modelstat 0.1.2 → 0.2.0

package/dist/cli.mjs

@@ -149,7 +149,7 @@ var init_billing = __esm({
 });
 
 // ../../packages/core/src/enums.ts
-var AGENTS, PROVIDERS, IDENTITY_OWNER_SCOPES, INSTALL_METHODS, OS_FAMILIES, EVENT_KINDS, TOOL_CALL_STATUSES, COMPANION_PHASES, CLASSIFICATION_CONFIDENCE;
+var AGENTS, PROVIDERS, IDENTITY_OWNER_SCOPES, INSTALL_METHODS, OS_FAMILIES, EVENT_KINDS, TOOL_CALL_STATUSES, DAEMON_PHASES, CLASSIFICATION_CONFIDENCE;
 var init_enums = __esm({
   "../../packages/core/src/enums.ts"() {
     "use strict";
@@ -181,7 +181,7 @@ var init_enums = __esm({
       "raw_sdk_anthropic",
       "raw_sdk_openai",
       "raw_sdk_google",
-      // Web chat UIs (Chrome-extension companion). Categorically distinct
+      // Web chat UIs (Chrome-extension daemon). Categorically distinct
       // from *_cli / *_desktop agents — same provider, different surface.
       "chatgpt_web",
       "claude_web",
@@ -241,7 +241,7 @@ var init_enums = __esm({
       "timeout",
       "unknown"
     ];
-    COMPANION_PHASES = [
+    DAEMON_PHASES = [
       "starting",
       "discovering",
       "idle",
@@ -4540,7 +4540,7 @@ var init_redact_floor = __esm({
         pattern: /(?:sk|pk|rk)_test_[A-Za-z0-9]{24,}/g,
         replacement: "<REDACTED:stripe_test_key>"
       },
-      // Discord bot token (was agent-sdk-only — the canonical drift example).
+      // Discord bot token (was daemon-sdk-only — the canonical drift example).
       {
         name: "discord_token",
         pattern: /[MN][A-Za-z\d]{23}\.[\w-]{6}\.[\w-]{27}/g,
@@ -4624,16 +4624,22 @@ function redact(text, repoRootAbs) {
     });
   }
   out = out.replace(TOKEN_CANDIDATE, (match) => {
-    if (/^[a-f0-9]+$/i.test(match)) return match;
-    if (/^[A-Z]+$/.test(match)) return match;
-    const hasLetter = /[A-Za-z]/.test(match);
+    if (/^[a-fA-F0-9]{32,}$/.test(match)) {
+      counts.secrets_found += 1;
+      return "[REDACTED:hash]";
+    }
+    if (/^[A-Z0-9_]+$/.test(match)) return match;
+    if (/=$|\+/.test(match) && entropy(match) >= 3.5) {
+      counts.secrets_found += 1;
+      return "[REDACTED:base64]";
+    }
     const hasDigit = /\d/.test(match);
     const hasUpper = /[A-Z]/.test(match);
     const hasLower = /[a-z]/.test(match);
-    if (!(hasLetter && hasDigit && hasUpper && hasLower)) return match;
+    if (!(hasDigit && hasUpper && hasLower)) return match;
     if (entropy(match) < 3.6) return match;
     counts.secrets_found += 1;
-    return `[REDACTED:hi-entropy]`;
+    return "[REDACTED:hi-entropy]";
   });
   out = out.replace(EMAIL_PATTERN, () => {
     counts.emails_redacted += 1;
@@ -5039,7 +5045,7 @@ var init_schemas = __esm({
       //      available, the on-device Privacy Filter adapter.
       //   3. Stripping code blocks and file-path noise.
       // Optional — events without it fall back to metadata-only abstracts
-      // (the historical behaviour). The companion-core pipeline runs
+      // (the historical behaviour). The daemon-core pipeline runs
       // redact() over it again as defence-in-depth before building the
       // summarize prompt; it never gets stored long-term server-side, only
       // used to construct the summarize input.
@@ -5070,7 +5076,7 @@ var init_schemas = __esm({
       root_key: external_exports.string().max(60),
       name: external_exports.string().max(120),
       confidence: external_exports.number().min(0).max(1).default(0.7),
-      /** Optional free-text reason the companion attached this tag — surfaces
+      /** Optional free-text reason the daemon attached this tag — surfaces
        * in the audit log so the user can see "why was this tagged X?" */
       reason: external_exports.string().max(200).optional()
     });
@@ -5093,7 +5099,7 @@ var init_schemas = __esm({
       /** `source_event_id`s covered by this segment. Used for dedupe + replay. */
       source_event_ids: external_exports.array(external_exports.string()).max(2e3),
       /** Optional embedding of the abstract (BGE-small-en-v1.5, 384 dims).
-       * Present when the companion has an Embedder adapter configured. */
+       * Present when the daemon has an Embedder adapter configured. */
       abstract_embedding: external_exports.array(external_exports.number()).length(384).optional()
     });
     ToolAction = external_exports.object({
@@ -5107,8 +5113,10 @@ var init_schemas = __esm({
       object: external_exports.string().max(60).nullable().default(null),
       /** Governed safe flags (`destructive`, `remote`, …). (tier 0) */
       qualifiers: external_exports.array(external_exports.string().max(40)).max(8).default([]),
-      /** Value-masked argument skeleton (every value → `§`). (tier 1) */
-      param_shape: external_exports.string().max(200).nullable().default(null),
+      /** Value-masked argument skeleton (every value → `§`). Carried in full up
+       * to a malicious-size guard (mirrors backend `MAX_TOOL_ACTION_PARAM_SHAPE_CHARS`);
+       * the daemon clamps rather than truncating semantically. (tier 1) */
+      param_shape: external_exports.string().max(16384).nullable().default(null),
       /** Relevant non-sensitive keywords (e.g. ["rollout","restart","prod"]),
        * OpenAI-redacted on-device. (tier 0) */
       keywords: external_exports.array(external_exports.string().max(40)).max(12).default([]),
@@ -5118,7 +5126,7 @@ var init_schemas = __esm({
       /** The compliance-redacted command text — PII/secrets stripped on-device
        * (SOC2/GDPR), org-internal infra intact; the server derives semantics from
        * it. Un-redacted raw never ships. (tier 0, post-redaction) */
-      command_redacted: external_exports.string().max(1e3).nullable().default(null),
+      command_redacted: external_exports.string().max(16384).nullable().default(null),
       /** Per-script content abstracts for any script/bash FILES the command runs
        * — summarized on-device by the local model, then redacted. Ordered by
        * appearance; `token` is the script's token exactly as it appears in
@@ -5139,7 +5147,7 @@ var init_schemas = __esm({
       session_id: external_exports.string().max(120),
       /** The RawEvent that contained the tool_use (dedupe/replay anchor). */
       source_event_id: external_exports.string(),
-      /** Segment containing source_event_id — filled by the companion at
+      /** Segment containing source_event_id — filled by the daemon at
        * batch-build time when known, else null. */
       segment_id: external_exports.string().max(64).nullable().default(null),
       /** The agent that made the call (AGENTS enum). */
@@ -5177,7 +5185,7 @@ var init_schemas = __esm({
       batch_id: external_exports.string(),
       // ULID
       device_id: external_exports.string(),
-      companion_version: external_exports.string().max(40),
+      daemon_version: external_exports.string().max(40),
       events: external_exports.array(RawEvent).max(1e4),
       segments: external_exports.array(Segment).max(2e3).default([]),
       /** Per-call tool invocations (additive — old agents omit it, old
@@ -5193,8 +5201,8 @@ var init_schemas = __esm({
         })
       ).optional(),
       /** Optional per-session titles — session_id → short redacted title
-       * (≤120 chars) produced by the companion's local titler from the
-       * session's segment abstracts. Companions recompute it from the full
+       * (≤120 chars) produced by the daemon's local titler from the
+       * session's segment abstracts. Daemons recompute it from the full
        * session view on every upload, so the latest batch always carries the
        * freshest title. Absent for runtimes without a titler (older agents,
        * no-op browser summariser). */
@@ -5203,20 +5211,20 @@ var init_schemas = __esm({
        * {@link SessionMetadata}: the repos, pull requests, commits, and issues the
        * session touched, detected on-device across git context, tool calls,
        * redacted content, and the local model (so it works for any provider).
-       * Additive — old companions omit it, old servers ignore it (the wire has no
+       * Additive — old daemons omit it, old servers ignore it (the wire has no
        * `deny_unknown_fields`). The join layer between AI spend and shipped work. */
       session_metadata: external_exports.record(external_exports.string(), SessionMetadata).optional()
     });
     HeartbeatPayload = external_exports.object({
       device_id: external_exports.string(),
-      status: external_exports.enum(COMPANION_PHASES),
+      status: external_exports.enum(DAEMON_PHASES),
       message: external_exports.string().max(240).nullable(),
       progress_done: external_exports.number().int().nonnegative().default(0),
       progress_total: external_exports.number().int().nonnegative().default(0),
       queue_size: external_exports.number().int().nonnegative().default(0),
       stats: external_exports.record(external_exports.string(), external_exports.unknown()).default({}),
       last_event_at: external_exports.string().datetime({ offset: true }).nullable(),
-      companion_version: external_exports.string().max(40)
+      daemon_version: external_exports.string().max(40)
     });
     DeviceEnrollment = external_exports.object({
       machine_id: external_exports.string(),
@@ -5225,10 +5233,10 @@ var init_schemas = __esm({
       os_family: external_exports.enum(OS_FAMILIES),
       os_version: external_exports.string().max(60),
       arch: external_exports.enum(["x86_64", "arm64", "other"]),
-      companion_version: external_exports.string().max(40)
+      daemon_version: external_exports.string().max(40)
     });
     DeviceSelfRegister = external_exports.object({
-      /** Agent-generated UUIDv7 — must pass shape + recent-timestamp checks. */
+      /** Daemon-generated UUIDv7 — must pass shape + recent-timestamp checks. */
       device_uuid: external_exports.string(),
       /** Base64-encoded ed25519 public key, exactly 32 raw bytes. Optional
        * but recommended (used for sender-constrained tokens / DPoP later). */
@@ -5241,8 +5249,8 @@ var init_schemas = __esm({
         os_family: external_exports.enum(OS_FAMILIES).optional(),
         os_version: external_exports.string().max(60).optional(),
         arch: external_exports.enum(["x86_64", "arm64", "other"]).optional(),
-        companion: external_exports.string().max(80).optional(),
-        companion_version: external_exports.string().max(40).optional()
+        daemon: external_exports.string().max(80).optional(),
+        daemon_version: external_exports.string().max(40).optional()
         // Allow extra fields for forward-compat without breaking old agents.
       }).catchall(external_exports.union([external_exports.string(), external_exports.number(), external_exports.boolean()])).default({})
     });
@@ -5377,6 +5385,10 @@ var init_scripts = __esm({
 });
 
