failproofai 0.0.9 → 0.0.10-beta.0

package/.next/standalone/.next/server/chunks/ssr/[root-of-the-server]__0ymlddl._.js

@@ -1,18 +1,164 @@
 module.exports=[57764,(a,b,c)=>{b.exports=a.x("node:url",()=>require("node:url"))},92509,(a,b,c)=>{b.exports=a.x("url",()=>require("url"))},11369,a=>{"use strict";var b=a.i(36359),c=a.i(7292),d=a.i(37936),e=a.i(2157),f=a.i(50227),g=a.i(60526);let h={info:0,warn:1,error:2},i=(0,f.join)((0,g.homedir)(),".failproofai","logs"),j=!1,k="warn",l=!1,m=i;function n(a){return!function(){if(j)return;j=!0;let a=(process.env.FAILPROOFAI_LOG_LEVEL??"").toLowerCase();("info"===a||"warn"===a||"error"===a)&&(k=a);let b=(process.env.FAILPROOFAI_HOOK_LOG_FILE??"").trim();b&&(l=!0,"1"!==b&&"true"!==b&&(m=b))}(),h[a]>=h[k]}function o(a,b){process.stderr.write(`[failproofai:hook] ${a} ${b}
 `)}function p(a,b){if(l)try{(0,e.existsSync)(m)||(0,e.mkdirSync)(m,{recursive:!0});let c=(0,f.join)(m,"hooks.log");try{if((0,e.statSync)(c).size>=524288){let a=`hooks-${Date.now()}.log`;(0,e.renameSync)(c,(0,f.join)(m,a))}}catch{}let d=new Date().toISOString(),g=`[${d}] ${a} ${b}
-`;(0,e.appendFileSync)(c,g,"utf-8")}catch{}}function q(a){n("warn")&&(o("WARN",a),p("WARN",a))}function r(a){let b=(0,g.homedir)(),c=(0,f.resolve)(a);for(;c!==b;){let a=(0,f.resolve)(c,".failproofai");try{if((0,e.statSync)(a).isDirectory())return c}catch{}let b=(0,f.dirname)(c);if(b===c)break;c=b}return(0,f.resolve)(a)}function s(){return(0,f.resolve)((0,g.homedir)(),".failproofai","policies-config.json")}function t(){let a=s();if(!(0,e.existsSync)(a))return{enabledPolicies:[]};try{let b=(0,e.readFileSync)(a,"utf8");return JSON.parse(b)}catch(b){return q(`failed to parse config at ${a}: ${b instanceof Error?b.message:String(b)}`),{enabledPolicies:[]}}}function u(a){let b=s(),c=(0,f.dirname)(b);(0,e.existsSync)(c)||(0,e.mkdirSync)(c,{recursive:!0}),(0,e.writeFileSync)(b,JSON.stringify(a,null,2)+"\n","utf8")}function v(a,b){switch(a){case"user":return(0,f.resolve)((0,g.homedir)(),".failproofai","policies-config.json");case"project":return(0,f.resolve)(r(b??process.cwd()),".failproofai","policies-config.json");case"local":return(0,f.resolve)(r(b??process.cwd()),".failproofai","policies-config.local.json")}}function w(a,b){let c=v(a,b);if(!(0,e.existsSync)(c))return{enabledPolicies:[]};try{let a=(0,e.readFileSync)(c,"utf8");return JSON.parse(a)}catch(a){return q(`failed to parse config at ${c}: ${a instanceof Error?a.message:String(a)}`),{enabledPolicies:[]}}}function x(a,b,c){let d=v(b,c),g=(0,f.dirname)(d);(0,e.existsSync)(g)||(0,e.mkdirSync)(g,{recursive:!0}),(0,e.writeFileSync)(d,JSON.stringify(a,null,2)+"\n","utf8")}var y=a.i(74533);let z=["user","project","local"],A=["claude","codex"],B=["session_start","pre_tool_use","permission_request","post_tool_use","user_prompt_submit","stop"],C={session_start:"SessionStart",pre_tool_use:"PreToolUse",permission_request:"PermissionRequest",post_tool_use:"PostToolUse",user_prompt_submit:"UserPromptSubmit",stop:"Stop"},D=["SessionStart","SessionEnd","UserPromptSubmit","PreToolUse","PermissionRequest","PermissionDenied","PostToolUse","PostToolUseFailure","Notification","SubagentStart","SubagentStop","TaskCreated","TaskCompleted","Stop","StopFailure","TeammateIdle","InstructionsLoaded","ConfigChange","CwdChanged","FileChanged","WorktreeCreate","WorktreeRemove","PreCompact","PostCompact","Elicitation","ElicitationResult","UserPromptExpansion","PostToolBatch"],E="__failproofai_hook__";function F(a){return(0,e.existsSync)(a)?JSON.parse((0,e.readFileSync)(a,"utf8")):{}}function G(a,b){(0,e.mkdirSync)((0,f.dirname)(a),{recursive:!0}),(0,e.writeFileSync)(a,JSON.stringify(b,null,2)+"\n","utf8")}function H(a){if(!0===a[E])return!0;let b="string"==typeof a.command?a.command:"";return b.includes("failproofai")&&b.includes("--hook")}function I(a){try{let b=`which ${a}`;return(0,y.execSync)(b,{encoding:"utf8",stdio:"pipe"}),!0}catch{return!1}}let J={id:"claude",displayName:"Claude Code",scopes:z,eventTypes:D,getSettingsPath(a,b){let c=b?(0,f.resolve)(b):process.cwd();switch(a){case"user":return(0,f.resolve)((0,g.homedir)(),".claude","settings.json");case"project":return(0,f.resolve)(c,".claude","settings.json");case"local":return(0,f.resolve)(c,".claude","settings.local.json")}},readSettings:a=>F(a),writeSettings(a,b){G(a,b)},buildHookEntry:(a,b,c)=>({type:"command",command:"project"===c?`npx -y failproofai --hook ${b}`:`"${a}" --hook ${b}`,timeout:6e4,[E]:!0}),isFailproofaiHook:H,writeHookEntries(a,b,c){for(let d of(a.hooks||(a.hooks={}),D)){let e=this.buildHookEntry(b,d,c);a.hooks[d]||(a.hooks[d]=[]);let f=a.hooks[d],g=!1;for(let a of f){if(!a.hooks)continue;let b=a.hooks.findIndex(a=>H(a));if(b>=0){a.hooks[b]=e,g=!0;break}}g||f.push({hooks:[e]})}},removeHooksFromFile(a){let b=this.readSettings(a);if(!b.hooks)return 0;let c=0;for(let a of Object.keys(b.hooks)){let d=b.hooks[a];if(Array.isArray(d)){for(let a=d.length-1;a>=0;a--){let b=d[a];if(!b.hooks)continue;let e=b.hooks.length;b.hooks=b.hooks.filter(a=>!H(a)),c+=e-b.hooks.length,0===b.hooks.length&&d.splice(a,1)}0===d.length&&delete b.hooks[a]}}return 0===Object.keys(b.hooks).length&&delete b.hooks,this.writeSettings(a,b),c},hooksInstalledInSettings(a,b){let c=this.getSettingsPath(a,b);if(!(0,e.existsSync)(c))return!1;try{let a=this.readSettings(c);if(!a.hooks)return!1;for(let b of Object.values(a.hooks))if(Array.isArray(b)){for(let a of b)if(a.hooks&&a.hooks.some(a=>H(a)))return!0}}catch{}return!1},detectInstalled:()=>I("claude")||I("claude-code")},K={claude:J,codex:{id:"codex",displayName:"OpenAI Codex",scopes:["user","project"],eventTypes:B,getSettingsPath(a,b){let c=b?(0,f.resolve)(b):process.cwd();switch(a){case"user":return(0,f.resolve)((0,g.homedir)(),".codex","hooks.json");case"project":case"local":return(0,f.resolve)(c,".codex","hooks.json")}},readSettings(a){let b=F(a);return void 0===b.version&&(b.version=1),b},writeSettings(a,b){G(a,b)},buildHookEntry:(a,b,c)=>({type:"command",command:"project"===c?`npx -y failproofai --hook ${b} --cli codex`:`"${a}" --hook ${b} --cli codex`,timeout:6e4,[E]:!0}),isFailproofaiHook:H,writeHookEntries(a,b,c){for(let d of(void 0===a.version&&(a.version=1),a.hooks||(a.hooks={}),B)){let e=C[d],f=this.buildHookEntry(b,d,c);a.hooks[e]||(a.hooks[e]=[]);let g=a.hooks[e],h=!1;for(let a of g){if(!a.hooks)continue;let b=a.hooks.findIndex(a=>H(a));if(b>=0){a.hooks[b]=f,h=!0;break}}h||g.push({hooks:[f]})}},removeHooksFromFile(a){let b=this.readSettings(a);if(!b.hooks)return 0;let c=0;for(let a of Object.keys(b.hooks)){let d=b.hooks[a];if(Array.isArray(d)){for(let a=d.length-1;a>=0;a--){let b=d[a];if(!b.hooks)continue;let e=b.hooks.length;b.hooks=b.hooks.filter(a=>!H(a)),c+=e-b.hooks.length,0===b.hooks.length&&d.splice(a,1)}0===d.length&&delete b.hooks[a]}}return 0===Object.keys(b.hooks).length&&delete b.hooks,this.writeSettings(a,b),c},hooksInstalledInSettings(a,b){let c=this.getSettingsPath(a,b);if(!(0,e.existsSync)(c))return!1;try{let a=this.readSettings(c);if(!a.hooks)return!1;for(let b of Object.values(a.hooks))if(Array.isArray(b)){for(let a of b)if(a.hooks&&a.hooks.some(a=>H(a)))return!0}}catch{}return!1},detectInstalled:()=>I("codex")}};function L(a){let b=K[a];if(!b)throw Error(`Unknown integration: ${a}. Valid: ${A.join(", ")}`);return b}function M(){return A.filter(a=>K[a].detectInstalled())}var N=a.i(1457),O=a.i(12714);function P(a){return a?{decision:"allow",reason:a}:{decision:"allow"}}function Q(a){return{decision:"deny",reason:a}}function R(a){return{decision:"instruct",reason:a}}let S=function(a){for(let b of[".claude",".codex"]){let c=(0,f.join)((0,g.homedir)(),b);if(a===c||a.startsWith(c+"/"))return!0}return!1},T=function(a){return!!(/[\\/]\.claude[\\/]settings(?:\.[^/\\]+)?\.json$/.test(a)||/[\\/]\.codex[\\/]hooks\.json$/.test(a))};function U(a){return a.toolInput?.command??""}function V(a){return a.toolInput?.file_path??""}function W(a){return a.trim().split(/\s+/).map(a=>a.replace(/^['"]|['"]$/g,""))}let X=new Set(["&&","||","|",";"]),Y=/[;&<>`$()\\]/,Z=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/,$=[[/sk-ant-[A-Za-z0-9\-_]{20,}/,"Anthropic API key"],[/sk-proj-[A-Za-z0-9\-_]{20,}/,"OpenAI project API key"],[/sk-[A-Za-z0-9]{20,}/,"OpenAI API key"],[/ghp_[A-Za-z0-9]{36}/,"GitHub personal access token"],[/github_pat_[A-Za-z0-9_]{82}/,"GitHub fine-grained token"],[/AKIA[A-Z0-9]{16}/,"AWS access key ID"],[/sk_live_[A-Za-z0-9]{24,}/,"Stripe live secret key"],[/sk_test_[A-Za-z0-9]{24,}/,"Stripe test secret key"],[/AIza[0-9A-Za-z\-_]{35}/,"Google API key"]],_=/(?:postgresql|postgres|mysql|mongodb(?:\+srv)?|redis|amqps?|smtps?):\/\/[^@\s]+@/,aa=/-----BEGIN (?:[A-Z]+ )?PRIVATE KEY-----/,ab=/Authorization:\s*Bearer\s+[A-Za-z0-9\-._~+/]{20,}/i,ac=/\b(?:psql|mysql|sqlite3|pgcli|clickhouse-client)\b/,ad=/\b(?:DROP\s+(?:TABLE|DATABASE|SCHEMA)|TRUNCATE\b)/i,ae=/\bDELETE\s+FROM\b/i,af=/\bWHERE\b/i,ag=/\bALTER\s+TABLE\b[\s\S]*\b(?:DROP\s+COLUMN|ADD\s+COLUMN|RENAME\s+(?:COLUMN|TO)|MODIFY\s+COLUMN)\b/i,ah=/(?:npm\s+publish|bun\s+publish|pnpm\s+publish|yarn\s+npm\s+publish|twine\s+upload|poetry\s+publish|cargo\s+publish|gem\s+push)\b/,ai=/(?:^|\s|;|&&|\|\|)(?:env|printenv)(?:\s|$|;|&&|\|)/,aj=/echo\s+.*\$\{?[A-Za-z_]/,ak=/(?:^|\s|;|&&|\|\|)export\s+\w+/,al=/\$env:[A-Za-z_]/i,am=/(?:Get-ChildItem|dir|gci|ls)\s+Env:/i,an=/\[Environment\]::GetEnvironment/i,ao=/echo\s+%[A-Za-z_]/i,ap=/(?:^|[\\/])\.env(?:\.|$)/,aq=/\.env(?:\b|\s|$|\.)/,ar=/(?:^|;|&&|\|\|)\s*sudo\s/,as=/Start-Process\s+.*-Verb\s+RunAs/i,at=/(?:^|;|&&|\|\|)\s*runas\s/i,au=/(?:curl|wget)\s.*\|\s*(?:sh|bash|zsh|dash|ksh|csh|tcsh|fish|ash)\b/,av=/(?:Invoke-WebRequest|iwr|Invoke-RestMethod|irm)\s+.*\|\s*(?:Invoke-Expression|iex)/i,aw=/(?:--force|-f\b)/,ax=/\.(?:pem|key)$/,ay=/id_rsa/,az=/credentials/,aA=/git\s+(?:commit|merge|rebase|cherry-pick)\b/,aB=/(?:^|;|&&|\|\||\|)\s*failproofai(?:\s|$)/,aC=/(?:npm\s+(?:uninstall|remove|un|r)\s.*failproofai|bun\s+remove\s.*failproofai|yarn\s+global\s+remove\s+failproofai|pnpm\s+(?:remove|uninstall|un)\s.*failproofai)/,aD=/\bgit\s+commit\b.*--amend\b/,aE=/\bgit\s+stash\s+(?:drop|clear)\b/,aF=/\bgit\s+add\s+(?:-A\b|--all\b|\.(?:\s|$|;|&&|\|\|))/,aG=/\bnpm\s+(?:install|i)\b(?=.*(?:\s-g\b|--global\b))/,aH=/\byarn\s+global\s+add\b/,aI=/\bpnpm\s+(?:add|install|i)\b(?=.*(?:\s-g\b|--global\b))/,aJ=/\bbun\s+(?:install|add)\b(?=.*(?:\s-g\b|--global\b))/,aK=/\bcargo\s+install\b/,aL=/\bpip(?:3)?\s+install\b(?=.*(?:--user\b|--break-system-packages\b))/,aM={pip:[/\bpip\b/,/\bpip3\b/,/\bpython3?\s+-m\s+pip\b/],npm:[/\bnpm\b/,/\bnpx\b/],yarn:[/\byarn\b/],pnpm:[/\bpnpm\b/,/\bpnpx\b/],bun:[/\bbun\b/,/\bbunx\b/],uv:[/\buv\b/],poetry:[/\bpoetry\b/],pipenv:[/\bpipenv\b/],conda:[/\bconda\b/],cargo:[/\bcargo\b/]},aN=/\bnohup\s+\S/,aO=/\bscreen\s+-[A-Za-z]*d[A-Za-z]*\b/,aP=/\btmux\s+(?:new-session|new)\b[^|&;]*-d\b/,aQ=/\bdisown\b/,aR=/(?<![&|])\s?&\s*(?:$|#|;)/,aS=/(?:^|[;\n]|&&|\|\|?|&)\s*kubectl(?:\s|$)/,aT=/(?:^|[;\n]|&&|\|\|?|&)\s*(?:terraform|tofu)(?:\s|$)/,aU=/(?:^|[;\n]|&&|\|\|?|&)\s*aws(?:\s|$)/,aV=/(?:^|[;\n]|&&|\|\|?|&)\s*gcloud(?:\s|$)/,aW=/(?:^|[;\n]|&&|\|\|?|&)\s*az(?:\s|$)/,aX=/(?:^|[;\n]|&&|\|\|?|&)\s*helm(?:\s|$)/,aY=/(?:^|[;\n]|&&|\|\|?|&)\s*gh\s+(?:workflow\s+(?:run|enable|disable)|run\s+(?:rerun|cancel)|pr\s+merge|release\s+(?:create|delete)|cache\s+delete|secret\s+(?:set|delete))\b/,aZ=new Map;function a$(a){try{let b=aZ.get(a);return void 0===b&&(b=(0,y.execSync)("git rev-parse --abbrev-ref HEAD",{cwd:a,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3}).trim(),aZ.set(a,b)),b||null}catch{return null}}function a_(a,b){let c=W(a),d=W(b);return!(c.length<d.length||c.some(a=>X.has(a))||c.some(a=>Y.test(a)))&&d.every((a,b)=>"*"===a||a===c[b])}function a0(a){return a.split(/&&|\|\||[|;\n]/).map(a=>a.trim()).filter(a=>/^git\s+push\s/.test(a)).map(a=>a.replace(/^git\s+push\s+/,""))}function a1(a,b){if(0===b.length)return!1;let c=a.split(/&&|\|\||[|;\n]/).map(a=>a.trim()).filter(a=>/\brm\b/.test(a));if(0===c.length)return!1;for(let a of c){let c=W(a),d=c.findIndex(a=>"rm"===a);if(d<0)continue;let e=c.slice(d+1).filter(a=>/^-[^-]/.test(a)),f=c.slice(d+1).filter(a=>/^--/.test(a));if(/r/i.test(e.join(""))||f.some(a=>/^--recursive$/i.test(a)))for(let e of c.slice(d+1).filter(a=>!a.startsWith("-"))){let c=e.replace(/\/\*$/,"").replace(/\/+$/,"")||"/";if(!b.some(a=>{let b=a.replace(/\/+$/,"")||"/";return c===b||c.startsWith(b+"/")})&&!b.some(b=>{let c=b.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return RegExp(`${c}(?:[/"'\\s/*]|$)`).test(a)}))return!1}}return!0}let a2=/(?:^|;|&&|\|\||\|)\s*(?:ls|find|cat|head|tail|less|more|wc|file|stat|tree|du)\s/;function a3(a,b,c){if("Bash"!==a.toolName)return P();let d=U(a);return!b.test(d)||(a.params?.allowPatterns??[]).some(a=>a_(d,a))?P():Q(c)}let a4=/\s*(?:&&|\|\||\||;)\s*/,a5=[{name:"sanitize-jwt",description:"Stop Claude from reading JWTs in tool responses",fn:function(a){let b=JSON.stringify(a.payload);return Z.test(b)?{decision:"deny",reason:"JWT token detected in tool output",message:"[REDACTED: JWT token removed by failproofai]"}:P()},match:{events:["PostToolUse"]},defaultEnabled:!0,category:"Sanitize"},{name:"sanitize-api-keys",description:"Stop Claude from reading API keys (OpenAI, Anthropic, GitHub, AWS, Stripe, Google) in tool responses",fn:function(a){let b=JSON.stringify(a.payload);for(let[a,c]of $)if(a.test(b))return{decision:"deny",reason:`${c} detected in tool output`,message:`[REDACTED: ${c} removed by failproofai]`};for(let{regex:c,label:d}of a.params?.additionalPatterns??[])try{if(new RegExp(c).test(b))return{decision:"deny",reason:`${d} detected in tool output`,message:`[REDACTED: ${d} removed by failproofai]`}}catch{q(`additionalPatterns: invalid regex "${c}", skipping`)}return P()},match:{events:["PostToolUse"]},defaultEnabled:!0,category:"Sanitize",params:{additionalPatterns:{type:"pattern[]",description:"Additional API key patterns to scrub, each with { regex, label }",default:[]}}},{name:"sanitize-connection-strings",description:"Stop Claude from reading database connection strings with embedded credentials in tool responses",fn:function(a){let b=JSON.stringify(a.payload);return _.test(b)?{decision:"deny",reason:"Database connection string with credentials detected in tool output",message:"[REDACTED: connection string removed by failproofai]"}:P()},match:{events:["PostToolUse"]},defaultEnabled:!0,category:"Sanitize"},{name:"sanitize-private-key-content",description:"Stop Claude from reading PEM private key content in tool responses",fn:function(a){let b=JSON.stringify(a.payload);return aa.test(b)?{decision:"deny",reason:"Private key content detected in tool output",message:"[REDACTED: private key content removed by failproofai]"}:P()},match:{events:["PostToolUse"]},defaultEnabled:!0,category:"Sanitize"},{name:"sanitize-bearer-tokens",description:"Stop Claude from reading Authorization Bearer tokens in tool responses",fn:function(a){let b=JSON.stringify(a.payload);return ab.test(b)?{decision:"deny",reason:"Bearer token detected in tool output",message:"[REDACTED: Bearer token removed by failproofai]"}:P()},match:{events:["PostToolUse"]},defaultEnabled:!0,category:"Sanitize"},{name:"protect-env-vars",description:"Prevent commands that read environment variables",fn:function(a){if("Bash"!==a.toolName)return P();let b=U(a);return ai.test(b)?Q("Command reads environment variables"):aj.test(b)?Q("Command echoes environment variable"):ak.test(b)?Q("Command exports environment variable"):al.test(b)?Q("Command reads environment variable via PowerShell"):am.test(b)?Q("Command reads environment variables via PowerShell"):an.test(b)?Q("Command reads environment variable via .NET"):ao.test(b)?Q("Command echoes environment variable via cmd"):P()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!0,category:"Environment"},{name:"block-env-files",description:"Block reading/writing .env files",fn:function(a){let b=U(a),c=V(a);return c&&ap.test(c)?Q("Access to .env file blocked"):"Bash"===a.toolName&&aq.test(b)?Q("Command references .env file"):P()},match:{events:["PreToolUse"]},defaultEnabled:!0,category:"Environment"},{name:"block-read-outside-cwd",description:"Block file reads outside the session working directory",fn:function(a){let b=process.env.CLAUDE_PROJECT_DIR||a.session?.cwd;if(!b)return P();let c=a.params?.allowPaths??[];if("Bash"===a.toolName){let d=U(a);if(!a2.test(d))return P();let e=function(a){let b,c=[],d=/(?<![a-zA-Z0-9_.\-~\\*?:=])(?:~\/[^\s;|&"'()\[\]{}]*|~(?=\s|$|[;|&"'()\[\]{}])|\/[^\s;|&"'()\[\]{}]*)/g;function e(a){let b;for(d.lastIndex=0;null!==(b=d.exec(a));){let a=b[0];"~"===a?a=(0,g.homedir)():a.startsWith("~/")&&(a=(0,f.join)((0,g.homedir)(),a.slice(2))),c.push(a)}}let h=a.length,i=!1,j=!1;for(let b=0;b<a.length;b++){let c=a[b];if('"'!==c||j)if("'"!==c||i){if("|"===c&&!i&&!j){h=b;break}}else j=!j;else i=!i}let k=a.slice(0,h),l=/"([^"]*)"|'([^']*)'/g;for(;null!==(b=l.exec(k));){let a=b[1]??b[2]??"";/[*?\[\]^$+()\\]/.test(a)||e(a)}return e(a.replace(/"[^"]*"/g,a=>" ".repeat(a.length)).replace(/'[^']*'/g,a=>" ".repeat(a.length))),c}(d),h=b.endsWith("/")?b:b+"/";for(let a of e){let d=(0,f.resolve)(b,a);if(T(d))return Q(`Reading Claude settings file blocked: ${d}`);if(!S(d)&&"/dev/null"!==d&&d!==b&&!d.startsWith(h)){if(c.some(a=>d===a||d.startsWith(a.endsWith("/")?a:a+"/")))continue;return Q(`Bash read outside project directory blocked: ${d}`)}}return P()}let d=V(a),e=a.toolInput?.path??"",h=d||e;if(!h)return P();let i=(0,f.resolve)(b,h);if(T(i))return Q(`Reading Claude settings file blocked: ${i}`);if(S(i)||"/dev/null"===i)return P();let j=b.endsWith("/")?b:b+"/";return i===b||i.startsWith(j)?P():c.some(a=>i===a||i.startsWith(a.endsWith("/")?a:a+"/"))?P():Q(`Access outside project directory blocked: ${i}`)},match:{events:["PreToolUse"],toolNames:["Read","Glob","Grep","Bash"]},defaultEnabled:!1,category:"Environment",params:{allowPaths:{type:"string[]",description:"Absolute paths outside cwd that are allowed to be read",default:[]}}},{name:"block-sudo",description:"Block sudo commands",fn:function(a){if("Bash"!==a.toolName)return P();let b=U(a).trimStart();return ar.test(b)||b.startsWith("sudo ")?(a.params?.allowPatterns??[]).some(a=>a_(b,a))?P():Q("sudo commands are blocked"):as.test(b)?Q("Elevated process launch is blocked"):at.test(b)?Q("runas elevation is blocked"):P()},match:{events:["PreToolUse","PermissionRequest"],toolNames:["Bash"]},defaultEnabled:!0,category:"Dangerous Commands",params:{allowPatterns:{type:"string[]",description:"Sudo command patterns to allow, matched token-by-token (e.g. 'sudo systemctl status')",default:[]}}},{name:"block-curl-pipe-sh",description:"Block piping downloads to shell",fn:function(a){if("Bash"!==a.toolName)return P();let b=U(a);return au.test(b)?Q("Piping downloads to shell is blocked"):av.test(b)?Q("Piping downloads to Invoke-Expression is blocked"):P()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!0,category:"Dangerous Commands"},{name:"block-rm-rf",description:"Prevent catastrophic deletions",fn:function(a){if("Bash"!==a.toolName)return P();let b=U(a),c=W(b).some(a=>{let b=a.replace(/\/\*$/,"").replace(/\/+$/,"")||(a.startsWith("/")?"