memnox 0.1.1 → 0.2.1

package/dist/index.js

@@ -113,8 +113,60 @@ function explain(err) {
 // src/program.ts
 import { Command } from "commander";
 
+// src/banner.ts
+var LETTERS = [
+  ["##   ##", "### ###", "## # ##", "##   ##", "##   ##"],
+  ["######", "##", "#####", "##", "######"],
+  ["##   ##", "### ###", "## # ##", "##   ##", "##   ##"],
+  ["##   ##", "###  ##", "## # ##", "##  ###", "##   ##"],
+  [" #####", "##   ##", "##   ##", "##   ##", " #####"],
+  ["##   ##", " ## ##", "  ###", " ## ##", "##   ##"]
+];
+var ROWS = 5;
+var TRACKING = 1;
+var FACE = "\u2588";
+var SHADOW = "\u2584";
+var DRAWN = "#";
+function faceGrid() {
+  const grid = Array.from({ length: ROWS }, () => []);
+  for (const letter of LETTERS) {
+    const width = Math.max(...letter.map((row3) => row3.length));
+    for (let row3 = 0; row3 < ROWS; row3 += 1) {
+      const art = letter[row3] ?? "";
+      for (let column = 0; column < width + TRACKING; column += 1) {
+        grid[row3].push(art[column] === DRAWN);
+      }
+    }
+  }
+  return grid;
+}
+var at = (grid, row3, column) => row3 >= 0 && column >= 0 && (grid[row3]?.[column] ?? false);
+var shadowed = (grid, row3, column) => row3 === ROWS && at(grid, ROWS - 1, column - 1);
+function wordmark(style, plain) {
+  if (!style.decorated) return [plain];
+  const grid = faceGrid();
+  const width = grid[0]?.length ?? 0;
+  const lines = [];
+  for (let row3 = 0; row3 <= ROWS; row3 += 1) {
+    let line2 = "";
+    for (let column = 0; column < width; column += 1) {
+      if (at(grid, row3, column)) line2 += style.bold(FACE);
+      else if (shadowed(grid, row3, column)) line2 += style.dim(SHADOW);
+      else line2 += " ";
+    }
+    lines.push(line2);
+  }
+  return lines;
+}
+function masthead(out, style) {
+  if (!style.decorated) return;
+  out.note("");
+  for (const line2 of wordmark(style, "memnox")) out.note(line2);
+  out.note("");
+}
+
 // src/defaults.ts
-var CLI_VERSION = "0.1.1";
+var CLI_VERSION = "0.2.1";
 
 // src/commands/scan.command.ts
 import { homedir as homedir3 } from "os";
@@ -210,6 +262,8 @@ function reaches(policy, action) {
 // src/scan/machine-report.ts
 import {
   AGENT_APPROVAL,
+  agentRefOf,
+  agentsReachingPath,
   approvalOf,
   describeBrowser,
   describeCombined,
@@ -313,7 +367,7 @@ function renderMachine(context, report3, counts) {
   out.line(`${surfaces.length} execution surfaces.`);
   if (counts.approvedAgents.length === 0 && report3.agents.length > 0) {
     out.note(
-      'No agent has been approved or refused here. Decide with "memnox config set approvedAgents".'
+      `No agent has been approved or refused here. Decide with "memnox config set approvedAgents ${report3.agents.map((agent) => agent.kind).join(",")}".`
     );
   }
   out.line("");
@@ -342,7 +396,11 @@ function renderMachine(context, report3, counts) {
 function renderCredentials(context, report3) {
   const { out, style } = context;
   if (report3.credentials.length === 0) return;
-  const agents = report3.agents.length;
+  const refs = report3.agents.map(agentRefOf);
+  const reach2 = (path) => {
+    const count = agentsReachingPath(path, refs, report3.surfaces).length;
+    return `${count} agent${count === 1 ? "" : "s"}`;
+  };
   out.line("");
   out.line(style.bold("CREDENTIALS THESE AGENTS CAN READ"));
   out.line("");
@@ -351,17 +409,16 @@ function renderCredentials(context, report3) {
     ...report3.envFiles.map((each) => each.path.length)
   ) + PATH_GUTTER;
   for (const credential of report3.credentials) {
-    const reach2 = `${agents} agent${agents === 1 ? "" : "s"}`;
-    out.line(`  ${style.warn("!")}  ${credential.path.padEnd(width)}${reach2}`);
+    out.line(
+      `  ${style.warn("!")}  ${credential.path.padEnd(width)}${reach2(credential.path)}`
+    );
     if (credential.detail !== void 0) {
       out.line(`     ${style.dim(credential.detail)}`);
     }
   }
   for (const env of report3.envFiles) {
     const keys = env.keyLike === 0 ? "" : env.keyLike === 1 ? ", 1 looks like a credential" : `, ${env.keyLike} look like credentials`;
-    out.line(
-      `  ${style.warn("!")}  ${env.path.padEnd(width)}${agents} agent${agents === 1 ? "" : "s"}`
-    );
+    out.line(`  ${style.warn("!")}  ${env.path.padEnd(width)}${reach2(env.path)}`);
     out.line(`     ${style.dim(`${env.variables} variables${keys}`)}`);
   }
 }
@@ -878,22 +935,22 @@ function watchConfigPaths(paths, seams = {}) {
     async next(timeoutMs) {
       if (pending) {
         pending = false;
-        await new Promise((resolve5) => setTimer(resolve5, SETTLE_MS));
+        await new Promise((resolve6) => setTimer(resolve6, SETTLE_MS));
         return true;
       }
-      const changed = await new Promise((resolve5) => {
+      const changed = await new Promise((resolve6) => {
         const timer = setTimer(() => {
           wake = null;
-          resolve5(false);
+          resolve6(false);
         }, timeoutMs);
         wake = () => {
           clearTimer(timer);
-          resolve5(true);
+          resolve6(true);
         };
       });
       if (changed) {
         pending = false;
-        await new Promise((resolve5) => setTimer(resolve5, SETTLE_MS));
+        await new Promise((resolve6) => setTimer(resolve6, SETTLE_MS));
       }
       return changed;
     },
@@ -1163,31 +1220,79 @@ async function resolve(milestones, id) {
 }
 
 // src/commands/check.command.ts
-import { existsSync as existsSync2 } from "fs";
 import { homedir as homedir5 } from "os";
-import { join as join3 } from "path";
 import {
   DECISION_EFFECT as DECISION_EFFECT2,
   INTENT_KIND,
   LocalGate,
-  loadPolicySet as loadPolicySet3,
-  MEMNOX_HOME as MEMNOX_HOME2,
   preflightFor,
   overlaysInForce,
-  readPolicyRegistry as readPolicyRegistry3,
   stateFactsInForce
 } from "@memnox/core";
 
 // src/policy-path.ts
 import { existsSync } from "fs";
+import { resolve as resolve3 } from "path";
+import { loadPolicySet as loadPolicySet3, readPolicyRegistry as readPolicyRegistry4 } from "@memnox/core";
+
+// src/policy-registry.ts
+import { mkdir, writeFile } from "fs/promises";
+import { dirname as dirname2, join as join3, resolve as resolve2 } from "path";
+import { readPolicyRegistry as readPolicyRegistry3 } from "@memnox/core";
+var CONFIG_DIR2 = ".memnox";
+var REGISTRY_FILE3 = "policies.json";
+var DIR_MODE = 448;
+function policyRegistryPath(homeDir) {
+  return join3(homeDir, CONFIG_DIR2, REGISTRY_FILE3);
+}
+async function registerPolicyFile(homeDir, filePath) {
+  const absolute = resolve2(filePath);
+  const existing = await readPolicyRegistry3(policyRegistryPath(homeDir));
+  if (existing.includes(absolute)) return existing;
+  const files = [...existing, absolute];
+  const path = policyRegistryPath(homeDir);
+  await mkdir(dirname2(path), { recursive: true, mode: DIR_MODE });
+  await writeFile(path, `${JSON.stringify({ files }, null, 2)}
+`, "utf8");
+  return files;
+}
+async function forgetPolicyFiles(homeDir, drop) {
+  const gone = new Set(drop);
+  const path = policyRegistryPath(homeDir);
+  const files = (await readPolicyRegistry3(path)).filter((file) => !gone.has(file));
+  await mkdir(dirname2(path), { recursive: true, mode: DIR_MODE });
+  await writeFile(path, `${JSON.stringify({ files }, null, 2)}
+`, "utf8");
+  return files;
+}
+
+// src/policy-path.ts
 var POLICY_FILES = ["memnox.policies.toml", "memnox.policies.yaml"];
 function resolvePolicyFile(explicit, exists2 = existsSync) {
   if (explicit !== void 0) return explicit;
   return POLICY_FILES.find((candidate) => exists2(candidate)) ?? POLICY_FILES[0];
 }
+async function policyFilesInForce(homeDir, explicit, exists2 = existsSync) {
+  const here = resolvePolicyFile(explicit, exists2);
+  if (explicit !== void 0) return [here];
+  const files = new Set(await readPolicyRegistry4(policyRegistryPath(homeDir)));
+  if (exists2(here)) files.add(resolve3(here));
+  return [...files];
+}
+async function policySetInForce(homeDir, explicit) {
+  return loadPolicySet3(await policyFilesInForce(homeDir, explicit));
+}
+function sayWhatDidNotLoad(context, set) {
+  for (const broken of set.unreadable) {
+    const count = broken.issues.length;
+    context.out.note(
+      `${broken.file} would not load \u2014 ${count} problem${count === 1 ? "" : "s"}, so its rules are not in force.`
+    );
+    context.out.note(`  fix them with "memnox policy check --fix ${broken.file}"`);
+  }
+}
 