 // ../../packages/parsers/src/tool-action/index.ts
+function clampChars(s, max) {
+  const cps = [...s];
+  return cps.length > max ? cps.slice(0, max).join("") : s;
+}
 function extractToolAction(call) {
   const isMcp = call.server.startsWith("mcp:");
   const command = isMcp ? null : shellCommandOf(call.input);
@@ -5387,8 +5399,8 @@ function extractToolAction(call) {
   if (command != null) {
     const [head = "", ...rest] = command.trim().split(/\s+/);
     executable = basename(head) || null;
-    param_shape = paramShape(rest.join(" ")) || null;
-    command_redacted = redact(command, call.cwd ?? void 0).text.slice(0, MAX_COMMAND_REDACTED) || null;
+    param_shape = clampChars(paramShape(rest.join(" ")), MAX_FIELD_CHARS) || null;
+    command_redacted = clampChars(redact(command, call.cwd ?? void 0).text, MAX_FIELD_CHARS) || null;
   }
   return {
     surface,
@@ -5426,13 +5438,13 @@ function shellCommandOf(input) {
 function basename(token) {
   return token.split("/").pop() ?? token;
 }
-var MAX_COMMAND_REDACTED;
+var MAX_FIELD_CHARS;
 var init_tool_action = __esm({
   "../../packages/parsers/src/tool-action/index.ts"() {
     "use strict";
     init_src();
     init_scripts();
-    MAX_COMMAND_REDACTED = 1e3;
+    MAX_FIELD_CHARS = 16384;
   }
 });
 
