failproofai 1.0.4-beta.7 → 1.0.4

package/dist/cli.mjs

@@ -29,7 +29,7 @@ var __esm = (fn, res, err) => () => {
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // package.json
-var version2 = "1.0.4-beta.7", package_default;
+var version2 = "1.0.4", package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "failproofai",
@@ -154,16 +154,16 @@ var init_package = __esm(() => {
       browserslist: "4.28.8"
     },
     optionalDependencies: {
-      "@failproofai/failproofaid-linux-x64": "1.0.4-beta.7",
-      "@failproofai/failproofaid-linux-arm64": "1.0.4-beta.7",
-      "@failproofai/failproofaid-darwin-x64": "1.0.4-beta.7",
-      "@failproofai/failproofaid-darwin-arm64": "1.0.4-beta.7"
+      "@failproofai/failproofaid-linux-x64": "1.0.4",
+      "@failproofai/failproofaid-linux-arm64": "1.0.4",
+      "@failproofai/failproofaid-darwin-x64": "1.0.4",
+      "@failproofai/failproofaid-darwin-arm64": "1.0.4"
     },
     failproofaidBinaries: {
-      "linux-x64": "e59735a8f94cd8ac697b2bd67aafdd8d76a8394d53db229876980cc13a18f07e",
-      "linux-arm64": "b9ce50dd2f79b55f4f7112add265a776a4a6d002c2a56f971e666fbb796f3906",
-      "darwin-x64": "b46efc8ec33945a5cc26b7bb288fb87cea65b5983bd83094b5e607d53b8eda4c",
-      "darwin-arm64": "a8cc6112cee5ca8a7d517900e9ce32118855135980f22979fa0ff7aa6f68d954"
+      "linux-x64": "cca1d41ff951784ba084bf2d72cfad0fe8d988f8226e0e7a4538b1fb8d76a5bd",
+      "linux-arm64": "55e9c1e2864cbf6057fd0c27e4bc573ca8fba2cd35d480a3db3a55d398e7bec0",
+      "darwin-x64": "2a46ec77d2cac14a036f35e832f92f16895239814a5f10f02121f3c313e70574",
+      "darwin-arm64": "a0e7ccc6fe24e1017592637192ba8a26c9d05ca839c98bc72a983094c863b39b"
     }
   };
 });
@@ -206,7 +206,7 @@ function retiredLayoutPaths() {
     legacy.localPoliciesDir()
   ];
 }
-var LAYOUT_VERSION = 4, at = (...parts) => resolve(failproofaiHome(), ...parts), atHome = (home, ...parts) => home ? resolve(failproofaiHome(home), ...parts) : at(...parts), versionFile = (home) => atHome(home, "VERSION"), configFile = (home) => atHome(home, "config.json"), credentialsFile = (home) => atHome(home, "credentials.json"), binDir = (home) => atHome(home, "bin"), policiesDir = (home) => atHome(home, "policies"), customPoliciesDir, globalPolicyConfigFile = (home) => atHome(home, "policies-config.json"), cloudPoliciesDir = (home) => resolve(policiesDir(home), "cloud-policies"), packsDir = (home) => resolve(policiesDir(home), "packs"), packsInstalledFile = (home) => resolve(packsDir(home), "installed.json"), cursorsDir = (source, home) => source ? resolve(atHome(home, "cursors"), source) : atHome(home, "cursors"), customAgentsDir = (home) => atHome(home, "custom-agents"), auditDir = (home) => atHome(home, "audit"), auditDashboardFile = (home) => resolve(auditDir(home), "dashboard.json"), auditCacheDir = (home) => resolve(auditDir(home), "cache"), auditSessionFile = (home) => resolve(auditDir(home), "session.json"), auditMachineFile = (home) => resolve(auditDir(home), "machine.json"), auditLeaksFile = (home) => resolve(auditDir(home), "leaks.json"), auditLeakIdentityFile = (home) => resolve(auditDir(home), "leak-identity.json"), fpcliDir = (home) => atHome(home, "fpcli"), fpcliAuthFile = (home) => resolve(fpcliDir(home), "cli-auth.json"), hookActivityDir = (home) => atHome(home, "hook-activity"), runDir = (home) => atHome(home, "run"), daemonSocket = () => process.env.FAILPROOFAI_DAEMON_SOCKET || resolve(runDir(), "failproofaid.sock"), auditLockFile = (home) => resolve(runDir(home), "audit.lock"), stateDir = (home) => atHome(home, "state"), shimsDir = (home) => resolve(stateDir(home), "shims"), spoolDir = (home) => resolve(stateDir(home), "spool"), failedDir = (home) => resolve(stateDir(home), "failed"), collectorHealthFile = (home) => resolve(stateDir(home), "collector-health.json"), sessionPauseDir = () => resolve(stateDir(), "sessions"), auditScheduleFile = (home) => resolve(auditDir(home), "schedule.json"), telemetryIdFile = (home) => resolve(stateDir(home), "telemetry-id"), launcherMarker = (home) => resolve(stateDir(home), "launcher-configured"), onboardingAttemptFile = (home) => resolve(stateDir(home), "onboarding-attempt.json"), lastVersionFile = (home) => resolve(stateDir(home), "last-version"), onboardingLockFile = (home) => resolve(stateDir(home), "onboarding.lock"), codexSessionPathsFile = (home) => resolve(stateDir(home), "codex-session-paths.json"), logsDir = (home) => atHome(home, "logs"), migrationsDir = (home) => atHome(home, "migrations"), migrationLedgerFile = (home) => resolve(migrationsDir(home), "applied.json"), migrationBackupDir = (layout, home) => resolve(migrationsDir(home), `backup-layout${layout}`), HOME_CLASSES, legacy;
+var LAYOUT_VERSION = 4, at = (...parts) => resolve(failproofaiHome(), ...parts), atHome = (home, ...parts) => home ? resolve(failproofaiHome(home), ...parts) : at(...parts), versionFile = (home) => atHome(home, "VERSION"), configFile = (home) => atHome(home, "config.json"), credentialsFile = (home) => atHome(home, "credentials.json"), binDir = (home) => atHome(home, "bin"), policiesDir = (home) => atHome(home, "policies"), customPoliciesDir, globalPolicyConfigFile = (home) => atHome(home, "policies-config.json"), cloudPoliciesDir = (home) => resolve(policiesDir(home), "cloud-policies"), packsDir = (home) => resolve(policiesDir(home), "packs"), packsInstalledFile = (home) => resolve(packsDir(home), "installed.json"), cursorsDir = (source, home) => source ? resolve(atHome(home, "cursors"), source) : atHome(home, "cursors"), customAgentsDir = (home) => atHome(home, "custom-agents"), auditDir = (home) => atHome(home, "audit"), auditDashboardFile = (home) => resolve(auditDir(home), "dashboard.json"), auditCacheDir = (home) => resolve(auditDir(home), "cache"), auditSessionFile = (home) => resolve(auditDir(home), "session.json"), auditMachineFile = (home) => resolve(auditDir(home), "machine.json"), fpcliDir = (home) => atHome(home, "fpcli"), fpcliAuthFile = (home) => resolve(fpcliDir(home), "cli-auth.json"), hookActivityDir = (home) => atHome(home, "hook-activity"), runDir = (home) => atHome(home, "run"), daemonSocket = () => process.env.FAILPROOFAI_DAEMON_SOCKET || resolve(runDir(), "failproofaid.sock"), auditLockFile = (home) => resolve(runDir(home), "audit.lock"), stateDir = (home) => atHome(home, "state"), shimsDir = (home) => resolve(stateDir(home), "shims"), spoolDir = (home) => resolve(stateDir(home), "spool"), failedDir = (home) => resolve(stateDir(home), "failed"), collectorHealthFile = (home) => resolve(stateDir(home), "collector-health.json"), sessionPauseDir = () => resolve(stateDir(), "sessions"), auditScheduleFile = (home) => resolve(auditDir(home), "schedule.json"), telemetryIdFile = (home) => resolve(stateDir(home), "telemetry-id"), launcherMarker = (home) => resolve(stateDir(home), "launcher-configured"), onboardingAttemptFile = (home) => resolve(stateDir(home), "onboarding-attempt.json"), lastVersionFile = (home) => resolve(stateDir(home), "last-version"), onboardingLockFile = (home) => resolve(stateDir(home), "onboarding.lock"), codexSessionPathsFile = (home) => resolve(stateDir(home), "codex-session-paths.json"), logsDir = (home) => atHome(home, "logs"), migrationsDir = (home) => atHome(home, "migrations"), migrationLedgerFile = (home) => resolve(migrationsDir(home), "applied.json"), migrationBackupDir = (layout, home) => resolve(migrationsDir(home), `backup-layout${layout}`), HOME_CLASSES, legacy;
 var init_fp_home = __esm(() => {
   customPoliciesDir = policiesDir;
   HOME_CLASSES = [
@@ -228,10 +228,8 @@ var init_fp_home = __esm(() => {
     { path: versionFile, class: "identity" },
     { path: migrationsDir, class: "identity" },
     { path: auditMachineFile, class: "identity" },
-    { path: auditLeakIdentityFile, class: "identity" },
     { path: auditDashboardFile, class: "derived" },
     { path: auditCacheDir, class: "derived" },
-    { path: auditLeaksFile, class: "derived" },
     { path: auditScheduleFile, class: "derived" },
     { path: collectorHealthFile, class: "derived" },
     { path: codexSessionPathsFile, class: "derived" },
@@ -396,8 +394,7 @@ function projectConfig(parsed) {
     const daemon = parsed.daemon ?? {};
     const collector = parsed.collector ?? {};
     const telemetry = parsed.telemetry ?? {};
-    const auditPresent = !!parsed.audit && typeof parsed.audit === "object" && !Array.isArray(parsed.audit);
-    const audit = auditPresent ? parsed.audit : {};
+    const audit = parsed.audit ?? {};
     return {
       mode: mode === "cloud" ? "cloud" : "oss",
       daemon: { configured: daemon.configured === true },
@@ -412,8 +409,7 @@ function projectConfig(parsed) {
       },
       telemetry: { enabled: telemetry.enabled !== false },
       audit: {
-        auto: auditPresent && audit.auto !== false,
-        notify: audit.notify !== false,
+        auto: audit.auto === true,
         intervalDays: readIntervalDays(audit.interval_days),
         reportsConsentedAt: typeof audit.reports_consented_at === "number" && Number.isFinite(audit.reports_consented_at) ? audit.reports_consented_at : undefined
       }
@@ -467,7 +463,6 @@ function writeConfig(config, raw) {
     ...config.telemetry.enabled ? {} : { telemetry: { enabled: false } },
     audit: {
       auto: config.audit.auto,
-      notify: config.audit.notify,
       interval_days: config.audit.intervalDays,
       ...config.audit.reportsConsentedAt === undefined ? {} : { reports_consented_at: config.audit.reportsConsentedAt }
     }
@@ -602,7 +597,7 @@ var init_fp_config = __esm(() => {
       environment: "local"
     },
     telemetry: { enabled: true },
-    audit: { auto: false, notify: true, intervalDays: DEFAULT_AUDIT_INTERVAL_DAYS }
+    audit: { auto: false, intervalDays: DEFAULT_AUDIT_INTERVAL_DAYS }
   };
   OWNED_CONFIG_KEYS = [
     ["mode", "kind"],
@@ -616,7 +611,6 @@ var init_fp_config = __esm(() => {
     ["collector", "sources", "*", "extra_paths"],
     ["telemetry", "enabled"],
     ["audit", "auto"],
-    ["audit", "notify"],
     ["audit", "interval_days"],
     ["audit", "reports_consented_at"]
   ];
@@ -3870,39 +3864,15 @@ var init_builtin_policies = __esm(() => {
   SHELL_METACHAR_RE = /[;&<>`$()\\]/;
   JWT_RE = /eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/;
   API_KEY_PATTERNS = [
-    [/sk-ant-api03-[A-Za-z0-9\-_]{20,}/, "Anthropic API key"],
-    [/sk-ant-oat01-[A-Za-z0-9\-_]{20,}/, "Anthropic OAuth token"],
     [/sk-ant-[A-Za-z0-9\-_]{20,}/, "Anthropic API key"],
     [/sk-proj-[A-Za-z0-9\-_]{20,}/, "OpenAI project API key"],
-    [/(?<!\w)sk-svcacct-[A-Za-z0-9\-_]{20,}/, "OpenAI service-account key"],
-    [/(?<!\w)sk-admin-[A-Za-z0-9\-_]{20,}/, "OpenAI admin key"],
-    [/sk-or-v1-[A-Za-z0-9\-_]{20,}/, "OpenRouter API key"],
-    [/sk-[A-Za-z0-9]{20,}/, "OpenAI-compatible key (issuer unknown)"],
-    [/github_pat_[A-Za-z0-9_]{82}/, "GitHub fine-grained token"],
+    [/sk-[A-Za-z0-9]{20,}/, "OpenAI API key"],
     [/ghp_[A-Za-z0-9]{36}/, "GitHub personal access token"],
-    [/gho_[A-Za-z0-9]{36}/, "GitHub OAuth token"],
-    [/ghu_[A-Za-z0-9]{36}/, "GitHub user-to-server token"],
-    [/ghs_[A-Za-z0-9]{36}/, "GitHub server-to-server token"],
-    [/ghr_[A-Za-z0-9]{36}/, "GitHub refresh token"],
-    [/glpat-[A-Za-z0-9\-_]{20,}/, "GitLab personal access token"],
+    [/github_pat_[A-Za-z0-9_]{82}/, "GitHub fine-grained token"],
     [/AKIA[A-Z0-9]{16}/, "AWS access key ID"],
-    [/ASIA[A-Z0-9]{16}/, "AWS temporary access key ID"],
     [/sk_live_[A-Za-z0-9]{24,}/, "Stripe live secret key"],
     [/sk_test_[A-Za-z0-9]{24,}/, "Stripe test secret key"],
-    [/rk_live_[A-Za-z0-9]{24,}/, "Stripe restricted key"],
-    [/AIza[0-9A-Za-z\-_]{35}/, "Google API key"],
-    [/\d{8,10}:[A-Za-z0-9_-]{35}/, "Telegram bot token"],
-    [/xox[baprs]-[A-Za-z0-9-]{10,}/, "Slack token"],
-    [/xapp-[0-9]-[A-Za-z0-9-]{10,}/, "Slack app-level token"],
-    [/hf_[A-Za-z0-9]{30,}/, "Hugging Face token"],
-    [/gsk_[A-Za-z0-9]{40,}/, "Groq API key"],
-    [/r8_[A-Za-z0-9]{30,}/, "Replicate token"],
-    [/xai-[A-Za-z0-9]{40,}/, "xAI API key"],
-    [/npm_[A-Za-z0-9]{36}/, "npm access token"],
-    [/dop_v1_[a-f0-9]{64}/, "DigitalOcean token"],
-    [/shpat_[a-fA-F0-9]{32}/, "Shopify access token"],
-    [/sb_secret_[A-Za-z0-9\-_]{20,}/, "Supabase secret key"],
-    [/sbp_[a-f0-9]{40}/, "Supabase personal token"]
+    [/AIza[0-9A-Za-z\-_]{35}/, "Google API key"]
   ];
   CONNECTION_STRING_RE = /(?:postgresql|postgres|mysql|mongodb(?:\+srv)?|redis|amqps?|smtps?):\/\/[^@\s]+@/;
   PRIVATE_KEY_RE = /-----BEGIN (?:[A-Z]+ )?PRIVATE KEY-----/;
@@ -11682,7 +11652,7 @@ function buildOpenCodePluginShim(binaryPath, scope) {
 // Re-generate via: failproofai policies --install --cli opencode
 // Plugin shim that bridges OpenCode's plugin API to the failproofai binary.
 // See: https://opencode.ai/docs/plugins/
-import { spawn } from "node:child_process";
+import { spawnSync } from "node:child_process";
 
 // Map opencode bus-event types → canonical failproofai event names.
 // (The binary sees PascalCase — the binary's --cli=opencode flag is for
@@ -11745,52 +11715,18 @@ function canonicalizeToolInput(canonicalToolName, args) {
 const FAILPROOFAI_BIN = ${escapedBin};
 const USE_NPX = ${useNpx};
 
-/**
- * Run failproofai for one event WITHOUT blocking opencode's event loop.
- *
- * This was spawnSync, and opencode loads the plugin in-process in the TUI —
- * so every hook froze rendering and input for the subprocess's full duration,
- * with a 60s ceiling. The verdicts are unchanged: every caller already awaits
- * applyDecision, so the deny still lands before the tool runs. What changes
- * is that the wait is now a promise rather than a blocked thread, and the TUI
- * keeps painting while it happens.
- *
- * Fail-open on spawn error, and on the timeout — a policy that never ran must
- * not read as a deny.
- */
-async function runFailproofai(eventName, payload, directory) {
+function runFailproofai(eventName, payload, directory) {
   const cmd = USE_NPX ? "npx" : FAILPROOFAI_BIN;
   const args = USE_NPX
     ? ["-y", "failproofai", "--hook", eventName, "--cli", "opencode"]
     : ["--hook", eventName, "--cli", "opencode"];
-  return await new Promise((resolveRun) => {
-    let child;
-    try {
-      child = spawn(cmd, args, { cwd: directory });
-    } catch {
-      resolveRun({ exitCode: 0, stdout: "", stderr: "" });
-      return;
-    }
-    let stdout = "";
-    let stderr = "";
-    let settled = false;
-    const finish = (exitCode) => {
-      if (settled) return;
-      settled = true;
-      clearTimeout(timer);
-      resolveRun({ exitCode, stdout, stderr });
-    };
-    const timer = setTimeout(() => {
-      try { child.kill("SIGKILL"); } catch { /* already gone */ }
-      finish(0);
-    }, 60_000);
-    child.stdout.on("data", (d) => { stdout += d; });
-    child.stderr.on("data", (d) => { stderr += d; });
-    child.on("error", () => finish(0));
-    child.on("close", (code) => finish(code ?? 0));
-    child.stdin.on("error", () => {});
-    child.stdin.end(JSON.stringify(payload));
+  const r = spawnSync(cmd, args, {
+    input: JSON.stringify(payload),
+    encoding: "utf8",
+    timeout: 60_000,
+    cwd: directory,
   });
+  return { exitCode: r.status ?? 0, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
 }
 
 async function applyDecision(result, ctx, eventName) {
@@ -11855,7 +11791,7 @@ export default async function failproofaiPlugin({ client, directory }) {
           }
         }
         if (!prompt) prompt = (info.text || info.content || props.text || "").toString();
-        const r = await runFailproofai("UserPromptSubmit", {
+        const r = runFailproofai("UserPromptSubmit", {
           session_id: sessionID, cwd: directory, hook_event_name: "UserPromptSubmit", prompt,
         }, directory);
         await applyDecision(r, { client, sessionID }, "UserPromptSubmit");
@@ -11865,11 +11801,8 @@ export default async function failproofaiPlugin({ client, directory }) {
       const claudeEvent = BUS_EVENT_MAP[event.type];
       if (!claudeEvent) return;
       const props = event.properties || {};
-      const info = props.info || props.session || {};
-
-      const sessionID = info.id || info.sessionID || info.sessionId || info.session_id ||
-        props.sessionID || props.sessionId || props.session_id || props.id;
-      const r = await runFailproofai(claudeEvent, {
+      const sessionID = props.sessionID || (props.session && props.session.id) || props.id;
+      const r = runFailproofai(claudeEvent, {
         session_id: sessionID, cwd: directory, hook_event_name: claudeEvent,
       }, directory);
       await applyDecision(r, { client, sessionID }, claudeEvent);
@@ -11878,7 +11811,7 @@ export default async function failproofaiPlugin({ client, directory }) {
     // First-class PreToolUse hook. Note: tool args live on output.args (mutable).
     "tool.execute.before": async (input, output) => {
       const canonicalTool = canonicalizeTool(input.tool);
-      const r = await runFailproofai("PreToolUse", {
+      const r = runFailproofai("PreToolUse", {
         session_id: input.sessionID,
         cwd: directory,
         tool_name: canonicalTool,
@@ -11891,7 +11824,7 @@ export default async function failproofaiPlugin({ client, directory }) {
     // First-class PostToolUse hook. Note: tool args live on input.args here.
     "tool.execute.after": async (input, output) => {
       const canonicalTool = canonicalizeTool(input.tool);
-      const r = await runFailproofai("PostToolUse", {
+      const r = runFailproofai("PostToolUse", {
         session_id: input.sessionID,
         cwd: directory,
         tool_name: canonicalTool,
@@ -11905,7 +11838,7 @@ export default async function failproofaiPlugin({ client, directory }) {
     // Cleaner deny UX for prompted tools — mutate output.status instead of throwing.
     "permission.ask": async (input, output) => {
       const canonicalTool = canonicalizeTool(input.tool);
-      const r = await runFailproofai("PermissionRequest", {
+      const r = runFailproofai("PermissionRequest", {
         session_id: input.sessionID,
         cwd: directory,
         tool_name: canonicalTool || input.command || "permission",
@@ -17177,21 +17110,8 @@ var init_cursor_projects = __esm(() => {
 // lib/sqlite-reader.ts
 import { existsSync as existsSync11, readFileSync as readFileSync8 } from "node:fs";
 import initSqlJs from "sql.js/dist/sql-asm.js";
-function silenceSqliteExperimentalWarning() {
-  if (warningPatched)
-    return;
-  warningPatched = true;
-  const original = process.emitWarning.bind(process);
-  process.emitWarning = (warning, ...rest) => {
-    const text = typeof warning === "string" ? warning : String(warning?.message ?? "");
-    if (text.includes("SQLite is an experimental feature"))
-      return;
-    return original(warning, ...rest);
-  };
-}
 async function tryNodeSqlite(dbPath) {
   try {
-    silenceSqliteExperimentalWarning();
     const mod = await import("node:sqlite");
     const db = new mod.DatabaseSync(dbPath, { readOnly: true });
     return {
@@ -17212,21 +17132,10 @@ function loadSqlJs() {
     sqlPromise = initSqlJs();
   return sqlPromise;
 }
-function clearWalFlag(bytes) {
-  if (bytes.length < 20)
-    return bytes;
-  if (bytes.toString("latin1", 0, 16) !== SQLITE_MAGIC)
-    return bytes;
-  if (bytes[18] === 1 && bytes[19] === 1)
-    return bytes;
-  bytes[18] = 1;
-  bytes[19] = 1;
-  return bytes;
-}
 async function trySqlJs(dbPath) {
   try {
     const SQL = await loadSqlJs();
-    const db = new SQL.Database(clearWalFlag(readFileSync8(dbPath)));
+    const db = new SQL.Database(readFileSync8(dbPath));
     return {
       query(sql, params) {
         const stmt = db.prepare(sql);
@@ -17254,7 +17163,7 @@ async function openSqliteReadonly(dbPath) {
     return null;
   return await tryNodeSqlite(dbPath) ?? await trySqlJs(dbPath);
 }
-var warningPatched = false, sqlPromise = null, SQLITE_MAGIC = "SQLite format 3\x00";
+var sqlPromise = null;
 var init_sqlite_reader = () => {};
 
