failproofai 1.0.4-beta.2 → 1.0.4-beta.6

package/dist/cli.mjs

@@ -29,7 +29,7 @@ var __esm = (fn, res, err) => () => {
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // package.json
-var version2 = "1.0.4-beta.2", package_default;
+var version2 = "1.0.4-beta.6", package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "failproofai",
@@ -150,20 +150,20 @@ var init_package = __esm(() => {
       vite: "8.0.16",
       undici: "7.29.0",
       "brace-expansion": "5.0.9",
-      sharp: "0.35.0",
+      sharp: "0.35.4",
       browserslist: "4.28.8"
     },
     optionalDependencies: {
-      "@failproofai/failproofaid-linux-x64": "1.0.4-beta.2",
-      "@failproofai/failproofaid-linux-arm64": "1.0.4-beta.2",
-      "@failproofai/failproofaid-darwin-x64": "1.0.4-beta.2",
-      "@failproofai/failproofaid-darwin-arm64": "1.0.4-beta.2"
+      "@failproofai/failproofaid-linux-x64": "1.0.4-beta.6",
+      "@failproofai/failproofaid-linux-arm64": "1.0.4-beta.6",
+      "@failproofai/failproofaid-darwin-x64": "1.0.4-beta.6",
+      "@failproofai/failproofaid-darwin-arm64": "1.0.4-beta.6"
     },
     failproofaidBinaries: {
-      "linux-x64": "3039575242ff240c68a79c4ebd4e0e35e865da99c6d8a46d1a17b2d7962cb47b",
-      "linux-arm64": "02fe993dca0faccb528c48472ca1d637274c562992ba7da1bc8d439103dbcc13",
-      "darwin-x64": "2be5a422007a773253611f24f2ad9e2a301f075392ed7bc2dc0f6354d3186696",
-      "darwin-arm64": "5882a4acd7317289346934290ac8277ca79edadb009e284c9fc0b23b74d321d7"
+      "linux-x64": "24118b8bd058cc5d8711053c4c77cdca9361c12dbf0f421a757d33f07596d428",
+      "linux-arm64": "b4278c34a288de2c747bcebcc623d8fd5bda3a1f1e55800926eb1a4b89f0a5e9",
+      "darwin-x64": "ecb66699f45f605b0d54ac9e4bac360ac11e4e136442dcccdd083514d77c7d42",
+      "darwin-arm64": "b3dbad58bda960ef9481f90bc5085ba8624b2472519cc0bf212a0e8451dd2db4"
     }
   };
 });
@@ -11865,7 +11865,10 @@ export default async function failproofaiPlugin({ client, directory }) {
       const claudeEvent = BUS_EVENT_MAP[event.type];
       if (!claudeEvent) return;
       const props = event.properties || {};
-      const sessionID = props.sessionID || (props.session && props.session.id) || props.id;
+      const info = props.info || props.session || {};
+
+      const sessionID = info.id || info.sessionID || info.sessionId || info.session_id ||
+        props.sessionID || props.sessionId || props.session_id || props.id;
       const r = await runFailproofai(claudeEvent, {
         session_id: sessionID, cwd: directory, hook_event_name: claudeEvent,
       }, directory);
@@ -16480,374 +16483,6 @@ var init_delivery_health = __esm(() => {
   };
 });
 
-// src/hooks/notice.ts
-function shapeNotice(cli, notice, existingStdout = "") {
-  const empty = { stdout: existingStdout, stderr: "" };
-  if (!notice.trim() || !cli)
-    return empty;
-  const channel = NOTICE_CHANNEL[cli] ?? "none";
-  const text = notice.length > MAX_NOTICE_CHARS ? notice.slice(0, MAX_NOTICE_CHARS - 1) + "…" : notice;
-  switch (channel) {
-    case "systemMessage": {
-      if (existingStdout.trim().startsWith("{")) {
-        try {
-          const parsed = JSON.parse(existingStdout);
-          parsed.systemMessage = text;
-          return { stdout: JSON.stringify(parsed), stderr: "" };
-        } catch {
-          return empty;
-        }
-      }
-      if (existingStdout.trim())
-        return empty;
-      return { stdout: JSON.stringify({ systemMessage: text }), stderr: "" };
-    }
-    case "stderr":
-      return { stdout: existingStdout, stderr: text + `
-` };
-    case "stdout":
-      if (existingStdout.trim())
-        return empty;
-      return { stdout: text + `
-`, stderr: "" };
-    default:
-      return empty;
-  }
-}
-function canDeliverNotice(cli) {
-  return !!cli && (NOTICE_CHANNEL[cli] ?? "none") !== "none";
-}
-function leakNoticeText(newFindings) {
-  const n = newFindings === 1 ? "a credential" : `${newFindings} credentials`;
-  return `failproofai found ${n} in this project's agent transcripts.
-` + "Run `failproofai audit` to see the details, " + "or `failproofai audit --schedule` to get these by email.";
-}
-var NOTICE_CHANNEL, MAX_NOTICE_CHARS = 900;
-var init_notice = __esm(() => {
-  NOTICE_CHANNEL = {
-    claude: "systemMessage",
-    codex: "systemMessage",
-    copilot: "stderr",
-    factory: "stdout"
-  };
-});
-
-// lib/atomic-write.ts
-import {
-  chmodSync as chmodSync2,
-  existsSync as existsSync11,
-  mkdirSync as mkdirSync7,
-  renameSync as renameSync4,
-  rmSync as rmSync3,
-  statSync as statSync7,
-  writeFileSync as writeFileSync6
-} from "node:fs";
-import { dirname as dirname7 } from "node:path";
-import { randomBytes } from "node:crypto";
-function writeJsonAtomically(filePath, value, opts = {}) {
-  const mode = opts.mode ?? 384;
-  const dirMode = opts.dirMode ?? 448;
-  const dir = dirname7(filePath);
-  if (!existsSync11(dir))
-    mkdirSync7(dir, { recursive: true, mode: dirMode });
-  const tmp = `${filePath}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
-  try {
-    writeFileSync6(tmp, JSON.stringify(value, null, 2), { mode });
-    try {
-      if ((statSync7(tmp).mode & 63) !== 0)
-        chmodSync2(tmp, mode);
-    } catch {}
-    renameSync4(tmp, filePath);
-    try {
-      if ((statSync7(filePath).mode & 63) !== 0)
-        chmodSync2(filePath, mode);
-    } catch {}
-  } catch (err) {
-    try {
-      rmSync3(tmp, { force: true });
-    } catch {}
-    throw err;
-  }
-}
-var init_atomic_write = () => {};
-
-// src/audit/leak-record.ts
-function upsertFinding(record, incoming) {
-  const { sighting, ...rest } = incoming;
-  const existing = record.findings.find((f) => f.id === rest.id);
-  if (!existing) {
-    record.findings.push({
-      ...rest,
-      firstSeen: sighting.at,
-      lastSeen: sighting.at,
-      occurrences: 1,
-      sightings: [sighting]
-    });
-    return { record, isNew: true };
-  }
-  existing.occurrences += 1;
-  if (sighting.at > existing.lastSeen)
-    existing.lastSeen = sighting.at;
-  if (sighting.at < existing.firstSeen)
-    existing.firstSeen = sighting.at;
-  if (existing.sightings.length < MAX_SIGHTINGS) {
-    const seen = existing.sightings.some((s) => s.sessionId === sighting.sessionId && s.at === sighting.at);
-    if (!seen)
-      existing.sightings.push(sighting);
-  }
-  return { record, isNew: false };
-}
-function pruneRecord(record, nowMs) {
-  const cutoff = new Date(nowMs - FINDING_TTL_DAYS * 86400000).toISOString();
-  const live = record.findings.filter((f) => f.lastSeen >= cutoff);
-  live.sort((a, b) => a.lastSeen < b.lastSeen ? 1 : a.lastSeen > b.lastSeen ? -1 : 0);
-  record.findings = live.slice(0, MAX_FINDINGS);
-  return record;
-}
-function emptyRecord(salt, nowIso) {
-  return {
-    schemaVersion: LEAK_RECORD_SCHEMA_VERSION,
-    salt,
-    updatedAt: nowIso,
-    findings: []
-  };
-}
-function describeMechanism(toolName, direction, shortPath) {
-  const where = shortPath ? ` ${shortPath}` : "";
-  let summary;
-  if (direction === "result") {
-    summary = shortPath ? `appeared in the output of reading${where}` : "appeared in tool output";
-  } else {
-    switch (toolName) {
-      case "Read":
-        summary = `read from${where || " a file"}`;
-        break;
-      case "Write":
-        summary = `written to${where || " a file"}`;
-        break;
-      case "Edit":
-      case "NotebookEdit":
-        summary = `edited into${where || " a file"}`;
-        break;
-      case "Bash":
-        summary = "passed in a shell command";
-        break;
-      default:
-        summary = `sent to the ${toolName} tool`;
-    }
-  }
-  return { summary, toolName, direction };
-}
-var MAX_SIGHTINGS = 5, FINDING_TTL_DAYS = 90, MAX_FINDINGS = 500, LEAK_RECORD_SCHEMA_VERSION = 1;
-
-// src/audit/leak-fingerprint.ts
-function matchPublicPrefix(value) {
-  for (const entry of PUBLIC_PREFIXES) {
-    if (value.startsWith(entry[0]))
-      return entry;
-  }
-  return null;
-}
-function fingerprintSecret(value, fallbackLabel = "secret") {
-  const length = value.length;
-  const matched = matchPublicPrefix(value);
-  if (!matched) {
-    return {
-      display: `[${length}-char ${fallbackLabel}]`,
-      label: fallbackLabel,
-      length,
-      attributed: false
-    };
-  }
-  const [prefix, label] = matched;
-  const bodyLength = length - prefix.length;
-  const run = MASK_CHAR.repeat(Math.max(1, Math.min(MAX_MASK_RUN, bodyLength)));
-  if (length >= MIN_LEN_FOR_TAIL && bodyLength > TAIL_CHARS * 2) {
-    return {
-      display: `${prefix}${run}${value.slice(-TAIL_CHARS)}`,
-      label,
-      length,
-      attributed: true
-    };
-  }
-  return { display: `${prefix}${run}`, label, length, attributed: true };
-}
-function isFindingId(id) {
-  return /^[0-9a-f]{16}$/.test(id);
-}
-function fingerprintId(value, machineSalt) {
-  const { createHmac } = __require("node:crypto");
-  return createHmac("sha256", machineSalt).update(value).digest("hex").slice(0, 16);
-}
-var MASK_CHAR = "•", MAX_MASK_RUN = 8, MIN_LEN_FOR_TAIL = 24, TAIL_CHARS = 4, PUBLIC_PREFIXES;
-var init_leak_fingerprint = __esm(() => {
-  PUBLIC_PREFIXES = [
-    ["sk-ant-api03-", "Anthropic API key"],
-    ["sk-ant-oat01-", "Anthropic OAuth token"],
-    ["sk-ant-", "Anthropic key"],
-    ["sk-proj-", "OpenAI project key"],
-    ["sk-svcacct-", "OpenAI service-account key"],
-    ["sk-admin-", "OpenAI admin key"],
-    ["sk-or-v1-", "OpenRouter key"],
-    ["github_pat_", "GitHub fine-grained token"],
-    ["ghp_", "GitHub personal access token"],
-    ["gho_", "GitHub OAuth token"],
-    ["ghu_", "GitHub user-to-server token"],
-    ["ghs_", "GitHub server-to-server token"],
-    ["ghr_", "GitHub refresh token"],
-    ["glpat-", "GitLab personal access token"],
-    ["xoxb-", "Slack bot token"],
-    ["xoxp-", "Slack user token"],
-    ["xapp-", "Slack app-level token"],
-    ["sk_live_", "Stripe live secret key"],
-    ["sk_test_", "Stripe test secret key"],
-    ["rk_live_", "Stripe restricted key"],
-    ["AKIA", "AWS access key ID"],
-    ["ASIA", "AWS temporary access key ID"],
-    ["AIza", "Google API key"],
-    ["hf_", "Hugging Face token"],
-    ["gsk_", "Groq API key"],
-    ["r8_", "Replicate token"],
-    ["xai-", "xAI key"],
-    ["npm_", "npm access token"],
-    ["dop_v1_", "DigitalOcean token"],
-    ["shpat_", "Shopify access token"],
-    ["sbp_", "Supabase token"]
-  ];
-});
-
-// src/audit/leak-store.ts
-import { randomBytes as randomBytes2 } from "node:crypto";
-import { existsSync as existsSync12, mkdirSync as mkdirSync8, readFileSync as readFileSync8 } from "node:fs";
-import { dirname as dirname8 } from "node:path";
-function readJson(path) {
-  try {
-    if (!existsSync12(path))
-      return null;
-    return JSON.parse(readFileSync8(path, "utf8"));
-  } catch {
-    return null;
-  }
-}
-function readLeakIdentity(home) {
-  const existing = readJson(auditLeakIdentityFile(home));
-  if (existing && typeof existing.salt === "string" && existing.salt.length >= 32) {
-    return { salt: existing.salt, dismissed: existing.dismissed ?? [] };
-  }
-  const minted = { salt: randomBytes2(32).toString("hex"), dismissed: [] };
-  writeLeakIdentity(minted, home);
-  return minted;
-}
-function writeLeakIdentity(identity, home) {
-  const path = auditLeakIdentityFile(home);
-  try {
-    mkdirSync8(dirname8(path), { recursive: true });
-    writeJsonAtomically(path, identity, { mode: FILE_MODE });
-    return true;
-  } catch {
-    return false;
-  }
-}
-function sanitizeFinding(raw) {
-  if (!raw || typeof raw !== "object" || Array.isArray(raw))
-    return null;
-  const f = raw;
-  if (typeof f.id !== "string" || !isFindingId(f.id))
-    return null;
-  const fp = f.fingerprint;
-  if (!fp || typeof fp !== "object" || typeof fp.display !== "string" || typeof fp.label !== "string") {
-    return null;
-  }
-  const sightings = Array.isArray(f.sightings) ? f.sightings.filter((s) => {
-    if (!s || typeof s !== "object")
-      return false;
-    const m = s.mechanism;
-    return !!m && typeof m === "object" && typeof m.summary === "string";
-  }) : [];
-  return {
-    ...f,
-    fingerprint: {
-      display: fp.display,
-      label: fp.label,
-      length: typeof fp.length === "number" && Number.isFinite(fp.length) ? fp.length : 0,
-      attributed: fp.attributed === true
-    },
-    name: typeof f.name === "string" ? f.name : null,
-    firstSeen: typeof f.firstSeen === "string" ? f.firstSeen : "",
-    lastSeen: typeof f.lastSeen === "string" ? f.lastSeen : "",
-    occurrences: typeof f.occurrences === "number" && Number.isFinite(f.occurrences) ? f.occurrences : sightings.length,
-    sightings
-  };
-}
-function readLeakRecord(home) {
-  const identity = readLeakIdentity(home);
-  const raw = readJson(auditLeaksFile(home));
-  if (!raw || raw.schemaVersion !== LEAK_RECORD_SCHEMA_VERSION || !Array.isArray(raw.findings)) {
-    return emptyRecord(identity.salt, new Date().toISOString());
-  }
-  const findings = raw.findings.map(sanitizeFinding).filter((f) => f !== null);
-  return { ...raw, findings, salt: identity.salt };
-}
-function writeLeakRecord(record, home, nowMs = Date.now()) {
-  const path = auditLeaksFile(home);
-  try {
-    mkdirSync8(dirname8(path), { recursive: true });
-    const pruned = pruneRecord(record, nowMs);
-    pruned.updatedAt = new Date(nowMs).toISOString();
-    writeJsonAtomically(path, pruned, { mode: FILE_MODE });
-    return true;
-  } catch {
-    return false;
-  }
-}
-function activeFindings(record, home) {
-  const dismissed = new Set(readLeakIdentity(home).dismissed);
-  return record.findings.filter((f) => !dismissed.has(f.id)).sort((a, b) => a.lastSeen < b.lastSeen ? 1 : a.lastSeen > b.lastSeen ? -1 : 0);
-}
-var FILE_MODE = 384;
-var init_leak_store = __esm(() => {
-  init_fp_home();
-  init_atomic_write();
-  init_leak_fingerprint();
-});
-
-// src/audit/leak-notice.ts
-import { existsSync as existsSync13, mkdirSync as mkdirSync9, readdirSync as readdirSync5, statSync as statSync8, writeFileSync as writeFileSync7, rmSync as rmSync4 } from "node:fs";
-import { resolve as resolve11 } from "node:path";
-function pendingLeakNotice(home, channel = "cli") {
-  try {
-    const dir = NOTICE_DIR(home, channel);
-    const claimed = new Set(existsSync13(dir) ? readdirSync5(dir) : []);
-    const ids = activeFindings(readLeakRecord(home), home).map((f) => f.id).filter((id) => !claimed.has(id));
-    return { ids, count: ids.length };
-  } catch {
-    return { ids: [], count: 0 };
-  }
-}
-function markLeakNoticeDelivered(ids, home, channel = "cli") {
-  const won = [];
-  try {
-    const dir = NOTICE_DIR(home, channel);
-    mkdirSync9(dir, { recursive: true });
-    for (const id of ids) {
-      if (!isFindingId(id))
-        continue;
-      try {
-        writeFileSync7(resolve11(dir, id), "", { flag: "wx", mode: 384 });
-        won.push(id);
-      } catch {}
-    }
-  } catch {}
-  return won;
-}
-var NOTICE_DIR = (home, channel = "cli") => resolve11(auditDir(home), channel === "cli" ? "notified" : `notified-${channel}`), MARKER_TTL_MS;
-var init_leak_notice = __esm(() => {
-  init_fp_home();
-  init_leak_store();
-  init_leak_fingerprint();
-  MARKER_TTL_MS = 120 * 86400000;
-});
-
 // src/hooks/resolve-cwd.ts
 function resolveCwd(integration, parsed) {
   const direct = typeof parsed.cwd === "string" && parsed.cwd.length > 0 ? parsed.cwd : undefined;
@@ -17540,10 +17175,23 @@ var init_cursor_projects = __esm(() => {
 });
 
 // lib/sqlite-reader.ts
-import { existsSync as existsSync14, readFileSync as readFileSync9 } from "node:fs";
+import { existsSync as existsSync11, readFileSync as readFileSync8 } from "node:fs";
 import initSqlJs from "sql.js/dist/sql-asm.js";
+function silenceSqliteExperimentalWarning() {
+  if (warningPatched)
+    return;
+  warningPatched = true;
+  const original = process.emitWarning.bind(process);
+  process.emitWarning = (warning, ...rest) => {
+    const text = typeof warning === "string" ? warning : String(warning?.message ?? "");
+    if (text.includes("SQLite is an experimental feature"))
+      return;
+    return original(warning, ...rest);
+  };
+}
 async function tryNodeSqlite(dbPath) {
   try {
+    silenceSqliteExperimentalWarning();
     const mod = await import("node:sqlite");
     const db = new mod.DatabaseSync(dbPath, { readOnly: true });
     return {
@@ -17564,10 +17212,21 @@ function loadSqlJs() {
     sqlPromise = initSqlJs();
   return sqlPromise;
 }
+function clearWalFlag(bytes) {
+  if (bytes.length < 20)
+    return bytes;
+  if (bytes.toString("latin1", 0, 16) !== SQLITE_MAGIC)
+    return bytes;
+  if (bytes[18] === 1 && bytes[19] === 1)
+    return bytes;
+  bytes[18] = 1;
+  bytes[19] = 1;
+  return bytes;
+}
 async function trySqlJs(dbPath) {
   try {
     const SQL = await loadSqlJs();
-    const db = new SQL.Database(readFileSync9(dbPath));
+    const db = new SQL.Database(clearWalFlag(readFileSync8(dbPath)));
     return {
       query(sql, params) {
         const stmt = db.prepare(sql);
@@ -17591,11 +17250,11 @@ async function trySqlJs(dbPath) {
   }
 }
 async function openSqliteReadonly(dbPath) {
-  if (!existsSync14(dbPath))
+  if (!existsSync11(dbPath))
     return null;
   return await tryNodeSqlite(dbPath) ?? await trySqlJs(dbPath);
 }
-var sqlPromise = null;
+var warningPatched = false, sqlPromise = null, SQLITE_MAGIC = "SQLite format 3\x00";
 var init_sqlite_reader = () => {};
 
 // lib/opencode-db.ts
@@ -18248,7 +17907,7 @@ var init_hermes_projects = __esm(() => {
 
 // lib/openclaw-sessions.ts
 import { readFile as readFile7 } from "node:fs/promises";
-import { readdirSync as readdirSync6, statSync as statSync9 } from "node:fs";
+import { readdirSync as readdirSync5, statSync as statSync7 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
 import { join as join14 } from "node:path";
 function openclawHome() {
@@ -18367,7 +18026,7 @@ function openclawLinesToLogEntries(lines, source = "session") {
 }
 function listOpenClawAgents() {
   try {
-    return readdirSync6(join14(openclawHome(), "agents"), { withFileTypes: true }).filter((d) => d.isDirectory() && !d.name.startsWith(".")).map((d) => d.name).sort();
+    return readdirSync5(join14(openclawHome(), "agents"), { withFileTypes: true }).filter((d) => d.isDirectory() && !d.name.startsWith(".")).map((d) => d.name).sort();
   } catch {
     return [];
   }
@@ -18377,7 +18036,7 @@ function listOpenClawTranscripts() {
   const out = [];
   let agentIds;
   try {
-    agentIds = readdirSync6(agentsDir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
+    agentIds = readdirSync5(agentsDir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
   } catch {
     return out;
   }
@@ -18385,7 +18044,7 @@ function listOpenClawTranscripts() {
     const sessionsDir = join14(agentsDir, agentId, "sessions");
     let files;
     try {
-      files = readdirSync6(sessionsDir);
+      files = readdirSync5(sessionsDir);
     } catch {
       continue;
     }
@@ -18397,7 +18056,7 @@ function listOpenClawTranscripts() {
         continue;
       const transcriptPath = join14(sessionsDir, file);
       try {
-        const st = statSync9(transcriptPath);
+        const st = statSync7(transcriptPath);
         out.push({ agentId, sessionId, transcriptPath, mtimeMs: st.mtimeMs, sizeBytes: st.size });
       } catch {}
     }
@@ -18448,7 +18107,7 @@ __export(exports_openclaw_projects, {
   getOpenClawSessions: () => getOpenClawSessions,
   openClawProjectPath: () => openClawProjectPath
 });
-import { readFileSync as readFileSync10 } from "node:fs";
+import { readFileSync as readFileSync9 } from "node:fs";
 import { join as join15 } from "node:path";
 function str(v) {
   return typeof v === "string" && v.length > 0 ? v : undefined;
@@ -18458,7 +18117,7 @@ function readSessionsIndex(agentId) {
   const indexPath = join15(openclawHome(), "agents", agentId, "sessions", "sessions.json");
   let raw;
   try {
-    raw = JSON.parse(readFileSync10(indexPath, "utf-8"));
+    raw = JSON.parse(readFileSync9(indexPath, "utf-8"));
   } catch {
     return out;
   }
@@ -18607,7 +18266,7 @@ var init_openclaw_projects = __esm(() => {
 
 // lib/factory-sessions.ts
 import { readFile as readFile8 } from "node:fs/promises";
-import { readdirSync as readdirSync7, statSync as statSync10 } from "node:fs";
+import { readdirSync as readdirSync6, statSync as statSync8 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
 import { join as join16 } from "node:path";
 function factoryHome() {
@@ -18753,7 +18412,7 @@ function listFactoryTranscripts() {
   const out = [];
   let projectDirs;
   try {
-    projectDirs = readdirSync7(root, { withFileTypes: true }).filter((d) => d.isDirectory());
+    projectDirs = readdirSync6(root, { withFileTypes: true }).filter((d) => d.isDirectory());
   } catch {
     return out;
   }
@@ -18763,7 +18422,7 @@ function listFactoryTranscripts() {
     const projectPath = join16(root, projectName);
     let files;
     try {
-      files = readdirSync7(projectPath);
+      files = readdirSync6(projectPath);
     } catch {
       continue;
     }
@@ -18775,7 +18434,7 @@ function listFactoryTranscripts() {
         continue;
       const transcriptPath = join16(projectPath, file);
       try {
-        const st = statSync10(transcriptPath);
+        const st = statSync8(transcriptPath);
         out.push({ projectName, cwd, sessionId, transcriptPath, mtimeMs: st.mtimeMs, sizeBytes: st.size });
       } catch {}
     }
@@ -19195,7 +18854,7 @@ var init_devin_projects = __esm(() => {
 
 // lib/antigravity-sessions.ts
 import { readFile as readFile9 } from "node:fs/promises";
-import { readdirSync as readdirSync8, statSync as statSync11 } from "node:fs";
+import { readdirSync as readdirSync7, statSync as statSync9 } from "node:fs";
 import { homedir as homedir15 } from "node:os";
 import { join as join18 } from "node:path";
 function antigravityHome() {
@@ -19320,7 +18979,7 @@ function listAntigravityTranscripts() {
   const out = [];
   let convoDirs;
   try {
-    convoDirs = readdirSync8(root, { withFileTypes: true }).filter((d) => d.isDirectory());
+    convoDirs = readdirSync7(root, { withFileTypes: true }).filter((d) => d.isDirectory());
   } catch {
     return out;
   }
@@ -19330,7 +18989,7 @@ function listAntigravityTranscripts() {
       continue;
     const transcriptPath = join18(root, conversationId, rel);
     try {
-      const st = statSync11(transcriptPath);
+      const st = statSync9(transcriptPath);
       if (!st.isFile())
         continue;
       out.push({ conversationId, transcriptPath, mtimeMs: st.mtimeMs, sizeBytes: st.size });
@@ -19343,7 +19002,7 @@ function findAntigravityTranscript(conversationId) {
     return null;
   const transcriptPath = join18(antigravityBrainRoot(), conversationId, antigravityTranscriptRelPath());
   try {
-    if (statSync11(transcriptPath).isFile())
+    if (statSync9(transcriptPath).isFile())
       return transcriptPath;
   } catch {}
   return null;
@@ -19795,7 +19454,7 @@ var init_goose_projects = __esm(() => {
 
 // lib/projects.ts
 import { readdir as readdir5, stat as stat4 } from "node:fs/promises";
-import { join as join21, resolve as resolve12, sep } from "node:path";
+import { join as join21, resolve as resolve11, sep } from "node:path";
 async function getMtime(path, label) {
   try {
     return (await stat4(path)).mtime;
@@ -19947,8 +19606,8 @@ function resolveProjectPath(projectName) {
     throw new RangeError("Empty project name");
   if (/^[/\\]/.test(projectName))
     throw new RangeError("Absolute project name");
-  const projectsPath = resolve12(getClaudeProjectsPath());
-  const candidate = resolve12(join21(projectsPath, projectName));
+  const projectsPath = resolve11(getClaudeProjectsPath());
+  const candidate = resolve11(join21(projectsPath, projectName));
   if (!candidate.startsWith(projectsPath + sep)) {
     throw new RangeError("Project path escapes root");
   }
@@ -20258,30 +19917,30 @@ var init_log_entries = __esm(() => {
 });
 