/":"");return"/"===b||"~"===b||/^\/[A-Za-z_][\w.-]*$/.test(b)});if(c&&(/rm\s+-[^\s]*r[^\s]*f[^\s]*/.test(b)||/rm\s+-[^\s]*f[^\s]*r[^\s]*/.test(b)))return a1(b,a.params?.allowPaths??[])?P():Q("Catastrophic deletion blocked");if(c&&/\brm\b/.test(b)){let c=W(b),d=c.filter(a=>/^-[^-]/.test(a)).join(""),e=c.filter(a=>/^--/.test(a)),f=/r/i.test(d)||e.some(a=>/^--recursive$/i.test(a)),g=/f/.test(d)||e.some(a=>/^--force$/i.test(a));if(f&&g)return a1(b,a.params?.allowPaths??[])?P():Q("Catastrophic deletion blocked")}return/Remove-Item\s+.*-Recurse.*-Force.*(?:[A-Z]:\\(?:\s|$)|\\\*)/i.test(b)||/(?:rd|rmdir)\s+\/s\s+\/q\s+[A-Z]:\\/i.test(b)?Q("Catastrophic deletion blocked"):P()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Dangerous Commands",params:{allowPaths:{type:"string[]",description:"Paths that are allowed to be recursively deleted",default:[]}}},{name:"block-failproofai-commands",description:"Block failproofai CLI commands and uninstallation",fn:function(a){if("Bash"!==a.toolName)return P();let b=U(a);return aB.test(b)?Q("Running failproofai CLI commands is blocked"):aC.test(b)?Q("Uninstalling failproofai is blocked"):P()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!0,category:"Dangerous Commands"},{name:"block-kubectl",description:"Block kubectl commands (Kubernetes cluster mutations)",fn:function(a){return a3(a,aS,"kubectl commands are blocked")},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"kubectl command patterns to allow, matched token-by-token (e.g. 'kubectl get *', 'kubectl describe *')",default:[]}}},{name:"block-terraform",description:"Block terraform and tofu (OpenTofu) commands",fn:function(a){return a3(a,aT,"terraform/tofu commands are blocked")},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"terraform/tofu command patterns to allow (e.g. 'terraform plan', 'terraform validate')",default:[]}}},{name:"block-aws-cli",description:"Block aws CLI commands",fn:function(a){return a3(a,aU,"aws CLI commands are blocked")},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"aws CLI command patterns to allow (e.g. 'aws s3 ls *', 'aws sts get-caller-identity')",default:[]}}},{name:"block-gcloud",description:"Block gcloud (Google Cloud) CLI commands",fn:function(a){return a3(a,aV,"gcloud commands are blocked")},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"gcloud command patterns to allow (e.g. 'gcloud auth list', 'gcloud config list')",default:[]}}},{name:"block-az-cli",description:"Block az (Azure) CLI commands",fn:function(a){return a3(a,aW,"az (Azure) CLI commands are blocked")},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"az CLI command patterns to allow (e.g. 'az account show', 'az group list')",default:[]}}},{name:"block-helm",description:"Block helm commands",fn:function(a){return a3(a,aX,"helm commands are blocked")},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"helm command patterns to allow (e.g. 'helm list', 'helm status *')",default:[]}}},{name:"block-gh-pipeline",description:"Block gh CLI pipeline-trigger subcommands (workflow run, run rerun/cancel, pr merge, release create/delete, cache delete, secret set/delete)",fn:function(a){return a3(a,aY,"gh pipeline-trigger commands are blocked")},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"gh pipeline command patterns to allow (e.g. specific scripted invocations); read-only gh subcommands like 'gh pr view' and 'gh run list' are not matched by this policy",default:[]}}},{name:"block-secrets-write",description:"Block writing secret key files",fn:function(a){if("Write"!==a.toolName)return P();let b=V(a);if(ax.test(b)||ay.test(b)||az.test(b))return Q("Writing secret key files is blocked");for(let c of a.params?.additionalPatterns??[])if(b.includes(c))return Q(`Writing blocked file pattern: ${c}`);return P()},match:{events:["PreToolUse"],toolNames:["Write"]},defaultEnabled:!1,category:"Dangerous Commands",params:{additionalPatterns:{type:"string[]",description:"Additional filename patterns (substrings) to block",default:[]}}},{name:"block-push-master",description:"Block pushing to main/master",fn:function(a){if("Bash"!==a.toolName)return P();let b=a.params?.protectedBranches??["main","master"];if(0===b.length)return P();let c=a0(U(a)),d=RegExp(`\\b(?:${b.map(a=>a.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")).join("|")})\\b`);return c.some(a=>d.test(a))?Q(`Pushing to ${b.join("/")} is blocked`):P()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!0,category:"Git",params:{protectedBranches:{type:"string[]",description:"Branch names to protect from direct pushes",default:["main","master"]}}},{name:"block-force-push",description:"Prevent force-pushing to any branch",fn:function(a){return"Bash"!==a.toolName?P():a0(U(a)).some(a=>aw.test(a))?Q("Force-pushing is blocked"):P()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Git"},{name:"block-work-on-main",description:"Block git commits and merges on main/master branch",fn:function(a){if("Bash"!==a.toolName)return P();let b=U(a);if(!aA.test(b))return P();let c=a.session?.cwd;if(!c)return P();let d=a$(c);return d&&(a.params?.protectedBranches??["main","master"]).includes(d)?Q(`Git ${b.match(/git\s+(\S+)/)?.[1]??"operation"} on ${d} is blocked. Create a feature branch first.`):P()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Git",params:{protectedBranches:{type:"string[]",description:"Branch names where commits/merges are blocked",default:["main","master"]}}},{name:"warn-git-amend",description:"Warns before amending git commits, which rewrites history",fn:function(a){if("Bash"!==a.toolName)return P();let b=U(a);return aD.test(b)?R("STOP: This command amends the last commit, which rewrites git history. If this commit has already been pushed to a shared branch, this will cause divergence for other contributors. Confirm with the user before executing."):P()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Git"},{name:"warn-git-stash-drop",description:"Warns before permanently deleting stashed changes",fn:function(a){if("Bash"!==a.toolName)return P();let b=U(a);return aE.test(b)?R("STOP: This command permanently deletes stashed changes (git stash drop/clear). Stash entries cannot be recovered after deletion. Confirm with the user before executing."):P()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Git"},{name:"warn-all-files-staged",description:"Warns before staging all working tree files with git add -A / . / --all",fn:function(a){if("Bash"!==a.toolName)return P();let b=U(a);return aF.test(b)?R("STOP: This command stages all files in the working tree (git add -A / --all / .). This may inadvertently include build artifacts, generated files, or sensitive files not covered by .gitignore. Confirm with the user before executing."):P()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Git"},{name:"warn-destructive-sql",description:"Warn before executing destructive SQL (DROP/TRUNCATE/DELETE without WHERE) via database clients",fn:function(a){if("Bash"!==a.toolName)return P();let b=U(a);return ac.test(b)&&(ad.test(b)||ae.test(b)&&!af.test(b))?R("STOP: This command contains destructive SQL (DROP/TRUNCATE/DELETE). Confirm with the user before executing."):P()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Database"},{name:"warn-schema-alteration",description:"Warns before SQL schema changes (ALTER TABLE with column or rename operations)",fn:function(a){if("Bash"!==a.toolName)return P();let b=U(a);return ac.test(b)&&ag.test(b)?R("STOP: This command contains a schema-altering SQL statement (ALTER TABLE with column or rename operation). Schema changes on production databases are irreversible or disruptive. Confirm with the user before executing."):P()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Database"},{name:"warn-package-publish",description:"Warn before publishing packages to public registries (npm, PyPI, crates.io, RubyGems, etc.)",fn:function(a){if("Bash"!==a.toolName)return P();let b=U(a);return ah.test(b)?R("STOP: This command publishes a package to a public registry. Confirm with the user that this is intentional."):P()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Packages & System"},{name:"warn-global-package-install",description:"Warns before installing packages globally (npm -g, cargo install, etc.)",fn:function(a){if("Bash"!==a.toolName)return P();let b=U(a);return aG.test(b)||aH.test(b)||aI.test(b)||aJ.test(b)||aK.test(b)||aL.test(b)?R("STOP: This command installs a package globally, which modifies the system-wide environment outside the project. This can conflict with other projects or system tools. Confirm with the user before executing."):P()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Packages & System"},{name:"prefer-package-manager",description:"Blocks non-preferred package managers and tells Claude to use an allowed one (e.g., uv instead of pip)",fn:function(a){if("Bash"!==a.toolName)return P();let b=U(a);if(!b)return P();let c=a.params?.allowed??[];if(0===c.length)return P();let d=new Set(c.map(a=>a.toLowerCase())),e=a.params?.blocked??[],f=c.join(", ");for(let a of b.split(a4)){let b=a.trim();if(!b)continue;let c=!1;for(let a of d){let d=aM[a];if(d){for(let a of d)if(a.test(b)){c=!0;break}if(c)break}}if(!c){for(let[a,c]of Object.entries(aM))if(!d.has(a)){for(let d of c)if(d.test(b))return Q(`"${a}" is not an allowed package manager. Allowed package managers for this project: ${f}. Rewrite this command using an allowed package manager.`)}for(let a of e){let c=a.toLowerCase();if(!d.has(c)&&RegExp(`\\b${c.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}\\b`).test(b))return Q(`"${c}" is not an allowed package manager. Allowed package managers for this project: ${f}. Rewrite this command using an allowed package manager.`)}}}return P()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Packages & System",params:{allowed:{type:"string[]",description:"Allowed package manager names (e.g. ['uv', 'bun']). Any detected manager not in this list is blocked.",default:[]},blocked:{type:"string[]",description:"Additional manager names to block beyond the built-in list (e.g. ['pdm', 'pipx']).",default:[]}}},{name:"warn-large-file-write",description:"Warn before writing files larger than 1MB (configurable via thresholdKb param)",fn:function(a){if("Write"!==a.toolName)return P();let b=a.toolInput?.content;if("string"!=typeof b)return P();let c=a.params?.thresholdKb??1024;return b.length>1024*c?R(`STOP: You are writing a file larger than ${c}KB (${Math.round(b.length/1024)}KB). This is unusually large. Confirm this is intentional before proceeding.`):P()},match:{events:["PreToolUse"],toolNames:["Write"]},defaultEnabled:!1,category:"Packages & System",params:{thresholdKb:{type:"number",description:"File size threshold in KB above which a warning is issued",default:1024}}},{name:"warn-background-process",description:"Warns before starting detached or background processes",fn:function(a){if("Bash"!==a.toolName)return P();let b=U(a);return aN.test(b)||aO.test(b)||aP.test(b)||aQ.test(b)||aR.test(b)?R("STOP: This command starts a background or detached process (nohup, screen -d, tmux -d, or trailing &). Background processes persist after Claude's session and may be difficult to track or stop. Confirm with the user before executing."):P()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Packages & System"},{name:"warn-repeated-tool-calls",description:"Warn when the same tool is called 3+ times with identical parameters",fn:async function a(a){let b=a.session?.transcriptPath;if(!b||!a.toolName||!a.toolInput)return P();let c=`${b}.tool-calls.json`,d=JSON.stringify({tool:a.toolName,input:a.toolInput}),e={};try{let a=await (0,O.readFile)(c,"utf8");e=JSON.parse(a)}catch{}let f=e[d]??0;if(f>=3)return R(`STOP: You have already called ${a.toolName} ${f} times with identical parameters. This is wasteful and unproductive. Do NOT repeat this call — use a different approach or ask the user for clarification.`);e[d]=f+1;try{let a=JSON.stringify(e);a.length<=65536&&await (0,O.writeFile)(c,a,"utf8")}catch{}return P()},match:{events:["PreToolUse"]},defaultEnabled:!1,category:"AI Behavior"},{name:"require-commit-before-stop",description:"Require all changes to be committed before Claude stops",fn:function(a){let b=a.session?.cwd;if(!b)return P("No working directory available, skipping commit check.");try{if((0,y.execSync)("git status --porcelain",{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim().length>0)return Q("You have uncommitted changes in the working directory. Commit all changes now.");return P("All changes are committed.")}catch{return P("Not a git repository, skipping commit check.")}},match:{events:["Stop"]},defaultEnabled:!1,category:"Workflow"},{name:"require-push-before-stop",description:"Require all commits to be pushed to remote before Claude stops",fn:function(a){let b=a.session?.cwd;if(!b)return P("No working directory available, skipping push check.");try{if(!(0,y.execSync)("git remote",{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3}).trim())return P("No git remote configured, skipping push check.");let c=a.params?.remote??"origin",d=a$(b);if(!d||"HEAD"===d)return P("Detached HEAD, skipping push check.");let e=a.params?.baseBranch??"main";if(d===e)return P(`On base branch "${e}", skipping push check.`);try{if(!(0,y.execFileSync)("git",["log",`${c}/${e}..HEAD`,"--oneline"],{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim())return P(`No commits ahead of ${c}/${e}, skipping push check.`);if(!(0,y.execFileSync)("git",["diff","--stat",`${c}/${e}`,"HEAD"],{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim())return P(`No file changes compared to ${c}/${e}, skipping push check.`)}catch{}let f=!1;try{(0,y.execFileSync)("git",["rev-parse","--verify",`${c}/${d}`],{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3}),f=!0}catch{}if(!f)return Q(`Branch "${d}" has not been pushed to remote "${c}". Run now: git push -u ${c} ${d}`);let g=(0,y.execFileSync)("git",["log",`${c}/${d}..HEAD`,"--oneline"],{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim();if(g.length>0){let a=g.split("\n").length;return Q(`You have ${a} unpushed commit${a>1?"s":""} on branch "${d}". Run now: git push`)}return P(`All commits pushed to "${c}".`)}catch{return P("Could not check push status, skipping.")}},match:{events:["Stop"]},defaultEnabled:!1,category:"Workflow",params:{remote:{type:"string",description:"Remote name to push to (default: origin)",default:"origin"},baseBranch:{type:"string",description:"Base branch to compare against (default: main)",default:"main"}}},{name:"require-pr-before-stop",description:"Require a pull request to exist for the current branch before Claude stops",fn:function(a){let b=a.session?.cwd;if(!b)return P("No working directory available, skipping PR check.");try{let c;try{(0,y.execSync)("gh --version",{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3})}catch{return P("GitHub CLI (gh) not installed, skipping PR check.")}let d=a$(b);if(!d||"HEAD"===d)return P("Detached HEAD, skipping PR check.");let e=a.params?.baseBranch??"main";if(d===e)return P(`On base branch "${e}", skipping PR check.`);try{if(!(0,y.execFileSync)("git",["log",`origin/${e}..HEAD`,"--oneline"],{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim())return P(`No commits ahead of origin/${e}, skipping PR check.`);if(!(0,y.execFileSync)("git",["diff","--stat",`origin/${e}`,"HEAD"],{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim())return P(`No file changes compared to origin/${e}, skipping PR check.`)}catch{}try{c=(0,y.execSync)("gh pr view --json number,url,state",{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:15e3}).trim()}catch{return Q(`No pull request found for branch "${d}". Run now: gh pr create`)}let f=JSON.parse(c);if("OPEN"===f.state)return P(`PR #${f.number} exists: ${f.url}`);if("MERGED"===f.state)return P(`PR #${f.number} was merged: ${f.url}. Switch off this branch (e.g. 'git checkout ${e} && git pull') before stopping again.`);return Q(`Pull request for branch "${d}" is ${f.state.toLowerCase()}. Run now: gh pr create`)}catch{return P("Could not check PR status, skipping.")}},match:{events:["Stop"]},defaultEnabled:!1,category:"Workflow",params:{baseBranch:{type:"string",description:"Base branch to compare against (default: main)",default:"main"}}},{name:"require-no-conflicts-before-stop",description:"Require the current branch to merge cleanly with the base branch before Claude stops",fn:function(a){let b,c,d=a.session?.cwd;if(!d)return P("No working directory available, skipping conflict check.");let e=a$(d);if(!e||"HEAD"===e)return P("Detached HEAD, skipping conflict check.");let f=a.params?.baseBranch??"main";if(e===f)return P(`On base branch "${f}", skipping conflict check.`);try{(0,y.execSync)("gh --version",{cwd:d,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3})}catch{return P("gh CLI not installed, skipping conflict check.")}try{b=(0,y.execSync)("gh pr view --json mergeable,number,url,state",{cwd:d,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:15e3}).trim()}catch{return P("No pull request found for branch, skipping conflict check.")}try{c=JSON.parse(b)}catch{return P("Could not parse gh pr view output, skipping conflict check.")}if("OPEN"!==c.state)return P(`PR #${c.number} is ${c.state.toLowerCase()}; skipping conflict check.`);try{(0,y.execFileSync)("git",["rev-parse","--verify",`origin/${f}`],{cwd:d,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3}),(0,y.execFileSync)("git",["log",`origin/${f}..HEAD`,"--oneline"],{cwd:d,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim()&&(0,y.execFileSync)("git",["merge-tree","--write-tree","--name-only",`origin/${f}`,"HEAD"],{cwd:d,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:1e4})}catch(a){if(1===a.status){let b=("string"==typeof a.stdout?a.stdout:a.stdout?.toString("utf8")??"").trim().split("\n"),c=[];for(let a=1;a<b.length;a++){let d=b[a];if(""===d)break;c.push(d)}let d=c.length?c.join(", "):"one or more files";return Q(`Branch "${e}" has merge conflicts with ${f} in: ${d}. Rebase or merge origin/${f} now and resolve the conflicts.`)}}return"CONFLICTING"===c.mergeable?Q(`PR #${c.number} has merge conflicts per GitHub (${c.url}). Rebase or merge origin/${f} now and resolve the conflicts.`):"UNKNOWN"===c.mergeable?Q(`GitHub is still computing mergeability for PR #${c.number} (${c.url}). Wait ~10 seconds, then re-check with \`gh pr view --json mergeable\` before attempting to stop again.`):P(`PR #${c.number} merges cleanly per GitHub.`)},match:{events:["Stop"]},defaultEnabled:!1,category:"Workflow",params:{baseBranch:{type:"string",description:"Base branch to check for conflicts against (default: main)",default:"main"}}},{name:"require-ci-green-before-stop",description:"Require CI checks to pass on the current branch before Claude stops",fn:function(a){let b=a.session?.cwd;if(!b)return P("No working directory available, skipping CI check.");try{try{(0,y.execSync)("gh --version",{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3})}catch{return P("GitHub CLI (gh) not installed, skipping CI check.")