failproofai 1.0.0-beta.1 → 1.0.0-beta.3

package/dist/cli.mjs

@@ -19,7 +19,7 @@ var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // package.json
-var version2 = "1.0.0-beta.1";
+var version2 = "1.0.0-beta.3";
 var init_package = () => {};
 
 // src/posthog-key.ts
@@ -332,6 +332,15 @@ function readHooksConfig() {
     return { enabledPolicies: [] };
   }
 }
+function writeHooksConfig(config) {
+  const configPath = getConfigPath();
+  const dir = dirname(configPath);
+  if (!existsSync2(dir)) {
+    mkdirSync2(dir, { recursive: true });
+  }
+  writeFileSync(configPath, JSON.stringify(config, null, 2) + `
+`, "utf8");
+}
 function getConfigPathForScope(scope, cwd) {
   switch (scope) {
     case "user":
@@ -397,11 +406,20 @@ var init_hooks_config = __esm(() => {
 var exports_daemon_client = {};
 __export(exports_daemon_client, {
   tryDaemonHook: () => tryDaemonHook,
-  isDaemonConfigured: () => isDaemonConfigured
+  isDaemonConfigured: () => isDaemonConfigured,
+  daemonSocketPresent: () => daemonSocketPresent
 });
 import { createConnection } from "node:net";
 import { resolve as resolve2 } from "node:path";
 import { homedir as homedir3 } from "node:os";
+import { existsSync as existsSync3 } from "node:fs";
+function daemonSocketPresent() {
+  try {
+    return existsSync3(socketPath());
+  } catch {
+    return false;
+  }
+}
 function socketPath() {
   if (process.env.FAILPROOFAI_DAEMON_SOCKET)
     return process.env.FAILPROOFAI_DAEMON_SOCKET;
@@ -1132,6 +1150,41 @@ function getFilePath(ctx) {
 function parseArgvTokens(cmd) {
   return cmd.trim().split(/\s+/).map((t) => t.replace(/^['"]|['"]$/g, ""));
 }
+function decodeAnsiC(body) {
+  return body.replace(/\\(x[0-9A-Fa-f]{1,2}|u[0-9A-Fa-f]{1,4}|U[0-9A-Fa-f]{1,8}|[0-7]{1,3}|.)/g, (_, seq) => {
+    try {
+      if (seq[0] === "x")
+        return String.fromCharCode(parseInt(seq.slice(1), 16));
+      if (seq[0] === "u" || seq[0] === "U")
+        return String.fromCodePoint(parseInt(seq.slice(1), 16));
+      if (/^[0-7]+$/.test(seq))
+        return String.fromCharCode(parseInt(seq, 8));
+    } catch {
+      return seq;
+    }
+    const named = {
+      a: "\x07",
+      b: "\b",
+      e: "\x1B",
+      f: "\f",
+      n: `
+`,
+      r: "\r",
+      t: "\t",
+      v: "\v",
+      "\\": "\\",
+      "'": "'",
+      '"': '"',
+      "?": "?"
+    };
+    return named[seq] ?? seq;
+  });
+}
+function stripShellQuoting(command) {
+  const joined = command.replace(/\\\r?\n/g, "");
+  const ansiDecoded = joined.replace(/\$'((?:[^'\\]|\\.)*)'/g, (_, body) => decodeAnsiC(body));
+  return ansiDecoded.replace(/\\(.)/g, "$1").replace(/['"]/g, "");
+}
 function statGitHeadMtimeMs(cwd) {
   try {
     return statSync3(join2(cwd, ".git", "HEAD")).mtimeMs;
@@ -1394,6 +1447,15 @@ function blockSudo(ctx) {
   }
   return allow();
 }
+function blockSelfPause(ctx) {
+  if (ctx.toolName !== "Bash")
+    return allow();
+  const cmd = getCommand(ctx);
+  if (SELF_PAUSE_RE.test(cmd) || SELF_PAUSE_RE.test(stripShellQuoting(cmd))) {
+    return deny("Pausing failproofai enforcement is a human action, not an agent one. " + "If a policy is blocking legitimate work, say so and let the operator decide.");
+  }
+  return allow();
+}
 function blockCurlPipeSh(ctx) {
   if (ctx.toolName !== "Bash")
     return allow();
@@ -2131,7 +2193,7 @@ function registerBuiltinPolicies(enabledNames) {
     }
   }
 }
-var isClaudeInternalPath, isClaudeSettingsFile, SHELL_OPERATORS, SHELL_METACHAR_RE, JWT_RE, API_KEY_PATTERNS, CONNECTION_STRING_RE, PRIVATE_KEY_RE, BEARER_TOKEN_RE, SQL_TOOL_RE, DESTRUCTIVE_SQL_RE, DELETE_NO_WHERE_RE, SQL_WHERE_RE, SCHEMA_ALTER_RE, PUBLISH_CMD_RE, ENV_PRINTENV_RE, ECHO_ENV_RE, EXPORT_RE, PS_ENV_VAR_RE, PS_CHILDITEM_ENV_RE, DOTNET_GETENV_RE, CMD_ECHO_ENV_RE, ENV_FILE_PATH_RE, ENV_CMD_RE, SUDO_RE, PS_ELEVATION_RE, RUNAS_RE, CURL_PIPE_SH_RE, PS_WEB_PIPE_RE, SHORT_FLAG_BUNDLE_RE, SAFE_FORCE_PREFIXES, SECRET_FILE_RE, SECRET_FILE_ID_RSA_RE, SECRET_FILE_CREDENTIALS_RE, GIT_COMMIT_MERGE_RE, FAILPROOFAI_CLI_RE, FAILPROOFAI_UNINSTALL_RE, GIT_AMEND_RE, GIT_STASH_DROP_RE, GIT_ADD_ALL_RE, NPM_GLOBAL_RE, YARN_GLOBAL_RE, PNPM_GLOBAL_RE, BUN_GLOBAL_RE, CARGO_INSTALL_RE, PIP_SYSTEM_RE, PKG_MANAGER_DETECTORS, NOHUP_RE, SCREEN_DETACH_RE, TMUX_DETACH_RE, DISOWN_RE, BACKGROUND_AMPERSAND_RE, KUBECTL_RE, TERRAFORM_RE, AWS_CLI_RE, GCLOUD_RE, AZ_CLI_RE, HELM_RE, GH_PIPELINE_RE, gitBranchCache, GIT_BRANCH_CACHE_MAX_ENTRIES = 500, HOME_PREFIX_RE, RM_CMD_RE, FIND_CMD_RE, FIND_EXEC_RE, FIND_GLOBAL_OPT_RE, FIND_EXPR_START_RE, SCRATCH_ROOTS, CATASTROPHIC_DEPTH = 2, READ_LIKE_CMDS, TOOL_CALL_TRACKER_MAX_BYTES = 65536, SEGMENT_SPLIT_RE, BUILTIN_POLICIES;
+var isClaudeInternalPath, isClaudeSettingsFile, SHELL_OPERATORS, SHELL_METACHAR_RE, JWT_RE, API_KEY_PATTERNS, CONNECTION_STRING_RE, PRIVATE_KEY_RE, BEARER_TOKEN_RE, SQL_TOOL_RE, DESTRUCTIVE_SQL_RE, DELETE_NO_WHERE_RE, SQL_WHERE_RE, SCHEMA_ALTER_RE, PUBLISH_CMD_RE, ENV_PRINTENV_RE, ECHO_ENV_RE, EXPORT_RE, PS_ENV_VAR_RE, PS_CHILDITEM_ENV_RE, DOTNET_GETENV_RE, CMD_ECHO_ENV_RE, ENV_FILE_PATH_RE, ENV_CMD_RE, SUDO_RE, PS_ELEVATION_RE, RUNAS_RE, CURL_PIPE_SH_RE, SELF_PAUSE_RE, PS_WEB_PIPE_RE, SHORT_FLAG_BUNDLE_RE, SAFE_FORCE_PREFIXES, SECRET_FILE_RE, SECRET_FILE_ID_RSA_RE, SECRET_FILE_CREDENTIALS_RE, GIT_COMMIT_MERGE_RE, FAILPROOFAI_CLI_RE, FAILPROOFAI_UNINSTALL_RE, GIT_AMEND_RE, GIT_STASH_DROP_RE, GIT_ADD_ALL_RE, NPM_GLOBAL_RE, YARN_GLOBAL_RE, PNPM_GLOBAL_RE, BUN_GLOBAL_RE, CARGO_INSTALL_RE, PIP_SYSTEM_RE, PKG_MANAGER_DETECTORS, NOHUP_RE, SCREEN_DETACH_RE, TMUX_DETACH_RE, DISOWN_RE, BACKGROUND_AMPERSAND_RE, KUBECTL_RE, TERRAFORM_RE, AWS_CLI_RE, GCLOUD_RE, AZ_CLI_RE, HELM_RE, GH_PIPELINE_RE, gitBranchCache, GIT_BRANCH_CACHE_MAX_ENTRIES = 500, HOME_PREFIX_RE, RM_CMD_RE, FIND_CMD_RE, FIND_EXEC_RE, FIND_GLOBAL_OPT_RE, FIND_EXPR_START_RE, SCRATCH_ROOTS, CATASTROPHIC_DEPTH = 2, READ_LIKE_CMDS, TOOL_CALL_TRACKER_MAX_BYTES = 65536, SEGMENT_SPLIT_RE, BUILTIN_POLICIES;
 var init_builtin_policies = __esm(() => {
   init_hook_logger();
   isClaudeInternalPath = isAgentInternalPath;
@@ -2172,6 +2234,7 @@ var init_builtin_policies = __esm(() => {
   PS_ELEVATION_RE = /Start-Process\s+.*-Verb\s+RunAs/i;
   RUNAS_RE = /(?:^|;|&&|\|\|)\s*runas\s/i;
   CURL_PIPE_SH_RE = /(?:curl|wget)\s.*\|\s*(?:sh|bash|zsh|dash|ksh|csh|tcsh|fish|ash)\b/;
+  SELF_PAUSE_RE = /failproofai[^\s]*(?:\s+\S+)*?\s+(?:config|configure|setup)\b(?:\s+\S+)*?\s+--pause\b/;
   PS_WEB_PIPE_RE = /(?:Invoke-WebRequest|iwr|Invoke-RestMethod|irm)\s+.*\|\s*(?:Invoke-Expression|iex)/i;
   SHORT_FLAG_BUNDLE_RE = /^-[a-zA-Z]*f[a-zA-Z]*$/;
   SAFE_FORCE_PREFIXES = ["--force-with-lease", "--force-if-includes"];
@@ -2319,6 +2382,16 @@ var init_builtin_policies = __esm(() => {
         }
       }
     },
+    {
+      name: "block-self-pause",
+      displayTitle: "Tried to pause failproofai enforcement",
+      impact: "An agent that can pause enforcement can switch off every other policy.",
+      description: "Block agents from pausing failproofai enforcement",
+      fn: blockSelfPause,
+      match: { events: ["PreToolUse", "PermissionRequest"], toolNames: ["Bash"] },
+      defaultEnabled: true,
+      category: "Dangerous Commands"
+    },
     {
       name: "block-sudo",
       displayTitle: "Tried to run a command with sudo",
@@ -3628,8 +3701,14 @@ function clearCustomHooks() {
   const g = globalThis;
   g[REGISTRY_KEY2] = [];
 }
-var REGISTRY_KEY2 = "__failproofai_custom_hooks__";
-var init_custom_hooks_registry = () => {};
+var REGISTRY_KEY2 = "__failproofai_custom_hooks__", customPolicies;
+var init_custom_hooks_registry = __esm(() => {
+  customPolicies = {
+    add(hook) {
+      getRegistry2().push(hook);
+    }
+  };
+});
 