 // lib/opencode-db.ts
@@ -20005,15 +19914,6 @@ function joinTexts(blocks, wantedType) {
   return blocks.filter((b) => b?.type === wantedType && typeof b.text === "string").map((b) => b.text).join(`
 `);
 }
-function toolOutputText(output) {
-  if (typeof output === "string")
-    return output;
-  if (Array.isArray(output)) {
-    return output.filter((block) => !!block && typeof block === "object").map((block) => typeof block.text === "string" ? block.text : "").filter(Boolean).join(`
-`);
-  }
-  return output === undefined ? "" : JSON.stringify(output);
-}
 async function parseCodexLog(fileContent, source = "session") {
   const lines = fileContent.split(`
 `).filter((line) => line.trim() !== "");
@@ -20090,11 +19990,10 @@ async function parseCodexLog(fileContent, source = "session") {
         });
         continue;
       }
-      if (subType === "function_call" || subType === "custom_tool_call") {
+      if (subType === "function_call") {
         const callId = payload.call_id;
         const name = payload.name ?? "function_call";
-        const encodedInput = payload.arguments ?? payload.input;
-        const input = safeJsonParse4(encodedInput);
+        const input = safeJsonParse4(payload.arguments);
         const toolUse = {
           type: "tool_use",
           id: callId ?? `${timestamp}-${name}`,
@@ -20113,7 +20012,7 @@ async function parseCodexLog(fileContent, source = "session") {
         }
         continue;
       }
-      if (subType === "function_call_output" || subType === "custom_tool_call_output") {
+      if (subType === "function_call_output") {
         const callId = payload.call_id;
         const block = callId ? toolUseById.get(callId) : undefined;
         if (block) {
@@ -20122,7 +20021,7 @@ async function parseCodexLog(fileContent, source = "session") {
           block.result = {
             timestamp,
             timestampFormatted: formatTimestamp(date),
-            content: toolOutputText(payload.output),
+            content: typeof payload.output === "string" ? payload.output : JSON.stringify(payload.output),
             durationMs: duration,
             durationFormatted: formatDuration(duration)
           };
@@ -20317,8 +20216,6 @@ async function parseCopilotLog(fileContent, source = "session") {
   const rawLines = [];
   const toolUseById = new Map;
   const toolUseStartMs = new Map;
-  let mostRecentToolUse;
-  let mostRecentToolUseStartMs = 0;
   let cwd;
   let seenSessionStart = false;
   for (let i = 0;i < lines.length; i++) {
@@ -20414,24 +20311,8 @@ async function parseCopilotLog(fileContent, source = "session") {
         toolUseById.set(callId, toolUse);
         toolUseStartMs.set(callId, date.getTime());
       }
-      mostRecentToolUse = toolUse;
-      mostRecentToolUseStartMs = date.getTime();
       continue;
     }
-    if (recType === "hook.start" && data.hookType === "postToolUse" && mostRecentToolUse) {
-      const input = data.input ?? {};
-      const hookResult = input.toolResult ?? {};
-      const hookContent = hookResult.textResultForLlm ?? hookResult.sessionLog;
-      if (typeof hookContent === "string" && hookContent.length > 0) {
-        mostRecentToolUse.result = {
-          timestamp,
-          timestampFormatted: formatTimestamp(date),
-          content: hookContent,
-          durationMs: Math.max(0, date.getTime() - mostRecentToolUseStartMs),
-          durationFormatted: formatDuration(Math.max(0, date.getTime() - mostRecentToolUseStartMs))
-        };
-      }
-    }
     if (recType === "tool.execution_complete") {
       const callId = data.toolCallId;
       const block = callId ? toolUseById.get(callId) : undefined;
@@ -20441,8 +20322,7 @@ async function parseCopilotLog(fileContent, source = "session") {
         const telemetry = data.toolTelemetry ?? {};
         const reportedMs = telemetry.metrics?.commandTimeMs ?? telemetry.metrics?.durationMs ?? null;
         const durationMs = typeof reportedMs === "number" && reportedMs >= 0 ? reportedMs : Math.max(0, date.getTime() - startMs);
-        const completionContent = result.detailedContent ?? result.content ?? "";
-        const content = block.result?.content || completionContent;
+        const content = result.detailedContent ?? result.content ?? "";
         block.result = {
           timestamp,
           timestampFormatted: formatTimestamp(date),
@@ -20566,27 +20446,8 @@ async function parseCursorLog(fileContent, source = "session") {
     if (!raw.type && raw.role && raw.message?.content) {
       const synthDate = new Date(SYNTH_T0 + i);
       const synthTs = synthDate.toISOString();
-      const messageContent = raw.message.content;
-      const textParts = messageContent.filter((c) => c?.type === "text" && typeof c.text === "string").map((c) => c.text).join("");
+      const textParts = raw.message.content.filter((c) => c?.type === "text" && typeof c.text === "string").map((c) => c.text).join("");
       if (raw.role === "user") {
-        let attachedResult = false;
-        for (const block of messageContent) {
-          if (block?.type !== "tool_result")
-            continue;
-          const callId = typeof block.tool_use_id === "string" ? block.tool_use_id : undefined;
-          const toolUse = callId ? toolUseById.get(callId) : undefined;
-          if (!toolUse)
-            continue;
-          const durationMs = Math.max(0, synthDate.getTime() - (toolUseStartMs.get(callId) ?? synthDate.getTime()));
-          toolUse.result = {
-            timestamp: synthTs,
-            timestampFormatted: formatTimestamp(synthDate),
-            content: typeof block.content === "string" ? block.content : block.content == null ? "" : JSON.stringify(block.content),
-            durationMs,
-            durationFormatted: formatDuration(durationMs)
-          };
-          attachedResult = true;
-        }
         const queryMatch = /<user_query>\s*([\s\S]*?)\s*<\/user_query>/.exec(textParts);
         const text = queryMatch ? queryMatch[1] : textParts;
         if (text) {
@@ -20595,35 +20456,11 @@ async function parseCursorLog(fileContent, source = "session") {
             ...baseEntry(rawCopy, synthTs, synthDate, source),
             message: { role: "user", content: text }
           });
-        } else if (!attachedResult) {
-          entries.push({
-            type: "system",
-            ...baseEntry(rawCopy, synthTs, synthDate, source),
-            raw: rawCopy
-          });
         }
         continue;
       }
       if (raw.role === "assistant") {
-        const blocks = [];
-        if (textParts)
-          blocks.push({ type: "text", text: textParts });
-        for (let j = 0;j < messageContent.length; j++) {
-          const contentBlock = messageContent[j];
-          if (contentBlock?.type !== "tool_use")
-            continue;
-          const name = typeof contentBlock.name === "string" ? contentBlock.name : "tool";
-          const id = typeof contentBlock.id === "string" && contentBlock.id ? contentBlock.id : `cursor-${i}-${name}-${j}`;
-          const toolUse = {
-            type: "tool_use",
-            id,
-            name,
-            input: contentBlock.input && typeof contentBlock.input === "object" ? contentBlock.input : {}
-          };
-          blocks.push(toolUse);
-          toolUseById.set(id, toolUse);
-          toolUseStartMs.set(id, synthDate.getTime());
-        }
+        const blocks = textParts ? [{ type: "text", text: textParts }] : [];
         if (blocks.length === 0) {
           entries.push({
             type: "system",
@@ -25112,232 +24949,6 @@ var init_manager = __esm(() => {
   VALID_POLICY_NAMES = new Set(BUILTIN_POLICIES.map((p) => p.name));
 });
 
-// src/audit/leak-fingerprint.ts
-function matchPublicPrefix(value) {
-  for (const entry of PUBLIC_PREFIXES) {
-    if (value.startsWith(entry[0]))
-      return entry;
-  }
-  return null;
-}
-function fingerprintSecret(value, fallbackLabel = "secret") {
-  const length = value.length;
-  const matched = matchPublicPrefix(value);
-  if (!matched) {
-    return {
-      display: `[${length}-char ${fallbackLabel}]`,
-      label: fallbackLabel,
-      length,
-      attributed: false
-    };
-  }
-  const [prefix, label] = matched;
-  const bodyLength = length - prefix.length;
-  const run = MASK_CHAR.repeat(Math.max(1, Math.min(MAX_MASK_RUN, bodyLength)));
-  if (length >= MIN_LEN_FOR_TAIL && bodyLength > TAIL_CHARS * 2) {
-    return {
-      display: `${prefix}${run}${value.slice(-TAIL_CHARS)}`,
-      label,
-      length,
-      attributed: true
-    };
-  }
-  return { display: `${prefix}${run}`, label, length, attributed: true };
-}
-function isFindingId(id) {
-  return /^[0-9a-f]{16}$/.test(id);
-}
-function fingerprintId(value, machineSalt) {
-  const { createHmac } = __require("node:crypto");
-  return createHmac("sha256", machineSalt).update(value).digest("hex").slice(0, 16);
-}
-var MASK_CHAR = "•", MAX_MASK_RUN = 8, MIN_LEN_FOR_TAIL = 24, TAIL_CHARS = 4, PUBLIC_PREFIXES;
-var init_leak_fingerprint = __esm(() => {
-  PUBLIC_PREFIXES = [
-    ["sk-ant-api03-", "Anthropic API key"],
-    ["sk-ant-oat01-", "Anthropic OAuth token"],
-    ["sk-ant-", "Anthropic key"],
-    ["sk-proj-", "OpenAI project key"],
-    ["sk-svcacct-", "OpenAI service-account key"],
-    ["sk-admin-", "OpenAI admin key"],
-    ["sk-or-v1-", "OpenRouter key"],
-    ["github_pat_", "GitHub fine-grained token"],
-    ["ghp_", "GitHub personal access token"],
-    ["gho_", "GitHub OAuth token"],
-    ["ghu_", "GitHub user-to-server token"],
-    ["ghs_", "GitHub server-to-server token"],
-    ["ghr_", "GitHub refresh token"],
-    ["glpat-", "GitLab personal access token"],
-    ["xoxb-", "Slack bot token"],
-    ["xoxp-", "Slack user token"],
-    ["xapp-", "Slack app-level token"],
-    ["sk_live_", "Stripe live secret key"],
-    ["sk_test_", "Stripe test secret key"],
-    ["rk_live_", "Stripe restricted key"],
-    ["AKIA", "AWS access key ID"],
-    ["ASIA", "AWS temporary access key ID"],
-    ["AIza", "Google API key"],
-    ["hf_", "Hugging Face token"],
-    ["gsk_", "Groq API key"],
-    ["r8_", "Replicate token"],
-    ["xai-", "xAI key"],
-    ["npm_", "npm access token"],
-    ["dop_v1_", "DigitalOcean token"],
-    ["shpat_", "Shopify access token"],
-    ["sbp_", "Supabase token"]
-  ];
-});
-
-// src/audit/macos-notifier.ts
-import { execFileSync as execFileSync3 } from "node:child_process";
-import { chmodSync as chmodSync5, existsSync as existsSync26, mkdirSync as mkdirSync17, readdirSync as readdirSync16, renameSync as renameSync8, rmSync as rmSync9, writeFileSync as writeFileSync15 } from "node:fs";
-import { homedir as homedir24 } from "node:os";
-import { resolve as resolve22 } from "node:path";
-function macNotifierAppPath(home) {
-  return resolve22(runDir(home), "..", "bin", "FailproofAI Notifier.app");
-}
-function macNotifierRunnerPath(home) {
-  return resolve22(runDir(home), "..", "bin", "failproofai-notifier.zsh");
-}
-function macNotifierPlistPath() {
-  return resolve22(homedir24(), "Library", "LaunchAgents", `${MAC_NOTIFIER_LABEL}.plist`);
-}
-function escapeXml2(s) {
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
-}
-function notifierScript(home) {
-  const dir = macNotifyDir(home);
-  const quotedDir = `'${dir.replace(/'/g, `'\\''`)}'`;
-  return `#!/bin/zsh
-set -u
-setopt NULL_GLOB
-
-drop_dir=${quotedDir}
-
-for entry_path in "$drop_dir"/*; do
-  [ -f "$entry_path" ] || continue
-  note_title=$(/usr/bin/sed -n '1p' "$entry_path")
-  note_body=$(/usr/bin/sed -n '2,$p' "$entry_path" | /usr/bin/tr '\\n' ' ')
-  /bin/rm -f "$entry_path"
-  [ -n "$note_title" ] || continue
-  /usr/bin/osascript - "$note_title" "$note_body" <<'APPLESCRIPT'
-on run argv
-  display notification (item 2 of argv) with title (item 1 of argv)
-end run
-APPLESCRIPT
-done
-`;
-}
-function notifierPlistContents(runnerPath, watchDir) {
-  return `<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-    <key>Label</key>
-    <string>${escapeXml2(MAC_NOTIFIER_LABEL)}</string>
-    <key>ProgramArguments</key>
-    <array>
-        <string>${escapeXml2(runnerPath)}</string>
-    </array>
-    <!-- Started only when something is queued, and it exits when the queue is
-         empty. RunAtLoad would fire it once at login with nothing to say. -->
-    <key>WatchPaths</key>
-    <array>
-        <string>${escapeXml2(watchDir)}</string>
-    </array>
-    <key>RunAtLoad</key>
-    <false/>
-    <!-- Not a service: it does one pass and exits, and launchd must not treat
-         that as a crash to restart. -->
-    <key>KeepAlive</key>
-    <false/>
-    <key>ProcessType</key>
-    <string>Interactive</string>
-</dict>
-</plist>
-`;
-}
-function run(cmd, args) {
-  execFileSync3(cmd, args, { stdio: "ignore", timeout: 20000 });
-}
-function installMacNotifier(home) {
-  if (process.platform !== "darwin")
-    return { installed: false, reason: "not macOS" };
-  try {
-    const runner = macNotifierRunnerPath(home);
-    const watch = macNotifyDir(home);
-    mkdirSync17(watch, { recursive: true, mode: 448 });
-    mkdirSync17(resolve22(runner, ".."), { recursive: true });
-    writeFileSync15(runner, notifierScript(home), { mode: 448 });
-    chmodSync5(runner, 448);
-    rmSync9(macNotifierAppPath(home), { recursive: true, force: true });
-    mkdirSync17(resolve22(macNotifierPlistPath(), ".."), { recursive: true });
-    writeFileSync15(macNotifierPlistPath(), notifierPlistContents(runner, watch), { mode: 420 });
-    const target = `gui/${process.getuid?.() ?? 0}`;
-    try {
-      run("launchctl", ["bootout", `${target}/${MAC_NOTIFIER_LABEL}`]);
-    } catch {}
-    run("launchctl", ["bootstrap", target, macNotifierPlistPath()]);
-    return { installed: true };
-  } catch (err) {
-    return { installed: false, reason: err instanceof Error ? err.message : String(err) };
-  }
-}
-function uninstallMacNotifier(home) {
-  if (process.platform !== "darwin")
-    return;
-  try {
-    run("launchctl", ["bootout", `gui/${process.getuid?.() ?? 0}/${MAC_NOTIFIER_LABEL}`]);
-  } catch {}
-  rmSync9(macNotifierPlistPath(), { force: true });
-  rmSync9(macNotifierAppPath(home), { recursive: true, force: true });
-  rmSync9(macNotifierRunnerPath(home), { force: true });
-  rmSync9(macNotifyDir(home), { recursive: true, force: true });
-}
-function queueMacNotification(id, title, body, home) {
-  if (!isFindingId(id))
-    return false;
-  const dir = macNotifyDir(home);
-  const tmp = resolve22(dir, "..", `notify-${id}.tmp`);
-  try {
-    mkdirSync17(dir, { recursive: true, mode: 448 });
-    const payload = `${title.replace(/\s+/g, " ")}
-${body.replace(/\s+/g, " ")}
-`;
-    writeFileSync15(tmp, payload, { mode: 384 });
-    renameSync8(tmp, resolve22(dir, id));
-    return true;
-  } catch {
-    try {
-      rmSync9(tmp, { force: true });
-    } catch {}
-    return false;
-  }
-}
-function macNotifierInstalled(home) {
-  return existsSync26(macNotifierPlistPath()) && existsSync26(macNotifierRunnerPath(home));
-}
-function pruneMacNotifyQueue(home, maxAgeMs = 7 * 86400000) {
-  try {
-    const dir = macNotifyDir(home);
-    if (!existsSync26(dir))
-      return;
-    const { statSync } = __require("node:fs");
-    for (const name of readdirSync16(dir)) {
-      const path = resolve22(dir, name);
-      try {
-        if (Date.now() - statSync(path).mtimeMs > maxAgeMs)
-          rmSync9(path, { force: true });
-      } catch {}
-    }
-  } catch {}
-}
-var MAC_NOTIFIER_LABEL = "ai.failproof.notifier", macNotifyDir = (home) => resolve22(runDir(home), "notify");
-var init_macos_notifier = __esm(() => {
-  init_fp_home();
-  init_leak_fingerprint();
-});
-
 // lib/fetch-with-timeout.ts
 function fetchWithTimeout(input, init = {}, timeoutMs = DEFAULT_FETCH_TIMEOUT_MS) {
   const timeoutSignal = AbortSignal.timeout(timeoutMs);
@@ -25354,7 +24965,7 @@ var DEFAULT_FETCH_TIMEOUT_MS = 15000;
 
 // src/hooks/cloud-enrollment.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { existsSync as existsSync27, readFileSync as readFileSync22, rmSync as rmSync10 } from "node:fs";
+import { existsSync as existsSync26, readFileSync as readFileSync22, rmSync as rmSync9 } from "node:fs";
 import { hostname as hostname4 } from "node:os";
 function cloudCredentialPath() {
   return process.env.FAILPROOFAI_CLOUD_CREDENTIALS ?? credentialsFile();
@@ -25393,7 +25004,7 @@ function readCloudCredentials() {
   if (!usingJsonOverride())
     return readCredentials().cloud ?? null;
   const path = cloudCredentialPath();
-  if (!existsSync27(path))
+  if (!existsSync26(path))
     return null;
   try {
     const raw = JSON.parse(readFileSync22(path, "utf8"));
@@ -25435,10 +25046,10 @@ function resolveMachineLabel(explicit) {
 function clearCloudCredentials() {
   if (usingJsonOverride()) {
     const path = cloudCredentialPath();
-    if (!existsSync27(path))
+    if (!existsSync26(path))
       return false;
     try {
-      rmSync10(path);
+      rmSync9(path);
       return true;
     } catch {
       return false;
@@ -25686,14 +25297,14 @@ var init_cloud_connection = __esm(() => {
 });
 
 // src/hooks/setup-state.ts
-import { existsSync as existsSync28, realpathSync as realpathSync2, statSync as statSync17 } from "node:fs";
-import { dirname as dirname14, resolve as resolve23 } from "node:path";
-import { homedir as homedir25 } from "node:os";
-function globalConfigPath(home = homedir25()) {
+import { existsSync as existsSync27, realpathSync as realpathSync2, statSync as statSync17 } from "node:fs";
+import { dirname as dirname14, resolve as resolve22 } from "node:path";
+import { homedir as homedir24 } from "node:os";
+function globalConfigPath(home = homedir24()) {
   return globalPolicyConfigFile(home);
 }
 function projectConfigPath(projectRoot) {
-  return resolve23(projectRoot, ".failproofai", "policies-config.json");
+  return resolve22(projectRoot, ".failproofai", "policies-config.json");
 }
 function legacyMarkerPath(home) {
   return launcherMarker(home);
@@ -25705,18 +25316,18 @@ function isDir(path) {
     return false;
   }
 }
-function findProjectRoot(start, home = homedir25()) {
+function findProjectRoot(start, home = homedir24()) {
   const resolvedHome = realResolve(home);
   let dir = realResolve(start);
   while (dir !== resolvedHome) {
-    if (isDir(resolve23(dir, ".failproofai")))
+    if (isDir(resolve22(dir, ".failproofai")))
       return dir;
     const parent = dirname14(dir);
     if (parent === dir)
       break;
     dir = parent;
   }
-  return resolve23(start);
+  return resolve22(start);
 }
 function hasGlobalHooksInstalled() {
   for (const id of INTEGRATION_TYPES) {
@@ -25728,14 +25339,14 @@ function hasGlobalHooksInstalled() {
   return false;
 }
 function realResolve(path) {
-  const lexical = resolve23(path);
+  const lexical = resolve22(path);
   try {
     return realpathSync2(lexical);
   } catch {
     return lexical;
   }
 }
-function detectSetupState(cwd = process.cwd(), home = homedir25()) {
+function detectSetupState(cwd = process.cwd(), home = homedir24()) {
   const resolvedCwd = realResolve(cwd);
   const resolvedHome = realResolve(home);
   const projectRoot = findProjectRoot(resolvedCwd, resolvedHome);
@@ -25743,10 +25354,10 @@ function detectSetupState(cwd = process.cwd(), home = homedir25()) {
     cwd: resolvedCwd,
     home: resolvedHome,
     projectRoot,
-    hasGlobalConfig: existsSync28(globalConfigPath(resolvedHome)),
-    hasProjectConfig: projectRoot !== resolvedHome && existsSync28(projectConfigPath(projectRoot)),
+    hasGlobalConfig: existsSync27(globalConfigPath(resolvedHome)),
+    hasProjectConfig: projectRoot !== resolvedHome && existsSync27(projectConfigPath(projectRoot)),
     hasGlobalHooks: hasGlobalHooksInstalled(),
-    hasLegacyMarker: existsSync28(legacyMarkerPath(resolvedHome)),
+    hasLegacyMarker: existsSync27(legacyMarkerPath(resolvedHome)),
     inHomeDir: resolvedCwd === resolvedHome
   };
 }
@@ -25763,11 +25374,11 @@ var init_setup_state = __esm(() => {
 });
 
 // src/hooks/onboarding-attempt.ts
-import { existsSync as existsSync29, mkdirSync as mkdirSync18, readFileSync as readFileSync23, rmSync as rmSync11, writeFileSync as writeFileSync16 } from "node:fs";
+import { existsSync as existsSync28, mkdirSync as mkdirSync17, readFileSync as readFileSync23, rmSync as rmSync10, writeFileSync as writeFileSync15 } from "node:fs";
 import { dirname as dirname15 } from "node:path";
 function readOnboardingAttempt() {
   const path = onboardingAttemptFile();
-  if (!existsSync29(path))
+  if (!existsSync28(path))
     return null;
   try {
     const raw = JSON.parse(readFileSync23(path, "utf8"));
@@ -25789,7 +25400,7 @@ function readOnboardingAttempt() {
 function recordOnboardingAttempt(reason, cliVersion, daemonStatus, now = Date.now()) {
   try {
     const path = onboardingAttemptFile();
-    mkdirSync18(dirname15(path), { recursive: true });
+    mkdirSync17(dirname15(path), { recursive: true });
     const record = {
       schemaVersion: SCHEMA_VERSION3,
       reason,
@@ -25797,12 +25408,12 @@ function recordOnboardingAttempt(reason, cliVersion, daemonStatus, now = Date.no
       daemonStatus,
       at: now
     };
-    writeFileSync16(path, JSON.stringify(record, null, 2), "utf8");
+    writeFileSync15(path, JSON.stringify(record, null, 2), "utf8");
   } catch {}
 }
 function clearOnboardingAttempt() {
   try {
-    rmSync11(onboardingAttemptFile(), { force: true });
+    rmSync10(onboardingAttemptFile(), { force: true });
   } catch {}
 }
 function blockerCleared(attempt, probe) {
@@ -25844,9 +25455,9 @@ var init_onboarding_attempt = __esm(() => {
 });
 
 // src/hooks/onboarding-lock.ts
-import { mkdirSync as mkdirSync19, readFileSync as readFileSync24, rmSync as rmSync12, writeFileSync as writeFileSync17 } from "node:fs";
-import { homedir as homedir26 } from "node:os";
-function onboardingLockPath(home = homedir26()) {
+import { mkdirSync as mkdirSync18, readFileSync as readFileSync24, rmSync as rmSync11, writeFileSync as writeFileSync16 } from "node:fs";
+import { homedir as homedir25 } from "node:os";
+function onboardingLockPath(home = homedir25()) {
   return onboardingLockFile(home);
 }
 function processAlive(pid) {
@@ -25869,15 +25480,15 @@ function readLock(path) {
     return null;
   }
 }
-function acquireOnboardingLock(home = homedir26()) {
+function acquireOnboardingLock(home = homedir25()) {
   const path = onboardingLockPath(home);
   try {
     const held = readLock(path);
     if (held && held.pid !== process.pid && processAlive(held.pid))
       return null;
-    mkdirSync19(stateDir(home), { recursive: true });
+    mkdirSync18(stateDir(home), { recursive: true });
     const body = { pid: process.pid, startedAt: Date.now() };
-    writeFileSync17(path, JSON.stringify(body), "utf8");
+    writeFileSync16(path, JSON.stringify(body), "utf8");
     let released = false;
     return {
       release() {
@@ -25887,7 +25498,7 @@ function acquireOnboardingLock(home = homedir26()) {
         try {
           const current = readLock(path);
           if (!current || current.pid === process.pid)
-            rmSync12(path, { force: true });
+            rmSync11(path, { force: true });
         } catch {}
       }
     };
@@ -25900,7 +25511,7 @@ var init_onboarding_lock = __esm(() => {
 });
 
