failproofai 0.0.14-beta.1 → 0.0.14-beta.2

package/dist/cli.mjs

@@ -19,7 +19,7 @@ var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // package.json
-var version2 = "0.0.14-beta.1";
+var version2 = "0.0.14-beta.2";
 var init_package = () => {};
 
 // src/posthog-key.ts
@@ -727,6 +727,22 @@ function readMergedHooksConfig(cwd) {
     ...llm !== undefined ? { llm } : {}
   };
 }
+function getConfigPath() {
+  return resolve(homedir2(), ".failproofai", "policies-config.json");
+}
+function readHooksConfig() {
+  const configPath = getConfigPath();
+  if (!existsSync2(configPath)) {
+    return { enabledPolicies: [] };
+  }
+  try {
+    const raw = readFileSync(configPath, "utf8");
+    return JSON.parse(raw);
+  } catch (err) {
+    hookLogWarn(`failed to parse config at ${configPath}: ${err instanceof Error ? err.message : String(err)}`);
+    return { enabledPolicies: [] };
+  }
+}
 function getConfigPathForScope(scope, cwd) {
   switch (scope) {
     case "user":
@@ -1178,28 +1194,73 @@ function blockPushMaster(ctx) {
   }
   return allow();
 }
-function rmTargetIsAllowed(cmd, allowPaths) {
-  if (allowPaths.length === 0)
+function expandHomePrefix(path2) {
+  const m = path2.match(/^(?:~|\$HOME|\$\{HOME\})(?=$|\/)/);
+  return m ? homedir3() + path2.slice(m[0].length) : path2;
+}
+function stripTrailingGlob(path2) {
+  return path2.replace(/\/\*$/, "").replace(/\/+$/, "");
+}
+function isCatastrophicTarget(token) {
+  const raw = token.replace(/^['"]|['"]$/g, "");
+  if (raw === "")
+    return false;
+  const homePrefix = raw.match(HOME_PREFIX_RE);
+  if (!homePrefix && /^[$`]/.test(raw))
+    return true;
+  const belowRoot = homePrefix ? raw.slice(homePrefix[0].length) : raw.startsWith("/") ? raw : null;
+  if (belowRoot === null)
     return false;
-  const segments = cmd.split(/&&|\|\||[|;\n]/).map((s) => s.trim()).filter((s) => /\brm\b/.test(s));
-  if (segments.length === 0)
+  const segments = stripTrailingGlob(belowRoot).split("/").filter(Boolean);
+  if (!homePrefix && SCRATCH_ROOTS.some((r) => `/${segments.join("/")}`.startsWith(`${r}/`)))
     return false;
-  for (const seg of segments) {
-    const tokens = parseArgvTokens(seg);
-    const rmIdx = tokens.findIndex((t) => t === "rm");
-    if (rmIdx < 0)
-      continue;
-    const flagTokens = tokens.slice(rmIdx + 1).filter((t) => /^-[^-]/.test(t));
-    const longFlagsInSeg = tokens.slice(rmIdx + 1).filter((t) => /^--/.test(t));
-    if (!/r/i.test(flagTokens.join("")) && !longFlagsInSeg.some((f) => /^--recursive$/i.test(f)))
+  return segments.length <= CATASTROPHIC_DEPTH;
+}
+function recursiveDeletionTargets(seg) {
+  const tokens = parseArgvTokens(seg);
+  const findIdx = tokens.findIndex((t) => FIND_CMD_RE.test(t));
+  if (findIdx >= 0) {
+    const expr = tokens.slice(findIdx + 1);
+    const execIdx = expr.findIndex((t) => FIND_EXEC_RE.test(t));
+    const deletes = expr.includes("-delete") || execIdx >= 0 && RM_CMD_RE.test(expr[execIdx + 1] ?? "");
+    if (deletes) {
+      let start = 0;
+      while (start < expr.length && FIND_GLOBAL_OPT_RE.test(expr[start])) {
+        start += expr[start] === "-D" ? 2 : 1;
+      }
+      const rest = expr.slice(start);
+      const end = rest.findIndex((t) => FIND_EXPR_START_RE.test(t));
+      return end < 0 ? rest : rest.slice(0, end);
+    }
+  }
+  const rmIdx = tokens.findIndex((t) => RM_CMD_RE.test(t));
+  if (rmIdx >= 0) {
+    const args = tokens.slice(rmIdx + 1);
+    const shortFlags = args.filter((t) => /^-[^-]/.test(t)).join("");
+    const longFlags = args.filter((t) => /^--/.test(t));
+    const recursive = /r/i.test(shortFlags) || longFlags.some((f) => /^--recursive$/i.test(f));
+    const force = /f/.test(shortFlags) || longFlags.some((f) => /^--force$/i.test(f));
+    if (recursive && force)
+      return args.filter((t) => !t.startsWith("-"));
+  }
+  return null;
+}
+function shellSegments(cmd) {
+  return cmd.split(/&&|\|\||[|;\n]/).map((s) => s.trim()).filter((s) => s !== "");
+}
+function deletionTargetIsAllowed(cmd, allowPaths) {
+  if (allowPaths.length === 0)
+    return false;
+  const normalizedAllowPaths = allowPaths.map((p) => stripTrailingGlob(expandHomePrefix(p)) || "/");
+  let sawRecursiveDelete = false;
+  for (const seg of shellSegments(cmd)) {
+    const targets = recursiveDeletionTargets(seg);
+    if (targets === null)
       continue;
-    const pathArgs = tokens.slice(rmIdx + 1).filter((t) => !t.startsWith("-"));
-    for (const target of pathArgs) {