@@ -8538,6 +8550,33 @@ async function probeIdentities(os2) {
     } catch {
     }
   }
+  const claudeConfigs = [`${homedir()}/.claude.json`];
+  if (process.env.CLAUDE_CONFIG_DIR) {
+    claudeConfigs.unshift(`${process.env.CLAUDE_CONFIG_DIR}/.claude.json`);
+  }
+  for (const candidate of claudeConfigs) {
+    if (!existsSync3(candidate)) continue;
+    try {
+      const data = await fs4.promises.readFile(candidate, "utf8");
+      const obj = JSON.parse(data);
+      const acct = obj.oauthAccount;
+      const stableId = acct?.accountUuid ?? acct?.organizationUuid;
+      if (acct && stableId) {
+        ids.push({
+          provider: "anthropic",
+          provider_account_id: stableId,
+          provider_account_label: acct.emailAddress ?? acct.organizationName ?? acct.displayName ?? "Claude account",
+          account_email: acct.emailAddress ?? null,
+          account_org: acct.organizationName ?? acct.billingType ?? null,
+          display_name: acct.displayName ?? null,
+          owner_scope: "unassigned",
+          detection_source: "claude_json_oauth"
+        });
+        break;
+      }
+    } catch {
+    }
+  }
   for (const candidate of [
     `${homedir()}/.codex/auth.json`,
     `${homedir()}/.config/codex/auth.json`
@@ -33569,14 +33608,14 @@ ${captureLines}` : capture.stack;
   }
 });
 
-// ../../packages/companion-core/src/config/index.ts
+// ../../packages/daemon-core/src/config/index.ts
 function expBackoff(attempt) {
   const i = Math.min(Math.max(attempt, 0), BACKOFF_MS.length - 1);
   return BACKOFF_MS[i];
 }
 var INGEST_BATCH_MAX_EVENTS, BACKOFF_MS, BACKSTOP_SCAN_MS;
 var init_config = __esm({
-  "../../packages/companion-core/src/config/index.ts"() {
+  "../../packages/daemon-core/src/config/index.ts"() {
     "use strict";
     INGEST_BATCH_MAX_EVENTS = 1e3;
     BACKOFF_MS = [1e3, 2500, 5e3, 1e4, 2e4, 6e4];
@@ -33584,7 +33623,7 @@ var init_config = __esm({
   }
 });
 
-// ../../packages/companion-core/src/logger.ts
+// ../../packages/daemon-core/src/logger.ts
 function defaultLevel() {
   const env2 = globalThis.process?.env ?? {};
   const raw = (env2.LOG_LEVEL ?? "").toLowerCase();
@@ -33637,7 +33676,7 @@ function describeErrorWithCause(err, depth = 4) {
 }
 var LEVEL_RANK;
 var init_logger = __esm({
-  "../../packages/companion-core/src/logger.ts"() {
+  "../../packages/daemon-core/src/logger.ts"() {
     "use strict";
     LEVEL_RANK = {
       debug: 10,
@@ -33648,7 +33687,7 @@ var init_logger = __esm({
   }
 });
 
-// ../../packages/companion-core/src/http/index.ts
+// ../../packages/daemon-core/src/http/index.ts
 function classifyStatus(status2, attempt) {
   if (status2 >= 200 && status2 < 300) return { type: "commit" };
   if (status2 === 400 || status2 === 422) return { type: "drop", reason: `http_${status2}` };
@@ -33668,7 +33707,7 @@ function sleep(ms) {
 }
 var IngestClient;
 var init_http = __esm({
-  "../../packages/companion-core/src/http/index.ts"() {
+  "../../packages/daemon-core/src/http/index.ts"() {
     "use strict";
     init_config();
     init_logger();
@@ -45210,7 +45249,7 @@ var init_config2 = __esm({
     DEFAULT_API_URL = "https://modelstat.ai";
     LEGACY_LOCALHOST_API = "http://localhost:3010";
     store = new Conf({
-      projectName: "modelstat-agent-dev",
+      projectName: "modelstat-daemon",
       defaults: {
         // Intentionally empty — the apiUrl getter below computes this
         // from env + stored value + DEFAULT_API_URL. Keeping the stored
@@ -45242,7 +45281,7 @@ var init_config2 = __esm({
        * or paired pre-0.0.8) → production default. The legacy localhost
        * value is ignored so upgrades from 0.0.7 self-heal. */
       get apiUrl() {
-        if (process.env.AGENT_API_URL) return process.env.AGENT_API_URL;
+        if (process.env.DAEMON_API_URL) return process.env.DAEMON_API_URL;
         const stored = store.get("apiUrl");
         if (stored && stored !== LEGACY_LOCALHOST_API) return stored;
         return DEFAULT_API_URL;
@@ -45250,6 +45289,16 @@ var init_config2 = __esm({
       setApiUrl(v) {
         store.set("apiUrl", v);
       },
+      /** True when `apiUrl` resolves to the baked-in production default with no
+       * explicit override (no `DAEMON_API_URL`, no operator-set stored URL). Used
+       * to refuse silent prod self-register from CI/non-interactive environments
+       * so ephemeral runners don't pile up unclaimed device rows. */
+      get isProdDefaultApi() {
+        if (process.env.DAEMON_API_URL) return false;
+        const stored = store.get("apiUrl");
+        if (stored && stored !== LEGACY_LOCALHOST_API) return false;
+        return true;
+      },
       // ── Identity: backed by ~/.modelstat/identity.json ─────────────
       /** Seed a fresh identity after a successful self-register. Writes
        * the file atomically; use `state.backupAndReset()` first if
@@ -45388,7 +45437,7 @@ async function rotateDeviceSecret(currentSecret) {
 }
 async function reportDiscovery(report) {
   const bearer = state.bearer;
-  if (!bearer) throw new Error("agent not enrolled \u2014 run `register` first");
+  if (!bearer) throw new Error("daemon not enrolled \u2014 run `register` first");
   const res = await (0, import_undici.request)(`${state.apiUrl}/v1/devices/discovery`, {
     method: "POST",
     headers: { "content-type": "application/json", authorization: `Bearer ${bearer}` },
@@ -45433,7 +45482,7 @@ async function fetchDeviceViewLedgerByClaim(claimCode) {
 }
 function ingestClient() {
   if (_ingest) return _ingest;
-  const logger = createLogger("agent.ingest");
+  const logger = createLogger("daemon.ingest");
   _ingest = new IngestClient({
     apiUrl: state.apiUrl,
     auth: {
@@ -45593,24 +45642,24 @@ var init_machine_key = __esm({
   }
 });
 
