failproofai 0.0.14 → 0.0.15-beta.1

package/dist/cli.mjs

@@ -19,7 +19,7 @@ var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // package.json
-var version2 = "0.0.14";
+var version2 = "0.0.15-beta.1";
 var init_package = () => {};
 
 // src/posthog-key.ts
@@ -156,7 +156,7 @@ var init_telemetry_id = __esm(() => {
 });
 
 // src/hooks/types.ts
-var HOOK_SCOPES, INTEGRATION_TYPES, CODEX_HOOK_SCOPES, CODEX_HOOK_EVENT_TYPES, CODEX_EVENT_MAP, CODEX_TOOL_MAP, HERMES_TOOL_MAP, HERMES_TOOL_INPUT_MAP, HERMES_HOOK_SCOPES, HERMES_HOOK_EVENT_TYPES, HERMES_EVENT_MAP, COPILOT_HOOK_SCOPES, COPILOT_HOOK_EVENT_TYPES, COPILOT_TOOL_MAP, COPILOT_TOOL_INPUT_MAP, CURSOR_HOOK_SCOPES, CURSOR_HOOK_EVENT_TYPES, CURSOR_EVENT_MAP, CURSOR_TOOL_MAP, OPENCODE_HOOK_SCOPES, OPENCODE_HOOK_EVENT_TYPES, OPENCODE_TOOL_MAP, OPENCODE_TOOL_INPUT_MAP, PI_HOOK_SCOPES, PI_HOOK_EVENT_TYPES, PI_EVENT_MAP, PI_TOOL_MAP, PI_TOOL_INPUT_MAP, OPENCLAW_HOOK_SCOPES, OPENCLAW_HOOK_EVENT_TYPES, OPENCLAW_EVENT_MAP, OPENCLAW_TOOL_MAP, OPENCLAW_TOOL_INPUT_MAP, FACTORY_HOOK_SCOPES, FACTORY_HOOK_EVENT_TYPES, FACTORY_TOOL_MAP, DEVIN_HOOK_SCOPES, DEVIN_HOOK_EVENT_TYPES, DEVIN_TOOL_MAP, ANTIGRAVITY_HOOK_SCOPES, ANTIGRAVITY_HOOK_EVENT_TYPES, ANTIGRAVITY_EVENT_MAP, ANTIGRAVITY_TOOL_MAP, ANTIGRAVITY_TOOL_INPUT_MAP, GOOSE_HOOK_SCOPES, GOOSE_HOOK_EVENT_TYPES, GOOSE_TOOL_MAP, GOOSE_TOOL_INPUT_MAP, HOOK_EVENT_TYPES, FAILPROOFAI_HOOK_MARKER = "__failproofai_hook__";
+var HOOK_SCOPES, INTEGRATION_TYPES, CODEX_HOOK_SCOPES, CODEX_HOOK_EVENT_TYPES, CODEX_EVENT_MAP, CODEX_TOOL_MAP, HERMES_TOOL_MAP, HERMES_TOOL_INPUT_MAP, HERMES_HOOK_SCOPES, HERMES_HOOK_EVENT_TYPES, HERMES_EVENT_MAP, COPILOT_HOOK_SCOPES, COPILOT_HOOK_EVENT_TYPES, COPILOT_TOOL_MAP, COPILOT_TOOL_INPUT_MAP, CURSOR_HOOK_SCOPES, CURSOR_HOOK_EVENT_TYPES, CURSOR_EVENT_MAP, CURSOR_TOOL_MAP, OPENCODE_HOOK_SCOPES, OPENCODE_HOOK_EVENT_TYPES, OPENCODE_TOOL_MAP, OPENCODE_TOOL_INPUT_MAP, PI_HOOK_SCOPES, PI_HOOK_EVENT_TYPES, PI_EVENT_MAP, PI_TOOL_MAP, PI_TOOL_INPUT_MAP, OPENCLAW_HOOK_SCOPES, OPENCLAW_HOOK_EVENT_TYPES, OPENCLAW_EVENT_MAP, OPENCLAW_TOOL_MAP, OPENCLAW_TOOL_INPUT_MAP, FACTORY_HOOK_SCOPES, FACTORY_HOOK_EVENT_TYPES, FACTORY_TOOL_MAP, DEVIN_HOOK_SCOPES, DEVIN_HOOK_EVENT_TYPES, DEVIN_TOOL_MAP, ANTIGRAVITY_HOOK_SCOPES, ANTIGRAVITY_HOOK_EVENT_TYPES, ANTIGRAVITY_EVENT_MAP, ANTIGRAVITY_TOOL_MAP, ANTIGRAVITY_TOOL_INPUT_MAP, GOOSE_HOOK_SCOPES, GOOSE_HOOK_EVENT_TYPES, GOOSE_TOOL_MAP, GOOSE_TOOL_INPUT_MAP, HOOK_EVENT_TYPES, CLAUDE_INSTALL_EVENT_TYPES, FAILPROOFAI_HOOK_MARKER = "__failproofai_hook__";
 var init_types = __esm(() => {
   HOOK_SCOPES = ["user", "project", "local"];
   INTEGRATION_TYPES = ["claude", "codex", "copilot", "cursor", "opencode", "pi", "hermes", "openclaw", "factory", "devin", "antigravity", "goose"];
@@ -516,6 +516,7 @@ var init_types = __esm(() => {
     "PostToolBatch",
     "Setup"
   ];
+  CLAUDE_INSTALL_EVENT_TYPES = HOOK_EVENT_TYPES.filter((e) => e !== "WorktreeCreate");
 });
 
 // src/hooks/tool-name-canonicalize.ts
@@ -668,6 +669,9 @@ var init_hook_logger = __esm(() => {
 import { readFileSync, writeFileSync, existsSync as existsSync2, mkdirSync as mkdirSync2, statSync as statSync2 } from "node:fs";
 import { resolve, dirname } from "node:path";
 import { homedir as homedir2 } from "node:os";
+function configuredCustomPolicyPaths(config) {
+  return config.customPoliciesPaths ?? (config.customPoliciesPath ? [config.customPoliciesPath] : []);
+}
 function readConfigAt(path2) {
   if (!existsSync2(path2))
     return {};
@@ -718,12 +722,20 @@ function readMergedHooksConfig(cwd) {
       }
     }
   }
-  const customPoliciesPath = project.customPoliciesPath ?? local.customPoliciesPath ?? global_.customPoliciesPath;
+  const customPoliciesPaths = [project, local, global_].map((scope) => scope.customPoliciesPaths !== undefined ? scope.customPoliciesPaths : scope.customPoliciesPath !== undefined ? [scope.customPoliciesPath] : undefined).find((paths) => paths !== undefined);
+  const disabledCustomPolicies = new Set([
+    ...project.disabledCustomPolicies ?? [],
+    ...local.disabledCustomPolicies ?? [],
+    ...global_.disabledCustomPolicies ?? []
+  ]);
+  const customPoliciesEnabled = project.customPoliciesEnabled ?? local.customPoliciesEnabled ?? global_.customPoliciesEnabled;
   const llm = project.llm ?? local.llm ?? global_.llm;
   return {
     enabledPolicies: [...enabledSet],
     ...Object.keys(mergedParams).length > 0 ? { policyParams: mergedParams } : {},
-    ...customPoliciesPath !== undefined ? { customPoliciesPath } : {},
+    ...customPoliciesPaths !== undefined ? { customPoliciesPaths } : {},
+    ...disabledCustomPolicies.size ? { disabledCustomPolicies: [...disabledCustomPolicies] } : {},
+    ...customPoliciesEnabled !== undefined ? { customPoliciesEnabled } : {},
     ...llm !== undefined ? { llm } : {}
   };
 }
@@ -775,6 +787,31 @@ function writeScopedHooksConfig(config, scope, cwd) {
   writeFileSync(configPath, JSON.stringify(config, null, 2) + `
 `, "utf8");
 }
+function syncConventionPolicies(entries, scope, cwd) {
+  const configPath = getConfigPathForScope(scope, cwd);
+  if (!existsSync2(configPath) && entries.length === 0)
+    return false;
+  if (existsSync2(configPath)) {
+    try {
+      JSON.parse(readFileSync(configPath, "utf8"));
+    } catch {
+      hookLogWarn(`not recording convention policies: ${configPath} is not valid JSON — ` + `fix the syntax error and re-run. Nothing was written.`);
+      return false;
+    }
+  }
+  const config = readScopedHooksConfig(scope, cwd);
+  const sorted = [...entries].sort((a, b) => a.file.localeCompare(b.file));
+  const next = { ...config };
+  if (sorted.length === 0)
+    delete next.conventionPolicies;
+  else
+    next.conventionPolicies = sorted;
+  if (JSON.stringify(next.conventionPolicies ?? null) === JSON.stringify(config.conventionPolicies ?? null)) {
+    return false;
+  }
+  writeScopedHooksConfig(next, scope, cwd);
+  return true;
+}
 var init_hooks_config = __esm(() => {
   init_hook_logger();
 });
@@ -2752,6 +2789,16 @@ You MUST complete the above action NOW. Do NOT ask the user for confirmation —
             decision: "deny"
           };
         }
+        if (eventType === "UserPromptSubmit") {
+          return {
+            exitCode: 0,
+            stdout: JSON.stringify({ continue: false, user_message: blockedMessage }),
+            stderr: "",
+            policyName: policy.name,
+            reason,
+            decision: "deny"
+          };
+        }
         const response = {
           permission: "deny",
           user_message: blockedMessage,
@@ -2928,6 +2975,28 @@ You MUST complete the above action NOW. Do NOT ask the user for confirmation —
           decision: "deny"
         };
       }
+      if (session?.cli === "copilot") {
+        if (eventType === "UserPromptSubmit") {
+          return {
+            exitCode: 0,
+            stdout: JSON.stringify({ decision: "block", reason: blockedMessage }),
+            stderr: "",
+            policyName: policy.name,
+            reason,
+            decision: "deny"
+          };
+        }
+        if (eventType === "PermissionRequest") {
+          return {
+            exitCode: 0,
+            stdout: JSON.stringify({ behavior: "deny", message: blockedMessage }),
+            stderr: "",
+            policyName: policy.name,
+            reason,
+            decision: "deny"
+          };
+        }
+      }
       if (eventType === "PermissionRequest") {
         const response = {
           hookSpecificOutput: {
@@ -3528,7 +3597,7 @@ async function loadSingleFile(absPath, opts) {
     const distUrl = distIndex ? pathToFileURL2(distIndex).href : null;
     tmpFiles = await rewriteFileTree(absPath, distUrl, distIndex);
     const entryTmp = absPath + TMP_SUFFIX;
-    const fileUrl = pathToFileURL2(entryTmp).href;
+    const fileUrl = `${pathToFileURL2(entryTmp).href}?v=${++loadSequence}`;
     await import(fileUrl);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -3561,6 +3630,12 @@ async function loadCustomHooks(customPoliciesPath, opts) {
   await loadSingleFile(absPath, opts);
   return getCustomHooks();
 }
+function customPolicyId(file, name) {
+  return `custom:${file}:${name}`;
+}
+function conventionPolicyId(scope, file, name) {
+  return `convention:${scope}:${file}:${name}`;
+}
 function warnSkippedPolicyFiles(dir, scope) {
   const skipped = findSkippedPolicyFiles(dir);
   if (skipped.length === 0)
@@ -3568,28 +3643,40 @@ function warnSkippedPolicyFiles(dir, scope) {
   const suggest = (n) => n.replace(/\.(js|mjs|ts)$/, "-policies.$1");
   hookLogWarn(`${scope} policies: ${skipped.length} file(s) in ${dir} are NOT loaded — ` + `the convention only loads names ending in "policies.js|mjs|ts". ` + skipped.map((n) => `${n} → rename to ${suggest(n)}`).join("; "));
 }
-async function loadAllCustomHooks(customPoliciesPath, opts) {
+async function loadAllCustomHooks(customPoliciesPaths, opts) {
   clearCustomHooks();
   const conventionSources = [];
   const projectRoot = findProjectConfigDir(opts?.sessionCwd ?? process.cwd());
   const conventionEnabled = opts?.customPoliciesEnabled !== false;
-  if (customPoliciesPath) {
-    const absPath = isAbsolute(customPoliciesPath) ? customPoliciesPath : resolve4(projectRoot, customPoliciesPath);
+  const loadedPaths = new Set;
+  for (const customPoliciesPath of typeof customPoliciesPaths === "string" ? [customPoliciesPaths] : customPoliciesPaths ?? []) {
+    const absPath = resolve4(projectRoot, customPoliciesPath);
     if (existsSync3(absPath)) {
-      await loadSingleFile(absPath);
+      if (!loadedPaths.has(absPath)) {
+        loadedPaths.add(absPath);
+        const hooksBefore = getCustomHooks().length;
+        await loadSingleFile(absPath);
+        for (const hook of getCustomHooks().slice(hooksBefore)) {
+          hook.__policyId = customPolicyId(absPath, hook.name);
+        }
+      }
     } else {
-      hookLogWarn(`customPoliciesPath not found: ${absPath}`);
+      hookLogWarn(`custom policy path not found: ${absPath}`);
     }
   }
   const hooksBeforeConvention = getCustomHooks().length;
   const projectDir = resolve4(projectRoot, ".failproofai", "policies");
   if (conventionEnabled)
     warnSkippedPolicyFiles(projectDir, "project");
-  const projectFiles = conventionEnabled ? discoverPolicyFiles(projectDir) : [];
+  const projectFiles = conventionEnabled ? discoverPolicyFiles(projectDir).filter((f) => !loadedPaths.has(f)) : [];
   for (const file of projectFiles) {
+    loadedPaths.add(file);
     const hooksBefore = getCustomHooks().length;
     await loadSingleFile(file, { conventionScope: "project" });
     const newHooks = getCustomHooks().slice(hooksBefore);
+    for (const hook of newHooks) {
+      hook.__policyId = conventionPolicyId("project", basename(file), hook.name);
+    }
     if (newHooks.length > 0) {
       conventionSources.push({
         scope: "project",
@@ -3599,13 +3686,17 @@ async function loadAllCustomHooks(customPoliciesPath, opts) {
     }
   }
   const userDir = resolve4(homedir4(), ".failproofai", "policies");
-  if (conventionEnabled)
+  if (conventionEnabled && userDir !== projectDir)
     warnSkippedPolicyFiles(userDir, "user");
-  const userFiles = conventionEnabled ? discoverPolicyFiles(userDir) : [];
+  const userFiles = conventionEnabled && userDir !== projectDir ? discoverPolicyFiles(userDir).filter((f) => !loadedPaths.has(f)) : [];
   for (const file of userFiles) {
+    loadedPaths.add(file);
     const hooksBefore = getCustomHooks().length;
     await loadSingleFile(file, { conventionScope: "user" });
     const newHooks = getCustomHooks().slice(hooksBefore);
+    for (const hook of newHooks) {
+      hook.__policyId = conventionPolicyId("user", basename(file), hook.name);
+    }
     if (newHooks.length > 0) {
       conventionSources.push({
         scope: "user",
@@ -3638,7 +3729,7 @@ async function loadAllCustomHooks(customPoliciesPath, opts) {
   }
   return { hooks: allHooks, conventionSources };
 }
-var LOADING_KEY = "__FAILPROOFAI_LOADING_HOOKS__", CONVENTION_FILE_RE, LOADABLE_EXT_RE;
+var LOADING_KEY = "__FAILPROOFAI_LOADING_HOOKS__", CONVENTION_FILE_RE, loadSequence = 0, LOADABLE_EXT_RE;
 var init_custom_hooks_loader = __esm(() => {
   init_hook_logger();
   init_custom_hooks_registry();
@@ -4856,6 +4947,65 @@ async function openSqliteReadonly(dbPath) {
 var sqlPromise = null;
 var init_sqlite_reader = () => {};
 
