failproofai 0.0.15-beta.0 → 0.0.15

package/dist/cli.mjs

@@ -19,7 +19,7 @@ var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // package.json
-var version2 = "0.0.15-beta.0";
+var version2 = "0.0.15";
 var init_package = () => {};
 
 // src/posthog-key.ts
@@ -669,6 +669,9 @@ var init_hook_logger = __esm(() => {
 import { readFileSync, writeFileSync, existsSync as existsSync2, mkdirSync as mkdirSync2, statSync as statSync2 } from "node:fs";
 import { resolve, dirname } from "node:path";
 import { homedir as homedir2 } from "node:os";
+function configuredCustomPolicyPaths(config) {
+  return config.customPoliciesPaths ?? (config.customPoliciesPath ? [config.customPoliciesPath] : []);
+}
 function readConfigAt(path2) {
   if (!existsSync2(path2))
     return {};
@@ -719,12 +722,20 @@ function readMergedHooksConfig(cwd) {
       }
     }
   }
-  const customPoliciesPath = project.customPoliciesPath ?? local.customPoliciesPath ?? global_.customPoliciesPath;
+  const customPoliciesPaths = [project, local, global_].map((scope) => scope.customPoliciesPaths !== undefined ? scope.customPoliciesPaths : scope.customPoliciesPath !== undefined ? [scope.customPoliciesPath] : undefined).find((paths) => paths !== undefined);
+  const disabledCustomPolicies = new Set([
+    ...project.disabledCustomPolicies ?? [],
+    ...local.disabledCustomPolicies ?? [],
+    ...global_.disabledCustomPolicies ?? []
+  ]);
+  const customPoliciesEnabled = project.customPoliciesEnabled ?? local.customPoliciesEnabled ?? global_.customPoliciesEnabled;
   const llm = project.llm ?? local.llm ?? global_.llm;
   return {
     enabledPolicies: [...enabledSet],
     ...Object.keys(mergedParams).length > 0 ? { policyParams: mergedParams } : {},
-    ...customPoliciesPath !== undefined ? { customPoliciesPath } : {},
+    ...customPoliciesPaths !== undefined ? { customPoliciesPaths } : {},
+    ...disabledCustomPolicies.size ? { disabledCustomPolicies: [...disabledCustomPolicies] } : {},
+    ...customPoliciesEnabled !== undefined ? { customPoliciesEnabled } : {},
     ...llm !== undefined ? { llm } : {}
   };
 }
@@ -3619,6 +3630,12 @@ async function loadCustomHooks(customPoliciesPath, opts) {
   await loadSingleFile(absPath, opts);
   return getCustomHooks();
 }
+function customPolicyId(file, name) {
+  return `custom:${file}:${name}`;
+}
+function conventionPolicyId(scope, file, name) {
+  return `convention:${scope}:${file}:${name}`;
+}
 function warnSkippedPolicyFiles(dir, scope) {
   const skipped = findSkippedPolicyFiles(dir);
   if (skipped.length === 0)
@@ -3626,19 +3643,25 @@ function warnSkippedPolicyFiles(dir, scope) {
   const suggest = (n) => n.replace(/\.(js|mjs|ts)$/, "-policies.$1");
   hookLogWarn(`${scope} policies: ${skipped.length} file(s) in ${dir} are NOT loaded — ` + `the convention only loads names ending in "policies.js|mjs|ts". ` + skipped.map((n) => `${n} → rename to ${suggest(n)}`).join("; "));
 }
-async function loadAllCustomHooks(customPoliciesPath, opts) {
+async function loadAllCustomHooks(customPoliciesPaths, opts) {
   clearCustomHooks();
   const conventionSources = [];
   const projectRoot = findProjectConfigDir(opts?.sessionCwd ?? process.cwd());
   const conventionEnabled = opts?.customPoliciesEnabled !== false;
   const loadedPaths = new Set;
-  if (customPoliciesPath) {
-    const absPath = isAbsolute(customPoliciesPath) ? customPoliciesPath : resolve4(projectRoot, customPoliciesPath);
+  for (const customPoliciesPath of typeof customPoliciesPaths === "string" ? [customPoliciesPaths] : customPoliciesPaths ?? []) {
+    const absPath = resolve4(projectRoot, customPoliciesPath);
     if (existsSync3(absPath)) {
-      loadedPaths.add(absPath);
-      await loadSingleFile(absPath);
+      if (!loadedPaths.has(absPath)) {
+        loadedPaths.add(absPath);
+        const hooksBefore = getCustomHooks().length;
+        await loadSingleFile(absPath);
+        for (const hook of getCustomHooks().slice(hooksBefore)) {
