failproofai 0.0.14-beta.0 → 0.0.14-beta.1

package/dist/cli.mjs

@@ -19,7 +19,7 @@ var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // package.json
-var version2 = "0.0.14-beta.0";
+var version2 = "0.0.14-beta.1";
 var init_package = () => {};
 
 // src/posthog-key.ts
@@ -8314,6 +8314,242 @@ var init_handler = __esm(() => {
   init_hook_logger();
 });
 
+// scripts/install-telemetry.mjs
+import { createHmac, randomUUID } from "node:crypto";
+import { execSync as execSync4 } from "node:child_process";
+import { readFileSync as readFileSync10, writeFileSync as writeFileSync4, mkdirSync as mkdirSync5 } from "node:fs";
+import { homedir as homedir21, platform, arch, hostname, cpus } from "node:os";
+import { join as join24 } from "node:path";
+function hashToId3(raw) {
+  return createHmac("sha256", NAMESPACE3).update(raw).digest("hex");
+}
+function getInstanceId3() {
+  const idDir = join24(homedir21(), ".failproofai");
+  const idFile = join24(idDir, "instance-id");
+  try {
+    const existing = readFileSync10(idFile, "utf-8").trim();
+    if (existing)
+      return existing;
+  } catch {}
+  try {
+    const p = platform();
+    if (p === "linux") {
+      for (const machineIdPath of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
+        try {
+          const id2 = readFileSync10(machineIdPath, "utf-8").trim();
+          if (id2)
+            return hashToId3(id2);
+        } catch {}
+      }
+    } else if (p === "darwin") {
+      const out = execSync4("ioreg -rd1 -c IOPlatformExpertDevice", {
+        encoding: "utf-8",
+        timeout: 3000
+      });
+      const m = out.match(/"IOPlatformUUID"\s*=\s*"([^"]+)"/);
+      if (m?.[1])
+        return hashToId3(m[1]);
+    } else if (p === "win32") {
+      const out = execSync4('reg query "HKLM\\SOFTWARE\\Microsoft\\Cryptography" /v MachineGuid', { encoding: "utf-8", timeout: 3000 });
+      const m = out.match(/MachineGuid\s+REG_SZ\s+(\S+)/);
+      if (m?.[1])
+        return hashToId3(m[1]);
+    }
+  } catch {}
+  try {
+    const sysProps = [
+      hostname(),
+      homedir21(),
+      platform(),
+      arch(),
+      cpus()[0]?.model ?? ""
+    ].join(":");
+    return hashToId3(sysProps);
+  } catch {}
+  const id = randomUUID();
+  try {
+    mkdirSync5(idDir, { recursive: true });
+    writeFileSync4(idFile, id, "utf-8");
+  } catch {}
+  return id;
+}
+async function trackInstallEvent(event, properties = {}, opts = {}) {
+  if (process.env.FAILPROOFAI_TELEMETRY_DISABLED === "1")
+    return;
+  const version3 = opts.version ?? process.env.npm_package_version ?? "unknown";
+  const body = JSON.stringify({
+    api_key: process.env.FAILPROOFAI_POSTHOG_KEY ?? API_KEY3,
+    event,
+    distinct_id: getInstanceId3(),
+    properties: {
+      ...properties,
+      $lib: "failproofai-install",
+      failproofai_version: version3,
+      product: PRODUCT
+    }
+  });
+  await fetch(process.env.FAILPROOFAI_POSTHOG_HOST ? `${process.env.FAILPROOFAI_POSTHOG_HOST}/capture/` : CAPTURE_URL3, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body,
+    signal: AbortSignal.timeout(opts.timeoutMs ?? 5000)
+  });
+}
+var NAMESPACE3 = "failproofai-telemetry-v1", API_KEY3 = "phc_Ac1Ww1GqKc0z1SyrRWbmatEeQdlOQIsDEEdP8l8JRgX", CAPTURE_URL3 = "https://us.i.posthog.com/capture/", PRODUCT = "failproofai-oss";
+var init_install_telemetry = () => {};
+
+// lib/install-check.ts
+var exports_install_check = {};
+__export(exports_install_check, {
+  maybeReportInstall: () => maybeReportInstall,
+  compareSemver: () => compareSemver,
+  checkHooks: () => checkHooks
+});
+import { existsSync as existsSync10, readFileSync as readFileSync11, writeFileSync as writeFileSync5, mkdirSync as mkdirSync6 } from "node:fs";
+import { resolve as resolve9 } from "node:path";
+import { platform as platform2, arch as arch2, release, homedir as homedir22, hostname as hostname2 } from "node:os";
+import { createHmac as createHmac2 } from "node:crypto";
+function hashToId4(raw) {
+  return createHmac2("sha256", NAMESPACE4).update(raw).digest("hex");
+}
+function lastVersionPath() {
+  return resolve9(homedir22(), ".failproofai", "last-version");
+}
+function compareSemver(a, b) {
+  const parse = (v) => {
+    const m = /^(\d+)\.(\d+)\.(\d+)(?:-(.+))?$/.exec(v);
+    if (!m)
+      return null;
+    return { nums: [Number(m[1]), Number(m[2]), Number(m[3])], pre: m[4] ?? null };
+  };
+  const pa = parse(a);
+  const pb = parse(b);
+  if (!pa || !pb)
+    return a < b ? -1 : a > b ? 1 : 0;
+  for (let i = 0;i < 3; i++) {
+    if (pa.nums[i] !== pb.nums[i])
+      return pa.nums[i] < pb.nums[i] ? -1 : 1;
+  }
+  if (pa.pre === null && pb.pre === null)
+    return 0;
+  if (pa.pre === null)
+    return 1;
+  if (pb.pre === null)
+    return -1;
+  const ax = pa.pre.split(".");
+  const bx = pb.pre.split(".");
+  for (let i = 0;i < Math.max(ax.length, bx.length); i++) {
+    const ai = ax[i], bi = bx[i];
+    if (ai === undefined)
+      return -1;
+    if (bi === undefined)
+      return 1;
+    const aNum = /^\d+$/.test(ai), bNum = /^\d+$/.test(bi);
+    if (aNum && bNum) {
+      const d = Number(ai) - Number(bi);
+      if (d !== 0)
+        return d < 0 ? -1 : 1;
+    } else if (aNum) {
+      return -1;
+    } else if (bNum) {
+      return 1;
+    } else if (ai !== bi) {
+      return ai < bi ? -1 : 1;
+    }
+  }
+  return 0;
+}
+function checkHooks() {
+  const hooksConfigPath = resolve9(homedir22(), ".failproofai", "policies-config.json");
+  if (!existsSync10(hooksConfigPath)) {
+    return { configured: false, registered: false, policyCount: 0 };
+  }
+  let config;
+  try {
+    config = JSON.parse(readFileSync11(hooksConfigPath, "utf8"));
+  } catch {
+    return { configured: false, registered: false, policyCount: 0 };
+  }
+  if (!Array.isArray(config.enabledPolicies) || config.enabledPolicies.length === 0) {
+    return { configured: false, registered: false, policyCount: 0 };
+  }
+  const policyCount = config.enabledPolicies.length;
+  const settingsPath = resolve9(homedir22(), ".claude", "settings.json");
+  if (!existsSync10(settingsPath))
+    return { configured: true, registered: false, policyCount };
+  let settings;
+  try {
+    settings = JSON.parse(readFileSync11(settingsPath, "utf8"));
+  } catch {
+    return { configured: true, registered: false, policyCount };
+  }
+  if (!settings?.hooks)
+    return { configured: true, registered: false, policyCount };
+  for (const matchers of Object.values(settings.hooks)) {
+    if (!Array.isArray(matchers))
+      continue;
+    for (const matcher of matchers) {
+      if (!matcher?.hooks)
+        continue;
+      if (matcher.hooks.some((h) => h[FAILPROOFAI_HOOK_MARKER2] === true)) {
+        return { configured: true, registered: true, policyCount };
+      }
+    }
+  }
+  return { configured: true, registered: false, policyCount };
+}
+async function maybeReportInstall(version3) {
+  try {
+    const versionFile = lastVersionPath();
+    let previousVersion = null;
+    try {
+      if (existsSync10(versionFile)) {
+        previousVersion = readFileSync11(versionFile, "utf8").trim() || null;
+      }
+    } catch {}
+    if (previousVersion === version3)
+      return;
+    const hooks = checkHooks();
+    const events = [];
+    if (previousVersion === null) {
+      events.push(trackInstallEvent("first_install", {
+        platform: platform2(),
+        arch: arch2(),
+        os_release: release(),
+        node_version: process.versions.node
+      }, { version: version3, timeoutMs: REPORT_TIMEOUT_MS }));
+    } else {
+      const cmp = compareSemver(previousVersion, version3);
+      events.push(trackInstallEvent("version_changed", {
+        from_version: previousVersion,
+        to_version: version3,
+        direction: cmp < 0 ? "upgrade" : "downgrade",
+        platform: platform2(),
+        arch: arch2()
+      }, { version: version3, timeoutMs: REPORT_TIMEOUT_MS }));
+    }
+    events.push(trackInstallEvent("package_installed", {
+      platform: platform2(),
+      arch: arch2(),
+      os_release: release(),
+      node_version: process.versions.node,
+      hostname_hash: hashToId4(hostname2()),
+      hooks_configured: hooks.configured,
+      hooks_registered: hooks.registered,
+      enabled_policy_count: hooks.policyCount
+    }, { version: version3, timeoutMs: REPORT_TIMEOUT_MS }));
+    try {
+      mkdirSync6(resolve9(homedir22(), ".failproofai"), { recursive: true });
+      writeFileSync5(versionFile, version3, "utf8");
+    } catch {}
+    await Promise.all(events.map((p) => p.catch(() => {})));
+  } catch {}
+}
+var FAILPROOFAI_HOOK_MARKER2 = "__failproofai_hook__", NAMESPACE4 = "failproofai-telemetry-v1", REPORT_TIMEOUT_MS = 5000;
+var init_install_check = __esm(() => {
+  init_install_telemetry();
+});
+
 // node_modules/yaml/dist/nodes/identity.js
 var require_identity = __commonJS((exports) => {
   var ALIAS = Symbol.for("yaml.alias");
@@ -15305,32 +15541,32 @@ var init_dist = __esm(() => {
 });
 