 // src/hooks/loader-utils.ts
 import { readFile as readFile2, writeFile as writeFile2, unlink, access } from "fs/promises";
@@ -3670,8 +3749,8 @@ async function resolveLocalImport(fromDir, specifier) {
   }
   return null;
 }
-async function createEsmShim(distIndex, distUrl) {
-  const shimPath = distIndex + ".__failproofai_esm_shim__.mjs";
+async function createEsmShim(distIndex, distUrl, tmpSuffix = TMP_SUFFIX) {
+  const shimPath = `${distIndex}${tmpSuffix}.shim.mjs`;
   const shimCode = [
     `import _cjs from '${distUrl}';`,
     `export const customPolicies = _cjs.customPolicies;`,
@@ -3686,13 +3765,13 @@ async function createEsmShim(distIndex, distUrl) {
   await writeFile2(shimPath, shimCode, "utf-8");
   return { shimPath, shimUrl: pathToFileURL(shimPath).href };
 }
-async function rewriteFileTree(entryPath, distUrl, distIndex) {
+async function rewriteFileTree(entryPath, distUrl, distIndex, tmpSuffix = TMP_SUFFIX) {
   const queue = [entryPath];
   const visited = new Set;
   const tmpFiles = [];
   let esmShimUrl = null;
   if (distIndex && distUrl) {
-    const shim = await createEsmShim(distIndex, distUrl);
+    const shim = await createEsmShim(distIndex, distUrl, tmpSuffix);
     tmpFiles.push(shim.shimPath);
     esmShimUrl = shim.shimUrl;
   }
@@ -3723,7 +3802,7 @@ async function rewriteFileTree(entryPath, distUrl, distIndex) {
         if (!visited.has(resolved2) && !queue.includes(resolved2)) {
           queue.push(resolved2);
         }
-        let relPath = relative(dir, resolved2 + TMP_SUFFIX).split("\\").join("/");
+        let relPath = relative(dir, resolved2 + tmpSuffix).split("\\").join("/");
         if (!relPath.startsWith("."))
           relPath = "./" + relPath;
         rewrites.set(specifier, relPath);
@@ -3736,7 +3815,7 @@ async function rewriteFileTree(entryPath, distUrl, distIndex) {
       code = code.replace(new RegExp(`'${escaped}'`, "g"), `'${replacement}'`);
       code = code.replace(new RegExp(`"${escaped}"`, "g"), `"${replacement}"`);
     }
-    const tmpPath = filePath + TMP_SUFFIX;
+    const tmpPath = filePath + tmpSuffix;
     await writeFile2(tmpPath, code, "utf-8");
     tmpFiles.push(tmpPath);
   }
@@ -3757,11 +3836,13 @@ var init_loader_utils = __esm(() => {
 
 // src/hooks/custom-hooks-loader.ts
 import { resolve as resolve5, isAbsolute, basename } from "node:path";
-import { existsSync as existsSync3, readdirSync } from "node:fs";
+import { existsSync as existsSync4, readdirSync } from "node:fs";
+import { readFile as readFile3 } from "node:fs/promises";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
 import { homedir as homedir5 } from "node:os";
+import { createHash } from "node:crypto";
 function discoverPolicyFiles(dir) {
-  if (!existsSync3(dir))
+  if (!existsSync4(dir))
     return [];
   try {
     const entries = readdirSync(dir, { withFileTypes: true });
@@ -3771,7 +3852,7 @@ function discoverPolicyFiles(dir) {
   }
 }
 function findSkippedPolicyFiles(dir) {
-  if (!existsSync3(dir))
+  if (!existsSync4(dir))
     return [];
   try {
     return readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && LOADABLE_EXT_RE.test(e.name) && !CONVENTION_FILE_RE.test(e.name) && !e.name.endsWith(".d.ts")).map((e) => e.name).sort((a, b) => a.localeCompare(b));
@@ -3786,10 +3867,24 @@ async function loadSingleFile(absPath, opts) {
   try {
     const distIndex = await findDistIndex();
     const distUrl = distIndex ? pathToFileURL2(distIndex).href : null;
-    tmpFiles = await rewriteFileTree(absPath, distUrl, distIndex);
-    const entryTmp = absPath + TMP_SUFFIX;
-    const fileUrl = `${pathToFileURL2(entryTmp).href}?v=${++loadSequence}`;
+    const sequence = ++loadSequence;
+    const tmpSuffix = `${TMP_SUFFIX}.${process.pid}.${sequence}.mjs`;
+    tmpFiles = await rewriteFileTree(absPath, distUrl, distIndex, tmpSuffix);
+    const fingerprint = await fingerprintTemporaryTree(tmpFiles, tmpSuffix);
+    const cached = policyModuleCache.get(absPath);
+    if (cached?.fingerprint === fingerprint) {
+      for (const hook of cached.hooks)
+        customPolicies.add({ ...hook });
+      return;
+    }
+    const entryTmp = absPath + tmpSuffix;
+    const fileUrl = pathToFileURL2(entryTmp).href;
+    const hooksBefore = getCustomHooks().length;
     await import(fileUrl);
+    policyModuleCache.set(absPath, {
+      fingerprint,
+      hooks: getCustomHooks().slice(hooksBefore).map((hook) => ({ ...hook }))
+    });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     const errorType = /Cannot find module|MODULE_NOT_FOUND|ENOENT/i.test(msg) ? "module_not_found" : /SyntaxError|Unexpected token/i.test(msg) ? "syntax_error" : "runtime_error";
@@ -3807,11 +3902,20 @@ async function loadSingleFile(absPath, opts) {
     await cleanupTmpFiles(tmpFiles);
   }
 }
+async function fingerprintTemporaryTree(tmpFiles, tmpSuffix) {
+  const hash = createHash("sha256");
+  for (const tmpFile of [...tmpFiles].sort()) {
+    hash.update(tmpFile.replaceAll(tmpSuffix, TMP_SUFFIX));
+    const contents = await readFile3(tmpFile, "utf8");
+    hash.update(contents.replaceAll(tmpSuffix, TMP_SUFFIX));
+  }
+  return hash.digest("hex");
+}
 async function loadCustomHooks(customPoliciesPath, opts) {
   if (!customPoliciesPath)
     return [];
   const absPath = isAbsolute(customPoliciesPath) ? customPoliciesPath : resolve5(opts?.sessionCwd ?? process.cwd(), customPoliciesPath);
-  if (!existsSync3(absPath)) {
+  if (!existsSync4(absPath)) {
     if (opts?.strict)
       throw new Error(`Custom hooks file not found: ${absPath}`);
     hookLogWarn(`customPoliciesPath not found: ${absPath}`);
@@ -3840,15 +3944,23 @@ async function loadAllCustomHooks(customPoliciesPaths, opts) {
   const projectRoot = findProjectConfigDir(opts?.sessionCwd ?? process.cwd());
   const conventionEnabled = opts?.customPoliciesEnabled !== false;
   const loadedPaths = new Set;
+  const cloudManagedByPath = new Map((opts?.cloudManagedPolicies ?? []).map((policy) => [resolve5(policy.path), policy]));
   for (const customPoliciesPath of typeof customPoliciesPaths === "string" ? [customPoliciesPaths] : customPoliciesPaths ?? []) {
     const absPath = resolve5(projectRoot, customPoliciesPath);
-    if (existsSync3(absPath)) {
+    if (existsSync4(absPath)) {
       if (!loadedPaths.has(absPath)) {
         loadedPaths.add(absPath);
         const hooksBefore = getCustomHooks().length;
         await loadSingleFile(absPath);
         for (const hook of getCustomHooks().slice(hooksBefore)) {
-          hook.__policyId = customPolicyId(absPath, hook.name);
+          const cloudManaged = cloudManagedByPath.get(absPath);
+          const tagged = hook;
+          if (cloudManaged) {
+            tagged.__cloudManaged = cloudManaged;
+            tagged.__policyId = `cloud:${cloudManaged.id}@${cloudManaged.revision}:${hook.name}`;
+          } else {
+            tagged.__policyId = customPolicyId(absPath, hook.name);
+          }
         }
       }
     } else {
@@ -3920,7 +4032,7 @@ async function loadAllCustomHooks(customPoliciesPaths, opts) {
   }
   return { hooks: allHooks, conventionSources };
 }
-var LOADING_KEY = "__FAILPROOFAI_LOADING_HOOKS__", CONVENTION_FILE_RE, loadSequence = 0, LOADABLE_EXT_RE;
+var LOADING_KEY = "__FAILPROOFAI_LOADING_HOOKS__", CONVENTION_FILE_RE, loadSequence = 0, policyModuleCache, LOADABLE_EXT_RE;
 var init_custom_hooks_loader = __esm(() => {
   init_hook_logger();
   init_custom_hooks_registry();
@@ -3929,6 +4041,7 @@ var init_custom_hooks_loader = __esm(() => {
   init_hook_telemetry2();
   init_telemetry_id2();
   CONVENTION_FILE_RE = /policies\.(js|mjs|ts)$/;
+  policyModuleCache = new Map;
   LOADABLE_EXT_RE = /\.(js|mjs|ts)$/;
 });
 
@@ -3940,14 +4053,14 @@ import {
   renameSync as renameSync2,
   readdirSync as readdirSync2,
   mkdirSync as mkdirSync3,
-  existsSync as existsSync4,
+  existsSync as existsSync5,
   statSync as statSync4,
   unlinkSync
 } from "node:fs";
 import { join as join3 } from "node:path";
 import { homedir as homedir6 } from "node:os";
 function ensureDir() {
-  if (!existsSync4(storeDir)) {
+  if (!existsSync5(storeDir)) {
     mkdirSync3(storeDir, { recursive: true });
   }
 }
@@ -4019,6 +4132,13 @@ function writeCount(countPath, n) {
     writeFileSync2(countPath, String(n), "utf-8");
   } catch {}
 }
+function readFileSafe(filePath) {
+  try {
+    return readFileSync2(filePath, "utf-8");
+  } catch {
+    return "";
+  }
+}
 function readStoredStats() {
   try {
     return JSON.parse(readFileSync2(join3(storeDir, STATS_FILE), "utf-8"));
@@ -4048,6 +4168,49 @@ function updateStats(entry) {
     } catch {}
   }
 }
+function getAllHookActivityEntries() {
+  ensureDir();
+  const currentPath = join3(storeDir, CURRENT_FILE);
+  const currentEntries = readJsonlFile(currentPath).reverse();
+  const archives = getArchiveFiles();
+  const archiveEntries = [];
+  for (const file of archives) {
+    const entries = readJsonlFile(join3(storeDir, file));
+    archiveEntries.push(...entries.reverse());
+  }
+  return [...currentEntries, ...archiveEntries];
+}
+function readJsonlFile(filePath) {
+  const content = readFileSafe(filePath);
+  if (!content.trim())
+    return [];
+  const entries = [];
+  for (const line of content.trim().split(`
+`)) {
+    try {
+      entries.push(JSON.parse(line));
+    } catch {}
+  }
+  return entries;
+}
+function getArchiveFiles() {
+  try {
+    const files = readdirSync2(storeDir);
+    return files.filter((f) => f.startsWith("page-") && f.endsWith(".jsonl")).sort((a, b) => {
+      const partsA = a.slice(5, -6).split("-");
+      const partsB = b.slice(5, -6).split("-");
+      const tsA = parseInt(partsA[0], 10);
+      const tsB = parseInt(partsB[0], 10);
+      if (tsA !== tsB)
+        return tsB - tsA;
+      const seqA = partsA.length > 1 ? parseInt(partsA[1], 10) : 0;
+      const seqB = partsB.length > 1 ? parseInt(partsB[1], 10) : 0;
+      return seqB - seqA;
+    });
+  } catch {
+    return [];
+  }
+}
 var PAGE_SIZE = 25, DEFAULT_STORE_DIR, CURRENT_FILE = "current.jsonl", COUNT_FILE = "current.count", STATS_FILE = "stats.json", LOCK_FILE = "current.lock", LOCK_STALE_MS = 2000, storeDir, rotateSeq = 0;
 var init_hook_activity_store = __esm(() => {
   DEFAULT_STORE_DIR = join3(homedir6(), ".failproofai", "cache", "hook-activity");
@@ -4395,7 +4558,7 @@ __export(exports_copilot_projects, {
   getCachedCopilotSessionsByEncodedName: () => getCachedCopilotSessionsByEncodedName,
   getCachedCopilotProjects: () => getCachedCopilotProjects
 });
-import { readdir as readdir2, readFile as readFile3, stat as stat2 } from "node:fs/promises";
+import { readdir as readdir2, readFile as readFile4, stat as stat2 } from "node:fs/promises";
 import { homedir as homedir9 } from "node:os";
 import { join as join6 } from "node:path";
 function getCopilotSessionStateRoot() {
@@ -4434,7 +4597,7 @@ async function scanCopilotSessions() {
   const settled = await batchAll(candidates.map((c) => async () => {
     let workspaceText;
     try {
-      workspaceText = await readFile3(c.workspacePath, "utf-8");
+      workspaceText = await readFile4(c.workspacePath, "utf-8");
     } catch {
       return null;
     }
@@ -4543,7 +4706,7 @@ __export(exports_cursor_projects, {
   getCachedCursorSessionsByEncodedName: () => getCachedCursorSessionsByEncodedName,
   getCachedCursorProjects: () => getCachedCursorProjects
 });
-import { readdir as readdir3, readFile as readFile4, stat as stat3 } from "node:fs/promises";
+import { readdir as readdir3, readFile as readFile5, stat as stat3 } from "node:fs/promises";
 import { homedir as homedir10 } from "node:os";
 import { join as join7 } from "node:path";
 function getCursorHome() {
@@ -4584,7 +4747,7 @@ async function findFirstUsableMeta(dir, candidates) {
       continue;
     let text;
     try {
-      text = await readFile4(path3, "utf-8");
+      text = await readFile5(path3, "utf-8");
     } catch {
       continue;
     }
@@ -4916,7 +5079,7 @@ __export(exports_pi_projects, {
   getCachedPiSessionsByEncodedName: () => getCachedPiSessionsByEncodedName,
   getCachedPiProjects: () => getCachedPiProjects
 });
-import { readdir as readdir4, readFile as readFile5, stat as stat4 } from "node:fs/promises";
+import { readdir as readdir4, readFile as readFile6, stat as stat4 } from "node:fs/promises";
 import { homedir as homedir11 } from "node:os";
 import { join as join8 } from "node:path";
 function getPiSessionsRoot() {
@@ -4939,7 +5102,7 @@ async function statMtime3(path3) {
 async function readSessionCwd(filePath) {
   let text;
   try {
-    text = await readFile5(filePath, "utf-8");
+    text = await readFile6(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -5080,7 +5243,7 @@ var init_pi_projects = __esm(() => {
 });
 