+          hook.__policyId = customPolicyId(absPath, hook.name);
+        }
+      }
     } else {
-      hookLogWarn(`customPoliciesPath not found: ${absPath}`);
+      hookLogWarn(`custom policy path not found: ${absPath}`);
     }
   }
   const hooksBeforeConvention = getCustomHooks().length;
@@ -3651,6 +3674,9 @@ async function loadAllCustomHooks(customPoliciesPath, opts) {
     const hooksBefore = getCustomHooks().length;
     await loadSingleFile(file, { conventionScope: "project" });
     const newHooks = getCustomHooks().slice(hooksBefore);
+    for (const hook of newHooks) {
+      hook.__policyId = conventionPolicyId("project", basename(file), hook.name);
+    }
     if (newHooks.length > 0) {
       conventionSources.push({
         scope: "project",
@@ -3668,6 +3694,9 @@ async function loadAllCustomHooks(customPoliciesPath, opts) {
     const hooksBefore = getCustomHooks().length;
     await loadSingleFile(file, { conventionScope: "user" });
     const newHooks = getCustomHooks().slice(hooksBefore);
+    for (const hook of newHooks) {
+      hook.__policyId = conventionPolicyId("user", basename(file), hook.name);
+    }
     if (newHooks.length > 0) {
       conventionSources.push({
         scope: "user",
@@ -8521,13 +8550,17 @@ async function handleHookEvent(eventType, cli = "claude") {
     const config = readMergedHooksConfig(session.cwd);
     clearPolicies();
     registerBuiltinPolicies(config.enabledPolicies);
-    const loadResult = await loadAllCustomHooks(config.customPoliciesPath, {
+    const loadResult = await loadAllCustomHooks(config.customPoliciesPaths ?? config.customPoliciesPath, {
       sessionCwd: session.cwd,
       customPoliciesEnabled: config.customPoliciesEnabled
     });
     const customHooksList = loadResult.hooks;
+    const disabledCustomPolicies = new Set(config.disabledCustomPolicies ?? []);
     const conventionHookNames = new Set(loadResult.conventionSources.flatMap((s) => s.hookNames));
     for (const hook of customHooksList) {
+      const policyId = hook.__policyId;
+      if (policyId && disabledCustomPolicies.has(policyId))
+        continue;
       const hookName = hook.name;
       const conventionScope = hook.__conventionScope;
       const isConvention = !!conventionScope;
@@ -18282,34 +18315,45 @@ async function installHooksImpl(policyNames, scope = "user", cwd, includeBeta =
   const configToWrite = { ...previousConfig, enabledPolicies: selectedPolicies };
   if (removeCustomHooks) {
     delete configToWrite.customPoliciesPath;
-  } else if (customPoliciesPath) {
-    configToWrite.customPoliciesPath = resolve12(customPoliciesPath);
-    let validatedHooks = [];
-    try {
-      validatedHooks = await loadCustomHooks(configToWrite.customPoliciesPath, { strict: true });
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      try {
-        await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
-          scope,
-          error_type: /not found/i.test(msg) ? "file_not_found" : "load_error"
-        });
-      } catch {}
-      console.error(`Error: ${msg}`);
-      process.exit(1);
-    }
-    if (validatedHooks.length === 0) {
+    delete configToWrite.customPoliciesPaths;
+  } else if (customPoliciesPath && (typeof customPoliciesPath === "string" || customPoliciesPath.length > 0)) {
+    const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path3) => resolve12(path3));
+    const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path3) => resolve12(path3)).filter((path3) => {
+      if (existsSync12(path3))
+        return true;
+      console.log(`Dropping custom policies path (file no longer exists): ${path3}`);
+      return false;
+    });
+    configToWrite.customPoliciesPaths = replace ? [...new Set(incoming)] : [...new Set([...carried, ...incoming])];
+    delete configToWrite.customPoliciesPath;
+    for (const path3 of incoming) {
+      let validatedHooks = [];
       try {