+// lib/hermes-profiles.ts
+import { readdirSync as readdirSync3 } from "node:fs";
+import { homedir as homedir11 } from "node:os";
+import { basename as basename2, dirname as dirname3, join as join9, resolve as resolve5 } from "node:path";
+function hermesRoot() {
+  const env = (process.env.HERMES_HOME || "").trim();
+  if (env) {
+    const home = resolve5(env);
+    const parent = dirname3(home);
+    if (basename2(parent) === PROFILES_DIR)
+      return dirname3(parent);
+    return home;
+  }
+  return join9(homedir11(), ".hermes");
+}
+function listHermesProfiles() {
+  const root = hermesRoot();
+  const out = [{ name: HERMES_DEFAULT_PROFILE, home: root }];
+  const seen = new Set([HERMES_DEFAULT_PROFILE]);
+  let names;
+  try {
+    names = readdirSync3(join9(root, PROFILES_DIR), { withFileTypes: true }).filter((e) => (e.isDirectory() || e.isSymbolicLink()) && !e.name.startsWith(".")).map((e) => e.name).sort();
+  } catch {
+    return out;
+  }
+  for (const name of names) {
+    if (seen.has(name))
+      continue;
+    seen.add(name);
+    out.push({ name, home: join9(root, PROFILES_DIR, name) });
+  }
+  return out;
+}
+function hermesProjectName(profile, source) {
+  return `hermes-${profile}-${source}`;
+}
+function hermesProjectPath(profile, source) {
+  return `hermes:${profile}:${source}`;
+}
+function hermesProjectNameCandidates(name) {
+  if (!name.startsWith("hermes-"))
+    return [];
+  const rest = name.slice("hermes-".length);
+  if (!rest)
+    return [];
+  const out = [];
+  const profiles = listHermesProfiles().map((p) => p.name).sort((a, b) => b.length - a.length);
+  for (const profile of profiles) {
+    const prefix = `${profile}-`;
+    if (rest.startsWith(prefix) && rest.length > prefix.length) {
+      out.push({ profile, source: rest.slice(prefix.length) });
+    }
+  }
+  out.push({ profile: HERMES_DEFAULT_PROFILE, source: rest });
+  return out;
+}
+var PROFILES_DIR = "profiles", HERMES_DEFAULT_PROFILE = "default";
+var init_hermes_profiles = () => {};
+
 // lib/format-duration.ts
 function formatDuration(ms) {
   if (ms < 1000)
@@ -4877,10 +5027,15 @@ function formatDuration(ms) {
 }
 
 // lib/hermes-sessions.ts
-import { homedir as homedir11 } from "node:os";
-import { join as join9 } from "node:path";
-function hermesDbPath() {
-  return process.env.HERMES_DB_PATH || join9(homedir11(), ".hermes", "state.db");
+import { join as join10 } from "node:path";
+function hermesDbPaths() {
+  const override = process.env.HERMES_DB_PATH;
+  if (override)
+    return [{ profile: HERMES_DEFAULT_PROFILE, dbPath: override }];
+  return listHermesProfiles().map((p) => ({
+    profile: p.name,
+    dbPath: join10(p.home, "state.db")
+  }));
 }
 function epochToMs(value) {
   if (typeof value === "number" && Number.isFinite(value)) {
@@ -5011,7 +5166,15 @@ function hermesRowsToLogEntries(rows, source = "session") {
 async function getHermesSessionLog(sessionId) {
   if (!sessionId || !/^[A-Za-z0-9_-]+$/.test(sessionId))
     return null;
-  const db = await openSqliteReadonly(hermesDbPath());
+  for (const { profile, dbPath } of hermesDbPaths()) {
+    const found = await loadFromDb(dbPath, profile, sessionId);
+    if (found)
+      return found;
+  }
+  return null;
+}
+async function loadFromDb(dbPath, profile, sessionId) {
+  const db = await openSqliteReadonly(dbPath);
   if (!db)
     return null;
   try {
@@ -5021,12 +5184,13 @@ async function getHermesSessionLog(sessionId) {
     const { source, cwd: realCwd } = sessionRows[0];
     const msgRows = db.query("SELECT id, role, content, tool_call_id, tool_calls, tool_name, timestamp " + "FROM messages WHERE session_id = ? ORDER BY timestamp ASC", [sessionId]);
     const entries = hermesRowsToLogEntries(msgRows, "session");
-    const cwd = realCwd && realCwd.length > 0 ? realCwd : source ? `hermes:${source}` : undefined;
+    const cwd = realCwd && realCwd.length > 0 ? realCwd : source ? hermesProjectPath(profile, source) : undefined;
     return {
       entries,
       rawLines: msgRows,
       cwd,
-      filePath: `hermes://${sessionId}`
+      filePath: `hermes://${sessionId}`,
+      profile
     };
   } catch {
     return null;
@@ -5037,6 +5201,7 @@ async function getHermesSessionLog(sessionId) {
 var getCachedHermesSessionLog;
 var init_hermes_sessions = __esm(() => {
   init_sqlite_reader();
+  init_hermes_profiles();
   init_log_entries();
   getCachedHermesSessionLog = runtimeCache((sessionId) => getHermesSessionLog(sessionId), 2, { maxSize: 50 });
 });
@@ -5052,13 +5217,22 @@ __export(exports_hermes_projects, {
   getCachedHermesProjects: () => getCachedHermesProjects
 });
 async function getHermesSessions() {
-  const db = await openSqliteReadonly(hermesDbPath());
+  const out = [];
+  for (const { profile, dbPath } of hermesDbPaths()) {
+    out.push(...await readSessionsFromDb(dbPath, profile));
+  }
+  out.sort((a, b) => b.mtimeMs - a.mtimeMs);
+  return out;
+}
+async function readSessionsFromDb(dbPath, profile) {
+  const db = await openSqliteReadonly(dbPath);
   if (!db)
     return [];
   try {
     const rows = db.query("SELECT s.id, s.source, s.cwd, s.title, s.user_id, s.chat_id, s.chat_type, " + "s.started_at, s.ended_at, s.message_count, lm.last_activity " + "FROM sessions s " + "LEFT JOIN (SELECT session_id, MAX(timestamp) AS last_activity FROM messages GROUP BY session_id) lm " + "ON lm.session_id = s.id " + "ORDER BY lm.last_activity DESC");
     return rows.map((r) => ({
       sessionId: r.id,
+      profile,
       source: r.source ?? undefined,
       cwd: r.cwd ?? undefined,
       title: r.title ?? undefined,
@@ -5077,36 +5251,58 @@ async function getHermesSessions() {
 }
 async function getHermesProjects() {
   const sessions = await getHermesSessions();
-  const latestBySource = new Map;
+  const groups = new Map;
   for (const s of sessions) {
     if (s.messageCount <= 0 && !s.hasMessages)
       continue;
-    const src = s.source ?? "unknown";
-    latestBySource.set(src, Math.max(latestBySource.get(src) ?? 0, s.mtimeMs));
+    const profile = s.profile || HERMES_DEFAULT_PROFILE;
+    const source = s.source ?? "unknown";
+    const key = JSON.stringify([profile, source]);
+    const prev = groups.get(key);
+    if (prev) {
+      prev.latest = Math.max(prev.latest, s.mtimeMs);
+      prev.count += 1;
+    } else {
+      groups.set(key, { profile, source, latest: s.mtimeMs, count: 1 });
+    }
   }
   const out = [];
-  for (const [src, latest] of latestBySource) {
+  for (const { profile, source, latest, count } of groups.values()) {
     const lastModified = new Date(latest);
     out.push({
-      name: `hermes-${src}`,
-      path: `hermes:${src}`,
+      name: hermesProjectName(profile, source),
+      path: hermesProjectPath(profile, source),
       isDirectory: true,
       lastModified,
       lastModifiedFormatted: formatDate(lastModified),
-      cli: ["hermes"]
+      cli: ["hermes"],
+      sessionCount: count
     });
   }
   out.sort((a, b) => b.lastModified.getTime() - a.lastModified.getTime());
   return out;
 }
 async function getHermesSessionsByEncodedName(name) {
-  if (!name.startsWith("hermes-"))
+  const candidates = hermesProjectNameCandidates(name);
+  if (candidates.length === 0)
     return { cwd: null, sessions: [] };
-  const source = name.slice("hermes-".length);
   const sessions = await getHermesSessions();
-  const matched = sessions.filter((s) => (s.messageCount > 0 || s.hasMessages) && (s.source ?? "unknown") === source);
+  const matching = (split) => sessions.filter((s) => (s.messageCount > 0 || s.hasMessages) && (s.profile || HERMES_DEFAULT_PROFILE) === split.profile && (s.source ?? "unknown") === split.source);
+  let chosen = candidates[0];
+  let matched = matching(chosen);
+  if (matched.length === 0) {
+    for (const candidate of candidates.slice(1)) {
+      const hits = matching(candidate);
+      if (hits.length > 0) {
+        chosen = candidate;
+        matched = hits;
+        break;
+      }
+    }
+  }
+  const { profile, source } = chosen;
   return {
-    cwd: `hermes:${source}`,
+    cwd: hermesProjectPath(profile, source),
     sessions: matched.map((s) => {
       const lastModified = new Date(s.mtimeMs);
       return {
@@ -5127,6 +5323,7 @@ var getCachedHermesSessions, getCachedHermesProjects, getCachedHermesSessionsByE
 var init_hermes_projects = __esm(() => {
   init_sqlite_reader();
   init_hermes_sessions();
+  init_hermes_profiles();
   getCachedHermesSessions = runtimeCache(getHermesSessions, 2);
   getCachedHermesProjects = runtimeCache(getHermesProjects, 2);
   getCachedHermesSessionsByEncodedName = runtimeCache((name) => getHermesSessionsByEncodedName(name), 2, { maxSize: 50 });
@@ -5134,11 +5331,11 @@ var init_hermes_projects = __esm(() => {
 
 // lib/openclaw-sessions.ts
 import { readFile as readFile6 } from "node:fs/promises";
-import { readdirSync as readdirSync3, statSync as statSync4 } from "node:fs";
+import { readdirSync as readdirSync4, statSync as statSync4 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
-import { join as join10 } from "node:path";
+import { join as join11 } from "node:path";
 function openclawHome() {
-  return process.env.OPENCLAW_HOME || join10(homedir12(), ".openclaw");
+  return process.env.OPENCLAW_HOME || join11(homedir12(), ".openclaw");
 }
 function isPlainObject2(v) {
   return !!v && typeof v === "object" && !Array.isArray(v);
@@ -5251,20 +5448,27 @@ function openclawLinesToLogEntries(lines, source = "session") {
   entries.sort((a, b) => a.timestampMs - b.timestampMs);
   return entries;
 }
+function listOpenClawAgents() {
+  try {
+    return readdirSync4(join11(openclawHome(), "agents"), { withFileTypes: true }).filter((d) => d.isDirectory() && !d.name.startsWith(".")).map((d) => d.name).sort();
+  } catch {
+    return [];
+  }
+}
 function listOpenClawTranscripts() {
-  const agentsDir = join10(openclawHome(), "agents");
+  const agentsDir = join11(openclawHome(), "agents");
   const out = [];
   let agentIds;
   try {
-    agentIds = readdirSync3(agentsDir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
+    agentIds = readdirSync4(agentsDir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
   } catch {
     return out;
   }
   for (const agentId of agentIds) {
-    const sessionsDir = join10(agentsDir, agentId, "sessions");
+    const sessionsDir = join11(agentsDir, agentId, "sessions");
     let files;
     try {
-      files = readdirSync3(sessionsDir);
+      files = readdirSync4(sessionsDir);
     } catch {
       continue;
     }
@@ -5274,7 +5478,7 @@ function listOpenClawTranscripts() {
       const sessionId = file.slice(0, -".jsonl".length);
       if (!OPENCLAW_SESSION_ID_RE.test(sessionId))
         continue;
-      const transcriptPath = join10(sessionsDir, file);
+      const transcriptPath = join11(sessionsDir, file);
       try {
         const st = statSync4(transcriptPath);
         out.push({ agentId, sessionId, transcriptPath, mtimeMs: st.mtimeMs, sizeBytes: st.size });
@@ -5323,6 +5527,10 @@ var init_openclaw_sessions = __esm(() => {
 // lib/openclaw-projects.ts
 var exports_openclaw_projects = {};
 __export(exports_openclaw_projects, {
+  parseOpenClawProjectName: () => parseOpenClawProjectName,
+  openClawProjectPath: () => openClawProjectPath,
+  openClawProjectNameCandidates: () => openClawProjectNameCandidates,
+  openClawProjectName: () => openClawProjectName,
   getOpenClawSessionsByEncodedName: () => getOpenClawSessionsByEncodedName,
   getOpenClawSessions: () => getOpenClawSessions,
   getOpenClawProjects: () => getOpenClawProjects,
@@ -5331,13 +5539,13 @@ __export(exports_openclaw_projects, {
   getCachedOpenClawProjects: () => getCachedOpenClawProjects
 });
 import { readFileSync as readFileSync4 } from "node:fs";
-import { join as join11 } from "node:path";
+import { join as join12 } from "node:path";
 function str(v) {
   return typeof v === "string" && v.length > 0 ? v : undefined;
 }
 function readSessionsIndex(agentId) {
   const out = new Map;
-  const indexPath = join11(openclawHome(), "agents", agentId, "sessions", "sessions.json");
+  const indexPath = join12(openclawHome(), "agents", agentId, "sessions", "sessions.json");
   let raw;
   try {
     raw = JSON.parse(readFileSync4(indexPath, "utf-8"));
@@ -5383,6 +5591,7 @@ async function getOpenClawSessions() {
       label: meta?.label,
       chatType: meta?.chatType,
       chatId: meta?.chatId,
+      transcriptPath: t.transcriptPath,
       mtimeMs: meta?.lastMs ?? t.mtimeMs,
       sizeBytes: t.sizeBytes
     });
@@ -5390,35 +5599,82 @@ async function getOpenClawSessions() {
   refs.sort((a, b) => b.mtimeMs - a.mtimeMs);
   return refs;
 }
+function openClawProjectName(agentId, channel) {
+  return `openclaw-${agentId}-${channel}`;
+}
+function openClawProjectPath(agentId, channel) {
+  return `openclaw:${agentId}:${channel}`;
+}
+function openClawProjectNameCandidates(name) {
+  if (!name.startsWith("openclaw-"))
+    return [];
+  const rest = name.slice("openclaw-".length);
+  if (!rest)
+    return [];
+  const out = [];
+  const agents = listOpenClawAgents().sort((a, b) => b.length - a.length);
+  for (const agentId of agents) {
+    const prefix = `${agentId}-`;
+    if (rest.startsWith(prefix) && rest.length > prefix.length) {
+      out.push({ agentId, channel: rest.slice(prefix.length) });
+    }
+  }
+  out.push({ agentId: null, channel: rest });
+  return out;
+}
+function parseOpenClawProjectName(name) {
+  return openClawProjectNameCandidates(name)[0] ?? null;
+}
 async function getOpenClawProjects() {
   const sessions = await getOpenClawSessions();
-  const latestByChannel = new Map;
+  const groups = new Map;
   for (const s of sessions) {
-    latestByChannel.set(s.channel, Math.max(latestByChannel.get(s.channel) ?? 0, s.mtimeMs));
+    const key = JSON.stringify([s.agentId, s.channel]);
+    const prev = groups.get(key);
+    if (prev) {
+      prev.latest = Math.max(prev.latest, s.mtimeMs);
+      prev.count += 1;
+    } else {
+      groups.set(key, { agentId: s.agentId, channel: s.channel, latest: s.mtimeMs, count: 1 });
+    }
   }
   const out = [];
-  for (const [channel, latest] of latestByChannel) {
+  for (const { agentId, channel, latest, count } of groups.values()) {
     const lastModified = new Date(latest);
     out.push({
-      name: `openclaw-${channel}`,
-      path: `openclaw:${channel}`,
+      name: openClawProjectName(agentId, channel),
+      path: openClawProjectPath(agentId, channel),
       isDirectory: true,
       lastModified,
       lastModifiedFormatted: formatDate(lastModified),
-      cli: ["openclaw"]
+      cli: ["openclaw"],
+      sessionCount: count
     });
   }
   out.sort((a, b) => b.lastModified.getTime() - a.lastModified.getTime());
   return out;
 }
 async function getOpenClawSessionsByEncodedName(name) {
-  if (!name.startsWith("openclaw-"))
+  const candidates = openClawProjectNameCandidates(name);
+  if (candidates.length === 0)
     return { cwd: null, sessions: [] };
-  const channel = name.slice("openclaw-".length);
   const sessions = await getOpenClawSessions();
-  const matched = sessions.filter((s) => s.channel === channel);
+  const matching = (split) => sessions.filter((s) => s.channel === split.channel && (split.agentId === null || s.agentId === split.agentId));
+  let chosen = candidates[0];
+  let matched = matching(chosen);
+  if (matched.length === 0) {
+    for (const candidate of candidates.slice(1)) {
+      const hits = matching(candidate);
+      if (hits.length > 0) {
+        chosen = candidate;
+        matched = hits;
+        break;
+      }
+    }
+  }
+  const { agentId, channel } = chosen;
   return {
-    cwd: `openclaw:${channel}`,
+    cwd: agentId === null ? `openclaw:${channel}` : openClawProjectPath(agentId, channel),
     sessions: matched.map((s) => {
       const lastModified = new Date(s.mtimeMs);
       return {
@@ -5444,14 +5700,14 @@ var init_openclaw_projects = __esm(() => {
 