 // src/commands/check.command.ts
-var REGISTRY_FILE3 = "policies.json";
 function registerCheckCommand(program, context, now = () => (/* @__PURE__ */ new Date()).toISOString()) {
   program.command("check <intent>").description(
     "Decide before the loop starts: what this would do, and what would stop it"
@@ -1203,7 +1308,8 @@ function registerCheckCommand(program, context, now = () => (/* @__PURE__ */ new
       out.line("Nothing on this machine does that, so there is nothing to decide.");
       return;
     }
-    const gate = await buildGate(options.agent, now());
+    const { gate, rules: rules2 } = await buildGate(options.agent, now());
+    sayWhatDidNotLoad(context, rules2);
     const rulings = preflight.actions.map((action) => ({
       action: action.action,
       verdict: gate.evaluate({
@@ -1219,16 +1325,15 @@ function registerCheckCommand(program, context, now = () => (/* @__PURE__ */ new
 }
 async function buildGate(agent, moment) {
   const home = homedir5();
-  const registered = await readPolicyRegistry3(join3(home, MEMNOX_HOME2, REGISTRY_FILE3));
-  const here = resolvePolicyFile();
-  const files = new Set(registered);
-  if (existsSync2(here)) files.add(here);
-  const set = await loadPolicySet3([...files]);
+  const rules2 = await policySetInForce(home);
   const overlays = await overlaysInForce(home);
-  return new LocalGate(set.policies, {
-    agentName: agent,
-    stateFacts: stateFactsInForce(overlays, moment)
-  });
+  return {
+    rules: rules2,
+    gate: new LocalGate(rules2.policies, {
+      agentName: agent,
+      stateFacts: stateFactsInForce(overlays, moment)
+    })
+  };
 }
 var ORDER = {
   [DECISION_EFFECT2.DENY]: 0,
@@ -1249,16 +1354,35 @@ function render2(context, preflight, rulings) {
   const shown = [...rulings].sort(
     (a, b) => (ORDER[a.verdict.effect] ?? 3) - (ORDER[b.verdict.effect] ?? 3)
   );
+  const reasons = new Set(rulings.map((ruling) => ruling.verdict.reason));
+  const shared = reasons.size === 1 ? [...reasons][0] : void 0;
   for (const ruling of shown) {
     const effect = ruling.verdict.effect;
     const label = effect === DECISION_EFFECT2.DENY ? style.warn("deny ") : effect === DECISION_EFFECT2.ASK ? style.warn("ask  ") : style.dim("allow");
-    out.line(
-      `  ${label}  ${ruling.action.padEnd(width)}${style.dim(ruling.verdict.reason)}`
-    );
+    const reason = shared === void 0 ? style.dim(ruling.verdict.reason) : "";
+    out.line(`  ${label}  ${ruling.action.padEnd(width)}${reason}`.trimEnd());
+  }
+  if (shared !== void 0) {
+    out.line("");
+    out.line(`  ${style.dim(shared)}`);
   }
   out.line("");
   if (stopped.length === 0) {
-    out.line(`Nothing here would stop. ${rulings.length} action(s) checked.`);
+    const unruled = rulings.filter(
+      (ruling) => ruling.verdict.matchedPolicies.length === 0
+    ).length;
+    if (unruled === rulings.length) {
+      out.line(
+        `Nothing here would stop, and no rule covers any of it. ${rulings.length} action(s) checked.`
+      );
+      out.line(
+        `  ${style.dim("memnox protect")}   put the dangerous ones behind ask or deny`
+      );
+      return;
+    }
+    out.line(
+      unruled === 0 ? `Nothing here would stop. ${rulings.length} action(s) checked.` : `Nothing here would stop. ${rulings.length} action(s) checked, ${unruled} of them covered by no rule.`
+    );
     return;
   }
   out.line(
@@ -1278,22 +1402,22 @@ import { homedir as homedir6 } from "os";
 
 // src/memnox-paths.ts
 import { join as join4 } from "path";
-import { MEMNOX_HOME as MEMNOX_HOME3 } from "@memnox/core";
+import { MEMNOX_HOME as MEMNOX_HOME2 } from "@memnox/core";
 var GUARD_DIR = "guard";
 var GUARD_PROFILE = "memnox.sb";
 var TRANSCRIPT_DIR = "transcripts";
 var BACKUP_DIR = "backup";
 function guardProfilePath(home) {
-  return join4(home, MEMNOX_HOME3, GUARD_DIR, GUARD_PROFILE);
+  return join4(home, MEMNOX_HOME2, GUARD_DIR, GUARD_PROFILE);
 }
 function landlockRulesetPath(home) {
-  return join4(home, MEMNOX_HOME3, GUARD_DIR, "landlock.json");
+  return join4(home, MEMNOX_HOME2, GUARD_DIR, "landlock.json");
 }
 function transcriptPathFor(home, sessionId) {
-  return join4(home, MEMNOX_HOME3, TRANSCRIPT_DIR, `${sessionId}.log`);
+  return join4(home, MEMNOX_HOME2, TRANSCRIPT_DIR, `${sessionId}.log`);
 }
 function backupPathFor(home, path) {
-  return join4(home, MEMNOX_HOME3, BACKUP_DIR, path.replace(/[/\\ ]/g, "_"));
+  return join4(home, MEMNOX_HOME2, BACKUP_DIR, path.replace(/[/\\ ]/g, "_"));
 }
 
 // src/commands/trace.command.ts
@@ -1371,9 +1495,9 @@ async function renderStreams(context, event, home) {
 
 // src/commands/explain.command.ts
 import { cwd } from "process";
-import { existsSync as existsSync4 } from "fs";
+import { existsSync as existsSync3 } from "fs";
 import { homedir as homedir7 } from "os";
-import { join as join8 } from "path";
+import { join as join7 } from "path";
 import {
   actionForVerb,
   hasTag,
@@ -1393,9 +1517,9 @@ import {
 } from "@memnox/core";
 
 // src/health-probe.ts
-import { existsSync as existsSync3 } from "fs";
+import { existsSync as existsSync2 } from "fs";
 import { readdir, readFile as readFile2, stat } from "fs/promises";
-import { delimiter, join as join6 } from "path";
+import { delimiter, join as join5 } from "path";
 import {
   CONFIG_FORMAT,
   configPathFor,
@@ -1422,39 +1546,6 @@ import {
   realPath,
   resolveReal
 } from "@memnox/interceptors";
-
-// src/policy-registry.ts
-import { mkdir, writeFile } from "fs/promises";
-import { dirname as dirname2, join as join5, resolve as resolve2 } from "path";
-import { readPolicyRegistry as readPolicyRegistry4 } from "@memnox/core";
-var CONFIG_DIR2 = ".memnox";
-var REGISTRY_FILE4 = "policies.json";
-var DIR_MODE = 448;
-function policyRegistryPath(homeDir) {
-  return join5(homeDir, CONFIG_DIR2, REGISTRY_FILE4);
-}
-async function registerPolicyFile(homeDir, filePath) {
-  const absolute = resolve2(filePath);
-  const existing = await readPolicyRegistry4(policyRegistryPath(homeDir));
-  if (existing.includes(absolute)) return existing;
-  const files = [...existing, absolute];
-  const path = policyRegistryPath(homeDir);
-  await mkdir(dirname2(path), { recursive: true, mode: DIR_MODE });
-  await writeFile(path, `${JSON.stringify({ files }, null, 2)}
-`, "utf8");
-  return files;
-}
-async function forgetPolicyFiles(homeDir, drop) {
-  const gone = new Set(drop);
-  const path = policyRegistryPath(homeDir);
-  const files = (await readPolicyRegistry4(path)).filter((file) => !gone.has(file));
-  await mkdir(dirname2(path), { recursive: true, mode: DIR_MODE });
-  await writeFile(path, `${JSON.stringify({ files }, null, 2)}
-`, "utf8");
-  return files;
-}
-
-// src/health-probe.ts
 var RULE_FILES = POLICY_FILES;
 async function exists(path) {
   try {
@@ -1466,7 +1557,7 @@ async function exists(path) {
 }
 async function rules(dir) {
   for (const name of RULE_FILES) {
-    const path = join6(dir, name);
+    const path = join5(dir, name);
     if (!await exists(path)) continue;
     try {
       const policies = await loadPoliciesFromFile(path);
@@ -1490,7 +1581,7 @@ async function proxyWiring(home, dir) {
   let servers = 0;
   let wrapped = 0;
   for (const location of MCP_CONFIG_LOCATIONS) {
-    const path = join6(location.scope === "home" ? home : dir, location.relative);
+    const path = join5(location.scope === "home" ? home : dir, location.relative);
     if (!await exists(path)) continue;
     let raw;
     try {
@@ -1587,13 +1678,13 @@ async function readLedger(home) {
 function presentBinaries(home, env) {
   const path = realPath(env["PATH"] ?? "", home);
   return interceptedBinaries().filter(
-    (binary) => resolveReal(binary, path, existsSync3) !== null
+    (binary) => resolveReal(binary, path, existsSync2) !== null
   );
 }
 