}let a=a$(b);if(!a||"HEAD"===a)return P("Detached HEAD, skipping CI check.");let c=[];try{let d=(0,y.execFileSync)("gh",["run","list","--branch",a,"--limit","5","--json","status,conclusion,name"],{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:15e3}).trim();d&&"[]"!==d&&(c=JSON.parse(d))}catch{}let d=[],e=[],f=function(a){try{return(0,y.execSync)("git rev-parse HEAD",{cwd:a,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3}).trim()||null}catch{return null}}(b);f&&(d=function(a,b){try{let c=(0,y.execFileSync)("gh",["api",`repos/{owner}/{repo}/commits/${b}/check-runs`,"--jq",'.check_runs | map(select(.app.slug != "github-actions")) | map({name: .name, status: .status, conclusion: (.conclusion // "")})'],{cwd:a,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:15e3}).trim();if(!c||"[]"===c)return[];return JSON.parse(c)}catch{return[]}}(b,f),e=function(a,b){try{let c=(0,y.execFileSync)("gh",["api",`repos/{owner}/{repo}/commits/${b}/statuses`,"--jq","map({name: .context, state: .state}) | unique_by(.name)"],{cwd:a,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:15e3}).trim();if(!c||"[]"===c)return[];return JSON.parse(c).map(a=>({name:a.name,status:"pending"===a.state?"in_progress":"completed",conclusion:"pending"===a.state?"":"success"===a.state?"success":"failure"}))}catch{return[]}}(b,f));let g=[...c,...d,...e];if(0===g.length)return P(`No CI runs found for branch "${a}".`);let h=g.filter(a=>"completed"===a.status&&"success"!==a.conclusion&&"skipped"!==a.conclusion&&"cancelled"!==a.conclusion);if(h.length>0){let b=h.map(a=>`"${a.name}"`).join(", ");return Q(`CI checks are failing on branch "${a}": ${b}. Fix the failing checks now.`)}let i=g.filter(a=>"in_progress"===a.status||"queued"===a.status||"waiting"===a.status);if(i.length>0){let b=i.map(a=>`"${a.name}"`).join(", ");return Q(`CI checks are still running on branch "${a}": ${b}. Wait for all checks to complete, then verify they pass.`)}return P(`All CI checks passed on branch "${a}".`)}catch{return P("Could not check CI status, skipping.")}},match:{events:["Stop"]},defaultEnabled:!1,category:"Workflow"}];async function a6(a,b={}){let{includeBeta:c=!1}=b;if(!process.stdin.isTTY){let b=a5.filter(a=>c||!a.beta);return a?a.filter(a=>b.some(b=>b.name===a)):b.filter(a=>a.defaultEnabled).map(a=>a.name)}let d=a?new Set(a):null,e=a5.filter(a=>c||!a.beta).map(a=>({name:a.name,description:a.description,category:a.category,selected:d?d.has(a.name):a.defaultEnabled,beta:!!a.beta})),f=e.length,g=0,h="",i=0,j=!1;function k(){if(!h)return e;let a=h.toLowerCase();return e.filter(b=>b.name.toLowerCase().includes(a)||b.description.toLowerCase().includes(a))}function l(){let a=process.stdout.columns||120;j||(process.stdout.write("\x1b[?25l"),j=!0);let b=k(),d=b.length;d>0&&g>=d&&(g=d-1);let l=[];l.push("  Failproof AI — Policy Manager"),l.push("");let m=Math.max(20,a-6),n="  ┌"+"─".repeat(m+2)+"┐",o="  └"+"─".repeat(m+2)+"┘",p=h?` \x1b[2m(${d}/${f})\x1b[0m`:` \x1b[2m(${f} policies)\x1b[0m`,q=`\x1b[1mSearch:\x1b[0m ${h}\x1b[7m \x1b[0m${p}`;if(l.push(n),l.push(`  \u2502 ${q}`),l.push(o),l.push(""),0===d){l.push("  \x1b[2mNo policies match “"+h+"”\x1b[0m");for(let a=0;a<9;a++)l.push("")}else{let c=function(a){let b=[],c=new Map,d=new Map;for(let a of e)c.has(a.category)||(b.push(a.category),c.set(a.category,0),d.set(a.category,0)),d.set(a.category,d.get(a.category)+1),a.selected&&c.set(a.category,c.get(a.category)+1);let f=new Map;for(let b of a){let a=f.get(b.category)??[];a.push(b),f.set(b.category,a)}let g=[],h=0;for(let a of b){let b=f.get(a);if(b&&0!==b.length)for(let e of(g.push({kind:"header",category:a,enabledCount:c.get(a),totalCount:d.get(a)}),b))g.push({kind:"item",item:e,filteredIndex:h++})}return g}(b),d=0;for(let a=0;a<c.length;a++){let b=c[a];if("item"===b.kind&&b.filteredIndex===g){d=a;break}}let f=d-Math.floor(4);f=Math.min(f=Math.max(0,f),Math.max(0,c.length-8));let h=Math.min(c.length,f+8),i=c.slice(0,f).filter(a=>"item"===a.kind).length;i>0?l.push(`  \x1b[2m  \u2191 ${i} more above\x1b[0m`):l.push("");for(let b=f;b<h;b++){let d=c[b];if("header"===d.kind){let b=` ${d.category.toUpperCase()} (${d.enabledCount}/${d.totalCount}) `,c=Math.max(2,a-2-(3+b.length));l.push(`  \x1b[2m\u2500\u2500 ${b}${"─".repeat(c)}\x1b[0m`)}else{let a=d.item,b=d.filteredIndex===g,c=b?"\x1b[36m❯\x1b[0m":" ",e=a.selected?"\x1b[32m[✓]\x1b[0m":"[ ]",f=b?`\x1b[1;36m${a.name}\x1b[0m`:a.name,h=a.beta?" \x1b[35m[beta]\x1b[0m":"",i=" ".repeat(Math.max(1,28-a.name.length)),j=`\x1b[2m${a.description}\x1b[0m`;l.push(`  ${c} ${e} ${f}${h}${i}${j}`)}}for(let a=h-f;a<8;a++)l.push("");let j=c.slice(h).filter(a=>"item"===a.kind).length;j>0?l.push(`  \x1b[2m  \u2193 ${j} more below\x1b[0m`):l.push("")}l.push(""),l.push("  \x1b[2m"+"─".repeat(a-2)+"\x1b[0m"),l.push("  [↑↓] Move  [Space] Toggle  [Ctrl+A] All  [Ctrl+S] Save  [Esc] Clear  [^C] Quit"),l.push(""),l.push("  \x1b[2mTip: `policies` for a flat list · `policies --install <name…>` to skip prompt\x1b[0m"),c||l.push("  \x1b[2mTip: `policies --install --beta` to include beta policies\x1b[0m"),i>0&&process.stdout.write(`\x1b[${i}A\x1b[J`);let r=l.map(b=>""===b?b:function(a,b){let c=0,d="",e=0;for(;e<a.length;)if("\x1b"===a[e]&&"["===a[e+1]){let b=e+2;for(;b<a.length&&!/[A-Za-z]/.test(a[b]);)b++;b++,d+=a.slice(e,b),e=b}else{if(c>=b)break;d+=a[e],c++,e++}return d}(b,a)).join("\n")+"\n";process.stdout.write(r),i=l.length}return new Promise(a=>{function b(b,d){if(!d)return;d.ctrl&&"c"===d.name&&(c(),process.exit(0));let f=k();if("up"===d.name)f.length>0&&(g=g>0?g-1:f.length-1),l();else if("down"===d.name)f.length>0&&(g=g<f.length-1?g+1:0),l();else if("return"===d.name||"space"===d.name){let a=f[g];a&&(a.selected=!a.selected),l()}else if("escape"===d.name)h="",g=0,l();else if(d.ctrl&&"a"===d.name){let a=f.length>0&&f.every(a=>a.selected);for(let b of f)b.selected=!a;l()}else if(d.ctrl&&"s"===d.name){c();let b=e.filter(a=>a.selected).map(a=>a.name);process.stdout.write("\n"),a(b)}else"backspace"===d.name||"delete"===d.name?h.length>0&&(h=h.slice(0,-1),g=0,l()):!b||1!==b.length||d.ctrl||d.meta||(h+=b,g=0,l())}function c(){j&&(process.stdout.write("\x1b[?25h"),j=!1),process.stdin.removeListener("keypress",b),process.stdin.setRawMode(!1),process.stdin.pause()}l(),process.stdin.setRawMode(!0),process.stdin.resume(),N.emitKeypressEvents(process.stdin),process.stdin.on("keypress",b)})}var a7=a.i(57764);let a8="__failproofai_custom_hooks__";var a9=a.i(24868),ba=a.i(14747),bb=a.i(92509);let bc=".__failproofai_tmp__.mjs",bd=/(?:import\s+(?:[\s\S]*?\s+from\s+)?|export\s+(?:[\s\S]*?\s+from\s+))(['"])(\.\.?\/[^'"]+)\1/g,be=/require\s*\(\s*(['"])(\.\.?\/[^'"]+)\1\s*\)/g;async function bf(a){try{return await (0,a9.access)(a),!0}catch{return!1}}async function bg(){let a=process.env.FAILPROOFAI_DIST_PATH;if(a){let b=(0,ba.resolve)(a,"index.js");if(await bf(b))return b}for(let a of[(0,ba.resolve)((0,ba.dirname)(process.execPath),"..","assets","dist","index.js"),(0,ba.resolve)(process.cwd(),"dist","index.js"),(0,ba.resolve)(process.cwd(),"node_modules","failproofai","dist","index.js")])if(await bf(a))return a;return null}async function bh(a,b){let c=(0,ba.resolve)(a,b);for(let a of[c,`${c}.js`,`${c}.mjs`,`${c}.ts`,(0,ba.resolve)(c,"index.js")])if(await bf(a))return a;return null}async function bi(a,b){let c=a+".__failproofai_esm_shim__.mjs",d=`import _cjs from '${b}';
+`;(0,e.appendFileSync)(c,g,"utf-8")}catch{}}function q(a){n("warn")&&(o("WARN",a),p("WARN",a))}function r(a){let b=(0,g.homedir)(),c=(0,f.resolve)(a);for(;c!==b;){let a=(0,f.resolve)(c,".failproofai");try{if((0,e.statSync)(a).isDirectory())return c}catch{}let b=(0,f.dirname)(c);if(b===c)break;c=b}return(0,f.resolve)(a)}function s(){return(0,f.resolve)((0,g.homedir)(),".failproofai","policies-config.json")}function t(){let a=s();if(!(0,e.existsSync)(a))return{enabledPolicies:[]};try{let b=(0,e.readFileSync)(a,"utf8");return JSON.parse(b)}catch(b){return q(`failed to parse config at ${a}: ${b instanceof Error?b.message:String(b)}`),{enabledPolicies:[]}}}function u(a){let b=s(),c=(0,f.dirname)(b);(0,e.existsSync)(c)||(0,e.mkdirSync)(c,{recursive:!0}),(0,e.writeFileSync)(b,JSON.stringify(a,null,2)+"\n","utf8")}function v(a,b){switch(a){case"user":return(0,f.resolve)((0,g.homedir)(),".failproofai","policies-config.json");case"project":return(0,f.resolve)(r(b??process.cwd()),".failproofai","policies-config.json");case"local":return(0,f.resolve)(r(b??process.cwd()),".failproofai","policies-config.local.json")}}function w(a,b){let c=v(a,b);if(!(0,e.existsSync)(c))return{enabledPolicies:[]};try{let a=(0,e.readFileSync)(c,"utf8");return JSON.parse(a)}catch(a){return q(`failed to parse config at ${c}: ${a instanceof Error?a.message:String(a)}`),{enabledPolicies:[]}}}function x(a,b,c){let d=v(b,c),g=(0,f.dirname)(d);(0,e.existsSync)(g)||(0,e.mkdirSync)(g,{recursive:!0}),(0,e.writeFileSync)(d,JSON.stringify(a,null,2)+"\n","utf8")}var y=a.i(74533);let z=["user","project","local"],A=["claude","codex","copilot","cursor","opencode","pi","gemini"],B=["session_start","pre_tool_use","permission_request","post_tool_use","user_prompt_submit","stop"],C={session_start:"SessionStart",pre_tool_use:"PreToolUse",permission_request:"PermissionRequest",post_tool_use:"PostToolUse",user_prompt_submit:"UserPromptSubmit",stop:"Stop"},D=["SessionStart","SessionEnd","UserPromptSubmit","PreToolUse","PostToolUse","Stop"],E=["sessionStart","sessionEnd","beforeSubmitPrompt","preToolUse","postToolUse","stop"],F=["SessionStart","SessionEnd","BeforeAgent","AfterAgent","BeforeModel","AfterModel","BeforeToolSelection","BeforeTool","AfterTool","PreCompress","Notification"],G=["SessionStart","SessionEnd","UserPromptSubmit","PreToolUse","PermissionRequest","PermissionDenied","PostToolUse","PostToolUseFailure","Notification","SubagentStart","SubagentStop","TaskCreated","TaskCompleted","Stop","StopFailure","TeammateIdle","InstructionsLoaded","ConfigChange","CwdChanged","FileChanged","WorktreeCreate","WorktreeRemove","PreCompact","PostCompact","Elicitation","ElicitationResult","UserPromptExpansion","PostToolBatch"],H="__failproofai_hook__";var I=a.i(57764);let J={get url(){return`file://${a.P("src/hooks/integrations.ts")}`}};function K(a){return(0,e.existsSync)(a)?JSON.parse((0,e.readFileSync)(a,"utf8")):{}}function L(a,b){(0,e.mkdirSync)((0,f.dirname)(a),{recursive:!0}),(0,e.writeFileSync)(a,JSON.stringify(b,null,2)+"\n","utf8")}function M(a){if(!a||"object"!=typeof a)return!1;if(!0===a[H])return!0;let b="string"==typeof a.command?a.command:"";return b.includes("failproofai")&&b.includes("--hook")}function N(a){try{let b=`which ${a}`;return(0,y.execSync)(b,{encoding:"utf8",stdio:"pipe"}),!0}catch{return!1}}let O={id:"claude",displayName:"Claude Code",scopes:z,eventTypes:G,getSettingsPath(a,b){let c=b?(0,f.resolve)(b):process.cwd();switch(a){case"user":return(0,f.resolve)((0,g.homedir)(),".claude","settings.json");case"project":return(0,f.resolve)(c,".claude","settings.json");case"local":return(0,f.resolve)(c,".claude","settings.local.json")}},readSettings:a=>K(a),writeSettings(a,b){L(a,b)},buildHookEntry:(a,b,c)=>({type:"command",command:"project"===c?`npx -y failproofai --hook ${b}`:`"${a}" --hook ${b}`,timeout:6e4,[H]:!0}),isFailproofaiHook:M,writeHookEntries(a,b,c){for(let d of(a.hooks||(a.hooks={}),G)){let e=this.buildHookEntry(b,d,c);a.hooks[d]||(a.hooks[d]=[]);let f=a.hooks[d],g=!1;for(let a of f){if(!a.hooks)continue;let b=a.hooks.findIndex(a=>M(a));if(b>=0){a.hooks[b]=e,g=!0;break}}g||f.push({hooks:[e]})}},removeHooksFromFile(a){let b=this.readSettings(a);if(!b.hooks)return 0;let c=0;for(let a of Object.keys(b.hooks)){let d=b.hooks[a];if(Array.isArray(d)){for(let a=d.length-1;a>=0;a--){let b=d[a];if(!b.hooks)continue;let e=b.hooks.length;b.hooks=b.hooks.filter(a=>!M(a)),c+=e-b.hooks.length,0===b.hooks.length&&d.splice(a,1)}0===d.length&&delete b.hooks[a]}}return 0===Object.keys(b.hooks).length&&delete b.hooks,this.writeSettings(a,b),c},hooksInstalledInSettings(a,b){let c=this.getSettingsPath(a,b);if(!(0,e.existsSync)(c))return!1;try{let a=this.readSettings(c);if(!a.hooks)return!1;for(let b of Object.values(a.hooks))if(Array.isArray(b)){for(let a of b)if(a.hooks&&a.hooks.some(a=>M(a)))return!0}}catch{}return!1},detectInstalled:()=>N("claude")||N("claude-code")};function P(a){if(!0===a[H])return!0;for(let b of["string"==typeof a.bash?a.bash:"","string"==typeof a.powershell?a.powershell:""])if(b.includes("failproofai")&&b.includes("--hook"))return!0;return!1}let Q="./plugins/failproofai.mjs";function R(a){return(0,f.resolve)((0,f.dirname)(a),"plugins","failproofai.mjs")}function S(){let a=process.env.FAILPROOFAI_PACKAGE_ROOT;return a?(0,f.resolve)(a,"pi-extension"):(0,f.resolve)((0,I.fileURLToPath)(J.url),"..","..","..","pi-extension")}function T(a){return"string"==typeof a&&(!!/(?:^|\/)pi-extension\/?$/.test(a)||a.includes("pi-extension")&&a.includes("failproofai"))}let U={claude:O,codex:{id:"codex",displayName:"OpenAI Codex",scopes:["user","project"],eventTypes:B,getSettingsPath(a,b){let c=b?(0,f.resolve)(b):process.cwd();switch(a){case"user":return(0,f.resolve)((0,g.homedir)(),".codex","hooks.json");case"project":case"local":return(0,f.resolve)(c,".codex","hooks.json")}},readSettings(a){let b=K(a);return void 0===b.version&&(b.version=1),b},writeSettings(a,b){L(a,b)},buildHookEntry:(a,b,c)=>({type:"command",command:"project"===c?`npx -y failproofai --hook ${b} --cli codex`:`"${a}" --hook ${b} --cli codex`,timeout:6e4,[H]:!0}),isFailproofaiHook:M,writeHookEntries(a,b,c){for(let d of(void 0===a.version&&(a.version=1),a.hooks||(a.hooks={}),B)){let e=C[d],f=this.buildHookEntry(b,d,c);a.hooks[e]||(a.hooks[e]=[]);let g=a.hooks[e],h=!1;for(let a of g){if(!a.hooks)continue;let b=a.hooks.findIndex(a=>M(a));if(b>=0){a.hooks[b]=f,h=!0;break}}h||g.push({hooks:[f]})}},removeHooksFromFile(a){let b=this.readSettings(a);if(!b.hooks)return 0;let c=0;for(let a of Object.keys(b.hooks)){let d=b.hooks[a];if(Array.isArray(d)){for(let a=d.length-1;a>=0;a--){let b=d[a];if(!b.hooks)continue;let e=b.hooks.length;b.hooks=b.hooks.filter(a=>!M(a)),c+=e-b.hooks.length,0===b.hooks.length&&d.splice(a,1)}0===d.length&&delete b.hooks[a]}}return 0===Object.keys(b.hooks).length&&delete b.hooks,this.writeSettings(a,b),c},hooksInstalledInSettings(a,b){let c=this.getSettingsPath(a,b);if(!(0,e.existsSync)(c))return!1;try{let a=this.readSettings(c);if(!a.hooks)return!1;for(let b of Object.values(a.hooks))if(Array.isArray(b)){for(let a of b)if(a.hooks&&a.hooks.some(a=>M(a)))return!0}}catch{}return!1},detectInstalled:()=>N("codex")},copilot:{id:"copilot",displayName:"GitHub Copilot",scopes:["user","project"],eventTypes:D,getSettingsPath(a,b){let c=b?(0,f.resolve)(b):process.cwd();switch(a){case"user":return(0,f.resolve)((0,g.homedir)(),".copilot","hooks","failproofai.json");case"project":case"local":return(0,f.resolve)(c,".github","hooks","failproofai.json")}},readSettings(a){let b=K(a);return void 0===b.version&&(b.version=1),b},writeSettings(a,b){L(a,b)},buildHookEntry(a,b,c){let d="project"===c?`npx -y failproofai --hook ${b} --cli copilot`:`"${a}" --hook ${b} --cli copilot`;return{type:"command",bash:d,powershell:d,timeoutSec:60,[H]:!0}},isFailproofaiHook:P,writeHookEntries(a,b,c){for(let d of(void 0===a.version&&(a.version=1),a.hooks||(a.hooks={}),D)){let e=this.buildHookEntry(b,d,c);a.hooks[d]||(a.hooks[d]=[]);let f=a.hooks[d],g=!1;for(let a of f){if(!a.hooks)continue;let b=a.hooks.findIndex(a=>P(a));if(b>=0){a.hooks[b]=e,g=!0;break}}g||f.push({hooks:[e]})}},removeHooksFromFile(a){let b=this.readSettings(a);if(!b.hooks)return 0;let c=0;for(let a of Object.keys(b.hooks)){let d=b.hooks[a];if(Array.isArray(d)){for(let a=d.length-1;a>=0;a--){let b=d[a];if(!b.hooks)continue;let e=b.hooks.length;b.hooks=b.hooks.filter(a=>!P(a)),c+=e-b.hooks.length,0===b.hooks.length&&d.splice(a,1)}0===d.length&&delete b.hooks[a]}}return 0===Object.keys(b.hooks).length&&delete b.hooks,this.writeSettings(a,b),c},hooksInstalledInSettings(a,b){let c=this.getSettingsPath(a,b);if(!(0,e.existsSync)(c))return!1;try{let a=this.readSettings(c);if(!a.hooks)return!1;for(let b of Object.values(a.hooks))if(Array.isArray(b)){for(let a of b)if(a.hooks&&a.hooks.some(a=>P(a)))return!0}}catch{}return!1},detectInstalled:()=>N("copilot")},cursor:{id:"cursor",displayName:"Cursor Agent",scopes:["user","project"],eventTypes:E,getSettingsPath(a,b){let c=b?(0,f.resolve)(b):process.cwd();switch(a){case"user":return(0,f.resolve)((0,g.homedir)(),".cursor","hooks.json");case"project":case"local":return(0,f.resolve)(c,".cursor","hooks.json")}},readSettings(a){let b=K(a);return void 0===b.version&&(b.version=1),b},writeSettings(a,b){L(a,b)},buildHookEntry:(a,b,c)=>({type:"command",command:"project"===c?`npx -y failproofai --hook ${b} --cli cursor`:`"${a}" --hook ${b} --cli cursor`,timeout:6e4,[H]:!0}),isFailproofaiHook:M,writeHookEntries(a,b,c){for(let d of(void 0===a.version&&(a.version=1),a.hooks||(a.hooks={}),E)){let e=this.buildHookEntry(b,d,c),f=a.hooks[d],g=f??[];f||(a.hooks[d]=g);let h=g.findIndex(a=>M(a));h>=0?g[h]=e:g.push(e)}},removeHooksFromFile(a){let b=this.readSettings(a);if(!b.hooks)return 0;let c=0;for(let a of Object.keys(b.hooks)){let d=b.hooks[a];if(!Array.isArray(d))continue;let e=d.length,f=d.filter(a=>!M(a));c+=e-f.length,0===f.length?delete b.hooks[a]:b.hooks[a]=f}return 0===Object.keys(b.hooks).length&&delete b.hooks,this.writeSettings(a,b),c},hooksInstalledInSettings(a,b){let c=this.getSettingsPath(a,b);if(!(0,e.existsSync)(c))return!1;try{let a=this.readSettings(c);if(!a.hooks)return!1;for(let b of Object.values(a.hooks))if(Array.isArray(b)&&b.some(a=>M(a)))return!0}catch{}return!1},detectInstalled:()=>N("cursor-agent")||N("agent")},opencode:{id:"opencode",displayName:"OpenCode",scopes:["user","project"],eventTypes:["tool.execute.before","tool.execute.after","session.created","session.deleted","session.idle","message.updated","permission.ask"],getSettingsPath(a,b){let c=b?(0,f.resolve)(b):process.cwd();switch(a){case"user":return(0,f.resolve)((0,g.homedir)(),".config","opencode","opencode.json");case"project":case"local":return(0,f.resolve)(c,".opencode","opencode.json")}},readSettings:a=>K(a),writeSettings(a,b){L(a,b)},buildHookEntry(a,b,c){if("user"===c){let a=(0,f.resolve)((0,g.homedir)(),".config","opencode","plugins","failproofai.mjs");return{spec:`file://${a}`,[H]:!0}}return{spec:Q,[H]:!0}},isFailproofaiHook:a=>"string"==typeof a?a.includes("failproofai.mjs"):!!Array.isArray(a)&&"string"==typeof a[0]&&a[0].includes("failproofai.mjs"),writeHookEntries(a,b,c){let d,h,i=c??"project",j=R("user"===i?(0,f.resolve)((0,g.homedir)(),".config","opencode","opencode.json"):(0,f.resolve)(process.cwd(),".opencode","opencode.json"));(0,e.mkdirSync)((0,f.dirname)(j),{recursive:!0}),(0,e.writeFileSync)(j,(h=(d="project"===i)?'""':JSON.stringify(b),`// AUTO-GENERATED by failproofai. ${H}
+// Re-generate via: failproofai policies --install --cli opencode
+// Plugin shim that bridges OpenCode's plugin API to the failproofai binary.