-        await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
-          scope,
-          error_type: "no_hooks_registered"
-        });
-      } catch {}
-      console.error(`Error: no hooks registered in ${customPoliciesPath}. ` + `Make sure your file calls customPolicies.add(...) at least once.`);
-      process.exit(1);
+        validatedHooks = await loadCustomHooks(path3, { strict: true });
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        try {
+          await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
+            scope,
+            error_type: /not found/i.test(msg) ? "file_not_found" : "load_error"
+          });
+        } catch {}
+        console.error(`Error: ${msg}`);
+        process.exit(1);
+      }
+      if (validatedHooks.length === 0) {
+        try {
+          await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
+            scope,
+            error_type: "no_hooks_registered"
+          });
+        } catch {}
+        console.error(`Error: no hooks registered in ${path3}. ` + `Make sure your file calls customPolicies.add(...) at least once.`);
+        process.exit(1);
+      }
+      console.log(`
+Validated ${validatedHooks.length} custom hook(s) from ${path3}: ${validatedHooks.map((h) => h.name).join(", ")}`);
     }
-    console.log(`
-Validated ${validatedHooks.length} custom hook(s): ${validatedHooks.map((h) => h.name).join(", ")}`);
   }
   writeScopedHooksConfig(configToWrite, scope, cwd);
   console.log(`
@@ -18317,8 +18361,9 @@ Enabled ${selectedPolicies.length} policy(ies): ${selectedPolicies.join(", ")}
 `);
   if (removeCustomHooks) {
     console.log("Custom hooks path cleared.");
-  } else if (configToWrite.customPoliciesPath) {
-    console.log(`Custom hooks path: ${configToWrite.customPoliciesPath}`);
+  } else if (configToWrite.customPoliciesPaths?.length || configToWrite.customPoliciesPath) {
+    const paths = configToWrite.customPoliciesPaths ?? [configToWrite.customPoliciesPath];
+    console.log(`Custom hooks paths: ${paths.join(", ")}`);
   }
   const writtenSettingsPaths = [];
   for (const cliId of selectedClis) {
@@ -18361,7 +18406,7 @@ Enabled ${selectedPolicies.length} policy(ies): ${selectedPolicies.join(", ")}
       arch: arch3(),
       os_release: release2(),
       hostname_hash: hashToId2(hostname3()),
-      has_custom_hooks_path: !!configToWrite.customPoliciesPath,
+      has_custom_hooks_path: !!(configToWrite.customPoliciesPaths?.length || configToWrite.customPoliciesPath),
       has_policy_params: !!(configToWrite.policyParams && Object.keys(configToWrite.policyParams).length > 0),
       param_policy_names: configToWrite.policyParams ? Object.keys(configToWrite.policyParams) : [],
       command_format: scope === "project" ? "npx" : "absolute"
@@ -18416,6 +18461,7 @@ async function removeHooks(policyNames, scope = "user", cwd, opts) {
   if (opts?.removeCustomHooks) {
     const config = readScopedHooksConfig(configScope, cwd);
     delete config.customPoliciesPath;
+    delete config.customPoliciesPaths;
     writeScopedHooksConfig(config, configScope, cwd);
     console.log("Custom hooks path cleared.");
   }
@@ -18521,20 +18567,21 @@ async function removeHooks(policyNames, scope = "user", cwd, opts) {
   if (scope === "all") {
     for (const s of HOOK_SCOPES) {
       const existing = readScopedHooksConfig(s, cwd);
-      if (existing.enabledPolicies.length > 0 || existing.customPoliciesPath || existing.policyParams) {
-        const { customPoliciesPath: _drop, policyParams: _dropParams, ...rest } = existing;
+      if (existing.enabledPolicies.length > 0 || existing.customPoliciesPaths?.length || existing.customPoliciesPath || existing.policyParams) {
+        const { customPoliciesPath: _drop, customPoliciesPaths: _dropMany, policyParams: _dropParams, ...rest } = existing;
         writeScopedHooksConfig({ ...rest, enabledPolicies: [] }, s, cwd);
       }
     }
   } else if (!HOOK_SCOPES.some((s) => hooksInstalledInSettings(s, cwd))) {