 // lib/sqlite-reader.ts
-import { existsSync as existsSync5, readFileSync as readFileSync3 } from "node:fs";
+import { existsSync as existsSync6, readFileSync as readFileSync3 } from "node:fs";
 import initSqlJs from "sql.js/dist/sql-asm.js";
 async function tryNodeSqlite(dbPath) {
   try {
@@ -5131,7 +5294,7 @@ async function trySqlJs(dbPath) {
   }
 }
 async function openSqliteReadonly(dbPath) {
-  if (!existsSync5(dbPath))
+  if (!existsSync6(dbPath))
     return null;
   return await tryNodeSqlite(dbPath) ?? await trySqlJs(dbPath);
 }
@@ -5521,7 +5684,7 @@ var init_hermes_projects = __esm(() => {
 });
 
 // lib/openclaw-sessions.ts
-import { readFile as readFile6 } from "node:fs/promises";
+import { readFile as readFile7 } from "node:fs/promises";
 import { readdirSync as readdirSync4, statSync as statSync5 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
 import { join as join11 } from "node:path";
@@ -5693,7 +5856,7 @@ async function getOpenClawSessionLog(sessionId) {
     return null;
   let content;
   try {
-    content = await readFile6(filePath, "utf-8");
+    content = await readFile7(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -5890,7 +6053,7 @@ var init_openclaw_projects = __esm(() => {
 });
 
 // lib/factory-sessions.ts
-import { readFile as readFile7 } from "node:fs/promises";
+import { readFile as readFile8 } from "node:fs/promises";
 import { readdirSync as readdirSync5, statSync as statSync6 } from "node:fs";
 import { homedir as homedir14 } from "node:os";
 import { join as join13 } from "node:path";
@@ -6081,7 +6244,7 @@ async function getFactorySessionLog(sessionId) {
     return null;
   let content;
   try {
-    content = await readFile7(filePath, "utf-8");
+    content = await readFile8(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -6485,7 +6648,7 @@ var init_devin_projects = __esm(() => {
 });
 
 // lib/antigravity-sessions.ts
-import { readFile as readFile8 } from "node:fs/promises";
+import { readFile as readFile9 } from "node:fs/promises";
 import { readdirSync as readdirSync6, statSync as statSync7 } from "node:fs";
 import { homedir as homedir16 } from "node:os";
 import { join as join15 } from "node:path";
@@ -6645,7 +6808,7 @@ async function getAntigravitySessionLog(conversationId) {
     return null;
   let content;
   try {
-    content = await readFile8(filePath, "utf-8");
+    content = await readFile9(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -7321,7 +7484,7 @@ async function resolveSubagentPath(projectsPath, projectName, sessionId, agentId
 var init_resolve_subagent_path = () => {};
 
 // lib/log-entries.ts
-import { readFile as readFile9 } from "fs/promises";
+import { readFile as readFile10 } from "fs/promises";
 import { join as join20 } from "path";
 function formatTimestamp(date) {
   const base = formatDate(date);
@@ -7521,7 +7684,7 @@ async function parseSessionLog(projectName, sessionId) {
   const projectDir = resolveProjectPath(projectName);
   const projectsPath = getClaudeProjectsPath();
   const filePath = join20(projectDir, `${sessionId}.jsonl`);
-  const fileContent = await readFile9(filePath, "utf-8");
+  const fileContent = await readFile10(filePath, "utf-8");
   const { entries: sessionEntries, rawLines: sessionRawLines, subagentIds } = await parseFileContent(fileContent, "session");
   if (subagentIds.length === 0) {
     return { entries: sessionEntries, rawLines: sessionRawLines, subagentIds: [] };
@@ -7531,7 +7694,7 @@ async function parseSessionLog(projectName, sessionId) {
     const agentPath = await resolveSubagentPath(projectsPath, projectName, sessionId, agentId);
     if (!agentPath)
       return null;
-    const agentContent = await readFile9(agentPath, "utf-8");
+    const agentContent = await readFile10(agentPath, "utf-8");
     const { entries, rawLines } = await parseFileContent(agentContent, agentSource);
     return { entries, rawLines };
   }), SUBAGENT_CONCURRENCY);
@@ -7557,13 +7720,13 @@ var init_log_entries = __esm(() => {
 });
 
 // lib/codex-sessions.ts
-import { readFileSync as readFileSync5, readdirSync as readdirSync7, existsSync as existsSync6, writeFileSync as writeFileSync3, mkdirSync as mkdirSync4, statSync as statSync8 } from "node:fs";
-import { readFile as readFile10 } from "node:fs/promises";
+import { readFileSync as readFileSync5, readdirSync as readdirSync7, existsSync as existsSync7, writeFileSync as writeFileSync3, mkdirSync as mkdirSync4, statSync as statSync8 } from "node:fs";
+import { readFile as readFile11 } from "node:fs/promises";
 import { dirname as dirname4, join as join21 } from "node:path";
 import { homedir as homedir18 } from "node:os";
 function readCache() {
   try {
-    if (!existsSync6(CACHE_PATH))
+    if (!existsSync7(CACHE_PATH))
       return {};
     return JSON.parse(readFileSync5(CACHE_PATH, "utf-8"));
   } catch {
@@ -7591,7 +7754,7 @@ function dirSearch(dir, sessionId) {
 function findCodexTranscript(sessionId) {
   const cache = readCache();
   const cached = cache[sessionId];
-  if (cached && existsSync6(cached))
+  if (cached && existsSync7(cached))
     return cached;
   const root = join21(homedir18(), ".codex", "sessions");
   const today = new Date;
@@ -7832,7 +7995,7 @@ async function getCodexSessionLog(sessionId) {
   const filePath = findCodexTranscript(sessionId);
   if (!filePath)
     return null;
-  const fileContent = await readFile10(filePath, "utf-8");
+  const fileContent = await readFile11(filePath, "utf-8");
   const { entries, rawLines, cwd } = await parseCodexLog(fileContent, "session");
   return { entries, rawLines, cwd, filePath };
 }
@@ -7884,8 +8047,8 @@ var init_resolve_permission_mode = __esm(() => {
 });
 
 // lib/copilot-sessions.ts
-import { readFileSync as readFileSync7, readdirSync as readdirSync8, existsSync as existsSync7, statSync as statSync9 } from "node:fs";
-import { readFile as readFile11 } from "node:fs/promises";
+import { readFileSync as readFileSync7, readdirSync as readdirSync8, existsSync as existsSync8, statSync as statSync9 } from "node:fs";
+import { readFile as readFile12 } from "node:fs/promises";
 import { join as join22, resolve as resolve8, sep as sep2 } from "node:path";
 import { homedir as homedir19 } from "node:os";
 function getCopilotHome() {
@@ -7913,13 +8076,13 @@ function findCopilotTranscript(sessionId) {
   const candidate = resolveSessionFile(sessionId, "events.jsonl");
   if (!candidate)
     return null;
-  return existsSync7(candidate) ? candidate : null;
+  return existsSync8(candidate) ? candidate : null;
 }
 function findCopilotWorkspace(sessionId) {
   const candidate = resolveSessionFile(sessionId, "workspace.yaml");
   if (!candidate)
     return null;
-  return existsSync7(candidate) ? candidate : null;
+  return existsSync8(candidate) ? candidate : null;
 }
 function readYamlScalar(path3, key) {
   try {
@@ -8086,7 +8249,7 @@ async function getCopilotSessionLog(sessionId) {
     return null;
   let fileContent;
   try {
-    fileContent = await readFile11(filePath, "utf-8");
+    fileContent = await readFile12(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -8101,8 +8264,8 @@ var init_copilot_sessions = __esm(() => {
 });
 
 // lib/cursor-sessions.ts
-import { readFileSync as readFileSync8, readdirSync as readdirSync9, existsSync as existsSync8, statSync as statSync10 } from "node:fs";
-import { readFile as readFile12 } from "node:fs/promises";
+import { readFileSync as readFileSync8, readdirSync as readdirSync9, existsSync as existsSync9, statSync as statSync10 } from "node:fs";
+import { readFile as readFile13 } from "node:fs/promises";
 import { basename as basename3, join as join23, resolve as resolve9, sep as sep3 } from "node:path";
 import { homedir as homedir20 } from "node:os";
 function getCursorHome2() {
@@ -8124,7 +8287,7 @@ function getCursorSessionDir(sessionId) {
     const transcriptRoot = resolve9(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2);
     if (candidate === transcriptRoot || !candidate.startsWith(`${transcriptRoot}${sep3}`))
       continue;
-    if (existsSync8(candidate))
+    if (existsSync9(candidate))
       return candidate;
   }
   for (const sub of LEGACY_SESSION_ROOT_CANDIDATES2) {
@@ -8132,7 +8295,7 @@ function getCursorSessionDir(sessionId) {
     const candidate = resolve9(root, sessionId);
     if (candidate === root || !candidate.startsWith(`${root}${sep3}`))
       continue;
-    if (existsSync8(candidate))
+    if (existsSync9(candidate))
       return candidate;
   }
   return null;
@@ -8142,11 +8305,11 @@ function findCursorTranscript(sessionId) {
   if (!dir)
     return null;
   const newCandidate = join23(dir, `${basename3(dir)}.jsonl`);
-  if (existsSync8(newCandidate))
+  if (existsSync9(newCandidate))
     return newCandidate;
   for (const name of LEGACY_TRANSCRIPT_FILE_CANDIDATES2) {
     const candidate = join23(dir, name);
-    if (existsSync8(candidate))
+    if (existsSync9(candidate))
       return candidate;
   }
   return null;
@@ -8341,7 +8504,7 @@ async function getCursorSessionLog(sessionId) {
     return null;
   let fileContent;
   try {
-    fileContent = await readFile12(filePath, "utf-8");
+    fileContent = await readFile13(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -8357,8 +8520,8 @@ var init_cursor_sessions = __esm(() => {
 });
 
