failproofai 1.0.4-beta.2 → 1.0.4-beta.4

package/dist/cli.mjs

@@ -29,7 +29,7 @@ var __esm = (fn, res, err) => () => {
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // package.json
-var version2 = "1.0.4-beta.2", package_default;
+var version2 = "1.0.4-beta.4", package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "failproofai",
@@ -150,20 +150,20 @@ var init_package = __esm(() => {
       vite: "8.0.16",
       undici: "7.29.0",
       "brace-expansion": "5.0.9",
-      sharp: "0.35.0",
+      sharp: "0.35.4",
       browserslist: "4.28.8"
     },
     optionalDependencies: {
-      "@failproofai/failproofaid-linux-x64": "1.0.4-beta.2",
-      "@failproofai/failproofaid-linux-arm64": "1.0.4-beta.2",
-      "@failproofai/failproofaid-darwin-x64": "1.0.4-beta.2",
-      "@failproofai/failproofaid-darwin-arm64": "1.0.4-beta.2"
+      "@failproofai/failproofaid-linux-x64": "1.0.4-beta.4",
+      "@failproofai/failproofaid-linux-arm64": "1.0.4-beta.4",
+      "@failproofai/failproofaid-darwin-x64": "1.0.4-beta.4",
+      "@failproofai/failproofaid-darwin-arm64": "1.0.4-beta.4"
     },
     failproofaidBinaries: {
-      "linux-x64": "3039575242ff240c68a79c4ebd4e0e35e865da99c6d8a46d1a17b2d7962cb47b",
-      "linux-arm64": "02fe993dca0faccb528c48472ca1d637274c562992ba7da1bc8d439103dbcc13",
-      "darwin-x64": "2be5a422007a773253611f24f2ad9e2a301f075392ed7bc2dc0f6354d3186696",
-      "darwin-arm64": "5882a4acd7317289346934290ac8277ca79edadb009e284c9fc0b23b74d321d7"
+      "linux-x64": "4487790ed9b881da2914b5985a23b5adca1f20e226d71c635d8170064e6b2340",
+      "linux-arm64": "c903c5e201198213ccd8295fdab741c7d08d22c8dd5c276e52aa766595bedcc2",
+      "darwin-x64": "f0933584abbf0f9ff95cd153f8c6c704e467af1d6ffc8f42f9c426bd44b1142a",
+      "darwin-arm64": "387a3acbf13f667a557c8ac632fe67dee350cda078e3266e71edfcfacb9ecae6"
     }
   };
 });
@@ -11810,6 +11810,19 @@ async function applyDecision(result, ctx, eventName) {
   if (out && out.decision && out.decision.behavior === "deny") {
     throw new Error((out.decision.message) || "Blocked by failproofai");
   }
+  const notice = parsed.failproofaiNotice;
+  if (typeof notice === "string" && notice && ctx && ctx.client && ctx.client.tui) {
+    try {
+      await ctx.client.tui.showToast({
+        body: {
+          title: "failproofai audit",
+          message: notice,
+          variant: "warning",
+          duration: 12_000,
+        },
+      });
+    } catch { /* a courtesy notice must never break the host hook */ }
+  }
   // Forward additional context as a prompt to the session. For Stop /
   // SubagentStop the prompt is the only force-retry channel (session.idle
   // already fired), so AWAIT to ensure the SDK round-trip completes before
@@ -16510,6 +16523,20 @@ function shapeNotice(cli, notice, existingStdout = "") {
         return empty;
       return { stdout: text + `
 `, stderr: "" };
+    case "shim": {
+      if (existingStdout.trim().startsWith("{")) {
+        try {
+          const parsed = JSON.parse(existingStdout);
+          parsed.failproofaiNotice = text;
+          return { stdout: JSON.stringify(parsed), stderr: "" };
+        } catch {
+          return empty;
+        }
+      }
+      if (existingStdout.trim())
+        return empty;
+      return { stdout: JSON.stringify({ failproofaiNotice: text }), stderr: "" };
+    }
     default:
       return empty;
   }
@@ -16518,9 +16545,15 @@ function canDeliverNotice(cli) {
   return !!cli && (NOTICE_CHANNEL[cli] ?? "none") !== "none";
 }
 function leakNoticeText(newFindings) {
-  const n = newFindings === 1 ? "a credential" : `${newFindings} credentials`;
+  const n = newFindings === 1 ? "a possible credential exposure" : `${newFindings} possible credential exposures`;
   return `failproofai found ${n} in this project's agent transcripts.
-` + "Run `failproofai audit` to see the details, " + "or `failproofai audit --schedule` to get these by email.";
+` + "Run `failproofai audit` to review the matches and rotate anything real.";
+}
+function desktopLeakNotice() {
+  return {
+    title: "failproofai audit needs review",
+    body: "Possible credential exposure was found in your agent transcripts. " + "Run failproofai audit to verify the matches and rotate anything real."
+  };
 }
 var NOTICE_CHANNEL, MAX_NOTICE_CHARS = 900;
 var init_notice = __esm(() => {
@@ -16528,7 +16561,9 @@ var init_notice = __esm(() => {
     claude: "systemMessage",
     codex: "systemMessage",
     copilot: "stderr",
-    factory: "stdout"
+    factory: "stdout",
+    opencode: "shim",
+    pi: "shim"
   };
 });
 