-// ../../packages/companion-core/src/contracts/index.ts
+// ../../packages/daemon-core/src/contracts/index.ts
 var init_contracts = __esm({
-  "../../packages/companion-core/src/contracts/index.ts"() {
+  "../../packages/daemon-core/src/contracts/index.ts"() {
     "use strict";
     init_schemas();
     init_enums();
   }
 });
 
-// ../../packages/companion-core/src/ids.ts
+// ../../packages/daemon-core/src/ids.ts
 var init_ids2 = __esm({
-  "../../packages/companion-core/src/ids.ts"() {
+  "../../packages/daemon-core/src/ids.ts"() {
     "use strict";
     init_ids();
   }
 });
 
-// ../../packages/companion-core/src/queue/index.ts
+// ../../packages/daemon-core/src/queue/index.ts
 function attachSegmentIdsByMap(calls, segmentByEvent) {
   return calls.map((c) => ({
     ...c,
@@ -45618,14 +45667,14 @@ function attachSegmentIdsByMap(calls, segmentByEvent) {
   }));
 }
 var init_queue = __esm({
-  "../../packages/companion-core/src/queue/index.ts"() {
+  "../../packages/daemon-core/src/queue/index.ts"() {
     "use strict";
     init_config();
     init_ids2();
   }
 });
 
-// ../../packages/companion-core/src/pipeline/cognition.ts
+// ../../packages/daemon-core/src/pipeline/cognition.ts
 function buildCognitionUserPrompt(abstract) {
   return `Summary: "${abstract.replace(/\s+/g, " ").trim().slice(0, 480)}"
 
@@ -45697,7 +45746,7 @@ function extractFirstJsonObject(s) {
 }
 var COGNITION_SYSTEM_PROMPT, MAX_COGNITION_TAGS_PER_FIELD, MAX_COGNITION_TAG_CHARS, COGNITION_MAX_TOKENS, COGNITION_TEMPERATURE;
 var init_cognition = __esm({
-  "../../packages/companion-core/src/pipeline/cognition.ts"() {
+  "../../packages/daemon-core/src/pipeline/cognition.ts"() {
     "use strict";
     COGNITION_SYSTEM_PROMPT = 'You read a one-sentence summary of an AI-coding work session and identify the user\'s emotional state and meta-cognitive state. Output JSON only \u2014 first character of reply is `{`. Schema: {"emotions":[],"meta":[]}. emotions: \u2264 3 short lowercase MOOD tags \u2014 how the user FEELS \u2014 such as frustrated, curious, excited, calm, confused, anxious, satisfied, proud, bored, energised, overwhelmed, confident. meta: \u2264 3 short lowercase MENTAL-MODE tags \u2014 HOW the user is THINKING, never what they are doing. Valid examples: focused, scattered, in-flow, deliberate, hurried, stuck, open, exploratory, methodical, distracted. DO NOT emit ACTIVITY verbs (debugging, refactoring, designing, reviewing, deploying, planning, documenting, implementing) under meta \u2014 those describe the WORK, not the MIND. If the only candidate tag would be an activity verb, return [] for meta instead. Each tag \u2264 24 chars, single word or hyphenated, no punctuation. Only emit a tag if the summary gives clear evidence \u2014 return [] for either field when unsure. Do not invent emotions or mental modes the user did not display. No prose, no markdown.';
     MAX_COGNITION_TAGS_PER_FIELD = 3;
@@ -45707,10 +45756,10 @@ var init_cognition = __esm({
   }
 });
 
-// ../../packages/companion-core/src/pipeline/prompts.ts
+// ../../packages/daemon-core/src/pipeline/prompts.ts
 var OLLAMA_CHAT_MODEL, OLLAMA_EMBED_MODEL, SUMMARISER_SYSTEM_PROMPT, SUMMARISER_MAX_TOKENS, SUMMARISER_TEMPERATURE, QWEN_CHARS_PER_TOKEN, ABSTRACT_OUTPUT_MAX_CHARS;
 var init_prompts = __esm({
-  "../../packages/companion-core/src/pipeline/prompts.ts"() {
+  "../../packages/daemon-core/src/pipeline/prompts.ts"() {
     "use strict";
     OLLAMA_CHAT_MODEL = "qwen3:4b";
     OLLAMA_EMBED_MODEL = "bge-small-en-v1.5";
@@ -45722,7 +45771,7 @@ var init_prompts = __esm({
   }
 });
 
-// ../../packages/companion-core/src/pipeline/script-summary.ts
+// ../../packages/daemon-core/src/pipeline/script-summary.ts
 function buildScriptSummaryUserPrompt(input) {
   const body = input.content.slice(0, SCRIPT_SUMMARY_INPUT_MAX_CHARS);
   return [
@@ -45737,7 +45786,7 @@ function buildScriptSummaryUserPrompt(input) {
 }
 var SCRIPT_SUMMARY_OUTPUT_MAX_CHARS, SCRIPT_SUMMARY_TEMPERATURE, SCRIPT_SUMMARY_MAX_TOKENS, SCRIPT_SUMMARY_INPUT_MAX_CHARS, SCRIPT_SUMMARY_SYSTEM_PROMPT;
 var init_script_summary = __esm({
-  "../../packages/companion-core/src/pipeline/script-summary.ts"() {
+  "../../packages/daemon-core/src/pipeline/script-summary.ts"() {
     "use strict";
     SCRIPT_SUMMARY_OUTPUT_MAX_CHARS = 200;
     SCRIPT_SUMMARY_TEMPERATURE = 0.2;
@@ -45754,7 +45803,7 @@ Rules:
   }
 });
 
