local-commander-agent 0.3.21-systemca.1 → 0.3.22-systemca.1

package/CHANGELOG.md

@@ -1,8 +1,14 @@
 # Change history
 
-## 0.3.21-systemca.1 - 2026-10-11
+## 0.3.22-systemca.1 - 2026-10-11
 
-- Fix: the agent now trusts the certificates Windows trusts, as well as its built-in list. Computers whose antivirus or company network inspects HTTPS (for example Kaspersky Endpoint Security) can pair and connect without extra setup; before this they stopped at `NETWORK_FAILED`. Certificate checking stays on. Otherwise identical to 0.3.21-project-targets.3.
+- Fix: the agent now trusts the certificates Windows trusts, as well as its built-in list. Computers whose antivirus or company network inspects HTTPS (for example Kaspersky Endpoint Security) can pair and connect without extra setup; before this they stopped at `NETWORK_FAILED`. Certificate checking stays on. Otherwise identical to 0.3.22-fullaccess.1.
+
+## 0.3.22-fullaccess.1 - 2026-10-10
+
+- Owner-approved Full Access no longer requires per-executable registration for Windows shells or administration tools. The Windows account rights and explicit deny-command restrictions remain enforced.
+- Scoped grants and native authentication, target binding, journal/recovery and concurrency safeguards are unchanged.
+- Local direct MCP and remote startup improvements remain separate issue #104 tasks; this build still uses authenticated hosted relay for ChatGPT web.
 
 ## 0.3.17-journal.1 - 2026-10-08
 
@@ -28,6 +34,9 @@ Names are display hints. IDs and permissions are unchanged. Token figures remain
 - Release cloud reservations only after a rejection receipt passes the existing execution and device checks.
 - Retain fencing for unknown executions without rejection proof.
 - Prune acknowledged terminal journal records using the existing retention rules.
+# 0.3.19-admission.1
+
+New execution admission pauses when protected journal capacity is exhausted; authenticated relay status carries the pause while status, output and cancellation remain available. Retains the verified native18 default of 2,000 entries, the existing byte/retention limits and unknown-execution fencing.
 
 # 0.3.21-project-targets.3
 

package/README.md

@@ -74,7 +74,7 @@ npx local-commander-agent@latest workspaces
 npx local-commander-agent@latest revoke-workspace <workspaceGrantId>
 ```
 
-`configure-access` reopens the full-access/selected-folder choice. **It replaces current grants and their restrictions.** Full access enables commands and localhost by default; selected folders start read/write with separate command/port allowlists. Choosing a restricted folder removes old broader grants. `approve-workspace` adds another read/write folder without replacing the existing set. `workspaces` shows grant IDs, full/scoped mode and explicit denials. A successful change restarts an already-running agent to synchronize grants; cancellation does not restart it. A revoked drive is not silently re-added in the background.
+`configure-access` reopens the full-access/selected-folder choice. **It replaces the current set of grants and their restrictions.** Full access enables commands and localhost by default; selected folders start read/write with separate command/port allowlists. Choosing a restricted folder removes old broader grants. `approve-workspace` adds another read/write folder without replacing the existing set. `workspaces` shows grant IDs, full/scoped mode and explicit denials. A successful change restarts an already-running agent to synchronize grants; cancellation does not restart it. A revoked drive is not silently re-added in the background.
 
 To enable or remove individual capabilities, replace the placeholders with a grant ID from `workspaces` and an executable path that actually exists on your PC:
 
@@ -90,13 +90,13 @@ npx local-commander-agent@latest deny-localhost <workspaceGrantId> 3000
 
 `allow-command` associates an exact executable with the name the assistant uses; it does not accept a shell command string. Capability changes are local owner actions, not MCP settings the assistant can silently widen. The all-drives decision always requires the local dialog; there is no `--yes` or environment flag to approve it.
 
-### Approve Git from CMD or PowerShell
+### Scoped access: approve Git from CMD or PowerShell
 
 When giving an owner Windows commands, identify the shell before using shell-specific syntax and label the example. Prefer explicit workspace IDs and quoted absolute executable paths that work in both CMD and PowerShell; do not assume a standard installation path.
 
 Use the example for the shell you are running. A prompt such as `C:\project>` is normally **Command Prompt (CMD)**; `PS C:\project>` is normally **PowerShell**. Windows Terminal can host either shell.
 
-First run `npx local-commander-agent@latest workspaces` and copy the intended workspace's grant ID.
+For selected-folders/scoped mode, first run `npx local-commander-agent@latest workspaces` and copy the intended workspace's grant ID. Full Access does not require this setup for Git.
 
 **CMD:** run `where git.exe`. If it lists several paths, choose the Git executable you intend to approve. Replace `WORKSPACE_ID` and the example path below with those actual values; keep the path in double quotes.
 
@@ -118,9 +118,10 @@ Do not paste `(Get-Command git).Source` into CMD: CMD passes it literally instea
 
 Under full access, `deny-command` and `deny-localhost` exclude the named command or port while other commands/ports remain available. Native `.exe`/`.com` commands receive argument arrays directly. `.cmd`/`.bat` launchers use a hidden PowerShell wrapper and reject cmd metacharacters in arguments; use an explicit interpreter for more complex scripts. Allowing a general interpreter is not containment against it launching a denied program.
 
-Full access does not include Windows shells, script hosts or administration binaries (`cmd`, `powershell`, `pwsh`, `wscript`, `cscript`, `mshta`, `rundll32`, `regsvr32`, `certutil`, `bitsadmin`, `msiexec`, `wmic`, `reg`, `schtasks`, `sc`, `net`, `netsh`, `icacls`, `takeown`, `runas`, `psexec`, `wsl`, `bash`, `sh`, `dism`, `winrm` and similar). An assistant request for one of these, by bare name or absolute path, fails with `COMMAND_NOT_ALLOWED` until you register that exact executable yourself with `allow-command <workspace-id> <name> <absolute .exe path>` and confirm the native dialog; it then runs only under the registered name or that exact path. Ordinary developer tools (`node`, `git`, `npm`, `python`, `dotnet`, ...) continue to resolve from your absolute `PATH` entries.
+Under **owner-approved Full Access**, installed Windows shells, script hosts and administration executables (including PowerShell and CMD) work without per-command registration. They execute under the Windows account's own rights, not elevated privileges. Owner-defined `deny-command` exclusions and explicit write/localhost restrictions still apply. A general interpreter can access resources beyond file-tool path checks; Full Access is not an OS sandbox. Existing scoped grants stay scoped until the owner deliberately changes access with `configure-access`.
 
-The MCP discovery sequence is `workspace_list`, `diagnostics`, `execution_session_open`, requested work, output/status, then session close. Diagnostics reports quota separately from the device's execution slot limit. Its optional `repairSafe` mode releases only expired reservations from this OAuth connection that never acquired a dispatch lease. It never retries work, changes permissions or clears unknown executions.
+
+For a remote MCP client with an unknown device/workspace, use `workspace_list`, then `execution_session_open`, perform the requested work and read results. Reuse valid, already authorized session and target context where supported. `diagnostics` is for faults, not a mandatory startup roundtrip. Diagnostics reports quota separately from the device's execution slot limit. Its optional `repairSafe` mode releases only expired reservations from this OAuth connection that never acquired a dispatch lease. It never retries work, changes permissions or clears unknown executions.
 
 ## Troubleshooting
 
@@ -207,4 +208,4 @@ Reload the personal MCP server once to load this source change, then reopen `npm
 
 The view shows measured per-agent calls, mean tool-plus-queue duration, stdout bytes, sent response bytes and errors when an identified reporter has those counters. Native measured calls, status/output polls and session records are separate figures; sessions are not execution capacity. Current savings totals exclude stale native snapshots. Missing measurements remain unavailable.
 
-See [CHANGELOG.md](CHANGELOG.md) for release changes.
+See [CHANGELOG.md](https://github.com/netbka/local-commander-mcp/blob/main/packages/agent-cli/CHANGELOG.md) for release changes.

package/bin/command-path.mjs

@@ -7,7 +7,7 @@ const SHIM_MARKER = "@rem Local Commander managed command\r\n";
 const WRAPPER_MARKER = "# Local Commander managed command\r\n";
 const MONITOR_WRAPPER = "localcommander-monitor.ps1";
 const SHORTCUT_NAME = "Local Commander Monitor";
-const CLI_FILES = ["package.json", "bin/localcommander.mjs", "bin/monitor.mjs", "bin/monitor-agents.mjs", "bin/monitor-context.mjs", "bin/monitor-mcp.mjs", "bin/command-path.mjs"];
+const CLI_FILES = ["package.json", "bin/localcommander.mjs", "bin/monitor.mjs", "bin/monitor-agents.mjs", "bin/monitor-context.mjs", "bin/monitor-mcp.mjs", "bin/monitor-savings.mjs", "bin/command-path.mjs"];
 
 function validVersion(version) {
   if (!/^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/.test(version)) throw Error("PACKAGE_VERSION_INVALID");

package/bin/monitor-savings.d.mts

@@ -0,0 +1,20 @@
+export interface LifetimeSavings {
+  scope: "all_time";
+  coverage: "recorded_native_results";
+  since: string | null;
+  asOf: string | null;
+  calls: number;
+  originalBytes: number;
+  sentBytes: number;
+  savedBytes: number;
+}
+export function lifetimeSavingsView(raw: unknown): LifetimeSavings | null;
+export function summarizeLifetimeSavings(result: {
+  instances?: Array<{ lifetimeSavings?: unknown; savingsSourceId?: string }>;
+  unavailable?: number;
+}): { available: boolean; partial: boolean; unavailable: number; sources?: number;
+  calls?: number; originalBytes?: number; sentBytes?: number; savedBytes?: number;
+  since?: string | null; asOf?: string | null; estimatedSavedTokens?: number };
+export function formatLifetimeSavings(result: Parameters<typeof summarizeLifetimeSavings>[0] & {
+  mcp?: { instances: Array<{ instanceId: string; metrics?: Array<{ savedBytes: number }> }>; unavailable?: number };
+}): string[];

package/bin/monitor-savings.mjs

@@ -0,0 +1,71 @@
+// Scalar projections only. Never read a ledger, private state or provider data here.
+const count = value => Number.isSafeInteger(value) && value >= 0 && value <= 1e15;
+const date = value => typeof value === "string" && /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(value) && Number.isFinite(Date.parse(value)) && new Date(value).toISOString() === value;
+
+/** Invalid or older optional telemetry must not hide the rest of a computer. */
+export function lifetimeSavingsView(raw) {
+  if (!raw || raw.scope !== "all_time" || raw.coverage !== "recorded_native_results" ||
+      ![raw.calls, raw.originalBytes, raw.sentBytes, raw.savedBytes].every(count) ||
+      raw.sentBytes > raw.originalBytes || raw.savedBytes !== raw.originalBytes - raw.sentBytes ||
+      (raw.calls === 0 ? raw.since !== null || raw.asOf !== null || raw.originalBytes !== 0 :
+        !date(raw.since) || !date(raw.asOf) || raw.since > raw.asOf)) return null;
+  return { scope: "all_time", coverage: "recorded_native_results", since: raw.since, asOf: raw.asOf,
+    calls: raw.calls, originalBytes: raw.originalBytes, sentBytes: raw.sentBytes, savedBytes: raw.savedBytes };
+}
+
+/** Aggregate complete scalar native histories, even when their producers have stopped. */
+export function summarizeLifetimeSavings(result) {
+  const sources = new Map(), rejected = new Set();
+  let unavailable = result.unavailable ?? 0;
+  // Ascending counts expose old conflicts too, regardless of the reader's file order.
+  const snapshots = (result.instances ?? []).map(instance => ({
+    id: instance.savingsSourceId, value: lifetimeSavingsView(instance.lifetimeSavings)
+  })).sort((a, b) => (a.value?.calls ?? 0) - (b.value?.calls ?? 0));
+  for (const { id, value } of snapshots) {
+    if (typeof id !== "string" || !/^[a-f0-9]{64}$/.test(id)) { unavailable++; continue; }
+    if (rejected.has(id)) continue;
+    const old = sources.get(id);
+    const conflict = old && (value?.calls === old.calls ?
+      Object.keys(old).some(key => value[key] !== old[key]) :
+      value && (["originalBytes", "sentBytes", "savedBytes"].some(key => value[key] < old[key]) ||
+        (old.since !== null && value.since > old.since) || (old.asOf !== null && value.asOf < old.asOf)));
+    if (!value || conflict) {
+      sources.delete(id); rejected.add(id); unavailable++; continue;
+    }
+    sources.set(id, value);
+  }
+  const values = [...sources.values()];
+  const totals = { calls: 0, originalBytes: 0, sentBytes: 0, savedBytes: 0 };
+  for (const value of values) for (const key of Object.keys(totals)) totals[key] += value[key];
+  if (!Object.values(totals).every(count)) return { available: false, partial: true, unavailable: unavailable + 1 };
+  const dates = values.map(value => value.since).filter(Boolean).sort();
+  const updates = values.map(value => value.asOf).filter(Boolean).sort();
+  return { available: values.length > 0, partial: unavailable > 0, unavailable, sources: values.length,
+    ...totals, since: dates[0] ?? null, asOf: updates.at(-1) ?? null,
+    estimatedSavedTokens: Math.round(totals.savedBytes / 4) };
+}
+
+/** Native all-time and retained personal MCP have different coverage and byte units. */
+export function formatLifetimeSavings(result) {
+  const total = summarizeLifetimeSavings(result);
+  const tokens = bytes => "~" + Math.round(bytes / 4).toLocaleString("en-US");
+  const personal = new Map();
+  for (const instance of result.mcp?.instances ?? []) personal.set(instance.instanceId, instance);
+  const personalBytes = [...personal.values()].flatMap(instance => instance.metrics ?? [])
+    .reduce((sum, metric) => sum + metric.savedBytes, 0);
+  const personalKnown = [...personal.values()].some(instance => instance.metrics?.length) && count(personalBytes);
+  const knownBytes = (total.available ? total.savedBytes : 0) + (personalKnown ? personalBytes : 0);
+  const available = (total.available || personalKnown) && count(knownBytes);
+  const partial = total.partial || !total.available || personal.size > 0 || Boolean(result.mcp?.unavailable);
+  const lines = [available ?
+    "All-time saved" + (partial ? " (partial)" : " (native)") + ": " + tokens(knownBytes) + " tokens" :
+    "All-time saved: unavailable | historical measurements not reported"];
+  if (total.available) lines.push("Native history: Raw " + tokens(total.originalBytes) + " | Sent " + tokens(total.sentBytes) +
+    " | " + (total.originalBytes ? (100 * total.savedBytes / total.originalBytes).toFixed(1) : "0.0") + "% | " +
+    (total.since ? "since " + total.since.slice(0, 10) + " | as of " + total.asOf.slice(0, 16).replace("T", " ") + "Z" : "no recorded results"));
+  lines.push(personalKnown ?
+    "Personal MCP (partial): " + tokens(personalBytes) + " tok retained" :
+    "Personal MCP saved: unavailable (historical total not reported)");
+  lines.push("Est: bytes/4; provider tokens unknown");
+  return lines;
+}

package/bin/monitor.mjs

@@ -1,4 +1,5 @@
 import { lstat, open, readdir } from "node:fs/promises";
+import { lifetimeSavingsView, formatLifetimeSavings } from "./monitor-savings.mjs";
 import path from "node:path";
 import { setTimeout as delay } from "node:timers/promises";
 import { readAgentActivity } from "./monitor-agents.mjs";
@@ -99,7 +100,9 @@ export function monitorView(raw, now = Date.now(), alive = pidAlive) {
   });
   return { instanceId: raw.instanceId, pid: raw.pid, agentVersion: raw.agentVersion, updatedAt: raw.updatedAt,
     running, connection, origin, sessions, events, computer: raw.computer ?? null, processName: "lc-agent", executions,
-    efficiency: efficiencyView(raw.efficiency) };
+    efficiency: efficiencyView(raw.efficiency),
+    savingsSourceId: typeof raw.savingsSourceId === "string" && /^[a-f0-9]{64}$/.test(raw.savingsSourceId) ? raw.savingsSourceId : null,
+    lifetimeSavings: lifetimeSavingsView(raw.lifetimeSavings) };
 }
 
 export async function readMonitors(directory) {
@@ -247,9 +250,10 @@ export function formatMonitor(result, columns = process.stdout.columns ?? 120, h
   let shown = 0, shownPcs = 0, shownAgents = 0;
   const footer = [
     "-".repeat(width),
-    stats.length ? "Raw: " + tokens(saved + sent) + " tokens   Sent: " + tokens(sent) + "   Saved: " + tokens(saved) +
+    ...formatLifetimeSavings(result),
+    stats.length ? "Native this run - Raw: " + tokens(saved + sent) + " tokens   Sent: " + tokens(sent) + "   Saved: " + tokens(saved) +
       "  " + (saved + sent ? Math.round(100 * saved / (saved + sent)) : 0) + "%" + (stats.length < live.length ? " (partial)" : "") :
-      "Raw: n/a   Sent: n/a   Saved: n/a",
+      "Native this run - Raw: n/a   Sent: n/a   Saved: n/a",
     mcp.length ? "MCP this run: " + usageSummary(mcpMetrics) + " | saved stdout " + tokens(mcpMetrics.reduce((sum, row) => sum + row.savedBytes, 0)) + " tok" :
       "~ Tokens: bytes / 4, this run | model: declared or not reported",
     mcpMetrics.length ? "Review: " + [...mcpMetrics].sort((a, b) => b.sentBytes - a.sentBytes).slice(0, 2)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "local-commander-agent",
-  "version": "0.3.21-systemca.1",
+  "version": "0.3.22-systemca.1",
   "description": "Windows companion for Local Commander: connect AI clients to local files, approved commands and localhost. Requires https://localcmd.app.",
   "type": "module",
   "bin": {

package/runtime/agent.mjs

@@ -5072,14 +5072,14 @@ function codePointLength(str) {
   const units2 = str.length;
   if (!highSurrogate.test(str))
     return units2;
-  let count = units2;
+  let count2 = units2;
   for (let i = 0; i < units2 - 1; i++) {
     if ((str.charCodeAt(i) & 64512) === 55296 && (str.charCodeAt(i + 1) & 64512) === 56320) {
-      count--;
+      count2--;
       i++;
     }
   }
-  return count;
+  return count2;
 }
 function getLengthableOrigin(input2) {
   if (Array.isArray(input2))
@@ -9434,8 +9434,8 @@ function az_default() {
 }
 
 // ../../local_commander_mcp/node_modules/zod/v4/locales/be.js
-function getBelarusianPlural(count, one, few, many) {
-  const absCount = Math.abs(count);
+function getBelarusianPlural(count2, one, few, many) {
+  const absCount = Math.abs(count2);
   const lastDigit = absCount % 10;
   const lastTwoDigits = absCount % 100;
   if (lastTwoDigits >= 11 && lastTwoDigits <= 19) {
@@ -12082,8 +12082,8 @@ function hu_default() {
 }
 
 // ../../local_commander_mcp/node_modules/zod/v4/locales/hy.js
-function getArmenianPlural(count, one, many) {
-  return Math.abs(count) === 1 ? one : many;
+function getArmenianPlural(count2, one, many) {
+  return Math.abs(count2) === 1 ? one : many;
 }
 function withDefiniteArticle(word) {
   if (!word)
@@ -14821,8 +14821,8 @@ function ro_default() {
 }
 
 // ../../local_commander_mcp/node_modules/zod/v4/locales/ru.js
-function getRussianPlural(count, one, few, many) {
-  const absCount = Math.abs(count);
+function getRussianPlural(count2, one, few, many) {
+  const absCount = Math.abs(count2);
   const lastDigit = absCount % 10;
   const lastTwoDigits = absCount % 100;
   if (lastTwoDigits >= 11 && lastTwoDigits <= 19) {
@@ -25084,7 +25084,7 @@ var NativeJournal = class _NativeJournal {
   }
   recoverAfterRestart() {
     return this.enqueue(async () => {
-      let count = 0;
+      let count2 = 0;
       for (const original of this.entries.values()) {
         if (!["accepted", "running"].includes(original.state)) continue;
         const e = clone2(original);
@@ -25104,9 +25104,9 @@ var NativeJournal = class _NativeJournal {
           } });
         }
         await this.persist(e);
-        count++;
+        count2++;
       }
-      return count;
+      return count2;
     });
   }
   eligibleForPruning(entry, cutoff) {
@@ -25114,20 +25114,20 @@ var NativeJournal = class _NativeJournal {
   }
   admissionAvailable() {
     if (this.closed) return false;
-    let count = this.entries.size, bytes3 = this.totalBytes;
-    if (count < this.options.maxEntries && bytes3 + MAX_ENVELOPE <= this.options.maxBytes) return true;
+    let count2 = this.entries.size, bytes3 = this.totalBytes;
+    if (count2 < this.options.maxEntries && bytes3 + MAX_ENVELOPE <= this.options.maxBytes) return true;
     const cutoff = this.now().getTime() - this.options.retentionMs;
     for (const entry of this.entries.values()) {
       if (!this.eligibleForPruning(entry, cutoff)) continue;
-      count--;
+      count2--;
       bytes3 -= this.sizes.get(entry.executionId);
-      if (count < this.options.maxEntries && bytes3 + MAX_ENVELOPE <= this.options.maxBytes) return true;
+      if (count2 < this.options.maxEntries && bytes3 + MAX_ENVELOPE <= this.options.maxBytes) return true;
     }
     return false;
   }
   // Called only inside the serialized queue; enqueueing prune here would deadlock.
   async pruneEligible() {
-    let count = 0;
+    let count2 = 0;
     const cutoff = this.now().getTime() - this.options.retentionMs;
     for (const e of [...this.entries.values()]) {
       if (!this.eligibleForPruning(e, cutoff)) continue;
@@ -25137,9 +25137,9 @@ var NativeJournal = class _NativeJournal {
       this.entries.delete(e.executionId);
       this.sizes.delete(e.executionId);
       this.digests.delete(e.executionId);
-      count++;
+      count2++;
     }
-    return count;
+    return count2;
   }
   prune() {
     return this.enqueue(() => this.pruneEligible());
@@ -27120,59 +27120,6 @@ async function runSupervised(helper, request, options = {}) {
 }
 
 // agent/src/tools.ts
-var OWNER_REGISTRATION_REQUIRED = /* @__PURE__ */ new Set([
-  "cmd",
-  "powershell",
-  "powershell_ise",
-  "pwsh",
-  "wscript",
-  "cscript",
-  "mshta",
-  "rundll32",
-  "regsvr32",
-  "regasm",
-  "regsvcs",
-  "certutil",
-  "bitsadmin",
-  "msiexec",
-  "installutil",
-  "msbuild",
-  "cmstp",
-  "forfiles",
-  "hh",
-  "wmic",
-  "reg",
-  "schtasks",
-  "at",
-  "sc",
-  "net",
-  "net1",
-  "netsh",
-  "bcdedit",
-  "vssadmin",
-  "diskpart",
-  "cipher",
-  "icacls",
-  "takeown",
-  "runas",
-  "psexec",
-  "wsl",
-  "bash",
-  "sh",
-  "ftp",
-  "tftp",
-  "taskkill",
-  "shutdown",
-  "format",
-  "fsutil",
-  "dism",
-  "winrm",
-  "winrs",
-  "eventvwr",
-  "fodhelper",
-  "computerdefaults",
-  "sdclt"
-]);
 var NativeToolError = class extends Error {
   constructor(code) {
     super(code);
@@ -27475,16 +27422,16 @@ var NativeTools = class {
           if (value) selectedHeaders[name2] = value.slice(0, 2048);
         }
         const reader = response.body?.getReader(), chunks = [];
-        let count = 0, truncated = false;
+        let count2 = 0, truncated = false;
         try {
           if (reader) for (; ; ) {
             const part = await reader.read();
             if (part.done) break;
             const b = Buffer.from(part.value);
-            const take = Math.min(b.length, 1e5 - count);
+            const take = Math.min(b.length, 1e5 - count2);
             chunks.push(b.subarray(0, take));
-            count += take;
-            if (take !== b.length || count >= 1e5) {
+            count2 += take;
+            if (take !== b.length || count2 >= 1e5) {
               truncated = true;
               break;
             }
@@ -27609,10 +27556,6 @@ var NativeTools = class {
         const configured = this.options.programs[key]?.executable;
         if (configured && equalPath3(executable, await realpath5(configured).catch(() => configured))) fail2("COMMAND_NOT_ALLOWED");
       }
-      if (OWNER_REGISTRATION_REQUIRED.has(commandKey(name2)) || OWNER_REGISTRATION_REQUIRED.has(commandKey(executable))) {
-        const registered = entry && workspace.allowedCommands.some((v) => v.toLowerCase() === entry[0].toLowerCase()) && equalPath3(executable, await realpath5(entry[1].executable).catch(() => entry[1].executable));
-        if (!registered) fail2("COMMAND_NOT_ALLOWED");
-      }
       if (/\.(cmd|bat)$/i.test(executable)) {
         if ([executable, ...args].some((value) => /[&|<>^%!"\r\n]/.test(value))) fail2("INVALID_SCRIPT_ARGUMENTS");
         const literal2 = (value) => "'" + value.replaceAll("'", "''") + "'";
@@ -28006,11 +27949,11 @@ function parseNodeTapShadow(input2) {
       return passThrough(input2, "unrecognized_record", true, notices);
     }
     if (line === "") continue;
-    const count = SUMMARY_COUNT.exec(line);
-    if (count) {
-      const key = count[1];
+    const count2 = SUMMARY_COUNT.exec(line);
+    if (count2) {
+      const key = count2[1];
       if (counts.has(key)) return passThrough(input2, "summary_inconsistent", true, notices);
-      counts.set(key, Number(count[2]));
+      counts.set(key, Number(count2[2]));
       continue;
     }
     const summaryDuration = SUMMARY_DURATION.exec(line);
@@ -28124,11 +28067,11 @@ function parseNodeTapFailureShadow(input2) {
   let durationMs = null;
   for (const line of lines.slice(index + 1)) {
     if (!line) continue;
-    const count = SUMMARY_COUNT.exec(line);
-    if (count) {
-      const key = count[1];
+    const count2 = SUMMARY_COUNT.exec(line);
+    if (count2) {
+      const key = count2[1];
       if (counts.has(key)) return fallback("summary_inconsistent");
-      counts.set(key, Number(count[2]));
+      counts.set(key, Number(count2[2]));
     } else {
       const duration3 = SUMMARY_DURATION.exec(line);
       if (duration3) {
@@ -28356,10 +28299,10 @@ function aggregate(events) {
     tokenEstimateMethod: "byte-ratio-v1"
   });
 }
-function localDayKey(date5) {
-  const year = date5.getFullYear();
-  const month = String(date5.getMonth() + 1).padStart(2, "0");
-  const day = String(date5.getDate()).padStart(2, "0");
+function localDayKey(date6) {
+  const year = date6.getFullYear();
+  const month = String(date6.getMonth() + 1).padStart(2, "0");
+  const day = String(date6.getDate()).padStart(2, "0");
   return year + "-" + month + "-" + day;
 }
 function buildLiveEfficiencyReport(inputs, now = /* @__PURE__ */ new Date()) {
@@ -29016,8 +28959,8 @@ function epoch2(value) {
 }
 function isoDate(value) {
   if (typeof value !== "string") fail3("RELAY_REQUEST_INVALID");
-  const date5 = new Date(value);
-  if (!Number.isFinite(date5.getTime())) fail3("RELAY_REQUEST_INVALID");
+  const date6 = new Date(value);
+  if (!Number.isFinite(date6.getTime())) fail3("RELAY_REQUEST_INVALID");
   return value;
 }
 function agentVersion(value) {
@@ -29503,9 +29446,9 @@ function displayName(value) {
 }
 function parseDate(value, code) {
   if (typeof value !== "string") fail4(code);
-  const date5 = new Date(value);
-  if (!Number.isFinite(date5.getTime())) fail4(code);
-  return date5;
+  const date6 = new Date(value);
+  if (!Number.isFinite(date6.getTime())) fail4(code);
+  return date6;
 }
 function confirmationCode(value) {
   if (typeof value !== "string" || !CONFIRMATION_CODE.test(value)) fail4("PAIRING_RESPONSE_INVALID");
@@ -30019,6 +29962,16 @@ var OptimizationLedger = class _OptimizationLedger {
   filename;
   handle;
   noticesFilename;
+  lifetime = {
+    scope: "all_time",
+    coverage: "recorded_native_results",
+    since: null,
+    asOf: null,
+    calls: 0,
+    originalBytes: 0,
+    sentBytes: 0,
+    savedBytes: 0
+  };
   events = [];
   seenExecutionIds = /* @__PURE__ */ new Set();
   deliveredNoticeCheckpoints = /* @__PURE__ */ new Set();
@@ -30065,6 +30018,7 @@ var OptimizationLedger = class _OptimizationLedger {
           if (ledger.seenExecutionIds.has(event.executionId)) continue;
           ledger.seenExecutionIds.add(event.executionId);
           ledger.events.push(event);
+          ledger.addToLifetime(event);
         }
       }
       return ledger;
@@ -30088,12 +30042,26 @@ var OptimizationLedger = class _OptimizationLedger {
       await this.handle.write(line);
       this.seenExecutionIds.add(event.executionId);
       this.events.push(event);
+      this.addToLifetime(event);
       return true;
     });
     this.queue = work.catch(() => {
     });
     return work;
   }
+  addToLifetime(event) {
+    this.lifetime.calls++;
+    this.lifetime.originalBytes += event.originalStdoutBytes;
+    this.lifetime.sentBytes += event.sentStdoutBytes;
+    this.lifetime.savedBytes += event.savedStdoutBytes;
+    const at = new Date(event.occurredAt).toISOString();
+    if (this.lifetime.since === null || at < this.lifetime.since) this.lifetime.since = at;
+    if (this.lifetime.asOf === null || at > this.lifetime.asOf) this.lifetime.asOf = at;
+  }
+  /** Existing replay initializes this once; subsequent reads never scan history. */
+  savingsSnapshot() {
+    return Object.freeze({ ...this.lifetime });
+  }
   consumeNoticeForExecution(executionId) {