 // src/hooks/integrations.ts
-import { execSync as execSync4 } from "node:child_process";
-import { readFileSync as readFileSync10, writeFileSync as writeFileSync4, existsSync as existsSync10, mkdirSync as mkdirSync5, unlinkSync as unlinkSync2 } from "node:fs";
-import { resolve as resolve9, dirname as dirname4 } from "node:path";
+import { execSync as execSync5 } from "node:child_process";
+import { readFileSync as readFileSync12, writeFileSync as writeFileSync6, existsSync as existsSync11, mkdirSync as mkdirSync7, unlinkSync as unlinkSync2 } from "node:fs";
+import { resolve as resolve10, dirname as dirname4 } from "node:path";
 import { fileURLToPath } from "node:url";
-import { homedir as homedir21 } from "node:os";
+import { homedir as homedir23 } from "node:os";
 function readJsonFile(path3) {
-  if (!existsSync10(path3))
+  if (!existsSync11(path3))
     return {};
-  const raw = readFileSync10(path3, "utf8");
+  const raw = readFileSync12(path3, "utf8");
   return JSON.parse(raw);
 }
 function writeJsonFile(path3, data) {
-  mkdirSync5(dirname4(path3), { recursive: true });
-  writeFileSync4(path3, JSON.stringify(data, null, 2) + `
+  mkdirSync7(dirname4(path3), { recursive: true });
+  writeFileSync6(path3, JSON.stringify(data, null, 2) + `
 `, "utf8");
 }
 function readYamlDoc(path3) {
   try {
-    return existsSync10(path3) ? $parseDocument(readFileSync10(path3, "utf8")) : $parseDocument("");
+    return existsSync11(path3) ? $parseDocument(readFileSync12(path3, "utf8")) : $parseDocument("");
   } catch {
     return $parseDocument("");
   }
 }
 function writeYamlDoc(path3, doc) {
-  mkdirSync5(dirname4(path3), { recursive: true });
-  writeFileSync4(path3, doc.toString(), "utf8");
+  mkdirSync7(dirname4(path3), { recursive: true });
+  writeFileSync6(path3, doc.toString(), "utf8");
 }
 function isMarkedHook(hook) {
   if (!hook || typeof hook !== "object")
@@ -15351,7 +15587,7 @@ function stripLegacyVersion(settings) {
 function binaryExists(name) {
   try {
     const cmd = process.platform === "win32" ? `where ${name}` : `which ${name}`;
-    execSync4(cmd, { encoding: "utf8", stdio: "pipe" });
+    execSync5(cmd, { encoding: "utf8", stdio: "pipe" });
     return true;
   } catch {
     return false;
@@ -15369,7 +15605,7 @@ function isMarkedCopilotHook(hook) {
   return false;
 }
 function opencodePluginFilePath(settingsPath) {
-  return resolve9(dirname4(settingsPath), "plugins", "failproofai.mjs");
+  return resolve10(dirname4(settingsPath), "plugins", "failproofai.mjs");
 }
 function buildOpenCodePluginShim(binaryPath, scope) {
   const useNpx = scope === "project";
@@ -15584,8 +15820,8 @@ export default async function failproofaiPlugin({ client, directory }) {
 function getPiExtensionPath() {
   const fromEnv = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (fromEnv)
-    return resolve9(fromEnv, "pi-extension");
-  return resolve9(fileURLToPath(import.meta.url), "..", "..", "..", "pi-extension");
+    return resolve10(fromEnv, "pi-extension");
+  return resolve10(fileURLToPath(import.meta.url), "..", "..", "..", "pi-extension");
 }
 function isFailproofaiPiEntry(source) {
   if (typeof source !== "string")
@@ -15596,8 +15832,8 @@ function isFailproofaiPiEntry(source) {
 }
 function makePiProjectRelativeEntry(extPath) {
   const cwd = process.cwd();
-  const cwdResolved = resolve9(cwd);
-  const extResolved = resolve9(extPath);
+  const cwdResolved = resolve10(cwd);
+  const extResolved = resolve10(extPath);
   if (extResolved.startsWith(cwdResolved + "/") || extResolved === cwdResolved) {
     const fromSettingsDir = "../" + extResolved.slice(cwdResolved.length + 1);
     return fromSettingsDir;
@@ -15607,8 +15843,8 @@ function makePiProjectRelativeEntry(extPath) {
 function getOpenClawPluginPath() {
   const fromEnv = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (fromEnv)
-    return resolve9(fromEnv, "openclaw-plugin");
-  return resolve9(fileURLToPath(import.meta.url), "..", "..", "..", "openclaw-plugin");
+    return resolve10(fromEnv, "openclaw-plugin");
+  return resolve10(fileURLToPath(import.meta.url), "..", "..", "..", "openclaw-plugin");
 }
 function isFailproofaiOpenClawPath(p) {
   if (typeof p !== "string")
@@ -15644,14 +15880,14 @@ var init_integrations = __esm(() => {
     scopes: HOOK_SCOPES,
     eventTypes: HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve9(cwd) : process.cwd();
+      const base = cwd ? resolve10(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve9(homedir21(), ".claude", "settings.json");
+          return resolve10(homedir23(), ".claude", "settings.json");
         case "project":
-          return resolve9(base, ".claude", "settings.json");
+          return resolve10(base, ".claude", "settings.json");
         case "local":
-          return resolve9(base, ".claude", "settings.local.json");
+          return resolve10(base, ".claude", "settings.local.json");
       }
     },
     readSettings(settingsPath) {
@@ -15723,7 +15959,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync10(settingsPath))
+      if (!existsSync11(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -15752,14 +15988,14 @@ var init_integrations = __esm(() => {
     scopes: CODEX_HOOK_SCOPES,
     eventTypes: CODEX_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve9(cwd) : process.cwd();
+      const base = cwd ? resolve10(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve9(homedir21(), ".codex", "hooks.json");
+          return resolve10(homedir23(), ".codex", "hooks.json");
         case "project":
-          return resolve9(base, ".codex", "hooks.json");
+          return resolve10(base, ".codex", "hooks.json");
         case "local":
-          return resolve9(base, ".codex", "hooks.json");
+          return resolve10(base, ".codex", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -15839,7 +16075,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync10(settingsPath))
+      if (!existsSync11(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -15868,14 +16104,14 @@ var init_integrations = __esm(() => {
     scopes: COPILOT_HOOK_SCOPES,
     eventTypes: COPILOT_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve9(cwd) : process.cwd();
+      const base = cwd ? resolve10(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve9(homedir21(), ".copilot", "hooks", "failproofai.json");
+          return resolve10(homedir23(), ".copilot", "hooks", "failproofai.json");
         case "project":
-          return resolve9(base, ".github", "hooks", "failproofai.json");
+          return resolve10(base, ".github", "hooks", "failproofai.json");
         case "local":
-          return resolve9(base, ".github", "hooks", "failproofai.json");
+          return resolve10(base, ".github", "hooks", "failproofai.json");
       }
     },
     readSettings(settingsPath) {
@@ -15953,7 +16189,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync10(settingsPath))
+      if (!existsSync11(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -15982,14 +16218,14 @@ var init_integrations = __esm(() => {
     scopes: CURSOR_HOOK_SCOPES,
     eventTypes: CURSOR_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve9(cwd) : process.cwd();
+      const base = cwd ? resolve10(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve9(homedir21(), ".cursor", "hooks.json");
+          return resolve10(homedir23(), ".cursor", "hooks.json");
         case "project":
-          return resolve9(base, ".cursor", "hooks.json");
+          return resolve10(base, ".cursor", "hooks.json");
         case "local":
-          return resolve9(base, ".cursor", "hooks.json");
+          return resolve10(base, ".cursor", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -16056,7 +16292,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync10(settingsPath))
+      if (!existsSync11(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -16081,14 +16317,14 @@ var init_integrations = __esm(() => {
     scopes: OPENCODE_HOOK_SCOPES,
     eventTypes: OPENCODE_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve9(cwd) : process.cwd();
+      const base = cwd ? resolve10(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve9(homedir21(), ".config", "opencode", "opencode.json");
+          return resolve10(homedir23(), ".config", "opencode", "opencode.json");
         case "project":
-          return resolve9(base, ".opencode", "opencode.json");
+          return resolve10(base, ".opencode", "opencode.json");
         case "local":
-          return resolve9(base, ".opencode", "opencode.json");
+          return resolve10(base, ".opencode", "opencode.json");
       }
     },
     readSettings(settingsPath) {
@@ -16099,7 +16335,7 @@ var init_integrations = __esm(() => {
     },
     buildHookEntry(_binaryPath, _eventType, scope) {
       if (scope === "user") {
-        const abs = resolve9(homedir21(), ".config", "opencode", "plugins", "failproofai.mjs");
+        const abs = resolve10(homedir23(), ".config", "opencode", "plugins", "failproofai.mjs");
         return { spec: `file://${abs}`, [FAILPROOFAI_HOOK_MARKER]: true };
       }
       return { spec: OPENCODE_PLUGIN_REL_PATH, [FAILPROOFAI_HOOK_MARKER]: true };
@@ -16114,10 +16350,10 @@ var init_integrations = __esm(() => {
     writeHookEntries(settings, binaryPath, scope) {
       const s = settings;
       const effectiveScope = scope ?? "project";
-      const settingsPath = effectiveScope === "user" ? resolve9(homedir21(), ".config", "opencode", "opencode.json") : resolve9(process.cwd(), ".opencode", "opencode.json");
+      const settingsPath = effectiveScope === "user" ? resolve10(homedir23(), ".config", "opencode", "opencode.json") : resolve10(process.cwd(), ".opencode", "opencode.json");
       const pluginPath = opencodePluginFilePath(settingsPath);
-      mkdirSync5(dirname4(pluginPath), { recursive: true });
-      writeFileSync4(pluginPath, buildOpenCodePluginShim(binaryPath, effectiveScope), "utf8");
+      mkdirSync7(dirname4(pluginPath), { recursive: true });
+      writeFileSync6(pluginPath, buildOpenCodePluginShim(binaryPath, effectiveScope), "utf8");
       if (!Array.isArray(s.plugin))
         s.plugin = [];
       const desired = effectiveScope === "user" ? `file://${pluginPath}` : OPENCODE_PLUGIN_REL_PATH;
@@ -16140,9 +16376,9 @@ var init_integrations = __esm(() => {
       }
       this.writeSettings(settingsPath, settings);
       const pluginPath = opencodePluginFilePath(settingsPath);
-      if (existsSync10(pluginPath)) {
+      if (existsSync11(pluginPath)) {
         try {
-          const content = readFileSync10(pluginPath, "utf8");
+          const content = readFileSync12(pluginPath, "utf8");
           if (content.includes(FAILPROOFAI_HOOK_MARKER)) {
             unlinkSync2(pluginPath);
             if (removed === 0)
@@ -16154,7 +16390,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync10(settingsPath))
+      if (!existsSync11(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -16164,9 +16400,9 @@ var init_integrations = __esm(() => {
         if (!hasEntry)
           return false;
         const pluginPath = opencodePluginFilePath(settingsPath);
-        if (!existsSync10(pluginPath))
+        if (!existsSync11(pluginPath))
           return false;
-        const content = readFileSync10(pluginPath, "utf8");
+        const content = readFileSync12(pluginPath, "utf8");
         return content.includes(FAILPROOFAI_HOOK_MARKER);
       } catch {
         return false;
@@ -16182,14 +16418,14 @@ var init_integrations = __esm(() => {
     scopes: PI_HOOK_SCOPES,
     eventTypes: PI_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve9(cwd) : process.cwd();
+      const base = cwd ? resolve10(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve9(homedir21(), ".pi", "agent", "settings.json");
+          return resolve10(homedir23(), ".pi", "agent", "settings.json");
         case "project":
-          return resolve9(base, ".pi", "settings.json");
+          return resolve10(base, ".pi", "settings.json");
         case "local":
-          return resolve9(base, ".pi", "settings.json");
+          return resolve10(base, ".pi", "settings.json");
       }
     },
     readSettings(settingsPath) {
@@ -16231,7 +16467,7 @@ var init_integrations = __esm(() => {
       }
     },
     removeHooksFromFile(settingsPath) {
-      if (!existsSync10(settingsPath))
+      if (!existsSync11(settingsPath))
         return 0;
       const settings = this.readSettings(settingsPath);
       if (!Array.isArray(settings.packages))
@@ -16246,7 +16482,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync10(settingsPath))
+      if (!existsSync11(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -16267,7 +16503,7 @@ var init_integrations = __esm(() => {
     scopes: HERMES_HOOK_SCOPES,
     eventTypes: HERMES_HOOK_EVENT_TYPES,
     getSettingsPath() {
-      return resolve9(homedir21(), ".hermes", "config.yaml");
+      return resolve10(homedir23(), ".hermes", "config.yaml");
     },
     readSettings(settingsPath) {
       return readYamlDoc(settingsPath);
@@ -16302,7 +16538,7 @@ var init_integrations = __esm(() => {
       doc.set("hooks_auto_accept", true);
     },
     removeHooksFromFile(settingsPath) {
-      if (!existsSync10(settingsPath))
+      if (!existsSync11(settingsPath))
         return 0;
       const doc = readYamlDoc(settingsPath);
       const js = doc.toJS() ?? {};
@@ -16335,7 +16571,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync10(settingsPath))
+      if (!existsSync11(settingsPath))
         return false;
       try {
         const doc = readYamlDoc(settingsPath);
@@ -16360,7 +16596,7 @@ var init_integrations = __esm(() => {
     scopes: OPENCLAW_HOOK_SCOPES,
     eventTypes: OPENCLAW_HOOK_EVENT_TYPES,
     getSettingsPath() {
-      return resolve9(homedir21(), ".openclaw", "openclaw.json");
+      return resolve10(homedir23(), ".openclaw", "openclaw.json");
     },
     readSettings(settingsPath) {
       return readJsonFile(settingsPath);
@@ -16405,7 +16641,7 @@ var init_integrations = __esm(() => {
       hooks.allowConversationAccess = true;
     },
     removeHooksFromFile(settingsPath) {
-      if (!existsSync10(settingsPath))
+      if (!existsSync11(settingsPath))
         return 0;
       const settings = this.readSettings(settingsPath);
       const plugins = settings.plugins;
@@ -16434,7 +16670,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync10(settingsPath))
+      if (!existsSync11(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -16456,14 +16692,14 @@ var init_integrations = __esm(() => {
     scopes: FACTORY_HOOK_SCOPES,
     eventTypes: FACTORY_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve9(cwd) : process.cwd();
+      const base = cwd ? resolve10(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve9(homedir21(), ".factory", "hooks.json");
+          return resolve10(homedir23(), ".factory", "hooks.json");
         case "project":
-          return resolve9(base, ".factory", "hooks.json");
+          return resolve10(base, ".factory", "hooks.json");
         case "local":
-          return resolve9(base, ".factory", "hooks.json");
+          return resolve10(base, ".factory", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -16531,7 +16767,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync10(settingsPath))
+      if (!existsSync11(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -16558,14 +16794,14 @@ var init_integrations = __esm(() => {
     scopes: DEVIN_HOOK_SCOPES,
     eventTypes: DEVIN_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve9(cwd) : process.cwd();
+      const base = cwd ? resolve10(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve9(homedir21(), ".config", "devin", "config.json");
+          return resolve10(homedir23(), ".config", "devin", "config.json");
         case "project":
-          return resolve9(base, ".devin", "config.json");
+          return resolve10(base, ".devin", "config.json");
         case "local":
-          return resolve9(base, ".devin", "config.json");
+          return resolve10(base, ".devin", "config.json");
       }
     },
     readSettings(settingsPath) {
@@ -16637,7 +16873,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync10(settingsPath))
+      if (!existsSync11(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -16667,14 +16903,14 @@ var init_integrations = __esm(() => {
     scopes: ANTIGRAVITY_HOOK_SCOPES,
     eventTypes: ANTIGRAVITY_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve9(cwd) : process.cwd();
+      const base = cwd ? resolve10(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve9(homedir21(), ".gemini", "config", "hooks.json");
+          return resolve10(homedir23(), ".gemini", "config", "hooks.json");
         case "project":
-          return resolve9(base, ".agents", "hooks.json");
+          return resolve10(base, ".agents", "hooks.json");
         case "local":
-          return resolve9(base, ".agents", "hooks.json");
+          return resolve10(base, ".agents", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -16776,7 +17012,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync10(settingsPath))
+      if (!existsSync11(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -16808,14 +17044,14 @@ var init_integrations = __esm(() => {
     scopes: GOOSE_HOOK_SCOPES,
     eventTypes: GOOSE_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve9(cwd) : process.cwd();
+      const base = cwd ? resolve10(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve9(homedir21(), ".agents", "plugins", "failproofai", "hooks", "hooks.json");
+          return resolve10(homedir23(), ".agents", "plugins", "failproofai", "hooks", "hooks.json");
         case "project":
-          return resolve9(base, ".agents", "plugins", "failproofai", "hooks", "hooks.json");
+          return resolve10(base, ".agents", "plugins", "failproofai", "hooks", "hooks.json");
         case "local":
-          return resolve9(base, ".agents", "plugins", "failproofai", "hooks", "hooks.json");
+          return resolve10(base, ".agents", "plugins", "failproofai", "hooks", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -16882,7 +17118,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync10(settingsPath))
+      if (!existsSync11(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -17050,7 +17286,7 @@ function renderLaunchBanner(version3, stdout = process.stdout) {
     row("version", c.pink(version3)),
     row("star", c.dim("https://github.com/failproofai/failproofai")),
     row("docs", c.dim("https://docs.befailproof.ai/introduction")),
-    row("discord", c.dim("https://discord.gg/2zjBZP7yQJ")),
+    row("discord", c.dim("https://discord.befailproof.ai/")),
     ""
   ];
 }
@@ -17145,7 +17381,7 @@ function runPrompt(p) {
       `${c.dim(BAR)}  ${c.dim(p.summaryFor(result))}`
     ]);
   };
-  return new Promise((resolve10) => {
+  return new Promise((resolve11) => {
     hideCursor(stdout);
     repaint(stdout, region, build());
     readline.emitKeypressEvents(stdin);
@@ -17161,7 +17397,7 @@ function runPrompt(p) {
     const finish = (result) => {
       cleanup();
       collapse(result);
-      resolve10(result);
+      resolve11(result);
     };
     function onKey(_s, key) {
       if (!key)
@@ -17457,7 +17693,7 @@ async function promptPolicySelection(preSelected, options = {}) {
 `);
     lastLineCount = lines.length;
   }
-  return new Promise((resolve10) => {
+  return new Promise((resolve11) => {
     render();
     process.stdin.setRawMode(true);
     process.stdin.resume();
@@ -17494,7 +17730,7 @@ async function promptPolicySelection(preSelected, options = {}) {
 ${dim(STEP_DONE)}  Policies
 ${dim(BAR)}  ${dim(`${selected.length} selected`)}
 `);
-        resolve10(selected);
+        resolve11(selected);
       } else if (key.name === "escape") {
         search = "";
         cursor2 = 0;
@@ -17555,10 +17791,10 @@ __export(exports_manager, {
   hooksInstalledInSettings: () => hooksInstalledInSettings,
   getSettingsPath: () => getSettingsPath
 });
-import { execSync as execSync5 } from "node:child_process";
-import { existsSync as existsSync11 } from "node:fs";
-import { resolve as resolve10, basename as basename3 } from "node:path";
-import { homedir as homedir22, platform, arch, release, hostname } from "node:os";
+import { execSync as execSync6 } from "node:child_process";
+import { existsSync as existsSync12 } from "node:fs";
+import { resolve as resolve11, basename as basename3 } from "node:path";
+import { homedir as homedir24, platform as platform3, arch as arch3, release as release2, hostname as hostname3 } from "node:os";
 function getSettingsPath(scope, cwd) {
   return claudeCode.getSettingsPath(scope, cwd);
 }
@@ -17578,7 +17814,7 @@ function resolveFailproofaiBinary() {
     return override.trim();
   try {
     const cmd = process.platform === "win32" ? "where failproofai" : "which failproofai";
-    const result = execSync5(cmd, { encoding: "utf8" }).trim();
+    const result = execSync6(cmd, { encoding: "utf8" }).trim();
     return result.split(`
 `)[0].trim();
   } catch {
@@ -17664,7 +17900,7 @@ async function installHooksImpl(policyNames, scope = "user", cwd, includeBeta =
   if (removeCustomHooks) {
     delete configToWrite.customPoliciesPath;
   } else if (customPoliciesPath) {
-    configToWrite.customPoliciesPath = resolve10(customPoliciesPath);
+    configToWrite.customPoliciesPath = resolve11(customPoliciesPath);
     let validatedHooks = [];
     try {
       validatedHooks = await loadCustomHooks(configToWrite.customPoliciesPath, { strict: true });
@@ -17736,10 +17972,10 @@ Enabled ${selectedPolicies.length} policy(ies): ${selectedPolicies.join(", ")}
       policies_added: policiesAdded,
       policies_removed: policiesRemoved,
       ...source ? { source } : {},
-      platform: platform(),
-      arch: arch(),
-      os_release: release(),
-      hostname_hash: hashToId2(hostname()),
+      platform: platform3(),
+      arch: arch3(),
+      os_release: release2(),
+      hostname_hash: hashToId2(hostname3()),
       has_custom_hooks_path: !!configToWrite.customPoliciesPath,
       has_policy_params: !!(configToWrite.policyParams && Object.keys(configToWrite.policyParams).length > 0),
       param_policy_names: configToWrite.policyParams ? Object.keys(configToWrite.policyParams) : [],
@@ -17826,10 +18062,10 @@ async function removeHooks(policyNames, scope = "user", cwd, opts) {
         policies_removed: actuallyRemoved,
         removed_count: actuallyRemoved.length,
         ...opts?.source ? { source: opts.source } : {},
-        platform: platform(),
-        arch: arch(),
-        os_release: release(),
-        hostname_hash: hashToId2(hostname())
+        platform: platform3(),
+        arch: arch3(),
+        os_release: release2(),
+        hostname_hash: hashToId2(hostname3())
       });
     } catch {}
     console.log(`Disabled ${policyNames.length - notEnabled.length} policy(ies).`);
@@ -17844,7 +18080,7 @@ async function removeHooks(policyNames, scope = "user", cwd, opts) {
     const scopesToRemove = scope === "all" ? [...integration.scopes] : integration.scopes.includes(scope) ? [scope] : [];
     for (const s of scopesToRemove) {
       const settingsPath = integration.getSettingsPath(s, cwd);
-      if (!existsSync11(settingsPath)) {
+      if (!existsSync12(settingsPath)) {
         if (scope !== "all" && selectedClis.length === 1) {
           console.log("No settings file found. Nothing to remove.");
           nothingToReport = true;
@@ -17884,10 +18120,10 @@ async function removeHooks(policyNames, scope = "user", cwd, opts) {
       policies_removed: configBeforeRemoval.enabledPolicies,
       removed_count: totalRemoved,
       ...opts?.source ? { source: opts.source } : {},
-      platform: platform(),
-      arch: arch(),
-      os_release: release(),
-      hostname_hash: hashToId2(hostname())
+      platform: platform3(),
+      arch: arch3(),
+      os_release: release2(),
+      hostname_hash: hashToId2(hostname3())
     });
   } catch {}
   if (scope === "all") {
@@ -18033,7 +18269,7 @@ Failproof AI Hook Policies
   if (config.customPoliciesPath) {
     console.log(`
   ── Custom Policies (${config.customPoliciesPath}) ───────────────────────`);
-    if (!existsSync11(config.customPoliciesPath)) {
+    if (!existsSync12(config.customPoliciesPath)) {
       console.log(`  \x1B[31m✗ File not found: ${config.customPoliciesPath}\x1B[0m`);
     } else {
       const hooks = await loadCustomHooks(config.customPoliciesPath);
@@ -18048,10 +18284,10 @@ Failproof AI Hook Policies
     }
     console.log();
   }
-  const base = cwd ? resolve10(cwd) : process.cwd();
+  const base = cwd ? resolve11(cwd) : process.cwd();
   const conventionDirs = [
-    { label: "Project", dir: resolve10(base, ".failproofai", "policies") },
-    { label: "User", dir: resolve10(homedir22(), ".failproofai", "policies") }
+    { label: "Project", dir: resolve11(base, ".failproofai", "policies") },
+    { label: "User", dir: resolve11(homedir24(), ".failproofai", "policies") }
   ];
   for (const { label, dir } of conventionDirs) {
     const files = discoverPolicyFiles(dir);
@@ -18253,7 +18489,7 @@ async function promptCliTargetSelection(detected, action = "install") {
     lastLineCount = lines.length;
   }
   const itemCount = options.length;
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     render();
     readline3.emitKeypressEvents(process.stdin);
     const wasRaw = process.stdin.isRaw;
@@ -18286,7 +18522,7 @@ async function promptCliTargetSelection(detected, action = "install") {
         cleanup();
         process.stdout.write(`
 `);
-        resolve11(options[cursor2].value);
+        resolve12(options[cursor2].value);
       }
     }
     process.stdin.on("keypress", onKey);
@@ -18439,7 +18675,7 @@ async function promptPolicySelection2(preSelected, options = {}) {
 `);
     lastLineCount = lines.length;
   }
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     render();
     process.stdin.setRawMode(true);
     process.stdin.resume();
@@ -18476,7 +18712,7 @@ async function promptPolicySelection2(preSelected, options = {}) {
 ${dim(STEP_DONE)}  Policies
 ${dim(BAR)}  ${dim(`${selected.length} selected`)}
 `);
-        resolve11(selected);
+        resolve12(selected);
       } else if (key.name === "escape") {
         search = "";
         cursor2 = 0;
@@ -18656,12 +18892,12 @@ var init_api_server_client = __esm(() => {
 // lib/atomic-write.ts
 import {
   chmodSync,
-  existsSync as existsSync12,
-  mkdirSync as mkdirSync6,
+  existsSync as existsSync13,
+  mkdirSync as mkdirSync8,
   renameSync as renameSync3,
   rmSync,
   statSync as statSync11,
-  writeFileSync as writeFileSync5
+  writeFileSync as writeFileSync7
 } from "node:fs";
 import { dirname as dirname5 } from "node:path";
 import { randomBytes } from "node:crypto";
@@ -18669,11 +18905,11 @@ function writeJsonAtomically(filePath, value, opts = {}) {
   const mode = opts.mode ?? 384;
   const dirMode = opts.dirMode ?? 448;
   const dir = dirname5(filePath);
-  if (!existsSync12(dir))
-    mkdirSync6(dir, { recursive: true, mode: dirMode });
+  if (!existsSync13(dir))
+    mkdirSync8(dir, { recursive: true, mode: dirMode });
   const tmp = `${filePath}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
   try {
-    writeFileSync5(tmp, JSON.stringify(value, null, 2), { mode });
+    writeFileSync7(tmp, JSON.stringify(value, null, 2), { mode });
     try {
       if ((statSync11(tmp).mode & 63) !== 0)
         chmodSync(tmp, mode);
@@ -18693,24 +18929,24 @@ function writeJsonAtomically(filePath, value, opts = {}) {
 var init_atomic_write = () => {};
 