 // lib/factory-sessions.ts
 import { readFile as readFile7 } from "node:fs/promises";
-import { readdirSync as readdirSync4, statSync as statSync5 } from "node:fs";
+import { readdirSync as readdirSync5, statSync as statSync5 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
-import { join as join12 } from "node:path";
+import { join as join13 } from "node:path";
 function factoryHome() {
-  return process.env.FACTORY_HOME || join12(homedir13(), ".factory");
+  return process.env.FACTORY_HOME || join13(homedir13(), ".factory");
 }
 function factorySessionsRoot() {
-  return join12(factoryHome(), "sessions");
+  return join13(factoryHome(), "sessions");
 }
 function isPlainObject3(v) {
   return !!v && typeof v === "object" && !Array.isArray(v);
@@ -5590,17 +5846,17 @@ function listFactoryTranscripts() {
   const out = [];
   let projectDirs;
   try {
-    projectDirs = readdirSync4(root, { withFileTypes: true }).filter((d) => d.isDirectory());
+    projectDirs = readdirSync5(root, { withFileTypes: true }).filter((d) => d.isDirectory());
   } catch {
     return out;
   }
   for (const dir of projectDirs) {
     const projectName = dir.name;
     const cwd = decodeFolderName(projectName);
-    const projectPath = join12(root, projectName);
+    const projectPath = join13(root, projectName);
     let files;
     try {
-      files = readdirSync4(projectPath);
+      files = readdirSync5(projectPath);
     } catch {
       continue;
     }
@@ -5610,7 +5866,7 @@ function listFactoryTranscripts() {
       const sessionId = file.slice(0, -".jsonl".length);
       if (!FACTORY_SESSION_ID_RE.test(sessionId))
         continue;
-      const transcriptPath = join12(projectPath, file);
+      const transcriptPath = join13(projectPath, file);
       try {
         const st = statSync5(transcriptPath);
         out.push({ projectName, cwd, sessionId, transcriptPath, mtimeMs: st.mtimeMs, sizeBytes: st.size });
@@ -5737,12 +5993,12 @@ var init_factory_projects = __esm(() => {
 
 // lib/devin-sessions.ts
 import { homedir as homedir14 } from "node:os";
-import { join as join13 } from "node:path";
+import { join as join14 } from "node:path";
 function devinHome() {
-  return process.env.DEVIN_HOME || join13(homedir14(), ".local", "share", "devin");
+  return process.env.DEVIN_HOME || join14(homedir14(), ".local", "share", "devin");
 }
 function devinDbPath() {
-  return process.env.DEVIN_DB_PATH || join13(devinHome(), "cli", "sessions.db");
+  return process.env.DEVIN_DB_PATH || join14(devinHome(), "cli", "sessions.db");
 }
 function devinEpochToMs(value) {
   if (typeof value === "number" && Number.isFinite(value)) {
@@ -6039,17 +6295,17 @@ var init_devin_projects = __esm(() => {
 
 // lib/antigravity-sessions.ts
 import { readFile as readFile8 } from "node:fs/promises";
-import { readdirSync as readdirSync5, statSync as statSync6 } from "node:fs";
+import { readdirSync as readdirSync6, statSync as statSync6 } from "node:fs";
 import { homedir as homedir15 } from "node:os";
-import { join as join14 } from "node:path";
+import { join as join15 } from "node:path";
 function antigravityHome() {
-  return process.env.ANTIGRAVITY_HOME || join14(homedir15(), ".gemini", "antigravity-cli");
+  return process.env.ANTIGRAVITY_HOME || join15(homedir15(), ".gemini", "antigravity-cli");
 }
 function antigravityBrainRoot() {
-  return join14(antigravityHome(), "brain");
+  return join15(antigravityHome(), "brain");
 }
 function antigravityTranscriptRelPath() {
-  return join14(".system_generated", "logs", "transcript_full.jsonl");
+  return join15(".system_generated", "logs", "transcript_full.jsonl");
 }
 function isPlainObject5(v) {
   return !!v && typeof v === "object" && !Array.isArray(v);
@@ -6164,7 +6420,7 @@ function listAntigravityTranscripts() {
   const out = [];
   let convoDirs;
   try {
-    convoDirs = readdirSync5(root, { withFileTypes: true }).filter((d) => d.isDirectory());
+    convoDirs = readdirSync6(root, { withFileTypes: true }).filter((d) => d.isDirectory());
   } catch {
     return out;
   }
@@ -6172,7 +6428,7 @@ function listAntigravityTranscripts() {
     const conversationId = dir.name;
     if (!ANTIGRAVITY_CONVERSATION_ID_RE.test(conversationId))
       continue;
-    const transcriptPath = join14(root, conversationId, rel);
+    const transcriptPath = join15(root, conversationId, rel);
     try {
       const st = statSync6(transcriptPath);
       if (!st.isFile())
@@ -6185,7 +6441,7 @@ function listAntigravityTranscripts() {
 function findAntigravityTranscript(conversationId) {
   if (!ANTIGRAVITY_CONVERSATION_ID_RE.test(conversationId))
     return null;
-  const transcriptPath = join14(antigravityBrainRoot(), conversationId, antigravityTranscriptRelPath());
+  const transcriptPath = join15(antigravityBrainRoot(), conversationId, antigravityTranscriptRelPath());
   try {
     if (statSync6(transcriptPath).isFile())
       return transcriptPath;
@@ -6225,9 +6481,9 @@ __export(exports_antigravity_projects, {
   getAntigravityIndex: () => getAntigravityIndex,
   antigravitySummariesDbPath: () => antigravitySummariesDbPath
 });
-import { join as join15 } from "node:path";
+import { join as join16 } from "node:path";
 function antigravitySummariesDbPath() {
-  return join15(antigravityHome(), "conversation_summaries.db");
+  return join16(antigravityHome(), "conversation_summaries.db");
 }
 function parseWorkspaceCwd(raw) {
   if (!raw)
@@ -6371,15 +6627,15 @@ var init_antigravity_projects = __esm(() => {
 
 // lib/goose-sessions.ts
 import { homedir as homedir16 } from "node:os";
-import { join as join16 } from "node:path";
+import { join as join17 } from "node:path";
 function gooseHome() {
   if (process.env.GOOSE_HOME)
     return process.env.GOOSE_HOME;
   const xdg = process.env.XDG_DATA_HOME;
-  return join16(xdg && xdg.length > 0 ? xdg : join16(homedir16(), ".local", "share"), "goose");
+  return join17(xdg && xdg.length > 0 ? xdg : join17(homedir16(), ".local", "share"), "goose");
 }
 function gooseDbPath() {
-  return process.env.GOOSE_DB_PATH || join16(gooseHome(), "sessions", "sessions.db");
+  return process.env.GOOSE_DB_PATH || join17(gooseHome(), "sessions", "sessions.db");
 }
 function gooseTimestampToMs(value) {
   if (typeof value === "number" && Number.isFinite(value)) {
@@ -6647,7 +6903,7 @@ var init_goose_projects = __esm(() => {
 
 // lib/projects.ts
 import { readdir as readdir5, stat as stat5 } from "node:fs/promises";
-import { join as join17, resolve as resolve5, sep } from "node:path";
+import { join as join18, resolve as resolve6, sep } from "node:path";
 async function getMtime(path3, label) {
   try {
     return (await stat5(path3)).mtime;
@@ -6673,7 +6929,7 @@ async function getClaudeProjectFolders() {
     if (!entries)
       return [];
     const settled = await batchAll(entries.filter((entry) => entry.isDirectory()).map((entry) => async () => {
-      const folderPath = join17(projectsPath, entry.name);
+      const folderPath = join18(projectsPath, entry.name);
       const mtime = await getMtime(folderPath, entry.name);
       return {
         name: entry.name,
@@ -6710,7 +6966,8 @@ function mergeProjectFolders(...sources) {
         ...existing,
         cli: mergedCli,
         lastModified: newer.lastModified,
-        lastModifiedFormatted: newer.lastModifiedFormatted
+        lastModifiedFormatted: newer.lastModifiedFormatted,
+        sessionCount: existing.sessionCount === undefined && f.sessionCount === undefined ? undefined : (existing.sessionCount ?? 0) + (f.sessionCount ?? 0)
       });
     }
   }
@@ -6798,8 +7055,8 @@ function resolveProjectPath(projectName) {
     throw new RangeError("Empty project name");
   if (/^[/\\]/.test(projectName))
     throw new RangeError("Absolute project name");
-  const projectsPath = resolve5(getClaudeProjectsPath());
-  const candidate = resolve5(join17(projectsPath, projectName));
+  const projectsPath = resolve6(getClaudeProjectsPath());
+  const candidate = resolve6(join18(projectsPath, projectName));
   if (!candidate.startsWith(projectsPath + sep)) {
     throw new RangeError("Project path escapes root");
   }
@@ -6817,7 +7074,7 @@ async function getSessionFiles(projectPath) {
       return [];
     const jsonlEntries = entries.filter((entry) => entry.isFile() && entry.name.endsWith(".jsonl") && extractSessionId2(entry.name));
     const settled = await batchAll(jsonlEntries.map((entry) => async () => {
-      const filePath = join17(projectPath, entry.name);
+      const filePath = join18(projectPath, entry.name);
       const mtime = await getMtime(filePath, entry.name);
       return {
         name: entry.name,
@@ -6846,13 +7103,13 @@ var init_projects = __esm(() => {
 
 // lib/resolve-subagent-path.ts
 import { access as access2 } from "fs/promises";
-import { join as join18, relative as relative2 } from "path";
+import { join as join19, relative as relative2 } from "path";
 async function resolveSubagentPath(projectsPath, projectName, sessionId, agentId) {
   const fileName = `agent-${agentId}.jsonl`;
   const candidatePaths = [
-    join18(projectsPath, projectName, fileName),
-    join18(projectsPath, projectName, sessionId, fileName),
-    join18(projectsPath, projectName, sessionId, "subagents", fileName)
+    join19(projectsPath, projectName, fileName),
+    join19(projectsPath, projectName, sessionId, fileName),
+    join19(projectsPath, projectName, sessionId, "subagents", fileName)
   ];
   for (const candidatePath of candidatePaths) {
     if (relative2(projectsPath, candidatePath).startsWith("..")) {
@@ -6874,7 +7131,7 @@ var init_resolve_subagent_path = () => {};
 
 // lib/log-entries.ts
 import { readFile as readFile9 } from "fs/promises";
-import { join as join19 } from "path";
+import { join as join20 } from "path";
 function formatTimestamp(date) {
   const base = formatDate(date);
   const ms = date.getMilliseconds().toString().padStart(3, "0");
@@ -7072,7 +7329,7 @@ async function parseLogContent(fileContent, source = "session") {
 async function parseSessionLog(projectName, sessionId) {
   const projectDir = resolveProjectPath(projectName);
   const projectsPath = getClaudeProjectsPath();
-  const filePath = join19(projectDir, `${sessionId}.jsonl`);
+  const filePath = join20(projectDir, `${sessionId}.jsonl`);
   const fileContent = await readFile9(filePath, "utf-8");
   const { entries: sessionEntries, rawLines: sessionRawLines, subagentIds } = await parseFileContent(fileContent, "session");
   if (subagentIds.length === 0) {
@@ -7109,9 +7366,9 @@ var init_log_entries = __esm(() => {
 });
 
 // lib/codex-sessions.ts
-import { readFileSync as readFileSync5, readdirSync as readdirSync6, existsSync as existsSync6, writeFileSync as writeFileSync3, mkdirSync as mkdirSync4, statSync as statSync7 } from "node:fs";
+import { readFileSync as readFileSync5, readdirSync as readdirSync7, existsSync as existsSync6, writeFileSync as writeFileSync3, mkdirSync as mkdirSync4, statSync as statSync7 } from "node:fs";
 import { readFile as readFile10 } from "node:fs/promises";
-import { dirname as dirname3, join as join20 } from "node:path";
+import { dirname as dirname4, join as join21 } from "node:path";
 import { homedir as homedir17 } from "node:os";
 function readCache() {
   try {
@@ -7124,7 +7381,7 @@ function readCache() {
 }
 function writeCacheEntry(sessionId, path3) {
   try {
-    mkdirSync4(dirname3(CACHE_PATH), { recursive: true });
+    mkdirSync4(dirname4(CACHE_PATH), { recursive: true });
     const cache = readCache();
     cache[sessionId] = path3;
     writeFileSync3(CACHE_PATH, JSON.stringify(cache), "utf-8");
@@ -7132,9 +7389,9 @@ function writeCacheEntry(sessionId, path3) {
 }
 function dirSearch(dir, sessionId) {
   try {
-    for (const f of readdirSync6(dir, { withFileTypes: true })) {
+    for (const f of readdirSync7(dir, { withFileTypes: true })) {
       if (f.isFile() && f.name.includes(sessionId) && f.name.endsWith(".jsonl")) {
-        return join20(dir, f.name);
+        return join21(dir, f.name);
       }
     }
   } catch {}
@@ -7145,14 +7402,14 @@ function findCodexTranscript(sessionId) {
   const cached = cache[sessionId];
   if (cached && existsSync6(cached))
     return cached;
-  const root = join20(homedir17(), ".codex", "sessions");
+  const root = join21(homedir17(), ".codex", "sessions");
   const today = new Date;
   const yesterday = new Date(today.getTime() - 24 * 60 * 60 * 1000);
   const datedDirs = [today, yesterday].map((d) => {
     const y = String(d.getUTCFullYear());
     const m = String(d.getUTCMonth() + 1).padStart(2, "0");
     const day = String(d.getUTCDate()).padStart(2, "0");
-    return join20(root, y, m, day);
+    return join21(root, y, m, day);
   });
   for (const dir of datedDirs) {
     const hit = dirSearch(dir, sessionId);
@@ -7162,16 +7419,16 @@ function findCodexTranscript(sessionId) {
     }
   }
   try {
-    for (const y of readdirSync6(root, { withFileTypes: true })) {
+    for (const y of readdirSync7(root, { withFileTypes: true })) {
       if (!y.isDirectory())
         continue;
-      for (const m of readdirSync6(join20(root, y.name), { withFileTypes: true })) {
+      for (const m of readdirSync7(join21(root, y.name), { withFileTypes: true })) {
         if (!m.isDirectory())
           continue;
-        for (const d of readdirSync6(join20(root, y.name, m.name), { withFileTypes: true })) {
+        for (const d of readdirSync7(join21(root, y.name, m.name), { withFileTypes: true })) {
           if (!d.isDirectory())
             continue;
-          const hit = dirSearch(join20(root, y.name, m.name, d.name), sessionId);
+          const hit = dirSearch(join21(root, y.name, m.name, d.name), sessionId);
           if (hit) {
             writeCacheEntry(sessionId, hit);
             return hit;
@@ -7391,7 +7648,7 @@ async function getCodexSessionLog(sessionId) {
 var CACHE_PATH, getCachedCodexSessionLog;
 var init_codex_sessions = __esm(() => {
   init_log_entries();
-  CACHE_PATH = join20(homedir17(), ".failproofai", "cache", "codex-session-paths.json");
+  CACHE_PATH = join21(homedir17(), ".failproofai", "cache", "codex-session-paths.json");
   getCachedCodexSessionLog = runtimeCache((sessionId) => getCodexSessionLog(sessionId), 60, { maxSize: 50 });
 });
 
@@ -7436,21 +7693,21 @@ var init_resolve_permission_mode = __esm(() => {
 });
 
