blindseal 0.5.0 → 0.5.1

package/dist/index.js

@@ -9,7 +9,7 @@ import {
   isTrustedSource,
   loadConfig,
   mergeDecisions
-} from "./chunk-JJY62YXJ.js";
+} from "./chunk-ZZTWGFH2.js";
 import {
   createClientFromEnv,
   runPipeline,
@@ -19,16 +19,10 @@ import {
   rankVerdict
 } from "./chunk-XV57KLEO.js";
 import {
-  discloseBundle,
-  hashEntry
-} from "./chunk-PQ457W6T.js";
+  packageVersion
+} from "./chunk-CIUQ6WHJ.js";
 import "./chunk-PDX44BCA.js";
 
-// src/index.ts
-import { readFileSync as readFileSync4 } from "fs";
-import path7 from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
-
 // src/transports/stdio.ts
 import { spawn } from "child_process";
 import { createInterface } from "readline";
@@ -207,116 +201,6 @@ var ManifestChecker = class {
   }
 };
 
-// src/telemetry/event.ts
-import { createHash as createHash2, randomUUID } from "crypto";
-function sha256Hex(s) {
-  return createHash2("sha256").update(s).digest("hex");
-}
-function newId() {
-  return randomUUID();
-}
-function resolveInstallId() {
-  const explicit = process.env.BLINDSEAL_TELEMETRY_INSTALL_ID;
-  if (explicit && explicit.length > 0) return sha256Hex(explicit).slice(0, 16);
-  return randomUUID();
-}
-
-// src/telemetry/reporter.ts
-function createReporter(config, fetchImpl = globalThis.fetch) {
-  if (!config.enabled || !config.url) {
-    return {
-      enabled: false,
-      send() {
-      },
-      async flush() {
-      },
-      async shutdown() {
-      }
-    };
-  }
-  const installId = resolveInstallId();
-  const source = process.env.BLINDSEAL_TELEMETRY_SOURCE?.trim() || void 0;
-  let buffer = [];
-  let timer = null;
-  let inFlight = null;
-  let errorAnnouncedAt = 0;
-  let shutdownCalled = false;
-  function scheduleFlush() {
-    if (timer || shutdownCalled) return;
-    timer = setTimeout(() => {
-      timer = null;
-      void flushInternal();
-    }, config.flushIntervalMs);
-    if (typeof timer.unref === "function") timer.unref();
-  }
-  async function flushInternal() {
-    if (buffer.length === 0) return;
-    const batch = buffer;
-    buffer = [];
-    const headers = { "Content-Type": "application/json" };
-    if (config.secret) headers.Authorization = `Bearer ${config.secret}`;
-    try {
-      const resp = await fetchImpl(config.url, {
-        method: "POST",
-        headers,
-        body: JSON.stringify({ events: batch })
-      });
-      if (!resp.ok) {
-        announceError(`HTTP ${resp.status}`);
-      }
-    } catch (err) {
-      announceError(err instanceof Error ? err.message : String(err));
-    }
-  }
-  function announceError(msg) {
-    const now = Date.now();
-    if (now - errorAnnouncedAt < 6e4) return;
-    errorAnnouncedAt = now;
-    process.stderr.write(`blindseal: telemetry POST failed (${msg}); dropping events
-`);
-  }
-  return {
-    enabled: true,
-    send(partial) {
-      if (shutdownCalled) return;
-      const event = {
-        ...partial,
-        id: newId(),
-        ts: Date.now(),
-        installId,
-        ...source ? { source } : {}
-      };
-      buffer.push(event);
-      if (buffer.length >= config.batchSize) {
-        if (timer) {
-          clearTimeout(timer);
-          timer = null;
-        }
-        inFlight = (inFlight ?? Promise.resolve()).then(flushInternal);
-        return;
-      }
-      scheduleFlush();
-    },
-    async flush() {
-      if (timer) {
-        clearTimeout(timer);
-        timer = null;
-      }
-      await inFlight;
-      await flushInternal();
-    },
-    async shutdown() {
-      shutdownCalled = true;
-      if (timer) {
-        clearTimeout(timer);
-        timer = null;
-      }
-      await inFlight;
-      await flushInternal();
-    }
-  };
-}
-
 // src/audit/log.ts
 import { createWriteStream, mkdirSync as mkdirSync2 } from "fs";
 import path2 from "path";
@@ -367,6 +251,10 @@ function preview(text, max = 200) {
 }
 
 // src/transports/shared.ts
+import { createHash as createHash2 } from "crypto";
+function sha256Hex(s) {
+  return createHash2("sha256").update(s).digest("hex");
+}
 function tryParse(line) {
   try {
     return JSON.parse(line);
@@ -493,7 +381,6 @@ function startProxy(cmd, args) {
   const taint = new TaintStore(config.capability.windowSize);
   const tradeRate = new TradeRateState();
   const manifest = config.manifest.mode !== "off" ? new ManifestChecker(cmd, args, config.manifest) : null;
-  const telemetry = createReporter(config.telemetry);
   const audit = createAuditLogger(config.audit);
   const scanStore = createScanStore(config.persistence);
   if (scanStore.enabled) {
@@ -502,11 +389,6 @@ function startProxy(cmd, args) {
 `
     );
   }
-  if (config.telemetry.bannerOnStart) {
-    process.stderr.write(
-      "blindseal: telemetry is enabled (sha256 hashes only, no raw content) \u2014 see PRIVACY.md; set BLINDSEAL_TELEMETRY=0 to disable\n"
-    );
-  }
   const child = spawn(cmd, args, { stdio: ["pipe", "pipe", "inherit"] });
   child.on("error", (err) => {
     process.stderr.write(`blindseal: failed to spawn ${cmd}: ${err.message}
@@ -538,16 +420,6 @@ function startProxy(cmd, args) {
           decideCapability(name, params?.arguments, taint, config.capability),
           decideTradePolicy(name, params?.arguments, taint, config.tradePolicy, tradeRate)
         );
-        if (decision.action !== "allow" && telemetry.enabled) {
-          telemetry.send({
-            type: "capability",
-            action: decision.action,
-            toolName: name,
-            argsHash: sha256Hex(JSON.stringify(params?.arguments ?? null)),
-            sourceTools: (decision.taintSources ?? []).map((s) => s.toolName),
-            matchedPattern: decision.matchedPattern
-          });
-        }
         if (audit.enabled) {
           audit.log({
             type: "capability",
@@ -609,15 +481,6 @@ function startProxy(cmd, args) {
             verdict,
             config.manifest.mode === "strict" ? "strict" : "on"
           );
-          if (telemetry.enabled) {
-            telemetry.send({
-              type: "manifest",
-              status: verdict.status,
-              serverKey: verdict.serverKey,
-              fingerprint: verdict.fingerprint.fingerprint,
-              changes: verdict.changes
-            });
-          }
           if (audit.enabled) {
             audit.log({
               type: "manifest",
@@ -639,17 +502,6 @@ function startProxy(cmd, args) {
 `
           );
         }
-        if (telemetry.enabled) {
-          telemetry.send({
-            type: "detection",
-            layer: outcome.layer ?? null,
-            verdict: outcome.verdict,
-            confidence: outcome.result?.confidence ?? 0,
-            toolName,
-            contentHash: outcome.contentHash,
-            patterns: outcome.result?.detectedPatterns ?? []
-          });
-        }
         if (audit.enabled) {
           const previewText = msg.result.content.map((c) => typeof c.text === "string" ? c.text : "").join("\n");
           audit.log({
@@ -695,7 +547,6 @@ function startProxy(cmd, args) {
   });
   for (const sig of ["SIGINT", "SIGTERM"]) {
     process.on(sig, () => {
-      void telemetry.shutdown();
       void audit.shutdown();
       try {
         scanStore.close();
@@ -848,7 +699,6 @@ function startHttpProxy(opts) {
   const taint = new TaintStore(config.capability.windowSize);
   const tradeRate = new TradeRateState();
   const manifest = config.manifest.mode !== "off" ? new ManifestChecker("http", [opts.upstream], config.manifest) : null;
-  const telemetry = createReporter(config.telemetry);
   const audit = createAuditLogger(config.audit);
   const scanStore = createScanStore(config.persistence);
   if (scanStore.enabled) {
@@ -857,11 +707,6 @@ function startHttpProxy(opts) {
 `
     );
   }
-  if (config.telemetry.bannerOnStart) {
-    process.stderr.write(
-      "blindseal: telemetry is enabled (sha256 hashes only, no raw content) \u2014 see PRIVACY.md; set BLINDSEAL_TELEMETRY=0 to disable\n"
-    );
-  }
   const upstreamUrl = opts.upstream;
   const server = createServer(async (req, res) => {
     if (req.method === "GET" && (req.url === "/health" || req.url === "/")) {
@@ -892,16 +737,6 @@ function startHttpProxy(opts) {
           decideCapability(toolName, toolArgs, taint, config.capability),
           decideTradePolicy(toolName, toolArgs, taint, config.tradePolicy, tradeRate)
         );
-        if (decision.action !== "allow" && telemetry.enabled) {
-          telemetry.send({
-            type: "capability",
-            action: decision.action,
-            toolName,
-            argsHash: sha256Hex(JSON.stringify(toolArgs ?? null)),
-            sourceTools: (decision.taintSources ?? []).map((s) => s.toolName),