     const existing = readScopedHooksConfig(configScope, cwd);
-    const { customPoliciesPath: _drop, policyParams: _dropParams, ...rest } = existing;
+    const { customPoliciesPath: _drop, customPoliciesPaths: _dropMany, policyParams: _dropParams, ...rest } = existing;
     writeScopedHooksConfig({ ...rest, enabledPolicies: [] }, configScope, cwd);
   }
 }
 async function listHooks(cwd) {
   const config = readMergedHooksConfig(cwd);
   const enabledSet = new Set(config.enabledPolicies);
+  const disabledCustomSet = new Set(config.disabledCustomPolicies ?? []);
   const uniqueScopes = deduplicateScopes(HOOK_SCOPES, cwd);
   const installedScopes = uniqueScopes.filter((s) => hooksInstalledInSettings(s, cwd));
   const regularPolicies = BUILTIN_POLICIES.filter((p) => !p.beta);
@@ -18658,19 +18705,26 @@ Failproof AI Hook Policies
       } catch {}
     }
   }
-  if (config.customPoliciesPath) {
+  const explicitPaths = configuredCustomPolicyPaths(config);
+  if (explicitPaths.length > 0) {
     console.log(`
-  ── Custom Policies (${config.customPoliciesPath}) ───────────────────────`);
-    if (!existsSync12(config.customPoliciesPath)) {
-      console.log(`  \x1B[31m✗ File not found: ${config.customPoliciesPath}\x1B[0m`);
-    } else {
-      const hooks = await loadCustomHooks(config.customPoliciesPath);
+  ── Custom Policies ───────────────────────`);
+    for (const path3 of explicitPaths) {
+      const absPath = resolve12(findProjectConfigDir(cwd ?? process.cwd()), path3);
+      console.log(`  ${absPath}`);
+      if (!existsSync12(absPath)) {
+        console.log(`  \x1B[31m✗ File not found: ${absPath}\x1B[0m`);
+        continue;
+      }
+      const hooks = await loadCustomHooks(absPath);
       if (hooks.length === 0) {
         console.log(`  \x1B[31m✗ ERR  failed to load (check ~/.failproofai/logs/hooks.log)\x1B[0m`);
       } else {
         const descColWidth = nameColWidth;
         for (const hook of hooks) {
-          console.log(`  \x1B[32m✓\x1B[0m       ${hook.name.padEnd(descColWidth)}${hook.description ?? ""}`);
+          const disabled = disabledCustomSet.has(`custom:${absPath}:${hook.name}`);
+          const status = disabled ? "\x1B[2m  OFF\x1B[0m" : "\x1B[32m✓ ON\x1B[0m";
+          console.log(`  ${status}    ${hook.name.padEnd(descColWidth)}${hook.description ?? ""}`);
         }
       }
     }
@@ -18693,6 +18747,7 @@ Failproof AI Hook Policies
     if (files.length === 0)
       continue;
     const targets = dir === projectDir && dir === userDir ? ["project", "user"] : dir === projectDir ? ["project"] : ["user"];
+    const policyScope = dir === projectDir ? "project" : "user";
     const record = (file, hooks) => {
       for (const t of targets)
         discovered[t].push({ file, hooks });
@@ -18708,8 +18763,14 @@ Failproof AI Hook Policies
         if (hooks.length === 0) {
           console.log(`  \x1B[31m✗\x1B[0m       ${filename.padEnd(colWidth)}\x1B[31mfailed to load\x1B[0m`);
         } else {
-          const hookSummary = hooks.map((h) => h.name).join(", ");
-          console.log(`  \x1B[32m✓\x1B[0m       ${filename.padEnd(colWidth)}${hooks.length} hook(s): ${hookSummary}`);
+          const hookStates = hooks.map((hook) => ({
+            hook,
+            disabled: disabledCustomSet.has(`convention:${policyScope}:${filename}:${hook.name}`)
+          }));
+          const disabledCount = hookStates.filter((entry) => entry.disabled).length;
+          const status = disabledCount === 0 ? "\x1B[32m✓ ON\x1B[0m" : disabledCount === hooks.length ? "\x1B[2m  OFF\x1B[0m" : "\x1B[33m◐ MIXED\x1B[0m";
+          const hookSummary = hookStates.map(({ hook, disabled }) => `${hook.name}${disabled ? " (OFF)" : ""}`).join(", ");
+          console.log(`  ${status}    ${filename.padEnd(colWidth)}${hooks.length} hook(s): ${hookSummary}`);
         }
       } catch {
         const filename = basename4(file);
@@ -22130,6 +22191,7 @@ WHAT IT DOES
 