 // lib/claude-sessions.ts
-import { readdirSync as readdirSync17, statSync as statSync18, existsSync as existsSync30 } from "node:fs";
+import { readdirSync as readdirSync16, statSync as statSync18, existsSync as existsSync29 } from "node:fs";
 import { join as join32, basename as basename6 } from "node:path";
 function getClaudeProjectsRoot() {
   return getClaudeProjectsPath();
@@ -25909,7 +25520,7 @@ function listClaudeProjects() {
   const root = getClaudeProjectsRoot();
   let entries;
   try {
-    entries = readdirSync17(root, { withFileTypes: true });
+    entries = readdirSync16(root, { withFileTypes: true });
   } catch {
     return [];
   }
@@ -25919,45 +25530,11 @@ function listClaudeProjects() {
     path: join32(root, e.name)
   }));
 }
-function collectSubagentTranscripts(dir, relPrefix, project, out, depth) {
-  if (depth > MAX_SUBAGENT_DEPTH)
-    return;
-  let entries;
-  try {
-    entries = readdirSync17(dir, { withFileTypes: true });
-  } catch {
-    return;
-  }
-  for (const entry of entries) {
-    if (entry.isSymbolicLink())
-      continue;
-    if (entry.isDirectory()) {
-      collectSubagentTranscripts(join32(dir, entry.name), relPrefix ? `${relPrefix}__${entry.name}` : entry.name, project, out, depth + 1);
-      continue;
-    }
-    if (!entry.isFile() || !entry.name.endsWith(".jsonl"))
-      continue;
-    const stem = entry.name.slice(0, -".jsonl".length);
-    const transcriptPath = join32(dir, entry.name);
-    try {
-      const s = statSync18(transcriptPath);
-      out.push({
-        projectName: project.name,
-        cwd: project.cwd,
-        sessionId: relPrefix ? `${relPrefix}__${stem}` : stem,
-        transcriptPath,
-        mtimeMs: s.mtimeMs,
-        sizeBytes: s.size,
-        isSubagent: true
-      });
-    } catch {}
-  }
-}
 function listClaudeTranscripts(project) {
   const out = [];
   let entries;
   try {
-    entries = readdirSync17(project.path, { withFileTypes: true });
+    entries = readdirSync16(project.path, { withFileTypes: true });
   } catch {
     return out;
   }
@@ -25981,14 +25558,37 @@ function listClaudeTranscripts(project) {
       } catch {}
     } else if (entry.isDirectory() && UUID_RE2.test(entry.name)) {
       const subDir = join32(project.path, entry.name, "subagents");
-      if (!existsSync30(subDir))
+      if (!existsSync29(subDir))
         continue;
-      collectSubagentTranscripts(subDir, entry.name, project, out, 0);
+      let subEntries;
+      try {
+        subEntries = readdirSync16(subDir, { withFileTypes: true });
+      } catch {
+        continue;
+      }
+      for (const sub of subEntries) {
+        if (!sub.isFile() || !sub.name.endsWith(".jsonl"))
+          continue;
+        const agentId = sub.name.slice(0, -".jsonl".length);
+        const transcriptPath = join32(subDir, sub.name);
+        try {
+          const s = statSync18(transcriptPath);
+          out.push({
+            projectName: project.name,
+            cwd: project.cwd,
+            sessionId: agentId,
+            transcriptPath,
+            mtimeMs: s.mtimeMs,
+            sizeBytes: s.size,
+            isSubagent: true
+          });
+        } catch {}
+      }
     }
   }
   return out;
 }
-var UUID_RE2, MAX_SUBAGENT_DEPTH = 5;
+var UUID_RE2;
 var init_claude_sessions = __esm(() => {
   init_paths();
   UUID_RE2 = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/i;
@@ -26047,7 +25647,6 @@ var init_shared = __esm(() => {
 
 // src/audit/cli-adapters/claude.ts
 import { readFile as readFile15, open as open2 } from "node:fs/promises";
-import { readFileSync as readFileSync25 } from "node:fs";
 async function listClaudeTranscriptMetadata(opts = {}) {
   const projectFilter = opts.projects ? new Set(opts.projects) : null;
   const sinceMs = opts.sinceMs ?? 0;
@@ -26064,22 +25663,13 @@ async function listClaudeTranscriptMetadata(opts = {}) {
     for (const t of transcripts) {
       if (t.mtimeMs < sinceMs)
         continue;
-      let sessionDescription;
-      if (t.isSubagent) {
-        try {
-          const meta = JSON.parse(readFileSync25(t.transcriptPath.replace(/\.jsonl$/, ".meta.json"), "utf8"));
-          if (typeof meta.description === "string")
-            sessionDescription = meta.description;
-        } catch {}
-      }
       out.push({
         cli: "claude",
         projectName: project.name,
         sessionId: t.sessionId,
         transcriptPath: t.transcriptPath,
         mtimeMs: t.mtimeMs,
-        sizeBytes: t.sizeBytes,
-        sessionDescription
+        sizeBytes: t.sizeBytes
       });
     }
   }
@@ -27309,420 +26899,9 @@ var init_features = __esm(() => {
   })();
 });
 
-// src/audit/leak-scan.ts
-function unquote(v) {
-  return v.startsWith('"') && v.endsWith('"') || v.startsWith("'") && v.endsWith("'") ? v.slice(1, -1) : v;
-}
-function isDocsLiteral(value) {
-  const { createHash } = __require("node:crypto");
-  return DOCS_LITERALS.has(createHash("sha256").update(value).digest("hex"));
-}
-function isSelfOutput(text) {
-  return SELF_OUTPUT_MARKERS.some((m) => text.includes(m));
-}
-function literalPrefixOf(source) {
-  let out = "";
-  for (let i = 0;i < source.length; i++) {
-    const c = source[i];
-    if (c === "\\") {
-      const next = source[i + 1];
-      if (next === undefined)
-        break;
-      if (/[dwsSDWbB]/.test(next))
-        break;
-      out += next;
-      i++;
-      continue;
-    }
-    if ("[](){}|?*+^$.".includes(c))
-      break;
-    out += c;
-  }
-  return out.length >= 2 ? out : null;
-}
-function applicablePatterns(text) {
-  return GATED_PATTERNS.filter(([, , gate]) => gate === null || text.includes(gate));
-}
-function findSecrets(text) {
-  if (!text)
-    return [];
-  if (isSelfOutput(text))
-    return [];
-  const byValue = new Map;
-  for (const [pattern, label] of applicablePatterns(text)) {
-    const re = new RegExp(pattern.source, pattern.flags.includes("g") ? pattern.flags : pattern.flags + "g");
-    for (const m of text.matchAll(re)) {
-      const value = m[0];
-      if (isDocsLiteral(value))
-        continue;
-      if (!byValue.has(value))
-        byValue.set(value, { value, name: null, rule: label, shaped: true });
-    }
-  }
-  for (const m of text.matchAll(ASSIGNMENT_RE)) {
-    const name = m[2];
-    const value = unquote(m[4]);
-    const existing = byValue.get(value);
-    if (existing)
-      existing.name ??= name;
-  }
-  return [...byValue.values()];
-}
-function flattenToolInput(input, depth = 0) {
-  if (depth > 6 || input == null)
-    return "";
-  if (typeof input === "string")
-    return input;
-  if (typeof input === "number" || typeof input === "boolean")
-    return String(input);
-  if (Array.isArray(input))
-    return input.map((v) => flattenToolInput(v, depth + 1)).join(`
-`);
-  if (typeof input === "object") {
-    return Object.entries(input).map(([k, v]) => `${k}=${flattenToolInput(v, depth + 1)}`).join(`
-`);
-  }
-  return "";
-}
-var LEAK_SCAN_VERSION = 6, ASSIGNMENT_RE, DOCS_LITERALS, SELF_OUTPUT_MARKERS, GATED_PATTERNS;
-var init_leak_scan = __esm(() => {
-  init_builtin_policies();
-  ASSIGNMENT_RE = /(["']?)\b([A-Za-z_][A-Za-z0-9_]{0,127})\1([ \t]*(?::(?!\/\/)|=)[ \t]*)("[^"]*"|'[^']*'|[^\s;|&"']+)/g;
-  DOCS_LITERALS = new Set([
-    "1a5d44a2dca19669d72edf4c4f1c27c4c1ca4b4408fbb17f6ce4ad452d78ddb3",
-    "78314b11be2e581549ac1c4f616563fad3fdf0c3b71678f6e2299182080e0598",
-    "cb20d34a7adda2f5d2043836051e242fd4c2b233e02c80c91fe9d5af9b100574",
-    "3543c50b0cb9cea8e55eb1f529b79f043cb250d485fde7b66cabbb5183add7da",
-    "1fae28c1b317300acfd90078c973567c8159015822b0c8b81508a5ec40517d20",
-    "23219833092a3136d7ad178ccb62ebd6ac8cba54ff24c2cfcd37b84aba9e95cf",
-    "872db7f4419592e397ef45230f910e06b48c36ed9970cf1f9e4fb896e69f129c",
-    "78a08441f4314f0a2833cfe58c62e555a162264206982cda39f6804f5048f570",
-    "2cafc0970149a84f3b9e62eaf169f36f59907a3b3e31f7b82e68c69cd27f7326",
-    "b363ade84d56c43bebbc9339b4971e340e3f13f7f8d45580b53373d2763e9e33"
-  ]);
-  SELF_OUTPUT_MARKERS = [
-    "[REDACTED:",
-    "[redacted:",
-    "failproofai audit",
-    "assigned secret]"
-  ];
-  GATED_PATTERNS = SECRET_PATTERNS.map(([re, label]) => [re, label, literalPrefixOf(re.source)]);
-});
-
-// src/audit/leak-record.ts
-function upsertFinding(record, incoming) {
-  const { sighting, ...rest } = incoming;
-  const existing = record.findings.find((f) => f.id === rest.id);
-  if (!existing) {
-    record.findings.push({
-      ...rest,
-      firstSeen: sighting.at,
-      lastSeen: sighting.at,
-      occurrences: 1,
-      sightings: [sighting]
-    });
-    return { record, isNew: true };
-  }
-  const seen = existing.sightings.some((s) => s.sessionId === sighting.sessionId && s.at === sighting.at && s.mechanism.direction === sighting.mechanism.direction && s.mechanism.summary === sighting.mechanism.summary);
-  if (seen)
-    return { record, isNew: false };
-  existing.occurrences += 1;
-  if (sighting.at > existing.lastSeen)
-    existing.lastSeen = sighting.at;
-  if (sighting.at < existing.firstSeen)
-    existing.firstSeen = sighting.at;
-  existing.sightings.push(sighting);
-  existing.sightings.sort((a, b) => a.at.localeCompare(b.at));
-  if (existing.sightings.length > MAX_SIGHTINGS) {
-    existing.sightings.splice(1, existing.sightings.length - MAX_SIGHTINGS);
-  }
-  return { record, isNew: false };
-}
-function pruneRecord(record, nowMs) {
-  const cutoff = new Date(nowMs - FINDING_TTL_DAYS * 86400000).toISOString();
-  const live = record.findings.filter((f) => !f.lastSeen || !Number.isFinite(Date.parse(f.lastSeen)) || f.lastSeen >= cutoff);
-  live.sort((a, b) => a.lastSeen < b.lastSeen ? 1 : a.lastSeen > b.lastSeen ? -1 : 0);
-  record.findings = live.slice(0, MAX_FINDINGS);
-  return record;
-}
-function emptyRecord(salt, nowIso) {
-  return {
-    schemaVersion: LEAK_RECORD_SCHEMA_VERSION,
-    salt,
-    updatedAt: nowIso,
-    findings: []
-  };
-}
-function describeMechanism(toolName, direction, shortPath) {
-  const where = shortPath ? ` ${shortPath}` : "";
-  let summary;
-  if (direction === "result") {
-    summary = shortPath ? `appeared in the output of reading${where}` : "appeared in tool output";
-  } else {
-    switch (toolName) {
-      case "Read":
-        summary = `read from${where || " a file"}`;
-        break;
-      case "Write":
-        summary = `written to${where || " a file"}`;
-        break;
-      case "Edit":
-      case "NotebookEdit":
-        summary = `edited into${where || " a file"}`;
-        break;
-      case "Bash":
-        summary = "passed in a shell command";
-        break;
-      default:
-        summary = `sent to the ${toolName} tool`;
-    }
-  }
-  return { summary, toolName, direction };
-}
-var MAX_SIGHTINGS = 5, FINDING_TTL_DAYS = 90, MAX_FINDINGS = 500, LEAK_RECORD_SCHEMA_VERSION = 1;
-
-// src/audit/leak-store.ts
-import { randomBytes as randomBytes2 } from "node:crypto";
-import { existsSync as existsSync31, mkdirSync as mkdirSync20, readFileSync as readFileSync26 } from "node:fs";
-import { dirname as dirname16 } from "node:path";
-function readJson(path) {
-  try {
-    if (!existsSync31(path))
-      return null;
-    return JSON.parse(readFileSync26(path, "utf8"));
-  } catch {
-    return null;
-  }
-}
-function readLeakIdentity(home) {
-  const existing = readJson(auditLeakIdentityFile(home));
-  if (existing && typeof existing.salt === "string" && existing.salt.length >= 32) {
-    return {
-      salt: existing.salt,
-      dismissed: existing.dismissed ?? []
-    };
-  }
-  const minted = { salt: randomBytes2(32).toString("hex"), dismissed: [] };
-  writeLeakIdentity(minted, home);
-  return minted;
-}
-function writeLeakIdentity(identity, home) {
-  const path = auditLeakIdentityFile(home);
-  try {
-    mkdirSync20(dirname16(path), { recursive: true });
-    writeJsonAtomically(path, identity, { mode: FILE_MODE });
-    return true;
-  } catch {
-    return false;
-  }
-}
-function sanitizeFinding(raw) {
-  if (!raw || typeof raw !== "object" || Array.isArray(raw))
-    return null;
-  const f = raw;
-  if (typeof f.id !== "string" || !isFindingId(f.id))
-    return null;
-  const fp = f.fingerprint;
-  if (!fp || typeof fp !== "object" || typeof fp.display !== "string" || typeof fp.label !== "string") {
-    return null;
-  }
-  const sightings = Array.isArray(f.sightings) ? f.sightings.filter((s) => {
-    if (!s || typeof s !== "object")
-      return false;
-    const m = s.mechanism;
-    return !!m && typeof m === "object" && typeof m.summary === "string";
-  }) : [];
-  return {
-    ...f,
-    fingerprint: {
-      display: fp.display,
-      label: fp.label,
-      length: typeof fp.length === "number" && Number.isFinite(fp.length) ? fp.length : 0,
-      attributed: fp.attributed === true
-    },
-    name: typeof f.name === "string" ? f.name : null,
-    firstSeen: typeof f.firstSeen === "string" ? f.firstSeen : "",
-    lastSeen: typeof f.lastSeen === "string" ? f.lastSeen : "",
-    occurrences: typeof f.occurrences === "number" && Number.isFinite(f.occurrences) ? f.occurrences : sightings.length,
-    sightings
-  };
-}
-function readLeakRecord(home) {
-  const identity = readLeakIdentity(home);
-  const raw = readJson(auditLeaksFile(home));
-  if (!raw || raw.schemaVersion !== LEAK_RECORD_SCHEMA_VERSION || !Array.isArray(raw.findings)) {
-    return emptyRecord(identity.salt, new Date().toISOString());
-  }
-  const findings = raw.findings.map(sanitizeFinding).filter((f) => f !== null);
-  return { ...raw, findings, salt: identity.salt };
-}
-function writeLeakRecord(record, home, nowMs = Date.now()) {
-  const path = auditLeaksFile(home);
-  try {
-    mkdirSync20(dirname16(path), { recursive: true });
-    const pruned = pruneRecord(record, nowMs);
-    pruned.updatedAt = new Date(nowMs).toISOString();
-    writeJsonAtomically(path, pruned, { mode: FILE_MODE });
-    return true;
-  } catch {
-    return false;
-  }
-}
-function activeFindings(record, home) {
-  const dismissed = new Set(readLeakIdentity(home).dismissed);
-  return record.findings.filter((f) => !dismissed.has(f.id)).sort((a, b) => a.lastSeen < b.lastSeen ? 1 : a.lastSeen > b.lastSeen ? -1 : 0);
-}
-var FILE_MODE = 384;
-var init_leak_store = __esm(() => {
-  init_fp_home();
-  init_atomic_write();
-  init_leak_fingerprint();
-});
-
-// src/audit/redact-example.ts
-import { homedir as homedir27 } from "node:os";
-function maskTruncatedSecret(input) {
-  for (const [pattern, label] of SECRET_PREFIXES) {
-    if (pattern.test(input)) {
-      return input.replace(pattern, `[REDACTED: ${label}]`);
-    }
-  }
-  return input;
-}
-function identifierComponents(name) {
-  return name.replace(/([a-z0-9])([A-Z])/g, "$1_$2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1_$2").toUpperCase().split(/[_\-.]+/).filter(Boolean);
-}
-function isPublishedByDesign(name) {
-  const components = identifierComponents(name);
-  if (components.length === 0)
-    return false;
-  const upper = components.join("_");
-  for (const prefix of CLIENT_BUNDLE_PREFIXES) {
-    if (upper === prefix || upper.startsWith(prefix + "_"))
-      return true;
-  }
-  return PUBLISHED_MARKERS.test(upper);
-}
-function isSecretName(name) {
-  if (isPublishedByDesign(name))
-    return false;
-  const upper = name.toUpperCase();
-  if (SECRET_NAME_SUBSTRINGS.some((word) => upper.includes(word)))
-    return true;
-  const components = identifierComponents(name);
-  if (components.some((part) => SECRET_NAME_COMPONENTS.includes(part)))
-    return true;
-  return components.length > 1 && components.some((part) => COMPOUND_ONLY_COMPONENTS.includes(part));
-}
-function maskAssignedSecrets(input) {
-  let out = input.replace(ASSIGNMENT_RE2, (match, quote, name, separator, value) => {
-    if (!isSecretName(name))
-      return match;
-    if (value.startsWith("[REDACTED"))
-      return match;
-    return `${quote}${name}${quote}${separator}[REDACTED: assigned secret]`;
-  });
-  out = out.replace(URL_CREDENTIALS_RE, "$1[REDACTED: URL credentials]@");
-  out = out.replace(BASIC_AUTH_FLAG_RE, "$1[REDACTED: basic auth]");
-  return out;
-}
-function maskSecrets(input) {
-  let out = input;
-  for (const [pattern, label] of SECRET_PATTERNS) {
-    const global = new RegExp(pattern.source, pattern.flags.includes("g") ? pattern.flags : `${pattern.flags}g`);
-    out = out.replace(global, `[REDACTED: ${label}]`);
-  }
-  return out;
-}
-function shortenPaths(input, home = homedir27()) {
-  const homeRoot = home.replace(/\/+$/, "");
-  return input.replace(ABSOLUTE_PATH_RE, (match, offset, whole) => {
-    if (PUBLIC_PATH_ROOTS.some((root) => match.startsWith(root)))
-      return match;
-    if (offset > 0 && whole[offset - 1] === "/" && /[a-z][a-z0-9+.\-]*:$/i.test(whole.slice(0, offset - 1))) {
-      const urlSegments = match.split("/").filter(Boolean);
-      if (urlSegments.length <= 1)
-        return match;
-      const host = urlSegments[0];
-      const leaf = urlSegments[urlSegments.length - 1];
-      const elided = urlSegments.length > 2 ? "/…" : "";
-      return `/${host}${elided}/${leaf}${match.endsWith("/") ? "/" : ""}`;
-    }
-    const trailingSlash = match.endsWith("/");
-    const segments = match.split("/").filter(Boolean);
-    if (segments.length === 0)
-      return match;
-    const basename = segments[segments.length - 1];
-    const kept = segments.slice(Math.max(0, segments.length - 1 - KEPT_PARENT_SEGMENTS), segments.length - 1);
-    const matchRoot = match.replace(/\/+$/, "");
-    const underHome = homeRoot.length > 0 && (matchRoot === homeRoot || matchRoot.startsWith(`${homeRoot}/`));
-    if (matchRoot === homeRoot && homeRoot.length > 0) {
-      return trailingSlash ? "~/" : "~";
-    }
-    const root = underHome ? "~" : "";
-    const middle = segments.length - kept.length - 1 > 0 ? "/…" : "";
-    const tail = [...kept, basename].join("/");
-    return `${root}${middle}/${tail}${trailingSlash ? "/" : ""}`;
-  });
-}
-function maskSecretsOnly(input) {
-  return maskAssignedSecrets(maskTruncatedSecret(maskSecrets(input)));
-}
-function redactExample(input, home = homedir27()) {
-  const masked = maskSecretsOnly(input);
-  const shortened = shortenPaths(masked, home);
-  const collapsed = shortened.replace(/\s+/g, " ").trim();
-  return collapsed.length > REDACTED_EXAMPLE_MAX_CHARS ? `${collapsed.slice(0, REDACTED_EXAMPLE_MAX_CHARS - 1)}…` : collapsed;
-}
-var REDACTED_EXAMPLE_MAX_CHARS = 160, KEPT_PARENT_SEGMENTS = 0, ABSOLUTE_PATH_RE, PUBLIC_PATH_ROOTS, SECRET_PREFIXES, SECRET_NAME_SUBSTRINGS, SECRET_NAME_COMPONENTS, COMPOUND_ONLY_COMPONENTS, ASSIGNMENT_RE2, URL_CREDENTIALS_RE, BASIC_AUTH_FLAG_RE, CLIENT_BUNDLE_PREFIXES, PUBLISHED_MARKERS;
-var init_redact_example = __esm(() => {
-  init_builtin_policies();
-  ABSOLUTE_PATH_RE = /(?:\/[\w.\-@+]+){2,}\/?/g;
-  PUBLIC_PATH_ROOTS = ["/dev/", "/proc/", "/sys/"];
-  SECRET_PREFIXES = [
-    [/(?<!\w)(?:Authorization:\s*)?Bearer\s+\S*$/i, "bearer token"],
-    [/(?<!\w)sk-ant-\S*$/, "Anthropic API key"],
-    [/(?<!\w)sk-proj-\S*$/, "OpenAI project API key"],
-    [/(?<!\w)sk-\S*$/, "OpenAI API key"],
-    [/(?<!\w)ghp_\S*$/, "GitHub personal access token"],
-    [/(?<!\w)github_pat_\S*$/, "GitHub fine-grained token"],
-    [/(?<!\w)AKIA\S*$/, "AWS access key ID"],
-    [/(?<!\w)sk_live_\S*$/, "Stripe live secret key"],
-    [/(?<!\w)sk_test_\S*$/, "Stripe test secret key"],
-    [/(?<!\w)AIza\S*$/, "Google API key"],
-    [/-----BEGIN\s[A-Z ]*$/, "private key"]
-  ];
-  SECRET_NAME_SUBSTRINGS = [
-    "TOKEN",
-    "SECRET",
-    "PASSWORD",
-    "PASSWD",
-    "PASSPHRASE",
-    "CREDENTIAL",
-    "APIKEY",
-    "PRIVATEKEY"
-  ];
-  SECRET_NAME_COMPONENTS = ["PASS", "AUTH", "PAT", "SIG", "SIGNATURE", "COOKIE"];
-  COMPOUND_ONLY_COMPONENTS = ["PWD", "KEY"];
-  ASSIGNMENT_RE2 = /(["']?)\b([A-Za-z_][A-Za-z0-9_]{0,127})\1([ \t]*(?::(?!\/\/)|=)[ \t]*)("[^"]*"|'[^']*'|[^\s;|&"']+)/g;
-  URL_CREDENTIALS_RE = /([a-z][a-z0-9+.\-]{0,31}:\/\/)[^\s/:@]{1,256}:[^\s/@]{1,256}@/gi;
-  BASIC_AUTH_FLAG_RE = /((?:^|\s)(?:-u|--user)[\s=])\S+:\S+/g;
-  CLIENT_BUNDLE_PREFIXES = [
-    "NEXT_PUBLIC",
-    "VITE",
-    "REACT_APP",
-    "EXPO_PUBLIC",
-    "NUXT_PUBLIC",
-    "GATSBY",
-    "STORYBOOK",
-    "PUBLIC"
-  ];
-  PUBLISHED_MARKERS = /PUBLISHABLE|(^|_)PUBLIC_KEY$|(^|_)ANON_KEY$/;
-});
-
 // src/audit/cache.ts
 import { createHash as createHash8 } from "node:crypto";
-import { existsSync as existsSync32, mkdirSync as mkdirSync21, readFileSync as readFileSync27, writeFileSync as writeFileSync18, chmodSync as chmodSync6, openSync, readSync, closeSync } from "node:fs";
+import { existsSync as existsSync30, mkdirSync as mkdirSync19, readFileSync as readFileSync25, writeFileSync as writeFileSync17, chmodSync as chmodSync5, openSync, readSync, closeSync } from "node:fs";
 import { join as join33 } from "node:path";
 function getEngineVersion() {
   if (cachedEngineVersion)
@@ -27783,10 +26962,10 @@ function readCachedTranscript(transcriptPath, mtimeMs, sizeBytes) {
   if (sizeBytes === 0)
     return null;
   const cachePath = getCachePathFor(transcriptPath);
-  if (!existsSync32(cachePath))
+  if (!existsSync30(cachePath))
     return null;
   try {
-    const raw = readFileSync27(cachePath, "utf-8");
+    const raw = readFileSync25(cachePath, "utf-8");
     const entry = JSON.parse(raw);
     if (entry.schemaVersion !== CACHE_SCHEMA_VERSION)
       return null;
@@ -27794,8 +26973,6 @@ function readCachedTranscript(transcriptPath, mtimeMs, sizeBytes) {
       return null;
     if (entry.detectorVersion !== getDetectorVersion())
       return null;
-    if (entry.leakScanVersion !== LEAK_SCAN_VERSION)
-      return null;
     if (!Number.isFinite(entry.cachedAt) || Date.now() - entry.cachedAt > CACHE_TTL_MS)
       return null;
     if (!entry.result)
@@ -27827,7 +27004,7 @@ function writeCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes, result,
     return;
   const cachePath = getCachePathFor(transcriptPath);
   try {
-    mkdirSync21(auditCacheDir(), { recursive: true });
+    mkdirSync19(auditCacheDir(), { recursive: true });
     const entry = {
       schemaVersion: CACHE_SCHEMA_VERSION,
       cachedAt: Date.now(),
@@ -27835,7 +27012,6 @@ function writeCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes, result,
       sizeBytes,
       engineVersion: getEngineVersion(),
       detectorVersion: getDetectorVersion(),
-      leakScanVersion: LEAK_SCAN_VERSION,
       result
     };
     if (resume && resume.bytesScanned > 0) {
@@ -27846,9 +27022,9 @@ function writeCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes, result,
         entry.detectorState = encodeDetectorState(resume.detectorState);
       }
     }
-    writeFileSync18(cachePath, JSON.stringify(entry), { encoding: "utf-8", mode: 384 });
+    writeFileSync17(cachePath, JSON.stringify(entry), { encoding: "utf-8", mode: 384 });
     try {
-      chmodSync6(cachePath, 384);
+      chmodSync5(cachePath, 384);
     } catch {}
   } catch {}
 }
@@ -27856,7 +27032,6 @@ var cachedEngineVersion = null, cachedDetectorVersion = null, CACHE_SCHEMA_VERSI
 var init_cache = __esm(() => {
   init_builtin_policies();
   init_detectors();
-  init_leak_scan();
   init_fp_home();
   CACHE_TTL_MS = 30 * 24 * 60 * 60000;
 });
@@ -27925,30 +27100,6 @@ var init_replay = __esm(() => {
 });
 
 // src/audit/index.ts
-class ByteGate {
-  budget;
-  inFlight = 0;
-  waiting = [];
-  constructor(budget) {
-    this.budget = budget;
-  }
-  async acquire(bytes) {
-    const want = Math.max(0, bytes);
-    while (this.inFlight > 0 && this.inFlight + want > this.budget) {
-      await new Promise((resolve) => this.waiting.push(resolve));
-    }
-    this.inFlight += want;
-  }
-  release(bytes) {
-    this.inFlight -= Math.max(0, bytes);
-    if (this.inFlight < 0)
-      this.inFlight = 0;
-    const waiters = this.waiting;
-    this.waiting = [];
-    for (const wake of waiters)
-      wake();
-  }
-}
 function shortPolicyName(name) {
   const slash = name.indexOf("/");
   return slash >= 0 ? name.slice(slash + 1) : name;
@@ -27990,27 +27141,6 @@ function parseSinceOpt(since) {
     return t;
   throw new Error(`Invalid --since value: "${since}" (expected e.g. "7d", "30d", or "2026-04-01")`);
 }
-function isCredentialResearchSession(events, sessionDescription) {
-  if (sessionDescription && CREDENTIAL_RESEARCH_PURPOSE.test(sessionDescription))
-    return true;
-  const matched = new Set;
-  let evidenceEvents = 0;
-  for (const event of events) {
-    const intent = flattenToolInput(event.toolInput);
-    let eventMatched = false;
-    for (let i = 0;i < CREDENTIAL_RESEARCH_MARKERS.length; i++) {
-      if (CREDENTIAL_RESEARCH_MARKERS[i].test(intent)) {
-        matched.add(i);
-        eventMatched = true;
-      }
-    }
-    if (eventMatched)
-      evidenceEvents++;
-    if (matched.size >= 2 || evidenceEvents >= 3)
-      return true;
-  }
-  return false;
-}
 async function scanOneTranscript(meta, resume) {
   const empty = {
     transcriptPath: meta.transcriptPath,
@@ -28051,10 +27181,13 @@ async function scanOneTranscript(meta, resume) {
   const result = empty;
   result.eventsScanned = events.length;
   result.cwd = result.cwd || events[0].cwd || "";
-  const suppressLeakScan = isCredentialResearchSession(events, meta.sessionDescription);
-  if (suppressLeakScan)
-    result.leakScanSuppressed = "credential-research";
   for (const event of events) {
+    for (const detector of AUDIT_DETECTORS) {
+      const hit = detector.detect(event, sessionState);
+      if (!hit)
+        continue;
+      recordHit(result, detector.name, event.timestamp, event.cwd, truncateExample(hit.example));
+    }
     let replayHits;
     try {
       replayHits = await replayEvent(event);
@@ -28065,77 +27198,9 @@ async function scanOneTranscript(meta, resume) {
       const example = formatPolicyExample(hit.policyName, event);
       recordHit(result, hit.policyName, event.timestamp, event.cwd, truncateExample(example));
     }
-    if (!suppressLeakScan)
-      recordLeaks(result, event);
   }
   return { result, bytesScanned, detectorState: sessionState, resumed };
 }
-function recordLeaks(result, event) {
-  const salt = leakSalt();
-  if (!salt)
-    return;
-  const filePath = event.toolInput.file_path;
-  const shortPath = typeof filePath === "string" ? shortenPaths(filePath) : null;
-  const scan = (text, direction) => {
-    for (const match of findSecrets(text)) {
-      (result.leaks ??= []).push({
-        id: fingerprintId(match.value, salt),
-        fingerprint: fingerprintSecret(match.value, match.rule),
-        name: match.name,
-        rule: match.rule,
-        shaped: match.shaped,
-        timestamp: event.timestamp,
-        cwd: event.cwd,
-        toolName: event.toolName,
-        direction,
-        path: shortPath
-      });
-    }
-  };
-  scan(flattenToolInput(event.toolInput), "input");
-  if (event.toolResultText !== undefined)
-    scan(event.toolResultText, "result");
-}
-function leakSalt() {
-  if (cachedSalt === undefined) {
-    try {
-      cachedSalt = readLeakIdentity().salt;
-    } catch {
-      cachedSalt = null;
-    }
-  }
-  return cachedSalt;
-}
-function persistLeaks(perTranscript, replaceExisting) {
-  const fresh = [];
-  try {
-    const previous = readLeakRecord();
-    const previousIds = new Set(previous.findings.map((f) => f.id));
-    const record = replaceExisting ? emptyRecord(previous.salt, new Date().toISOString()) : previous;
-    for (const t of perTranscript) {
-      for (const leak of t.leaks ?? []) {
-        const { isNew } = upsertFinding(record, {
-          id: leak.id,
-          fingerprint: leak.fingerprint,
-          name: leak.name,
-          rule: leak.rule,
-          confidence: leak.shaped ? "doc-verified" : "name-only",
-          sighting: {
-            cli: t.cli,
-            sessionId: t.sessionId,
-            cwd: shortenPaths(leak.cwd),
-            at: leak.timestamp,
-            mechanism: describeMechanism(leak.toolName, leak.direction, leak.path)
-          }
-        });
-        if (isNew && !previousIds.has(leak.id))
-          fresh.push(leak.id);
-      }
-    }
-    writeLeakRecord(record);
-  } catch {}
-  return fresh;
-}
 function formatPolicyExample(_policyName, event) {
   if (event.toolName === "Bash") {
     const command = event.toolInput.command;
@@ -28158,12 +27223,6 @@ function mergeIncremental(cached, tail) {
     examplesByName: {},
     rangeByName: { ...cached.rangeByName }
   };
-  if (cached.leakScanSuppressed || tail.leakScanSuppressed) {
-    out.leakScanSuppressed = "credential-research";
-    out.leaks = [];
-  } else {
-    out.leaks = [...cached.leaks ?? [], ...tail.leaks ?? []];
-  }
   for (const [name, list] of Object.entries(cached.examplesByName)) {
     out.examplesByName[name] = [...list];
   }
@@ -28287,19 +27346,16 @@ async function runAuditInner(opts, startedAt) {
     }
   } catch {}
   const allTranscripts = [];
-  let discoveryErrors = 0;
   for (const cli of clis) {
     const adapter = ADAPTERS[cli];
     let list;
     try {
       list = await adapter.listTranscripts({ projects: opts.projects, sinceMs });
     } catch {
-      discoveryErrors++;
       continue;
     }
     allTranscripts.push(...list);
   }
-  const gate = new ByteGate(TRANSCRIPT_BYTE_BUDGET);
   let skipped = 0;
   let errors = 0;
   const tasks = allTranscripts.map((meta) => async () => {
@@ -28312,7 +27368,6 @@ async function runAuditInner(opts, startedAt) {
       resume = found?.kind === "resume" ? { fromByte: found.fromByte, detectorState: found.detectorState } : undefined;
       cachedPrefix = found?.kind === "resume" ? found.result : null;
     }
-    await gate.acquire(meta.sizeBytes);
     try {
       const scan = await scanOneTranscript(meta, resume);
       const fresh = cachedPrefix && scan.resumed ? mergeIncremental(cachedPrefix, scan.result) : scan.result;
@@ -28335,8 +27390,6 @@ async function runAuditInner(opts, startedAt) {
         examplesByName: {},
         rangeByName: {}
       };
-    } finally {
-      gate.release(meta.sizeBytes);
     }
   });
   const settled = await batchAll(tasks, TRANSCRIPT_CONCURRENCY);
@@ -28363,13 +27416,8 @@ async function runAuditInner(opts, startedAt) {
       projectsScannedSet.add(t.cwd);
     eventsScanned += t.eventsScanned ?? 0;
   }
-  const coversAllHistory = opts.clis === undefined && opts.projects === undefined && opts.since === undefined && discoveryErrors === 0 && errors === 0 && skipped === 0;
-  const newFindingIds = persistLeaks(perTranscript, coversAllHistory);
-  const leakIds = [...new Set(perTranscript.flatMap((t) => (t.leaks ?? []).map((leak) => leak.id)))];
   const auditResult = {
     version: 2,
-    leakIds,
-    newLeakIds: newFindingIds,
     scannedAt: new Date(startedAt).toISOString(),
     scope: {
       cli: clis,
@@ -28393,7 +27441,7 @@ async function runAuditInner(opts, startedAt) {
   };
   return auditResult;
 }
-var TRANSCRIPT_CONCURRENCY = 8, TRANSCRIPT_BYTE_BUDGET, CREDENTIAL_RESEARCH_MARKERS, CREDENTIAL_RESEARCH_PURPOSE, cachedSalt;
+var TRANSCRIPT_CONCURRENCY = 8;
 var init_audit = __esm(() => {
   init_builtin_policies();
   init_hooks_config();
@@ -28402,33 +27450,20 @@ var init_audit = __esm(() => {
   init_cli_adapters();
   init_detectors();
   init_features();
-  init_leak_scan();
-  init_leak_fingerprint();
-  init_leak_store();
-  init_redact_example();
   init_cache();
   init_replay();
   init_types2();
-  TRANSCRIPT_BYTE_BUDGET = 48 * 1024 * 1024;
-  CREDENTIAL_RESEARCH_MARKERS = [
-    /\b(?:secret|credential)[-_ ](?:scanner|detection|detector|pattern|regex|corpus)\b/i,
-    /\b(?:trufflehog|trufflesecurity|gitleaks|detect-secrets|secret-detection-rules)\b/i,
-    /\b(?:SECRET_PATTERNS|findSecrets|isDocsLiteral|leak-scan)\b/,
-    /\b(?:fixture|placeholder|synthetic|sample) (?:api )?(?:key|token|secret|credential)s?\b/i,
-    /\b(?:grep|rg|ripgrep|scan|hunt|search)\b[^\n]{0,240}\b(?:secret|credential|token)s?\b/i
-  ];
-  CREDENTIAL_RESEARCH_PURPOSE = /\b(?:hunt|scan|search|research|test)(?:ing)?\b[^\n]{0,80}\b(?:secret|credential|token)s?\b|\b(?:secret|credential|token)s?\b[^\n]{0,80}\b(?:scanner|detector|detection|research|fixtures?|corpus)\b/i;
 });
 
 // src/audit/audit-lock.ts
 import {
   closeSync as closeSync2,
   linkSync,
-  mkdirSync as mkdirSync22,
+  mkdirSync as mkdirSync20,
   openSync as openSync2,
-  readFileSync as readFileSync28,
+  readFileSync as readFileSync26,
   unlinkSync as unlinkSync4,
-  writeFileSync as writeFileSync19,
+  writeFileSync as writeFileSync18,
   writeSync
 } from "node:fs";
 function acquireAuditLock(source, now = Date.now()) {
@@ -28487,7 +27522,7 @@ function handleFor(path, info) {
 }
 function readLock2(path) {
   try {
-    const parsed = JSON.parse(readFileSync28(path, "utf8"));
+    const parsed = JSON.parse(readFileSync26(path, "utf8"));
     if (typeof parsed?.pid !== "number" || typeof parsed?.startedAt !== "number")
       return null;
     return {
@@ -28503,7 +27538,7 @@ function writeLockExclusive(path, info) {
   const body = JSON.stringify(info);
   const staging = `${path}.${process.pid}.tmp`;
   try {
-    writeFileSync19(staging, body, { mode: 384 });
+    writeFileSync18(staging, body, { mode: 384 });
   } catch {
     return false;
   }
@@ -28537,8 +27572,8 @@ function createThenWrite(path, body) {
   }
 }
 function ensureRunDir() {
-  mkdirSync22(failproofaiHome(), { recursive: true });
-  mkdirSync22(runDir(), { recursive: true, mode: 448 });
+  mkdirSync20(failproofaiHome(), { recursive: true });
+  mkdirSync20(runDir(), { recursive: true, mode: 448 });
 }
 var AUDIT_LOCK_MAX_AGE_MS;
 var init_audit_lock = __esm(() => {
@@ -28547,7 +27582,7 @@ var init_audit_lock = __esm(() => {
 });
 
 // src/audit/dashboard-cache.ts
-import { existsSync as existsSync33, readFileSync as readFileSync29 } from "node:fs";
+import { existsSync as existsSync31, readFileSync as readFileSync27 } from "node:fs";
 function getCachePath() {
   return auditDashboardFile();
 }
@@ -28567,10 +27602,10 @@ function writeDashboardCache(params, result) {
 }
 function readDashboardCacheMeta() {
   const cachePath = getCachePath();
-  if (!existsSync33(cachePath))
+  if (!existsSync31(cachePath))
     return null;
   try {
-    const raw = readFileSync29(cachePath, "utf-8");
+    const raw = readFileSync27(cachePath, "utf-8");
     const entry = JSON.parse(raw);
     if (!entry || entry.schemaVersion !== DASHBOARD_CACHE_SCHEMA_VERSION || typeof entry.cachedAt !== "string" || Number.isNaN(new Date(entry.cachedAt).getTime()))
       return null;
@@ -28794,18 +27829,18 @@ var init_api_server_client = __esm(() => {
 });
 
 // lib/auth/auth-store.ts
-import { existsSync as existsSync34, readFileSync as readFileSync30, readdirSync as readdirSync18, rmSync as rmSync13 } from "node:fs";
-import { join as join34, resolve as resolve24 } from "node:path";
+import { existsSync as existsSync32, readFileSync as readFileSync28, readdirSync as readdirSync17, rmSync as rmSync12 } from "node:fs";
+import { join as join34, resolve as resolve23 } from "node:path";
 function getAuthFilePath() {
   const override = process.env.FAILPROOFAI_AUTH_DIR;
   return override ? join34(override, "session.json") : auditSessionFile();
 }
 function readAuth() {
   const p = getAuthFilePath();
-  if (!existsSync34(p))
+  if (!existsSync32(p))
     return null;
   try {
-    const raw = readFileSync30(p, "utf-8");
+    const raw = readFileSync28(p, "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.access_token !== "string" || typeof parsed.refresh_token !== "string" || typeof parsed.access_expires_at !== "number" || typeof parsed.user !== "object" || !parsed.user || typeof parsed.user.id !== "string" || typeof parsed.user.email !== "string") {
       return null;
@@ -28829,18 +27864,18 @@ function writeAuth(auth) {
 }
 function deleteAuth() {
   const p = getAuthFilePath();
-  if (existsSync34(p))
-    rmSync13(p, { force: true });
+  if (existsSync32(p))
+    rmSync12(p, { force: true });
   try {
     const root = migrationsDir();
-    if (!existsSync34(root))
+    if (!existsSync32(root))
       return;
-    for (const entry of readdirSync18(root)) {
+    for (const entry of readdirSync17(root)) {
       if (!entry.startsWith("backup-layout"))
         continue;
-      const copy = resolve24(root, entry, "auth.json");
-      if (existsSync34(copy))
-        rmSync13(copy, { force: true });
+      const copy = resolve23(root, entry, "auth.json");
+      if (existsSync32(copy))
+        rmSync12(copy, { force: true });
     }
   } catch {}
 }
@@ -28900,6 +27935,112 @@ var init_auth_store = __esm(() => {
   inFlightRefreshes = new Map;
 });
 
+// src/audit/redact-example.ts
+import { homedir as homedir26 } from "node:os";
+function maskTruncatedSecret(input) {
+  for (const [pattern, label] of SECRET_PREFIXES) {
+    if (pattern.test(input)) {
+      return input.replace(pattern, `[REDACTED: ${label}]`);
+    }
+  }
+  return input;
+}
+function isSecretName(name) {
+  const upper = name.toUpperCase();
+  if (SECRET_NAME_SUBSTRINGS.some((word) => upper.includes(word)))
+    return true;
+  return upper.split("_").some((part) => SECRET_NAME_COMPONENTS.includes(part));
+}
+function maskAssignedSecrets(input) {
+  let out = input.replace(ASSIGNMENT_RE, (match, name, value) => {
+    if (!isSecretName(name))
+      return match;
+    if (value.startsWith("[REDACTED"))
+      return match;
+    return `${name}=[REDACTED: assigned secret]`;
+  });
+  out = out.replace(URL_CREDENTIALS_RE, "$1[REDACTED: URL credentials]@");
+  out = out.replace(BASIC_AUTH_FLAG_RE, "$1[REDACTED: basic auth]");
+  return out;
+}
+function maskSecrets(input) {
+  let out = input;
+  for (const [pattern, label] of SECRET_PATTERNS) {
+    const global = new RegExp(pattern.source, pattern.flags.includes("g") ? pattern.flags : `${pattern.flags}g`);
+    out = out.replace(global, `[REDACTED: ${label}]`);
+  }
+  return out;
+}
+function shortenPaths(input, home = homedir26()) {
+  const homeRoot = home.replace(/\/+$/, "");
+  return input.replace(ABSOLUTE_PATH_RE, (match, offset, whole) => {
+    if (PUBLIC_PATH_ROOTS.some((root) => match.startsWith(root)))
+      return match;
+    if (offset > 0 && whole[offset - 1] === "/" && /[a-z][a-z0-9+.\-]*:$/i.test(whole.slice(0, offset - 1))) {
+      const urlSegments = match.split("/").filter(Boolean);
+      if (urlSegments.length <= 1)
+        return match;
+      const host = urlSegments[0];
+      const leaf = urlSegments[urlSegments.length - 1];
+      const elided = urlSegments.length > 2 ? "/…" : "";
+      return `/${host}${elided}/${leaf}${match.endsWith("/") ? "/" : ""}`;
+    }
+    const trailingSlash = match.endsWith("/");
+    const segments = match.split("/").filter(Boolean);
+    if (segments.length === 0)
+      return match;
+    const basename = segments[segments.length - 1];
+    const kept = segments.slice(Math.max(0, segments.length - 1 - KEPT_PARENT_SEGMENTS), segments.length - 1);
+    const matchRoot = match.replace(/\/+$/, "");
+    const underHome = homeRoot.length > 0 && (matchRoot === homeRoot || matchRoot.startsWith(`${homeRoot}/`));
+    if (matchRoot === homeRoot && homeRoot.length > 0) {
+      return trailingSlash ? "~/" : "~";
+    }
+    const root = underHome ? "~" : "";
+    const middle = segments.length - kept.length - 1 > 0 ? "/…" : "";
+    const tail = [...kept, basename].join("/");
+    return `${root}${middle}/${tail}${trailingSlash ? "/" : ""}`;
+  });
+}
+function redactExample(input, home = homedir26()) {
+  const masked = maskAssignedSecrets(maskTruncatedSecret(maskSecrets(input)));
+  const shortened = shortenPaths(masked, home);
+  const collapsed = shortened.replace(/\s+/g, " ").trim();
+  return collapsed.length > REDACTED_EXAMPLE_MAX_CHARS ? `${collapsed.slice(0, REDACTED_EXAMPLE_MAX_CHARS - 1)}…` : collapsed;
+}
+var REDACTED_EXAMPLE_MAX_CHARS = 160, KEPT_PARENT_SEGMENTS = 0, ABSOLUTE_PATH_RE, PUBLIC_PATH_ROOTS, SECRET_PREFIXES, SECRET_NAME_SUBSTRINGS, SECRET_NAME_COMPONENTS, ASSIGNMENT_RE, URL_CREDENTIALS_RE, BASIC_AUTH_FLAG_RE;
+var init_redact_example = __esm(() => {
+  init_builtin_policies();
+  ABSOLUTE_PATH_RE = /(?:\/[\w.\-@+]+){2,}\/?/g;
+  PUBLIC_PATH_ROOTS = ["/dev/", "/proc/", "/sys/"];
+  SECRET_PREFIXES = [
+    [/(?<!\w)(?:Authorization:\s*)?Bearer\s+\S*$/i, "bearer token"],
+    [/(?<!\w)sk-ant-\S*$/, "Anthropic API key"],
+    [/(?<!\w)sk-proj-\S*$/, "OpenAI project API key"],
+    [/(?<!\w)sk-\S*$/, "OpenAI API key"],
+    [/(?<!\w)ghp_\S*$/, "GitHub personal access token"],
+    [/(?<!\w)github_pat_\S*$/, "GitHub fine-grained token"],
+    [/(?<!\w)AKIA\S*$/, "AWS access key ID"],
+    [/(?<!\w)sk_live_\S*$/, "Stripe live secret key"],
+    [/(?<!\w)sk_test_\S*$/, "Stripe test secret key"],
+    [/(?<!\w)AIza\S*$/, "Google API key"],
+    [/-----BEGIN\s[A-Z ]*$/, "private key"]
+  ];
+  SECRET_NAME_SUBSTRINGS = [
+    "TOKEN",
+    "SECRET",
+    "PASSWORD",
+    "PASSWD",
+    "CREDENTIAL",
+    "APIKEY",
+    "PRIVATEKEY"
+  ];
+  SECRET_NAME_COMPONENTS = ["KEY", "PASS", "AUTH", "PAT", "SIG", "SIGNATURE", "SESSION", "COOKIE"];
+  ASSIGNMENT_RE = /\b([A-Za-z_][A-Za-z0-9_]*)=("[^"]*"|'[^']*'|[^\s;|&"']+)/g;
+  URL_CREDENTIALS_RE = /([a-z][a-z0-9+.\-]*:\/\/)[^\s/:@]+:[^\s/@]+@/gi;
+  BASIC_AUTH_FLAG_RE = /((?:^|\s)(?:-u|--user)[\s=])\S+:\S+/g;
+});
+
 // src/audit/harm-report.ts
 function shortName2(name) {
   const slash = name.indexOf("/");
@@ -28962,41 +28103,7 @@ function selectHarmful(result, from, to, opts = {}) {
   out.sort((a, b) => b.hits - a.hits);
   return out;
 }
-function selectLeaks(findings, from, to) {
-  const lo = from.getTime();
-  const hi = to.getTime();
-  const out = [];
-  for (const f of findings) {
-    if (f.dismissedAt)
-      continue;
-    const last = ts(f.lastSeen);
-    if (last !== null && (last < lo || last > hi))
-      continue;
-    const seen = f.sightings?.reduce((latest, candidate) => {
-      if (!latest)
-        return candidate;
-      return (ts(candidate.at) ?? 0) >= (ts(latest.at) ?? 0) ? candidate : latest;
-    }, undefined);
-    out.push({
-      id: f.id,
-      display: f.fingerprint?.display ?? "[credential]",
-      label: f.fingerprint?.label ?? "secret",
-      length: f.fingerprint?.length ?? 0,
-      attributed: f.fingerprint?.attributed === true,
-      name: f.name,
-      confidence: f.confidence,
-      first_seen: f.firstSeen,
-      last_seen: f.lastSeen,
-      occurrences: f.occurrences,
-      cli: seen?.cli ?? "unknown",
-      project: seen?.cwd ?? "unknown",
-      mechanism: seen?.mechanism?.summary ?? "seen in a transcript",
-      direction: seen?.mechanism?.direction ?? "result"
-    });
-  }
-  return out.sort((a, b) => (ts(b.last_seen) ?? 0) - (ts(a.last_seen) ?? 0));
-}
-function buildHarmReport(result, lastReportedAt, intervalDays, leakFindings = []) {
+function buildHarmReport(result, lastReportedAt, intervalDays) {
   const to = new Date(Date.parse(result.scannedAt));
   const windowTo = Number.isFinite(to.getTime()) ? to : new Date;
   const watermark = ts(lastReportedAt);
@@ -29007,8 +28114,7 @@ function buildHarmReport(result, lastReportedAt, intervalDays, leakFindings = []
   return {
     window_from: from.toISOString(),
     window_to: windowTo.toISOString(),
-    harmful: selectHarmful(result, from, windowTo, { includeUnplaceable: isFirstReport }),
-    leaks: selectLeaks(leakFindings, from, windowTo).slice(0, 1)
+    harmful: selectHarmful(result, from, windowTo, { includeUnplaceable: isFirstReport })
   };
 }
 var HARMFUL_SEVERITIES, ALSO_HARMFUL;
@@ -29019,15 +28125,15 @@ var init_harm_report = __esm(() => {
 });
 
 // src/audit/machine-store.ts
-import { existsSync as existsSync35, readFileSync as readFileSync31, rmSync as rmSync14 } from "node:fs";
+import { existsSync as existsSync33, readFileSync as readFileSync29, rmSync as rmSync13 } from "node:fs";
 import { hostname as hostname5 } from "node:os";
 import { randomUUID as randomUUID4 } from "node:crypto";
 function readMachineIdentity(home) {
   const path = auditMachineFile(home);
-  if (!existsSync35(path))
+  if (!existsSync33(path))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync31(path, "utf8"));
+    const parsed = JSON.parse(readFileSync29(path, "utf8"));
     if (typeof parsed.machine_id !== "string" || !parsed.machine_id)
       return null;
     return {
@@ -29073,20 +28179,20 @@ var init_machine_store = __esm(() => {
 // src/audit/report-harm.ts
 async function reportHarm(result) {
   let auto = false;
+  let consentedAt;
   let intervalDays = 7;
   try {
     const config = readConfig();
     auto = config.audit.auto;
+    consentedAt = config.audit.reportsConsentedAt;
     intervalDays = config.audit.intervalDays;
   } catch {
     return { kind: "disabled" };
   }
   if (!auto)
     return { kind: "disabled" };
-  const prior = readMachineIdentity();
-  const report = buildHarmReport(result, prior?.last_reported_at, intervalDays, activeFindings(readLeakRecord()));
-  if (report.leaks.length === 0)
-    return { kind: "no-leak" };
+  if (consentedAt === undefined)
+    return { kind: "consent-required" };
   const auth = await getValidAccessToken();
   if (!auth) {
     return { kind: "signed-out" };
@@ -29097,6 +28203,8 @@ async function reportHarm(result) {
   } catch (err) {
     return { kind: "failed", error: err instanceof Error ? err.message : String(err) };
   }
+  const report = buildHarmReport(result, identity.last_reported_at, intervalDays);
+  const hits = report.harmful.reduce((n, p) => n + p.hits, 0);
   try {
     const res = await submitAuditReport(auth.access_token, {
       machine_id: identity.machine_id,
@@ -29104,13 +28212,12 @@ async function reportHarm(result) {
       platform: process.platform,
       window_from: report.window_from,
       window_to: report.window_to,
-      harmful: report.harmful,
-      leaks: report.leaks
+      harmful: report.harmful
     });
     try {
       recordReportWatermark(res.next_window_from);
     } catch {}
-    return res.emailed ? { kind: "sent", leaks: report.leaks.length } : { kind: "held", leaks: report.leaks.length, reason: res.reason ?? "not_sent" };
+    return res.emailed ? { kind: "sent", hits } : { kind: "held", hits, reason: res.reason ?? "not_sent" };
   } catch (err) {
     const error = err instanceof AuthApiError ? `${err.code}: ${err.message}` : err instanceof Error ? err.message : String(err);
     return { kind: "failed", error };
@@ -29119,16 +28226,17 @@ async function reportHarm(result) {
 function describeOutcome2(outcome) {
   switch (outcome.kind) {
     case "disabled":
-    case "no-leak":
       return null;
+    case "consent-required":
+      return "failproofai: scheduled scans are on, but emailing what they find needs a fresh opt-in — run `failproofai audit --schedule` (or visit /settings) to turn digests on";
     case "signed-out":
-      return "failproofai: a credential exposure was found, but no email is configured — run `failproofai audit --schedule --email you@example.com`";
+      return "failproofai: emailed reports are on but this machine is signed out — run `failproofai audit --schedule` or visit /settings to resume them";
     case "sent":
-      return "failproofai: emailed the most recent credential exposure";
+      return `failproofai: emailed a harm digest (${outcome.hits} finding${outcome.hits === 1 ? "" : "s"})`;
     case "held":
-      return `failproofai: credential exposure reported, no email (${outcome.reason})`;
+      return `failproofai: ${outcome.hits} finding${outcome.hits === 1 ? "" : "s"} reported, no email (${outcome.reason})`;
     case "failed":
-      return `failproofai: could not send the credential alert: ${outcome.error}`;
+      return `failproofai: could not send the harm report: ${outcome.error}`;
   }
 }
 var init_report_harm = __esm(() => {
@@ -29136,281 +28244,9 @@ var init_report_harm = __esm(() => {
   init_api_server_client();
   init_fp_config();
   init_harm_report();
-  init_leak_store();
   init_machine_store();
 });
 
-// src/audit/desktop-notify.ts
-import { connect } from "node:net";
-
-class Marshal {
-  chunks = [];
-  len = 0;
-  align(n) {
-    const pad = (n - this.len % n) % n;
-    if (pad)
-      this.raw(Buffer.alloc(pad));
-  }
-  raw(b) {
-    this.chunks.push(b);
-    this.len += b.length;
-  }
-  byte(v) {
-    this.raw(Buffer.from([v]));
-  }
-  u32(v) {
-    this.align(4);
-    const b = Buffer.alloc(4);
-    b.writeUInt32LE(v, 0);
-    this.raw(b);
-  }
-  i32(v) {
-    this.align(4);
-    const b = Buffer.alloc(4);
-    b.writeInt32LE(v, 0);
-    this.raw(b);
-  }
-  str(v) {
-    const b = Buffer.from(v, "utf8");
-    this.u32(b.length);
-    this.raw(b);
-    this.byte(0);
-  }
-  sig(v) {
-    const b = Buffer.from(v, "utf8");
-    this.byte(b.length);
-    this.raw(b);
-    this.byte(0);
-  }
-  get length() {
-    return this.len;
-  }
-  buffer() {
-    return Buffer.concat(this.chunks);
-  }
-}
-function headerFields(fields) {
-  const m = new Marshal;
-  for (const [code, signature, value] of fields) {
-    m.align(8);
-    m.byte(code);
-    m.sig(signature);
-    if (signature === "g")
-      m.sig(value);
-    else
-      m.str(value);
-  }
-  return { data: m.buffer(), declaredLength: m.length };
-}
-function methodCall(serial, fields, body) {
-  const { data, declaredLength } = headerFields(fields);
-  const head = new Marshal;
-  head.raw(Buffer.from([108, 1, 0, 1]));
-  head.u32(body.length);
-  head.u32(serial);
-  head.u32(declaredLength);
-  head.raw(data);
-  head.align(8);
-  return Buffer.concat([head.buffer(), body]);
-}
-function notifyBody(app, replacesId, summary, body) {
-  const m = new Marshal;
-  m.str(app);
-  m.u32(replacesId);
-  m.str("");
-  m.str(summary);
-  m.str(body);
-  m.u32(0);
-  m.u32(0);
-  m.align(8);
-  m.i32(-1);
-  return m.buffer();
-}
-function readMessage(buf) {
-  if (buf.length < 16)
-    return null;
-  const bodyLength = buf.readUInt32LE(4);
-  const fieldsLength = buf.readUInt32LE(12);
-  const bodyStart = 16 + fieldsLength + (8 - fieldsLength % 8) % 8;
-  const total = bodyStart + bodyLength;
-  if (buf.length < total)
-    return null;
-  let replySerial = null;
-  let errorName = null;
-  let i = 16;
-  const end = 16 + fieldsLength;
-  while (i < end) {
-    i += (8 - (i - 16) % 8) % 8;
-    if (i + 4 > end)
-      break;
-    const code = buf[i];
-    const sigLen = buf[i + 1];
-    const sig = buf.toString("latin1", i + 2, i + 2 + sigLen);
-    i += 2 + sigLen + 1;
-    if (sig === "u") {
-      i += (4 - (i - 16) % 4) % 4;
-      if (i + 4 > end)
-        break;
-      if (code === 5)
-        replySerial = buf.readUInt32LE(i);
-      i += 4;
-    } else if (sig === "s" || sig === "o") {
-      i += (4 - (i - 16) % 4) % 4;
-      if (i + 4 > end)
-        break;
-      const len = buf.readUInt32LE(i);
-      if (i + 4 + len > end)
-        break;
-      if (code === 4)
-        errorName = buf.toString("utf8", i + 4, i + 4 + len);
-      i += 4 + len + 1;
-    } else if (sig === "g") {
-      const len = buf[i];
-      i += 1 + len + 1;
-    } else {
-      break;
-    }
-  }
-  return { type: buf[1], replySerial, errorName, bodyStart, bodyLength, total };
-}
-function resolveBusPath(env) {
-  const declared = env.DBUS_SESSION_BUS_ADDRESS;
-  if (declared) {
-    for (const part of declared.split(";")) {
-      const m = /^unix:(?:.*,)?path=([^,]+)/.exec(part.trim());
-      if (m)
-        return m[1];
-    }
-  }
-  const uid = typeof process.getuid === "function" ? process.getuid() : -1;
-  return uid >= 0 ? `/run/user/${uid}/bus` : null;
-}
-function notifyDesktop(summary, body, replacesId = 0, opts = {}) {
-  return new Promise((resolvePromise) => {
-    if (process.platform !== "linux" && !opts.socketPath) {
-      resolvePromise({ ok: false, reason: "error", detail: "linux only" });
-      return;
-    }
-    const uid = typeof process.getuid === "function" ? process.getuid() : -1;
-    const path = opts.socketPath ?? resolveBusPath(process.env);
-    if (!path || uid < 0) {
-      resolvePromise({ ok: false, reason: "no-session", detail: "no bus address" });
-      return;
-    }
-    let settled = false;
-    const done = (o) => {
-      if (settled)
-        return;
-      settled = true;
-      clearTimeout(timer);
-      try {
-        sock.destroy();
-      } catch {}
-      resolvePromise(o);
-    };
-    const timer = setTimeout(() => done({ ok: false, reason: "timeout", detail: `${TIMEOUT_MS}ms` }), TIMEOUT_MS);
-    let sock;
-    try {
-      sock = connect(path);
-    } catch (err) {
-      done({ ok: false, reason: "no-session", detail: String(err) });
-      return;
-    }
-    let stage = "auth";
-    let buf = Buffer.alloc(0);
-    sock.on("error", (err) => {
-      done({
-        ok: false,
-        reason: err.code === "ENOENT" || err.code === "ECONNREFUSED" ? "no-session" : "error",
-        detail: err.code ?? String(err)
-      });
-    });
-    sock.on("close", () => {
-      done({ ok: false, reason: "refused", detail: `bus closed the connection during ${stage}` });
-    });
-    sock.on("connect", () => {
-      const hexUid = Buffer.from(String(uid), "utf8").toString("hex");
-      sock.write(Buffer.concat([Buffer.from([0]), Buffer.from(`AUTH EXTERNAL ${hexUid}\r
-`, "utf8")]));
-    });
-    sock.on("data", (chunk) => {
-      buf = Buffer.concat([buf, chunk]);
-      if (stage === "auth") {
-        const text = buf.toString("latin1");
-        const nl = text.indexOf(`\r
-`);
-        if (nl === -1)
-          return;
-        if (!text.startsWith("OK")) {
-          done({ ok: false, reason: "refused", detail: text.slice(0, nl).trim().slice(0, 80) });
-          return;
-        }
-        buf = buf.subarray(nl + 2);
-        stage = "hello";
-        sock.write(Buffer.from(`BEGIN\r
-`, "utf8"));
-        sock.write(methodCall(1, HELLO_FIELDS, Buffer.alloc(0)));
-      }
-      for (;; ) {
-        const msg = readMessage(buf);
-        if (!msg)
-          return;
-        const frame = buf.subarray(0, msg.total);
-        buf = buf.subarray(msg.total);
-        if (msg.type === 4 || msg.type === 1)
-          continue;
-        if (stage === "hello") {
-          if (msg.type === 3) {
-            done({ ok: false, reason: "refused", detail: msg.errorName ?? "Hello failed" });
-            return;
-          }
-          if (msg.replySerial !== 1)
-            continue;
-          stage = "notify";
-          sock.write(methodCall(2, NOTIFY_FIELDS, notifyBody("failproofai", replacesId, summary, body)));
-          continue;
-        }
-        if (msg.replySerial !== 2)
-          continue;
-        if (msg.type === 3) {
-          const name = msg.errorName ?? "";
-          const noServer = name.includes("ServiceUnknown") || name.includes("NameHasNoOwner");
-          done({ ok: false, reason: noServer ? "no-server" : "error", detail: name || "error" });
-          return;
-        }
-        const id = msg.bodyLength >= 4 && frame.length >= msg.bodyStart + 4 ? frame.readUInt32LE(msg.bodyStart) : 0;
-        done({ ok: true, id });
-        return;
-      }
-    });
-  });
-}
-var TIMEOUT_MS = 2000, HELLO_FIELDS, NOTIFY_FIELDS;
-var init_desktop_notify = __esm(() => {
-  HELLO_FIELDS = [
-    [1, "o", "/org/freedesktop/DBus"],
-    [6, "s", "org.freedesktop.DBus"],
-    [2, "s", "org.freedesktop.DBus"],
-    [3, "s", "Hello"]
-  ];
-  NOTIFY_FIELDS = [
-    [1, "o", "/org/freedesktop/Notifications"],
-    [6, "s", "org.freedesktop.Notifications"],
-    [2, "s", "org.freedesktop.Notifications"],
-    [3, "s", "Notify"],
-    [8, "g", "susssasa{sv}i"]
-  ];
-});
-
-// src/hooks/notice.ts
-function desktopLeakNotice(email = "held") {
-  const followUp = email === "sent" ? "A masked alert was also sent to your email." : email === "missing" ? "Add email alerts with: failproofai audit --schedule --email you@example.com" : email === "failed" ? "Email delivery failed this time; the local result is still available." : "Email was not sent for this run.";
-  return {
-    title: "failproofai audit needs review",
-    body: "Possible credential exposure was found in your agent transcripts. " + `Run failproofai audit to verify the matches and rotate anything real. ${followUp}`
-  };
-}
-
 // src/audit/cli.ts
 function colorOn() {
   if (process.env.NO_COLOR && process.env.NO_COLOR !== "")
@@ -29601,10 +28437,6 @@ var init_cli = __esm(() => {
   init_telemetry_sanitize();
   init_open_browser();
   init_report_harm();
-  init_desktop_notify();
-  init_macos_notifier();
-  init_fp_config();
-  init_auth_store();
   init_tui();
   init_package();
   AUDIT_STAGES = [
@@ -29623,16 +28455,16 @@ var init_cli = __esm(() => {
 });
 
 // src/hooks/configure-wizard.ts
-import { existsSync as existsSync36, mkdirSync as mkdirSync23, writeFileSync as writeFileSync20, readFileSync as readFileSync32 } from "node:fs";
-import { homedir as homedir28 } from "node:os";
-import { dirname as dirname17, resolve as resolve25, sep as sep5 } from "node:path";
+import { existsSync as existsSync34, mkdirSync as mkdirSync21, writeFileSync as writeFileSync19, readFileSync as readFileSync30 } from "node:fs";
+import { homedir as homedir27 } from "node:os";
+import { dirname as dirname16, resolve as resolve24, sep as sep5 } from "node:path";
 async function emit(event, props) {
   try {
     await trackHookEvent2(getInstanceId2(), event, props);
   } catch {}
 }
 function homeify(p) {
-  const home = homedir28();
+  const home = homedir27();
   if (p === home)
     return "~";
   if (p.startsWith(home + sep5))
@@ -29648,8 +28480,8 @@ function setCustomPoliciesEnabled(scope, cwd, enabled) {
   const path = getConfigPathForScope(scope, cwd);
   let config = {};
   try {
-    if (existsSync36(path))
-      config = JSON.parse(readFileSync32(path, "utf8"));
+    if (existsSync34(path))
+      config = JSON.parse(readFileSync30(path, "utf8"));
   } catch {
     return;
   }
@@ -29658,7 +28490,7 @@ function setCustomPoliciesEnabled(scope, cwd, enabled) {
   else
     config.customPoliciesEnabled = false;
   try {
-    writeFileSync20(path, JSON.stringify(config, null, 2) + `
+    writeFileSync19(path, JSON.stringify(config, null, 2) + `
 `, "utf8");
   } catch {}
 }
@@ -29689,7 +28521,7 @@ function describeCustomPolicies(cwd) {
   const scopes = [];
   let fileCount = 0;
   const dirs = [
-    { dir: resolve25(cwd, ".failproofai", "policies"), label: "project" },
+    { dir: resolve24(cwd, ".failproofai", "policies"), label: "project" },
     { dir: customPoliciesDir(), label: "global" }
   ];
   for (const { dir, label } of dirs) {
@@ -29700,7 +28532,7 @@ function describeCustomPolicies(cwd) {
       fileCount += found.length;
     }
     for (const name of findSkippedPolicyFiles(dir)) {
-      warnings.push(`! ${homeify(resolve25(dir, name))} is NOT loaded — rename to ` + `${name.replace(/\.(js|mjs|ts)$/, "-policies.$1")}`);
+      warnings.push(`! ${homeify(resolve24(dir, name))} is NOT loaded — rename to ` + `${name.replace(/\.(js|mjs|ts)$/, "-policies.$1")}`);
     }
   }
   return { active, warnings, fileCount, scopes };
@@ -29793,8 +28625,8 @@ function firstRunMarkerPath() {
 }
 function markLauncherSeen() {
   try {
-    mkdirSync23(dirname17(firstRunMarkerPath()), { recursive: true });
-    writeFileSync20(firstRunMarkerPath(), "1", "utf8");
+    mkdirSync21(dirname16(firstRunMarkerPath()), { recursive: true });
+    writeFileSync19(firstRunMarkerPath(), "1", "utf8");
   } catch {}
 }
 function retryProbe() {
@@ -29872,8 +28704,6 @@ async function runConfigureWizard(io = {}, answers = {}) {
   const cwd = process.cwd();
   const unattended = !stdin.isTTY || !stdout.isTTY;
   const preAnswered = Boolean(answers.token);
-  const initialAudit = readConfigRaw().raw.audit;
-  const hadExplicitAuditAuto = !!initialAudit && typeof initialAudit === "object" && !Array.isArray(initialAudit) && typeof initialAudit.auto === "boolean";
   if (typeof process.getuid === "function" && process.getuid() === 0 && process.env.SUDO_USER) {
     stdout.write(`Run failproofai config as ${process.env.SUDO_USER}, not under sudo.
 ` + `Everything it configures is per-user — hooks, policies and the daemon's own
@@ -30196,21 +29026,7 @@ Hooks keep enforcing; scheduled audits stay off until it is.
   }
   if (daemonInstalled) {
     setDaemonConfigured(true, version2);
-    if (!hadExplicitAuditAuto) {
-      try {
-        updateConfig({ audit: { auto: true } });
-      } catch {}
-    }
     pruneOldDaemonBinaries();
-    const notifier = installMacNotifier();
-    if (process.platform === "darwin" && !notifier.installed) {
-      hookLogWarn(`macOS notification helper was not installed: ${notifier.reason ?? "unknown error"}`);
-      stdout.write(`
-System notifications could not be installed. Scheduled scans and email alerts
-still work; re-run \`failproofai config\` after checking the local LaunchAgent.
-
-`);
-    }
   }
   const applied = emit("configure_applied", {
     target,
@@ -30288,7 +29104,6 @@ var init_configure_wizard = __esm(() => {
   init_hook_telemetry2();
   init_telemetry_id2();
   init_daemon_service();
-  init_macos_notifier();
   init_hook_logger();
   init_cloud_enrollment();
   init_cloud_connection();
@@ -30298,22 +29113,21 @@ var init_configure_wizard = __esm(() => {
   init_package();
   init_onboarding_attempt();
   init_onboarding_lock();
-  init_fp_config();
   POLICY_LIST_INDENT = " ".repeat(15);
 });
 
 // src/hooks/flush-cli.ts
-import { existsSync as existsSync37, mkdirSync as mkdirSync24, writeFileSync as writeFileSync21, readdirSync as readdirSync19 } from "node:fs";
-import { dirname as dirname18, join as join35 } from "node:path";
+import { existsSync as existsSync35, mkdirSync as mkdirSync22, writeFileSync as writeFileSync20, readdirSync as readdirSync18 } from "node:fs";
+import { dirname as dirname17, join as join35 } from "node:path";
 function flushRequestPath2(home) {
   return join35(failproofaiHome(home), "state", "flush-request.json");
 }
 function spoolDirs2(home) {
   const root = spoolDir(home);
-  if (!existsSync37(root))
+  if (!existsSync35(root))
     return [];
   try {
-    return readdirSync19(root, { withFileTypes: true }).filter((e) => e.isDirectory() && e.name !== "failed").map((e) => join35(root, e.name));
+    return readdirSync18(root, { withFileTypes: true }).filter((e) => e.isDirectory() && e.name !== "failed").map((e) => join35(root, e.name));
   } catch {
     return [];
   }
@@ -30322,7 +29136,7 @@ function pendingBatches2(home) {
   let n = 0;
   for (const dir of spoolDirs2(home)) {
     try {
-      n += readdirSync19(dir).filter((f) => f.endsWith(".jsonl")).length;
+      n += readdirSync18(dir).filter((f) => f.endsWith(".jsonl")).length;
     } catch {}
   }
   return n;
@@ -30379,8 +29193,8 @@ async function runFlushCommand2(opts = {}) {
     return { exitCode: 0, pending: 0, lines: ["Nothing spooled — everything already delivered."] };
   }
   const path = flushRequestPath2(home);
-  mkdirSync24(dirname18(path), { recursive: true });
-  writeFileSync21(path, `${JSON.stringify({ requestedAtMs: Date.now() }, null, 2)}
+  mkdirSync22(dirname17(path), { recursive: true });
+  writeFileSync20(path, `${JSON.stringify({ requestedAtMs: Date.now() }, null, 2)}
 `, {
     mode: 384
   });
@@ -30411,8 +29225,8 @@ var init_flush_cli2 = __esm(() => {
 });
 
 // src/hooks/backfill-cli.ts
-import { existsSync as existsSync38, mkdirSync as mkdirSync25, writeFileSync as writeFileSync22, readdirSync as readdirSync20, statSync as statSync23 } from "node:fs";
-import { dirname as dirname19, join as join36 } from "node:path";
+import { existsSync as existsSync36, mkdirSync as mkdirSync23, writeFileSync as writeFileSync21, readdirSync as readdirSync19, statSync as statSync23 } from "node:fs";
+import { dirname as dirname18, join as join36 } from "node:path";
 function backfillRequestPath(home) {
   return join36(failproofaiHome(home), "state", "backfill-request.json");
 }
@@ -30420,7 +29234,7 @@ function surveySessions(sinceMs, homeDir) {
   const out = [];
   for (const { cli, dir } of SESSION_DIRS) {
     const root = join36(homeDir, dir);
-    if (!existsSync38(root))
+    if (!existsSync36(root))
       continue;
     let files = 0;
     let newest = 0;
@@ -30429,7 +29243,7 @@ function surveySessions(sinceMs, homeDir) {
         return;
       let entries;
       try {
-        entries = readdirSync20(d, { withFileTypes: true });
+        entries = readdirSync19(d, { withFileTypes: true });
       } catch {
         return;
       }
@@ -30458,7 +29272,7 @@ function runBackfillCommand(opts = {}) {
   const now = opts.now ?? Date.now();
   const sinceMs = opts.sinceMs ?? now - DEFAULT_BACKFILL_DAYS * 24 * 60 * 60 * 1000;
   const home = failproofaiHome();
-  if (!existsSync38(home)) {
+  if (!existsSync36(home)) {
     return {
       exitCode: 1,
       lines: [`No failproofai home at ${home}. Run \`failproofai config\` first.`]
@@ -30490,7 +29304,7 @@ function runBackfillCommand(opts = {}) {
       ]
     };
   }
-  const found = surveySessions(sinceMs, dirname19(home));
+  const found = surveySessions(sinceMs, dirname18(home));
   const totalFiles = found.reduce((n, f) => n + f.files, 0);
   const sinceLabel = new Date(sinceMs).toISOString().slice(0, 10);
   const lines = [
@@ -30513,8 +29327,8 @@ function runBackfillCommand(opts = {}) {
   }
   try {
     const path = backfillRequestPath();
-    mkdirSync25(dirname19(path), { recursive: true });
-    writeFileSync22(path, `${JSON.stringify({ sinceMs, requestedAtMs: now }, null, 2)}
+    mkdirSync23(dirname18(path), { recursive: true });
+    writeFileSync21(path, `${JSON.stringify({ sinceMs, requestedAtMs: now }, null, 2)}
 `, {
       mode: 384
     });
@@ -30556,8 +29370,8 @@ var init_backfill_cli = __esm(() => {
 });
 
 // src/hooks/harness-cli.ts
-import { homedir as homedir29 } from "node:os";
-import { resolve as resolve26 } from "node:path";
+import { homedir as homedir28 } from "node:os";
+import { resolve as resolve25 } from "node:path";
 function unknownHarness(name) {
   return fail([
     `Unknown harness: ${name}`,
@@ -30600,8 +29414,8 @@ function comparableLabel(raw) {
   return raw.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
 }
 function comparablePath(raw) {
-  const home = homedir29();
-  const expanded = raw === "~" ? home : raw.startsWith("~/") ? resolve26(home, raw.slice(2)) : raw;
+  const home = homedir28();
+  const expanded = raw === "~" ? home : raw.startsWith("~/") ? resolve25(home, raw.slice(2)) : raw;
   return expanded.replace(/\/+$/, "");
 }
 function effectiveLabel(entry) {
@@ -30789,7 +29603,7 @@ var init_harness_cli = __esm(() => {
 });
 
 // src/hooks/fp-config.ts
-import { chmodSync as chmodSync7, existsSync as existsSync39, mkdirSync as mkdirSync26, readFileSync as readFileSync33, statSync as statSync24, writeFileSync as writeFileSync23 } from "node:fs";
+import { chmodSync as chmodSync6, existsSync as existsSync37, mkdirSync as mkdirSync24, readFileSync as readFileSync31, statSync as statSync24, writeFileSync as writeFileSync22 } from "node:fs";
 function detectLayout2() {
   const raw = readVersionFile2();
   if (raw) {
@@ -30797,17 +29611,17 @@ function detectLayout2() {
       return { kind: "current", version: raw };
     return raw.layout > LAYOUT_VERSION ? { kind: "future", found: raw.layout } : { kind: "stale", found: raw.layout };
   }
-  if (existsSync39(configFile())) {
+  if (existsSync37(configFile())) {
     const layoutThreePositions = [
       legacy.authJson(),
       legacy.nextAudit(),
       legacy.auditSchedule()
     ];
-    if (layoutThreePositions.some((p) => existsSync39(p)))
+    if (layoutThreePositions.some((p) => existsSync37(p)))
       return { kind: "stale", found: 3 };
     return { kind: "current", version: { layout: LAYOUT_VERSION, cli: "" }, inferred: true };
   }
-  if (existsSync39(legacy.configToml()))
+  if (existsSync37(legacy.configToml()))
     return { kind: "stale", found: 2 };
   const layoutOneMarkers = [
     legacy.policyConfig(),
@@ -30818,7 +29632,7 @@ function detectLayout2() {
     legacy.ingestCredentials(),
     legacy.auditDashboard()
   ];
-  return layoutOneMarkers.some((p) => existsSync39(p)) ? { kind: "stale", found: 1 } : { kind: "absent" };
+  return layoutOneMarkers.some((p) => existsSync37(p)) ? { kind: "stale", found: 1 } : { kind: "absent" };
 }
 function readLegacyTomlVersion2(text) {
   const layout = Number(/^\s*layout\s*=\s*(\d+)\s*$/m.exec(text)?.[1]);
@@ -30830,7 +29644,7 @@ function readLegacyTomlVersion2(text) {
 function readVersionFile2() {
   let text;
   try {
-    text = readFileSync33(versionFile(), "utf8");
+    text = readFileSync31(versionFile(), "utf8");
   } catch {
     return null;
   }
@@ -30859,16 +29673,16 @@ var init_fp_home2 = () => {};
 
 // src/hooks/migrations.ts
 import {
-  chmodSync as chmodSync8,
+  chmodSync as chmodSync7,
   copyFileSync as copyFileSync3,
-  existsSync as existsSync40,
-  mkdirSync as mkdirSync27,
-  readFileSync as readFileSync34,
-  renameSync as renameSync9,
-  rmSync as rmSync15,
-  writeFileSync as writeFileSync24
+  existsSync as existsSync38,
+  mkdirSync as mkdirSync25,
+  readFileSync as readFileSync32,
+  renameSync as renameSync8,
+  rmSync as rmSync14,
+  writeFileSync as writeFileSync23
 } from "node:fs";
-import { basename as basename7, dirname as dirname20, join as join37, resolve as resolve27 } from "node:path";
+import { basename as basename7, dirname as dirname19, join as join37, resolve as resolve26 } from "node:path";
 function migrateToLayout42() {
   const moves = [
     { from: legacy.authJson(), to: auditSessionFile() },
@@ -30884,33 +29698,33 @@ function migrateToLayout42() {
   }
   const migrated = [];
   for (const { from, to } of moves) {
-    if (!existsSync40(from))
+    if (!existsSync38(from))
       continue;
-    if (existsSync40(to)) {
-      rmSync15(from, { force: true });
+    if (existsSync38(to)) {
+      rmSync14(from, { force: true });
       continue;
     }
-    mkdirSync27(dirname20(to), { recursive: true });
+    mkdirSync25(dirname19(to), { recursive: true });
     try {
-      renameSync9(from, to);
+      renameSync8(from, to);
     } catch {
       try {
         copyFileSync3(from, to);
       } catch (err) {
         try {
-          rmSync15(to, { force: true });
+          rmSync14(to, { force: true });
         } catch {}
         throw err;
       }
-      rmSync15(from, { force: true });
+      rmSync14(from, { force: true });
     }
     migrated.push(`${basename7(from)} → audit/${basename7(to)}`);
   }
   for (const secret of [auditSessionFile()]) {
-    if (!existsSync40(secret))
+    if (!existsSync38(secret))
       continue;
     try {
-      chmodSync8(secret, 384);
+      chmodSync7(secret, 384);
     } catch {}
   }
   writeVersionFile({ layout: 4 });
@@ -30933,7 +29747,7 @@ function planMigration2(from, registry = MIGRATIONS2) {
 }
 function readLedger2() {
   try {
-    const parsed = JSON.parse(readFileSync34(migrationLedgerFile(), "utf8"));
+    const parsed = JSON.parse(readFileSync32(migrationLedgerFile(), "utf8"));
     return Array.isArray(parsed) ? parsed : [];
   } catch {
     return [];
@@ -30941,9 +29755,9 @@ function readLedger2() {
 }
 function appendLedger2(entry) {
   try {
-    mkdirSync27(migrationsDir(), { recursive: true });
+    mkdirSync25(migrationsDir(), { recursive: true });
     const all = [...readLedger2(), entry];
-    writeFileSync24(migrationLedgerFile(), `${JSON.stringify(all, null, 2)}
+    writeFileSync23(migrationLedgerFile(), `${JSON.stringify(all, null, 2)}
 `, "utf8");
   } catch {}
 }
@@ -30955,12 +29769,12 @@ function pruneMigratedCredentials2(from) {
   for (let layout = from;layout < LAYOUT_VERSION; layout++) {
     for (const { as, landsAt } of PRUNED_AFTER_SUCCESS2) {
       try {
-        if (!existsSync40(landsAt()))
+        if (!existsSync38(landsAt()))
           continue;
-        const copy = resolve27(migrationBackupDir(layout), as);
-        if (!existsSync40(copy))
+        const copy = resolve26(migrationBackupDir(layout), as);
+        if (!existsSync38(copy))
           continue;
-        rmSync15(copy, { force: true });
+        rmSync14(copy, { force: true });
         pruned.push(as);
       } catch {}
     }
@@ -30971,7 +29785,7 @@ function filesToBackUp2() {
   const seen = new Map;
   for (const f of [...BACKED_UP2, ...BACKED_UP_LEGACY2]) {
     const path = f.at();
-    if (existsSync40(path))
+    if (existsSync38(path))
       seen.set(path, backupNameOf2(f));
   }
   return [...seen].map(([path, as]) => ({ path, as }));
@@ -30980,14 +29794,14 @@ function backupBeforeMigrating2(from) {
   const dir = migrationBackupDir(from);
   const saved = [];
   try {
-    rmSync15(dir, { recursive: true, force: true });
-    mkdirSync27(dir, { recursive: true });
+    rmSync14(dir, { recursive: true, force: true });
+    mkdirSync25(dir, { recursive: true });
   } catch {
     return [];
   }
   for (const { path: source, as } of filesToBackUp2()) {
     try {
-      copyFileSync3(source, resolve27(dir, as));
+      copyFileSync3(source, resolve26(dir, as));
       saved.push(as);
     } catch {}
   }
@@ -31125,17 +29939,17 @@ var init_migrations2 = __esm(() => {
 
 // src/hooks/daemon-service.ts
 import {
-  existsSync as existsSync41,
-  mkdirSync as mkdirSync28,
+  existsSync as existsSync39,
+  mkdirSync as mkdirSync26,
   mkdtempSync as mkdtempSync2,
-  readFileSync as readFileSync35,
-  writeFileSync as writeFileSync25,
+  readFileSync as readFileSync33,
+  writeFileSync as writeFileSync24,
   unlinkSync as unlinkSync5,
-  rmSync as rmSync16
+  rmSync as rmSync15
 } from "node:fs";
-import { homedir as homedir30, tmpdir as tmpdir3, userInfo as userInfo2 } from "node:os";
-import { resolve as resolve28 } from "node:path";
-import { execFileSync as execFileSync4 } from "node:child_process";
+import { homedir as homedir29, tmpdir as tmpdir3, userInfo as userInfo2 } from "node:os";
+import { resolve as resolve27 } from "node:path";
+import { execFileSync as execFileSync3 } from "node:child_process";
 function isDaemonSupportedPlatform2() {
   return process.platform === "linux" || process.platform === "darwin";
 }
@@ -31150,13 +29964,13 @@ function resolveFailproofaidBinaryPath2() {
   if (process.env.FAILPROOFAI_DAEMON_BINARY)
     return process.env.FAILPROOFAI_DAEMON_BINARY;
   const downloaded = installedBinaryPath();
-  if (existsSync41(downloaded))
+  if (existsSync39(downloaded))
     return downloaded;
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (packageRoot) {
     for (const profile of ["release", "debug"]) {
-      const candidate = resolve28(packageRoot, "target", profile, "failproofaid");
-      if (existsSync41(candidate))
+      const candidate = resolve27(packageRoot, "target", profile, "failproofaid");
+      if (existsSync39(candidate))
         return candidate;
     }
   }
@@ -31186,8 +30000,8 @@ function resolveWorkerCommand2() {
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (!packageRoot)
     return null;
-  const workerScript = resolve28(packageRoot, "dist", "worker.mjs");
-  if (!existsSync41(workerScript))
+  const workerScript = resolve27(packageRoot, "dist", "worker.mjs");
+  if (!existsSync39(workerScript))
     return null;
   return `${shellQuote2(process.execPath)} ${shellQuote2(workerScript)}`;
 }
@@ -31197,8 +30011,8 @@ function resolveCliCommand2() {
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (!packageRoot)
     return null;
-  const cliScript = resolve28(packageRoot, "dist", "cli.mjs");
-  if (!existsSync41(cliScript))
+  const cliScript = resolve27(packageRoot, "dist", "cli.mjs");
+  if (!existsSync39(cliScript))
     return null;
   return `${shellQuote2(process.execPath)} ${shellQuote2(cliScript)}`;
 }
@@ -31211,8 +30025,8 @@ function workerScriptPath2() {
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (!packageRoot)
     return null;
-  const workerScript = resolve28(packageRoot, "dist", "worker.mjs");
-  return existsSync41(workerScript) ? workerScript : null;
+  const workerScript = resolve27(packageRoot, "dist", "worker.mjs");
+  return existsSync39(workerScript) ? workerScript : null;
 }
 function assertUnitSafe2(value, field) {
   if (UNIT_UNSAFE_RE2.test(value)) {
@@ -31238,10 +30052,10 @@ function systemdUnitDir2() {
   return process.env.FAILPROOFAI_SYSTEMD_DIR || "/etc/systemd/system";
 }
 function systemdUnitPath2(user = serviceUser2()) {
-  return resolve28(systemdUnitDir2(), systemdUnitName2(user));
+  return resolve27(systemdUnitDir2(), systemdUnitName2(user));
 }
 function legacySystemdUserUnitPath2() {
-  return resolve28(homedir30(), ".config", "systemd", "user", "failproofaid.service");
+  return resolve27(homedir29(), ".config", "systemd", "user", "failproofaid.service");
 }
 function launchdLabel2(user = serviceUser2()) {
   return `ai.failproof.failproofaid.${user}`;
@@ -31250,7 +30064,7 @@ function launchdPlistPath2(user = serviceUser2()) {
   return `/Library/LaunchDaemons/${launchdLabel2(user)}.plist`;
 }
 function legacyLaunchAgentPlistPath2() {
-  return resolve28(homedir30(), "Library", "LaunchAgents", "ai.failproof.failproofaid.plist");
+  return resolve27(homedir29(), "Library", "LaunchAgents", "ai.failproof.failproofaid.plist");
 }
 function legacySharedLaunchDaemonPath2() {
   return "/Library/LaunchDaemons/ai.failproof.failproofaid.plist";
@@ -31266,7 +30080,7 @@ function primeElevation2() {
   if (canElevate2())
     return true;
   try {
-    execFileSync4("sudo", ["-v"], { stdio: "inherit", timeout: SUDO_PROMPT_TIMEOUT_MS2 });
+    execFileSync3("sudo", ["-v"], { stdio: "inherit", timeout: SUDO_PROMPT_TIMEOUT_MS2 });
     return canElevate2();
   } catch {
     return false;
@@ -31276,7 +30090,7 @@ function canElevate2() {
   if (typeof process.getuid === "function" && process.getuid() === 0)
     return true;
   try {
-    execFileSync4("sudo", ["-n", "true"], { stdio: "ignore", timeout: SERVICE_CMD_TIMEOUT_MS2 });
+    execFileSync3("sudo", ["-n", "true"], { stdio: "ignore", timeout: SERVICE_CMD_TIMEOUT_MS2 });
     return true;
   } catch {
     return false;
@@ -31285,42 +30099,42 @@ function canElevate2() {
 function runPrivileged2(command, args) {
   const root = typeof process.getuid === "function" && process.getuid() === 0;
   const [cmd, argv] = root ? [command, args] : ["sudo", ["-n", command, ...args]];
-  execFileSync4(cmd, argv, { stdio: "ignore", timeout: SERVICE_CMD_TIMEOUT_MS2 });
+  execFileSync3(cmd, argv, { stdio: "ignore", timeout: SERVICE_CMD_TIMEOUT_MS2 });
 }
 function writePrivilegedFile2(destination, contents, mode = "0644") {
-  const stagingDir = mkdtempSync2(resolve28(tmpdir3(), "failproofaid-stage-"));
-  const staging = resolve28(stagingDir, "service-definition");
+  const stagingDir = mkdtempSync2(resolve27(tmpdir3(), "failproofaid-stage-"));
+  const staging = resolve27(stagingDir, "service-definition");
   try {
-    writeFileSync25(staging, contents, "utf8");
+    writeFileSync24(staging, contents, "utf8");
     runPrivileged2("install", ["-m", mode, staging, destination]);
   } finally {
-    rmSync16(stagingDir, { recursive: true, force: true });
+    rmSync15(stagingDir, { recursive: true, force: true });
   }
 }
 function removeLegacyUserService2() {
   try {
     if (process.platform === "linux") {
       const legacy = legacySystemdUserUnitPath2();
-      if (!existsSync41(legacy))
+      if (!existsSync39(legacy))
         return;
       try {
-        execFileSync4("systemctl", ["--user", "disable", "--now", "failproofaid.service"], {
+        execFileSync3("systemctl", ["--user", "disable", "--now", "failproofaid.service"], {
           stdio: "ignore",
           timeout: SERVICE_CMD_TIMEOUT_MS2
         });
       } catch {}
       unlinkSync5(legacy);
       try {
-        execFileSync4("systemctl", ["--user", "daemon-reload"], {
+        execFileSync3("systemctl", ["--user", "daemon-reload"], {
           stdio: "ignore",
           timeout: SERVICE_CMD_TIMEOUT_MS2
         });
       } catch {}
     } else {
       const legacyAgent = legacyLaunchAgentPlistPath2();
-      if (existsSync41(legacyAgent)) {
+      if (existsSync39(legacyAgent)) {
         try {
-          execFileSync4("launchctl", ["unload", "-w", legacyAgent], {
+          execFileSync3("launchctl", ["unload", "-w", legacyAgent], {
             stdio: "ignore",
             timeout: SERVICE_CMD_TIMEOUT_MS2
           });
@@ -31328,7 +30142,7 @@ function removeLegacyUserService2() {
         unlinkSync5(legacyAgent);
       }
       const legacyDaemon = legacySharedLaunchDaemonPath2();
-      if (existsSync41(legacyDaemon)) {
+      if (existsSync39(legacyDaemon)) {
         try {
           runPrivileged2("launchctl", ["unload", "-w", legacyDaemon]);
         } catch {}
@@ -31344,8 +30158,8 @@ function systemdUnitContents2(binaryPath, workerCmd, cliCmd = null) {
 `).join("");
   const user = assertUnitSafe2(serviceUser2(), "User");
   assertUnitSafe2(binaryPath, "ExecStart");
-  assertUnitSafe2(homedir30(), "HOME");
-  const conditionPaths = [binaryPath, workerScriptPath2()].filter((p) => typeof p === "string" && existsSync41(p));
+  assertUnitSafe2(homedir29(), "HOME");
+  const conditionPaths = [binaryPath, workerScriptPath2()].filter((p) => typeof p === "string" && existsSync39(p));
   const conditionLines = conditionPaths.map((p) => `ConditionPathExists=${assertUnitSafe2(p, "ConditionPathExists")}
 `).join("");
   return `[Unit]
@@ -31358,7 +30172,7 @@ User=${user}
 # Set explicitly rather than relying on systemd deriving it from User=:
 # failproofaid stores per-user state and refuses to start without HOME, so this
 # required variable is not left to a version-dependent default.
-Environment="HOME=${homedir30()}"
+Environment="HOME=${homedir29()}"
 ${envLines}ExecStart=${binaryPath}
 Restart=on-failure
 RestartSec=2
@@ -31370,7 +30184,7 @@ RestartSec=2
 WantedBy=multi-user.target
 `;
 }
-function escapeXml3(s) {
+function escapeXml2(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
 function launchdPlistContents2(binaryPath, logDir, workerCmd, cliCmd = null) {
@@ -31378,7 +30192,7 @@ function launchdPlistContents2(binaryPath, logDir, workerCmd, cliCmd = null) {
   const envBlock = env.length ? `    <key>EnvironmentVariables</key>
     <dict>
 ${env.map(([key, value]) => `        <key>${key}</key>
-        <string>${escapeXml3(value)}</string>`).join(`
+        <string>${escapeXml2(value)}</string>`).join(`
 `)}
     </dict>
 ` : "";
@@ -31387,10 +30201,10 @@ ${env.map(([key, value]) => `        <key>${key}</key>
 <plist version="1.0">
 <dict>
     <key>Label</key>
-    <string>${escapeXml3(launchdLabel2())}</string>
+    <string>${escapeXml2(launchdLabel2())}</string>
     <key>ProgramArguments</key>
     <array>
-        <string>${escapeXml3(binaryPath)}</string>
+        <string>${escapeXml2(binaryPath)}</string>
     </array>
     <key>RunAtLoad</key>
     <true/>
@@ -31401,11 +30215,11 @@ ${env.map(([key, value]) => `        <key>${key}</key>
          system, executed as the one user whose home, socket and lock it
          is allowed to touch. -->
     <key>UserName</key>
-    <string>${escapeXml3(serviceUser2())}</string>
+    <string>${escapeXml2(serviceUser2())}</string>
 ${envBlock}    <key>StandardOutPath</key>
-    <string>${escapeXml3(resolve28(logDir, "failproofaid.log"))}</string>
+    <string>${escapeXml2(resolve27(logDir, "failproofaid.log"))}</string>
     <key>StandardErrorPath</key>
-    <string>${escapeXml3(resolve28(logDir, "failproofaid.err.log"))}</string>
+    <string>${escapeXml2(resolve27(logDir, "failproofaid.err.log"))}</string>
 </dict>
 </plist>
 `;
@@ -31451,7 +30265,7 @@ async function installDaemonService2() {
     } else {
       const plistPath = launchdPlistPath2();
       const logDir = logsDir();
-      mkdirSync28(logDir, { recursive: true });
+      mkdirSync26(logDir, { recursive: true });
       try {
         runPrivileged2("launchctl", ["unload", plistPath]);
       } catch {}
@@ -31538,7 +30352,7 @@ async function refreshDaemonToCliVersion(deps = {}) {
 }
 function inactiveLinuxStatus2() {
   try {
-    return interpretConditionResult2(execFileSync4("systemctl", ["show", systemdUnitName2(), "--property=ConditionResult", "--value"], { stdio: ["ignore", "pipe", "ignore"], timeout: SERVICE_CMD_TIMEOUT_MS2 }).toString());
+    return interpretConditionResult2(execFileSync3("systemctl", ["show", systemdUnitName2(), "--property=ConditionResult", "--value"], { stdio: ["ignore", "pipe", "ignore"], timeout: SERVICE_CMD_TIMEOUT_MS2 }).toString());
   } catch {
     return "stopped";
   }
@@ -31550,10 +30364,10 @@ function daemonServiceStatus2() {
   if (!isDaemonSupportedPlatform2())
     return "unsupported-platform";
   if (process.platform === "linux") {
-    if (!existsSync41(systemdUnitPath2()))
+    if (!existsSync39(systemdUnitPath2()))
       return "not-installed";
     try {
-      const out = execFileSync4("systemctl", ["is-active", systemdUnitName2()], {
+      const out = execFileSync3("systemctl", ["is-active", systemdUnitName2()], {
         stdio: ["ignore", "pipe", "ignore"],
         timeout: SERVICE_CMD_TIMEOUT_MS2
       }).toString().trim();
@@ -31563,17 +30377,17 @@ function daemonServiceStatus2() {
     }
   }
   const plistPath = launchdPlistPath2();
-  if (!existsSync41(plistPath))
+  if (!existsSync39(plistPath))
     return "not-installed";
   try {
     const root = typeof process.getuid === "function" && process.getuid() === 0;
     if (!root && !canElevate2())
       return "unknown";
     const args = ["print", `system/${launchdLabel2()}`];
-    const out = root ? execFileSync4("launchctl", args, {
+    const out = root ? execFileSync3("launchctl", args, {
       stdio: ["ignore", "pipe", "ignore"],
       timeout: SERVICE_CMD_TIMEOUT_MS2
-    }).toString() : execFileSync4("sudo", ["-n", "launchctl", ...args], {
+    }).toString() : execFileSync3("sudo", ["-n", "launchctl", ...args], {
       stdio: ["ignore", "pipe", "ignore"],
       timeout: SERVICE_CMD_TIMEOUT_MS2
     }).toString();
@@ -31593,7 +30407,7 @@ var init_daemon_service2 = __esm(() => {
 });
 
 // src/hooks/uninstall-cli.ts
-import { existsSync as existsSync42, rmSync as rmSync17 } from "node:fs";
+import { existsSync as existsSync40, rmSync as rmSync16 } from "node:fs";
 function survey(cwd) {
   const clis = [];
   for (const id of listInstallableIds()) {
@@ -31614,9 +30428,9 @@ function survey(cwd) {
   return {
     clis,
     servicePath,
-    serviceInstalled: !!servicePath && existsSync42(servicePath),
+    serviceInstalled: !!servicePath && existsSync40(servicePath),
     daemonConfigured,
-    homeExists: existsSync42(failproofaiHome())
+    homeExists: existsSync40(failproofaiHome())
   };
 }
 async function runUninstallCommand(opts = {}) {
@@ -31645,7 +30459,6 @@ async function runUninstallCommand(opts = {}) {
   if (found.daemonConfigured) {
     plan.push(`  • stop requiring the daemon (policies go back to evaluating in-process)`);
   }
-  let removeDaemon = opts.purge === true;
   if (found.serviceInstalled) {
     plan.push(opts.purge || opts.yes ? `  • stop, disable and delete the service at ${found.servicePath} — needs sudo` : `  • ask whether to remove the service at ${found.servicePath} (kept unless you say so)`);
   }
@@ -31705,7 +30518,7 @@ async function runUninstallCommand(opts = {}) {
     }
   }
   if (found.serviceInstalled) {
-    removeDaemon = opts.purge || opts.yes ? true : await opts.confirmDaemon?.() ?? false;
+    const removeDaemon = opts.purge || opts.yes ? true : await opts.confirmDaemon?.() ?? false;
     if (!removeDaemon) {
       lines.push(`• kept the daemon service at ${found.servicePath}`, `  Remove it later with: failproofai uninstall --purge`);
     } else {
@@ -31715,7 +30528,7 @@ async function runUninstallCommand(opts = {}) {
       } catch {}
       try {
         await uninstallDaemonService();
-        if (found.servicePath && existsSync42(found.servicePath)) {
+        if (found.servicePath && existsSync40(found.servicePath)) {
           failures.push(`the service at ${found.servicePath} is still there (most often: no sudo). ` + `Remove it with the commands below.`);
         } else {
           lines.push(`✓ stopped and removed the daemon service`);
@@ -31725,12 +30538,9 @@ async function runUninstallCommand(opts = {}) {
       }
     }
   }
-  if (opts.purge || removeDaemon) {
-    uninstallMacNotifier();
-  }
   if (opts.purge && found.homeExists) {
     try {
-      rmSync17(failproofaiHome(), { recursive: true, force: true });
+      rmSync16(failproofaiHome(), { recursive: true, force: true });
       purged = true;
       lines.push(`✓ deleted ${failproofaiHome()}`);
     } catch (err) {
@@ -31741,7 +30551,7 @@ async function runUninstallCommand(opts = {}) {
     lines.push(``, `Not everything could be removed:`);
     for (const f of failures)
       lines.push(`  ✗ ${f}`);
-    if (found.servicePath && existsSync42(found.servicePath)) {
+    if (found.servicePath && existsSync40(found.servicePath)) {
       lines.push(``, `To remove the service by hand:`, ...manualServiceRemoval(found.servicePath), ``, `(\`${daemonStatusCommand()}\` shows its current state.)`);
     }
     return { exitCode: 1, lines, planLines, purged };
@@ -31769,15 +30579,14 @@ var init_uninstall_cli = __esm(() => {
   init_daemon_service();
   init_integrations();
   init_manager();
-  init_macos_notifier();
 });
 
 // src/hooks/pack-cli.ts
-import { execFileSync as execFileSync5 } from "node:child_process";
-import { homedir as homedir31, tmpdir as tmpdir4 } from "node:os";
+import { execFileSync as execFileSync4 } from "node:child_process";
+import { homedir as homedir30, tmpdir as tmpdir4 } from "node:os";
 import { createHash as createHash9 } from "node:crypto";
-import { copyFileSync as copyFileSync4, existsSync as existsSync43, mkdirSync as mkdirSync29, mkdtempSync as mkdtempSync3, readFileSync as readFileSync36, readdirSync as readdirSync21, realpathSync as realpathSync3, rmSync as rmSync18, statSync as statSync25, writeFileSync as writeFileSync26 } from "node:fs";
-import { basename as basename8, dirname as dirname21, isAbsolute as isAbsolute4, join as join38, relative as relative5, resolve as resolve29, sep as sep6 } from "node:path";
+import { copyFileSync as copyFileSync4, existsSync as existsSync41, mkdirSync as mkdirSync27, mkdtempSync as mkdtempSync3, readFileSync as readFileSync34, readdirSync as readdirSync20, realpathSync as realpathSync3, rmSync as rmSync17, statSync as statSync25, writeFileSync as writeFileSync25 } from "node:fs";
+import { basename as basename8, dirname as dirname20, isAbsolute as isAbsolute4, join as join38, relative as relative5, resolve as resolve28, sep as sep6 } from "node:path";
 function parseList(rest, flag) {
   const idx = rest.findIndex((a) => a === flag || a.startsWith(`${flag}=`));
   if (idx === -1)
@@ -31877,7 +30686,7 @@ async function build(rest) {
   const version = flag("version");
   const commit = flag("commit");
   const effect = flag("effect") ?? "enforce";
-  const outDir = resolve29(flag("out") ?? "dist-pack");
+  const outDir = resolve28(flag("out") ?? "dist-pack");
   if (!entry || !id || !version) {
     return fail2([
       "Usage: failproofai publish <entry.mjs> --repo <owner>/<repo> --version <version>",
@@ -31890,10 +30699,10 @@ async function build(rest) {
   } catch (err) {
     return fail2([err instanceof Error ? err.message : String(err)]);
   }
-  const entryPath = resolve29(entry);
-  if (!existsSync43(entryPath))
+  const entryPath = resolve28(entry);
+  if (!existsSync41(entryPath))
     return fail2([`No such file: ${entryPath}`]);
-  const source = readFileSync36(entryPath, "utf8");
+  const source = readFileSync34(entryPath, "utf8");
   const localImport = /(?:^|\n)\s*(?:import|export)[^;\n]*from\s+["'](\.[^"']*)["']/.exec(source);
   if (localImport) {
     return fail2([
@@ -31949,14 +30758,14 @@ async function build(rest) {
     policies
   }, null, 2) + `
 `;
-  mkdirSync29(outDir, { recursive: true });
-  const manifestPath = resolve29(outDir, PACK_MANIFEST_ASSET);
-  const entryOut = resolve29(outDir, PACK_ENTRY_ASSET);
-  writeFileSync26(manifestPath, manifest, "utf8");
+  mkdirSync27(outDir, { recursive: true });
+  const manifestPath = resolve28(outDir, PACK_MANIFEST_ASSET);
+  const entryOut = resolve28(outDir, PACK_ENTRY_ASSET);
+  writeFileSync25(manifestPath, manifest, "utf8");
   copyFileSync4(entryPath, entryOut);
   const sha = (bytes) => createHash9("sha256").update(bytes).digest("hex");
-  writeFileSync26(resolve29(outDir, PACK_CHECKSUMS_ASSET), `${sha(manifest)}  ${PACK_MANIFEST_ASSET}
-${sha(readFileSync36(entryOut))}  ${PACK_ENTRY_ASSET}
+  writeFileSync25(resolve28(outDir, PACK_CHECKSUMS_ASSET), `${sha(manifest)}  ${PACK_MANIFEST_ASSET}
+${sha(readFileSync34(entryOut))}  ${PACK_ENTRY_ASSET}
 `, "utf8");
   const on = policies.filter((p) => p.defaultEnabled).length;
   return ok2([
@@ -32085,12 +30894,12 @@ async function scaffold(target) {
       return ok2(["Nothing written."]);
     chosen = answer.trim();
   }
-  const path = resolve29(withPolicyExtension(chosen ?? "my-policies"));
-  if (existsSync43(path)) {
+  const path = resolve28(withPolicyExtension(chosen ?? "my-policies"));
+  if (existsSync41(path)) {
     return fail2([`${path} already exists — name a different file, or edit that one.`]);
   }
-  mkdirSync29(resolve29(path, ".."), { recursive: true });
-  writeFileSync26(path, `import { customPolicies, allow, deny } from "failproofai";
+  mkdirSync27(resolve28(path, ".."), { recursive: true });
+  writeFileSync25(path, `import { customPolicies, allow, deny } from "failproofai";
 
 // One file, no relative imports: only this entry is digest-pinned, so a pack
 // that imported siblings could not honestly claim to be verified.
@@ -32126,8 +30935,8 @@ customPolicies.add({
 }
 function inferRepo(entryPath) {
   try {
-    const url = execFileSync5("git", ["remote", "get-url", "origin"], {
-      cwd: resolve29(entryPath, ".."),
+    const url = execFileSync4("git", ["remote", "get-url", "origin"], {
+      cwd: resolve28(entryPath, ".."),
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 5000
@@ -32139,10 +30948,10 @@ function inferRepo(entryPath) {
   }
 }
 function inferCommit(entryPath, outDir, sources) {
-  const cwd = resolve29(entryPath, "..");
+  const cwd = resolve28(entryPath, "..");
   const raw = (args) => {
     try {
-      return execFileSync5("git", args, {
+      return execFileSync4("git", args, {
         cwd,
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"],
@@ -32194,9 +31003,9 @@ function realOrSelf(path) {
   }
 }
 function sourcesInHead(git, raw, sources) {
-  const paths = sources.map((f) => realOrSelf(resolve29(f)));
+  const paths = sources.map((f) => realOrSelf(resolve28(f)));
   const shown = git(["rev-parse", "--show-toplevel"]);
-  const top = shown === null ? null : realOrSelf(resolve29(shown));
+  const top = shown === null ? null : realOrSelf(resolve28(shown));
   const missing = [];
   for (const path of paths) {
     const rel = top ? relative5(top, path) : null;
@@ -32220,7 +31029,7 @@ function sourcesInHead(git, raw, sources) {
   ]);
   if (status === null)
     return { ok: false, offending: paths, why: "modified" };
-  const dirty = porcelainEntries(status).flatMap((entry) => [entry.path, entry.from].filter(Boolean).map((path) => resolve29(top ?? ".", path)));
+  const dirty = porcelainEntries(status).flatMap((entry) => [entry.path, entry.from].filter(Boolean).map((path) => resolve28(top ?? ".", path)));
   if (dirty.length > 0)
     return { ok: false, offending: dirty, why: "modified" };
   return { ok: true };
@@ -32228,22 +31037,22 @@ function sourcesInHead(git, raw, sources) {
 function skipOutDir(git, entryPath, outDir) {
   if (!outDir)
     return [];
-  const out = resolve29(outDir);
-  if (resolve29(entryPath).startsWith(out + sep6))
+  const out = resolve28(outDir);
+  if (resolve28(entryPath).startsWith(out + sep6))
     return [];
   const top = git(["rev-parse", "--show-toplevel"]);
   if (!top)
     return [];
-  const rel = relative5(resolve29(top), out);
+  const rel = relative5(resolve28(top), out);
   if (!rel || rel.startsWith("..") || isAbsolute4(rel))
     return [];
   return ["--", ":(top)", `:(exclude,literal,top)${rel.split(sep6).join("/")}`];
 }
 function inferTaggedVersion(entryPath, sources) {
-  const cwd = resolve29(entryPath, "..");
+  const cwd = resolve28(entryPath, "..");
   const raw = (args) => {
     try {
-      return execFileSync5("git", args, {
+      return execFileSync4("git", args, {
         cwd,
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"],
@@ -32270,7 +31079,7 @@ function inferTaggedVersion(entryPath, sources) {
 function findEntry(dir) {
   let names;
   try {
-    names = readdirSync21(dir);
+    names = readdirSync20(dir);
   } catch {
     return [];
   }
@@ -32278,11 +31087,11 @@ function findEntry(dir) {
   for (const name of names) {
     if (!/\.(mjs|js|ts)$/.test(name))
       continue;
-    const full = resolve29(dir, name);
+    const full = resolve28(dir, name);
     try {
       if (statSync25(full).size > 512 * 1024)
         continue;
-      const text = readFileSync36(full, "utf8");
+      const text = readFileSync34(full, "utf8");
       if (/from\s+["']failproofai["']/.test(text) && /customPolicies\s*\.\s*add\s*\(/.test(text)) {
         found.push(full);
       }
@@ -32293,7 +31102,7 @@ function findEntry(dir) {
   return found.sort();
 }
 function withLocalImports(sources) {
-  const seen = new Set(sources.map((f) => resolve29(f)));
+  const seen = new Set(sources.map((f) => resolve28(f)));
   const queue = [...seen];
   while (queue.length > 0 && seen.size < 500) {
     const file = queue.shift();
@@ -32301,13 +31110,13 @@ function withLocalImports(sources) {
     try {
       if (statSync25(file).size > 512 * 1024)
         continue;
-      text = readFileSync36(file, "utf8");
+      text = readFileSync34(file, "utf8");
     } catch {
       continue;
     }
     for (const re of LOCAL_IMPORT_RES) {
       for (const match of text.matchAll(re)) {
-        const base = resolve29(dirname21(file), match[1]);
+        const base = resolve28(dirname20(file), match[1]);
         for (const ext of LOCAL_IMPORT_EXTENSIONS) {
           const candidate = base + ext;
           if (seen.has(candidate))
@@ -32328,10 +31137,10 @@ function withLocalImports(sources) {
   return [...seen];
 }
 function settleGitState(entryPath, provenance, packFiles, id, outDir) {
-  const cwd = resolve29(entryPath, "..");
+  const cwd = resolve28(entryPath, "..");
   const raw = (args) => {
     try {
-      return execFileSync5("git", args, {
+      return execFileSync4("git", args, {
         cwd,
         encoding: "utf8",
         stdio: ["ignore", "pipe", "pipe"],
@@ -32403,11 +31212,11 @@ function settleGitState(entryPath, provenance, packFiles, id, outDir) {
   if (root === null || status === null)
     return null;
   const entries = porcelainEntries(status);
-  const dirty = entries.map((entry) => resolve29(root, entry.path));
-  const renamedFrom = entries.filter((entry) => entry.from).map((entry) => resolve29(root, entry.from));
+  const dirty = entries.map((entry) => resolve28(root, entry.path));
+  const renamedFrom = entries.filter((entry) => entry.from).map((entry) => resolve28(root, entry.from));
   if (dirty.length === 0)
     return null;
-  const mine = new Set(packFiles.map((f) => resolve29(f)));
+  const mine = new Set(packFiles.map((f) => resolve28(f)));
   const foreign = dirty.filter((path) => !mine.has(path));
   const toStage = [...dirty, ...renamedFrom];
   if (foreign.length > 0) {
@@ -32524,7 +31333,7 @@ async function ensureRepo(owner, name, id, token, sourceDir) {
 function pushExistingHistory(dir, owner, name, token) {
   const git = (args, env) => {
     try {
-      return execFileSync5("git", args, {
+      return execFileSync4("git", args, {
         cwd: dir,
         encoding: "utf8",
         stdio: ["ignore", "pipe", "ignore"],
@@ -32540,7 +31349,7 @@ function pushExistingHistory(dir, owner, name, token) {
     return false;
   const askpass = join38(mkdtempSync3(join38(tmpdir4(), "fpai-askpass-")), "askpass.sh");
   try {
-    writeFileSync26(askpass, `#!/bin/sh
+    writeFileSync25(askpass, `#!/bin/sh
 case "$1" in
 *Username*) echo x-access-token ;;
 *) echo "$FPAI_GH_TOKEN" ;;
@@ -32560,7 +31369,7 @@ esac
     return true;
   } finally {
     try {
-      rmSync18(dirname21(askpass), { recursive: true, force: true });
+      rmSync17(dirname20(askpass), { recursive: true, force: true });
     } catch {}
   }
 }
@@ -32584,14 +31393,14 @@ failproofai policies add ${owner}/${name}
 function findBun() {
   const candidates = [
     "bun",
-    process.env.BUN_INSTALL ? resolve29(process.env.BUN_INSTALL, "bin", "bun") : null,
-    resolve29(homedir31(), ".bun", "bin", "bun"),
+    process.env.BUN_INSTALL ? resolve28(process.env.BUN_INSTALL, "bin", "bun") : null,
+    resolve28(homedir30(), ".bun", "bin", "bun"),
     "/opt/homebrew/bin/bun",
     "/usr/local/bin/bun"
   ].filter((c) => c !== null);
   for (const candidate of candidates) {
     try {
-      execFileSync5(candidate, ["--version"], { stdio: "ignore", timeout: 5000 });
+      execFileSync4(candidate, ["--version"], { stdio: "ignore", timeout: 5000 });
       return candidate;
     } catch {
       continue;
@@ -32611,14 +31420,14 @@ function bundleEntry(sources, outDir) {
       ]
     };
   }
-  mkdirSync29(outDir, { recursive: true });
-  const entry = resolve29(outDir, ".entry.generated.mjs");
-  writeFileSync26(entry, sources.map((f) => `import ${JSON.stringify(f.startsWith("/") ? f : resolve29(f))};`).join(`
+  mkdirSync27(outDir, { recursive: true });
+  const entry = resolve28(outDir, ".entry.generated.mjs");
+  writeFileSync25(entry, sources.map((f) => `import ${JSON.stringify(f.startsWith("/") ? f : resolve28(f))};`).join(`
 `) + `
 `, "utf8");
-  const bundled = resolve29(outDir, ".bundled.mjs");
+  const bundled = resolve28(outDir, ".bundled.mjs");
   try {
-    execFileSync5(bun, [
+    execFileSync4(bun, [
       "build",
       "--target=node",
       "--format=esm",
@@ -32648,7 +31457,7 @@ function githubToken() {
   if (fromEnv)
     return fromEnv.trim();
   try {
-    const out = execFileSync5("gh", ["auth", "token"], {
+    const out = execFileSync4("gh", ["auth", "token"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 5000
@@ -32734,7 +31543,7 @@ async function publish(rest) {
 `);
     const token = githubToken();
     const login = token ? await credentialLogin(token) : null;
-    const folder = basename8(resolve29(entry, ".."));
+    const folder = basename8(resolve28(entry, ".."));
     const answered = await askWhereToPublish(`${login ?? "your-account"}/${folder}`, { stdin: process.stdin, stdout: process.stdout });
     if (answered === null)
       return ok2(["Nothing was published."]);
@@ -32745,7 +31554,7 @@ async function publish(rest) {
   let versionFromSha = false;
   const dryRun = rest.includes("--dry-run") || !repo;
   const allowPrivate = rest.includes("--allow-private");
-  const id = flag("id") ?? repo ?? (dryRun && entry ? `local/${basename8(resolve29(entry, ".."))}` : undefined);
+  const id = flag("id") ?? repo ?? (dryRun && entry ? `local/${basename8(resolve28(entry, ".."))}` : undefined);
   const [owner, name] = (repo ?? "/").split("/");
   if (repo && (!owner || !name || repo.split("/").length !== 2)) {
     return fail2([`--repo must be <owner>/<repo>, got ${JSON.stringify(repo)}`]);
@@ -32764,7 +31573,7 @@ async function publish(rest) {
       "With no --repo it writes the three release assets and stops."
     ]);
   }
-  const outDirEarly = resolve29(flag("out") ?? "dist-pack");
+  const outDirEarly = resolve28(flag("out") ?? "dist-pack");
   let provenance = entry ? inferCommit(entry, outDirEarly, bundledSources) : null;
   const gitLines = [];
   if (!version && entry && interactive) {
@@ -32804,7 +31613,7 @@ async function publish(rest) {
         "It needs write access to releases on that repository, and nothing else."
       ]);
     }
-    const ensured = await ensureRepo(owner, name, id, token, resolve29(entry, ".."));
+    const ensured = await ensureRepo(owner, name, id, token, resolve28(entry, ".."));
     if ("error" in ensured)
       return fail2(ensured.error);
     created = ensured.created;
@@ -32824,7 +31633,7 @@ async function publish(rest) {
   }
   const tag = flag("tag") ?? version;
   let entryToBuild = entry;
-  const needsBundle = discovered.length > 1 || /(?:^|\n)\s*(?:import|export)[^;\n]*from\s+["']\.[^"']*["']/.test(readFileSync36(entry, "utf8"));
+  const needsBundle = discovered.length > 1 || /(?:^|\n)\s*(?:import|export)[^;\n]*from\s+["']\.[^"']*["']/.test(readFileSync34(entry, "utf8"));
   if (needsBundle) {
     const sources = discovered.length > 1 ? discovered : [entry];
     const bundled = bundleEntry(sources, outDirEarly);
@@ -32903,7 +31712,7 @@ async function publish(rest) {
     if (prior) {
       await gh(`${GITHUB_API2}/repos/${owner}/${name}/releases/assets/${prior.id}`, auth, { method: "DELETE" });
     }
-    const bytes = readFileSync36(resolve29(outDir, asset));
+    const bytes = readFileSync34(resolve28(outDir, asset));
     const upload = await gh(`${GITHUB_UPLOADS2}/repos/${owner}/${name}/releases/${releaseId}/assets?name=${encodeURIComponent(asset)}`, auth, {
       method: "POST",
       contentType: asset.endsWith(".json") ? "application/json" : "application/octet-stream",
@@ -33584,8 +32393,8 @@ var init_install_prompt = __esm(() => {
 