+// See: https://opencode.ai/docs/plugins/
+import { spawnSync } from "node:child_process";
+
+// Map opencode bus-event types → canonical failproofai event names.
+// (The binary sees PascalCase — the binary's --cli=opencode flag is for
+// telemetry / activity tagging only; no opencode branch in handler.ts.)
+const BUS_EVENT_MAP = {
+  "session.created": "SessionStart",
+  "session.deleted": "SessionEnd",
+  "session.idle":    "Stop",
+  // message.updated is handled separately (filter to role:user); see below.
+};
+
+const FAILPROOFAI_BIN = ${h};
+const USE_NPX = ${d};
+
+function runFailproofai(eventName, payload, directory) {
+  const cmd = USE_NPX ? "npx" : FAILPROOFAI_BIN;
+  const args = USE_NPX
+    ? ["-y", "failproofai", "--hook", eventName, "--cli", "opencode"]
+    : ["--hook", eventName, "--cli", "opencode"];
+  const r = spawnSync(cmd, args, {
+    input: JSON.stringify(payload),
+    encoding: "utf8",
+    timeout: 60_000,
+    cwd: directory,
+  });
+  return { exitCode: r.status ?? 0, stdout: r.stdout ?? "", stderr: r.stderr ?? "" };
+}
+
+function applyDecision(result, ctx) {
+  // Deny path 1: exit 2 (Claude Stop-style or any non-Pre/Post deny).
+  if (result.exitCode === 2) {
+    throw new Error((result.stderr || "").trim() || "Blocked by failproofai");
+  }
+  // Deny path 2: stdout JSON with hookSpecificOutput.permissionDecision === "deny".
+  let parsed = null;
+  try { parsed = JSON.parse(result.stdout); } catch { /* fail-open allow */ }
+  if (!parsed) return;
+  const out = parsed.hookSpecificOutput;
+  if (out && out.permissionDecision === "deny") {
+    throw new Error(out.permissionDecisionReason || "Blocked by failproofai");
+  }
+  // Codex-shape PermissionRequest deny: hookSpecificOutput.decision.behavior.
+  if (out && out.decision && out.decision.behavior === "deny") {
+    throw new Error((out.decision.message) || "Blocked by failproofai");
+  }
+  // Instruct: forward the additional context as a prompt to the session.
+  const ctxText = out && out.additionalContext;
+  if (ctxText && ctx && ctx.client && ctx.sessionID) {
+    // Fire-and-forget: don't block the tool call on the SDK round-trip.
+    Promise.resolve(ctx.client.session.prompt({
+      path: { id: ctx.sessionID },
+      body: { parts: [{ type: "text", text: ctxText }] },
+    })).catch(() => {});
+  }
+}
+
+export default async function failproofaiPlugin({ client, directory }) {
+  return {
+    // Generic bus events: session lifecycle + user-prompt detection.
+    event: async ({ event }) => {
+      if (!event || !event.type) return;
+
+      // UserPromptSubmit — filter message.updated to user role only so we
+      // don't fire on every assistant token. Forward the prompt text so
+      // prompt-based policies (sanitize-* on input, content checks) see it.
+      if (event.type === "message.updated") {
+        const props = event.properties || {};
+        const info = props.info || props.message || {};
+        const role = info.role || props.role;
+        if (role !== "user") return;
+        const sessionID = info.sessionID || info.sessionId || info.session_id || props.sessionID;
+        // OpenCode's message shape: parts is an array of {type, text, ...}.
+        // Concatenate text parts to reconstruct the user-facing prompt.
+        // Fall back to direct text/content fields if a future shape differs.
+        let prompt = "";
+        const parts = info.parts || props.parts || [];
+        if (Array.isArray(parts)) {
+          for (const p of parts) {
+            if (p && typeof p === "object" && typeof p.text === "string") prompt += p.text;
+          }
+        }
+        if (!prompt) prompt = (info.text || info.content || props.text || "").toString();
+        const r = runFailproofai("UserPromptSubmit", {
+          session_id: sessionID, cwd: directory, hook_event_name: "UserPromptSubmit", prompt,
+        }, directory);
+        applyDecision(r, { client, sessionID });
+        return;
+      }
+
+      const claudeEvent = BUS_EVENT_MAP[event.type];
+      if (!claudeEvent) return;
+      const props = event.properties || {};
+      const sessionID = props.sessionID || (props.session && props.session.id) || props.id;
+      const r = runFailproofai(claudeEvent, {
+        session_id: sessionID, cwd: directory, hook_event_name: claudeEvent,
+      }, directory);
+      applyDecision(r, { client, sessionID });
+    },
+
+    // First-class PreToolUse hook. Note: tool args live on output.args (mutable).
+    "tool.execute.before": async (input, output) => {
+      const r = runFailproofai("PreToolUse", {
+        session_id: input.sessionID,
+        cwd: directory,
+        tool_name: input.tool,
+        tool_input: output.args,
+        hook_event_name: "PreToolUse",
+      }, directory);
+      applyDecision(r, { client, sessionID: input.sessionID });
+    },
+
+    // First-class PostToolUse hook. Note: tool args live on input.args here.
+    "tool.execute.after": async (input, output) => {
+      const r = runFailproofai("PostToolUse", {
+        session_id: input.sessionID,
+        cwd: directory,
+        tool_name: input.tool,
+        tool_input: input.args,
+        tool_response: { title: output.title, output: output.output, metadata: output.metadata },
+        hook_event_name: "PostToolUse",
+      }, directory);
+      applyDecision(r, { client, sessionID: input.sessionID });
+    },
+
+    // Cleaner deny UX for prompted tools — mutate output.status instead of throwing.
+    "permission.ask": async (input, output) => {
+      const r = runFailproofai("PermissionRequest", {
+        session_id: input.sessionID,
+        cwd: directory,
+        tool_name: input.tool || input.command || "permission",
+        tool_input: input,
+        hook_event_name: "PermissionRequest",
+      }, directory);
+      try {
+        applyDecision(r, { client, sessionID: input.sessionID });
+      } catch {
+        output.status = "deny";
+      }
+    },
+  };
+}
+`),"utf8"),Array.isArray(a.plugin)||(a.plugin=[]);let k="user"===i?`file://${j}`:Q,l=a.plugin.findIndex(a=>this.isFailproofaiHook(a));l>=0?a.plugin[l]=k:a.plugin.push(k)},removeHooksFromFile(a){let b=0,c=this.readSettings(a);if(Array.isArray(c.plugin)){let a=c.plugin.length;c.plugin=c.plugin.filter(a=>!this.isFailproofaiHook(a)),b+=a-c.plugin.length,0===c.plugin.length&&delete c.plugin}this.writeSettings(a,c);let d=R(a);if((0,e.existsSync)(d))try{(0,e.readFileSync)(d,"utf8").includes(H)&&((0,e.unlinkSync)(d),0===b&&(b=1))}catch{}return b},hooksInstalledInSettings(a,b){let c=this.getSettingsPath(a,b);if(!(0,e.existsSync)(c))return!1;try{let a=this.readSettings(c);if(!Array.isArray(a.plugin)||!a.plugin.some(a=>this.isFailproofaiHook(a)))return!1;let b=R(c);if(!(0,e.existsSync)(b))return!1;return(0,e.readFileSync)(b,"utf8").includes(H)}catch{return!1}},detectInstalled:()=>N("opencode")},pi:{id:"pi",displayName:"Pi",scopes:["user","project"],eventTypes:["session_start","session_shutdown","input","tool_call","user_bash","tool_result","agent_end"],getSettingsPath(a,b){let c=b?(0,f.resolve)(b):process.cwd();switch(a){case"user":return(0,f.resolve)((0,g.homedir)(),".pi","agent","settings.json");case"project":case"local":return(0,f.resolve)(c,".pi","settings.json")}},readSettings:a=>K(a),writeSettings(a,b){L(a,b)},buildHookEntry:(a,b,c)=>({[H]:!0,_piPackagePath:S(),_piScope:c}),isFailproofaiHook:a=>"string"==typeof a?T(a):!!a&&"object"==typeof a&&(!0===a[H]||"string"==typeof a.source&&T(a.source)),writeHookEntries(a,b,c){var d;let e,g,h;Array.isArray(a.packages)||(a.packages=[]);let i=S(),j="project"===c?(d=i,e=process.cwd(),g=(0,f.resolve)(e),(h=(0,f.resolve)(d)).startsWith(g+"/")||h===g?"../"+h.slice(g.length+1):h):i,k=a.packages.findIndex(a=>T(a));k>=0?a.packages[k]=j:a.packages.push(j)},removeHooksFromFile(a){if(!(0,e.existsSync)(a))return 0;let b=this.readSettings(a);if(!Array.isArray(b.packages))return 0;let c=b.packages.length;b.packages=b.packages.filter(a=>!T(a));let d=c-b.packages.length;return 0===b.packages.length&&delete b.packages,this.writeSettings(a,b),d},hooksInstalledInSettings(a,b){let c=this.getSettingsPath(a,b);if(!(0,e.existsSync)(c))return!1;try{let a=this.readSettings(c);if(!Array.isArray(a.packages))return!1;return a.packages.some(a=>T(a))}catch{return!1}},detectInstalled:()=>N("pi")},gemini:{id:"gemini",displayName:"Gemini CLI",scopes:["user","project"],eventTypes:F,getSettingsPath(a,b){let c=b?(0,f.resolve)(b):process.cwd();switch(a){case"user":return(0,f.resolve)((0,g.homedir)(),".gemini","settings.json");case"project":case"local":return(0,f.resolve)(c,".gemini","settings.json")}},readSettings:a=>K(a),writeSettings(a,b){L(a,b)},buildHookEntry:(a,b,c)=>({type:"command",command:"project"===c?`npx -y failproofai --hook ${b} --cli gemini`:`"${a}" --hook ${b} --cli gemini`,timeout:6e4,[H]:!0}),isFailproofaiHook:M,writeHookEntries(a,b,c){for(let d of(a.hooks||(a.hooks={}),F)){let e=this.buildHookEntry(b,d,c);a.hooks[d]||(a.hooks[d]=[]);let f=a.hooks[d],g=!1;for(let a of f){if(!a.hooks)continue;let b=a.hooks.findIndex(a=>M(a));if(b>=0){a.hooks[b]=e,g=!0;break}}g||f.push({matcher:"*",hooks:[e]})}},removeHooksFromFile(a){let b=this.readSettings(a);if(!b.hooks)return 0;let c=0;for(let a of Object.keys(b.hooks)){let d=b.hooks[a];if(Array.isArray(d)){for(let a=d.length-1;a>=0;a--){let b=d[a];if(!b.hooks)continue;let e=b.hooks.length;b.hooks=b.hooks.filter(a=>!M(a)),c+=e-b.hooks.length,0===b.hooks.length&&d.splice(a,1)}0===d.length&&delete b.hooks[a]}}return 0===Object.keys(b.hooks).length&&delete b.hooks,this.writeSettings(a,b),c},hooksInstalledInSettings(a,b){let c=this.getSettingsPath(a,b);if(!(0,e.existsSync)(c))return!1;try{let a=this.readSettings(c);if(!a.hooks)return!1;for(let b of Object.values(a.hooks))if(Array.isArray(b)){for(let a of b)if(a.hooks&&a.hooks.some(a=>M(a)))return!0}}catch{}return!1},detectInstalled:()=>N("gemini")}};function V(a){let b=U[a];if(!b)throw Error(`Unknown integration: ${a}. Valid: ${A.join(", ")}`);return b}function W(){return A.filter(a=>U[a].detectInstalled())}var X=a.i(1457),Y=a.i(12714);function Z(a){return a?{decision:"allow",reason:a}:{decision:"allow"}}function $(a){return{decision:"deny",reason:a}}function _(a){return{decision:"instruct",reason:a}}let aa=function(a){let b=a.replaceAll("\\","/");for(let a of[".claude",".codex",".copilot",".cursor",".opencode",".pi",".gemini"]){let c=(0,f.join)((0,g.homedir)(),a).replaceAll("\\","/");if(b===c||b.startsWith(c+"/"))return!0}for(let a of[(0,f.join)(".config","opencode"),(0,f.join)(".local","share","opencode")]){let c=(0,f.join)((0,g.homedir)(),a).replaceAll("\\","/");if(b===c||b.startsWith(c+"/"))return!0}return!1},ab=function(a){return!!(/[\\/]\.claude[\\/]settings(?:\.[^/\\]+)?\.json$/.test(a)||/[\\/]\.codex[\\/]hooks\.json$/.test(a)||/[\\/]\.copilot[\\/]hooks[\\/][^/\\]+\.json$/.test(a)||/[\\/]\.github[\\/]hooks[\\/][^/\\]+\.json$/.test(a)||/[\\/]\.cursor[\\/]hooks\.json$/.test(a)||/[\\/]\.opencode[\\/]opencode\.jsonc?$/.test(a)||/[\\/]\.opencode[\\/]plugins[\\/][^/\\]+\.(?:mjs|js|ts)$/.test(a)||/[\\/]\.config[\\/]opencode[\\/]opencode\.jsonc?$/.test(a)||/[\\/]\.config[\\/]opencode[\\/]config\.json$/.test(a)||/[\\/]\.config[\\/]opencode[\\/]plugins[\\/][^/\\]+\.(?:mjs|js|ts)$/.test(a)||/[\\/]\.pi[\\/](?:agent[\\/])?settings\.json$/.test(a)||/[\\/]\.pi[\\/](?:agent[\\/])?extensions[\\/]/.test(a)||/[\\/]\.gemini[\\/]settings\.json$/.test(a)||/[\\/]\.gemini[\\/]hooks[\\/]/.test(a))};function ac(a){return a.toolInput?.command??""}function ad(a){return a.toolInput?.file_path??""}function ae(a){return a.trim().split(/\s+/).map(a=>a.replace(/^['"]|['"]$/g,""))}let af=new Set(["&&","||","|",";"]),ag=/[;&<>`$()\\]/,ah=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/,ai=[[/sk-ant-[A-Za-z0-9\-_]{20,}/,"Anthropic API key"],[/sk-proj-[A-Za-z0-9\-_]{20,}/,"OpenAI project API key"],[/sk-[A-Za-z0-9]{20,}/,"OpenAI API key"],[/ghp_[A-Za-z0-9]{36}/,"GitHub personal access token"],[/github_pat_[A-Za-z0-9_]{82}/,"GitHub fine-grained token"],[/AKIA[A-Z0-9]{16}/,"AWS access key ID"],[/sk_live_[A-Za-z0-9]{24,}/,"Stripe live secret key"],[/sk_test_[A-Za-z0-9]{24,}/,"Stripe test secret key"],[/AIza[0-9A-Za-z\-_]{35}/,"Google API key"]],aj=/(?:postgresql|postgres|mysql|mongodb(?:\+srv)?|redis|amqps?|smtps?):\/\/[^@\s]+@/,ak=/-----BEGIN (?:[A-Z]+ )?PRIVATE KEY-----/,al=/Authorization:\s*Bearer\s+[A-Za-z0-9\-._~+/]{20,}/i,am=/\b(?:psql|mysql|sqlite3|pgcli|clickhouse-client)\b/,an=/\b(?:DROP\s+(?:TABLE|DATABASE|SCHEMA)|TRUNCATE\b)/i,ao=/\bDELETE\s+FROM\b/i,ap=/\bWHERE\b/i,aq=/\bALTER\s+TABLE\b[\s\S]*\b(?:DROP\s+COLUMN|ADD\s+COLUMN|RENAME\s+(?:COLUMN|TO)|MODIFY\s+COLUMN)\b/i,ar=/(?:npm\s+publish|bun\s+publish|pnpm\s+publish|yarn\s+npm\s+publish|twine\s+upload|poetry\s+publish|cargo\s+publish|gem\s+push)\b/,as=/(?:^|\s|;|&&|\|\|)(?:env|printenv)(?:\s|$|;|&&|\|)/,at=/echo\s+.*\$\{?[A-Za-z_]/,au=/(?:^|\s|;|&&|\|\|)export\s+\w+/,av=/\$env:[A-Za-z_]/i,aw=/(?:Get-ChildItem|dir|gci|ls)\s+Env:/i,ax=/\[Environment\]::GetEnvironment/i,ay=/echo\s+%[A-Za-z_]/i,az=/(?:^|[\\/])\.env(?:\.|$)/,aA=/\.env(?:\b|\s|$|\.)/,aB=/(?:^|;|&&|\|\|)\s*sudo\s/,aC=/Start-Process\s+.*-Verb\s+RunAs/i,aD=/(?:^|;|&&|\|\|)\s*runas\s/i,aE=/(?:curl|wget)\s.*\|\s*(?:sh|bash|zsh|dash|ksh|csh|tcsh|fish|ash)\b/,aF=/(?:Invoke-WebRequest|iwr|Invoke-RestMethod|irm)\s+.*\|\s*(?:Invoke-Expression|iex)/i,aG=/(?:--force|-f\b)/,aH=/\.(?:pem|key)$/,aI=/id_rsa/,aJ=/credentials/,aK=/git\s+(?:commit|merge|rebase|cherry-pick)\b/,aL=/(?:^|;|&&|\|\||\|)\s*failproofai(?:\s|$)/,aM=/(?:npm\s+(?:uninstall|remove|un|r)\s.*failproofai|bun\s+remove\s.*failproofai|yarn\s+global\s+remove\s+failproofai|pnpm\s+(?:remove|uninstall|un)\s.*failproofai)/,aN=/\bgit\s+commit\b.*--amend\b/,aO=/\bgit\s+stash\s+(?:drop|clear)\b/,aP=/\bgit\s+add\s+(?:-A\b|--all\b|\.(?:\s|$|;|&&|\|\|))/,aQ=/\bnpm\s+(?:install|i)\b(?=.*(?:\s-g\b|--global\b))/,aR=/\byarn\s+global\s+add\b/,aS=/\bpnpm\s+(?:add|install|i)\b(?=.*(?:\s-g\b|--global\b))/,aT=/\bbun\s+(?:install|add)\b(?=.*(?:\s-g\b|--global\b))/,aU=/\bcargo\s+install\b/,aV=/\bpip(?:3)?\s+install\b(?=.*(?:--user\b|--break-system-packages\b))/,aW={pip:[/\bpip\b/,/\bpip3\b/,/\bpython3?\s+-m\s+pip\b/],npm:[/\bnpm\b/,/\bnpx\b/],yarn:[/\byarn\b/],pnpm:[/\bpnpm\b/,/\bpnpx\b/],bun:[/\bbun\b/,/\bbunx\b/],uv:[/\buv\b/],poetry:[/\bpoetry\b/],pipenv:[/\bpipenv\b/],conda:[/\bconda\b/],cargo:[/\bcargo\b/]},aX=/\bnohup\s+\S/,aY=/\bscreen\s+-[A-Za-z]*d[A-Za-z]*\b/,aZ=/\btmux\s+(?:new-session|new)\b[^|&;]*-d\b/,a$=/\bdisown\b/,a_=/(?<![&|])\s?&\s*(?:$|#|;)/,a0=/(?:^|[;\n]|&&|\|\|?|&)\s*kubectl(?:\s|$)/,a1=/(?:^|[;\n]|&&|\|\|?|&)\s*(?:terraform|tofu)(?:\s|$)/,a2=/(?:^|[;\n]|&&|\|\|?|&)\s*aws(?:\s|$)/,a3=/(?:^|[;\n]|&&|\|\|?|&)\s*gcloud(?:\s|$)/,a4=/(?:^|[;\n]|&&|\|\|?|&)\s*az(?:\s|$)/,a5=/(?:^|[;\n]|&&|\|\|?|&)\s*helm(?:\s|$)/,a6=/(?:^|[;\n]|&&|\|\|?|&)\s*gh\s+(?:workflow\s+(?:run|enable|disable)|run\s+(?:rerun|cancel)|pr\s+merge|release\s+(?:create|delete)|cache\s+delete|secret\s+(?:set|delete))\b/,a7=new Map;function a8(a){try{let b=a7.get(a);return void 0===b&&(b=(0,y.execSync)("git rev-parse --abbrev-ref HEAD",{cwd:a,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3}).trim(),a7.set(a,b)),b||null}catch{return null}}function a9(a,b){let c=ae(a),d=ae(b);return!(c.length<d.length||c.some(a=>af.has(a))||c.some(a=>ag.test(a)))&&d.every((a,b)=>"*"===a||a===c[b])}function ba(a){return a.split(/&&|\|\||[|;\n]/).map(a=>a.trim()).filter(a=>/^git\s+push\s/.test(a)).map(a=>a.replace(/^git\s+push\s+/,""))}function bb(a,b){if(0===b.length)return!1;let c=a.split(/&&|\|\||[|;\n]/).map(a=>a.trim()).filter(a=>/\brm\b/.test(a));if(0===c.length)return!1;for(let a of c){let c=ae(a),d=c.findIndex(a=>"rm"===a);if(d<0)continue;let e=c.slice(d+1).filter(a=>/^-[^-]/.test(a)),f=c.slice(d+1).filter(a=>/^--/.test(a));if(/r/i.test(e.join(""))||f.some(a=>/^--recursive$/i.test(a)))for(let e of c.slice(d+1).filter(a=>!a.startsWith("-"))){let c=e.replace(/\/\*$/,"").replace(/\/+$/,"")||"/";if(!b.some(a=>{let b=a.replace(/\/+$/,"")||"/";return c===b||c.startsWith(b+"/")})&&!b.some(b=>{let c=b.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return RegExp(`${c}(?:[/"'\\s/*]|$)`).test(a)}))return!1}}return!0}let bc=/(?:^|;|&&|\|\||\|)\s*(?:ls|find|cat|head|tail|less|more|wc|file|stat|tree|du)\s/;function bd(a,b,c){if("Bash"!==a.toolName)return Z();let d=ac(a);return!b.test(d)||(a.params?.allowPatterns??[]).some(a=>a9(d,a))?Z():$(c)}let be=/\s*(?:&&|\|\||\||;)\s*/,bf=[{name:"sanitize-jwt",description:"Stop Claude from reading JWTs in tool responses",fn:function(a){let b=JSON.stringify(a.payload);return ah.test(b)?{decision:"deny",reason:"JWT token detected in tool output",message:"[REDACTED: JWT token removed by failproofai]"}:Z()},match:{events:["PostToolUse"]},defaultEnabled:!0,category:"Sanitize"},{name:"sanitize-api-keys",description:"Stop Claude from reading API keys (OpenAI, Anthropic, GitHub, AWS, Stripe, Google) in tool responses",fn:function(a){let b=JSON.stringify(a.payload);for(let[a,c]of ai)if(a.test(b))return{decision:"deny",reason:`${c} detected in tool output`,message:`[REDACTED: ${c} removed by failproofai]`};for(let{regex:c,label:d}of a.params?.additionalPatterns??[])try{if(new RegExp(c).test(b))return{decision:"deny",reason:`${d} detected in tool output`,message:`[REDACTED: ${d} removed by failproofai]`}}catch{q(`additionalPatterns: invalid regex "${c}", skipping`)}return Z()},match:{events:["PostToolUse"]},defaultEnabled:!0,category:"Sanitize",params:{additionalPatterns:{type:"pattern[]",description:"Additional API key patterns to scrub, each with { regex, label }",default:[]}}},{name:"sanitize-connection-strings",description:"Stop Claude from reading database connection strings with embedded credentials in tool responses",fn:function(a){let b=JSON.stringify(a.payload);return aj.test(b)?