 // src/hooks/manager.ts
 import { execSync as execSync7 } from "node:child_process";
+import { existsSync as existsSync19 } from "node:fs";
 import { resolve as resolve16, basename as basename6 } from "node:path";
 import { homedir as homedir29, platform as platform5, arch as arch4, release as release3, hostname as hostname4 } from "node:os";
 function getSettingsPath2(scope, cwd) {
@@ -22236,34 +22298,45 @@ async function installHooksImpl2(policyNames, scope = "user", cwd, includeBeta =
   const configToWrite = { ...previousConfig, enabledPolicies: selectedPolicies };
   if (removeCustomHooks) {
     delete configToWrite.customPoliciesPath;
-  } else if (customPoliciesPath) {
-    configToWrite.customPoliciesPath = resolve16(customPoliciesPath);
-    let validatedHooks = [];
-    try {
-      validatedHooks = await loadCustomHooks(configToWrite.customPoliciesPath, { strict: true });
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      try {
-        await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
-          scope,
-          error_type: /not found/i.test(msg) ? "file_not_found" : "load_error"
-        });
-      } catch {}
-      console.error(`Error: ${msg}`);
-      process.exit(1);
-    }
-    if (validatedHooks.length === 0) {
+    delete configToWrite.customPoliciesPaths;
+  } else if (customPoliciesPath && (typeof customPoliciesPath === "string" || customPoliciesPath.length > 0)) {
+    const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path3) => resolve16(path3));
+    const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path3) => resolve16(path3)).filter((path3) => {
+      if (existsSync19(path3))
+        return true;
+      console.log(`Dropping custom policies path (file no longer exists): ${path3}`);
+      return false;
+    });
+    configToWrite.customPoliciesPaths = replace ? [...new Set(incoming)] : [...new Set([...carried, ...incoming])];
+    delete configToWrite.customPoliciesPath;
+    for (const path3 of incoming) {
+      let validatedHooks = [];
       try {
-        await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
-          scope,
-          error_type: "no_hooks_registered"
-        });
-      } catch {}
-      console.error(`Error: no hooks registered in ${customPoliciesPath}. ` + `Make sure your file calls customPolicies.add(...) at least once.`);
-      process.exit(1);
+        validatedHooks = await loadCustomHooks(path3, { strict: true });
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        try {
+          await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
+            scope,
+            error_type: /not found/i.test(msg) ? "file_not_found" : "load_error"
+          });
+        } catch {}
+        console.error(`Error: ${msg}`);
+        process.exit(1);
+      }
+      if (validatedHooks.length === 0) {
+        try {
+          await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
+            scope,
+            error_type: "no_hooks_registered"
+          });
+        } catch {}
+        console.error(`Error: no hooks registered in ${path3}. ` + `Make sure your file calls customPolicies.add(...) at least once.`);
+        process.exit(1);
+      }
+      console.log(`
+Validated ${validatedHooks.length} custom hook(s) from ${path3}: ${validatedHooks.map((h) => h.name).join(", ")}`);
     }
-    console.log(`
-Validated ${validatedHooks.length} custom hook(s): ${validatedHooks.map((h) => h.name).join(", ")}`);
   }
   writeScopedHooksConfig(configToWrite, scope, cwd);
   console.log(`
@@ -22271,8 +22344,9 @@ Enabled ${selectedPolicies.length} policy(ies): ${selectedPolicies.join(", ")}
 `);
   if (removeCustomHooks) {
     console.log("Custom hooks path cleared.");
-  } else if (configToWrite.customPoliciesPath) {
-    console.log(`Custom hooks path: ${configToWrite.customPoliciesPath}`);
