fix rebuild client

client/internal/blocker/blocker_darwin.go

@@ -52,6 +52,23 @@ var systemAllowed = map[string]bool{
 	"biometricd":                      true,
 	"touchidd":                        true,
 
+	// ── Security utilities / AV (from app_pool + common) ──────────────────────
+	"activity monitor":                true, // System monitor (app_pool)
+	"passwords":                       true, // Apple Passwords / iCloud Keychain (app_pool)
+	"xprotectservice":                 true, // macOS built-in malware protection
+	"xprotect":                        true,
+	"malware removal tool":            true,
+	"mrt":                             true,
+	"avast":                           true,
+	"avast security":                  true,
+	"bitdefender":                     true,
+	"norton":                          true,
+	"sophos":                          true,
+	"malwarebytes":                    true,
+	"eset":                            true,
+	"little snitch":                   true,
+	"lulu":                            true,
+
 	// ── Audio / Media ─────────────────────────────────────────────────────────
 	"coreaudiod":                      true, // Core Audio daemon — kill = no sound
 	"audioundockhelper":               true,

client/internal/blocker/blocker_linux.go

@@ -205,6 +205,21 @@ var systemAllowed = map[string]bool{
 	"WebKitWebProcess":  true,
 	"WebKitNetworkPro":  true, // prefix
 
+	// ── Security / antivirus / updates (from app_pool + common) ───────────────
+	"update-notifier":   true, // Ubuntu update notifier (app_pool)
+	"apport-gtk":        true, // Ubuntu crash reporter (app_pool)
+	"kgpg":              true, // KDE GPG encryption (app_pool)
+	"ksecretd":          true, // KDE secrets daemon (app_pool)
+	"clamtk":            true,
+	"clamav":            true,
+	"seahorse":          true, // GNOME password/keys manager
+	"kwalletd":          true,
+	"kwalletd5":         true,
+	"kwalletd6":         true,
+	"gufw":              true, // UFW firewall GUI
+	"firewalld":         true,
+	"pkexec":            true, // Polkit privilege elevation prompts
+
 	// ── Remote support tools (safety) ────────────────────────────────────────
 	"rustdesk":          true,
 	"rustdesk-bin":      true,

client/internal/blocker/blocker_windows.go

@@ -285,14 +285,27 @@ var systemAllowed = map[string]bool{
 	"atkex.exe":                       true,
 	"asusoptimization.exe":            true,
 
-	// ── Antivirus trays (common, prevent false-kill) ───────────────────────────
+	// ── Antivirus / endpoint security (from app_pool + common) ────────────────
 	"avastui.exe":                     true,
 	"avgui.exe":                       true,
 	"mbam.exe":                        true, // Malwarebytes
 	"mbamtray.exe":                    true,
 	"bdagent.exe":                     true, // Bitdefender
+	"bdwtxag.exe":                     true, // Bitdefender widget agent
 	"uiseagnt.exe":                    true, // Trend Micro
-	"eguiproxy.exe":                   true, // ESET
+	"eguiproxy.exe":                   true, // ESET proxy
+	"egui.exe":                        true, // ESET NOD32 GUI (app_pool)
+	"microsoftsecurityapp.exe":        true, // Microsoft Defender app (app_pool)
+	"msascuil.exe":                    true, // Defender notification icon
+	"pickerhost.exe":                  true, // Windows Security picker (app_pool)
+	"seccenter.exe":                   true, // Security center dialogs (app_pool)
+	"mc-web-view.exe":                 true, // McAfee web view (app_pool)
+	"rsappui.exe":                     true, // RAV Endpoint Protection (app_pool)
+	"avpui.exe":                       true, // Kaspersky UI
+	"ksdeui.exe":                      true, // Kaspersky Secure Connection
+	"n360.exe":                        true, // Norton 360
+	"nortonsecurity.exe":              true,
+	"sophos ui.exe":                   true, // Sophos UI
 
 	// ── Task Manager & System tools ────────────────────────────────────────────
 	"taskmgr.exe":                     true,