@@ -16732,7 +16767,11 @@ function readJson(path) {
 function readLeakIdentity(home) {
   const existing = readJson(auditLeakIdentityFile(home));
   if (existing && typeof existing.salt === "string" && existing.salt.length >= 32) {
-    return { salt: existing.salt, dismissed: existing.dismissed ?? [] };
+    return {
+      salt: existing.salt,
+      dismissed: existing.dismissed ?? [],
+      reportViewedAt: typeof existing.reportViewedAt === "number" && Number.isFinite(existing.reportViewedAt) ? existing.reportViewedAt : undefined
+    };
   }
   const minted = { salt: randomBytes2(32).toString("hex"), dismissed: [] };
   writeLeakIdentity(minted, home);
@@ -16814,16 +16853,6 @@ var init_leak_store = __esm(() => {
 // src/audit/leak-notice.ts
 import { existsSync as existsSync13, mkdirSync as mkdirSync9, readdirSync as readdirSync5, statSync as statSync8, writeFileSync as writeFileSync7, rmSync as rmSync4 } from "node:fs";
 import { resolve as resolve11 } from "node:path";
-function pendingLeakNotice(home, channel = "cli") {
-  try {
-    const dir = NOTICE_DIR(home, channel);
-    const claimed = new Set(existsSync13(dir) ? readdirSync5(dir) : []);
-    const ids = activeFindings(readLeakRecord(home), home).map((f) => f.id).filter((id) => !claimed.has(id));
-    return { ids, count: ids.length };
-  } catch {
-    return { ids: [], count: 0 };
-  }
-}
 function markLeakNoticeDelivered(ids, home, channel = "cli") {
   const won = [];
   try {
@@ -16840,6 +16869,48 @@ function markLeakNoticeDelivered(ids, home, channel = "cli") {
   } catch {}
   return won;
 }
+function releaseLeakNoticeClaims(ids, home, channel = "cli") {
+  try {
+    const dir = NOTICE_DIR(home, channel);
+    for (const id of ids) {
+      if (!isFindingId(id))
+        continue;
+      rmSync4(resolve11(dir, id), { force: true });
+    }
+  } catch {}
+}
+function sessionNoticePending(sessionId, home) {
+  try {
+    if (!sessionId || !/^[\w.:-]{1,200}$/.test(sessionId))
+      return { ids: [], count: 0 };
+    const dir = resolve11(auditDir(home), "notified-sessions");
+    if (existsSync13(resolve11(dir, sessionId)))
+      return { ids: [], count: 0 };
+    const findings = activeFindings(readLeakRecord(home), home);
+    if (findings.length === 0)
+      return { ids: [], count: 0 };
+    const viewedAt = readLeakIdentity(home).reportViewedAt ?? 0;
+    const unviewed = findings.filter((f) => {
+      const seen = Date.parse(f.firstSeen);
+      return !Number.isFinite(seen) || seen > viewedAt;
+    });
+    return { ids: unviewed.map((f) => f.id), count: unviewed.length };
+  } catch {
+    return { ids: [], count: 0 };
+  }
+}
+function markSessionNoticed(sessionId, home) {
+  try {
+    if (!sessionId || !/^[\w.:-]{1,200}$/.test(sessionId))
+      return false;
+    const dir = resolve11(auditDir(home), "notified-sessions");
+    mkdirSync9(dir, { recursive: true });
+    writeFileSync7(resolve11(dir, sessionId), "", { flag: "wx", mode: 384 });
+    return true;
+  } catch {
+    return false;
+  }
+}
 var NOTICE_DIR = (home, channel = "cli") => resolve11(auditDir(home), channel === "cli" ? "notified" : `notified-${channel}`), MARKER_TTL_MS;
 var init_leak_notice = __esm(() => {
   init_fp_home();
@@ -17542,8 +17613,21 @@ var init_cursor_projects = __esm(() => {
 // lib/sqlite-reader.ts
 import { existsSync as existsSync14, readFileSync as readFileSync9 } from "node:fs";
 import initSqlJs from "sql.js/dist/sql-asm.js";
+function silenceSqliteExperimentalWarning() {
+  if (warningPatched)
+    return;
+  warningPatched = true;
+  const original = process.emitWarning.bind(process);
+  process.emitWarning = (warning, ...rest) => {
+    const text = typeof warning === "string" ? warning : String(warning?.message ?? "");
+    if (text.includes("SQLite is an experimental feature"))
+      return;
+    return original(warning, ...rest);
+  };
+}
 async function tryNodeSqlite(dbPath) {
   try {
+    silenceSqliteExperimentalWarning();
     const mod = await import("node:sqlite");
     const db = new mod.DatabaseSync(dbPath, { readOnly: true });
     return {
@@ -17564,10 +17648,21 @@ function loadSqlJs() {
     sqlPromise = initSqlJs();
   return sqlPromise;
 }
+function clearWalFlag(bytes) {
+  if (bytes.length < 20)
+    return bytes;
+  if (bytes.toString("latin1", 0, 16) !== SQLITE_MAGIC)
+    return bytes;
+  if (bytes[18] === 1 && bytes[19] === 1)
+    return bytes;
+  bytes[18] = 1;
+  bytes[19] = 1;
+  return bytes;
+}
 async function trySqlJs(dbPath) {
   try {
     const SQL = await loadSqlJs();
-    const db = new SQL.Database(readFileSync9(dbPath));
+    const db = new SQL.Database(clearWalFlag(readFileSync9(dbPath)));
     return {
       query(sql, params) {
         const stmt = db.prepare(sql);
@@ -17595,7 +17690,7 @@ async function openSqliteReadonly(dbPath) {
     return null;
   return await tryNodeSqlite(dbPath) ?? await trySqlJs(dbPath);
 }
-var sqlPromise = null;
+var warningPatched = false, sqlPromise = null, SQLITE_MAGIC = "SQLite format 3\x00";
 var init_sqlite_reader = () => {};
 
 // lib/opencode-db.ts
@@ -23012,22 +23107,22 @@ function canonicalizeEventType(raw, cli) {
   }
   return raw;
 }
-function attachLeakNotice(eventType, cli, outcome) {
+function attachLeakNotice(eventType, cli, outcome, sessionId) {
   try {
     if (!canDeliverNotice(cli))
       return outcome;
     if (!cli)
       return outcome;
     const canonical = canonicalizeEventType(eventType, cli);
-    if (canonical !== "Stop" && canonical !== "SessionStart")
+    if (canonical !== "Stop")
       return outcome;
-    const pending = pendingLeakNotice();
+    const pending = sessionNoticePending(sessionId ?? "");
     if (pending.count === 0)
       return outcome;
     const shaped = shapeNotice(cli, leakNoticeText(pending.count), outcome.stdout);
     if (shaped.stdout === outcome.stdout && !shaped.stderr)
       return outcome;
-    markLeakNoticeDelivered(pending.ids);
+    markSessionNoticed(sessionId ?? "");
     return {
       exitCode: outcome.exitCode,
       stdout: shaped.stdout,
@@ -23339,11 +23434,7 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
         }
       } catch {}
     }
-    const withNotice = attachLeakNotice(eventType, cli, {
-      exitCode: result.exitCode,
-      stdout: result.stdout,
-      stderr: result.stderr
-    });
+    const withNotice = attachLeakNotice(eventType, cli, { exitCode: result.exitCode, stdout: result.stdout, stderr: result.stderr }, sessionId);
     return withNotice;
   } finally {
     if (opts?.awaitTelemetryFlush ?? true) {
@@ -26241,6 +26332,7 @@ var init_shared = __esm(() => {
 
 // src/audit/cli-adapters/claude.ts
 import { readFile as readFile15, open as open2 } from "node:fs/promises";
+import { readFileSync as readFileSync26 } from "node:fs";
 async function listClaudeTranscriptMetadata(opts = {}) {
   const projectFilter = opts.projects ? new Set(opts.projects) : null;
   const sinceMs = opts.sinceMs ?? 0;
@@ -26257,13 +26349,22 @@ async function listClaudeTranscriptMetadata(opts = {}) {
     for (const t of transcripts) {
       if (t.mtimeMs < sinceMs)
         continue;
+      let sessionDescription;
+      if (t.isSubagent) {
+        try {
+          const meta = JSON.parse(readFileSync26(t.transcriptPath.replace(/\.jsonl$/, ".meta.json"), "utf8"));
+          if (typeof meta.description === "string")
+            sessionDescription = meta.description;
+        } catch {}
+      }
       out.push({
         cli: "claude",
         projectName: project.name,
         sessionId: t.sessionId,
         transcriptPath: t.transcriptPath,
         mtimeMs: t.mtimeMs,
-        sizeBytes: t.sizeBytes
+        sizeBytes: t.sizeBytes,
+        sessionDescription
       });
     }
   }
@@ -27493,6 +27594,106 @@ var init_features = __esm(() => {
   })();
 });
 
