failproofai 1.0.4-beta.4 → 1.0.4-beta.7

package/dist/cli.mjs

@@ -29,7 +29,7 @@ var __esm = (fn, res, err) => () => {
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // package.json
-var version2 = "1.0.4-beta.4", package_default;
+var version2 = "1.0.4-beta.7", package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "failproofai",
@@ -154,16 +154,16 @@ var init_package = __esm(() => {
       browserslist: "4.28.8"
     },
     optionalDependencies: {
-      "@failproofai/failproofaid-linux-x64": "1.0.4-beta.4",
-      "@failproofai/failproofaid-linux-arm64": "1.0.4-beta.4",
-      "@failproofai/failproofaid-darwin-x64": "1.0.4-beta.4",
-      "@failproofai/failproofaid-darwin-arm64": "1.0.4-beta.4"
+      "@failproofai/failproofaid-linux-x64": "1.0.4-beta.7",
+      "@failproofai/failproofaid-linux-arm64": "1.0.4-beta.7",
+      "@failproofai/failproofaid-darwin-x64": "1.0.4-beta.7",
+      "@failproofai/failproofaid-darwin-arm64": "1.0.4-beta.7"
     },
     failproofaidBinaries: {
-      "linux-x64": "4487790ed9b881da2914b5985a23b5adca1f20e226d71c635d8170064e6b2340",
-      "linux-arm64": "c903c5e201198213ccd8295fdab741c7d08d22c8dd5c276e52aa766595bedcc2",
-      "darwin-x64": "f0933584abbf0f9ff95cd153f8c6c704e467af1d6ffc8f42f9c426bd44b1142a",
-      "darwin-arm64": "387a3acbf13f667a557c8ac632fe67dee350cda078e3266e71edfcfacb9ecae6"
+      "linux-x64": "e59735a8f94cd8ac697b2bd67aafdd8d76a8394d53db229876980cc13a18f07e",
+      "linux-arm64": "b9ce50dd2f79b55f4f7112add265a776a4a6d002c2a56f971e666fbb796f3906",
+      "darwin-x64": "b46efc8ec33945a5cc26b7bb288fb87cea65b5983bd83094b5e607d53b8eda4c",
+      "darwin-arm64": "a8cc6112cee5ca8a7d517900e9ce32118855135980f22979fa0ff7aa6f68d954"
     }
   };
 });
@@ -3874,8 +3874,8 @@ var init_builtin_policies = __esm(() => {
     [/sk-ant-oat01-[A-Za-z0-9\-_]{20,}/, "Anthropic OAuth token"],
     [/sk-ant-[A-Za-z0-9\-_]{20,}/, "Anthropic API key"],
     [/sk-proj-[A-Za-z0-9\-_]{20,}/, "OpenAI project API key"],
-    [/sk-svcacct-[A-Za-z0-9\-_]{20,}/, "OpenAI service-account key"],
-    [/sk-admin-[A-Za-z0-9\-_]{20,}/, "OpenAI admin key"],
+    [/(?<!\w)sk-svcacct-[A-Za-z0-9\-_]{20,}/, "OpenAI service-account key"],
+    [/(?<!\w)sk-admin-[A-Za-z0-9\-_]{20,}/, "OpenAI admin key"],
     [/sk-or-v1-[A-Za-z0-9\-_]{20,}/, "OpenRouter API key"],
     [/sk-[A-Za-z0-9]{20,}/, "OpenAI-compatible key (issuer unknown)"],
     [/github_pat_[A-Za-z0-9_]{82}/, "GitHub fine-grained token"],
@@ -11810,19 +11810,6 @@ async function applyDecision(result, ctx, eventName) {
   if (out && out.decision && out.decision.behavior === "deny") {
     throw new Error((out.decision.message) || "Blocked by failproofai");
   }
-  const notice = parsed.failproofaiNotice;
-  if (typeof notice === "string" && notice && ctx && ctx.client && ctx.client.tui) {
-    try {
-      await ctx.client.tui.showToast({
-        body: {
-          title: "failproofai audit",
-          message: notice,
-          variant: "warning",
-          duration: 12_000,
-        },
-      });
-    } catch { /* a courtesy notice must never break the host hook */ }
-  }
   // Forward additional context as a prompt to the session. For Stop /
   // SubagentStop the prompt is the only force-retry channel (session.idle
   // already fired), so AWAIT to ensure the SDK round-trip completes before
@@ -11878,7 +11865,10 @@ export default async function failproofaiPlugin({ client, directory }) {
       const claudeEvent = BUS_EVENT_MAP[event.type];
       if (!claudeEvent) return;
       const props = event.properties || {};
-      const sessionID = props.sessionID || (props.session && props.session.id) || props.id;
+      const info = props.info || props.session || {};
+
+      const sessionID = info.id || info.sessionID || info.sessionId || info.session_id ||
+        props.sessionID || props.sessionId || props.session_id || props.id;
       const r = await runFailproofai(claudeEvent, {
         session_id: sessionID, cwd: directory, hook_event_name: claudeEvent,
       }, directory);
@@ -16493,432 +16483,6 @@ var init_delivery_health = __esm(() => {
   };
 });
 
-// src/hooks/notice.ts
-function shapeNotice(cli, notice, existingStdout = "") {
-  const empty = { stdout: existingStdout, stderr: "" };
-  if (!notice.trim() || !cli)
-    return empty;
-  const channel = NOTICE_CHANNEL[cli] ?? "none";
-  const text = notice.length > MAX_NOTICE_CHARS ? notice.slice(0, MAX_NOTICE_CHARS - 1) + "…" : notice;
-  switch (channel) {
-    case "systemMessage": {
-      if (existingStdout.trim().startsWith("{")) {
-        try {
-          const parsed = JSON.parse(existingStdout);
-          parsed.systemMessage = text;
-          return { stdout: JSON.stringify(parsed), stderr: "" };
-        } catch {
-          return empty;
-        }
-      }
-      if (existingStdout.trim())
-        return empty;
-      return { stdout: JSON.stringify({ systemMessage: text }), stderr: "" };
-    }
-    case "stderr":
-      return { stdout: existingStdout, stderr: text + `
-` };
-    case "stdout":
-      if (existingStdout.trim())
-        return empty;
-      return { stdout: text + `
-`, stderr: "" };
-    case "shim": {
-      if (existingStdout.trim().startsWith("{")) {
-        try {
-          const parsed = JSON.parse(existingStdout);
-          parsed.failproofaiNotice = text;
-          return { stdout: JSON.stringify(parsed), stderr: "" };
-        } catch {
-          return empty;
-        }
-      }
-      if (existingStdout.trim())
-        return empty;
-      return { stdout: JSON.stringify({ failproofaiNotice: text }), stderr: "" };
-    }
-    default:
-      return empty;
-  }
-}
-function canDeliverNotice(cli) {
-  return !!cli && (NOTICE_CHANNEL[cli] ?? "none") !== "none";
-}
-function leakNoticeText(newFindings) {
-  const n = newFindings === 1 ? "a possible credential exposure" : `${newFindings} possible credential exposures`;
-  return `failproofai found ${n} in this project's agent transcripts.
-` + "Run `failproofai audit` to review the matches and rotate anything real.";
-}
-function desktopLeakNotice() {
-  return {
-    title: "failproofai audit needs review",
-    body: "Possible credential exposure was found in your agent transcripts. " + "Run failproofai audit to verify the matches and rotate anything real."
-  };
-}
-var NOTICE_CHANNEL, MAX_NOTICE_CHARS = 900;
-var init_notice = __esm(() => {
-  NOTICE_CHANNEL = {
-    claude: "systemMessage",
-    codex: "systemMessage",
-    copilot: "stderr",
-    factory: "stdout",
-    opencode: "shim",
-    pi: "shim"
-  };
-});
-
-// lib/atomic-write.ts
-import {
-  chmodSync as chmodSync2,
-  existsSync as existsSync11,
-  mkdirSync as mkdirSync7,
-  renameSync as renameSync4,
-  rmSync as rmSync3,
-  statSync as statSync7,
-  writeFileSync as writeFileSync6
-} from "node:fs";
-import { dirname as dirname7 } from "node:path";
-import { randomBytes } from "node:crypto";
-function writeJsonAtomically(filePath, value, opts = {}) {
-  const mode = opts.mode ?? 384;
-  const dirMode = opts.dirMode ?? 448;
-  const dir = dirname7(filePath);
-  if (!existsSync11(dir))
-    mkdirSync7(dir, { recursive: true, mode: dirMode });
-  const tmp = `${filePath}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
-  try {
-    writeFileSync6(tmp, JSON.stringify(value, null, 2), { mode });
-    try {
-      if ((statSync7(tmp).mode & 63) !== 0)
-        chmodSync2(tmp, mode);
-    } catch {}
-    renameSync4(tmp, filePath);
-    try {
-      if ((statSync7(filePath).mode & 63) !== 0)
-        chmodSync2(filePath, mode);
-    } catch {}
-  } catch (err) {
-    try {
-      rmSync3(tmp, { force: true });
-    } catch {}
-    throw err;
-  }
-}
-var init_atomic_write = () => {};
-
-// src/audit/leak-record.ts
-function upsertFinding(record, incoming) {
-  const { sighting, ...rest } = incoming;
-  const existing = record.findings.find((f) => f.id === rest.id);
-  if (!existing) {
-    record.findings.push({
-      ...rest,
-      firstSeen: sighting.at,
-      lastSeen: sighting.at,
-      occurrences: 1,
-      sightings: [sighting]
-    });
-    return { record, isNew: true };
-  }
-  existing.occurrences += 1;
-  if (sighting.at > existing.lastSeen)
-    existing.lastSeen = sighting.at;
-  if (sighting.at < existing.firstSeen)
-    existing.firstSeen = sighting.at;
-  if (existing.sightings.length < MAX_SIGHTINGS) {
-    const seen = existing.sightings.some((s) => s.sessionId === sighting.sessionId && s.at === sighting.at);
-    if (!seen)
-      existing.sightings.push(sighting);
-  }
-  return { record, isNew: false };
-}
-function pruneRecord(record, nowMs) {
-  const cutoff = new Date(nowMs - FINDING_TTL_DAYS * 86400000).toISOString();
-  const live = record.findings.filter((f) => f.lastSeen >= cutoff);
-  live.sort((a, b) => a.lastSeen < b.lastSeen ? 1 : a.lastSeen > b.lastSeen ? -1 : 0);
-  record.findings = live.slice(0, MAX_FINDINGS);
-  return record;
-}
-function emptyRecord(salt, nowIso) {
-  return {
-    schemaVersion: LEAK_RECORD_SCHEMA_VERSION,
-    salt,
-    updatedAt: nowIso,
-    findings: []
-  };
-}
-function describeMechanism(toolName, direction, shortPath) {
-  const where = shortPath ? ` ${shortPath}` : "";
-  let summary;
-  if (direction === "result") {
-    summary = shortPath ? `appeared in the output of reading${where}` : "appeared in tool output";
-  } else {
-    switch (toolName) {
-      case "Read":
-        summary = `read from${where || " a file"}`;
-        break;
-      case "Write":
-        summary = `written to${where || " a file"}`;
-        break;
-      case "Edit":
-      case "NotebookEdit":
-        summary = `edited into${where || " a file"}`;
-        break;
-      case "Bash":
-        summary = "passed in a shell command";
-        break;
-      default:
-        summary = `sent to the ${toolName} tool`;
-    }
-  }
-  return { summary, toolName, direction };
-}
-var MAX_SIGHTINGS = 5, FINDING_TTL_DAYS = 90, MAX_FINDINGS = 500, LEAK_RECORD_SCHEMA_VERSION = 1;
-
-// src/audit/leak-fingerprint.ts
-function matchPublicPrefix(value) {
-  for (const entry of PUBLIC_PREFIXES) {
-    if (value.startsWith(entry[0]))
-      return entry;
-  }
-  return null;
-}
-function fingerprintSecret(value, fallbackLabel = "secret") {
-  const length = value.length;
-  const matched = matchPublicPrefix(value);
-  if (!matched) {
-    return {
-      display: `[${length}-char ${fallbackLabel}]`,
-      label: fallbackLabel,
-      length,
-      attributed: false
-    };
-  }
-  const [prefix, label] = matched;
-  const bodyLength = length - prefix.length;
-  const run = MASK_CHAR.repeat(Math.max(1, Math.min(MAX_MASK_RUN, bodyLength)));
-  if (length >= MIN_LEN_FOR_TAIL && bodyLength > TAIL_CHARS * 2) {
-    return {
-      display: `${prefix}${run}${value.slice(-TAIL_CHARS)}`,
-      label,
-      length,
-      attributed: true
-    };
-  }
-  return { display: `${prefix}${run}`, label, length, attributed: true };
-}
-function isFindingId(id) {
-  return /^[0-9a-f]{16}$/.test(id);
-}
-function fingerprintId(value, machineSalt) {
-  const { createHmac } = __require("node:crypto");
-  return createHmac("sha256", machineSalt).update(value).digest("hex").slice(0, 16);
-}
-var MASK_CHAR = "•", MAX_MASK_RUN = 8, MIN_LEN_FOR_TAIL = 24, TAIL_CHARS = 4, PUBLIC_PREFIXES;
-var init_leak_fingerprint = __esm(() => {
-  PUBLIC_PREFIXES = [
-    ["sk-ant-api03-", "Anthropic API key"],
-    ["sk-ant-oat01-", "Anthropic OAuth token"],
-    ["sk-ant-", "Anthropic key"],
-    ["sk-proj-", "OpenAI project key"],
-    ["sk-svcacct-", "OpenAI service-account key"],
-    ["sk-admin-", "OpenAI admin key"],
-    ["sk-or-v1-", "OpenRouter key"],
-    ["github_pat_", "GitHub fine-grained token"],
-    ["ghp_", "GitHub personal access token"],
-    ["gho_", "GitHub OAuth token"],
-    ["ghu_", "GitHub user-to-server token"],
-    ["ghs_", "GitHub server-to-server token"],
-    ["ghr_", "GitHub refresh token"],
-    ["glpat-", "GitLab personal access token"],
-    ["xoxb-", "Slack bot token"],
-    ["xoxp-", "Slack user token"],
-    ["xapp-", "Slack app-level token"],
-    ["sk_live_", "Stripe live secret key"],
-    ["sk_test_", "Stripe test secret key"],
-    ["rk_live_", "Stripe restricted key"],
-    ["AKIA", "AWS access key ID"],
-    ["ASIA", "AWS temporary access key ID"],
-    ["AIza", "Google API key"],
-    ["hf_", "Hugging Face token"],
-    ["gsk_", "Groq API key"],
-    ["r8_", "Replicate token"],
-    ["xai-", "xAI key"],
-    ["npm_", "npm access token"],
-    ["dop_v1_", "DigitalOcean token"],
-    ["shpat_", "Shopify access token"],
-    ["sbp_", "Supabase token"]
-  ];
-});
-
-// src/audit/leak-store.ts
-import { randomBytes as randomBytes2 } from "node:crypto";
-import { existsSync as existsSync12, mkdirSync as mkdirSync8, readFileSync as readFileSync8 } from "node:fs";
-import { dirname as dirname8 } from "node:path";
-function readJson(path) {
-  try {
-    if (!existsSync12(path))
-      return null;
-    return JSON.parse(readFileSync8(path, "utf8"));
-  } catch {
-    return null;
-  }
-}
-function readLeakIdentity(home) {
-  const existing = readJson(auditLeakIdentityFile(home));
-  if (existing && typeof existing.salt === "string" && existing.salt.length >= 32) {
-    return {
-      salt: existing.salt,
-      dismissed: existing.dismissed ?? [],
-      reportViewedAt: typeof existing.reportViewedAt === "number" && Number.isFinite(existing.reportViewedAt) ? existing.reportViewedAt : undefined
-    };
-  }
-  const minted = { salt: randomBytes2(32).toString("hex"), dismissed: [] };
-  writeLeakIdentity(minted, home);
-  return minted;
-}
-function writeLeakIdentity(identity, home) {
-  const path = auditLeakIdentityFile(home);
-  try {
-    mkdirSync8(dirname8(path), { recursive: true });
-    writeJsonAtomically(path, identity, { mode: FILE_MODE });
-    return true;
-  } catch {
-    return false;
-  }
-}
-function sanitizeFinding(raw) {
-  if (!raw || typeof raw !== "object" || Array.isArray(raw))
-    return null;
-  const f = raw;
-  if (typeof f.id !== "string" || !isFindingId(f.id))
-    return null;
-  const fp = f.fingerprint;
-  if (!fp || typeof fp !== "object" || typeof fp.display !== "string" || typeof fp.label !== "string") {
-    return null;
-  }
-  const sightings = Array.isArray(f.sightings) ? f.sightings.filter((s) => {
-    if (!s || typeof s !== "object")
-      return false;
-    const m = s.mechanism;
-    return !!m && typeof m === "object" && typeof m.summary === "string";
-  }) : [];
-  return {
-    ...f,
-    fingerprint: {
-      display: fp.display,
-      label: fp.label,
-      length: typeof fp.length === "number" && Number.isFinite(fp.length) ? fp.length : 0,
-      attributed: fp.attributed === true
-    },
-    name: typeof f.name === "string" ? f.name : null,
-    firstSeen: typeof f.firstSeen === "string" ? f.firstSeen : "",
-    lastSeen: typeof f.lastSeen === "string" ? f.lastSeen : "",
-    occurrences: typeof f.occurrences === "number" && Number.isFinite(f.occurrences) ? f.occurrences : sightings.length,
-    sightings
-  };
-}
-function readLeakRecord(home) {
-  const identity = readLeakIdentity(home);
-  const raw = readJson(auditLeaksFile(home));
-  if (!raw || raw.schemaVersion !== LEAK_RECORD_SCHEMA_VERSION || !Array.isArray(raw.findings)) {
-    return emptyRecord(identity.salt, new Date().toISOString());
-  }
-  const findings = raw.findings.map(sanitizeFinding).filter((f) => f !== null);
-  return { ...raw, findings, salt: identity.salt };
-}
-function writeLeakRecord(record, home, nowMs = Date.now()) {
-  const path = auditLeaksFile(home);
-  try {
-    mkdirSync8(dirname8(path), { recursive: true });
-    const pruned = pruneRecord(record, nowMs);
-    pruned.updatedAt = new Date(nowMs).toISOString();
-    writeJsonAtomically(path, pruned, { mode: FILE_MODE });
-    return true;
-  } catch {
-    return false;
-  }
-}
-function activeFindings(record, home) {
-  const dismissed = new Set(readLeakIdentity(home).dismissed);
-  return record.findings.filter((f) => !dismissed.has(f.id)).sort((a, b) => a.lastSeen < b.lastSeen ? 1 : a.lastSeen > b.lastSeen ? -1 : 0);
-}
-var FILE_MODE = 384;
-var init_leak_store = __esm(() => {
-  init_fp_home();
-  init_atomic_write();
-  init_leak_fingerprint();
-});
-
-// src/audit/leak-notice.ts
-import { existsSync as existsSync13, mkdirSync as mkdirSync9, readdirSync as readdirSync5, statSync as statSync8, writeFileSync as writeFileSync7, rmSync as rmSync4 } from "node:fs";
-import { resolve as resolve11 } from "node:path";
-function markLeakNoticeDelivered(ids, home, channel = "cli") {
-  const won = [];
-  try {
-    const dir = NOTICE_DIR(home, channel);
-    mkdirSync9(dir, { recursive: true });
-    for (const id of ids) {
-      if (!isFindingId(id))
-        continue;
-      try {
-        writeFileSync7(resolve11(dir, id), "", { flag: "wx", mode: 384 });
-        won.push(id);
-      } catch {}
-    }
-  } catch {}
-  return won;
-}
-function releaseLeakNoticeClaims(ids, home, channel = "cli") {
-  try {
-    const dir = NOTICE_DIR(home, channel);
-    for (const id of ids) {
-      if (!isFindingId(id))
-        continue;
-      rmSync4(resolve11(dir, id), { force: true });
-    }
-  } catch {}
-}
-function sessionNoticePending(sessionId, home) {
-  try {
-    if (!sessionId || !/^[\w.:-]{1,200}$/.test(sessionId))
-      return { ids: [], count: 0 };
-    const dir = resolve11(auditDir(home), "notified-sessions");
-    if (existsSync13(resolve11(dir, sessionId)))
-      return { ids: [], count: 0 };
-    const findings = activeFindings(readLeakRecord(home), home);
-    if (findings.length === 0)
-      return { ids: [], count: 0 };
-    const viewedAt = readLeakIdentity(home).reportViewedAt ?? 0;
-    const unviewed = findings.filter((f) => {
-      const seen = Date.parse(f.firstSeen);
-      return !Number.isFinite(seen) || seen > viewedAt;
-    });
-    return { ids: unviewed.map((f) => f.id), count: unviewed.length };
-  } catch {
-    return { ids: [], count: 0 };
-  }
-}
-function markSessionNoticed(sessionId, home) {
-  try {
-    if (!sessionId || !/^[\w.:-]{1,200}$/.test(sessionId))
-      return false;
-    const dir = resolve11(auditDir(home), "notified-sessions");
-    mkdirSync9(dir, { recursive: true });
-    writeFileSync7(resolve11(dir, sessionId), "", { flag: "wx", mode: 384 });
-    return true;
-  } catch {
-    return false;
-  }
-}
-var NOTICE_DIR = (home, channel = "cli") => resolve11(auditDir(home), channel === "cli" ? "notified" : `notified-${channel}`), MARKER_TTL_MS;
-var init_leak_notice = __esm(() => {
-  init_fp_home();
-  init_leak_store();
-  init_leak_fingerprint();
-  MARKER_TTL_MS = 120 * 86400000;
-});
-
 // src/hooks/resolve-cwd.ts
 function resolveCwd(integration, parsed) {
   const direct = typeof parsed.cwd === "string" && parsed.cwd.length > 0 ? parsed.cwd : undefined;
@@ -17611,7 +17175,7 @@ var init_cursor_projects = __esm(() => {
 });
 
 // lib/sqlite-reader.ts
-import { existsSync as existsSync14, readFileSync as readFileSync9 } from "node:fs";
+import { existsSync as existsSync11, readFileSync as readFileSync8 } from "node:fs";
 import initSqlJs from "sql.js/dist/sql-asm.js";
 function silenceSqliteExperimentalWarning() {
   if (warningPatched)
@@ -17662,7 +17226,7 @@ function clearWalFlag(bytes) {
 async function trySqlJs(dbPath) {
   try {
     const SQL = await loadSqlJs();
-    const db = new SQL.Database(clearWalFlag(readFileSync9(dbPath)));
+    const db = new SQL.Database(clearWalFlag(readFileSync8(dbPath)));
     return {
       query(sql, params) {
         const stmt = db.prepare(sql);
@@ -17686,7 +17250,7 @@ async function trySqlJs(dbPath) {
   }
 }
 async function openSqliteReadonly(dbPath) {
-  if (!existsSync14(dbPath))
+  if (!existsSync11(dbPath))
     return null;
   return await tryNodeSqlite(dbPath) ?? await trySqlJs(dbPath);
 }
@@ -18343,7 +17907,7 @@ var init_hermes_projects = __esm(() => {
 
 // lib/openclaw-sessions.ts
 import { readFile as readFile7 } from "node:fs/promises";
-import { readdirSync as readdirSync6, statSync as statSync9 } from "node:fs";
+import { readdirSync as readdirSync5, statSync as statSync7 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
 import { join as join14 } from "node:path";
 function openclawHome() {
@@ -18462,7 +18026,7 @@ function openclawLinesToLogEntries(lines, source = "session") {
 }
 function listOpenClawAgents() {
   try {
-    return readdirSync6(join14(openclawHome(), "agents"), { withFileTypes: true }).filter((d) => d.isDirectory() && !d.name.startsWith(".")).map((d) => d.name).sort();
+    return readdirSync5(join14(openclawHome(), "agents"), { withFileTypes: true }).filter((d) => d.isDirectory() && !d.name.startsWith(".")).map((d) => d.name).sort();
   } catch {
     return [];
   }
@@ -18472,7 +18036,7 @@ function listOpenClawTranscripts() {
   const out = [];
   let agentIds;
   try {
-    agentIds = readdirSync6(agentsDir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
+    agentIds = readdirSync5(agentsDir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
   } catch {
     return out;
   }
@@ -18480,7 +18044,7 @@ function listOpenClawTranscripts() {
     const sessionsDir = join14(agentsDir, agentId, "sessions");
     let files;
     try {
-      files = readdirSync6(sessionsDir);
+      files = readdirSync5(sessionsDir);
     } catch {
       continue;
     }
@@ -18492,7 +18056,7 @@ function listOpenClawTranscripts() {
         continue;
       const transcriptPath = join14(sessionsDir, file);
       try {
-        const st = statSync9(transcriptPath);
+        const st = statSync7(transcriptPath);
         out.push({ agentId, sessionId, transcriptPath, mtimeMs: st.mtimeMs, sizeBytes: st.size });
       } catch {}
     }
@@ -18543,7 +18107,7 @@ __export(exports_openclaw_projects, {
   getOpenClawSessions: () => getOpenClawSessions,
   openClawProjectPath: () => openClawProjectPath
 });
-import { readFileSync as readFileSync10 } from "node:fs";
+import { readFileSync as readFileSync9 } from "node:fs";
 import { join as join15 } from "node:path";
 function str(v) {
   return typeof v === "string" && v.length > 0 ? v : undefined;
@@ -18553,7 +18117,7 @@ function readSessionsIndex(agentId) {
   const indexPath = join15(openclawHome(), "agents", agentId, "sessions", "sessions.json");
   let raw;
   try {
-    raw = JSON.parse(readFileSync10(indexPath, "utf-8"));
+    raw = JSON.parse(readFileSync9(indexPath, "utf-8"));
   } catch {
     return out;
   }
@@ -18702,7 +18266,7 @@ var init_openclaw_projects = __esm(() => {
 
 // lib/factory-sessions.ts
 import { readFile as readFile8 } from "node:fs/promises";
-import { readdirSync as readdirSync7, statSync as statSync10 } from "node:fs";
+import { readdirSync as readdirSync6, statSync as statSync8 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
 import { join as join16 } from "node:path";
 function factoryHome() {
@@ -18848,7 +18412,7 @@ function listFactoryTranscripts() {
   const out = [];
   let projectDirs;
   try {
-    projectDirs = readdirSync7(root, { withFileTypes: true }).filter((d) => d.isDirectory());
+    projectDirs = readdirSync6(root, { withFileTypes: true }).filter((d) => d.isDirectory());
   } catch {
     return out;
   }
@@ -18858,7 +18422,7 @@ function listFactoryTranscripts() {
     const projectPath = join16(root, projectName);
     let files;
     try {
-      files = readdirSync7(projectPath);
+      files = readdirSync6(projectPath);
     } catch {
       continue;
     }
@@ -18870,7 +18434,7 @@ function listFactoryTranscripts() {
         continue;
       const transcriptPath = join16(projectPath, file);
       try {
-        const st = statSync10(transcriptPath);
+        const st = statSync8(transcriptPath);
         out.push({ projectName, cwd, sessionId, transcriptPath, mtimeMs: st.mtimeMs, sizeBytes: st.size });
       } catch {}
     }
@@ -19290,7 +18854,7 @@ var init_devin_projects = __esm(() => {
 
 // lib/antigravity-sessions.ts
 import { readFile as readFile9 } from "node:fs/promises";
-import { readdirSync as readdirSync8, statSync as statSync11 } from "node:fs";
+import { readdirSync as readdirSync7, statSync as statSync9 } from "node:fs";
 import { homedir as homedir15 } from "node:os";
 import { join as join18 } from "node:path";
 function antigravityHome() {
@@ -19415,7 +18979,7 @@ function listAntigravityTranscripts() {
   const out = [];
   let convoDirs;
   try {
-    convoDirs = readdirSync8(root, { withFileTypes: true }).filter((d) => d.isDirectory());
+    convoDirs = readdirSync7(root, { withFileTypes: true }).filter((d) => d.isDirectory());
   } catch {
     return out;
   }
@@ -19425,7 +18989,7 @@ function listAntigravityTranscripts() {
       continue;
     const transcriptPath = join18(root, conversationId, rel);
     try {
-      const st = statSync11(transcriptPath);
+      const st = statSync9(transcriptPath);
       if (!st.isFile())
         continue;
       out.push({ conversationId, transcriptPath, mtimeMs: st.mtimeMs, sizeBytes: st.size });
@@ -19438,7 +19002,7 @@ function findAntigravityTranscript(conversationId) {
     return null;
   const transcriptPath = join18(antigravityBrainRoot(), conversationId, antigravityTranscriptRelPath());
   try {
-    if (statSync11(transcriptPath).isFile())
+    if (statSync9(transcriptPath).isFile())
       return transcriptPath;
   } catch {}
   return null;
@@ -19890,7 +19454,7 @@ var init_goose_projects = __esm(() => {
 
 // lib/projects.ts
 import { readdir as readdir5, stat as stat4 } from "node:fs/promises";
-import { join as join21, resolve as resolve12, sep } from "node:path";
+import { join as join21, resolve as resolve11, sep } from "node:path";
 async function getMtime(path, label) {
   try {
     return (await stat4(path)).mtime;
@@ -20042,8 +19606,8 @@ function resolveProjectPath(projectName) {
     throw new RangeError("Empty project name");
   if (/^[/\\]/.test(projectName))
     throw new RangeError("Absolute project name");
-  const projectsPath = resolve12(getClaudeProjectsPath());
-  const candidate = resolve12(join21(projectsPath, projectName));
+  const projectsPath = resolve11(getClaudeProjectsPath());
+  const candidate = resolve11(join21(projectsPath, projectName));
   if (!candidate.startsWith(projectsPath + sep)) {
     throw new RangeError("Project path escapes root");
   }
@@ -20353,30 +19917,30 @@ var init_log_entries = __esm(() => {
 });
 
 // lib/codex-sessions.ts
-import { readFileSync as readFileSync11, readdirSync as readdirSync9, existsSync as existsSync15, writeFileSync as writeFileSync8, mkdirSync as mkdirSync10, statSync as statSync12 } from "node:fs";
+import { readFileSync as readFileSync10, readdirSync as readdirSync8, existsSync as existsSync12, writeFileSync as writeFileSync6, mkdirSync as mkdirSync7, statSync as statSync10 } from "node:fs";
 import { readFile as readFile11 } from "node:fs/promises";
-import { dirname as dirname9, join as join24 } from "node:path";
+import { dirname as dirname7, join as join24 } from "node:path";
 import { homedir as homedir17 } from "node:os";
 function readCache() {
   try {
-    if (!existsSync15(CACHE_PATH))
+    if (!existsSync12(CACHE_PATH))
       return {};
-    return JSON.parse(readFileSync11(CACHE_PATH, "utf-8"));
+    return JSON.parse(readFileSync10(CACHE_PATH, "utf-8"));
   } catch {
     return {};
   }
 }
 function writeCacheEntry(sessionId, path) {
   try {
-    mkdirSync10(dirname9(CACHE_PATH), { recursive: true });
+    mkdirSync7(dirname7(CACHE_PATH), { recursive: true });
     const cache = readCache();
     cache[sessionId] = path;
-    writeFileSync8(CACHE_PATH, JSON.stringify(cache), "utf-8");
+    writeFileSync6(CACHE_PATH, JSON.stringify(cache), "utf-8");
   } catch {}
 }
 function dirSearch(dir, sessionId) {
   try {
-    for (const f of readdirSync9(dir, { withFileTypes: true })) {
+    for (const f of readdirSync8(dir, { withFileTypes: true })) {
       if (f.isFile() && f.name.includes(sessionId) && f.name.endsWith(".jsonl")) {
         return join24(dir, f.name);
       }
@@ -20387,7 +19951,7 @@ function dirSearch(dir, sessionId) {
 function findCodexTranscript(sessionId) {
   const cache = readCache();
   const cached = cache[sessionId];
-  if (cached && existsSync15(cached))
+  if (cached && existsSync12(cached))
     return cached;
   const root = join24(homedir17(), ".codex", "sessions");
   const today = new Date;
@@ -20406,13 +19970,13 @@ function findCodexTranscript(sessionId) {
     }
   }
   try {
-    for (const y of readdirSync9(root, { withFileTypes: true })) {
+    for (const y of readdirSync8(root, { withFileTypes: true })) {
       if (!y.isDirectory())
         continue;
-      for (const m of readdirSync9(join24(root, y.name), { withFileTypes: true })) {
+      for (const m of readdirSync8(join24(root, y.name), { withFileTypes: true })) {
         if (!m.isDirectory())
           continue;
-        for (const d of readdirSync9(join24(root, y.name, m.name), { withFileTypes: true })) {
+        for (const d of readdirSync8(join24(root, y.name, m.name), { withFileTypes: true })) {
           if (!d.isDirectory())
             continue;
           const hit = dirSearch(join24(root, y.name, m.name, d.name), sessionId);
@@ -20441,6 +20005,15 @@ function joinTexts(blocks, wantedType) {
   return blocks.filter((b) => b?.type === wantedType && typeof b.text === "string").map((b) => b.text).join(`
 `);
 }
+function toolOutputText(output) {
+  if (typeof output === "string")
+    return output;
+  if (Array.isArray(output)) {
+    return output.filter((block) => !!block && typeof block === "object").map((block) => typeof block.text === "string" ? block.text : "").filter(Boolean).join(`
+`);
+  }
+  return output === undefined ? "" : JSON.stringify(output);
+}
 async function parseCodexLog(fileContent, source = "session") {
   const lines = fileContent.split(`
 `).filter((line) => line.trim() !== "");
@@ -20517,10 +20090,11 @@ async function parseCodexLog(fileContent, source = "session") {
         });
         continue;
       }
-      if (subType === "function_call") {
+      if (subType === "function_call" || subType === "custom_tool_call") {
         const callId = payload.call_id;
         const name = payload.name ?? "function_call";
-        const input = safeJsonParse4(payload.arguments);
+        const encodedInput = payload.arguments ?? payload.input;
+        const input = safeJsonParse4(encodedInput);
         const toolUse = {
           type: "tool_use",
           id: callId ?? `${timestamp}-${name}`,
@@ -20539,7 +20113,7 @@ async function parseCodexLog(fileContent, source = "session") {
         }
         continue;
       }
-      if (subType === "function_call_output") {
+      if (subType === "function_call_output" || subType === "custom_tool_call_output") {
         const callId = payload.call_id;
         const block = callId ? toolUseById.get(callId) : undefined;
         if (block) {
@@ -20548,7 +20122,7 @@ async function parseCodexLog(fileContent, source = "session") {
           block.result = {
             timestamp,
             timestampFormatted: formatTimestamp(date),
-            content: typeof payload.output === "string" ? payload.output : JSON.stringify(payload.output),
+            content: toolOutputText(payload.output),
             durationMs: duration,
             durationFormatted: formatDuration(duration)
           };
@@ -20641,7 +20215,7 @@ var init_codex_sessions = __esm(() => {
 });
 
 // src/hooks/resolve-permission-mode.ts
-import { readFileSync as readFileSync12 } from "node:fs";
+import { readFileSync as readFileSync11 } from "node:fs";
 function resolvePermissionMode(integration, parsed, sessionId) {
   if (integration === "claude") {
     return parsed.permission_mode ?? "default";
@@ -20656,7 +20230,7 @@ function resolveCodexMode(sessionId) {
     const path = findCodexTranscript(sessionId);
     if (!path)
       return;
-    for (const line of readFileSync12(path, "utf-8").split(`
+    for (const line of readFileSync11(path, "utf-8").split(`
 `)) {
       if (!line.includes("turn_context"))
         continue;
@@ -20681,9 +20255,9 @@ var init_resolve_permission_mode = __esm(() => {
 });
 
 // lib/copilot-sessions.ts
-import { readFileSync as readFileSync13, readdirSync as readdirSync10, existsSync as existsSync16, statSync as statSync13 } from "node:fs";
+import { readFileSync as readFileSync12, readdirSync as readdirSync9, existsSync as existsSync13, statSync as statSync11 } from "node:fs";
 import { readFile as readFile12 } from "node:fs/promises";
-import { join as join25, resolve as resolve13, sep as sep2 } from "node:path";
+import { join as join25, resolve as resolve12, sep as sep2 } from "node:path";
 import { homedir as homedir18 } from "node:os";
 function getCopilotHome() {
   return process.env.COPILOT_HOME || join25(homedir18(), ".copilot");
@@ -20694,8 +20268,8 @@ function getCopilotSessionStateRoot2() {
 function getCopilotSessionDir(sessionId) {
   if (!sessionId)
     return null;
-  const root = resolve13(getCopilotSessionStateRoot2());
-  const candidate = resolve13(root, sessionId);
+  const root = resolve12(getCopilotSessionStateRoot2());
+  const candidate = resolve12(root, sessionId);
   if (candidate === root || !candidate.startsWith(`${root}${sep2}`))
     return null;
   return candidate;
@@ -20710,17 +20284,17 @@ function findCopilotTranscript(sessionId) {
   const candidate = resolveSessionFile(sessionId, "events.jsonl");
   if (!candidate)
     return null;
-  return existsSync16(candidate) ? candidate : null;
+  return existsSync13(candidate) ? candidate : null;
 }
 function findCopilotWorkspace(sessionId) {
   const candidate = resolveSessionFile(sessionId, "workspace.yaml");
   if (!candidate)
     return null;
-  return existsSync16(candidate) ? candidate : null;
+  return existsSync13(candidate) ? candidate : null;
 }
 function readYamlScalar(path, key) {
   try {
-    const text = readFileSync13(path, "utf-8");
+    const text = readFileSync12(path, "utf-8");
     const re = new RegExp(`^${key}\\s*:\\s*(.+?)\\s*$`, "m");
     const m = text.match(re);
     if (!m)
@@ -20743,6 +20317,8 @@ async function parseCopilotLog(fileContent, source = "session") {
   const rawLines = [];
   const toolUseById = new Map;
   const toolUseStartMs = new Map;
+  let mostRecentToolUse;
+  let mostRecentToolUseStartMs = 0;
   let cwd;
   let seenSessionStart = false;
   for (let i = 0;i < lines.length; i++) {
@@ -20838,8 +20414,24 @@ async function parseCopilotLog(fileContent, source = "session") {
         toolUseById.set(callId, toolUse);
         toolUseStartMs.set(callId, date.getTime());
       }
+      mostRecentToolUse = toolUse;
+      mostRecentToolUseStartMs = date.getTime();
       continue;
     }
+    if (recType === "hook.start" && data.hookType === "postToolUse" && mostRecentToolUse) {
+      const input = data.input ?? {};
+      const hookResult = input.toolResult ?? {};
+      const hookContent = hookResult.textResultForLlm ?? hookResult.sessionLog;
+      if (typeof hookContent === "string" && hookContent.length > 0) {
+        mostRecentToolUse.result = {
+          timestamp,
+          timestampFormatted: formatTimestamp(date),
+          content: hookContent,
+          durationMs: Math.max(0, date.getTime() - mostRecentToolUseStartMs),
+          durationFormatted: formatDuration(Math.max(0, date.getTime() - mostRecentToolUseStartMs))
+        };
+      }
+    }
     if (recType === "tool.execution_complete") {
       const callId = data.toolCallId;
       const block = callId ? toolUseById.get(callId) : undefined;
@@ -20849,7 +20441,8 @@ async function parseCopilotLog(fileContent, source = "session") {
         const telemetry = data.toolTelemetry ?? {};
         const reportedMs = telemetry.metrics?.commandTimeMs ?? telemetry.metrics?.durationMs ?? null;
         const durationMs = typeof reportedMs === "number" && reportedMs >= 0 ? reportedMs : Math.max(0, date.getTime() - startMs);
-        const content = result.detailedContent ?? result.content ?? "";
+        const completionContent = result.detailedContent ?? result.content ?? "";
+        const content = block.result?.content || completionContent;
         block.result = {
           timestamp,
           timestampFormatted: formatTimestamp(date),
@@ -20898,9 +20491,9 @@ var init_copilot_sessions = __esm(() => {
 });
 
 // lib/cursor-sessions.ts
-import { readFileSync as readFileSync14, readdirSync as readdirSync11, existsSync as existsSync17, statSync as statSync14 } from "node:fs";
+import { readFileSync as readFileSync13, readdirSync as readdirSync10, existsSync as existsSync14, statSync as statSync12 } from "node:fs";
 import { readFile as readFile13 } from "node:fs/promises";
-import { basename as basename3, join as join26, resolve as resolve14, sep as sep3 } from "node:path";
+import { basename as basename3, join as join26, resolve as resolve13, sep as sep3 } from "node:path";
 import { homedir as homedir19 } from "node:os";
 function getCursorHome2() {
   return process.env.CURSOR_HOME || join26(homedir19(), ".cursor");
@@ -20908,28 +20501,28 @@ function getCursorHome2() {
 function getCursorSessionDir(sessionId) {
   if (!sessionId)
     return null;
-  const home = resolve14(getCursorHome2());
-  const projectsRoot = resolve14(home, NEW_PROJECTS_DIR2);
+  const home = resolve13(getCursorHome2());
+  const projectsRoot = resolve13(home, NEW_PROJECTS_DIR2);
   let projectEntries = [];
   try {
-    projectEntries = readdirSync11(projectsRoot, { withFileTypes: true });
+    projectEntries = readdirSync10(projectsRoot, { withFileTypes: true });
   } catch {}
   for (const entry of projectEntries) {
     if (!entry.isDirectory())
       continue;
-    const candidate = resolve14(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2, sessionId);
-    const transcriptRoot = resolve14(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2);
+    const candidate = resolve13(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2, sessionId);
+    const transcriptRoot = resolve13(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2);
     if (candidate === transcriptRoot || !candidate.startsWith(`${transcriptRoot}${sep3}`))
       continue;
-    if (existsSync17(candidate))
+    if (existsSync14(candidate))
       return candidate;
   }
   for (const sub of LEGACY_SESSION_ROOT_CANDIDATES2) {
-    const root = resolve14(home, sub);
-    const candidate = resolve14(root, sessionId);
+    const root = resolve13(home, sub);
+    const candidate = resolve13(root, sessionId);
     if (candidate === root || !candidate.startsWith(`${root}${sep3}`))
       continue;
-    if (existsSync17(candidate))
+    if (existsSync14(candidate))
       return candidate;
   }
   return null;
@@ -20939,11 +20532,11 @@ function findCursorTranscript(sessionId) {
   if (!dir)
     return null;
   const newCandidate = join26(dir, `${basename3(dir)}.jsonl`);
-  if (existsSync17(newCandidate))
+  if (existsSync14(newCandidate))
     return newCandidate;
   for (const name of LEGACY_TRANSCRIPT_FILE_CANDIDATES2) {
     const candidate = join26(dir, name);
-    if (existsSync17(candidate))
+    if (existsSync14(candidate))
       return candidate;
   }
   return null;
@@ -20973,8 +20566,27 @@ async function parseCursorLog(fileContent, source = "session") {
     if (!raw.type && raw.role && raw.message?.content) {
       const synthDate = new Date(SYNTH_T0 + i);
       const synthTs = synthDate.toISOString();
-      const textParts = raw.message.content.filter((c) => c?.type === "text" && typeof c.text === "string").map((c) => c.text).join("");
+      const messageContent = raw.message.content;
+      const textParts = messageContent.filter((c) => c?.type === "text" && typeof c.text === "string").map((c) => c.text).join("");
       if (raw.role === "user") {
+        let attachedResult = false;
+        for (const block of messageContent) {
+          if (block?.type !== "tool_result")
+            continue;
+          const callId = typeof block.tool_use_id === "string" ? block.tool_use_id : undefined;
+          const toolUse = callId ? toolUseById.get(callId) : undefined;
+          if (!toolUse)
+            continue;
+          const durationMs = Math.max(0, synthDate.getTime() - (toolUseStartMs.get(callId) ?? synthDate.getTime()));
+          toolUse.result = {
+            timestamp: synthTs,
+            timestampFormatted: formatTimestamp(synthDate),
+            content: typeof block.content === "string" ? block.content : block.content == null ? "" : JSON.stringify(block.content),
+            durationMs,
+            durationFormatted: formatDuration(durationMs)
+          };
+          attachedResult = true;
+        }
         const queryMatch = /<user_query>\s*([\s\S]*?)\s*<\/user_query>/.exec(textParts);
         const text = queryMatch ? queryMatch[1] : textParts;
         if (text) {
@@ -20983,11 +20595,35 @@ async function parseCursorLog(fileContent, source = "session") {
             ...baseEntry(rawCopy, synthTs, synthDate, source),
             message: { role: "user", content: text }
           });
+        } else if (!attachedResult) {
+          entries.push({
+            type: "system",
+            ...baseEntry(rawCopy, synthTs, synthDate, source),
+            raw: rawCopy
+          });
         }
         continue;
       }
       if (raw.role === "assistant") {
-        const blocks = textParts ? [{ type: "text", text: textParts }] : [];
+        const blocks = [];
+        if (textParts)
+          blocks.push({ type: "text", text: textParts });
+        for (let j = 0;j < messageContent.length; j++) {
+          const contentBlock = messageContent[j];
+          if (contentBlock?.type !== "tool_use")
+            continue;
+          const name = typeof contentBlock.name === "string" ? contentBlock.name : "tool";
+          const id = typeof contentBlock.id === "string" && contentBlock.id ? contentBlock.id : `cursor-${i}-${name}-${j}`;
+          const toolUse = {
+            type: "tool_use",
+            id,
+            name,
+            input: contentBlock.input && typeof contentBlock.input === "object" ? contentBlock.input : {}
+          };
+          blocks.push(toolUse);
+          toolUseById.set(id, toolUse);
+          toolUseStartMs.set(id, synthDate.getTime());
+        }
         if (blocks.length === 0) {
           entries.push({
             type: "system",
@@ -21154,9 +20790,9 @@ var init_cursor_sessions = __esm(() => {
 });
 
 // lib/pi-sessions.ts
-import { readFileSync as readFileSync15, readdirSync as readdirSync12, existsSync as existsSync18, statSync as statSync15 } from "node:fs";
+import { readFileSync as readFileSync14, readdirSync as readdirSync11, existsSync as existsSync15, statSync as statSync13 } from "node:fs";
 import { readFile as readFile14 } from "node:fs/promises";
-import { join as join27, resolve as resolve15, sep as sep4 } from "node:path";
+import { join as join27, resolve as resolve14, sep as sep4 } from "node:path";
 import { homedir as homedir20 } from "node:os";
 function getPiSessionStateRoot() {
   return process.env.PI_SESSIONS_DIR || join27(homedir20(), ".pi", "agent", "sessions");
@@ -21167,20 +20803,20 @@ function isSafeSessionId(sessionId) {
 function findPiTranscript(sessionId) {
   if (!isSafeSessionId(sessionId))
     return null;
-  const root = resolve15(getPiSessionStateRoot());
+  const root = resolve14(getPiSessionStateRoot());
   let cwdDirs;
   try {
-    cwdDirs = readdirSync12(root);
+    cwdDirs = readdirSync11(root);
   } catch {
     return null;
   }
   for (const cwdDir of cwdDirs) {
-    const cwdPath = resolve15(root, cwdDir);
+    const cwdPath = resolve14(root, cwdDir);
     if (!cwdPath.startsWith(`${root}${sep4}`))
       continue;
     let files;
     try {
-      files = readdirSync12(cwdPath);
+      files = readdirSync11(cwdPath);
     } catch {
       continue;
     }
@@ -21188,10 +20824,10 @@ function findPiTranscript(sessionId) {
       const m = SESSION_FILE_RE2.exec(f);
       if (!m || m[1].toLowerCase() !== sessionId.toLowerCase())
         continue;
-      const candidate = resolve15(cwdPath, f);
+      const candidate = resolve14(cwdPath, f);
       if (!candidate.startsWith(`${cwdPath}${sep4}`))
         continue;
-      if (existsSync18(candidate))
+      if (existsSync15(candidate))
         return candidate;
     }
   }
@@ -21594,14 +21230,53 @@ var init_pack_failclosed = __esm(() => {
   ]);
 });
 
+// lib/atomic-write.ts
+import {
+  chmodSync as chmodSync2,
+  existsSync as existsSync16,
+  mkdirSync as mkdirSync8,
+  renameSync as renameSync4,
+  rmSync as rmSync3,
+  statSync as statSync14,
+  writeFileSync as writeFileSync7
+} from "node:fs";
+import { dirname as dirname8 } from "node:path";
+import { randomBytes } from "node:crypto";
+function writeJsonAtomically(filePath, value, opts = {}) {
+  const mode = opts.mode ?? 384;
+  const dirMode = opts.dirMode ?? 448;
+  const dir = dirname8(filePath);
+  if (!existsSync16(dir))
+    mkdirSync8(dir, { recursive: true, mode: dirMode });
+  const tmp = `${filePath}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
+  try {
+    writeFileSync7(tmp, JSON.stringify(value, null, 2), { mode });
+    try {
+      if ((statSync14(tmp).mode & 63) !== 0)
+        chmodSync2(tmp, mode);
+    } catch {}
+    renameSync4(tmp, filePath);
+    try {
+      if ((statSync14(filePath).mode & 63) !== 0)
+        chmodSync2(filePath, mode);
+    } catch {}
+  } catch (err) {
+    try {
+      rmSync3(tmp, { force: true });
+    } catch {}
+    throw err;
+  }
+}
+var init_atomic_write = () => {};
+
 // src/hooks/session-pause.ts
-import { existsSync as existsSync19, mkdirSync as mkdirSync11, readdirSync as readdirSync13, readFileSync as readFileSync16, rmSync as rmSync5 } from "node:fs";
+import { existsSync as existsSync17, mkdirSync as mkdirSync9, readdirSync as readdirSync12, readFileSync as readFileSync15, rmSync as rmSync4 } from "node:fs";
 import { createHash as createHash6 } from "node:crypto";
-import { join as join28, resolve as resolve16 } from "node:path";
+import { join as join28, resolve as resolve15 } from "node:path";
 function pauseStateDir() {
   const override = process.env.FAILPROOFAI_STATE_DIR;
   if (override)
-    return resolve16(override, "sessions");
+    return resolve15(override, "sessions");
   return sessionPauseDir();
 }
 function pauseFilePath(sessionId) {
@@ -21662,9 +21337,9 @@ function readActivePause(sessionId, now = Date.now()) {
     return null;
   try {
     const path = pauseFilePath(sessionId);
-    if (!existsSync19(path))
+    if (!existsSync17(path))
       return null;
-    const stored = parseStored(JSON.parse(readFileSync16(path, "utf8")));
+    const stored = parseStored(JSON.parse(readFileSync15(path, "utf8")));
     if (!stored)
       return null;
     if (stored.expiresAt <= now)
@@ -21687,16 +21362,16 @@ function writePause(opts) {
     setBy: opts.setBy ?? "cli",
     ...opts.cwd ? { cwd: opts.cwd } : {}
   };
-  mkdirSync11(pauseStateDir(), { recursive: true, mode: 448 });
+  mkdirSync9(pauseStateDir(), { recursive: true, mode: 448 });
   writeJsonAtomically(pauseFilePath(opts.sessionId), { schemaVersion: SCHEMA_VERSION, ...pause });
   return pause;
 }
 function clearPause(sessionId) {
   const path = pauseFilePath(sessionId);
-  if (!existsSync19(path))
+  if (!existsSync17(path))
     return false;
   try {
-    rmSync5(path);
+    rmSync4(path);
     return true;
   } catch {
     return false;
@@ -21704,12 +21379,12 @@ function clearPause(sessionId) {
 }
 function listActivePauses(now = Date.now()) {
   const dir = pauseStateDir();
-  if (!existsSync19(dir))
+  if (!existsSync17(dir))
     return [];
   const out = [];
   let names;
   try {
-    names = readdirSync13(dir);
+    names = readdirSync12(dir);
   } catch {
     return [];
   }
@@ -21717,7 +21392,7 @@ function listActivePauses(now = Date.now()) {
     if (!name.endsWith(".json"))
       continue;
     try {
-      const stored = parseStored(JSON.parse(readFileSync16(join28(dir, name), "utf8")));
+      const stored = parseStored(JSON.parse(readFileSync15(join28(dir, name), "utf8")));
       if (!stored || stored.expiresAt <= now)
         continue;
       const { schemaVersion: _ignored, ...pause } = stored;
@@ -21758,17 +21433,17 @@ var init_session_pause = __esm(() => {
 import { createHash as createHash7 } from "node:crypto";
 import {
   chmodSync as chmodSync3,
-  existsSync as existsSync20,
-  mkdirSync as mkdirSync12,
-  readdirSync as readdirSync14,
-  readFileSync as readFileSync17,
+  existsSync as existsSync18,
+  mkdirSync as mkdirSync10,
+  readdirSync as readdirSync13,
+  readFileSync as readFileSync16,
   renameSync as renameSync5,
-  rmSync as rmSync6,
-  statSync as statSync16,
-  writeFileSync as writeFileSync9
+  rmSync as rmSync5,
+  statSync as statSync15,
+  writeFileSync as writeFileSync8
 } from "node:fs";
 import { createRequire as createRequire2 } from "node:module";
-import { dirname as dirname10, resolve as resolve17 } from "node:path";
+import { dirname as dirname9, resolve as resolve16 } from "node:path";
 import { gunzipSync } from "node:zlib";
 function baseUrl2() {
   return (process.env.FAILPROOFAI_DAEMON_BASE_URL || DEFAULT_BASE_URL2).replace(/\/+$/, "");
@@ -21777,7 +21452,7 @@ function daemonBinaryDir() {
   return binDir();
 }
 function installedBinaryPath(ver = version2) {
-  return resolve17(daemonBinaryDir(), `failproofaid-${ver}`);
+  return resolve16(daemonBinaryDir(), `failproofaid-${ver}`);
 }
 function daemonAssetUrl(key, ver = version2) {
   return `${baseUrl2()}/v${ver}/failproofaid-${key}.gz`;
@@ -21794,35 +21469,35 @@ function npmPlatformBinaryPath(key) {
     return null;
   const name = platformPackageName(key);
   try {
-    const requireFromRoot = createRequire2(resolve17(packageRoot, "package.json"));
-    const found = platformPackageBinary(dirname10(requireFromRoot.resolve(`${name}/package.json`)));
+    const requireFromRoot = createRequire2(resolve16(packageRoot, "package.json"));
+    const found = platformPackageBinary(dirname9(requireFromRoot.resolve(`${name}/package.json`)));
     if (found)
       return found;
   } catch {}
-  return platformPackageBinary(resolve17(packageRoot, "node_modules", name));
+  return platformPackageBinary(resolve16(packageRoot, "node_modules", name));
 }
 function platformPackageBinary(dir) {
   try {
-    const manifest = JSON.parse(readFileSync17(resolve17(dir, "package.json"), "utf8"));
+    const manifest = JSON.parse(readFileSync16(resolve16(dir, "package.json"), "utf8"));
     if (manifest.version !== version2)
       return null;
   } catch {
     return null;
   }
-  const candidate = resolve17(dir, "bin", "failproofaid");
-  return existsSync20(candidate) ? candidate : null;
+  const candidate = resolve16(dir, "bin", "failproofaid");
+  return existsSync18(candidate) ? candidate : null;
 }
 function pruneOldDaemonBinaries(keep = 2) {
   const removed = [];
   try {
     const dir = daemonBinaryDir();
-    const entries = readdirSync14(dir).filter((f) => f.startsWith("failproofaid-") && !f.endsWith(".tmp")).map((f) => {
-      const full = resolve17(dir, f);
-      return { full, mtime: statSync16(full).mtimeMs };
+    const entries = readdirSync13(dir).filter((f) => f.startsWith("failproofaid-") && !f.endsWith(".tmp")).map((f) => {
+      const full = resolve16(dir, f);
+      return { full, mtime: statSync15(full).mtimeMs };
     }).sort((a, b) => b.mtime - a.mtime);
     for (const stale of entries.slice(keep)) {
       try {
-        rmSync6(stale.full, { force: true });
+        rmSync5(stale.full, { force: true });
         removed.push(stale.full);
       } catch {}
     }
@@ -21833,13 +21508,13 @@ function installBinaryBytes(binary) {
   const target = installedBinaryPath();
   const tempPath = `${target}.${process.pid}.tmp`;
   try {
-    mkdirSync12(daemonBinaryDir(), { recursive: true });
-    writeFileSync9(tempPath, binary);
+    mkdirSync10(daemonBinaryDir(), { recursive: true });
+    writeFileSync8(tempPath, binary);
     chmodSync3(tempPath, 493);
     renameSync5(tempPath, target);
     return target;
   } catch (err) {
-    rmSync6(tempPath, { force: true });
+    rmSync5(tempPath, { force: true });
     throw err;
   }
 }
@@ -21853,7 +21528,7 @@ function installFromNpmPackage(key) {
   if (!source)
     return { error: `${platformPackageName(key)} is not installed` };
   try {
-    const bytes = readFileSync17(source);
+    const bytes = readFileSync16(source);
     const mismatch = binaryDigestMismatch(expectedNpmBinaryDigest(key), bytes, source);
     if (mismatch)
       return { error: mismatch };
@@ -21888,7 +21563,7 @@ function digestFor2(manifest, assetName) {
 }
 async function downloadFailproofaidBinary(key) {
   const target = installedBinaryPath();
-  if (existsSync20(target))
+  if (existsSync18(target))
     return { path: target };
   if (process.env.FAILPROOFAI_NO_DOWNLOAD) {
     return { error: "daemon downloads are disabled (FAILPROOFAI_NO_DOWNLOAD)" };
@@ -21922,10 +21597,10 @@ var init_daemon_download = __esm(() => {
 
 // src/hooks/daemon-client.ts
 import { createConnection as createConnection2 } from "node:net";
-import { existsSync as existsSync21 } from "node:fs";
+import { existsSync as existsSync19 } from "node:fs";
 function daemonSocketPresent() {
   try {
-    return existsSync21(socketPath2());
+    return existsSync19(socketPath2());
   } catch {
     return false;
   }
@@ -22051,16 +21726,16 @@ var init_daemon_client2 = __esm(() => {
 
 // src/hooks/daemon-service.ts
 import {
-  existsSync as existsSync22,
-  mkdirSync as mkdirSync13,
+  existsSync as existsSync20,
+  mkdirSync as mkdirSync11,
   mkdtempSync,
-  readFileSync as readFileSync18,
-  writeFileSync as writeFileSync10,
+  readFileSync as readFileSync17,
+  writeFileSync as writeFileSync9,
   unlinkSync as unlinkSync3,
-  rmSync as rmSync7
+  rmSync as rmSync6
 } from "node:fs";
 import { homedir as homedir21, tmpdir as tmpdir2, userInfo } from "node:os";
-import { resolve as resolve18 } from "node:path";
+import { resolve as resolve17 } from "node:path";
 import { execFileSync as execFileSync2 } from "node:child_process";
 function setDaemonConfigured(value, installedVersion) {
   try {
@@ -22082,13 +21757,13 @@ function resolveFailproofaidBinaryPath() {
   if (process.env.FAILPROOFAI_DAEMON_BINARY)
     return process.env.FAILPROOFAI_DAEMON_BINARY;
   const downloaded = installedBinaryPath();
-  if (existsSync22(downloaded))
+  if (existsSync20(downloaded))
     return downloaded;
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (packageRoot) {
     for (const profile of ["release", "debug"]) {
-      const candidate = resolve18(packageRoot, "target", profile, "failproofaid");
-      if (existsSync22(candidate))
+      const candidate = resolve17(packageRoot, "target", profile, "failproofaid");
+      if (existsSync20(candidate))
         return candidate;
     }
   }
@@ -22118,8 +21793,8 @@ function resolveWorkerCommand() {
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (!packageRoot)
     return null;
-  const workerScript = resolve18(packageRoot, "dist", "worker.mjs");
-  if (!existsSync22(workerScript))
+  const workerScript = resolve17(packageRoot, "dist", "worker.mjs");
+  if (!existsSync20(workerScript))
     return null;
   return `${shellQuote(process.execPath)} ${shellQuote(workerScript)}`;
 }
@@ -22129,8 +21804,8 @@ function resolveCliCommand() {
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (!packageRoot)
     return null;
-  const cliScript = resolve18(packageRoot, "dist", "cli.mjs");
-  if (!existsSync22(cliScript))
+  const cliScript = resolve17(packageRoot, "dist", "cli.mjs");
+  if (!existsSync20(cliScript))
     return null;
   return `${shellQuote(process.execPath)} ${shellQuote(cliScript)}`;
 }
@@ -22143,8 +21818,8 @@ function workerScriptPath() {
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (!packageRoot)
     return null;
-  const workerScript = resolve18(packageRoot, "dist", "worker.mjs");
-  return existsSync22(workerScript) ? workerScript : null;
+  const workerScript = resolve17(packageRoot, "dist", "worker.mjs");
+  return existsSync20(workerScript) ? workerScript : null;
 }
 function assertUnitSafe(value, field) {
   if (UNIT_UNSAFE_RE.test(value)) {
@@ -22170,10 +21845,10 @@ function systemdUnitDir() {
   return process.env.FAILPROOFAI_SYSTEMD_DIR || "/etc/systemd/system";
 }
 function systemdUnitPath(user = serviceUser()) {
-  return resolve18(systemdUnitDir(), systemdUnitName(user));
+  return resolve17(systemdUnitDir(), systemdUnitName(user));
 }
 function legacySystemdUserUnitPath() {
-  return resolve18(homedir21(), ".config", "systemd", "user", "failproofaid.service");
+  return resolve17(homedir21(), ".config", "systemd", "user", "failproofaid.service");
 }
 function launchdLabel(user = serviceUser()) {
   return `ai.failproof.failproofaid.${user}`;
@@ -22182,7 +21857,7 @@ function launchdPlistPath(user = serviceUser()) {
   return `/Library/LaunchDaemons/${launchdLabel(user)}.plist`;
 }
 function legacyLaunchAgentPlistPath() {
-  return resolve18(homedir21(), "Library", "LaunchAgents", "ai.failproof.failproofaid.plist");
+  return resolve17(homedir21(), "Library", "LaunchAgents", "ai.failproof.failproofaid.plist");
 }
 function legacySharedLaunchDaemonPath() {
   return "/Library/LaunchDaemons/ai.failproof.failproofaid.plist";
@@ -22230,20 +21905,20 @@ function runPrivileged(command, args) {
   execFileSync2(cmd, argv, { stdio: "ignore", timeout: SERVICE_CMD_TIMEOUT_MS });
 }
 function writePrivilegedFile(destination, contents, mode = "0644") {
-  const stagingDir = mkdtempSync(resolve18(tmpdir2(), "failproofaid-stage-"));
-  const staging = resolve18(stagingDir, "service-definition");
+  const stagingDir = mkdtempSync(resolve17(tmpdir2(), "failproofaid-stage-"));
+  const staging = resolve17(stagingDir, "service-definition");
   try {
-    writeFileSync10(staging, contents, "utf8");
+    writeFileSync9(staging, contents, "utf8");
     runPrivileged("install", ["-m", mode, staging, destination]);
   } finally {
-    rmSync7(stagingDir, { recursive: true, force: true });
+    rmSync6(stagingDir, { recursive: true, force: true });
   }
 }
 function removeLegacyUserService() {
   try {
     if (process.platform === "linux") {
       const legacy = legacySystemdUserUnitPath();
-      if (!existsSync22(legacy))
+      if (!existsSync20(legacy))
         return;
       try {
         execFileSync2("systemctl", ["--user", "disable", "--now", "failproofaid.service"], {
@@ -22260,7 +21935,7 @@ function removeLegacyUserService() {
       } catch {}
     } else {
       const legacyAgent = legacyLaunchAgentPlistPath();
-      if (existsSync22(legacyAgent)) {
+      if (existsSync20(legacyAgent)) {
         try {
           execFileSync2("launchctl", ["unload", "-w", legacyAgent], {
             stdio: "ignore",
@@ -22270,7 +21945,7 @@ function removeLegacyUserService() {
         unlinkSync3(legacyAgent);
       }
       const legacyDaemon = legacySharedLaunchDaemonPath();
-      if (existsSync22(legacyDaemon)) {
+      if (existsSync20(legacyDaemon)) {
         try {
           runPrivileged("launchctl", ["unload", "-w", legacyDaemon]);
         } catch {}
@@ -22287,7 +21962,7 @@ function systemdUnitContents(binaryPath, workerCmd, cliCmd = null) {
   const user = assertUnitSafe(serviceUser(), "User");
   assertUnitSafe(binaryPath, "ExecStart");
   assertUnitSafe(homedir21(), "HOME");
-  const conditionPaths = [binaryPath, workerScriptPath()].filter((p) => typeof p === "string" && existsSync22(p));
+  const conditionPaths = [binaryPath, workerScriptPath()].filter((p) => typeof p === "string" && existsSync20(p));
   const conditionLines = conditionPaths.map((p) => `ConditionPathExists=${assertUnitSafe(p, "ConditionPathExists")}
 `).join("");
   return `[Unit]
@@ -22348,9 +22023,9 @@ ${env.map(([key, value]) => `        <key>${key}</key>
     <key>UserName</key>
     <string>${escapeXml(serviceUser())}</string>
 ${envBlock}    <key>StandardOutPath</key>
-    <string>${escapeXml(resolve18(logDir, "failproofaid.log"))}</string>
+    <string>${escapeXml(resolve17(logDir, "failproofaid.log"))}</string>
     <key>StandardErrorPath</key>
-    <string>${escapeXml(resolve18(logDir, "failproofaid.err.log"))}</string>
+    <string>${escapeXml(resolve17(logDir, "failproofaid.err.log"))}</string>
 </dict>
 </plist>
 `;
@@ -22396,7 +22071,7 @@ async function installDaemonService() {
     } else {
       const plistPath = launchdPlistPath();
       const logDir = logsDir();
-      mkdirSync13(logDir, { recursive: true });
+      mkdirSync11(logDir, { recursive: true });
       try {
         runPrivileged("launchctl", ["unload", plistPath]);
       } catch {}
@@ -22482,10 +22157,10 @@ function readInstalledServiceDefinition() {
   if (!isDaemonSupportedPlatform())
     return null;
   const path = daemonServiceFilePath();
-  if (!path || !existsSync22(path))
+  if (!path || !existsSync20(path))
     return null;
   try {
-    return readFileSync18(path, "utf8");
+    return readFileSync17(path, "utf8");
   } catch {
     return null;
   }
@@ -22594,7 +22269,7 @@ async function ensureDaemonServiceCurrent() {
       restartSystemdUnit();
     } else {
       const plistPath = launchdPlistPath();
-      mkdirSync13(logDir, { recursive: true });
+      mkdirSync11(logDir, { recursive: true });
       previous = definition;
       try {
         runPrivileged("launchctl", ["unload", plistPath]);
@@ -22618,7 +22293,7 @@ async function uninstallDaemonService() {
   try {
     if (process.platform === "linux") {
       const unitPath = systemdUnitPath();
-      if (!existsSync22(unitPath))
+      if (!existsSync20(unitPath))
         return;
       try {
         runPrivileged("systemctl", ["disable", "--now", systemdUnitName()]);
@@ -22629,7 +22304,7 @@ async function uninstallDaemonService() {
       } catch {}
     } else {
       const plistPath = launchdPlistPath();
-      if (!existsSync22(plistPath))
+      if (!existsSync20(plistPath))
         return;
       try {
         runPrivileged("launchctl", ["unload", "-w", plistPath]);
@@ -22646,7 +22321,7 @@ function daemonVersionSkew() {
   const recorded = readVersionFile()?.daemon;
   if (!recorded)
     return null;
-  if (!existsSync22(installedBinaryPath(recorded)))
+  if (!existsSync20(installedBinaryPath(recorded)))
     return null;
   return recorded === version2 ? null : { installed: recorded, expected: version2 };
 }
@@ -22664,7 +22339,7 @@ function daemonServiceStatus() {
   if (!isDaemonSupportedPlatform())
     return "unsupported-platform";
   if (process.platform === "linux") {
-    if (!existsSync22(systemdUnitPath()))
+    if (!existsSync20(systemdUnitPath()))
       return "not-installed";
     try {
       const out = execFileSync2("systemctl", ["is-active", systemdUnitName()], {
@@ -22677,7 +22352,7 @@ function daemonServiceStatus() {
     }
   }
   const plistPath = launchdPlistPath();
-  if (!existsSync22(plistPath))
+  if (!existsSync20(plistPath))
     return "not-installed";
   try {
     const root = typeof process.getuid === "function" && process.getuid() === 0;
@@ -22709,48 +22384,48 @@ var init_daemon_service = __esm(() => {
 // src/hooks/fp-reset.ts
 import {
   copyFileSync,
-  existsSync as existsSync23,
-  mkdirSync as mkdirSync14,
-  readFileSync as readFileSync19,
-  readdirSync as readdirSync15,
+  existsSync as existsSync21,
+  mkdirSync as mkdirSync12,
+  readFileSync as readFileSync18,
+  readdirSync as readdirSync14,
   renameSync as renameSync6,
-  rmSync as rmSync8,
+  rmSync as rmSync7,
   rmdirSync,
-  statSync as statSync17,
-  writeFileSync as writeFileSync11
+  statSync as statSync16,
+  writeFileSync as writeFileSync10
 } from "node:fs";
-import { dirname as dirname11, isAbsolute as isAbsolute3, relative as relative4, resolve as resolve19 } from "node:path";
+import { dirname as dirname10, isAbsolute as isAbsolute3, relative as relative4, resolve as resolve18 } from "node:path";
 function migrateConventionPolicies() {
   const from = legacy.customPoliciesDir();
-  if (!existsSync23(from))
+  if (!existsSync21(from))
     return [];
   const moved = [];
   const mergeInto = (dir, dest, prefix) => {
     let entries;
     try {
-      entries = readdirSync15(dir, { withFileTypes: true });
+      entries = readdirSync14(dir, { withFileTypes: true });
     } catch {
       return;
     }
     if (entries.length === 0)
       return;
     try {
-      mkdirSync14(dest, { recursive: true });
+      mkdirSync12(dest, { recursive: true });
     } catch {
       return;
     }
     for (const entry of entries) {
-      const source = resolve19(dir, entry.name);
-      const target = resolve19(dest, entry.name);
+      const source = resolve18(dir, entry.name);
+      const target = resolve18(dest, entry.name);
       const name = `${prefix}${entry.name}`;
-      if (!existsSync23(target)) {
+      if (!existsSync21(target)) {
         try {
           renameSync6(source, target);
           moved.push(name);
         } catch {}
         continue;
       }
-      if (entry.isDirectory() && statSync17(target).isDirectory()) {
+      if (entry.isDirectory() && statSync16(target).isDirectory()) {
         mergeInto(source, target, `${name}/`);
         try {
           rmdirSync(source);
@@ -22770,23 +22445,23 @@ function migrateLegacySpool() {
     [legacy.spoolDir(), spoolDir()],
     [legacy.failedDir(), failedDir()]
   ]) {
-    if (!existsSync23(from))
+    if (!existsSync21(from))
       continue;
     try {
-      mkdirSync14(to, { recursive: true });
-      for (const entry of readdirSync15(from, { withFileTypes: true })) {
+      mkdirSync12(to, { recursive: true });
+      for (const entry of readdirSync14(from, { withFileTypes: true })) {
         if (!entry.isFile())
           continue;
         let name = entry.name;
         let n = 0;
-        while (existsSync23(resolve19(to, name)))
+        while (existsSync21(resolve18(to, name)))
           name = `legacy-${n++}-${entry.name}`;
         try {
-          renameSync6(resolve19(from, entry.name), resolve19(to, name));
+          renameSync6(resolve18(from, entry.name), resolve18(to, name));
           moved.push(name);
         } catch {
           try {
-            copyFileSync(resolve19(from, entry.name), resolve19(to, name));
+            copyFileSync(resolve18(from, entry.name), resolve18(to, name));
             moved.push(name);
           } catch {}
         }
@@ -22797,24 +22472,24 @@ function migrateLegacySpool() {
 }
 function migrateHookActivity() {
   const from = legacy.hookActivityDir();
-  if (!existsSync23(from))
+  if (!existsSync21(from))
     return [];
   const moved = [];
   try {
-    const entries = readdirSync15(from, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl"));
+    const entries = readdirSync14(from, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl"));
     if (entries.length === 0)
       return [];
     const to = hookActivityDir();
-    mkdirSync14(to, { recursive: true });
+    mkdirSync12(to, { recursive: true });
     const stamp = Date.now();
     let seq = 0;
     for (const entry of entries) {
-      const source = resolve19(from, entry.name);
+      const source = resolve18(from, entry.name);
       let name = entry.name === "current.jsonl" ? `page-${stamp}-${seq++}.jsonl` : entry.name;
-      let target = resolve19(to, name);
-      while (existsSync23(target)) {
+      let target = resolve18(to, name);
+      while (existsSync21(target)) {
         name = `page-${stamp}-${seq++}.jsonl`;
-        target = resolve19(to, name);
+        target = resolve18(to, name);
       }
       try {
         renameSync6(source, target);
@@ -22838,7 +22513,7 @@ function retirePolicyConfigKeys() {
   const at = globalPolicyConfigFile();
   let parsed;
   try {
-    const raw = JSON.parse(readFileSync19(at, "utf8"));
+    const raw = JSON.parse(readFileSync18(at, "utf8"));
     if (!raw || typeof raw !== "object" || Array.isArray(raw))
       return [];
     parsed = raw;
@@ -22852,9 +22527,9 @@ function retirePolicyConfigKeys() {
     delete parsed[key];
   try {
     if (Object.keys(parsed).length === 0)
-      rmSync8(at, { force: true });
+      rmSync7(at, { force: true });
     else
-      writeFileSync11(at, JSON.stringify(parsed, null, 2) + `
+      writeFileSync10(at, JSON.stringify(parsed, null, 2) + `
 `, "utf8");
   } catch {
     return [];
@@ -22862,12 +22537,12 @@ function retirePolicyConfigKeys() {
   return [...removed];
 }
 function readCarriedPolicyConfig() {
-  const from = resolve19(legacy.localPoliciesDir(), "policies-config.json");
-  if (!existsSync23(from))
+  const from = resolve18(legacy.localPoliciesDir(), "policies-config.json");
+  if (!existsSync21(from))
     return null;
   let parsed;
   try {
-    parsed = JSON.parse(readFileSync19(from, "utf8"));
+    parsed = JSON.parse(readFileSync18(from, "utf8"));
   } catch {
     return null;
   }
@@ -22892,11 +22567,11 @@ function rewriteCarriedCustomPaths(carried) {
   const repoint = (value) => {
     if (typeof value !== "string" || value === "")
       return value;
-    const abs = resolve19(value);
+    const abs = resolve18(value);
     const rel = relative4(fromDir, abs);
     if (rel === "" || rel.startsWith("..") || isAbsolute3(rel))
       return value;
-    return resolve19(toDir, rel);
+    return resolve18(toDir, rel);
   };
   if (Array.isArray(carried.customPoliciesPaths)) {
     carried.customPoliciesPaths = carried.customPoliciesPaths.map(repoint);
@@ -22911,14 +22586,14 @@ function writeCarriedPolicyConfig(carried) {
   const to = globalPolicyConfigFile();
   let existing = {};
   try {
-    const parsed = JSON.parse(readFileSync19(to, "utf8"));
+    const parsed = JSON.parse(readFileSync18(to, "utf8"));
     if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
       existing = parsed;
     }
   } catch {}
   try {
-    mkdirSync14(dirname11(to), { recursive: true });
-    writeFileSync11(to, JSON.stringify({ ...existing, ...carried }, null, 2) + `
+    mkdirSync12(dirname10(to), { recursive: true });
+    writeFileSync10(to, JSON.stringify({ ...existing, ...carried }, null, 2) + `
 `, "utf8");
   } catch {
     return [];
@@ -22927,10 +22602,10 @@ function writeCarriedPolicyConfig(carried) {
 }
 function readCarriedTelemetryOptOut() {
   const from = legacy.configToml();
-  if (!existsSync23(from))
+  if (!existsSync21(from))
     return false;
   try {
-    const text = readFileSync19(from, "utf8");
+    const text = readFileSync18(from, "utf8");
     const start = text.search(/^\s*\[telemetry\]\s*$/m);
     if (start === -1)
       return false;
@@ -22982,26 +22657,26 @@ function parseLegacyToml(text) {
 }
 function readCarriedLegacyConfig() {
   const from = legacy.configToml();
-  if (!existsSync23(from))
+  if (!existsSync21(from))
     return null;
   try {
-    return projectConfig(parseLegacyToml(readFileSync19(from, "utf8")));
+    return projectConfig(parseLegacyToml(readFileSync18(from, "utf8")));
   } catch {
     return null;
   }
 }
 function readCarriedLegacyCredentials() {
   const toml = legacy.credentialsToml();
-  if (existsSync23(toml)) {
+  if (existsSync21(toml)) {
     try {
-      const creds = projectCredentials(parseLegacyToml(readFileSync19(toml, "utf8")));
+      const creds = projectCredentials(parseLegacyToml(readFileSync18(toml, "utf8")));
       if (Object.keys(creds).length > 0)
         return creds;
     } catch {}
   }
   const readJson = (path) => {
     try {
-      const parsed = JSON.parse(readFileSync19(path, "utf8"));
+      const parsed = JSON.parse(readFileSync18(path, "utf8"));
       return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
     } catch {
       return null;
@@ -23035,10 +22710,10 @@ function resetHome(from, to = LAYOUT_VERSION) {
   const spooled = migrateLegacySpool();
   const removed = [];
   for (const path of resettablePaths()) {
-    if (!existsSync23(path))
+    if (!existsSync21(path))
       continue;
     try {
-      rmSync8(path, { recursive: true, force: true });
+      rmSync7(path, { recursive: true, force: true });
       removed.push(path);
     } catch {}
   }
@@ -23060,7 +22735,7 @@ function layoutWarningForHook() {
   if (state.kind === "future") {
     return `[failproofai] this directory was written by a newer version (layout ${state.found} vs ${LAYOUT_VERSION}) — policies are NOT being enforced. ` + `Upgrade failproofai.`;
   }
-  if (existsSync23(globalPolicyConfigFile()))
+  if (existsSync21(globalPolicyConfigFile()))
     return null;
   return `[failproofai] setup predates this version — global policies are NOT being enforced. ` + `Run \`failproofai config\` to re-create it.`;
 }
@@ -23107,31 +22782,6 @@ function canonicalizeEventType(raw, cli) {
   }
   return raw;
 }
-function attachLeakNotice(eventType, cli, outcome, sessionId) {
-  try {
-    if (!canDeliverNotice(cli))
-      return outcome;
-    if (!cli)
-      return outcome;
-    const canonical = canonicalizeEventType(eventType, cli);
-    if (canonical !== "Stop")
-      return outcome;
-    const pending = sessionNoticePending(sessionId ?? "");
-    if (pending.count === 0)
-      return outcome;
-    const shaped = shapeNotice(cli, leakNoticeText(pending.count), outcome.stdout);
-    if (shaped.stdout === outcome.stdout && !shaped.stderr)
-      return outcome;
-    markSessionNoticed(sessionId ?? "");
-    return {
-      exitCode: outcome.exitCode,
-      stdout: shaped.stdout,
-      stderr: outcome.stderr + shaped.stderr
-    };
-  } catch {
-    return outcome;
-  }
-}
 async function runObserved(hook, ctx, hookName, eventType, cli) {
   try {
     return await Promise.race([
@@ -23434,8 +23084,7 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
         }
       } catch {}
     }
-    const withNotice = attachLeakNotice(eventType, cli, { exitCode: result.exitCode, stdout: result.stdout, stderr: result.stderr }, sessionId);
-    return withNotice;
+    return { exitCode: result.exitCode, stdout: result.stdout, stderr: result.stderr };
   } finally {
     if (opts?.awaitTelemetryFlush ?? true) {
       await flushHookTelemetry2();
@@ -23494,8 +23143,6 @@ var init_handler = __esm(() => {
   init_custom_hooks_loader();
   init_hook_activity_store();
   init_delivery_health();
-  init_notice();
-  init_leak_notice();
   init_hook_telemetry2();
   init_resolve_permission_mode();
   init_resolve_transcript_path();
@@ -24136,17 +23783,17 @@ var init_collector_config = __esm(() => {
 });
 
 // src/hooks/flush-cli.ts
-import { existsSync as existsSync24, mkdirSync as mkdirSync15, writeFileSync as writeFileSync12, readdirSync as readdirSync16 } from "node:fs";
-import { dirname as dirname12, join as join29 } from "node:path";
+import { existsSync as existsSync22, mkdirSync as mkdirSync13, writeFileSync as writeFileSync11, readdirSync as readdirSync15 } from "node:fs";
+import { dirname as dirname11, join as join29 } from "node:path";
 function flushRequestPath(home) {
   return join29(failproofaiHome(home), "state", "flush-request.json");
 }
 function spoolDirs(home) {
   const root = spoolDir(home);
-  if (!existsSync24(root))
+  if (!existsSync22(root))
     return [];
   try {
-    return readdirSync16(root, { withFileTypes: true }).filter((e) => e.isDirectory() && e.name !== "failed").map((e) => join29(root, e.name));
+    return readdirSync15(root, { withFileTypes: true }).filter((e) => e.isDirectory() && e.name !== "failed").map((e) => join29(root, e.name));
   } catch {
     return [];
   }
@@ -24155,7 +23802,7 @@ function pendingBatches(home) {
   let n = 0;
   for (const dir of spoolDirs(home)) {
     try {
-      n += readdirSync16(dir).filter((f) => f.endsWith(".jsonl")).length;
+      n += readdirSync15(dir).filter((f) => f.endsWith(".jsonl")).length;
     } catch {}
   }
   return n;
@@ -24212,8 +23859,8 @@ async function runFlushCommand(opts = {}) {
     return { exitCode: 0, pending: 0, lines: ["Nothing spooled — everything already delivered."] };
   }
   const path = flushRequestPath(home);
-  mkdirSync15(dirname12(path), { recursive: true });
-  writeFileSync12(path, `${JSON.stringify({ requestedAtMs: Date.now() }, null, 2)}
+  mkdirSync13(dirname11(path), { recursive: true });
+  writeFileSync11(path, `${JSON.stringify({ requestedAtMs: Date.now() }, null, 2)}
 `, {
     mode: 384
   });
@@ -24247,14 +23894,14 @@ var init_flush_cli = __esm(() => {
 import {
   chmodSync as chmodSync4,
   copyFileSync as copyFileSync2,
-  existsSync as existsSync25,
-  mkdirSync as mkdirSync16,
-  readFileSync as readFileSync20,
+  existsSync as existsSync23,
+  mkdirSync as mkdirSync14,
+  readFileSync as readFileSync19,
   renameSync as renameSync7,
-  rmSync as rmSync9,
-  writeFileSync as writeFileSync13
+  rmSync as rmSync8,
+  writeFileSync as writeFileSync12
 } from "node:fs";
-import { basename as basename4, dirname as dirname13, join as join30, resolve as resolve20 } from "node:path";
+import { basename as basename4, dirname as dirname12, join as join30, resolve as resolve19 } from "node:path";
 function migrateToLayout4() {
   const moves = [
     { from: legacy.authJson(), to: auditSessionFile() },
@@ -24270,13 +23917,13 @@ function migrateToLayout4() {
   }
   const migrated = [];
   for (const { from, to } of moves) {
-    if (!existsSync25(from))
+    if (!existsSync23(from))
       continue;
-    if (existsSync25(to)) {
-      rmSync9(from, { force: true });
+    if (existsSync23(to)) {
+      rmSync8(from, { force: true });
       continue;
     }
-    mkdirSync16(dirname13(to), { recursive: true });
+    mkdirSync14(dirname12(to), { recursive: true });
     try {
       renameSync7(from, to);
     } catch {
@@ -24284,16 +23931,16 @@ function migrateToLayout4() {
         copyFileSync2(from, to);
       } catch (err) {
         try {
-          rmSync9(to, { force: true });
+          rmSync8(to, { force: true });
         } catch {}
         throw err;
       }
-      rmSync9(from, { force: true });
+      rmSync8(from, { force: true });
     }
     migrated.push(`${basename4(from)} → audit/${basename4(to)}`);
   }
   for (const secret of [auditSessionFile()]) {
-    if (!existsSync25(secret))
+    if (!existsSync23(secret))
       continue;
     try {
       chmodSync4(secret, 384);
@@ -24319,7 +23966,7 @@ function planMigration(from, registry = MIGRATIONS) {
 }
 function readLedger() {
   try {
-    const parsed = JSON.parse(readFileSync20(migrationLedgerFile(), "utf8"));
+    const parsed = JSON.parse(readFileSync19(migrationLedgerFile(), "utf8"));
     return Array.isArray(parsed) ? parsed : [];
   } catch {
     return [];
@@ -24327,9 +23974,9 @@ function readLedger() {
 }
 function appendLedger(entry) {
   try {
-    mkdirSync16(migrationsDir(), { recursive: true });
+    mkdirSync14(migrationsDir(), { recursive: true });
     const all = [...readLedger(), entry];
-    writeFileSync13(migrationLedgerFile(), `${JSON.stringify(all, null, 2)}
+    writeFileSync12(migrationLedgerFile(), `${JSON.stringify(all, null, 2)}
 `, "utf8");
   } catch {}
 }
@@ -24341,12 +23988,12 @@ function pruneMigratedCredentials(from) {
   for (let layout = from;layout < LAYOUT_VERSION; layout++) {
     for (const { as, landsAt } of PRUNED_AFTER_SUCCESS) {
       try {
-        if (!existsSync25(landsAt()))
+        if (!existsSync23(landsAt()))
           continue;
-        const copy = resolve20(migrationBackupDir(layout), as);
-        if (!existsSync25(copy))
+        const copy = resolve19(migrationBackupDir(layout), as);
+        if (!existsSync23(copy))
           continue;
-        rmSync9(copy, { force: true });
+        rmSync8(copy, { force: true });
         pruned.push(as);
       } catch {}
     }
@@ -24357,7 +24004,7 @@ function filesToBackUp() {
   const seen = new Map;
   for (const f of [...BACKED_UP, ...BACKED_UP_LEGACY]) {
     const path = f.at();
-    if (existsSync25(path))
+    if (existsSync23(path))
       seen.set(path, backupNameOf(f));
   }
   return [...seen].map(([path, as]) => ({ path, as }));
@@ -24366,14 +24013,14 @@ function backupBeforeMigrating(from) {
   const dir = migrationBackupDir(from);
   const saved = [];
   try {
-    rmSync9(dir, { recursive: true, force: true });
-    mkdirSync16(dir, { recursive: true });
+    rmSync8(dir, { recursive: true, force: true });
+    mkdirSync14(dir, { recursive: true });
   } catch {
     return [];
   }
   for (const { path: source, as } of filesToBackUp()) {
     try {
-      copyFileSync2(source, resolve20(dir, as));
+      copyFileSync2(source, resolve19(dir, as));
       saved.push(as);
     } catch {}
   }
@@ -24663,7 +24310,7 @@ var init_fp_reset2 = __esm(() => {
 // scripts/install-telemetry.mjs
 import { createHmac, randomUUID as randomUUID2 } from "node:crypto";
 import { execSync as execSync5 } from "node:child_process";
-import { readFileSync as readFileSync21, writeFileSync as writeFileSync14, mkdirSync as mkdirSync17 } from "node:fs";
+import { readFileSync as readFileSync20, writeFileSync as writeFileSync13, mkdirSync as mkdirSync15 } from "node:fs";
 import { homedir as homedir22, platform, arch, hostname, cpus } from "node:os";
 import { join as join31 } from "node:path";
 function hashToId3(raw) {
@@ -24673,7 +24320,7 @@ function getInstanceId3() {
   const idDir = join31(homedir22(), ".failproofai");
   const idFile = join31(idDir, "instance-id");
   try {
-    const existing = readFileSync21(idFile, "utf-8").trim();
+    const existing = readFileSync20(idFile, "utf-8").trim();
     if (existing)
       return existing;
   } catch {}
@@ -24682,7 +24329,7 @@ function getInstanceId3() {
     if (p === "linux") {
       for (const machineIdPath of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
         try {
-          const id = readFileSync21(machineIdPath, "utf-8").trim();
+          const id = readFileSync20(machineIdPath, "utf-8").trim();
           if (id)
             return hashToId3(id);
         } catch {}
@@ -24714,8 +24361,8 @@ function getInstanceId3() {
   } catch {}
   const id = randomUUID2();
   try {
-    mkdirSync17(idDir, { recursive: true });
-    writeFileSync14(idFile, id, "utf-8");
+    mkdirSync15(idDir, { recursive: true });
+    writeFileSync13(idFile, id, "utf-8");
   } catch {}
   return id;
 }
@@ -24747,8 +24394,8 @@ var NAMESPACE3 = "failproofai-telemetry-v1", API_KEY3 = "phc_Ac1Ww1GqKc0z1SyrRWb
 var init_install_telemetry = () => {};
 
 // lib/install-check.ts
-import { existsSync as existsSync26, readFileSync as readFileSync22, writeFileSync as writeFileSync15, mkdirSync as mkdirSync18 } from "node:fs";
-import { dirname as dirname14, resolve as resolve21 } from "node:path";
+import { existsSync as existsSync24, readFileSync as readFileSync21, writeFileSync as writeFileSync14, mkdirSync as mkdirSync16 } from "node:fs";
+import { dirname as dirname13, resolve as resolve20 } from "node:path";
 import { platform as platform2, arch as arch2, release, homedir as homedir23, hostname as hostname2 } from "node:os";
 import { createHmac as createHmac2 } from "node:crypto";
 function hashToId4(raw) {
@@ -24803,12 +24450,12 @@ function compareSemver(a, b) {
 }
 function checkHooks() {
   const hooksConfigPath = globalPolicyConfigFile();
-  if (!existsSync26(hooksConfigPath)) {
+  if (!existsSync24(hooksConfigPath)) {
     return { configured: false, registered: false, policyCount: 0 };
   }
   let config;
   try {
-    config = JSON.parse(readFileSync22(hooksConfigPath, "utf8"));
+    config = JSON.parse(readFileSync21(hooksConfigPath, "utf8"));
   } catch {
     return { configured: false, registered: false, policyCount: 0 };
   }
@@ -24816,12 +24463,12 @@ function checkHooks() {
     return { configured: false, registered: false, policyCount: 0 };
   }
   const policyCount = config.enabledPolicies.length;
-  const settingsPath = resolve21(homedir23(), ".claude", "settings.json");
-  if (!existsSync26(settingsPath))
+  const settingsPath = resolve20(homedir23(), ".claude", "settings.json");
+  if (!existsSync24(settingsPath))
     return { configured: true, registered: false, policyCount };
   let settings;
   try {
-    settings = JSON.parse(readFileSync22(settingsPath, "utf8"));
+    settings = JSON.parse(readFileSync21(settingsPath, "utf8"));
   } catch {
     return { configured: true, registered: false, policyCount };
   }
@@ -24845,8 +24492,8 @@ async function maybeReportInstall(version) {
     const versionFile = lastVersionPath();
     let previousVersion = null;
     try {
-      if (existsSync26(versionFile)) {
-        previousVersion = readFileSync22(versionFile, "utf8").trim() || null;
+      if (existsSync24(versionFile)) {
+        previousVersion = readFileSync21(versionFile, "utf8").trim() || null;
       }
     } catch {}
     if (previousVersion === version)
@@ -24882,8 +24529,8 @@ async function maybeReportInstall(version) {
       enabled_policy_count: hooks.policyCount
     }, { version, timeoutMs: REPORT_TIMEOUT_MS, enabled: telemetryEnabled }));
     try {
-      mkdirSync18(dirname14(versionFile), { recursive: true });
-      writeFileSync15(versionFile, version, "utf8");
+      mkdirSync16(dirname13(versionFile), { recursive: true });
+      writeFileSync14(versionFile, version, "utf8");
     } catch {}
     await Promise.all(events.map((p) => p.catch(() => {})));
   } catch {}
@@ -24933,8 +24580,8 @@ var init_cli_error = __esm(() => {
 
 // src/hooks/manager.ts
 import { execSync as execSync6 } from "node:child_process";
-import { existsSync as existsSync27 } from "node:fs";
-import { resolve as resolve22, basename as basename5 } from "node:path";
+import { existsSync as existsSync25 } from "node:fs";
+import { resolve as resolve21, basename as basename5 } from "node:path";
 import { platform as platform3, arch as arch3, release as release2, hostname as hostname3 } from "node:os";
 function getSettingsPath(scope, cwd) {
   return claudeCode.getSettingsPath(scope, cwd);
@@ -25153,9 +24800,9 @@ async function installHooksImpl(policyNames, scope = "user", cwd, includeBeta =
     delete configToWrite.customPoliciesPath;
     delete configToWrite.customPoliciesPaths;
   } else if (customPoliciesPath && (typeof customPoliciesPath === "string" || customPoliciesPath.length > 0)) {
-    const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path) => resolve22(path));
-    const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path) => resolve22(path)).filter((path) => {
-      if (existsSync27(path))
+    const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path) => resolve21(path));
+    const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path) => resolve21(path)).filter((path) => {
+      if (existsSync25(path))
         return true;
       console.log(`Dropping custom policies path (file no longer exists): ${path}`);
       return false;
@@ -25378,7 +25025,7 @@ async function removeHooks(policyNames, scope = "user", cwd, opts) {
     const scopesToRemove = scope === "all" ? [...integration.scopes] : integration.scopes.includes(scope) ? [scope] : [];
     for (const s of scopesToRemove) {
       const settingsPaths = settingsPathsFor(integration, s, cwd);
-      const existing = settingsPaths.filter((p) => existsSync27(p));
+      const existing = settingsPaths.filter((p) => existsSync25(p));
       if (existing.length === 0) {
         if (scope !== "all" && selectedClis.length === 1) {
           console.log("No settings file found. Nothing to remove.");
@@ -25465,51 +25112,123 @@ var init_manager = __esm(() => {
   VALID_POLICY_NAMES = new Set(BUILTIN_POLICIES.map((p) => p.name));
 });
 
+// src/audit/leak-fingerprint.ts
+function matchPublicPrefix(value) {
+  for (const entry of PUBLIC_PREFIXES) {
+    if (value.startsWith(entry[0]))
+      return entry;
+  }
+  return null;
+}
+function fingerprintSecret(value, fallbackLabel = "secret") {
+  const length = value.length;
+  const matched = matchPublicPrefix(value);
+  if (!matched) {
+    return {
+      display: `[${length}-char ${fallbackLabel}]`,
+      label: fallbackLabel,
+      length,
+      attributed: false
+    };
+  }
+  const [prefix, label] = matched;
+  const bodyLength = length - prefix.length;
+  const run = MASK_CHAR.repeat(Math.max(1, Math.min(MAX_MASK_RUN, bodyLength)));
+  if (length >= MIN_LEN_FOR_TAIL && bodyLength > TAIL_CHARS * 2) {
+    return {
+      display: `${prefix}${run}${value.slice(-TAIL_CHARS)}`,
+      label,
+      length,
+      attributed: true
+    };
+  }
+  return { display: `${prefix}${run}`, label, length, attributed: true };
+}
+function isFindingId(id) {
+  return /^[0-9a-f]{16}$/.test(id);
+}
+function fingerprintId(value, machineSalt) {
+  const { createHmac } = __require("node:crypto");
+  return createHmac("sha256", machineSalt).update(value).digest("hex").slice(0, 16);
+}
+var MASK_CHAR = "•", MAX_MASK_RUN = 8, MIN_LEN_FOR_TAIL = 24, TAIL_CHARS = 4, PUBLIC_PREFIXES;
+var init_leak_fingerprint = __esm(() => {
+  PUBLIC_PREFIXES = [
+    ["sk-ant-api03-", "Anthropic API key"],
+    ["sk-ant-oat01-", "Anthropic OAuth token"],
+    ["sk-ant-", "Anthropic key"],
+    ["sk-proj-", "OpenAI project key"],
+    ["sk-svcacct-", "OpenAI service-account key"],
+    ["sk-admin-", "OpenAI admin key"],
+    ["sk-or-v1-", "OpenRouter key"],
+    ["github_pat_", "GitHub fine-grained token"],
+    ["ghp_", "GitHub personal access token"],
+    ["gho_", "GitHub OAuth token"],
+    ["ghu_", "GitHub user-to-server token"],
+    ["ghs_", "GitHub server-to-server token"],
+    ["ghr_", "GitHub refresh token"],
+    ["glpat-", "GitLab personal access token"],
+    ["xoxb-", "Slack bot token"],
+    ["xoxp-", "Slack user token"],
+    ["xapp-", "Slack app-level token"],
+    ["sk_live_", "Stripe live secret key"],
+    ["sk_test_", "Stripe test secret key"],
+    ["rk_live_", "Stripe restricted key"],
+    ["AKIA", "AWS access key ID"],
+    ["ASIA", "AWS temporary access key ID"],
+    ["AIza", "Google API key"],
+    ["hf_", "Hugging Face token"],
+    ["gsk_", "Groq API key"],
+    ["r8_", "Replicate token"],
+    ["xai-", "xAI key"],
+    ["npm_", "npm access token"],
+    ["dop_v1_", "DigitalOcean token"],
+    ["shpat_", "Shopify access token"],
+    ["sbp_", "Supabase token"]
+  ];
+});
+
 // src/audit/macos-notifier.ts
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync as existsSync28, mkdirSync as mkdirSync19, readdirSync as readdirSync17, renameSync as renameSync8, rmSync as rmSync10, writeFileSync as writeFileSync16 } from "node:fs";
+import { chmodSync as chmodSync5, existsSync as existsSync26, mkdirSync as mkdirSync17, readdirSync as readdirSync16, renameSync as renameSync8, rmSync as rmSync9, writeFileSync as writeFileSync15 } from "node:fs";
 import { homedir as homedir24 } from "node:os";
-import { resolve as resolve23 } from "node:path";
+import { resolve as resolve22 } from "node:path";
 function macNotifierAppPath(home) {
-  return resolve23(runDir(home), "..", "bin", "FailproofAI Notifier.app");
+  return resolve22(runDir(home), "..", "bin", "FailproofAI Notifier.app");
+}
+function macNotifierRunnerPath(home) {
+  return resolve22(runDir(home), "..", "bin", "failproofai-notifier.zsh");
 }
 function macNotifierPlistPath() {
-  return resolve23(homedir24(), "Library", "LaunchAgents", `${MAC_NOTIFIER_LABEL}.plist`);
+  return resolve22(homedir24(), "Library", "LaunchAgents", `${MAC_NOTIFIER_LABEL}.plist`);
 }
 function escapeXml2(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
 function notifierScript(home) {
   const dir = macNotifyDir(home);
-  return `on run
-	set dropDir to ${JSON.stringify(dir + "/")}
-	set listing to ""
-	try
-		set listing to do shell script "ls -1 " & quoted form of dropDir & " 2>/dev/null"
-	end try
-	repeat with entryName in paragraphs of listing
-		set entryPath to dropDir & (entryName as string)
-		if (entryName as string) is not "" then
-			try
-				set payload to do shell script "cat " & quoted form of entryPath & " 2>/dev/null"
-				do shell script "rm -f " & quoted form of entryPath
-				set lines_ to paragraphs of payload
-				if (count of lines_) is greater than 1 then
-					set noteTitle to item 1 of lines_
-					set noteBody to ""
-					repeat with i from 2 to (count of lines_)
-						if noteBody is not "" then set noteBody to noteBody & " "
-						set noteBody to noteBody & (item i of lines_)
-					end repeat
-					display notification noteBody with title noteTitle
-				end if
-			end try
-		end if
-	end repeat
+  const quotedDir = `'${dir.replace(/'/g, `'\\''`)}'`;
+  return `#!/bin/zsh
+set -u
+setopt NULL_GLOB
+
+drop_dir=${quotedDir}
+
+for entry_path in "$drop_dir"/*; do
+  [ -f "$entry_path" ] || continue
+  note_title=$(/usr/bin/sed -n '1p' "$entry_path")
+  note_body=$(/usr/bin/sed -n '2,$p' "$entry_path" | /usr/bin/tr '\\n' ' ')
+  /bin/rm -f "$entry_path"
+  [ -n "$note_title" ] || continue
+  /usr/bin/osascript - "$note_title" "$note_body" <<'APPLESCRIPT'
+on run argv
+  display notification (item 2 of argv) with title (item 1 of argv)
 end run
+APPLESCRIPT
+done
 `;
 }
-function notifierPlistContents(appPath, watchDir) {
+function notifierPlistContents(runnerPath, watchDir) {
   return `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
@@ -25518,7 +25237,7 @@ function notifierPlistContents(appPath, watchDir) {
     <string>${escapeXml2(MAC_NOTIFIER_LABEL)}</string>
     <key>ProgramArguments</key>
     <array>
-        <string>${escapeXml2(resolve23(appPath, "Contents", "MacOS", "applet"))}</string>
+        <string>${escapeXml2(runnerPath)}</string>
     </array>
     <!-- Started only when something is queued, and it exits when the queue is
          empty. RunAtLoad would fire it once at login with nothing to say. -->
@@ -25545,20 +25264,15 @@ function installMacNotifier(home) {
   if (process.platform !== "darwin")
     return { installed: false, reason: "not macOS" };
   try {
-    const app = macNotifierAppPath(home);
+    const runner = macNotifierRunnerPath(home);
     const watch = macNotifyDir(home);
-    mkdirSync19(watch, { recursive: true, mode: 448 });
-    mkdirSync19(resolve23(app, ".."), { recursive: true });
-    const scriptPath = resolve23(watch, "..", "notifier.applescript");
-    writeFileSync16(scriptPath, notifierScript(home), { mode: 384 });
-    rmSync10(app, { recursive: true, force: true });
-    run("osacompile", ["-o", app, scriptPath]);
-    rmSync10(scriptPath, { force: true });
-    const plist = resolve23(app, "Contents", "Info.plist");
-    run("defaults", ["write", plist, "CFBundleIdentifier", MAC_NOTIFIER_LABEL]);
-    run("defaults", ["write", plist, "CFBundleName", "failproofai"]);
-    mkdirSync19(resolve23(macNotifierPlistPath(), ".."), { recursive: true });
-    writeFileSync16(macNotifierPlistPath(), notifierPlistContents(app, watch), { mode: 420 });
+    mkdirSync17(watch, { recursive: true, mode: 448 });
+    mkdirSync17(resolve22(runner, ".."), { recursive: true });
+    writeFileSync15(runner, notifierScript(home), { mode: 448 });
+    chmodSync5(runner, 448);
+    rmSync9(macNotifierAppPath(home), { recursive: true, force: true });
+    mkdirSync17(resolve22(macNotifierPlistPath(), ".."), { recursive: true });
+    writeFileSync15(macNotifierPlistPath(), notifierPlistContents(runner, watch), { mode: 420 });
     const target = `gui/${process.getuid?.() ?? 0}`;
     try {
       run("launchctl", ["bootout", `${target}/${MAC_NOTIFIER_LABEL}`]);
@@ -25575,49 +25289,50 @@ function uninstallMacNotifier(home) {
   try {
     run("launchctl", ["bootout", `gui/${process.getuid?.() ?? 0}/${MAC_NOTIFIER_LABEL}`]);
   } catch {}
-  rmSync10(macNotifierPlistPath(), { force: true });
-  rmSync10(macNotifierAppPath(home), { recursive: true, force: true });
-  rmSync10(macNotifyDir(home), { recursive: true, force: true });
+  rmSync9(macNotifierPlistPath(), { force: true });
+  rmSync9(macNotifierAppPath(home), { recursive: true, force: true });
+  rmSync9(macNotifierRunnerPath(home), { force: true });
+  rmSync9(macNotifyDir(home), { recursive: true, force: true });
 }
 function queueMacNotification(id, title, body, home) {
   if (!isFindingId(id))
     return false;
   const dir = macNotifyDir(home);
-  const tmp = resolve23(dir, "..", `notify-${id}.tmp`);
+  const tmp = resolve22(dir, "..", `notify-${id}.tmp`);
   try {
-    mkdirSync19(dir, { recursive: true, mode: 448 });
+    mkdirSync17(dir, { recursive: true, mode: 448 });
     const payload = `${title.replace(/\s+/g, " ")}
 ${body.replace(/\s+/g, " ")}
 `;
-    writeFileSync16(tmp, payload, { mode: 384 });
-    renameSync8(tmp, resolve23(dir, id));
+    writeFileSync15(tmp, payload, { mode: 384 });
+    renameSync8(tmp, resolve22(dir, id));
     return true;
   } catch {
     try {
-      rmSync10(tmp, { force: true });
+      rmSync9(tmp, { force: true });
     } catch {}
     return false;
   }
 }
 function macNotifierInstalled(home) {
-  return existsSync28(macNotifierPlistPath()) && existsSync28(macNotifierAppPath(home));
+  return existsSync26(macNotifierPlistPath()) && existsSync26(macNotifierRunnerPath(home));
 }
 function pruneMacNotifyQueue(home, maxAgeMs = 7 * 86400000) {
   try {
     const dir = macNotifyDir(home);
-    if (!existsSync28(dir))
+    if (!existsSync26(dir))
       return;
     const { statSync } = __require("node:fs");
-    for (const name of readdirSync17(dir)) {
-      const path = resolve23(dir, name);
+    for (const name of readdirSync16(dir)) {
+      const path = resolve22(dir, name);
       try {
         if (Date.now() - statSync(path).mtimeMs > maxAgeMs)
-          rmSync10(path, { force: true });
+          rmSync9(path, { force: true });
       } catch {}
     }
   } catch {}
 }
-var MAC_NOTIFIER_LABEL = "ai.failproof.notifier", macNotifyDir = (home) => resolve23(runDir(home), "notify");
+var MAC_NOTIFIER_LABEL = "ai.failproof.notifier", macNotifyDir = (home) => resolve22(runDir(home), "notify");
 var init_macos_notifier = __esm(() => {
   init_fp_home();
   init_leak_fingerprint();
@@ -25639,7 +25354,7 @@ var DEFAULT_FETCH_TIMEOUT_MS = 15000;
 
 // src/hooks/cloud-enrollment.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { existsSync as existsSync29, readFileSync as readFileSync23, rmSync as rmSync11 } from "node:fs";
+import { existsSync as existsSync27, readFileSync as readFileSync22, rmSync as rmSync10 } from "node:fs";
 import { hostname as hostname4 } from "node:os";
 function cloudCredentialPath() {
   return process.env.FAILPROOFAI_CLOUD_CREDENTIALS ?? credentialsFile();
@@ -25678,10 +25393,10 @@ function readCloudCredentials() {
   if (!usingJsonOverride())
     return readCredentials().cloud ?? null;
   const path = cloudCredentialPath();
-  if (!existsSync29(path))
+  if (!existsSync27(path))
     return null;
   try {
-    const raw = JSON.parse(readFileSync23(path, "utf8"));
+    const raw = JSON.parse(readFileSync22(path, "utf8"));
     if (raw.schemaVersion !== SCHEMA_VERSION2)
       return null;
     if (typeof raw.url !== "string" || typeof raw.machineId !== "string" || typeof raw.token !== "string") {
@@ -25720,10 +25435,10 @@ function resolveMachineLabel(explicit) {
 function clearCloudCredentials() {
   if (usingJsonOverride()) {
     const path = cloudCredentialPath();
-    if (!existsSync29(path))
+    if (!existsSync27(path))
       return false;
     try {
-      rmSync11(path);
+      rmSync10(path);
       return true;
     } catch {
       return false;
@@ -25971,21 +25686,21 @@ var init_cloud_connection = __esm(() => {
 });
 
 // src/hooks/setup-state.ts
-import { existsSync as existsSync30, realpathSync as realpathSync2, statSync as statSync18 } from "node:fs";
-import { dirname as dirname15, resolve as resolve24 } from "node:path";
+import { existsSync as existsSync28, realpathSync as realpathSync2, statSync as statSync17 } from "node:fs";
+import { dirname as dirname14, resolve as resolve23 } from "node:path";
 import { homedir as homedir25 } from "node:os";
 function globalConfigPath(home = homedir25()) {
   return globalPolicyConfigFile(home);
 }
 function projectConfigPath(projectRoot) {
-  return resolve24(projectRoot, ".failproofai", "policies-config.json");
+  return resolve23(projectRoot, ".failproofai", "policies-config.json");
 }
 function legacyMarkerPath(home) {
   return launcherMarker(home);
 }
 function isDir(path) {
   try {
-    return statSync18(path).isDirectory();
+    return statSync17(path).isDirectory();
   } catch {
     return false;
   }
@@ -25994,14 +25709,14 @@ function findProjectRoot(start, home = homedir25()) {
   const resolvedHome = realResolve(home);
   let dir = realResolve(start);
   while (dir !== resolvedHome) {
-    if (isDir(resolve24(dir, ".failproofai")))
+    if (isDir(resolve23(dir, ".failproofai")))
       return dir;
-    const parent = dirname15(dir);
+    const parent = dirname14(dir);
     if (parent === dir)
       break;
     dir = parent;
   }
-  return resolve24(start);
+  return resolve23(start);
 }
 function hasGlobalHooksInstalled() {
   for (const id of INTEGRATION_TYPES) {
@@ -26013,7 +25728,7 @@ function hasGlobalHooksInstalled() {
   return false;
 }
 function realResolve(path) {
-  const lexical = resolve24(path);
+  const lexical = resolve23(path);
   try {
     return realpathSync2(lexical);
   } catch {
@@ -26028,10 +25743,10 @@ function detectSetupState(cwd = process.cwd(), home = homedir25()) {
     cwd: resolvedCwd,
     home: resolvedHome,
     projectRoot,
-    hasGlobalConfig: existsSync30(globalConfigPath(resolvedHome)),
-    hasProjectConfig: projectRoot !== resolvedHome && existsSync30(projectConfigPath(projectRoot)),
+    hasGlobalConfig: existsSync28(globalConfigPath(resolvedHome)),
+    hasProjectConfig: projectRoot !== resolvedHome && existsSync28(projectConfigPath(projectRoot)),
     hasGlobalHooks: hasGlobalHooksInstalled(),
-    hasLegacyMarker: existsSync30(legacyMarkerPath(resolvedHome)),
+    hasLegacyMarker: existsSync28(legacyMarkerPath(resolvedHome)),
     inHomeDir: resolvedCwd === resolvedHome
   };
 }
@@ -26048,14 +25763,14 @@ var init_setup_state = __esm(() => {
 });
 
 // src/hooks/onboarding-attempt.ts
-import { existsSync as existsSync31, mkdirSync as mkdirSync20, readFileSync as readFileSync24, rmSync as rmSync12, writeFileSync as writeFileSync17 } from "node:fs";
-import { dirname as dirname16 } from "node:path";
+import { existsSync as existsSync29, mkdirSync as mkdirSync18, readFileSync as readFileSync23, rmSync as rmSync11, writeFileSync as writeFileSync16 } from "node:fs";
+import { dirname as dirname15 } from "node:path";
 function readOnboardingAttempt() {
   const path = onboardingAttemptFile();
-  if (!existsSync31(path))
+  if (!existsSync29(path))
     return null;
   try {
-    const raw = JSON.parse(readFileSync24(path, "utf8"));
+    const raw = JSON.parse(readFileSync23(path, "utf8"));
     if (raw.schemaVersion !== SCHEMA_VERSION3)
       return null;
     if (typeof raw.reason !== "string" || typeof raw.cliVersion !== "string")
@@ -26074,7 +25789,7 @@ function readOnboardingAttempt() {
 function recordOnboardingAttempt(reason, cliVersion, daemonStatus, now = Date.now()) {
   try {
     const path = onboardingAttemptFile();
-    mkdirSync20(dirname16(path), { recursive: true });
+    mkdirSync18(dirname15(path), { recursive: true });
     const record = {
       schemaVersion: SCHEMA_VERSION3,
       reason,
@@ -26082,12 +25797,12 @@ function recordOnboardingAttempt(reason, cliVersion, daemonStatus, now = Date.no
       daemonStatus,
       at: now
     };
-    writeFileSync17(path, JSON.stringify(record, null, 2), "utf8");
+    writeFileSync16(path, JSON.stringify(record, null, 2), "utf8");
   } catch {}
 }
 function clearOnboardingAttempt() {
   try {
-    rmSync12(onboardingAttemptFile(), { force: true });
+    rmSync11(onboardingAttemptFile(), { force: true });
   } catch {}
 }
 function blockerCleared(attempt, probe) {
@@ -26129,7 +25844,7 @@ var init_onboarding_attempt = __esm(() => {
 });
 
 // src/hooks/onboarding-lock.ts
-import { mkdirSync as mkdirSync21, readFileSync as readFileSync25, rmSync as rmSync13, writeFileSync as writeFileSync18 } from "node:fs";
+import { mkdirSync as mkdirSync19, readFileSync as readFileSync24, rmSync as rmSync12, writeFileSync as writeFileSync17 } from "node:fs";
 import { homedir as homedir26 } from "node:os";
 function onboardingLockPath(home = homedir26()) {
   return onboardingLockFile(home);
@@ -26146,7 +25861,7 @@ function processAlive(pid) {
 }
 function readLock(path) {
   try {
-    const parsed = JSON.parse(readFileSync25(path, "utf8"));
+    const parsed = JSON.parse(readFileSync24(path, "utf8"));
     if (typeof parsed.pid !== "number")
       return null;
     return { pid: parsed.pid, startedAt: Number(parsed.startedAt) || 0 };
@@ -26160,9 +25875,9 @@ function acquireOnboardingLock(home = homedir26()) {
     const held = readLock(path);
     if (held && held.pid !== process.pid && processAlive(held.pid))
       return null;
-    mkdirSync21(stateDir(home), { recursive: true });
+    mkdirSync19(stateDir(home), { recursive: true });
     const body = { pid: process.pid, startedAt: Date.now() };
-    writeFileSync18(path, JSON.stringify(body), "utf8");
+    writeFileSync17(path, JSON.stringify(body), "utf8");
     let released = false;
     return {
       release() {
@@ -26172,7 +25887,7 @@ function acquireOnboardingLock(home = homedir26()) {
         try {
           const current = readLock(path);
           if (!current || current.pid === process.pid)
-            rmSync13(path, { force: true });
+            rmSync12(path, { force: true });
         } catch {}
       }
     };
@@ -26185,7 +25900,7 @@ var init_onboarding_lock = __esm(() => {
 });
 
 // lib/claude-sessions.ts
-import { readdirSync as readdirSync18, statSync as statSync19, existsSync as existsSync32 } from "node:fs";
+import { readdirSync as readdirSync17, statSync as statSync18, existsSync as existsSync30 } from "node:fs";
 import { join as join32, basename as basename6 } from "node:path";
 function getClaudeProjectsRoot() {
   return getClaudeProjectsPath();
@@ -26194,7 +25909,7 @@ function listClaudeProjects() {
   const root = getClaudeProjectsRoot();
   let entries;
   try {
-    entries = readdirSync18(root, { withFileTypes: true });
+    entries = readdirSync17(root, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -26209,7 +25924,7 @@ function collectSubagentTranscripts(dir, relPrefix, project, out, depth) {
     return;
   let entries;
   try {
-    entries = readdirSync18(dir, { withFileTypes: true });
+    entries = readdirSync17(dir, { withFileTypes: true });
   } catch {
     return;
   }
@@ -26225,7 +25940,7 @@ function collectSubagentTranscripts(dir, relPrefix, project, out, depth) {
     const stem = entry.name.slice(0, -".jsonl".length);
     const transcriptPath = join32(dir, entry.name);
     try {
-      const s = statSync19(transcriptPath);
+      const s = statSync18(transcriptPath);
       out.push({
         projectName: project.name,
         cwd: project.cwd,
@@ -26242,7 +25957,7 @@ function listClaudeTranscripts(project) {
   const out = [];
   let entries;
   try {
-    entries = readdirSync18(project.path, { withFileTypes: true });
+    entries = readdirSync17(project.path, { withFileTypes: true });
   } catch {
     return out;
   }
@@ -26253,7 +25968,7 @@ function listClaudeTranscripts(project) {
         continue;
       const transcriptPath = join32(project.path, entry.name);
       try {
-        const s = statSync19(transcriptPath);
+        const s = statSync18(transcriptPath);
         out.push({
           projectName: project.name,
           cwd: project.cwd,
@@ -26266,7 +25981,7 @@ function listClaudeTranscripts(project) {
       } catch {}
     } else if (entry.isDirectory() && UUID_RE2.test(entry.name)) {
       const subDir = join32(project.path, entry.name, "subagents");
-      if (!existsSync32(subDir))
+      if (!existsSync30(subDir))
         continue;
       collectSubagentTranscripts(subDir, entry.name, project, out, 0);
     }
@@ -26332,7 +26047,7 @@ var init_shared = __esm(() => {
 
 // src/audit/cli-adapters/claude.ts
 import { readFile as readFile15, open as open2 } from "node:fs/promises";
-import { readFileSync as readFileSync26 } from "node:fs";
+import { readFileSync as readFileSync25 } from "node:fs";
 async function listClaudeTranscriptMetadata(opts = {}) {
   const projectFilter = opts.projects ? new Set(opts.projects) : null;
   const sinceMs = opts.sinceMs ?? 0;
@@ -26352,7 +26067,7 @@ async function listClaudeTranscriptMetadata(opts = {}) {
       let sessionDescription;
       if (t.isSubagent) {
         try {
-          const meta = JSON.parse(readFileSync26(t.transcriptPath.replace(/\.jsonl$/, ".meta.json"), "utf8"));
+          const meta = JSON.parse(readFileSync25(t.transcriptPath.replace(/\.jsonl$/, ".meta.json"), "utf8"));
           if (typeof meta.description === "string")
             sessionDescription = meta.description;
         } catch {}
@@ -26483,7 +26198,7 @@ var init_claude = __esm(() => {
 });
 
 // src/audit/cli-adapters/codex.ts
-import { statSync as statSync20 } from "node:fs";
+import { statSync as statSync19 } from "node:fs";
 async function listCodexTranscriptMetadata(opts = {}) {
   const projectFilter = opts.projects ? new Set(opts.projects) : null;
   const sinceMs = opts.sinceMs ?? 0;
@@ -26500,7 +26215,7 @@ async function listCodexTranscriptMetadata(opts = {}) {
         continue;
       let sizeBytes = 0;
       try {
-        sizeBytes = statSync20(s.path).size;
+        sizeBytes = statSync19(s.path).size;
       } catch {}
       if (!s.sessionId)
         continue;
@@ -26534,7 +26249,7 @@ var init_codex = __esm(() => {
 });
 
 // src/audit/cli-adapters/copilot.ts
-import { statSync as statSync21 } from "node:fs";
+import { statSync as statSync20 } from "node:fs";
 async function listCopilotTranscriptMetadata(opts = {}) {
   const projectFilter = opts.projects ? new Set(opts.projects) : null;
   const sinceMs = opts.sinceMs ?? 0;
@@ -26551,7 +26266,7 @@ async function listCopilotTranscriptMetadata(opts = {}) {
         continue;
       let sizeBytes = 0;
       try {
-        sizeBytes = statSync21(s.path).size;
+        sizeBytes = statSync20(s.path).size;
       } catch {}
       if (!s.sessionId)
         continue;
@@ -26585,7 +26300,7 @@ var init_copilot = __esm(() => {
 });
 
 // src/audit/cli-adapters/cursor.ts
-import { statSync as statSync22 } from "node:fs";
+import { statSync as statSync21 } from "node:fs";
 async function listCursorTranscriptMetadata(opts = {}) {
   const projectFilter = opts.projects ? new Set(opts.projects) : null;
   const sinceMs = opts.sinceMs ?? 0;
@@ -26602,7 +26317,7 @@ async function listCursorTranscriptMetadata(opts = {}) {
         continue;
       let sizeBytes = 0;
       try {
-        sizeBytes = statSync22(s.path).size;
+        sizeBytes = statSync21(s.path).size;
       } catch {}
       if (!s.sessionId)
         continue;
@@ -26843,7 +26558,7 @@ var init_opencode = __esm(() => {
 });
 
 // src/audit/cli-adapters/pi.ts
-import { statSync as statSync23 } from "node:fs";
+import { statSync as statSync22 } from "node:fs";
 async function listPiTranscriptMetadata(opts = {}) {
   const projectFilter = opts.projects ? new Set(opts.projects) : null;
   const sinceMs = opts.sinceMs ?? 0;
@@ -26860,7 +26575,7 @@ async function listPiTranscriptMetadata(opts = {}) {
         continue;
       let sizeBytes = 0;
       try {
-        sizeBytes = statSync23(s.path).size;
+        sizeBytes = statSync22(s.path).size;
       } catch {}
       if (!s.sessionId)
         continue;
@@ -27669,7 +27384,7 @@ function flattenToolInput(input, depth = 0) {
   }
   return "";
 }
-var LEAK_SCAN_VERSION = 5, ASSIGNMENT_RE, DOCS_LITERALS, SELF_OUTPUT_MARKERS, GATED_PATTERNS;
+var LEAK_SCAN_VERSION = 6, ASSIGNMENT_RE, DOCS_LITERALS, SELF_OUTPUT_MARKERS, GATED_PATTERNS;
 var init_leak_scan = __esm(() => {
   init_builtin_policies();
   ASSIGNMENT_RE = /(["']?)\b([A-Za-z_][A-Za-z0-9_]{0,127})\1([ \t]*(?::(?!\/\/)|=)[ \t]*)("[^"]*"|'[^']*'|[^\s;|&"']+)/g;
@@ -27694,6 +27409,176 @@ var init_leak_scan = __esm(() => {
   GATED_PATTERNS = SECRET_PATTERNS.map(([re, label]) => [re, label, literalPrefixOf(re.source)]);
 });
 
+// src/audit/leak-record.ts
+function upsertFinding(record, incoming) {
+  const { sighting, ...rest } = incoming;
+  const existing = record.findings.find((f) => f.id === rest.id);
+  if (!existing) {
+    record.findings.push({
+      ...rest,
+      firstSeen: sighting.at,
+      lastSeen: sighting.at,
+      occurrences: 1,
+      sightings: [sighting]
+    });
+    return { record, isNew: true };
+  }
+  const seen = existing.sightings.some((s) => s.sessionId === sighting.sessionId && s.at === sighting.at && s.mechanism.direction === sighting.mechanism.direction && s.mechanism.summary === sighting.mechanism.summary);
+  if (seen)
+    return { record, isNew: false };
+  existing.occurrences += 1;
+  if (sighting.at > existing.lastSeen)
+    existing.lastSeen = sighting.at;
+  if (sighting.at < existing.firstSeen)
+    existing.firstSeen = sighting.at;
+  existing.sightings.push(sighting);
+  existing.sightings.sort((a, b) => a.at.localeCompare(b.at));
+  if (existing.sightings.length > MAX_SIGHTINGS) {
+    existing.sightings.splice(1, existing.sightings.length - MAX_SIGHTINGS);
+  }
+  return { record, isNew: false };
+}
+function pruneRecord(record, nowMs) {
+  const cutoff = new Date(nowMs - FINDING_TTL_DAYS * 86400000).toISOString();
+  const live = record.findings.filter((f) => !f.lastSeen || !Number.isFinite(Date.parse(f.lastSeen)) || f.lastSeen >= cutoff);
+  live.sort((a, b) => a.lastSeen < b.lastSeen ? 1 : a.lastSeen > b.lastSeen ? -1 : 0);
+  record.findings = live.slice(0, MAX_FINDINGS);
+  return record;
+}
+function emptyRecord(salt, nowIso) {
+  return {
+    schemaVersion: LEAK_RECORD_SCHEMA_VERSION,
+    salt,
+    updatedAt: nowIso,
+    findings: []
+  };
+}
+function describeMechanism(toolName, direction, shortPath) {
+  const where = shortPath ? ` ${shortPath}` : "";
+  let summary;
+  if (direction === "result") {
+    summary = shortPath ? `appeared in the output of reading${where}` : "appeared in tool output";
+  } else {
+    switch (toolName) {
+      case "Read":
+        summary = `read from${where || " a file"}`;
+        break;
+      case "Write":
+        summary = `written to${where || " a file"}`;
+        break;
+      case "Edit":
+      case "NotebookEdit":
+        summary = `edited into${where || " a file"}`;
+        break;
+      case "Bash":
+        summary = "passed in a shell command";
+        break;
+      default:
+        summary = `sent to the ${toolName} tool`;
+    }
+  }
+  return { summary, toolName, direction };
+}
+var MAX_SIGHTINGS = 5, FINDING_TTL_DAYS = 90, MAX_FINDINGS = 500, LEAK_RECORD_SCHEMA_VERSION = 1;
+
+// src/audit/leak-store.ts
+import { randomBytes as randomBytes2 } from "node:crypto";
+import { existsSync as existsSync31, mkdirSync as mkdirSync20, readFileSync as readFileSync26 } from "node:fs";
+import { dirname as dirname16 } from "node:path";
+function readJson(path) {
+  try {
+    if (!existsSync31(path))
+      return null;
+    return JSON.parse(readFileSync26(path, "utf8"));
+  } catch {
+    return null;
+  }
+}
+function readLeakIdentity(home) {
+  const existing = readJson(auditLeakIdentityFile(home));
+  if (existing && typeof existing.salt === "string" && existing.salt.length >= 32) {
+    return {
+      salt: existing.salt,
+      dismissed: existing.dismissed ?? []
+    };
+  }
+  const minted = { salt: randomBytes2(32).toString("hex"), dismissed: [] };
+  writeLeakIdentity(minted, home);
+  return minted;
+}
+function writeLeakIdentity(identity, home) {
+  const path = auditLeakIdentityFile(home);
+  try {
+    mkdirSync20(dirname16(path), { recursive: true });
+    writeJsonAtomically(path, identity, { mode: FILE_MODE });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function sanitizeFinding(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return null;
+  const f = raw;
+  if (typeof f.id !== "string" || !isFindingId(f.id))
+    return null;
+  const fp = f.fingerprint;
+  if (!fp || typeof fp !== "object" || typeof fp.display !== "string" || typeof fp.label !== "string") {
+    return null;
+  }
+  const sightings = Array.isArray(f.sightings) ? f.sightings.filter((s) => {
+    if (!s || typeof s !== "object")
+      return false;
+    const m = s.mechanism;
+    return !!m && typeof m === "object" && typeof m.summary === "string";
+  }) : [];
+  return {
+    ...f,
+    fingerprint: {
+      display: fp.display,
+      label: fp.label,
+      length: typeof fp.length === "number" && Number.isFinite(fp.length) ? fp.length : 0,
+      attributed: fp.attributed === true
+    },
+    name: typeof f.name === "string" ? f.name : null,
+    firstSeen: typeof f.firstSeen === "string" ? f.firstSeen : "",
+    lastSeen: typeof f.lastSeen === "string" ? f.lastSeen : "",
+    occurrences: typeof f.occurrences === "number" && Number.isFinite(f.occurrences) ? f.occurrences : sightings.length,
+    sightings
+  };
+}
+function readLeakRecord(home) {
+  const identity = readLeakIdentity(home);
+  const raw = readJson(auditLeaksFile(home));
+  if (!raw || raw.schemaVersion !== LEAK_RECORD_SCHEMA_VERSION || !Array.isArray(raw.findings)) {
+    return emptyRecord(identity.salt, new Date().toISOString());
+  }
+  const findings = raw.findings.map(sanitizeFinding).filter((f) => f !== null);
+  return { ...raw, findings, salt: identity.salt };
+}
+function writeLeakRecord(record, home, nowMs = Date.now()) {
+  const path = auditLeaksFile(home);
+  try {
+    mkdirSync20(dirname16(path), { recursive: true });
+    const pruned = pruneRecord(record, nowMs);
+    pruned.updatedAt = new Date(nowMs).toISOString();
+    writeJsonAtomically(path, pruned, { mode: FILE_MODE });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function activeFindings(record, home) {
+  const dismissed = new Set(readLeakIdentity(home).dismissed);
+  return record.findings.filter((f) => !dismissed.has(f.id)).sort((a, b) => a.lastSeen < b.lastSeen ? 1 : a.lastSeen > b.lastSeen ? -1 : 0);
+}
+var FILE_MODE = 384;
+var init_leak_store = __esm(() => {
+  init_fp_home();
+  init_atomic_write();
+  init_leak_fingerprint();
+});
+
 // src/audit/redact-example.ts
 import { homedir as homedir27 } from "node:os";
 function maskTruncatedSecret(input) {
@@ -27837,7 +27722,7 @@ var init_redact_example = __esm(() => {
 
 // src/audit/cache.ts
 import { createHash as createHash8 } from "node:crypto";
-import { existsSync as existsSync33, mkdirSync as mkdirSync22, readFileSync as readFileSync27, writeFileSync as writeFileSync19, chmodSync as chmodSync5, openSync, readSync, closeSync } from "node:fs";
+import { existsSync as existsSync32, mkdirSync as mkdirSync21, readFileSync as readFileSync27, writeFileSync as writeFileSync18, chmodSync as chmodSync6, openSync, readSync, closeSync } from "node:fs";
 import { join as join33 } from "node:path";
 function getEngineVersion() {
   if (cachedEngineVersion)
@@ -27898,7 +27783,7 @@ function readCachedTranscript(transcriptPath, mtimeMs, sizeBytes) {
   if (sizeBytes === 0)
     return null;
   const cachePath = getCachePathFor(transcriptPath);
-  if (!existsSync33(cachePath))
+  if (!existsSync32(cachePath))
     return null;
   try {
     const raw = readFileSync27(cachePath, "utf-8");
@@ -27942,7 +27827,7 @@ function writeCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes, result,
     return;
   const cachePath = getCachePathFor(transcriptPath);
   try {
-    mkdirSync22(auditCacheDir(), { recursive: true });
+    mkdirSync21(auditCacheDir(), { recursive: true });
     const entry = {
       schemaVersion: CACHE_SCHEMA_VERSION,
       cachedAt: Date.now(),
@@ -27961,9 +27846,9 @@ function writeCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes, result,
         entry.detectorState = encodeDetectorState(resume.detectorState);
       }
     }
-    writeFileSync19(cachePath, JSON.stringify(entry), { encoding: "utf-8", mode: 384 });
+    writeFileSync18(cachePath, JSON.stringify(entry), { encoding: "utf-8", mode: 384 });
     try {
-      chmodSync5(cachePath, 384);
+      chmodSync6(cachePath, 384);
     } catch {}
   } catch {}
 }
@@ -28480,8 +28365,10 @@ async function runAuditInner(opts, startedAt) {
   }
   const coversAllHistory = opts.clis === undefined && opts.projects === undefined && opts.since === undefined && discoveryErrors === 0 && errors === 0 && skipped === 0;
   const newFindingIds = persistLeaks(perTranscript, coversAllHistory);
+  const leakIds = [...new Set(perTranscript.flatMap((t) => (t.leaks ?? []).map((leak) => leak.id)))];
   const auditResult = {
     version: 2,
+    leakIds,
     newLeakIds: newFindingIds,
     scannedAt: new Date(startedAt).toISOString(),
     scope: {
@@ -28537,11 +28424,11 @@ var init_audit = __esm(() => {
 import {
   closeSync as closeSync2,
   linkSync,
-  mkdirSync as mkdirSync23,
+  mkdirSync as mkdirSync22,
   openSync as openSync2,
   readFileSync as readFileSync28,
   unlinkSync as unlinkSync4,
-  writeFileSync as writeFileSync20,
+  writeFileSync as writeFileSync19,
   writeSync
 } from "node:fs";
 function acquireAuditLock(source, now = Date.now()) {
@@ -28616,7 +28503,7 @@ function writeLockExclusive(path, info) {
   const body = JSON.stringify(info);
   const staging = `${path}.${process.pid}.tmp`;
   try {
-    writeFileSync20(staging, body, { mode: 384 });
+    writeFileSync19(staging, body, { mode: 384 });
   } catch {
     return false;
   }
@@ -28650,8 +28537,8 @@ function createThenWrite(path, body) {
   }
 }
 function ensureRunDir() {
-  mkdirSync23(failproofaiHome(), { recursive: true });
-  mkdirSync23(runDir(), { recursive: true, mode: 448 });
+  mkdirSync22(failproofaiHome(), { recursive: true });
+  mkdirSync22(runDir(), { recursive: true, mode: 448 });
 }
 var AUDIT_LOCK_MAX_AGE_MS;
 var init_audit_lock = __esm(() => {
@@ -28660,7 +28547,7 @@ var init_audit_lock = __esm(() => {
 });
 
 // src/audit/dashboard-cache.ts
-import { existsSync as existsSync34, readFileSync as readFileSync29 } from "node:fs";
+import { existsSync as existsSync33, readFileSync as readFileSync29 } from "node:fs";
 function getCachePath() {
   return auditDashboardFile();
 }
@@ -28680,7 +28567,7 @@ function writeDashboardCache(params, result) {
 }
 function readDashboardCacheMeta() {
   const cachePath = getCachePath();
-  if (!existsSync34(cachePath))
+  if (!existsSync33(cachePath))
     return null;
   try {
     const raw = readFileSync29(cachePath, "utf-8");
@@ -28907,15 +28794,15 @@ var init_api_server_client = __esm(() => {
 });
 
 // lib/auth/auth-store.ts
-import { existsSync as existsSync35, readFileSync as readFileSync30, readdirSync as readdirSync19, rmSync as rmSync14 } from "node:fs";
-import { join as join34, resolve as resolve25 } from "node:path";
+import { existsSync as existsSync34, readFileSync as readFileSync30, readdirSync as readdirSync18, rmSync as rmSync13 } from "node:fs";
+import { join as join34, resolve as resolve24 } from "node:path";
 function getAuthFilePath() {
   const override = process.env.FAILPROOFAI_AUTH_DIR;
   return override ? join34(override, "session.json") : auditSessionFile();
 }
 function readAuth() {
   const p = getAuthFilePath();
-  if (!existsSync35(p))
+  if (!existsSync34(p))
     return null;
   try {
     const raw = readFileSync30(p, "utf-8");
@@ -28942,18 +28829,18 @@ function writeAuth(auth) {
 }
 function deleteAuth() {
   const p = getAuthFilePath();
-  if (existsSync35(p))
-    rmSync14(p, { force: true });
+  if (existsSync34(p))
+    rmSync13(p, { force: true });
   try {
     const root = migrationsDir();
-    if (!existsSync35(root))
+    if (!existsSync34(root))
       return;
-    for (const entry of readdirSync19(root)) {
+    for (const entry of readdirSync18(root)) {
       if (!entry.startsWith("backup-layout"))
         continue;
-      const copy = resolve25(root, entry, "auth.json");
-      if (existsSync35(copy))
-        rmSync14(copy, { force: true });
+      const copy = resolve24(root, entry, "auth.json");
+      if (existsSync34(copy))
+        rmSync13(copy, { force: true });
     }
   } catch {}
 }
@@ -29085,7 +28972,11 @@ function selectLeaks(findings, from, to) {
     const last = ts(f.lastSeen);
     if (last !== null && (last < lo || last > hi))
       continue;
-    const seen = f.sightings?.[f.sightings.length - 1];
+    const seen = f.sightings?.reduce((latest, candidate) => {
+      if (!latest)
+        return candidate;
+      return (ts(candidate.at) ?? 0) >= (ts(latest.at) ?? 0) ? candidate : latest;
+    }, undefined);
     out.push({
       id: f.id,
       display: f.fingerprint?.display ?? "[credential]",
@@ -29117,7 +29008,7 @@ function buildHarmReport(result, lastReportedAt, intervalDays, leakFindings = []
     window_from: from.toISOString(),
     window_to: windowTo.toISOString(),
     harmful: selectHarmful(result, from, windowTo, { includeUnplaceable: isFirstReport }),
-    leaks: selectLeaks(leakFindings, from, windowTo)
+    leaks: selectLeaks(leakFindings, from, windowTo).slice(0, 1)
   };
 }
 var HARMFUL_SEVERITIES, ALSO_HARMFUL;
@@ -29128,12 +29019,12 @@ var init_harm_report = __esm(() => {
 });
 
 // src/audit/machine-store.ts
-import { existsSync as existsSync36, readFileSync as readFileSync31, rmSync as rmSync15 } from "node:fs";
+import { existsSync as existsSync35, readFileSync as readFileSync31, rmSync as rmSync14 } from "node:fs";
 import { hostname as hostname5 } from "node:os";
 import { randomUUID as randomUUID4 } from "node:crypto";
 function readMachineIdentity(home) {
   const path = auditMachineFile(home);
-  if (!existsSync36(path))
+  if (!existsSync35(path))
     return null;
   try {
     const parsed = JSON.parse(readFileSync31(path, "utf8"));
@@ -29182,20 +29073,20 @@ var init_machine_store = __esm(() => {
 // src/audit/report-harm.ts
 async function reportHarm(result) {
   let auto = false;
-  let consentedAt;
   let intervalDays = 7;
   try {
     const config = readConfig();
     auto = config.audit.auto;
-    consentedAt = config.audit.reportsConsentedAt;
     intervalDays = config.audit.intervalDays;
   } catch {
     return { kind: "disabled" };
   }
   if (!auto)
     return { kind: "disabled" };
-  if (consentedAt === undefined)
-    return { kind: "consent-required" };
+  const prior = readMachineIdentity();
+  const report = buildHarmReport(result, prior?.last_reported_at, intervalDays, activeFindings(readLeakRecord()));
+  if (report.leaks.length === 0)
+    return { kind: "no-leak" };
   const auth = await getValidAccessToken();
   if (!auth) {
     return { kind: "signed-out" };
@@ -29206,8 +29097,6 @@ async function reportHarm(result) {
   } catch (err) {
     return { kind: "failed", error: err instanceof Error ? err.message : String(err) };
   }
-  const report = buildHarmReport(result, identity.last_reported_at, intervalDays, activeFindings(readLeakRecord()));
-  const hits = report.harmful.reduce((n, p) => n + p.hits, 0);
   try {
     const res = await submitAuditReport(auth.access_token, {
       machine_id: identity.machine_id,
@@ -29221,7 +29110,7 @@ async function reportHarm(result) {
     try {
       recordReportWatermark(res.next_window_from);
     } catch {}
-    return res.emailed ? { kind: "sent", hits } : { kind: "held", hits, reason: res.reason ?? "not_sent" };
+    return res.emailed ? { kind: "sent", leaks: report.leaks.length } : { kind: "held", leaks: report.leaks.length, reason: res.reason ?? "not_sent" };
   } catch (err) {
     const error = err instanceof AuthApiError ? `${err.code}: ${err.message}` : err instanceof Error ? err.message : String(err);
     return { kind: "failed", error };
@@ -29230,17 +29119,16 @@ async function reportHarm(result) {
 function describeOutcome2(outcome) {
   switch (outcome.kind) {
     case "disabled":
+    case "no-leak":
       return null;
-    case "consent-required":
-      return "failproofai: scheduled scans are on, but emailing what they find needs a fresh opt-in — run `failproofai audit --schedule` (or visit /settings) to turn digests on";
     case "signed-out":
-      return "failproofai: emailed reports are on but this machine is signed out — run `failproofai audit --schedule` or visit /settings to resume them";
+      return "failproofai: a credential exposure was found, but no email is configured — run `failproofai audit --schedule --email you@example.com`";
     case "sent":
-      return `failproofai: emailed a harm digest (${outcome.hits} finding${outcome.hits === 1 ? "" : "s"})`;
+      return "failproofai: emailed the most recent credential exposure";
     case "held":
-      return `failproofai: ${outcome.hits} finding${outcome.hits === 1 ? "" : "s"} reported, no email (${outcome.reason})`;
+      return `failproofai: credential exposure reported, no email (${outcome.reason})`;
     case "failed":
-      return `failproofai: could not send the harm report: ${outcome.error}`;
+      return `failproofai: could not send the credential alert: ${outcome.error}`;
   }
 }
 var init_report_harm = __esm(() => {
@@ -29514,6 +29402,15 @@ var init_desktop_notify = __esm(() => {
   ];
 });
 
+// src/hooks/notice.ts
+function desktopLeakNotice(email = "held") {
+  const followUp = email === "sent" ? "A masked alert was also sent to your email." : email === "missing" ? "Add email alerts with: failproofai audit --schedule --email you@example.com" : email === "failed" ? "Email delivery failed this time; the local result is still available." : "Email was not sent for this run.";
+  return {
+    title: "failproofai audit needs review",
+    body: "Possible credential exposure was found in your agent transcripts. " + `Run failproofai audit to verify the matches and rotate anything real. ${followUp}`
+  };
+}
+
 // src/audit/cli.ts
 function colorOn() {
   if (process.env.NO_COLOR && process.env.NO_COLOR !== "")
@@ -29706,10 +29603,8 @@ var init_cli = __esm(() => {
   init_report_harm();
   init_desktop_notify();
   init_macos_notifier();
-  init_leak_notice();
-  init_notice();
-  init_leak_store();
   init_fp_config();
+  init_auth_store();
   init_tui();
   init_package();
   AUDIT_STAGES = [
@@ -29728,9 +29623,9 @@ var init_cli = __esm(() => {
 });
 
 // src/hooks/configure-wizard.ts
-import { existsSync as existsSync37, mkdirSync as mkdirSync24, writeFileSync as writeFileSync21, readFileSync as readFileSync32 } from "node:fs";
+import { existsSync as existsSync36, mkdirSync as mkdirSync23, writeFileSync as writeFileSync20, readFileSync as readFileSync32 } from "node:fs";
 import { homedir as homedir28 } from "node:os";
-import { dirname as dirname17, resolve as resolve26, sep as sep5 } from "node:path";
+import { dirname as dirname17, resolve as resolve25, sep as sep5 } from "node:path";
 async function emit(event, props) {
   try {
     await trackHookEvent2(getInstanceId2(), event, props);
@@ -29753,7 +29648,7 @@ function setCustomPoliciesEnabled(scope, cwd, enabled) {
   const path = getConfigPathForScope(scope, cwd);
   let config = {};
   try {
-    if (existsSync37(path))
+    if (existsSync36(path))
       config = JSON.parse(readFileSync32(path, "utf8"));
   } catch {
     return;
@@ -29763,7 +29658,7 @@ function setCustomPoliciesEnabled(scope, cwd, enabled) {
   else
     config.customPoliciesEnabled = false;
   try {
-    writeFileSync21(path, JSON.stringify(config, null, 2) + `
+    writeFileSync20(path, JSON.stringify(config, null, 2) + `
 `, "utf8");
   } catch {}
 }
@@ -29794,7 +29689,7 @@ function describeCustomPolicies(cwd) {
   const scopes = [];
   let fileCount = 0;
   const dirs = [
-    { dir: resolve26(cwd, ".failproofai", "policies"), label: "project" },
+    { dir: resolve25(cwd, ".failproofai", "policies"), label: "project" },
     { dir: customPoliciesDir(), label: "global" }
   ];
   for (const { dir, label } of dirs) {
@@ -29805,7 +29700,7 @@ function describeCustomPolicies(cwd) {
       fileCount += found.length;
     }
     for (const name of findSkippedPolicyFiles(dir)) {
-      warnings.push(`! ${homeify(resolve26(dir, name))} is NOT loaded — rename to ` + `${name.replace(/\.(js|mjs|ts)$/, "-policies.$1")}`);
+      warnings.push(`! ${homeify(resolve25(dir, name))} is NOT loaded — rename to ` + `${name.replace(/\.(js|mjs|ts)$/, "-policies.$1")}`);
     }
   }
   return { active, warnings, fileCount, scopes };
@@ -29898,8 +29793,8 @@ function firstRunMarkerPath() {
 }
 function markLauncherSeen() {
   try {
-    mkdirSync24(dirname17(firstRunMarkerPath()), { recursive: true });
-    writeFileSync21(firstRunMarkerPath(), "1", "utf8");
+    mkdirSync23(dirname17(firstRunMarkerPath()), { recursive: true });
+    writeFileSync20(firstRunMarkerPath(), "1", "utf8");
   } catch {}
 }
 function retryProbe() {
@@ -29977,6 +29872,8 @@ async function runConfigureWizard(io = {}, answers = {}) {
   const cwd = process.cwd();
   const unattended = !stdin.isTTY || !stdout.isTTY;
   const preAnswered = Boolean(answers.token);
+  const initialAudit = readConfigRaw().raw.audit;
+  const hadExplicitAuditAuto = !!initialAudit && typeof initialAudit === "object" && !Array.isArray(initialAudit) && typeof initialAudit.auto === "boolean";
   if (typeof process.getuid === "function" && process.getuid() === 0 && process.env.SUDO_USER) {
     stdout.write(`Run failproofai config as ${process.env.SUDO_USER}, not under sudo.
 ` + `Everything it configures is per-user — hooks, policies and the daemon's own
@@ -30299,8 +30196,21 @@ Hooks keep enforcing; scheduled audits stay off until it is.
   }
   if (daemonInstalled) {
     setDaemonConfigured(true, version2);
+    if (!hadExplicitAuditAuto) {
+      try {
+        updateConfig({ audit: { auto: true } });
+      } catch {}
+    }
     pruneOldDaemonBinaries();
-    installMacNotifier();
+    const notifier = installMacNotifier();
+    if (process.platform === "darwin" && !notifier.installed) {
+      hookLogWarn(`macOS notification helper was not installed: ${notifier.reason ?? "unknown error"}`);
+      stdout.write(`
+System notifications could not be installed. Scheduled scans and email alerts
+still work; re-run \`failproofai config\` after checking the local LaunchAgent.
+
+`);
+    }
   }
   const applied = emit("configure_applied", {
     target,
@@ -30388,21 +30298,22 @@ var init_configure_wizard = __esm(() => {
   init_package();
   init_onboarding_attempt();
   init_onboarding_lock();
+  init_fp_config();
   POLICY_LIST_INDENT = " ".repeat(15);
 });
 
 // src/hooks/flush-cli.ts
-import { existsSync as existsSync38, mkdirSync as mkdirSync25, writeFileSync as writeFileSync22, readdirSync as readdirSync20 } from "node:fs";
+import { existsSync as existsSync37, mkdirSync as mkdirSync24, writeFileSync as writeFileSync21, readdirSync as readdirSync19 } from "node:fs";
 import { dirname as dirname18, join as join35 } from "node:path";
 function flushRequestPath2(home) {
   return join35(failproofaiHome(home), "state", "flush-request.json");
 }
 function spoolDirs2(home) {
   const root = spoolDir(home);
-  if (!existsSync38(root))
+  if (!existsSync37(root))
     return [];
   try {
-    return readdirSync20(root, { withFileTypes: true }).filter((e) => e.isDirectory() && e.name !== "failed").map((e) => join35(root, e.name));
+    return readdirSync19(root, { withFileTypes: true }).filter((e) => e.isDirectory() && e.name !== "failed").map((e) => join35(root, e.name));
   } catch {
     return [];
   }
@@ -30411,7 +30322,7 @@ function pendingBatches2(home) {
   let n = 0;
   for (const dir of spoolDirs2(home)) {
     try {
-      n += readdirSync20(dir).filter((f) => f.endsWith(".jsonl")).length;
+      n += readdirSync19(dir).filter((f) => f.endsWith(".jsonl")).length;
     } catch {}
   }
   return n;
@@ -30468,8 +30379,8 @@ async function runFlushCommand2(opts = {}) {
     return { exitCode: 0, pending: 0, lines: ["Nothing spooled — everything already delivered."] };
   }
   const path = flushRequestPath2(home);
-  mkdirSync25(dirname18(path), { recursive: true });
-  writeFileSync22(path, `${JSON.stringify({ requestedAtMs: Date.now() }, null, 2)}
+  mkdirSync24(dirname18(path), { recursive: true });
+  writeFileSync21(path, `${JSON.stringify({ requestedAtMs: Date.now() }, null, 2)}
 `, {
     mode: 384
   });
@@ -30500,7 +30411,7 @@ var init_flush_cli2 = __esm(() => {
 });
 
 // src/hooks/backfill-cli.ts
-import { existsSync as existsSync39, mkdirSync as mkdirSync26, writeFileSync as writeFileSync23, readdirSync as readdirSync21, statSync as statSync24 } from "node:fs";
+import { existsSync as existsSync38, mkdirSync as mkdirSync25, writeFileSync as writeFileSync22, readdirSync as readdirSync20, statSync as statSync23 } from "node:fs";
 import { dirname as dirname19, join as join36 } from "node:path";
 function backfillRequestPath(home) {
   return join36(failproofaiHome(home), "state", "backfill-request.json");
@@ -30509,7 +30420,7 @@ function surveySessions(sinceMs, homeDir) {
   const out = [];
   for (const { cli, dir } of SESSION_DIRS) {
     const root = join36(homeDir, dir);
-    if (!existsSync39(root))
+    if (!existsSync38(root))
       continue;
     let files = 0;
     let newest = 0;
@@ -30518,7 +30429,7 @@ function surveySessions(sinceMs, homeDir) {
         return;
       let entries;
       try {
-        entries = readdirSync21(d, { withFileTypes: true });
+        entries = readdirSync20(d, { withFileTypes: true });
       } catch {
         return;
       }
@@ -30529,7 +30440,7 @@ function surveySessions(sinceMs, homeDir) {
           continue;
         }
         try {
-          const st = statSync24(p);
+          const st = statSync23(p);
           if (st.mtimeMs >= sinceMs) {
             files += 1;
             newest = Math.max(newest, st.mtimeMs);
@@ -30547,7 +30458,7 @@ function runBackfillCommand(opts = {}) {
   const now = opts.now ?? Date.now();
   const sinceMs = opts.sinceMs ?? now - DEFAULT_BACKFILL_DAYS * 24 * 60 * 60 * 1000;
   const home = failproofaiHome();
-  if (!existsSync39(home)) {
+  if (!existsSync38(home)) {
     return {
       exitCode: 1,
       lines: [`No failproofai home at ${home}. Run \`failproofai config\` first.`]
@@ -30602,8 +30513,8 @@ function runBackfillCommand(opts = {}) {
   }
   try {
     const path = backfillRequestPath();
-    mkdirSync26(dirname19(path), { recursive: true });
-    writeFileSync23(path, `${JSON.stringify({ sinceMs, requestedAtMs: now }, null, 2)}
+    mkdirSync25(dirname19(path), { recursive: true });
+    writeFileSync22(path, `${JSON.stringify({ sinceMs, requestedAtMs: now }, null, 2)}
 `, {
       mode: 384
     });
@@ -30646,7 +30557,7 @@ var init_backfill_cli = __esm(() => {
 
 // src/hooks/harness-cli.ts
 import { homedir as homedir29 } from "node:os";
-import { resolve as resolve27 } from "node:path";
+import { resolve as resolve26 } from "node:path";
 function unknownHarness(name) {
   return fail([
     `Unknown harness: ${name}`,
@@ -30690,7 +30601,7 @@ function comparableLabel(raw) {
 }
 function comparablePath(raw) {
   const home = homedir29();
-  const expanded = raw === "~" ? home : raw.startsWith("~/") ? resolve27(home, raw.slice(2)) : raw;
+  const expanded = raw === "~" ? home : raw.startsWith("~/") ? resolve26(home, raw.slice(2)) : raw;
   return expanded.replace(/\/+$/, "");
 }
 function effectiveLabel(entry) {
@@ -30878,7 +30789,7 @@ var init_harness_cli = __esm(() => {
 });
 
 // src/hooks/fp-config.ts
-import { chmodSync as chmodSync6, existsSync as existsSync40, mkdirSync as mkdirSync27, readFileSync as readFileSync33, statSync as statSync25, writeFileSync as writeFileSync24 } from "node:fs";
+import { chmodSync as chmodSync7, existsSync as existsSync39, mkdirSync as mkdirSync26, readFileSync as readFileSync33, statSync as statSync24, writeFileSync as writeFileSync23 } from "node:fs";
 function detectLayout2() {
   const raw = readVersionFile2();
   if (raw) {
@@ -30886,17 +30797,17 @@ function detectLayout2() {
       return { kind: "current", version: raw };
     return raw.layout > LAYOUT_VERSION ? { kind: "future", found: raw.layout } : { kind: "stale", found: raw.layout };
   }
-  if (existsSync40(configFile())) {
+  if (existsSync39(configFile())) {
     const layoutThreePositions = [
       legacy.authJson(),
       legacy.nextAudit(),
       legacy.auditSchedule()
     ];
-    if (layoutThreePositions.some((p) => existsSync40(p)))
+    if (layoutThreePositions.some((p) => existsSync39(p)))
       return { kind: "stale", found: 3 };
     return { kind: "current", version: { layout: LAYOUT_VERSION, cli: "" }, inferred: true };
   }
-  if (existsSync40(legacy.configToml()))
+  if (existsSync39(legacy.configToml()))
     return { kind: "stale", found: 2 };
   const layoutOneMarkers = [
     legacy.policyConfig(),
@@ -30907,7 +30818,7 @@ function detectLayout2() {
     legacy.ingestCredentials(),
     legacy.auditDashboard()
   ];
-  return layoutOneMarkers.some((p) => existsSync40(p)) ? { kind: "stale", found: 1 } : { kind: "absent" };
+  return layoutOneMarkers.some((p) => existsSync39(p)) ? { kind: "stale", found: 1 } : { kind: "absent" };
 }
 function readLegacyTomlVersion2(text) {
   const layout = Number(/^\s*layout\s*=\s*(\d+)\s*$/m.exec(text)?.[1]);
@@ -30948,16 +30859,16 @@ var init_fp_home2 = () => {};
 
 // src/hooks/migrations.ts
 import {
-  chmodSync as chmodSync7,
+  chmodSync as chmodSync8,
   copyFileSync as copyFileSync3,
-  existsSync as existsSync41,
-  mkdirSync as mkdirSync28,
+  existsSync as existsSync40,
+  mkdirSync as mkdirSync27,
   readFileSync as readFileSync34,
   renameSync as renameSync9,
-  rmSync as rmSync16,
-  writeFileSync as writeFileSync25
+  rmSync as rmSync15,
+  writeFileSync as writeFileSync24
 } from "node:fs";
-import { basename as basename7, dirname as dirname20, join as join37, resolve as resolve28 } from "node:path";
+import { basename as basename7, dirname as dirname20, join as join37, resolve as resolve27 } from "node:path";
 function migrateToLayout42() {
   const moves = [
     { from: legacy.authJson(), to: auditSessionFile() },
@@ -30973,13 +30884,13 @@ function migrateToLayout42() {
   }
   const migrated = [];
   for (const { from, to } of moves) {
-    if (!existsSync41(from))
+    if (!existsSync40(from))
       continue;
-    if (existsSync41(to)) {
-      rmSync16(from, { force: true });
+    if (existsSync40(to)) {
+      rmSync15(from, { force: true });
       continue;
     }
-    mkdirSync28(dirname20(to), { recursive: true });
+    mkdirSync27(dirname20(to), { recursive: true });
     try {
       renameSync9(from, to);
     } catch {
@@ -30987,19 +30898,19 @@ function migrateToLayout42() {
         copyFileSync3(from, to);
       } catch (err) {
         try {
-          rmSync16(to, { force: true });
+          rmSync15(to, { force: true });
         } catch {}
         throw err;
       }
-      rmSync16(from, { force: true });
+      rmSync15(from, { force: true });
     }
     migrated.push(`${basename7(from)} → audit/${basename7(to)}`);
   }
   for (const secret of [auditSessionFile()]) {
-    if (!existsSync41(secret))
+    if (!existsSync40(secret))
       continue;
     try {
-      chmodSync7(secret, 384);
+      chmodSync8(secret, 384);
     } catch {}
   }
   writeVersionFile({ layout: 4 });
@@ -31030,9 +30941,9 @@ function readLedger2() {
 }
 function appendLedger2(entry) {
   try {
-    mkdirSync28(migrationsDir(), { recursive: true });
+    mkdirSync27(migrationsDir(), { recursive: true });
     const all = [...readLedger2(), entry];
-    writeFileSync25(migrationLedgerFile(), `${JSON.stringify(all, null, 2)}
+    writeFileSync24(migrationLedgerFile(), `${JSON.stringify(all, null, 2)}
 `, "utf8");
   } catch {}
 }
@@ -31044,12 +30955,12 @@ function pruneMigratedCredentials2(from) {
   for (let layout = from;layout < LAYOUT_VERSION; layout++) {
     for (const { as, landsAt } of PRUNED_AFTER_SUCCESS2) {
       try {
-        if (!existsSync41(landsAt()))
+        if (!existsSync40(landsAt()))
           continue;
-        const copy = resolve28(migrationBackupDir(layout), as);
-        if (!existsSync41(copy))
+        const copy = resolve27(migrationBackupDir(layout), as);
+        if (!existsSync40(copy))
           continue;
-        rmSync16(copy, { force: true });
+        rmSync15(copy, { force: true });
         pruned.push(as);
       } catch {}
     }
@@ -31060,7 +30971,7 @@ function filesToBackUp2() {
   const seen = new Map;
   for (const f of [...BACKED_UP2, ...BACKED_UP_LEGACY2]) {
     const path = f.at();
-    if (existsSync41(path))
+    if (existsSync40(path))
       seen.set(path, backupNameOf2(f));
   }
   return [...seen].map(([path, as]) => ({ path, as }));
@@ -31069,14 +30980,14 @@ function backupBeforeMigrating2(from) {
   const dir = migrationBackupDir(from);
   const saved = [];
   try {
-    rmSync16(dir, { recursive: true, force: true });
-    mkdirSync28(dir, { recursive: true });
+    rmSync15(dir, { recursive: true, force: true });
+    mkdirSync27(dir, { recursive: true });
   } catch {
     return [];
   }
   for (const { path: source, as } of filesToBackUp2()) {
     try {
-      copyFileSync3(source, resolve28(dir, as));
+      copyFileSync3(source, resolve27(dir, as));
       saved.push(as);
     } catch {}
   }
@@ -31214,16 +31125,16 @@ var init_migrations2 = __esm(() => {
 
 // src/hooks/daemon-service.ts
 import {
-  existsSync as existsSync42,
-  mkdirSync as mkdirSync29,
+  existsSync as existsSync41,
+  mkdirSync as mkdirSync28,
   mkdtempSync as mkdtempSync2,
   readFileSync as readFileSync35,
-  writeFileSync as writeFileSync26,
+  writeFileSync as writeFileSync25,
   unlinkSync as unlinkSync5,
-  rmSync as rmSync17
+  rmSync as rmSync16
 } from "node:fs";
 import { homedir as homedir30, tmpdir as tmpdir3, userInfo as userInfo2 } from "node:os";
-import { resolve as resolve29 } from "node:path";
+import { resolve as resolve28 } from "node:path";
 import { execFileSync as execFileSync4 } from "node:child_process";
 function isDaemonSupportedPlatform2() {
   return process.platform === "linux" || process.platform === "darwin";
@@ -31239,13 +31150,13 @@ function resolveFailproofaidBinaryPath2() {
   if (process.env.FAILPROOFAI_DAEMON_BINARY)
     return process.env.FAILPROOFAI_DAEMON_BINARY;
   const downloaded = installedBinaryPath();
-  if (existsSync42(downloaded))
+  if (existsSync41(downloaded))
     return downloaded;
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (packageRoot) {
     for (const profile of ["release", "debug"]) {
-      const candidate = resolve29(packageRoot, "target", profile, "failproofaid");
-      if (existsSync42(candidate))
+      const candidate = resolve28(packageRoot, "target", profile, "failproofaid");
+      if (existsSync41(candidate))
         return candidate;
     }
   }
@@ -31275,8 +31186,8 @@ function resolveWorkerCommand2() {
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (!packageRoot)
     return null;
-  const workerScript = resolve29(packageRoot, "dist", "worker.mjs");
-  if (!existsSync42(workerScript))
+  const workerScript = resolve28(packageRoot, "dist", "worker.mjs");
+  if (!existsSync41(workerScript))
     return null;
   return `${shellQuote2(process.execPath)} ${shellQuote2(workerScript)}`;
 }
@@ -31286,8 +31197,8 @@ function resolveCliCommand2() {
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (!packageRoot)
     return null;
-  const cliScript = resolve29(packageRoot, "dist", "cli.mjs");
-  if (!existsSync42(cliScript))
+  const cliScript = resolve28(packageRoot, "dist", "cli.mjs");
+  if (!existsSync41(cliScript))
     return null;
   return `${shellQuote2(process.execPath)} ${shellQuote2(cliScript)}`;
 }
@@ -31300,8 +31211,8 @@ function workerScriptPath2() {
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (!packageRoot)
     return null;
-  const workerScript = resolve29(packageRoot, "dist", "worker.mjs");
-  return existsSync42(workerScript) ? workerScript : null;
+  const workerScript = resolve28(packageRoot, "dist", "worker.mjs");
+  return existsSync41(workerScript) ? workerScript : null;
 }
 function assertUnitSafe2(value, field) {
   if (UNIT_UNSAFE_RE2.test(value)) {
@@ -31327,10 +31238,10 @@ function systemdUnitDir2() {
   return process.env.FAILPROOFAI_SYSTEMD_DIR || "/etc/systemd/system";
 }
 function systemdUnitPath2(user = serviceUser2()) {
-  return resolve29(systemdUnitDir2(), systemdUnitName2(user));
+  return resolve28(systemdUnitDir2(), systemdUnitName2(user));
 }
 function legacySystemdUserUnitPath2() {
-  return resolve29(homedir30(), ".config", "systemd", "user", "failproofaid.service");
+  return resolve28(homedir30(), ".config", "systemd", "user", "failproofaid.service");
 }
 function launchdLabel2(user = serviceUser2()) {
   return `ai.failproof.failproofaid.${user}`;
@@ -31339,7 +31250,7 @@ function launchdPlistPath2(user = serviceUser2()) {
   return `/Library/LaunchDaemons/${launchdLabel2(user)}.plist`;
 }
 function legacyLaunchAgentPlistPath2() {
-  return resolve29(homedir30(), "Library", "LaunchAgents", "ai.failproof.failproofaid.plist");
+  return resolve28(homedir30(), "Library", "LaunchAgents", "ai.failproof.failproofaid.plist");
 }
 function legacySharedLaunchDaemonPath2() {
   return "/Library/LaunchDaemons/ai.failproof.failproofaid.plist";
@@ -31377,20 +31288,20 @@ function runPrivileged2(command, args) {
   execFileSync4(cmd, argv, { stdio: "ignore", timeout: SERVICE_CMD_TIMEOUT_MS2 });
 }
 function writePrivilegedFile2(destination, contents, mode = "0644") {
-  const stagingDir = mkdtempSync2(resolve29(tmpdir3(), "failproofaid-stage-"));
-  const staging = resolve29(stagingDir, "service-definition");
+  const stagingDir = mkdtempSync2(resolve28(tmpdir3(), "failproofaid-stage-"));
+  const staging = resolve28(stagingDir, "service-definition");
   try {
-    writeFileSync26(staging, contents, "utf8");
+    writeFileSync25(staging, contents, "utf8");
     runPrivileged2("install", ["-m", mode, staging, destination]);
   } finally {
-    rmSync17(stagingDir, { recursive: true, force: true });
+    rmSync16(stagingDir, { recursive: true, force: true });
   }
 }
 function removeLegacyUserService2() {
   try {
     if (process.platform === "linux") {
       const legacy = legacySystemdUserUnitPath2();
-      if (!existsSync42(legacy))
+      if (!existsSync41(legacy))
         return;
       try {
         execFileSync4("systemctl", ["--user", "disable", "--now", "failproofaid.service"], {
@@ -31407,7 +31318,7 @@ function removeLegacyUserService2() {
       } catch {}
     } else {
       const legacyAgent = legacyLaunchAgentPlistPath2();
-      if (existsSync42(legacyAgent)) {
+      if (existsSync41(legacyAgent)) {
         try {
           execFileSync4("launchctl", ["unload", "-w", legacyAgent], {
             stdio: "ignore",
@@ -31417,7 +31328,7 @@ function removeLegacyUserService2() {
         unlinkSync5(legacyAgent);
       }
       const legacyDaemon = legacySharedLaunchDaemonPath2();
-      if (existsSync42(legacyDaemon)) {
+      if (existsSync41(legacyDaemon)) {
         try {
           runPrivileged2("launchctl", ["unload", "-w", legacyDaemon]);
         } catch {}
@@ -31434,7 +31345,7 @@ function systemdUnitContents2(binaryPath, workerCmd, cliCmd = null) {
   const user = assertUnitSafe2(serviceUser2(), "User");
   assertUnitSafe2(binaryPath, "ExecStart");
   assertUnitSafe2(homedir30(), "HOME");
-  const conditionPaths = [binaryPath, workerScriptPath2()].filter((p) => typeof p === "string" && existsSync42(p));
+  const conditionPaths = [binaryPath, workerScriptPath2()].filter((p) => typeof p === "string" && existsSync41(p));
   const conditionLines = conditionPaths.map((p) => `ConditionPathExists=${assertUnitSafe2(p, "ConditionPathExists")}
 `).join("");
   return `[Unit]
@@ -31492,9 +31403,9 @@ ${env.map(([key, value]) => `        <key>${key}</key>
     <key>UserName</key>
     <string>${escapeXml3(serviceUser2())}</string>
 ${envBlock}    <key>StandardOutPath</key>
-    <string>${escapeXml3(resolve29(logDir, "failproofaid.log"))}</string>
+    <string>${escapeXml3(resolve28(logDir, "failproofaid.log"))}</string>
     <key>StandardErrorPath</key>
-    <string>${escapeXml3(resolve29(logDir, "failproofaid.err.log"))}</string>
+    <string>${escapeXml3(resolve28(logDir, "failproofaid.err.log"))}</string>
 </dict>
 </plist>
 `;
@@ -31540,7 +31451,7 @@ async function installDaemonService2() {
     } else {
       const plistPath = launchdPlistPath2();
       const logDir = logsDir();
-      mkdirSync29(logDir, { recursive: true });
+      mkdirSync28(logDir, { recursive: true });
       try {
         runPrivileged2("launchctl", ["unload", plistPath]);
       } catch {}
@@ -31639,7 +31550,7 @@ function daemonServiceStatus2() {
   if (!isDaemonSupportedPlatform2())
     return "unsupported-platform";
   if (process.platform === "linux") {
-    if (!existsSync42(systemdUnitPath2()))
+    if (!existsSync41(systemdUnitPath2()))
       return "not-installed";
     try {
       const out = execFileSync4("systemctl", ["is-active", systemdUnitName2()], {
@@ -31652,7 +31563,7 @@ function daemonServiceStatus2() {
     }
   }
   const plistPath = launchdPlistPath2();
-  if (!existsSync42(plistPath))
+  if (!existsSync41(plistPath))
     return "not-installed";
   try {
     const root = typeof process.getuid === "function" && process.getuid() === 0;
@@ -31682,7 +31593,7 @@ var init_daemon_service2 = __esm(() => {
 });
 
 // src/hooks/uninstall-cli.ts
-import { existsSync as existsSync43, rmSync as rmSync18 } from "node:fs";
+import { existsSync as existsSync42, rmSync as rmSync17 } from "node:fs";
 function survey(cwd) {
   const clis = [];
   for (const id of listInstallableIds()) {
@@ -31703,9 +31614,9 @@ function survey(cwd) {
   return {
     clis,
     servicePath,
-    serviceInstalled: !!servicePath && existsSync43(servicePath),
+    serviceInstalled: !!servicePath && existsSync42(servicePath),
     daemonConfigured,
-    homeExists: existsSync43(failproofaiHome())
+    homeExists: existsSync42(failproofaiHome())
   };
 }
 async function runUninstallCommand(opts = {}) {
@@ -31734,6 +31645,7 @@ async function runUninstallCommand(opts = {}) {
   if (found.daemonConfigured) {
     plan.push(`  • stop requiring the daemon (policies go back to evaluating in-process)`);
   }
+  let removeDaemon = opts.purge === true;
   if (found.serviceInstalled) {
     plan.push(opts.purge || opts.yes ? `  • stop, disable and delete the service at ${found.servicePath} — needs sudo` : `  • ask whether to remove the service at ${found.servicePath} (kept unless you say so)`);
   }
@@ -31793,7 +31705,7 @@ async function runUninstallCommand(opts = {}) {
     }
   }
   if (found.serviceInstalled) {
-    const removeDaemon = opts.purge || opts.yes ? true : await opts.confirmDaemon?.() ?? false;
+    removeDaemon = opts.purge || opts.yes ? true : await opts.confirmDaemon?.() ?? false;
     if (!removeDaemon) {
       lines.push(`• kept the daemon service at ${found.servicePath}`, `  Remove it later with: failproofai uninstall --purge`);
     } else {
@@ -31803,7 +31715,7 @@ async function runUninstallCommand(opts = {}) {
       } catch {}
       try {
         await uninstallDaemonService();
-        if (found.servicePath && existsSync43(found.servicePath)) {
+        if (found.servicePath && existsSync42(found.servicePath)) {
           failures.push(`the service at ${found.servicePath} is still there (most often: no sudo). ` + `Remove it with the commands below.`);
         } else {
           lines.push(`✓ stopped and removed the daemon service`);
@@ -31813,12 +31725,12 @@ async function runUninstallCommand(opts = {}) {
       }
     }
   }
-  if (opts.purge || found.serviceInstalled && (opts.purge || opts.yes)) {
+  if (opts.purge || removeDaemon) {
     uninstallMacNotifier();
   }
   if (opts.purge && found.homeExists) {
     try {
-      rmSync18(failproofaiHome(), { recursive: true, force: true });
+      rmSync17(failproofaiHome(), { recursive: true, force: true });
       purged = true;
       lines.push(`✓ deleted ${failproofaiHome()}`);
     } catch (err) {
@@ -31829,7 +31741,7 @@ async function runUninstallCommand(opts = {}) {
     lines.push(``, `Not everything could be removed:`);
     for (const f of failures)
       lines.push(`  ✗ ${f}`);
-    if (found.servicePath && existsSync43(found.servicePath)) {
+    if (found.servicePath && existsSync42(found.servicePath)) {
       lines.push(``, `To remove the service by hand:`, ...manualServiceRemoval(found.servicePath), ``, `(\`${daemonStatusCommand()}\` shows its current state.)`);
     }
     return { exitCode: 1, lines, planLines, purged };
@@ -31864,8 +31776,8 @@ var init_uninstall_cli = __esm(() => {
 import { execFileSync as execFileSync5 } from "node:child_process";
 import { homedir as homedir31, tmpdir as tmpdir4 } from "node:os";
 import { createHash as createHash9 } from "node:crypto";
-import { copyFileSync as copyFileSync4, existsSync as existsSync44, mkdirSync as mkdirSync30, mkdtempSync as mkdtempSync3, readFileSync as readFileSync36, readdirSync as readdirSync22, realpathSync as realpathSync3, rmSync as rmSync19, statSync as statSync26, writeFileSync as writeFileSync27 } from "node:fs";
-import { basename as basename8, dirname as dirname21, isAbsolute as isAbsolute4, join as join38, relative as relative5, resolve as resolve30, sep as sep6 } from "node:path";
+import { copyFileSync as copyFileSync4, existsSync as existsSync43, mkdirSync as mkdirSync29, mkdtempSync as mkdtempSync3, readFileSync as readFileSync36, readdirSync as readdirSync21, realpathSync as realpathSync3, rmSync as rmSync18, statSync as statSync25, writeFileSync as writeFileSync26 } from "node:fs";
+import { basename as basename8, dirname as dirname21, isAbsolute as isAbsolute4, join as join38, relative as relative5, resolve as resolve29, sep as sep6 } from "node:path";
 function parseList(rest, flag) {
   const idx = rest.findIndex((a) => a === flag || a.startsWith(`${flag}=`));
   if (idx === -1)
@@ -31965,7 +31877,7 @@ async function build(rest) {
   const version = flag("version");
   const commit = flag("commit");
   const effect = flag("effect") ?? "enforce";
-  const outDir = resolve30(flag("out") ?? "dist-pack");
+  const outDir = resolve29(flag("out") ?? "dist-pack");
   if (!entry || !id || !version) {
     return fail2([
       "Usage: failproofai publish <entry.mjs> --repo <owner>/<repo> --version <version>",
@@ -31978,8 +31890,8 @@ async function build(rest) {
   } catch (err) {
     return fail2([err instanceof Error ? err.message : String(err)]);
   }
-  const entryPath = resolve30(entry);
-  if (!existsSync44(entryPath))
+  const entryPath = resolve29(entry);
+  if (!existsSync43(entryPath))
     return fail2([`No such file: ${entryPath}`]);
   const source = readFileSync36(entryPath, "utf8");
   const localImport = /(?:^|\n)\s*(?:import|export)[^;\n]*from\s+["'](\.[^"']*)["']/.exec(source);
@@ -32037,13 +31949,13 @@ async function build(rest) {
     policies
   }, null, 2) + `
 `;
-  mkdirSync30(outDir, { recursive: true });
-  const manifestPath = resolve30(outDir, PACK_MANIFEST_ASSET);
-  const entryOut = resolve30(outDir, PACK_ENTRY_ASSET);
-  writeFileSync27(manifestPath, manifest, "utf8");
+  mkdirSync29(outDir, { recursive: true });
+  const manifestPath = resolve29(outDir, PACK_MANIFEST_ASSET);
+  const entryOut = resolve29(outDir, PACK_ENTRY_ASSET);
+  writeFileSync26(manifestPath, manifest, "utf8");
   copyFileSync4(entryPath, entryOut);
   const sha = (bytes) => createHash9("sha256").update(bytes).digest("hex");
-  writeFileSync27(resolve30(outDir, PACK_CHECKSUMS_ASSET), `${sha(manifest)}  ${PACK_MANIFEST_ASSET}
+  writeFileSync26(resolve29(outDir, PACK_CHECKSUMS_ASSET), `${sha(manifest)}  ${PACK_MANIFEST_ASSET}
 ${sha(readFileSync36(entryOut))}  ${PACK_ENTRY_ASSET}
 `, "utf8");
   const on = policies.filter((p) => p.defaultEnabled).length;
@@ -32173,12 +32085,12 @@ async function scaffold(target) {
       return ok2(["Nothing written."]);
     chosen = answer.trim();
   }
-  const path = resolve30(withPolicyExtension(chosen ?? "my-policies"));
-  if (existsSync44(path)) {
+  const path = resolve29(withPolicyExtension(chosen ?? "my-policies"));
+  if (existsSync43(path)) {
     return fail2([`${path} already exists — name a different file, or edit that one.`]);
   }
-  mkdirSync30(resolve30(path, ".."), { recursive: true });
-  writeFileSync27(path, `import { customPolicies, allow, deny } from "failproofai";
+  mkdirSync29(resolve29(path, ".."), { recursive: true });
+  writeFileSync26(path, `import { customPolicies, allow, deny } from "failproofai";
 
 // One file, no relative imports: only this entry is digest-pinned, so a pack
 // that imported siblings could not honestly claim to be verified.
@@ -32215,7 +32127,7 @@ customPolicies.add({
 function inferRepo(entryPath) {
   try {
     const url = execFileSync5("git", ["remote", "get-url", "origin"], {
-      cwd: resolve30(entryPath, ".."),
+      cwd: resolve29(entryPath, ".."),
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 5000
@@ -32227,7 +32139,7 @@ function inferRepo(entryPath) {
   }
 }
 function inferCommit(entryPath, outDir, sources) {
-  const cwd = resolve30(entryPath, "..");
+  const cwd = resolve29(entryPath, "..");
   const raw = (args) => {
     try {
       return execFileSync5("git", args, {
@@ -32282,9 +32194,9 @@ function realOrSelf(path) {
   }
 }
 function sourcesInHead(git, raw, sources) {
-  const paths = sources.map((f) => realOrSelf(resolve30(f)));
+  const paths = sources.map((f) => realOrSelf(resolve29(f)));
   const shown = git(["rev-parse", "--show-toplevel"]);
-  const top = shown === null ? null : realOrSelf(resolve30(shown));
+  const top = shown === null ? null : realOrSelf(resolve29(shown));
   const missing = [];
   for (const path of paths) {
     const rel = top ? relative5(top, path) : null;
@@ -32308,7 +32220,7 @@ function sourcesInHead(git, raw, sources) {
   ]);
   if (status === null)
     return { ok: false, offending: paths, why: "modified" };
-  const dirty = porcelainEntries(status).flatMap((entry) => [entry.path, entry.from].filter(Boolean).map((path) => resolve30(top ?? ".", path)));
+  const dirty = porcelainEntries(status).flatMap((entry) => [entry.path, entry.from].filter(Boolean).map((path) => resolve29(top ?? ".", path)));
   if (dirty.length > 0)
     return { ok: false, offending: dirty, why: "modified" };
   return { ok: true };
@@ -32316,19 +32228,19 @@ function sourcesInHead(git, raw, sources) {
 function skipOutDir(git, entryPath, outDir) {
   if (!outDir)
     return [];
-  const out = resolve30(outDir);
-  if (resolve30(entryPath).startsWith(out + sep6))
+  const out = resolve29(outDir);
+  if (resolve29(entryPath).startsWith(out + sep6))
     return [];
   const top = git(["rev-parse", "--show-toplevel"]);
   if (!top)
     return [];
-  const rel = relative5(resolve30(top), out);
+  const rel = relative5(resolve29(top), out);
   if (!rel || rel.startsWith("..") || isAbsolute4(rel))
     return [];
   return ["--", ":(top)", `:(exclude,literal,top)${rel.split(sep6).join("/")}`];
 }
 function inferTaggedVersion(entryPath, sources) {
-  const cwd = resolve30(entryPath, "..");
+  const cwd = resolve29(entryPath, "..");
   const raw = (args) => {
     try {
       return execFileSync5("git", args, {
@@ -32358,7 +32270,7 @@ function inferTaggedVersion(entryPath, sources) {
 function findEntry(dir) {
   let names;
   try {
-    names = readdirSync22(dir);
+    names = readdirSync21(dir);
   } catch {
     return [];
   }
@@ -32366,9 +32278,9 @@ function findEntry(dir) {
   for (const name of names) {
     if (!/\.(mjs|js|ts)$/.test(name))
       continue;
-    const full = resolve30(dir, name);
+    const full = resolve29(dir, name);
     try {
-      if (statSync26(full).size > 512 * 1024)
+      if (statSync25(full).size > 512 * 1024)
         continue;
       const text = readFileSync36(full, "utf8");
       if (/from\s+["']failproofai["']/.test(text) && /customPolicies\s*\.\s*add\s*\(/.test(text)) {
@@ -32381,13 +32293,13 @@ function findEntry(dir) {
   return found.sort();
 }
 function withLocalImports(sources) {
-  const seen = new Set(sources.map((f) => resolve30(f)));
+  const seen = new Set(sources.map((f) => resolve29(f)));
   const queue = [...seen];
   while (queue.length > 0 && seen.size < 500) {
     const file = queue.shift();
     let text;
     try {
-      if (statSync26(file).size > 512 * 1024)
+      if (statSync25(file).size > 512 * 1024)
         continue;
       text = readFileSync36(file, "utf8");
     } catch {
@@ -32395,13 +32307,13 @@ function withLocalImports(sources) {
     }
     for (const re of LOCAL_IMPORT_RES) {
       for (const match of text.matchAll(re)) {
-        const base = resolve30(dirname21(file), match[1]);
+        const base = resolve29(dirname21(file), match[1]);
         for (const ext of LOCAL_IMPORT_EXTENSIONS) {
           const candidate = base + ext;
           if (seen.has(candidate))
             break;
           try {
-            if (!statSync26(candidate).isFile())
+            if (!statSync25(candidate).isFile())
               continue;
           } catch {
             continue;
@@ -32416,7 +32328,7 @@ function withLocalImports(sources) {
   return [...seen];
 }
 function settleGitState(entryPath, provenance, packFiles, id, outDir) {
-  const cwd = resolve30(entryPath, "..");
+  const cwd = resolve29(entryPath, "..");
   const raw = (args) => {
     try {
       return execFileSync5("git", args, {
@@ -32491,11 +32403,11 @@ function settleGitState(entryPath, provenance, packFiles, id, outDir) {
   if (root === null || status === null)
     return null;
   const entries = porcelainEntries(status);
-  const dirty = entries.map((entry) => resolve30(root, entry.path));
-  const renamedFrom = entries.filter((entry) => entry.from).map((entry) => resolve30(root, entry.from));
+  const dirty = entries.map((entry) => resolve29(root, entry.path));
+  const renamedFrom = entries.filter((entry) => entry.from).map((entry) => resolve29(root, entry.from));
   if (dirty.length === 0)
     return null;
-  const mine = new Set(packFiles.map((f) => resolve30(f)));
+  const mine = new Set(packFiles.map((f) => resolve29(f)));
   const foreign = dirty.filter((path) => !mine.has(path));
   const toStage = [...dirty, ...renamedFrom];
   if (foreign.length > 0) {
@@ -32628,7 +32540,7 @@ function pushExistingHistory(dir, owner, name, token) {
     return false;
   const askpass = join38(mkdtempSync3(join38(tmpdir4(), "fpai-askpass-")), "askpass.sh");
   try {
-    writeFileSync27(askpass, `#!/bin/sh
+    writeFileSync26(askpass, `#!/bin/sh
 case "$1" in
 *Username*) echo x-access-token ;;
 *) echo "$FPAI_GH_TOKEN" ;;
@@ -32648,7 +32560,7 @@ esac
     return true;
   } finally {
     try {
-      rmSync19(dirname21(askpass), { recursive: true, force: true });
+      rmSync18(dirname21(askpass), { recursive: true, force: true });
     } catch {}
   }
 }
@@ -32672,8 +32584,8 @@ failproofai policies add ${owner}/${name}
 function findBun() {
   const candidates = [
     "bun",
-    process.env.BUN_INSTALL ? resolve30(process.env.BUN_INSTALL, "bin", "bun") : null,
-    resolve30(homedir31(), ".bun", "bin", "bun"),
+    process.env.BUN_INSTALL ? resolve29(process.env.BUN_INSTALL, "bin", "bun") : null,
+    resolve29(homedir31(), ".bun", "bin", "bun"),
     "/opt/homebrew/bin/bun",
     "/usr/local/bin/bun"
   ].filter((c) => c !== null);
@@ -32699,12 +32611,12 @@ function bundleEntry(sources, outDir) {
       ]
     };
   }
-  mkdirSync30(outDir, { recursive: true });
-  const entry = resolve30(outDir, ".entry.generated.mjs");
-  writeFileSync27(entry, sources.map((f) => `import ${JSON.stringify(f.startsWith("/") ? f : resolve30(f))};`).join(`
+  mkdirSync29(outDir, { recursive: true });
+  const entry = resolve29(outDir, ".entry.generated.mjs");
+  writeFileSync26(entry, sources.map((f) => `import ${JSON.stringify(f.startsWith("/") ? f : resolve29(f))};`).join(`
 `) + `
 `, "utf8");
-  const bundled = resolve30(outDir, ".bundled.mjs");
+  const bundled = resolve29(outDir, ".bundled.mjs");
   try {
     execFileSync5(bun, [
       "build",
@@ -32822,7 +32734,7 @@ async function publish(rest) {
 `);
     const token = githubToken();
     const login = token ? await credentialLogin(token) : null;
-    const folder = basename8(resolve30(entry, ".."));
+    const folder = basename8(resolve29(entry, ".."));
     const answered = await askWhereToPublish(`${login ?? "your-account"}/${folder}`, { stdin: process.stdin, stdout: process.stdout });
     if (answered === null)
       return ok2(["Nothing was published."]);
@@ -32833,7 +32745,7 @@ async function publish(rest) {
   let versionFromSha = false;
   const dryRun = rest.includes("--dry-run") || !repo;
   const allowPrivate = rest.includes("--allow-private");
-  const id = flag("id") ?? repo ?? (dryRun && entry ? `local/${basename8(resolve30(entry, ".."))}` : undefined);
+  const id = flag("id") ?? repo ?? (dryRun && entry ? `local/${basename8(resolve29(entry, ".."))}` : undefined);
   const [owner, name] = (repo ?? "/").split("/");
   if (repo && (!owner || !name || repo.split("/").length !== 2)) {
     return fail2([`--repo must be <owner>/<repo>, got ${JSON.stringify(repo)}`]);
@@ -32852,7 +32764,7 @@ async function publish(rest) {
       "With no --repo it writes the three release assets and stops."
     ]);
   }
-  const outDirEarly = resolve30(flag("out") ?? "dist-pack");
+  const outDirEarly = resolve29(flag("out") ?? "dist-pack");
   let provenance = entry ? inferCommit(entry, outDirEarly, bundledSources) : null;
   const gitLines = [];
   if (!version && entry && interactive) {
@@ -32892,7 +32804,7 @@ async function publish(rest) {
         "It needs write access to releases on that repository, and nothing else."
       ]);
     }
-    const ensured = await ensureRepo(owner, name, id, token, resolve30(entry, ".."));
+    const ensured = await ensureRepo(owner, name, id, token, resolve29(entry, ".."));
     if ("error" in ensured)
       return fail2(ensured.error);
     created = ensured.created;
@@ -32991,7 +32903,7 @@ async function publish(rest) {
     if (prior) {
       await gh(`${GITHUB_API2}/repos/${owner}/${name}/releases/assets/${prior.id}`, auth, { method: "DELETE" });
     }
-    const bytes = readFileSync36(resolve30(outDir, asset));
+    const bytes = readFileSync36(resolve29(outDir, asset));
     const upload = await gh(`${GITHUB_UPLOADS2}/repos/${owner}/${name}/releases/${releaseId}/assets?name=${encodeURIComponent(asset)}`, auth, {
       method: "POST",
       contentType: asset.endsWith(".json") ? "application/json" : "application/octet-stream",
@@ -33672,8 +33584,8 @@ var init_install_prompt = __esm(() => {
 
 // src/hooks/manager.ts
 import { execSync as execSync7 } from "node:child_process";
-import { existsSync as existsSync45 } from "node:fs";
-import { resolve as resolve31, basename as basename9 } from "node:path";
+import { existsSync as existsSync44 } from "node:fs";
+import { resolve as resolve30, basename as basename9 } from "node:path";
 import { platform as platform4, arch as arch4, release as release3, hostname as hostname6 } from "node:os";
 function getSettingsPath2(scope, cwd) {
   return claudeCode.getSettingsPath(scope, cwd);
@@ -33892,9 +33804,9 @@ async function installHooksImpl2(policyNames, scope = "user", cwd, includeBeta =
     delete configToWrite.customPoliciesPath;
     delete configToWrite.customPoliciesPaths;
   } else if (customPoliciesPath && (typeof customPoliciesPath === "string" || customPoliciesPath.length > 0)) {
-    const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path) => resolve31(path));
-    const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path) => resolve31(path)).filter((path) => {
-      if (existsSync45(path))
+    const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path) => resolve30(path));
+    const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path) => resolve30(path)).filter((path) => {
+      if (existsSync44(path))
         return true;
       console.log(`Dropping custom policies path (file no longer exists): ${path}`);
       return false;
@@ -34117,7 +34029,7 @@ async function removeHooks2(policyNames, scope = "user", cwd, opts) {
     const scopesToRemove = scope === "all" ? [...integration.scopes] : integration.scopes.includes(scope) ? [scope] : [];
     for (const s of scopesToRemove) {
       const settingsPaths = settingsPathsFor(integration, s, cwd);
-      const existing = settingsPaths.filter((p) => existsSync45(p));
+      const existing = settingsPaths.filter((p) => existsSync44(p));
       if (existing.length === 0) {
         if (scope !== "all" && selectedClis.length === 1) {
           console.log("No settings file found. Nothing to remove.");
@@ -34261,9 +34173,9 @@ async function listHooks(cwd) {
   if (explicitPaths.length > 0) {
     groups.push(rule("Custom Policies", opts));
     for (const path of explicitPaths) {
-      const absPath = resolve31(findProjectConfigDir(cwd ?? process.cwd()), path);
+      const absPath = resolve30(findProjectConfigDir(cwd ?? process.cwd()), path);
       groups.push(note(absPath, opts));
-      if (!existsSync45(absPath)) {
+      if (!existsSync44(absPath)) {
         groups.push(warning([`file not found: ${absPath}`], opts));
         continue;
       }
@@ -34283,7 +34195,7 @@ async function listHooks(cwd) {
     }
   }
   const base = findProjectConfigDir(cwd ?? process.cwd());
-  const projectDir = resolve31(base, ".failproofai", "policies");
+  const projectDir = resolve30(base, ".failproofai", "policies");
   const userDir = customPoliciesDir();
   const sameDir = userDir === projectDir;
   const conventionDirs = [
@@ -34589,21 +34501,20 @@ async function runScheduleOn(daysArg, emailArg) {
     if (bad)
       throw new ScheduleCliError(bad);
   }
-  const { user, prompted } = await ensureSignedIn(emailArg);
+  const signedIn = emailArg === undefined ? { user: readAuth()?.user ?? null, prompted: false } : await ensureSignedIn(emailArg);
   const next = updateConfig({
     audit: {
       auto: true,
-      reportsConsentedAt: Date.now(),
       ...days !== undefined ? { intervalDays: days } : {}
     }
   });
   const interval = next.audit.intervalDays;
   const summary = [
-    `every ${interval} day${interval === 1 ? "" : "s"} · reports to ${user.email}`,
-    "you only hear from it when a scan finds something harmful",
-    "each report sends: finding counts, redacted example commands, this machine's name"
+    `every ${interval} day${interval === 1 ? "" : "s"} · desktop notification on leaks`,
+    signedIn.user ? `masked leak alerts also go to ${signedIn.user.email}` : "email is optional · add it with --email you@example.com",
+    "email contains only the most recent masked credential exposure"
   ];
-  if (prompted) {
+  if (signedIn.prompted) {
     step("scheduled audits are on", summary);
   } else {
     process.stdout.write(`
@@ -34612,7 +34523,7 @@ ${green("✓")}  ${bold("scheduled audits are on")}
 `).join(""));
   }
   warnIfDaemonWontRun();
-  if (prompted) {
+  if (signedIn.prompted) {
     outro("failproofai audit --status  ·  when the next scan is due");
   } else {
     process.stdout.write(dim(`
@@ -34664,12 +34575,7 @@ function runScheduleStatus() {
   ]);
   detail.push(["reports to", live ? live.user.email : dim("— signed out")]);
   if (on && !live) {
-    detail.push(["", pink("scans continue; digests are paused until you sign in")]);
-  } else if (on && config.audit.reportsConsentedAt === undefined) {
-    detail.push([
-      "",
-      pink("scans continue; digests need a fresh opt-in — run `--schedule` to turn them on")
-    ]);
+    detail.push(["", pink("scans and desktop alerts continue; email alerts are paused")]);
   }
   detail.push(["daemon", describeDaemon(daemon)]);
   if (sched?.nextDueAtMs != null && on) {
@@ -34784,14 +34690,14 @@ var init_schedule_cli = __esm(() => {
 });
 
 // scripts/parse-script-args.ts
-import { resolve as resolve32 } from "path";
+import { resolve as resolve31 } from "path";
 function parseStringFlag(flagName, errorLabel, inlineValue, args, index, options) {
   const raw = inlineValue ?? args[index + 1];
   if (raw === undefined || inlineValue === null && raw.startsWith("-")) {
     console.error(`Error: ${flagName} requires ${errorLabel}`);
     process.exit(1);
   }
-  const value = options?.resolve ? resolve32(raw) : raw;
+  const value = options?.resolve ? resolve31(raw) : raw;
   return { value, spliceCount: inlineValue !== null ? 1 : 2 };
 }
 function parseScriptArgs(argv) {
@@ -34847,19 +34753,19 @@ function parseScriptArgs(argv) {
 var init_parse_script_args = () => {};
 
 // scripts/install-diagnosis.mjs
-import { existsSync as existsSync46, readFileSync as readFileSync38, realpathSync as realpathSync4 } from "node:fs";
-import { dirname as dirname22, resolve as resolve33 } from "node:path";
+import { existsSync as existsSync45, readFileSync as readFileSync38, realpathSync as realpathSync4 } from "node:fs";
+import { dirname as dirname22, resolve as resolve32 } from "node:path";
 import { homedir as homedir32, platform as platform5 } from "node:os";
 import { spawnSync } from "node:child_process";
 function findPackageRoot(start) {
   try {
     let dir = realpathSync4(start);
-    if (existsSync46(dir) && !existsSync46(resolve33(dir, "package.json"))) {
+    if (existsSync45(dir) && !existsSync45(resolve32(dir, "package.json"))) {
       dir = dirname22(dir);
     }
     while (true) {
-      const pkgPath = resolve33(dir, "package.json");
-      if (existsSync46(pkgPath)) {
+      const pkgPath = resolve32(dir, "package.json");
+      if (existsSync45(pkgPath)) {
         try {
           const pkg = JSON.parse(readFileSync38(pkgPath, "utf8"));
           if (pkg.name === PKG_NAME)
@@ -34879,7 +34785,7 @@ function readPackageVersion(packageRoot) {
   if (!packageRoot)
     return null;
   try {
-    const pkg = JSON.parse(readFileSync38(resolve33(packageRoot, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync38(resolve32(packageRoot, "package.json"), "utf8"));
     return typeof pkg.version === "string" ? pkg.version : null;
   } catch {
     return null;
@@ -34905,16 +34811,16 @@ function locateNpmGlobal() {
     const root = (res.stdout || "").trim();
     if (!root)
       return null;
-    const candidate = resolve33(root, PKG_NAME);
-    return existsSync46(resolve33(candidate, "package.json")) ? candidate : null;
+    const candidate = resolve32(root, PKG_NAME);
+    return existsSync45(resolve32(candidate, "package.json")) ? candidate : null;
   } catch {
     return null;
   }
 }
 function locateBunGlobal() {
   try {
-    const candidate = resolve33(homedir32(), ".bun", "install", "global", "node_modules", PKG_NAME);
-    return existsSync46(resolve33(candidate, "package.json")) ? candidate : null;
+    const candidate = resolve32(homedir32(), ".bun", "install", "global", "node_modules", PKG_NAME);
+    return existsSync45(resolve32(candidate, "package.json")) ? candidate : null;
   } catch {
     return null;
   }
@@ -34922,8 +34828,8 @@ function locateBunGlobal() {
 function buildRecommendation(pathFirstBin) {
   if (!pathFirstBin)
     return null;
-  const bunBinPrefix = resolve33(homedir32(), ".bun", "bin") + "/";
-  const bunGlobalPrefix = resolve33(homedir32(), ".bun", "install", "global") + "/";
+  const bunBinPrefix = resolve32(homedir32(), ".bun", "bin") + "/";
+  const bunGlobalPrefix = resolve32(homedir32(), ".bun", "install", "global") + "/";
   const isBun = pathFirstBin.startsWith(bunBinPrefix) || pathFirstBin.startsWith(bunGlobalPrefix);
   if (isBun) {
     return `rm -f ~/.bun/bin/${PKG_NAME} && rm -rf ~/.bun/install/global/node_modules/${PKG_NAME}`;
@@ -35017,8 +34923,8 @@ var init_dashboard_host = __esm(() => {
 
 // scripts/launch.ts
 import { spawn as spawn2 } from "child_process";
-import { realpathSync as realpathSync5, existsSync as existsSync47 } from "node:fs";
-import { resolve as resolve34, dirname as dirname23 } from "node:path";
+import { realpathSync as realpathSync5, existsSync as existsSync46 } from "node:fs";
+import { resolve as resolve33, dirname as dirname23 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { createInterface } from "node:readline";
 function launch(mode) {
@@ -35042,9 +34948,9 @@ function launch(mode) {
     process.env.PORT = port;
     process.env.HOSTNAME = bindHost;
     cmd = "node";
-    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve34(dirname23(realpathSync5(fileURLToPath2(import.meta.url))), "..");
-    const serverJsPath = resolve34(packageRoot, ".next/standalone/server.js");
-    if (!existsSync47(serverJsPath)) {
+    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve33(dirname23(realpathSync5(fileURLToPath2(import.meta.url))), "..");
+    const serverJsPath = resolve33(packageRoot, ".next/standalone/server.js");
+    if (!existsSync46(serverJsPath)) {
       let shadowMessage = null;
       try {
         const diag = diagnoseShadow({ selfPackageRoot: packageRoot, selfVersion: version2 });
@@ -35133,20 +35039,20 @@ function helpText() {
         label: "usage",
         entries: [
           ["(bare)", `Scan your session history for leaked keys, then open http://localhost:${DASHBOARD_PORT}/audit`],
-          ["--schedule [days]", "Scan on a timer, notify you on this machine, and email the findings. Default 7 days, range 1-90. Signs you in the first time."],
-          ["--email <address>", "With --schedule, fills in your address. A sign-in code is still emailed to you to paste."],
+          ["--schedule [days]", "Scan on a timer and notify you on this machine. Default 7 days, range 1-90. No account required."],
+          ["--email <address>", "With --schedule, add email alerts for the most recent masked credential leak. A sign-in code is emailed to you."],
           ["--no-schedule", "Stop the timer. Leaves you signed in."],
           ["--notify", "Show a desktop notification when a scan finds a credential. On by default."],
-          ["--no-notify", "Stop those notifications. Scans and the digest are unaffected."],
+          ["--no-notify", "Stop desktop notifications. Scheduled scans and optional email alerts are unaffected."],
           ["--status", "Whether scheduling is on, where reports go, the daemon's state, and when the next scan is due."],
           ["-h, --help", "Show this help."]
         ]
       }
     ],
     footer: [
-      "Everything runs on this machine. A scan tells you three ways: a desktop",
-      "notification, two lines in your agent session, and the emailed digest —",
-      "and only that digest ever leaves."
+      "Every scan runs on this machine. Leak alerts appear as desktop system",
+      "notifications, never inside agent sessions. If you add email, only the",
+      "newest masked credential exposure and its metadata leave the machine."
     ]
   }, helpOptsFor(process.stdout));
   return ["", ...lines, ""].join(`
@@ -35296,52 +35202,38 @@ function heldByLine(held) {
   const ageS = Math.max(0, Math.round((Date.now() - held.startedAt) / 1000));
   return `another audit is already running (pid ${held.pid}, started by ${held.source} ${ageS}s ago)`;
 }
-async function announceLeaksOnDesktop(result) {
+async function announceLeaksOnDesktop(result, report) {
   try {
-    await announceLeaksOrThrow(result);
+    await announceLeaksOrThrow(result, report);
   } catch (err) {
     process.stderr.write(`failproofai: could not announce a leak on the desktop: ` + `${err instanceof Error ? err.message : String(err)}
 `);
   }
 }
-async function announceLeaksOrThrow(result) {
-  const ids = result.newLeakIds ?? [];
+async function announceLeaksOrThrow(result, report) {
+  const ids = result.leakIds ?? result.newLeakIds ?? [];
   if (ids.length === 0)
     return;
   if (!readConfig().audit.notify)
     return;
-  const claimed = markLeakNoticeDelivered(ids, undefined, "desktop");
-  if (claimed.length === 0)
-    return;
-  const live = new Set(activeFindings(readLeakRecord()).map((f) => f.id));
-  const shown = claimed.filter((id) => live.has(id)).length || claimed.length;
-  const n = shown === 1 ? "a possible credential exposure" : `${shown} possible credential exposures`;
-  const { title, body } = desktopLeakNotice();
-  let delivered = false;
-  try {
-    if (process.platform === "darwin") {
-      pruneMacNotifyQueue();
-      if (!queueMacNotification(claimed[0], title, body)) {
-        process.stderr.write(`failproofai: found ${n} but could not queue a notification
+  const n = ids.length === 1 ? "a possible credential exposure" : `${ids.length} possible credential exposures`;
+  const emailState = report.kind === "sent" ? "sent" : report.kind === "signed-out" || !readAuth() ? "missing" : report.kind === "failed" ? "failed" : "held";
+  const { title, body } = desktopLeakNotice(emailState);
+  if (process.platform === "darwin") {
+    pruneMacNotifyQueue();
+    if (!queueMacNotification(ids[0], title, body)) {
+      process.stderr.write(`failproofai: found ${n} but could not queue a notification
 `);
-      } else {
-        delivered = true;
-      }
-      if (delivered && !macNotifierInstalled()) {
-        process.stderr.write(`failproofai: found ${n}; the notifier is not installed, so nothing will show it ` + `(run \`failproofai config\`)
+    } else if (!macNotifierInstalled()) {
+      process.stderr.write(`failproofai: found ${n}; the notifier is not installed, so nothing will show it ` + `(run \`failproofai config\`)
 `);
-      }
-      return;
     }
-    const outcome = await notifyDesktop(title, body, 0);
-    delivered = outcome.ok;
-    if (!outcome.ok) {
-      process.stderr.write(`failproofai: found ${n} but could not raise a desktop notification (${outcome.reason})
+    return;
+  }
+  const outcome = await notifyDesktop(title, body, 0);
+  if (!outcome.ok) {
+    process.stderr.write(`failproofai: found ${n} but could not raise a desktop notification (${outcome.reason})
 `);
-    }
-  } finally {
-    if (!delivered)
-      releaseLeakNoticeClaims(claimed, undefined, "desktop");
   }
 }
 async function runScheduledAudit() {
@@ -35375,8 +35267,8 @@ async function runScheduledAudit() {
     }
     process.stdout.write(`failproofai: audit complete — ${num2(result.eventsScanned)} tool calls across ` + `${num2(result.transcripts.scanned)} sessions, ${num2(result.totals.hits)} hits
 `);
-    await announceLeaksOnDesktop(result);
     const outcome = await reportHarm(result);
+    await announceLeaksOnDesktop(result, outcome);
     const line = describeOutcome2(outcome);
     if (line) {
       const stream = outcome.kind === "sent" ? process.stdout : process.stderr;
@@ -35534,10 +35426,8 @@ var init_cli2 = __esm(() => {
   init_report_harm();
   init_desktop_notify();
   init_macos_notifier();
-  init_leak_notice();
-  init_notice();
-  init_leak_store();
   init_fp_config();
+  init_auth_store();
   init_tui();
   init_package();
   AUDIT_STAGES2 = [
@@ -35870,8 +35760,8 @@ var init_session_pause_cli = __esm(() => {
 
 // scripts/launch.ts
 import { spawn as spawn3 } from "child_process";
-import { realpathSync as realpathSync6, existsSync as existsSync48 } from "node:fs";
-import { resolve as resolve35, dirname as dirname24 } from "node:path";
+import { realpathSync as realpathSync6, existsSync as existsSync47 } from "node:fs";
+import { resolve as resolve34, dirname as dirname24 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { createInterface as createInterface2 } from "node:readline";
 function launch2(mode) {
@@ -35895,9 +35785,9 @@ function launch2(mode) {
     process.env.PORT = port;
     process.env.HOSTNAME = bindHost;
     cmd = "node";
-    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve35(dirname24(realpathSync6(fileURLToPath3(import.meta.url))), "..");
-    const serverJsPath = resolve35(packageRoot, ".next/standalone/server.js");
-    if (!existsSync48(serverJsPath)) {
+    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve34(dirname24(realpathSync6(fileURLToPath3(import.meta.url))), "..");
+    const serverJsPath = resolve34(packageRoot, ".next/standalone/server.js");
+    if (!existsSync47(serverJsPath)) {
       let shadowMessage = null;
       try {
         const diag = diagnoseShadow({ selfPackageRoot: packageRoot, selfVersion: version2 });
@@ -35994,17 +35884,17 @@ var init_cli_error2 = __esm(() => {
 
 // bin/failproofai.mjs
 import { realpathSync as realpathSync7 } from "fs";
-import { dirname as dirname25, resolve as resolve36 } from "path";
+import { dirname as dirname25, resolve as resolve35 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 // package.json
-var version = "1.0.4-beta.4";
+var version = "1.0.4-beta.7";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {
-  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve36(dirname25(realpathSync7(fileURLToPath4(import.meta.url))), "..");
+  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve35(dirname25(realpathSync7(fileURLToPath4(import.meta.url))), "..");
 }
 if (!process.env.FAILPROOFAI_DIST_PATH) {
-  process.env.FAILPROOFAI_DIST_PATH = resolve36(dirname25(realpathSync7(fileURLToPath4(import.meta.url))), "..", "dist");
+  process.env.FAILPROOFAI_DIST_PATH = resolve35(dirname25(realpathSync7(fileURLToPath4(import.meta.url))), "..", "dist");
 }
 var args = process.argv.slice(2);
 if (args[0] === "p" || args[0] === "policy")