 // lib/pi-sessions.ts
-import { readFileSync as readFileSync9, readdirSync as readdirSync10, existsSync as existsSync9, statSync as statSync11 } from "node:fs";
-import { readFile as readFile13 } from "node:fs/promises";
+import { readFileSync as readFileSync9, readdirSync as readdirSync10, existsSync as existsSync10, statSync as statSync11 } from "node:fs";
+import { readFile as readFile14 } from "node:fs/promises";
 import { join as join24, resolve as resolve10, sep as sep4 } from "node:path";
 import { homedir as homedir21 } from "node:os";
 function getPiSessionStateRoot() {
@@ -8394,7 +8557,7 @@ function findPiTranscript(sessionId) {
       const candidate = resolve10(cwdPath, f);
       if (!candidate.startsWith(`${cwdPath}${sep4}`))
         continue;
-      if (existsSync9(candidate))
+      if (existsSync10(candidate))
         return candidate;
     }
   }
@@ -8520,7 +8683,7 @@ async function getPiSessionLog(sessionId) {
     return null;
   let fileContent;
   try {
-    fileContent = await readFile13(filePath, "utf-8");
+    fileContent = await readFile14(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -8621,6 +8784,288 @@ async function readStdinPayload2(maxBytes = 1048576) {
   return { payload, oversized, readError };
 }
 
+// src/hooks/cloud-managed-policies.ts
+import { createHash as createHash2 } from "node:crypto";
+import { existsSync as existsSync11, readFileSync as readFileSync10, realpathSync } from "node:fs";
+import { homedir as homedir22 } from "node:os";
+import { isAbsolute as isAbsolute2, relative as relative3, resolve as resolve11 } from "node:path";
+function cloudManagedPolicyRoot() {
+  return process.env.FAILPROOFAI_CLOUD_POLICY_DIR ?? resolve11(homedir22(), ".failproofai", "policies", "cloud-managed");
+}
+function parseManifest(value) {
+  if (!value || typeof value !== "object")
+    throw new Error("active manifest is not an object");
+  const manifest = value;
+  if (manifest.schemaVersion !== ACTIVE_SCHEMA_VERSION) {
+    throw new Error(`unsupported active manifest schema ${String(manifest.schemaVersion)}`);
+  }
+  if (!Number.isSafeInteger(manifest.generation) || (manifest.generation ?? -1) < 0) {
+    throw new Error("active manifest generation is invalid");
+  }
+  if (!Array.isArray(manifest.policies))
+    throw new Error("active manifest policies is not an array");
+  return manifest;
+}
+function resolveManagedPath(root, candidate) {
+  if (!candidate || isAbsolute2(candidate))
+    throw new Error(`unsafe managed policy path ${JSON.stringify(candidate)}`);
+  const absolute = resolve11(root, candidate);
+  const lexicalRelative = relative3(root, absolute);
+  if (lexicalRelative.startsWith("..") || isAbsolute2(lexicalRelative)) {
+    throw new Error(`managed policy path escapes its root: ${JSON.stringify(candidate)}`);
+  }
+  const realRoot = realpathSync(root);
+  const realFile = realpathSync(absolute);
+  const physicalRelative = relative3(realRoot, realFile);
+  if (physicalRelative.startsWith("..") || isAbsolute2(physicalRelative)) {
+    throw new Error(`managed policy symlink escapes its root: ${JSON.stringify(candidate)}`);
+  }
+  return realFile;
+}
+function readActiveCloudManagedPolicies() {
+  const root = cloudManagedPolicyRoot();
+  const activePath = resolve11(root, "active.json");
+  if (!existsSync11(activePath))
+    return [];
+  let raw;
+  try {
+    raw = JSON.parse(readFileSync10(activePath, "utf8"));
+  } catch (err) {
+    throw new Error(`failed to read cloud-managed active manifest: ${err instanceof Error ? err.message : String(err)}`);
+  }
+  const manifest = parseManifest(raw);
+  const seen = new Set;
+  return manifest.policies.map((policy) => {
+    if (!POLICY_ID_RE.test(policy.id) || policy.id === "." || policy.id === "..") {
+      throw new Error(`unsafe cloud-managed policy id ${JSON.stringify(policy.id)}`);
+    }
+    if (!Number.isSafeInteger(policy.revision) || policy.revision < 0) {
+      throw new Error(`invalid revision for cloud-managed policy ${policy.id}`);
+    }
+    if (!SHA256_RE.test(policy.sha256)) {
+      throw new Error(`invalid SHA-256 for cloud-managed policy ${policy.id}`);
+    }
+    if (seen.has(policy.id))
+      throw new Error(`duplicate cloud-managed policy id ${policy.id}`);
+    seen.add(policy.id);
+    const path3 = resolveManagedPath(root, policy.path);
+    const bytes = readFileSync10(path3);
+    const actual = createHash2("sha256").update(bytes).digest("hex");
+    if (actual !== policy.sha256) {
+      throw new Error(`cloud-managed policy ${policy.id} failed integrity verification: expected ${policy.sha256}, got ${actual}`);
+    }
+    if (policy.effect !== undefined && policy.effect !== "enforce" && policy.effect !== "observe") {
+      throw new Error(`unknown effect ${JSON.stringify(policy.effect)} for cloud-managed policy ${policy.id}`);
+    }
+    return {
+      id: policy.id,
+      revision: policy.revision,
+      effect: policy.effect ?? "enforce",
+      sha256: policy.sha256,
+      path: path3,
+      generation: manifest.generation
+    };
+  });
+}
+var ACTIVE_SCHEMA_VERSION = 1, SHA256_RE, POLICY_ID_RE;
+var init_cloud_managed_policies = __esm(() => {
+  SHA256_RE = /^[a-f0-9]{64}$/;
+  POLICY_ID_RE = /^[A-Za-z0-9._-]{1,128}$/;
+});
+
+// lib/atomic-write.ts
+import {
+  chmodSync,
+  existsSync as existsSync12,
+  mkdirSync as mkdirSync5,
+  renameSync as renameSync3,
+  rmSync,
+  statSync as statSync12,
+  writeFileSync as writeFileSync4
+} from "node:fs";
+import { dirname as dirname5 } from "node:path";
+import { randomBytes } from "node:crypto";
+function writeJsonAtomically(filePath, value, opts = {}) {
+  const mode = opts.mode ?? 384;
+  const dirMode = opts.dirMode ?? 448;
+  const dir = dirname5(filePath);
+  if (!existsSync12(dir))
+    mkdirSync5(dir, { recursive: true, mode: dirMode });
+  const tmp = `${filePath}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
+  try {
+    writeFileSync4(tmp, JSON.stringify(value, null, 2), { mode });
+    try {
+      if ((statSync12(tmp).mode & 63) !== 0)
+        chmodSync(tmp, mode);
+    } catch {}
+    renameSync3(tmp, filePath);
+    try {
+      if ((statSync12(filePath).mode & 63) !== 0)
+        chmodSync(filePath, mode);
+    } catch {}
+  } catch (err) {
+    try {
+      rmSync(tmp, { force: true });
+    } catch {}
+    throw err;
+  }
+}
+var init_atomic_write = () => {};
+
+// src/hooks/session-pause.ts
+import { existsSync as existsSync13, mkdirSync as mkdirSync6, readdirSync as readdirSync11, readFileSync as readFileSync11, rmSync as rmSync2 } from "node:fs";
+import { homedir as homedir23 } from "node:os";
+import { createHash as createHash3 } from "node:crypto";
+import { join as join25, resolve as resolve12 } from "node:path";
+function pauseStateDir() {
+  const override = process.env.FAILPROOFAI_STATE_DIR;
+  if (override)
+    return resolve12(override, "sessions");
+  return join25(homedir23(), ".failproofai", "state", "sessions");
+}
+function pauseFilePath(sessionId) {
+  const digest = createHash3("sha256").update(sessionId).digest("hex").slice(0, 32);
+  return join25(pauseStateDir(), `${digest}.json`);
+}
+function parsePauseDuration(input, ceilingMs = PAUSE_CEILING_MS) {
+  if (input === undefined || input === "")
+    return Math.min(PAUSE_DEFAULT_MS, ceilingMs);
+  const match = /^(\d+)\s*(s|m|h)?$/i.exec(input.trim());
+  if (!match) {
+    throw new Error(`Invalid duration ${JSON.stringify(input)}. Use e.g. 30m, 2h, 90s (a bare number means minutes).`);
+  }
+  const value = Number(match[1]);
+  const unit = (match[2] ?? "m").toLowerCase();
+  const ms = unit === "s" ? value * 1000 : unit === "h" ? value * 3600000 : value * 60000;
+  if (ms <= 0)
+    throw new Error("Duration must be greater than zero.");
+  if (ms > ceilingMs) {
+    throw new Error(`Duration ${input} exceeds the maximum pause of ${formatDuration2(ceilingMs)}.`);
+  }
+  return ms;
+}
+function formatDuration2(ms) {
+  if (ms < 60000)
+    return `${Math.round(ms / 1000)}s`;
+  const minutes = Math.round(ms / 60000);
+  if (minutes < 60)
+    return `${minutes}m`;
+  const hours = Math.floor(minutes / 60);
+  const rest = minutes % 60;
+  return rest === 0 ? `${hours}h` : `${hours}h${rest}m`;
+}
+function parseStored(raw) {
+  if (!raw || typeof raw !== "object")
+    return null;
+  const p = raw;
+  if (p.schemaVersion !== SCHEMA_VERSION)
+    return null;
+  if (typeof p.sessionId !== "string" || p.sessionId.length === 0)
+    return null;
+  if (!Number.isFinite(p.pausedAt) || !Number.isFinite(p.expiresAt))
+    return null;
+  return {
+    schemaVersion: SCHEMA_VERSION,
+    sessionId: p.sessionId,
+    pausedAt: p.pausedAt,
+    expiresAt: p.expiresAt,
+    setBy: typeof p.setBy === "string" ? p.setBy : "unknown",
+    ...typeof p.cwd === "string" ? { cwd: p.cwd } : {}
+  };
+}
+function readActivePause(sessionId, now = Date.now()) {
+  if (!sessionId)
+    return null;
+  try {
+    const path3 = pauseFilePath(sessionId);
+    if (!existsSync13(path3))
+      return null;
+    const stored = parseStored(JSON.parse(readFileSync11(path3, "utf8")));
+    if (!stored)
+      return null;
+    if (stored.expiresAt <= now)
+      return null;
+    const { schemaVersion: _ignored, ...pause } = stored;
+    return pause;
+  } catch {
+    return null;
+  }
+}
+function writePause(opts) {
+  const now = opts.now ?? Date.now();
+  const pause = {
+    sessionId: opts.sessionId,
+    pausedAt: now,
+    expiresAt: now + opts.durationMs,
+    setBy: opts.setBy ?? "cli",
+    ...opts.cwd ? { cwd: opts.cwd } : {}
+  };
+  mkdirSync6(pauseStateDir(), { recursive: true, mode: 448 });
+  writeJsonAtomically(pauseFilePath(opts.sessionId), { schemaVersion: SCHEMA_VERSION, ...pause });
+  return pause;
+}
+function clearPause(sessionId) {
+  const path3 = pauseFilePath(sessionId);
+  if (!existsSync13(path3))
+    return false;
+  try {
+    rmSync2(path3);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function listActivePauses(now = Date.now()) {
+  const dir = pauseStateDir();
+  if (!existsSync13(dir))
+    return [];
+  const out = [];
+  let names;
+  try {
+    names = readdirSync11(dir);
+  } catch {
+    return [];
+  }
+  for (const name of names) {
+    if (!name.endsWith(".json"))
+      continue;
+    try {
+      const stored = parseStored(JSON.parse(readFileSync11(join25(dir, name), "utf8")));
+      if (!stored || stored.expiresAt <= now)
+        continue;
+      const { schemaVersion: _ignored, ...pause } = stored;
+      out.push(pause);
+    } catch {}
+  }
+  return out.sort((a, b) => b.pausedAt - a.pausedAt);
+}
+function resolveSessionForCwd(cwd, maxAgeMs = 12 * 3600000, now = Date.now()) {
+  let best = null;
+  let entries;
+  try {
+    entries = getAllHookActivityEntries();
+  } catch {
+    return null;
+  }
+  for (const entry of entries) {
+    if (!entry.sessionId || entry.cwd !== cwd)
+      continue;
+    if (now - entry.timestamp > maxAgeMs)
+      continue;
+    if (!best || entry.timestamp > best.timestamp) {
+      best = { sessionId: entry.sessionId, timestamp: entry.timestamp };
+    }
+  }
+  return best?.sessionId ?? null;
+}
+var SCHEMA_VERSION = 1, PAUSE_DEFAULT_MS, PAUSE_CEILING_MS;
+var init_session_pause = __esm(() => {
+  init_atomic_write();
+  init_hook_activity_store();
+  PAUSE_DEFAULT_MS = 30 * 60000;
+  PAUSE_CEILING_MS = 8 * 60 * 60000;
+});
+
 // src/hooks/handler.ts
 var exports_handler = {};
 __export(exports_handler, {
@@ -8661,6 +9106,24 @@ function canonicalizeEventType(raw, cli) {
   }
   return raw;
 }
+async function runObserved(hook, ctx, hookName, eventType, cli) {
+  try {
+    return await Promise.race([
+      hook.fn(ctx),
+      new Promise((_, reject) => setTimeout(() => reject(new Error("timeout")), 1e4))
+    ]);
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    trackHookEvent2(getInstanceId2(), "custom_hook_error", {
+      hook_name: hookName,
+      error_type: msg === "timeout" ? "timeout" : "exception",
+      event_type: eventType,
+      cli,
+      is_observe_mode: true
+    });
+    return { decision: "allow" };
+  }
+}
 async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts) {
   const startTime = performance.now();
   try {
@@ -8702,6 +9165,10 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
     let config;
     let customHooksList = [];
     let conventionHookNames = new Set;
+    let activePause = null;
+    const policyAttribution = new Map;
+    let cloudGeneration;
+    const observedResults = [];
     if (opts?.forceDecision) {
       config = { enabledPolicies: [] };
       clearPolicies();
@@ -8710,23 +9177,49 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
     } else {
       config = readMergedHooksConfig(session.cwd);
       clearPolicies();
-      registerBuiltinPolicies(config.enabledPolicies);
-      const loadResult = await loadAllCustomHooks(config.customPoliciesPaths ?? config.customPoliciesPath, {
+      activePause = readActivePause(session.sessionId);
+      registerBuiltinPolicies(activePause ? [] : config.enabledPolicies);
+      const cloudManagedPolicies = readActiveCloudManagedPolicies();
+      cloudGeneration = cloudManagedPolicies[0]?.generation;
+      const configuredCustomPaths = config.customPoliciesPaths ?? config.customPoliciesPath;
+      const allExplicitPaths = cloudManagedPolicies.length === 0 ? configuredCustomPaths : [
+        ...typeof configuredCustomPaths === "string" ? [configuredCustomPaths] : configuredCustomPaths ?? [],
+        ...cloudManagedPolicies.map((policy) => policy.path)
+      ];
+      const loadResult = await loadAllCustomHooks(allExplicitPaths, {
         sessionCwd: session.cwd,
-        customPoliciesEnabled: config.customPoliciesEnabled
+        customPoliciesEnabled: config.customPoliciesEnabled,
+        ...cloudManagedPolicies.length > 0 ? { cloudManagedPolicies } : {}
       });
       customHooksList = loadResult.hooks;
       const disabledCustomPolicies = new Set(config.disabledCustomPolicies ?? []);
       conventionHookNames = new Set(loadResult.conventionSources.flatMap((s) => s.hookNames));
       for (const hook of customHooksList) {
-        const policyId = hook.__policyId;
-        if (policyId && disabledCustomPolicies.has(policyId))
+        const taggedHook = hook;
+        const policyId = taggedHook.__policyId;
+        const cloudManaged = taggedHook.__cloudManaged;
+        if (!cloudManaged && policyId && disabledCustomPolicies.has(policyId))
+          continue;
+        if (!cloudManaged && activePause)
           continue;
         const hookName = hook.name;
         const conventionScope = hook.__conventionScope;
         const isConvention = !!conventionScope;
-        const prefix = isConvention ? `.failproofai-${conventionScope}` : "custom";
+        const prefix = cloudManaged ? `cloud/${cloudManaged.id}@${cloudManaged.revision}` : isConvention ? `.failproofai-${conventionScope}` : "custom";
+        const observeOnly = cloudManaged?.effect === "observe";
         const fn = async (ctx) => {
+          if (observeOnly) {
+            const shadow = await runObserved(hook, ctx, hookName, eventType, cli);
+            if (shadow.decision !== "allow") {
+              observedResults.push({
+                policyId: cloudManaged.id,
+                revision: cloudManaged.revision,
+                decision: shadow.decision,
+                reason: shadow.reason ?? null
+              });
+            }
+            return { decision: "allow" };
+          }
           try {
             const result2 = await Promise.race([
               hook.fn(ctx),
@@ -8748,7 +9241,12 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
             return { decision: "allow" };
           }
         };
-        registerPolicy(`${prefix}/${hookName}`, hook.description ?? "", fn, hook.match ?? {}, -1);
+        const registeredName = `${prefix}/${hookName}`;
+        policyAttribution.set(registeredName, {
+          source: cloudManaged ? "cloud" : isConvention ? "convention" : "custom",
+          ...cloudManaged ? { cloudPolicyId: cloudManaged.id, cloudRevision: cloudManaged.revision } : {}
+        });
+        registerPolicy(registeredName, hook.description ?? "", fn, hook.match ?? {}, -1);
       }
       if (customHooksList.length > 0) {
         trackHookEvent2(getInstanceId2(), "custom_hooks_loaded", {
@@ -8789,7 +9287,18 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
       transcriptPath: session.transcriptPath,
       cwd: session.cwd,
       permissionMode: session.permissionMode,
-      hookEventName: session.hookEventName
+      hookEventName: session.hookEventName,
+      ...result.policyName ? (() => {
+        const attribution = policyAttribution.get(result.policyName);
+        return {
+          policySource: attribution?.source ?? "builtin",
+          ...attribution?.cloudPolicyId ? { cloudPolicyId: attribution.cloudPolicyId } : {},
+          ...attribution?.cloudRevision !== undefined ? { cloudRevision: attribution.cloudRevision } : {}
+        };
+      })() : {},
+      ...cloudGeneration !== undefined ? { cloudGeneration } : {},
+      ...observedResults.length > 0 ? { observed: observedResults } : {},
+      ...activePause ? { pausedBy: activePause.setBy, pauseExpiresAt: activePause.expiresAt } : {}
     };
     try {
       persistHookActivity(activityEntry);
@@ -8869,22 +9378,24 @@ var init_handler = __esm(() => {
   init_resolve_transcript_path();
   init_telemetry_id2();
   init_hook_logger();
+  init_cloud_managed_policies();
+  init_session_pause();
 });
 