-      const normalized = target.replace(/\/\*$/, "").replace(/\/+$/, "") || "/";
-      const covered = allowPaths.some((p) => {
-        const np = p.replace(/\/+$/, "") || "/";
-        return normalized === np || normalized.startsWith(np + "/");
-      });
+    sawRecursiveDelete = true;
+    for (const target of targets) {
+      const normalized = stripTrailingGlob(expandHomePrefix(target)) || "/";
+      const covered = normalizedAllowPaths.some((np) => normalized === np || normalized.startsWith(np + "/"));
       if (!covered) {
         const segCovered = allowPaths.some((p) => {
           const escaped = p.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
@@ -1210,35 +1271,22 @@ function rmTargetIsAllowed(cmd, allowPaths) {
       }
     }
   }
-  return true;
+  return sawRecursiveDelete;
 }
 function blockRmRf(ctx) {
   if (ctx.toolName !== "Bash")
     return allow();
   const cmd = getCommand(ctx);
-  const hasDestructivePath = parseArgvTokens(cmd).some((token) => {
-    const normalized = token.replace(/\/\*$/, "").replace(/\/+$/, "") || (token.startsWith("/") ? "/" : "");
-    return normalized === "/" || normalized === "~" || /^\/[A-Za-z_][\w.-]*$/.test(normalized);
+  const hasCatastrophicTarget = shellSegments(cmd).some((seg) => {
+    const targets = recursiveDeletionTargets(seg);
+    return targets !== null && targets.some(isCatastrophicTarget);
   });
-  if (hasDestructivePath && (/rm\s+-[^\s]*r[^\s]*f[^\s]*/.test(cmd) || /rm\s+-[^\s]*f[^\s]*r[^\s]*/.test(cmd))) {
+  if (hasCatastrophicTarget) {
     const allowPaths = ctx.params?.allowPaths ?? [];
-    if (rmTargetIsAllowed(cmd, allowPaths))
+    if (deletionTargetIsAllowed(cmd, allowPaths))
       return allow();
     return deny("Catastrophic deletion blocked");
   }
-  if (hasDestructivePath && /\brm\b/.test(cmd)) {
-    const tokens = parseArgvTokens(cmd);
-    const shortFlags = tokens.filter((t) => /^-[^-]/.test(t)).join("");
-    const longFlags = tokens.filter((t) => /^--/.test(t));
-    const hasRecursive = /r/i.test(shortFlags) || longFlags.some((f) => /^--recursive$/i.test(f));
-    const hasForce = /f/.test(shortFlags) || longFlags.some((f) => /^--force$/i.test(f));
-    if (hasRecursive && hasForce) {
-      const allowPaths = ctx.params?.allowPaths ?? [];
-      if (rmTargetIsAllowed(cmd, allowPaths))
-        return allow();
-      return deny("Catastrophic deletion blocked");
-    }
-  }
   if (/Remove-Item\s+.*-Recurse.*-Force.*(?:[A-Z]:\\(?:\s|$)|\\\*)/i.test(cmd)) {
     return deny("Catastrophic deletion blocked");
   }
@@ -1250,12 +1298,31 @@ function blockRmRf(ctx) {
 function blockForcePush(ctx) {
   if (ctx.toolName !== "Bash")
     return allow();
-  const args = extractGitPushArgs(getCommand(ctx));
-  if (args.some((a) => FORCE_PUSH_RE.test(a))) {
-    return deny("Force-pushing is blocked");
+  for (const segment of extractGitPushArgs(getCommand(ctx))) {
+    let sawEndOfOptions = false;
+    for (const token of segment.split(/\s+/)) {
+      if (token === "--") {
+        sawEndOfOptions = true;
+        continue;
+      }
+      if (sawEndOfOptions)
+        continue;
+      if (isForcePushFlag(token)) {
+        return deny("Force-pushing is blocked");
+      }
+    }
   }
   return allow();
 }
+function isForcePushFlag(token) {
+  if (token === "--force")
+    return true;
+  if (SAFE_FORCE_PREFIXES.some((prefix) => token.startsWith(prefix)))
+    return false;
+  if (token.startsWith("--force"))
+    return true;
+  return SHORT_FLAG_BUNDLE_RE.test(token);
+}
 function blockSecretsWrite(ctx) {
   if (ctx.toolName !== "Write")
     return allow();
@@ -1836,7 +1903,7 @@ function registerBuiltinPolicies(enabledNames) {
     }
   }
 }
-var isClaudeInternalPath, isClaudeSettingsFile, SHELL_OPERATORS, SHELL_METACHAR_RE, JWT_RE, API_KEY_PATTERNS, CONNECTION_STRING_RE, PRIVATE_KEY_RE, BEARER_TOKEN_RE, SQL_TOOL_RE, DESTRUCTIVE_SQL_RE, DELETE_NO_WHERE_RE, SQL_WHERE_RE, SCHEMA_ALTER_RE, PUBLISH_CMD_RE, ENV_PRINTENV_RE, ECHO_ENV_RE, EXPORT_RE, PS_ENV_VAR_RE, PS_CHILDITEM_ENV_RE, DOTNET_GETENV_RE, CMD_ECHO_ENV_RE, ENV_FILE_PATH_RE, ENV_CMD_RE, SUDO_RE, PS_ELEVATION_RE, RUNAS_RE, CURL_PIPE_SH_RE, PS_WEB_PIPE_RE, FORCE_PUSH_RE, SECRET_FILE_RE, SECRET_FILE_ID_RSA_RE, SECRET_FILE_CREDENTIALS_RE, GIT_COMMIT_MERGE_RE, FAILPROOFAI_CLI_RE, FAILPROOFAI_UNINSTALL_RE, GIT_AMEND_RE, GIT_STASH_DROP_RE, GIT_ADD_ALL_RE, NPM_GLOBAL_RE, YARN_GLOBAL_RE, PNPM_GLOBAL_RE, BUN_GLOBAL_RE, CARGO_INSTALL_RE, PIP_SYSTEM_RE, PKG_MANAGER_DETECTORS, NOHUP_RE, SCREEN_DETACH_RE, TMUX_DETACH_RE, DISOWN_RE, BACKGROUND_AMPERSAND_RE, KUBECTL_RE, TERRAFORM_RE, AWS_CLI_RE, GCLOUD_RE, AZ_CLI_RE, HELM_RE, GH_PIPELINE_RE, gitBranchCache, READ_LIKE_CMDS, TOOL_CALL_TRACKER_MAX_BYTES = 65536, SEGMENT_SPLIT_RE, BUILTIN_POLICIES;