-// ../../packages/companion-core/src/pipeline/title.ts
+// ../../packages/daemon-core/src/pipeline/title.ts
 function buildTitleUserPrompt(input) {
   const lines = input.abstracts.map(
     (a, i) => `  [part ${i + 1}] ${a.replace(/\s+/g, " ").trim().slice(0, TITLER_ABSTRACT_SLICE_CHARS)}`
@@ -45825,7 +45874,7 @@ async function buildSessionTitles(segments, entitle) {
 }
 var TITLER_SYSTEM_PROMPT, TITLE_MAX_CHARS, TITLER_MAX_TOKENS, TITLER_TEMPERATURE, TITLER_MAX_ABSTRACTS, TITLER_ABSTRACT_SLICE_CHARS;
 var init_title = __esm({
-  "../../packages/companion-core/src/pipeline/title.ts"() {
+  "../../packages/daemon-core/src/pipeline/title.ts"() {
     "use strict";
     init_redact();
     TITLER_SYSTEM_PROMPT = "You write a short TITLE for an AI coding session, given one-sentence summaries of its parts in chronological order. The title names what the session was about at a high level, in 3-8 words. If the session clearly spans more than one theme, name the top themes (at most 3) separated by ' \xB7 '. Use concrete domain keywords (features, components, subsystems). No narration, no filler words like 'session' or 'work on', no quotes, no trailing period, no PII, no code literals, no file paths. Reply with only the title.";
@@ -45837,7 +45886,7 @@ var init_title = __esm({
   }
 });
 
-// ../../packages/companion-core/src/pipeline/session-metadata.ts
+// ../../packages/daemon-core/src/pipeline/session-metadata.ts
 function buildLinkExtractUserPrompt(abstracts) {
   const lines = abstracts.map((a, i) => `  [part ${i + 1}] ${a.replace(/\s+/g, " ").trim().slice(0, 240)}`).join("\n");
   return `Summaries of the session's parts:
@@ -45936,7 +45985,7 @@ async function buildSessionMetadata(segments, events, opts = {}) {
 }
 var LINK_EXTRACT_SYSTEM_PROMPT, LINK_EXTRACT_MAX_TOKENS, LINK_EXTRACT_TEMPERATURE, LINK_EXTRACT_MAX_ABSTRACTS;
 var init_session_metadata2 = __esm({
-  "../../packages/companion-core/src/pipeline/session-metadata.ts"() {
+  "../../packages/daemon-core/src/pipeline/session-metadata.ts"() {
     "use strict";
     init_session_metadata();
     init_title();
@@ -45947,7 +45996,7 @@ var init_session_metadata2 = __esm({
   }
 });
 
-// ../../packages/companion-core/src/pipeline/index.ts
+// ../../packages/daemon-core/src/pipeline/index.ts
 async function buildSegmentsForSession(events, adapters2, onProgress) {
   if (events.length === 0) return [];
   const bySession = /* @__PURE__ */ new Map();
@@ -46249,7 +46298,7 @@ function inferEnvironment(branch) {
 }
 var SEGMENT_TIME_GAP_MS, SEGMENT_TOPIC_THRESHOLD, SEGMENT_MAX_TURNS, SEGMENT_MAX_DURATION_MS, SEGMENT_MAX_CONTENT_CHARS, ABSTRACT_MAX_CHARS;
 var init_pipeline = __esm({
-  "../../packages/companion-core/src/pipeline/index.ts"() {
+  "../../packages/daemon-core/src/pipeline/index.ts"() {
     "use strict";
     init_ids();
     init_redact();
@@ -46270,9 +46319,9 @@ var init_pipeline = __esm({
   }
 });
 
-// ../../packages/companion-core/src/index.ts
+// ../../packages/daemon-core/src/index.ts
 var init_src3 = __esm({
-  "../../packages/companion-core/src/index.ts"() {
+  "../../packages/daemon-core/src/index.ts"() {
     "use strict";
     init_contracts();
     init_ids2();
@@ -46284,12 +46333,12 @@ var init_src3 = __esm({
   }
 });
 
-// ../../packages/companion-core/src/node/file-queue-store.ts
+// ../../packages/daemon-core/src/node/file-queue-store.ts
 import { promises as fs3 } from "fs";
 import { dirname as dirname4 } from "path";
 var SENT_TTL_MS, FileQueueStore;
 var init_file_queue_store = __esm({
-  "../../packages/companion-core/src/node/file-queue-store.ts"() {
+  "../../packages/daemon-core/src/node/file-queue-store.ts"() {
     "use strict";
     SENT_TTL_MS = 24 * 60 * 60 * 1e3;
     FileQueueStore = class {
@@ -46407,7 +46456,7 @@ var init_file_queue_store = __esm({
   }
 });
 
-// ../../packages/companion-core/src/node/llama.ts
+// ../../packages/daemon-core/src/node/llama.ts
 import { existsSync as existsSync7 } from "fs";
 import { mkdir } from "fs/promises";
 import { homedir as homedir5 } from "os";
@@ -46703,7 +46752,7 @@ function llamaExtractLinks(cfg = defaultLlamaConfig()) {
 }
 var DEFAULT_LLAMA_MODEL_URL, LLAMA_MAX_TOKENS, loaded, loadPromise, inflight, llamaInstance;
 var init_llama = __esm({
-  "../../packages/companion-core/src/node/llama.ts"() {
+  "../../packages/daemon-core/src/node/llama.ts"() {
     "use strict";
     init_cognition();
     init_prompts();
@@ -46719,7 +46768,7 @@ var init_llama = __esm({
   }
 });
 
-// ../../packages/companion-core/src/node/ollama.ts
+// ../../packages/daemon-core/src/node/ollama.ts
 function defaultOllamaConfig() {
   const base = globalThis.process?.env ?? {};
   return {
@@ -46822,14 +46871,14 @@ function ollamaCognize(cfg = defaultOllamaConfig()) {
   };
 }
 var init_ollama = __esm({
-  "../../packages/companion-core/src/node/ollama.ts"() {
+  "../../packages/daemon-core/src/node/ollama.ts"() {
     "use strict";
     init_prompts();
     init_cognition();
   }
 });
 