 // scripts/install-telemetry.mjs
 import { createHmac, randomUUID } from "node:crypto";
 import { execSync as execSync4 } from "node:child_process";
-import { readFileSync as readFileSync10, writeFileSync as writeFileSync4, mkdirSync as mkdirSync5 } from "node:fs";
-import { homedir as homedir22, platform, arch, hostname, cpus } from "node:os";
-import { join as join25 } from "node:path";
+import { readFileSync as readFileSync12, writeFileSync as writeFileSync5, mkdirSync as mkdirSync7 } from "node:fs";
+import { homedir as homedir24, platform, arch, hostname, cpus } from "node:os";
+import { join as join26 } from "node:path";
 function hashToId3(raw) {
   return createHmac("sha256", NAMESPACE3).update(raw).digest("hex");
 }
 function getInstanceId3() {
-  const idDir = join25(homedir22(), ".failproofai");
-  const idFile = join25(idDir, "instance-id");
+  const idDir = join26(homedir24(), ".failproofai");
+  const idFile = join26(idDir, "instance-id");
   try {
-    const existing = readFileSync10(idFile, "utf-8").trim();
+    const existing = readFileSync12(idFile, "utf-8").trim();
     if (existing)
       return existing;
   } catch {}
@@ -8893,7 +9404,7 @@ function getInstanceId3() {
     if (p === "linux") {
       for (const machineIdPath of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
         try {
-          const id2 = readFileSync10(machineIdPath, "utf-8").trim();
+          const id2 = readFileSync12(machineIdPath, "utf-8").trim();
           if (id2)
             return hashToId3(id2);
         } catch {}
@@ -8916,7 +9427,7 @@ function getInstanceId3() {
   try {
     const sysProps = [
       hostname(),
-      homedir22(),
+      homedir24(),
       platform(),
       arch(),
       cpus()[0]?.model ?? ""
@@ -8925,8 +9436,8 @@ function getInstanceId3() {
   } catch {}
   const id = randomUUID();
   try {
-    mkdirSync5(idDir, { recursive: true });
-    writeFileSync4(idFile, id, "utf-8");
+    mkdirSync7(idDir, { recursive: true });
+    writeFileSync5(idFile, id, "utf-8");
   } catch {}
   return id;
 }
@@ -8962,15 +9473,15 @@ __export(exports_install_check, {
   compareSemver: () => compareSemver,
   checkHooks: () => checkHooks
 });
-import { existsSync as existsSync10, readFileSync as readFileSync11, writeFileSync as writeFileSync5, mkdirSync as mkdirSync6 } from "node:fs";
-import { resolve as resolve11 } from "node:path";
-import { platform as platform2, arch as arch2, release, homedir as homedir23, hostname as hostname2 } from "node:os";
+import { existsSync as existsSync14, readFileSync as readFileSync13, writeFileSync as writeFileSync6, mkdirSync as mkdirSync8 } from "node:fs";
+import { resolve as resolve13 } from "node:path";
+import { platform as platform2, arch as arch2, release, homedir as homedir25, hostname as hostname2 } from "node:os";
 import { createHmac as createHmac2 } from "node:crypto";
 function hashToId4(raw) {
   return createHmac2("sha256", NAMESPACE4).update(raw).digest("hex");
 }
 function lastVersionPath() {
-  return resolve11(homedir23(), ".failproofai", "last-version");
+  return resolve13(homedir25(), ".failproofai", "last-version");
 }
 function compareSemver(a, b) {
   const parse = (v) => {
@@ -9017,13 +9528,13 @@ function compareSemver(a, b) {
   return 0;
 }
 function checkHooks() {
-  const hooksConfigPath = resolve11(homedir23(), ".failproofai", "policies-config.json");
-  if (!existsSync10(hooksConfigPath)) {
+  const hooksConfigPath = resolve13(homedir25(), ".failproofai", "policies-config.json");
+  if (!existsSync14(hooksConfigPath)) {
     return { configured: false, registered: false, policyCount: 0 };
   }
   let config;
   try {
-    config = JSON.parse(readFileSync11(hooksConfigPath, "utf8"));
+    config = JSON.parse(readFileSync13(hooksConfigPath, "utf8"));
   } catch {
     return { configured: false, registered: false, policyCount: 0 };
   }
@@ -9031,12 +9542,12 @@ function checkHooks() {
     return { configured: false, registered: false, policyCount: 0 };
   }
   const policyCount = config.enabledPolicies.length;
-  const settingsPath = resolve11(homedir23(), ".claude", "settings.json");
-  if (!existsSync10(settingsPath))
+  const settingsPath = resolve13(homedir25(), ".claude", "settings.json");
+  if (!existsSync14(settingsPath))
     return { configured: true, registered: false, policyCount };
   let settings;
   try {
-    settings = JSON.parse(readFileSync11(settingsPath, "utf8"));
+    settings = JSON.parse(readFileSync13(settingsPath, "utf8"));
   } catch {
     return { configured: true, registered: false, policyCount };
   }
@@ -9060,8 +9571,8 @@ async function maybeReportInstall(version3) {
     const versionFile = lastVersionPath();
     let previousVersion = null;
     try {
-      if (existsSync10(versionFile)) {
-        previousVersion = readFileSync11(versionFile, "utf8").trim() || null;
+      if (existsSync14(versionFile)) {
+        previousVersion = readFileSync13(versionFile, "utf8").trim() || null;
       }
     } catch {}
     if (previousVersion === version3)
@@ -9096,8 +9607,8 @@ async function maybeReportInstall(version3) {
       enabled_policy_count: hooks.policyCount
     }, { version: version3, timeoutMs: REPORT_TIMEOUT_MS }));
     try {
-      mkdirSync6(resolve11(homedir23(), ".failproofai"), { recursive: true });
-      writeFileSync5(versionFile, version3, "utf8");
+      mkdirSync8(resolve13(homedir25(), ".failproofai"), { recursive: true });
+      writeFileSync6(versionFile, version3, "utf8");
     } catch {}
     await Promise.all(events.map((p) => p.catch(() => {})));
   } catch {}
@@ -16099,31 +16610,31 @@ var init_dist = __esm(() => {
 