+// src/audit/leak-scan.ts
+function unquote(v) {
+  return v.startsWith('"') && v.endsWith('"') || v.startsWith("'") && v.endsWith("'") ? v.slice(1, -1) : v;
+}
+function isDocsLiteral(value) {
+  const { createHash } = __require("node:crypto");
+  return DOCS_LITERALS.has(createHash("sha256").update(value).digest("hex"));
+}
+function isSelfOutput(text) {
+  return SELF_OUTPUT_MARKERS.some((m) => text.includes(m));
+}
+function literalPrefixOf(source) {
+  let out = "";
+  for (let i = 0;i < source.length; i++) {
+    const c = source[i];
+    if (c === "\\") {
+      const next = source[i + 1];
+      if (next === undefined)
+        break;
+      if (/[dwsSDWbB]/.test(next))
+        break;
+      out += next;
+      i++;
+      continue;
+    }
+    if ("[](){}|?*+^$.".includes(c))
+      break;
+    out += c;
+  }
+  return out.length >= 2 ? out : null;
+}
+function applicablePatterns(text) {
+  return GATED_PATTERNS.filter(([, , gate]) => gate === null || text.includes(gate));
+}
+function findSecrets(text) {
+  if (!text)
+    return [];
+  if (isSelfOutput(text))
+    return [];
+  const byValue = new Map;
+  for (const [pattern, label] of applicablePatterns(text)) {
+    const re = new RegExp(pattern.source, pattern.flags.includes("g") ? pattern.flags : pattern.flags + "g");
+    for (const m of text.matchAll(re)) {
+      const value = m[0];
+      if (isDocsLiteral(value))
+        continue;
+      if (!byValue.has(value))
+        byValue.set(value, { value, name: null, rule: label, shaped: true });
+    }
+  }
+  for (const m of text.matchAll(ASSIGNMENT_RE)) {
+    const name = m[2];
+    const value = unquote(m[4]);
+    const existing = byValue.get(value);
+    if (existing)
+      existing.name ??= name;
+  }
+  return [...byValue.values()];
+}
+function flattenToolInput(input, depth = 0) {
+  if (depth > 6 || input == null)
+    return "";
+  if (typeof input === "string")
+    return input;
+  if (typeof input === "number" || typeof input === "boolean")
+    return String(input);
+  if (Array.isArray(input))
+    return input.map((v) => flattenToolInput(v, depth + 1)).join(`
+`);
+  if (typeof input === "object") {
+    return Object.entries(input).map(([k, v]) => `${k}=${flattenToolInput(v, depth + 1)}`).join(`
+`);
+  }
+  return "";
+}
+var LEAK_SCAN_VERSION = 5, ASSIGNMENT_RE, DOCS_LITERALS, SELF_OUTPUT_MARKERS, GATED_PATTERNS;
+var init_leak_scan = __esm(() => {
+  init_builtin_policies();
+  ASSIGNMENT_RE = /(["']?)\b([A-Za-z_][A-Za-z0-9_]{0,127})\1([ \t]*(?::(?!\/\/)|=)[ \t]*)("[^"]*"|'[^']*'|[^\s;|&"']+)/g;
+  DOCS_LITERALS = new Set([
+    "1a5d44a2dca19669d72edf4c4f1c27c4c1ca4b4408fbb17f6ce4ad452d78ddb3",
+    "78314b11be2e581549ac1c4f616563fad3fdf0c3b71678f6e2299182080e0598",
+    "cb20d34a7adda2f5d2043836051e242fd4c2b233e02c80c91fe9d5af9b100574",
+    "3543c50b0cb9cea8e55eb1f529b79f043cb250d485fde7b66cabbb5183add7da",
+    "1fae28c1b317300acfd90078c973567c8159015822b0c8b81508a5ec40517d20",
+    "23219833092a3136d7ad178ccb62ebd6ac8cba54ff24c2cfcd37b84aba9e95cf",
+    "872db7f4419592e397ef45230f910e06b48c36ed9970cf1f9e4fb896e69f129c",
+    "78a08441f4314f0a2833cfe58c62e555a162264206982cda39f6804f5048f570",
+    "2cafc0970149a84f3b9e62eaf169f36f59907a3b3e31f7b82e68c69cd27f7326",
+    "b363ade84d56c43bebbc9339b4971e340e3f13f7f8d45580b53373d2763e9e33"
+  ]);
+  SELF_OUTPUT_MARKERS = [
+    "[REDACTED:",
+    "[redacted:",
+    "failproofai audit",
+    "assigned secret]"
+  ];
+  GATED_PATTERNS = SECRET_PATTERNS.map(([re, label]) => [re, label, literalPrefixOf(re.source)]);
+});
+
 // src/audit/redact-example.ts
 import { homedir as homedir27 } from "node:os";
 function maskTruncatedSecret(input) {
@@ -27529,7 +27730,7 @@ function isSecretName(name) {
   return components.length > 1 && components.some((part) => COMPOUND_ONLY_COMPONENTS.includes(part));
 }
 function maskAssignedSecrets(input) {
-  let out = input.replace(ASSIGNMENT_RE, (match, quote, name, separator, value) => {
+  let out = input.replace(ASSIGNMENT_RE2, (match, quote, name, separator, value) => {
     if (!isSecretName(name))
       return match;
     if (value.startsWith("[REDACTED"))
@@ -27588,7 +27789,7 @@ function redactExample(input, home = homedir27()) {
   const collapsed = shortened.replace(/\s+/g, " ").trim();
   return collapsed.length > REDACTED_EXAMPLE_MAX_CHARS ? `${collapsed.slice(0, REDACTED_EXAMPLE_MAX_CHARS - 1)}…` : collapsed;
 }
-var REDACTED_EXAMPLE_MAX_CHARS = 160, KEPT_PARENT_SEGMENTS = 0, ABSOLUTE_PATH_RE, PUBLIC_PATH_ROOTS, SECRET_PREFIXES, SECRET_NAME_SUBSTRINGS, SECRET_NAME_COMPONENTS, COMPOUND_ONLY_COMPONENTS, ASSIGNMENT_RE, URL_CREDENTIALS_RE, BASIC_AUTH_FLAG_RE, CLIENT_BUNDLE_PREFIXES, PUBLISHED_MARKERS;
+var REDACTED_EXAMPLE_MAX_CHARS = 160, KEPT_PARENT_SEGMENTS = 0, ABSOLUTE_PATH_RE, PUBLIC_PATH_ROOTS, SECRET_PREFIXES, SECRET_NAME_SUBSTRINGS, SECRET_NAME_COMPONENTS, COMPOUND_ONLY_COMPONENTS, ASSIGNMENT_RE2, URL_CREDENTIALS_RE, BASIC_AUTH_FLAG_RE, CLIENT_BUNDLE_PREFIXES, PUBLISHED_MARKERS;
 var init_redact_example = __esm(() => {
   init_builtin_policies();
   ABSOLUTE_PATH_RE = /(?:\/[\w.\-@+]+){2,}\/?/g;
@@ -27616,9 +27817,9 @@ var init_redact_example = __esm(() => {
     "APIKEY",
     "PRIVATEKEY"
   ];
-  SECRET_NAME_COMPONENTS = ["KEY", "PASS", "AUTH", "PAT", "SIG", "SIGNATURE", "SESSION", "COOKIE"];
-  COMPOUND_ONLY_COMPONENTS = ["PWD"];
-  ASSIGNMENT_RE = /(["']?)\b([A-Za-z_][A-Za-z0-9_]{0,127})\1([ \t]*(?::(?!\/\/)|=)[ \t]*)("[^"]*"|'[^']*'|[^\s;|&"']+)/g;
+  SECRET_NAME_COMPONENTS = ["PASS", "AUTH", "PAT", "SIG", "SIGNATURE", "COOKIE"];
+  COMPOUND_ONLY_COMPONENTS = ["PWD", "KEY"];
+  ASSIGNMENT_RE2 = /(["']?)\b([A-Za-z_][A-Za-z0-9_]{0,127})\1([ \t]*(?::(?!\/\/)|=)[ \t]*)("[^"]*"|'[^']*'|[^\s;|&"']+)/g;
   URL_CREDENTIALS_RE = /([a-z][a-z0-9+.\-]{0,31}:\/\/)[^\s/:@]{1,256}:[^\s/@]{1,256}@/gi;
   BASIC_AUTH_FLAG_RE = /((?:^|\s)(?:-u|--user)[\s=])\S+:\S+/g;
   CLIENT_BUNDLE_PREFIXES = [
@@ -27634,136 +27835,9 @@ var init_redact_example = __esm(() => {
   PUBLISHED_MARKERS = /PUBLISHABLE|(^|_)PUBLIC_KEY$|(^|_)ANON_KEY$/;
 });
 