+var isClaudeInternalPath, isClaudeSettingsFile, SHELL_OPERATORS, SHELL_METACHAR_RE, JWT_RE, API_KEY_PATTERNS, CONNECTION_STRING_RE, PRIVATE_KEY_RE, BEARER_TOKEN_RE, SQL_TOOL_RE, DESTRUCTIVE_SQL_RE, DELETE_NO_WHERE_RE, SQL_WHERE_RE, SCHEMA_ALTER_RE, PUBLISH_CMD_RE, ENV_PRINTENV_RE, ECHO_ENV_RE, EXPORT_RE, PS_ENV_VAR_RE, PS_CHILDITEM_ENV_RE, DOTNET_GETENV_RE, CMD_ECHO_ENV_RE, ENV_FILE_PATH_RE, ENV_CMD_RE, SUDO_RE, PS_ELEVATION_RE, RUNAS_RE, CURL_PIPE_SH_RE, PS_WEB_PIPE_RE, SHORT_FLAG_BUNDLE_RE, SAFE_FORCE_PREFIXES, SECRET_FILE_RE, SECRET_FILE_ID_RSA_RE, SECRET_FILE_CREDENTIALS_RE, GIT_COMMIT_MERGE_RE, FAILPROOFAI_CLI_RE, FAILPROOFAI_UNINSTALL_RE, GIT_AMEND_RE, GIT_STASH_DROP_RE, GIT_ADD_ALL_RE, NPM_GLOBAL_RE, YARN_GLOBAL_RE, PNPM_GLOBAL_RE, BUN_GLOBAL_RE, CARGO_INSTALL_RE, PIP_SYSTEM_RE, PKG_MANAGER_DETECTORS, NOHUP_RE, SCREEN_DETACH_RE, TMUX_DETACH_RE, DISOWN_RE, BACKGROUND_AMPERSAND_RE, KUBECTL_RE, TERRAFORM_RE, AWS_CLI_RE, GCLOUD_RE, AZ_CLI_RE, HELM_RE, GH_PIPELINE_RE, gitBranchCache, HOME_PREFIX_RE, RM_CMD_RE, FIND_CMD_RE, FIND_EXEC_RE, FIND_GLOBAL_OPT_RE, FIND_EXPR_START_RE, SCRATCH_ROOTS, CATASTROPHIC_DEPTH = 2, READ_LIKE_CMDS, TOOL_CALL_TRACKER_MAX_BYTES = 65536, SEGMENT_SPLIT_RE, BUILTIN_POLICIES;
 var init_builtin_policies = __esm(() => {
   init_hook_logger();
   isClaudeInternalPath = isAgentInternalPath;
@@ -1878,7 +1945,8 @@ var init_builtin_policies = __esm(() => {
   RUNAS_RE = /(?:^|;|&&|\|\|)\s*runas\s/i;
   CURL_PIPE_SH_RE = /(?:curl|wget)\s.*\|\s*(?:sh|bash|zsh|dash|ksh|csh|tcsh|fish|ash)\b/;
   PS_WEB_PIPE_RE = /(?:Invoke-WebRequest|iwr|Invoke-RestMethod|irm)\s+.*\|\s*(?:Invoke-Expression|iex)/i;
-  FORCE_PUSH_RE = /(?:--force|-f\b)/;
+  SHORT_FLAG_BUNDLE_RE = /^-[a-zA-Z]*f[a-zA-Z]*$/;
+  SAFE_FORCE_PREFIXES = ["--force-with-lease", "--force-if-includes"];
   SECRET_FILE_RE = /\.(?:pem|key)$/;
   SECRET_FILE_ID_RSA_RE = /id_rsa/;
   SECRET_FILE_CREDENTIALS_RE = /credentials/;
@@ -1919,6 +1987,13 @@ var init_builtin_policies = __esm(() => {
   HELM_RE = /(?:^|[;\n]|&&|\|\|?|&)\s*helm(?:\s|$)/;
   GH_PIPELINE_RE = /(?:^|[;\n]|&&|\|\|?|&)\s*gh\s+(?:workflow\s+(?:run|enable|disable)|run\s+(?:rerun|cancel)|pr\s+merge|release\s+(?:create|delete)|cache\s+delete|secret\s+(?:set|delete))\b/;
   gitBranchCache = new Map;
+  HOME_PREFIX_RE = /^(?:~[A-Za-z0-9_.-]*|\$HOME|\$\{HOME\})(?=$|\/)/;
+  RM_CMD_RE = /^(?:\/\S*\/)?rm$/;
+  FIND_CMD_RE = /^(?:\/\S*\/)?find$/;
+  FIND_EXEC_RE = /^-(?:exec|execdir|ok|okdir)$/;
+  FIND_GLOBAL_OPT_RE = /^-(?:[HLP]|D|O\d*)$/;
+  FIND_EXPR_START_RE = /^(?:-|\\?[(!])/;
+  SCRATCH_ROOTS = ["/tmp", "/var/tmp"];
   READ_LIKE_CMDS = /(?:^|;|&&|\|\||\|)\s*(?:ls|find|cat|head|tail|less|more|wc|file|stat|tree|du)\s/;
   SEGMENT_SPLIT_RE = /\s*(?:&&|\|\||\||;)\s*/;
   BUILTIN_POLICIES = [
@@ -3435,6 +3510,15 @@ function discoverPolicyFiles(dir) {
     return [];
   }
 }
+function findSkippedPolicyFiles(dir) {
+  if (!existsSync3(dir))
+    return [];
+  try {
+    return readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && LOADABLE_EXT_RE.test(e.name) && !CONVENTION_FILE_RE.test(e.name) && !e.name.endsWith(".d.ts")).map((e) => e.name).sort((a, b) => a.localeCompare(b));
+  } catch {
+    return [];
+  }
+}
 async function loadSingleFile(absPath, opts) {
   const g = globalThis;
   g[LOADING_KEY] = true;
@@ -3477,10 +3561,18 @@ async function loadCustomHooks(customPoliciesPath, opts) {
   await loadSingleFile(absPath, opts);
   return getCustomHooks();
 }
+function warnSkippedPolicyFiles(dir, scope) {
+  const skipped = findSkippedPolicyFiles(dir);
+  if (skipped.length === 0)
+    return;
+  const suggest = (n) => n.replace(/\.(js|mjs|ts)$/, "-policies.$1");
+  hookLogWarn(`${scope} policies: ${skipped.length} file(s) in ${dir} are NOT loaded — ` + `the convention only loads names ending in "policies.js|mjs|ts". ` + skipped.map((n) => `${n} → rename to ${suggest(n)}`).join("; "));
+}
 async function loadAllCustomHooks(customPoliciesPath, opts) {
   clearCustomHooks();
   const conventionSources = [];
   const projectRoot = findProjectConfigDir(opts?.sessionCwd ?? process.cwd());
+  const conventionEnabled = opts?.customPoliciesEnabled !== false;