 // src/protect/shell-profile.ts
 import { readFile as readFile3, writeFile as writeFile2 } from "fs/promises";
-import { basename, join as join7 } from "path";
+import { basename, join as join6 } from "path";
 import { interceptorDirFor as interceptorDirFor2 } from "@memnox/interceptors";
 var BEGIN = "# >>> memnox >>>";
 var END = "# <<< memnox <<<";
@@ -1606,7 +1697,7 @@ function profilesFor(shell, home) {
   const name = basename(shell || "zsh");
   const known = Object.entries(PROFILES).find(([key]) => name.includes(key));
   const relative2 = known === void 0 ? PROFILES["zsh"] : known[1];
-  return relative2.map((each) => join7(home, each));
+  return relative2.map((each) => join6(home, each));
 }
 function pathLineFor(shell, home) {
   const directory = interceptorDirFor2(home);
@@ -1681,7 +1772,7 @@ function renderTrace(context, trace) {
   );
   out.line("");
 }
-async function answerQuestion(question, inventory, policyFile) {
+async function answerQuestion(question, inventory, rules2, here) {
   const agent = inventory.agents.find(
     (each) => each.kind.toLowerCase().includes(question.agent.toLowerCase())
   );
@@ -1703,14 +1794,14 @@ async function answerQuestion(question, inventory, policyFile) {
   const technically = matchingPath.length > 0 ? `yes \u2014 ${matchingPath[0]?.path} is reachable by ${agent.kind}` : reachesShell ? `yes \u2014 ${agent.kind} holds a shell, which reaches anything you can` : tools.length > 0 ? `unclear \u2014 ${tools.length} tool(s) reachable, none named for ${question.resource}` : `no \u2014 nothing ${agent.kind} holds here reaches ${question.resource}`;
   const runtime = reachesShell ? "a shell is present, so the runtime restricts nothing by itself" : `${tools.length} tool(s) across ${inventory.mcpServers.length} server(s)`;
   const action = actionForVerb(question.verb);
-  if (!existsSync4(policyFile)) {
+  if (rules2.policies.length === 0) {
     return {
       technically,
       runtime,
-      policy: `no rules at ${policyFile} \u2014 nothing here would stop it`
+      policy: `no rules at ${here} \u2014 nothing here would stop it`
     };
   }
-  const gate = await LocalGate2.fromFiles([policyFile], { agentName: agent.kind });
+  const gate = new LocalGate2(rules2.policies, { agentName: agent.kind });
   const verdict = gate.evaluate({ action, target: question.resource });
   const rule = verdict.matchedPolicies[0];
   const named = rule === void 0 ? "no rule matched" : `rule ${rule.name}`;
@@ -1760,11 +1851,14 @@ function registerExplainCommand(program, context, buildSeams = defaultScanSeams)
     if (subject.trim().includes(" ")) {
       const { question, error } = parseQuestion(subject);
       if (question === void 0) throw new Error(error);
+      const rules2 = await policySetInForce(homedir7(), options.file);
       const answer = await answerQuestion(
         question,
         inventoryOf2(report3, snapshot.takenAt),
+        rules2,
         resolvePolicyFile(options.file)
       );
+      sayWhatDidNotLoad(context, rules2);
       if (options.json === true) {
         context.out.json({ question, ...answer });
         return;
@@ -1968,8 +2062,8 @@ async function coverageFacts(dir) {
   return {
     interceptorsInstalled: health.interceptorsInstalled.length > 0,
     interceptorsFirstOnPath: health.interceptorDirFirstOnPath,
-    gitHooksInstalled: existsSync4(join8(dir, ".git", "hooks", "pre-push")),
-    osGuardWritten: existsSync4(guardProfilePath(homedir7())),
+    gitHooksInstalled: existsSync3(join7(dir, ".git", "hooks", "pre-push")),
+    osGuardWritten: existsSync3(guardProfilePath(homedir7())),
     egressProxySet: PROXY_VARS.some((name) => (process.env[name] ?? "") !== ""),
     loginPathConfigured: await loginPathConfigured(
       process.env["SHELL"] ?? "zsh",
@@ -2086,14 +2180,14 @@ function registerConfigCommand(program, context, home = homedir8) {
 
 // src/commands/doctor.command.ts
 import { homedir as homedir9 } from "os";
-import { join as join9 } from "path";
+import { join as join8 } from "path";
 import {
   chainsFor as chainsFor2,
   CHECK,
   checkInstallation,
   discover as discover2,
   lastProbed,
-  MEMNOX_HOME as MEMNOX_HOME4,
+  MEMNOX_HOME as MEMNOX_HOME3,
   NodeMachineReader as NodeMachineReader2,
   NodeSnapshotStore as NodeSnapshotStore2,
   rankAgents,
@@ -2102,7 +2196,7 @@ import {
   withToolsFrom
 } from "@memnox/core";
 var SEVERITY_WIDTH = 10;
-function registerDoctorCommand(program, context, buildReader = () => new NodeMachineReader2(homedir9()), cwd3 = () => process.cwd(), buildSnapshots = () => new NodeSnapshotStore2(join9(homedir9(), MEMNOX_HOME4))) {
+function registerDoctorCommand(program, context, buildReader = () => new NodeMachineReader2(homedir9()), cwd3 = () => process.cwd(), buildSnapshots = () => new NodeSnapshotStore2(join8(homedir9(), MEMNOX_HOME3))) {
   program.command("doctor").description(
     "What on this machine is risky, why, and the one change that closes each"
   ).option("--json", "emit the findings as JSON").option(
@@ -2158,7 +2252,9 @@ function registerDoctorCommand(program, context, buildReader = () => new NodeMac
     out.line("");
     for (const finding of report3.findings) {
       out.line(`  ${severity(style, finding).padEnd(SEVERITY_WIDTH)}${finding.title}`);
-      out.line(`  ${" ".repeat(SEVERITY_WIDTH)}${style.dim(finding.evidence)}`);
+      if (!finding.title.includes(finding.evidence)) {
+        out.line(`  ${" ".repeat(SEVERITY_WIDTH)}${style.dim(finding.evidence)}`);
+      }
       const remediation = finding.remediation;
       if (remediation !== void 0) {
         out.line(
@@ -2245,17 +2341,17 @@ import {
 
 // src/protect/harden-state.ts
 import { homedir as homedir10 } from "os";
-import { join as join10 } from "path";
+import { join as join9 } from "path";
 import {
   HARDEN_TARGET,
-  MEMNOX_HOME as MEMNOX_HOME5,
+  MEMNOX_HOME as MEMNOX_HOME4,
   NodeHardenWriter,
   NodeMachineReader as NodeMachineReader3,
   NodeSnapshotStore as NodeSnapshotStore3
 } from "@memnox/core";
 function defaultSeams() {
   const home = homedir10();
-  const root = join10(home, MEMNOX_HOME5);
+  const root = join9(home, MEMNOX_HOME4);
   return {
     reader: new NodeMachineReader3(home),
     writer: new NodeHardenWriter(root),
@@ -2264,7 +2360,7 @@ function defaultSeams() {
     registerPolicy: async (path) => {
       await registerPolicyFile(home, path);
     },
-    absolute: (path) => join10(root, path)
+    absolute: (path) => join9(root, path)
   };
 }
 async function registerApplied(seams, applied) {
@@ -2344,10 +2440,10 @@ async function runInteractive(context, takeRecommended, ask) {
 }
 