-// src/audit/leak-scan.ts
-function isNotACredential(value) {
-  if (value.length < MIN_VALUE_LEN)
-    return true;
-  if (/^[$<{(`%]/.test(value))
-    return true;
-  if (value.includes("${") || value.includes("{{") || value.includes("%("))
-    return true;
-  if (/^[A-Za-z_$][\w$]*(\.[A-Za-z_$][\w$]*)+$/.test(value))
-    return true;
-  if (value.includes("[REDACTED") || /^[•*#.]+$/.test(value))
-    return true;
-  if (/(.)\1{5,}/.test(value))
-    return true;
-  if (/^(true|false|null|undefined|none)$/i.test(value))
-    return true;
-  if (/^-?\d+(\.\d+)?$/.test(value))
-    return true;
-  if (/^\/|^~\/|^\.\.?\//.test(value))
-    return true;
-  return false;
-}
-function unquote(v) {
-  return v.startsWith('"') && v.endsWith('"') || v.startsWith("'") && v.endsWith("'") ? v.slice(1, -1) : v;
-}
-function isDocsLiteral(value) {
-  const { createHash } = __require("node:crypto");
-  return DOCS_LITERALS.has(createHash("sha256").update(value).digest("hex"));
-}
-function isSelfOutput(text) {
-  return SELF_OUTPUT_MARKERS.some((m) => text.includes(m));
-}
-function literalPrefixOf(source) {
-  let out = "";
-  for (let i = 0;i < source.length; i++) {
-    const c = source[i];
-    if (c === "\\") {
-      const next = source[i + 1];
-      if (next === undefined)
-        break;
-      if (/[dwsSDWbB]/.test(next))
-        break;
-      out += next;
-      i++;
-      continue;
-    }
-    if ("[](){}|?*+^$.".includes(c))
-      break;
-    out += c;
-  }
-  return out.length >= 2 ? out : null;
-}
-function applicablePatterns(text) {
-  return GATED_PATTERNS.filter(([, , gate]) => gate === null || text.includes(gate));
-}
-function findSecrets(text) {
-  if (!text)
-    return [];
-  if (isSelfOutput(text))
-    return [];
-  const byValue = new Map;
-  for (const [pattern, label] of applicablePatterns(text)) {
-    const re = new RegExp(pattern.source, pattern.flags.includes("g") ? pattern.flags : pattern.flags + "g");
-    for (const m of text.matchAll(re)) {
-      const value = m[0];
-      if (isDocsLiteral(value))
-        continue;
-      if (!byValue.has(value))
-        byValue.set(value, { value, name: null, rule: label, shaped: true });
-    }
-  }
-  for (const m of text.matchAll(ASSIGNMENT_RE2)) {
-    const name = m[2];
-    const value = unquote(m[4]);
-    if (!isSecretName(name) || isNotACredential(value) || isDocsLiteral(value))
-      continue;
-    const existing = byValue.get(value);
-    if (existing) {
-      existing.name ??= name;
-      continue;
-    }
-    byValue.set(value, { value, name, rule: "assigned secret", shaped: false });
-  }
-  return [...byValue.values()];
-}
-function flattenToolInput(input, depth = 0) {
-  if (depth > 6 || input == null)
-    return "";
-  if (typeof input === "string")
-    return input;
-  if (typeof input === "number" || typeof input === "boolean")
-    return String(input);
-  if (Array.isArray(input))
-    return input.map((v) => flattenToolInput(v, depth + 1)).join(`
-`);
-  if (typeof input === "object") {
-    return Object.entries(input).map(([k, v]) => `${k}=${flattenToolInput(v, depth + 1)}`).join(`
-`);
-  }
-  return "";
-}
-var ASSIGNMENT_RE2, MIN_VALUE_LEN = 8, DOCS_LITERALS, SELF_OUTPUT_MARKERS, GATED_PATTERNS;
-var init_leak_scan = __esm(() => {
-  init_builtin_policies();
-  init_redact_example();
-  ASSIGNMENT_RE2 = /(["']?)\b([A-Za-z_][A-Za-z0-9_]{0,127})\1([ \t]*(?::(?!\/\/)|=)[ \t]*)("[^"]*"|'[^']*'|[^\s;|&"']+)/g;
-  DOCS_LITERALS = new Set([
-    "1a5d44a2dca19669d72edf4c4f1c27c4c1ca4b4408fbb17f6ce4ad452d78ddb3",
-    "78314b11be2e581549ac1c4f616563fad3fdf0c3b71678f6e2299182080e0598",
-    "cb20d34a7adda2f5d2043836051e242fd4c2b233e02c80c91fe9d5af9b100574",
-    "3543c50b0cb9cea8e55eb1f529b79f043cb250d485fde7b66cabbb5183add7da",
-    "1fae28c1b317300acfd90078c973567c8159015822b0c8b81508a5ec40517d20",
-    "23219833092a3136d7ad178ccb62ebd6ac8cba54ff24c2cfcd37b84aba9e95cf",
-    "872db7f4419592e397ef45230f910e06b48c36ed9970cf1f9e4fb896e69f129c",
-    "78a08441f4314f0a2833cfe58c62e555a162264206982cda39f6804f5048f570",
-    "2cafc0970149a84f3b9e62eaf169f36f59907a3b3e31f7b82e68c69cd27f7326",
-    "b363ade84d56c43bebbc9339b4971e340e3f13f7f8d45580b53373d2763e9e33"
-  ]);
-  SELF_OUTPUT_MARKERS = [
-    "[REDACTED:",
-    "[redacted:",
-    "failproofai audit",
-    "assigned secret]"
-  ];
-  GATED_PATTERNS = SECRET_PATTERNS.map(([re, label]) => [re, label, literalPrefixOf(re.source)]);
-});
-
 // src/audit/cache.ts
 import { createHash as createHash8 } from "node:crypto";
-import { existsSync as existsSync33, mkdirSync as mkdirSync22, readFileSync as readFileSync26, writeFileSync as writeFileSync19, chmodSync as chmodSync5, openSync, readSync, closeSync } from "node:fs";
+import { existsSync as existsSync33, mkdirSync as mkdirSync22, readFileSync as readFileSync27, writeFileSync as writeFileSync19, chmodSync as chmodSync5, openSync, readSync, closeSync } from "node:fs";
 import { join as join33 } from "node:path";
 function getEngineVersion() {
   if (cachedEngineVersion)
@@ -27827,7 +27901,7 @@ function readCachedTranscript(transcriptPath, mtimeMs, sizeBytes) {
   if (!existsSync33(cachePath))
     return null;
   try {
-    const raw = readFileSync26(cachePath, "utf-8");
+    const raw = readFileSync27(cachePath, "utf-8");
     const entry = JSON.parse(raw);
     if (entry.schemaVersion !== CACHE_SCHEMA_VERSION)
       return null;
@@ -27835,6 +27909,8 @@ function readCachedTranscript(transcriptPath, mtimeMs, sizeBytes) {
       return null;
     if (entry.detectorVersion !== getDetectorVersion())
       return null;
+    if (entry.leakScanVersion !== LEAK_SCAN_VERSION)
+      return null;
     if (!Number.isFinite(entry.cachedAt) || Date.now() - entry.cachedAt > CACHE_TTL_MS)
       return null;
     if (!entry.result)
@@ -27874,6 +27950,7 @@ function writeCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes, result,
       sizeBytes,
       engineVersion: getEngineVersion(),
       detectorVersion: getDetectorVersion(),
+      leakScanVersion: LEAK_SCAN_VERSION,
       result
     };
     if (resume && resume.bytesScanned > 0) {
@@ -27894,6 +27971,7 @@ var cachedEngineVersion = null, cachedDetectorVersion = null, CACHE_SCHEMA_VERSI
 var init_cache = __esm(() => {
   init_builtin_policies();
   init_detectors();
+  init_leak_scan();
   init_fp_home();
   CACHE_TTL_MS = 30 * 24 * 60 * 60000;
 });
@@ -27962,6 +28040,30 @@ var init_replay = __esm(() => {
 });
 