{decision:"deny",reason:"Database connection string with credentials detected in tool output",message:"[REDACTED: connection string removed by failproofai]"}:Z()},match:{events:["PostToolUse"]},defaultEnabled:!0,category:"Sanitize"},{name:"sanitize-private-key-content",description:"Stop Claude from reading PEM private key content in tool responses",fn:function(a){let b=JSON.stringify(a.payload);return ak.test(b)?{decision:"deny",reason:"Private key content detected in tool output",message:"[REDACTED: private key content removed by failproofai]"}:Z()},match:{events:["PostToolUse"]},defaultEnabled:!0,category:"Sanitize"},{name:"sanitize-bearer-tokens",description:"Stop Claude from reading Authorization Bearer tokens in tool responses",fn:function(a){let b=JSON.stringify(a.payload);return al.test(b)?{decision:"deny",reason:"Bearer token detected in tool output",message:"[REDACTED: Bearer token removed by failproofai]"}:Z()},match:{events:["PostToolUse"]},defaultEnabled:!0,category:"Sanitize"},{name:"protect-env-vars",description:"Prevent commands that read environment variables",fn:function(a){if("Bash"!==a.toolName)return Z();let b=ac(a);return as.test(b)?$("Command reads environment variables"):at.test(b)?$("Command echoes environment variable"):au.test(b)?$("Command exports environment variable"):av.test(b)?$("Command reads environment variable via PowerShell"):aw.test(b)?$("Command reads environment variables via PowerShell"):ax.test(b)?$("Command reads environment variable via .NET"):ay.test(b)?$("Command echoes environment variable via cmd"):Z()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!0,category:"Environment"},{name:"block-env-files",description:"Block reading/writing .env files",fn:function(a){let b=ac(a),c=ad(a);return c&&az.test(c)?$("Access to .env file blocked"):"Bash"===a.toolName&&aA.test(b)?$("Command references .env file"):Z()},match:{events:["PreToolUse"]},defaultEnabled:!0,category:"Environment"},{name:"block-read-outside-cwd",description:"Block file reads outside the session working directory",fn:function(a){let b=process.env.CLAUDE_PROJECT_DIR||a.session?.cwd;if(!b)return Z();let c=a.params?.allowPaths??[];if("Bash"===a.toolName){let d=ac(a);if(!bc.test(d))return Z();let e=function(a){let b,c=[],d=/(?<![a-zA-Z0-9_.\-~\\*?:=])(?:~\/[^\s;|&"'()\[\]{}]*|~(?=\s|$|[;|&"'()\[\]{}])|\/[^\s;|&"'()\[\]{}]*)/g;function e(a){let b;for(d.lastIndex=0;null!==(b=d.exec(a));){let a=b[0];"~"===a?a=(0,g.homedir)():a.startsWith("~/")&&(a=(0,f.join)((0,g.homedir)(),a.slice(2))),c.push(a)}}let h=a.length,i=!1,j=!1;for(let b=0;b<a.length;b++){let c=a[b];if('"'!==c||j)if("'"!==c||i){if("|"===c&&!i&&!j){h=b;break}}else j=!j;else i=!i}let k=a.slice(0,h),l=/"([^"]*)"|'([^']*)'/g;for(;null!==(b=l.exec(k));){let a=b[1]??b[2]??"";/[*?\[\]^$+()\\]/.test(a)||e(a)}return e(a.replace(/"[^"]*"/g,a=>" ".repeat(a.length)).replace(/'[^']*'/g,a=>" ".repeat(a.length))),c}(d),h=b.endsWith("/")?b:b+"/";for(let a of e){let d=(0,f.resolve)(b,a);if(ab(d))return $(`Reading agent settings file blocked: ${d}`);if(!aa(d)&&"/dev/null"!==d&&d!==b&&!d.startsWith(h)){if(c.some(a=>d===a||d.startsWith(a.endsWith("/")?a:a+"/")))continue;return $(`Bash read outside project directory blocked: ${d}`)}}return Z()}let d=ad(a),e=a.toolInput?.path??"",h=d||e;if(!h)return Z();let i=(0,f.resolve)(b,h);if(ab(i))return $(`Reading agent settings file blocked: ${i}`);if(aa(i)||"/dev/null"===i)return Z();let j=b.endsWith("/")?b:b+"/";return i===b||i.startsWith(j)?Z():c.some(a=>i===a||i.startsWith(a.endsWith("/")?a:a+"/"))?Z():$(`Access outside project directory blocked: ${i}`)},match:{events:["PreToolUse"],toolNames:["Read","Glob","Grep","Bash"]},defaultEnabled:!1,category:"Environment",params:{allowPaths:{type:"string[]",description:"Absolute paths outside cwd that are allowed to be read",default:[]}}},{name:"block-sudo",description:"Block sudo commands",fn:function(a){if("Bash"!==a.toolName)return Z();let b=ac(a).trimStart();return aB.test(b)||b.startsWith("sudo ")?(a.params?.allowPatterns??[]).some(a=>a9(b,a))?Z():$("sudo commands are blocked"):aC.test(b)?$("Elevated process launch is blocked"):aD.test(b)?$("runas elevation is blocked"):Z()},match:{events:["PreToolUse","PermissionRequest"],toolNames:["Bash"]},defaultEnabled:!0,category:"Dangerous Commands",params:{allowPatterns:{type:"string[]",description:"Sudo command patterns to allow, matched token-by-token (e.g. 'sudo systemctl status')",default:[]}}},{name:"block-curl-pipe-sh",description:"Block piping downloads to shell",fn:function(a){if("Bash"!==a.toolName)return Z();let b=ac(a);return aE.test(b)?$("Piping downloads to shell is blocked"):aF.test(b)?$("Piping downloads to Invoke-Expression is blocked"):Z()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!0,category:"Dangerous Commands"},{name:"block-rm-rf",description:"Prevent catastrophic deletions",fn:function(a){if("Bash"!==a.toolName)return Z();let b=ac(a),c=ae(b).some(a=>{let b=a.replace(/\/\*$/,"").replace(/\/+$/,"")||(a.startsWith("/")?"/":"");return"/"===b||"~"===b||/^\/[A-Za-z_][\w.-]*$/.test(b)});if(c&&(/rm\s+-[^\s]*r[^\s]*f[^\s]*/.test(b)||/rm\s+-[^\s]*f[^\s]*r[^\s]*/.test(b)))return bb(b,a.params?.allowPaths??[])?Z():$("Catastrophic deletion blocked");if(c&&/\brm\b/.test(b)){let c=ae(b),d=c.filter(a=>/^-[^-]/.test(a)).join(""),e=c.filter(a=>/^--/.test(a)),f=/r/i.test(d)||e.some(a=>/^--recursive$/i.test(a)),g=/f/.test(d)||e.some(a=>/^--force$/i.test(a));if(f&&g)return bb(b,a.params?.allowPaths??[])?Z():$("Catastrophic deletion blocked")}return/Remove-Item\s+.*-Recurse.*-Force.*(?:[A-Z]:\\(?:\s|$)|\\\*)/i.test(b)||/(?:rd|rmdir)\s+\/s\s+\/q\s+[A-Z]:\\/i.test(b)?$("Catastrophic deletion blocked"):Z()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Dangerous Commands",params:{allowPaths:{type:"string[]",description:"Paths that are allowed to be recursively deleted",default:[]}}},{name:"block-failproofai-commands",description:"Block failproofai CLI commands and uninstallation",fn:function(a){if("Bash"!==a.toolName)return Z();let b=ac(a);return aL.test(b)?$("Running failproofai CLI commands is blocked"):aM.test(b)?$("Uninstalling failproofai is blocked"):Z()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!0,category:"Dangerous Commands"},{name:"block-kubectl",description:"Block kubectl commands (Kubernetes cluster mutations)",fn:function(a){return bd(a,a0,"kubectl commands are blocked")},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"kubectl command patterns to allow, matched token-by-token (e.g. 'kubectl get *', 'kubectl describe *')",default:[]}}},{name:"block-terraform",description:"Block terraform and tofu (OpenTofu) commands",fn:function(a){return bd(a,a1,"terraform/tofu commands are blocked")},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"terraform/tofu command patterns to allow (e.g. 'terraform plan', 'terraform validate')",default:[]}}},{name:"block-aws-cli",description:"Block aws CLI commands",fn:function(a){return bd(a,a2,"aws CLI commands are blocked")},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"aws CLI command patterns to allow (e.g. 'aws s3 ls *', 'aws sts get-caller-identity')",default:[]}}},{name:"block-gcloud",description:"Block gcloud (Google Cloud) CLI commands",fn:function(a){return bd(a,a3,"gcloud commands are blocked")},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"gcloud command patterns to allow (e.g. 'gcloud auth list', 'gcloud config list')",default:[]}}},{name:"block-az-cli",description:"Block az (Azure) CLI commands",fn:function(a){return bd(a,a4,"az (Azure) CLI commands are blocked")},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"az CLI command patterns to allow (e.g. 'az account show', 'az group list')",default:[]}}},{name:"block-helm",description:"Block helm commands",fn:function(a){return bd(a,a5,"helm commands are blocked")},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"helm command patterns to allow (e.g. 'helm list', 'helm status *')",default:[]}}},{name:"block-gh-pipeline",description:"Block gh CLI pipeline-trigger subcommands (workflow run, run rerun/cancel, pr merge, release create/delete, cache delete, secret set/delete)",fn:function(a){return bd(a,a6,"gh pipeline-trigger commands are blocked")},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"gh pipeline command patterns to allow (e.g. specific scripted invocations); read-only gh subcommands like 'gh pr view' and 'gh run list' are not matched by this policy",default:[]}}},{name:"block-secrets-write",description:"Block writing secret key files",fn:function(a){if("Write"!==a.toolName)return Z();let b=ad(a);if(aH.test(b)||aI.test(b)||aJ.test(b))return $("Writing secret key files is blocked");for(let c of a.params?.additionalPatterns??[])if(b.includes(c))return $(`Writing blocked file pattern: ${c}`);return Z()},match:{events:["PreToolUse"],toolNames:["Write"]},defaultEnabled:!1,category:"Dangerous Commands",params:{additionalPatterns:{type:"string[]",description:"Additional filename patterns (substrings) to block",default:[]}}},{name:"block-push-master",description:"Block pushing to main/master",fn:function(a){if("Bash"!==a.toolName)return Z();let b=a.params?.protectedBranches??["main","master"];if(0===b.length)return Z();let c=ba(ac(a)),d=RegExp(`\\b(?:${b.map(a=>a.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")).join("|")})\\b`);return c.some(a=>d.test(a))?$(`Pushing to ${b.join("/")} is blocked`):Z()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!0,category:"Git",params:{protectedBranches:{type:"string[]",description:"Branch names to protect from direct pushes",default:["main","master"]}}},{name:"block-force-push",description:"Prevent force-pushing to any branch",fn:function(a){return"Bash"!==a.toolName?Z():ba(ac(a)).some(a=>aG.test(a))?$("Force-pushing is blocked"):Z()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Git"},{name:"block-work-on-main",description:"Block git commits and merges on main/master branch",fn:function(a){if("Bash"!==a.toolName)return Z();let b=ac(a);if(!aK.test(b))return Z();let c=a.session?.cwd;if(!c)return Z();let d=a8(c);return d&&(a.params?.protectedBranches??["main","master"]).includes(d)?$(`Git ${b.match(/git\s+(\S+)/)?.[1]??"operation"} on ${d} is blocked. Create a feature branch first.`):Z()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Git",params:{protectedBranches:{type:"string[]",description:"Branch names where commits/merges are blocked",default:["main","master"]}}},{name:"warn-git-amend",description:"Warns before amending git commits, which rewrites history",fn:function(a){if("Bash"!==a.toolName)return Z();let b=ac(a);return aN.test(b)?_("STOP: This command amends the last commit, which rewrites git history. If this commit has already been pushed to a shared branch, this will cause divergence for other contributors. Confirm with the user before executing."):Z()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Git"},{name:"warn-git-stash-drop",description:"Warns before permanently deleting stashed changes",fn:function(a){if("Bash"!==a.toolName)return Z();let b=ac(a);return aO.test(b)?_("STOP: This command permanently deletes stashed changes (git stash drop/clear). Stash entries cannot be recovered after deletion. Confirm with the user before executing."):Z()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Git"},{name:"warn-all-files-staged",description:"Warns before staging all working tree files with git add -A / . / --all",fn:function(a){if("Bash"!==a.toolName)return Z();let b=ac(a);return aP.test(b)?_("STOP: This command stages all files in the working tree (git add -A / --all / .). This may inadvertently include build artifacts, generated files, or sensitive files not covered by .gitignore. Confirm with the user before executing."):Z()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Git"},{name:"warn-destructive-sql",description:"Warn before executing destructive SQL (DROP/TRUNCATE/DELETE without WHERE) via database clients",fn:function(a){if("Bash"!==a.toolName)return Z();let b=ac(a);return am.test(b)&&(an.test(b)||ao.test(b)&&!ap.test(b))?_("STOP: This command contains destructive SQL (DROP/TRUNCATE/DELETE). Confirm with the user before executing."):Z()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Database"},{name:"warn-schema-alteration",description:"Warns before SQL schema changes (ALTER TABLE with column or rename operations)",fn:function(a){if("Bash"!==a.toolName)return Z();let b=ac(a);return am.test(b)&&aq.test(b)?_("STOP: This command contains a schema-altering SQL statement (ALTER TABLE with column or rename operation). Schema changes on production databases are irreversible or disruptive. Confirm with the user before executing."):Z()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Database"},{name:"warn-package-publish",description:"Warn before publishing packages to public registries (npm, PyPI, crates.io, RubyGems, etc.)",fn:function(a){if("Bash"!==a.toolName)return Z();let b=ac(a);return ar.test(b)?_("STOP: This command publishes a package to a public registry. Confirm with the user that this is intentional."):Z()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Packages & System"},{name:"warn-global-package-install",description:"Warns before installing packages globally (npm -g, cargo install, etc.)",fn:function(a){if("Bash"!==a.toolName)return Z();let b=ac(a);return aQ.test(b)||aR.test(b)||aS.test(b)||aT.test(b)||aU.test(b)||aV.test(b)?_("STOP: This command installs a package globally, which modifies the system-wide environment outside the project. This can conflict with other projects or system tools. Confirm with the user before executing."):Z()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Packages & System"},{name:"prefer-package-manager",description:"Blocks non-preferred package managers and tells Claude to use an allowed one (e.g., uv instead of pip)",fn:function(a){if("Bash"!==a.toolName)return Z();let b=ac(a);if(!b)return Z();let c=a.params?.allowed??[];if(0===c.length)return Z();let d=new Set(c.map(a=>a.toLowerCase())),e=a.params?.blocked??[],f=c.join(", ");for(let a of b.split(be)){let b=a.trim();if(!b)continue;let c=!1;for(let a of d){let d=aW[a];if(d){for(let a of d)if(a.test(b)){c=!0;break}if(c)break}}if(!c){for(let[a,c]of Object.entries(aW))if(!d.has(a)){for(let d of c)if(d.test(b))return $(`"${a}" is not an allowed package manager. Allowed package managers for this project: ${f}. Rewrite this command using an allowed package manager.`)}for(let a of e){let c=a.toLowerCase();if(!d.has(c)&&RegExp(`\\b${c.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}\\b`).test(b))return $(`"${c}" is not an allowed package manager. Allowed package managers for this project: ${f}. Rewrite this command using an allowed package manager.`)}}}return Z()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Packages & System",params:{allowed:{type:"string[]",description:"Allowed package manager names (e.g. ['uv', 'bun']). Any detected manager not in this list is blocked.",default:[]},blocked:{type:"string[]",description:"Additional manager names to block beyond the built-in list (e.g. ['pdm', 'pipx']).",default:[]}}},{name:"warn-large-file-write",description:"Warn before writing files larger than 1MB (configurable via thresholdKb param)",fn:function(a){if("Write"!==a.toolName)return Z();let b=a.toolInput?.content;if("string"!=typeof b)return Z();let c=a.params?.thresholdKb??1024;return b.length>1024*c?_(`STOP: You are writing a file larger than ${c}KB (${Math.round(b.length/1024)}KB). This is unusually large. Confirm this is intentional before proceeding.`):Z()},match:{events:["PreToolUse"],toolNames:["Write"]},defaultEnabled:!1,category:"Packages & System",params:{thresholdKb:{type:"number",description:"File size threshold in KB above which a warning is issued",default:1024}}},{name:"warn-background-process",description:"Warns before starting detached or background processes",fn:function(a){if("Bash"!==a.toolName)return Z();let b=ac(a);return aX.test(b)||aY.test(b)||aZ.test(b)||a$.test(b)||a_.test(b)?_("STOP: This command starts a background or detached process (nohup, screen -d, tmux -d, or trailing &). Background processes persist after Claude's session and may be difficult to track or stop. Confirm with the user before executing."):Z()},match:{events:["PreToolUse"],toolNames:["Bash"]},defaultEnabled:!1,category:"Packages & System"},{name:"warn-repeated-tool-calls",description:"Warn when the same tool is called 3+ times with identical parameters",fn:async function a(a){let b=a.session?.transcriptPath;if(!b||!a.toolName||!a.toolInput)return Z();let c=`${b}.tool-calls.json`,d=JSON.stringify({tool:a.toolName,input:a.toolInput}),e={};try{let a=await (0,Y.readFile)(c,"utf8");e=JSON.parse(a)}catch{}let f=e[d]??0;if(f>=3)return _(`STOP: You have already called ${a.toolName} ${f} times with identical parameters. This is wasteful and unproductive. Do NOT repeat this call — use a different approach or ask the user for clarification.`);e[d]=f+1;try{let a=JSON.stringify(e);a.length<=65536&&await (0,Y.writeFile)(c,a,"utf8")}catch{}return Z()},match:{events:["PreToolUse"]},defaultEnabled:!1,category:"AI Behavior"},{name:"require-commit-before-stop",description:"Require all changes to be committed before Claude stops",fn:function(a){let b=a.session?.cwd;if(!b)return Z("No working directory available, skipping commit check.");try{if((0,y.execSync)("git status --porcelain",{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim().length>0)return $("You have uncommitted changes in the working directory. Commit all changes now.");return Z("All changes are committed.")