-// ../../packages/companion-core/src/optional-module.ts
+// ../../packages/daemon-core/src/optional-module.ts
 function isMissingOptionalModuleError(err) {
   const code = err?.code;
   if (code === "ERR_MODULE_NOT_FOUND" || code === "MODULE_NOT_FOUND") return true;
@@ -46838,13 +46887,13 @@ function isMissingOptionalModuleError(err) {
 }
 var OPTIONAL_MODULE_MAX_LOAD_ATTEMPTS;
 var init_optional_module = __esm({
-  "../../packages/companion-core/src/optional-module.ts"() {
+  "../../packages/daemon-core/src/optional-module.ts"() {
     "use strict";
     OPTIONAL_MODULE_MAX_LOAD_ATTEMPTS = 3;
   }
 });
 
-// ../../packages/companion-core/src/node/transformersjs-embed.ts
+// ../../packages/daemon-core/src/node/transformersjs-embed.ts
 async function loadPipeline(model) {
   if (cached) return cached;
   if (loadFailedPermanently) return null;
@@ -46898,7 +46947,7 @@ function createTransformersJsEmbedder(model = DEFAULT_MODEL) {
 }
 var cached, loadPromise2, loadFailedPermanently, loadAttempts, warnedUnavailable, warnedInferenceError, DEFAULT_MODEL, importModule;
 var init_transformersjs_embed = __esm({
-  "../../packages/companion-core/src/node/transformersjs-embed.ts"() {
+  "../../packages/daemon-core/src/node/transformersjs-embed.ts"() {
     "use strict";
     init_optional_module();
     cached = null;
@@ -46915,7 +46964,7 @@ var init_transformersjs_embed = __esm({
   }
 });
 
-// ../../packages/companion-core/src/node/index.ts
+// ../../packages/daemon-core/src/node/index.ts
 var node_exports = {};
 __export(node_exports, {
   DEFAULT_LLAMA_MODEL_URL: () => DEFAULT_LLAMA_MODEL_URL,
@@ -46937,7 +46986,7 @@ __export(node_exports, {
   ollamaTokenize: () => ollamaTokenize
 });
 var init_node2 = __esm({
-  "../../packages/companion-core/src/node/index.ts"() {
+  "../../packages/daemon-core/src/node/index.ts"() {
     "use strict";
     init_file_queue_store();
     init_llama();
@@ -46946,7 +46995,7 @@ var init_node2 = __esm({
   }
 });
 
-// ../../packages/companion-core/src/redact/privacy-filter.ts
+// ../../packages/daemon-core/src/redact/privacy-filter.ts
 async function createPrivacyFilterRedactor(opts = {}) {
   const isBrowser = typeof globalThis !== "undefined" && typeof globalThis.window !== "undefined";
   const device = opts.device ?? (isBrowser ? "webgpu" : "cpu");
@@ -47052,7 +47101,7 @@ async function createPrivacyFilterRedactor(opts = {}) {
   };
 }
 var init_privacy_filter = __esm({
-  "../../packages/companion-core/src/redact/privacy-filter.ts"() {
+  "../../packages/daemon-core/src/redact/privacy-filter.ts"() {
     "use strict";
     init_optional_module();
   }
@@ -47178,7 +47227,7 @@ async function getAdapters() {
     await import("node-llama-cpp");
   } catch (err) {
     throw new Error(
-      `modelstat agent can't start: the bundled summariser (node-llama-cpp) failed to load. Re-run \`modelstat connect\` (or \`npm i -g modelstat\`) so the native runtime is re-staged beside the bundle. Underlying error: ${err.message}`
+      `modelstat daemon can't start: the bundled summariser (node-llama-cpp) failed to load. Re-run \`modelstat connect\` (or \`npm i -g modelstat\`) so the native runtime is re-staged beside the bundle. Underlying error: ${err.message}`
     );
   }
   console.log("[modelstat] using bundled local summariser (Qwen3.5-4B, runs on this machine)");
@@ -47249,7 +47298,7 @@ function withNonNullTokens(e) {
 }
 async function scanAll(cb = {}) {
   const deviceId = state.deviceId;
-  if (!deviceId) throw new Error("agent not enrolled \u2014 run `register` first");
+  if (!deviceId) throw new Error("daemon not enrolled \u2014 run `register` first");
   const jobs = [];
   try {
     const base = join6(homedir6(), ".claude/projects");
@@ -47354,7 +47403,7 @@ async function scanAll(cb = {}) {
     const batch = {
       batch_id: batchId(),
       device_id: deviceId,
-      companion_version: AGENT_VERSION,
+      daemon_version: DAEMON_VERSION,
       events,
       segments,
       tool_calls: attachSegmentIdsByMap(toolCallBuffer, callSegmentByEvent),
@@ -47429,7 +47478,7 @@ async function scanAll(cb = {}) {
     morePending
   };
 }
-var AGENT_VERSION, BATCH_MAX_EVENTS, BATCH_MAX_TOOL_CALLS, BATCH_BUFFER_HARD_CAP, ZERO_TOKENS;
+var DAEMON_VERSION, BATCH_MAX_EVENTS, BATCH_MAX_TOOL_CALLS, BATCH_BUFFER_HARD_CAP, ZERO_TOKENS;
 var init_scan = __esm({
   "src/scan.ts"() {
     "use strict";
@@ -47440,7 +47489,7 @@ var init_scan = __esm({
     init_api();
     init_config2();
     init_pipeline2();
-    AGENT_VERSION = true ? "agent-0.1.2" : "agent-dev";
+    DAEMON_VERSION = true ? "daemon-0.2.0" : "daemon-dev";
     BATCH_MAX_EVENTS = INGEST_BATCH_MAX_EVENTS;
     BATCH_MAX_TOOL_CALLS = 2e4;
     BATCH_BUFFER_HARD_CAP = BATCH_MAX_EVENTS * 2;
@@ -47487,7 +47536,7 @@ function readDaemonLock(lockFile = LOCK_FILE) {
     return {
       pid: obj.pid,
       startedAt: obj.startedAt ?? "unknown",
-      companionVersion: obj.companionVersion ?? "unknown",
+      daemonVersion: obj.daemonVersion ?? "unknown",
       apiUrl: obj.apiUrl ?? "unknown"
     };
   } catch {
@@ -47529,7 +47578,7 @@ function acquireDaemonLock(opts) {
   const meta = {
     pid: process.pid,
     startedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    companionVersion: opts.companionVersion,
+    daemonVersion: opts.daemonVersion,
     apiUrl: opts.apiUrl
   };
   writeLockAtomic(meta);
@@ -47847,7 +47896,7 @@ var init_node3 = __esm({
   }
 });
 