 // src/audit/index.ts
+class ByteGate {
+  budget;
+  inFlight = 0;
+  waiting = [];
+  constructor(budget) {
+    this.budget = budget;
+  }
+  async acquire(bytes) {
+    const want = Math.max(0, bytes);
+    while (this.inFlight > 0 && this.inFlight + want > this.budget) {
+      await new Promise((resolve) => this.waiting.push(resolve));
+    }
+    this.inFlight += want;
+  }
+  release(bytes) {
+    this.inFlight -= Math.max(0, bytes);
+    if (this.inFlight < 0)
+      this.inFlight = 0;
+    const waiters = this.waiting;
+    this.waiting = [];
+    for (const wake of waiters)
+      wake();
+  }
+}
 function shortPolicyName(name) {
   const slash = name.indexOf("/");
   return slash >= 0 ? name.slice(slash + 1) : name;
@@ -28003,6 +28105,27 @@ function parseSinceOpt(since) {
     return t;
   throw new Error(`Invalid --since value: "${since}" (expected e.g. "7d", "30d", or "2026-04-01")`);
 }
+function isCredentialResearchSession(events, sessionDescription) {
+  if (sessionDescription && CREDENTIAL_RESEARCH_PURPOSE.test(sessionDescription))
+    return true;
+  const matched = new Set;
+  let evidenceEvents = 0;
+  for (const event of events) {
+    const intent = flattenToolInput(event.toolInput);
+    let eventMatched = false;
+    for (let i = 0;i < CREDENTIAL_RESEARCH_MARKERS.length; i++) {
+      if (CREDENTIAL_RESEARCH_MARKERS[i].test(intent)) {
+        matched.add(i);
+        eventMatched = true;
+      }
+    }
+    if (eventMatched)
+      evidenceEvents++;
+    if (matched.size >= 2 || evidenceEvents >= 3)
+      return true;
+  }
+  return false;
+}
 async function scanOneTranscript(meta, resume) {
   const empty = {
     transcriptPath: meta.transcriptPath,
@@ -28043,6 +28166,9 @@ async function scanOneTranscript(meta, resume) {
   const result = empty;
   result.eventsScanned = events.length;
   result.cwd = result.cwd || events[0].cwd || "";
+  const suppressLeakScan = isCredentialResearchSession(events, meta.sessionDescription);
+  if (suppressLeakScan)
+    result.leakScanSuppressed = "credential-research";
   for (const event of events) {
     let replayHits;
     try {
@@ -28054,7 +28180,8 @@ async function scanOneTranscript(meta, resume) {
       const example = formatPolicyExample(hit.policyName, event);
       recordHit(result, hit.policyName, event.timestamp, event.cwd, truncateExample(example));
     }
-    recordLeaks(result, event);
+    if (!suppressLeakScan)
+      recordLeaks(result, event);
   }
   return { result, bytesScanned, detectorState: sessionState, resumed };
 }
@@ -28094,10 +28221,12 @@ function leakSalt() {
   }
   return cachedSalt;
 }
-function persistLeaks(perTranscript) {
+function persistLeaks(perTranscript, replaceExisting) {
   const fresh = [];
   try {
-    const record = readLeakRecord();
+    const previous = readLeakRecord();
+    const previousIds = new Set(previous.findings.map((f) => f.id));
+    const record = replaceExisting ? emptyRecord(previous.salt, new Date().toISOString()) : previous;
     for (const t of perTranscript) {
       for (const leak of t.leaks ?? []) {
         const { isNew } = upsertFinding(record, {
@@ -28114,7 +28243,7 @@ function persistLeaks(perTranscript) {
             mechanism: describeMechanism(leak.toolName, leak.direction, leak.path)
           }
         });
-        if (isNew)
+        if (isNew && !previousIds.has(leak.id))
           fresh.push(leak.id);
       }
     }
@@ -28144,6 +28273,12 @@ function mergeIncremental(cached, tail) {
     examplesByName: {},
     rangeByName: { ...cached.rangeByName }
   };
+  if (cached.leakScanSuppressed || tail.leakScanSuppressed) {
+    out.leakScanSuppressed = "credential-research";
+    out.leaks = [];
+  } else {
+    out.leaks = [...cached.leaks ?? [], ...tail.leaks ?? []];
+  }
   for (const [name, list] of Object.entries(cached.examplesByName)) {
     out.examplesByName[name] = [...list];
   }
@@ -28267,16 +28402,19 @@ async function runAuditInner(opts, startedAt) {
     }
   } catch {}
   const allTranscripts = [];
+  let discoveryErrors = 0;
   for (const cli of clis) {
     const adapter = ADAPTERS[cli];
     let list;
     try {
       list = await adapter.listTranscripts({ projects: opts.projects, sinceMs });
     } catch {
+      discoveryErrors++;
       continue;
     }
     allTranscripts.push(...list);
   }
+  const gate = new ByteGate(TRANSCRIPT_BYTE_BUDGET);
   let skipped = 0;
   let errors = 0;
   const tasks = allTranscripts.map((meta) => async () => {
@@ -28289,6 +28427,7 @@ async function runAuditInner(opts, startedAt) {
       resume = found?.kind === "resume" ? { fromByte: found.fromByte, detectorState: found.detectorState } : undefined;
       cachedPrefix = found?.kind === "resume" ? found.result : null;
     }
+    await gate.acquire(meta.sizeBytes);
     try {
       const scan = await scanOneTranscript(meta, resume);
       const fresh = cachedPrefix && scan.resumed ? mergeIncremental(cachedPrefix, scan.result) : scan.result;
@@ -28311,6 +28450,8 @@ async function runAuditInner(opts, startedAt) {
         examplesByName: {},
         rangeByName: {}
       };
+    } finally {
+      gate.release(meta.sizeBytes);
     }
   });
   const settled = await batchAll(tasks, TRANSCRIPT_CONCURRENCY);
@@ -28337,7 +28478,8 @@ async function runAuditInner(opts, startedAt) {
       projectsScannedSet.add(t.cwd);
     eventsScanned += t.eventsScanned ?? 0;
   }
-  const newFindingIds = persistLeaks(perTranscript);
+  const coversAllHistory = opts.clis === undefined && opts.projects === undefined && opts.since === undefined && discoveryErrors === 0 && errors === 0 && skipped === 0;
+  const newFindingIds = persistLeaks(perTranscript, coversAllHistory);
   const auditResult = {
     version: 2,
     newLeakIds: newFindingIds,
@@ -28364,7 +28506,7 @@ async function runAuditInner(opts, startedAt) {
   };
   return auditResult;
 }
-var TRANSCRIPT_CONCURRENCY = 8, cachedSalt;
+var TRANSCRIPT_CONCURRENCY = 8, TRANSCRIPT_BYTE_BUDGET, CREDENTIAL_RESEARCH_MARKERS, CREDENTIAL_RESEARCH_PURPOSE, cachedSalt;
 var init_audit = __esm(() => {
   init_builtin_policies();
   init_hooks_config();
@@ -28380,6 +28522,15 @@ var init_audit = __esm(() => {
   init_cache();
   init_replay();
   init_types2();
+  TRANSCRIPT_BYTE_BUDGET = 48 * 1024 * 1024;
+  CREDENTIAL_RESEARCH_MARKERS = [
+    /\b(?:secret|credential)[-_ ](?:scanner|detection|detector|pattern|regex|corpus)\b/i,
+    /\b(?:trufflehog|trufflesecurity|gitleaks|detect-secrets|secret-detection-rules)\b/i,
+    /\b(?:SECRET_PATTERNS|findSecrets|isDocsLiteral|leak-scan)\b/,
+    /\b(?:fixture|placeholder|synthetic|sample) (?:api )?(?:key|token|secret|credential)s?\b/i,
+    /\b(?:grep|rg|ripgrep|scan|hunt|search)\b[^\n]{0,240}\b(?:secret|credential|token)s?\b/i
+  ];
+  CREDENTIAL_RESEARCH_PURPOSE = /\b(?:hunt|scan|search|research|test)(?:ing)?\b[^\n]{0,80}\b(?:secret|credential|token)s?\b|\b(?:secret|credential|token)s?\b[^\n]{0,80}\b(?:scanner|detector|detection|research|fixtures?|corpus)\b/i;
 });
 
 // src/audit/audit-lock.ts
@@ -28388,7 +28539,7 @@ import {
   linkSync,
   mkdirSync as mkdirSync23,
   openSync as openSync2,
-  readFileSync as readFileSync27,
+  readFileSync as readFileSync28,
   unlinkSync as unlinkSync4,
   writeFileSync as writeFileSync20,
   writeSync
@@ -28449,7 +28600,7 @@ function handleFor(path, info) {
 }
 function readLock2(path) {
   try {
-    const parsed = JSON.parse(readFileSync27(path, "utf8"));
+    const parsed = JSON.parse(readFileSync28(path, "utf8"));
     if (typeof parsed?.pid !== "number" || typeof parsed?.startedAt !== "number")
       return null;
     return {
@@ -28509,7 +28660,7 @@ var init_audit_lock = __esm(() => {
 });
 
 // src/audit/dashboard-cache.ts
-import { existsSync as existsSync34, readFileSync as readFileSync28 } from "node:fs";
+import { existsSync as existsSync34, readFileSync as readFileSync29 } from "node:fs";
 function getCachePath() {
   return auditDashboardFile();
 }
@@ -28532,7 +28683,7 @@ function readDashboardCacheMeta() {
   if (!existsSync34(cachePath))
     return null;
   try {
-    const raw = readFileSync28(cachePath, "utf-8");
+    const raw = readFileSync29(cachePath, "utf-8");
     const entry = JSON.parse(raw);
     if (!entry || entry.schemaVersion !== DASHBOARD_CACHE_SCHEMA_VERSION || typeof entry.cachedAt !== "string" || Number.isNaN(new Date(entry.cachedAt).getTime()))
       return null;
@@ -28756,7 +28907,7 @@ var init_api_server_client = __esm(() => {
 });
 
 // lib/auth/auth-store.ts
-import { existsSync as existsSync35, readFileSync as readFileSync29, readdirSync as readdirSync19, rmSync as rmSync14 } from "node:fs";
+import { existsSync as existsSync35, readFileSync as readFileSync30, readdirSync as readdirSync19, rmSync as rmSync14 } from "node:fs";
 import { join as join34, resolve as resolve25 } from "node:path";
 function getAuthFilePath() {
   const override = process.env.FAILPROOFAI_AUTH_DIR;
@@ -28767,7 +28918,7 @@ function readAuth() {
   if (!existsSync35(p))
     return null;
   try {
-    const raw = readFileSync29(p, "utf-8");
+    const raw = readFileSync30(p, "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.access_token !== "string" || typeof parsed.refresh_token !== "string" || typeof parsed.access_expires_at !== "number" || typeof parsed.user !== "object" || !parsed.user || typeof parsed.user.id !== "string" || typeof parsed.user.email !== "string") {
       return null;
@@ -28977,7 +29128,7 @@ var init_harm_report = __esm(() => {
 });
 
 // src/audit/machine-store.ts
-import { existsSync as existsSync36, readFileSync as readFileSync30, rmSync as rmSync15 } from "node:fs";
+import { existsSync as existsSync36, readFileSync as readFileSync31, rmSync as rmSync15 } from "node:fs";
 import { hostname as hostname5 } from "node:os";
 import { randomUUID as randomUUID4 } from "node:crypto";
 function readMachineIdentity(home) {
@@ -28985,7 +29136,7 @@ function readMachineIdentity(home) {
   if (!existsSync36(path))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync30(path, "utf8"));
+    const parsed = JSON.parse(readFileSync31(path, "utf8"));
     if (typeof parsed.machine_id !== "string" || !parsed.machine_id)
       return null;
     return {
@@ -29556,6 +29707,8 @@ var init_cli = __esm(() => {
   init_desktop_notify();
   init_macos_notifier();
   init_leak_notice();
+  init_notice();
+  init_leak_store();
   init_fp_config();
   init_tui();
   init_package();
@@ -29575,7 +29728,7 @@ var init_cli = __esm(() => {
 });
 
 // src/hooks/configure-wizard.ts
-import { existsSync as existsSync37, mkdirSync as mkdirSync24, writeFileSync as writeFileSync21, readFileSync as readFileSync31 } from "node:fs";
+import { existsSync as existsSync37, mkdirSync as mkdirSync24, writeFileSync as writeFileSync21, readFileSync as readFileSync32 } from "node:fs";
 import { homedir as homedir28 } from "node:os";
 import { dirname as dirname17, resolve as resolve26, sep as sep5 } from "node:path";
 async function emit(event, props) {
@@ -29601,7 +29754,7 @@ function setCustomPoliciesEnabled(scope, cwd, enabled) {
   let config = {};
   try {
     if (existsSync37(path))
-      config = JSON.parse(readFileSync31(path, "utf8"));
+      config = JSON.parse(readFileSync32(path, "utf8"));
   } catch {
     return;
   }
@@ -30725,7 +30878,7 @@ var init_harness_cli = __esm(() => {
 });
 
 // src/hooks/fp-config.ts
-import { chmodSync as chmodSync6, existsSync as existsSync40, mkdirSync as mkdirSync27, readFileSync as readFileSync32, statSync as statSync25, writeFileSync as writeFileSync24 } from "node:fs";
+import { chmodSync as chmodSync6, existsSync as existsSync40, mkdirSync as mkdirSync27, readFileSync as readFileSync33, statSync as statSync25, writeFileSync as writeFileSync24 } from "node:fs";
 function detectLayout2() {
   const raw = readVersionFile2();
   if (raw) {
@@ -30766,7 +30919,7 @@ function readLegacyTomlVersion2(text) {
 function readVersionFile2() {
   let text;
   try {
-    text = readFileSync32(versionFile(), "utf8");
+    text = readFileSync33(versionFile(), "utf8");
   } catch {
     return null;
   }
@@ -30799,7 +30952,7 @@ import {
   copyFileSync as copyFileSync3,
   existsSync as existsSync41,
   mkdirSync as mkdirSync28,
-  readFileSync as readFileSync33,
+  readFileSync as readFileSync34,
   renameSync as renameSync9,
   rmSync as rmSync16,
   writeFileSync as writeFileSync25
@@ -30869,7 +31022,7 @@ function planMigration2(from, registry = MIGRATIONS2) {
 }
 function readLedger2() {
   try {
-    const parsed = JSON.parse(readFileSync33(migrationLedgerFile(), "utf8"));
+    const parsed = JSON.parse(readFileSync34(migrationLedgerFile(), "utf8"));
     return Array.isArray(parsed) ? parsed : [];
   } catch {
     return [];
@@ -31064,7 +31217,7 @@ import {
   existsSync as existsSync42,
   mkdirSync as mkdirSync29,
   mkdtempSync as mkdtempSync2,
-  readFileSync as readFileSync34,
+  readFileSync as readFileSync35,
   writeFileSync as writeFileSync26,
   unlinkSync as unlinkSync5,
   rmSync as rmSync17
@@ -31711,7 +31864,7 @@ var init_uninstall_cli = __esm(() => {
 import { execFileSync as execFileSync5 } from "node:child_process";
 import { homedir as homedir31, tmpdir as tmpdir4 } from "node:os";
 import { createHash as createHash9 } from "node:crypto";
-import { copyFileSync as copyFileSync4, existsSync as existsSync44, mkdirSync as mkdirSync30, mkdtempSync as mkdtempSync3, readFileSync as readFileSync35, readdirSync as readdirSync22, realpathSync as realpathSync3, rmSync as rmSync19, statSync as statSync26, writeFileSync as writeFileSync27 } from "node:fs";
+import { copyFileSync as copyFileSync4, existsSync as existsSync44, mkdirSync as mkdirSync30, mkdtempSync as mkdtempSync3, readFileSync as readFileSync36, readdirSync as readdirSync22, realpathSync as realpathSync3, rmSync as rmSync19, statSync as statSync26, writeFileSync as writeFileSync27 } from "node:fs";
 import { basename as basename8, dirname as dirname21, isAbsolute as isAbsolute4, join as join38, relative as relative5, resolve as resolve30, sep as sep6 } from "node:path";
 function parseList(rest, flag) {
   const idx = rest.findIndex((a) => a === flag || a.startsWith(`${flag}=`));
@@ -31828,7 +31981,7 @@ async function build(rest) {
   const entryPath = resolve30(entry);
   if (!existsSync44(entryPath))
     return fail2([`No such file: ${entryPath}`]);
-  const source = readFileSync35(entryPath, "utf8");
+  const source = readFileSync36(entryPath, "utf8");
   const localImport = /(?:^|\n)\s*(?:import|export)[^;\n]*from\s+["'](\.[^"']*)["']/.exec(source);
   if (localImport) {
     return fail2([
@@ -31891,7 +32044,7 @@ async function build(rest) {
   copyFileSync4(entryPath, entryOut);
   const sha = (bytes) => createHash9("sha256").update(bytes).digest("hex");
   writeFileSync27(resolve30(outDir, PACK_CHECKSUMS_ASSET), `${sha(manifest)}  ${PACK_MANIFEST_ASSET}
-${sha(readFileSync35(entryOut))}  ${PACK_ENTRY_ASSET}
+${sha(readFileSync36(entryOut))}  ${PACK_ENTRY_ASSET}
 `, "utf8");
   const on = policies.filter((p) => p.defaultEnabled).length;
   return ok2([
@@ -32217,7 +32370,7 @@ function findEntry(dir) {
     try {
       if (statSync26(full).size > 512 * 1024)
         continue;
-      const text = readFileSync35(full, "utf8");
+      const text = readFileSync36(full, "utf8");
       if (/from\s+["']failproofai["']/.test(text) && /customPolicies\s*\.\s*add\s*\(/.test(text)) {
         found.push(full);
       }
@@ -32236,7 +32389,7 @@ function withLocalImports(sources) {
     try {
       if (statSync26(file).size > 512 * 1024)
         continue;
-      text = readFileSync35(file, "utf8");
+      text = readFileSync36(file, "utf8");
     } catch {
       continue;
     }
@@ -32759,7 +32912,7 @@ async function publish(rest) {
   }
   const tag = flag("tag") ?? version;
   let entryToBuild = entry;
-  const needsBundle = discovered.length > 1 || /(?:^|\n)\s*(?:import|export)[^;\n]*from\s+["']\.[^"']*["']/.test(readFileSync35(entry, "utf8"));
+  const needsBundle = discovered.length > 1 || /(?:^|\n)\s*(?:import|export)[^;\n]*from\s+["']\.[^"']*["']/.test(readFileSync36(entry, "utf8"));
   if (needsBundle) {
     const sources = discovered.length > 1 ? discovered : [entry];
     const bundled = bundleEntry(sources, outDirEarly);
@@ -32838,7 +32991,7 @@ async function publish(rest) {
     if (prior) {
       await gh(`${GITHUB_API2}/repos/${owner}/${name}/releases/assets/${prior.id}`, auth, { method: "DELETE" });
     }
-    const bytes = readFileSync35(resolve30(outDir, asset));
+    const bytes = readFileSync36(resolve30(outDir, asset));
     const upload = await gh(`${GITHUB_UPLOADS2}/repos/${owner}/${name}/releases/${releaseId}/assets?name=${encodeURIComponent(asset)}`, auth, {
       method: "POST",
       contentType: asset.endsWith(".json") ? "application/json" : "application/octet-stream",
@@ -34242,11 +34395,11 @@ var init_manager2 = __esm(() => {
 });
 