 // lib/copilot-sessions.ts
-import { readFileSync as readFileSync7, readdirSync as readdirSync7, existsSync as existsSync7, statSync as statSync8 } from "node:fs";
+import { readFileSync as readFileSync7, readdirSync as readdirSync8, existsSync as existsSync7, statSync as statSync8 } from "node:fs";
 import { readFile as readFile11 } from "node:fs/promises";
-import { join as join21, resolve as resolve6, sep as sep2 } from "node:path";
+import { join as join22, resolve as resolve7, sep as sep2 } from "node:path";
 import { homedir as homedir18 } from "node:os";
 function getCopilotHome() {
-  return process.env.COPILOT_HOME || join21(homedir18(), ".copilot");
+  return process.env.COPILOT_HOME || join22(homedir18(), ".copilot");
 }
 function getCopilotSessionStateRoot2() {
-  return join21(getCopilotHome(), "session-state");
+  return join22(getCopilotHome(), "session-state");
 }
 function getCopilotSessionDir(sessionId) {
   if (!sessionId)
     return null;
-  const root = resolve6(getCopilotSessionStateRoot2());
-  const candidate = resolve6(root, sessionId);
+  const root = resolve7(getCopilotSessionStateRoot2());
+  const candidate = resolve7(root, sessionId);
   if (candidate === root || !candidate.startsWith(`${root}${sep2}`))
     return null;
   return candidate;
@@ -7459,7 +7716,7 @@ function resolveSessionFile(sessionId, filename) {
   const dir = getCopilotSessionDir(sessionId);
   if (!dir)
     return null;
-  return join21(dir, filename);
+  return join22(dir, filename);
 }
 function findCopilotTranscript(sessionId) {
   const candidate = resolveSessionFile(sessionId, "events.jsonl");
@@ -7653,35 +7910,35 @@ var init_copilot_sessions = __esm(() => {
 });
 
 // lib/cursor-sessions.ts
-import { readFileSync as readFileSync8, readdirSync as readdirSync8, existsSync as existsSync8, statSync as statSync9 } from "node:fs";
+import { readFileSync as readFileSync8, readdirSync as readdirSync9, existsSync as existsSync8, statSync as statSync9 } from "node:fs";
 import { readFile as readFile12 } from "node:fs/promises";
-import { basename as basename2, join as join22, resolve as resolve7, sep as sep3 } from "node:path";
+import { basename as basename3, join as join23, resolve as resolve8, sep as sep3 } from "node:path";
 import { homedir as homedir19 } from "node:os";
 function getCursorHome2() {
-  return process.env.CURSOR_HOME || join22(homedir19(), ".cursor");
+  return process.env.CURSOR_HOME || join23(homedir19(), ".cursor");
 }
 function getCursorSessionDir(sessionId) {
   if (!sessionId)
     return null;
-  const home = resolve7(getCursorHome2());
-  const projectsRoot = resolve7(home, NEW_PROJECTS_DIR2);
+  const home = resolve8(getCursorHome2());
+  const projectsRoot = resolve8(home, NEW_PROJECTS_DIR2);
   let projectEntries = [];
   try {
-    projectEntries = readdirSync8(projectsRoot, { withFileTypes: true });
+    projectEntries = readdirSync9(projectsRoot, { withFileTypes: true });
   } catch {}
   for (const entry of projectEntries) {
     if (!entry.isDirectory())
       continue;
-    const candidate = resolve7(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2, sessionId);
-    const transcriptRoot = resolve7(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2);
+    const candidate = resolve8(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2, sessionId);
+    const transcriptRoot = resolve8(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2);
     if (candidate === transcriptRoot || !candidate.startsWith(`${transcriptRoot}${sep3}`))
       continue;
     if (existsSync8(candidate))
       return candidate;
   }
   for (const sub of LEGACY_SESSION_ROOT_CANDIDATES2) {
-    const root = resolve7(home, sub);
-    const candidate = resolve7(root, sessionId);
+    const root = resolve8(home, sub);
+    const candidate = resolve8(root, sessionId);
     if (candidate === root || !candidate.startsWith(`${root}${sep3}`))
       continue;
     if (existsSync8(candidate))
@@ -7693,11 +7950,11 @@ function findCursorTranscript(sessionId) {
   const dir = getCursorSessionDir(sessionId);
   if (!dir)
     return null;
-  const newCandidate = join22(dir, `${basename2(dir)}.jsonl`);
+  const newCandidate = join23(dir, `${basename3(dir)}.jsonl`);
   if (existsSync8(newCandidate))
     return newCandidate;
   for (const name of LEGACY_TRANSCRIPT_FILE_CANDIDATES2) {
-    const candidate = join22(dir, name);
+    const candidate = join23(dir, name);
     if (existsSync8(candidate))
       return candidate;
   }
@@ -7909,12 +8166,12 @@ var init_cursor_sessions = __esm(() => {
 });
 