 // src/protect/native-permissions.ts
-import { existsSync as existsSync5 } from "fs";
+import { existsSync as existsSync4 } from "fs";
 import { readFile as readFile4, writeFile as writeFile3 } from "fs/promises";
 import { homedir as homedir12 } from "os";
-import { join as join11 } from "path";
+import { join as join10 } from "path";
 import {
   applyNative,
   applyOpenClaw,
@@ -2365,7 +2461,7 @@ import {
 var TARGETS = [
   {
     product: "Claude Code",
-    path: join11(".claude", "settings.json"),
+    path: join10(".claude", "settings.json"),
     apply: (raw, policies) => {
       const translation = toClaudeCodePermissions(policies);
       const { allow, ask, deny } = translation.permissions;
@@ -2379,7 +2475,7 @@ var TARGETS = [
   },
   {
     product: "OpenClaw",
-    path: join11(".openclaw", "openclaw.json"),
+    path: join10(".openclaw", "openclaw.json"),
     apply: (raw, policies) => {
       const translation = toOpenClawTools(policies);
       const { allow, deny } = translation.tools;
@@ -2400,7 +2496,7 @@ var TARGETS = [
   },
   {
     product: "Hermes",
-    path: join11(".hermes", "config.yaml"),
+    path: join10(".hermes", "config.yaml"),
     text: true,
     apply: (raw, policies) => {
       const translation = toHermesApprovals(
@@ -2427,11 +2523,11 @@ function json(value) {
 async function runNative(context, reverting, home = homedir12) {
   const present = TARGETS.map((target) => ({
     target,
-    path: join11(home(), target.path)
-  })).filter((each) => existsSync5(each.path));
+    path: join10(home(), target.path)
+  })).filter((each) => existsSync4(each.path));
   if (present.length === 0) {
     throw new Error(
-      "No agent here publishes a permission file Memnox can write. Looked for:\n" + TARGETS.map((each) => `  ${join11(home(), each.path)}  (${each.product})`).join(
+      "No agent here publishes a permission file Memnox can write. Looked for:\n" + TARGETS.map((each) => `  ${join10(home(), each.path)}  (${each.product})`).join(
         "\n"
       )
     );
@@ -2475,17 +2571,17 @@ async function runNative(context, reverting, home = homedir12) {
 }
 async function rulesToWrite() {
   const rules2 = resolvePolicyFile();
-  if (!existsSync5(rules2)) {
+  if (!existsSync4(rules2)) {
     throw new Error(`No rules at ${rules2} to write. Try "memnox protect --interactive".`);
   }
   return loadPoliciesFromFile2(rules2);
 }
 
 // src/protect/seam-install.ts
-import { existsSync as existsSync6, realpathSync } from "fs";
+import { existsSync as existsSync5, realpathSync } from "fs";
 import { mkdir as mkdir2, writeFile as writeFile4 } from "fs/promises";
 import { homedir as homedir13, release } from "os";
-import { basename as basename2, dirname as dirname3, join as join12 } from "path";
+import { basename as basename2, dirname as dirname3, join as join11 } from "path";
 import {
   guardFor,
   guardPlanFrom,
@@ -2544,7 +2640,7 @@ async function runOsGuard(context, repoDir, home = homedir13()) {
   const { out, style } = context;
   const support = guardFor(process.platform, release());
   const file = resolvePolicyFile();
-  if (!existsSync6(file)) {
+  if (!existsSync5(file)) {
     throw new Error(`No rules at ${file}. Write some first:  memnox protect --yes`);
   }
   const plan = guardPlanFrom(await loadPoliciesFromFile3(file), home, [repoDir]);
@@ -2618,7 +2714,7 @@ async function runPathLine(context, reverting, env = process.env) {
   );
 }
 async function firstExisting(paths) {
-  for (const path of paths) if (existsSync6(path)) return path;
+  for (const path of paths) if (existsSync5(path)) return path;
   return null;
 }
 function throughSymlinks(policy) {
@@ -2636,7 +2732,7 @@ function resolveThrough(path) {
   const tail = [];
   while (head !== dirname3(head)) {
     try {
-      return join12(realpathSync(head), ...tail);
+      return join11(realpathSync(head), ...tail);
     } catch {
       tail.unshift(basename2(head));
       head = dirname3(head);
@@ -2972,7 +3068,8 @@ function render4(context, event) {
   );
   out.line("");
   row(context.out, "when", event.at);
-  row(context.out, "agent", `${event.agent} (${event.actorType})`);
+  const named = event.agent.toLowerCase().includes(event.actorType.toLowerCase());
+  row(context.out, "agent", named ? event.agent : `${event.agent} (${event.actorType})`);
   row(context.out, "surface", event.surface);
   row(context.out, "class", event.class);
   row(context.out, "reason", event.reason);
@@ -3455,7 +3552,7 @@ function registerFreezeCommand(program, context, home = homedir20, now = () => /
 
 // src/commands/lock.command.ts
 import { homedir as homedir21 } from "os";
-import { relative, resolve as resolve3 } from "path";
+import { relative, resolve as resolve4 } from "path";
 import {
   DEFAULT_LEASE_MINUTES,
   LEASE_OUTCOME,
@@ -3520,7 +3617,7 @@ function registerLockCommand(program, context, home = homedir21, now = () => /*
           "A lease is repository-relative, and this is not a repository."
         );
       }
-      const wanted = normalizeLeasePath(relative(root, resolve3(process.cwd(), path)));
+      const wanted = normalizeLeasePath(relative(root, resolve4(process.cwd(), path)));
       if (wanted === null) {
         throw new Error(`${path} is outside this repository, so nothing can lease it.`);
       }
@@ -3743,7 +3840,6 @@ function asUnit(value) {
 
 // src/commands/next.command.ts
 import { homedir as homedir25 } from "os";
-import { existsSync as existsSync7 } from "fs";
 import {
   delegations,
   describeLevel,
@@ -3773,8 +3869,8 @@ function registerNextCommand(program, context, home = homedir25, now = () => /*
     const ready = promotable(found);
     const asked = interruptions(events, week);
     const config = await loadOrCreateConfig6(home());
-    const file = resolvePolicyFile();
-    const gate = existsSync7(file) ? await LocalGate3.fromFiles([file], { agentName: "agent" }) : null;
+    const rules2 = await policySetInForce(home());
+    const gate = rules2.policies.length === 0 ? null : new LocalGate3(rules2.policies, { agentName: "agent" });
     const standing = standingOf({
       enforcing: config.mode === ENFORCEMENT_MODE2.ENFORCE,
       rules: gate?.rules().length ?? 0,
@@ -3952,6 +4048,7 @@ function merge(accepted, wanted, at2) {
   }
   return [...by.values()];
 }
+var NEW_SHOWN = 12;
 function render9(context, findings) {
   const { out, style } = context;
   if (findings.length === 0) {
@@ -3973,7 +4070,18 @@ function render9(context, findings) {
     out.line("");
     out.line(style.bold("NEW"));
     out.line("");
-    for (const skill of fresh) out.line(`  ${style.dim("+")}  ${describeSkill(skill)}`);
+    const ordered = [...fresh].sort((a, b) => b.reaches.length - a.reaches.length);
+    for (const skill of ordered.slice(0, NEW_SHOWN)) {
+      out.line(`  ${style.dim("+")}  ${describeSkill(skill)}`);
+    }
+    const rest = ordered.length - NEW_SHOWN;
+    if (rest > 0) {
+      const quiet = ordered.slice(NEW_SHOWN).filter((each) => each.reaches.length === 0);
+      out.line(
+        `  ${style.dim(`\u2026 and ${rest} more, ${quiet.length} of which name no tool this knows`)}`
+      );
+      out.note('"memnox skills --json" lists every one.');
+    }
   }
   const known = findings.length - held.length - fresh.length;
   out.line("");
@@ -3985,14 +4093,13 @@ function render9(context, findings) {
 }
 
 // src/commands/autopilot.command.ts
-import { existsSync as existsSync8 } from "fs";
+import { homedir as homedir28 } from "os";
 import {
   BAND,
   LocalGate as LocalGate4,
   actionsForCli,
   blastRadiusOf,
   boundaryFor,
-  loadPoliciesFromFile as loadPoliciesFromFile4,
   rolesIn,
   standingFor,
   inBand,
@@ -4002,19 +4109,25 @@ import {
 function registerAutopilotCommand(program, context) {
   program.command("autopilot [agent]").description("What an agent would do on its own, and what would still be asked").option("-f, --file <path>", "policy file (default: whichever exists)").option("--role <name>", "show the boundary of a job rather than of a product").option("--roles", "every job the rules name, and what each may do").option("--json", "machine-readable output").action(
     async (agent, options) => {
-      const file = resolvePolicyFile(options.file);
-      if (!existsSync8(file)) {
+      const rules2 = await policySetInForce(homedir28(), options.file);
+      if (rules2.policies.length === 0) {
         throw new Error(
-          `No rules at ${file}, so there is no boundary to show. Write one:  memnox protect --yes`
+          `No rules at ${resolvePolicyFile(options.file)}, so there is no boundary to show. Write one:  memnox protect --yes`
         );
       }
+      sayWhatDidNotLoad(context, rules2);
       const candidatesFor = () => interceptedBinaries2().flatMap((binary) => actionsForCli(binary));
       if (options.roles === true) {
-        await renderWorkforce(context, file, candidatesFor(), options.json === true);
+        await renderWorkforce(
+          context,
+          rules2.policies,
+          candidatesFor(),
+          options.json === true
+        );
         return;
       }
       const name = agent ?? "claude-code";
-      const gate = await LocalGate4.fromFiles([file], {
+      const gate = new LocalGate4(rules2.policies, {
         agentName: name,
         /* Evaluated as the job, so a `roles:` rule fires. Without this the screen
            would show what the product may do and call it what the role may do. */
@@ -4107,8 +4220,8 @@ function band(context, title, entries, mark) {
     context.out.line(`  ${context.style.dim(`and ${entries.length - 12} more`)}`);
   }
 }
-async function renderWorkforce(context, file, candidates, asJson) {
-  const roles = rolesIn(await loadPoliciesFromFile4(file));
+async function renderWorkforce(context, policies, candidates, asJson) {
+  const roles = rolesIn([...policies]);
   const { out, style } = context;
   if (roles.length === 0) {
     out.line("No rule here names a job, so there is no workforce to show.");
@@ -4119,7 +4232,7 @@ async function renderWorkforce(context, file, candidates, asJson) {
   }
   const standings = [];
   for (const role of roles) {
-    const gate = await LocalGate4.fromFiles([file], { agentName: role, agentRole: role });
+    const gate = new LocalGate4([...policies], { agentName: role, agentRole: role });
     const boundary = boundaryFor(role, candidates, (action) => {
       const verdict = gate.evaluate({ action });
       return {
@@ -4150,11 +4263,11 @@ async function renderWorkforce(context, file, candidates, asJson) {
 