 // src/hooks/integrations.ts
 import { execSync as execSync5 } from "node:child_process";
-import { readFileSync as readFileSync12, writeFileSync as writeFileSync6, existsSync as existsSync11, mkdirSync as mkdirSync7, unlinkSync as unlinkSync2 } from "node:fs";
-import { resolve as resolve12, dirname as dirname5 } from "node:path";
+import { readFileSync as readFileSync14, writeFileSync as writeFileSync7, existsSync as existsSync15, mkdirSync as mkdirSync9, unlinkSync as unlinkSync2 } from "node:fs";
+import { resolve as resolve14, dirname as dirname6 } from "node:path";
 import { fileURLToPath } from "node:url";
-import { homedir as homedir24 } from "node:os";
+import { homedir as homedir26 } from "node:os";
 function readJsonFile(path3) {
-  if (!existsSync11(path3))
+  if (!existsSync15(path3))
     return {};
-  const raw = readFileSync12(path3, "utf8");
+  const raw = readFileSync14(path3, "utf8");
   return JSON.parse(raw);
 }
 function writeJsonFile(path3, data) {
-  mkdirSync7(dirname5(path3), { recursive: true });
-  writeFileSync6(path3, JSON.stringify(data, null, 2) + `
+  mkdirSync9(dirname6(path3), { recursive: true });
+  writeFileSync7(path3, JSON.stringify(data, null, 2) + `
 `, "utf8");
 }
 function readYamlDoc(path3) {
   try {
-    return existsSync11(path3) ? $parseDocument(readFileSync12(path3, "utf8")) : $parseDocument("");
+    return existsSync15(path3) ? $parseDocument(readFileSync14(path3, "utf8")) : $parseDocument("");
   } catch {
     return $parseDocument("");
   }
 }
 function writeYamlDoc(path3, doc) {
-  mkdirSync7(dirname5(path3), { recursive: true });
-  writeFileSync6(path3, doc.toString(), "utf8");
+  mkdirSync9(dirname6(path3), { recursive: true });
+  writeFileSync7(path3, doc.toString(), "utf8");
 }
 function isMarkedHook(hook) {
   if (!hook || typeof hook !== "object")
@@ -16166,7 +16677,7 @@ function isMarkedCopilotHook(hook) {
   return false;
 }
 function opencodePluginFilePath(settingsPath) {
-  return resolve12(dirname5(settingsPath), "plugins", "failproofai.mjs");
+  return resolve14(dirname6(settingsPath), "plugins", "failproofai.mjs");
 }
 function buildOpenCodePluginShim(binaryPath, scope) {
   const useNpx = scope === "project";
@@ -16381,8 +16892,8 @@ export default async function failproofaiPlugin({ client, directory }) {
 function getPiExtensionPath() {
   const fromEnv = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (fromEnv)
-    return resolve12(fromEnv, "pi-extension");
-  return resolve12(fileURLToPath(import.meta.url), "..", "..", "..", "pi-extension");
+    return resolve14(fromEnv, "pi-extension");
+  return resolve14(fileURLToPath(import.meta.url), "..", "..", "..", "pi-extension");
 }
 function isFailproofaiPiEntry(source) {
   if (typeof source !== "string")
@@ -16393,8 +16904,8 @@ function isFailproofaiPiEntry(source) {
 }
 function makePiProjectRelativeEntry(extPath) {
   const cwd = process.cwd();
-  const cwdResolved = resolve12(cwd);
-  const extResolved = resolve12(extPath);
+  const cwdResolved = resolve14(cwd);
+  const extResolved = resolve14(extPath);
   if (extResolved.startsWith(cwdResolved + "/") || extResolved === cwdResolved) {
     const fromSettingsDir = "../" + extResolved.slice(cwdResolved.length + 1);
     return fromSettingsDir;
@@ -16402,7 +16913,7 @@ function makePiProjectRelativeEntry(extPath) {
   return extResolved;
 }
 function hermesConfigHasHooks(settingsPath) {
-  if (!existsSync11(settingsPath))
+  if (!existsSync15(settingsPath))
     return false;
   try {
     const doc = readYamlDoc(settingsPath);
@@ -16418,13 +16929,13 @@ function hermesConfigHasHooks(settingsPath) {
   return false;
 }
 function unhookedHermesProfiles() {
-  return listHermesProfiles().filter((p) => existsSync11(p.home)).filter((p) => !hermesConfigHasHooks(resolve12(p.home, "config.yaml"))).map((p) => p.name);
+  return listHermesProfiles().filter((p) => existsSync15(p.home)).filter((p) => !hermesConfigHasHooks(resolve14(p.home, "config.yaml"))).map((p) => p.name);
 }
 function getOpenClawPluginPath() {
   const fromEnv = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (fromEnv)
-    return resolve12(fromEnv, "openclaw-plugin");
-  return resolve12(fileURLToPath(import.meta.url), "..", "..", "..", "openclaw-plugin");
+    return resolve14(fromEnv, "openclaw-plugin");
+  return resolve14(fileURLToPath(import.meta.url), "..", "..", "..", "openclaw-plugin");
 }
 function isFailproofaiOpenClawPath(p) {
   if (typeof p !== "string")
@@ -16461,14 +16972,14 @@ var init_integrations = __esm(() => {
     scopes: HOOK_SCOPES,
     eventTypes: CLAUDE_INSTALL_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve12(cwd) : process.cwd();
+      const base = cwd ? resolve14(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve12(homedir24(), ".claude", "settings.json");
+          return resolve14(homedir26(), ".claude", "settings.json");
         case "project":
-          return resolve12(base, ".claude", "settings.json");
+          return resolve14(base, ".claude", "settings.json");
         case "local":
-          return resolve12(base, ".claude", "settings.local.json");
+          return resolve14(base, ".claude", "settings.local.json");
       }
     },
     readSettings(settingsPath) {
@@ -16564,7 +17075,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync11(settingsPath))
+      if (!existsSync15(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -16593,14 +17104,14 @@ var init_integrations = __esm(() => {
     scopes: CODEX_HOOK_SCOPES,
     eventTypes: CODEX_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve12(cwd) : process.cwd();
+      const base = cwd ? resolve14(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve12(homedir24(), ".codex", "hooks.json");
+          return resolve14(homedir26(), ".codex", "hooks.json");
         case "project":
-          return resolve12(base, ".codex", "hooks.json");
+          return resolve14(base, ".codex", "hooks.json");
         case "local":
-          return resolve12(base, ".codex", "hooks.json");
+          return resolve14(base, ".codex", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -16680,7 +17191,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync11(settingsPath))
+      if (!existsSync15(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -16709,14 +17220,14 @@ var init_integrations = __esm(() => {
     scopes: COPILOT_HOOK_SCOPES,
     eventTypes: COPILOT_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve12(cwd) : process.cwd();
+      const base = cwd ? resolve14(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve12(homedir24(), ".copilot", "hooks", "failproofai.json");
+          return resolve14(homedir26(), ".copilot", "hooks", "failproofai.json");
         case "project":
-          return resolve12(base, ".github", "hooks", "failproofai.json");
+          return resolve14(base, ".github", "hooks", "failproofai.json");
         case "local":
-          return resolve12(base, ".github", "hooks", "failproofai.json");
+          return resolve14(base, ".github", "hooks", "failproofai.json");
       }
     },
     readSettings(settingsPath) {
@@ -16794,7 +17305,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync11(settingsPath))
+      if (!existsSync15(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -16823,14 +17334,14 @@ var init_integrations = __esm(() => {
     scopes: CURSOR_HOOK_SCOPES,
     eventTypes: CURSOR_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve12(cwd) : process.cwd();
+      const base = cwd ? resolve14(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve12(homedir24(), ".cursor", "hooks.json");
+          return resolve14(homedir26(), ".cursor", "hooks.json");
         case "project":
-          return resolve12(base, ".cursor", "hooks.json");
+          return resolve14(base, ".cursor", "hooks.json");
         case "local":
-          return resolve12(base, ".cursor", "hooks.json");
+          return resolve14(base, ".cursor", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -16897,7 +17408,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync11(settingsPath))
+      if (!existsSync15(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -16922,14 +17433,14 @@ var init_integrations = __esm(() => {
     scopes: OPENCODE_HOOK_SCOPES,
     eventTypes: OPENCODE_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve12(cwd) : process.cwd();
+      const base = cwd ? resolve14(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve12(homedir24(), ".config", "opencode", "opencode.json");
+          return resolve14(homedir26(), ".config", "opencode", "opencode.json");
         case "project":
-          return resolve12(base, ".opencode", "opencode.json");
+          return resolve14(base, ".opencode", "opencode.json");
         case "local":
-          return resolve12(base, ".opencode", "opencode.json");
+          return resolve14(base, ".opencode", "opencode.json");
       }
     },
     readSettings(settingsPath) {
@@ -16940,7 +17451,7 @@ var init_integrations = __esm(() => {
     },
     buildHookEntry(_binaryPath, _eventType, scope) {
       if (scope === "user") {
-        const abs = resolve12(homedir24(), ".config", "opencode", "plugins", "failproofai.mjs");
+        const abs = resolve14(homedir26(), ".config", "opencode", "plugins", "failproofai.mjs");
         return { spec: `file://${abs}`, [FAILPROOFAI_HOOK_MARKER]: true };
       }
       return { spec: OPENCODE_PLUGIN_REL_PATH, [FAILPROOFAI_HOOK_MARKER]: true };
@@ -16955,10 +17466,10 @@ var init_integrations = __esm(() => {
     writeHookEntries(settings, binaryPath, scope) {
       const s = settings;
       const effectiveScope = scope ?? "project";
-      const settingsPath = effectiveScope === "user" ? resolve12(homedir24(), ".config", "opencode", "opencode.json") : resolve12(process.cwd(), ".opencode", "opencode.json");
+      const settingsPath = effectiveScope === "user" ? resolve14(homedir26(), ".config", "opencode", "opencode.json") : resolve14(process.cwd(), ".opencode", "opencode.json");
       const pluginPath = opencodePluginFilePath(settingsPath);
-      mkdirSync7(dirname5(pluginPath), { recursive: true });
-      writeFileSync6(pluginPath, buildOpenCodePluginShim(binaryPath, effectiveScope), "utf8");
+      mkdirSync9(dirname6(pluginPath), { recursive: true });
+      writeFileSync7(pluginPath, buildOpenCodePluginShim(binaryPath, effectiveScope), "utf8");
       if (!Array.isArray(s.plugin))
         s.plugin = [];
       const desired = effectiveScope === "user" ? `file://${pluginPath}` : OPENCODE_PLUGIN_REL_PATH;
@@ -16981,9 +17492,9 @@ var init_integrations = __esm(() => {
       }
       this.writeSettings(settingsPath, settings);
       const pluginPath = opencodePluginFilePath(settingsPath);
-      if (existsSync11(pluginPath)) {
+      if (existsSync15(pluginPath)) {
         try {
-          const content = readFileSync12(pluginPath, "utf8");
+          const content = readFileSync14(pluginPath, "utf8");
           if (content.includes(FAILPROOFAI_HOOK_MARKER)) {
             unlinkSync2(pluginPath);
             if (removed === 0)
@@ -16995,7 +17506,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync11(settingsPath))
+      if (!existsSync15(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -17005,9 +17516,9 @@ var init_integrations = __esm(() => {
         if (!hasEntry)
           return false;
         const pluginPath = opencodePluginFilePath(settingsPath);
-        if (!existsSync11(pluginPath))
+        if (!existsSync15(pluginPath))
           return false;
-        const content = readFileSync12(pluginPath, "utf8");
+        const content = readFileSync14(pluginPath, "utf8");
         return content.includes(FAILPROOFAI_HOOK_MARKER);
       } catch {
         return false;
@@ -17023,14 +17534,14 @@ var init_integrations = __esm(() => {
     scopes: PI_HOOK_SCOPES,
     eventTypes: PI_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve12(cwd) : process.cwd();
+      const base = cwd ? resolve14(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve12(homedir24(), ".pi", "agent", "settings.json");
+          return resolve14(homedir26(), ".pi", "agent", "settings.json");
         case "project":
-          return resolve12(base, ".pi", "settings.json");
+          return resolve14(base, ".pi", "settings.json");
         case "local":
-          return resolve12(base, ".pi", "settings.json");
+          return resolve14(base, ".pi", "settings.json");
       }
     },
     readSettings(settingsPath) {
@@ -17072,7 +17583,7 @@ var init_integrations = __esm(() => {
       }
     },
     removeHooksFromFile(settingsPath) {
-      if (!existsSync11(settingsPath))
+      if (!existsSync15(settingsPath))
         return 0;
       const settings = this.readSettings(settingsPath);
       if (!Array.isArray(settings.packages))
@@ -17087,7 +17598,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync11(settingsPath))
+      if (!existsSync15(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -17108,10 +17619,10 @@ var init_integrations = __esm(() => {
     scopes: HERMES_HOOK_SCOPES,
     eventTypes: HERMES_HOOK_EVENT_TYPES,
     getSettingsPath() {
-      return resolve12(hermesRoot(), "config.yaml");
+      return resolve14(hermesRoot(), "config.yaml");
     },
     getSettingsPaths() {
-      return listHermesProfiles().map((p) => resolve12(p.home, "config.yaml"));
+      return listHermesProfiles().map((p) => resolve14(p.home, "config.yaml"));
     },
     readSettings(settingsPath) {
       return readYamlDoc(settingsPath);
@@ -17146,7 +17657,7 @@ var init_integrations = __esm(() => {
       doc.set("hooks_auto_accept", true);
     },
     removeHooksFromFile(settingsPath) {
-      if (!existsSync11(settingsPath))