   if (customPoliciesPath) {
     const absPath = isAbsolute(customPoliciesPath) ? customPoliciesPath : resolve4(projectRoot, customPoliciesPath);
     if (existsSync3(absPath)) {
@@ -3491,7 +3583,9 @@ async function loadAllCustomHooks(customPoliciesPath, opts) {
   }
   const hooksBeforeConvention = getCustomHooks().length;
   const projectDir = resolve4(projectRoot, ".failproofai", "policies");
-  const projectFiles = discoverPolicyFiles(projectDir);
+  if (conventionEnabled)
+    warnSkippedPolicyFiles(projectDir, "project");
+  const projectFiles = conventionEnabled ? discoverPolicyFiles(projectDir) : [];
   for (const file of projectFiles) {
     const hooksBefore = getCustomHooks().length;
     await loadSingleFile(file, { conventionScope: "project" });
@@ -3505,7 +3599,9 @@ async function loadAllCustomHooks(customPoliciesPath, opts) {
     }
   }
   const userDir = resolve4(homedir4(), ".failproofai", "policies");
-  const userFiles = discoverPolicyFiles(userDir);
+  if (conventionEnabled)
+    warnSkippedPolicyFiles(userDir, "user");
+  const userFiles = conventionEnabled ? discoverPolicyFiles(userDir) : [];
   for (const file of userFiles) {
     const hooksBefore = getCustomHooks().length;
     await loadSingleFile(file, { conventionScope: "user" });
@@ -3520,7 +3616,9 @@ async function loadAllCustomHooks(customPoliciesPath, opts) {
   }
   const allHooks = getCustomHooks();
   const conventionCount = allHooks.length - hooksBeforeConvention;
-  if (projectFiles.length > 0 || userFiles.length > 0) {
+  if (!conventionEnabled) {
+    hookLogInfo("convention policies: DISABLED via customPoliciesEnabled:false — " + "no .failproofai/policies/ files loaded");
+  } else if (projectFiles.length > 0 || userFiles.length > 0) {
     hookLogInfo(`convention policies: ${projectFiles.length} project file(s), ${userFiles.length} user file(s), ${conventionCount} hook(s)`);
   }
   const hookNameToScope = new Map;
@@ -3540,7 +3638,7 @@ async function loadAllCustomHooks(customPoliciesPath, opts) {
   }
   return { hooks: allHooks, conventionSources };
 }
-var LOADING_KEY = "__FAILPROOFAI_LOADING_HOOKS__", CONVENTION_FILE_RE;
+var LOADING_KEY = "__FAILPROOFAI_LOADING_HOOKS__", CONVENTION_FILE_RE, LOADABLE_EXT_RE;
 var init_custom_hooks_loader = __esm(() => {
   init_hook_logger();
   init_custom_hooks_registry();
@@ -3549,6 +3647,7 @@ var init_custom_hooks_loader = __esm(() => {
   init_hook_telemetry2();
   init_telemetry_id2();
   CONVENTION_FILE_RE = /policies\.(js|mjs|ts)$/;
+  LOADABLE_EXT_RE = /\.(js|mjs|ts)$/;
 });
 
 // src/hooks/hook-activity-store.ts
@@ -4761,17 +4860,20 @@ var init_sqlite_reader = () => {};
 function formatDuration(ms) {
   if (ms < 1000)
     return `${ms}ms`;
-  const seconds = ms / 1000;
-  if (seconds < 60)
-    return `${seconds.toFixed(1)}s`;
-  const totalMinutes = Math.floor(seconds / 60);
-  if (totalMinutes >= 60) {
-    const hours = Math.floor(totalMinutes / 60);
-    const remainingMinutes = totalMinutes % 60;
-    return `${hours}h ${remainingMinutes}m`;
+  const deciseconds = Math.round(ms / 100);
+  if (deciseconds < 600) {
+    return `${(deciseconds / 10).toFixed(1)}s`;
+  }
+  const totalSeconds = Math.round(ms / 1000);
+  if (totalSeconds < 3600) {
+    const minutes2 = Math.floor(totalSeconds / 60);
+    const seconds = totalSeconds % 60;
+    return `${minutes2}m ${seconds}s`;
   }
-  const remainingSeconds = (seconds % 60).toFixed(0);
-  return `${totalMinutes}m ${remainingSeconds}s`;
+  const totalMinutes = Math.round(ms / 60000);
+  const hours = Math.floor(totalMinutes / 60);
+  const minutes = totalMinutes % 60;
+  return `${hours}h ${minutes}m`;
 }
 
 // lib/hermes-sessions.ts
@@ -8191,7 +8293,10 @@ async function handleHookEvent(eventType, cli = "claude") {
     const config = readMergedHooksConfig(session.cwd);
     clearPolicies();
     registerBuiltinPolicies(config.enabledPolicies);
-    const loadResult = await loadAllCustomHooks(config.customPoliciesPath, { sessionCwd: session.cwd });
+    const loadResult = await loadAllCustomHooks(config.customPoliciesPath, {
+      sessionCwd: session.cwd,
+      customPoliciesEnabled: config.customPoliciesEnabled
+    });
     const customHooksList = loadResult.hooks;
     const conventionHookNames = new Set(loadResult.conventionSources.flatMap((s) => s.hookNames));
     for (const hook of customHooksList) {
@@ -17162,6 +17267,11 @@ import * as readline from "node:readline";
 function colorsEnabled(out) {