}catch{return Z("Not a git repository, skipping commit check.")}},match:{events:["Stop"]},defaultEnabled:!1,category:"Workflow"},{name:"require-push-before-stop",description:"Require all commits to be pushed to remote before Claude stops",fn:function(a){let b=a.session?.cwd;if(!b)return Z("No working directory available, skipping push check.");try{if(!(0,y.execSync)("git remote",{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3}).trim())return Z("No git remote configured, skipping push check.");let c=a.params?.remote??"origin",d=a8(b);if(!d||"HEAD"===d)return Z("Detached HEAD, skipping push check.");let e=a.params?.baseBranch??"main";if(d===e)return Z(`On base branch "${e}", skipping push check.`);try{if(!(0,y.execFileSync)("git",["log",`${c}/${e}..HEAD`,"--oneline"],{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim())return Z(`No commits ahead of ${c}/${e}, skipping push check.`);if(!(0,y.execFileSync)("git",["diff","--stat",`${c}/${e}`,"HEAD"],{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim())return Z(`No file changes compared to ${c}/${e}, skipping push check.`)}catch{}let f=!1;try{(0,y.execFileSync)("git",["rev-parse","--verify",`${c}/${d}`],{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3}),f=!0}catch{}if(!f)return $(`Branch "${d}" has not been pushed to remote "${c}". Run now: git push -u ${c} ${d}`);let g=(0,y.execFileSync)("git",["log",`${c}/${d}..HEAD`,"--oneline"],{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim();if(g.length>0){let a=g.split("\n").length;return $(`You have ${a} unpushed commit${a>1?"s":""} on branch "${d}". Run now: git push`)}return Z(`All commits pushed to "${c}".`)}catch{return Z("Could not check push status, skipping.")}},match:{events:["Stop"]},defaultEnabled:!1,category:"Workflow",params:{remote:{type:"string",description:"Remote name to push to (default: origin)",default:"origin"},baseBranch:{type:"string",description:"Base branch to compare against (default: main)",default:"main"}}},{name:"require-pr-before-stop",description:"Require a pull request to exist for the current branch before Claude stops",fn:function(a){let b=a.session?.cwd;if(!b)return Z("No working directory available, skipping PR check.");try{let c;try{(0,y.execSync)("gh --version",{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3})}catch{return Z("GitHub CLI (gh) not installed, skipping PR check.")}let d=a8(b);if(!d||"HEAD"===d)return Z("Detached HEAD, skipping PR check.");let e=a.params?.baseBranch??"main";if(d===e)return Z(`On base branch "${e}", skipping PR check.`);try{if(!(0,y.execFileSync)("git",["log",`origin/${e}..HEAD`,"--oneline"],{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim())return Z(`No commits ahead of origin/${e}, skipping PR check.`);if(!(0,y.execFileSync)("git",["diff","--stat",`origin/${e}`,"HEAD"],{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim())return Z(`No file changes compared to origin/${e}, skipping PR check.`)}catch{}try{c=(0,y.execSync)("gh pr view --json number,url,state",{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:15e3}).trim()}catch{return $(`No pull request found for branch "${d}". Run now: gh pr create`)}let f=JSON.parse(c);if("OPEN"===f.state)return Z(`PR #${f.number} exists: ${f.url}`);if("MERGED"===f.state)return Z(`PR #${f.number} was merged: ${f.url}. Switch off this branch (e.g. 'git checkout ${e} && git pull') before stopping again.`);return $(`Pull request for branch "${d}" is ${f.state.toLowerCase()}. Run now: gh pr create`)}catch{return Z("Could not check PR status, skipping.")}},match:{events:["Stop"]},defaultEnabled:!1,category:"Workflow",params:{baseBranch:{type:"string",description:"Base branch to compare against (default: main)",default:"main"}}},{name:"require-no-conflicts-before-stop",description:"Require the current branch to merge cleanly with the base branch before Claude stops",fn:function(a){let b,c,d=a.session?.cwd;if(!d)return Z("No working directory available, skipping conflict check.");let e=a8(d);if(!e||"HEAD"===e)return Z("Detached HEAD, skipping conflict check.");let f=a.params?.baseBranch??"main";if(e===f)return Z(`On base branch "${f}", skipping conflict check.`);try{(0,y.execSync)("gh --version",{cwd:d,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3})}catch{return Z("gh CLI not installed, skipping conflict check.")}try{b=(0,y.execSync)("gh pr view --json mergeable,number,url,state",{cwd:d,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:15e3}).trim()}catch{return Z("No pull request found for branch, skipping conflict check.")}try{c=JSON.parse(b)}catch{return Z("Could not parse gh pr view output, skipping conflict check.")}if("OPEN"!==c.state)return Z(`PR #${c.number} is ${c.state.toLowerCase()}; skipping conflict check.`);try{(0,y.execFileSync)("git",["rev-parse","--verify",`origin/${f}`],{cwd:d,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3}),(0,y.execFileSync)("git",["log",`origin/${f}..HEAD`,"--oneline"],{cwd:d,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim()&&(0,y.execFileSync)("git",["merge-tree","--write-tree","--name-only",`origin/${f}`,"HEAD"],{cwd:d,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:1e4})}catch(a){if(1===a.status){let b=("string"==typeof a.stdout?a.stdout:a.stdout?.toString("utf8")??"").trim().split("\n"),c=[];for(let a=1;a<b.length;a++){let d=b[a];if(""===d)break;c.push(d)}let d=c.length?c.join(", "):"one or more files";return $(`Branch "${e}" has merge conflicts with ${f} in: ${d}. Rebase or merge origin/${f} now and resolve the conflicts.`)}}return"CONFLICTING"===c.mergeable?$(`PR #${c.number} has merge conflicts per GitHub (${c.url}). Rebase or merge origin/${f} now and resolve the conflicts.`):"UNKNOWN"===c.mergeable?$(`GitHub is still computing mergeability for PR #${c.number} (${c.url}). Wait ~10 seconds, then re-check with \`gh pr view --json mergeable\` before attempting to stop again.`):Z(`PR #${c.number} merges cleanly per GitHub.`)},match:{events:["Stop"]},defaultEnabled:!1,category:"Workflow",params:{baseBranch:{type:"string",description:"Base branch to check for conflicts against (default: main)",default:"main"}}},{name:"require-ci-green-before-stop",description:"Require CI checks to pass on the current HEAD commit before Claude stops (ignores stale runs on prior commits)",fn:function(a){let b=a.session?.cwd;if(!b)return Z("No working directory available, skipping CI check.");try{try{(0,y.execSync)("gh --version",{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3})}catch{return Z("GitHub CLI (gh) not installed, skipping CI check.")}let a=a8(b);if(!a||"HEAD"===a)return Z("Detached HEAD, skipping CI check.");let c=function(a){try{return(0,y.execSync)("git rev-parse HEAD",{cwd:a,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3}).trim()||null}catch{return null}}(b),d=[];try{let e=(0,y.execFileSync)("gh",["run","list","--branch",a,"--limit","20","--json","status,conclusion,name,headSha"],{cwd:b,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:15e3}).trim();if(e&&"[]"!==e){let a=JSON.parse(e),b=c?a.filter(a=>a.headSha===c):a,f=new Set;d=b.filter(a=>!f.has(a.name)&&(f.add(a.name),!0))}}catch{}let e=[],f=[];c&&(e=function(a,b){try{let c=(0,y.execFileSync)("gh",["api",`repos/{owner}/{repo}/commits/${b}/check-runs`,"--jq",'.check_runs | map(select(.app.slug != "github-actions")) | map({name: .name, status: .status, conclusion: (.conclusion // "")})'],{cwd:a,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:15e3}).trim();if(!c||"[]"===c)return[];return JSON.parse(c)}catch{return[]}}(b,c),f=function(a,b){try{let c=(0,y.execFileSync)("gh",["api",`repos/{owner}/{repo}/commits/${b}/statuses`,"--jq","map({name: .context, state: .state}) | unique_by(.name)"],{cwd:a,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:15e3}).trim();if(!c||"[]"===c)return[];return JSON.parse(c).map(a=>({name:a.name,status:"pending"===a.state?"in_progress":"completed",conclusion:"pending"===a.state?"":"success"===a.state?"success":"failure"}))}catch{return[]}}(b,c));let g=[...d,...e,...f];if(0===g.length)return Z(`No CI runs found for branch "${a}".`);let h=g.filter(a=>"completed"===a.status&&"success"!==a.conclusion&&"skipped"!==a.conclusion&&"cancelled"!==a.conclusion);if(h.length>0){let b=h.map(a=>`"${a.name}"`).join(", ");return $(`CI checks are failing on branch "${a}": ${b}. Fix the failing checks now.`)}let i=g.filter(a=>"in_progress"===a.status||"queued"===a.status||"waiting"===a.status);if(i.length>0){let b=i.map(a=>`"${a.name}"`).join(", ");return $(`CI checks are still running on branch "${a}": ${b}. Wait for all checks to complete, then verify they pass.`)}return Z(`All CI checks passed on branch "${a}".`)}catch{return Z("Could not check CI status, skipping.")}},match:{events:["Stop"]},defaultEnabled:!1,category:"Workflow"}];async function bg(a,b={}){let{includeBeta:c=!1}=b;if(!process.stdin.isTTY){let b=bf.filter(a=>c||!a.beta);return a?a.filter(a=>b.some(b=>b.name===a)):b.filter(a=>a.defaultEnabled).map(a=>a.name)}let d=a?new Set(a):null,e=bf.filter(a=>c||!a.beta).map(a=>({name:a.name,description:a.description,category:a.category,selected:d?d.has(a.name):a.defaultEnabled,beta:!!a.beta})),f=e.length,g=0,h="",i=0,j=!1;function k(){if(!h)return e;let a=h.toLowerCase();return e.filter(b=>b.name.toLowerCase().includes(a)||b.description.toLowerCase().includes(a))}function l(){let a=process.stdout.columns||120;j||(process.stdout.write("\x1b[?25l"),j=!0);let b=k(),d=b.length;d>0&&g>=d&&(g=d-1);let l=[];l.push("  Failproof AI — Policy Manager"),l.push("");let m=Math.max(20,a-6),n="  ┌"+"─".repeat(m+2)+"┐",o="  └"+"─".repeat(m+2)+"┘",p=h?` \x1b[2m(${d}/${f})\x1b[0m`:` \x1b[2m(${f} policies)\x1b[0m`,q=`\x1b[1mSearch:\x1b[0m ${h}\x1b[7m \x1b[0m${p}`;if(l.push(n),l.push(`  \u2502 ${q}`),l.push(o),l.push(""),0===d){l.push("  \x1b[2mNo policies match “"+h+"”\x1b[0m");for(let a=0;a<9;a++)l.push("")}else{let c=function(a){let b=[],c=new Map,d=new Map;for(let a of e)c.has(a.category)||(b.push(a.category),c.set(a.category,0),d.set(a.category,0)),d.set(a.category,d.get(a.category)+1),a.selected&&c.set(a.category,c.get(a.category)+1);let f=new Map;for(let b of a){let a=f.get(b.category)??[];a.push(b),f.set(b.category,a)}let g=[],h=0;for(let a of b){let b=f.get(a);if(b&&0!==b.length)for(let e of(g.push({kind:"header",category:a,enabledCount:c.get(a),totalCount:d.get(a)}),b))g.push({kind:"item",item:e,filteredIndex:h++})}return g}(b),d=0;for(let a=0;a<c.length;a++){let b=c[a];if("item"===b.kind&&b.filteredIndex===g){d=a;break}}let f=d-Math.floor(4);f=Math.min(f=Math.max(0,f),Math.max(0,c.length-8));let h=Math.min(c.length,f+8),i=c.slice(0,f).filter(a=>"item"===a.kind).length;i>0?l.push(`  \x1b[2m  \u2191 ${i} more above\x1b[0m`):l.push("");for(let b=f;b<h;b++){let d=c[b];if("header"===d.kind){let b=` ${d.category.toUpperCase()} (${d.enabledCount}/${d.totalCount}) `,c=Math.max(2,a-2-(3+b.length));l.push(`  \x1b[2m\u2500\u2500 ${b}${"─".repeat(c)}\x1b[0m`)}else{let a=d.item,b=d.filteredIndex===g,c=b?"\x1b[36m❯\x1b[0m":" ",e=a.selected?"\x1b[32m[✓]\x1b[0m":"[ ]",f=b?`\x1b[1;36m${a.name}\x1b[0m`:a.name,h=a.beta?" \x1b[35m[beta]\x1b[0m":"",i=" ".repeat(Math.max(1,28-a.name.length)),j=`\x1b[2m${a.description}\x1b[0m`;l.push(`  ${c} ${e} ${f}${h}${i}${j}`)}}for(let a=h-f;a<8;a++)l.push("");let j=c.slice(h).filter(a=>"item"===a.kind).length;j>0?l.push(`  \x1b[2m  \u2193 ${j} more below\x1b[0m`):l.push("")}l.push(""),l.push("  \x1b[2m"+"─".repeat(a-2)+"\x1b[0m"),l.push("  [↑↓] Move  [Space] Toggle  [Ctrl+A] All  [Ctrl+S] Save  [Esc] Clear  [^C] Quit"),l.push(""),l.push("  \x1b[2mTip: `policies` for a flat list · `policies --install <name…>` to skip prompt\x1b[0m"),c||l.push("  \x1b[2mTip: `policies --install --beta` to include beta policies\x1b[0m"),i>0&&process.stdout.write(`\x1b[${i}A\x1b[J`);let r=l.map(b=>""===b?b:function(a,b){let c=0,d="",e=0;for(;e<a.length;)if("\x1b"===a[e]&&"["===a[e+1]){let b=e+2;for(;b<a.length&&!/[A-Za-z]/.test(a[b]);)b++;b++,d+=a.slice(e,b),e=b}else{if(c>=b)break;d+=a[e],c++,e++}return d}(b,a)).join("\n")+"\n";process.stdout.write(r),i=l.length}return new Promise(a=>{function b(b,d){if(!d)return;d.ctrl&&"c"===d.name&&(c(),process.exit(0));let f=k();if("up"===d.name)f.length>0&&(g=g>0?g-1:f.length-1),l();else if("down"===d.name)f.length>0&&(g=g<f.length-1?g+1:0),l();else if("return"===d.name||"space"===d.name){let a=f[g];a&&(a.selected=!a.selected),l()}else if("escape"===d.name)h="",g=0,l();else if(d.ctrl&&"a"===d.name){let a=f.length>0&&f.every(a=>a.selected);for(let b of f)b.selected=!a;l()}else if(d.ctrl&&"s"===d.name){c();let b=e.filter(a=>a.selected).map(a=>a.name);process.stdout.write("\n"),a(b)}else"backspace"===d.name||"delete"===d.name?h.length>0&&(h=h.slice(0,-1),g=0,l()):!b||1!==b.length||d.ctrl||d.meta||(h+=b,g=0,l())}function c(){j&&(process.stdout.write("\x1b[?25h"),j=!1),process.stdin.removeListener("keypress",b),process.stdin.setRawMode(!1),process.stdin.pause()}l(),process.stdin.setRawMode(!0),process.stdin.resume(),X.emitKeypressEvents(process.stdin),process.stdin.on("keypress",b)})}let bh="__failproofai_custom_hooks__";var bi=a.i(24868),bj=a.i(14747),bk=a.i(92509);let bl=".__failproofai_tmp__.mjs",bm=/(?:import\s+(?:[\s\S]*?\s+from\s+)?|export\s+(?:[\s\S]*?\s+from\s+))(['"])(\.\.?\/[^'"]+)\1/g,bn=/require\s*\(\s*(['"])(\.\.?\/[^'"]+)\1\s*\)/g;async function bo(a){try{return await (0,bi.access)(a),!0}catch{return!1}}async function bp(){let a=process.env.FAILPROOFAI_DIST_PATH;if(a){let b=(0,bj.resolve)(a,"index.js");if(await bo(b))return b}for(let a of[(0,bj.resolve)((0,bj.dirname)(process.execPath),"..","assets","dist","index.js"),(0,bj.resolve)(process.cwd(),"dist","index.js"),(0,bj.resolve)(process.cwd(),"node_modules","failproofai","dist","index.js")])if(await bo(a))return a;return null}async function bq(a,b){let c=(0,bj.resolve)(a,b);for(let a of[c,`${c}.js`,`${c}.mjs`,`${c}.ts`,(0,bj.resolve)(c,"index.js")])if(await bo(a))return a;return null}async function br(a,b){let c=a+".__failproofai_esm_shim__.mjs",d=`import _cjs from '${b}';
 export const customPolicies = _cjs.customPolicies;
 export const getCustomHooks = _cjs.getCustomHooks;
 export const clearCustomHooks = _cjs.clearCustomHooks;
 export const allow = _cjs.allow;
 export const deny = _cjs.deny;
 export const instruct = _cjs.instruct;
-export default _cjs;`;return await (0,a9.writeFile)(c,d,"utf-8"),{shimPath:c,shimUrl:(0,bb.pathToFileURL)(c).href}}async function bj(a,b,c){let d=[a],e=new Set,f=[],g=null;if(c&&b){let a=await bi(c,b);f.push(a.shimPath),g=a.shimUrl}for(;d.length>0;){let a=d.shift();if(e.has(a))continue;e.add(a);let b=await (0,a9.readFile)(a,"utf-8");g&&(b=b.replace(/from\s+(['"])(?:claudeye|failproofai)\1/g,`from '${g}'`)),c&&(b=b.replace(/require\s*\(\s*(['"])(?:claudeye|failproofai)\1\s*\)/g,`require('${c.replace(/\\/g,"\\\\")}')`));let h=(0,ba.dirname)(a),i=new Map;for(let a of[bd,be]){let c,f=new RegExp(a.source,a.flags);for(;null!==(c=f.exec(b));){let a=c[2];if(i.has(a))continue;let b=await bh(h,a);if(!b)continue;e.has(b)||d.includes(b)||d.push(b);let f=(0,ba.relative)(h,b+bc).split("\\").join("/");f.startsWith(".")||(f="./"+f),i.set(a,f)}}for(let a of[...i.keys()].sort((a,b)=>b.length-a.length)){let c=i.get(a),d=a.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");b=(b=b.replace(RegExp(`'${d}'`,"g"),`'${c}'`)).replace(RegExp(`"${d}"`,"g"),`"${c}"`)}let j=a+bc;await (0,a9.writeFile)(j,b,"utf-8"),f.push(j)}return f}async function bk(a){for(let b of a)try{await (0,a9.unlink)(b)}catch{}}let bl="__FAILPROOFAI_LOADING_HOOKS__";async function bm(a,b){let c=globalThis;c[bl]=!0;let d=[];try{let b=await bg(),c=b?(0,a7.pathToFileURL)(b).href:null;d=await bj(a,c,b);let e=(0,a7.pathToFileURL)(a+bc).href;await import(e)}catch(d){var e;let c=d instanceof Error?d.message:String(d);if(b?.strict)throw Error(`Failed to load custom hooks from ${a}: ${c}`);e=`failed to load custom hooks from ${a}: ${c}`,n("error")&&(o("ERROR",e),p("ERROR",e))}finally{c[bl]=!1,await bk(d)}}async function bn(a,b){let c;if(!a)return[];let d=(0,f.isAbsolute)(a)?a:(0,f.resolve)(b?.sessionCwd??process.cwd(),a);if(!(0,e.existsSync)(d)){if(b?.strict)throw Error(`Custom hooks file not found: ${d}`);return q(`customPoliciesPath not found: ${d}`),[]}return globalThis[a8]=[],await bm(d,b),Array.isArray((c=globalThis)[a8])||(c[a8]=[]),c[a8]}var bo=a.i(12072);let bp=a.i(79779).POSTHOG_API_KEY;async function bq(a,b,c){if("1"===process.env.FAILPROOFAI_TELEMETRY_DISABLED)return;let d=JSON.stringify({api_key:process.env.FAILPROOFAI_POSTHOG_KEY??bp,event:b,distinct_id:a,properties:{...c,$lib:"failproofai-hooks",failproofai_version:bo.version}});try{await fetch(process.env.FAILPROOFAI_POSTHOG_HOST?`${process.env.FAILPROOFAI_POSTHOG_HOST}/capture/`:"https://us.i.posthog.com/capture/",{method:"POST",headers:{"Content-Type":"application/json"},body:d,signal:AbortSignal.timeout(5e3)})}catch{}}var br=a.i(69839);class bs extends Error{exitCode;constructor(a,b=1){super(a),this.name="CliError",this.exitCode=b}}let bt=new Set(a5.map(a=>a.name));function bu(a,b){return J.getSettingsPath(a,b)}function bv(a){let b=a.filter(a=>!bt.has(a));if(b.length>0){let a=[...bt].join(", ");throw new bs(`Unknown policy name(s): ${b.join(", ")}
-Valid policies: ${a}`)}}function bw(a,b){return J.hooksInstalledInSettings(a,b)}async function bx(a,b="user",c,d=!1,e,h,i=!1,j){let k,l;if(void 0!==a&&a.length>0){let b=a.filter(a=>"all"!==a);if(b.length>0&&bv(b),a.includes("all")&&b.length>0)throw new bs(`"all" cannot be combined with specific policy names.