 // lib/auth/auth-store.ts
-import { existsSync as existsSync13, readFileSync as readFileSync11, rmSync as rmSync2 } from "node:fs";
-import { homedir as homedir23 } from "node:os";
-import { join as join24 } from "node:path";
+import { existsSync as existsSync14, readFileSync as readFileSync13, rmSync as rmSync2 } from "node:fs";
+import { homedir as homedir25 } from "node:os";
+import { join as join25 } from "node:path";
 function getAuthDir() {
   const override = process.env.FAILPROOFAI_AUTH_DIR;
   if (override)
     return override;
-  return join24(homedir23(), ".failproofai");
+  return join25(homedir25(), ".failproofai");
 }
 function getAuthFilePath() {
-  return join24(getAuthDir(), "auth.json");
+  return join25(getAuthDir(), "auth.json");
 }
 function readAuth() {
   const p = getAuthFilePath();
-  if (!existsSync13(p))
+  if (!existsSync14(p))
     return null;
   try {
-    const raw = readFileSync11(p, "utf-8");
+    const raw = readFileSync13(p, "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.access_token !== "string" || typeof parsed.refresh_token !== "string" || typeof parsed.access_expires_at !== "number" || typeof parsed.user !== "object" || !parsed.user || typeof parsed.user.id !== "string" || typeof parsed.user.email !== "string") {
       return null;
@@ -18734,7 +18970,7 @@ function writeAuth(auth) {
 }
 function deleteAuth() {
   const p = getAuthFilePath();
-  if (existsSync13(p))
+  if (existsSync14(p))
     rmSync2(p, { force: true });
 }
 function authFromTokenResponse(token, existingUser) {
@@ -18811,13 +19047,13 @@ function prompt(question, opts = {}) {
         orig(s);
     };
   }
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     rl.question(question, (answer) => {
       rl.close();
       if (opts.hidden && process.stdin.isTTY)
         process.stdout.write(`
 `);
-      resolve11(answer.trim());
+      resolve12(answer.trim());
     });
   });
 }
@@ -19059,8 +19295,8 @@ EXAMPLES
 });
 