 // lib/pi-sessions.ts
-import { readFileSync as readFileSync9, readdirSync as readdirSync9, existsSync as existsSync9, statSync as statSync10 } from "node:fs";
+import { readFileSync as readFileSync9, readdirSync as readdirSync10, existsSync as existsSync9, statSync as statSync10 } from "node:fs";
 import { readFile as readFile13 } from "node:fs/promises";
-import { join as join23, resolve as resolve8, sep as sep4 } from "node:path";
+import { join as join24, resolve as resolve9, sep as sep4 } from "node:path";
 import { homedir as homedir20 } from "node:os";
 function getPiSessionStateRoot() {
-  return process.env.PI_SESSIONS_DIR || join23(homedir20(), ".pi", "agent", "sessions");
+  return process.env.PI_SESSIONS_DIR || join24(homedir20(), ".pi", "agent", "sessions");
 }
 function isSafeSessionId(sessionId) {
   return UUID_RE.test(sessionId);
@@ -7922,20 +8179,20 @@ function isSafeSessionId(sessionId) {
 function findPiTranscript(sessionId) {
   if (!isSafeSessionId(sessionId))
     return null;
-  const root = resolve8(getPiSessionStateRoot());
+  const root = resolve9(getPiSessionStateRoot());
   let cwdDirs;
   try {
-    cwdDirs = readdirSync9(root);
+    cwdDirs = readdirSync10(root);
   } catch {
     return null;
   }
   for (const cwdDir of cwdDirs) {
-    const cwdPath = resolve8(root, cwdDir);
+    const cwdPath = resolve9(root, cwdDir);
     if (!cwdPath.startsWith(`${root}${sep4}`))
       continue;
     let files;
     try {
-      files = readdirSync9(cwdPath);
+      files = readdirSync10(cwdPath);
     } catch {
       continue;
     }
@@ -7943,7 +8200,7 @@ function findPiTranscript(sessionId) {
       const m = SESSION_FILE_RE2.exec(f);
       if (!m || m[1].toLowerCase() !== sessionId.toLowerCase())
         continue;
-      const candidate = resolve8(cwdPath, f);
+      const candidate = resolve9(cwdPath, f);
       if (!candidate.startsWith(`${cwdPath}${sep4}`))
         continue;
       if (existsSync9(candidate))
@@ -8187,7 +8444,7 @@ async function handleHookEvent(eventType, cli = "claude") {
     let payload = "";
     let stdinOversized = false;
     try {
-      payload = await new Promise((resolve9, reject) => {
+      payload = await new Promise((resolve10, reject) => {
         const chunks = [];
         let totalBytes = 0;
         process.stdin.setEncoding("utf8");
@@ -8197,15 +8454,15 @@ async function handleHookEvent(eventType, cli = "claude") {
             hookLogWarn(`stdin payload exceeds 1 MB for ${eventType}, discarding`);
             stdinOversized = true;
             process.stdin.destroy();
-            resolve9("");
+            resolve10("");
             return;
           }
           chunks.push(chunk);
         });
-        process.stdin.on("end", () => resolve9(chunks.join("")));
+        process.stdin.on("end", () => resolve10(chunks.join("")));
         process.stdin.on("error", reject);
         if (process.stdin.readableEnded)
-          resolve9("");
+          resolve10("");
       });
     } catch (err) {
       hookLogWarn(`stdin read failed for ${eventType}`);
@@ -8293,13 +8550,17 @@ async function handleHookEvent(eventType, cli = "claude") {
     const config = readMergedHooksConfig(session.cwd);
     clearPolicies();
     registerBuiltinPolicies(config.enabledPolicies);
-    const loadResult = await loadAllCustomHooks(config.customPoliciesPath, {
+    const loadResult = await loadAllCustomHooks(config.customPoliciesPaths ?? config.customPoliciesPath, {
       sessionCwd: session.cwd,
       customPoliciesEnabled: config.customPoliciesEnabled
     });
     const customHooksList = loadResult.hooks;
+    const disabledCustomPolicies = new Set(config.disabledCustomPolicies ?? []);
     const conventionHookNames = new Set(loadResult.conventionSources.flatMap((s) => s.hookNames));
     for (const hook of customHooksList) {
+      const policyId = hook.__policyId;
+      if (policyId && disabledCustomPolicies.has(policyId))
+        continue;
       const hookName = hook.name;
       const conventionScope = hook.__conventionScope;
       const isConvention = !!conventionScope;
@@ -8356,6 +8617,7 @@ async function handleHookEvent(eventType, cli = "claude") {
     if (result.stderr) {
       process.stderr.write(result.stderr);
     }
+    const matchedPolicies = getPoliciesForEvent(canonicalEventType, parsed.tool_name).map((p) => p.name);
     const activityEntry = {
       timestamp: Date.now(),
       eventType: canonicalEventType,
@@ -8363,6 +8625,7 @@ async function handleHookEvent(eventType, cli = "claude") {
       toolName: parsed.tool_name ?? null,
       policyName: result.policyName,
       policyNames: result.policyNames,
+      matchedPolicies,
       decision: result.decision,
       reason: result.reason,
       durationMs,
@@ -8424,13 +8687,13 @@ import { createHmac, randomUUID } from "node:crypto";
 import { execSync as execSync4 } from "node:child_process";
 import { readFileSync as readFileSync10, writeFileSync as writeFileSync4, mkdirSync as mkdirSync5 } from "node:fs";
 import { homedir as homedir21, platform, arch, hostname, cpus } from "node:os";
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 function hashToId3(raw) {
   return createHmac("sha256", NAMESPACE3).update(raw).digest("hex");
 }
 function getInstanceId3() {
-  const idDir = join24(homedir21(), ".failproofai");
-  const idFile = join24(idDir, "instance-id");
+  const idDir = join25(homedir21(), ".failproofai");
+  const idFile = join25(idDir, "instance-id");
   try {
     const existing = readFileSync10(idFile, "utf-8").trim();
     if (existing)
@@ -8511,14 +8774,14 @@ __export(exports_install_check, {
   checkHooks: () => checkHooks
 });
 import { existsSync as existsSync10, readFileSync as readFileSync11, writeFileSync as writeFileSync5, mkdirSync as mkdirSync6 } from "node:fs";
-import { resolve as resolve9 } from "node:path";
+import { resolve as resolve10 } from "node:path";
 import { platform as platform2, arch as arch2, release, homedir as homedir22, hostname as hostname2 } from "node:os";
 import { createHmac as createHmac2 } from "node:crypto";
 function hashToId4(raw) {
   return createHmac2("sha256", NAMESPACE4).update(raw).digest("hex");
 }
 function lastVersionPath() {
-  return resolve9(homedir22(), ".failproofai", "last-version");
+  return resolve10(homedir22(), ".failproofai", "last-version");
 }
 function compareSemver(a, b) {
   const parse = (v) => {
@@ -8565,7 +8828,7 @@ function compareSemver(a, b) {
   return 0;
 }
 function checkHooks() {
-  const hooksConfigPath = resolve9(homedir22(), ".failproofai", "policies-config.json");
+  const hooksConfigPath = resolve10(homedir22(), ".failproofai", "policies-config.json");
   if (!existsSync10(hooksConfigPath)) {
     return { configured: false, registered: false, policyCount: 0 };
   }
@@ -8579,7 +8842,7 @@ function checkHooks() {
     return { configured: false, registered: false, policyCount: 0 };
   }
   const policyCount = config.enabledPolicies.length;
-  const settingsPath = resolve9(homedir22(), ".claude", "settings.json");
+  const settingsPath = resolve10(homedir22(), ".claude", "settings.json");
   if (!existsSync10(settingsPath))
     return { configured: true, registered: false, policyCount };
   let settings;
@@ -8644,7 +8907,7 @@ async function maybeReportInstall(version3) {
       enabled_policy_count: hooks.policyCount
     }, { version: version3, timeoutMs: REPORT_TIMEOUT_MS }));
     try {
-      mkdirSync6(resolve9(homedir22(), ".failproofai"), { recursive: true });
+      mkdirSync6(resolve10(homedir22(), ".failproofai"), { recursive: true });
       writeFileSync5(versionFile, version3, "utf8");
     } catch {}
     await Promise.all(events.map((p) => p.catch(() => {})));
@@ -15648,7 +15911,7 @@ var init_dist = __esm(() => {
 // src/hooks/integrations.ts
 import { execSync as execSync5 } from "node:child_process";
 import { readFileSync as readFileSync12, writeFileSync as writeFileSync6, existsSync as existsSync11, mkdirSync as mkdirSync7, unlinkSync as unlinkSync2 } from "node:fs";
-import { resolve as resolve10, dirname as dirname4 } from "node:path";
+import { resolve as resolve11, dirname as dirname5 } from "node:path";
 import { fileURLToPath } from "node:url";
 import { homedir as homedir23 } from "node:os";
 function readJsonFile(path3) {
@@ -15658,7 +15921,7 @@ function readJsonFile(path3) {
   return JSON.parse(raw);
 }
 function writeJsonFile(path3, data) {
-  mkdirSync7(dirname4(path3), { recursive: true });
+  mkdirSync7(dirname5(path3), { recursive: true });
   writeFileSync6(path3, JSON.stringify(data, null, 2) + `
 `, "utf8");
 }
@@ -15670,7 +15933,7 @@ function readYamlDoc(path3) {
   }
 }
 function writeYamlDoc(path3, doc) {
-  mkdirSync7(dirname4(path3), { recursive: true });
+  mkdirSync7(dirname5(path3), { recursive: true });
   writeFileSync6(path3, doc.toString(), "utf8");
 }
 function isMarkedHook(hook) {
@@ -15698,6 +15961,10 @@ function binaryExists(name) {
     return false;
   }
 }
+function settingsPathsFor(integration, scope, cwd) {
+  const paths = integration.getSettingsPaths?.(scope, cwd);
+  return paths && paths.length > 0 ? paths : [integration.getSettingsPath(scope, cwd)];
+}
 function isMarkedCopilotHook(hook) {
   if (hook[FAILPROOFAI_HOOK_MARKER] === true)
     return true;
@@ -15710,7 +15977,7 @@ function isMarkedCopilotHook(hook) {
   return false;
 }
 function opencodePluginFilePath(settingsPath) {
-  return resolve10(dirname4(settingsPath), "plugins", "failproofai.mjs");
+  return resolve11(dirname5(settingsPath), "plugins", "failproofai.mjs");
 }
 function buildOpenCodePluginShim(binaryPath, scope) {
   const useNpx = scope === "project";
@@ -15925,8 +16192,8 @@ export default async function failproofaiPlugin({ client, directory }) {
 function getPiExtensionPath() {
   const fromEnv = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (fromEnv)
-    return resolve10(fromEnv, "pi-extension");
-  return resolve10(fileURLToPath(import.meta.url), "..", "..", "..", "pi-extension");
+    return resolve11(fromEnv, "pi-extension");
+  return resolve11(fileURLToPath(import.meta.url), "..", "..", "..", "pi-extension");
 }
 function isFailproofaiPiEntry(source) {
   if (typeof source !== "string")
@@ -15937,19 +16204,38 @@ function isFailproofaiPiEntry(source) {
 }
 function makePiProjectRelativeEntry(extPath) {
   const cwd = process.cwd();
-  const cwdResolved = resolve10(cwd);
-  const extResolved = resolve10(extPath);
+  const cwdResolved = resolve11(cwd);
+  const extResolved = resolve11(extPath);
   if (extResolved.startsWith(cwdResolved + "/") || extResolved === cwdResolved) {
     const fromSettingsDir = "../" + extResolved.slice(cwdResolved.length + 1);
     return fromSettingsDir;
   }
   return extResolved;
 }
+function hermesConfigHasHooks(settingsPath) {
+  if (!existsSync11(settingsPath))
+    return false;
+  try {
+    const doc = readYamlDoc(settingsPath);
+    const js = doc.toJS() ?? {};
+    const hooks = js.hooks;
+    if (!hooks || typeof hooks !== "object")
+      return false;
+    for (const entries of Object.values(hooks)) {
+      if (Array.isArray(entries) && entries.some((h) => isMarkedHook(h)))
+        return true;
+    }
+  } catch {}
+  return false;
+}
+function unhookedHermesProfiles() {
+  return listHermesProfiles().filter((p) => existsSync11(p.home)).filter((p) => !hermesConfigHasHooks(resolve11(p.home, "config.yaml"))).map((p) => p.name);
+}
 function getOpenClawPluginPath() {
   const fromEnv = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (fromEnv)
-    return resolve10(fromEnv, "openclaw-plugin");
-  return resolve10(fileURLToPath(import.meta.url), "..", "..", "..", "openclaw-plugin");
+    return resolve11(fromEnv, "openclaw-plugin");
+  return resolve11(fileURLToPath(import.meta.url), "..", "..", "..", "openclaw-plugin");
 }
 function isFailproofaiOpenClawPath(p) {
   if (typeof p !== "string")
@@ -15978,21 +16264,22 @@ function detectInstalledClis() {
 var claudeCode, codex, copilot, cursor, OPENCODE_PLUGIN_REL_PATH = "./plugins/failproofai.mjs", opencode, pi, hermes, OPENCLAW_PLUGIN_ID = "failproofai", openclaw, factory, devin, ANTIGRAVITY_HOOK_NAME = "failproofai", ANTIGRAVITY_TOOL_EVENTS, antigravity, goose, INTEGRATIONS;
 var init_integrations = __esm(() => {
   init_dist();
+  init_hermes_profiles();
   init_types();
   claudeCode = {
     id: "claude",
     displayName: "Claude Code",
     scopes: HOOK_SCOPES,
-    eventTypes: HOOK_EVENT_TYPES,
+    eventTypes: CLAUDE_INSTALL_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve10(cwd) : process.cwd();
+      const base = cwd ? resolve11(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve10(homedir23(), ".claude", "settings.json");
+          return resolve11(homedir23(), ".claude", "settings.json");
         case "project":
-          return resolve10(base, ".claude", "settings.json");
+          return resolve11(base, ".claude", "settings.json");
         case "local":
-          return resolve10(base, ".claude", "settings.local.json");
+          return resolve11(base, ".claude", "settings.local.json");
       }
     },
     readSettings(settingsPath) {
@@ -16015,7 +16302,31 @@ var init_integrations = __esm(() => {
       const s = settings;
       if (!s.hooks)
         s.hooks = {};
-      for (const eventType of HOOK_EVENT_TYPES) {
+      const installed = new Set(CLAUDE_INSTALL_EVENT_TYPES);
+      for (const eventType of Object.keys(s.hooks)) {
+        if (installed.has(eventType))
+          continue;
+        const matchers = s.hooks[eventType];
+        if (!Array.isArray(matchers))
+          continue;
+        const kept = [];
+        for (const matcher of matchers) {
+          if (!matcher || !Array.isArray(matcher.hooks)) {
+            if (matcher)
+              kept.push(matcher);
+            continue;
+          }
+          const before = matcher.hooks.length;
+          matcher.hooks = matcher.hooks.filter((h) => !isMarkedHook(h));
+          const weEmptiedIt = matcher.hooks.length === 0 && before > 0;
+          if (!weEmptiedIt)
+            kept.push(matcher);
+        }
+        s.hooks[eventType] = kept;
+        if (kept.length === 0)
+          delete s.hooks[eventType];
+      }
+      for (const eventType of CLAUDE_INSTALL_EVENT_TYPES) {
         const hookEntry = this.buildHookEntry(binaryPath, eventType, scope);
         if (!s.hooks[eventType])
           s.hooks[eventType] = [];
@@ -16093,14 +16404,14 @@ var init_integrations = __esm(() => {
     scopes: CODEX_HOOK_SCOPES,
     eventTypes: CODEX_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve10(cwd) : process.cwd();
+      const base = cwd ? resolve11(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve10(homedir23(), ".codex", "hooks.json");
+          return resolve11(homedir23(), ".codex", "hooks.json");
         case "project":
-          return resolve10(base, ".codex", "hooks.json");
+          return resolve11(base, ".codex", "hooks.json");
         case "local":
-          return resolve10(base, ".codex", "hooks.json");
+          return resolve11(base, ".codex", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -16209,14 +16520,14 @@ var init_integrations = __esm(() => {
     scopes: COPILOT_HOOK_SCOPES,
     eventTypes: COPILOT_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve10(cwd) : process.cwd();
+      const base = cwd ? resolve11(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve10(homedir23(), ".copilot", "hooks", "failproofai.json");
+          return resolve11(homedir23(), ".copilot", "hooks", "failproofai.json");
         case "project":
-          return resolve10(base, ".github", "hooks", "failproofai.json");
+          return resolve11(base, ".github", "hooks", "failproofai.json");
         case "local":
-          return resolve10(base, ".github", "hooks", "failproofai.json");
+          return resolve11(base, ".github", "hooks", "failproofai.json");
       }
     },
     readSettings(settingsPath) {
@@ -16323,14 +16634,14 @@ var init_integrations = __esm(() => {
     scopes: CURSOR_HOOK_SCOPES,
     eventTypes: CURSOR_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve10(cwd) : process.cwd();
+      const base = cwd ? resolve11(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve10(homedir23(), ".cursor", "hooks.json");
+          return resolve11(homedir23(), ".cursor", "hooks.json");
         case "project":
-          return resolve10(base, ".cursor", "hooks.json");
+          return resolve11(base, ".cursor", "hooks.json");
         case "local":
-          return resolve10(base, ".cursor", "hooks.json");
+          return resolve11(base, ".cursor", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -16422,14 +16733,14 @@ var init_integrations = __esm(() => {
     scopes: OPENCODE_HOOK_SCOPES,
     eventTypes: OPENCODE_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve10(cwd) : process.cwd();
+      const base = cwd ? resolve11(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve10(homedir23(), ".config", "opencode", "opencode.json");
+          return resolve11(homedir23(), ".config", "opencode", "opencode.json");
         case "project":
-          return resolve10(base, ".opencode", "opencode.json");
+          return resolve11(base, ".opencode", "opencode.json");
         case "local":
-          return resolve10(base, ".opencode", "opencode.json");
+          return resolve11(base, ".opencode", "opencode.json");
       }
     },
     readSettings(settingsPath) {
@@ -16440,7 +16751,7 @@ var init_integrations = __esm(() => {
     },
     buildHookEntry(_binaryPath, _eventType, scope) {
       if (scope === "user") {
-        const abs = resolve10(homedir23(), ".config", "opencode", "plugins", "failproofai.mjs");
+        const abs = resolve11(homedir23(), ".config", "opencode", "plugins", "failproofai.mjs");
         return { spec: `file://${abs}`, [FAILPROOFAI_HOOK_MARKER]: true };
       }
       return { spec: OPENCODE_PLUGIN_REL_PATH, [FAILPROOFAI_HOOK_MARKER]: true };
@@ -16455,9 +16766,9 @@ var init_integrations = __esm(() => {
     writeHookEntries(settings, binaryPath, scope) {
       const s = settings;
       const effectiveScope = scope ?? "project";
-      const settingsPath = effectiveScope === "user" ? resolve10(homedir23(), ".config", "opencode", "opencode.json") : resolve10(process.cwd(), ".opencode", "opencode.json");
+      const settingsPath = effectiveScope === "user" ? resolve11(homedir23(), ".config", "opencode", "opencode.json") : resolve11(process.cwd(), ".opencode", "opencode.json");
       const pluginPath = opencodePluginFilePath(settingsPath);
-      mkdirSync7(dirname4(pluginPath), { recursive: true });
+      mkdirSync7(dirname5(pluginPath), { recursive: true });
       writeFileSync6(pluginPath, buildOpenCodePluginShim(binaryPath, effectiveScope), "utf8");
       if (!Array.isArray(s.plugin))
         s.plugin = [];
@@ -16523,14 +16834,14 @@ var init_integrations = __esm(() => {
     scopes: PI_HOOK_SCOPES,
     eventTypes: PI_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve10(cwd) : process.cwd();
+      const base = cwd ? resolve11(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve10(homedir23(), ".pi", "agent", "settings.json");
+          return resolve11(homedir23(), ".pi", "agent", "settings.json");
         case "project":
-          return resolve10(base, ".pi", "settings.json");
+          return resolve11(base, ".pi", "settings.json");
         case "local":
-          return resolve10(base, ".pi", "settings.json");
+          return resolve11(base, ".pi", "settings.json");
       }
     },
     readSettings(settingsPath) {
@@ -16608,7 +16919,10 @@ var init_integrations = __esm(() => {
     scopes: HERMES_HOOK_SCOPES,
     eventTypes: HERMES_HOOK_EVENT_TYPES,
     getSettingsPath() {
-      return resolve10(homedir23(), ".hermes", "config.yaml");
+      return resolve11(hermesRoot(), "config.yaml");
+    },
+    getSettingsPaths() {
+      return listHermesProfiles().map((p) => resolve11(p.home, "config.yaml"));
     },
     readSettings(settingsPath) {
       return readYamlDoc(settingsPath);
@@ -16675,21 +16989,8 @@ var init_integrations = __esm(() => {
       return removed;
     },
     hooksInstalledInSettings(scope, cwd) {
-      const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync11(settingsPath))
-        return false;
-      try {
-        const doc = readYamlDoc(settingsPath);
-        const js = doc.toJS() ?? {};
-        const hooks = js.hooks;
-        if (!hooks || typeof hooks !== "object")
-          return false;
-        for (const entries of Object.values(hooks)) {
-          if (Array.isArray(entries) && entries.some((h) => isMarkedHook(h)))
-            return true;
-        }
-      } catch {}
-      return false;
+      const paths = settingsPathsFor(this, scope, cwd);
+      return paths.length > 0 && paths.every((p) => hermesConfigHasHooks(p));
     },
     detectInstalled() {
       return binaryExists("hermes");
@@ -16701,7 +17002,7 @@ var init_integrations = __esm(() => {
     scopes: OPENCLAW_HOOK_SCOPES,
     eventTypes: OPENCLAW_HOOK_EVENT_TYPES,
     getSettingsPath() {
-      return resolve10(homedir23(), ".openclaw", "openclaw.json");
+      return resolve11(homedir23(), ".openclaw", "openclaw.json");
     },
     readSettings(settingsPath) {
       return readJsonFile(settingsPath);
@@ -16797,14 +17098,14 @@ var init_integrations = __esm(() => {
     scopes: FACTORY_HOOK_SCOPES,
     eventTypes: FACTORY_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve10(cwd) : process.cwd();
+      const base = cwd ? resolve11(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve10(homedir23(), ".factory", "hooks.json");
+          return resolve11(homedir23(), ".factory", "hooks.json");
         case "project":
-          return resolve10(base, ".factory", "hooks.json");
+          return resolve11(base, ".factory", "hooks.json");
         case "local":
-          return resolve10(base, ".factory", "hooks.json");
+          return resolve11(base, ".factory", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -16899,14 +17200,14 @@ var init_integrations = __esm(() => {
     scopes: DEVIN_HOOK_SCOPES,
     eventTypes: DEVIN_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve10(cwd) : process.cwd();
+      const base = cwd ? resolve11(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve10(homedir23(), ".config", "devin", "config.json");
+          return resolve11(homedir23(), ".config", "devin", "config.json");
         case "project":
-          return resolve10(base, ".devin", "config.json");
+          return resolve11(base, ".devin", "config.json");
         case "local":
-          return resolve10(base, ".devin", "config.json");
+          return resolve11(base, ".devin", "config.json");
       }
     },
     readSettings(settingsPath) {
@@ -17008,14 +17309,14 @@ var init_integrations = __esm(() => {
     scopes: ANTIGRAVITY_HOOK_SCOPES,
     eventTypes: ANTIGRAVITY_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve10(cwd) : process.cwd();
+      const base = cwd ? resolve11(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve10(homedir23(), ".gemini", "config", "hooks.json");
+          return resolve11(homedir23(), ".gemini", "config", "hooks.json");
         case "project":
-          return resolve10(base, ".agents", "hooks.json");
+          return resolve11(base, ".agents", "hooks.json");
         case "local":
-          return resolve10(base, ".agents", "hooks.json");
+          return resolve11(base, ".agents", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -17149,14 +17450,14 @@ var init_integrations = __esm(() => {
     scopes: GOOSE_HOOK_SCOPES,
     eventTypes: GOOSE_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve10(cwd) : process.cwd();
+      const base = cwd ? resolve11(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve10(homedir23(), ".agents", "plugins", "failproofai", "hooks", "hooks.json");
+          return resolve11(homedir23(), ".agents", "plugins", "failproofai", "hooks", "hooks.json");
         case "project":
-          return resolve10(base, ".agents", "plugins", "failproofai", "hooks", "hooks.json");
+          return resolve11(base, ".agents", "plugins", "failproofai", "hooks", "hooks.json");
         case "local":
-          return resolve10(base, ".agents", "plugins", "failproofai", "hooks", "hooks.json");
+          return resolve11(base, ".agents", "plugins", "failproofai", "hooks", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -17491,7 +17792,7 @@ function runPrompt(p) {
       `${c.dim(BAR)}  ${c.dim(p.summaryFor(result))}`
     ]);
   };
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     hideCursor(stdout);
     repaint(stdout, region, build());
     readline.emitKeypressEvents(stdin);
@@ -17507,7 +17808,7 @@ function runPrompt(p) {
     const finish = (result) => {
       cleanup();
       collapse(result);
-      resolve11(result);
+      resolve12(result);
     };
     function onKey(_s, key) {
       if (!key)
@@ -17808,7 +18109,7 @@ async function promptPolicySelection(preSelected, options = {}) {
 `);
     lastLineCount = lines.length;
   }
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     render();
     process.stdin.setRawMode(true);
     process.stdin.resume();
@@ -17845,7 +18146,7 @@ async function promptPolicySelection(preSelected, options = {}) {
 ${dim(STEP_DONE)}  Policies
 ${dim(BAR)}  ${dim(`${selected.length} selected`)}
 `);
-        resolve11(selected);
+        resolve12(selected);
       } else if (key.name === "escape") {
         search = "";
         cursor2 = 0;
@@ -17908,7 +18209,7 @@ __export(exports_manager, {
 });
 import { execSync as execSync6 } from "node:child_process";
 import { existsSync as existsSync12 } from "node:fs";
-import { resolve as resolve11, basename as basename3 } from "node:path";
+import { resolve as resolve12, basename as basename4 } from "node:path";
 import { homedir as homedir24, platform as platform3, arch as arch3, release as release2, hostname as hostname3 } from "node:os";
 function getSettingsPath(scope, cwd) {
   return claudeCode.getSettingsPath(scope, cwd);
@@ -18014,34 +18315,45 @@ async function installHooksImpl(policyNames, scope = "user", cwd, includeBeta =
   const configToWrite = { ...previousConfig, enabledPolicies: selectedPolicies };
   if (removeCustomHooks) {
     delete configToWrite.customPoliciesPath;
-  } else if (customPoliciesPath) {
-    configToWrite.customPoliciesPath = resolve11(customPoliciesPath);
-    let validatedHooks = [];
-    try {
-      validatedHooks = await loadCustomHooks(configToWrite.customPoliciesPath, { strict: true });
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      try {
-        await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
-          scope,
-          error_type: /not found/i.test(msg) ? "file_not_found" : "load_error"
-        });
-      } catch {}
-      console.error(`Error: ${msg}`);
-      process.exit(1);
-    }
-    if (validatedHooks.length === 0) {
+    delete configToWrite.customPoliciesPaths;
+  } else if (customPoliciesPath && (typeof customPoliciesPath === "string" || customPoliciesPath.length > 0)) {
+    const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path3) => resolve12(path3));
+    const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path3) => resolve12(path3)).filter((path3) => {
+      if (existsSync12(path3))
+        return true;
+      console.log(`Dropping custom policies path (file no longer exists): ${path3}`);
+      return false;
+    });
+    configToWrite.customPoliciesPaths = replace ? [...new Set(incoming)] : [...new Set([...carried, ...incoming])];
+    delete configToWrite.customPoliciesPath;
+    for (const path3 of incoming) {
+      let validatedHooks = [];
       try {
-        await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
-          scope,
-          error_type: "no_hooks_registered"
-        });
-      } catch {}
-      console.error(`Error: no hooks registered in ${customPoliciesPath}. ` + `Make sure your file calls customPolicies.add(...) at least once.`);
-      process.exit(1);
+        validatedHooks = await loadCustomHooks(path3, { strict: true });
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        try {
+          await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
+            scope,
+            error_type: /not found/i.test(msg) ? "file_not_found" : "load_error"
+          });
+        } catch {}
+        console.error(`Error: ${msg}`);
+        process.exit(1);
+      }
+      if (validatedHooks.length === 0) {
+        try {
+          await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
+            scope,
+            error_type: "no_hooks_registered"
+          });
+        } catch {}
+        console.error(`Error: no hooks registered in ${path3}. ` + `Make sure your file calls customPolicies.add(...) at least once.`);
+        process.exit(1);
+      }
+      console.log(`
+Validated ${validatedHooks.length} custom hook(s) from ${path3}: ${validatedHooks.map((h) => h.name).join(", ")}`);
     }
-    console.log(`
-Validated ${validatedHooks.length} custom hook(s): ${validatedHooks.map((h) => h.name).join(", ")}`);
   }
   writeScopedHooksConfig(configToWrite, scope, cwd);
   console.log(`
@@ -18049,18 +18361,21 @@ Enabled ${selectedPolicies.length} policy(ies): ${selectedPolicies.join(", ")}
 `);
   if (removeCustomHooks) {
     console.log("Custom hooks path cleared.");
-  } else if (configToWrite.customPoliciesPath) {
-    console.log(`Custom hooks path: ${configToWrite.customPoliciesPath}`);
+  } else if (configToWrite.customPoliciesPaths?.length || configToWrite.customPoliciesPath) {
+    const paths = configToWrite.customPoliciesPaths ?? [configToWrite.customPoliciesPath];
+    console.log(`Custom hooks paths: ${paths.join(", ")}`);
   }
   const writtenSettingsPaths = [];
   for (const cliId of selectedClis) {
     const integration = getIntegration(cliId);
-    const settingsPath = integration.getSettingsPath(scope, cwd);
+    const settingsPaths = settingsPathsFor(integration, scope, cwd);
     try {
-      const settings = integration.readSettings(settingsPath);
-      integration.writeHookEntries(settings, binaryPath, scope);
-      integration.writeSettings(settingsPath, settings);
-      writtenSettingsPaths.push({ cli: cliId, path: settingsPath });
+      for (const settingsPath of settingsPaths) {
+        const settings = integration.readSettings(settingsPath);
+        integration.writeHookEntries(settings, binaryPath, scope);
+        integration.writeSettings(settingsPath, settings);
+        writtenSettingsPaths.push({ cli: cliId, path: settingsPath });
+      }
     } catch (err) {
       const errorType = err instanceof Error && /EACCES|EPERM/.test(err.message) ? "permission_denied" : err instanceof Error && /ENOENT|ENOTDIR/.test(err.message) ? "path_not_found" : "write_error";
       try {
@@ -18091,7 +18406,7 @@ Enabled ${selectedPolicies.length} policy(ies): ${selectedPolicies.join(", ")}
       arch: arch3(),
       os_release: release2(),
       hostname_hash: hashToId2(hostname3()),
-      has_custom_hooks_path: !!configToWrite.customPoliciesPath,
+      has_custom_hooks_path: !!(configToWrite.customPoliciesPaths?.length || configToWrite.customPoliciesPath),
       has_policy_params: !!(configToWrite.policyParams && Object.keys(configToWrite.policyParams).length > 0),
       param_policy_names: configToWrite.policyParams ? Object.keys(configToWrite.policyParams) : [],
       command_format: scope === "project" ? "npx" : "absolute"
@@ -18146,6 +18461,7 @@ async function removeHooks(policyNames, scope = "user", cwd, opts) {
   if (opts?.removeCustomHooks) {
     const config = readScopedHooksConfig(configScope, cwd);
     delete config.customPoliciesPath;
+    delete config.customPoliciesPaths;
     writeScopedHooksConfig(config, configScope, cwd);
     console.log("Custom hooks path cleared.");
   }
@@ -18194,25 +18510,30 @@ async function removeHooks(policyNames, scope = "user", cwd, opts) {
     const integration = getIntegration(cliId);
     const scopesToRemove = scope === "all" ? [...integration.scopes] : integration.scopes.includes(scope) ? [scope] : [];
     for (const s of scopesToRemove) {
-      const settingsPath = integration.getSettingsPath(s, cwd);
-      if (!existsSync12(settingsPath)) {
+      const settingsPaths = settingsPathsFor(integration, s, cwd);
+      const existing = settingsPaths.filter((p) => existsSync12(p));
+      if (existing.length === 0) {
         if (scope !== "all" && selectedClis.length === 1) {
           console.log("No settings file found. Nothing to remove.");
           nothingToReport = true;
         }
         continue;
       }
-      const removed = integration.removeHooksFromFile(settingsPath);
-      if (removed === 0 && scope !== "all" && selectedClis.length === 1) {
+      let removedHere = 0;
+      for (const settingsPath of existing) {
+        const removed = integration.removeHooksFromFile(settingsPath);
+        removedHere += removed;
+        if (removed > 0 && scope !== "all") {
+          console.log(`Removed ${removed} failproofai hook(s) from ${integration.displayName} settings.`);
+          console.log(`Settings: ${settingsPath}`);
+        }
+      }
+      if (removedHere === 0 && scope !== "all" && selectedClis.length === 1) {
         console.log("No hooks found in settings. Nothing to remove.");
         nothingToReport = true;
         continue;
       }
-      totalRemoved += removed;
-      if (scope !== "all") {
-        console.log(`Removed ${removed} failproofai hook(s) from ${integration.displayName} settings.`);
-        console.log(`Settings: ${settingsPath}`);
-      }
+      totalRemoved += removedHere;
     }
   }
   if (nothingToReport && totalRemoved === 0)
@@ -18222,7 +18543,9 @@ async function removeHooks(policyNames, scope = "user", cwd, opts) {
     for (const cliId of selectedClis) {
       const integration = getIntegration(cliId);
       for (const s of integration.scopes) {
-        console.log(`  ${integration.displayName} / ${s}: ${integration.getSettingsPath(s, cwd)}`);
+        for (const p of settingsPathsFor(integration, s, cwd)) {
+          console.log(`  ${integration.displayName} / ${s}: ${p}`);
+        }
       }
     }
   }
@@ -18244,20 +18567,21 @@ async function removeHooks(policyNames, scope = "user", cwd, opts) {
   if (scope === "all") {
     for (const s of HOOK_SCOPES) {
       const existing = readScopedHooksConfig(s, cwd);
-      if (existing.enabledPolicies.length > 0 || existing.customPoliciesPath || existing.policyParams) {
-        const { customPoliciesPath: _drop, policyParams: _dropParams, ...rest } = existing;
+      if (existing.enabledPolicies.length > 0 || existing.customPoliciesPaths?.length || existing.customPoliciesPath || existing.policyParams) {
+        const { customPoliciesPath: _drop, customPoliciesPaths: _dropMany, policyParams: _dropParams, ...rest } = existing;
         writeScopedHooksConfig({ ...rest, enabledPolicies: [] }, s, cwd);
       }
     }
   } else if (!HOOK_SCOPES.some((s) => hooksInstalledInSettings(s, cwd))) {
     const existing = readScopedHooksConfig(configScope, cwd);
-    const { customPoliciesPath: _drop, policyParams: _dropParams, ...rest } = existing;
+    const { customPoliciesPath: _drop, customPoliciesPaths: _dropMany, policyParams: _dropParams, ...rest } = existing;
     writeScopedHooksConfig({ ...rest, enabledPolicies: [] }, configScope, cwd);
   }
 }
 async function listHooks(cwd) {
   const config = readMergedHooksConfig(cwd);
   const enabledSet = new Set(config.enabledPolicies);
+  const disabledCustomSet = new Set(config.disabledCustomPolicies ?? []);
   const uniqueScopes = deduplicateScopes(HOOK_SCOPES, cwd);
   const installedScopes = uniqueScopes.filter((s) => hooksInstalledInSettings(s, cwd));
   const regularPolicies = BUILTIN_POLICIES.filter((p) => !p.beta);
@@ -18381,53 +18705,86 @@ Failproof AI Hook Policies
       } catch {}
     }
   }
-  if (config.customPoliciesPath) {
+  const explicitPaths = configuredCustomPolicyPaths(config);
+  if (explicitPaths.length > 0) {
     console.log(`
-  ── Custom Policies (${config.customPoliciesPath}) ───────────────────────`);
-    if (!existsSync12(config.customPoliciesPath)) {
-      console.log(`  \x1B[31m✗ File not found: ${config.customPoliciesPath}\x1B[0m`);
-    } else {
-      const hooks = await loadCustomHooks(config.customPoliciesPath);
+  ── Custom Policies ───────────────────────`);
+    for (const path3 of explicitPaths) {
+      const absPath = resolve12(findProjectConfigDir(cwd ?? process.cwd()), path3);
+      console.log(`  ${absPath}`);
+      if (!existsSync12(absPath)) {
+        console.log(`  \x1B[31m✗ File not found: ${absPath}\x1B[0m`);
+        continue;
+      }
+      const hooks = await loadCustomHooks(absPath);
       if (hooks.length === 0) {
         console.log(`  \x1B[31m✗ ERR  failed to load (check ~/.failproofai/logs/hooks.log)\x1B[0m`);
       } else {
         const descColWidth = nameColWidth;
         for (const hook of hooks) {
-          console.log(`  \x1B[32m✓\x1B[0m       ${hook.name.padEnd(descColWidth)}${hook.description ?? ""}`);
+          const disabled = disabledCustomSet.has(`custom:${absPath}:${hook.name}`);
+          const status = disabled ? "\x1B[2m  OFF\x1B[0m" : "\x1B[32m✓ ON\x1B[0m";
+          console.log(`  ${status}    ${hook.name.padEnd(descColWidth)}${hook.description ?? ""}`);
         }
       }
     }
     console.log();
   }
-  const base = cwd ? resolve11(cwd) : process.cwd();
+  const base = findProjectConfigDir(cwd ?? process.cwd());
+  const projectDir = resolve12(base, ".failproofai", "policies");
+  const userDir = resolve12(homedir24(), ".failproofai", "policies");
+  const sameDir = userDir === projectDir;
   const conventionDirs = [
-    { label: "Project", dir: resolve11(base, ".failproofai", "policies") },
-    { label: "User", dir: resolve11(homedir24(), ".failproofai", "policies") }
+    { label: sameDir ? "Project + User" : "Project", dir: projectDir },
+    ...sameDir ? [] : [{ label: "User", dir: userDir }]
   ];
+  const discovered = {
+    project: [],
+    user: []
+  };
   for (const { label, dir } of conventionDirs) {
     const files = discoverPolicyFiles(dir);
     if (files.length === 0)
       continue;
+    const targets = dir === projectDir && dir === userDir ? ["project", "user"] : dir === projectDir ? ["project"] : ["user"];
+    const policyScope = dir === projectDir ? "project" : "user";
+    const record = (file, hooks) => {
+      for (const t of targets)
+        discovered[t].push({ file, hooks });
+    };
     console.log(`
   ── Convention Policies — ${label} (${dir}) ──────────`);
+    const colWidth = Math.max(nameColWidth, ...files.map((f) => basename4(f).length + 2));
     for (const file of files) {
       try {
         const hooks = await loadCustomHooks(file);
+        const filename = basename4(file);
+        record(filename, hooks.map((h) => h.name));
         if (hooks.length === 0) {
-          const filename = basename3(file);
-          console.log(`  \x1B[31m✗\x1B[0m       ${filename.padEnd(nameColWidth)}\x1B[31mfailed to load\x1B[0m`);
+          console.log(`  \x1B[31m✗\x1B[0m       ${filename.padEnd(colWidth)}\x1B[31mfailed to load\x1B[0m`);
         } else {
-          const filename = basename3(file);
-          const hookSummary = hooks.map((h) => h.name).join(", ");
-          console.log(`  \x1B[32m✓\x1B[0m       ${filename.padEnd(nameColWidth)}${hooks.length} hook(s): ${hookSummary}`);
+          const hookStates = hooks.map((hook) => ({
+            hook,
+            disabled: disabledCustomSet.has(`convention:${policyScope}:${filename}:${hook.name}`)
+          }));
+          const disabledCount = hookStates.filter((entry) => entry.disabled).length;
+          const status = disabledCount === 0 ? "\x1B[32m✓ ON\x1B[0m" : disabledCount === hooks.length ? "\x1B[2m  OFF\x1B[0m" : "\x1B[33m◐ MIXED\x1B[0m";
+          const hookSummary = hookStates.map(({ hook, disabled }) => `${hook.name}${disabled ? " (OFF)" : ""}`).join(", ");
+          console.log(`  ${status}    ${filename.padEnd(colWidth)}${hooks.length} hook(s): ${hookSummary}`);
         }
       } catch {
-        const filename = basename3(file);
-        console.log(`  \x1B[31m✗\x1B[0m       ${filename.padEnd(nameColWidth)}\x1B[31merror\x1B[0m`);
+        const filename = basename4(file);
+        record(filename, []);
+        console.log(`  \x1B[31m✗\x1B[0m       ${filename.padEnd(colWidth)}\x1B[31merror\x1B[0m`);
       }
     }
     console.log();
   }
+  try {
+    syncConventionPolicies(discovered.user, "user");
+  } catch (err) {
+    hookLogWarn(`could not record convention policies in config: ${err instanceof Error ? err.message : String(err)}`);
+  }
 }
 var VALID_POLICY_NAMES;
 var init_manager = __esm(() => {
@@ -18440,6 +18797,7 @@ var init_manager = __esm(() => {
   init_hook_telemetry2();
   init_telemetry_id2();
   init_cli_error();
+  init_hook_logger();
   VALID_POLICY_NAMES = new Set(BUILTIN_POLICIES.map((p) => p.name));
 });
 