 // src/hooks/manager.ts
 import { execSync as execSync7 } from "node:child_process";
-import { existsSync as existsSync44 } from "node:fs";
-import { resolve as resolve30, basename as basename9 } from "node:path";
+import { existsSync as existsSync42 } from "node:fs";
+import { resolve as resolve29, basename as basename9 } from "node:path";
 import { platform as platform4, arch as arch4, release as release3, hostname as hostname6 } from "node:os";
 function getSettingsPath2(scope, cwd) {
   return claudeCode.getSettingsPath(scope, cwd);
@@ -33804,9 +32613,9 @@ async function installHooksImpl2(policyNames, scope = "user", cwd, includeBeta =
     delete configToWrite.customPoliciesPath;
     delete configToWrite.customPoliciesPaths;
   } else if (customPoliciesPath && (typeof customPoliciesPath === "string" || customPoliciesPath.length > 0)) {
-    const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path) => resolve30(path));
-    const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path) => resolve30(path)).filter((path) => {
-      if (existsSync44(path))
+    const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path) => resolve29(path));
+    const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path) => resolve29(path)).filter((path) => {
+      if (existsSync42(path))
         return true;
       console.log(`Dropping custom policies path (file no longer exists): ${path}`);
       return false;
@@ -34029,7 +32838,7 @@ async function removeHooks2(policyNames, scope = "user", cwd, opts) {
     const scopesToRemove = scope === "all" ? [...integration.scopes] : integration.scopes.includes(scope) ? [scope] : [];
     for (const s of scopesToRemove) {
       const settingsPaths = settingsPathsFor(integration, s, cwd);
-      const existing = settingsPaths.filter((p) => existsSync44(p));
+      const existing = settingsPaths.filter((p) => existsSync42(p));
       if (existing.length === 0) {
         if (scope !== "all" && selectedClis.length === 1) {
           console.log("No settings file found. Nothing to remove.");
@@ -34173,9 +32982,9 @@ async function listHooks(cwd) {
   if (explicitPaths.length > 0) {
     groups.push(rule("Custom Policies", opts));
     for (const path of explicitPaths) {
-      const absPath = resolve30(findProjectConfigDir(cwd ?? process.cwd()), path);
+      const absPath = resolve29(findProjectConfigDir(cwd ?? process.cwd()), path);
       groups.push(note(absPath, opts));
-      if (!existsSync44(absPath)) {
+      if (!existsSync42(absPath)) {
         groups.push(warning([`file not found: ${absPath}`], opts));
         continue;
       }
@@ -34195,7 +33004,7 @@ async function listHooks(cwd) {
     }
   }
   const base = findProjectConfigDir(cwd ?? process.cwd());
-  const projectDir = resolve30(base, ".failproofai", "policies");
+  const projectDir = resolve29(base, ".failproofai", "policies");
   const userDir = customPoliciesDir();
   const sameDir = userDir === projectDir;
   const conventionDirs = [
@@ -34307,11 +33116,11 @@ var init_manager2 = __esm(() => {
 });
 
 // src/audit/audit-schedule.ts
-import { readFileSync as readFileSync37 } from "node:fs";
+import { readFileSync as readFileSync35 } from "node:fs";
 function readAuditSchedule(home) {
   let raw;
   try {
-    raw = readFileSync37(auditScheduleFile(home), "utf8");
+    raw = readFileSync35(auditScheduleFile(home), "utf8");
   } catch {
     return null;
   }
@@ -34375,9 +33184,7 @@ async function ensureSignedIn(preset) {
   }
   if (!canPrompt()) {
     throw new LoginError(`Signing in needs an interactive terminal, and this one is not.
-` + "Run `failproofai audit --schedule` from a shell you are sitting at,\n" + `or sign in from the dashboard — both write the same session file.
-` + `
-` + "`--email` does not avoid this: it fills in the address so you are not\n" + "asked for it, but a one-time code is still sent there for you to paste.");
+` + "Run `failproofai audit --schedule` from a shell you are sitting at,\n" + "or sign in from the dashboard — both write the same session file.");
   }
   return { user: await runLogin(preset), prompted: true };
 }
@@ -34501,20 +33308,21 @@ async function runScheduleOn(daysArg, emailArg) {
     if (bad)
       throw new ScheduleCliError(bad);
   }
-  const signedIn = emailArg === undefined ? { user: readAuth()?.user ?? null, prompted: false } : await ensureSignedIn(emailArg);
+  const { user, prompted } = await ensureSignedIn(emailArg);
   const next = updateConfig({
     audit: {
       auto: true,
+      reportsConsentedAt: Date.now(),
       ...days !== undefined ? { intervalDays: days } : {}
     }
   });
   const interval = next.audit.intervalDays;
   const summary = [
-    `every ${interval} day${interval === 1 ? "" : "s"} · desktop notification on leaks`,
-    signedIn.user ? `masked leak alerts also go to ${signedIn.user.email}` : "email is optional · add it with --email you@example.com",
-    "email contains only the most recent masked credential exposure"
+    `every ${interval} day${interval === 1 ? "" : "s"} · reports to ${user.email}`,
+    "you only hear from it when a scan finds something harmful",
+    "each report sends: finding counts, redacted example commands, this machine's name"
   ];
-  if (signedIn.prompted) {
+  if (prompted) {
     step("scheduled audits are on", summary);
   } else {
     process.stdout.write(`
@@ -34523,7 +33331,7 @@ ${green("✓")}  ${bold("scheduled audits are on")}
 `).join(""));
   }
   warnIfDaemonWontRun();
-  if (signedIn.prompted) {
+  if (prompted) {
     outro("failproofai audit --status  ·  when the next scan is due");
   } else {
     process.stdout.write(dim(`
@@ -34569,13 +33377,14 @@ function runScheduleStatus() {
     on ? `${green("on")}${dim(`  every ${config.audit.intervalDays} days`)}` : dim("off")
   ]);
   const live = auth && auth.refresh_expires_at * 1000 > Date.now() ? auth : null;
-  detail.push([
-    "leak notifications",
-    config.audit.notify ? green("on") : dim("off  (failproofai audit --notify)")
-  ]);
   detail.push(["reports to", live ? live.user.email : dim("— signed out")]);
   if (on && !live) {
-    detail.push(["", pink("scans and desktop alerts continue; email alerts are paused")]);
+    detail.push(["", pink("scans continue; digests are paused until you sign in")]);
+  } else if (on && config.audit.reportsConsentedAt === undefined) {
+    detail.push([
+      "",
+      pink("scans continue; digests need a fresh opt-in — run `--schedule` to turn them on")
+    ]);
   }
   detail.push(["daemon", describeDaemon(daemon)]);
   if (sched?.nextDueAtMs != null && on) {
@@ -34659,22 +33468,6 @@ function agoPhrase(ms) {
     return `${m}m ago`;
   return "just now";
 }
-function runNotifyToggle(enable) {
-  try {
-    updateConfig({ audit: { notify: enable } });
-  } catch (err) {
-    process.stderr.write(`Could not update the setting: ${err instanceof Error ? err.message : String(err)}
-`);
-    process.exit(1);
-  }
-  process.stdout.write(enable ? `
-${green("on")}  leak notifications — this machine will tell you when a scan finds a credential.
-
-` : `
-${dim("off")} leak notifications — scans continue, and findings still appear in ` + `\`failproofai audit\` and the emailed digest.
-
-`);
-}
 var MIN_DAYS = 1, MAX_DAYS = 90, ScheduleCliError, styled = () => colorsEnabled(process.stdout), wrap3 = (open, s) => styled() ? `${open}${s}${ANSI_RESET}` : s, pink = (s) => wrap3(brandAnsi("pink"), s), green = (s) => wrap3(brandAnsi("guide"), s), dim = (s) => wrap3(ANSI_DIM, s), bold = (s) => wrap3(ANSI_BOLD, s);
 var init_schedule_cli = __esm(() => {
   init_fp_config();
@@ -34690,14 +33483,14 @@ var init_schedule_cli = __esm(() => {
 });
 
 // scripts/parse-script-args.ts
-import { resolve as resolve31 } from "path";
+import { resolve as resolve30 } from "path";
 function parseStringFlag(flagName, errorLabel, inlineValue, args, index, options) {
   const raw = inlineValue ?? args[index + 1];
   if (raw === undefined || inlineValue === null && raw.startsWith("-")) {
     console.error(`Error: ${flagName} requires ${errorLabel}`);
     process.exit(1);
   }
-  const value = options?.resolve ? resolve31(raw) : raw;
+  const value = options?.resolve ? resolve30(raw) : raw;
   return { value, spliceCount: inlineValue !== null ? 1 : 2 };
 }
 function parseScriptArgs(argv) {
@@ -34753,26 +33546,26 @@ function parseScriptArgs(argv) {
 var init_parse_script_args = () => {};
 
 // scripts/install-diagnosis.mjs
-import { existsSync as existsSync45, readFileSync as readFileSync38, realpathSync as realpathSync4 } from "node:fs";
-import { dirname as dirname22, resolve as resolve32 } from "node:path";
-import { homedir as homedir32, platform as platform5 } from "node:os";
+import { existsSync as existsSync43, readFileSync as readFileSync36, realpathSync as realpathSync4 } from "node:fs";
+import { dirname as dirname21, resolve as resolve31 } from "node:path";
+import { homedir as homedir31, platform as platform5 } from "node:os";
 import { spawnSync } from "node:child_process";
 function findPackageRoot(start) {
   try {
     let dir = realpathSync4(start);
-    if (existsSync45(dir) && !existsSync45(resolve32(dir, "package.json"))) {
-      dir = dirname22(dir);
+    if (existsSync43(dir) && !existsSync43(resolve31(dir, "package.json"))) {
+      dir = dirname21(dir);
     }
     while (true) {
-      const pkgPath = resolve32(dir, "package.json");
-      if (existsSync45(pkgPath)) {
+      const pkgPath = resolve31(dir, "package.json");
+      if (existsSync43(pkgPath)) {
         try {
-          const pkg = JSON.parse(readFileSync38(pkgPath, "utf8"));
+          const pkg = JSON.parse(readFileSync36(pkgPath, "utf8"));
           if (pkg.name === PKG_NAME)
             return dir;
         } catch {}
       }
-      const parent = dirname22(dir);
+      const parent = dirname21(dir);
       if (parent === dir)
         return null;
       dir = parent;
@@ -34785,7 +33578,7 @@ function readPackageVersion(packageRoot) {
   if (!packageRoot)
     return null;
   try {
-    const pkg = JSON.parse(readFileSync38(resolve32(packageRoot, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync36(resolve31(packageRoot, "package.json"), "utf8"));
     return typeof pkg.version === "string" ? pkg.version : null;
   } catch {
     return null;
@@ -34811,16 +33604,16 @@ function locateNpmGlobal() {
     const root = (res.stdout || "").trim();
     if (!root)
       return null;
-    const candidate = resolve32(root, PKG_NAME);
-    return existsSync45(resolve32(candidate, "package.json")) ? candidate : null;
+    const candidate = resolve31(root, PKG_NAME);
+    return existsSync43(resolve31(candidate, "package.json")) ? candidate : null;
   } catch {
     return null;
   }
 }
 function locateBunGlobal() {
   try {
-    const candidate = resolve32(homedir32(), ".bun", "install", "global", "node_modules", PKG_NAME);
-    return existsSync45(resolve32(candidate, "package.json")) ? candidate : null;
+    const candidate = resolve31(homedir31(), ".bun", "install", "global", "node_modules", PKG_NAME);
+    return existsSync43(resolve31(candidate, "package.json")) ? candidate : null;
   } catch {
     return null;
   }
@@ -34828,8 +33621,8 @@ function locateBunGlobal() {
 function buildRecommendation(pathFirstBin) {
   if (!pathFirstBin)
     return null;
-  const bunBinPrefix = resolve32(homedir32(), ".bun", "bin") + "/";
-  const bunGlobalPrefix = resolve32(homedir32(), ".bun", "install", "global") + "/";
+  const bunBinPrefix = resolve31(homedir31(), ".bun", "bin") + "/";
+  const bunGlobalPrefix = resolve31(homedir31(), ".bun", "install", "global") + "/";
   const isBun = pathFirstBin.startsWith(bunBinPrefix) || pathFirstBin.startsWith(bunGlobalPrefix);
   if (isBun) {
     return `rm -f ~/.bun/bin/${PKG_NAME} && rm -rf ~/.bun/install/global/node_modules/${PKG_NAME}`;
@@ -34923,8 +33716,8 @@ var init_dashboard_host = __esm(() => {
 
 // scripts/launch.ts
 import { spawn as spawn2 } from "child_process";
-import { realpathSync as realpathSync5, existsSync as existsSync46 } from "node:fs";
-import { resolve as resolve33, dirname as dirname23 } from "node:path";
+import { realpathSync as realpathSync5, existsSync as existsSync44 } from "node:fs";
+import { resolve as resolve32, dirname as dirname22 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { createInterface } from "node:readline";
 function launch(mode) {
@@ -34948,9 +33741,9 @@ function launch(mode) {
     process.env.PORT = port;
     process.env.HOSTNAME = bindHost;
     cmd = "node";
-    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve33(dirname23(realpathSync5(fileURLToPath2(import.meta.url))), "..");
-    const serverJsPath = resolve33(packageRoot, ".next/standalone/server.js");
-    if (!existsSync46(serverJsPath)) {
+    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve32(dirname22(realpathSync5(fileURLToPath2(import.meta.url))), "..");
+    const serverJsPath = resolve32(packageRoot, ".next/standalone/server.js");
+    if (!existsSync44(serverJsPath)) {
       let shadowMessage = null;
       try {
         const diag = diagnoseShadow({ selfPackageRoot: packageRoot, selfVersion: version2 });
@@ -35033,27 +33826,21 @@ function helpText() {
   const lines = helpScreen({
     command: "audit",
     version: version2,
-    tagline: "find credentials your agents leaked into their own transcripts",
+    tagline: "review your agent CLIs for risky and wasteful patterns",
     sections: [
       {
         label: "usage",
         entries: [
-          ["(bare)", `Scan your session history for leaked keys, then open http://localhost:${DASHBOARD_PORT}/audit`],
-          ["--schedule [days]", "Scan on a timer and notify you on this machine. Default 7 days, range 1-90. No account required."],
-          ["--email <address>", "With --schedule, add email alerts for the most recent masked credential leak. A sign-in code is emailed to you."],
+          ["(bare)", `Scan your session history, then open http://localhost:${DASHBOARD_PORT}/audit`],
+          ["--schedule [days]", "Scan on a timer and email the findings. Default 7 days, range 1-90. Signs you in the first time."],
+          ["--email <address>", "With --schedule, skips the sign-in prompt."],
           ["--no-schedule", "Stop the timer. Leaves you signed in."],
-          ["--notify", "Show a desktop notification when a scan finds a credential. On by default."],
-          ["--no-notify", "Stop desktop notifications. Scheduled scans and optional email alerts are unaffected."],
           ["--status", "Whether scheduling is on, where reports go, the daemon's state, and when the next scan is due."],
           ["-h, --help", "Show this help."]
         ]
       }
     ],
-    footer: [
-      "Every scan runs on this machine. Leak alerts appear as desktop system",
-      "notifications, never inside agent sessions. If you add email, only the",
-      "newest masked credential exposure and its metadata leave the machine."
-    ]
+    footer: ["Everything runs on this machine; only a scheduled digest ever leaves it."]
   }, helpOptsFor(process.stdout));
   return ["", ...lines, ""].join(`
 `) + `
@@ -35202,40 +33989,6 @@ function heldByLine(held) {
   const ageS = Math.max(0, Math.round((Date.now() - held.startedAt) / 1000));
   return `another audit is already running (pid ${held.pid}, started by ${held.source} ${ageS}s ago)`;
 }
-async function announceLeaksOnDesktop(result, report) {
-  try {
-    await announceLeaksOrThrow(result, report);
-  } catch (err) {
-    process.stderr.write(`failproofai: could not announce a leak on the desktop: ` + `${err instanceof Error ? err.message : String(err)}
-`);
-  }
-}
-async function announceLeaksOrThrow(result, report) {
-  const ids = result.leakIds ?? result.newLeakIds ?? [];
-  if (ids.length === 0)
-    return;
-  if (!readConfig().audit.notify)
-    return;
-  const n = ids.length === 1 ? "a possible credential exposure" : `${ids.length} possible credential exposures`;
-  const emailState = report.kind === "sent" ? "sent" : report.kind === "signed-out" || !readAuth() ? "missing" : report.kind === "failed" ? "failed" : "held";
-  const { title, body } = desktopLeakNotice(emailState);
-  if (process.platform === "darwin") {
-    pruneMacNotifyQueue();
-    if (!queueMacNotification(ids[0], title, body)) {
-      process.stderr.write(`failproofai: found ${n} but could not queue a notification
-`);
-    } else if (!macNotifierInstalled()) {
-      process.stderr.write(`failproofai: found ${n}; the notifier is not installed, so nothing will show it ` + `(run \`failproofai config\`)
-`);
-    }
-    return;
-  }
-  const outcome = await notifyDesktop(title, body, 0);
-  if (!outcome.ok) {
-    process.stderr.write(`failproofai: found ${n} but could not raise a desktop notification (${outcome.reason})
-`);
-  }
-}
 async function runScheduledAudit() {
   const attempt = acquireAuditLock("scheduled");
   if (!attempt.ok) {
@@ -35268,7 +34021,6 @@ async function runScheduledAudit() {
     process.stdout.write(`failproofai: audit complete — ${num2(result.eventsScanned)} tool calls across ` + `${num2(result.transcripts.scanned)} sessions, ${num2(result.totals.hits)} hits
 `);
     const outcome = await reportHarm(result);
-    await announceLeaksOnDesktop(result, outcome);
     const line = describeOutcome2(outcome);
     if (line) {
       const stream = outcome.kind === "sent" ? process.stdout : process.stderr;
@@ -35299,16 +34051,6 @@ async function runAuditCli(args) {
     runScheduleStatus();
     process.exit(0);
   }
-  for (const [flag, enable] of [["--notify", true], ["--no-notify", false]]) {
-    if (args.includes(flag)) {
-      const extra = args.find((a) => a !== flag);
-      if (extra)
-        die(`\`audit ${flag}\` takes no other arguments (got: ${extra}).`);
-      await Promise.resolve().then(() => init_schedule_cli());
-      runNotifyToggle(enable);
-      process.exit(0);
-    }
-  }
   if (args.includes("--no-schedule")) {
     const extra = args.find((a) => a !== "--no-schedule");
     if (extra)
@@ -35424,10 +34166,6 @@ var init_cli2 = __esm(() => {
   init_telemetry_sanitize();
   init_open_browser();
   init_report_harm();
-  init_desktop_notify();
-  init_macos_notifier();
-  init_fp_config();
-  init_auth_store();
   init_tui();
   init_package();
   AUDIT_STAGES2 = [
@@ -35760,8 +34498,8 @@ var init_session_pause_cli = __esm(() => {
 
 // scripts/launch.ts
 import { spawn as spawn3 } from "child_process";
-import { realpathSync as realpathSync6, existsSync as existsSync47 } from "node:fs";
-import { resolve as resolve34, dirname as dirname24 } from "node:path";
+import { realpathSync as realpathSync6, existsSync as existsSync45 } from "node:fs";
+import { resolve as resolve33, dirname as dirname23 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { createInterface as createInterface2 } from "node:readline";
 function launch2(mode) {
@@ -35785,9 +34523,9 @@ function launch2(mode) {
     process.env.PORT = port;
     process.env.HOSTNAME = bindHost;
     cmd = "node";
-    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve34(dirname24(realpathSync6(fileURLToPath3(import.meta.url))), "..");
-    const serverJsPath = resolve34(packageRoot, ".next/standalone/server.js");
-    if (!existsSync47(serverJsPath)) {
+    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve33(dirname23(realpathSync6(fileURLToPath3(import.meta.url))), "..");
+    const serverJsPath = resolve33(packageRoot, ".next/standalone/server.js");
+    if (!existsSync45(serverJsPath)) {
       let shadowMessage = null;
       try {
         const diag = diagnoseShadow({ selfPackageRoot: packageRoot, selfVersion: version2 });
@@ -35884,17 +34622,17 @@ var init_cli_error2 = __esm(() => {
 
 // bin/failproofai.mjs
 import { realpathSync as realpathSync7 } from "fs";
-import { dirname as dirname25, resolve as resolve35 } from "path";
+import { dirname as dirname24, resolve as resolve34 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 // package.json
-var version = "1.0.4-beta.7";
+var version = "1.0.4";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {
-  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve35(dirname25(realpathSync7(fileURLToPath4(import.meta.url))), "..");
+  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve34(dirname24(realpathSync7(fileURLToPath4(import.meta.url))), "..");
 }
 if (!process.env.FAILPROOFAI_DIST_PATH) {
-  process.env.FAILPROOFAI_DIST_PATH = resolve35(dirname25(realpathSync7(fileURLToPath4(import.meta.url))), "..", "dist");
+  process.env.FAILPROOFAI_DIST_PATH = resolve34(dirname24(realpathSync7(fileURLToPath4(import.meta.url))), "..", "dist");
 }
 var args = process.argv.slice(2);
 if (args[0] === "p" || args[0] === "policy")
@@ -36132,7 +34870,7 @@ Run \`failproofai help\` for usage.`);
           label: "see what it caught",
           entries: [
             ["(no args)", "Open the policy dashboard on localhost:8020"],
-            ["audit", "Find credentials your agents leaked, and get told about it"],
+            ["audit", "Scan your agents' history, then open the audit view"],
             ["config --status", "Cloud connection, daemon version, pause state"]
           ]
         },