 // lib/codex-sessions.ts
-import { readFileSync as readFileSync11, readdirSync as readdirSync9, existsSync as existsSync15, writeFileSync as writeFileSync8, mkdirSync as mkdirSync10, statSync as statSync12 } from "node:fs";
+import { readFileSync as readFileSync10, readdirSync as readdirSync8, existsSync as existsSync12, writeFileSync as writeFileSync6, mkdirSync as mkdirSync7, statSync as statSync10 } from "node:fs";
 import { readFile as readFile11 } from "node:fs/promises";
-import { dirname as dirname9, join as join24 } from "node:path";
+import { dirname as dirname7, join as join24 } from "node:path";
 import { homedir as homedir17 } from "node:os";
 function readCache() {
   try {
-    if (!existsSync15(CACHE_PATH))
+    if (!existsSync12(CACHE_PATH))
       return {};
-    return JSON.parse(readFileSync11(CACHE_PATH, "utf-8"));
+    return JSON.parse(readFileSync10(CACHE_PATH, "utf-8"));
   } catch {
     return {};
   }
 }
 function writeCacheEntry(sessionId, path) {
   try {
-    mkdirSync10(dirname9(CACHE_PATH), { recursive: true });
+    mkdirSync7(dirname7(CACHE_PATH), { recursive: true });
     const cache = readCache();
     cache[sessionId] = path;
-    writeFileSync8(CACHE_PATH, JSON.stringify(cache), "utf-8");
+    writeFileSync6(CACHE_PATH, JSON.stringify(cache), "utf-8");
   } catch {}
 }
 function dirSearch(dir, sessionId) {
   try {
-    for (const f of readdirSync9(dir, { withFileTypes: true })) {
+    for (const f of readdirSync8(dir, { withFileTypes: true })) {
       if (f.isFile() && f.name.includes(sessionId) && f.name.endsWith(".jsonl")) {
         return join24(dir, f.name);
       }
@@ -20292,7 +19951,7 @@ function dirSearch(dir, sessionId) {
 function findCodexTranscript(sessionId) {
   const cache = readCache();
   const cached = cache[sessionId];
-  if (cached && existsSync15(cached))
+  if (cached && existsSync12(cached))
     return cached;
   const root = join24(homedir17(), ".codex", "sessions");
   const today = new Date;
@@ -20311,13 +19970,13 @@ function findCodexTranscript(sessionId) {
     }
   }
   try {
-    for (const y of readdirSync9(root, { withFileTypes: true })) {
+    for (const y of readdirSync8(root, { withFileTypes: true })) {
       if (!y.isDirectory())
         continue;
-      for (const m of readdirSync9(join24(root, y.name), { withFileTypes: true })) {
+      for (const m of readdirSync8(join24(root, y.name), { withFileTypes: true })) {
         if (!m.isDirectory())
           continue;
-        for (const d of readdirSync9(join24(root, y.name, m.name), { withFileTypes: true })) {
+        for (const d of readdirSync8(join24(root, y.name, m.name), { withFileTypes: true })) {
           if (!d.isDirectory())
             continue;
           const hit = dirSearch(join24(root, y.name, m.name, d.name), sessionId);
@@ -20346,6 +20005,15 @@ function joinTexts(blocks, wantedType) {
   return blocks.filter((b) => b?.type === wantedType && typeof b.text === "string").map((b) => b.text).join(`
 `);
 }
+function toolOutputText(output) {
+  if (typeof output === "string")
+    return output;
+  if (Array.isArray(output)) {
+    return output.filter((block) => !!block && typeof block === "object").map((block) => typeof block.text === "string" ? block.text : "").filter(Boolean).join(`
+`);
+  }
+  return output === undefined ? "" : JSON.stringify(output);
+}
 async function parseCodexLog(fileContent, source = "session") {
   const lines = fileContent.split(`
 `).filter((line) => line.trim() !== "");
@@ -20422,10 +20090,11 @@ async function parseCodexLog(fileContent, source = "session") {
         });
         continue;
       }
-      if (subType === "function_call") {
+      if (subType === "function_call" || subType === "custom_tool_call") {
         const callId = payload.call_id;
         const name = payload.name ?? "function_call";
-        const input = safeJsonParse4(payload.arguments);
+        const encodedInput = payload.arguments ?? payload.input;
+        const input = safeJsonParse4(encodedInput);
         const toolUse = {
           type: "tool_use",
           id: callId ?? `${timestamp}-${name}`,
@@ -20444,7 +20113,7 @@ async function parseCodexLog(fileContent, source = "session") {
         }
         continue;
       }
-      if (subType === "function_call_output") {
+      if (subType === "function_call_output" || subType === "custom_tool_call_output") {
         const callId = payload.call_id;
         const block = callId ? toolUseById.get(callId) : undefined;
         if (block) {
@@ -20453,7 +20122,7 @@ async function parseCodexLog(fileContent, source = "session") {
           block.result = {
             timestamp,
             timestampFormatted: formatTimestamp(date),
-            content: typeof payload.output === "string" ? payload.output : JSON.stringify(payload.output),
+            content: toolOutputText(payload.output),
             durationMs: duration,
             durationFormatted: formatDuration(duration)
           };
@@ -20546,7 +20215,7 @@ var init_codex_sessions = __esm(() => {
 });
 
 // src/hooks/resolve-permission-mode.ts
-import { readFileSync as readFileSync12 } from "node:fs";
+import { readFileSync as readFileSync11 } from "node:fs";
 function resolvePermissionMode(integration, parsed, sessionId) {
   if (integration === "claude") {
     return parsed.permission_mode ?? "default";
@@ -20561,7 +20230,7 @@ function resolveCodexMode(sessionId) {
     const path = findCodexTranscript(sessionId);
     if (!path)
       return;
-    for (const line of readFileSync12(path, "utf-8").split(`
+    for (const line of readFileSync11(path, "utf-8").split(`
 `)) {
       if (!line.includes("turn_context"))
         continue;
@@ -20586,9 +20255,9 @@ var init_resolve_permission_mode = __esm(() => {
 });
 
 // lib/copilot-sessions.ts
-import { readFileSync as readFileSync13, readdirSync as readdirSync10, existsSync as existsSync16, statSync as statSync13 } from "node:fs";
+import { readFileSync as readFileSync12, readdirSync as readdirSync9, existsSync as existsSync13, statSync as statSync11 } from "node:fs";
 import { readFile as readFile12 } from "node:fs/promises";
-import { join as join25, resolve as resolve13, sep as sep2 } from "node:path";
+import { join as join25, resolve as resolve12, sep as sep2 } from "node:path";
 import { homedir as homedir18 } from "node:os";
 function getCopilotHome() {
   return process.env.COPILOT_HOME || join25(homedir18(), ".copilot");
@@ -20599,8 +20268,8 @@ function getCopilotSessionStateRoot2() {
 function getCopilotSessionDir(sessionId) {
   if (!sessionId)
     return null;
-  const root = resolve13(getCopilotSessionStateRoot2());
-  const candidate = resolve13(root, sessionId);
+  const root = resolve12(getCopilotSessionStateRoot2());
+  const candidate = resolve12(root, sessionId);
   if (candidate === root || !candidate.startsWith(`${root}${sep2}`))
     return null;
   return candidate;
@@ -20615,17 +20284,17 @@ function findCopilotTranscript(sessionId) {
   const candidate = resolveSessionFile(sessionId, "events.jsonl");
   if (!candidate)
     return null;
-  return existsSync16(candidate) ? candidate : null;
+  return existsSync13(candidate) ? candidate : null;
 }
 function findCopilotWorkspace(sessionId) {
   const candidate = resolveSessionFile(sessionId, "workspace.yaml");
   if (!candidate)
     return null;
-  return existsSync16(candidate) ? candidate : null;
+  return existsSync13(candidate) ? candidate : null;
 }
 function readYamlScalar(path, key) {
   try {
-    const text = readFileSync13(path, "utf-8");
+    const text = readFileSync12(path, "utf-8");
     const re = new RegExp(`^${key}\\s*:\\s*(.+?)\\s*$`, "m");
     const m = text.match(re);
     if (!m)
@@ -20648,6 +20317,8 @@ async function parseCopilotLog(fileContent, source = "session") {
   const rawLines = [];
   const toolUseById = new Map;
   const toolUseStartMs = new Map;
+  let mostRecentToolUse;
+  let mostRecentToolUseStartMs = 0;
   let cwd;
   let seenSessionStart = false;
   for (let i = 0;i < lines.length; i++) {
@@ -20743,8 +20414,24 @@ async function parseCopilotLog(fileContent, source = "session") {
         toolUseById.set(callId, toolUse);
         toolUseStartMs.set(callId, date.getTime());
       }
+      mostRecentToolUse = toolUse;
+      mostRecentToolUseStartMs = date.getTime();
       continue;
     }
+    if (recType === "hook.start" && data.hookType === "postToolUse" && mostRecentToolUse) {
+      const input = data.input ?? {};
+      const hookResult = input.toolResult ?? {};
+      const hookContent = hookResult.textResultForLlm ?? hookResult.sessionLog;
+      if (typeof hookContent === "string" && hookContent.length > 0) {
+        mostRecentToolUse.result = {
+          timestamp,
+          timestampFormatted: formatTimestamp(date),
+          content: hookContent,
+          durationMs: Math.max(0, date.getTime() - mostRecentToolUseStartMs),
+          durationFormatted: formatDuration(Math.max(0, date.getTime() - mostRecentToolUseStartMs))
+        };
+      }
+    }
     if (recType === "tool.execution_complete") {
       const callId = data.toolCallId;
       const block = callId ? toolUseById.get(callId) : undefined;
@@ -20754,7 +20441,8 @@ async function parseCopilotLog(fileContent, source = "session") {
         const telemetry = data.toolTelemetry ?? {};
         const reportedMs = telemetry.metrics?.commandTimeMs ?? telemetry.metrics?.durationMs ?? null;
         const durationMs = typeof reportedMs === "number" && reportedMs >= 0 ? reportedMs : Math.max(0, date.getTime() - startMs);
-        const content = result.detailedContent ?? result.content ?? "";
+        const completionContent = result.detailedContent ?? result.content ?? "";
+        const content = block.result?.content || completionContent;
         block.result = {
           timestamp,
           timestampFormatted: formatTimestamp(date),
@@ -20803,9 +20491,9 @@ var init_copilot_sessions = __esm(() => {
 });
 
 // lib/cursor-sessions.ts
-import { readFileSync as readFileSync14, readdirSync as readdirSync11, existsSync as existsSync17, statSync as statSync14 } from "node:fs";
+import { readFileSync as readFileSync13, readdirSync as readdirSync10, existsSync as existsSync14, statSync as statSync12 } from "node:fs";
 import { readFile as readFile13 } from "node:fs/promises";
-import { basename as basename3, join as join26, resolve as resolve14, sep as sep3 } from "node:path";
+import { basename as basename3, join as join26, resolve as resolve13, sep as sep3 } from "node:path";
 import { homedir as homedir19 } from "node:os";
 function getCursorHome2() {
   return process.env.CURSOR_HOME || join26(homedir19(), ".cursor");
@@ -20813,28 +20501,28 @@ function getCursorHome2() {
 function getCursorSessionDir(sessionId) {
   if (!sessionId)
     return null;
-  const home = resolve14(getCursorHome2());
-  const projectsRoot = resolve14(home, NEW_PROJECTS_DIR2);
+  const home = resolve13(getCursorHome2());
+  const projectsRoot = resolve13(home, NEW_PROJECTS_DIR2);
   let projectEntries = [];
   try {
-    projectEntries = readdirSync11(projectsRoot, { withFileTypes: true });
+    projectEntries = readdirSync10(projectsRoot, { withFileTypes: true });
   } catch {}
   for (const entry of projectEntries) {
     if (!entry.isDirectory())
       continue;
-    const candidate = resolve14(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2, sessionId);
-    const transcriptRoot = resolve14(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2);
+    const candidate = resolve13(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2, sessionId);
+    const transcriptRoot = resolve13(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2);
     if (candidate === transcriptRoot || !candidate.startsWith(`${transcriptRoot}${sep3}`))
       continue;
-    if (existsSync17(candidate))
+    if (existsSync14(candidate))
       return candidate;
   }
   for (const sub of LEGACY_SESSION_ROOT_CANDIDATES2) {
-    const root = resolve14(home, sub);
-    const candidate = resolve14(root, sessionId);
+    const root = resolve13(home, sub);
+    const candidate = resolve13(root, sessionId);
     if (candidate === root || !candidate.startsWith(`${root}${sep3}`))
       continue;
-    if (existsSync17(candidate))
+    if (existsSync14(candidate))
       return candidate;
   }
   return null;
@@ -20844,11 +20532,11 @@ function findCursorTranscript(sessionId) {
   if (!dir)
     return null;
   const newCandidate = join26(dir, `${basename3(dir)}.jsonl`);
-  if (existsSync17(newCandidate))
+  if (existsSync14(newCandidate))
     return newCandidate;
   for (const name of LEGACY_TRANSCRIPT_FILE_CANDIDATES2) {
     const candidate = join26(dir, name);
-    if (existsSync17(candidate))
+    if (existsSync14(candidate))
       return candidate;
   }
   return null;
@@ -20878,8 +20566,27 @@ async function parseCursorLog(fileContent, source = "session") {
     if (!raw.type && raw.role && raw.message?.content) {
       const synthDate = new Date(SYNTH_T0 + i);
       const synthTs = synthDate.toISOString();
-      const textParts = raw.message.content.filter((c) => c?.type === "text" && typeof c.text === "string").map((c) => c.text).join("");
+      const messageContent = raw.message.content;
+      const textParts = messageContent.filter((c) => c?.type === "text" && typeof c.text === "string").map((c) => c.text).join("");
       if (raw.role === "user") {
+        let attachedResult = false;
+        for (const block of messageContent) {
+          if (block?.type !== "tool_result")
+            continue;
+          const callId = typeof block.tool_use_id === "string" ? block.tool_use_id : undefined;
+          const toolUse = callId ? toolUseById.get(callId) : undefined;
+          if (!toolUse)
+            continue;
+          const durationMs = Math.max(0, synthDate.getTime() - (toolUseStartMs.get(callId) ?? synthDate.getTime()));
+          toolUse.result = {
+            timestamp: synthTs,
+            timestampFormatted: formatTimestamp(synthDate),
+            content: typeof block.content === "string" ? block.content : block.content == null ? "" : JSON.stringify(block.content),
+            durationMs,
+            durationFormatted: formatDuration(durationMs)
+          };
+          attachedResult = true;
+        }
         const queryMatch = /<user_query>\s*([\s\S]*?)\s*<\/user_query>/.exec(textParts);
         const text = queryMatch ? queryMatch[1] : textParts;
         if (text) {
@@ -20888,11 +20595,35 @@ async function parseCursorLog(fileContent, source = "session") {
             ...baseEntry(rawCopy, synthTs, synthDate, source),
             message: { role: "user", content: text }
           });
+        } else if (!attachedResult) {
+          entries.push({
+            type: "system",
+            ...baseEntry(rawCopy, synthTs, synthDate, source),
+            raw: rawCopy
+          });
         }
         continue;
       }
       if (raw.role === "assistant") {
-        const blocks = textParts ? [{ type: "text", text: textParts }] : [];
+        const blocks = [];
+        if (textParts)
+          blocks.push({ type: "text", text: textParts });
+        for (let j = 0;j < messageContent.length; j++) {
+          const contentBlock = messageContent[j];
+          if (contentBlock?.type !== "tool_use")
+            continue;
+          const name = typeof contentBlock.name === "string" ? contentBlock.name : "tool";
+          const id = typeof contentBlock.id === "string" && contentBlock.id ? contentBlock.id : `cursor-${i}-${name}-${j}`;
+          const toolUse = {
+            type: "tool_use",
+            id,
+            name,
+            input: contentBlock.input && typeof contentBlock.input === "object" ? contentBlock.input : {}
+          };
+          blocks.push(toolUse);
+          toolUseById.set(id, toolUse);
+          toolUseStartMs.set(id, synthDate.getTime());
+        }
         if (blocks.length === 0) {
           entries.push({
             type: "system",
@@ -21059,9 +20790,9 @@ var init_cursor_sessions = __esm(() => {
 });
 
 // lib/pi-sessions.ts
-import { readFileSync as readFileSync15, readdirSync as readdirSync12, existsSync as existsSync18, statSync as statSync15 } from "node:fs";
+import { readFileSync as readFileSync14, readdirSync as readdirSync11, existsSync as existsSync15, statSync as statSync13 } from "node:fs";
 import { readFile as readFile14 } from "node:fs/promises";
-import { join as join27, resolve as resolve15, sep as sep4 } from "node:path";
+import { join as join27, resolve as resolve14, sep as sep4 } from "node:path";
 import { homedir as homedir20 } from "node:os";
 function getPiSessionStateRoot() {
   return process.env.PI_SESSIONS_DIR || join27(homedir20(), ".pi", "agent", "sessions");
@@ -21072,20 +20803,20 @@ function isSafeSessionId(sessionId) {
 function findPiTranscript(sessionId) {
   if (!isSafeSessionId(sessionId))
     return null;
-  const root = resolve15(getPiSessionStateRoot());
+  const root = resolve14(getPiSessionStateRoot());
   let cwdDirs;
   try {
-    cwdDirs = readdirSync12(root);
+    cwdDirs = readdirSync11(root);
   } catch {
     return null;
   }
   for (const cwdDir of cwdDirs) {
-    const cwdPath = resolve15(root, cwdDir);
+    const cwdPath = resolve14(root, cwdDir);
     if (!cwdPath.startsWith(`${root}${sep4}`))
       continue;
     let files;
     try {
-      files = readdirSync12(cwdPath);
+      files = readdirSync11(cwdPath);
     } catch {
       continue;
     }
@@ -21093,10 +20824,10 @@ function findPiTranscript(sessionId) {
       const m = SESSION_FILE_RE2.exec(f);
       if (!m || m[1].toLowerCase() !== sessionId.toLowerCase())
         continue;
-      const candidate = resolve15(cwdPath, f);
+      const candidate = resolve14(cwdPath, f);
       if (!candidate.startsWith(`${cwdPath}${sep4}`))
         continue;
-      if (existsSync18(candidate))
+      if (existsSync15(candidate))
         return candidate;
     }
   }
@@ -21499,14 +21230,53 @@ var init_pack_failclosed = __esm(() => {
   ]);
 });
 
+// lib/atomic-write.ts
+import {
+  chmodSync as chmodSync2,
+  existsSync as existsSync16,
+  mkdirSync as mkdirSync8,
+  renameSync as renameSync4,
+  rmSync as rmSync3,
+  statSync as statSync14,
+  writeFileSync as writeFileSync7
+} from "node:fs";
+import { dirname as dirname8 } from "node:path";
+import { randomBytes } from "node:crypto";
+function writeJsonAtomically(filePath, value, opts = {}) {
+  const mode = opts.mode ?? 384;
+  const dirMode = opts.dirMode ?? 448;
+  const dir = dirname8(filePath);
+  if (!existsSync16(dir))
+    mkdirSync8(dir, { recursive: true, mode: dirMode });
+  const tmp = `${filePath}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
+  try {
+    writeFileSync7(tmp, JSON.stringify(value, null, 2), { mode });
+    try {
+      if ((statSync14(tmp).mode & 63) !== 0)
+        chmodSync2(tmp, mode);
+    } catch {}
+    renameSync4(tmp, filePath);
+    try {
+      if ((statSync14(filePath).mode & 63) !== 0)
+        chmodSync2(filePath, mode);
+    } catch {}
+  } catch (err) {
+    try {
+      rmSync3(tmp, { force: true });
+    } catch {}
+    throw err;
+  }
+}
+var init_atomic_write = () => {};
+
 // src/hooks/session-pause.ts
-import { existsSync as existsSync19, mkdirSync as mkdirSync11, readdirSync as readdirSync13, readFileSync as readFileSync16, rmSync as rmSync5 } from "node:fs";
+import { existsSync as existsSync17, mkdirSync as mkdirSync9, readdirSync as readdirSync12, readFileSync as readFileSync15, rmSync as rmSync4 } from "node:fs";
 import { createHash as createHash6 } from "node:crypto";
-import { join as join28, resolve as resolve16 } from "node:path";
+import { join as join28, resolve as resolve15 } from "node:path";
 function pauseStateDir() {
   const override = process.env.FAILPROOFAI_STATE_DIR;
   if (override)
-    return resolve16(override, "sessions");
+    return resolve15(override, "sessions");
   return sessionPauseDir();
 }
 function pauseFilePath(sessionId) {
@@ -21567,9 +21337,9 @@ function readActivePause(sessionId, now = Date.now()) {
     return null;
   try {
     const path = pauseFilePath(sessionId);
-    if (!existsSync19(path))
+    if (!existsSync17(path))
       return null;
-    const stored = parseStored(JSON.parse(readFileSync16(path, "utf8")));
+    const stored = parseStored(JSON.parse(readFileSync15(path, "utf8")));
     if (!stored)
       return null;
     if (stored.expiresAt <= now)
@@ -21592,16 +21362,16 @@ function writePause(opts) {
     setBy: opts.setBy ?? "cli",
     ...opts.cwd ? { cwd: opts.cwd } : {}
   };
-  mkdirSync11(pauseStateDir(), { recursive: true, mode: 448 });
+  mkdirSync9(pauseStateDir(), { recursive: true, mode: 448 });
   writeJsonAtomically(pauseFilePath(opts.sessionId), { schemaVersion: SCHEMA_VERSION, ...pause });
   return pause;
 }
 function clearPause(sessionId) {
   const path = pauseFilePath(sessionId);
-  if (!existsSync19(path))
+  if (!existsSync17(path))
     return false;
   try {
-    rmSync5(path);
+    rmSync4(path);
     return true;
   } catch {
     return false;
@@ -21609,12 +21379,12 @@ function clearPause(sessionId) {
 }
 function listActivePauses(now = Date.now()) {
   const dir = pauseStateDir();
-  if (!existsSync19(dir))
+  if (!existsSync17(dir))
     return [];
   const out = [];
   let names;
   try {
-    names = readdirSync13(dir);
+    names = readdirSync12(dir);
   } catch {
     return [];
   }
@@ -21622,7 +21392,7 @@ function listActivePauses(now = Date.now()) {
     if (!name.endsWith(".json"))
       continue;
     try {
-      const stored = parseStored(JSON.parse(readFileSync16(join28(dir, name), "utf8")));
+      const stored = parseStored(JSON.parse(readFileSync15(join28(dir, name), "utf8")));
       if (!stored || stored.expiresAt <= now)
         continue;
       const { schemaVersion: _ignored, ...pause } = stored;
@@ -21663,17 +21433,17 @@ var init_session_pause = __esm(() => {
 import { createHash as createHash7 } from "node:crypto";
 import {
   chmodSync as chmodSync3,
-  existsSync as existsSync20,
-  mkdirSync as mkdirSync12,
-  readdirSync as readdirSync14,
-  readFileSync as readFileSync17,
+  existsSync as existsSync18,
+  mkdirSync as mkdirSync10,
+  readdirSync as readdirSync13,
+  readFileSync as readFileSync16,
   renameSync as renameSync5,
-  rmSync as rmSync6,
-  statSync as statSync16,
-  writeFileSync as writeFileSync9
+  rmSync as rmSync5,
+  statSync as statSync15,
+  writeFileSync as writeFileSync8
 } from "node:fs";
 import { createRequire as createRequire2 } from "node:module";
-import { dirname as dirname10, resolve as resolve17 } from "node:path";
+import { dirname as dirname9, resolve as resolve16 } from "node:path";
 import { gunzipSync } from "node:zlib";
 function baseUrl2() {
   return (process.env.FAILPROOFAI_DAEMON_BASE_URL || DEFAULT_BASE_URL2).replace(/\/+$/, "");
@@ -21682,7 +21452,7 @@ function daemonBinaryDir() {
   return binDir();
 }
 function installedBinaryPath(ver = version2) {
-  return resolve17(daemonBinaryDir(), `failproofaid-${ver}`);
+  return resolve16(daemonBinaryDir(), `failproofaid-${ver}`);
 }
 function daemonAssetUrl(key, ver = version2) {
   return `${baseUrl2()}/v${ver}/failproofaid-${key}.gz`;
@@ -21699,35 +21469,35 @@ function npmPlatformBinaryPath(key) {
     return null;
   const name = platformPackageName(key);
   try {
-    const requireFromRoot = createRequire2(resolve17(packageRoot, "package.json"));
-    const found = platformPackageBinary(dirname10(requireFromRoot.resolve(`${name}/package.json`)));
+    const requireFromRoot = createRequire2(resolve16(packageRoot, "package.json"));
+    const found = platformPackageBinary(dirname9(requireFromRoot.resolve(`${name}/package.json`)));
     if (found)
       return found;
   } catch {}
-  return platformPackageBinary(resolve17(packageRoot, "node_modules", name));
+  return platformPackageBinary(resolve16(packageRoot, "node_modules", name));
 }
 function platformPackageBinary(dir) {
   try {
-    const manifest = JSON.parse(readFileSync17(resolve17(dir, "package.json"), "utf8"));
+    const manifest = JSON.parse(readFileSync16(resolve16(dir, "package.json"), "utf8"));
     if (manifest.version !== version2)
       return null;
   } catch {
     return null;
   }
-  const candidate = resolve17(dir, "bin", "failproofaid");
-  return existsSync20(candidate) ? candidate : null;
+  const candidate = resolve16(dir, "bin", "failproofaid");
+  return existsSync18(candidate) ? candidate : null;
 }
 function pruneOldDaemonBinaries(keep = 2) {
   const removed = [];
   try {
     const dir = daemonBinaryDir();
-    const entries = readdirSync14(dir).filter((f) => f.startsWith("failproofaid-") && !f.endsWith(".tmp")).map((f) => {
-      const full = resolve17(dir, f);
-      return { full, mtime: statSync16(full).mtimeMs };
+    const entries = readdirSync13(dir).filter((f) => f.startsWith("failproofaid-") && !f.endsWith(".tmp")).map((f) => {
+      const full = resolve16(dir, f);
+      return { full, mtime: statSync15(full).mtimeMs };
     }).sort((a, b) => b.mtime - a.mtime);
     for (const stale of entries.slice(keep)) {
       try {
-        rmSync6(stale.full, { force: true });
+        rmSync5(stale.full, { force: true });
         removed.push(stale.full);
       } catch {}
     }
@@ -21738,13 +21508,13 @@ function installBinaryBytes(binary) {
   const target = installedBinaryPath();
   const tempPath = `${target}.${process.pid}.tmp`;
   try {
-    mkdirSync12(daemonBinaryDir(), { recursive: true });
-    writeFileSync9(tempPath, binary);
+    mkdirSync10(daemonBinaryDir(), { recursive: true });
+    writeFileSync8(tempPath, binary);
     chmodSync3(tempPath, 493);
     renameSync5(tempPath, target);
     return target;
   } catch (err) {
-    rmSync6(tempPath, { force: true });
+    rmSync5(tempPath, { force: true });
     throw err;
   }
 }
@@ -21758,7 +21528,7 @@ function installFromNpmPackage(key) {
   if (!source)
     return { error: `${platformPackageName(key)} is not installed` };
   try {
-    const bytes = readFileSync17(source);
+    const bytes = readFileSync16(source);
     const mismatch = binaryDigestMismatch(expectedNpmBinaryDigest(key), bytes, source);
     if (mismatch)
       return { error: mismatch };
@@ -21793,7 +21563,7 @@ function digestFor2(manifest, assetName) {
 }
 async function downloadFailproofaidBinary(key) {
   const target = installedBinaryPath();
-  if (existsSync20(target))
+  if (existsSync18(target))
     return { path: target };
   if (process.env.FAILPROOFAI_NO_DOWNLOAD) {
     return { error: "daemon downloads are disabled (FAILPROOFAI_NO_DOWNLOAD)" };
@@ -21827,10 +21597,10 @@ var init_daemon_download = __esm(() => {
 
 // src/hooks/daemon-client.ts
 import { createConnection as createConnection2 } from "node:net";
-import { existsSync as existsSync21 } from "node:fs";
+import { existsSync as existsSync19 } from "node:fs";
 function daemonSocketPresent() {
   try {
-    return existsSync21(socketPath2());
+    return existsSync19(socketPath2());
   } catch {
     return false;
   }
@@ -21956,16 +21726,16 @@ var init_daemon_client2 = __esm(() => {
 