 // lib/claude-sessions.ts
-import { readdirSync as readdirSync10, statSync as statSync12, existsSync as existsSync14 } from "node:fs";
-import { join as join25, basename as basename4 } from "node:path";
+import { readdirSync as readdirSync10, statSync as statSync12, existsSync as existsSync15 } from "node:fs";
+import { join as join26, basename as basename4 } from "node:path";
 function getClaudeProjectsRoot() {
   return getClaudeProjectsPath();
 }
@@ -19075,7 +19311,7 @@ function listClaudeProjects() {
   return entries.filter((e) => e.isDirectory()).map((e) => ({
     name: e.name,
     cwd: decodeFolderName(e.name),
-    path: join25(root, e.name)
+    path: join26(root, e.name)
   }));
 }
 function listClaudeTranscripts(project) {
@@ -19091,7 +19327,7 @@ function listClaudeTranscripts(project) {
       const sessionId = entry.name.slice(0, -".jsonl".length);
       if (!UUID_RE2.test(sessionId))
         continue;
-      const transcriptPath = join25(project.path, entry.name);
+      const transcriptPath = join26(project.path, entry.name);
       try {
         const s = statSync12(transcriptPath);
         out.push({
@@ -19105,8 +19341,8 @@ function listClaudeTranscripts(project) {
         });
       } catch {}
     } else if (entry.isDirectory() && UUID_RE2.test(entry.name)) {
-      const subDir = join25(project.path, entry.name, "subagents");
-      if (!existsSync14(subDir))
+      const subDir = join26(project.path, entry.name, "subagents");
+      if (!existsSync15(subDir))
         continue;
       let subEntries;
       try {
@@ -19118,7 +19354,7 @@ function listClaudeTranscripts(project) {
         if (!sub.isFile() || !sub.name.endsWith(".jsonl"))
           continue;
         const agentId = sub.name.slice(0, -".jsonl".length);
-        const transcriptPath = join25(subDir, sub.name);
+        const transcriptPath = join26(subDir, sub.name);
         try {
           const s = statSync12(transcriptPath);
           out.push({
@@ -20372,9 +20608,9 @@ var init_features = __esm(() => {
 