 // src/audit/audit-schedule.ts
-import { readFileSync as readFileSync36 } from "node:fs";
+import { readFileSync as readFileSync37 } from "node:fs";
 function readAuditSchedule(home) {
   let raw;
   try {
-    raw = readFileSync36(auditScheduleFile(home), "utf8");
+    raw = readFileSync37(auditScheduleFile(home), "utf8");
   } catch {
     return null;
   }
@@ -34310,7 +34463,9 @@ async function ensureSignedIn(preset) {
   }
   if (!canPrompt()) {
     throw new LoginError(`Signing in needs an interactive terminal, and this one is not.
-` + "Run `failproofai audit --schedule` from a shell you are sitting at,\n" + "or sign in from the dashboard — both write the same session file.");
+` + "Run `failproofai audit --schedule` from a shell you are sitting at,\n" + `or sign in from the dashboard — both write the same session file.
+` + `
+` + "`--email` does not avoid this: it fills in the address so you are not\n" + "asked for it, but a one-time code is still sent there for you to paste.");
   }
   return { user: await runLogin(preset), prompted: true };
 }
@@ -34692,7 +34847,7 @@ function parseScriptArgs(argv) {
 var init_parse_script_args = () => {};
 
 // scripts/install-diagnosis.mjs
-import { existsSync as existsSync46, readFileSync as readFileSync37, realpathSync as realpathSync4 } from "node:fs";
+import { existsSync as existsSync46, readFileSync as readFileSync38, realpathSync as realpathSync4 } from "node:fs";
 import { dirname as dirname22, resolve as resolve33 } from "node:path";
 import { homedir as homedir32, platform as platform5 } from "node:os";
 import { spawnSync } from "node:child_process";
@@ -34706,7 +34861,7 @@ function findPackageRoot(start) {
       const pkgPath = resolve33(dir, "package.json");
       if (existsSync46(pkgPath)) {
         try {
-          const pkg = JSON.parse(readFileSync37(pkgPath, "utf8"));
+          const pkg = JSON.parse(readFileSync38(pkgPath, "utf8"));
           if (pkg.name === PKG_NAME)
             return dir;
         } catch {}
@@ -34724,7 +34879,7 @@ function readPackageVersion(packageRoot) {
   if (!packageRoot)
     return null;
   try {
-    const pkg = JSON.parse(readFileSync37(resolve33(packageRoot, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync38(resolve33(packageRoot, "package.json"), "utf8"));
     return typeof pkg.version === "string" ? pkg.version : null;
   } catch {
     return null;
@@ -34972,14 +35127,14 @@ function helpText() {
   const lines = helpScreen({
     command: "audit",
     version: version2,
-    tagline: "review your agent CLIs for risky and wasteful patterns",
+    tagline: "find credentials your agents leaked into their own transcripts",
     sections: [
       {
         label: "usage",
         entries: [
-          ["(bare)", `Scan your session history, then open http://localhost:${DASHBOARD_PORT}/audit`],
-          ["--schedule [days]", "Scan on a timer and email the findings. Default 7 days, range 1-90. Signs you in the first time."],
-          ["--email <address>", "With --schedule, skips the sign-in prompt."],
+          ["(bare)", `Scan your session history for leaked keys, then open http://localhost:${DASHBOARD_PORT}/audit`],
+          ["--schedule [days]", "Scan on a timer, notify you on this machine, and email the findings. Default 7 days, range 1-90. Signs you in the first time."],
+          ["--email <address>", "With --schedule, fills in your address. A sign-in code is still emailed to you to paste."],
           ["--no-schedule", "Stop the timer. Leaves you signed in."],
           ["--notify", "Show a desktop notification when a scan finds a credential. On by default."],
           ["--no-notify", "Stop those notifications. Scans and the digest are unaffected."],
@@ -34988,7 +35143,11 @@ function helpText() {
         ]
       }
     ],
-    footer: ["Everything runs on this machine; only a scheduled digest ever leaves it."]
+    footer: [
+      "Everything runs on this machine. A scan tells you three ways: a desktop",
+      "notification, two lines in your agent session, and the emailed digest —",
+      "and only that digest ever leaves."
+    ]
   }, helpOptsFor(process.stdout));
   return ["", ...lines, ""].join(`
 `) + `
@@ -35154,24 +35313,35 @@ async function announceLeaksOrThrow(result) {
   const claimed = markLeakNoticeDelivered(ids, undefined, "desktop");
   if (claimed.length === 0)
     return;
-  const n = claimed.length === 1 ? "a credential" : `${claimed.length} credentials`;
-  const title = "failproofai found a leaked credential";
-  const body = `${n} in your agent transcripts. Run failproofai audit to see them — ` + "or failproofai audit --schedule to get them by email.";
-  if (process.platform === "darwin") {
-    pruneMacNotifyQueue();
-    if (!queueMacNotification(claimed[0], title, body)) {
-      process.stderr.write(`failproofai: found ${n} but could not queue a notification
+  const live = new Set(activeFindings(readLeakRecord()).map((f) => f.id));
+  const shown = claimed.filter((id) => live.has(id)).length || claimed.length;
+  const n = shown === 1 ? "a possible credential exposure" : `${shown} possible credential exposures`;
+  const { title, body } = desktopLeakNotice();
+  let delivered = false;
+  try {
+    if (process.platform === "darwin") {
+      pruneMacNotifyQueue();
+      if (!queueMacNotification(claimed[0], title, body)) {
+        process.stderr.write(`failproofai: found ${n} but could not queue a notification
 `);
-    } else if (!macNotifierInstalled()) {
-      process.stderr.write(`failproofai: found ${n}; the notifier is not installed, so nothing will show it ` + `(run \`failproofai config\`)
+      } else {
+        delivered = true;
+      }
+      if (delivered && !macNotifierInstalled()) {
+        process.stderr.write(`failproofai: found ${n}; the notifier is not installed, so nothing will show it ` + `(run \`failproofai config\`)
 `);
+      }
+      return;
     }
-    return;
-  }
-  const outcome = await notifyDesktop(title, body, 0);
-  if (!outcome.ok) {
-    process.stderr.write(`failproofai: found ${n} but could not raise a desktop notification (${outcome.reason})
+    const outcome = await notifyDesktop(title, body, 0);
+    delivered = outcome.ok;
+    if (!outcome.ok) {
+      process.stderr.write(`failproofai: found ${n} but could not raise a desktop notification (${outcome.reason})
 `);
+    }
+  } finally {
+    if (!delivered)
+      releaseLeakNoticeClaims(claimed, undefined, "desktop");
   }
 }
 async function runScheduledAudit() {
@@ -35365,6 +35535,8 @@ var init_cli2 = __esm(() => {
   init_desktop_notify();
   init_macos_notifier();
   init_leak_notice();
+  init_notice();
+  init_leak_store();
   init_fp_config();
   init_tui();
   init_package();
@@ -35825,7 +35997,7 @@ import { realpathSync as realpathSync7 } from "fs";
 import { dirname as dirname25, resolve as resolve36 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 // package.json
-var version = "1.0.4-beta.2";
+var version = "1.0.4-beta.4";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {
@@ -36070,7 +36242,7 @@ Run \`failproofai help\` for usage.`);
           label: "see what it caught",
           entries: [
             ["(no args)", "Open the policy dashboard on localhost:8020"],
-            ["audit", "Scan your agents' history, then open the audit view"],
+            ["audit", "Find credentials your agents leaked, and get told about it"],
             ["config --status", "Cloud connection, daemon version, pause state"]
           ]
         },