   return !!out.isTTY && !process.env.NO_COLOR;
 }
+function brandAnsi(role) {
+  const h = HUES[role];
+  const code = truecolorEnabled() ? `38;2;${h.rgb.join(";")}` : h.basic;
+  return `${ESC}[${code}m`;
+}
 function truecolorEnabled() {
   return /truecolor|24bit/i.test(process.env.COLORTERM || "");
 }
@@ -17458,7 +17568,7 @@ function multiSelect(opts) {
   const choices = opts.choices;
   const minSelected = opts.minSelected ?? 0;
   const noun = opts.summaryNoun ?? "selected";
-  const checked = choices.map((ch) => !!ch.checked);
+  const checked = choices.map((ch) => ch.locked ? ch.checked ?? true : !!ch.checked);
   if (!stdin.isTTY || !stdout.isTTY) {
     return Promise.resolve(choices.filter((_, i) => checked[i]).map((ch) => ch.value));
   }
@@ -17474,7 +17584,7 @@ function multiSelect(opts) {
     renderRow: (index, active, budget) => {
       const choice = choices[index];
       const caret = active ? c.pink(CARET) : " ";
-      const box = checked[index] ? c.pink(CHECK_ON) : c.dim(CHECK_OFF);
+      const box = choice.locked ? checked[index] ? c.guide(CHECK_ON) : c.dim(CHECK_OFF) : checked[index] ? c.pink(CHECK_ON) : c.dim(CHECK_OFF);
       const rawLabel = choice.label.padEnd(nameCol);
       const label = active ? c.pinkBold(rawLabel) : checked[index] ? rawLabel : c.dim(rawLabel);
       const hint = choice.hint ? `  ${c.dim(ellipsize(choice.hint, budget))}` : "";
@@ -17484,19 +17594,23 @@ function multiSelect(opts) {
     footer: opts.hint ?? "↑/↓ move · space select · ctrl+a all · enter confirm",
     onKey: (key, cursor2) => {
       if (key.name === "space") {
+        if (choices[cursor2]?.locked)
+          return "redraw";
         checked[cursor2] = !checked[cursor2];
         warn = false;
         return "redraw";
       }
       if (key.ctrl && key.name === "a") {
-        const allOn = checked.every(Boolean);
-        for (let i = 0;i < checked.length; i++)
-          checked[i] = !allOn;
+        const allOn = choices.every((ch, i) => checked[i] || ch.locked);
+        for (let i = 0;i < checked.length; i++) {
+          checked[i] = choices[i]?.locked ? true : !allOn;
+        }
         return "redraw";
       }
       if (key.name === "return") {
         const selected = choices.filter((_, i) => checked[i]).map((ch) => ch.value);
-        if (selected.length < minSelected) {
+        const chosen = choices.filter((ch, i) => checked[i] && !ch.locked).length;
+        if (chosen < minSelected) {
           warn = true;
           return "redraw";
         }
@@ -17504,10 +17618,10 @@ function multiSelect(opts) {
       }
       return;
     },
-    summaryFor: (values) => values === null ? "cancelled" : summarize(choices.filter((ch) => values.includes(ch.value)).map((ch) => ch.label), noun)
+    summaryFor: (values) => values === null ? "cancelled" : summarize(choices.filter((ch) => values.includes(ch.value) && !ch.summaryExclude).map((ch) => ch.label), noun)
   });
 }
-var ESC = "\x1B", BAR = "│", BAR_END = "└", STEP_ACTIVE = "◆", STEP_DONE = "◇", RADIO_ON = "●", RADIO_OFF = "○", CHECK_ON = "◼", CHECK_OFF = "◻", CARET = "❯", FLOWER = "❋", HUES, LOGO_MIN_COLS = 22, TAGLINE = "end-to-end failure layer for ai agents", LOGO_GRID, LOGO_TEAL, LOGO_PINK, WINDOW = 8;
+var ESC = "\x1B", BAR = "│", BAR_END = "└", STEP_ACTIVE = "◆", STEP_DONE = "◇", RADIO_ON = "●", RADIO_OFF = "○", CHECK_ON = "◼", CHECK_OFF = "◻", CARET = "❯", FLOWER = "❋", HUES, ANSI_RESET, ANSI_BOLD, ANSI_DIM, LOGO_MIN_COLS = 22, TAGLINE = "end-to-end failure layer for ai agents", LOGO_GRID, LOGO_TEAL, LOGO_PINK, WINDOW = 8;
 var init_tui = __esm(() => {
   HUES = {
     guide: { rgb: [102, 209, 181], basic: "36" },
@@ -17516,29 +17630,30 @@ var init_tui = __esm(() => {
     warn: { rgb: [227, 179, 65], basic: "33" },
     dim: { rgb: [107, 118, 132], basic: "2" }
   };
+  ANSI_RESET = `${ESC}[0m`;
+  ANSI_BOLD = `${ESC}[1m`;
+  ANSI_DIM = `${ESC}[2m`;
   LOGO_GRID = [
-    "...tt...........",
-    "..tttt..........",
-    ".tttttt.........",
-    ".tttttt.....ppp.",
-    "..tttt......ppp.",
-    "...tt.......ppp.",
-    "............ppp.",
-    "............ppp.",
-    "..pppp......ppp.",
-    "..pppp......ppp.",
-    "..pppp......ppp.",
-    ".pppppp.....ppp.",
-    ".pppppp.....ppp.",
-    ".pppppp.....ppp.",
-    ".pppppp.....ppp.",
-    "..pppp......ppp.",
-    "..pppp......ppp.",
-    "..pppp......ppp.",
-    "..ppppppppppppp.",
-    "..ppppppppppppp.",
-    "..ppppppppppppp.",
-    "..ppppppppppppp."