 // src/audit/cache.ts
 import { createHash } from "node:crypto";
-import { existsSync as existsSync15, mkdirSync as mkdirSync7, readFileSync as readFileSync12, writeFileSync as writeFileSync6, chmodSync as chmodSync2 } from "node:fs";
-import { join as join26 } from "node:path";
-import { homedir as homedir24 } from "node:os";
+import { existsSync as existsSync16, mkdirSync as mkdirSync9, readFileSync as readFileSync14, writeFileSync as writeFileSync8, chmodSync as chmodSync2 } from "node:fs";
+import { join as join27 } from "node:path";
+import { homedir as homedir26 } from "node:os";
 function getEngineVersion() {
   if (cachedEngineVersion)
     return cachedEngineVersion;
@@ -20392,18 +20628,18 @@ function getDetectorVersion() {
   return cachedDetectorVersion;
 }
 function getCachePathFor(transcriptPath) {
-  const root = join26(homedir24(), ".failproofai", "cache", "audit");
+  const root = join27(homedir26(), ".failproofai", "cache", "audit");
   const key = createHash("sha1").update(transcriptPath).digest("hex");
-  return join26(root, `${key}.json`);
+  return join27(root, `${key}.json`);
 }
 function readCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes) {
   if (sizeBytes === 0)
     return null;
   const cachePath = getCachePathFor(transcriptPath);
-  if (!existsSync15(cachePath))
+  if (!existsSync16(cachePath))
     return null;
   try {
-    const raw = readFileSync12(cachePath, "utf-8");
+    const raw = readFileSync14(cachePath, "utf-8");
     const entry = JSON.parse(raw);
     if (entry.schemaVersion !== CACHE_SCHEMA_VERSION)
       return null;
@@ -20427,7 +20663,7 @@ function writeCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes, result)
     return;
   const cachePath = getCachePathFor(transcriptPath);
   try {
-    mkdirSync7(join26(homedir24(), ".failproofai", "cache", "audit"), { recursive: true });
+    mkdirSync9(join27(homedir26(), ".failproofai", "cache", "audit"), { recursive: true });
     const entry = {
       schemaVersion: CACHE_SCHEMA_VERSION,
       cachedAt: Date.now(),
@@ -20437,7 +20673,7 @@ function writeCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes, result)
       detectorVersion: getDetectorVersion(),
       result
     };
-    writeFileSync6(cachePath, JSON.stringify(entry), { encoding: "utf-8", mode: 384 });
+    writeFileSync8(cachePath, JSON.stringify(entry), { encoding: "utf-8", mode: 384 });
     try {
       chmodSync2(cachePath, 384);
     } catch {}
@@ -20799,10 +21035,10 @@ var init_audit = __esm(() => {
 });
 