-            matchedPattern: decision.matchedPattern
-          });
-        }
         if (audit.enabled) {
           audit.log({
             type: "capability",
@@ -972,17 +807,6 @@ function startHttpProxy(opts) {
 `
                 );
               }
-              if (telemetry.enabled) {
-                telemetry.send({
-                  type: "detection",
-                  layer: outcome.layer ?? null,
-                  verdict: outcome.verdict,
-                  confidence: outcome.result?.confidence ?? 0,
-                  toolName: scannedTool,
-                  contentHash: outcome.contentHash,
-                  patterns: outcome.result?.detectedPatterns ?? []
-                });
-              }
               if (audit.enabled) {
                 const previewText = scannedMsg.result.content.map((c) => typeof c.text === "string" ? c.text : "").join("\n");
                 audit.log({
@@ -1074,15 +898,6 @@ function startHttpProxy(opts) {
 `);
             if (config.manifest.mode === "strict") process.exit(3);
           }
-          if (telemetry.enabled) {
-            telemetry.send({
-              type: "manifest",
-              status: verdict.status,
-              serverKey: verdict.serverKey,
-              fingerprint: verdict.fingerprint.fingerprint,
-              changes: verdict.changes
-            });
-          }
           if (audit.enabled) {
             audit.log({
               type: "manifest",
@@ -1103,17 +918,6 @@ function startHttpProxy(opts) {
 `
         );
       }
-      if (telemetry.enabled) {
-        telemetry.send({
-          type: "detection",
-          layer: outcome.layer ?? null,
-          verdict: outcome.verdict,
-          confidence: outcome.result?.confidence ?? 0,
-          toolName,
-          contentHash: outcome.contentHash,
-          patterns: outcome.result?.detectedPatterns ?? []
-        });
-      }
       if (audit.enabled) {
         const previewText = respMsg.result.content.map((c) => typeof c.text === "string" ? c.text : "").join("\n");
         audit.log({
@@ -1174,7 +978,6 @@ function startHttpProxy(opts) {
   });
   for (const sig of ["SIGINT", "SIGTERM"]) {
     process.on(sig, () => {
-      void telemetry.shutdown();
       void audit.shutdown();
       try {
         scanStore.close();
@@ -1240,25 +1043,18 @@ function parseRequestBody(raw) {
   return out;
 }
 function startScanHttp(opts) {
-  const config = loadConfig();
-  const telemetry = createReporter(config.telemetry);
-  if (config.telemetry.bannerOnStart) {
-    process.stderr.write(
-      "blindseal: telemetry is enabled (sha256 hashes only, no raw content) \u2014 see PRIVACY.md; set BLINDSEAL_TELEMETRY=0 to disable\n"
-    );
-  }
+  loadConfig();
   const defaultServerUrl = opts.defaultServerUrl ?? "scan-http:blindseal";
   const server = createServer2(async (req, res) => {
     const url = req.url ?? "/";
-    const path8 = url.split("?")[0] ?? "/";
-    if (req.method === "GET" && (path8 === "/health" || path8 === "/")) {
+    const path5 = url.split("?")[0] ?? "/";
+    if (req.method === "GET" && (path5 === "/health" || path5 === "/")) {
       sendJson2(res, 200, {
-        ok: true,
-        telemetryEnabled: telemetry.enabled
+        ok: true
       });
       return;
     }
-    if (req.method !== "POST" || path8 !== "/scan") {
+    if (req.method !== "POST" || path5 !== "/scan") {
       sendJson2(res, 404, { error: "not found" });
       return;
     }
@@ -1288,17 +1084,6 @@ function startScanHttp(opts) {
       sendJson2(res, 500, { error: "pipeline failed" });
       return;
     }
-    if (telemetry.enabled) {
-      telemetry.send({
-        type: "detection",
-        layer: result.layer ?? null,
-        verdict: result.verdict,
-        confidence: result.confidence,
-        toolName,
-        contentHash,
-        patterns: result.detectedPatterns
-      });
-    }
     if (result.verdict !== "clean") {
       process.stderr.write(
         `blindseal[scan-http]: ${result.verdict} (L${result.layer ?? "?"}) tool=${toolName} confidence=${result.confidence.toFixed(2)}
@@ -1326,7 +1111,6 @@ function startScanHttp(opts) {
   });
   for (const sig of ["SIGINT", "SIGTERM"]) {
     process.on(sig, () => {
-      void telemetry.shutdown();
       server.close(() => process.exit(0));
     });
   }
@@ -1773,999 +1557,40 @@ function runHistoryCli(argv) {
   return runHistory(parsed);
 }
 
-// src/cli/dashboard.ts
-import { createServer as createServer3 } from "http";
-import { existsSync as existsSync4 } from "fs";
-var HELP2 = `blindseal dashboard \u2014 local HTTP dashboard for scan history
-
-Usage:
-  blindseal dashboard [flags]
-
-Flags
-  --port <n>          listen port (default 9876)
-  --host <addr>       listen host (default 127.0.0.1)
-  --db <path>         override DB path (default ~/.blindseal/scans.db)
-  --refresh <sec>     auto-refresh interval (default 5)
-  --no-open           do not open browser automatically
-  --help, -h          this help
-
-Reads scans recorded by the proxy when run with BLINDSEAL_PERSIST=1. Local-only;
-never connects to any external service.
-`;
-function parseDashboardArgs(argv) {
-  const out = {};
-  for (let i = 0; i < argv.length; i++) {
-    const a = argv[i];
-    if (a === "--help" || a === "-h") {
-      out.help = true;
-      continue;
-    }
-    if (a === "--port") {
-      out.port = Number.parseInt(argv[++i], 10);
-      continue;
-    }
-    if (a === "--host") {
-      out.host = argv[++i];
-      continue;
-    }
-    if (a === "--db") {
-      out.dbPath = argv[++i];
-      continue;
-    }
-    if (a === "--refresh") {
-      out.refreshSeconds = Number.parseInt(argv[++i], 10);
-      continue;
-    }
-    if (a === "--no-open") {
-      out.openBrowser = false;
-      continue;
-    }
-    if (a && a.startsWith("--")) throw new Error(`unknown flag: ${a}`);
-  }
-  return out;
-}
-function renderIndex(refreshSeconds) {
-  const refresh = Math.max(1, refreshSeconds | 0);
-  return `<!doctype html>
-<html lang="en">
-<head>
-<meta charset="utf-8" />
-<title>blindseal dashboard</title>
-<meta name="viewport" content="width=device-width,initial-scale=1" />
-<style>
-:root { color-scheme: dark; }
-* { box-sizing: border-box; }
-body {
-  background: #0a0e0a;
-  color: #d1f5d1;
-  font-family: ui-monospace, SFMono-Regular, Menlo, monospace;
-  margin: 0; padding: 24px;
-  font-size: 13px; line-height: 1.5;
-}
-h1, h2 { font-weight: 600; color: #5fdc7c; margin: 0 0 12px; }
-h1 { font-size: 18px; }
-h2 { font-size: 14px; margin-top: 24px; }
-header { display: flex; justify-content: space-between; align-items: baseline; margin-bottom: 20px; border-bottom: 1px solid #1a2a1a; padding-bottom: 12px; }
-header .status { font-size: 12px; color: #4a7a4a; }
-.grid { display: grid; grid-template-columns: repeat(3, 1fr); gap: 16px; margin-bottom: 24px; }
-.card { background: #0f150f; border: 1px solid #1a2a1a; border-radius: 4px; padding: 16px; }
-.card .label { font-size: 11px; color: #4a7a4a; text-transform: uppercase; letter-spacing: 0.05em; margin-bottom: 6px; }
-.card .value { font-size: 24px; font-weight: 600; }
-.value.malicious { color: #ff6b6b; }
-.value.suspicious { color: #ffce5c; }
-.value.clean { color: #5fdc7c; }
-table { width: 100%; border-collapse: collapse; }
-th, td { text-align: left; padding: 6px 8px; border-bottom: 1px solid #1a2a1a; }
-th { font-weight: 600; color: #5fdc7c; font-size: 11px; text-transform: uppercase; letter-spacing: 0.05em; }
-tr:hover td { background: #0f150f; }
-.verdict { padding: 2px 6px; border-radius: 2px; font-size: 11px; font-weight: 600; }
-.verdict.malicious { background: rgba(255, 107, 107, 0.15); color: #ff6b6b; }
-.verdict.suspicious { background: rgba(255, 206, 92, 0.15); color: #ffce5c; }
-.verdict.clean { background: rgba(95, 220, 124, 0.15); color: #5fdc7c; }
-.tool { color: #87c5ee; }
-.preview { color: #6a8a6a; font-size: 11px; max-width: 600px; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
-svg { display: block; }
-.bar-clean { fill: #5fdc7c; }
-.bar-suspicious { fill: #ffce5c; }
-.bar-malicious { fill: #ff6b6b; }
-.day-label { fill: #4a7a4a; font-size: 10px; font-family: inherit; }
-footer { margin-top: 32px; padding-top: 12px; border-top: 1px solid #1a2a1a; font-size: 11px; color: #4a7a4a; }
-.empty { padding: 24px; text-align: center; color: #4a7a4a; }
-</style>
-</head>
-<body>
-<header>
-  <h1>blindseal dashboard</h1>
-  <div class="status">auto-refresh: ${refresh}s \xB7 <span id="last-update">\u2014</span></div>
-</header>
-<div id="root"><div class="empty">loading\u2026</div></div>
-<footer>
-  Blindseal is a local prompt-injection scanning proxy. Scans here came from your local DB.