+    "...tt........",
+    "..tttt.......",
+    ".tttttt..pppp",
+    ".tttttt..pppp",
+    "..tttt...pppp",
+    "...tt....pppp",
+    ".........pppp",
+    ".........pppp",
+    "..pppp...pppp",
+    "..pppp...pppp",
+    "..pppp...pppp",
+    ".pppppp..pppp",
+    ".pppppp..pppp",
+    ".pppppp..pppp",
+    ".pppppp..pppp",
+    "..pppp...pppp",
+    "..ppppppppppp",
+    "..ppppppppppp",
+    "..ppppppppppp",
+    "..ppppppppppp"
   ];
   LOGO_TEAL = HUES.guide.rgb;
   LOGO_PINK = HUES.logoPink.rgb;
@@ -19259,11 +19374,12 @@ async function runAuthCli(args) {
     return runLogout();
   return runWhoami();
 }
-var HELP, LEGACY_FLAG_TO_SUB, SUBCOMMANDS, DIM = "\x1B[2m", RESET = "\x1B[0m", PINK = "\x1B[38;5;204m", GREEN = "\x1B[38;5;120m", RED = "\x1B[38;5;197m";
+var HELP, LEGACY_FLAG_TO_SUB, SUBCOMMANDS, COLOR, DIM, RESET, PINK, GREEN, RED;
 var init_cli = __esm(() => {
   init_api_server_client();
   init_auth_store();
   init_cli_error();
+  init_tui();
   init_hook_telemetry2();
   init_telemetry_id2();
   HELP = `
@@ -19292,6 +19408,12 @@ EXAMPLES
     "--whoami": "whoami"
   };
   SUBCOMMANDS = new Set(["login", "logout", "whoami", "help"]);
+  COLOR = colorsEnabled(process.stdout);
+  DIM = COLOR ? ANSI_DIM : "";
+  RESET = COLOR ? ANSI_RESET : "";
+  PINK = COLOR ? brandAnsi("pink") : "";
+  GREEN = COLOR ? brandAnsi("guide") : "";
+  RED = COLOR ? brandAnsi("warn") : "";
 });
 
 // lib/claude-sessions.ts
@@ -21665,7 +21787,7 @@ async function runAuditCli(args) {
   const { launch: launch2 } = await Promise.resolve().then(() => (init_launch(), exports_launch));
   launch2("start");
 }
-var DASHBOARD_PORT = 8020, AUDIT_STAGES, HELP2, RESET2 = "\x1B[0m", DIM2 = "\x1B[2m", BOLD = "\x1B[1m", PINK2 = "\x1B[38;5;204m", GREEN2 = "\x1B[38;5;120m", CYAN = "\x1B[38;5;81m", SPINNER;
+var DASHBOARD_PORT = 8020, AUDIT_STAGES, HELP2, RESET2, DIM2, BOLD, PINK2, GREEN2, CYAN, SPINNER;
 var init_cli2 = __esm(() => {
   init_audit();
   init_dashboard_cache();
@@ -21673,6 +21795,7 @@ var init_cli2 = __esm(() => {
   init_telemetry_id2();
   init_telemetry_sanitize();
   init_open_browser();
+  init_tui();
   AUDIT_STAGES = [
     { label: "discovering transcripts", detail: "walking ~/.claude, ~/.codex, ~/.cursor, …" },
     { label: "parsing session logs", detail: "reading JSONL + sqlite session stores" },
@@ -21696,6 +21819,12 @@ WHAT IT DOES
   Runs fully offline — no account or network required. Press Ctrl+C to stop the
   dashboard server when you're done.
 `.trimStart();
+  RESET2 = ANSI_RESET;
+  DIM2 = ANSI_DIM;
+  BOLD = ANSI_BOLD;
+  PINK2 = brandAnsi("pink");
+  GREEN2 = brandAnsi("guide");
+  CYAN = brandAnsi("guide");
   SPINNER = ["⠋", "⠙", "⠹", "⠸", "⠼", "⠴", "⠦", "⠧", "⠇", "⠏"];
 });
 
@@ -22225,7 +22354,7 @@ async function runAuditCli2(args) {
   const { launch: launch2 } = await Promise.resolve().then(() => (init_launch(), exports_launch));
   launch2("start");
 }
-var DASHBOARD_PORT2 = 8020, AUDIT_STAGES2, HELP3, RESET3 = "\x1B[0m", DIM3 = "\x1B[2m", BOLD2 = "\x1B[1m", PINK3 = "\x1B[38;5;204m", GREEN3 = "\x1B[38;5;120m", CYAN2 = "\x1B[38;5;81m", SPINNER2;
+var DASHBOARD_PORT2 = 8020, AUDIT_STAGES2, HELP3, RESET3, DIM3, BOLD2, PINK3, GREEN3, CYAN2, SPINNER2;
 var init_cli3 = __esm(() => {
   init_audit();
   init_dashboard_cache();
@@ -22233,6 +22362,7 @@ var init_cli3 = __esm(() => {
   init_telemetry_id2();
   init_telemetry_sanitize();
   init_open_browser();
+  init_tui();
   AUDIT_STAGES2 = [
     { label: "discovering transcripts", detail: "walking ~/.claude, ~/.codex, ~/.cursor, …" },
     { label: "parsing session logs", detail: "reading JSONL + sqlite session stores" },
@@ -22256,23 +22386,32 @@ WHAT IT DOES
   Runs fully offline — no account or network required. Press Ctrl+C to stop the
   dashboard server when you're done.