 // src/audit/dashboard-cache.ts
-import { join as join27 } from "node:path";
-import { homedir as homedir25 } from "node:os";
+import { join as join28 } from "node:path";
+import { homedir as homedir27 } from "node:os";
 function getCachePath() {
-  return join27(homedir25(), ".failproofai", "audit-dashboard.json");
+  return join28(homedir27(), ".failproofai", "audit-dashboard.json");
 }
 function writeDashboardCache(params, result) {
   try {
@@ -20892,14 +21128,14 @@ var POLL_INTERVAL_MS = 150, POLL_TIMEOUT_MS = 30000;
 var init_open_browser = () => {};
 
 // scripts/parse-script-args.ts
-import { resolve as resolve11 } from "path";
+import { resolve as resolve12 } from "path";
 function parseStringFlag(flagName, errorLabel, inlineValue, args, index, options) {
   const raw = inlineValue ?? args[index + 1];
   if (raw === undefined || inlineValue === null && raw.startsWith("-")) {
     console.error(`Error: ${flagName} requires ${errorLabel}`);
     process.exit(1);
   }
-  const value = options?.resolve ? resolve11(raw) : raw;
+  const value = options?.resolve ? resolve12(raw) : raw;
   return { value, spliceCount: inlineValue !== null ? 1 : 2 };
 }
 function parseScriptArgs(argv) {
@@ -20947,21 +21183,21 @@ function parseScriptArgs(argv) {
 var init_parse_script_args = () => {};
 