-  Nothing on this page leaves your machine.
-</footer>
-<script>
-const REFRESH_MS = ${refresh * 1e3};
-const verdictClass = (v) => v === 'malicious' ? 'malicious' : v === 'suspicious' ? 'suspicious' : 'clean';
-function fmtAge(ts) {
-  const s = Math.floor((Date.now() - ts) / 1000);
-  if (s < 60) return s + 's ago';
-  if (s < 3600) return Math.floor(s/60) + 'm ago';
-  if (s < 86400) return Math.floor(s/3600) + 'h ago';
-  return Math.floor(s/86400) + 'd ago';
-}
-function el(tag, attrs = {}, ...children) {
-  const e = document.createElement(tag);
-  for (const [k, v] of Object.entries(attrs)) {
-    if (k === 'class') e.className = v;
-    else if (k.startsWith('on')) e.addEventListener(k.slice(2), v);
-    else e.setAttribute(k, v);
-  }
-  for (const c of children) e.append(c instanceof Node ? c : document.createTextNode(String(c)));
-  return e;
-}
-function renderBars(byDay) {
-  const w = 600, h = 120, gap = 4;
-  if (byDay.length === 0) return el('div', { class: 'empty' }, 'no scans in window');
-  const barW = Math.max(8, (w - gap * (byDay.length - 1)) / byDay.length);
-  const max = Math.max(1, ...byDay.map((d) => d.clean + d.suspicious + d.malicious));
-  const svg = document.createElementNS('http://www.w3.org/2000/svg', 'svg');
-  svg.setAttribute('width', w); svg.setAttribute('height', h + 20);
-  byDay.forEach((d, i) => {
-    const x = i * (barW + gap);
-    let y = h;
-    for (const [cls, n] of [['clean', d.clean], ['suspicious', d.suspicious], ['malicious', d.malicious]]) {
-      if (n <= 0) continue;
-      const segH = (n / max) * (h - 4);
-      y -= segH;
-      const r = document.createElementNS('http://www.w3.org/2000/svg', 'rect');
-      r.setAttribute('x', x); r.setAttribute('y', y);
-      r.setAttribute('width', barW); r.setAttribute('height', segH);
-      r.setAttribute('class', 'bar-' + cls);
-      svg.appendChild(r);
-    }
-    if (i % Math.max(1, Math.floor(byDay.length / 6)) === 0) {
-      const t = document.createElementNS('http://www.w3.org/2000/svg', 'text');
-      t.setAttribute('x', x + barW / 2); t.setAttribute('y', h + 14);
-      t.setAttribute('text-anchor', 'middle'); t.setAttribute('class', 'day-label');
-      t.textContent = d.day.slice(5); // MM-DD
-      svg.appendChild(t);
-    }
-  });
-  return svg;
-}
-function render(data) {
-  const root = document.getElementById('root');
-  root.replaceChildren();
-  const v = data.summary;
-  const grid = el('div', { class: 'grid' },
-    el('div', { class: 'card' },
-      el('div', { class: 'label' }, 'malicious'),
-      el('div', { class: 'value malicious' }, v.malicious),
-    ),
-    el('div', { class: 'card' },
-      el('div', { class: 'label' }, 'suspicious'),
-      el('div', { class: 'value suspicious' }, v.suspicious),
-    ),
-    el('div', { class: 'card' },
-      el('div', { class: 'label' }, 'clean'),
-      el('div', { class: 'value clean' }, v.clean),
-    ),
-  );
-  root.append(grid);
-  root.append(el('h2', {}, 'scans by day (last 30)'));
-  root.append(renderBars(data.byDay));
-  root.append(el('h2', {}, 'top tools'));
-  if (data.topTools.length === 0) root.append(el('div', { class: 'empty' }, 'no scans yet'));
-  else {
-    const t = el('table', {});
-    const thead = el('thead', {}, el('tr', {}, el('th', {}, 'tool'), el('th', {}, 'total'), el('th', {}, 'malicious')));
-    const tbody = el('tbody', {}, ...data.topTools.map((r) =>
-      el('tr', {},
-        el('td', { class: 'tool' }, r.toolName),
-        el('td', {}, String(r.total)),
-        el('td', {}, String(r.malicious)),
-      )
-    ));
-    t.append(thead, tbody);
-    root.append(t);
-  }
-  root.append(el('h2', {}, 'recent scans (50)'));
-  if (data.recent.length === 0) root.append(el('div', { class: 'empty' }, 'no scans'));
-  else {
-    const t = el('table', {});
-    const thead = el('thead', {}, el('tr', {},
-      el('th', {}, 'when'), el('th', {}, 'verdict'), el('th', {}, 'tool'),
-      el('th', {}, 'layer'), el('th', {}, 'conf'), el('th', {}, 'preview'),
-    ));
-    const tbody = el('tbody', {}, ...data.recent.map((r) =>
-      el('tr', {},
-        el('td', {}, fmtAge(r.ts)),
-        el('td', {}, el('span', { class: 'verdict ' + verdictClass(r.verdict) }, r.verdict)),
-        el('td', { class: 'tool' }, r.toolName),
-        el('td', {}, r.layer == null ? '\u2014' : 'L' + r.layer),
-        el('td', {}, r.confidence.toFixed(2)),
-        el('td', { class: 'preview' }, (r.contentPreview || '').replace(/\\n+/g, ' ')),
-      )
-    ));
-    t.append(thead, tbody);
-    root.append(t);
-  }
-  document.getElementById('last-update').textContent = new Date().toLocaleTimeString();
-}
-async function tick() {
-  try {
-    const r = await fetch('/api/data');
-    const data = await r.json();
-    render(data);
-  } catch (e) {
-    document.getElementById('root').textContent = 'failed to load: ' + e.message;
-  }
-}
-tick();
-setInterval(tick, REFRESH_MS);
-</script>
-</body>
-</html>`;
-}
-function buildDashboardData(store) {
-  const summary = store.countByVerdict();
-  const total = store.total();
-  return {
-    summary: { ...summary, total, dbPath: store.dbPath ?? "" },
-    byDay: store.countByDay(30),
-    topTools: store.topTools(10),
-    recent: store.list({ limit: 50 }).map((r) => ({
-      ts: r.ts,
-      verdict: r.verdict,
-      toolName: r.toolName,
-      layer: r.layer,
-      confidence: r.confidence,
-      contentPreview: r.contentPreview,
-      serverKey: r.serverKey
-    }))
-  };
-}
-function makeDashboardHandler(store, refreshSeconds) {
-  return (req, res) => {
-    const url = req.url ?? "/";
-    if (req.method !== "GET") {
-      res.writeHead(405, { "Content-Type": "text/plain" });
-      res.end("method not allowed");
-      return;
-    }
-    if (url === "/" || url === "/index.html") {
-      const body = renderIndex(refreshSeconds);
-      res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-      res.end(body);
-      return;
-    }
-    if (url === "/api/data" || url.startsWith("/api/data?")) {
-      const data = buildDashboardData(store);
-      const body = JSON.stringify(data);
-      res.writeHead(200, { "Content-Type": "application/json" });
-      res.end(body);
-      return;
-    }
-    if (url === "/health") {
-      res.writeHead(200, { "Content-Type": "application/json" });
-      res.end(JSON.stringify({ ok: true, dbPath: store.dbPath }));
-      return;
-    }
-    res.writeHead(404, { "Content-Type": "text/plain" });
-    res.end("not found");
-  };
-}
-function runDashboardCli(argv) {
-  let parsed;
-  try {
-    parsed = parseDashboardArgs(argv);
-  } catch (err) {
-    process.stderr.write(`blindseal dashboard: ${err instanceof Error ? err.message : String(err)}
-`);
-    process.stderr.write(HELP2);
-    return 2;
-  }
-  if (parsed.help) {
-    process.stdout.write(HELP2);
-    return 0;
-  }
-  const dbPath = parsed.dbPath ?? process.env.BLINDSEAL_PERSIST_PATH ?? defaultDbPath();
-  if (!existsSync4(dbPath)) {
-    process.stderr.write(`blindseal dashboard: no scan database at ${dbPath}
-`);
-    process.stderr.write(`  Run blindseal with BLINDSEAL_PERSIST=1 first.