+  } else if (configToWrite.customPoliciesPaths?.length || configToWrite.customPoliciesPath) {
+    const paths = configToWrite.customPoliciesPaths ?? [configToWrite.customPoliciesPath];
+    console.log(`Custom hooks paths: ${paths.join(", ")}`);
   }
   const writtenSettingsPaths = [];
   for (const cliId of selectedClis) {
@@ -22315,7 +22389,7 @@ Enabled ${selectedPolicies.length} policy(ies): ${selectedPolicies.join(", ")}
       arch: arch4(),
       os_release: release3(),
       hostname_hash: hashToId2(hostname4()),
-      has_custom_hooks_path: !!configToWrite.customPoliciesPath,
+      has_custom_hooks_path: !!(configToWrite.customPoliciesPaths?.length || configToWrite.customPoliciesPath),
       has_policy_params: !!(configToWrite.policyParams && Object.keys(configToWrite.policyParams).length > 0),
       param_policy_names: configToWrite.policyParams ? Object.keys(configToWrite.policyParams) : [],
       command_format: scope === "project" ? "npx" : "absolute"
@@ -22714,7 +22788,7 @@ __export(exports_configure_wizard, {
   buildPresetChoices: () => buildPresetChoices,
   buildAgentChoices: () => buildAgentChoices
 });
-import { existsSync as existsSync19, mkdirSync as mkdirSync10, writeFileSync as writeFileSync9, readFileSync as readFileSync16 } from "node:fs";
+import { existsSync as existsSync20, mkdirSync as mkdirSync10, writeFileSync as writeFileSync9, readFileSync as readFileSync16 } from "node:fs";
 import { homedir as homedir30 } from "node:os";
 import { resolve as resolve17, sep as sep5 } from "node:path";
 async function emit(event, props) {
@@ -22837,7 +22911,7 @@ function setCustomPoliciesEnabled(scope, cwd, enabled) {
   const path3 = getConfigPathForScope(scope, cwd);
   let config = {};
   try {
-    if (existsSync19(path3))
+    if (existsSync20(path3))
       config = JSON.parse(readFileSync16(path3, "utf8"));
   } catch {
     return;
@@ -22902,7 +22976,7 @@ function firstRunMarkerPath() {
   return resolve17(homedir30(), ".failproofai", ".launcher-configured");
 }
 function hasSeenLauncher() {
-  return existsSync19(firstRunMarkerPath());
+  return existsSync20(firstRunMarkerPath());
 }
 function markLauncherSeen() {
   try {
@@ -23056,7 +23130,7 @@ __export(exports_launch2, {
   launch: () => launch2
 });
 import { spawn as spawn3 } from "child_process";
-import { realpathSync as realpathSync3, existsSync as existsSync20 } from "node:fs";
+import { realpathSync as realpathSync3, existsSync as existsSync21 } from "node:fs";
 import { resolve as resolve18, dirname as dirname9 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { createInterface as createInterface3 } from "node:readline";
@@ -23074,7 +23148,7 @@ function launch2(mode) {
     cmd = "node";
     const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve18(dirname9(realpathSync3(fileURLToPath3(import.meta.url))), "..");
     const serverJsPath = resolve18(packageRoot, ".next/standalone/server.js");
-    if (!existsSync20(serverJsPath)) {
+    if (!existsSync21(serverJsPath)) {
       let shadowMessage = null;
       try {
         const diag = diagnoseShadow({ selfPackageRoot: packageRoot, selfVersion: version2 });
@@ -23172,7 +23246,7 @@ import { realpathSync as realpathSync4 } from "fs";
 import { dirname as dirname10, resolve as resolve19 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 // package.json
-var version = "0.0.15-beta.0";
+var version = "0.0.15";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {
@@ -23266,7 +23340,7 @@ COMMANDS
     --scope user|project|local     Config scope to write to (default: user)
                                    (Codex / Copilot / Cursor / OpenCode / Pi support user|project only)
     --beta                         Include beta policies
-    --custom, -c <path>            Path to a JS file of custom policies
+    --custom, -c <path>            Custom policy file (repeat for multiple files)
 