-Use either: --install all  or  --install block-sudo sanitize-jwt ...`)}let m=j&&j.length>0?[...new Set(j)]:["claude"];for(let a of m){let c=L(a);if(!c.scopes.includes(b))throw new bs(`Scope "${b}" is not supported by ${c.displayName}. Valid scopes: ${c.scopes.join(", ")}`)}let n=function(){let a=process.env.FAILPROOFAI_BINARY_OVERRIDE;if(a&&a.trim())return a.trim();try{return(0,y.execSync)("which failproofai",{encoding:"utf8"}).trim().split("\n")[0].trim()}catch{throw new bs("failproofai binary not found in PATH.\nInstall it globally first: npm install -g failproofai")}}(),o=w(b,c),p=new Set(o.enabledPolicies);if(void 0!==a){let b;b=1===a.length&&"all"===a[0]?a5.filter(a=>d||!a.beta).map(a=>a.name):a,k=[...new Set([...o.enabledPolicies,...b])]}else{let a=o.enabledPolicies.length>0?o.enabledPolicies:void 0;k=await a6(a,{includeBeta:d})}let q={...o,enabledPolicies:k};if(i)delete q.customPoliciesPath;else if(h){q.customPoliciesPath=(0,f.resolve)(h);let a=[];try{a=await bn(q.customPoliciesPath,{strict:!0})}catch(a){console.error(`Error: ${a instanceof Error?a.message:String(a)}`),process.exit(1)}0===a.length&&(console.error(`Error: no hooks registered in ${h}. Make sure your file calls customPolicies.add(...) at least once.`),process.exit(1)),console.log(`
+export default _cjs;`;return await (0,bi.writeFile)(c,d,"utf-8"),{shimPath:c,shimUrl:(0,bk.pathToFileURL)(c).href}}async function bs(a,b,c){let d=[a],e=new Set,f=[],g=null;if(c&&b){let a=await br(c,b);f.push(a.shimPath),g=a.shimUrl}for(;d.length>0;){let a=d.shift();if(e.has(a))continue;e.add(a);let b=await (0,bi.readFile)(a,"utf-8");g&&(b=b.replace(/from\s+(['"])(?:claudeye|failproofai)\1/g,`from '${g}'`)),c&&(b=b.replace(/require\s*\(\s*(['"])(?:claudeye|failproofai)\1\s*\)/g,`require('${c.replace(/\\/g,"\\\\")}')`));let h=(0,bj.dirname)(a),i=new Map;for(let a of[bm,bn]){let c,f=new RegExp(a.source,a.flags);for(;null!==(c=f.exec(b));){let a=c[2];if(i.has(a))continue;let b=await bq(h,a);if(!b)continue;e.has(b)||d.includes(b)||d.push(b);let f=(0,bj.relative)(h,b+bl).split("\\").join("/");f.startsWith(".")||(f="./"+f),i.set(a,f)}}for(let a of[...i.keys()].sort((a,b)=>b.length-a.length)){let c=i.get(a),d=a.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");b=(b=b.replace(RegExp(`'${d}'`,"g"),`'${c}'`)).replace(RegExp(`"${d}"`,"g"),`"${c}"`)}let j=a+bl;await (0,bi.writeFile)(j,b,"utf-8"),f.push(j)}return f}async function bt(a){for(let b of a)try{await (0,bi.unlink)(b)}catch{}}let bu="__FAILPROOFAI_LOADING_HOOKS__";async function bv(a,b){let c=globalThis;c[bu]=!0;let d=[];try{let b=await bp(),c=b?(0,I.pathToFileURL)(b).href:null;d=await bs(a,c,b);let e=(0,I.pathToFileURL)(a+bl).href;await import(e)}catch(d){var e;let c=d instanceof Error?d.message:String(d);if(b?.strict)throw Error(`Failed to load custom hooks from ${a}: ${c}`);e=`failed to load custom hooks from ${a}: ${c}`,n("error")&&(o("ERROR",e),p("ERROR",e))}finally{c[bu]=!1,await bt(d)}}async function bw(a,b){let c;if(!a)return[];let d=(0,f.isAbsolute)(a)?a:(0,f.resolve)(b?.sessionCwd??process.cwd(),a);if(!(0,e.existsSync)(d)){if(b?.strict)throw Error(`Custom hooks file not found: ${d}`);return q(`customPoliciesPath not found: ${d}`),[]}return globalThis[bh]=[],await bv(d,b),Array.isArray((c=globalThis)[bh])||(c[bh]=[]),c[bh]}var bx=a.i(12072);let by=a.i(79779).POSTHOG_API_KEY;async function bz(a,b,c){if("1"===process.env.FAILPROOFAI_TELEMETRY_DISABLED)return;let d=JSON.stringify({api_key:process.env.FAILPROOFAI_POSTHOG_KEY??by,event:b,distinct_id:a,properties:{...c,$lib:"failproofai-hooks",failproofai_version:bx.version}});try{await fetch(process.env.FAILPROOFAI_POSTHOG_HOST?`${process.env.FAILPROOFAI_POSTHOG_HOST}/capture/`:"https://us.i.posthog.com/capture/",{method:"POST",headers:{"Content-Type":"application/json"},body:d,signal:AbortSignal.timeout(5e3)})}catch{}}var bA=a.i(69839);class bB extends Error{exitCode;constructor(a,b=1){super(a),this.name="CliError",this.exitCode=b}}let bC=new Set(bf.map(a=>a.name));function bD(a,b){return O.getSettingsPath(a,b)}function bE(a){let b=a.filter(a=>!bC.has(a));if(b.length>0){let a=[...bC].join(", ");throw new bB(`Unknown policy name(s): ${b.join(", ")}
+Valid policies: ${a}`)}}function bF(a,b){return O.hooksInstalledInSettings(a,b)}async function bG(a,b="user",c,d=!1,e,h,i=!1,j){let k,l;if(void 0!==a&&a.length>0){let b=a.filter(a=>"all"!==a);if(b.length>0&&bE(b),a.includes("all")&&b.length>0)throw new bB(`"all" cannot be combined with specific policy names.
+Use either: --install all  or  --install block-sudo sanitize-jwt ...`)}let m=j&&j.length>0?[...new Set(j)]:["claude"];for(let a of m){let c=V(a);if(!c.scopes.includes(b))throw new bB(`Scope "${b}" is not supported by ${c.displayName}. Valid scopes: ${c.scopes.join(", ")}`)}let n=function(){let a=process.env.FAILPROOFAI_BINARY_OVERRIDE;if(a&&a.trim())return a.trim();try{return(0,y.execSync)("which failproofai",{encoding:"utf8"}).trim().split("\n")[0].trim()}catch{throw new bB("failproofai binary not found in PATH.\nInstall it globally first: npm install -g failproofai")}}(),o=w(b,c),p=new Set(o.enabledPolicies);if(void 0!==a){let b;b=1===a.length&&"all"===a[0]?bf.filter(a=>d||!a.beta).map(a=>a.name):a,k=[...new Set([...o.enabledPolicies,...b])]}else{let a=o.enabledPolicies.length>0?o.enabledPolicies:void 0;k=await bg(a,{includeBeta:d})}let q={...o,enabledPolicies:k};if(i)delete q.customPoliciesPath;else if(h){q.customPoliciesPath=(0,f.resolve)(h);let a=[];try{a=await bw(q.customPoliciesPath,{strict:!0})}catch(a){console.error(`Error: ${a instanceof Error?a.message:String(a)}`),process.exit(1)}0===a.length&&(console.error(`Error: no hooks registered in ${h}. Make sure your file calls customPolicies.add(...) at least once.`),process.exit(1)),console.log(`
 Validated ${a.length} custom hook(s): ${a.map(a=>a.name).join(", ")}`)}x(q,b,c),console.log(`
 Enabled ${k.length} policy(ies): ${k.join(", ")}
-`),i?console.log("Custom hooks path cleared."):q.customPoliciesPath&&console.log(`Custom hooks path: ${q.customPoliciesPath}`);let r=[];for(let a of m){let d=L(a),e=d.getSettingsPath(b,c),f=d.readSettings(e);d.writeHookEntries(f,n,b),d.writeSettings(e,f),r.push({cli:a,path:e})}try{let a=new Set(k),c=k.filter(a=>!p.has(a)),d=[...p].filter(b=>!a.has(b)),f=(0,br.getInstanceId)();await bq(f,"hooks_installed",{scope:b,cli:m,cli_count:m.length,policies:k,policy_count:k.length,policies_added:c,policies_removed:d,...e?{source:e}:{},platform:(0,g.platform)(),arch:(0,g.arch)(),os_release:(0,g.release)(),hostname_hash:(0,br.hashToId)((0,g.hostname)()),has_custom_hooks_path:!!q.customPoliciesPath,has_policy_params:!!(q.policyParams&&Object.keys(q.policyParams).length>0),param_policy_names:q.policyParams?Object.keys(q.policyParams):[],command_format:"project"===b?"npx":"absolute"})}catch{}for(let{cli:a,path:c}of r){let d=L(a);console.log(`Failproof AI hooks installed for ${d.displayName} (${d.eventTypes.length} event types, scope: ${b}).`),console.log(`Settings: ${c}`)}"project"===b?(console.log("Command:  npx -y failproofai"),console.log(`
-This file can be committed to git — no machine-specific paths.`)):console.log(`Binary:   ${n}`);let s=(l=new Set,z.filter(a=>{let b=bu(a,c);return!l.has(b)&&(l.add(b),!0)})).filter(a=>a!==b).filter(a=>bw(a,c));if(s.length>0){let a=s.map(a=>`${a} (${function(a){switch(a){case"user":return"~/.claude/settings.json";case"project":return"{cwd}/.claude/settings.json";case"local":return"{cwd}/.claude/settings.local.json"}}(a)})`).join(", ");console.log(),console.log(`\x1b[33mWarning: Failproof AI hooks are also installed at ${a}.\x1b[0m`),console.log("Having hooks in multiple scopes may cause duplicate policy evaluation."),console.log(`Use \`failproofai policies --uninstall --scope ${s[0]}\` to remove the other installation,`),console.log("or `failproofai policies` to see all scopes.")}}async function by(a,b="user",c,d){let f="all"===b?"user":b,h=d?.cli&&d.cli.length>0?[...new Set(d.cli)]:["claude"];if(d?.removeCustomHooks){let a=w(f,c);delete a.customPoliciesPath,x(a,f,c),console.log("Custom hooks path cleared.")}if(a&&a.length>0&&(1!==a.length||"all"!==a[0])){bv(a);let e=w(f,c),i=new Set(a),j=e.enabledPolicies.filter(a=>!i.has(a)),k=a.filter(a=>!e.enabledPolicies.includes(a));k.length>0&&console.log(`Warning: policy(ies) not currently enabled: ${k.join(", ")}`);let{policyParams:l,...m}=e,n=l?Object.fromEntries(Object.entries(l).filter(([a])=>!i.has(a))):null;x({...m,enabledPolicies:j,...n&&Object.keys(n).length>0?{policyParams:n}:{}},f,c);try{let c=(0,br.getInstanceId)(),f=a.filter(a=>e.enabledPolicies.includes(a));await bq(c,"hooks_removed",{scope:b,cli:h,removal_mode:d?.betaOnly?"beta_policies":"policies",beta_only:d?.betaOnly??!1,policies_removed:f,removed_count:f.length,...d?.source?{source:d.source}:{},platform:(0,g.platform)(),arch:(0,g.arch)(),os_release:(0,g.release)(),hostname_hash:(0,br.hashToId)((0,g.hostname)())})}catch{}console.log(`Disabled ${a.length-k.length} policy(ies).`),console.log(`Remaining: ${j.length>0?j.join(", "):"(none)"}`);return}let i=w(f,c),j=0,k=!1;for(let a of h){let d=L(a);for(let a of"all"===b?[...d.scopes]:d.scopes.includes(b)?[b]:[]){let f=d.getSettingsPath(a,c);if(!(0,e.existsSync)(f)){"all"!==b&&1===h.length&&(console.log("No settings file found. Nothing to remove."),k=!0);continue}let g=d.removeHooksFromFile(f);if(0===g&&"all"!==b&&1===h.length){console.log("No hooks found in settings. Nothing to remove."),k=!0;continue}j+=g,"all"!==b&&(console.log(`Removed ${g} failproofai hook(s) from ${d.displayName} settings.`),console.log(`Settings: ${f}`))}}if(!k||0!==j){if("all"===b)for(let a of(console.log(`Removed ${j} failproofai hook(s) from all scopes.`),h)){let b=L(a);for(let a of b.scopes)console.log(`  ${b.displayName} / ${a}: ${b.getSettingsPath(a,c)}`)}try{let a=(0,br.getInstanceId)();await bq(a,"hooks_removed",{scope:b,cli:h,removal_mode:"hooks",policies_removed:i.enabledPolicies,removed_count:j,...d?.source?{source:d.source}:{},platform:(0,g.platform)(),arch:(0,g.arch)(),os_release:(0,g.release)(),hostname_hash:(0,br.hashToId)((0,g.hostname)())})}catch{}if("all"===b)for(let a of z){let b=w(a,c);if(b.enabledPolicies.length>0||b.customPoliciesPath||b.policyParams){let{customPoliciesPath:d,policyParams:e,...f}=b;x({...f,enabledPolicies:[]},a,c)}}else if(!z.some(a=>bw(a,c))){let{customPoliciesPath:a,policyParams:b,...d}=w(f,c);x({...d,enabledPolicies:[]},f,c)}}}var bz=a.i(13095);async function bA(a){if(!(0,e.existsSync)(a))return[];let b=await (0,O.readFile)(a,"utf-8"),c=[],d=b.split(/customPolicies\.add\s*\(/);for(let a=1;a<d.length;a++){let b=d[a],e=b.match(/name:\s*["'`]([^"'`]+)["'`]/);if(!e)continue;let f=b.match(/description:\s*["'`]([^"'`]+)["'`]/),g=b.match(/events:\s*\[([^\]]+)\]/),h=g?g[1].replace(/["'`\s]/g,"").split(",").filter(Boolean).join(", "):void 0;c.push({name:e[1],description:f?.[1],eventScope:h})}return c}async function bB(){let a=t(),b=new Set(a.enabledPolicies),c=z.filter(a=>bw(a)),d=bu(c[0]??"user"),e=a5.map(c=>{var d;let e,f;return{name:c.name,description:c.description,category:c.category,defaultEnabled:c.defaultEnabled,beta:!!c.beta,enabled:b.has(c.name),eventScope:(d=c.match,e=d.events?.join(", ")??"",f=d.toolNames?` \xb7 ${d.toolNames.join(", ")}`:"",`${e}${f}`),params:c.params?Object.fromEntries(Object.entries(c.params).map(([a,b])=>[a,{type:b.type,description:b.description,default:b.default}])):void 0,currentParams:c.params?a.policyParams?.[c.name]??{}:void 0}}),f=a.customPoliciesPath?await bA(a.customPoliciesPath):void 0;return{enabledPolicies:a.enabledPolicies,installedScopes:c,settingsPath:d,policies:e,customPoliciesPath:a.customPoliciesPath,customPolicies:f?.length?f:void 0}}async function bC(a,b){let c=t(),d=new Set(c.enabledPolicies);b?d.add(a):d.delete(a),u({...c,enabledPolicies:[...d]});try{let c=(0,br.getInstanceId)();await bq(c,"policy_toggled",{policy_name:a,enabled:b,action:b?"enable":"disable",source:"web"})}catch{}}async function bD(a="user",b){let c=t(),d=c.enabledPolicies.length>0?c.enabledPolicies:a5.filter(a=>a.defaultEnabled&&!a.beta).map(a=>a.name),e=b&&b.length>0?b:M(),f=e.length>0?e:["claude"];await bx(d,a,void 0,!1,"web",void 0,!1,f)}async function bE(a="user",b){let c=b&&b.length>0?b:M(),d=c.length>0?c:["claude"];await by(void 0,a,void 0,{source:"web",cli:d})}async function bF(a,b){let c=t(),d={...c.policyParams??{},[a]:b};u({...c,policyParams:d});try{let c=(0,br.getInstanceId)();await bq(c,"policy_params_updated",{policy_name:a,param_keys:Object.keys(b),source:"web"})}catch{}}(0,bz.ensureServerEntryExports)([bB]),(0,d.registerServerReference)(bB,"005f7d27289f33091a3fdc52bd971ebe7f9427ba7c",null),(0,bz.ensureServerEntryExports)([bC]),(0,d.registerServerReference)(bC,"60a6e9e79eb81a0bdfe9bbd23a606e78f92af70bd4",null),(0,bz.ensureServerEntryExports)([bD,bE]),(0,d.registerServerReference)(bD,"60836e171c104a7a89106a8e529d12f52bbf7d843c",null),(0,d.registerServerReference)(bE,"6046cbf74c3190253e1615cc0f0225e6b9935b3d09",null),(0,bz.ensureServerEntryExports)([bF]),(0,d.registerServerReference)(bF,"6070a705a7c81c983fa4c6dc9917d60843ddeaa557",null),a.s([],63895),a.i(63895),a.s(["004e0dedcd030bf7aa10787743163b3cb3b61759ca",()=>b.getTelemetryConfig,"005f7d27289f33091a3fdc52bd971ebe7f9427ba7c",0,bB,"407ff439878868ce72f184be57a03505a52de25f29",()=>c.getHookActivityAction,"6046cbf74c3190253e1615cc0f0225e6b9935b3d09",0,bE,"606346c40eef9b4d235c6055456a99a6d810ce9435",()=>c.searchHookActivityAction,"6070a705a7c81c983fa4c6dc9917d60843ddeaa557",0,bF,"60836e171c104a7a89106a8e529d12f52bbf7d843c",0,bD,"60a6e9e79eb81a0bdfe9bbd23a606e78f92af70bd4",0,bC],11369)}];
+`),i?console.log("Custom hooks path cleared."):q.customPoliciesPath&&console.log(`Custom hooks path: ${q.customPoliciesPath}`);let r=[];for(let a of m){let d=V(a),e=d.getSettingsPath(b,c),f=d.readSettings(e);d.writeHookEntries(f,n,b),d.writeSettings(e,f),r.push({cli:a,path:e})}try{let a=new Set(k),c=k.filter(a=>!p.has(a)),d=[...p].filter(b=>!a.has(b)),f=(0,bA.getInstanceId)();await bz(f,"hooks_installed",{scope:b,cli:m,cli_count:m.length,policies:k,policy_count:k.length,policies_added:c,policies_removed:d,...e?{source:e}:{},platform:(0,g.platform)(),arch:(0,g.arch)(),os_release:(0,g.release)(),hostname_hash:(0,bA.hashToId)((0,g.hostname)()),has_custom_hooks_path:!!q.customPoliciesPath,has_policy_params:!!(q.policyParams&&Object.keys(q.policyParams).length>0),param_policy_names:q.policyParams?Object.keys(q.policyParams):[],command_format:"project"===b?"npx":"absolute"})}catch{}for(let{cli:a,path:c}of r){let d=V(a);console.log(`Failproof AI hooks installed for ${d.displayName} (${d.eventTypes.length} event types, scope: ${b}).`),console.log(`Settings: ${c}`)}"project"===b?(console.log("Command:  npx -y failproofai"),console.log(`
+This file can be committed to git — no machine-specific paths.`)):console.log(`Binary:   ${n}`);let s=(l=new Set,z.filter(a=>{let b=bD(a,c);return!l.has(b)&&(l.add(b),!0)})).filter(a=>a!==b).filter(a=>bF(a,c));if(s.length>0){let a=s.map(a=>`${a} (${function(a){switch(a){case"user":return"~/.claude/settings.json";case"project":return"{cwd}/.claude/settings.json";case"local":return"{cwd}/.claude/settings.local.json"}}(a)})`).join(", ");console.log(),console.log(`\x1b[33mWarning: Failproof AI hooks are also installed at ${a}.\x1b[0m`),console.log("Having hooks in multiple scopes may cause duplicate policy evaluation."),console.log(`Use \`failproofai policies --uninstall --scope ${s[0]}\` to remove the other installation,`),console.log("or `failproofai policies` to see all scopes.")}}async function bH(a,b="user",c,d){let f="all"===b?"user":b,h=d?.cli&&d.cli.length>0?[...new Set(d.cli)]:["claude"];if(d?.removeCustomHooks){let a=w(f,c);delete a.customPoliciesPath,x(a,f,c),console.log("Custom hooks path cleared.")}if(a&&a.length>0&&(1!==a.length||"all"!==a[0])){bE(a);let e=w(f,c),i=new Set(a),j=e.enabledPolicies.filter(a=>!i.has(a)),k=a.filter(a=>!e.enabledPolicies.includes(a));k.length>0&&console.log(`Warning: policy(ies) not currently enabled: ${k.join(", ")}`);let{policyParams:l,...m}=e,n=l?Object.fromEntries(Object.entries(l).filter(([a])=>!i.has(a))):null;x({...m,enabledPolicies:j,...n&&Object.keys(n).length>0?{policyParams:n}:{}},f,c);try{let c=(0,bA.getInstanceId)(),f=a.filter(a=>e.enabledPolicies.includes(a));await bz(c,"hooks_removed",{scope:b,cli:h,removal_mode:d?.betaOnly?"beta_policies":"policies",beta_only:d?.betaOnly??!1,policies_removed:f,removed_count:f.length,...d?.source?{source:d.source}:{},platform:(0,g.platform)(),arch:(0,g.arch)(),os_release:(0,g.release)(),hostname_hash:(0,bA.hashToId)((0,g.hostname)())})}catch{}console.log(`Disabled ${a.length-k.length} policy(ies).`),console.log(`Remaining: ${j.length>0?j.join(", "):"(none)"}`);return}let i=w(f,c),j=0,k=!1;for(let a of h){let d=V(a);for(let a of"all"===b?[...d.scopes]:d.scopes.includes(b)?[b]:[]){let f=d.getSettingsPath(a,c);if(!(0,e.existsSync)(f)){"all"!==b&&1===h.length&&(console.log("No settings file found. Nothing to remove."),k=!0);continue}let g=d.removeHooksFromFile(f);if(0===g&&"all"!==b&&1===h.length){console.log("No hooks found in settings. Nothing to remove."),k=!0;continue}j+=g,"all"!==b&&(console.log(`Removed ${g} failproofai hook(s) from ${d.displayName} settings.`),console.log(`Settings: ${f}`))}}if(!k||0!==j){if("all"===b)for(let a of(console.log(`Removed ${j} failproofai hook(s) from all scopes.`),h)){let b=V(a);for(let a of b.scopes)console.log(`  ${b.displayName} / ${a}: ${b.getSettingsPath(a,c)}`)}try{let a=(0,bA.getInstanceId)();await bz(a,"hooks_removed",{scope:b,cli:h,removal_mode:"hooks",policies_removed:i.enabledPolicies,removed_count:j,...d?.source?{source:d.source}:{},platform:(0,g.platform)(),arch:(0,g.arch)(),os_release:(0,g.release)(),hostname_hash:(0,bA.hashToId)((0,g.hostname)())})}catch{}if("all"===b)for(let a of z){let b=w(a,c);if(b.enabledPolicies.length>0||b.customPoliciesPath||b.policyParams){let{customPoliciesPath:d,policyParams:e,...f}=b;x({...f,enabledPolicies:[]},a,c)}}else if(!z.some(a=>bF(a,c))){let{customPoliciesPath:a,policyParams:b,...d}=w(f,c);x({...d,enabledPolicies:[]},f,c)}}}var bI=a.i(13095);async function bJ(a){if(!(0,e.existsSync)(a))return[];let b=await (0,Y.readFile)(a,"utf-8"),c=[],d=b.split(/customPolicies\.add\s*\(/);for(let a=1;a<d.length;a++){let b=d[a],e=b.match(/name:\s*["'`]([^"'`]+)["'`]/);if(!e)continue;let f=b.match(/description:\s*["'`]([^"'`]+)["'`]/),g=b.match(/events:\s*\[([^\]]+)\]/),h=g?g[1].replace(/["'`\s]/g,"").split(",").filter(Boolean).join(", "):void 0;c.push({name:e[1],description:f?.[1],eventScope:h})}return c}async function bK(){let a=t(),b=new Set(a.enabledPolicies),c=z.filter(a=>bF(a)),d=bD(c[0]??"user"),e=bf.map(c=>{var d;let e,f;return{name:c.name,description:c.description,category:c.category,defaultEnabled:c.defaultEnabled,beta:!!c.beta,enabled:b.has(c.name),eventScope:(d=c.match,e=d.events?.join(", ")??"",f=d.toolNames?` \xb7 ${d.toolNames.join(", ")}`:"",`${e}${f}`),params:c.params?Object.fromEntries(Object.entries(c.params).map(([a,b])=>[a,{type:b.type,description:b.description,default:b.default}])):void 0,currentParams:c.params?a.policyParams?.[c.name]??{}:void 0}}),f=a.customPoliciesPath?await bJ(a.customPoliciesPath):void 0;return{enabledPolicies:a.enabledPolicies,installedScopes:c,settingsPath:d,policies:e,customPoliciesPath:a.customPoliciesPath,customPolicies:f?.length?f:void 0}}async function bL(a,b){let c=t(),d=new Set(c.enabledPolicies);b?d.add(a):d.delete(a),u({...c,enabledPolicies:[...d]});try{let c=(0,bA.getInstanceId)();await bz(c,"policy_toggled",{policy_name:a,enabled:b,action:b?"enable":"disable",source:"web"})}catch{}}async function bM(a="user",b){let c=t(),d=c.enabledPolicies.length>0?c.enabledPolicies:bf.filter(a=>a.defaultEnabled&&!a.beta).map(a=>a.name),e=b&&b.length>0?b:W(),f=e.length>0?e:["claude"];await bG(d,a,void 0,!1,"web",void 0,!1,f)}async function bN(a="user",b){let c=b&&b.length>0?b:W(),d=c.length>0?c:["claude"];await bH(void 0,a,void 0,{source:"web",cli:d})}async function bO(a,b){let c=t(),d={...c.policyParams??{},[a]:b};u({...c,policyParams:d});try{let c=(0,bA.getInstanceId)();await bz(c,"policy_params_updated",{policy_name:a,param_keys:Object.keys(b),source:"web"})}catch{}}(0,bI.ensureServerEntryExports)([bK]),(0,d.registerServerReference)(bK,"008e1c49d3beb0c15d7aa52742e3e0f6e7c618079d",null),(0,bI.ensureServerEntryExports)([bL]),(0,d.registerServerReference)(bL,"60c9a6cc3c2510a46405e330f7a9d1d6a9ef6db843",null),(0,bI.ensureServerEntryExports)([bM,bN]),(0,d.registerServerReference)(bM,"60d1bf56081277520b164ddfc66317962301f9b18b",null),(0,d.registerServerReference)(bN,"60510d06a1277a0e2391d6723e0d0ac41fbfafb09c",null),(0,bI.ensureServerEntryExports)([bO]),(0,d.registerServerReference)(bO,"60f8afd76ad0ef7224d2ccfb28fcb21e8152fab6f2",null),a.s([],63895),a.i(63895),a.s(["0079deaab62d14cd8e3b3494a48bf4da83fc747b3b",()=>b.getTelemetryConfig,"008e1c49d3beb0c15d7aa52742e3e0f6e7c618079d",0,bK,"40b6b77c3d46ce8a0febee33d73a1a20b1bf03a105",()=>c.getHookActivityAction,"60510d06a1277a0e2391d6723e0d0ac41fbfafb09c",0,bN,"60c9a6cc3c2510a46405e330f7a9d1d6a9ef6db843",0,bL,"60d150d7b5bcb81ffdc547b9e6237da6230457581d",()=>c.searchHookActivityAction,"60d1bf56081277520b164ddfc66317962301f9b18b",0,bM,"60f8afd76ad0ef7224d2ccfb28fcb21e8152fab6f2",0,bO],11369)}];
 