-`);
-    return 1;
-  }
-  const store = createScanStore({ enabled: true, dbPath, retentionDays: 0 });
-  if (!store.enabled) {
-    process.stderr.write(`blindseal dashboard: failed to open ${dbPath}
-`);
-    return 1;
-  }
-  const port = parsed.port ?? 9876;
-  const host = parsed.host ?? "127.0.0.1";
-  const refresh = parsed.refreshSeconds ?? 5;
-  const server = createServer3(makeDashboardHandler(store, refresh));
-  server.listen(port, host, () => {
-    const url = `http://${host}:${port}`;
-    process.stdout.write(`blindseal dashboard: ${url}
-`);
-    process.stdout.write(`  serving ${dbPath} (${store.total()} scans, refresh=${refresh}s)
-`);
-    process.stdout.write(`  Ctrl-C to stop
-`);
-  });
-  for (const sig of ["SIGINT", "SIGTERM"]) {
-    process.on(sig, () => {
-      server.close(() => {
-        try {
-          store.close();
-        } catch {
-        }
-        process.exit(0);
-      });
-    });
-  }
-  return 0;
-}
-
-// src/cli/run.ts
-import { existsSync as existsSync6 } from "fs";
-import path6 from "path";
-
-// src/api/mock-server.ts
-import { createServer as createServer4 } from "http";
-import { createHash as createHash4, randomBytes } from "crypto";
-import { readFileSync as readFileSync3, existsSync as existsSync5, mkdirSync as mkdirSync3, writeFileSync as writeFileSync2 } from "fs";
-import os2 from "os";
-import path5 from "path";
-
-// ../chain-reads/src/index.ts
-import { createHash as createHash3 } from "crypto";
-var VERIFY_PROGRAM_ID = "merZNYKpKwwX4CGgzvma3jPvLfrMTkZcb1cSXUKANcb";
-var PUBLIC_MAINNET_RPC = "https://api.mainnet-beta.solana.com";
-var warned = false;
-function rpcUrl() {
-  const u = process.env.BLINDSEAL_RPC_URL;
-  if (u === "off") return null;
-  if (u) return u;
-  if (!warned) {
-    warned = true;
-    process.stderr.write("blindseal: BLINDSEAL_RPC_URL unset \u2014 using the public mainnet RPC (rate-limited; ~100 req/10s per IP). Set your own endpoint for production.\n");
-  }
-  return PUBLIC_MAINNET_RPC;
-}
-async function rpc(method, params) {
-  const url = rpcUrl();
-  if (!url) throw new Error("rpc disabled (BLINDSEAL_RPC_URL=off)");
-  const res = await fetch(url, {
-    method: "POST",
-    headers: { "content-type": "application/json" },
-    body: JSON.stringify({ jsonrpc: "2.0", id: 1, method, params }),
-    signal: AbortSignal.timeout(1e4)
-  });
-  if (res.status === 429) throw new Error("rpc rate-limited (429) \u2014 set BLINDSEAL_RPC_URL");
-  const j = await res.json();
-  if (j.error) throw new Error(`rpc ${method}: ${j.error.message}`);
-  return j.result;
-}
-var disc = (name) => createHash3("sha256").update(`account:${name}`).digest().subarray(0, 8);
-var b58 = (bytes) => bs58encode(bytes);
-var ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
-function bs58encode(bytes) {
-  let zeros = 0;
-  while (zeros < bytes.length && bytes[zeros] === 0) zeros++;
-  const digits = [];
-  for (const byte of bytes) {
-    let carry = byte;
-    for (let j = 0; j < digits.length; j++) {
-      carry += digits[j] << 8;
-      digits[j] = carry % 58;
-      carry = carry / 58 | 0;
-    }
-    while (carry > 0) {
-      digits.push(carry % 58);
-      carry = carry / 58 | 0;
-    }
-  }
-  return "1".repeat(zeros) + digits.reverse().map((d) => ALPHABET[d]).join("");
-}
-function bs58decode(s) {
-  const bytes = [];
-  for (const ch of s) {
-    let carry = ALPHABET.indexOf(ch);
-    if (carry < 0) throw new Error("bad base58");
-    for (let j = 0; j < bytes.length; j++) {
-      carry += bytes[j] * 58;
-      bytes[j] = carry & 255;
-      carry >>= 8;
-    }
-    while (carry > 0) {
-      bytes.push(carry & 255);
-      carry >>= 8;
-    }
-  }
-  let zeros = 0;
-  while (zeros < s.length && s[zeros] === "1") zeros++;
-  return Uint8Array.from([...new Array(zeros).fill(0), ...bytes.reverse()]);
-}
-var P = (1n << 255n) - 19n;
-var D = 37095705934669439343138083508754565189542113879843219016388785533085940283555n;
-var SQRT_M1 = 19681161376707505956807079304988542015446066515923890162744021073123829784752n;
-function modPow(b, e, m) {
-  let r = 1n;
-  b %= m;
-  while (e > 0n) {
-    if (e & 1n) r = r * b % m;
-    b = b * b % m;
-    e >>= 1n;
-  }
-  return r;
-}
-function isOnCurve(pk) {
-  if (pk.length !== 32) return false;
-  let y = 0n;
-  for (let i = 31; i >= 0; i--) y = y << 8n | BigInt(pk[i]);
-  const sign = y >> 255n & 1n;
-  y &= (1n << 255n) - 1n;
-  if (y >= P) return false;
-  const y2 = y * y % P, u = (y2 - 1n + P) % P, v = (D * y2 + 1n) % P;
-  const v3 = v * v % P * v % P, v7 = v3 * v3 % P * v % P;
-  let x = u * v3 % P * modPow(u * v7 % P, (P - 5n) / 8n, P) % P;
-  const vx2 = v * (x * x % P) % P;
-  if (vx2 === u) {
-  } else if (vx2 === (P - u) % P) x = x * SQRT_M1 % P;
-  else return false;
-  if (x === 0n && sign === 1n) return false;
-  return true;
-}
-function findProgramAddress(seeds, programId) {
-  const prog = bs58decode(programId);
-  for (let bump = 255; bump >= 0; bump--) {
-    const h = createHash3("sha256");
-    for (const s of seeds) h.update(s);
-    h.update(Uint8Array.of(bump));
-    h.update(prog);
-    h.update("ProgramDerivedAddress");
-    const cand = h.digest();
-    if (!isOnCurve(cand)) return b58(cand);
-  }
-  throw new Error("no PDA bump");
-}
-async function getNullifierStatus(nullifierHex) {
-  const nf = Buffer.from(nullifierHex.replace(/^0x/, ""), "hex");
-  if (nf.length !== 32) throw new Error("nullifier must be 32 bytes");
-  const pda = findProgramAddress([Buffer.from("nullifier"), nf], VERIFY_PROGRAM_ID);
-  const r = await rpc("getAccountInfo", [pda, { encoding: "base64", commitment: "confirmed" }]);
-  const base = { nullifier: nullifierHex, consumed: false, pda, cluster: "mainnet-beta", rpc: process.env.BLINDSEAL_RPC_URL ? "configured" : "public" };
-  if (!r.value) return base;
-  const data = Buffer.from(r.value.data[0], "base64");
-  if (data.length < 81 || !data.subarray(0, 8).equals(disc("Nullifier"))) return base;
-  return {
-    ...base,
-    consumed: true,
-    consumedAtSlot: Number(data.readBigUInt64LE(8)),
-    consumerProgram: b58(data.subarray(16, 48)),
-    actionHash: "0x" + data.subarray(48, 80).toString("hex")
-  };
-}
-
-// src/api/mock-server.ts
-import { createPrivateKey, createPublicKey } from "crypto";
-var MOCK_IDENTITY_PKCS8 = "302e020100300506032b657004220420b6c6aa0182de5f17678ed27e9515ed56b438c6bec2ca9d27d653feec4d13da1c";
-var MOCK_PRIVATE_KEY = createPrivateKey({ key: Buffer.from(MOCK_IDENTITY_PKCS8, "hex"), format: "der", type: "pkcs8" });
-var MOCK_PUBKEY_HEX = createPublicKey(MOCK_PRIVATE_KEY).export({ type: "spki", format: "der" }).toString("hex");
-var MIME = {
-  ".html": "text/html; charset=utf-8",
-  ".js": "text/javascript; charset=utf-8",
-  ".css": "text/css; charset=utf-8",
-  ".wasm": "application/wasm",
-  ".json": "application/json",
-  ".svg": "image/svg+xml",
-  ".png": "image/png",
-  ".woff2": "font/woff2",
-  ".woff": "font/woff",
-  ".ico": "image/x-icon",
-  ".map": "application/json",
-  ".txt": "text/plain"
-};
-var DASHBOARD_CSP = [
-  "default-src 'self'",
-  "script-src 'self' 'wasm-unsafe-eval'",
-  "style-src 'self' 'unsafe-inline'",
-  "img-src 'self' data:",
-  "font-src 'self'",
-  "connect-src 'self' ws://127.0.0.1:* ws://localhost:* http://127.0.0.1:* http://localhost:*",
-  "object-src 'none'",
-  "base-uri 'self'",
-  "frame-ancestors 'none'"
-].join("; ");
-function serveDashboard(res, dist, pathname) {
-  const rel = pathname === "/" ? "/index.html" : decodeURIComponent(pathname);
-  let file = path5.normalize(path5.join(dist, rel));
-  if (!file.startsWith(path5.normalize(dist + path5.sep)) && file !== path5.normalize(dist)) return false;
-  if (!existsSync5(file)) file = path5.join(dist, "index.html");
-  if (!existsSync5(file)) return false;
-  const body = readFileSync3(file);
-  const type = MIME[path5.extname(file).toLowerCase()] ?? "application/octet-stream";
-  res.writeHead(200, {
-    "content-type": type,
-    "content-length": body.length,
-    "content-security-policy": DASHBOARD_CSP,
-    "x-content-type-options": "nosniff",
-    "referrer-policy": "no-referrer",
-    "cache-control": file.endsWith("index.html") ? "no-cache" : "public, max-age=31536000, immutable"
-  });
-  res.end(body);
-  return true;
-}
-function loadFixtures(dir) {
-  const read = (f) => JSON.parse(readFileSync3(path5.join(dir, f), "utf8"));