+      if (!existsSync15(settingsPath))
         return 0;
       const doc = readYamlDoc(settingsPath);
       const js = doc.toJS() ?? {};
@@ -17191,7 +17702,7 @@ var init_integrations = __esm(() => {
     scopes: OPENCLAW_HOOK_SCOPES,
     eventTypes: OPENCLAW_HOOK_EVENT_TYPES,
     getSettingsPath() {
-      return resolve12(homedir24(), ".openclaw", "openclaw.json");
+      return resolve14(homedir26(), ".openclaw", "openclaw.json");
     },
     readSettings(settingsPath) {
       return readJsonFile(settingsPath);
@@ -17236,7 +17747,7 @@ var init_integrations = __esm(() => {
       hooks.allowConversationAccess = true;
     },
     removeHooksFromFile(settingsPath) {
-      if (!existsSync11(settingsPath))
+      if (!existsSync15(settingsPath))
         return 0;
       const settings = this.readSettings(settingsPath);
       const plugins = settings.plugins;
@@ -17265,7 +17776,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync11(settingsPath))
+      if (!existsSync15(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -17287,14 +17798,14 @@ var init_integrations = __esm(() => {
     scopes: FACTORY_HOOK_SCOPES,
     eventTypes: FACTORY_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve12(cwd) : process.cwd();
+      const base = cwd ? resolve14(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve12(homedir24(), ".factory", "hooks.json");
+          return resolve14(homedir26(), ".factory", "hooks.json");
         case "project":
-          return resolve12(base, ".factory", "hooks.json");
+          return resolve14(base, ".factory", "hooks.json");
         case "local":
-          return resolve12(base, ".factory", "hooks.json");
+          return resolve14(base, ".factory", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -17362,7 +17873,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync11(settingsPath))
+      if (!existsSync15(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -17389,14 +17900,14 @@ var init_integrations = __esm(() => {
     scopes: DEVIN_HOOK_SCOPES,
     eventTypes: DEVIN_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve12(cwd) : process.cwd();
+      const base = cwd ? resolve14(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve12(homedir24(), ".config", "devin", "config.json");
+          return resolve14(homedir26(), ".config", "devin", "config.json");
         case "project":
-          return resolve12(base, ".devin", "config.json");
+          return resolve14(base, ".devin", "config.json");
         case "local":
-          return resolve12(base, ".devin", "config.json");
+          return resolve14(base, ".devin", "config.json");
       }
     },
     readSettings(settingsPath) {
@@ -17468,7 +17979,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync11(settingsPath))
+      if (!existsSync15(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -17498,14 +18009,14 @@ var init_integrations = __esm(() => {
     scopes: ANTIGRAVITY_HOOK_SCOPES,
     eventTypes: ANTIGRAVITY_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve12(cwd) : process.cwd();
+      const base = cwd ? resolve14(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve12(homedir24(), ".gemini", "config", "hooks.json");
+          return resolve14(homedir26(), ".gemini", "config", "hooks.json");
         case "project":
-          return resolve12(base, ".agents", "hooks.json");
+          return resolve14(base, ".agents", "hooks.json");
         case "local":
-          return resolve12(base, ".agents", "hooks.json");
+          return resolve14(base, ".agents", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -17607,7 +18118,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync11(settingsPath))
+      if (!existsSync15(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -17639,14 +18150,14 @@ var init_integrations = __esm(() => {
     scopes: GOOSE_HOOK_SCOPES,
     eventTypes: GOOSE_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve12(cwd) : process.cwd();
+      const base = cwd ? resolve14(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve12(homedir24(), ".agents", "plugins", "failproofai", "hooks", "hooks.json");
+          return resolve14(homedir26(), ".agents", "plugins", "failproofai", "hooks", "hooks.json");
         case "project":
-          return resolve12(base, ".agents", "plugins", "failproofai", "hooks", "hooks.json");
+          return resolve14(base, ".agents", "plugins", "failproofai", "hooks", "hooks.json");
         case "local":
-          return resolve12(base, ".agents", "plugins", "failproofai", "hooks", "hooks.json");
+          return resolve14(base, ".agents", "plugins", "failproofai", "hooks", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -17713,7 +18224,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync11(settingsPath))
+      if (!existsSync15(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -17981,7 +18492,7 @@ function runPrompt(p) {
       `${c.dim(BAR)}  ${c.dim(p.summaryFor(result))}`
     ]);
   };
-  return new Promise((resolve13) => {
+  return new Promise((resolve15) => {
     hideCursor(stdout);
     repaint(stdout, region, build());
     readline.emitKeypressEvents(stdin);
@@ -17997,7 +18508,7 @@ function runPrompt(p) {
     const finish = (result) => {
       cleanup();
       collapse(result);
-      resolve13(result);
+      resolve15(result);
     };
     function onKey(_s, key) {
       if (!key)
@@ -18111,6 +18622,89 @@ function multiSelect(opts) {
     summaryFor: (values) => values === null ? "cancelled" : summarize(choices.filter((ch) => values.includes(ch.value) && !ch.summaryExclude).map((ch) => ch.label), noun)
   });
 }
+function promptText(opts) {
+  const stdin = opts.stdin ?? process.stdin;
+  const stdout = opts.stdout ?? process.stdout;
+  const c = paint(colorsEnabled(stdout));
+  const accept = (raw) => {
+    const value = raw.trim() || opts.defaultValue || "";
+    const error = opts.validate?.(value) ?? null;
+    return error ? { ok: false, error } : { ok: true, value };
+  };
+  if (!stdin.isTTY) {
+    return new Promise((resolve15) => {
+      let buf = "";
+      const onData = (chunk) => {
+        buf += String(chunk);
+        if (buf.includes(`
+`))
+          done();
+      };
+      const done = () => {
+        stdin.removeListener("data", onData);
+        stdin.removeListener("end", done);
+        const r = accept(buf.split(`
+`)[0] ?? "");
+        resolve15(r.ok ? r.value : null);
+      };
+      stdin.on("data", onData);
+      stdin.on("end", done);
+    });
+  }
+  return new Promise((resolve15) => {
+    let value = "";
+    const draw = (error) => {
+      const shown = opts.mask ? "•".repeat(value.length) : value;
+      const hint = opts.hint ? `  ${c.dim(opts.hint)}` : "";
+      const err = error ? `
+  ${c.warn(error)}` : "";
+      stdout.write(`\r\x1B[2K${c.bold(opts.message)} ${shown}${hint}${err}`);
+      if (err)
+        stdout.write("\x1B[1A");
+    };
+    draw();
+    readline.emitKeypressEvents(stdin);
+    const wasRaw = stdin.isRaw;
+    stdin.setRawMode?.(true);
+    stdin.resume();
+    const cleanup = () => {
+      stdin.removeListener("keypress", onKey);
+      stdin.setRawMode?.(wasRaw ?? false);
+      stdin.pause();
+      stdout.write(`
+`);
+    };
+    function onKey(str2, key) {
+      if (!key)
+        return;
+      if (key.ctrl && (key.name === "c" || key.name === "d") || key.name === "escape") {
+        cleanup();
+        resolve15(null);
+        return;
+      }
+      if (key.name === "return" || key.name === "enter") {
+        const r = accept(value);
+        if (r.ok) {
+          cleanup();
+          resolve15(r.value);
+        } else {
+          draw(r.error);
+        }
+        return;
+      }
+      if (key.name === "backspace") {
+        value = value.slice(0, -1);
+        draw();
+        return;
+      }
+      if (str2 && !key.ctrl && !key.meta) {
+        value += str2;
+        draw();
+      }
+    }
+    stdin.on("keypress", onKey);
+  });
+}
 var ESC = "\x1B", BAR = "│", BAR_END = "└", STEP_ACTIVE = "◆", STEP_DONE = "◇", RADIO_ON = "●", RADIO_OFF = "○", CHECK_ON = "◼", CHECK_OFF = "◻", CARET = "❯", FLOWER = "❋", HUES, ANSI_RESET, ANSI_BOLD, ANSI_DIM, LOGO_MIN_COLS = 22, TAGLINE = "end-to-end failure layer for ai agents", LOGO_GRID, LOGO_TEAL, LOGO_PINK, WINDOW = 8;
 var init_tui = __esm(() => {
   HUES = {
@@ -18298,7 +18892,7 @@ async function promptPolicySelection(preSelected, options = {}) {
 `);
     lastLineCount = lines.length;
   }
-  return new Promise((resolve13) => {
+  return new Promise((resolve15) => {
     render();
     process.stdin.setRawMode(true);
     process.stdin.resume();
@@ -18335,7 +18929,7 @@ async function promptPolicySelection(preSelected, options = {}) {
 ${dim(STEP_DONE)}  Policies
 ${dim(BAR)}  ${dim(`${selected.length} selected`)}
 `);
-        resolve13(selected);
+        resolve15(selected);
       } else if (key.name === "escape") {
         search = "";
         cursor2 = 0;
@@ -18397,9 +18991,9 @@ __export(exports_manager, {
   getSettingsPath: () => getSettingsPath
 });
 import { execSync as execSync6 } from "node:child_process";
-import { existsSync as existsSync12 } from "node:fs";
-import { resolve as resolve13, basename as basename4 } from "node:path";
-import { homedir as homedir25, platform as platform3, arch as arch3, release as release2, hostname as hostname3 } from "node:os";
+import { existsSync as existsSync16 } from "node:fs";
+import { resolve as resolve15, basename as basename4 } from "node:path";
+import { homedir as homedir27, platform as platform3, arch as arch3, release as release2, hostname as hostname3 } from "node:os";
 function getSettingsPath(scope, cwd) {
   return claudeCode.getSettingsPath(scope, cwd);
 }
@@ -18506,9 +19100,9 @@ async function installHooksImpl(policyNames, scope = "user", cwd, includeBeta =
     delete configToWrite.customPoliciesPath;
     delete configToWrite.customPoliciesPaths;
   } else if (customPoliciesPath && (typeof customPoliciesPath === "string" || customPoliciesPath.length > 0)) {
-    const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path3) => resolve13(path3));
-    const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path3) => resolve13(path3)).filter((path3) => {
-      if (existsSync12(path3))
+    const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path3) => resolve15(path3));
+    const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path3) => resolve15(path3)).filter((path3) => {
+      if (existsSync16(path3))
         return true;
       console.log(`Dropping custom policies path (file no longer exists): ${path3}`);
       return false;
@@ -18700,7 +19294,7 @@ async function removeHooks(policyNames, scope = "user", cwd, opts) {
     const scopesToRemove = scope === "all" ? [...integration.scopes] : integration.scopes.includes(scope) ? [scope] : [];
     for (const s of scopesToRemove) {
       const settingsPaths = settingsPathsFor(integration, s, cwd);
-      const existing = settingsPaths.filter((p) => existsSync12(p));
+      const existing = settingsPaths.filter((p) => existsSync16(p));
       if (existing.length === 0) {
         if (scope !== "all" && selectedClis.length === 1) {
           console.log("No settings file found. Nothing to remove.");
@@ -18899,9 +19493,9 @@ Failproof AI Hook Policies
     console.log(`
   ── Custom Policies ───────────────────────`);
     for (const path3 of explicitPaths) {
-      const absPath = resolve13(findProjectConfigDir(cwd ?? process.cwd()), path3);
+      const absPath = resolve15(findProjectConfigDir(cwd ?? process.cwd()), path3);
       console.log(`  ${absPath}`);
-      if (!existsSync12(absPath)) {
+      if (!existsSync16(absPath)) {
         console.log(`  \x1B[31m✗ File not found: ${absPath}\x1B[0m`);
         continue;
       }
@@ -18920,8 +19514,8 @@ Failproof AI Hook Policies
     console.log();
   }
   const base = findProjectConfigDir(cwd ?? process.cwd());
-  const projectDir = resolve13(base, ".failproofai", "policies");
-  const userDir = resolve13(homedir25(), ".failproofai", "policies");
+  const projectDir = resolve15(base, ".failproofai", "policies");
+  const userDir = resolve15(homedir27(), ".failproofai", "policies");
   const sameDir = userDir === projectDir;
   const conventionDirs = [
     { label: sameDir ? "Project + User" : "Project", dir: projectDir },
@@ -19151,7 +19745,7 @@ async function promptCliTargetSelection(detected, action = "install") {
     lastLineCount = lines.length;
   }
   const itemCount = options.length;
-  return new Promise((resolve14) => {
+  return new Promise((resolve16) => {
     render();
     readline3.emitKeypressEvents(process.stdin);
     const wasRaw = process.stdin.isRaw;
@@ -19184,7 +19778,7 @@ async function promptCliTargetSelection(detected, action = "install") {
         cleanup();
         process.stdout.write(`
 `);
-        resolve14(options[cursor2].value);
+        resolve16(options[cursor2].value);
       }
     }
     process.stdin.on("keypress", onKey);
@@ -19337,7 +19931,7 @@ async function promptPolicySelection2(preSelected, options = {}) {
 `);
     lastLineCount = lines.length;
   }
-  return new Promise((resolve14) => {
+  return new Promise((resolve16) => {
     render();
     process.stdin.setRawMode(true);
     process.stdin.resume();
@@ -19374,7 +19968,7 @@ async function promptPolicySelection2(preSelected, options = {}) {
 ${dim(STEP_DONE)}  Policies
 ${dim(BAR)}  ${dim(`${selected.length} selected`)}
 `);
-        resolve14(selected);
+        resolve16(selected);
       } else if (key.name === "escape") {
         search = "";
         cursor2 = 0;
@@ -19435,12 +20029,18 @@ var init_telemetry = __esm(() => {
 });
 