@@ -18604,7 +18962,7 @@ async function promptCliTargetSelection(detected, action = "install") {
     lastLineCount = lines.length;
   }
   const itemCount = options.length;
-  return new Promise((resolve12) => {
+  return new Promise((resolve13) => {
     render();
     readline3.emitKeypressEvents(process.stdin);
     const wasRaw = process.stdin.isRaw;
@@ -18637,7 +18995,7 @@ async function promptCliTargetSelection(detected, action = "install") {
         cleanup();
         process.stdout.write(`
 `);
-        resolve12(options[cursor2].value);
+        resolve13(options[cursor2].value);
       }
     }
     process.stdin.on("keypress", onKey);
@@ -18790,7 +19148,7 @@ async function promptPolicySelection2(preSelected, options = {}) {
 `);
     lastLineCount = lines.length;
   }
-  return new Promise((resolve12) => {
+  return new Promise((resolve13) => {
     render();
     process.stdin.setRawMode(true);
     process.stdin.resume();
@@ -18827,7 +19185,7 @@ async function promptPolicySelection2(preSelected, options = {}) {
 ${dim(STEP_DONE)}  Policies
 ${dim(BAR)}  ${dim(`${selected.length} selected`)}
 `);
-        resolve12(selected);
+        resolve13(selected);
       } else if (key.name === "escape") {
         search = "";
         cursor2 = 0;
@@ -19014,12 +19372,12 @@ import {
   statSync as statSync11,
   writeFileSync as writeFileSync7
 } from "node:fs";
-import { dirname as dirname5 } from "node:path";
+import { dirname as dirname6 } from "node:path";
 import { randomBytes } from "node:crypto";
 function writeJsonAtomically(filePath, value, opts = {}) {
   const mode = opts.mode ?? 384;
   const dirMode = opts.dirMode ?? 448;
-  const dir = dirname5(filePath);
+  const dir = dirname6(filePath);
   if (!existsSync13(dir))
     mkdirSync8(dir, { recursive: true, mode: dirMode });
   const tmp = `${filePath}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
@@ -19046,15 +19404,15 @@ var init_atomic_write = () => {};
 // lib/auth/auth-store.ts
 import { existsSync as existsSync14, readFileSync as readFileSync13, rmSync as rmSync2 } from "node:fs";
 import { homedir as homedir25 } from "node:os";
-import { join as join25 } from "node:path";
+import { join as join26 } from "node:path";
 function getAuthDir() {
   const override = process.env.FAILPROOFAI_AUTH_DIR;
   if (override)
     return override;
-  return join25(homedir25(), ".failproofai");
+  return join26(homedir25(), ".failproofai");
 }
 function getAuthFilePath() {
-  return join25(getAuthDir(), "auth.json");
+  return join26(getAuthDir(), "auth.json");
 }
 function readAuth() {
   const p = getAuthFilePath();
@@ -19162,13 +19520,13 @@ function prompt(question, opts = {}) {
         orig(s);
     };
   }
-  return new Promise((resolve12) => {
+  return new Promise((resolve13) => {
     rl.question(question, (answer) => {
       rl.close();
       if (opts.hidden && process.stdin.isTTY)
         process.stdout.write(`
 `);
-      resolve12(answer.trim());
+      resolve13(answer.trim());
     });
   });
 }
@@ -19417,8 +19775,8 @@ EXAMPLES
 });
 
 // lib/claude-sessions.ts
-import { readdirSync as readdirSync10, statSync as statSync12, existsSync as existsSync15 } from "node:fs";
-import { join as join26, basename as basename4 } from "node:path";
+import { readdirSync as readdirSync11, statSync as statSync12, existsSync as existsSync15 } from "node:fs";
+import { join as join27, basename as basename5 } from "node:path";
 function getClaudeProjectsRoot() {
   return getClaudeProjectsPath();
 }
@@ -19426,21 +19784,21 @@ function listClaudeProjects() {
   const root = getClaudeProjectsRoot();
   let entries;
   try {
-    entries = readdirSync10(root, { withFileTypes: true });
+    entries = readdirSync11(root, { withFileTypes: true });
   } catch {
     return [];
   }
   return entries.filter((e) => e.isDirectory()).map((e) => ({
     name: e.name,
     cwd: decodeFolderName(e.name),
-    path: join26(root, e.name)
+    path: join27(root, e.name)
   }));
 }
 function listClaudeTranscripts(project) {
   const out = [];
   let entries;
   try {
-    entries = readdirSync10(project.path, { withFileTypes: true });
+    entries = readdirSync11(project.path, { withFileTypes: true });
   } catch {
     return out;
   }
@@ -19449,7 +19807,7 @@ function listClaudeTranscripts(project) {
       const sessionId = entry.name.slice(0, -".jsonl".length);
       if (!UUID_RE2.test(sessionId))
         continue;
-      const transcriptPath = join26(project.path, entry.name);
+      const transcriptPath = join27(project.path, entry.name);
       try {
         const s = statSync12(transcriptPath);
         out.push({
@@ -19463,12 +19821,12 @@ function listClaudeTranscripts(project) {
         });
       } catch {}
     } else if (entry.isDirectory() && UUID_RE2.test(entry.name)) {
-      const subDir = join26(project.path, entry.name, "subagents");
+      const subDir = join27(project.path, entry.name, "subagents");
       if (!existsSync15(subDir))
         continue;
       let subEntries;
       try {
-        subEntries = readdirSync10(subDir, { withFileTypes: true });
+        subEntries = readdirSync11(subDir, { withFileTypes: true });
       } catch {
         continue;
       }
@@ -19476,7 +19834,7 @@ function listClaudeTranscripts(project) {
         if (!sub.isFile() || !sub.name.endsWith(".jsonl"))
           continue;
         const agentId = sub.name.slice(0, -".jsonl".length);
-        const transcriptPath = join26(subDir, sub.name);
+        const transcriptPath = join27(subDir, sub.name);
         try {
           const s = statSync12(transcriptPath);
           out.push({
@@ -20051,7 +20409,7 @@ async function listHermesTranscriptMetadata(opts = {}) {
       continue;
     out.push({
       cli: "hermes",
-      projectName: s.source ? `hermes:${s.source}` : "hermes",
+      projectName: s.source ? hermesProjectPath(s.profile, s.source) : `hermes:${s.profile}`,
       sessionId: s.sessionId,
       transcriptPath: `hermes://${s.sessionId}`,
       mtimeMs: s.mtimeMs,
@@ -20073,6 +20431,7 @@ async function streamHermesEvents(meta) {
 }
 var init_hermes = __esm(() => {
   init_hermes_projects();
+  init_hermes_profiles();
   init_hermes_sessions();
   init_shared();
 });
@@ -20083,16 +20442,16 @@ async function listOpenClawTranscriptMetadata(opts = {}) {
     return [];
   const sinceMs = opts.sinceMs ?? 0;
   const out = [];
-  for (const t of listOpenClawTranscripts()) {
-    if (t.mtimeMs < sinceMs)
+  for (const s of await getOpenClawSessions()) {
+    if (s.mtimeMs < sinceMs)
       continue;
     out.push({
       cli: "openclaw",
-      projectName: `openclaw:${t.agentId}`,
-      sessionId: t.sessionId,
-      transcriptPath: t.transcriptPath,
-      mtimeMs: t.mtimeMs,
-      sizeBytes: t.sizeBytes
+      projectName: openClawProjectPath(s.agentId, s.channel),
+      sessionId: s.sessionId,
+      transcriptPath: s.transcriptPath,
+      mtimeMs: s.mtimeMs,
+      sizeBytes: s.sizeBytes
     });
   }
   return out;
@@ -20109,6 +20468,7 @@ async function streamOpenClawEvents(meta) {
   });
 }
 var init_openclaw = __esm(() => {
+  init_openclaw_projects();
   init_openclaw_sessions();
   init_shared();
 });
@@ -20731,7 +21091,7 @@ var init_features = __esm(() => {
 // src/audit/cache.ts
 import { createHash } from "node:crypto";
 import { existsSync as existsSync16, mkdirSync as mkdirSync9, readFileSync as readFileSync14, writeFileSync as writeFileSync8, chmodSync as chmodSync2 } from "node:fs";
-import { join as join27 } from "node:path";
+import { join as join28 } from "node:path";
 import { homedir as homedir26 } from "node:os";
 function getEngineVersion() {
   if (cachedEngineVersion)
@@ -20750,9 +21110,9 @@ function getDetectorVersion() {
   return cachedDetectorVersion;
 }
 function getCachePathFor(transcriptPath) {
-  const root = join27(homedir26(), ".failproofai", "cache", "audit");
+  const root = join28(homedir26(), ".failproofai", "cache", "audit");
   const key = createHash("sha1").update(transcriptPath).digest("hex");
-  return join27(root, `${key}.json`);
+  return join28(root, `${key}.json`);
 }
 function readCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes) {
   if (sizeBytes === 0)
@@ -20785,7 +21145,7 @@ function writeCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes, result)
     return;
   const cachePath = getCachePathFor(transcriptPath);
   try {
-    mkdirSync9(join27(homedir26(), ".failproofai", "cache", "audit"), { recursive: true });
+    mkdirSync9(join28(homedir26(), ".failproofai", "cache", "audit"), { recursive: true });
     const entry = {
       schemaVersion: CACHE_SCHEMA_VERSION,
       cachedAt: Date.now(),
@@ -21157,10 +21517,10 @@ var init_audit = __esm(() => {
 });
 
 // src/audit/dashboard-cache.ts
-import { join as join28 } from "node:path";
+import { join as join29 } from "node:path";
 import { homedir as homedir27 } from "node:os";
 function getCachePath() {
-  return join28(homedir27(), ".failproofai", "audit-dashboard.json");
+  return join29(homedir27(), ".failproofai", "audit-dashboard.json");
 }
 function writeDashboardCache(params, result) {
   try {
@@ -21250,14 +21610,14 @@ var POLL_INTERVAL_MS = 150, POLL_TIMEOUT_MS = 30000;
 var init_open_browser = () => {};
 
 // scripts/parse-script-args.ts
-import { resolve as resolve12 } from "path";
+import { resolve as resolve13 } from "path";
 function parseStringFlag(flagName, errorLabel, inlineValue, args, index, options) {
   const raw = inlineValue ?? args[index + 1];
   if (raw === undefined || inlineValue === null && raw.startsWith("-")) {
     console.error(`Error: ${flagName} requires ${errorLabel}`);
     process.exit(1);
   }
-  const value = options?.resolve ? resolve12(raw) : raw;
+  const value = options?.resolve ? resolve13(raw) : raw;
   return { value, spliceCount: inlineValue !== null ? 1 : 2 };
 }
 function parseScriptArgs(argv) {
@@ -21306,17 +21666,17 @@ var init_parse_script_args = () => {};
 
 // scripts/install-diagnosis.mjs
 import { existsSync as existsSync17, readFileSync as readFileSync15, realpathSync } from "node:fs";
-import { dirname as dirname6, resolve as resolve13 } from "node:path";
+import { dirname as dirname7, resolve as resolve14 } from "node:path";
 import { homedir as homedir28, platform as platform4 } from "node:os";
 import { spawnSync } from "node:child_process";
 function findPackageRoot(start) {
   try {
     let dir = realpathSync(start);
-    if (existsSync17(dir) && !existsSync17(resolve13(dir, "package.json"))) {
-      dir = dirname6(dir);
+    if (existsSync17(dir) && !existsSync17(resolve14(dir, "package.json"))) {
+      dir = dirname7(dir);
     }
     while (true) {
-      const pkgPath = resolve13(dir, "package.json");
+      const pkgPath = resolve14(dir, "package.json");
       if (existsSync17(pkgPath)) {
         try {
           const pkg = JSON.parse(readFileSync15(pkgPath, "utf8"));
@@ -21324,7 +21684,7 @@ function findPackageRoot(start) {
             return dir;
         } catch {}
       }
-      const parent = dirname6(dir);
+      const parent = dirname7(dir);
       if (parent === dir)
         return null;
       dir = parent;
@@ -21337,7 +21697,7 @@ function readPackageVersion(packageRoot) {
   if (!packageRoot)
     return null;
   try {
-    const pkg = JSON.parse(readFileSync15(resolve13(packageRoot, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync15(resolve14(packageRoot, "package.json"), "utf8"));
     return typeof pkg.version === "string" ? pkg.version : null;
   } catch {
     return null;
@@ -21363,16 +21723,16 @@ function locateNpmGlobal() {
     const root = (res.stdout || "").trim();
     if (!root)
       return null;
-    const candidate = resolve13(root, PKG_NAME);
-    return existsSync17(resolve13(candidate, "package.json")) ? candidate : null;
+    const candidate = resolve14(root, PKG_NAME);
+    return existsSync17(resolve14(candidate, "package.json")) ? candidate : null;
   } catch {
     return null;
   }
 }
 function locateBunGlobal() {
   try {
-    const candidate = resolve13(homedir28(), ".bun", "install", "global", "node_modules", PKG_NAME);
-    return existsSync17(resolve13(candidate, "package.json")) ? candidate : null;
+    const candidate = resolve14(homedir28(), ".bun", "install", "global", "node_modules", PKG_NAME);
+    return existsSync17(resolve14(candidate, "package.json")) ? candidate : null;
   } catch {
     return null;
   }
@@ -21380,8 +21740,8 @@ function locateBunGlobal() {
 function buildRecommendation(pathFirstBin) {
   if (!pathFirstBin)
     return null;
-  const bunBinPrefix = resolve13(homedir28(), ".bun", "bin") + "/";
-  const bunGlobalPrefix = resolve13(homedir28(), ".bun", "install", "global") + "/";
+  const bunBinPrefix = resolve14(homedir28(), ".bun", "bin") + "/";
+  const bunGlobalPrefix = resolve14(homedir28(), ".bun", "install", "global") + "/";
   const isBun = pathFirstBin.startsWith(bunBinPrefix) || pathFirstBin.startsWith(bunGlobalPrefix);
   if (isBun) {
     return `rm -f ~/.bun/bin/${PKG_NAME} && rm -rf ~/.bun/install/global/node_modules/${PKG_NAME}`;
@@ -21462,7 +21822,7 @@ __export(exports_launch, {
 });
 import { spawn as spawn2 } from "child_process";
 import { realpathSync as realpathSync2, existsSync as existsSync18 } from "node:fs";
-import { resolve as resolve14, dirname as dirname7 } from "node:path";
+import { resolve as resolve15, dirname as dirname8 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { createInterface as createInterface2 } from "node:readline";
 function launch(mode) {
@@ -21477,8 +21837,8 @@ function launch(mode) {
     process.env.PORT = port;
     process.env.HOSTNAME = "0.0.0.0";
     cmd = "node";
-    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve14(dirname7(realpathSync2(fileURLToPath2(import.meta.url))), "..");
-    const serverJsPath = resolve14(packageRoot, ".next/standalone/server.js");
+    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve15(dirname8(realpathSync2(fileURLToPath2(import.meta.url))), "..");
+    const serverJsPath = resolve15(packageRoot, ".next/standalone/server.js");
     if (!existsSync18(serverJsPath)) {
       let shadowMessage = null;
       try {
@@ -21517,6 +21877,7 @@ Error: Cannot find server.js at:
     stdio: filterLogs ? ["inherit", "pipe", "pipe"] : "inherit",
     env: {
       ...process.env,
+      FAILPROOFAI_LAUNCH_CWD: process.env.FAILPROOFAI_LAUNCH_CWD ?? process.cwd(),
       ...filterLogs ? { FORCE_COLOR: process.env.FORCE_COLOR ?? "1" } : {},
       ...loggingLevel ? { FAILPROOFAI_LOG_LEVEL: loggingLevel } : {},
       ...disableTelemetry ? { FAILPROOFAI_TELEMETRY_DISABLED: "1" } : {},
@@ -21830,7 +22191,8 @@ WHAT IT DOES
 