-  return {
-    decisions: read("decisions.json"),
-    policy: read("policy.json"),
-    audit: read("audit.json"),
-    attestations: read("attestations.json"),
-    sample: read("attestation-sample.json")
-  };
-}
-function resolveToken(explicit) {
-  if (explicit) return explicit;
-  const dir = path5.join(os2.homedir(), ".blindseal");
-  const file = path5.join(dir, "dashboard.token");
-  try {
-    if (existsSync5(file)) return readFileSync3(file, "utf8").trim();
-    mkdirSync3(dir, { recursive: true });
-    const tok = randomBytes(24).toString("base64url");
-    writeFileSync2(file, tok + "\n", { mode: 384 });
-    return tok;
-  } catch {
-    return randomBytes(24).toString("base64url");
-  }
-}
-var sha = (s) => "0x" + createHash4("sha256").update(s).digest("hex");
-function sendJson3(res, status, body) {
-  const buf = Buffer.from(JSON.stringify(body));
-  res.writeHead(status, { "content-type": "application/json", "content-length": buf.length });
-  res.end(buf);
-}
-function sendErr(res, status, code, message) {
-  sendJson3(res, status, { error: { code, message } });
-}
-function bearerOk(req, token, url) {
-  const auth = req.headers["authorization"];
-  if (typeof auth === "string" && auth === `Bearer ${token}`) return true;
-  if (url.searchParams.get("token") === token) return true;
-  return false;
-}
-async function readBody3(req) {
-  const chunks = [];
-  for await (const c of req) chunks.push(c);
-  if (chunks.length === 0) return {};
-  try {
-    return JSON.parse(Buffer.concat(chunks).toString("utf8"));
-  } catch {
-    return void 0;
-  }
-}
-var WS_GUID = "258EAFA5-E914-47DA-95CA-C5AB0DC85B11";
-function wsAccept(key) {
-  return createHash4("sha1").update(key + WS_GUID).digest("base64");
-}
-function wsFrame(text) {
-  const payload = Buffer.from(text);
-  const len = payload.length;
-  let header;
-  if (len < 126) {
-    header = Buffer.from([129, len]);
-  } else if (len < 65536) {
-    header = Buffer.from([129, 126, len >> 8 & 255, len & 255]);
-  } else {
-    header = Buffer.alloc(10);
-    header[0] = 129;
-    header[1] = 127;
-    header.writeBigUInt64BE(BigInt(len), 2);
-  }
-  return Buffer.concat([header, payload]);
-}
-function startMockApi(opts) {
-  const port = opts.port ?? 7777;
-  const host = opts.host ?? "127.0.0.1";
-  const token = resolveToken(opts.token);
-  const emitIntervalMs = opts.emitIntervalMs ?? 3e3;
-  const fx = loadFixtures(opts.fixturesDir);
-  const startedAt = Date.now();
-  const envState = process.env.BLINDSEAL_MOCK_STATE ?? "";
-  const stateOf = (url) => url.searchParams.get("state") ?? envState;
-  const TEE_QUOTE = { quote: sha("mock-tee-quote").slice(2), quoteHash: sha("mock-tee-quote-hash") };
-  const status = (st) => ({
-    version: "0.0.0-mock",
-    uptimeSec: Math.floor((Date.now() - startedAt) / 1e3),
-    connection: st === "offline" ? "offline" : st === "reconnecting" ? "reconnecting" : "live",
-    upstreams: [{ name: "mock-upstream", transport: "stdio", healthy: st !== "upstream-down" }],
-    policyRoot: fx.policy.root,
-    detectorVersion: fx.decisions[0]?.detectorVersion ?? "0x",
-    audit: st === "empty" ? { index: -1, hash: fx.audit.genesis, ts: new Date(startedAt).toISOString() } : fx.audit.head,
-    prover: { available: st === "prover-down" ? false : true },
-    l3: { mode: st === "tee" ? "tee" : "local" },
-    mock: true
-  });
-  const wsClients = /* @__PURE__ */ new Set();
-  const broadcast = (obj) => {
-    const frame = wsFrame(JSON.stringify(obj));
-    for (const s of wsClients) {
-      if (!s.destroyed) s.write(frame);
-    }
-  };
-  const createdAttestations = /* @__PURE__ */ new Map();
-  const liveDecisions = /* @__PURE__ */ new Map();
-  const server = createServer4(async (req, res) => {
-    const url = new URL(req.url ?? "/", `http://${host}:${port}`);
-    const p = url.pathname;
-    const method = req.method ?? "GET";
-    const origin = req.headers["origin"];
-    if (typeof origin === "string" && /^https?:\/\/(localhost|127\.0\.0\.1)(:\d+)?$/.test(origin)) {
-      res.setHeader("Access-Control-Allow-Origin", origin);
-      res.setHeader("Access-Control-Allow-Headers", "authorization, content-type, x-confirm");
-      res.setHeader("Access-Control-Allow-Methods", "GET, POST, PUT, OPTIONS");
-      res.setHeader("Vary", "Origin");
-    }
-    if (method === "OPTIONS") {
-      res.writeHead(204);
-      return res.end();
-    }
-    if (!p.startsWith("/api/")) {
-      if (opts.dashboardDist && method === "GET" && serveDashboard(res, opts.dashboardDist, p)) return;
-      return sendErr(res, 404, "NOT_FOUND", "unknown path");
-    }
-    if (!bearerOk(req, token, url)) return sendErr(res, 401, "UNAUTHORIZED", "missing or invalid bearer token");
-    const seg = p.slice("/api/".length).split("/").filter(Boolean);
-    const st = stateOf(url);
-    if (st === "unauthorized") return sendErr(res, 401, "UNAUTHORIZED", "missing or invalid dashboard token");
-    if (st === "offline" && !(seg[0] === "status")) return sendErr(res, 503, "OFFLINE", "the proxy is unreachable");
-    try {
-      if (method === "GET" && seg[0] === "status" && seg.length === 1) return sendJson3(res, 200, status(st));
-      if (method === "GET" && seg[0] === "decisions" && seg.length === 1) {
-        const q = url.searchParams;
-        let items = st === "empty" ? [] : fx.decisions.slice();
-        const vd = q.get("verdict");
-        if (vd) items = items.filter((d) => d.verdict === vd);
-        const sv = q.get("server");
-        if (sv) items = items.filter((d) => d.server === sv);
-        const tl = q.get("tool");
-        if (tl) items = items.filter((d) => d.tool === tl);
-        const from = q.get("from");
-        if (from) items = items.filter((d) => d.ts >= from);
-        const to = q.get("to");
-        if (to) items = items.filter((d) => d.ts <= to);
-        const limit = Math.min(Math.max(Number.parseInt(q.get("limit") ?? "50", 10) || 50, 1), 200);
-        const cursor = Number.parseInt(q.get("cursor") ?? "0", 10) || 0;
-        const page = items.slice(cursor, cursor + limit);
-        const nextCursor = cursor + limit < items.length ? String(cursor + limit) : void 0;
-        return sendJson3(res, 200, { items: page, ...nextCursor ? { nextCursor } : {} });
-      }
-      if (seg[0] === "decisions" && seg.length >= 2) {
-        const d = fx.decisions.find((x) => x.id === seg[1]) ?? liveDecisions.get(seg[1]);
-        if (!d) return sendErr(res, 404, "NOT_FOUND", "decision not found");
-        if (method === "GET" && seg.length === 2) {
-          return sendJson3(res, 200, { ...d, payloadRedacted: `[mock redacted payload for ${d.id}]` });
-        }
-        if (method === "POST" && seg[2] === "reveal" && seg.length === 3) {
-          if (req.headers["x-confirm"] !== "reveal") return sendErr(res, 400, "VALIDATION", "X-Confirm: reveal required");
-          return sendJson3(res, 200, { payload: `[mock raw payload for ${d.id} \u2014 synthetic]` });
-        }
-      }
-      if (seg[0] === "audit") {
-        if (method === "GET" && seg[1] === "head") {
-          if (st === "empty") return sendJson3(res, 200, { index: -1, hash: fx.audit.genesis, ts: new Date(startedAt).toISOString() });
-          return sendJson3(res, 200, fx.audit.head);
-        }
-        if (method === "GET" && seg[1] === "entries") {
-          if (st === "empty") return sendJson3(res, 200, []);
-          const from = Number.parseInt(url.searchParams.get("from") ?? "0", 10) || 0;
-          const to = Number.parseInt(url.searchParams.get("to") ?? String(fx.audit.head.index), 10);
-          return sendJson3(res, 200, fx.audit.entries.filter((e) => e.index >= from && e.index <= to));
-        }
-        if (method === "POST" && seg[1] === "verify") {
-          if (st === "chain-broken") return sendJson3(res, 200, { ok: false, checkedFrom: 0, checkedTo: fx.audit.head.index, brokenAt: 143 });
-          let prev = fx.audit.genesis;
-          let brokenAt;
-          for (const e of fx.audit.entries) {
-            const h = hashEntry({ index: e.index, ts: e.ts, decisionId: e.decisionId, verdict: e.verdict, payloadHash: e.payloadHash, prevHash: prev });
-            if (h !== e.hash || e.prevHash !== prev) {
-              brokenAt = e.index;
-              break;
-            }
-            prev = e.hash;
-          }