   policies --uninstall, -u       Disable policies or remove hooks
     [names...]                     Specific policy names to disable
@@ -23274,7 +23348,7 @@ COMMANDS
                                    Agent CLI(s) to uninstall from
     --scope user|project|local|all Config scope to remove from (default: user)
     --beta                         Remove only beta policies
-    --custom, -c                   Clear the customPoliciesPath from config
+    --custom, -c                   Clear all explicit custom policy paths
 
   policies --help, -h            Show this help for the policies command
 
@@ -23358,7 +23432,7 @@ OPTIONS (install)
   --scope user|project|local     Config scope to write to (default: user)
                                  (Codex / Copilot / Cursor / OpenCode / Pi support user|project only)
   --beta                         Include beta policies
-  --custom, -c <path>            Path to a JS file of custom policies
+  --custom, -c <path>            Custom policy file (repeat for multiple files)
                                  (skips interactive prompt; validates file first)
 
 OPTIONS (uninstall)
@@ -23367,7 +23441,7 @@ OPTIONS (uninstall)
                                  Agent CLI(s) to uninstall from
   --scope user|project|local|all Config scope to remove from (default: user)
   --beta                         Remove only beta policies
-  --custom, -c                   Clear the customPoliciesPath from config
+  --custom, -c                   Clear all explicit custom policy paths
 
 EXAMPLES
   failproofai policies
@@ -23382,6 +23456,7 @@ EXAMPLES
   failproofai policies --install --cli devin --scope project
   failproofai policies --install --cli claude codex copilot cursor opencode pi hermes openclaw factory devin antigravity goose
   failproofai policies --install --custom ./my-policies.js
+  failproofai policies --install --custom ./security.js --custom ./workflow.js
   failproofai policies -i -c ./my-policies.js
   failproofai policies --uninstall block-sudo
   failproofai policies --uninstall --cli codex
@@ -23406,9 +23481,9 @@ EXAMPLES
       if (scopeIdx >= 0 && !["user", "project", "local"].includes(scope)) {
         throw new CliError3(`Invalid scope: ${scope}. Valid values: user, project, local`);
       }
-      const customIdx = subArgs.includes("--custom") ? subArgs.indexOf("--custom") : subArgs.includes("-c") ? subArgs.indexOf("-c") : -1;
-      const customPoliciesPath = customIdx >= 0 ? subArgs[customIdx + 1] : undefined;
-      if (customIdx >= 0 && (!customPoliciesPath || customPoliciesPath.startsWith("-"))) {
+      const customIdxs = subArgs.map((arg, index) => arg === "--custom" || arg === "-c" ? index : -1).filter((index) => index >= 0);
+      const customPoliciesPaths = customIdxs.map((index) => subArgs[index + 1]);
+      if (customPoliciesPaths.some((path3) => !path3 || path3.startsWith("-"))) {
         throw new CliError3(`Missing path after --custom/-c
 Usage: --custom <path>  (e.g. --custom ./my-policies.js)`);
       }
@@ -23436,7 +23511,7 @@ Usage: --custom <path>  (e.g. --custom ./my-policies.js)`);
       const consumedIdxs = new Set;
       if (scopeIdx >= 0)
         consumedIdxs.add(scopeIdx + 1);
-      if (customIdx >= 0)
+      for (const customIdx of customIdxs)
         consumedIdxs.add(customIdx + 1);
       for (const i of cliConsumedIdxs)
         consumedIdxs.add(i);
@@ -23447,16 +23522,16 @@ Usage: --custom <path>  (e.g. --custom ./my-policies.js)`);
 Run \`failproofai policies --help\` for usage.`);
       }
       const explicitPolicyNames = subArgs.filter((a, idx) => !a.startsWith("-") && !consumedIdxs.has(idx));
-      const policyNames = explicitPolicyNames.length > 0 ? explicitPolicyNames : customPoliciesPath !== undefined ? [] : undefined;
+      const policyNames = explicitPolicyNames.length > 0 ? explicitPolicyNames : customPoliciesPaths.length > 0 ? [] : undefined;
       const cli = await resolveTargetClis2(cliFlagValues.length > 0 ? cliFlagValues : undefined, "install");
-      await installHooks3(policyNames, scope, undefined, includeBeta, undefined, customPoliciesPath, false, cli);
+      await installHooks3(policyNames, scope, undefined, includeBeta, undefined, customPoliciesPaths.length > 0 ? customPoliciesPaths : undefined, false, cli);
       await track("cli_install_success", {
         scope,
         cli,
         cli_count: cli.length,
         explicit_policies: explicitPolicyNames.length > 0,
         include_beta: includeBeta,
-        has_custom_path: !!customPoliciesPath
+        has_custom_path: customPoliciesPaths.length > 0
       });
       process.exit(0);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "0.0.15-beta.0",
+  "version": "0.0.15",
   "description": "The easiest way to manage policies that keep your AI agents reliable, on-task, and running autonomously — for Claude Code & the Agents SDK",
   "bin": {
     "failproofai": "./dist/cli.mjs"