 // src/hooks/manager.ts
 import { execSync as execSync7 } from "node:child_process";
-import { resolve as resolve15, basename as basename5 } from "node:path";
+import { existsSync as existsSync19 } from "node:fs";
+import { resolve as resolve16, basename as basename6 } from "node:path";
 import { homedir as homedir29, platform as platform5, arch as arch4, release as release3, hostname as hostname4 } from "node:os";
 function getSettingsPath2(scope, cwd) {
   return claudeCode.getSettingsPath(scope, cwd);
@@ -21936,34 +22298,45 @@ async function installHooksImpl2(policyNames, scope = "user", cwd, includeBeta =
   const configToWrite = { ...previousConfig, enabledPolicies: selectedPolicies };
   if (removeCustomHooks) {
     delete configToWrite.customPoliciesPath;
-  } else if (customPoliciesPath) {
-    configToWrite.customPoliciesPath = resolve15(customPoliciesPath);
-    let validatedHooks = [];
-    try {
-      validatedHooks = await loadCustomHooks(configToWrite.customPoliciesPath, { strict: true });
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      try {
-        await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
-          scope,
-          error_type: /not found/i.test(msg) ? "file_not_found" : "load_error"
-        });
-      } catch {}
-      console.error(`Error: ${msg}`);
-      process.exit(1);
-    }
-    if (validatedHooks.length === 0) {
+    delete configToWrite.customPoliciesPaths;
+  } else if (customPoliciesPath && (typeof customPoliciesPath === "string" || customPoliciesPath.length > 0)) {
+    const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path3) => resolve16(path3));
+    const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path3) => resolve16(path3)).filter((path3) => {
+      if (existsSync19(path3))
+        return true;
+      console.log(`Dropping custom policies path (file no longer exists): ${path3}`);
+      return false;
+    });
+    configToWrite.customPoliciesPaths = replace ? [...new Set(incoming)] : [...new Set([...carried, ...incoming])];
+    delete configToWrite.customPoliciesPath;
+    for (const path3 of incoming) {
+      let validatedHooks = [];
       try {
-        await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
-          scope,
-          error_type: "no_hooks_registered"
-        });
-      } catch {}
-      console.error(`Error: no hooks registered in ${customPoliciesPath}. ` + `Make sure your file calls customPolicies.add(...) at least once.`);
-      process.exit(1);
+        validatedHooks = await loadCustomHooks(path3, { strict: true });
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        try {
+          await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
+            scope,
+            error_type: /not found/i.test(msg) ? "file_not_found" : "load_error"
+          });
+        } catch {}
+        console.error(`Error: ${msg}`);
+        process.exit(1);
+      }
+      if (validatedHooks.length === 0) {
+        try {
+          await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
+            scope,
+            error_type: "no_hooks_registered"
+          });
+        } catch {}
+        console.error(`Error: no hooks registered in ${path3}. ` + `Make sure your file calls customPolicies.add(...) at least once.`);
+        process.exit(1);
+      }
+      console.log(`
+Validated ${validatedHooks.length} custom hook(s) from ${path3}: ${validatedHooks.map((h) => h.name).join(", ")}`);
     }
-    console.log(`
-Validated ${validatedHooks.length} custom hook(s): ${validatedHooks.map((h) => h.name).join(", ")}`);
   }
   writeScopedHooksConfig(configToWrite, scope, cwd);
   console.log(`
@@ -21971,18 +22344,21 @@ Enabled ${selectedPolicies.length} policy(ies): ${selectedPolicies.join(", ")}
 `);
   if (removeCustomHooks) {
     console.log("Custom hooks path cleared.");
-  } else if (configToWrite.customPoliciesPath) {
-    console.log(`Custom hooks path: ${configToWrite.customPoliciesPath}`);
+  } else if (configToWrite.customPoliciesPaths?.length || configToWrite.customPoliciesPath) {
+    const paths = configToWrite.customPoliciesPaths ?? [configToWrite.customPoliciesPath];
+    console.log(`Custom hooks paths: ${paths.join(", ")}`);
   }
   const writtenSettingsPaths = [];
   for (const cliId of selectedClis) {
     const integration = getIntegration(cliId);
-    const settingsPath = integration.getSettingsPath(scope, cwd);
+    const settingsPaths = settingsPathsFor(integration, scope, cwd);
     try {
-      const settings = integration.readSettings(settingsPath);
-      integration.writeHookEntries(settings, binaryPath, scope);
-      integration.writeSettings(settingsPath, settings);
-      writtenSettingsPaths.push({ cli: cliId, path: settingsPath });
+      for (const settingsPath of settingsPaths) {
+        const settings = integration.readSettings(settingsPath);
+        integration.writeHookEntries(settings, binaryPath, scope);
+        integration.writeSettings(settingsPath, settings);
+        writtenSettingsPaths.push({ cli: cliId, path: settingsPath });
+      }
     } catch (err) {
       const errorType = err instanceof Error && /EACCES|EPERM/.test(err.message) ? "permission_denied" : err instanceof Error && /ENOENT|ENOTDIR/.test(err.message) ? "path_not_found" : "write_error";
       try {
@@ -22013,7 +22389,7 @@ Enabled ${selectedPolicies.length} policy(ies): ${selectedPolicies.join(", ")}
       arch: arch4(),
       os_release: release3(),
       hostname_hash: hashToId2(hostname4()),
-      has_custom_hooks_path: !!configToWrite.customPoliciesPath,
+      has_custom_hooks_path: !!(configToWrite.customPoliciesPaths?.length || configToWrite.customPoliciesPath),
       has_policy_params: !!(configToWrite.policyParams && Object.keys(configToWrite.policyParams).length > 0),
       param_policy_names: configToWrite.policyParams ? Object.keys(configToWrite.policyParams) : [],
       command_format: scope === "project" ? "npx" : "absolute"
@@ -22073,6 +22449,7 @@ var init_manager2 = __esm(() => {
   init_hook_telemetry2();
   init_telemetry_id2();
   init_cli_error();
+  init_hook_logger();
   VALID_POLICY_NAMES2 = new Set(BUILTIN_POLICIES.map((p) => p.name));
 });
 
@@ -22411,9 +22788,9 @@ __export(exports_configure_wizard, {
   buildPresetChoices: () => buildPresetChoices,
   buildAgentChoices: () => buildAgentChoices
 });
-import { existsSync as existsSync19, mkdirSync as mkdirSync10, writeFileSync as writeFileSync9, readFileSync as readFileSync16 } from "node:fs";
+import { existsSync as existsSync20, mkdirSync as mkdirSync10, writeFileSync as writeFileSync9, readFileSync as readFileSync16 } from "node:fs";
 import { homedir as homedir30 } from "node:os";
-import { resolve as resolve16, sep as sep5 } from "node:path";
+import { resolve as resolve17, sep as sep5 } from "node:path";
 async function emit(event, props) {
   try {
     await trackHookEvent2(getInstanceId2(), event, props);
@@ -22470,12 +22847,21 @@ function buildAgentChoices(scope, cwd) {
     } catch {
       installedHere = false;
     }
+    let partialHint;
+    if (id === "hermes" && !installedHere) {
+      try {
+        const unhooked = unhookedHermesProfiles();
+        if (unhooked.length > 0) {
+          partialHint = `${unhooked.length} unhooked profile(s): ${unhooked.join(", ")}`;
+        }
+      } catch {}
+    }
     return {
       label: integration.displayName,
       value: id,
       checked: isDetected || installedHere,
       section: isDetected ? "Detected" : "Not installed · set up ahead of time",
-      hint: installedHere ? "already configured" : isDetected ? undefined : "not on PATH"
+      hint: installedHere ? "already configured" : partialHint ?? (isDetected ? undefined : "not on PATH")
     };
   });
 }
@@ -22525,7 +22911,7 @@ function setCustomPoliciesEnabled(scope, cwd, enabled) {
   const path3 = getConfigPathForScope(scope, cwd);
   let config = {};
   try {
-    if (existsSync19(path3))
+    if (existsSync20(path3))
       config = JSON.parse(readFileSync16(path3, "utf8"));
   } catch {
     return;
@@ -22545,8 +22931,8 @@ function describeCustomPolicies(cwd) {
   const scopes = [];
   let fileCount = 0;
   const dirs = [
-    { dir: resolve16(cwd, ".failproofai", "policies"), label: "project" },
-    { dir: resolve16(homedir30(), ".failproofai", "policies"), label: "global" }
+    { dir: resolve17(cwd, ".failproofai", "policies"), label: "project" },
+    { dir: resolve17(homedir30(), ".failproofai", "policies"), label: "global" }
   ];
   for (const { dir, label } of dirs) {
     const found = discoverPolicyFiles(dir);
@@ -22556,7 +22942,7 @@ function describeCustomPolicies(cwd) {
       fileCount += found.length;
     }
     for (const name of findSkippedPolicyFiles(dir)) {
-      warnings.push(`! ${homeify(resolve16(dir, name))} is NOT loaded — rename to ` + `${name.replace(/\.(js|mjs|ts)$/, "-policies.$1")}`);
+      warnings.push(`! ${homeify(resolve17(dir, name))} is NOT loaded — rename to ` + `${name.replace(/\.(js|mjs|ts)$/, "-policies.$1")}`);
     }
   }
   return { active, warnings, fileCount, scopes };
@@ -22579,20 +22965,22 @@ function reviewLines(state) {
   lines.push("  This will update:");
   for (const cli of clis) {
     const integration = getIntegration(cli);
-    lines.push(`    ${homeify(integration.getSettingsPath(scope, cwd))}   ${integration.displayName} hooks`);
+    for (const p of settingsPathsFor(integration, scope, cwd)) {
+      lines.push(`    ${homeify(p)}   ${integration.displayName} hooks`);
+    }
   }
   lines.push(`    ${homeify(getConfigPathForScope(scope, cwd))}   ${policies.length} policies`);
   return lines;
 }
 function firstRunMarkerPath() {
-  return resolve16(homedir30(), ".failproofai", ".launcher-configured");
+  return resolve17(homedir30(), ".failproofai", ".launcher-configured");
 }
 function hasSeenLauncher() {
-  return existsSync19(firstRunMarkerPath());
+  return existsSync20(firstRunMarkerPath());
 }
 function markLauncherSeen() {
   try {
-    mkdirSync10(resolve16(homedir30(), ".failproofai"), { recursive: true });
+    mkdirSync10(resolve17(homedir30(), ".failproofai"), { recursive: true });
     writeFileSync9(firstRunMarkerPath(), "1", "utf8");
   } catch {}
 }
@@ -22742,8 +23130,8 @@ __export(exports_launch2, {
   launch: () => launch2
 });
 import { spawn as spawn3 } from "child_process";
-import { realpathSync as realpathSync3, existsSync as existsSync20 } from "node:fs";
-import { resolve as resolve17, dirname as dirname8 } from "node:path";
+import { realpathSync as realpathSync3, existsSync as existsSync21 } from "node:fs";
+import { resolve as resolve18, dirname as dirname9 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { createInterface as createInterface3 } from "node:readline";
 function launch2(mode) {
@@ -22758,9 +23146,9 @@ function launch2(mode) {
     process.env.PORT = port;
     process.env.HOSTNAME = "0.0.0.0";
     cmd = "node";
-    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve17(dirname8(realpathSync3(fileURLToPath3(import.meta.url))), "..");
-    const serverJsPath = resolve17(packageRoot, ".next/standalone/server.js");
-    if (!existsSync20(serverJsPath)) {
+    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve18(dirname9(realpathSync3(fileURLToPath3(import.meta.url))), "..");
+    const serverJsPath = resolve18(packageRoot, ".next/standalone/server.js");
+    if (!existsSync21(serverJsPath)) {
       let shadowMessage = null;
       try {
         const diag = diagnoseShadow({ selfPackageRoot: packageRoot, selfVersion: version2 });
@@ -22798,6 +23186,7 @@ Error: Cannot find server.js at:
     stdio: filterLogs ? ["inherit", "pipe", "pipe"] : "inherit",
     env: {
       ...process.env,
+      FAILPROOFAI_LAUNCH_CWD: process.env.FAILPROOFAI_LAUNCH_CWD ?? process.cwd(),
       ...filterLogs ? { FORCE_COLOR: process.env.FORCE_COLOR ?? "1" } : {},
       ...loggingLevel ? { FAILPROOFAI_LOG_LEVEL: loggingLevel } : {},
       ...disableTelemetry ? { FAILPROOFAI_TELEMETRY_DISABLED: "1" } : {},
@@ -22854,17 +23243,17 @@ var init_cli_error2 = __esm(() => {
 
 // bin/failproofai.mjs
 import { realpathSync as realpathSync4 } from "fs";
-import { dirname as dirname9, resolve as resolve18 } from "path";
+import { dirname as dirname10, resolve as resolve19 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 // package.json
-var version = "0.0.14";
+var version = "0.0.15-beta.1";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {
-  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve18(dirname9(realpathSync4(fileURLToPath4(import.meta.url))), "..");
+  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve19(dirname10(realpathSync4(fileURLToPath4(import.meta.url))), "..");
 }
 if (!process.env.FAILPROOFAI_DIST_PATH) {
-  process.env.FAILPROOFAI_DIST_PATH = resolve18(dirname9(realpathSync4(fileURLToPath4(import.meta.url))), "..", "dist");
+  process.env.FAILPROOFAI_DIST_PATH = resolve19(dirname10(realpathSync4(fileURLToPath4(import.meta.url))), "..", "dist");
 }
 var args = process.argv.slice(2);
 if (args[0] === "p")
@@ -22951,7 +23340,7 @@ COMMANDS
     --scope user|project|local     Config scope to write to (default: user)
                                    (Codex / Copilot / Cursor / OpenCode / Pi support user|project only)
     --beta                         Include beta policies
-    --custom, -c <path>            Path to a JS file of custom policies
+    --custom, -c <path>            Custom policy file (repeat for multiple files)
 
   policies --uninstall, -u       Disable policies or remove hooks
     [names...]                     Specific policy names to disable
@@ -22959,7 +23348,7 @@ COMMANDS
                                    Agent CLI(s) to uninstall from
     --scope user|project|local|all Config scope to remove from (default: user)
     --beta                         Remove only beta policies
-    --custom, -c                   Clear the customPoliciesPath from config
+    --custom, -c                   Clear all explicit custom policy paths
 
   policies --help, -h            Show this help for the policies command
 
@@ -23043,7 +23432,7 @@ OPTIONS (install)
   --scope user|project|local     Config scope to write to (default: user)
                                  (Codex / Copilot / Cursor / OpenCode / Pi support user|project only)
   --beta                         Include beta policies
-  --custom, -c <path>            Path to a JS file of custom policies
+  --custom, -c <path>            Custom policy file (repeat for multiple files)
                                  (skips interactive prompt; validates file first)
 
 OPTIONS (uninstall)
@@ -23052,7 +23441,7 @@ OPTIONS (uninstall)
                                  Agent CLI(s) to uninstall from
   --scope user|project|local|all Config scope to remove from (default: user)
   --beta                         Remove only beta policies
-  --custom, -c                   Clear the customPoliciesPath from config
+  --custom, -c                   Clear all explicit custom policy paths
 
 EXAMPLES
   failproofai policies
@@ -23067,6 +23456,7 @@ EXAMPLES
   failproofai policies --install --cli devin --scope project
   failproofai policies --install --cli claude codex copilot cursor opencode pi hermes openclaw factory devin antigravity goose
   failproofai policies --install --custom ./my-policies.js
+  failproofai policies --install --custom ./security.js --custom ./workflow.js
   failproofai policies -i -c ./my-policies.js
   failproofai policies --uninstall block-sudo
   failproofai policies --uninstall --cli codex
@@ -23091,9 +23481,9 @@ EXAMPLES
       if (scopeIdx >= 0 && !["user", "project", "local"].includes(scope)) {
         throw new CliError3(`Invalid scope: ${scope}. Valid values: user, project, local`);
       }
-      const customIdx = subArgs.includes("--custom") ? subArgs.indexOf("--custom") : subArgs.includes("-c") ? subArgs.indexOf("-c") : -1;
-      const customPoliciesPath = customIdx >= 0 ? subArgs[customIdx + 1] : undefined;
-      if (customIdx >= 0 && (!customPoliciesPath || customPoliciesPath.startsWith("-"))) {
+      const customIdxs = subArgs.map((arg, index) => arg === "--custom" || arg === "-c" ? index : -1).filter((index) => index >= 0);
+      const customPoliciesPaths = customIdxs.map((index) => subArgs[index + 1]);
+      if (customPoliciesPaths.some((path3) => !path3 || path3.startsWith("-"))) {
         throw new CliError3(`Missing path after --custom/-c
 Usage: --custom <path>  (e.g. --custom ./my-policies.js)`);
       }
@@ -23121,7 +23511,7 @@ Usage: --custom <path>  (e.g. --custom ./my-policies.js)`);
       const consumedIdxs = new Set;
       if (scopeIdx >= 0)
         consumedIdxs.add(scopeIdx + 1);
-      if (customIdx >= 0)
+      for (const customIdx of customIdxs)
         consumedIdxs.add(customIdx + 1);
       for (const i of cliConsumedIdxs)
         consumedIdxs.add(i);
@@ -23132,16 +23522,16 @@ Usage: --custom <path>  (e.g. --custom ./my-policies.js)`);
 Run \`failproofai policies --help\` for usage.`);
       }
       const explicitPolicyNames = subArgs.filter((a, idx) => !a.startsWith("-") && !consumedIdxs.has(idx));
-      const policyNames = explicitPolicyNames.length > 0 ? explicitPolicyNames : customPoliciesPath !== undefined ? [] : undefined;
+      const policyNames = explicitPolicyNames.length > 0 ? explicitPolicyNames : customPoliciesPaths.length > 0 ? [] : undefined;
       const cli = await resolveTargetClis2(cliFlagValues.length > 0 ? cliFlagValues : undefined, "install");
-      await installHooks3(policyNames, scope, undefined, includeBeta, undefined, customPoliciesPath, false, cli);
+      await installHooks3(policyNames, scope, undefined, includeBeta, undefined, customPoliciesPaths.length > 0 ? customPoliciesPaths : undefined, false, cli);
       await track("cli_install_success", {
         scope,
         cli,
         cli_count: cli.length,
         explicit_policies: explicitPolicyNames.length > 0,
         include_beta: includeBeta,
-        has_custom_path: !!customPoliciesPath
+        has_custom_path: customPoliciesPaths.length > 0
       });
       process.exit(0);
     }