-          return sendJson3(res, 200, {
-            ok: brokenAt === void 0,
-            checkedFrom: 0,
-            checkedTo: fx.audit.head.index,
-            ...brokenAt !== void 0 ? { brokenAt } : {}
-          });
-        }
-        if (method === "POST" && seg[1] === "disclose") {
-          const body = await readBody3(req);
-          if (!body || typeof body.from !== "number" || typeof body.to !== "number") return sendErr(res, 400, "VALIDATION", "from/to required");
-          if (st === "chain-broken" && body.from <= 143 && body.to >= 143)
-            return sendErr(res, 409, "CHAIN_BROKEN", "the chain is broken at #143; cannot disclose a range over it");
-          const entries = fx.audit.entries.filter((e) => e.index >= body.from && e.index <= body.to);
-          return sendJson3(res, 200, discloseBundle({
-            from: body.from,
-            to: body.to,
-            head: fx.audit.head,
-            entries,
-            privateKey: MOCK_PRIVATE_KEY,
-            pubkeyHex: MOCK_PUBKEY_HEX
-          }));
-        }
-      }
-      if (seg[0] === "policy") {
-        if (method === "GET" && seg.length === 1) return sendJson3(res, 200, fx.policy);
-        if (method === "PUT" && seg.length === 1) {
-          const body = await readBody3(req);
-          if (!body || !Array.isArray(body.rules)) return sendErr(res, 400, "VALIDATION", "rules[] required");
-          const root = sha("policy:" + JSON.stringify(body.rules));
-          return sendJson3(res, 200, { ...fx.policy, rules: body.rules, root, version: (fx.policy.version ?? 1) + 1, updatedAt: (/* @__PURE__ */ new Date()).toISOString() });
-        }
-        if (method === "POST" && seg[1] === "dry-run") {
-          const body = await readBody3(req);
-          if (body === void 0) return sendErr(res, 400, "VALIDATION", "invalid JSON body");
-          const d = { ...fx.decisions[0], id: "dryrun_" + Date.now(), ts: (/* @__PURE__ */ new Date()).toISOString() };
-          return sendJson3(res, 200, d);
-        }
-      }
-      if (seg[0] === "attestations") {
-        if (method === "GET" && seg.length === 1) {
-          if (st === "empty") return sendJson3(res, 200, []);
-          const statusFilter = url.searchParams.get("status");
-          const items = statusFilter ? fx.attestations.filter((a) => a.status === statusFilter) : fx.attestations;
-          return sendJson3(res, 200, items);
-        }
-        if (method === "POST" && seg.length === 1) {
-          if (st === "prover-down") return sendErr(res, 503, "PROVER_UNAVAILABLE", "the local prover is not running");
-          const body = await readBody3(req);
-          if (!body || typeof body.decisionId !== "string") return sendErr(res, 400, "VALIDATION", "decisionId required");
-          const d = fx.decisions.find((x) => x.id === body.decisionId);
-          if (!d) return sendErr(res, 404, "NOT_FOUND", "decision not found");
-          if (!d.action) return sendErr(res, 422, "NO_ACTION_FIELDS", "decision has no on-chain action to attest");
-          const id = "att_" + randomBytes(5).toString("hex");
-          createdAttestations.set(id, {
-            ...fx.sample,
-            id,
-            decisionId: d.id,
-            status: "generating",
-            progressPct: 50,
-            createdAt: (/* @__PURE__ */ new Date()).toISOString()
-          });
-          setTimeout(() => broadcast({ type: "attestation", data: { id, status: "generating", progressPct: 50 } }), 50);
-          setTimeout(() => {
-            const a = createdAttestations.get(id);
-            if (a) {
-              a.status = "generated";
-              a.progressPct = 100;
-            }
-            broadcast({ type: "attestation", data: { id, status: "generated", progressPct: 100 } });
-          }, 150);
-          return sendJson3(res, 202, { id });
-        }
-        if (seg.length >= 2) {
-          const a = fx.attestations.find((x) => x.id === seg[1]) ?? createdAttestations.get(seg[1]) ?? (seg[1] === "sample" ? fx.sample : void 0);
-          if (method === "GET" && seg.length === 2) {
-            if (!a) return sendErr(res, 404, "NOT_FOUND", "attestation not found");
-            return sendJson3(res, 200, a);
-          }
-          if (method === "POST" && seg[2] === "submit") {
-            const body = await readBody3(req);
-            if (!body || body.cluster !== "mainnet-beta") return sendErr(res, 400, "VALIDATION", "cluster must be mainnet-beta");
-            return sendJson3(res, 200, { txSig: sha("mock-txsig:" + seg[1]).slice(2, 90) });
-          }
-          if (method === "GET" && seg[2] === "export") {
-            if (!a) return sendErr(res, 404, "NOT_FOUND", "attestation not found");
-            const buf = Buffer.from(JSON.stringify(a, null, 2));
-            res.writeHead(200, { "content-type": "application/json", "content-disposition": `attachment; filename="attestation-${seg[1]}.json"`, "content-length": buf.length });
-            return res.end(buf);
-          }
-        }
-      }
-      if (method === "GET" && seg[0] === "tee" && seg[1] === "quote") {
-        if (st === "tee") return sendJson3(res, 200, { mode: "tee", quote: TEE_QUOTE.quote, quoteHash: TEE_QUOTE.quoteHash });
-        return sendJson3(res, 200, { mode: "local" });
-      }
-      if (seg[0] === "nullifiers" && seg[1] && method === "GET") {
-        try {
-          return sendJson3(res, 200, await getNullifierStatus(seg[1]));
-        } catch (e) {
-          return sendErr(res, 502, "RPC_UNAVAILABLE", e instanceof Error ? e.message : String(e));
-        }
-      }
-      return sendErr(res, 404, "NOT_FOUND", `no route for ${method} ${p}`);
-    } catch (e) {
-      return sendErr(res, 500, "VALIDATION", e.message);
-    }
-  });
-  server.on("upgrade", (req, socket) => {
-    const url = new URL(req.url ?? "/", `http://${host}:${port}`);
-    const isEvents = url.pathname === "/api/events" || url.pathname === "/events";
-    if (!isEvents || !bearerOk(req, token, url)) {
-      socket.write("HTTP/1.1 401 Unauthorized\r\n\r\n");
-      socket.destroy();
-      return;
-    }
-    const key = req.headers["sec-websocket-key"];
-    if (typeof key !== "string") {
-      socket.destroy();
-      return;
-    }
-    socket.write(
-      `HTTP/1.1 101 Switching Protocols\r
-Upgrade: websocket\r
-Connection: Upgrade\r
-Sec-WebSocket-Accept: ${wsAccept(key)}\r
-\r
-`
-    );
-    wsClients.add(socket);
-    socket.write(wsFrame(JSON.stringify({ type: "status", data: status(envState) })));
-    socket.on("close", () => wsClients.delete(socket));
-    socket.on("error", () => wsClients.delete(socket));
-  });
-  let idx = 0;
-  const timer = setInterval(() => {
-    if (wsClients.size === 0) return;
-    const base = fx.decisions[idx % fx.decisions.length];
-    idx++;
-    const live = { ...base, id: base.id + "_live" + idx, ts: (/* @__PURE__ */ new Date()).toISOString() };
-    liveDecisions.set(live.id, live);
-    if (liveDecisions.size > 100) liveDecisions.delete(liveDecisions.keys().next().value);
-    broadcast({ type: "decision", data: live });
-  }, emitIntervalMs);
-  timer.unref?.();
-  return new Promise((resolve) => {
-    server.listen(port, host, () => {
-      const addr = server.address();
-      const actualPort = typeof addr === "object" && addr ? addr.port : port;
-      resolve({
-        url: `http://${host}:${actualPort}/api`,
-        token,
-        port: actualPort,
-        close: () => new Promise((r) => {
-          clearInterval(timer);
-          for (const s of wsClients) s.destroy();
-          wsClients.clear();
-          server.close(() => r());
-        })
-      });
-    });
-  });
-}
-
-// src/cli/run.ts
-var HELP3 = `blindseal run \u2014 start the local API + WS (FRONTEND.md \xA75)
-
-Usage:
-  BLINDSEAL_MOCK=1 blindseal run [--mock] [flags]
-
-Flags
-  --mock              serve fixtures/ with a fake event stream (M0)
-  --port <n>          listen port (default 7777)
-  --host <addr>       listen host (default 127.0.0.1)
-  --fixtures <dir>    fixtures directory (default: nearest fixtures/)
-  --dashboard <dir>   serve the built dashboard at / (default: $BLINDSEAL_DASHBOARD_DIST or
-                      packages/dashboard/dist next to fixtures/, if built)
-  --help, -h          this help
-
-M0 supports --mock only. The engine-backed API lands in M1.
-`;
-function parseRunArgs(argv) {
-  const out = { mock: process.env.BLINDSEAL_MOCK === "1" };
-  for (let i = 0; i < argv.length; i++) {
-    const a = argv[i];
-    if (a === "--help" || a === "-h") out.help = true;
-    else if (a === "--mock") out.mock = true;
-    else if (a === "--port") out.port = Number.parseInt(argv[++i] ?? "", 10);
-    else if (a === "--host") out.host = argv[++i];
-    else if (a === "--fixtures") out.fixturesDir = argv[++i];
-    else if (a === "--dashboard") out.dashboard = argv[++i];
-    else if (a && a.startsWith("--")) throw new Error(`unknown flag: ${a}`);
-  }
-  return out;
-}
-function resolveFixturesDir(explicit) {
-  if (explicit) return explicit;
-  if (process.env.BLINDSEAL_FIXTURES) return process.env.BLINDSEAL_FIXTURES;
-  let dir = process.cwd();
-  for (let i = 0; i < 7; i++) {
-    const candidate = path6.join(dir, "fixtures");
-    if (existsSync6(path6.join(candidate, "decisions.json"))) return candidate;
-    const parent = path6.dirname(dir);
-    if (parent === dir) break;
-    dir = parent;
-  }
-  throw new Error("fixtures/ not found; pass --fixtures <dir> or set BLINDSEAL_FIXTURES");
-}
-async function runRun(argv) {
-  let opts;
-  try {
-    opts = parseRunArgs(argv);
-  } catch (e) {
-    process.stderr.write(`blindseal run: ${e.message}
-`);
-    return 1;
-  }
-  if (opts.help) {
-    process.stdout.write(HELP3);
-    return 0;
-  }
-  if (!opts.mock) {
-    process.stderr.write(
-      "blindseal run: the engine-backed API is not built yet (M1).\nFor now: BLINDSEAL_MOCK=1 blindseal run --mock\n"
-    );
-    return 1;
-  }
-  const fixturesDir = resolveFixturesDir(opts.fixturesDir);
-  const autoDist = path6.join(path6.dirname(fixturesDir), "packages", "dashboard", "dist");
-  const dashboardDist = opts.dashboard ?? process.env.BLINDSEAL_DASHBOARD_DIST ?? (existsSync6(path6.join(autoDist, "index.html")) ? autoDist : void 0);
-  const handle = await startMockApi({ port: opts.port, host: opts.host, fixturesDir, dashboardDist });
-  process.stdout.write(
-    `blindseal (MOCK): local API on ${handle.url}
-  token: ${handle.token}
-` + (dashboardDist ? `  dashboard: ${handle.url}/#token=${handle.token}  (served from ${dashboardDist}; application/wasm + CSP)
-` : `  dashboard: not served (build packages/dashboard or pass --dashboard <dist>); open the dev app with #token=${handle.token}
-`) + `  fixtures: ${fixturesDir}
-  WS: ${handle.url.replace(/^http/, "ws")}/events?token=${handle.token}
-Ctrl-C to stop.
-`
-  );
-  return new Promise((resolve) => {
-    const shutdown = () => {
-      void handle.close().then(() => resolve(0));
-    };
-    process.on("SIGINT", shutdown);
-    process.on("SIGTERM", shutdown);
-  });
-}
-
 // src/index.ts
-function readVersion2() {
-  try {
-    const here = path7.dirname(fileURLToPath2(import.meta.url));
-    for (const rel of ["../package.json", "../../package.json"]) {
-      const p = path7.resolve(here, rel);
-      try {
-        const pkg = JSON.parse(readFileSync4(p, "utf8"));
-        if (pkg.name && pkg.version) return String(pkg.version);
-      } catch {
-      }
-    }
-  } catch {
-  }
-  return "0.0.0";
-}
-var HELP4 = `blindseal \u2014 scans MCP tool responses for prompt injection
+var HELP2 = `blindseal \u2014 a local MCP proxy that screens every tool call, keeps a hash-chained audit
+log, and produces zero-knowledge attestations verifiable on Solana.
 
 Usage
-  npx blindseal demo                                         # interactive demo (30s first-run experience)
-  BLINDSEAL_MOCK=1 blindseal run --mock                                 # local API + WS over fixtures (FRONTEND.md \xA75)
-  npx blindseal -- <command> [args...]                      # stdio (wrap a local MCP server)
-  npx blindseal --transport http --upstream <url> [--port]  # http (proxy a remote MCP server)
-  npx blindseal history [flags]                              # show local scan history (requires BLINDSEAL_PERSIST=1)
-  npx blindseal dashboard [flags]                            # localhost dashboard for scan history
+  blindseal init                                    set up ~/.blindseal (identity key, default policy, dashboard token)
+  blindseal init --wrap [--yes --dry-run --config <path>]
+                                                    route the MCP servers in your Claude configs through blindseal
+  blindseal init --unwrap                           restore those configs from their backups
+  blindseal run --mock                              local API + dashboard over bundled sample data
+  blindseal dashboard                               open the dashboard (starts run --mock if nothing is listening)
+  blindseal -- <command> [args...]                  wrap a stdio MCP server
+  blindseal --transport http --upstream <url>       proxy a remote MCP server over HTTP
+  blindseal --transport scan-http [--port <n>]      stand-alone POST /scan endpoint
+  blindseal attest <toolcall.json> --target-program <id> [--out <file>] [--expiry <slot> | --no-expiry]
+  blindseal submit <attestation.json>               verify on Solana mainnet and consume the nullifier
+  blindseal verify <attestation.json | disclosure.json>
+  blindseal audit verify | disclose --from <i> --to <j>
+  blindseal history [flags]                         local scan history (needs BLINDSEAL_PERSIST=1)
+  blindseal demo                                    interactive detection demo
+  blindseal <command> --help                        help for any command
 
 Examples
-  npx blindseal -- npx -y @modelcontextprotocol/server-filesystem /tmp
-  npx blindseal --transport http --upstream https://mcp.example.com/v1 --port 8800
+  blindseal -- npx -y @modelcontextprotocol/server-filesystem /tmp
+  blindseal --transport http --upstream https://mcp.example.com/v1 --port 8800
 
-Flags
-  --transport <stdio|http|scan-http>  default: stdio
+Proxy flags
+  --transport <stdio|http|scan-http>  default: stdio (requires \`-- <command>\`)
   --upstream <url>                    required when --transport http
   --port, --listen-port <n>           default: 8800 (http) / 9787 (scan-http)
   --host <addr>                       default: 127.0.0.1
   --server-url <url>                  logical server identifier for scan-http (default: scan-http:blindseal)
-  --version, -v              print version
-  --help, -h                 this help
+  --version, -v                       print version
+  --help, -h                          this help
 
 Detection (env)
   BLINDSEAL_MODE                 block (default) | warn | log
@@ -2774,10 +1599,10 @@ Detection (env)
   BLINDSEAL_LAYER3_MODEL         model id override
   BLINDSEAL_LAYER3_BASE_URL      base URL override (ollama or custom endpoint)
   BLINDSEAL_LAYER3_TIMEOUT_MS    judge call hard timeout (default 15000)
-  BLINDSEAL_L3_FP_SAFE           1 = demote suspicious\u2192clean when L3 unavailable (old behaviour)
-  ANTHROPIC_API_KEY          BYO key for Layer 3 (Anthropic)  \u2190 strongly recommended
-  OPENAI_API_KEY             BYO key for Layer 3 (OpenAI / compat)
-  OLLAMA_HOST                Ollama base URL (default: http://localhost:11434); set to enable offline L3
+  BLINDSEAL_L3_FP_SAFE           1 = demote suspicious\u2192clean when L3 unavailable
+  ANTHROPIC_API_KEY              BYO key for Layer 3 (Anthropic)  \u2190 strongly recommended
+  OPENAI_API_KEY                 BYO key for Layer 3 (OpenAI / compat)
+  OLLAMA_HOST                    Ollama base URL (default: http://localhost:11434); set to enable offline L3
 
 Capability firewall (env, default off)
   BLINDSEAL_CAPABILITY                 1 to enable taint-tracking + gate
@@ -2790,38 +1615,25 @@ Manifest verification (env)
   BLINDSEAL_MANIFEST_CHECK             on (default) | off | strict
   BLINDSEAL_MANIFEST_CACHE_DIR         override $XDG_CACHE_HOME/blindseal/manifests
 
-Telemetry (env, default on when URL configured)
-  BLINDSEAL_TELEMETRY                  0 to disable
-  BLINDSEAL_TELEMETRY_URL              collector ingest URL
-  BLINDSEAL_TELEMETRY_SECRET           optional Bearer token
-  BLINDSEAL_TELEMETRY_BATCH            batch size (default 100)
-  BLINDSEAL_TELEMETRY_FLUSH_MS         flush interval (default 5000)
-  BLINDSEAL_TELEMETRY_INSTALL_ID       stable install id (hashed before send)
-
 Audit log (env, default off)
   BLINDSEAL_AUDIT_LOG                  path to append-only JSONL of every decision
 
-Local scan history (env, default off \u2014 opt in for visibility)
+Local scan history (env, default off)
   BLINDSEAL_PERSIST                    1 to record every scan to ~/.blindseal/scans.db
   BLINDSEAL_PERSIST_PATH               override DB path (default ~/.blindseal/scans.db)
   BLINDSEAL_RETENTION_DAYS             rolling retention (default 30, purged on open)
 
-On-chain attestation (env, default off)
-  BLINDSEAL_ATTEST                     1 to enable EAS attestations on Base
-  BLINDSEAL_BASE_RPC_URL               default: https://mainnet.base.org
-  BLINDSEAL_ATTESTER_PRIVATE_KEY       hot wallet (fund with ~0.05 ETH on Base)
-Privacy: see PRIVACY.md. SHA-256 hashes only \u2014 raw content never leaves the proxy.