 // src/hooks/daemon-service.ts
 import {
-  existsSync as existsSync22,
-  mkdirSync as mkdirSync13,
+  existsSync as existsSync20,
+  mkdirSync as mkdirSync11,
   mkdtempSync,
-  readFileSync as readFileSync18,
-  writeFileSync as writeFileSync10,
+  readFileSync as readFileSync17,
+  writeFileSync as writeFileSync9,
   unlinkSync as unlinkSync3,
-  rmSync as rmSync7
+  rmSync as rmSync6
 } from "node:fs";
 import { homedir as homedir21, tmpdir as tmpdir2, userInfo } from "node:os";
-import { resolve as resolve18 } from "node:path";
+import { resolve as resolve17 } from "node:path";
 import { execFileSync as execFileSync2 } from "node:child_process";
 function setDaemonConfigured(value, installedVersion) {
   try {
@@ -21987,13 +21757,13 @@ function resolveFailproofaidBinaryPath() {
   if (process.env.FAILPROOFAI_DAEMON_BINARY)
     return process.env.FAILPROOFAI_DAEMON_BINARY;
   const downloaded = installedBinaryPath();
-  if (existsSync22(downloaded))
+  if (existsSync20(downloaded))
     return downloaded;
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (packageRoot) {
     for (const profile of ["release", "debug"]) {
-      const candidate = resolve18(packageRoot, "target", profile, "failproofaid");
-      if (existsSync22(candidate))
+      const candidate = resolve17(packageRoot, "target", profile, "failproofaid");
+      if (existsSync20(candidate))
         return candidate;
     }
   }
@@ -22023,8 +21793,8 @@ function resolveWorkerCommand() {
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (!packageRoot)
     return null;
-  const workerScript = resolve18(packageRoot, "dist", "worker.mjs");
-  if (!existsSync22(workerScript))
+  const workerScript = resolve17(packageRoot, "dist", "worker.mjs");
+  if (!existsSync20(workerScript))
     return null;
   return `${shellQuote(process.execPath)} ${shellQuote(workerScript)}`;
 }
@@ -22034,8 +21804,8 @@ function resolveCliCommand() {
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (!packageRoot)
     return null;
-  const cliScript = resolve18(packageRoot, "dist", "cli.mjs");
-  if (!existsSync22(cliScript))
+  const cliScript = resolve17(packageRoot, "dist", "cli.mjs");
+  if (!existsSync20(cliScript))
     return null;
   return `${shellQuote(process.execPath)} ${shellQuote(cliScript)}`;
 }
@@ -22048,8 +21818,8 @@ function workerScriptPath() {
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (!packageRoot)
     return null;
-  const workerScript = resolve18(packageRoot, "dist", "worker.mjs");
-  return existsSync22(workerScript) ? workerScript : null;
+  const workerScript = resolve17(packageRoot, "dist", "worker.mjs");
+  return existsSync20(workerScript) ? workerScript : null;
 }
 function assertUnitSafe(value, field) {
   if (UNIT_UNSAFE_RE.test(value)) {
@@ -22075,10 +21845,10 @@ function systemdUnitDir() {
   return process.env.FAILPROOFAI_SYSTEMD_DIR || "/etc/systemd/system";
 }
 function systemdUnitPath(user = serviceUser()) {
-  return resolve18(systemdUnitDir(), systemdUnitName(user));
+  return resolve17(systemdUnitDir(), systemdUnitName(user));
 }
 function legacySystemdUserUnitPath() {
-  return resolve18(homedir21(), ".config", "systemd", "user", "failproofaid.service");
+  return resolve17(homedir21(), ".config", "systemd", "user", "failproofaid.service");
 }
 function launchdLabel(user = serviceUser()) {
   return `ai.failproof.failproofaid.${user}`;
@@ -22087,7 +21857,7 @@ function launchdPlistPath(user = serviceUser()) {
   return `/Library/LaunchDaemons/${launchdLabel(user)}.plist`;
 }
 function legacyLaunchAgentPlistPath() {
-  return resolve18(homedir21(), "Library", "LaunchAgents", "ai.failproof.failproofaid.plist");
+  return resolve17(homedir21(), "Library", "LaunchAgents", "ai.failproof.failproofaid.plist");
 }
 function legacySharedLaunchDaemonPath() {
   return "/Library/LaunchDaemons/ai.failproof.failproofaid.plist";
@@ -22135,20 +21905,20 @@ function runPrivileged(command, args) {
   execFileSync2(cmd, argv, { stdio: "ignore", timeout: SERVICE_CMD_TIMEOUT_MS });
 }
 function writePrivilegedFile(destination, contents, mode = "0644") {
-  const stagingDir = mkdtempSync(resolve18(tmpdir2(), "failproofaid-stage-"));
-  const staging = resolve18(stagingDir, "service-definition");
+  const stagingDir = mkdtempSync(resolve17(tmpdir2(), "failproofaid-stage-"));
+  const staging = resolve17(stagingDir, "service-definition");
   try {
-    writeFileSync10(staging, contents, "utf8");
+    writeFileSync9(staging, contents, "utf8");
     runPrivileged("install", ["-m", mode, staging, destination]);
   } finally {
-    rmSync7(stagingDir, { recursive: true, force: true });
+    rmSync6(stagingDir, { recursive: true, force: true });
   }
 }
 function removeLegacyUserService() {
   try {
     if (process.platform === "linux") {
       const legacy = legacySystemdUserUnitPath();
-      if (!existsSync22(legacy))
+      if (!existsSync20(legacy))
         return;
       try {
         execFileSync2("systemctl", ["--user", "disable", "--now", "failproofaid.service"], {
@@ -22165,7 +21935,7 @@ function removeLegacyUserService() {
       } catch {}
     } else {
       const legacyAgent = legacyLaunchAgentPlistPath();
-      if (existsSync22(legacyAgent)) {
+      if (existsSync20(legacyAgent)) {
         try {
           execFileSync2("launchctl", ["unload", "-w", legacyAgent], {
             stdio: "ignore",
@@ -22175,7 +21945,7 @@ function removeLegacyUserService() {
         unlinkSync3(legacyAgent);
       }
       const legacyDaemon = legacySharedLaunchDaemonPath();
-      if (existsSync22(legacyDaemon)) {
+      if (existsSync20(legacyDaemon)) {
         try {
           runPrivileged("launchctl", ["unload", "-w", legacyDaemon]);
         } catch {}
@@ -22192,7 +21962,7 @@ function systemdUnitContents(binaryPath, workerCmd, cliCmd = null) {
   const user = assertUnitSafe(serviceUser(), "User");
   assertUnitSafe(binaryPath, "ExecStart");
   assertUnitSafe(homedir21(), "HOME");
-  const conditionPaths = [binaryPath, workerScriptPath()].filter((p) => typeof p === "string" && existsSync22(p));
+  const conditionPaths = [binaryPath, workerScriptPath()].filter((p) => typeof p === "string" && existsSync20(p));
   const conditionLines = conditionPaths.map((p) => `ConditionPathExists=${assertUnitSafe(p, "ConditionPathExists")}
 `).join("");
   return `[Unit]
@@ -22253,9 +22023,9 @@ ${env.map(([key, value]) => `        <key>${key}</key>
     <key>UserName</key>
     <string>${escapeXml(serviceUser())}</string>
 ${envBlock}    <key>StandardOutPath</key>
-    <string>${escapeXml(resolve18(logDir, "failproofaid.log"))}</string>
+    <string>${escapeXml(resolve17(logDir, "failproofaid.log"))}</string>
     <key>StandardErrorPath</key>
-    <string>${escapeXml(resolve18(logDir, "failproofaid.err.log"))}</string>
+    <string>${escapeXml(resolve17(logDir, "failproofaid.err.log"))}</string>
 </dict>
 </plist>
 `;
@@ -22301,7 +22071,7 @@ async function installDaemonService() {
     } else {
       const plistPath = launchdPlistPath();
       const logDir = logsDir();
-      mkdirSync13(logDir, { recursive: true });
+      mkdirSync11(logDir, { recursive: true });
       try {
         runPrivileged("launchctl", ["unload", plistPath]);
       } catch {}
@@ -22387,10 +22157,10 @@ function readInstalledServiceDefinition() {
   if (!isDaemonSupportedPlatform())
     return null;
   const path = daemonServiceFilePath();
-  if (!path || !existsSync22(path))
+  if (!path || !existsSync20(path))
     return null;
   try {
-    return readFileSync18(path, "utf8");
+    return readFileSync17(path, "utf8");
   } catch {
     return null;
   }
@@ -22499,7 +22269,7 @@ async function ensureDaemonServiceCurrent() {
       restartSystemdUnit();
     } else {
       const plistPath = launchdPlistPath();
-      mkdirSync13(logDir, { recursive: true });
+      mkdirSync11(logDir, { recursive: true });
       previous = definition;
       try {
         runPrivileged("launchctl", ["unload", plistPath]);
@@ -22523,7 +22293,7 @@ async function uninstallDaemonService() {
   try {
     if (process.platform === "linux") {
       const unitPath = systemdUnitPath();
-      if (!existsSync22(unitPath))
+      if (!existsSync20(unitPath))
         return;
       try {
         runPrivileged("systemctl", ["disable", "--now", systemdUnitName()]);
@@ -22534,7 +22304,7 @@ async function uninstallDaemonService() {
       } catch {}
     } else {
       const plistPath = launchdPlistPath();
-      if (!existsSync22(plistPath))
+      if (!existsSync20(plistPath))
         return;
       try {
         runPrivileged("launchctl", ["unload", "-w", plistPath]);
@@ -22551,7 +22321,7 @@ function daemonVersionSkew() {
   const recorded = readVersionFile()?.daemon;
   if (!recorded)
     return null;
-  if (!existsSync22(installedBinaryPath(recorded)))
+  if (!existsSync20(installedBinaryPath(recorded)))
     return null;
   return recorded === version2 ? null : { installed: recorded, expected: version2 };
 }
@@ -22569,7 +22339,7 @@ function daemonServiceStatus() {
   if (!isDaemonSupportedPlatform())
     return "unsupported-platform";
   if (process.platform === "linux") {
-    if (!existsSync22(systemdUnitPath()))
+    if (!existsSync20(systemdUnitPath()))
       return "not-installed";
     try {
       const out = execFileSync2("systemctl", ["is-active", systemdUnitName()], {
@@ -22582,7 +22352,7 @@ function daemonServiceStatus() {
     }
   }
   const plistPath = launchdPlistPath();
-  if (!existsSync22(plistPath))
+  if (!existsSync20(plistPath))
     return "not-installed";
   try {
     const root = typeof process.getuid === "function" && process.getuid() === 0;
@@ -22614,48 +22384,48 @@ var init_daemon_service = __esm(() => {
 // src/hooks/fp-reset.ts
 import {
   copyFileSync,
-  existsSync as existsSync23,
-  mkdirSync as mkdirSync14,
-  readFileSync as readFileSync19,
-  readdirSync as readdirSync15,
+  existsSync as existsSync21,
+  mkdirSync as mkdirSync12,
+  readFileSync as readFileSync18,
+  readdirSync as readdirSync14,
   renameSync as renameSync6,
-  rmSync as rmSync8,
+  rmSync as rmSync7,
   rmdirSync,
-  statSync as statSync17,
-  writeFileSync as writeFileSync11
+  statSync as statSync16,
+  writeFileSync as writeFileSync10
 } from "node:fs";
-import { dirname as dirname11, isAbsolute as isAbsolute3, relative as relative4, resolve as resolve19 } from "node:path";
+import { dirname as dirname10, isAbsolute as isAbsolute3, relative as relative4, resolve as resolve18 } from "node:path";
 function migrateConventionPolicies() {
   const from = legacy.customPoliciesDir();
-  if (!existsSync23(from))
+  if (!existsSync21(from))
     return [];
   const moved = [];
   const mergeInto = (dir, dest, prefix) => {
     let entries;
     try {
-      entries = readdirSync15(dir, { withFileTypes: true });
+      entries = readdirSync14(dir, { withFileTypes: true });
     } catch {
       return;
     }
     if (entries.length === 0)
       return;
     try {
-      mkdirSync14(dest, { recursive: true });
+      mkdirSync12(dest, { recursive: true });
     } catch {
       return;
     }
     for (const entry of entries) {
-      const source = resolve19(dir, entry.name);
-      const target = resolve19(dest, entry.name);
+      const source = resolve18(dir, entry.name);
+      const target = resolve18(dest, entry.name);
       const name = `${prefix}${entry.name}`;
-      if (!existsSync23(target)) {
+      if (!existsSync21(target)) {
         try {
           renameSync6(source, target);
           moved.push(name);
         } catch {}
         continue;
       }
-      if (entry.isDirectory() && statSync17(target).isDirectory()) {
+      if (entry.isDirectory() && statSync16(target).isDirectory()) {
         mergeInto(source, target, `${name}/`);
         try {
           rmdirSync(source);
@@ -22675,23 +22445,23 @@ function migrateLegacySpool() {
     [legacy.spoolDir(), spoolDir()],
     [legacy.failedDir(), failedDir()]
   ]) {
-    if (!existsSync23(from))
+    if (!existsSync21(from))
       continue;
     try {
-      mkdirSync14(to, { recursive: true });
-      for (const entry of readdirSync15(from, { withFileTypes: true })) {
+      mkdirSync12(to, { recursive: true });
+      for (const entry of readdirSync14(from, { withFileTypes: true })) {
         if (!entry.isFile())
           continue;
         let name = entry.name;
         let n = 0;
-        while (existsSync23(resolve19(to, name)))
+        while (existsSync21(resolve18(to, name)))
           name = `legacy-${n++}-${entry.name}`;
         try {
-          renameSync6(resolve19(from, entry.name), resolve19(to, name));
+          renameSync6(resolve18(from, entry.name), resolve18(to, name));
           moved.push(name);
         } catch {
           try {
-            copyFileSync(resolve19(from, entry.name), resolve19(to, name));
+            copyFileSync(resolve18(from, entry.name), resolve18(to, name));
             moved.push(name);
           } catch {}
         }
@@ -22702,24 +22472,24 @@ function migrateLegacySpool() {
 }
 function migrateHookActivity() {
   const from = legacy.hookActivityDir();
-  if (!existsSync23(from))
+  if (!existsSync21(from))
     return [];
   const moved = [];
   try {
-    const entries = readdirSync15(from, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl"));
+    const entries = readdirSync14(from, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl"));
     if (entries.length === 0)
       return [];
     const to = hookActivityDir();
-    mkdirSync14(to, { recursive: true });
+    mkdirSync12(to, { recursive: true });
     const stamp = Date.now();
     let seq = 0;
     for (const entry of entries) {
-      const source = resolve19(from, entry.name);
+      const source = resolve18(from, entry.name);
       let name = entry.name === "current.jsonl" ? `page-${stamp}-${seq++}.jsonl` : entry.name;
-      let target = resolve19(to, name);
-      while (existsSync23(target)) {
+      let target = resolve18(to, name);
+      while (existsSync21(target)) {
         name = `page-${stamp}-${seq++}.jsonl`;
-        target = resolve19(to, name);
+        target = resolve18(to, name);
       }
       try {
         renameSync6(source, target);
@@ -22743,7 +22513,7 @@ function retirePolicyConfigKeys() {
   const at = globalPolicyConfigFile();
   let parsed;
   try {
-    const raw = JSON.parse(readFileSync19(at, "utf8"));
+    const raw = JSON.parse(readFileSync18(at, "utf8"));
     if (!raw || typeof raw !== "object" || Array.isArray(raw))
       return [];
     parsed = raw;
@@ -22757,9 +22527,9 @@ function retirePolicyConfigKeys() {
     delete parsed[key];
   try {
     if (Object.keys(parsed).length === 0)
-      rmSync8(at, { force: true });
+      rmSync7(at, { force: true });
     else
-      writeFileSync11(at, JSON.stringify(parsed, null, 2) + `
+      writeFileSync10(at, JSON.stringify(parsed, null, 2) + `
 `, "utf8");
   } catch {
     return [];
@@ -22767,12 +22537,12 @@ function retirePolicyConfigKeys() {
   return [...removed];
 }
 function readCarriedPolicyConfig() {
-  const from = resolve19(legacy.localPoliciesDir(), "policies-config.json");
-  if (!existsSync23(from))
+  const from = resolve18(legacy.localPoliciesDir(), "policies-config.json");
+  if (!existsSync21(from))
     return null;
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync19(from, "utf8"));
+    parsed = JSON.parse(readFileSync18(from, "utf8"));
   } catch {
     return null;
   }
@@ -22797,11 +22567,11 @@ function rewriteCarriedCustomPaths(carried) {
   const repoint = (value) => {
     if (typeof value !== "string" || value === "")
       return value;
-    const abs = resolve19(value);
+    const abs = resolve18(value);
     const rel = relative4(fromDir, abs);
     if (rel === "" || rel.startsWith("..") || isAbsolute3(rel))
       return value;
-    return resolve19(toDir, rel);
+    return resolve18(toDir, rel);
   };
   if (Array.isArray(carried.customPoliciesPaths)) {
     carried.customPoliciesPaths = carried.customPoliciesPaths.map(repoint);
@@ -22816,14 +22586,14 @@ function writeCarriedPolicyConfig(carried) {
   const to = globalPolicyConfigFile();
   let existing = {};
   try {
-    const parsed = JSON.parse(readFileSync19(to, "utf8"));
+    const parsed = JSON.parse(readFileSync18(to, "utf8"));
     if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
       existing = parsed;
     }
   } catch {}
   try {
-    mkdirSync14(dirname11(to), { recursive: true });
-    writeFileSync11(to, JSON.stringify({ ...existing, ...carried }, null, 2) + `
+    mkdirSync12(dirname10(to), { recursive: true });
+    writeFileSync10(to, JSON.stringify({ ...existing, ...carried }, null, 2) + `
 `, "utf8");
   } catch {
     return [];
@@ -22832,10 +22602,10 @@ function writeCarriedPolicyConfig(carried) {
 }
 function readCarriedTelemetryOptOut() {
   const from = legacy.configToml();
-  if (!existsSync23(from))
+  if (!existsSync21(from))
     return false;
   try {
-    const text = readFileSync19(from, "utf8");
+    const text = readFileSync18(from, "utf8");
     const start = text.search(/^\s*\[telemetry\]\s*$/m);
     if (start === -1)
       return false;
@@ -22887,26 +22657,26 @@ function parseLegacyToml(text) {
 }
 function readCarriedLegacyConfig() {
   const from = legacy.configToml();
-  if (!existsSync23(from))
+  if (!existsSync21(from))
     return null;
   try {
-    return projectConfig(parseLegacyToml(readFileSync19(from, "utf8")));
+    return projectConfig(parseLegacyToml(readFileSync18(from, "utf8")));
   } catch {
     return null;
   }
 }
 function readCarriedLegacyCredentials() {
   const toml = legacy.credentialsToml();
-  if (existsSync23(toml)) {
+  if (existsSync21(toml)) {
     try {
-      const creds = projectCredentials(parseLegacyToml(readFileSync19(toml, "utf8")));
+      const creds = projectCredentials(parseLegacyToml(readFileSync18(toml, "utf8")));
       if (Object.keys(creds).length > 0)
         return creds;
     } catch {}
   }
   const readJson = (path) => {
     try {
-      const parsed = JSON.parse(readFileSync19(path, "utf8"));
+      const parsed = JSON.parse(readFileSync18(path, "utf8"));
       return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
     } catch {
       return null;
@@ -22940,10 +22710,10 @@ function resetHome(from, to = LAYOUT_VERSION) {
   const spooled = migrateLegacySpool();
   const removed = [];
   for (const path of resettablePaths()) {
-    if (!existsSync23(path))
+    if (!existsSync21(path))
       continue;
     try {
-      rmSync8(path, { recursive: true, force: true });
+      rmSync7(path, { recursive: true, force: true });
       removed.push(path);
     } catch {}
   }
@@ -22965,7 +22735,7 @@ function layoutWarningForHook() {
   if (state.kind === "future") {
     return `[failproofai] this directory was written by a newer version (layout ${state.found} vs ${LAYOUT_VERSION}) — policies are NOT being enforced. ` + `Upgrade failproofai.`;
   }
-  if (existsSync23(globalPolicyConfigFile()))
+  if (existsSync21(globalPolicyConfigFile()))
     return null;
   return `[failproofai] setup predates this version — global policies are NOT being enforced. ` + `Run \`failproofai config\` to re-create it.`;
 }
@@ -23012,31 +22782,6 @@ function canonicalizeEventType(raw, cli) {
   }
   return raw;
 }
-function attachLeakNotice(eventType, cli, outcome) {
-  try {
-    if (!canDeliverNotice(cli))
-      return outcome;
-    if (!cli)
-      return outcome;
-    const canonical = canonicalizeEventType(eventType, cli);
-    if (canonical !== "Stop" && canonical !== "SessionStart")
-      return outcome;
-    const pending = pendingLeakNotice();
-    if (pending.count === 0)
-      return outcome;
-    const shaped = shapeNotice(cli, leakNoticeText(pending.count), outcome.stdout);
-    if (shaped.stdout === outcome.stdout && !shaped.stderr)
-      return outcome;
-    markLeakNoticeDelivered(pending.ids);
-    return {
-      exitCode: outcome.exitCode,
-      stdout: shaped.stdout,
-      stderr: outcome.stderr + shaped.stderr
-    };
-  } catch {
-    return outcome;
-  }
-}
 async function runObserved(hook, ctx, hookName, eventType, cli) {
   try {
     return await Promise.race([
@@ -23339,12 +23084,7 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
         }
       } catch {}
     }
-    const withNotice = attachLeakNotice(eventType, cli, {
-      exitCode: result.exitCode,
-      stdout: result.stdout,
-      stderr: result.stderr
-    });
-    return withNotice;
+    return { exitCode: result.exitCode, stdout: result.stdout, stderr: result.stderr };
   } finally {
     if (opts?.awaitTelemetryFlush ?? true) {
       await flushHookTelemetry2();
@@ -23403,8 +23143,6 @@ var init_handler = __esm(() => {
   init_custom_hooks_loader();
   init_hook_activity_store();
   init_delivery_health();
-  init_notice();
-  init_leak_notice();
   init_hook_telemetry2();
   init_resolve_permission_mode();
   init_resolve_transcript_path();
@@ -24045,17 +23783,17 @@ var init_collector_config = __esm(() => {
 });
 
 // src/hooks/flush-cli.ts
-import { existsSync as existsSync24, mkdirSync as mkdirSync15, writeFileSync as writeFileSync12, readdirSync as readdirSync16 } from "node:fs";
-import { dirname as dirname12, join as join29 } from "node:path";
+import { existsSync as existsSync22, mkdirSync as mkdirSync13, writeFileSync as writeFileSync11, readdirSync as readdirSync15 } from "node:fs";
+import { dirname as dirname11, join as join29 } from "node:path";
 function flushRequestPath(home) {
   return join29(failproofaiHome(home), "state", "flush-request.json");
 }
 function spoolDirs(home) {
   const root = spoolDir(home);
-  if (!existsSync24(root))
+  if (!existsSync22(root))
     return [];
   try {
-    return readdirSync16(root, { withFileTypes: true }).filter((e) => e.isDirectory() && e.name !== "failed").map((e) => join29(root, e.name));
+    return readdirSync15(root, { withFileTypes: true }).filter((e) => e.isDirectory() && e.name !== "failed").map((e) => join29(root, e.name));
   } catch {
     return [];
   }
@@ -24064,7 +23802,7 @@ function pendingBatches(home) {
   let n = 0;
   for (const dir of spoolDirs(home)) {
     try {
-      n += readdirSync16(dir).filter((f) => f.endsWith(".jsonl")).length;
+      n += readdirSync15(dir).filter((f) => f.endsWith(".jsonl")).length;
     } catch {}
   }
   return n;
@@ -24121,8 +23859,8 @@ async function runFlushCommand(opts = {}) {
     return { exitCode: 0, pending: 0, lines: ["Nothing spooled — everything already delivered."] };
   }
   const path = flushRequestPath(home);
-  mkdirSync15(dirname12(path), { recursive: true });
-  writeFileSync12(path, `${JSON.stringify({ requestedAtMs: Date.now() }, null, 2)}
+  mkdirSync13(dirname11(path), { recursive: true });
+  writeFileSync11(path, `${JSON.stringify({ requestedAtMs: Date.now() }, null, 2)}
 `, {
     mode: 384
   });
@@ -24156,14 +23894,14 @@ var init_flush_cli = __esm(() => {
 import {
   chmodSync as chmodSync4,
   copyFileSync as copyFileSync2,
-  existsSync as existsSync25,
-  mkdirSync as mkdirSync16,
-  readFileSync as readFileSync20,
+  existsSync as existsSync23,
+  mkdirSync as mkdirSync14,
+  readFileSync as readFileSync19,
   renameSync as renameSync7,
-  rmSync as rmSync9,
-  writeFileSync as writeFileSync13
+  rmSync as rmSync8,
+  writeFileSync as writeFileSync12
 } from "node:fs";
-import { basename as basename4, dirname as dirname13, join as join30, resolve as resolve20 } from "node:path";
+import { basename as basename4, dirname as dirname12, join as join30, resolve as resolve19 } from "node:path";
 function migrateToLayout4() {
   const moves = [
     { from: legacy.authJson(), to: auditSessionFile() },
@@ -24179,13 +23917,13 @@ function migrateToLayout4() {
   }
   const migrated = [];
   for (const { from, to } of moves) {
-    if (!existsSync25(from))
+    if (!existsSync23(from))
       continue;
-    if (existsSync25(to)) {
-      rmSync9(from, { force: true });
+    if (existsSync23(to)) {
+      rmSync8(from, { force: true });
       continue;
     }
-    mkdirSync16(dirname13(to), { recursive: true });
+    mkdirSync14(dirname12(to), { recursive: true });
     try {
       renameSync7(from, to);
     } catch {
@@ -24193,16 +23931,16 @@ function migrateToLayout4() {
         copyFileSync2(from, to);
       } catch (err) {
         try {
-          rmSync9(to, { force: true });
+          rmSync8(to, { force: true });
         } catch {}
         throw err;
       }
-      rmSync9(from, { force: true });
+      rmSync8(from, { force: true });
     }
     migrated.push(`${basename4(from)} → audit/${basename4(to)}`);
   }
   for (const secret of [auditSessionFile()]) {
-    if (!existsSync25(secret))
+    if (!existsSync23(secret))
       continue;
     try {
       chmodSync4(secret, 384);
@@ -24228,7 +23966,7 @@ function planMigration(from, registry = MIGRATIONS) {
 }
 function readLedger() {
   try {
-    const parsed = JSON.parse(readFileSync20(migrationLedgerFile(), "utf8"));
+    const parsed = JSON.parse(readFileSync19(migrationLedgerFile(), "utf8"));
     return Array.isArray(parsed) ? parsed : [];
   } catch {
     return [];
@@ -24236,9 +23974,9 @@ function readLedger() {
 }
 function appendLedger(entry) {
   try {
-    mkdirSync16(migrationsDir(), { recursive: true });
+    mkdirSync14(migrationsDir(), { recursive: true });
     const all = [...readLedger(), entry];
-    writeFileSync13(migrationLedgerFile(), `${JSON.stringify(all, null, 2)}
+    writeFileSync12(migrationLedgerFile(), `${JSON.stringify(all, null, 2)}
 `, "utf8");
   } catch {}
 }
@@ -24250,12 +23988,12 @@ function pruneMigratedCredentials(from) {
   for (let layout = from;layout < LAYOUT_VERSION; layout++) {
     for (const { as, landsAt } of PRUNED_AFTER_SUCCESS) {
       try {
-        if (!existsSync25(landsAt()))
+        if (!existsSync23(landsAt()))
           continue;
-        const copy = resolve20(migrationBackupDir(layout), as);
-        if (!existsSync25(copy))
+        const copy = resolve19(migrationBackupDir(layout), as);
+        if (!existsSync23(copy))
           continue;
-        rmSync9(copy, { force: true });
+        rmSync8(copy, { force: true });
         pruned.push(as);
       } catch {}
     }
@@ -24266,7 +24004,7 @@ function filesToBackUp() {
   const seen = new Map;
   for (const f of [...BACKED_UP, ...BACKED_UP_LEGACY]) {
     const path = f.at();
-    if (existsSync25(path))
+    if (existsSync23(path))
       seen.set(path, backupNameOf(f));
   }
   return [...seen].map(([path, as]) => ({ path, as }));
@@ -24275,14 +24013,14 @@ function backupBeforeMigrating(from) {
   const dir = migrationBackupDir(from);
   const saved = [];
   try {
-    rmSync9(dir, { recursive: true, force: true });
-    mkdirSync16(dir, { recursive: true });
+    rmSync8(dir, { recursive: true, force: true });
+    mkdirSync14(dir, { recursive: true });
   } catch {
     return [];
   }
   for (const { path: source, as } of filesToBackUp()) {
     try {
-      copyFileSync2(source, resolve20(dir, as));
+      copyFileSync2(source, resolve19(dir, as));
       saved.push(as);
     } catch {}
   }
@@ -24572,7 +24310,7 @@ var init_fp_reset2 = __esm(() => {
 // scripts/install-telemetry.mjs
 import { createHmac, randomUUID as randomUUID2 } from "node:crypto";
 import { execSync as execSync5 } from "node:child_process";
-import { readFileSync as readFileSync21, writeFileSync as writeFileSync14, mkdirSync as mkdirSync17 } from "node:fs";
+import { readFileSync as readFileSync20, writeFileSync as writeFileSync13, mkdirSync as mkdirSync15 } from "node:fs";
 import { homedir as homedir22, platform, arch, hostname, cpus } from "node:os";
 import { join as join31 } from "node:path";
 function hashToId3(raw) {
@@ -24582,7 +24320,7 @@ function getInstanceId3() {
   const idDir = join31(homedir22(), ".failproofai");
   const idFile = join31(idDir, "instance-id");
   try {
-    const existing = readFileSync21(idFile, "utf-8").trim();
+    const existing = readFileSync20(idFile, "utf-8").trim();
     if (existing)
       return existing;
   } catch {}
@@ -24591,7 +24329,7 @@ function getInstanceId3() {
     if (p === "linux") {
       for (const machineIdPath of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
         try {
-          const id = readFileSync21(machineIdPath, "utf-8").trim();
+          const id = readFileSync20(machineIdPath, "utf-8").trim();
           if (id)
             return hashToId3(id);
         } catch {}
@@ -24623,8 +24361,8 @@ function getInstanceId3() {
   } catch {}
   const id = randomUUID2();
   try {
-    mkdirSync17(idDir, { recursive: true });
-    writeFileSync14(idFile, id, "utf-8");
+    mkdirSync15(idDir, { recursive: true });
+    writeFileSync13(idFile, id, "utf-8");
   } catch {}
   return id;
 }
@@ -24656,8 +24394,8 @@ var NAMESPACE3 = "failproofai-telemetry-v1", API_KEY3 = "phc_Ac1Ww1GqKc0z1SyrRWb
 var init_install_telemetry = () => {};
 