 `.trimStart();
+  RESET3 = ANSI_RESET;
+  DIM3 = ANSI_DIM;
+  BOLD2 = ANSI_BOLD;
+  PINK3 = brandAnsi("pink");
+  GREEN3 = brandAnsi("guide");
+  CYAN2 = brandAnsi("guide");
   SPINNER2 = ["⠋", "⠙", "⠹", "⠸", "⠼", "⠴", "⠦", "⠧", "⠇", "⠏"];
 });
 
 // src/hooks/configure-wizard.ts
 var exports_configure_wizard = {};
 __export(exports_configure_wizard, {
+  setCustomPoliciesEnabled: () => setCustomPoliciesEnabled,
   runConfigureWizard: () => runConfigureWizard,
   reviewLines: () => reviewLines,
   resolvePresetSelection: () => resolvePresetSelection,
   maybeFirstRunConfigure: () => maybeFirstRunConfigure,
   markLauncherSeen: () => markLauncherSeen,
   hasSeenLauncher: () => hasSeenLauncher,
+  describeCustomPolicies: () => describeCustomPolicies,
+  clisSupportingScope: () => clisSupportingScope,
   buildScopeChoices: () => buildScopeChoices,
   buildPresetChoices: () => buildPresetChoices,
   buildAgentChoices: () => buildAgentChoices
 });
-import { existsSync as existsSync19, mkdirSync as mkdirSync10, writeFileSync as writeFileSync9 } from "node:fs";
+import { existsSync as existsSync19, mkdirSync as mkdirSync10, writeFileSync as writeFileSync9, readFileSync as readFileSync16 } from "node:fs";
 import { homedir as homedir30 } from "node:os";
 import { resolve as resolve16, sep as sep5 } from "node:path";
 async function emit(event, props) {
@@ -22302,6 +22441,9 @@ function buildScopeChoices(cwd) {
     }
   ];
 }
+function clisSupportingScope(scope) {
+  return INTEGRATION_TYPES.filter((id) => getIntegration(id).scopes.includes(scope));
+}
 function buildAgentChoices(scope, cwd) {
   const detected = new Set(detectInstalledClis());
   const ordered = [
@@ -22311,6 +22453,17 @@ function buildAgentChoices(scope, cwd) {
   return ordered.map((id) => {
     const integration = getIntegration(id);
     const isDetected = detected.has(id);
+    const supported = integration.scopes.includes(scope);
+    if (!supported) {
+      return {
+        label: integration.displayName,
+        value: id,
+        checked: false,
+        locked: true,
+        section: "Global only · not configurable per-project",
+        hint: `supports ${integration.scopes.join(", ")} scope — rerun with "Everywhere I code"`
+      };
+    }
     let installedHere = false;
     try {
       installedHere = integration.hooksInstalledInSettings(scope, cwd);
@@ -22326,28 +22479,102 @@ function buildAgentChoices(scope, cwd) {
     };
   });
 }
-function buildPresetChoices() {
-  const choices = POLICY_PRESETS.map((p) => ({ label: p.label, value: p.id, hint: p.description }));
+function buildPresetChoices(cwd = process.cwd(), enabled = true) {
+  const choices = POLICY_PRESETS.map((p) => ({
+    label: p.label,
+    value: p.id,
+    hint: p.description
+  }));
   choices.push({
     label: "Everything",
     value: EVERYTHING,
     hint: `all ${resolveEverything().length} policies`
   });
+  const custom = describeCustomPolicies(cwd);
+  const skipped = custom.warnings.length;
+  const plural = (n) => `${n} file${n === 1 ? "" : "s"}`;
+  const skippedNote = skipped > 0 ? ` · ${skipped} skipped, see next screen` : "";
+  if (custom.fileCount > 0) {
+    choices.push({
+      label: "Custom",
+      value: CUSTOM,
+      checked: enabled,
+      hint: `${plural(custom.fileCount)} in ${custom.scopes.join(" + ")}${skippedNote}`
+    });
+  } else {
+    choices.push({
+      label: "Custom",
+      value: CUSTOM,
+      locked: true,
+      checked: false,
+      summaryExclude: true,
+      hint: skipped > 0 ? `${plural(skipped)} found but NOT loaded — see next screen` : "none yet · drop *-policies.mjs in .failproofai/policies/"
+    });
+  }
   return choices;
 }
 function resolvePresetSelection(values) {
-  if (values.includes(EVERYTHING))
+  const selected = values.filter((v) => v !== CUSTOM);
+  if (selected.includes(EVERYTHING))
     return resolveEverything();
-  return [...new Set(values.flatMap((id) => resolvePreset(id)))];
+  return [...new Set(selected.flatMap((id) => resolvePreset(id)))];
+}
+function setCustomPoliciesEnabled(scope, cwd, enabled) {
+  if (enabled === undefined)
+    return;
+  const path3 = getConfigPathForScope(scope, cwd);
+  let config = {};
+  try {
+    if (existsSync19(path3))
+      config = JSON.parse(readFileSync16(path3, "utf8"));
+  } catch {
+    return;
+  }
+  if (enabled)
+    delete config.customPoliciesEnabled;
+  else
+    config.customPoliciesEnabled = false;
+  try {
+    writeFileSync9(path3, JSON.stringify(config, null, 2) + `
+`, "utf8");
+  } catch {}
+}
+function describeCustomPolicies(cwd) {
+  const active = [];
+  const warnings = [];
+  const scopes = [];
+  let fileCount = 0;
+  const dirs = [
+    { dir: resolve16(cwd, ".failproofai", "policies"), label: "project" },
+    { dir: resolve16(homedir30(), ".failproofai", "policies"), label: "global" }
+  ];
+  for (const { dir, label } of dirs) {
+    const found = discoverPolicyFiles(dir);