-// ../../packages/companion-core/src/policies/index.ts
+// ../../packages/daemon-core/src/policies/index.ts
 var policies_exports = {};
 __export(policies_exports, {
   createPolicyRefresher: () => createPolicyRefresher
@@ -47891,7 +47940,7 @@ function createPolicyRefresher(opts) {
 }
 var DEFAULT_REFRESH_MS, policiesKind;
 var init_policies2 = __esm({
-  "../../packages/companion-core/src/policies/index.ts"() {
+  "../../packages/daemon-core/src/policies/index.ts"() {
     "use strict";
     init_src();
     init_src4();
@@ -49671,7 +49720,7 @@ function snapshotBody() {
     queue_size: status.queueSize,
     stats: status.stats,
     last_event_at: status.lastEventAt,
-    companion_version: AGENT_VERSION2,
+    daemon_version: DAEMON_VERSION2,
     machine_id: machineKey()
   };
 }
@@ -49696,7 +49745,7 @@ async function sendHeartbeat() {
   if (!bearer || !deviceId) return;
   const body = { ...snapshotBody(), device_id: deviceId };
   try {
-    const res = await (0, import_undici2.request)(`${state.apiUrl}/v1/agent/heartbeat`, {
+    const res = await (0, import_undici2.request)(`${state.apiUrl}/v1/daemon/heartbeat`, {
       method: "POST",
       headers: { "content-type": "application/json", authorization: `Bearer ${bearer}` },
       body: JSON.stringify(body)
@@ -49827,7 +49876,7 @@ async function runDaemon(opts = {}) {
     throw new Error("not enrolled \u2014 run `npx modelstat@latest` first");
   }
   const lock = acquireDaemonLock({
-    companionVersion: AGENT_VERSION2,
+    daemonVersion: DAEMON_VERSION2,
     apiUrl: state.apiUrl,
     force: opts.force === true,
     // If a racing daemon out-renamed us for the lock (see lock.ts
@@ -49845,7 +49894,7 @@ async function runDaemon(opts = {}) {
     console.log(
       `modelstat daemon is already running \u2014 PID ${lock.owner.pid}, started ${formatAge(
         lock.ageSec
-      )} ago, agent ${lock.owner.companionVersion}.`
+      )} ago, daemon ${lock.owner.daemonVersion}.`
     );
     console.log("  \u2192 to stop it:          kill " + lock.owner.pid);
     console.log("  \u2192 to force-replace it: modelstat start --force");
@@ -49937,7 +49986,7 @@ async function runDaemon(opts = {}) {
   await new Promise(() => {
   });
 }
-var import_undici2, AGENT_VERSION2, HEARTBEAT_INTERVAL_MS, SCAN_INTERVAL_MS, DISCOVERY_INTERVAL_MS, status, LOCAL_FLUSH_THROTTLE_MS, localFlushTimer, localFlushPending, LOG_MAX_BYTES, LOG_TAIL_KEEP_BYTES, lastStatusPath, scanRunner;
+var import_undici2, DAEMON_VERSION2, HEARTBEAT_INTERVAL_MS, SCAN_INTERVAL_MS, DISCOVERY_INTERVAL_MS, status, LOCAL_FLUSH_THROTTLE_MS, localFlushTimer, localFlushPending, LOG_MAX_BYTES, LOG_TAIL_KEEP_BYTES, lastStatusPath, scanRunner;
 var init_daemon = __esm({
   "src/daemon.ts"() {
     "use strict";
@@ -49950,7 +49999,7 @@ var init_daemon = __esm({
     init_machine_key();
     init_scan();
     init_single_flight();
-    AGENT_VERSION2 = true ? "agent-0.1.2" : "agent-dev";
+    DAEMON_VERSION2 = true ? "daemon-0.2.0" : "daemon-dev";
     HEARTBEAT_INTERVAL_MS = 1e4;
     SCAN_INTERVAL_MS = 5 * 60 * 1e3;
     DISCOVERY_INTERVAL_MS = 6e4;
@@ -50082,6 +50131,7 @@ import { createInterface as createInterface3 } from "readline";
 // src/service.ts
 import { spawn, spawnSync as spawnSync2 } from "child_process";
 import {
+  chmodSync as chmodSync3,
   copyFileSync,
   existsSync as existsSync9,
   mkdirSync as mkdirSync3,
@@ -50094,7 +50144,7 @@ import { createRequire } from "module";
 import { homedir as homedir7, platform as platform3, userInfo } from "os";
 import { dirname as dirname6, join as join7 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
-var SERVICE_LABEL = "ai.modelstat.agent";
+var SERVICE_LABEL = "ai.modelstat.daemon";
 var SYSTEMD_UNIT = "modelstat";
 function home() {
   return homedir7();
@@ -50301,7 +50351,7 @@ function writeSystemdUnit(cliPath) {
   const unitPath = systemdUnitPath();
   mkdirSync3(dirname6(unitPath), { recursive: true });
   const unit = `[Unit]
-Description=modelstat agent
+Description=modelstat daemon
 Documentation=https://modelstat.ai
 After=network-online.target
 Wants=network-online.target
@@ -50368,7 +50418,7 @@ function installService() {
     return { path: systemdUnitPath(), logs: logDir() };
   }
   throw new Error(
-    `Service installation isn't supported on ${p}. Run 'modelstat start' manually to keep the agent running.`
+    `Service installation isn't supported on ${p}. Run 'modelstat start' manually to keep the daemon running.`
   );
 }
 function uninstallService() {
@@ -50396,6 +50446,7 @@ function installTrayApp(sourceAppPath) {
   if (r.status !== 0) {
     throw new Error(`cp ModelstatTray.app failed: ${r.stderr?.trim() || `exit ${r.status}`}`);
   }
+  chmodSync3(join7(dest, "Contents", "MacOS", "modelstat-tray"), 493);
   return { installedAt: dest };
 }
 async function bundledTrayAppPath(progress) {
@@ -50404,7 +50455,7 @@ async function bundledTrayAppPath(progress) {
   const candidates = [
     // Pre-built .app — CI with codesigning drops one here.
     join7(here2, "..", "vendor", "ModelstatTray.app"),
-    // Local dev layout: apps/agent-dev/src/service.ts → ../../tray-mac/build/ModelstatTray.app
+    // Local dev layout: apps/daemon/src/service.ts → ../../tray-mac/build/ModelstatTray.app
     join7(here2, "..", "..", "tray-mac", "build", "ModelstatTray.app")
   ];
   for (const c of candidates) {
@@ -50478,7 +50529,7 @@ function decideSupervision(input) {
   const fresh = input.statusFreshMs ?? STATUS_FRESH_MS;
   const grace = input.bootGraceMs ?? BOOT_GRACE_MS;
   if (!input.lock || !input.ownerAlive) return "spawn";
-  if (input.myCompanionVersion && input.lock.companionVersion !== "unknown" && input.lock.companionVersion !== input.myCompanionVersion) {
+  if (input.myDaemonVersion && input.lock.daemonVersion !== "unknown" && input.lock.daemonVersion !== input.myDaemonVersion) {
     return "replace";
   }
   if (input.statusAgeMs !== null && input.statusAgeMs <= fresh) return "adopt";
@@ -50506,7 +50557,7 @@ function daemonHealth(opts = {}) {
       ownerAlive,
       lockAgeMs,
       statusAgeMs,
-      myCompanionVersion: opts.myCompanionVersion
+      myDaemonVersion: opts.myDaemonVersion
     }),
     lock,
     ownerAlive,
@@ -50550,7 +50601,7 @@ function tryOpenBrowser(url) {
     return false;
   }
 }
-var AGENT_VERSION3 = true ? "agent-0.1.2" : "agent-dev";
+var DAEMON_VERSION3 = true ? "daemon-0.2.0" : "daemon-dev";
 function osFamily() {
   const p = platform5();
   if (p === "darwin") return "macos";
@@ -50568,17 +50619,30 @@ function intendedDeviceUuid() {
   const key = salt ? `${machineKey()}:${salt}` : machineKey();
   return deviceUuidFromMachineKey(key);
 }
+function isNonInteractive() {
+  return Boolean(process.env.CI) || process.stdin.isTTY !== true;
+}
+function prodRegisterOptIn() {
+  const v = process.env.MODELSTAT_ALLOW_PROD_REGISTER?.trim().toLowerCase();
+  return v === "1" || v === "true" || v === "yes";
+}
 async function cmdSelfRegister() {
   const deviceUuid = state.deviceUuid ?? intendedDeviceUuid();
   const derived = !state.deviceUuid;
+  if (derived && state.isProdDefaultApi && isNonInteractive() && !prodRegisterOptIn()) {
+    process.stderr.write(
+      "modelstat: refusing to self-register a new device against production from a\nnon-interactive/CI environment (no claim is possible here anyway). Either:\n  \u2022 point at your own backend:  DAEMON_API_URL=https://your-host   (CI/e2e)\n  \u2022 explicitly opt in:          MODELSTAT_ALLOW_PROD_REGISTER=1\n  \u2022 or run it interactively:    npx modelstat@latest\n"
+    );
+    process.exit(2);
+  }
   const mid = machineKey();
   const fingerprint = {
     hostname: hostname2(),
     os_family: osFamily(),
     os_version: release(),
     arch: osArch(),
-    companion: "modelstat-agent-dev",
-    companion_version: AGENT_VERSION3,
+    daemon: "modelstat-daemon",
+    daemon_version: DAEMON_VERSION3,
     // Stable, install-method-independent machine key. The server
     // dedupes self-register on this so the same physical machine can
     // never become two device rows, even if the UUID somehow differs
@@ -50804,7 +50868,7 @@ async function cmdConnect(opts) {
     warn(`couldn't prepare summariser model: ${e.message}`);
     warn("the background service will retry the download on its first scan");
   }
-  step("Installing/refreshing background service so the agent survives reboots");
+  step("Installing/refreshing background service so the daemon survives reboots");
   let serviceOk = false;
   try {
     const svc = installService();
@@ -50818,7 +50882,7 @@ async function cmdConnect(opts) {
   } catch (e) {
     emitEvent(opts, "service_install_failed", { error: e.message });
     warn(`couldn't install service: ${e.message}`);
-    warn("the agent will not run in the background \u2014 re-run after fixing the issue");
+    warn("the daemon will not run in the background \u2014 re-run after fixing the issue");
   }
   step("Detecting installed AI tools and signed-in accounts");
   let discovered = null;
@@ -51040,7 +51104,7 @@ async function cmdStats(args) {
       console.log(`  ${dashboard}`);
       if (local) {
         console.log(
-          `local agent: ${local.status ?? "?"}${local.message ? ` \xB7 ${local.message}` : ""}`
+          `local daemon: ${local.status ?? "?"}${local.message ? ` \xB7 ${local.message}` : ""}`
         );
         const stats = local.stats ?? {};
         for (const [k, v] of Object.entries(stats)) console.log(`  ${k}: ${v}`);
@@ -51055,9 +51119,9 @@ async function cmdStats(args) {
   }
   console.log(`device:   ${view.device.id}`);
   console.log(`host:     ${view.device.hostname ?? "(unknown)"} (${view.device.os_family ?? "?"})`);
-  console.log(`companion: ${view.device.companion_version ?? "(unknown)"}`);
+  console.log(`daemon: ${view.device.daemon_version ?? "(unknown)"}`);
   console.log(
-    `status:   ${view.device.companion_status ?? "(unknown)"}${view.device.last_seen_at ? ` \xB7 last seen ${view.device.last_seen_at}` : ""}`
+    `status:   ${view.device.daemon_status ?? "(unknown)"}${view.device.last_seen_at ? ` \xB7 last seen ${view.device.last_seen_at}` : ""}`
   );
   console.log(
     `claim:    ${view.status}${view.status === "unclaimed" ? ` (at ${view.claim_url})` : ""}`
@@ -51185,7 +51249,7 @@ async function main() {
     }
     case "_daemon-health": {
       try {
-        console.log(JSON.stringify(daemonHealth({ myCompanionVersion: AGENT_VERSION3 })));
+        console.log(JSON.stringify(daemonHealth({ myDaemonVersion: DAEMON_VERSION3 })));
       } catch (e) {
         console.log(JSON.stringify({ decision: "spawn", error: e.message }));
       }