 // src/commands/env.command.ts
 import { delimiter as delimiter2 } from "path";
-import { homedir as homedir28 } from "os";
+import { homedir as homedir29 } from "os";
 import { SESSION_VAR as SESSION_VAR2 } from "@memnox/core";
 import { interceptorDirFor as interceptorDirFor4, REAL_SHELL_VAR } from "@memnox/interceptors";
 var FORMATS = ["sh", "systemd", "docker"];
-function registerEnvCommand(program, context, home = homedir28) {
+function registerEnvCommand(program, context, home = homedir29) {
   program.command("env").description("The environment an agent needs when something else starts it").option("--format <format>", `one of: ${FORMATS.join(", ")}`, "sh").option("--shell <path>", "shell the agent should use", "memnox-shell").option("--session <id>", "group this run in the timeline under one session").action(async (options) => {
     if (!FORMATS.includes(options.format)) {
       throw new Error(`--format takes one of: ${FORMATS.join(", ")}`);
@@ -4202,7 +4315,7 @@ function expand(key, value) {
 
 // src/commands/verify.command.ts
 import { readFile as readFile7 } from "fs/promises";
-import { homedir as homedir29 } from "os";
+import { homedir as homedir30 } from "os";
 import {
   describeProof,
   enforcementFailed,
@@ -4214,13 +4327,13 @@ import {
 
 // src/verify/enforcement.ts
 import { execFile as execFile3, spawn } from "child_process";
-import { existsSync as existsSync9 } from "fs";
+import { existsSync as existsSync6 } from "fs";
 import { mkdir as mkdir3, mkdtemp, writeFile as writeFile6 } from "fs/promises";
 import { tmpdir } from "os";
-import { join as join13 } from "path";
+import { join as join12 } from "path";
 import { promisify as promisify3 } from "util";
 import {
-  MEMNOX_HOME as MEMNOX_HOME6,
+  MEMNOX_HOME as MEMNOX_HOME5,
   PROOF,
   PROXY_BINARY as PROXY_BINARY2,
   SURFACE_KIND as SURFACE_KIND2
@@ -4246,12 +4359,12 @@ else if(m.id!==undefined)send({jsonrpc:'2.0',id:m.id,result:{content:[{type:'tex
 }});
 `;
 async function proveEnforcement(context) {
-  const sandbox = await mkdtemp(join13(tmpdir(), "memnox-selftest-"));
-  const rules2 = join13(sandbox, "memnox.policies.toml");
+  const sandbox = await mkdtemp(join12(tmpdir(), "memnox-selftest-"));
+  const rules2 = join12(sandbox, "memnox.policies.toml");
   await writeFile6(rules2, PROBE_RULES, "utf8");
-  await mkdir3(join13(sandbox, MEMNOX_HOME6), { recursive: true, mode: 448 });
+  await mkdir3(join12(sandbox, MEMNOX_HOME5), { recursive: true, mode: 448 });
   await writeFile6(
-    join13(sandbox, MEMNOX_HOME6, "policies.json"),
+    join12(sandbox, MEMNOX_HOME5, "policies.json"),
     `${JSON.stringify({ files: [rules2] }, null, 2)}
 `,
     "utf8"
@@ -4266,7 +4379,7 @@ async function proveEnforcement(context) {
 }
 async function proveMcp(sandbox) {
   const seam = SURFACE_KIND2.MCP;
-  const stub = join13(sandbox, "stub.mjs");
+  const stub = join12(sandbox, "stub.mjs");
   await writeFile6(stub, STUB_SERVER, "utf8");
   const call = `{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"memnox-self-test","version":"1"}}}
 {"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"memnox_selftest_delete","arguments":{}}}
@@ -4313,14 +4426,14 @@ function resolvedThrough(sandbox) {
   return env;
 }
 function speak(command, args, input, env) {
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     const child = spawn(command, [...args], { env, stdio: ["pipe", "pipe", "pipe"] });
     let out = "";
     child.stdout.on("data", (chunk) => {
       out += chunk.toString();
     });
     child.on("error", reject);
-    child.on("close", () => resolve5(out));
+    child.on("close", () => resolve6(out));
     const timer = setTimeout(() => child.kill(), PROBE_MS);
     timer.unref();
     child.stdin.end(input);
@@ -4328,8 +4441,8 @@ function speak(command, args, input, env) {
 }
 async function proveShell(home, sandbox) {
   const seam = SURFACE_KIND2.SHELL;
-  const binary = join13(interceptorDirFor5(home), "git");
-  if (!existsSync9(binary)) {
+  const binary = join12(interceptorDirFor5(home), "git");
+  if (!existsSync6(binary)) {
     return {
       seam,
       state: PROOF.ABSENT,
@@ -4361,9 +4474,9 @@ function refusedIn(seam, output) {
   };
 }
 function proveGitHook(dir) {
-  const hook = join13(dir, ".git", "hooks", "pre-push");
+  const hook = join12(dir, ".git", "hooks", "pre-push");
   const seam = SURFACE_KIND2.GIT;
-  if (!existsSync9(hook)) {
+  if (!existsSync6(hook)) {
     return {
       seam,
       state: PROOF.ABSENT,
@@ -4379,7 +4492,7 @@ function proveGitHook(dir) {
 }
 function proveOsGuard(home) {
   const seam = SURFACE_KIND2.FILESYSTEM;
-  if (!existsSync9(guardProfilePath(home))) {
+  if (!existsSync6(guardProfilePath(home))) {
     return {
       seam,
       state: PROOF.ABSENT,
@@ -4410,7 +4523,7 @@ function proveEgress() {
 }
 
 // src/commands/verify.command.ts
-function registerVerifyCommand(program, context, probe = proveEnforcement, home = homedir29, dir = () => process.cwd()) {
+function registerVerifyCommand(program, context, probe = proveEnforcement, home = homedir30, dir = () => process.cwd()) {
   program.command("verify [bundle]").description("Check an exported bundle, or prove the seams actually refuse").option(
     "--enforcement",
     "ask every seam to refuse something, and report what came back"
@@ -4482,8 +4595,8 @@ async function renderEnforcement(context, proofs) {
 }
 
 // src/commands/daemon.command.ts
-import { homedir as homedir30 } from "os";
-import { existsSync as existsSync10 } from "fs";
+import { homedir as homedir31 } from "os";
+import { existsSync as existsSync7 } from "fs";
 import { LocalGate as LocalGate5 } from "@memnox/core";
 import { readBudgets as readBudgets4, readFleetSpend, SessionPauses as SessionPauses4 } from "@memnox/core";
 
@@ -4541,9 +4654,9 @@ Use a shorter home directory. The interceptors still evaluate in process, which
     await rm2(path, { force: true });
     const server = createServer((socket) => this.serve(socket));
     this.server = server;
-    await new Promise((resolve5, reject) => {
+    await new Promise((resolve6, reject) => {
       server.once("error", reject);
-      server.listen(path, () => resolve5());
+      server.listen(path, () => resolve6());
     });
     await chmod(path, 384);
     return path;
@@ -4551,7 +4664,7 @@ Use a shorter home directory. The interceptors still evaluate in process, which
   async close() {
     const server = this.server;
     if (server === null) return;
-    await new Promise((resolve5) => server.close(() => resolve5()));
+    await new Promise((resolve6) => server.close(() => resolve6()));
     this.server = null;
   }
   serve(socket) {
@@ -4742,11 +4855,11 @@ import { readAccount as readAccount2 } from "@memnox/core";
 
 // src/sync/heartbeat.ts
 import { readFile as readFile10 } from "fs/promises";
-import { join as join16 } from "path";
+import { join as join15 } from "path";
 import {
   fleetBudgets,
   HOLD_ANSWER as HOLD_ANSWER2,
-  MEMNOX_HOME as MEMNOX_HOME9,
+  MEMNOX_HOME as MEMNOX_HOME8,
   NodeSnapshotStore as NodeSnapshotStore4,
   PendingApprovals as PendingApprovals3,
   readBudgets as readBudgets3,
@@ -4758,10 +4871,10 @@ import { readAccount } from "@memnox/core";
 
 // src/sync/bundle.ts
 import { mkdir as mkdir5, readFile as readFile8, rename, rm as rm3, writeFile as writeFile7 } from "fs/promises";
-import { dirname as dirname5, join as join14 } from "path";
+import { dirname as dirname5, join as join13 } from "path";
 import {
-  loadPoliciesFromFile as loadPoliciesFromFile5,
-  MEMNOX_HOME as MEMNOX_HOME7,
+  loadPoliciesFromFile as loadPoliciesFromFile4,
+  MEMNOX_HOME as MEMNOX_HOME6,
   orgConditionsPathFor,
   orgOverlaysFrom,
   writeOrgConditions
@@ -4848,7 +4961,7 @@ var PULL_OUTCOME = {
   LAPSED: "lapsed"
 };
 function orgPolicyPath(home) {
-  return join14(home, MEMNOX_HOME7, ORG_POLICY_FILE);
+  return join13(home, MEMNOX_HOME6, ORG_POLICY_FILE);
 }
 async function pullBundle(home, account, held, now = Date.now) {
   const answer = await callCloud({
@@ -4882,7 +4995,7 @@ async function applyBundle(home, bundle, now = Date.now) {
     mode: OWNER_ONLY
   });
   try {
-    await loadPoliciesFromFile5(staging);
+    await loadPoliciesFromFile4(staging);
   } catch (err) {
     await rm3(staging, { force: true });
     return {
@@ -4933,11 +5046,11 @@ async function touchOrgConditions(home, at2) {
 // src/sync/push.ts
 import { createSign, sign as signBytes } from "crypto";
 import { readFile as readFile9, writeFile as writeFile8, mkdir as mkdir6 } from "fs/promises";
-import { dirname as dirname6, join as join15 } from "path";
+import { dirname as dirname6, join as join14 } from "path";
 import {
   DECISION_EFFECT as DECISION_EFFECT8,
   EXECUTION,
-  MEMNOX_HOME as MEMNOX_HOME8
+  MEMNOX_HOME as MEMNOX_HOME7
 } from "@memnox/core";
 
 // src/sync/census.ts
@@ -5020,7 +5133,7 @@ var PUSH_OUTCOME = {
   REFUSED: "refused"
 };
 function cursorPathFor(home) {
-  return join15(home, MEMNOX_HOME8, CURSOR_FILE);
+  return join14(home, MEMNOX_HOME7, CURSOR_FILE);
 }
 async function readCursor(home) {
   try {
@@ -5256,7 +5369,7 @@ async function onePass(home) {
     const census = await pushCensus(
       home,
       account,
-      await new NodeSnapshotStore4(join16(home, MEMNOX_HOME9)).latest()
+      await new NodeSnapshotStore4(join15(home, MEMNOX_HOME8)).latest()
     );
     if (census.outcome === PUSH_OUTCOME.REVOKED) {
       return { pull, push, census, revoked: true };
@@ -5356,10 +5469,10 @@ async function syncLoop(home, running, seams = {}) {
 }
 
 // src/commands/daemon.command.ts
-function registerDaemonCommand(program, context, home = homedir30) {
+function registerDaemonCommand(program, context, home = homedir31) {
   program.command("daemon").description("Hold the rules in one process, so an interceptor pays a connect").option("-f, --file <path>", "policy file (default: whichever exists)").option("--no-sync", "hold the rules but talk to nothing").action(async (options) => {
     const file = resolvePolicyFile(options.file);
-    const gate = existsSync10(file) ? await LocalGate5.fromFiles([file], { agentName: "agent" }) : void 0;
+    const gate = existsSync7(file) ? await LocalGate5.fromFiles([file], { agentName: "agent" }) : void 0;
     const budgets = await readBudgets4(home());
     const spentAlready = budgets.length === 0 ? [] : await withEvents(home(), (store) => store.query({ limit: 2e4 }));
     const daemon = new MemnoxDaemon({
@@ -5391,10 +5504,10 @@ function registerDaemonCommand(program, context, home = homedir30) {
         log: (message) => context.out.note(message)
       });
     }
-    await new Promise((resolve5) => {
+    await new Promise((resolve6) => {
       const stop = () => {
         running = false;
-        void daemon.close().then(resolve5);
+        void daemon.close().then(resolve6);
       };
       process.once("SIGINT", stop);
       process.once("SIGTERM", stop);
@@ -5403,17 +5516,17 @@ function registerDaemonCommand(program, context, home = homedir30) {
 }
 
 // src/commands/uninstall.command.ts
-import { homedir as homedir31 } from "os";
+import { homedir as homedir32 } from "os";
 import { cwd as cwd2 } from "process";
-import { existsSync as existsSync11 } from "fs";
+import { existsSync as existsSync8 } from "fs";
 import { rm as rm4 } from "fs/promises";
-import { join as join17 } from "path";
+import { join as join16 } from "path";
 import {
   fleetSpendPathFor,
   LEASE_OUTCOME as LEASE_OUTCOME2,
   LeaseRegistry as LeaseRegistry3,
   leaseDirFor,
-  MEMNOX_HOME as MEMNOX_HOME10,
+  MEMNOX_HOME as MEMNOX_HOME9,
   pauseDirFor,
   pendingDirFor,
   taskDirFor
@@ -5433,7 +5546,7 @@ async function clearOperationalState(home) {
   ];
   let cleared = 0;
   for (const path of paths) {
-    if (!existsSync11(path)) continue;
+    if (!existsSync8(path)) continue;
     await rm4(path, { recursive: true, force: true });
     cleared += 1;
   }
@@ -5455,7 +5568,7 @@ async function releaseEveryLease(home, now) {
 }
 function registerUninstallCommand(program, context, deps = {}) {
   program.command("uninstall").description("Remove the interceptors, the hooks and the wrapping from this machine").option("--purge", "also delete ~/.memnox, including the history and your rules").action(async (options) => {
-    const home = (deps.home ?? homedir31)();
+    const home = (deps.home ?? homedir32)();
     const dir = (deps.dir ?? cwd2)();
     const { out } = context;
     const interceptors = await removeInterceptors(home);
@@ -5488,14 +5601,14 @@ function registerUninstallCommand(program, context, deps = {}) {
     }
     if (options.purge !== true) {
       out.line("");
-      out.line(`Your rules and history are still in ${join17(home, MEMNOX_HOME10)}.`);
+      out.line(`Your rules and history are still in ${join16(home, MEMNOX_HOME9)}.`);
       out.line("Add --purge to delete those too.");
       return;
     }
-    await rm4(join17(home, MEMNOX_HOME10), { recursive: true, force: true });
+    await rm4(join16(home, MEMNOX_HOME9), { recursive: true, force: true });
     out.line("");
-    out.line(`Deleted ${join17(home, MEMNOX_HOME10)}.`);
-    const rules2 = POLICY_FILES.map((name) => join17(dir, name)).filter(existsSync11);
+    out.line(`Deleted ${join16(home, MEMNOX_HOME9)}.`);
+    const rules2 = POLICY_FILES.map((name) => join16(dir, name)).filter(existsSync8);
     if (rules2.length === 0) {
       out.line("Nothing of Memnox is left on this machine.");
     } else {
@@ -5513,11 +5626,11 @@ function registerUninstallCommand(program, context, deps = {}) {
 