 // scripts/install-diagnosis.mjs
-import { existsSync as existsSync16, readFileSync as readFileSync13, realpathSync } from "node:fs";
-import { dirname as dirname6, resolve as resolve12 } from "node:path";
-import { homedir as homedir26, platform as platform2 } from "node:os";
+import { existsSync as existsSync17, readFileSync as readFileSync15, realpathSync } from "node:fs";
+import { dirname as dirname6, resolve as resolve13 } from "node:path";
+import { homedir as homedir28, platform as platform4 } from "node:os";
 import { spawnSync } from "node:child_process";
 function findPackageRoot(start) {
   try {
     let dir = realpathSync(start);
-    if (existsSync16(dir) && !existsSync16(resolve12(dir, "package.json"))) {
+    if (existsSync17(dir) && !existsSync17(resolve13(dir, "package.json"))) {
       dir = dirname6(dir);
     }
     while (true) {
-      const pkgPath = resolve12(dir, "package.json");
-      if (existsSync16(pkgPath)) {
+      const pkgPath = resolve13(dir, "package.json");
+      if (existsSync17(pkgPath)) {
         try {
-          const pkg = JSON.parse(readFileSync13(pkgPath, "utf8"));
+          const pkg = JSON.parse(readFileSync15(pkgPath, "utf8"));
           if (pkg.name === PKG_NAME)
             return dir;
         } catch {}
@@ -20979,7 +21215,7 @@ function readPackageVersion(packageRoot) {
   if (!packageRoot)
     return null;
   try {
-    const pkg = JSON.parse(readFileSync13(resolve12(packageRoot, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync15(resolve13(packageRoot, "package.json"), "utf8"));
     return typeof pkg.version === "string" ? pkg.version : null;
   } catch {
     return null;
@@ -20987,7 +21223,7 @@ function readPackageVersion(packageRoot) {
 }
 function resolvePathFirstBinary() {
   try {
-    const isWin = platform2() === "win32";
+    const isWin = platform4() === "win32";
     const res = isWin ? spawnSync("where", [PKG_NAME], { encoding: "utf8" }) : spawnSync("sh", ["-c", `command -v ${PKG_NAME}`], { encoding: "utf8" });
     if (res.status !== 0)
       return null;
@@ -21005,16 +21241,16 @@ function locateNpmGlobal() {
     const root = (res.stdout || "").trim();
     if (!root)
       return null;
-    const candidate = resolve12(root, PKG_NAME);
-    return existsSync16(resolve12(candidate, "package.json")) ? candidate : null;
+    const candidate = resolve13(root, PKG_NAME);
+    return existsSync17(resolve13(candidate, "package.json")) ? candidate : null;
   } catch {
     return null;
   }
 }
 function locateBunGlobal() {
   try {
-    const candidate = resolve12(homedir26(), ".bun", "install", "global", "node_modules", PKG_NAME);
-    return existsSync16(resolve12(candidate, "package.json")) ? candidate : null;
+    const candidate = resolve13(homedir28(), ".bun", "install", "global", "node_modules", PKG_NAME);
+    return existsSync17(resolve13(candidate, "package.json")) ? candidate : null;
   } catch {
     return null;
   }
@@ -21022,8 +21258,8 @@ function locateBunGlobal() {
 function buildRecommendation(pathFirstBin) {
   if (!pathFirstBin)
     return null;
-  const bunBinPrefix = resolve12(homedir26(), ".bun", "bin") + "/";
-  const bunGlobalPrefix = resolve12(homedir26(), ".bun", "install", "global") + "/";
+  const bunBinPrefix = resolve13(homedir28(), ".bun", "bin") + "/";
+  const bunGlobalPrefix = resolve13(homedir28(), ".bun", "install", "global") + "/";
   const isBun = pathFirstBin.startsWith(bunBinPrefix) || pathFirstBin.startsWith(bunGlobalPrefix);
   if (isBun) {
     return `rm -f ~/.bun/bin/${PKG_NAME} && rm -rf ~/.bun/install/global/node_modules/${PKG_NAME}`;
@@ -21103,8 +21339,8 @@ __export(exports_launch, {
   launch: () => launch
 });
 import { spawn as spawn2 } from "child_process";
-import { realpathSync as realpathSync2, existsSync as existsSync17 } from "node:fs";
-import { resolve as resolve13, dirname as dirname7 } from "node:path";
+import { realpathSync as realpathSync2, existsSync as existsSync18 } from "node:fs";
+import { resolve as resolve14, dirname as dirname7 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { createInterface as createInterface2 } from "node:readline";
 function launch(mode) {
@@ -21119,9 +21355,9 @@ function launch(mode) {
     process.env.PORT = port;
     process.env.HOSTNAME = "0.0.0.0";
     cmd = "node";
-    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve13(dirname7(realpathSync2(fileURLToPath2(import.meta.url))), "..");
-    const serverJsPath = resolve13(packageRoot, ".next/standalone/server.js");
-    if (!existsSync17(serverJsPath)) {
+    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve14(dirname7(realpathSync2(fileURLToPath2(import.meta.url))), "..");
+    const serverJsPath = resolve14(packageRoot, ".next/standalone/server.js");
+    if (!existsSync18(serverJsPath)) {
       let shadowMessage = null;
       try {
         const diag = diagnoseShadow({ selfPackageRoot: packageRoot, selfVersion: version2 });
@@ -21332,9 +21568,20 @@ function printSummary(result) {
     process.stdout.write(`  ${line}
 `);
 }
+function auditCompletedProps(source, result) {
+  return {
+    source,
+    events_scanned: result.eventsScanned,
+    sessions_scanned: result.transcripts.scanned,
+    total_hits: result.totals.hits,
+    findings: result.results.length
+  };
+}
 async function runPostSetupAudit() {
   if (process.env.FAILPROOFAI_NO_AUTO_AUDIT === "1")
     return;
+  const instanceId = getInstanceId2();
+  trackHookEvent2(instanceId, "cli_audit_started", { source: "onboarding" });
   process.stdout.write(`
   ${c(PINK2, "✦")} ${c(BOLD, "failproofai audit now running")}  ${c(DIM2, "· ctrl+c to stop")}
 
@@ -21342,12 +21589,18 @@ async function runPostSetupAudit() {
   let result;
   try {
     result = await runWithProgress({});
-  } catch {
+  } catch (err) {
+    await trackHookEvent2(instanceId, "cli_audit_failed", {
+      source: "onboarding",
+      error_type: err instanceof Error ? err.name : "unknown",
+      error_message: sanitizeErrorMessage(err)
+    });
     process.stdout.write(`  ${c(PINK2, "!")} ${c(DIM2, "audit couldn't finish — run")} ${c(CYAN, "failproofai audit")} ${c(DIM2, "later.")}
 
 `);
     return;
   }
+  await trackHookEvent2(instanceId, "cli_audit_completed", auditCompletedProps("onboarding", result));
   if (result.eventsScanned === 0) {
     process.stdout.write(`
   ${c(DIM2, "no agent sessions to audit yet — come back after using your agent.")}
@@ -21386,13 +21639,7 @@ async function runAuditCli(args) {
     die(`Audit failed: ${err instanceof Error ? err.message : String(err)}`);
   }
   printSummary(result);
-  await trackHookEvent2(instanceId, "cli_audit_completed", {
-    source: "cli",
-    events_scanned: result.eventsScanned,
-    sessions_scanned: result.transcripts.scanned,
-    total_hits: result.totals.hits,
-    findings: result.results.length
-  });
+  await trackHookEvent2(instanceId, "cli_audit_completed", auditCompletedProps("cli", result));
   if (result.eventsScanned === 0) {
     process.stdout.write(`
   ${c(DIM2, "no agent sessions found yet.")}
@@ -21453,9 +21700,9 @@ WHAT IT DOES
 });
 
 // src/hooks/manager.ts
-import { execSync as execSync6 } from "node:child_process";
-import { resolve as resolve14, basename as basename5 } from "node:path";
-import { homedir as homedir27, platform as platform3, arch as arch2, release as release2, hostname as hostname2 } from "node:os";
+import { execSync as execSync7 } from "node:child_process";
+import { resolve as resolve15, basename as basename5 } from "node:path";
+import { homedir as homedir29, platform as platform5, arch as arch4, release as release3, hostname as hostname4 } from "node:os";
 function getSettingsPath2(scope, cwd) {
   return claudeCode.getSettingsPath(scope, cwd);
 }
@@ -21475,7 +21722,7 @@ function resolveFailproofaiBinary2() {
     return override.trim();
   try {
     const cmd = process.platform === "win32" ? "where failproofai" : "which failproofai";
-    const result = execSync6(cmd, { encoding: "utf8" }).trim();
+    const result = execSync7(cmd, { encoding: "utf8" }).trim();
     return result.split(`
 `)[0].trim();
   } catch {
@@ -21561,7 +21808,7 @@ async function installHooksImpl2(policyNames, scope = "user", cwd, includeBeta =
   if (removeCustomHooks) {
     delete configToWrite.customPoliciesPath;
   } else if (customPoliciesPath) {
-    configToWrite.customPoliciesPath = resolve14(customPoliciesPath);
+    configToWrite.customPoliciesPath = resolve15(customPoliciesPath);
     let validatedHooks = [];
     try {
       validatedHooks = await loadCustomHooks(configToWrite.customPoliciesPath, { strict: true });
@@ -21633,10 +21880,10 @@ Enabled ${selectedPolicies.length} policy(ies): ${selectedPolicies.join(", ")}
       policies_added: policiesAdded,
       policies_removed: policiesRemoved,
       ...source ? { source } : {},
-      platform: platform3(),
-      arch: arch2(),
-      os_release: release2(),
-      hostname_hash: hashToId2(hostname2()),
+      platform: platform5(),
+      arch: arch4(),
+      os_release: release3(),
+      hostname_hash: hashToId2(hostname4()),
       has_custom_hooks_path: !!configToWrite.customPoliciesPath,
       has_policy_params: !!(configToWrite.policyParams && Object.keys(configToWrite.policyParams).length > 0),
       param_policy_names: configToWrite.policyParams ? Object.keys(configToWrite.policyParams) : [],
@@ -21881,9 +22128,20 @@ function printSummary2(result) {
     process.stdout.write(`  ${line}
 `);
 }
+function auditCompletedProps2(source, result) {
+  return {
+    source,
+    events_scanned: result.eventsScanned,
+    sessions_scanned: result.transcripts.scanned,
+    total_hits: result.totals.hits,
+    findings: result.results.length
+  };
+}
 async function runPostSetupAudit2() {
   if (process.env.FAILPROOFAI_NO_AUTO_AUDIT === "1")
     return;
+  const instanceId = getInstanceId2();
+  trackHookEvent2(instanceId, "cli_audit_started", { source: "onboarding" });
   process.stdout.write(`
   ${c2(PINK3, "✦")} ${c2(BOLD2, "failproofai audit now running")}  ${c2(DIM3, "· ctrl+c to stop")}
 