+    if (found.length > 0) {
+      active.push(`${found.length} file${found.length === 1 ? "" : "s"} (${label})`);
+      scopes.push(label);
+      fileCount += found.length;
+    }
+    for (const name of findSkippedPolicyFiles(dir)) {
+      warnings.push(`! ${homeify(resolve16(dir, name))} is NOT loaded — rename to ` + `${name.replace(/\.(js|mjs|ts)$/, "-policies.$1")}`);
+    }
+  }
+  return { active, warnings, fileCount, scopes };
 }
 function reviewLines(state) {
-  const { scope, clis, policies, cwd } = state;
+  const { scope, clis, policies, cwd, customEnabled } = state;
   const where = scope === "project" ? `This project (${homeify(cwd)})` : "Everywhere (global)";
   const lines = [];
   const assistantNames = clis.map((c3) => getIntegration(c3).displayName);
   lines.push(`  Where      : ${where}`);
   lines.push(`  Assistants : ${assistantNames.length ? summarize(assistantNames, "assistants") : "(none)"}`);
   lines.push(`  Policies   : ${policies.length} enabled`);
+  const custom = describeCustomPolicies(cwd);
+  if (custom.active.length > 0) {
+    lines.push(`  Custom     : ${custom.active.join(" · ")} ${customEnabled === false ? "— DISABLED, will not load" : DIM_NOTE}`);
+  }
+  for (const warning of custom.warnings)
+    lines.push(`  ${warning}`);
   lines.push("");
   lines.push("  This will update:");
   for (const cli of clis) {
@@ -22437,7 +22664,8 @@ Use the flag form instead, e.g.:
       {
         label: "Everything available",
         value: ALL_CLIS,
-        hint: `protect all ${INTEGRATION_TYPES.length} supported CLIs`
+        hint: `protect all ${clisSupportingScope(scope).length} CLIs configurable here`,
+        summaryExclude: true
       },
       ...buildAgentChoices(scope, cwd)
     ],
@@ -22449,10 +22677,14 @@ Use the flag form instead, e.g.:
   });
   if (clisSel === null)
     return cancel();
-  const clis = clisSel.includes(ALL_CLIS) ? [...INTEGRATION_TYPES] : clisSel.filter((v) => v !== ALL_CLIS);
+  const supported = new Set(clisSupportingScope(scope));
+  const clis = (clisSel.includes(ALL_CLIS) ? [...INTEGRATION_TYPES] : clisSel.filter((v) => v !== ALL_CLIS)).filter((id) => supported.has(id));
+  const customEnabledBefore = readHooksConfig().customPoliciesEnabled !== false;
+  const presetChoices = buildPresetChoices(cwd, customEnabledBefore);
+  const hasCustomFiles = describeCustomPolicies(cwd).fileCount > 0;
   const presets = await multiSelect({
     message: "What should we guard against?",
-    choices: buildPresetChoices(),
+    choices: presetChoices,
     minSelected: 1,
     summaryNoun: "bundles",
     hint: "space toggles · combine presets · ↵ confirm",
@@ -22462,9 +22694,10 @@ Use the flag form instead, e.g.:
   if (presets === null)
     return cancel();
   const policies = resolvePresetSelection(presets);
+  const customEnabled = hasCustomFiles ? presets.includes(CUSTOM) : undefined;
   const decision = await selectOne({
     message: "Ready to apply?",
-    body: reviewLines({ scope, clis, policies, cwd }),
+    body: reviewLines({ scope, clis, policies, cwd, customEnabled }),
     choices: [
       { label: "Yes, apply now", value: "apply", hint: "write the config" },
       { label: "Cancel", value: "cancel", hint: "quit, no changes" }
@@ -22482,13 +22715,15 @@ Use the flag form instead, e.g.:
     source: presets.join("+")
   });
   await installHooks2(policies, scope, cwd, false, "configure-wizard", undefined, false, clis, { replace: true, quiet: true });
+  setCustomPoliciesEnabled(scope, cwd, customEnabled);
   await applied;
   markLauncherSeen();
-  const agentNames = clis.map((c3) => getIntegration(c3).displayName).join(", ");
-  outro(`Setup complete — ${policies.length} policies guarding ${agentNames}.`, { ok: true }, stdout);
+  const customNote = customEnabled === true ? " + your custom policies" : customEnabled === false ? " · custom policies DISABLED" : "";
+  const assistants = `${clis.length} assistant${clis.length === 1 ? "" : "s"}`;
+  outro(`Setup complete — ${policies.length} policies${customNote} · ${assistants}`, { ok: true }, stdout);
   return { applied: true, scope, clis, policies };
 }
-var EVERYTHING = "__everything__", ALL_CLIS = "__all_clis__";
+var EVERYTHING = "__everything__", ALL_CLIS = "__all_clis__", CUSTOM = "__custom__", DIM_NOTE = "(auto-loaded)";
 var init_configure_wizard = __esm(() => {
   init_tui();
   init_integrations();
@@ -22496,6 +22731,7 @@ var init_configure_wizard = __esm(() => {
   init_manager2();
   init_hooks_config();
   init_policy_presets();
+  init_custom_hooks_loader();
   init_hook_telemetry2();
   init_telemetry_id2();
 });
@@ -22621,7 +22857,7 @@ import { realpathSync as realpathSync4 } from "fs";
 import { dirname as dirname9, resolve as resolve18 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 // package.json
-var version = "0.0.14-beta.1";
+var version = "0.0.14-beta.2";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {