const startMs = Date.now();
     if (packages.length > 0) {
       result = await callAnalyzeAPI(packages, config3, (done, total) => {
-        process.stderr.write(import_chalk5.default.dim(`  Analyzed ${done}/${total}...
+        process.stderr.write(import_chalk6.default.dim(`  Analyzed ${done}/${total}...
 `));
       });
     } else {
@@ -88825,7 +88981,7 @@ async function runStatic(config3) {
     }
     if (discovery.pythonPackages.length > 0) {
       process.stderr.write(
-        import_chalk5.default.dim(`  Scanning ${discovery.pythonPackages.length} Python package${discovery.pythonPackages.length !== 1 ? "s" : ""}...
+        import_chalk6.default.dim(`  Scanning ${discovery.pythonPackages.length} Python package${discovery.pythonPackages.length !== 1 ? "s" : ""}...
 `)
       );
       const pyResult = await callPyPIAnalyzeAPI(discovery.pythonPackages, config3);
@@ -88872,7 +89028,7 @@ async function runStaticNpm(npmArgs, config3) {
     const bareSpecs = readBareInstallPackages(process.cwd());
     if (bareSpecs.length === 0) {
       process.stderr.write(
-        import_chalk5.default.dim(
+        import_chalk6.default.dim(
           "  Dependency Guardian: no packages to scan, passing through to npm.\n"
         )
       );
@@ -88880,7 +89036,7 @@ async function runStaticNpm(npmArgs, config3) {
       process.exit(code);
     }
     process.stderr.write(
-      import_chalk5.default.dim(
+      import_chalk6.default.dim(
         `  Resolving ${bareSpecs.length} package${bareSpecs.length !== 1 ? "s" : ""} from package.json...
 `
       )
@@ -88888,7 +89044,7 @@ async function runStaticNpm(npmArgs, config3) {
     const { resolved: resolved2, failed: failed2 } = await resolvePackages(bareSpecs);
     if (failed2.length > 0 && config3.debug) {
       process.stderr.write(
-        import_chalk5.default.dim(
+        import_chalk6.default.dim(
           `  [debug] Could not resolve: ${failed2.slice(0, 5).join(", ")}${failed2.length > 5 ? ` (+${failed2.length - 5} more)` : ""}
 `
         )
@@ -88897,7 +89053,7 @@ async function runStaticNpm(npmArgs, config3) {
     return scanAndInstallStatic(resolved2, parsed, config3);
   }
   process.stderr.write(
-    import_chalk5.default.dim(
+    import_chalk6.default.dim(
       `  Resolving ${parsed.packages.length} package${parsed.packages.length !== 1 ? "s" : ""}...
 `
     )
@@ -88905,7 +89061,7 @@ async function runStaticNpm(npmArgs, config3) {
   const { resolved, failed } = await resolvePackages(parsed.packages);
   if (failed.length > 0) {
     process.stderr.write(
-      import_chalk5.default.yellow(
+      import_chalk6.default.yellow(
         `  Warning: Could not resolve versions for: ${failed.join(", ")}
 `
       )
@@ -88913,7 +89069,7 @@ async function runStaticNpm(npmArgs, config3) {
   }
   if (resolved.length === 0) {
     process.stderr.write(
-      import_chalk5.default.dim("  No packages to scan. Passing through to npm.\n")
+      import_chalk6.default.dim("  No packages to scan. Passing through to npm.\n")
     );
     const code = await runNpm(parsed.rawArgs);
     process.exit(code);
@@ -88922,7 +89078,7 @@ async function runStaticNpm(npmArgs, config3) {
 }
 async function scanAndInstallStatic(resolved, parsed, config3) {
   process.stderr.write(
-    import_chalk5.default.dim(
+    import_chalk6.default.dim(
       `  Scanning ${resolved.length} package${resolved.length !== 1 ? "s" : ""}...
 `
     )
@@ -88934,7 +89090,7 @@ async function scanAndInstallStatic(resolved, parsed, config3) {
     const elapsed = Date.now() - startMs;
     if (config3.debug) {
       process.stderr.write(
-        import_chalk5.default.dim(
+        import_chalk6.default.dim(
           `  [debug] API responded in ${elapsed}ms, action=${result.action}, score=${result.score}
 `
         )
@@ -88944,7 +89100,7 @@ async function scanAndInstallStatic(resolved, parsed, config3) {
     if (handleTrialExhausted2(error2, config3.json)) return;
     const msg = error2 instanceof Error ? error2.message : String(error2);
     process.stderr.write(
-      import_chalk5.default.yellow(
+      import_chalk6.default.yellow(
         `  Warning: Scan failed (${msg}). Proceeding with install.
 `
       )
@@ -88955,8 +89111,8 @@ async function scanAndInstallStatic(resolved, parsed, config3) {
   }
   if (result.action === "pass") {
     process.stderr.write(
-      import_chalk5.default.green(
-        `  ${import_chalk5.default.bold("\u2713")} ${resolved.length} package${resolved.length !== 1 ? "s" : ""} scanned \u2014 all clear
+      import_chalk6.default.green(
+        `  ${import_chalk6.default.bold("\u2713")} ${resolved.length} package${resolved.length !== 1 ? "s" : ""} scanned \u2014 all clear
 `
       )
     );
@@ -88970,7 +89126,7 @@ async function scanAndInstallStatic(resolved, parsed, config3) {
   printTrialBanner(result);
   if (result.action === "warn") {
     process.stderr.write(
-      import_chalk5.default.yellow("  Warnings detected. Proceeding with install.\n\n")
+      import_chalk6.default.yellow("  Warnings detected. Proceeding with install.\n\n")
     );
     const code = await runNpm(parsed.rawArgs);
     process.exit(code);
@@ -88978,8 +89134,8 @@ async function scanAndInstallStatic(resolved, parsed, config3) {
   if (result.action === "block") {
     if (parsed.dgForce) {
       process.stderr.write(
-        import_chalk5.default.yellow(
-          import_chalk5.default.bold(
+        import_chalk6.default.yellow(
+          import_chalk6.default.bold(
             "  --dg-force: Bypassing block. Install at your own risk.\n\n"
           )
         )
@@ -88988,10 +89144,10 @@ async function scanAndInstallStatic(resolved, parsed, config3) {
       process.exit(code);
     }
     process.stderr.write(
-      import_chalk5.default.red(import_chalk5.default.bold("  BLOCKED: ")) + import_chalk5.default.red("High-risk packages detected. Install aborted.\n")
+      import_chalk6.default.red(import_chalk6.default.bold("  BLOCKED: ")) + import_chalk6.default.red("High-risk packages detected. Install aborted.\n")
     );
     process.stderr.write(
-      import_chalk5.default.dim("  Use --dg-force to bypass this check.\n\n")
+      import_chalk6.default.dim("  Use --dg-force to bypass this check.\n\n")
     );
     process.exit(2);
   }
@@ -89008,13 +89164,13 @@ async function runStaticPip(pipArgs, config3) {
   }
   if (specs.length === 0) {
     process.stderr.write(
-      import_chalk5.default.dim("  Dependency Guardian: no packages to scan, passing through to pip.\n")
+      import_chalk6.default.dim("  Dependency Guardian: no packages to scan, passing through to pip.\n")
     );
     const code = await runPip(parsed.rawArgs);
     process.exit(code);
   }
   process.stderr.write(
-    import_chalk5.default.dim(
+    import_chalk6.default.dim(
       `  Resolving ${specs.length} package${specs.length !== 1 ? "s" : ""} from PyPI...
 `
     )
@@ -89022,19 +89178,19 @@ async function runStaticPip(pipArgs, config3) {
   const { resolved, failed } = await resolvePackages2(specs);
   if (failed.length > 0) {
     process.stderr.write(
-      import_chalk5.default.yellow(`  Warning: Could not resolve versions for: ${failed.join(", ")}
+      import_chalk6.default.yellow(`  Warning: Could not resolve versions for: ${failed.join(", ")}
 `)
     );
   }
   if (resolved.length === 0) {
     process.stderr.write(
-      import_chalk5.default.dim("  No packages to scan. Passing through to pip.\n")
+      import_chalk6.default.dim("  No packages to scan. Passing through to pip.\n")
     );
     const code = await runPip(parsed.rawArgs);
     process.exit(code);
   }
   process.stderr.write(
-    import_chalk5.default.dim(
+    import_chalk6.default.dim(
       `  Scanning ${resolved.length} Python package${resolved.length !== 1 ? "s" : ""}...
 `
     )
@@ -89046,7 +89202,7 @@ async function runStaticPip(pipArgs, config3) {
     if (handleTrialExhausted2(error2, config3.json)) return;
     const msg = error2 instanceof Error ? error2.message : String(error2);
     process.stderr.write(
-      import_chalk5.default.yellow(`  Warning: Scan failed (${msg}). Proceeding with install.
+      import_chalk6.default.yellow(`  Warning: Scan failed (${msg}). Proceeding with install.
 `)
     );
     const code = await runPip(parsed.rawArgs);
@@ -89055,8 +89211,8 @@ async function runStaticPip(pipArgs, config3) {
   }
   if (result.action === "pass") {
     process.stderr.write(
-      import_chalk5.default.green(
-        `  ${import_chalk5.default.bold("\u2713")} ${resolved.length} package${resolved.length !== 1 ? "s" : ""} scanned \u2014 all clear
+      import_chalk6.default.green(
+        `  ${import_chalk6.default.bold("\u2713")} ${resolved.length} package${resolved.length !== 1 ? "s" : ""} scanned \u2014 all clear
 `
       )
     );
@@ -89070,7 +89226,7 @@ async function runStaticPip(pipArgs, config3) {
   printTrialBanner(result);
   if (result.action === "warn") {
     process.stderr.write(
-      import_chalk5.default.yellow("  Warnings detected. Proceeding with install.\n\n")
+      import_chalk6.default.yellow("  Warnings detected. Proceeding with install.\n\n")
     );
     const code = await runPip(parsed.rawArgs);
     process.exit(code);
@@ -89078,16 +89234,16 @@ async function runStaticPip(pipArgs, config3) {
   if (result.action === "block") {
     if (parsed.dgForce) {
       process.stderr.write(
-        import_chalk5.default.yellow(import_chalk5.default.bold("  --dg-force: Bypassing block. Install at your own risk.\n\n"))
+        import_chalk6.default.yellow(import_chalk6.default.bold("  --dg-force: Bypassing block. Install at your own risk.\n\n"))
       );
       const code = await runPip(parsed.rawArgs);
       process.exit(code);
     }
     process.stderr.write(
-      import_chalk5.default.red(import_chalk5.default.bold("  BLOCKED: ")) + import_chalk5.default.red("High-risk packages detected. Install aborted.\n")
+      import_chalk6.default.red(import_chalk6.default.bold("  BLOCKED: ")) + import_chalk6.default.red("High-risk packages detected. Install aborted.\n")
     );
     process.stderr.write(
-      import_chalk5.default.dim("  Use --dg-force to bypass this check.\n\n")
+      import_chalk6.default.dim("  Use --dg-force to bypass this check.\n\n")
     );
     process.exit(2);
   }
@@ -89110,22 +89266,22 @@ async function runStaticLogin() {
       });
       if (resp.ok) {
         process.stderr.write(
-          import_chalk5.default.yellow("  Already authenticated.\n") + import_chalk5.default.dim("  Run `dg logout` first to re-authenticate.\n")
+          import_chalk6.default.yellow("  Already authenticated.\n") + import_chalk6.default.dim("  Run `dg logout` first to re-authenticate.\n")
         );
         return;
       }
     } catch {
     }
-    process.stderr.write(import_chalk5.default.dim("  Stored key is invalid. Starting fresh login...\n"));
+    process.stderr.write(import_chalk6.default.dim("  Stored key is invalid. Starting fresh login...\n"));
     saveCredentials2("");
   }
-  process.stderr.write(import_chalk5.default.dim("  Creating login session...\n"));
+  process.stderr.write(import_chalk6.default.dim("  Creating login session...\n"));
   let session;
   try {
     session = await createAuthSession2();
   } catch (err) {
     process.stderr.write(
-      import_chalk5.default.red(`  Error: ${err instanceof Error ? err.message : String(err)}
+      import_chalk6.default.red(`  Error: ${err instanceof Error ? err.message : String(err)}
 `)
     );
     process.exit(1);
@@ -89133,10 +89289,10 @@ async function runStaticLogin() {
   process.stderr.write(`
   Authenticate your account at:
 `);
-  process.stderr.write(`  ${import_chalk5.default.cyan(session.verifyUrl)}
+  process.stderr.write(`  ${import_chalk6.default.cyan(session.verifyUrl)}
 
 `);
-  process.stderr.write(import_chalk5.default.dim("  Press ENTER to open in the browser...\n"));
+  process.stderr.write(import_chalk6.default.dim("  Press ENTER to open in the browser...\n"));
   await new Promise((resolve2) => {
     const onData = () => {
       process.stdin.removeListener("data", onData);
@@ -89151,7 +89307,7 @@ async function runStaticLogin() {
     openBrowser2(session.verifyUrl);
   } catch {
   }
-  process.stderr.write(import_chalk5.default.dim("  Waiting for authorization...\n"));
+  process.stderr.write(import_chalk6.default.dim("  Waiting for authorization...\n"));
   const POLL_INTERVAL = 2e3;
   const MAX_ATTEMPTS = 150;
   for (let i = 0; i < MAX_ATTEMPTS; i++) {
@@ -89161,15 +89317,15 @@ async function runStaticLogin() {
       if (result.status === "complete" && result.apiKey) {
         saveCredentials2(result.apiKey);
         process.stderr.write(
-          import_chalk5.default.green(`
+          import_chalk6.default.green(`
   Logged in as ${result.email ?? "unknown"}
-`) + import_chalk5.default.dim("  Credentials saved.\n\n")
+`) + import_chalk6.default.dim("  Credentials saved.\n\n")
         );
         return;
       }
       if (result.status === "expired") {
         process.stderr.write(
-          import_chalk5.default.yellow("\n  Session expired. Run `dg login` to try again.\n")
+          import_chalk6.default.yellow("\n  Session expired. Run `dg login` to try again.\n")
         );
         process.exit(1);
       }
@@ -89177,15 +89333,15 @@ async function runStaticLogin() {
     }
   }
   process.stderr.write(
-    import_chalk5.default.yellow("\n  Timed out waiting for authorization.\n")
+    import_chalk6.default.yellow("\n  Timed out waiting for authorization.\n")
   );
   process.exit(1);
 }
-var import_chalk5;
+var import_chalk6;
 var init_static_output = __esm({
   "src/static-output.ts"() {
     "use strict";
-    import_chalk5 = __toESM(require_source());
+    import_chalk6 = __toESM(require_source());
     init_api3();
     init_auth();
     init_lockfile();
@@ -89256,10 +89412,10 @@ function reducer4(_state, action) {
   }
 }
 function useScan(config3) {
-  const [state, dispatch] = (0, import_react30.useReducer)(reducer4, { phase: "discovering" });
-  const started = (0, import_react30.useRef)(false);
-  const [multiProjects, setMultiProjects] = (0, import_react30.useState)(null);
-  (0, import_react30.useEffect)(() => {
+  const [state, dispatch] = (0, import_react31.useReducer)(reducer4, { phase: "discovering" });
+  const started = (0, import_react31.useRef)(false);
+  const [multiProjects, setMultiProjects] = (0, import_react31.useState)(null);
+  (0, import_react31.useEffect)(() => {
     if (started.current) return;
     started.current = true;
     const projects = discoverProjects(process.cwd());
@@ -89286,11 +89442,11 @@ function useScan(config3) {
       scanProjects(projects, config3, dispatch);
     }
   }, [config3]);
-  const scanSelectedProjects = (0, import_react30.useCallback)((projects) => {
+  const scanSelectedProjects = (0, import_react31.useCallback)((projects) => {
     dispatch({ type: "DISCOVERY_COMPLETE", packages: [], skippedCount: 0 });
     scanProjects(projects, config3, dispatch);
   }, [config3]);
-  const restartSelection = (0, import_react30.useCallback)(() => {
+  const restartSelection = (0, import_react31.useCallback)(() => {
     if (!multiProjects) return;
     dispatch({ type: "RESTART_SELECTION", projects: multiProjects });
   }, [multiProjects]);
@@ -89410,11 +89566,11 @@ async function scanProjects(projects, config3, dispatch) {
     dispatch({ type: "ERROR", error: err });
   }
 }
-var import_react30;
+var import_react31;
 var init_useScan = __esm({
   "src/ui/hooks/useScan.ts"() {
     "use strict";
-    import_react30 = __toESM(require_react());
+    import_react31 = __toESM(require_react());
     init_lockfile();
     init_api3();
     init_discover();
@@ -89423,85 +89579,6 @@ var init_useScan = __esm({
   }
 });
 
-// src/ui/components/ProgressBar.tsx
-function estimateScanSeconds(packageCount) {
-  return Math.ceil(Math.max(5, packageCount * 0.35 - 10));
-}
-function formatTime(seconds) {
-  if (seconds < 60) return `${seconds}s`;
-  const m = Math.floor(seconds / 60);
-  const s = seconds % 60;
-  return s > 0 ? `${m}m ${s}s` : `${m}m`;
-}
-var import_react31, import_chalk6, import_jsx_runtime9, ProgressBar;
-var init_ProgressBar = __esm({
-  async "src/ui/components/ProgressBar.tsx"() {
-    "use strict";
-    import_react31 = __toESM(require_react());
-    await init_build2();
-    await init_build3();
-    import_chalk6 = __toESM(require_source());
-    import_jsx_runtime9 = __toESM(require_jsx_runtime());
-    ProgressBar = ({
-      value,
-      total,
-      label
-    }) => {
-      const startRef = (0, import_react31.useRef)(Date.now());
-      const [elapsed, setElapsed] = (0, import_react31.useState)(0);
-      (0, import_react31.useEffect)(() => {
-        const timer = setInterval(() => {
-          setElapsed(Math.floor((Date.now() - startRef.current) / 1e3));
-        }, 1e3);
-        return () => clearInterval(timer);
-      }, []);
-      const termWidth = process.stdout.columns || 80;
-      const percent = total > 0 ? Math.round(value / total * 100) : 0;
-      const estimate = estimateScanSeconds(total);
-      const timeInfo = `${formatTime(elapsed)} / ~${formatTime(estimate)}`;
-      const counter = `${value}/${total}  ${percent}%`;
-      const barWidth = Math.max(10, termWidth - counter.length - 8);
-      const fraction = total > 0 ? Math.min(1, value / total) : 0;
-      const filled = Math.round(fraction * barWidth);
-      const empty = barWidth - filled;
-      const filledBar = "\u2501".repeat(filled);
-      const emptyBar = "\u2501".repeat(empty);
-      return /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Box_default, { flexDirection: "column", paddingLeft: 2, children: [
-        /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { children: [
-          import_chalk6.default.cyan("\u25C6"),
-          " ",
-          import_chalk6.default.bold("Dependency Guardian")
-        ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { children: "" }),
-        /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Box_default, { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "cyan", children: /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(build_default, { type: "dots" }) }),
-          /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { children: [
-            " Scanning ",
-            total,
-            " packages...  "
-          ] }),
-          /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { dimColor: true, children: timeInfo })
-        ] }),
-        /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Box_default, { children: [
-          /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { children: "  " }),
-          /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { color: "green", children: filledBar }),
-          /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Text, { dimColor: true, children: emptyBar }),
-          /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { children: [
-            "  ",
-            counter
-          ] })
-        ] }),
-        label && /* @__PURE__ */ (0, import_jsx_runtime9.jsx)(Box_default, { children: /* @__PURE__ */ (0, import_jsx_runtime9.jsxs)(Text, { dimColor: true, children: [
-          "  ",
-          import_chalk6.default.dim("\u203A"),
-          " ",
-          label
-        ] }) })
-      ] });
-    };
-  }
-});
-
 // src/ui/components/ScoreHeader.tsx
 function scoreColor(score, action) {
   const colorFn = action === "block" ? import_chalk7.default.red.bold : action === "warn" ? import_chalk7.default.yellow.bold : import_chalk7.default.green.bold;
@@ -89693,7 +89770,7 @@ var init_ScoreHeader = __esm({
 });
 
 // src/ui/hooks/useExpandAnimation.ts
-function useExpandAnimation(targetHeight, active, durationMs = 180) {
+function useExpandAnimation(targetHeight, active2, durationMs = 180) {
   const [visibleLines, setVisibleLines] = (0, import_react32.useState)(0);
   const timerRef = (0, import_react32.useRef)(null);
   (0, import_react32.useEffect)(() => {
@@ -89701,7 +89778,7 @@ function useExpandAnimation(targetHeight, active, durationMs = 180) {
       clearInterval(timerRef.current);
       timerRef.current = null;
     }
-    if (!active || targetHeight <= 0) {
+    if (!active2 || targetHeight <= 0) {
       setVisibleLines(0);
       return;
     }
@@ -89724,10 +89801,10 @@ function useExpandAnimation(targetHeight, active, durationMs = 180) {
         timerRef.current = null;
       }
     };
-  }, [active, targetHeight, durationMs]);
+  }, [active2, targetHeight, durationMs]);
   return {
-    visibleLines: active ? visibleLines : 0,
-    isAnimating: active && visibleLines > 0 && visibleLines < targetHeight
+    visibleLines: active2 ? visibleLines : 0,
+    isAnimating: active2 && visibleLines > 0 && visibleLines < targetHeight
   };
 }
 var import_react32;
@@ -90840,7 +90917,7 @@ var init_App2 = __esm({
       (0, import_react35.useEffect)(() => {
         prevPhaseRef.current = state.phase;
       }, [state.phase]);
-      const leaveAltScreen = (0, import_react35.useCallback)(() => {
+      const leaveAltScreen2 = (0, import_react35.useCallback)(() => {
         if (altScreenActiveRef.current && process.stdout.isTTY) {
           process.stdout.write("\x1B[?1049l");
           altScreenActiveRef.current = false;
@@ -90858,15 +90935,15 @@ var init_App2 = __esm({
             process.exitCode = 0;
           }
         }
-        leaveAltScreen();
+        leaveAltScreen2();
         exit();
-      }, [state, config3, exit, leaveAltScreen]);
+      }, [state, config3, exit, leaveAltScreen2]);
       const exitWithMessage = (0, import_react35.useCallback)((message, exitCode) => {
         process.exitCode = exitCode;
-        leaveAltScreen();
+        leaveAltScreen2();
         process.stderr.write(message);
         return setTimeout(() => exit(), 0);
-      }, [exit, leaveAltScreen]);
+      }, [exit, leaveAltScreen2]);
       (0, import_react35.useEffect)(() => {
         if (state.phase === "empty") {
           const timer = exitWithMessage(`${state.message}
@@ -90894,7 +90971,7 @@ var init_App2 = __esm({
         if (state.phase === "discovering" || state.phase === "scanning") {
           if (input === "q" || key.escape) {
             process.exitCode = 0;
-            leaveAltScreen();
+            leaveAltScreen2();
             exit();
           }
         }
@@ -90911,7 +90988,7 @@ var init_App2 = __esm({
                 onConfirm: scanSelectedProjects,
                 onCancel: () => {
                   process.exitCode = 0;
-                  leaveAltScreen();
+                  leaveAltScreen2();
                   exit();
                 },
                 userStatus
@@ -91817,6 +91894,7 @@ init_telemetry();
 init_config();
 init_npm_wrapper();
 init_update_check();
+init_alt_screen();
 var CLI_VERSION = getVersion();
 initTelemetry(CLI_VERSION);
 function closestCommand(input, commands) {
@@ -91837,9 +91915,14 @@ function closestCommand(input, commands) {
   return bestDist <= 3 ? best : null;
 }
 process.on("SIGINT", () => {
+  leaveAltScreen();
   process.stderr.write("\n");
   process.exit(130);
 });
+process.on("SIGTERM", () => {
+  leaveAltScreen();
+  process.exit(143);
+});
 var isInteractive = process.stdout.isTTY === true && !process.env.CI && !process.env.NO_COLOR;
 async function main() {
   const rawCommand = process.argv[2];
@@ -91871,10 +91954,15 @@ async function main() {
       const { render: render3 } = await init_build2().then(() => build_exports);
       const React22 = await Promise.resolve().then(() => __toESM(require_react()));
       const { InitApp: InitApp2 } = await init_InitApp().then(() => InitApp_exports);
-      const { waitUntilExit } = render3(
-        React22.createElement(InitApp2, { firstRun: true, returning: true })
-      );
-      await waitUntilExit();
+      enterAltScreen();
+      try {
+        const { waitUntilExit } = render3(
+          React22.createElement(InitApp2, { firstRun: true, returning: true })
+        );
+        await waitUntilExit();
+      } finally {
+        leaveAltScreen();
+      }
       try {
         const { markFirstRunComplete: markFirstRunComplete2 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
         markFirstRunComplete2();