@@ -21891,12 +22149,18 @@ async function runPostSetupAudit2() {
   let result;
   try {
     result = await runWithProgress2({});
-  } catch {
+  } catch (err) {
+    await trackHookEvent2(instanceId, "cli_audit_failed", {
+      source: "onboarding",
+      error_type: err instanceof Error ? err.name : "unknown",
+      error_message: sanitizeErrorMessage(err)
+    });
     process.stdout.write(`  ${c2(PINK3, "!")} ${c2(DIM3, "audit couldn't finish — run")} ${c2(CYAN2, "failproofai audit")} ${c2(DIM3, "later.")}
 
 `);
     return;
   }
+  await trackHookEvent2(instanceId, "cli_audit_completed", auditCompletedProps2("onboarding", result));
   if (result.eventsScanned === 0) {
     process.stdout.write(`
   ${c2(DIM3, "no agent sessions to audit yet — come back after using your agent.")}
@@ -21935,13 +22199,7 @@ async function runAuditCli2(args) {
     die2(`Audit failed: ${err instanceof Error ? err.message : String(err)}`);
   }
   printSummary2(result);
-  await trackHookEvent2(instanceId, "cli_audit_completed", {
-    source: "cli",
-    events_scanned: result.eventsScanned,
-    sessions_scanned: result.transcripts.scanned,
-    total_hits: result.totals.hits,
-    findings: result.results.length
-  });
+  await trackHookEvent2(instanceId, "cli_audit_completed", auditCompletedProps2("cli", result));
   if (result.eventsScanned === 0) {
     process.stdout.write(`
   ${c2(DIM3, "no agent sessions found yet.")}
@@ -22014,16 +22272,16 @@ __export(exports_configure_wizard, {
   buildPresetChoices: () => buildPresetChoices,
   buildAgentChoices: () => buildAgentChoices
 });
-import { existsSync as existsSync18, mkdirSync as mkdirSync8, writeFileSync as writeFileSync7 } from "node:fs";
-import { homedir as homedir28 } from "node:os";
-import { resolve as resolve15, sep as sep5 } from "node:path";
+import { existsSync as existsSync19, mkdirSync as mkdirSync10, writeFileSync as writeFileSync9 } from "node:fs";
+import { homedir as homedir30 } from "node:os";
+import { resolve as resolve16, sep as sep5 } from "node:path";
 async function emit(event, props) {
   try {
     await trackHookEvent2(getInstanceId2(), event, props);
   } catch {}
 }
 function homeify(p) {
-  const home = homedir28();
+  const home = homedir30();
   if (p === home)
     return "~";
   if (p.startsWith(home + sep5))
@@ -22100,15 +22358,15 @@ function reviewLines(state) {
   return lines;
 }
 function firstRunMarkerPath() {
-  return resolve15(homedir28(), ".failproofai", ".launcher-configured");
+  return resolve16(homedir30(), ".failproofai", ".launcher-configured");
 }
 function hasSeenLauncher() {
-  return existsSync18(firstRunMarkerPath());
+  return existsSync19(firstRunMarkerPath());
 }
 function markLauncherSeen() {
   try {
-    mkdirSync8(resolve15(homedir28(), ".failproofai"), { recursive: true });
-    writeFileSync7(firstRunMarkerPath(), "1", "utf8");
+    mkdirSync10(resolve16(homedir30(), ".failproofai"), { recursive: true });
+    writeFileSync9(firstRunMarkerPath(), "1", "utf8");
   } catch {}
 }
 function anyHooksInstalledGlobally() {
@@ -22248,8 +22506,8 @@ __export(exports_launch2, {
   launch: () => launch2
 });
 import { spawn as spawn3 } from "child_process";
-import { realpathSync as realpathSync3, existsSync as existsSync19 } from "node:fs";
-import { resolve as resolve16, dirname as dirname8 } from "node:path";
+import { realpathSync as realpathSync3, existsSync as existsSync20 } from "node:fs";
+import { resolve as resolve17, dirname as dirname8 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { createInterface as createInterface3 } from "node:readline";
 function launch2(mode) {
@@ -22264,9 +22522,9 @@ function launch2(mode) {
     process.env.PORT = port;
     process.env.HOSTNAME = "0.0.0.0";
     cmd = "node";
-    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve16(dirname8(realpathSync3(fileURLToPath3(import.meta.url))), "..");
-    const serverJsPath = resolve16(packageRoot, ".next/standalone/server.js");
-    if (!existsSync19(serverJsPath)) {
+    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve17(dirname8(realpathSync3(fileURLToPath3(import.meta.url))), "..");
+    const serverJsPath = resolve17(packageRoot, ".next/standalone/server.js");
+    if (!existsSync20(serverJsPath)) {
       let shadowMessage = null;
       try {
         const diag = diagnoseShadow({ selfPackageRoot: packageRoot, selfVersion: version2 });
@@ -22360,17 +22618,17 @@ var init_cli_error2 = __esm(() => {
 
 // bin/failproofai.mjs
 import { realpathSync as realpathSync4 } from "fs";
-import { dirname as dirname9, resolve as resolve17 } from "path";
+import { dirname as dirname9, resolve as resolve18 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 // package.json
-var version = "0.0.14-beta.0";
+var version = "0.0.14-beta.1";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {
-  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve17(dirname9(realpathSync4(fileURLToPath4(import.meta.url))), "..");
+  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve18(dirname9(realpathSync4(fileURLToPath4(import.meta.url))), "..");
 }
 if (!process.env.FAILPROOFAI_DIST_PATH) {
-  process.env.FAILPROOFAI_DIST_PATH = resolve17(dirname9(realpathSync4(fileURLToPath4(import.meta.url))), "..", "dist");
+  process.env.FAILPROOFAI_DIST_PATH = resolve18(dirname9(realpathSync4(fileURLToPath4(import.meta.url))), "..", "dist");
 }
 var args = process.argv.slice(2);
 if (args[0] === "p")
@@ -22423,6 +22681,10 @@ if (hookIdx >= 0) {
   }
 }
 async function runCli() {
+  try {
+    const { maybeReportInstall: maybeReportInstall2 } = await Promise.resolve().then(() => (init_install_check(), exports_install_check));
+    await maybeReportInstall2(version);
+  } catch {}
   const SUBCOMMANDS2 = ["policies", "policy", "auth", "audit", "config"];
   if ((args.includes("--help") || args.includes("-h")) && !SUBCOMMANDS2.includes(args[0])) {
     const extraArgs = args.filter((a) => a !== "--help" && a !== "-h");
@@ -22508,7 +22770,7 @@ EXAMPLES
 LINKS
   \u2B50 Star us:      https://github.com/failproofai/failproofai
   \uD83D\uDCD6 Docs:         https://docs.befailproof.ai/introduction
-  \uD83D\uDCAC Discord:      https://discord.gg/2zjBZP7yQJ
+  \uD83D\uDCAC Discord:      https://discord.befailproof.ai/
 `.trimStart());
     process.exit(0);
   }