 // lib/install-check.ts
-import { existsSync as existsSync26, readFileSync as readFileSync22, writeFileSync as writeFileSync15, mkdirSync as mkdirSync18 } from "node:fs";
-import { dirname as dirname14, resolve as resolve21 } from "node:path";
+import { existsSync as existsSync24, readFileSync as readFileSync21, writeFileSync as writeFileSync14, mkdirSync as mkdirSync16 } from "node:fs";
+import { dirname as dirname13, resolve as resolve20 } from "node:path";
 import { platform as platform2, arch as arch2, release, homedir as homedir23, hostname as hostname2 } from "node:os";
 import { createHmac as createHmac2 } from "node:crypto";
 function hashToId4(raw) {
@@ -24712,12 +24450,12 @@ function compareSemver(a, b) {
 }
 function checkHooks() {
   const hooksConfigPath = globalPolicyConfigFile();
-  if (!existsSync26(hooksConfigPath)) {
+  if (!existsSync24(hooksConfigPath)) {
     return { configured: false, registered: false, policyCount: 0 };
   }
   let config;
   try {
-    config = JSON.parse(readFileSync22(hooksConfigPath, "utf8"));
+    config = JSON.parse(readFileSync21(hooksConfigPath, "utf8"));
   } catch {
     return { configured: false, registered: false, policyCount: 0 };
   }
@@ -24725,12 +24463,12 @@ function checkHooks() {
     return { configured: false, registered: false, policyCount: 0 };
   }
   const policyCount = config.enabledPolicies.length;
-  const settingsPath = resolve21(homedir23(), ".claude", "settings.json");
-  if (!existsSync26(settingsPath))
+  const settingsPath = resolve20(homedir23(), ".claude", "settings.json");
+  if (!existsSync24(settingsPath))
     return { configured: true, registered: false, policyCount };
   let settings;
   try {
-    settings = JSON.parse(readFileSync22(settingsPath, "utf8"));
+    settings = JSON.parse(readFileSync21(settingsPath, "utf8"));
   } catch {
     return { configured: true, registered: false, policyCount };
   }
@@ -24754,8 +24492,8 @@ async function maybeReportInstall(version) {
     const versionFile = lastVersionPath();
     let previousVersion = null;
     try {
-      if (existsSync26(versionFile)) {
-        previousVersion = readFileSync22(versionFile, "utf8").trim() || null;
+      if (existsSync24(versionFile)) {
+        previousVersion = readFileSync21(versionFile, "utf8").trim() || null;
       }
     } catch {}
     if (previousVersion === version)
@@ -24791,8 +24529,8 @@ async function maybeReportInstall(version) {
       enabled_policy_count: hooks.policyCount
     }, { version, timeoutMs: REPORT_TIMEOUT_MS, enabled: telemetryEnabled }));
     try {
-      mkdirSync18(dirname14(versionFile), { recursive: true });
-      writeFileSync15(versionFile, version, "utf8");
+      mkdirSync16(dirname13(versionFile), { recursive: true });
+      writeFileSync14(versionFile, version, "utf8");
     } catch {}
     await Promise.all(events.map((p) => p.catch(() => {})));
   } catch {}
@@ -24842,8 +24580,8 @@ var init_cli_error = __esm(() => {
 
 // src/hooks/manager.ts
 import { execSync as execSync6 } from "node:child_process";
-import { existsSync as existsSync27 } from "node:fs";
-import { resolve as resolve22, basename as basename5 } from "node:path";
+import { existsSync as existsSync25 } from "node:fs";
+import { resolve as resolve21, basename as basename5 } from "node:path";
 import { platform as platform3, arch as arch3, release as release2, hostname as hostname3 } from "node:os";
 function getSettingsPath(scope, cwd) {
   return claudeCode.getSettingsPath(scope, cwd);
@@ -25062,9 +24800,9 @@ async function installHooksImpl(policyNames, scope = "user", cwd, includeBeta =
     delete configToWrite.customPoliciesPath;
     delete configToWrite.customPoliciesPaths;
   } else if (customPoliciesPath && (typeof customPoliciesPath === "string" || customPoliciesPath.length > 0)) {
-    const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path) => resolve22(path));
-    const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path) => resolve22(path)).filter((path) => {
-      if (existsSync27(path))
+    const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path) => resolve21(path));
+    const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path) => resolve21(path)).filter((path) => {
+      if (existsSync25(path))
         return true;
       console.log(`Dropping custom policies path (file no longer exists): ${path}`);
       return false;
@@ -25287,7 +25025,7 @@ async function removeHooks(policyNames, scope = "user", cwd, opts) {
     const scopesToRemove = scope === "all" ? [...integration.scopes] : integration.scopes.includes(scope) ? [scope] : [];
     for (const s of scopesToRemove) {
       const settingsPaths = settingsPathsFor(integration, s, cwd);
-      const existing = settingsPaths.filter((p) => existsSync27(p));
+      const existing = settingsPaths.filter((p) => existsSync25(p));
       if (existing.length === 0) {
         if (scope !== "all" && selectedClis.length === 1) {
           console.log("No settings file found. Nothing to remove.");
@@ -25374,16 +25112,92 @@ var init_manager = __esm(() => {
   VALID_POLICY_NAMES = new Set(BUILTIN_POLICIES.map((p) => p.name));
 });
 
+// src/audit/leak-fingerprint.ts
+function matchPublicPrefix(value) {
+  for (const entry of PUBLIC_PREFIXES) {
+    if (value.startsWith(entry[0]))
+      return entry;
+  }
+  return null;
+}
+function fingerprintSecret(value, fallbackLabel = "secret") {
+  const length = value.length;
+  const matched = matchPublicPrefix(value);
+  if (!matched) {
+    return {
+      display: `[${length}-char ${fallbackLabel}]`,
+      label: fallbackLabel,
+      length,
+      attributed: false
+    };
+  }
+  const [prefix, label] = matched;
+  const bodyLength = length - prefix.length;
+  const run = MASK_CHAR.repeat(Math.max(1, Math.min(MAX_MASK_RUN, bodyLength)));
+  if (length >= MIN_LEN_FOR_TAIL && bodyLength > TAIL_CHARS * 2) {
+    return {
+      display: `${prefix}${run}${value.slice(-TAIL_CHARS)}`,
+      label,
+      length,
+      attributed: true
+    };
+  }
+  return { display: `${prefix}${run}`, label, length, attributed: true };
+}
+function isFindingId(id) {
+  return /^[0-9a-f]{16}$/.test(id);
+}
+function fingerprintId(value, machineSalt) {
+  const { createHmac } = __require("node:crypto");
+  return createHmac("sha256", machineSalt).update(value).digest("hex").slice(0, 16);
+}
+var MASK_CHAR = "•", MAX_MASK_RUN = 8, MIN_LEN_FOR_TAIL = 24, TAIL_CHARS = 4, PUBLIC_PREFIXES;
+var init_leak_fingerprint = __esm(() => {
+  PUBLIC_PREFIXES = [
+    ["sk-ant-api03-", "Anthropic API key"],
+    ["sk-ant-oat01-", "Anthropic OAuth token"],
+    ["sk-ant-", "Anthropic key"],
+    ["sk-proj-", "OpenAI project key"],
+    ["sk-svcacct-", "OpenAI service-account key"],
+    ["sk-admin-", "OpenAI admin key"],
+    ["sk-or-v1-", "OpenRouter key"],
+    ["github_pat_", "GitHub fine-grained token"],
+    ["ghp_", "GitHub personal access token"],
+    ["gho_", "GitHub OAuth token"],
+    ["ghu_", "GitHub user-to-server token"],
+    ["ghs_", "GitHub server-to-server token"],
+    ["ghr_", "GitHub refresh token"],
+    ["glpat-", "GitLab personal access token"],
+    ["xoxb-", "Slack bot token"],
+    ["xoxp-", "Slack user token"],
+    ["xapp-", "Slack app-level token"],
+    ["sk_live_", "Stripe live secret key"],
+    ["sk_test_", "Stripe test secret key"],
+    ["rk_live_", "Stripe restricted key"],
+    ["AKIA", "AWS access key ID"],
+    ["ASIA", "AWS temporary access key ID"],
+    ["AIza", "Google API key"],
+    ["hf_", "Hugging Face token"],
+    ["gsk_", "Groq API key"],
+    ["r8_", "Replicate token"],
+    ["xai-", "xAI key"],
+    ["npm_", "npm access token"],
+    ["dop_v1_", "DigitalOcean token"],
+    ["shpat_", "Shopify access token"],
+    ["sbp_", "Supabase token"]
+  ];
+});
+
 // src/audit/macos-notifier.ts
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync as existsSync28, mkdirSync as mkdirSync19, readdirSync as readdirSync17, renameSync as renameSync8, rmSync as rmSync10, writeFileSync as writeFileSync16 } from "node:fs";
+import { existsSync as existsSync26, mkdirSync as mkdirSync17, readdirSync as readdirSync16, renameSync as renameSync8, rmSync as rmSync9, writeFileSync as writeFileSync15 } from "node:fs";
 import { homedir as homedir24 } from "node:os";
-import { resolve as resolve23 } from "node:path";
+import { resolve as resolve22 } from "node:path";
 function macNotifierAppPath(home) {
-  return resolve23(runDir(home), "..", "bin", "FailproofAI Notifier.app");
+  return resolve22(runDir(home), "..", "bin", "FailproofAI Notifier.app");
 }
 function macNotifierPlistPath() {
-  return resolve23(homedir24(), "Library", "LaunchAgents", `${MAC_NOTIFIER_LABEL}.plist`);
+  return resolve22(homedir24(), "Library", "LaunchAgents", `${MAC_NOTIFIER_LABEL}.plist`);
 }
 function escapeXml2(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
@@ -25427,7 +25241,7 @@ function notifierPlistContents(appPath, watchDir) {
     <string>${escapeXml2(MAC_NOTIFIER_LABEL)}</string>
     <key>ProgramArguments</key>
     <array>
-        <string>${escapeXml2(resolve23(appPath, "Contents", "MacOS", "applet"))}</string>
+        <string>${escapeXml2(resolve22(appPath, "Contents", "MacOS", "applet"))}</string>
     </array>
     <!-- Started only when something is queued, and it exits when the queue is
          empty. RunAtLoad would fire it once at login with nothing to say. -->
@@ -25456,18 +25270,18 @@ function installMacNotifier(home) {
   try {
     const app = macNotifierAppPath(home);
     const watch = macNotifyDir(home);
-    mkdirSync19(watch, { recursive: true, mode: 448 });
-    mkdirSync19(resolve23(app, ".."), { recursive: true });
-    const scriptPath = resolve23(watch, "..", "notifier.applescript");
-    writeFileSync16(scriptPath, notifierScript(home), { mode: 384 });
-    rmSync10(app, { recursive: true, force: true });
+    mkdirSync17(watch, { recursive: true, mode: 448 });
+    mkdirSync17(resolve22(app, ".."), { recursive: true });
+    const scriptPath = resolve22(watch, "..", "notifier.applescript");
+    writeFileSync15(scriptPath, notifierScript(home), { mode: 384 });
+    rmSync9(app, { recursive: true, force: true });
     run("osacompile", ["-o", app, scriptPath]);
-    rmSync10(scriptPath, { force: true });
-    const plist = resolve23(app, "Contents", "Info.plist");
+    rmSync9(scriptPath, { force: true });
+    const plist = resolve22(app, "Contents", "Info.plist");
     run("defaults", ["write", plist, "CFBundleIdentifier", MAC_NOTIFIER_LABEL]);
     run("defaults", ["write", plist, "CFBundleName", "failproofai"]);
-    mkdirSync19(resolve23(macNotifierPlistPath(), ".."), { recursive: true });
-    writeFileSync16(macNotifierPlistPath(), notifierPlistContents(app, watch), { mode: 420 });
+    mkdirSync17(resolve22(macNotifierPlistPath(), ".."), { recursive: true });
+    writeFileSync15(macNotifierPlistPath(), notifierPlistContents(app, watch), { mode: 420 });
     const target = `gui/${process.getuid?.() ?? 0}`;
     try {
       run("launchctl", ["bootout", `${target}/${MAC_NOTIFIER_LABEL}`]);
@@ -25484,49 +25298,49 @@ function uninstallMacNotifier(home) {
   try {
     run("launchctl", ["bootout", `gui/${process.getuid?.() ?? 0}/${MAC_NOTIFIER_LABEL}`]);
   } catch {}
-  rmSync10(macNotifierPlistPath(), { force: true });
-  rmSync10(macNotifierAppPath(home), { recursive: true, force: true });
-  rmSync10(macNotifyDir(home), { recursive: true, force: true });
+  rmSync9(macNotifierPlistPath(), { force: true });
+  rmSync9(macNotifierAppPath(home), { recursive: true, force: true });
+  rmSync9(macNotifyDir(home), { recursive: true, force: true });
 }
 function queueMacNotification(id, title, body, home) {
   if (!isFindingId(id))
     return false;
   const dir = macNotifyDir(home);
-  const tmp = resolve23(dir, "..", `notify-${id}.tmp`);
+  const tmp = resolve22(dir, "..", `notify-${id}.tmp`);
   try {
-    mkdirSync19(dir, { recursive: true, mode: 448 });
+    mkdirSync17(dir, { recursive: true, mode: 448 });
     const payload = `${title.replace(/\s+/g, " ")}
 ${body.replace(/\s+/g, " ")}
 `;
-    writeFileSync16(tmp, payload, { mode: 384 });
-    renameSync8(tmp, resolve23(dir, id));
+    writeFileSync15(tmp, payload, { mode: 384 });
+    renameSync8(tmp, resolve22(dir, id));
     return true;
   } catch {
     try {
-      rmSync10(tmp, { force: true });
+      rmSync9(tmp, { force: true });
     } catch {}
     return false;
   }
 }
 function macNotifierInstalled(home) {
-  return existsSync28(macNotifierPlistPath()) && existsSync28(macNotifierAppPath(home));
+  return existsSync26(macNotifierPlistPath()) && existsSync26(macNotifierAppPath(home));
 }
 function pruneMacNotifyQueue(home, maxAgeMs = 7 * 86400000) {
   try {
     const dir = macNotifyDir(home);
-    if (!existsSync28(dir))
+    if (!existsSync26(dir))
       return;
     const { statSync } = __require("node:fs");
-    for (const name of readdirSync17(dir)) {
-      const path = resolve23(dir, name);
+    for (const name of readdirSync16(dir)) {
+      const path = resolve22(dir, name);
       try {
         if (Date.now() - statSync(path).mtimeMs > maxAgeMs)
-          rmSync10(path, { force: true });
+          rmSync9(path, { force: true });
       } catch {}
     }
   } catch {}
 }
-var MAC_NOTIFIER_LABEL = "ai.failproof.notifier", macNotifyDir = (home) => resolve23(runDir(home), "notify");
+var MAC_NOTIFIER_LABEL = "ai.failproof.notifier", macNotifyDir = (home) => resolve22(runDir(home), "notify");
 var init_macos_notifier = __esm(() => {
   init_fp_home();
   init_leak_fingerprint();
@@ -25548,7 +25362,7 @@ var DEFAULT_FETCH_TIMEOUT_MS = 15000;
 
 // src/hooks/cloud-enrollment.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { existsSync as existsSync29, readFileSync as readFileSync23, rmSync as rmSync11 } from "node:fs";
+import { existsSync as existsSync27, readFileSync as readFileSync22, rmSync as rmSync10 } from "node:fs";
 import { hostname as hostname4 } from "node:os";
 function cloudCredentialPath() {
   return process.env.FAILPROOFAI_CLOUD_CREDENTIALS ?? credentialsFile();
@@ -25587,10 +25401,10 @@ function readCloudCredentials() {
   if (!usingJsonOverride())
     return readCredentials().cloud ?? null;
   const path = cloudCredentialPath();
-  if (!existsSync29(path))
+  if (!existsSync27(path))
     return null;
   try {
-    const raw = JSON.parse(readFileSync23(path, "utf8"));
+    const raw = JSON.parse(readFileSync22(path, "utf8"));
     if (raw.schemaVersion !== SCHEMA_VERSION2)
       return null;
     if (typeof raw.url !== "string" || typeof raw.machineId !== "string" || typeof raw.token !== "string") {
@@ -25629,10 +25443,10 @@ function resolveMachineLabel(explicit) {
 function clearCloudCredentials() {
   if (usingJsonOverride()) {
     const path = cloudCredentialPath();
-    if (!existsSync29(path))
+    if (!existsSync27(path))
       return false;
     try {
-      rmSync11(path);
+      rmSync10(path);
       return true;
     } catch {
       return false;
@@ -25880,21 +25694,21 @@ var init_cloud_connection = __esm(() => {
 });
 
 // src/hooks/setup-state.ts
-import { existsSync as existsSync30, realpathSync as realpathSync2, statSync as statSync18 } from "node:fs";
-import { dirname as dirname15, resolve as resolve24 } from "node:path";
+import { existsSync as existsSync28, realpathSync as realpathSync2, statSync as statSync17 } from "node:fs";
+import { dirname as dirname14, resolve as resolve23 } from "node:path";
 import { homedir as homedir25 } from "node:os";
 function globalConfigPath(home = homedir25()) {
   return globalPolicyConfigFile(home);
 }
 function projectConfigPath(projectRoot) {
-  return resolve24(projectRoot, ".failproofai", "policies-config.json");
+  return resolve23(projectRoot, ".failproofai", "policies-config.json");
 }
 function legacyMarkerPath(home) {
   return launcherMarker(home);
 }
 function isDir(path) {
   try {
-    return statSync18(path).isDirectory();
+    return statSync17(path).isDirectory();
   } catch {
     return false;
   }
@@ -25903,14 +25717,14 @@ function findProjectRoot(start, home = homedir25()) {
   const resolvedHome = realResolve(home);
   let dir = realResolve(start);
   while (dir !== resolvedHome) {
-    if (isDir(resolve24(dir, ".failproofai")))
+    if (isDir(resolve23(dir, ".failproofai")))
       return dir;
-    const parent = dirname15(dir);
+    const parent = dirname14(dir);
     if (parent === dir)
       break;
     dir = parent;
   }
-  return resolve24(start);
+  return resolve23(start);
 }
 function hasGlobalHooksInstalled() {
   for (const id of INTEGRATION_TYPES) {
@@ -25922,7 +25736,7 @@ function hasGlobalHooksInstalled() {
   return false;
 }
 function realResolve(path) {
-  const lexical = resolve24(path);
+  const lexical = resolve23(path);
   try {
     return realpathSync2(lexical);
   } catch {
@@ -25937,10 +25751,10 @@ function detectSetupState(cwd = process.cwd(), home = homedir25()) {
     cwd: resolvedCwd,
     home: resolvedHome,
     projectRoot,
-    hasGlobalConfig: existsSync30(globalConfigPath(resolvedHome)),
-    hasProjectConfig: projectRoot !== resolvedHome && existsSync30(projectConfigPath(projectRoot)),
+    hasGlobalConfig: existsSync28(globalConfigPath(resolvedHome)),
+    hasProjectConfig: projectRoot !== resolvedHome && existsSync28(projectConfigPath(projectRoot)),
     hasGlobalHooks: hasGlobalHooksInstalled(),
-    hasLegacyMarker: existsSync30(legacyMarkerPath(resolvedHome)),
+    hasLegacyMarker: existsSync28(legacyMarkerPath(resolvedHome)),
     inHomeDir: resolvedCwd === resolvedHome
   };
 }
@@ -25957,14 +25771,14 @@ var init_setup_state = __esm(() => {
 });
 
 // src/hooks/onboarding-attempt.ts
-import { existsSync as existsSync31, mkdirSync as mkdirSync20, readFileSync as readFileSync24, rmSync as rmSync12, writeFileSync as writeFileSync17 } from "node:fs";
-import { dirname as dirname16 } from "node:path";
+import { existsSync as existsSync29, mkdirSync as mkdirSync18, readFileSync as readFileSync23, rmSync as rmSync11, writeFileSync as writeFileSync16 } from "node:fs";
+import { dirname as dirname15 } from "node:path";
 function readOnboardingAttempt() {
   const path = onboardingAttemptFile();
-  if (!existsSync31(path))
+  if (!existsSync29(path))
     return null;
   try {
-    const raw = JSON.parse(readFileSync24(path, "utf8"));
+    const raw = JSON.parse(readFileSync23(path, "utf8"));
     if (raw.schemaVersion !== SCHEMA_VERSION3)
       return null;
     if (typeof raw.reason !== "string" || typeof raw.cliVersion !== "string")
@@ -25983,7 +25797,7 @@ function readOnboardingAttempt() {
 function recordOnboardingAttempt(reason, cliVersion, daemonStatus, now = Date.now()) {
   try {
     const path = onboardingAttemptFile();
-    mkdirSync20(dirname16(path), { recursive: true });
+    mkdirSync18(dirname15(path), { recursive: true });
     const record = {
       schemaVersion: SCHEMA_VERSION3,
       reason,
@@ -25991,12 +25805,12 @@ function recordOnboardingAttempt(reason, cliVersion, daemonStatus, now = Date.no
       daemonStatus,
       at: now
     };
-    writeFileSync17(path, JSON.stringify(record, null, 2), "utf8");
+    writeFileSync16(path, JSON.stringify(record, null, 2), "utf8");
   } catch {}
 }
 function clearOnboardingAttempt() {
   try {
-    rmSync12(onboardingAttemptFile(), { force: true });
+    rmSync11(onboardingAttemptFile(), { force: true });
   } catch {}
 }
 function blockerCleared(attempt, probe) {
@@ -26038,7 +25852,7 @@ var init_onboarding_attempt = __esm(() => {
 });
 
 // src/hooks/onboarding-lock.ts
-import { mkdirSync as mkdirSync21, readFileSync as readFileSync25, rmSync as rmSync13, writeFileSync as writeFileSync18 } from "node:fs";
+import { mkdirSync as mkdirSync19, readFileSync as readFileSync24, rmSync as rmSync12, writeFileSync as writeFileSync17 } from "node:fs";
 import { homedir as homedir26 } from "node:os";
 function onboardingLockPath(home = homedir26()) {
   return onboardingLockFile(home);
@@ -26055,7 +25869,7 @@ function processAlive(pid) {
 }
 function readLock(path) {
   try {
-    const parsed = JSON.parse(readFileSync25(path, "utf8"));
+    const parsed = JSON.parse(readFileSync24(path, "utf8"));
     if (typeof parsed.pid !== "number")
       return null;
     return { pid: parsed.pid, startedAt: Number(parsed.startedAt) || 0 };
@@ -26069,9 +25883,9 @@ function acquireOnboardingLock(home = homedir26()) {
     const held = readLock(path);
     if (held && held.pid !== process.pid && processAlive(held.pid))
       return null;
-    mkdirSync21(stateDir(home), { recursive: true });
+    mkdirSync19(stateDir(home), { recursive: true });
     const body = { pid: process.pid, startedAt: Date.now() };
-    writeFileSync18(path, JSON.stringify(body), "utf8");
+    writeFileSync17(path, JSON.stringify(body), "utf8");
     let released = false;
     return {
       release() {
@@ -26081,7 +25895,7 @@ function acquireOnboardingLock(home = homedir26()) {
         try {
           const current = readLock(path);
           if (!current || current.pid === process.pid)
-            rmSync13(path, { force: true });
+            rmSync12(path, { force: true });
         } catch {}
       }
     };
@@ -26094,7 +25908,7 @@ var init_onboarding_lock = __esm(() => {
 });
 
 // lib/claude-sessions.ts
-import { readdirSync as readdirSync18, statSync as statSync19, existsSync as existsSync32 } from "node:fs";
+import { readdirSync as readdirSync17, statSync as statSync18, existsSync as existsSync30 } from "node:fs";
 import { join as join32, basename as basename6 } from "node:path";
 function getClaudeProjectsRoot() {
   return getClaudeProjectsPath();
@@ -26103,7 +25917,7 @@ function listClaudeProjects() {
   const root = getClaudeProjectsRoot();
   let entries;
   try {
-    entries = readdirSync18(root, { withFileTypes: true });
+    entries = readdirSync17(root, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -26118,7 +25932,7 @@ function collectSubagentTranscripts(dir, relPrefix, project, out, depth) {
     return;
   let entries;
   try {
-    entries = readdirSync18(dir, { withFileTypes: true });
+    entries = readdirSync17(dir, { withFileTypes: true });
   } catch {
     return;
   }
@@ -26134,7 +25948,7 @@ function collectSubagentTranscripts(dir, relPrefix, project, out, depth) {
     const stem = entry.name.slice(0, -".jsonl".length);
     const transcriptPath = join32(dir, entry.name);
     try {
-      const s = statSync19(transcriptPath);
+      const s = statSync18(transcriptPath);
       out.push({
         projectName: project.name,
         cwd: project.cwd,
@@ -26151,7 +25965,7 @@ function listClaudeTranscripts(project) {
   const out = [];
   let entries;
   try {
-    entries = readdirSync18(project.path, { withFileTypes: true });
+    entries = readdirSync17(project.path, { withFileTypes: true });
   } catch {
     return out;
   }
@@ -26162,7 +25976,7 @@ function listClaudeTranscripts(project) {
         continue;
       const transcriptPath = join32(project.path, entry.name);
       try {
-        const s = statSync19(transcriptPath);
+        const s = statSync18(transcriptPath);
         out.push({
           projectName: project.name,
           cwd: project.cwd,
@@ -26175,7 +25989,7 @@ function listClaudeTranscripts(project) {
       } catch {}
     } else if (entry.isDirectory() && UUID_RE2.test(entry.name)) {
       const subDir = join32(project.path, entry.name, "subagents");
-      if (!existsSync32(subDir))
+      if (!existsSync30(subDir))
         continue;
       collectSubagentTranscripts(subDir, entry.name, project, out, 0);
     }
@@ -26241,6 +26055,7 @@ var init_shared = __esm(() => {
 
 // src/audit/cli-adapters/claude.ts
 import { readFile as readFile15, open as open2 } from "node:fs/promises";
+import { readFileSync as readFileSync25 } from "node:fs";
 async function listClaudeTranscriptMetadata(opts = {}) {
   const projectFilter = opts.projects ? new Set(opts.projects) : null;
   const sinceMs = opts.sinceMs ?? 0;
@@ -26257,13 +26072,22 @@ async function listClaudeTranscriptMetadata(opts = {}) {
     for (const t of transcripts) {
       if (t.mtimeMs < sinceMs)
         continue;
+      let sessionDescription;
+      if (t.isSubagent) {
+        try {
+          const meta = JSON.parse(readFileSync25(t.transcriptPath.replace(/\.jsonl$/, ".meta.json"), "utf8"));
+          if (typeof meta.description === "string")
+            sessionDescription = meta.description;
+        } catch {}
+      }
       out.push({
         cli: "claude",
         projectName: project.name,
         sessionId: t.sessionId,
         transcriptPath: t.transcriptPath,
         mtimeMs: t.mtimeMs,
-        sizeBytes: t.sizeBytes
+        sizeBytes: t.sizeBytes,
+        sessionDescription
       });
     }
   }
@@ -26382,7 +26206,7 @@ var init_claude = __esm(() => {
 });
 
 // src/audit/cli-adapters/codex.ts
-import { statSync as statSync20 } from "node:fs";
+import { statSync as statSync19 } from "node:fs";
 async function listCodexTranscriptMetadata(opts = {}) {
   const projectFilter = opts.projects ? new Set(opts.projects) : null;
   const sinceMs = opts.sinceMs ?? 0;
@@ -26399,7 +26223,7 @@ async function listCodexTranscriptMetadata(opts = {}) {
         continue;
       let sizeBytes = 0;
       try {
-        sizeBytes = statSync20(s.path).size;
+        sizeBytes = statSync19(s.path).size;
       } catch {}
       if (!s.sessionId)
         continue;
@@ -26433,7 +26257,7 @@ var init_codex = __esm(() => {
 });
 
 // src/audit/cli-adapters/copilot.ts
-import { statSync as statSync21 } from "node:fs";
+import { statSync as statSync20 } from "node:fs";
 async function listCopilotTranscriptMetadata(opts = {}) {
   const projectFilter = opts.projects ? new Set(opts.projects) : null;
   const sinceMs = opts.sinceMs ?? 0;
@@ -26450,7 +26274,7 @@ async function listCopilotTranscriptMetadata(opts = {}) {
         continue;
       let sizeBytes = 0;
       try {
-        sizeBytes = statSync21(s.path).size;
+        sizeBytes = statSync20(s.path).size;
       } catch {}
       if (!s.sessionId)
         continue;
@@ -26484,7 +26308,7 @@ var init_copilot = __esm(() => {
 });
 
 // src/audit/cli-adapters/cursor.ts
-import { statSync as statSync22 } from "node:fs";
+import { statSync as statSync21 } from "node:fs";
 async function listCursorTranscriptMetadata(opts = {}) {
   const projectFilter = opts.projects ? new Set(opts.projects) : null;
   const sinceMs = opts.sinceMs ?? 0;
@@ -26501,7 +26325,7 @@ async function listCursorTranscriptMetadata(opts = {}) {
         continue;
       let sizeBytes = 0;
       try {
-        sizeBytes = statSync22(s.path).size;
+        sizeBytes = statSync21(s.path).size;
       } catch {}
       if (!s.sessionId)
         continue;
@@ -26742,7 +26566,7 @@ var init_opencode = __esm(() => {
 });
 
 // src/audit/cli-adapters/pi.ts
-import { statSync as statSync23 } from "node:fs";
+import { statSync as statSync22 } from "node:fs";
 async function listPiTranscriptMetadata(opts = {}) {
   const projectFilter = opts.projects ? new Set(opts.projects) : null;
   const sinceMs = opts.sinceMs ?? 0;
@@ -26759,7 +26583,7 @@ async function listPiTranscriptMetadata(opts = {}) {
         continue;
       let sizeBytes = 0;
       try {
-        sizeBytes = statSync23(s.path).size;
+        sizeBytes = statSync22(s.path).size;
       } catch {}
       if (!s.sessionId)
         continue;
@@ -27493,6 +27317,276 @@ var init_features = __esm(() => {
   })();
 });
 
+// src/audit/leak-scan.ts
+function unquote(v) {
+  return v.startsWith('"') && v.endsWith('"') || v.startsWith("'") && v.endsWith("'") ? v.slice(1, -1) : v;
+}
+function isDocsLiteral(value) {
+  const { createHash } = __require("node:crypto");
+  return DOCS_LITERALS.has(createHash("sha256").update(value).digest("hex"));
+}
+function isSelfOutput(text) {
+  return SELF_OUTPUT_MARKERS.some((m) => text.includes(m));
+}
+function literalPrefixOf(source) {
+  let out = "";
+  for (let i = 0;i < source.length; i++) {
+    const c = source[i];
+    if (c === "\\") {
+      const next = source[i + 1];
+      if (next === undefined)
+        break;
+      if (/[dwsSDWbB]/.test(next))
+        break;
+      out += next;
+      i++;
+      continue;
+    }
+    if ("[](){}|?*+^$.".includes(c))
+      break;
+    out += c;
+  }
+  return out.length >= 2 ? out : null;
+}
+function applicablePatterns(text) {
+  return GATED_PATTERNS.filter(([, , gate]) => gate === null || text.includes(gate));
+}
+function findSecrets(text) {
+  if (!text)
+    return [];
+  if (isSelfOutput(text))
+    return [];
+  const byValue = new Map;
+  for (const [pattern, label] of applicablePatterns(text)) {
+    const re = new RegExp(pattern.source, pattern.flags.includes("g") ? pattern.flags : pattern.flags + "g");
+    for (const m of text.matchAll(re)) {
+      const value = m[0];
+      if (isDocsLiteral(value))
+        continue;
+      if (!byValue.has(value))
+        byValue.set(value, { value, name: null, rule: label, shaped: true });
+    }
+  }
+  for (const m of text.matchAll(ASSIGNMENT_RE)) {
+    const name = m[2];
+    const value = unquote(m[4]);
+    const existing = byValue.get(value);
+    if (existing)
+      existing.name ??= name;
+  }
+  return [...byValue.values()];
+}
+function flattenToolInput(input, depth = 0) {
+  if (depth > 6 || input == null)
+    return "";
+  if (typeof input === "string")
+    return input;
+  if (typeof input === "number" || typeof input === "boolean")
+    return String(input);
+  if (Array.isArray(input))
+    return input.map((v) => flattenToolInput(v, depth + 1)).join(`
+`);
+  if (typeof input === "object") {
+    return Object.entries(input).map(([k, v]) => `${k}=${flattenToolInput(v, depth + 1)}`).join(`
+`);
+  }
+  return "";
+}
+var LEAK_SCAN_VERSION = 6, ASSIGNMENT_RE, DOCS_LITERALS, SELF_OUTPUT_MARKERS, GATED_PATTERNS;
+var init_leak_scan = __esm(() => {
+  init_builtin_policies();
+  ASSIGNMENT_RE = /(["']?)\b([A-Za-z_][A-Za-z0-9_]{0,127})\1([ \t]*(?::(?!\/\/)|=)[ \t]*)("[^"]*"|'[^']*'|[^\s;|&"']+)/g;
+  DOCS_LITERALS = new Set([
+    "1a5d44a2dca19669d72edf4c4f1c27c4c1ca4b4408fbb17f6ce4ad452d78ddb3",
+    "78314b11be2e581549ac1c4f616563fad3fdf0c3b71678f6e2299182080e0598",
+    "cb20d34a7adda2f5d2043836051e242fd4c2b233e02c80c91fe9d5af9b100574",
+    "3543c50b0cb9cea8e55eb1f529b79f043cb250d485fde7b66cabbb5183add7da",
+    "1fae28c1b317300acfd90078c973567c8159015822b0c8b81508a5ec40517d20",
+    "23219833092a3136d7ad178ccb62ebd6ac8cba54ff24c2cfcd37b84aba9e95cf",
+    "872db7f4419592e397ef45230f910e06b48c36ed9970cf1f9e4fb896e69f129c",
+    "78a08441f4314f0a2833cfe58c62e555a162264206982cda39f6804f5048f570",
+    "2cafc0970149a84f3b9e62eaf169f36f59907a3b3e31f7b82e68c69cd27f7326",
+    "b363ade84d56c43bebbc9339b4971e340e3f13f7f8d45580b53373d2763e9e33"
+  ]);
+  SELF_OUTPUT_MARKERS = [
+    "[REDACTED:",
+    "[redacted:",
+    "failproofai audit",
+    "assigned secret]"
+  ];
+  GATED_PATTERNS = SECRET_PATTERNS.map(([re, label]) => [re, label, literalPrefixOf(re.source)]);
+});
+
+// src/audit/leak-record.ts
+function upsertFinding(record, incoming) {
+  const { sighting, ...rest } = incoming;
+  const existing = record.findings.find((f) => f.id === rest.id);
+  if (!existing) {
+    record.findings.push({
+      ...rest,
+      firstSeen: sighting.at,
+      lastSeen: sighting.at,
+      occurrences: 1,
+      sightings: [sighting]
+    });
+    return { record, isNew: true };
+  }
+  existing.occurrences += 1;
+  if (sighting.at > existing.lastSeen)
+    existing.lastSeen = sighting.at;
+  if (sighting.at < existing.firstSeen)
+    existing.firstSeen = sighting.at;
+  const seen = existing.sightings.some((s) => s.sessionId === sighting.sessionId && s.at === sighting.at);
+  if (!seen) {
+    existing.sightings.push(sighting);
+    existing.sightings.sort((a, b) => a.at.localeCompare(b.at));
+    if (existing.sightings.length > MAX_SIGHTINGS) {
+      existing.sightings.splice(1, existing.sightings.length - MAX_SIGHTINGS);
+    }
+  }
+  return { record, isNew: false };
+}
+function pruneRecord(record, nowMs) {
+  const cutoff = new Date(nowMs - FINDING_TTL_DAYS * 86400000).toISOString();
+  const live = record.findings.filter((f) => f.lastSeen >= cutoff);
+  live.sort((a, b) => a.lastSeen < b.lastSeen ? 1 : a.lastSeen > b.lastSeen ? -1 : 0);
+  record.findings = live.slice(0, MAX_FINDINGS);
+  return record;
+}
+function emptyRecord(salt, nowIso) {
+  return {
+    schemaVersion: LEAK_RECORD_SCHEMA_VERSION,
+    salt,
+    updatedAt: nowIso,
+    findings: []
+  };
+}
+function describeMechanism(toolName, direction, shortPath) {
+  const where = shortPath ? ` ${shortPath}` : "";
+  let summary;
+  if (direction === "result") {
+    summary = shortPath ? `appeared in the output of reading${where}` : "appeared in tool output";
+  } else {
+    switch (toolName) {
+      case "Read":
+        summary = `read from${where || " a file"}`;
+        break;
+      case "Write":
+        summary = `written to${where || " a file"}`;
+        break;
+      case "Edit":
+      case "NotebookEdit":
+        summary = `edited into${where || " a file"}`;
+        break;
+      case "Bash":
+        summary = "passed in a shell command";
+        break;
+      default:
+        summary = `sent to the ${toolName} tool`;
+    }
+  }
+  return { summary, toolName, direction };
+}
+var MAX_SIGHTINGS = 5, FINDING_TTL_DAYS = 90, MAX_FINDINGS = 500, LEAK_RECORD_SCHEMA_VERSION = 1;
+
+// src/audit/leak-store.ts
+import { randomBytes as randomBytes2 } from "node:crypto";
+import { existsSync as existsSync31, mkdirSync as mkdirSync20, readFileSync as readFileSync26 } from "node:fs";
+import { dirname as dirname16 } from "node:path";
+function readJson(path) {
+  try {
+    if (!existsSync31(path))
+      return null;
+    return JSON.parse(readFileSync26(path, "utf8"));
+  } catch {
+    return null;
+  }
+}
+function readLeakIdentity(home) {
+  const existing = readJson(auditLeakIdentityFile(home));
+  if (existing && typeof existing.salt === "string" && existing.salt.length >= 32) {
+    return {
+      salt: existing.salt,
+      dismissed: existing.dismissed ?? []
+    };
+  }
+  const minted = { salt: randomBytes2(32).toString("hex"), dismissed: [] };
+  writeLeakIdentity(minted, home);
+  return minted;
+}
+function writeLeakIdentity(identity, home) {
+  const path = auditLeakIdentityFile(home);
+  try {
+    mkdirSync20(dirname16(path), { recursive: true });
+    writeJsonAtomically(path, identity, { mode: FILE_MODE });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function sanitizeFinding(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return null;
+  const f = raw;
+  if (typeof f.id !== "string" || !isFindingId(f.id))
+    return null;
+  const fp = f.fingerprint;
+  if (!fp || typeof fp !== "object" || typeof fp.display !== "string" || typeof fp.label !== "string") {
+    return null;
+  }
+  const sightings = Array.isArray(f.sightings) ? f.sightings.filter((s) => {
+    if (!s || typeof s !== "object")
+      return false;
+    const m = s.mechanism;
+    return !!m && typeof m === "object" && typeof m.summary === "string";
+  }) : [];
+  return {
+    ...f,
+    fingerprint: {
+      display: fp.display,
+      label: fp.label,
+      length: typeof fp.length === "number" && Number.isFinite(fp.length) ? fp.length : 0,
+      attributed: fp.attributed === true
+    },
+    name: typeof f.name === "string" ? f.name : null,
+    firstSeen: typeof f.firstSeen === "string" ? f.firstSeen : "",
+    lastSeen: typeof f.lastSeen === "string" ? f.lastSeen : "",
+    occurrences: typeof f.occurrences === "number" && Number.isFinite(f.occurrences) ? f.occurrences : sightings.length,
+    sightings
+  };
+}
+function readLeakRecord(home) {
+  const identity = readLeakIdentity(home);
+  const raw = readJson(auditLeaksFile(home));
+  if (!raw || raw.schemaVersion !== LEAK_RECORD_SCHEMA_VERSION || !Array.isArray(raw.findings)) {
+    return emptyRecord(identity.salt, new Date().toISOString());
+  }
+  const findings = raw.findings.map(sanitizeFinding).filter((f) => f !== null);
+  return { ...raw, findings, salt: identity.salt };
+}
+function writeLeakRecord(record, home, nowMs = Date.now()) {
+  const path = auditLeaksFile(home);
+  try {
+    mkdirSync20(dirname16(path), { recursive: true });
+    const pruned = pruneRecord(record, nowMs);
+    pruned.updatedAt = new Date(nowMs).toISOString();
+    writeJsonAtomically(path, pruned, { mode: FILE_MODE });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function activeFindings(record, home) {
+  const dismissed = new Set(readLeakIdentity(home).dismissed);
+  return record.findings.filter((f) => !dismissed.has(f.id)).sort((a, b) => a.lastSeen < b.lastSeen ? 1 : a.lastSeen > b.lastSeen ? -1 : 0);
+}
+var FILE_MODE = 384;
+var init_leak_store = __esm(() => {
+  init_fp_home();
+  init_atomic_write();
+  init_leak_fingerprint();
+});
+
 // src/audit/redact-example.ts
 import { homedir as homedir27 } from "node:os";
 function maskTruncatedSecret(input) {
@@ -27529,7 +27623,7 @@ function isSecretName(name) {
   return components.length > 1 && components.some((part) => COMPOUND_ONLY_COMPONENTS.includes(part));
 }
 function maskAssignedSecrets(input) {
-  let out = input.replace(ASSIGNMENT_RE, (match, quote, name, separator, value) => {
+  let out = input.replace(ASSIGNMENT_RE2, (match, quote, name, separator, value) => {
     if (!isSecretName(name))
       return match;
     if (value.startsWith("[REDACTED"))
@@ -27588,7 +27682,7 @@ function redactExample(input, home = homedir27()) {
   const collapsed = shortened.replace(/\s+/g, " ").trim();
   return collapsed.length > REDACTED_EXAMPLE_MAX_CHARS ? `${collapsed.slice(0, REDACTED_EXAMPLE_MAX_CHARS - 1)}…` : collapsed;
 }
-var REDACTED_EXAMPLE_MAX_CHARS = 160, KEPT_PARENT_SEGMENTS = 0, ABSOLUTE_PATH_RE, PUBLIC_PATH_ROOTS, SECRET_PREFIXES, SECRET_NAME_SUBSTRINGS, SECRET_NAME_COMPONENTS, COMPOUND_ONLY_COMPONENTS, ASSIGNMENT_RE, URL_CREDENTIALS_RE, BASIC_AUTH_FLAG_RE, CLIENT_BUNDLE_PREFIXES, PUBLISHED_MARKERS;
+var REDACTED_EXAMPLE_MAX_CHARS = 160, KEPT_PARENT_SEGMENTS = 0, ABSOLUTE_PATH_RE, PUBLIC_PATH_ROOTS, SECRET_PREFIXES, SECRET_NAME_SUBSTRINGS, SECRET_NAME_COMPONENTS, COMPOUND_ONLY_COMPONENTS, ASSIGNMENT_RE2, URL_CREDENTIALS_RE, BASIC_AUTH_FLAG_RE, CLIENT_BUNDLE_PREFIXES, PUBLISHED_MARKERS;
 var init_redact_example = __esm(() => {
   init_builtin_policies();
   ABSOLUTE_PATH_RE = /(?:\/[\w.\-@+]+){2,}\/?/g;
@@ -27616,9 +27710,9 @@ var init_redact_example = __esm(() => {
     "APIKEY",
     "PRIVATEKEY"
   ];
-  SECRET_NAME_COMPONENTS = ["KEY", "PASS", "AUTH", "PAT", "SIG", "SIGNATURE", "SESSION", "COOKIE"];
-  COMPOUND_ONLY_COMPONENTS = ["PWD"];
-  ASSIGNMENT_RE = /(["']?)\b([A-Za-z_][A-Za-z0-9_]{0,127})\1([ \t]*(?::(?!\/\/)|=)[ \t]*)("[^"]*"|'[^']*'|[^\s;|&"']+)/g;
+  SECRET_NAME_COMPONENTS = ["PASS", "AUTH", "PAT", "SIG", "SIGNATURE", "COOKIE"];
+  COMPOUND_ONLY_COMPONENTS = ["PWD", "KEY"];
+  ASSIGNMENT_RE2 = /(["']?)\b([A-Za-z_][A-Za-z0-9_]{0,127})\1([ \t]*(?::(?!\/\/)|=)[ \t]*)("[^"]*"|'[^']*'|[^\s;|&"']+)/g;
   URL_CREDENTIALS_RE = /([a-z][a-z0-9+.\-]{0,31}:\/\/)[^\s/:@]{1,256}:[^\s/@]{1,256}@/gi;
   BASIC_AUTH_FLAG_RE = /((?:^|\s)(?:-u|--user)[\s=])\S+:\S+/g;
   CLIENT_BUNDLE_PREFIXES = [
@@ -27634,136 +27728,9 @@ var init_redact_example = __esm(() => {
   PUBLISHED_MARKERS = /PUBLISHABLE|(^|_)PUBLIC_KEY$|(^|_)ANON_KEY$/;
 });
 
-// src/audit/leak-scan.ts
-function isNotACredential(value) {
-  if (value.length < MIN_VALUE_LEN)
-    return true;
-  if (/^[$<{(`%]/.test(value))
-    return true;
-  if (value.includes("${") || value.includes("{{") || value.includes("%("))
-    return true;
-  if (/^[A-Za-z_$][\w$]*(\.[A-Za-z_$][\w$]*)+$/.test(value))
-    return true;
-  if (value.includes("[REDACTED") || /^[•*#.]+$/.test(value))
-    return true;
-  if (/(.)\1{5,}/.test(value))
-    return true;
-  if (/^(true|false|null|undefined|none)$/i.test(value))
-    return true;
-  if (/^-?\d+(\.\d+)?$/.test(value))
-    return true;
-  if (/^\/|^~\/|^\.\.?\//.test(value))
-    return true;
-  return false;
-}
-function unquote(v) {
-  return v.startsWith('"') && v.endsWith('"') || v.startsWith("'") && v.endsWith("'") ? v.slice(1, -1) : v;
-}
-function isDocsLiteral(value) {
-  const { createHash } = __require("node:crypto");
-  return DOCS_LITERALS.has(createHash("sha256").update(value).digest("hex"));
-}
-function isSelfOutput(text) {
-  return SELF_OUTPUT_MARKERS.some((m) => text.includes(m));
-}
-function literalPrefixOf(source) {
-  let out = "";
-  for (let i = 0;i < source.length; i++) {
-    const c = source[i];
-    if (c === "\\") {
-      const next = source[i + 1];
-      if (next === undefined)
-        break;
-      if (/[dwsSDWbB]/.test(next))
-        break;
-      out += next;
-      i++;
-      continue;
-    }
-    if ("[](){}|?*+^$.".includes(c))
-      break;
-    out += c;
-  }
-  return out.length >= 2 ? out : null;
-}
-function applicablePatterns(text) {
-  return GATED_PATTERNS.filter(([, , gate]) => gate === null || text.includes(gate));
-}
-function findSecrets(text) {
-  if (!text)
-    return [];
-  if (isSelfOutput(text))
-    return [];
-  const byValue = new Map;
-  for (const [pattern, label] of applicablePatterns(text)) {
-    const re = new RegExp(pattern.source, pattern.flags.includes("g") ? pattern.flags : pattern.flags + "g");
-    for (const m of text.matchAll(re)) {
-      const value = m[0];
-      if (isDocsLiteral(value))
-        continue;
-      if (!byValue.has(value))
-        byValue.set(value, { value, name: null, rule: label, shaped: true });
-    }
-  }
-  for (const m of text.matchAll(ASSIGNMENT_RE2)) {
-    const name = m[2];
-    const value = unquote(m[4]);
-    if (!isSecretName(name) || isNotACredential(value) || isDocsLiteral(value))
-      continue;
-    const existing = byValue.get(value);
-    if (existing) {
-      existing.name ??= name;
-      continue;
-    }
-    byValue.set(value, { value, name, rule: "assigned secret", shaped: false });
-  }
-  return [...byValue.values()];
-}
-function flattenToolInput(input, depth = 0) {
-  if (depth > 6 || input == null)
-    return "";
-  if (typeof input === "string")
-    return input;
-  if (typeof input === "number" || typeof input === "boolean")
-    return String(input);
-  if (Array.isArray(input))
-    return input.map((v) => flattenToolInput(v, depth + 1)).join(`
-`);
-  if (typeof input === "object") {
-    return Object.entries(input).map(([k, v]) => `${k}=${flattenToolInput(v, depth + 1)}`).join(`
-`);
-  }
-  return "";
-}
-var ASSIGNMENT_RE2, MIN_VALUE_LEN = 8, DOCS_LITERALS, SELF_OUTPUT_MARKERS, GATED_PATTERNS;
-var init_leak_scan = __esm(() => {
-  init_builtin_policies();
-  init_redact_example();
-  ASSIGNMENT_RE2 = /(["']?)\b([A-Za-z_][A-Za-z0-9_]{0,127})\1([ \t]*(?::(?!\/\/)|=)[ \t]*)("[^"]*"|'[^']*'|[^\s;|&"']+)/g;
-  DOCS_LITERALS = new Set([
-    "1a5d44a2dca19669d72edf4c4f1c27c4c1ca4b4408fbb17f6ce4ad452d78ddb3",
-    "78314b11be2e581549ac1c4f616563fad3fdf0c3b71678f6e2299182080e0598",
-    "cb20d34a7adda2f5d2043836051e242fd4c2b233e02c80c91fe9d5af9b100574",
-    "3543c50b0cb9cea8e55eb1f529b79f043cb250d485fde7b66cabbb5183add7da",
-    "1fae28c1b317300acfd90078c973567c8159015822b0c8b81508a5ec40517d20",
-    "23219833092a3136d7ad178ccb62ebd6ac8cba54ff24c2cfcd37b84aba9e95cf",
-    "872db7f4419592e397ef45230f910e06b48c36ed9970cf1f9e4fb896e69f129c",
-    "78a08441f4314f0a2833cfe58c62e555a162264206982cda39f6804f5048f570",
-    "2cafc0970149a84f3b9e62eaf169f36f59907a3b3e31f7b82e68c69cd27f7326",
-    "b363ade84d56c43bebbc9339b4971e340e3f13f7f8d45580b53373d2763e9e33"
-  ]);
-  SELF_OUTPUT_MARKERS = [
-    "[REDACTED:",
-    "[redacted:",
-    "failproofai audit",
-    "assigned secret]"
-  ];
-  GATED_PATTERNS = SECRET_PATTERNS.map(([re, label]) => [re, label, literalPrefixOf(re.source)]);
-});
-
 // src/audit/cache.ts
 import { createHash as createHash8 } from "node:crypto";
-import { existsSync as existsSync33, mkdirSync as mkdirSync22, readFileSync as readFileSync26, writeFileSync as writeFileSync19, chmodSync as chmodSync5, openSync, readSync, closeSync } from "node:fs";
+import { existsSync as existsSync32, mkdirSync as mkdirSync21, readFileSync as readFileSync27, writeFileSync as writeFileSync18, chmodSync as chmodSync5, openSync, readSync, closeSync } from "node:fs";
 import { join as join33 } from "node:path";
 function getEngineVersion() {
   if (cachedEngineVersion)
@@ -27824,10 +27791,10 @@ function readCachedTranscript(transcriptPath, mtimeMs, sizeBytes) {
   if (sizeBytes === 0)
     return null;
   const cachePath = getCachePathFor(transcriptPath);
-  if (!existsSync33(cachePath))
+  if (!existsSync32(cachePath))
     return null;
   try {
-    const raw = readFileSync26(cachePath, "utf-8");
+    const raw = readFileSync27(cachePath, "utf-8");
     const entry = JSON.parse(raw);
     if (entry.schemaVersion !== CACHE_SCHEMA_VERSION)
       return null;
@@ -27835,6 +27802,8 @@ function readCachedTranscript(transcriptPath, mtimeMs, sizeBytes) {
       return null;
     if (entry.detectorVersion !== getDetectorVersion())
       return null;
+    if (entry.leakScanVersion !== LEAK_SCAN_VERSION)
+      return null;
     if (!Number.isFinite(entry.cachedAt) || Date.now() - entry.cachedAt > CACHE_TTL_MS)
       return null;
     if (!entry.result)
@@ -27866,7 +27835,7 @@ function writeCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes, result,
     return;
   const cachePath = getCachePathFor(transcriptPath);
   try {
-    mkdirSync22(auditCacheDir(), { recursive: true });
+    mkdirSync21(auditCacheDir(), { recursive: true });
     const entry = {
       schemaVersion: CACHE_SCHEMA_VERSION,
       cachedAt: Date.now(),
@@ -27874,6 +27843,7 @@ function writeCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes, result,
       sizeBytes,
       engineVersion: getEngineVersion(),
       detectorVersion: getDetectorVersion(),
+      leakScanVersion: LEAK_SCAN_VERSION,
       result
     };
     if (resume && resume.bytesScanned > 0) {
@@ -27884,7 +27854,7 @@ function writeCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes, result,
         entry.detectorState = encodeDetectorState(resume.detectorState);
       }
     }
-    writeFileSync19(cachePath, JSON.stringify(entry), { encoding: "utf-8", mode: 384 });
+    writeFileSync18(cachePath, JSON.stringify(entry), { encoding: "utf-8", mode: 384 });
     try {
       chmodSync5(cachePath, 384);
     } catch {}
@@ -27894,6 +27864,7 @@ var cachedEngineVersion = null, cachedDetectorVersion = null, CACHE_SCHEMA_VERSI
 var init_cache = __esm(() => {
   init_builtin_policies();
   init_detectors();
+  init_leak_scan();
   init_fp_home();
   CACHE_TTL_MS = 30 * 24 * 60 * 60000;
 });
@@ -27962,6 +27933,30 @@ var init_replay = __esm(() => {
 });
 
 // src/audit/index.ts
+class ByteGate {
+  budget;
+  inFlight = 0;
+  waiting = [];
+  constructor(budget) {
+    this.budget = budget;
+  }
+  async acquire(bytes) {
+    const want = Math.max(0, bytes);
+    while (this.inFlight > 0 && this.inFlight + want > this.budget) {
+      await new Promise((resolve) => this.waiting.push(resolve));
+    }
+    this.inFlight += want;
+  }
+  release(bytes) {
+    this.inFlight -= Math.max(0, bytes);
+    if (this.inFlight < 0)
+      this.inFlight = 0;
+    const waiters = this.waiting;
+    this.waiting = [];
+    for (const wake of waiters)
+      wake();
+  }
+}
 function shortPolicyName(name) {
   const slash = name.indexOf("/");
   return slash >= 0 ? name.slice(slash + 1) : name;
@@ -28003,6 +27998,27 @@ function parseSinceOpt(since) {
     return t;
   throw new Error(`Invalid --since value: "${since}" (expected e.g. "7d", "30d", or "2026-04-01")`);
 }
+function isCredentialResearchSession(events, sessionDescription) {
+  if (sessionDescription && CREDENTIAL_RESEARCH_PURPOSE.test(sessionDescription))
+    return true;
+  const matched = new Set;
+  let evidenceEvents = 0;
+  for (const event of events) {
+    const intent = flattenToolInput(event.toolInput);
+    let eventMatched = false;
+    for (let i = 0;i < CREDENTIAL_RESEARCH_MARKERS.length; i++) {
+      if (CREDENTIAL_RESEARCH_MARKERS[i].test(intent)) {
+        matched.add(i);
+        eventMatched = true;
+      }
+    }
+    if (eventMatched)
+      evidenceEvents++;
+    if (matched.size >= 2 || evidenceEvents >= 3)
+      return true;
+  }
+  return false;
+}
 async function scanOneTranscript(meta, resume) {
   const empty = {
     transcriptPath: meta.transcriptPath,
@@ -28043,6 +28059,9 @@ async function scanOneTranscript(meta, resume) {
   const result = empty;
   result.eventsScanned = events.length;
   result.cwd = result.cwd || events[0].cwd || "";
+  const suppressLeakScan = isCredentialResearchSession(events, meta.sessionDescription);
+  if (suppressLeakScan)
+    result.leakScanSuppressed = "credential-research";
   for (const event of events) {
     let replayHits;
     try {
@@ -28054,7 +28073,8 @@ async function scanOneTranscript(meta, resume) {
       const example = formatPolicyExample(hit.policyName, event);
       recordHit(result, hit.policyName, event.timestamp, event.cwd, truncateExample(example));
     }
-    recordLeaks(result, event);
+    if (!suppressLeakScan)
+      recordLeaks(result, event);
   }
   return { result, bytesScanned, detectorState: sessionState, resumed };
 }
@@ -28094,10 +28114,12 @@ function leakSalt() {
   }
   return cachedSalt;
 }
-function persistLeaks(perTranscript) {
+function persistLeaks(perTranscript, replaceExisting) {
   const fresh = [];
   try {
-    const record = readLeakRecord();
+    const previous = readLeakRecord();
+    const previousIds = new Set(previous.findings.map((f) => f.id));
+    const record = replaceExisting ? emptyRecord(previous.salt, new Date().toISOString()) : previous;
     for (const t of perTranscript) {
       for (const leak of t.leaks ?? []) {
         const { isNew } = upsertFinding(record, {
@@ -28114,7 +28136,7 @@ function persistLeaks(perTranscript) {
             mechanism: describeMechanism(leak.toolName, leak.direction, leak.path)
           }
         });
-        if (isNew)
+        if (isNew && !previousIds.has(leak.id))
           fresh.push(leak.id);
       }
     }
@@ -28144,6 +28166,12 @@ function mergeIncremental(cached, tail) {
     examplesByName: {},
     rangeByName: { ...cached.rangeByName }
   };
+  if (cached.leakScanSuppressed || tail.leakScanSuppressed) {
+    out.leakScanSuppressed = "credential-research";
+    out.leaks = [];
+  } else {
+    out.leaks = [...cached.leaks ?? [], ...tail.leaks ?? []];
+  }
   for (const [name, list] of Object.entries(cached.examplesByName)) {
     out.examplesByName[name] = [...list];
   }
@@ -28267,16 +28295,19 @@ async function runAuditInner(opts, startedAt) {
     }
   } catch {}
   const allTranscripts = [];
+  let discoveryErrors = 0;
   for (const cli of clis) {
     const adapter = ADAPTERS[cli];
     let list;
     try {
       list = await adapter.listTranscripts({ projects: opts.projects, sinceMs });
     } catch {
+      discoveryErrors++;
       continue;
     }
     allTranscripts.push(...list);
   }
+  const gate = new ByteGate(TRANSCRIPT_BYTE_BUDGET);
   let skipped = 0;
   let errors = 0;
   const tasks = allTranscripts.map((meta) => async () => {
@@ -28289,6 +28320,7 @@ async function runAuditInner(opts, startedAt) {
       resume = found?.kind === "resume" ? { fromByte: found.fromByte, detectorState: found.detectorState } : undefined;
       cachedPrefix = found?.kind === "resume" ? found.result : null;
     }
+    await gate.acquire(meta.sizeBytes);
     try {
       const scan = await scanOneTranscript(meta, resume);
       const fresh = cachedPrefix && scan.resumed ? mergeIncremental(cachedPrefix, scan.result) : scan.result;
@@ -28311,6 +28343,8 @@ async function runAuditInner(opts, startedAt) {
         examplesByName: {},
         rangeByName: {}
       };
+    } finally {
+      gate.release(meta.sizeBytes);
     }
   });
   const settled = await batchAll(tasks, TRANSCRIPT_CONCURRENCY);
@@ -28337,9 +28371,12 @@ async function runAuditInner(opts, startedAt) {
       projectsScannedSet.add(t.cwd);
     eventsScanned += t.eventsScanned ?? 0;
   }
-  const newFindingIds = persistLeaks(perTranscript);
+  const coversAllHistory = opts.clis === undefined && opts.projects === undefined && opts.since === undefined && discoveryErrors === 0 && errors === 0 && skipped === 0;
+  const newFindingIds = persistLeaks(perTranscript, coversAllHistory);
+  const leakIds = [...new Set(perTranscript.flatMap((t) => (t.leaks ?? []).map((leak) => leak.id)))];
   const auditResult = {
     version: 2,
+    leakIds,
     newLeakIds: newFindingIds,
     scannedAt: new Date(startedAt).toISOString(),
     scope: {
@@ -28364,7 +28401,7 @@ async function runAuditInner(opts, startedAt) {
   };
   return auditResult;
 }
-var TRANSCRIPT_CONCURRENCY = 8, cachedSalt;
+var TRANSCRIPT_CONCURRENCY = 8, TRANSCRIPT_BYTE_BUDGET, CREDENTIAL_RESEARCH_MARKERS, CREDENTIAL_RESEARCH_PURPOSE, cachedSalt;
 var init_audit = __esm(() => {
   init_builtin_policies();
   init_hooks_config();
@@ -28380,17 +28417,26 @@ var init_audit = __esm(() => {
   init_cache();
   init_replay();
   init_types2();
+  TRANSCRIPT_BYTE_BUDGET = 48 * 1024 * 1024;
+  CREDENTIAL_RESEARCH_MARKERS = [
+    /\b(?:secret|credential)[-_ ](?:scanner|detection|detector|pattern|regex|corpus)\b/i,
+    /\b(?:trufflehog|trufflesecurity|gitleaks|detect-secrets|secret-detection-rules)\b/i,
+    /\b(?:SECRET_PATTERNS|findSecrets|isDocsLiteral|leak-scan)\b/,
+    /\b(?:fixture|placeholder|synthetic|sample) (?:api )?(?:key|token|secret|credential)s?\b/i,
+    /\b(?:grep|rg|ripgrep|scan|hunt|search)\b[^\n]{0,240}\b(?:secret|credential|token)s?\b/i
+  ];
+  CREDENTIAL_RESEARCH_PURPOSE = /\b(?:hunt|scan|search|research|test)(?:ing)?\b[^\n]{0,80}\b(?:secret|credential|token)s?\b|\b(?:secret|credential|token)s?\b[^\n]{0,80}\b(?:scanner|detector|detection|research|fixtures?|corpus)\b/i;
 });
 
 // src/audit/audit-lock.ts
 import {
   closeSync as closeSync2,
   linkSync,
-  mkdirSync as mkdirSync23,
+  mkdirSync as mkdirSync22,
   openSync as openSync2,
-  readFileSync as readFileSync27,
+  readFileSync as readFileSync28,
   unlinkSync as unlinkSync4,
-  writeFileSync as writeFileSync20,
+  writeFileSync as writeFileSync19,
   writeSync
 } from "node:fs";
 function acquireAuditLock(source, now = Date.now()) {
@@ -28449,7 +28495,7 @@ function handleFor(path, info) {
 }
 function readLock2(path) {
   try {
-    const parsed = JSON.parse(readFileSync27(path, "utf8"));
+    const parsed = JSON.parse(readFileSync28(path, "utf8"));
     if (typeof parsed?.pid !== "number" || typeof parsed?.startedAt !== "number")
       return null;
     return {
@@ -28465,7 +28511,7 @@ function writeLockExclusive(path, info) {
   const body = JSON.stringify(info);
   const staging = `${path}.${process.pid}.tmp`;
   try {
-    writeFileSync20(staging, body, { mode: 384 });
+    writeFileSync19(staging, body, { mode: 384 });
   } catch {
     return false;
   }
@@ -28499,8 +28545,8 @@ function createThenWrite(path, body) {
   }
 }
 function ensureRunDir() {
-  mkdirSync23(failproofaiHome(), { recursive: true });
-  mkdirSync23(runDir(), { recursive: true, mode: 448 });
+  mkdirSync22(failproofaiHome(), { recursive: true });
+  mkdirSync22(runDir(), { recursive: true, mode: 448 });
 }
 var AUDIT_LOCK_MAX_AGE_MS;
 var init_audit_lock = __esm(() => {
@@ -28509,7 +28555,7 @@ var init_audit_lock = __esm(() => {
 });
 
 // src/audit/dashboard-cache.ts
-import { existsSync as existsSync34, readFileSync as readFileSync28 } from "node:fs";
+import { existsSync as existsSync33, readFileSync as readFileSync29 } from "node:fs";
 function getCachePath() {
   return auditDashboardFile();
 }
@@ -28529,10 +28575,10 @@ function writeDashboardCache(params, result) {
 }
 function readDashboardCacheMeta() {
   const cachePath = getCachePath();
-  if (!existsSync34(cachePath))
+  if (!existsSync33(cachePath))
     return null;
   try {
-    const raw = readFileSync28(cachePath, "utf-8");
+    const raw = readFileSync29(cachePath, "utf-8");
     const entry = JSON.parse(raw);
     if (!entry || entry.schemaVersion !== DASHBOARD_CACHE_SCHEMA_VERSION || typeof entry.cachedAt !== "string" || Number.isNaN(new Date(entry.cachedAt).getTime()))
       return null;
@@ -28756,18 +28802,18 @@ var init_api_server_client = __esm(() => {
 });
 
 // lib/auth/auth-store.ts
-import { existsSync as existsSync35, readFileSync as readFileSync29, readdirSync as readdirSync19, rmSync as rmSync14 } from "node:fs";
-import { join as join34, resolve as resolve25 } from "node:path";
+import { existsSync as existsSync34, readFileSync as readFileSync30, readdirSync as readdirSync18, rmSync as rmSync13 } from "node:fs";
+import { join as join34, resolve as resolve24 } from "node:path";
 function getAuthFilePath() {
   const override = process.env.FAILPROOFAI_AUTH_DIR;
   return override ? join34(override, "session.json") : auditSessionFile();
 }
 function readAuth() {
   const p = getAuthFilePath();
-  if (!existsSync35(p))
+  if (!existsSync34(p))
     return null;
   try {
-    const raw = readFileSync29(p, "utf-8");
+    const raw = readFileSync30(p, "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.access_token !== "string" || typeof parsed.refresh_token !== "string" || typeof parsed.access_expires_at !== "number" || typeof parsed.user !== "object" || !parsed.user || typeof parsed.user.id !== "string" || typeof parsed.user.email !== "string") {
       return null;
@@ -28791,18 +28837,18 @@ function writeAuth(auth) {
 }
 function deleteAuth() {
   const p = getAuthFilePath();
-  if (existsSync35(p))
-    rmSync14(p, { force: true });
+  if (existsSync34(p))
+    rmSync13(p, { force: true });
   try {
     const root = migrationsDir();
-    if (!existsSync35(root))
+    if (!existsSync34(root))
       return;
-    for (const entry of readdirSync19(root)) {
+    for (const entry of readdirSync18(root)) {
       if (!entry.startsWith("backup-layout"))
         continue;
-      const copy = resolve25(root, entry, "auth.json");
-      if (existsSync35(copy))
-        rmSync14(copy, { force: true });
+      const copy = resolve24(root, entry, "auth.json");
+      if (existsSync34(copy))
+        rmSync13(copy, { force: true });
     }
   } catch {}
 }
@@ -28934,7 +28980,11 @@ function selectLeaks(findings, from, to) {
     const last = ts(f.lastSeen);
     if (last !== null && (last < lo || last > hi))
       continue;
-    const seen = f.sightings?.[f.sightings.length - 1];
+    const seen = f.sightings?.reduce((latest, candidate) => {
+      if (!latest)
+        return candidate;
+      return (ts(candidate.at) ?? 0) >= (ts(latest.at) ?? 0) ? candidate : latest;
+    }, undefined);
     out.push({
       id: f.id,
       display: f.fingerprint?.display ?? "[credential]",
@@ -28966,7 +29016,7 @@ function buildHarmReport(result, lastReportedAt, intervalDays, leakFindings = []
     window_from: from.toISOString(),
     window_to: windowTo.toISOString(),
     harmful: selectHarmful(result, from, windowTo, { includeUnplaceable: isFirstReport }),
-    leaks: selectLeaks(leakFindings, from, windowTo)
+    leaks: selectLeaks(leakFindings, from, windowTo).slice(0, 1)
   };
 }
 var HARMFUL_SEVERITIES, ALSO_HARMFUL;
@@ -28977,15 +29027,15 @@ var init_harm_report = __esm(() => {
 });
 
 // src/audit/machine-store.ts
-import { existsSync as existsSync36, readFileSync as readFileSync30, rmSync as rmSync15 } from "node:fs";
+import { existsSync as existsSync35, readFileSync as readFileSync31, rmSync as rmSync14 } from "node:fs";
 import { hostname as hostname5 } from "node:os";
 import { randomUUID as randomUUID4 } from "node:crypto";
 function readMachineIdentity(home) {
   const path = auditMachineFile(home);
-  if (!existsSync36(path))
+  if (!existsSync35(path))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync30(path, "utf8"));
+    const parsed = JSON.parse(readFileSync31(path, "utf8"));
     if (typeof parsed.machine_id !== "string" || !parsed.machine_id)
       return null;
     return {
@@ -29031,20 +29081,20 @@ var init_machine_store = __esm(() => {
 // src/audit/report-harm.ts
 async function reportHarm(result) {
   let auto = false;
-  let consentedAt;
   let intervalDays = 7;
   try {
     const config = readConfig();
     auto = config.audit.auto;
-    consentedAt = config.audit.reportsConsentedAt;
     intervalDays = config.audit.intervalDays;
   } catch {
     return { kind: "disabled" };
   }
   if (!auto)
     return { kind: "disabled" };
-  if (consentedAt === undefined)
-    return { kind: "consent-required" };
+  const prior = readMachineIdentity();
+  const report = buildHarmReport(result, prior?.last_reported_at, intervalDays, activeFindings(readLeakRecord()));
+  if (report.leaks.length === 0)
+    return { kind: "no-leak" };
   const auth = await getValidAccessToken();
   if (!auth) {
     return { kind: "signed-out" };
@@ -29055,8 +29105,6 @@ async function reportHarm(result) {
   } catch (err) {
     return { kind: "failed", error: err instanceof Error ? err.message : String(err) };
   }
-  const report = buildHarmReport(result, identity.last_reported_at, intervalDays, activeFindings(readLeakRecord()));
-  const hits = report.harmful.reduce((n, p) => n + p.hits, 0);
   try {
     const res = await submitAuditReport(auth.access_token, {
       machine_id: identity.machine_id,
@@ -29070,7 +29118,7 @@ async function reportHarm(result) {
     try {
       recordReportWatermark(res.next_window_from);
     } catch {}
-    return res.emailed ? { kind: "sent", hits } : { kind: "held", hits, reason: res.reason ?? "not_sent" };
+    return res.emailed ? { kind: "sent", leaks: report.leaks.length } : { kind: "held", leaks: report.leaks.length, reason: res.reason ?? "not_sent" };
   } catch (err) {
     const error = err instanceof AuthApiError ? `${err.code}: ${err.message}` : err instanceof Error ? err.message : String(err);
     return { kind: "failed", error };
@@ -29079,17 +29127,16 @@ async function reportHarm(result) {
 function describeOutcome2(outcome) {
   switch (outcome.kind) {
     case "disabled":
+    case "no-leak":
       return null;
-    case "consent-required":
-      return "failproofai: scheduled scans are on, but emailing what they find needs a fresh opt-in — run `failproofai audit --schedule` (or visit /settings) to turn digests on";
     case "signed-out":
-      return "failproofai: emailed reports are on but this machine is signed out — run `failproofai audit --schedule` or visit /settings to resume them";
+      return "failproofai: a credential exposure was found, but no email is configured — run `failproofai audit --schedule --email you@example.com`";
     case "sent":
-      return `failproofai: emailed a harm digest (${outcome.hits} finding${outcome.hits === 1 ? "" : "s"})`;
+      return "failproofai: emailed the most recent credential exposure";
     case "held":
-      return `failproofai: ${outcome.hits} finding${outcome.hits === 1 ? "" : "s"} reported, no email (${outcome.reason})`;
+      return `failproofai: credential exposure reported, no email (${outcome.reason})`;
     case "failed":
-      return `failproofai: could not send the harm report: ${outcome.error}`;
+      return `failproofai: could not send the credential alert: ${outcome.error}`;
   }
 }
 var init_report_harm = __esm(() => {
@@ -29363,6 +29410,15 @@ var init_desktop_notify = __esm(() => {
   ];
 });
 
+// src/hooks/notice.ts
+function desktopLeakNotice(email = "held") {
+  const followUp = email === "sent" ? "A masked alert was also sent to your email." : email === "missing" ? "Add email alerts with: failproofai audit --schedule --email you@example.com" : email === "failed" ? "Email delivery failed this time; the local result is still available." : "Email was not sent for this run.";
+  return {
+    title: "failproofai audit needs review",
+    body: "Possible credential exposure was found in your agent transcripts. " + `Run failproofai audit to verify the matches and rotate anything real. ${followUp}`
+  };
+}
+
 // src/audit/cli.ts
 function colorOn() {
   if (process.env.NO_COLOR && process.env.NO_COLOR !== "")
@@ -29555,8 +29611,8 @@ var init_cli = __esm(() => {
   init_report_harm();
   init_desktop_notify();
   init_macos_notifier();
-  init_leak_notice();
   init_fp_config();
+  init_auth_store();
   init_tui();
   init_package();
   AUDIT_STAGES = [
@@ -29575,9 +29631,9 @@ var init_cli = __esm(() => {
 });
 
 // src/hooks/configure-wizard.ts
-import { existsSync as existsSync37, mkdirSync as mkdirSync24, writeFileSync as writeFileSync21, readFileSync as readFileSync31 } from "node:fs";
+import { existsSync as existsSync36, mkdirSync as mkdirSync23, writeFileSync as writeFileSync20, readFileSync as readFileSync32 } from "node:fs";
 import { homedir as homedir28 } from "node:os";
-import { dirname as dirname17, resolve as resolve26, sep as sep5 } from "node:path";
+import { dirname as dirname17, resolve as resolve25, sep as sep5 } from "node:path";
 async function emit(event, props) {
   try {
     await trackHookEvent2(getInstanceId2(), event, props);
@@ -29600,8 +29656,8 @@ function setCustomPoliciesEnabled(scope, cwd, enabled) {
   const path = getConfigPathForScope(scope, cwd);
   let config = {};
   try {
-    if (existsSync37(path))
-      config = JSON.parse(readFileSync31(path, "utf8"));
+    if (existsSync36(path))
+      config = JSON.parse(readFileSync32(path, "utf8"));
   } catch {
     return;
   }
@@ -29610,7 +29666,7 @@ function setCustomPoliciesEnabled(scope, cwd, enabled) {
   else
     config.customPoliciesEnabled = false;
   try {
-    writeFileSync21(path, JSON.stringify(config, null, 2) + `
+    writeFileSync20(path, JSON.stringify(config, null, 2) + `
 `, "utf8");
   } catch {}
 }
@@ -29641,7 +29697,7 @@ function describeCustomPolicies(cwd) {
   const scopes = [];
   let fileCount = 0;
   const dirs = [
-    { dir: resolve26(cwd, ".failproofai", "policies"), label: "project" },
+    { dir: resolve25(cwd, ".failproofai", "policies"), label: "project" },
     { dir: customPoliciesDir(), label: "global" }
   ];
   for (const { dir, label } of dirs) {
@@ -29652,7 +29708,7 @@ function describeCustomPolicies(cwd) {
       fileCount += found.length;
     }
     for (const name of findSkippedPolicyFiles(dir)) {
-      warnings.push(`! ${homeify(resolve26(dir, name))} is NOT loaded — rename to ` + `${name.replace(/\.(js|mjs|ts)$/, "-policies.$1")}`);
+      warnings.push(`! ${homeify(resolve25(dir, name))} is NOT loaded — rename to ` + `${name.replace(/\.(js|mjs|ts)$/, "-policies.$1")}`);
     }
   }
   return { active, warnings, fileCount, scopes };
@@ -29745,8 +29801,8 @@ function firstRunMarkerPath() {
 }
 function markLauncherSeen() {
   try {
-    mkdirSync24(dirname17(firstRunMarkerPath()), { recursive: true });
-    writeFileSync21(firstRunMarkerPath(), "1", "utf8");
+    mkdirSync23(dirname17(firstRunMarkerPath()), { recursive: true });
+    writeFileSync20(firstRunMarkerPath(), "1", "utf8");
   } catch {}
 }
 function retryProbe() {
@@ -29824,6 +29880,8 @@ async function runConfigureWizard(io = {}, answers = {}) {
   const cwd = process.cwd();
   const unattended = !stdin.isTTY || !stdout.isTTY;
   const preAnswered = Boolean(answers.token);
+  const initialAudit = readConfigRaw().raw.audit;
+  const hadExplicitAuditAuto = !!initialAudit && typeof initialAudit === "object" && !Array.isArray(initialAudit) && typeof initialAudit.auto === "boolean";
   if (typeof process.getuid === "function" && process.getuid() === 0 && process.env.SUDO_USER) {
     stdout.write(`Run failproofai config as ${process.env.SUDO_USER}, not under sudo.
 ` + `Everything it configures is per-user — hooks, policies and the daemon's own
@@ -30146,6 +30204,11 @@ Hooks keep enforcing; scheduled audits stay off until it is.
   }
   if (daemonInstalled) {
     setDaemonConfigured(true, version2);
+    if (!hadExplicitAuditAuto) {
+      try {
+        updateConfig({ audit: { auto: true } });
+      } catch {}
+    }
     pruneOldDaemonBinaries();
     installMacNotifier();
   }
@@ -30235,21 +30298,22 @@ var init_configure_wizard = __esm(() => {
   init_package();
   init_onboarding_attempt();
   init_onboarding_lock();
+  init_fp_config();
   POLICY_LIST_INDENT = " ".repeat(15);
 });
 
 // src/hooks/flush-cli.ts
-import { existsSync as existsSync38, mkdirSync as mkdirSync25, writeFileSync as writeFileSync22, readdirSync as readdirSync20 } from "node:fs";
+import { existsSync as existsSync37, mkdirSync as mkdirSync24, writeFileSync as writeFileSync21, readdirSync as readdirSync19 } from "node:fs";
 import { dirname as dirname18, join as join35 } from "node:path";
 function flushRequestPath2(home) {
   return join35(failproofaiHome(home), "state", "flush-request.json");
 }
 function spoolDirs2(home) {
   const root = spoolDir(home);
-  if (!existsSync38(root))
+  if (!existsSync37(root))
     return [];
   try {
-    return readdirSync20(root, { withFileTypes: true }).filter((e) => e.isDirectory() && e.name !== "failed").map((e) => join35(root, e.name));
+    return readdirSync19(root, { withFileTypes: true }).filter((e) => e.isDirectory() && e.name !== "failed").map((e) => join35(root, e.name));
   } catch {
     return [];
   }
@@ -30258,7 +30322,7 @@ function pendingBatches2(home) {
   let n = 0;
   for (const dir of spoolDirs2(home)) {
     try {
-      n += readdirSync20(dir).filter((f) => f.endsWith(".jsonl")).length;
+      n += readdirSync19(dir).filter((f) => f.endsWith(".jsonl")).length;
     } catch {}
   }
   return n;
@@ -30315,8 +30379,8 @@ async function runFlushCommand2(opts = {}) {
     return { exitCode: 0, pending: 0, lines: ["Nothing spooled — everything already delivered."] };
   }
   const path = flushRequestPath2(home);
-  mkdirSync25(dirname18(path), { recursive: true });
-  writeFileSync22(path, `${JSON.stringify({ requestedAtMs: Date.now() }, null, 2)}
+  mkdirSync24(dirname18(path), { recursive: true });
+  writeFileSync21(path, `${JSON.stringify({ requestedAtMs: Date.now() }, null, 2)}
 `, {
     mode: 384
   });
@@ -30347,7 +30411,7 @@ var init_flush_cli2 = __esm(() => {
 });
 
 // src/hooks/backfill-cli.ts
-import { existsSync as existsSync39, mkdirSync as mkdirSync26, writeFileSync as writeFileSync23, readdirSync as readdirSync21, statSync as statSync24 } from "node:fs";
+import { existsSync as existsSync38, mkdirSync as mkdirSync25, writeFileSync as writeFileSync22, readdirSync as readdirSync20, statSync as statSync23 } from "node:fs";
 import { dirname as dirname19, join as join36 } from "node:path";
 function backfillRequestPath(home) {
   return join36(failproofaiHome(home), "state", "backfill-request.json");
@@ -30356,7 +30420,7 @@ function surveySessions(sinceMs, homeDir) {
   const out = [];
   for (const { cli, dir } of SESSION_DIRS) {
     const root = join36(homeDir, dir);
-    if (!existsSync39(root))
+    if (!existsSync38(root))
       continue;
     let files = 0;
     let newest = 0;
@@ -30365,7 +30429,7 @@ function surveySessions(sinceMs, homeDir) {
         return;
       let entries;
       try {
-        entries = readdirSync21(d, { withFileTypes: true });
+        entries = readdirSync20(d, { withFileTypes: true });
       } catch {
         return;
       }
@@ -30376,7 +30440,7 @@ function surveySessions(sinceMs, homeDir) {
           continue;
         }
         try {
-          const st = statSync24(p);
+          const st = statSync23(p);
           if (st.mtimeMs >= sinceMs) {
             files += 1;
             newest = Math.max(newest, st.mtimeMs);
@@ -30394,7 +30458,7 @@ function runBackfillCommand(opts = {}) {
   const now = opts.now ?? Date.now();
   const sinceMs = opts.sinceMs ?? now - DEFAULT_BACKFILL_DAYS * 24 * 60 * 60 * 1000;
   const home = failproofaiHome();
-  if (!existsSync39(home)) {
+  if (!existsSync38(home)) {
     return {
       exitCode: 1,
       lines: [`No failproofai home at ${home}. Run \`failproofai config\` first.`]
@@ -30449,8 +30513,8 @@ function runBackfillCommand(opts = {}) {
   }
   try {
     const path = backfillRequestPath();
-    mkdirSync26(dirname19(path), { recursive: true });
-    writeFileSync23(path, `${JSON.stringify({ sinceMs, requestedAtMs: now }, null, 2)}
+    mkdirSync25(dirname19(path), { recursive: true });
+    writeFileSync22(path, `${JSON.stringify({ sinceMs, requestedAtMs: now }, null, 2)}
 `, {
       mode: 384
     });
@@ -30493,7 +30557,7 @@ var init_backfill_cli = __esm(() => {
 
 // src/hooks/harness-cli.ts
 import { homedir as homedir29 } from "node:os";
-import { resolve as resolve27 } from "node:path";
+import { resolve as resolve26 } from "node:path";
 function unknownHarness(name) {
   return fail([
     `Unknown harness: ${name}`,
@@ -30537,7 +30601,7 @@ function comparableLabel(raw) {
 }
 function comparablePath(raw) {
   const home = homedir29();
-  const expanded = raw === "~" ? home : raw.startsWith("~/") ? resolve27(home, raw.slice(2)) : raw;
+  const expanded = raw === "~" ? home : raw.startsWith("~/") ? resolve26(home, raw.slice(2)) : raw;
   return expanded.replace(/\/+$/, "");
 }
 function effectiveLabel(entry) {
@@ -30725,7 +30789,7 @@ var init_harness_cli = __esm(() => {
 });
 
 // src/hooks/fp-config.ts
-import { chmodSync as chmodSync6, existsSync as existsSync40, mkdirSync as mkdirSync27, readFileSync as readFileSync32, statSync as statSync25, writeFileSync as writeFileSync24 } from "node:fs";
+import { chmodSync as chmodSync6, existsSync as existsSync39, mkdirSync as mkdirSync26, readFileSync as readFileSync33, statSync as statSync24, writeFileSync as writeFileSync23 } from "node:fs";
 function detectLayout2() {
   const raw = readVersionFile2();
   if (raw) {
@@ -30733,17 +30797,17 @@ function detectLayout2() {
       return { kind: "current", version: raw };
     return raw.layout > LAYOUT_VERSION ? { kind: "future", found: raw.layout } : { kind: "stale", found: raw.layout };
   }
-  if (existsSync40(configFile())) {
+  if (existsSync39(configFile())) {
     const layoutThreePositions = [
       legacy.authJson(),
       legacy.nextAudit(),
       legacy.auditSchedule()
     ];
-    if (layoutThreePositions.some((p) => existsSync40(p)))
+    if (layoutThreePositions.some((p) => existsSync39(p)))
       return { kind: "stale", found: 3 };
     return { kind: "current", version: { layout: LAYOUT_VERSION, cli: "" }, inferred: true };
   }
-  if (existsSync40(legacy.configToml()))
+  if (existsSync39(legacy.configToml()))
     return { kind: "stale", found: 2 };
   const layoutOneMarkers = [
     legacy.policyConfig(),
@@ -30754,7 +30818,7 @@ function detectLayout2() {
     legacy.ingestCredentials(),
     legacy.auditDashboard()
   ];
-  return layoutOneMarkers.some((p) => existsSync40(p)) ? { kind: "stale", found: 1 } : { kind: "absent" };
+  return layoutOneMarkers.some((p) => existsSync39(p)) ? { kind: "stale", found: 1 } : { kind: "absent" };
 }
 function readLegacyTomlVersion2(text) {
   const layout = Number(/^\s*layout\s*=\s*(\d+)\s*$/m.exec(text)?.[1]);
@@ -30766,7 +30830,7 @@ function readLegacyTomlVersion2(text) {
 function readVersionFile2() {
   let text;
   try {
-    text = readFileSync32(versionFile(), "utf8");
+    text = readFileSync33(versionFile(), "utf8");
   } catch {
     return null;
   }
@@ -30797,14 +30861,14 @@ var init_fp_home2 = () => {};
 import {
   chmodSync as chmodSync7,
   copyFileSync as copyFileSync3,
-  existsSync as existsSync41,
-  mkdirSync as mkdirSync28,
-  readFileSync as readFileSync33,
+  existsSync as existsSync40,
+  mkdirSync as mkdirSync27,
+  readFileSync as readFileSync34,
   renameSync as renameSync9,
-  rmSync as rmSync16,
-  writeFileSync as writeFileSync25
+  rmSync as rmSync15,
+  writeFileSync as writeFileSync24
 } from "node:fs";
-import { basename as basename7, dirname as dirname20, join as join37, resolve as resolve28 } from "node:path";
+import { basename as basename7, dirname as dirname20, join as join37, resolve as resolve27 } from "node:path";
 function migrateToLayout42() {
   const moves = [
     { from: legacy.authJson(), to: auditSessionFile() },
@@ -30820,13 +30884,13 @@ function migrateToLayout42() {
   }
   const migrated = [];
   for (const { from, to } of moves) {
-    if (!existsSync41(from))
+    if (!existsSync40(from))
       continue;
-    if (existsSync41(to)) {
-      rmSync16(from, { force: true });
+    if (existsSync40(to)) {
+      rmSync15(from, { force: true });
       continue;
     }
-    mkdirSync28(dirname20(to), { recursive: true });
+    mkdirSync27(dirname20(to), { recursive: true });
     try {
       renameSync9(from, to);
     } catch {
@@ -30834,16 +30898,16 @@ function migrateToLayout42() {
         copyFileSync3(from, to);
       } catch (err) {
         try {
-          rmSync16(to, { force: true });
+          rmSync15(to, { force: true });
         } catch {}
         throw err;
       }
-      rmSync16(from, { force: true });
+      rmSync15(from, { force: true });
     }
     migrated.push(`${basename7(from)} → audit/${basename7(to)}`);
   }
   for (const secret of [auditSessionFile()]) {
-    if (!existsSync41(secret))
+    if (!existsSync40(secret))
       continue;
     try {
       chmodSync7(secret, 384);
@@ -30869,7 +30933,7 @@ function planMigration2(from, registry = MIGRATIONS2) {
 }
 function readLedger2() {
   try {
-    const parsed = JSON.parse(readFileSync33(migrationLedgerFile(), "utf8"));
+    const parsed = JSON.parse(readFileSync34(migrationLedgerFile(), "utf8"));
     return Array.isArray(parsed) ? parsed : [];
   } catch {
     return [];
@@ -30877,9 +30941,9 @@ function readLedger2() {
 }
 function appendLedger2(entry) {
   try {
-    mkdirSync28(migrationsDir(), { recursive: true });
+    mkdirSync27(migrationsDir(), { recursive: true });
     const all = [...readLedger2(), entry];
-    writeFileSync25(migrationLedgerFile(), `${JSON.stringify(all, null, 2)}
+    writeFileSync24(migrationLedgerFile(), `${JSON.stringify(all, null, 2)}
 `, "utf8");
   } catch {}
 }
@@ -30891,12 +30955,12 @@ function pruneMigratedCredentials2(from) {
   for (let layout = from;layout < LAYOUT_VERSION; layout++) {
     for (const { as, landsAt } of PRUNED_AFTER_SUCCESS2) {
       try {
-        if (!existsSync41(landsAt()))
+        if (!existsSync40(landsAt()))
           continue;
-        const copy = resolve28(migrationBackupDir(layout), as);
-        if (!existsSync41(copy))
+        const copy = resolve27(migrationBackupDir(layout), as);
+        if (!existsSync40(copy))
           continue;
-        rmSync16(copy, { force: true });
+        rmSync15(copy, { force: true });
         pruned.push(as);
       } catch {}
     }
@@ -30907,7 +30971,7 @@ function filesToBackUp2() {
   const seen = new Map;
   for (const f of [...BACKED_UP2, ...BACKED_UP_LEGACY2]) {
     const path = f.at();
-    if (existsSync41(path))
+    if (existsSync40(path))
       seen.set(path, backupNameOf2(f));
   }
   return [...seen].map(([path, as]) => ({ path, as }));
@@ -30916,14 +30980,14 @@ function backupBeforeMigrating2(from) {
   const dir = migrationBackupDir(from);
   const saved = [];
   try {
-    rmSync16(dir, { recursive: true, force: true });
-    mkdirSync28(dir, { recursive: true });
+    rmSync15(dir, { recursive: true, force: true });
+    mkdirSync27(dir, { recursive: true });
   } catch {
     return [];
   }
   for (const { path: source, as } of filesToBackUp2()) {
     try {
-      copyFileSync3(source, resolve28(dir, as));
+      copyFileSync3(source, resolve27(dir, as));
       saved.push(as);
     } catch {}
   }
@@ -31061,16 +31125,16 @@ var init_migrations2 = __esm(() => {
 
 // src/hooks/daemon-service.ts
 import {
-  existsSync as existsSync42,
-  mkdirSync as mkdirSync29,
+  existsSync as existsSync41,
+  mkdirSync as mkdirSync28,
   mkdtempSync as mkdtempSync2,
-  readFileSync as readFileSync34,
-  writeFileSync as writeFileSync26,
+  readFileSync as readFileSync35,
+  writeFileSync as writeFileSync25,
   unlinkSync as unlinkSync5,
-  rmSync as rmSync17
+  rmSync as rmSync16
 } from "node:fs";
 import { homedir as homedir30, tmpdir as tmpdir3, userInfo as userInfo2 } from "node:os";
-import { resolve as resolve29 } from "node:path";
+import { resolve as resolve28 } from "node:path";
 import { execFileSync as execFileSync4 } from "node:child_process";
 function isDaemonSupportedPlatform2() {
   return process.platform === "linux" || process.platform === "darwin";
@@ -31086,13 +31150,13 @@ function resolveFailproofaidBinaryPath2() {
   if (process.env.FAILPROOFAI_DAEMON_BINARY)
     return process.env.FAILPROOFAI_DAEMON_BINARY;
   const downloaded = installedBinaryPath();
-  if (existsSync42(downloaded))
+  if (existsSync41(downloaded))
     return downloaded;
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (packageRoot) {
     for (const profile of ["release", "debug"]) {
-      const candidate = resolve29(packageRoot, "target", profile, "failproofaid");
-      if (existsSync42(candidate))
+      const candidate = resolve28(packageRoot, "target", profile, "failproofaid");
+      if (existsSync41(candidate))
         return candidate;
     }
   }
@@ -31122,8 +31186,8 @@ function resolveWorkerCommand2() {
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (!packageRoot)
     return null;
-  const workerScript = resolve29(packageRoot, "dist", "worker.mjs");
-  if (!existsSync42(workerScript))
+  const workerScript = resolve28(packageRoot, "dist", "worker.mjs");
+  if (!existsSync41(workerScript))
     return null;
   return `${shellQuote2(process.execPath)} ${shellQuote2(workerScript)}`;
 }
@@ -31133,8 +31197,8 @@ function resolveCliCommand2() {
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (!packageRoot)
     return null;
-  const cliScript = resolve29(packageRoot, "dist", "cli.mjs");
-  if (!existsSync42(cliScript))
+  const cliScript = resolve28(packageRoot, "dist", "cli.mjs");
+  if (!existsSync41(cliScript))
     return null;
   return `${shellQuote2(process.execPath)} ${shellQuote2(cliScript)}`;
 }
@@ -31147,8 +31211,8 @@ function workerScriptPath2() {
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (!packageRoot)
     return null;
-  const workerScript = resolve29(packageRoot, "dist", "worker.mjs");
-  return existsSync42(workerScript) ? workerScript : null;
+  const workerScript = resolve28(packageRoot, "dist", "worker.mjs");
+  return existsSync41(workerScript) ? workerScript : null;
 }
 function assertUnitSafe2(value, field) {
   if (UNIT_UNSAFE_RE2.test(value)) {
@@ -31174,10 +31238,10 @@ function systemdUnitDir2() {
   return process.env.FAILPROOFAI_SYSTEMD_DIR || "/etc/systemd/system";
 }
 function systemdUnitPath2(user = serviceUser2()) {
-  return resolve29(systemdUnitDir2(), systemdUnitName2(user));
+  return resolve28(systemdUnitDir2(), systemdUnitName2(user));
 }
 function legacySystemdUserUnitPath2() {
-  return resolve29(homedir30(), ".config", "systemd", "user", "failproofaid.service");
+  return resolve28(homedir30(), ".config", "systemd", "user", "failproofaid.service");
 }
 function launchdLabel2(user = serviceUser2()) {
   return `ai.failproof.failproofaid.${user}`;
@@ -31186,7 +31250,7 @@ function launchdPlistPath2(user = serviceUser2()) {
   return `/Library/LaunchDaemons/${launchdLabel2(user)}.plist`;
 }
 function legacyLaunchAgentPlistPath2() {
-  return resolve29(homedir30(), "Library", "LaunchAgents", "ai.failproof.failproofaid.plist");
+  return resolve28(homedir30(), "Library", "LaunchAgents", "ai.failproof.failproofaid.plist");
 }
 function legacySharedLaunchDaemonPath2() {
   return "/Library/LaunchDaemons/ai.failproof.failproofaid.plist";
@@ -31224,20 +31288,20 @@ function runPrivileged2(command, args) {
   execFileSync4(cmd, argv, { stdio: "ignore", timeout: SERVICE_CMD_TIMEOUT_MS2 });
 }
 function writePrivilegedFile2(destination, contents, mode = "0644") {
-  const stagingDir = mkdtempSync2(resolve29(tmpdir3(), "failproofaid-stage-"));
-  const staging = resolve29(stagingDir, "service-definition");
+  const stagingDir = mkdtempSync2(resolve28(tmpdir3(), "failproofaid-stage-"));
+  const staging = resolve28(stagingDir, "service-definition");
   try {
-    writeFileSync26(staging, contents, "utf8");
+    writeFileSync25(staging, contents, "utf8");
     runPrivileged2("install", ["-m", mode, staging, destination]);
   } finally {
-    rmSync17(stagingDir, { recursive: true, force: true });
+    rmSync16(stagingDir, { recursive: true, force: true });
   }
 }
 function removeLegacyUserService2() {
   try {
     if (process.platform === "linux") {
       const legacy = legacySystemdUserUnitPath2();
-      if (!existsSync42(legacy))
+      if (!existsSync41(legacy))
         return;
       try {
         execFileSync4("systemctl", ["--user", "disable", "--now", "failproofaid.service"], {
@@ -31254,7 +31318,7 @@ function removeLegacyUserService2() {
       } catch {}
     } else {
       const legacyAgent = legacyLaunchAgentPlistPath2();
-      if (existsSync42(legacyAgent)) {
+      if (existsSync41(legacyAgent)) {
         try {
           execFileSync4("launchctl", ["unload", "-w", legacyAgent], {
             stdio: "ignore",
@@ -31264,7 +31328,7 @@ function removeLegacyUserService2() {
         unlinkSync5(legacyAgent);
       }
       const legacyDaemon = legacySharedLaunchDaemonPath2();
-      if (existsSync42(legacyDaemon)) {
+      if (existsSync41(legacyDaemon)) {
         try {
           runPrivileged2("launchctl", ["unload", "-w", legacyDaemon]);
         } catch {}
@@ -31281,7 +31345,7 @@ function systemdUnitContents2(binaryPath, workerCmd, cliCmd = null) {
   const user = assertUnitSafe2(serviceUser2(), "User");
   assertUnitSafe2(binaryPath, "ExecStart");
   assertUnitSafe2(homedir30(), "HOME");
-  const conditionPaths = [binaryPath, workerScriptPath2()].filter((p) => typeof p === "string" && existsSync42(p));
+  const conditionPaths = [binaryPath, workerScriptPath2()].filter((p) => typeof p === "string" && existsSync41(p));
   const conditionLines = conditionPaths.map((p) => `ConditionPathExists=${assertUnitSafe2(p, "ConditionPathExists")}
 `).join("");
   return `[Unit]
@@ -31339,9 +31403,9 @@ ${env.map(([key, value]) => `        <key>${key}</key>
     <key>UserName</key>
     <string>${escapeXml3(serviceUser2())}</string>
 ${envBlock}    <key>StandardOutPath</key>
-    <string>${escapeXml3(resolve29(logDir, "failproofaid.log"))}</string>
+    <string>${escapeXml3(resolve28(logDir, "failproofaid.log"))}</string>
     <key>StandardErrorPath</key>
-    <string>${escapeXml3(resolve29(logDir, "failproofaid.err.log"))}</string>
+    <string>${escapeXml3(resolve28(logDir, "failproofaid.err.log"))}</string>
 </dict>
 </plist>
 `;
@@ -31387,7 +31451,7 @@ async function installDaemonService2() {
     } else {
       const plistPath = launchdPlistPath2();
       const logDir = logsDir();
-      mkdirSync29(logDir, { recursive: true });
+      mkdirSync28(logDir, { recursive: true });
       try {
         runPrivileged2("launchctl", ["unload", plistPath]);
       } catch {}
@@ -31486,7 +31550,7 @@ function daemonServiceStatus2() {
   if (!isDaemonSupportedPlatform2())
     return "unsupported-platform";
   if (process.platform === "linux") {
-    if (!existsSync42(systemdUnitPath2()))
+    if (!existsSync41(systemdUnitPath2()))
       return "not-installed";
     try {
       const out = execFileSync4("systemctl", ["is-active", systemdUnitName2()], {
@@ -31499,7 +31563,7 @@ function daemonServiceStatus2() {
     }
   }
   const plistPath = launchdPlistPath2();
-  if (!existsSync42(plistPath))
+  if (!existsSync41(plistPath))
     return "not-installed";
   try {
     const root = typeof process.getuid === "function" && process.getuid() === 0;
@@ -31529,7 +31593,7 @@ var init_daemon_service2 = __esm(() => {
 });
 
 // src/hooks/uninstall-cli.ts
-import { existsSync as existsSync43, rmSync as rmSync18 } from "node:fs";
+import { existsSync as existsSync42, rmSync as rmSync17 } from "node:fs";
 function survey(cwd) {
   const clis = [];
   for (const id of listInstallableIds()) {
@@ -31550,9 +31614,9 @@ function survey(cwd) {
   return {
     clis,
     servicePath,
-    serviceInstalled: !!servicePath && existsSync43(servicePath),
+    serviceInstalled: !!servicePath && existsSync42(servicePath),
     daemonConfigured,
-    homeExists: existsSync43(failproofaiHome())
+    homeExists: existsSync42(failproofaiHome())
   };
 }
 async function runUninstallCommand(opts = {}) {
@@ -31650,7 +31714,7 @@ async function runUninstallCommand(opts = {}) {
       } catch {}
       try {
         await uninstallDaemonService();
-        if (found.servicePath && existsSync43(found.servicePath)) {
+        if (found.servicePath && existsSync42(found.servicePath)) {
           failures.push(`the service at ${found.servicePath} is still there (most often: no sudo). ` + `Remove it with the commands below.`);
         } else {
           lines.push(`✓ stopped and removed the daemon service`);
@@ -31665,7 +31729,7 @@ async function runUninstallCommand(opts = {}) {
   }
   if (opts.purge && found.homeExists) {
     try {
-      rmSync18(failproofaiHome(), { recursive: true, force: true });
+      rmSync17(failproofaiHome(), { recursive: true, force: true });
       purged = true;
       lines.push(`✓ deleted ${failproofaiHome()}`);
     } catch (err) {
@@ -31676,7 +31740,7 @@ async function runUninstallCommand(opts = {}) {
     lines.push(``, `Not everything could be removed:`);
     for (const f of failures)
       lines.push(`  ✗ ${f}`);
-    if (found.servicePath && existsSync43(found.servicePath)) {
+    if (found.servicePath && existsSync42(found.servicePath)) {
       lines.push(``, `To remove the service by hand:`, ...manualServiceRemoval(found.servicePath), ``, `(\`${daemonStatusCommand()}\` shows its current state.)`);
     }
     return { exitCode: 1, lines, planLines, purged };
@@ -31711,8 +31775,8 @@ var init_uninstall_cli = __esm(() => {
 import { execFileSync as execFileSync5 } from "node:child_process";
 import { homedir as homedir31, tmpdir as tmpdir4 } from "node:os";
 import { createHash as createHash9 } from "node:crypto";
-import { copyFileSync as copyFileSync4, existsSync as existsSync44, mkdirSync as mkdirSync30, mkdtempSync as mkdtempSync3, readFileSync as readFileSync35, readdirSync as readdirSync22, realpathSync as realpathSync3, rmSync as rmSync19, statSync as statSync26, writeFileSync as writeFileSync27 } from "node:fs";
-import { basename as basename8, dirname as dirname21, isAbsolute as isAbsolute4, join as join38, relative as relative5, resolve as resolve30, sep as sep6 } from "node:path";
+import { copyFileSync as copyFileSync4, existsSync as existsSync43, mkdirSync as mkdirSync29, mkdtempSync as mkdtempSync3, readFileSync as readFileSync36, readdirSync as readdirSync21, realpathSync as realpathSync3, rmSync as rmSync18, statSync as statSync25, writeFileSync as writeFileSync26 } from "node:fs";
+import { basename as basename8, dirname as dirname21, isAbsolute as isAbsolute4, join as join38, relative as relative5, resolve as resolve29, sep as sep6 } from "node:path";
 function parseList(rest, flag) {
   const idx = rest.findIndex((a) => a === flag || a.startsWith(`${flag}=`));
   if (idx === -1)
@@ -31812,7 +31876,7 @@ async function build(rest) {
   const version = flag("version");
   const commit = flag("commit");
   const effect = flag("effect") ?? "enforce";
-  const outDir = resolve30(flag("out") ?? "dist-pack");
+  const outDir = resolve29(flag("out") ?? "dist-pack");
   if (!entry || !id || !version) {
     return fail2([
       "Usage: failproofai publish <entry.mjs> --repo <owner>/<repo> --version <version>",
@@ -31825,10 +31889,10 @@ async function build(rest) {
   } catch (err) {
     return fail2([err instanceof Error ? err.message : String(err)]);
   }
-  const entryPath = resolve30(entry);
-  if (!existsSync44(entryPath))
+  const entryPath = resolve29(entry);
+  if (!existsSync43(entryPath))
     return fail2([`No such file: ${entryPath}`]);
-  const source = readFileSync35(entryPath, "utf8");
+  const source = readFileSync36(entryPath, "utf8");
   const localImport = /(?:^|\n)\s*(?:import|export)[^;\n]*from\s+["'](\.[^"']*)["']/.exec(source);
   if (localImport) {
     return fail2([
@@ -31884,14 +31948,14 @@ async function build(rest) {
     policies
   }, null, 2) + `
 `;
-  mkdirSync30(outDir, { recursive: true });
-  const manifestPath = resolve30(outDir, PACK_MANIFEST_ASSET);
-  const entryOut = resolve30(outDir, PACK_ENTRY_ASSET);
-  writeFileSync27(manifestPath, manifest, "utf8");
+  mkdirSync29(outDir, { recursive: true });
+  const manifestPath = resolve29(outDir, PACK_MANIFEST_ASSET);
+  const entryOut = resolve29(outDir, PACK_ENTRY_ASSET);
+  writeFileSync26(manifestPath, manifest, "utf8");
   copyFileSync4(entryPath, entryOut);
   const sha = (bytes) => createHash9("sha256").update(bytes).digest("hex");
-  writeFileSync27(resolve30(outDir, PACK_CHECKSUMS_ASSET), `${sha(manifest)}  ${PACK_MANIFEST_ASSET}
-${sha(readFileSync35(entryOut))}  ${PACK_ENTRY_ASSET}
+  writeFileSync26(resolve29(outDir, PACK_CHECKSUMS_ASSET), `${sha(manifest)}  ${PACK_MANIFEST_ASSET}
+${sha(readFileSync36(entryOut))}  ${PACK_ENTRY_ASSET}
 `, "utf8");
   const on = policies.filter((p) => p.defaultEnabled).length;
   return ok2([
@@ -32020,12 +32084,12 @@ async function scaffold(target) {
       return ok2(["Nothing written."]);
     chosen = answer.trim();
   }
-  const path = resolve30(withPolicyExtension(chosen ?? "my-policies"));
-  if (existsSync44(path)) {
+  const path = resolve29(withPolicyExtension(chosen ?? "my-policies"));
+  if (existsSync43(path)) {
     return fail2([`${path} already exists — name a different file, or edit that one.`]);
   }
-  mkdirSync30(resolve30(path, ".."), { recursive: true });
-  writeFileSync27(path, `import { customPolicies, allow, deny } from "failproofai";
+  mkdirSync29(resolve29(path, ".."), { recursive: true });
+  writeFileSync26(path, `import { customPolicies, allow, deny } from "failproofai";
 
 // One file, no relative imports: only this entry is digest-pinned, so a pack
 // that imported siblings could not honestly claim to be verified.
@@ -32062,7 +32126,7 @@ customPolicies.add({
 function inferRepo(entryPath) {
   try {
     const url = execFileSync5("git", ["remote", "get-url", "origin"], {
-      cwd: resolve30(entryPath, ".."),
+      cwd: resolve29(entryPath, ".."),
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 5000
@@ -32074,7 +32138,7 @@ function inferRepo(entryPath) {
   }
 }
 function inferCommit(entryPath, outDir, sources) {
-  const cwd = resolve30(entryPath, "..");
+  const cwd = resolve29(entryPath, "..");
   const raw = (args) => {
     try {
       return execFileSync5("git", args, {
@@ -32129,9 +32193,9 @@ function realOrSelf(path) {
   }
 }
 function sourcesInHead(git, raw, sources) {
-  const paths = sources.map((f) => realOrSelf(resolve30(f)));
+  const paths = sources.map((f) => realOrSelf(resolve29(f)));
   const shown = git(["rev-parse", "--show-toplevel"]);
-  const top = shown === null ? null : realOrSelf(resolve30(shown));
+  const top = shown === null ? null : realOrSelf(resolve29(shown));
   const missing = [];
   for (const path of paths) {
     const rel = top ? relative5(top, path) : null;
@@ -32155,7 +32219,7 @@ function sourcesInHead(git, raw, sources) {
   ]);
   if (status === null)
     return { ok: false, offending: paths, why: "modified" };
-  const dirty = porcelainEntries(status).flatMap((entry) => [entry.path, entry.from].filter(Boolean).map((path) => resolve30(top ?? ".", path)));
+  const dirty = porcelainEntries(status).flatMap((entry) => [entry.path, entry.from].filter(Boolean).map((path) => resolve29(top ?? ".", path)));
   if (dirty.length > 0)
     return { ok: false, offending: dirty, why: "modified" };
   return { ok: true };
@@ -32163,19 +32227,19 @@ function sourcesInHead(git, raw, sources) {
 function skipOutDir(git, entryPath, outDir) {
   if (!outDir)
     return [];
-  const out = resolve30(outDir);
-  if (resolve30(entryPath).startsWith(out + sep6))
+  const out = resolve29(outDir);
+  if (resolve29(entryPath).startsWith(out + sep6))
     return [];
   const top = git(["rev-parse", "--show-toplevel"]);
   if (!top)
     return [];
-  const rel = relative5(resolve30(top), out);
+  const rel = relative5(resolve29(top), out);
   if (!rel || rel.startsWith("..") || isAbsolute4(rel))
     return [];
   return ["--", ":(top)", `:(exclude,literal,top)${rel.split(sep6).join("/")}`];
 }
 function inferTaggedVersion(entryPath, sources) {
-  const cwd = resolve30(entryPath, "..");
+  const cwd = resolve29(entryPath, "..");
   const raw = (args) => {
     try {
       return execFileSync5("git", args, {
@@ -32205,7 +32269,7 @@ function inferTaggedVersion(entryPath, sources) {
 function findEntry(dir) {
   let names;
   try {
-    names = readdirSync22(dir);
+    names = readdirSync21(dir);
   } catch {
     return [];
   }
@@ -32213,11 +32277,11 @@ function findEntry(dir) {
   for (const name of names) {
     if (!/\.(mjs|js|ts)$/.test(name))
       continue;
-    const full = resolve30(dir, name);
+    const full = resolve29(dir, name);
     try {
-      if (statSync26(full).size > 512 * 1024)
+      if (statSync25(full).size > 512 * 1024)
         continue;
-      const text = readFileSync35(full, "utf8");
+      const text = readFileSync36(full, "utf8");
       if (/from\s+["']failproofai["']/.test(text) && /customPolicies\s*\.\s*add\s*\(/.test(text)) {
         found.push(full);
       }
@@ -32228,27 +32292,27 @@ function findEntry(dir) {
   return found.sort();
 }
 function withLocalImports(sources) {
-  const seen = new Set(sources.map((f) => resolve30(f)));
+  const seen = new Set(sources.map((f) => resolve29(f)));
   const queue = [...seen];
   while (queue.length > 0 && seen.size < 500) {
     const file = queue.shift();
     let text;
     try {
-      if (statSync26(file).size > 512 * 1024)
+      if (statSync25(file).size > 512 * 1024)
         continue;
-      text = readFileSync35(file, "utf8");
+      text = readFileSync36(file, "utf8");
     } catch {
       continue;
     }
     for (const re of LOCAL_IMPORT_RES) {
       for (const match of text.matchAll(re)) {
-        const base = resolve30(dirname21(file), match[1]);
+        const base = resolve29(dirname21(file), match[1]);
         for (const ext of LOCAL_IMPORT_EXTENSIONS) {
           const candidate = base + ext;
           if (seen.has(candidate))
             break;
           try {
-            if (!statSync26(candidate).isFile())
+            if (!statSync25(candidate).isFile())
               continue;
           } catch {
             continue;
@@ -32263,7 +32327,7 @@ function withLocalImports(sources) {
   return [...seen];
 }
 function settleGitState(entryPath, provenance, packFiles, id, outDir) {
-  const cwd = resolve30(entryPath, "..");
+  const cwd = resolve29(entryPath, "..");
   const raw = (args) => {
     try {
       return execFileSync5("git", args, {
@@ -32338,11 +32402,11 @@ function settleGitState(entryPath, provenance, packFiles, id, outDir) {
   if (root === null || status === null)
     return null;
   const entries = porcelainEntries(status);
-  const dirty = entries.map((entry) => resolve30(root, entry.path));
-  const renamedFrom = entries.filter((entry) => entry.from).map((entry) => resolve30(root, entry.from));
+  const dirty = entries.map((entry) => resolve29(root, entry.path));
+  const renamedFrom = entries.filter((entry) => entry.from).map((entry) => resolve29(root, entry.from));
   if (dirty.length === 0)
     return null;
-  const mine = new Set(packFiles.map((f) => resolve30(f)));
+  const mine = new Set(packFiles.map((f) => resolve29(f)));
   const foreign = dirty.filter((path) => !mine.has(path));
   const toStage = [...dirty, ...renamedFrom];
   if (foreign.length > 0) {
@@ -32475,7 +32539,7 @@ function pushExistingHistory(dir, owner, name, token) {
     return false;
   const askpass = join38(mkdtempSync3(join38(tmpdir4(), "fpai-askpass-")), "askpass.sh");
   try {
-    writeFileSync27(askpass, `#!/bin/sh
+    writeFileSync26(askpass, `#!/bin/sh
 case "$1" in
 *Username*) echo x-access-token ;;
 *) echo "$FPAI_GH_TOKEN" ;;
@@ -32495,7 +32559,7 @@ esac
     return true;
   } finally {
     try {
-      rmSync19(dirname21(askpass), { recursive: true, force: true });
+      rmSync18(dirname21(askpass), { recursive: true, force: true });
     } catch {}
   }
 }
@@ -32519,8 +32583,8 @@ failproofai policies add ${owner}/${name}
 function findBun() {
   const candidates = [
     "bun",
-    process.env.BUN_INSTALL ? resolve30(process.env.BUN_INSTALL, "bin", "bun") : null,
-    resolve30(homedir31(), ".bun", "bin", "bun"),
+    process.env.BUN_INSTALL ? resolve29(process.env.BUN_INSTALL, "bin", "bun") : null,
+    resolve29(homedir31(), ".bun", "bin", "bun"),
     "/opt/homebrew/bin/bun",
     "/usr/local/bin/bun"
   ].filter((c) => c !== null);
@@ -32546,12 +32610,12 @@ function bundleEntry(sources, outDir) {
       ]
     };
   }
-  mkdirSync30(outDir, { recursive: true });
-  const entry = resolve30(outDir, ".entry.generated.mjs");
-  writeFileSync27(entry, sources.map((f) => `import ${JSON.stringify(f.startsWith("/") ? f : resolve30(f))};`).join(`
+  mkdirSync29(outDir, { recursive: true });
+  const entry = resolve29(outDir, ".entry.generated.mjs");
+  writeFileSync26(entry, sources.map((f) => `import ${JSON.stringify(f.startsWith("/") ? f : resolve29(f))};`).join(`
 `) + `
 `, "utf8");
-  const bundled = resolve30(outDir, ".bundled.mjs");
+  const bundled = resolve29(outDir, ".bundled.mjs");
   try {
     execFileSync5(bun, [
       "build",
@@ -32669,7 +32733,7 @@ async function publish(rest) {
 `);
     const token = githubToken();
     const login = token ? await credentialLogin(token) : null;
-    const folder = basename8(resolve30(entry, ".."));
+    const folder = basename8(resolve29(entry, ".."));
     const answered = await askWhereToPublish(`${login ?? "your-account"}/${folder}`, { stdin: process.stdin, stdout: process.stdout });
     if (answered === null)
       return ok2(["Nothing was published."]);
@@ -32680,7 +32744,7 @@ async function publish(rest) {
   let versionFromSha = false;
   const dryRun = rest.includes("--dry-run") || !repo;
   const allowPrivate = rest.includes("--allow-private");
-  const id = flag("id") ?? repo ?? (dryRun && entry ? `local/${basename8(resolve30(entry, ".."))}` : undefined);
+  const id = flag("id") ?? repo ?? (dryRun && entry ? `local/${basename8(resolve29(entry, ".."))}` : undefined);
   const [owner, name] = (repo ?? "/").split("/");
   if (repo && (!owner || !name || repo.split("/").length !== 2)) {
     return fail2([`--repo must be <owner>/<repo>, got ${JSON.stringify(repo)}`]);
@@ -32699,7 +32763,7 @@ async function publish(rest) {
       "With no --repo it writes the three release assets and stops."
     ]);
   }
-  const outDirEarly = resolve30(flag("out") ?? "dist-pack");
+  const outDirEarly = resolve29(flag("out") ?? "dist-pack");
   let provenance = entry ? inferCommit(entry, outDirEarly, bundledSources) : null;
   const gitLines = [];
   if (!version && entry && interactive) {
@@ -32739,7 +32803,7 @@ async function publish(rest) {
         "It needs write access to releases on that repository, and nothing else."
       ]);
     }
-    const ensured = await ensureRepo(owner, name, id, token, resolve30(entry, ".."));
+    const ensured = await ensureRepo(owner, name, id, token, resolve29(entry, ".."));
     if ("error" in ensured)
       return fail2(ensured.error);
     created = ensured.created;
@@ -32759,7 +32823,7 @@ async function publish(rest) {
   }
   const tag = flag("tag") ?? version;
   let entryToBuild = entry;
-  const needsBundle = discovered.length > 1 || /(?:^|\n)\s*(?:import|export)[^;\n]*from\s+["']\.[^"']*["']/.test(readFileSync35(entry, "utf8"));
+  const needsBundle = discovered.length > 1 || /(?:^|\n)\s*(?:import|export)[^;\n]*from\s+["']\.[^"']*["']/.test(readFileSync36(entry, "utf8"));
   if (needsBundle) {
     const sources = discovered.length > 1 ? discovered : [entry];
     const bundled = bundleEntry(sources, outDirEarly);
@@ -32838,7 +32902,7 @@ async function publish(rest) {
     if (prior) {
       await gh(`${GITHUB_API2}/repos/${owner}/${name}/releases/assets/${prior.id}`, auth, { method: "DELETE" });
     }
-    const bytes = readFileSync35(resolve30(outDir, asset));
+    const bytes = readFileSync36(resolve29(outDir, asset));
     const upload = await gh(`${GITHUB_UPLOADS2}/repos/${owner}/${name}/releases/${releaseId}/assets?name=${encodeURIComponent(asset)}`, auth, {
       method: "POST",
       contentType: asset.endsWith(".json") ? "application/json" : "application/octet-stream",
@@ -33519,8 +33583,8 @@ var init_install_prompt = __esm(() => {
 
 // src/hooks/manager.ts
 import { execSync as execSync7 } from "node:child_process";
-import { existsSync as existsSync45 } from "node:fs";
-import { resolve as resolve31, basename as basename9 } from "node:path";
+import { existsSync as existsSync44 } from "node:fs";
+import { resolve as resolve30, basename as basename9 } from "node:path";
 import { platform as platform4, arch as arch4, release as release3, hostname as hostname6 } from "node:os";
 function getSettingsPath2(scope, cwd) {
   return claudeCode.getSettingsPath(scope, cwd);
@@ -33739,9 +33803,9 @@ async function installHooksImpl2(policyNames, scope = "user", cwd, includeBeta =
     delete configToWrite.customPoliciesPath;
     delete configToWrite.customPoliciesPaths;
   } else if (customPoliciesPath && (typeof customPoliciesPath === "string" || customPoliciesPath.length > 0)) {
-    const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path) => resolve31(path));
-    const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path) => resolve31(path)).filter((path) => {
-      if (existsSync45(path))
+    const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path) => resolve30(path));
+    const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path) => resolve30(path)).filter((path) => {
+      if (existsSync44(path))
         return true;
       console.log(`Dropping custom policies path (file no longer exists): ${path}`);
       return false;
@@ -33964,7 +34028,7 @@ async function removeHooks2(policyNames, scope = "user", cwd, opts) {
     const scopesToRemove = scope === "all" ? [...integration.scopes] : integration.scopes.includes(scope) ? [scope] : [];
     for (const s of scopesToRemove) {
       const settingsPaths = settingsPathsFor(integration, s, cwd);
-      const existing = settingsPaths.filter((p) => existsSync45(p));
+      const existing = settingsPaths.filter((p) => existsSync44(p));
       if (existing.length === 0) {
         if (scope !== "all" && selectedClis.length === 1) {
           console.log("No settings file found. Nothing to remove.");
@@ -34108,9 +34172,9 @@ async function listHooks(cwd) {
   if (explicitPaths.length > 0) {
     groups.push(rule("Custom Policies", opts));
     for (const path of explicitPaths) {
-      const absPath = resolve31(findProjectConfigDir(cwd ?? process.cwd()), path);
+      const absPath = resolve30(findProjectConfigDir(cwd ?? process.cwd()), path);
       groups.push(note(absPath, opts));
-      if (!existsSync45(absPath)) {
+      if (!existsSync44(absPath)) {
         groups.push(warning([`file not found: ${absPath}`], opts));
         continue;
       }
@@ -34130,7 +34194,7 @@ async function listHooks(cwd) {
     }
   }
   const base = findProjectConfigDir(cwd ?? process.cwd());
-  const projectDir = resolve31(base, ".failproofai", "policies");
+  const projectDir = resolve30(base, ".failproofai", "policies");
   const userDir = customPoliciesDir();
   const sameDir = userDir === projectDir;
   const conventionDirs = [
@@ -34242,11 +34306,11 @@ var init_manager2 = __esm(() => {
 });
 
 // src/audit/audit-schedule.ts
-import { readFileSync as readFileSync36 } from "node:fs";
+import { readFileSync as readFileSync37 } from "node:fs";
 function readAuditSchedule(home) {
   let raw;
   try {
-    raw = readFileSync36(auditScheduleFile(home), "utf8");
+    raw = readFileSync37(auditScheduleFile(home), "utf8");
   } catch {
     return null;
   }
@@ -34310,7 +34374,9 @@ async function ensureSignedIn(preset) {
   }
   if (!canPrompt()) {
     throw new LoginError(`Signing in needs an interactive terminal, and this one is not.
-` + "Run `failproofai audit --schedule` from a shell you are sitting at,\n" + "or sign in from the dashboard — both write the same session file.");
+` + "Run `failproofai audit --schedule` from a shell you are sitting at,\n" + `or sign in from the dashboard — both write the same session file.
+` + `
+` + "`--email` does not avoid this: it fills in the address so you are not\n" + "asked for it, but a one-time code is still sent there for you to paste.");
   }
   return { user: await runLogin(preset), prompted: true };
 }
@@ -34434,21 +34500,20 @@ async function runScheduleOn(daysArg, emailArg) {
     if (bad)
       throw new ScheduleCliError(bad);
   }
-  const { user, prompted } = await ensureSignedIn(emailArg);
+  const signedIn = emailArg === undefined ? { user: readAuth()?.user ?? null, prompted: false } : await ensureSignedIn(emailArg);
   const next = updateConfig({
     audit: {
       auto: true,
-      reportsConsentedAt: Date.now(),
       ...days !== undefined ? { intervalDays: days } : {}
     }
   });
   const interval = next.audit.intervalDays;
   const summary = [
-    `every ${interval} day${interval === 1 ? "" : "s"} · reports to ${user.email}`,
-    "you only hear from it when a scan finds something harmful",
-    "each report sends: finding counts, redacted example commands, this machine's name"
+    `every ${interval} day${interval === 1 ? "" : "s"} · desktop notification on leaks`,
+    signedIn.user ? `masked leak alerts also go to ${signedIn.user.email}` : "email is optional · add it with --email you@example.com",
+    "email contains only the most recent masked credential exposure"
   ];
-  if (prompted) {
+  if (signedIn.prompted) {
     step("scheduled audits are on", summary);
   } else {
     process.stdout.write(`
@@ -34457,7 +34522,7 @@ ${green("✓")}  ${bold("scheduled audits are on")}
 `).join(""));
   }
   warnIfDaemonWontRun();
-  if (prompted) {
+  if (signedIn.prompted) {
     outro("failproofai audit --status  ·  when the next scan is due");
   } else {
     process.stdout.write(dim(`
@@ -34509,12 +34574,7 @@ function runScheduleStatus() {
   ]);
   detail.push(["reports to", live ? live.user.email : dim("— signed out")]);
   if (on && !live) {
-    detail.push(["", pink("scans continue; digests are paused until you sign in")]);
-  } else if (on && config.audit.reportsConsentedAt === undefined) {
-    detail.push([
-      "",
-      pink("scans continue; digests need a fresh opt-in — run `--schedule` to turn them on")
-    ]);
+    detail.push(["", pink("scans and desktop alerts continue; email alerts are paused")]);
   }
   detail.push(["daemon", describeDaemon(daemon)]);
   if (sched?.nextDueAtMs != null && on) {
@@ -34629,14 +34689,14 @@ var init_schedule_cli = __esm(() => {
 });
 
 // scripts/parse-script-args.ts
-import { resolve as resolve32 } from "path";
+import { resolve as resolve31 } from "path";
 function parseStringFlag(flagName, errorLabel, inlineValue, args, index, options) {
   const raw = inlineValue ?? args[index + 1];
   if (raw === undefined || inlineValue === null && raw.startsWith("-")) {
     console.error(`Error: ${flagName} requires ${errorLabel}`);
     process.exit(1);
   }
-  const value = options?.resolve ? resolve32(raw) : raw;
+  const value = options?.resolve ? resolve31(raw) : raw;
   return { value, spliceCount: inlineValue !== null ? 1 : 2 };
 }
 function parseScriptArgs(argv) {
@@ -34692,21 +34752,21 @@ function parseScriptArgs(argv) {
 var init_parse_script_args = () => {};
 
 // scripts/install-diagnosis.mjs
-import { existsSync as existsSync46, readFileSync as readFileSync37, realpathSync as realpathSync4 } from "node:fs";
-import { dirname as dirname22, resolve as resolve33 } from "node:path";
+import { existsSync as existsSync45, readFileSync as readFileSync38, realpathSync as realpathSync4 } from "node:fs";
+import { dirname as dirname22, resolve as resolve32 } from "node:path";
 import { homedir as homedir32, platform as platform5 } from "node:os";
 import { spawnSync } from "node:child_process";
 function findPackageRoot(start) {
   try {
     let dir = realpathSync4(start);
-    if (existsSync46(dir) && !existsSync46(resolve33(dir, "package.json"))) {
+    if (existsSync45(dir) && !existsSync45(resolve32(dir, "package.json"))) {
       dir = dirname22(dir);
     }
     while (true) {
-      const pkgPath = resolve33(dir, "package.json");
-      if (existsSync46(pkgPath)) {
+      const pkgPath = resolve32(dir, "package.json");
+      if (existsSync45(pkgPath)) {
         try {
-          const pkg = JSON.parse(readFileSync37(pkgPath, "utf8"));
+          const pkg = JSON.parse(readFileSync38(pkgPath, "utf8"));
           if (pkg.name === PKG_NAME)
             return dir;
         } catch {}
@@ -34724,7 +34784,7 @@ function readPackageVersion(packageRoot) {
   if (!packageRoot)
     return null;
   try {
-    const pkg = JSON.parse(readFileSync37(resolve33(packageRoot, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync38(resolve32(packageRoot, "package.json"), "utf8"));
     return typeof pkg.version === "string" ? pkg.version : null;
   } catch {
     return null;
@@ -34750,16 +34810,16 @@ function locateNpmGlobal() {
     const root = (res.stdout || "").trim();
     if (!root)
       return null;
-    const candidate = resolve33(root, PKG_NAME);
-    return existsSync46(resolve33(candidate, "package.json")) ? candidate : null;
+    const candidate = resolve32(root, PKG_NAME);
+    return existsSync45(resolve32(candidate, "package.json")) ? candidate : null;
   } catch {
     return null;
   }
 }
 function locateBunGlobal() {
   try {
-    const candidate = resolve33(homedir32(), ".bun", "install", "global", "node_modules", PKG_NAME);
-    return existsSync46(resolve33(candidate, "package.json")) ? candidate : null;
+    const candidate = resolve32(homedir32(), ".bun", "install", "global", "node_modules", PKG_NAME);
+    return existsSync45(resolve32(candidate, "package.json")) ? candidate : null;
   } catch {
     return null;
   }
@@ -34767,8 +34827,8 @@ function locateBunGlobal() {
 function buildRecommendation(pathFirstBin) {
   if (!pathFirstBin)
     return null;
-  const bunBinPrefix = resolve33(homedir32(), ".bun", "bin") + "/";
-  const bunGlobalPrefix = resolve33(homedir32(), ".bun", "install", "global") + "/";
+  const bunBinPrefix = resolve32(homedir32(), ".bun", "bin") + "/";
+  const bunGlobalPrefix = resolve32(homedir32(), ".bun", "install", "global") + "/";
   const isBun = pathFirstBin.startsWith(bunBinPrefix) || pathFirstBin.startsWith(bunGlobalPrefix);
   if (isBun) {
     return `rm -f ~/.bun/bin/${PKG_NAME} && rm -rf ~/.bun/install/global/node_modules/${PKG_NAME}`;
@@ -34862,8 +34922,8 @@ var init_dashboard_host = __esm(() => {
 
 // scripts/launch.ts
 import { spawn as spawn2 } from "child_process";
-import { realpathSync as realpathSync5, existsSync as existsSync47 } from "node:fs";
-import { resolve as resolve34, dirname as dirname23 } from "node:path";
+import { realpathSync as realpathSync5, existsSync as existsSync46 } from "node:fs";
+import { resolve as resolve33, dirname as dirname23 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { createInterface } from "node:readline";
 function launch(mode) {
@@ -34887,9 +34947,9 @@ function launch(mode) {
     process.env.PORT = port;
     process.env.HOSTNAME = bindHost;
     cmd = "node";
-    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve34(dirname23(realpathSync5(fileURLToPath2(import.meta.url))), "..");
-    const serverJsPath = resolve34(packageRoot, ".next/standalone/server.js");
-    if (!existsSync47(serverJsPath)) {
+    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve33(dirname23(realpathSync5(fileURLToPath2(import.meta.url))), "..");
+    const serverJsPath = resolve33(packageRoot, ".next/standalone/server.js");
+    if (!existsSync46(serverJsPath)) {
       let shadowMessage = null;
       try {
         const diag = diagnoseShadow({ selfPackageRoot: packageRoot, selfVersion: version2 });
@@ -34972,23 +35032,27 @@ function helpText() {
   const lines = helpScreen({
     command: "audit",
     version: version2,
-    tagline: "review your agent CLIs for risky and wasteful patterns",
+    tagline: "find credentials your agents leaked into their own transcripts",
     sections: [
       {
         label: "usage",
         entries: [
-          ["(bare)", `Scan your session history, then open http://localhost:${DASHBOARD_PORT}/audit`],
-          ["--schedule [days]", "Scan on a timer and email the findings. Default 7 days, range 1-90. Signs you in the first time."],
-          ["--email <address>", "With --schedule, skips the sign-in prompt."],
+          ["(bare)", `Scan your session history for leaked keys, then open http://localhost:${DASHBOARD_PORT}/audit`],
+          ["--schedule [days]", "Scan on a timer and notify you on this machine. Default 7 days, range 1-90. No account required."],
+          ["--email <address>", "With --schedule, add email alerts for the most recent masked credential leak. A sign-in code is emailed to you."],
           ["--no-schedule", "Stop the timer. Leaves you signed in."],
           ["--notify", "Show a desktop notification when a scan finds a credential. On by default."],
-          ["--no-notify", "Stop those notifications. Scans and the digest are unaffected."],
+          ["--no-notify", "Stop desktop notifications. Scheduled scans and optional email alerts are unaffected."],
           ["--status", "Whether scheduling is on, where reports go, the daemon's state, and when the next scan is due."],
           ["-h, --help", "Show this help."]
         ]
       }
     ],
-    footer: ["Everything runs on this machine; only a scheduled digest ever leaves it."]
+    footer: [
+      "Every scan runs on this machine. Leak alerts appear as desktop system",
+      "notifications, never inside agent sessions. If you add email, only the",
+      "newest masked credential exposure and its metadata leave the machine."
+    ]
   }, helpOptsFor(process.stdout));
   return ["", ...lines, ""].join(`
 `) + `
@@ -35137,29 +35201,26 @@ function heldByLine(held) {
   const ageS = Math.max(0, Math.round((Date.now() - held.startedAt) / 1000));
   return `another audit is already running (pid ${held.pid}, started by ${held.source} ${ageS}s ago)`;
 }
-async function announceLeaksOnDesktop(result) {
+async function announceLeaksOnDesktop(result, report) {
   try {
-    await announceLeaksOrThrow(result);
+    await announceLeaksOrThrow(result, report);
   } catch (err) {
     process.stderr.write(`failproofai: could not announce a leak on the desktop: ` + `${err instanceof Error ? err.message : String(err)}
 `);
   }
 }
-async function announceLeaksOrThrow(result) {
-  const ids = result.newLeakIds ?? [];
+async function announceLeaksOrThrow(result, report) {
+  const ids = result.leakIds ?? result.newLeakIds ?? [];
   if (ids.length === 0)
     return;
   if (!readConfig().audit.notify)
     return;
-  const claimed = markLeakNoticeDelivered(ids, undefined, "desktop");
-  if (claimed.length === 0)
-    return;
-  const n = claimed.length === 1 ? "a credential" : `${claimed.length} credentials`;
-  const title = "failproofai found a leaked credential";
-  const body = `${n} in your agent transcripts. Run failproofai audit to see them — ` + "or failproofai audit --schedule to get them by email.";
+  const n = ids.length === 1 ? "a possible credential exposure" : `${ids.length} possible credential exposures`;
+  const emailState = report.kind === "sent" ? "sent" : report.kind === "signed-out" || !readAuth() ? "missing" : report.kind === "failed" ? "failed" : "held";
+  const { title, body } = desktopLeakNotice(emailState);
   if (process.platform === "darwin") {
     pruneMacNotifyQueue();
-    if (!queueMacNotification(claimed[0], title, body)) {
+    if (!queueMacNotification(ids[0], title, body)) {
       process.stderr.write(`failproofai: found ${n} but could not queue a notification
 `);
     } else if (!macNotifierInstalled()) {
@@ -35205,8 +35266,8 @@ async function runScheduledAudit() {
     }
     process.stdout.write(`failproofai: audit complete — ${num2(result.eventsScanned)} tool calls across ` + `${num2(result.transcripts.scanned)} sessions, ${num2(result.totals.hits)} hits
 `);
-    await announceLeaksOnDesktop(result);
     const outcome = await reportHarm(result);
+    await announceLeaksOnDesktop(result, outcome);
     const line = describeOutcome2(outcome);
     if (line) {
       const stream = outcome.kind === "sent" ? process.stdout : process.stderr;
@@ -35364,8 +35425,8 @@ var init_cli2 = __esm(() => {
   init_report_harm();
   init_desktop_notify();
   init_macos_notifier();
-  init_leak_notice();
   init_fp_config();
+  init_auth_store();
   init_tui();
   init_package();
   AUDIT_STAGES2 = [
@@ -35698,8 +35759,8 @@ var init_session_pause_cli = __esm(() => {
 
 // scripts/launch.ts
 import { spawn as spawn3 } from "child_process";
-import { realpathSync as realpathSync6, existsSync as existsSync48 } from "node:fs";
-import { resolve as resolve35, dirname as dirname24 } from "node:path";
+import { realpathSync as realpathSync6, existsSync as existsSync47 } from "node:fs";
+import { resolve as resolve34, dirname as dirname24 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { createInterface as createInterface2 } from "node:readline";
 function launch2(mode) {
@@ -35723,9 +35784,9 @@ function launch2(mode) {
     process.env.PORT = port;
     process.env.HOSTNAME = bindHost;
     cmd = "node";
-    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve35(dirname24(realpathSync6(fileURLToPath3(import.meta.url))), "..");
-    const serverJsPath = resolve35(packageRoot, ".next/standalone/server.js");
-    if (!existsSync48(serverJsPath)) {
+    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve34(dirname24(realpathSync6(fileURLToPath3(import.meta.url))), "..");
+    const serverJsPath = resolve34(packageRoot, ".next/standalone/server.js");
+    if (!existsSync47(serverJsPath)) {
       let shadowMessage = null;
       try {
         const diag = diagnoseShadow({ selfPackageRoot: packageRoot, selfVersion: version2 });
@@ -35822,17 +35883,17 @@ var init_cli_error2 = __esm(() => {
 
 // bin/failproofai.mjs
 import { realpathSync as realpathSync7 } from "fs";
-import { dirname as dirname25, resolve as resolve36 } from "path";
+import { dirname as dirname25, resolve as resolve35 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 // package.json
-var version = "1.0.4-beta.2";
+var version = "1.0.4-beta.6";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {
-  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve36(dirname25(realpathSync7(fileURLToPath4(import.meta.url))), "..");
+  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve35(dirname25(realpathSync7(fileURLToPath4(import.meta.url))), "..");
 }
 if (!process.env.FAILPROOFAI_DIST_PATH) {
-  process.env.FAILPROOFAI_DIST_PATH = resolve36(dirname25(realpathSync7(fileURLToPath4(import.meta.url))), "..", "dist");
+  process.env.FAILPROOFAI_DIST_PATH = resolve35(dirname25(realpathSync7(fileURLToPath4(import.meta.url))), "..", "dist");
 }
 var args = process.argv.slice(2);
 if (args[0] === "p" || args[0] === "policy")
@@ -36070,7 +36131,7 @@ Run \`failproofai help\` for usage.`);
           label: "see what it caught",
           entries: [
             ["(no args)", "Open the policy dashboard on localhost:8020"],
-            ["audit", "Scan your agents' history, then open the audit view"],
+            ["audit", "Find credentials your agents leaked, and get told about it"],
             ["config --status", "Cloud connection, daemon version, pause state"]
           ]
         },