package/src/hooks/custom-hooks-loader.ts

@@ -3,7 +3,7 @@
  * Supports transitive local imports and `import { ... } from 'failproofai'`.
  *
  * Two loading modes:
- * 1. Explicit: a single file via `customPoliciesPath` in policies-config.json
+ * 1. Explicit: files via `customPoliciesPaths` in policies-config.json
  * 2. Convention: auto-discovered *policies.{js,mjs,ts} files from
  *    .failproofai/policies/ at project and user level (git-hooks style)
  *
@@ -177,6 +177,14 @@ export interface LoadAllResult {
   conventionSources: ConventionSource[];
 }
 
+export function customPolicyId(file: string, name: string): string {
+  return `custom:${file}:${name}`;
+}
+
+export function conventionPolicyId(scope: "project" | "user", file: string, name: string): string {
+  return `convention:${scope}:${file}:${name}`;
+}
+
 /**
  * Load ALL custom hooks: explicit customPoliciesPath + convention-discovered files.
  *
@@ -205,7 +213,7 @@ function warnSkippedPolicyFiles(dir: string, scope: "project" | "user"): void {
 }
 
 export async function loadAllCustomHooks(
-  customPoliciesPath: string | undefined,
+  customPoliciesPaths: string | string[] | undefined,
   opts?: { sessionCwd?: string; customPoliciesEnabled?: boolean },
 ): Promise<LoadAllResult> {
   clearCustomHooks();
@@ -228,16 +236,25 @@ export async function loadAllCustomHooks(
   // convention passes.
   const loadedPaths = new Set<string>();
 
-  // 1. Explicit customPoliciesPath (existing behavior)
-  if (customPoliciesPath) {
-    const absPath = isAbsolute(customPoliciesPath)
-      ? customPoliciesPath
-      : resolve(projectRoot, customPoliciesPath);
+  // 1. Explicit custom policy paths. Accept a string for callers/configs using
+  // the legacy singular form.
+  for (const customPoliciesPath of typeof customPoliciesPaths === "string"
+    ? [customPoliciesPaths]
+    : customPoliciesPaths ?? []) {
+    // resolve() also normalizes absolute paths, so aliases containing `.` or
+    // `..` share a dedup key with convention-discovered canonical paths.
+    const absPath = resolve(projectRoot, customPoliciesPath);
     if (existsSync(absPath)) {
-      loadedPaths.add(absPath);
-      await loadSingleFile(absPath);
+      if (!loadedPaths.has(absPath)) {
+        loadedPaths.add(absPath);
+        const hooksBefore = getCustomHooks().length;
+        await loadSingleFile(absPath);
+        for (const hook of getCustomHooks().slice(hooksBefore)) {
+          (hook as CustomHook & { __policyId?: string }).__policyId = customPolicyId(absPath, hook.name);
+        }
+      }
     } else {
-      hookLogWarn(`customPoliciesPath not found: ${absPath}`);
+      hookLogWarn(`custom policy path not found: ${absPath}`);
     }
   }
 
@@ -260,6 +277,9 @@ export async function loadAllCustomHooks(
     const hooksBefore = getCustomHooks().length;
     await loadSingleFile(file, { conventionScope: "project" });
     const newHooks = getCustomHooks().slice(hooksBefore);
+    for (const hook of newHooks) {
+      (hook as CustomHook & { __policyId?: string }).__policyId = conventionPolicyId("project", basename(file), hook.name);
+    }
     if (newHooks.length > 0) {
       conventionSources.push({
         scope: "project",
@@ -294,6 +314,9 @@ export async function loadAllCustomHooks(
     const hooksBefore = getCustomHooks().length;
     await loadSingleFile(file, { conventionScope: "user" });
     const newHooks = getCustomHooks().slice(hooksBefore);
+    for (const hook of newHooks) {
+      (hook as CustomHook & { __policyId?: string }).__policyId = conventionPolicyId("user", basename(file), hook.name);
+    }
     if (newHooks.length > 0) {
       conventionSources.push({
         scope: "user",