 // src/commands/run.command.ts
 import { spawn as spawn2 } from "child_process";
-import { createWriteStream, existsSync as existsSync12, mkdirSync } from "fs";
+import { createWriteStream, existsSync as existsSync9, mkdirSync } from "fs";
 import { join as join18 } from "path";
-import { homedir as homedir32, release as release2 } from "os";
+import { homedir as homedir33, release as release2 } from "os";
 import { randomUUID } from "crypto";
-import { delimiter as delimiter3 } from "path";
+import { delimiter as delimiter4 } from "path";
 import {
   guardFor as guardFor2,
   isEmptyScope,
@@ -5536,12 +5649,40 @@ import {
   interceptorDirFor as interceptorDirFor7,
   REAL_SHELL_VAR as REAL_SHELL_VAR2
 } from "@memnox/interceptors";
+
+// src/on-path.ts
+import { accessSync, constants } from "fs";
+import { delimiter as delimiter3, join as join17 } from "path";
+import { DISCOVERED_AGENT_KIND } from "@memnox/core";
+function onPath(binary, path = process.env["PATH"] ?? "") {
+  if (binary.includes("/")) return executable(binary);
+  return path.split(delimiter3).some((entry) => entry !== "" && executable(join17(entry, binary)));
+}
+function executable(candidate) {
+  try {
+    accessSync(candidate, constants.X_OK);
+    return true;
+  } catch {
+    return false;
+  }
+}
+var BINARY_FOR = {
+  [DISCOVERED_AGENT_KIND.CLAUDE_CODE]: "claude",
+  [DISCOVERED_AGENT_KIND.CODEX_CLI]: "codex",
+  [DISCOVERED_AGENT_KIND.CLAUDE_DESKTOP]: "claude"
+};
+function binaryMeantBy(name) {
+  const binary = BINARY_FOR[name];
+  return binary === void 0 || !onPath(binary) ? null : binary;
+}
+
+// src/commands/run.command.ts
 function environmentFor(base, home, sessionId, shellBinary) {
   const interceptors = interceptorDirFor7(home);
   const path = base["PATH"] ?? "";
   return {
     ...base,
-    PATH: path.startsWith(interceptors) ? path : `${interceptors}${delimiter3}${path}`,
+    PATH: path.startsWith(interceptors) ? path : `${interceptors}${delimiter4}${path}`,
     SHELL: shellBinary,
     /* The shell we displace, so the wrapper has something to hand the command to and
        never reads `SHELL` back to find itself. */
@@ -5552,11 +5693,11 @@ function environmentFor(base, home, sessionId, shellBinary) {
 function newSessionId() {
   return `ses_${randomUUID().slice(0, 12)}`;
 }
-var defaultStart = (command, args, env, transcript) => new Promise((resolve5) => {
+var defaultStart = (command, args, env, transcript) => new Promise((resolve6) => {
   if (transcript === void 0) {
     const child2 = spawn2(command, [...args], { stdio: "inherit", env });
-    child2.on("exit", (code) => resolve5(code ?? 1));
-    child2.on("error", () => resolve5(127));
+    child2.on("exit", (code) => resolve6(code ?? 1));
+    child2.on("error", () => resolve6(127));
     return;
   }
   mkdirSync(join18(transcript, ".."), { recursive: true, mode: 448 });
@@ -5571,11 +5712,11 @@ var defaultStart = (command, args, env, transcript) => new Promise((resolve5) =>
   child.stderr?.pipe(log);
   child.on("exit", (code) => {
     log.end();
-    resolve5(code ?? 1);
+    resolve6(code ?? 1);
   });
   child.on("error", () => {
     log.end();
-    resolve5(127);
+    resolve6(127);
   });
 });
 function registerRunCommand(program, context, deps = {}) {
@@ -5588,7 +5729,14 @@ function registerRunCommand(program, context, deps = {}) {
       if (binary === void 0) {
         throw new Error("Name the command to run:  memnox run -- claude");
       }
-      const home = (deps.home ?? homedir32)();
+      if (!(deps.onPath ?? onPath)(binary)) {
+        const meant = (deps.binaryMeantBy ?? binaryMeantBy)(binary);
+        throw new Error(
+          `"${binary}" is not on PATH, so there is nothing to start.` + (meant === null ? "" : `
+The binary for ${binary} is "${meant}":  memnox run -- ${meant}`)
+        );
+      }
+      const home = (deps.home ?? homedir33)();
       const sessionId = (deps.newId ?? newSessionId)();
       const env = environmentFor(process.env, home, sessionId, options.shell);
       if (options.role !== void 0) env[AGENT_ROLE_VAR] = options.role;
@@ -5612,9 +5760,9 @@ function registerRunCommand(program, context, deps = {}) {
       const transcript = options.transcript === true ? transcriptPathFor(home, sessionId) : void 0;
       if (transcript !== void 0) context.out.note(`transcript ${transcript}`);
       const start = deps.start ?? defaultStart;
-      const [executable, ...args] = guarded;
+      const [executable2, ...args] = guarded;
       try {
-        process.exitCode = await start(executable ?? binary, args, env, transcript);
+        process.exitCode = await start(executable2 ?? binary, args, env, transcript);
       } finally {
         const let_go = await releaseLeases(home, sessionId, deps);
         if (let_go > 0) {
@@ -5630,7 +5778,7 @@ function sandboxed(command, home, wanted, seams = {}) {
   const kernel = seams.kernel ?? release2();
   if (guardFor2(platform, kernel).guard !== OS_GUARD2.SEATBELT) return command;
   const profile = guardProfilePath(home);
-  if (!(seams.exists ?? existsSync12)(profile)) return command;
+  if (!(seams.exists ?? existsSync9)(profile)) return command;
   return sandboxCommand(profile, command);
 }
 async function declareTask(home, sessionId, options, deps) {
@@ -5681,6 +5829,7 @@ async function keepMilestone(sessionId, binary, deps) {
       sessionId,
       note: `before ${binary}`
     });
+    await milestones.forget();
     return taken.id;
   } catch {
     return null;
@@ -5688,8 +5837,7 @@ async function keepMilestone(sessionId, binary, deps) {
 }
 
 // src/commands/mcp.command.ts
-import { execFileSync } from "child_process";
-import { homedir as homedir33 } from "os";
+import { homedir as homedir34 } from "os";
 import { dirname as dirname7, join as join19 } from "path";
 import { copyFile, mkdir as mkdir7, readFile as readFile11, writeFile as writeFile9 } from "fs/promises";
 import {
@@ -5759,18 +5907,11 @@ async function writeConfig(home, file, servers, changed) {
   await writeFile9(file.path, `${JSON.stringify(next, null, 2)}
 `, "utf8");
 }
-function proxyOnPath(resolve5 = defaultResolve) {
-  return resolve5(PROXY_BINARY3);
+function proxyOnPath(resolve6 = defaultResolve) {
+  return resolve6(PROXY_BINARY3);
 }
-var defaultResolve = (binary) => {
-  try {
-    execFileSync("command", ["-v", binary], { stdio: "ignore", shell: true });
-    return true;
-  } catch {
-    return false;
-  }
-};
-function registerMcpCommand(program, context, home = homedir33, resolveBinary = defaultResolve, project = () => process.cwd()) {
+var defaultResolve = (binary) => onPath(binary);
+function registerMcpCommand(program, context, home = homedir34, resolveBinary = defaultResolve, project = () => process.cwd()) {
   const mcp = program.command("mcp").description("Route this machine\u2019s MCP servers through the Memnox proxy");
   mcp.command("wrap").description("Repoint every MCP server at the proxy, keeping a backup").option("--dry-run", "print what would change and write nothing").action(async (options) => {
     if (options.dryRun !== true && !proxyOnPath(resolveBinary)) {
@@ -5846,19 +5987,21 @@ Install the CLI first (npm install -g memnox), then run this again.`
 }
 
 // src/commands/policy.command.ts
-import { existsSync as existsSync13 } from "fs";
-import { homedir as homedir34 } from "os";
-import { join as join20, resolve as resolve4 } from "path";
+import { existsSync as existsSync10 } from "fs";
+import { mkdir as mkdir8, readFile as readFile12, writeFile as writeFile10 } from "fs/promises";
+import { homedir as homedir35 } from "os";
+import { dirname as dirname8, join as join20, resolve as resolve5 } from "path";
 import {
   DECISION_EFFECT as DECISION_EFFECT9,
-  loadPoliciesFromFile as loadPoliciesFromFile6,
+  loadPoliciesFromFile as loadPoliciesFromFile5,
   loadPolicySet as loadPolicySet4,
   LocalGate as LocalGate6,
-  MEMNOX_HOME as MEMNOX_HOME11,
+  MEMNOX_HOME as MEMNOX_HOME10,
   readPolicyRegistry as readPolicyRegistry6,
+  renameEffectsIn,
   resolveAction
 } from "@memnox/core";
-var REGISTRY_FILE5 = "policies.json";
+var REGISTRY_FILE4 = "policies.json";
 function splitCommand(input) {
   return (input.match(/"[^"]*"|'[^']*'|\S+/g) ?? []).map(
     (word) => word.replace(/^["']|["']$/g, "")
@@ -5881,34 +6024,38 @@ function requestFor(input, options) {
 }
 function registerPolicyCommand(program, context) {
   const policy = program.command("policy").description("Inspect the rules in force");
-  policy.command("check [file]").description("Read every rule file on this machine and say what will not load").option("--prune", "forget registered files that are no longer on the disk").action(async (file, options) => {
-    await checkPolicyFiles(context, file, options.prune === true);
-  });
+  policy.command("check [file]").description("Read every rule file on this machine and say what will not load").option("--prune", "forget registered files that are no longer on the disk").option("--fix", "rewrite effects this version renamed, keeping a backup").action(
+    async (file, options) => {
+      if (options.fix === true) await fixRenamedEffects(context, file);
+      await checkPolicyFiles(context, file, options.prune === true);
+    }
+  );
   policy.command("use [file]").description('Register a rule file, so the seams load it and not only "policy test"').action(async (file) => {
-    const path = resolve4(resolvePolicyFile(file));
-    if (!existsSync13(path)) {
+    const path = resolve5(resolvePolicyFile(file));
+    if (!existsSync10(path)) {
       throw new Error(
         `No rule file at ${path}. Write one with "memnox protect --yes".`
       );
     }
-    const policies = await loadPoliciesFromFile6(path);
+    const policies = await loadPoliciesFromFile5(path);
     const before = await readPolicyRegistry6(
-      join20(homedir34(), MEMNOX_HOME11, REGISTRY_FILE5)
+      join20(homedir35(), MEMNOX_HOME10, REGISTRY_FILE4)
     );
-    await registerPolicyFile(homedir34(), path);
+    await registerPolicyFile(homedir35(), path);
     context.out.line(
       before.includes(path) ? `${path} was already registered; ${policies.length} rule(s) load at every seam.` : `Registered ${path} \u2014 ${policies.length} rule(s) now load at every seam.`
     );
     context.out.note('Check it with "memnox doctor --wiring".');
   });
   policy.command("test <action>").description("Evaluate one action against the rules, changing nothing").option("-f, --file <path>", "policy file (default: whichever exists)").option("-a, --agent <name>", "agent the rules are matched against", "agent").option("-t, --target <target>", "what the action operates on").action(async (action, options) => {
-    const file = resolvePolicyFile(options.file);
-    if (!existsSync13(file)) {
+    const rules2 = await policySetInForce(homedir35(), options.file);
+    if (rules2.policies.length === 0 && rules2.unreadable.length === 0) {
       throw new Error(
-        `No rules at ${file}. Write some first:  memnox protect --interactive`
+        `No rules at ${resolvePolicyFile(options.file)}. Write some first:  memnox protect --interactive`
       );
     }
-    const gate = await LocalGate6.fromFiles([file], {
+    sayWhatDidNotLoad(context, rules2);
+    const gate = new LocalGate6(rules2.policies, {
       agentName: options.agent
     });
     const verdict = gate.evaluate(requestFor(action, options));
@@ -5940,7 +6087,7 @@ async function checkPolicyFiles(context, file, prune) {
     out.line(`${style.dim("gone")}    ${missing}`);
   }
   if (set.missing.length > 0 && prune && file === void 0) {
-    await forgetPolicyFiles(homedir34(), set.missing);
+    await forgetPolicyFiles(homedir35(), set.missing);
     out.line(`${style.dim("forgot")}  ${set.missing.length} path(s) that are gone`);
   }
   for (const broken of set.unreadable) {
@@ -5954,65 +6101,37 @@ async function checkPolicyFiles(context, file, prune) {
   }
   if (set.unreadable.length > 0) process.exitCode = 1;
 }
+async function fixRenamedEffects(context, file) {
+  const { out, style } = context;
+  const files = file !== void 0 ? [resolve5(file)] : await allPolicyFiles();
+  let touched = 0;
+  for (const path of files) {
+    let source;
+    try {
+      source = await readFile12(path, "utf8");
+    } catch {
+      continue;
+    }
+    const { text, renamed } = renameEffectsIn(source);
+    if (renamed.length === 0) continue;
+    const backup = backupPathFor(homedir35(), path);
+    await mkdir8(dirname8(backup), { recursive: true, mode: 448 });
+    await writeFile10(backup, source, "utf8");
+    await writeFile10(path, text, "utf8");
+    touched += 1;
+    out.line(`${style.ok("fixed")}   ${path}  ${renamed.length} effect(s)`);
+    for (const each of new Set(renamed)) out.line(`        ${each}`);
+    out.note(`        kept the original at ${backup}`);
+  }
+  if (touched > 0) out.line("");
+}
 async function allPolicyFiles() {
-  const registered = await readPolicyRegistry6(
-    join20(homedir34(), MEMNOX_HOME11, REGISTRY_FILE5)
-  );
-  const here = resolvePolicyFile();
-  const found = new Set(registered);
-  if (existsSync13(here)) found.add(here);
-  return [...found];
+  return policyFilesInForce(homedir35());
 }
 