+Chain + prover (env)
+  BLINDSEAL_RPC_URL                    Solana RPC (default: the public mainnet endpoint)
+  BLINDSEAL_PROVER                     path to a prover binary (otherwise ~/.blindseal/bin or a release download)
+  BLINDSEAL_DASHBOARD_DIST             override the dashboard directory served by \`blindseal run\`
+  BLINDSEAL_FIXTURES                   override the sample data directory for \`run --mock\`
+
+Nothing leaves this machine except the RPC calls you ask for (attest/submit/verify on chain).
 `;
+var SUBCOMMANDS = /* @__PURE__ */ new Set(["init", "run", "dashboard", "demo", "attest", "submit", "verify", "audit", "history"]);
+var PROXY_FLAGS = /* @__PURE__ */ new Set(["--", "--transport", "--upstream", "--port", "--listen-port", "--host", "--server-url"]);
 function parseArgs(argv) {
-  if (argv.length === 0) return { transport: "stdio", showHelp: true, noArgs: true };
-  if (argv.includes("--version") || argv.includes("-v")) {
-    process.stdout.write(`blindseal ${readVersion2()}
-`);
-    process.exit(0);
-  }
-  if (argv.includes("--help") || argv.includes("-h")) {
-    return { transport: "stdio", showHelp: true, noArgs: false };
-  }
   const sepIdx = argv.indexOf("--");
   const flagArgs = sepIdx >= 0 ? argv.slice(0, sepIdx) : argv;
   const afterSep = sepIdx >= 0 ? argv.slice(sepIdx + 1) : [];
@@ -2849,80 +1661,88 @@ function parseArgs(argv) {
       serverUrl = flagArgs[++i];
     } else if (a && a.startsWith("--")) {
       throw new Error(`unknown flag: ${a}`);
+    } else if (a) {
+      throw new Error(`unexpected argument "${a}" \u2014 to wrap an MCP server use: blindseal -- ${a} ...`);
     }
   }
   if (transport === "http") {
     if (!upstream) throw new Error("--transport http requires --upstream <url>");
-    return { transport, upstream, port: port ?? 8800, host: host ?? "127.0.0.1", showHelp: false, noArgs: false };
+    return { transport, upstream, port: port ?? 8800, host: host ?? "127.0.0.1" };
   }
   if (transport === "scan-http") {
-    return {
-      transport,
-      port: port ?? 9787,
-      host: host ?? "127.0.0.1",
-      serverUrl,
-      showHelp: false,
-      noArgs: false
-    };
+    return { transport, port: port ?? 9787, host: host ?? "127.0.0.1", serverUrl };
   }
-  const target = sepIdx >= 0 ? afterSep : flagArgs;
-  const cmd = target[0];
-  const args = target.slice(1);
-  if (!cmd) throw new Error("no target command (use `--` to separate args)");
-  return { transport: "stdio", stdioTarget: { cmd, args }, showHelp: false, noArgs: false };
+  if (sepIdx < 0) throw new Error('wrapping an MCP server requires "--": blindseal -- <command> [args...]');
+  const cmd = afterSep[0];
+  if (!cmd) throw new Error('no command after "--": blindseal -- <command> [args...]');
+  return { transport: "stdio", stdioTarget: { cmd, args: afterSep.slice(1) } };
+}
+function fail(prefix, err) {
+  process.stderr.write(`${prefix}: ${err instanceof Error ? err.message : String(err)}
+`);
+  process.exit(1);
 }
 function main() {
   const argv = process.argv.slice(2);
-  if (argv[0] === "demo") {
-    runDemo().then(() => process.exit(0)).catch((err) => {
-      process.stderr.write(`blindseal demo: ${err instanceof Error ? err.message : String(err)}
-`);
-      process.exit(1);
-    });
-    return;
-  }
-  if (argv[0] === "run") {
-    runRun(argv.slice(1)).then((code) => {
-      if (code !== 0) process.exit(code);
-    }).catch((err) => {
-      process.stderr.write(`blindseal run: ${err instanceof Error ? err.message : String(err)}
-`);
-      process.exit(1);
-    });
-    return;
-  }
-  if (argv[0] === "attest") {
-    import("./attest-QLIE2OSQ.js").then(({ runAttestCli }) => runAttestCli(argv.slice(1))).then((code) => process.exit(code)).catch((err) => {
-      process.stderr.write(`blindseal attest: ${err instanceof Error ? err.message : String(err)}
-`);
-      process.exit(1);
-    });
-    return;
+  const first = argv[0];
+  if (first === void 0) {
+    process.stdout.write(HELP2);
+    process.exit(2);
   }
-  if (argv[0] === "submit") {
-    import("./submit-2UALCRX2.js").then(({ runSubmitCli }) => runSubmitCli(argv.slice(1))).then((code) => process.exit(code)).catch((err) => {
-      process.stderr.write(`blindseal submit: ${err instanceof Error ? err.message : String(err)}
-`);
-      process.exit(1);
-    });
-    return;
+  if (first === "--help" || first === "-h") {
+    process.stdout.write(HELP2);
+    process.exit(0);
   }
-  if (argv[0] === "audit" || argv[0] === "verify") {
-    const which = argv[0];
-    (which === "audit" ? import("./audit-C756XFXR.js").then((m) => m.runAuditCli(argv.slice(1))) : import("./verify-HO4IU7XV.js").then((m) => m.runVerifyCli(argv.slice(1)))).then((code) => process.exit(code)).catch((err) => {
-      process.stderr.write(`blindseal ${which}: ${err instanceof Error ? err.message : String(err)}
+  if (first === "--version" || first === "-v") {
+    process.stdout.write(`blindseal ${packageVersion()}
 `);
-      process.exit(1);
-    });
-    return;
+    process.exit(0);
   }
-  if (argv[0] === "history") {
-    process.exit(runHistoryCli(argv.slice(1)));
+  if (SUBCOMMANDS.has(first)) {
+    const rest = argv.slice(1);
+    switch (first) {
+      case "init":
+        import("./init-ZP3SLHM3.js").then((m) => m.runInit(rest)).then((code) => process.exit(code)).catch((e) => fail("blindseal init", e));
+        return;
+      case "run":
+        import("./run-YQBNEPSD.js").then((m) => m.runRun(rest)).then((code) => {
+          if (code !== 0) process.exit(code);
+        }).catch((e) => fail("blindseal run", e));
+        return;
+      // the server keeps the process alive
+      case "dashboard":
+        import("./dashboard-J6BA7OBL.js").then((m) => m.runDashboardCli(rest)).then((code) => {
+          if (code !== 0) process.exit(code);
+        }).catch((e) => fail("blindseal dashboard", e));
+        return;
+      // may keep a `run --mock` alive
+      case "demo":
+        runDemo().then(() => process.exit(0)).catch((e) => fail("blindseal demo", e));
+        return;
+      case "attest":
+        import("./attest-VWYZAOLY.js").then((m) => m.runAttestCli(rest)).then((code) => process.exit(code)).catch((e) => fail("blindseal attest", e));
+        return;
+      case "submit":
+        import("./submit-D6MQTAXT.js").then((m) => m.runSubmitCli(rest)).then((code) => process.exit(code)).catch((e) => fail("blindseal submit", e));
+        return;
+      case "verify":
+        import("./verify-RISAGKXC.js").then((m) => m.runVerifyCli(rest)).then((code) => process.exit(code)).catch((e) => fail("blindseal verify", e));
+        return;
+      case "audit":
+        import("./audit-G4DDMAXH.js").then((m) => m.runAuditCli(rest)).then((code) => process.exit(code)).catch((e) => fail("blindseal audit", e));
+        return;
+      case "history":
+        process.exit(runHistoryCli(rest));
+    }
   }
-  if (argv[0] === "dashboard") {
-    const code = runDashboardCli(argv.slice(1));
-    if (code !== 0) process.exit(code);
-    return;
+  if (!PROXY_FLAGS.has(first) && !(first.startsWith("-") && argv.includes("--"))) {
+    process.stderr.write(
+      first.startsWith("-") ? `blindseal: unknown flag "${first}"
+` : `blindseal: unknown command "${first}"
+`
+    );
+    process.stderr.write(HELP2);
+    process.exit(2);
   }
   let parsed;
   try {
@@ -2930,26 +1750,21 @@ function main() {
   } catch (err) {
     process.stderr.write(`blindseal: ${err instanceof Error ? err.message : String(err)}
 `);
-    process.stderr.write(HELP4);
+    process.stderr.write(HELP2);
     process.exit(2);
   }
-  if (parsed.showHelp) {
-    process.stdout.write(HELP4);
-    process.exit(parsed.noArgs ? 2 : 0);
-  }
   if (parsed.transport === "http") {
     startHttpProxy({ upstream: parsed.upstream, listenPort: parsed.port, listenHost: parsed.host });
     return;
   }
   if (parsed.transport === "scan-http") {
-    startScanHttp({
-      listenPort: parsed.port,
-      listenHost: parsed.host,
-      defaultServerUrl: parsed.serverUrl
-    });
+    startScanHttp({ listenPort: parsed.port, listenHost: parsed.host, defaultServerUrl: parsed.serverUrl });
     return;
   }
   const { cmd, args } = parsed.stdioTarget;
   startProxy(cmd, args);
 }
 main();
+export {
+  parseArgs
+};