 //# sourceMappingURL=%5Broot-of-the-server%5D__0ymlddl._.js.map

package/.next/standalone/.next/server/chunks/ssr/{[root-of-the-server]__0_b7pgn._.js → [root-of-the-server]__0ymn496._.js}

@@ -1,3 +1,3 @@
-module.exports=[18622,(a,b,c)=>{b.exports=a.x("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js",()=>require("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js"))},56704,(a,b,c)=>{b.exports=a.x("next/dist/server/app-render/work-async-storage.external.js",()=>require("next/dist/server/app-render/work-async-storage.external.js"))},32319,(a,b,c)=>{b.exports=a.x("next/dist/server/app-render/work-unit-async-storage.external.js",()=>require("next/dist/server/app-render/work-unit-async-storage.external.js"))},20635,(a,b,c)=>{b.exports=a.x("next/dist/server/app-render/action-async-storage.external.js",()=>require("next/dist/server/app-render/action-async-storage.external.js"))},24725,(a,b,c)=>{b.exports=a.x("next/dist/server/app-render/after-task-async-storage.external.js",()=>require("next/dist/server/app-render/after-task-async-storage.external.js"))},43285,(a,b,c)=>{b.exports=a.x("next/dist/server/app-render/dynamic-access-async-storage.external.js",()=>require("next/dist/server/app-render/dynamic-access-async-storage.external.js"))},42602,(a,b,c)=>{"use strict";b.exports=a.r(18622)},87924,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored["react-ssr"].ReactJsxRuntime},72131,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored["react-ssr"].React},38783,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored["react-ssr"].ReactServerDOMTurbopackClient},9270,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored.contexts.AppRouterContext},36313,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored.contexts.HooksClientContext},18341,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored.contexts.ServerInsertedHtml},35112,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored["react-ssr"].ReactDOM},66036,a=>{"use strict";a.s(["captureClientEvent",0,function(a,b){},"setClientTelemetryConfig",0,function(a){}])},33354,(a,b,c)=>{"use strict";c._=function(a){return a&&a.__esModule?a:{default:a}}},6236,a=>{"use strict";var b=a.i(87924),c=a.i(72131);let d=(0,c.createContext)(void 0);a.s(["AutoRefreshProvider",0,function({children:a}){let[e,f]=(0,c.useState)(0);return(0,b.jsx)(d.Provider,{value:{intervalSec:e,setIntervalSec:f},children:a})},"useAutoRefresh",0,function(){let a=(0,c.useContext)(d);if(!a)throw Error("useAutoRefresh must be used within AutoRefreshProvider");return a}])},14258,a=>{"use strict";let b=(0,a.i(64831).default)("shield",[["path",{d:"M20 13c0 5-3.5 7.5-7.66 8.95a1 1 0 0 1-.67-.01C7.5 20.5 4 18 4 13V6a1 1 0 0 1 1-1c2 0 4.5-1.2 6.24-2.72a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1z",key:"oel41y"}]]);a.s(["Shield",0,b],14258)},40695,a=>{"use strict";var b=a.i(87924),c=a.i(72131),d=a.i(97895);let e=c.forwardRef(({className:a,variant:c="default",size:e="default",...f},g)=>(0,b.jsx)("button",{className:(0,d.cn)("inline-flex items-center justify-center rounded-md text-sm font-medium transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:opacity-50 disabled:pointer-events-none",{"bg-primary text-primary-foreground hover:bg-primary/90":"default"===c,"hover:bg-muted hover:text-muted-foreground":"ghost"===c,"border border-border bg-background hover:bg-muted":"outline"===c,"h-10 py-2 px-4":"default"===e,"h-10 w-10":"icon"===e,"h-9 px-3":"sm"===e,"h-11 px-8":"lg"===e},a),ref:g,...f}));e.displayName="Button",a.s(["Button",0,e])},89027,a=>{"use strict";let b=(0,a.i(64831).default)("chevron-down",[["path",{d:"m6 9 6 6 6-6",key:"qrunsl"}]]);a.s(["ChevronDown",0,b],89027)},46058,(a,b,c)=>{"use strict";function d(a){if("function"!=typeof WeakMap)return null;var b=new WeakMap,c=new WeakMap;return(d=function(a){return a?c:b})(a)}c._=function(a,b){if(!b&&a&&a.__esModule)return a;if(null===a||"object"!=typeof a&&"function"!=typeof a)return{default:a};var c=d(b);if(c&&c.has(a))return c.get(a);var e={__proto__:null},f=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var g in a)if("default"!==g&&Object.prototype.hasOwnProperty.call(a,g)){var h=f?Object.getOwnPropertyDescriptor(a,g):null;h&&(h.get||h.set)?Object.defineProperty(e,g,h):e[g]=a[g]}return e.default=a,c&&c.set(a,e),e}},88347,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d,e,f={ACTION_HMR_REFRESH:function(){return l},ACTION_NAVIGATE:function(){return i},ACTION_REFRESH:function(){return h},ACTION_RESTORE:function(){return j},ACTION_SERVER_ACTION:function(){return m},ACTION_SERVER_PATCH:function(){return k},PrefetchKind:function(){return n},ScrollBehavior:function(){return o}};for(var g in f)Object.defineProperty(c,g,{enumerable:!0,get:f[g]});let h="refresh",i="navigate",j="restore",k="server-patch",l="hmr-refresh",m="server-action";var n=((d={}).AUTO="auto",d.FULL="full",d),o=((e={})[e.Default=0]="Default",e[e.NoScroll=1]="NoScroll",e);("function"==typeof c.default||"object"==typeof c.default&&null!==c.default)&&void 0===c.default.__esModule&&(Object.defineProperty(c.default,"__esModule",{value:!0}),Object.assign(c.default,c),b.exports=c.default)},67009,(a,b,c)=>{"use strict";function d(a){return null!==a&&"object"==typeof a&&"then"in a&&"function"==typeof a.then}Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"isThenable",{enumerable:!0,get:function(){return d}})},90841,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d={dispatchAppRouterAction:function(){return i},dispatchGestureState:function(){return j},refreshOnInstantNavigationUnlock:function(){return h},useActionQueue:function(){return k}};for(var e in d)Object.defineProperty(c,e,{enumerable:!0,get:d[e]});let f=a.r(46058)._(a.r(72131)),g=a.r(67009);a.r(88347);function h(){}function i(a){!0;throw Object.defineProperty(Error("Internal Next.js error: Router action dispatched before initialization."),"__NEXT_ERROR_CODE",{value:"E668",enumerable:!1,configurable:!0})}function j(a){!0;throw Object.defineProperty(Error("Internal Next.js error: Router action dispatched before initialization."),"__NEXT_ERROR_CODE",{value:"E668",enumerable:!1,configurable:!0})}function k(a){let[b,c]=f.default.useState(a.state),[d,e]=(0,f.useOptimistic)(b),h=(0,f.useMemo)(()=>d,[d]);return(0,g.isThenable)(h)?(0,f.use)(h):h}("function"==typeof c.default||"object"==typeof c.default&&null!==c.default)&&void 0===c.default.__esModule&&(Object.defineProperty(c.default,"__esModule",{value:!0}),Object.assign(c.default,c),b.exports=c.default)},20611,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"callServer",{enumerable:!0,get:function(){return g}});let d=a.r(72131),e=a.r(88347),f=a.r(90841);async function g(a,b){return new Promise((c,g)=>{(0,d.startTransition)(()=>{(0,f.dispatchAppRouterAction)({type:e.ACTION_SERVER_ACTION,actionId:a,actionArgs:b,resolve:c,reject:g})})})}("function"==typeof c.default||"object"==typeof c.default&&null!==c.default)&&void 0===c.default.__esModule&&(Object.defineProperty(c.default,"__esModule",{value:!0}),Object.assign(c.default,c),b.exports=c.default)},1722,(a,b,c)=>{"use strict";let d;Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"findSourceMapURL",{enumerable:!0,get:function(){return d}});("function"==typeof c.default||"object"==typeof c.default&&null!==c.default)&&void 0===c.default.__esModule&&(Object.defineProperty(c.default,"__esModule",{value:!0}),Object.assign(c.default,c),b.exports=c.default)},5050,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d={callServer:function(){return f.callServer},createServerReference:function(){return h.createServerReference},findSourceMapURL:function(){return g.findSourceMapURL}};for(var e in d)Object.defineProperty(c,e,{enumerable:!0,get:d[e]});let f=a.r(20611),g=a.r(1722),h=a.r(38783)},92403,a=>{"use strict";var b=a.i(5050);let c=(0,b.createServerReference)("004e0dedcd030bf7aa10787743163b3cb3b61759ca",b.callServer,void 0,b.findSourceMapURL,"getTelemetryConfig");a.s(["getTelemetryConfig",0,c])}];
+module.exports=[18622,(a,b,c)=>{b.exports=a.x("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js",()=>require("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js"))},56704,(a,b,c)=>{b.exports=a.x("next/dist/server/app-render/work-async-storage.external.js",()=>require("next/dist/server/app-render/work-async-storage.external.js"))},32319,(a,b,c)=>{b.exports=a.x("next/dist/server/app-render/work-unit-async-storage.external.js",()=>require("next/dist/server/app-render/work-unit-async-storage.external.js"))},20635,(a,b,c)=>{b.exports=a.x("next/dist/server/app-render/action-async-storage.external.js",()=>require("next/dist/server/app-render/action-async-storage.external.js"))},24725,(a,b,c)=>{b.exports=a.x("next/dist/server/app-render/after-task-async-storage.external.js",()=>require("next/dist/server/app-render/after-task-async-storage.external.js"))},43285,(a,b,c)=>{b.exports=a.x("next/dist/server/app-render/dynamic-access-async-storage.external.js",()=>require("next/dist/server/app-render/dynamic-access-async-storage.external.js"))},42602,(a,b,c)=>{"use strict";b.exports=a.r(18622)},87924,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored["react-ssr"].ReactJsxRuntime},72131,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored["react-ssr"].React},38783,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored["react-ssr"].ReactServerDOMTurbopackClient},9270,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored.contexts.AppRouterContext},36313,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored.contexts.HooksClientContext},18341,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored.contexts.ServerInsertedHtml},35112,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored["react-ssr"].ReactDOM},66036,a=>{"use strict";a.s(["captureClientEvent",0,function(a,b){},"setClientTelemetryConfig",0,function(a){}])},33354,(a,b,c)=>{"use strict";c._=function(a){return a&&a.__esModule?a:{default:a}}},6236,a=>{"use strict";var b=a.i(87924),c=a.i(72131);let d=(0,c.createContext)(void 0);a.s(["AutoRefreshProvider",0,function({children:a}){let[e,f]=(0,c.useState)(0);return(0,b.jsx)(d.Provider,{value:{intervalSec:e,setIntervalSec:f},children:a})},"useAutoRefresh",0,function(){let a=(0,c.useContext)(d);if(!a)throw Error("useAutoRefresh must be used within AutoRefreshProvider");return a}])},14258,a=>{"use strict";let b=(0,a.i(64831).default)("shield",[["path",{d:"M20 13c0 5-3.5 7.5-7.66 8.95a1 1 0 0 1-.67-.01C7.5 20.5 4 18 4 13V6a1 1 0 0 1 1-1c2 0 4.5-1.2 6.24-2.72a1.17 1.17 0 0 1 1.52 0C14.51 3.81 17 5 19 5a1 1 0 0 1 1 1z",key:"oel41y"}]]);a.s(["Shield",0,b],14258)},40695,a=>{"use strict";var b=a.i(87924),c=a.i(72131),d=a.i(97895);let e=c.forwardRef(({className:a,variant:c="default",size:e="default",...f},g)=>(0,b.jsx)("button",{className:(0,d.cn)("inline-flex items-center justify-center rounded-md text-sm font-medium transition-colors focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:opacity-50 disabled:pointer-events-none",{"bg-primary text-primary-foreground hover:bg-primary/90":"default"===c,"hover:bg-muted hover:text-muted-foreground":"ghost"===c,"border border-border bg-background hover:bg-muted":"outline"===c,"h-10 py-2 px-4":"default"===e,"h-10 w-10":"icon"===e,"h-9 px-3":"sm"===e,"h-11 px-8":"lg"===e},a),ref:g,...f}));e.displayName="Button",a.s(["Button",0,e])},89027,a=>{"use strict";let b=(0,a.i(64831).default)("chevron-down",[["path",{d:"m6 9 6 6 6-6",key:"qrunsl"}]]);a.s(["ChevronDown",0,b],89027)},46058,(a,b,c)=>{"use strict";function d(a){if("function"!=typeof WeakMap)return null;var b=new WeakMap,c=new WeakMap;return(d=function(a){return a?c:b})(a)}c._=function(a,b){if(!b&&a&&a.__esModule)return a;if(null===a||"object"!=typeof a&&"function"!=typeof a)return{default:a};var c=d(b);if(c&&c.has(a))return c.get(a);var e={__proto__:null},f=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var g in a)if("default"!==g&&Object.prototype.hasOwnProperty.call(a,g)){var h=f?Object.getOwnPropertyDescriptor(a,g):null;h&&(h.get||h.set)?Object.defineProperty(e,g,h):e[g]=a[g]}return e.default=a,c&&c.set(a,e),e}},88347,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d,e,f={ACTION_HMR_REFRESH:function(){return l},ACTION_NAVIGATE:function(){return i},ACTION_REFRESH:function(){return h},ACTION_RESTORE:function(){return j},ACTION_SERVER_ACTION:function(){return m},ACTION_SERVER_PATCH:function(){return k},PrefetchKind:function(){return n},ScrollBehavior:function(){return o}};for(var g in f)Object.defineProperty(c,g,{enumerable:!0,get:f[g]});let h="refresh",i="navigate",j="restore",k="server-patch",l="hmr-refresh",m="server-action";var n=((d={}).AUTO="auto",d.FULL="full",d),o=((e={})[e.Default=0]="Default",e[e.NoScroll=1]="NoScroll",e);("function"==typeof c.default||"object"==typeof c.default&&null!==c.default)&&void 0===c.default.__esModule&&(Object.defineProperty(c.default,"__esModule",{value:!0}),Object.assign(c.default,c),b.exports=c.default)},67009,(a,b,c)=>{"use strict";function d(a){return null!==a&&"object"==typeof a&&"then"in a&&"function"==typeof a.then}Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"isThenable",{enumerable:!0,get:function(){return d}})},90841,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d={dispatchAppRouterAction:function(){return i},dispatchGestureState:function(){return j},refreshOnInstantNavigationUnlock:function(){return h},useActionQueue:function(){return k}};for(var e in d)Object.defineProperty(c,e,{enumerable:!0,get:d[e]});let f=a.r(46058)._(a.r(72131)),g=a.r(67009);a.r(88347);function h(){}function i(a){!0;throw Object.defineProperty(Error("Internal Next.js error: Router action dispatched before initialization."),"__NEXT_ERROR_CODE",{value:"E668",enumerable:!1,configurable:!0})}function j(a){!0;throw Object.defineProperty(Error("Internal Next.js error: Router action dispatched before initialization."),"__NEXT_ERROR_CODE",{value:"E668",enumerable:!1,configurable:!0})}function k(a){let[b,c]=f.default.useState(a.state),[d,e]=(0,f.useOptimistic)(b),h=(0,f.useMemo)(()=>d,[d]);return(0,g.isThenable)(h)?(0,f.use)(h):h}("function"==typeof c.default||"object"==typeof c.default&&null!==c.default)&&void 0===c.default.__esModule&&(Object.defineProperty(c.default,"__esModule",{value:!0}),Object.assign(c.default,c),b.exports=c.default)},20611,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"callServer",{enumerable:!0,get:function(){return g}});let d=a.r(72131),e=a.r(88347),f=a.r(90841);async function g(a,b){return new Promise((c,g)=>{(0,d.startTransition)(()=>{(0,f.dispatchAppRouterAction)({type:e.ACTION_SERVER_ACTION,actionId:a,actionArgs:b,resolve:c,reject:g})})})}("function"==typeof c.default||"object"==typeof c.default&&null!==c.default)&&void 0===c.default.__esModule&&(Object.defineProperty(c.default,"__esModule",{value:!0}),Object.assign(c.default,c),b.exports=c.default)},1722,(a,b,c)=>{"use strict";let d;Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"findSourceMapURL",{enumerable:!0,get:function(){return d}});("function"==typeof c.default||"object"==typeof c.default&&null!==c.default)&&void 0===c.default.__esModule&&(Object.defineProperty(c.default,"__esModule",{value:!0}),Object.assign(c.default,c),b.exports=c.default)},5050,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d={callServer:function(){return f.callServer},createServerReference:function(){return h.createServerReference},findSourceMapURL:function(){return g.findSourceMapURL}};for(var e in d)Object.defineProperty(c,e,{enumerable:!0,get:d[e]});let f=a.r(20611),g=a.r(1722),h=a.r(38783)},25462,a=>{"use strict";var b=a.i(5050);let c=(0,b.createServerReference)("0079deaab62d14cd8e3b3494a48bf4da83fc747b3b",b.callServer,void 0,b.findSourceMapURL,"getTelemetryConfig");a.s(["getTelemetryConfig",0,c])}];
 
-//# sourceMappingURL=%5Broot-of-the-server%5D__0_b7pgn._.js.map
+//# sourceMappingURL=%5Broot-of-the-server%5D__0ymn496._.js.map