 // src/commands/login.command.ts
 import { spawn as spawn3 } from "child_process";
-import { homedir as homedir35 } from "os";
-
-// src/banner.ts
-var LETTERS = [
-  ["##   ##", "### ###", "## # ##", "##   ##", "##   ##"],
-  ["######", "##", "#####", "##", "######"],
-  ["##   ##", "### ###", "## # ##", "##   ##", "##   ##"],
-  ["##   ##", "###  ##", "## # ##", "##  ###", "##   ##"],
-  [" #####", "##   ##", "##   ##", "##   ##", " #####"],
-  ["##   ##", " ## ##", "  ###", " ## ##", "##   ##"]
-];
-var ROWS = 5;
-var TRACKING = 1;
-var FACE = "\u2588";
-var SHADOW = "\u2584";
-var DRAWN = "#";
-function faceGrid() {
-  const grid = Array.from({ length: ROWS }, () => []);
-  for (const letter of LETTERS) {
-    const width = Math.max(...letter.map((row3) => row3.length));
-    for (let row3 = 0; row3 < ROWS; row3 += 1) {
-      const art = letter[row3] ?? "";
-      for (let column = 0; column < width + TRACKING; column += 1) {
-        grid[row3].push(art[column] === DRAWN);
-      }
-    }
-  }
-  return grid;
-}
-var at = (grid, row3, column) => row3 >= 0 && column >= 0 && (grid[row3]?.[column] ?? false);
-var shadowed = (grid, row3, column) => row3 === ROWS && at(grid, ROWS - 1, column - 1);
-function wordmark(style, plain) {
-  if (!style.decorated) return [plain];
-  const grid = faceGrid();
-  const width = grid[0]?.length ?? 0;
-  const lines = [];
-  for (let row3 = 0; row3 <= ROWS; row3 += 1) {
-    let line2 = "";
-    for (let column = 0; column < width; column += 1) {
-      if (at(grid, row3, column)) line2 += style.bold(FACE);
-      else if (shadowed(grid, row3, column)) line2 += style.dim(SHADOW);
-      else line2 += " ";
-    }
-    lines.push(line2);
-  }
-  return lines;
-}
+import { homedir as homedir36 } from "os";
 
 // src/flow.ts
 var RAIL = "\u2502";
@@ -6040,13 +6159,8 @@ var Flow = class {
   say(mark, text) {
     this.out.note(`${this.gutter(mark)}${text}`);
   }
-  /** The wordmark, then the command's own name on a filled block. */
+  /** The command's own name on a filled block. The wordmark above it is the program's. */
   open(name) {
-    if (this.on) {
-      this.out.note("");
-      for (const line2 of wordmark(this.style, "memnox")) this.out.note(line2);
-      this.out.note("");
-    }
     this.say(START, this.style.chip(name));
     this.say(RAIL, "");
   }
@@ -6135,8 +6249,10 @@ async function requestCode(options, publicKey) {
     }
   });
   if (answer.status !== 200 && answer.status !== 201) {
+    const missing = answer.status === 404 || answer.status === 501;
     throw new EnrolmentRefused(
-      `the control plane refused the request (${answer.status}).`
+      missing ? `${options.baseUrl} has no device-enrolment endpoint (${answer.status}), so it is not a Memnox control plane.
+Point at the right one with "memnox login --url <base>". This machine is unchanged.` : `the control plane refused the request (${answer.status}).`
     );
   }
   const offer = answer.body;
@@ -6188,7 +6304,7 @@ function accountFrom(options, keys, collected, at2) {
 
 // src/commands/login.command.ts
 var DEFAULT_BASE_URL = "https://api.memnox.com";
-function registerLoginCommand(program, context, home = homedir35, seams = {}) {
+function registerLoginCommand(program, context, home = homedir36, seams = {}) {
   program.command("login").description("Connect this machine to a workspace, so it gets your rules").option("--url <base>", "the control plane", DEFAULT_BASE_URL).option("--enforce", "start in enforce rather than observe").option("--no-open", "print the URL instead of opening a browser").action(async (options) => {
     const { out, style } = context;
     const enrolment = {
@@ -6297,7 +6413,7 @@ function openBrowser(url) {
 }
 
 // src/commands/spend.command.ts
-import { homedir as homedir36 } from "os";
+import { homedir as homedir37 } from "os";
 import { randomUUID as randomUUID2 } from "crypto";
 import {
   DECISION_EFFECT as DECISION_EFFECT10,
@@ -6308,7 +6424,7 @@ import {
   validateEvent
 } from "@memnox/core";
 var DEFAULT_OPERATION = "llm.completion";
-function registerSpendCommand(program, context, home = homedir36, now = () => /* @__PURE__ */ new Date(), newId = randomUUID2) {
+function registerSpendCommand(program, context, home = homedir37, now = () => /* @__PURE__ */ new Date(), newId = randomUUID2) {
   program.command("spend <usd>").description("Record what an agent spent, so budgets and the breaker can see it").option("-s, --session <id>", `session it belongs to (default: $${SESSION_VAR4})`).option("-a, --agent <name>", "agent that spent it", "agent").option(
     "-f, --for <action>",
     "what it was spent on, in the action grammar rules use",
@@ -6354,9 +6470,9 @@ function registerSpendCommand(program, context, home = homedir36, now = () => /*
 }
 
 // src/commands/sync.command.ts
-import { homedir as homedir37 } from "os";
+import { homedir as homedir38 } from "os";
 import { readAccount as readAccount4 } from "@memnox/core";
-function registerSyncCommand(program, context, home = homedir37) {
+function registerSyncCommand(program, context, home = homedir38) {
   const sync = program.command("sync").description("Pull the rules this workspace publishes, and send what happened");
   sync.command("now", { isDefault: true }).description("Do a pass now rather than waiting for the next heartbeat").option("--json", "machine-readable output").action(async (options) => {
     if (await readAccount4(home()) === null) {
@@ -6451,6 +6567,10 @@ function reportPush(context, result) {
 // src/program.ts
 function buildProgram(context) {
   const program = new Command().name("memnox").description("Memnox \u2014 the execution trust layer for AI agents").version(CLI_VERSION);
+  program.hook("preAction", (_program, command) => {
+    if (command.opts()["json"] === true) return;
+    masthead(context.out, context.style);
+  });
   registerScanCommand(program, context);
   registerDiffCommand(program, context);
   registerExplainCommand(program, context);