     if (this.closed) return Promise.reject(failure4("OPTIMIZATION_LEDGER_CLOSED"));
     const work = this.queue.then(async () => {
@@ -30164,6 +30132,25 @@ import { createHash as createHash12, randomUUID as randomUUID8 } from "node:cryp
 import { lstat as lstat8, mkdir as mkdir6, open as open7, rename as rename5, rm as rm5 } from "node:fs/promises";
 import path14 from "node:path";
 import os4 from "node:os";
+
+// packages/agent-cli/bin/monitor-savings.mjs
+var count = (value) => Number.isSafeInteger(value) && value >= 0 && value <= 1e15;
+var date5 = (value) => typeof value === "string" && /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(value) && Number.isFinite(Date.parse(value)) && new Date(value).toISOString() === value;
+function lifetimeSavingsView(raw) {
+  if (!raw || raw.scope !== "all_time" || raw.coverage !== "recorded_native_results" || ![raw.calls, raw.originalBytes, raw.sentBytes, raw.savedBytes].every(count) || raw.sentBytes > raw.originalBytes || raw.savedBytes !== raw.originalBytes - raw.sentBytes || (raw.calls === 0 ? raw.since !== null || raw.asOf !== null || raw.originalBytes !== 0 : !date5(raw.since) || !date5(raw.asOf) || raw.since > raw.asOf)) return null;
+  return {
+    scope: "all_time",
+    coverage: "recorded_native_results",
+    since: raw.since,
+    asOf: raw.asOf,
+    calls: raw.calls,
+    originalBytes: raw.originalBytes,
+    sentBytes: raw.sentBytes,
+    savedBytes: raw.savedBytes
+  };
+}
+
+// agent/src/monitor.ts
 function commandSummary2(tool) {
   if (tool.name !== "command_run") return { name: tool.name, command: tool.name };
   const candidate = path14.win32.basename(tool.args.command).replace(/\.(exe|cmd|bat|com)$/i, "").toLowerCase();
@@ -30203,6 +30190,7 @@ var ProductionMonitor = class {
   freshnessMs = 1e4;
   transportAt = null;
   file;
+  lifetimeSavings = null;
   record(event, details = {}) {
     this.events.push({ seq: ++this.sequence, at: (/* @__PURE__ */ new Date()).toISOString(), event, ...details });
     if (this.events.length > 100) this.events.shift();
@@ -30333,6 +30321,10 @@ var ProductionMonitor = class {
   requestFailed() {
     this.record("request_failed");
   }
+  /** Only the existing ledger supplies lifetime evidence; no diagnostic persistence. */
+  setLifetimeSavings(value) {
+    this.lifetimeSavings = lifetimeSavingsView(value);
+  }
   connectionFailed(error62) {
     const code = error62 instanceof Error ? error62.message : "";
     this.record("connection_error", { code: [
@@ -30355,6 +30347,8 @@ var ProductionMonitor = class {
       schemaVersion: 1,
       instanceId: this.instanceId,
       pid: process.pid,
+      savingsSourceId: path14.basename(this.file, ".json"),
+      lifetimeSavings: this.lifetimeSavings && { ...this.lifetimeSavings },
       computer: this.computer,
       processName: "lc-agent",
       agentVersion: this.agentVersion,
@@ -31790,7 +31784,7 @@ async function readFabricRequest(input2 = process.stdin) {
 }
 
 // agent/src/main.ts
-var AGENT_VERSION2 = true ? "0.3.21-systemca.1" : "0.3.2";
+var AGENT_VERSION2 = true ? "0.3.22-systemca.1" : "0.3.2";
 function processAlive(pid) {
   if (!Number.isInteger(pid) || pid <= 0) return false;
   try {
@@ -31867,10 +31861,14 @@ async function runAgent(options) {
     throw error62;
   }
   const ledger = options.efficiencyLedger;
+  monitor(() => options.monitor?.setLifetimeSavings(ledger?.savingsSnapshot?.()));
   const efficiencyLedger = ledger && {
     record: async (input2) => {
       const recorded = await ledger.record(input2);
-      if (recorded) monitor(() => options.monitor?.efficiency(input2));
+      if (recorded) monitor(() => {
+        options.monitor?.efficiency(input2);
+        options.monitor?.setLifetimeSavings(ledger.savingsSnapshot?.());
+      });
       return recorded;
     },
     ...ledger.consumeNoticeForExecution ? { consumeNoticeForExecution: ledger.consumeNoticeForExecution.bind(ledger) } : {}