 // lib/fetch-with-timeout.ts
+function fetchWithTimeout(input, init = {}, timeoutMs = DEFAULT_FETCH_TIMEOUT_MS) {
+  const timeoutSignal = AbortSignal.timeout(timeoutMs);
+  const signal = init.signal ? AbortSignal.any([init.signal, timeoutSignal]) : timeoutSignal;
+  return fetch(input, { ...init, signal });
+}
 function isAbortError(err) {
   if (err === null || typeof err !== "object")
     return false;
   const name = err.name;
   return name === "AbortError" || name === "TimeoutError";
 }
+var DEFAULT_FETCH_TIMEOUT_MS = 15000;
 
 // lib/auth/api-server-client.ts
 function getApiBase() {
@@ -19494,7 +20094,7 @@ function pathFromUrl(url) {
     return url;
   }
 }
-async function fetchWithTimeout(url, init) {
+async function fetchWithTimeout2(url, init) {
   try {
     return await fetch(url, { ...init, signal: timeoutSignal(init.signal ?? undefined) });
   } catch (err) {
@@ -19514,7 +20114,7 @@ async function postJson(path3, body, init) {
   const headers = { "content-type": "application/json" };
   if (init?.accessToken)
     headers["authorization"] = `Bearer ${init.accessToken}`;
-  const res = await fetchWithTimeout(`${getApiBase()}${path3}`, {
+  const res = await fetchWithTimeout2(`${getApiBase()}${path3}`, {
     method: "POST",
     headers,
     body: JSON.stringify(body)
@@ -19551,64 +20151,25 @@ var init_api_server_client = __esm(() => {
   };
 });
 
-// lib/atomic-write.ts
-import {
-  chmodSync,
-  existsSync as existsSync13,
-  mkdirSync as mkdirSync8,
-  renameSync as renameSync3,
-  rmSync,
-  statSync as statSync12,
-  writeFileSync as writeFileSync7
-} from "node:fs";
-import { dirname as dirname6 } from "node:path";
-import { randomBytes } from "node:crypto";
-function writeJsonAtomically(filePath, value, opts = {}) {
-  const mode = opts.mode ?? 384;
-  const dirMode = opts.dirMode ?? 448;
-  const dir = dirname6(filePath);
-  if (!existsSync13(dir))
-    mkdirSync8(dir, { recursive: true, mode: dirMode });
-  const tmp = `${filePath}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
-  try {
-    writeFileSync7(tmp, JSON.stringify(value, null, 2), { mode });
-    try {
-      if ((statSync12(tmp).mode & 63) !== 0)
-        chmodSync(tmp, mode);
-    } catch {}
-    renameSync3(tmp, filePath);
-    try {
-      if ((statSync12(filePath).mode & 63) !== 0)
-        chmodSync(filePath, mode);
-    } catch {}
-  } catch (err) {
-    try {
-      rmSync(tmp, { force: true });
-    } catch {}
-    throw err;
-  }
-}
-var init_atomic_write = () => {};
-
 // lib/auth/auth-store.ts
-import { existsSync as existsSync14, readFileSync as readFileSync13, rmSync as rmSync2 } from "node:fs";
-import { homedir as homedir26 } from "node:os";
-import { join as join26 } from "node:path";
+import { existsSync as existsSync17, readFileSync as readFileSync15, rmSync as rmSync3 } from "node:fs";
+import { homedir as homedir28 } from "node:os";
+import { join as join27 } from "node:path";
 function getAuthDir() {
   const override = process.env.FAILPROOFAI_AUTH_DIR;
   if (override)
     return override;
-  return join26(homedir26(), ".failproofai");
+  return join27(homedir28(), ".failproofai");
 }
 function getAuthFilePath() {
-  return join26(getAuthDir(), "auth.json");
+  return join27(getAuthDir(), "auth.json");
 }
 function readAuth() {
   const p = getAuthFilePath();
-  if (!existsSync14(p))
+  if (!existsSync17(p))
     return null;
   try {
-    const raw = readFileSync13(p, "utf-8");
+    const raw = readFileSync15(p, "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.access_token !== "string" || typeof parsed.refresh_token !== "string" || typeof parsed.access_expires_at !== "number" || typeof parsed.user !== "object" || !parsed.user || typeof parsed.user.id !== "string" || typeof parsed.user.email !== "string") {
       return null;
@@ -19632,8 +20193,8 @@ function writeAuth(auth) {
 }
 function deleteAuth() {
   const p = getAuthFilePath();
-  if (existsSync14(p))
-    rmSync2(p, { force: true });
+  if (existsSync17(p))
+    rmSync3(p, { force: true });
 }
 function authFromTokenResponse(token, existingUser) {
   const now = Math.floor(Date.now() / 1000);
@@ -19709,13 +20270,13 @@ function prompt(question, opts = {}) {
         orig(s);
     };
   }
-  return new Promise((resolve14) => {
+  return new Promise((resolve16) => {
     rl.question(question, (answer) => {
       rl.close();
       if (opts.hidden && process.stdin.isTTY)
         process.stdout.write(`
 `);
-      resolve14(answer.trim());
+      resolve16(answer.trim());
     });
   });
 }
@@ -19964,8 +20525,8 @@ EXAMPLES
 });
 
 // lib/claude-sessions.ts
-import { readdirSync as readdirSync11, statSync as statSync13, existsSync as existsSync15 } from "node:fs";
-import { join as join27, basename as basename5 } from "node:path";
+import { readdirSync as readdirSync12, statSync as statSync13, existsSync as existsSync18 } from "node:fs";
+import { join as join28, basename as basename5 } from "node:path";
 function getClaudeProjectsRoot() {
   return getClaudeProjectsPath();
 }
@@ -19973,21 +20534,21 @@ function listClaudeProjects() {
   const root = getClaudeProjectsRoot();
   let entries;
   try {
-    entries = readdirSync11(root, { withFileTypes: true });
+    entries = readdirSync12(root, { withFileTypes: true });
   } catch {
     return [];
   }
   return entries.filter((e) => e.isDirectory()).map((e) => ({
     name: e.name,
     cwd: decodeFolderName(e.name),
-    path: join27(root, e.name)
+    path: join28(root, e.name)
   }));
 }
 function listClaudeTranscripts(project) {
   const out = [];
   let entries;
   try {
-    entries = readdirSync11(project.path, { withFileTypes: true });
+    entries = readdirSync12(project.path, { withFileTypes: true });
   } catch {
     return out;
   }
@@ -19996,7 +20557,7 @@ function listClaudeTranscripts(project) {
       const sessionId = entry.name.slice(0, -".jsonl".length);
       if (!UUID_RE2.test(sessionId))
         continue;
-      const transcriptPath = join27(project.path, entry.name);
+      const transcriptPath = join28(project.path, entry.name);
       try {
         const s = statSync13(transcriptPath);
         out.push({
@@ -20010,12 +20571,12 @@ function listClaudeTranscripts(project) {
         });
       } catch {}
     } else if (entry.isDirectory() && UUID_RE2.test(entry.name)) {
-      const subDir = join27(project.path, entry.name, "subagents");
-      if (!existsSync15(subDir))
+      const subDir = join28(project.path, entry.name, "subagents");
+      if (!existsSync18(subDir))
         continue;
       let subEntries;
       try {
-        subEntries = readdirSync11(subDir, { withFileTypes: true });
+        subEntries = readdirSync12(subDir, { withFileTypes: true });
       } catch {
         continue;
       }
@@ -20023,7 +20584,7 @@ function listClaudeTranscripts(project) {
         if (!sub.isFile() || !sub.name.endsWith(".jsonl"))
           continue;
         const agentId = sub.name.slice(0, -".jsonl".length);
-        const transcriptPath = join27(subDir, sub.name);
+        const transcriptPath = join28(subDir, sub.name);
         try {
           const s = statSync13(transcriptPath);
           out.push({
@@ -20099,7 +20660,7 @@ var init_shared = __esm(() => {
 });
 
 // src/audit/cli-adapters/claude.ts
-import { readFile as readFile14 } from "node:fs/promises";
+import { readFile as readFile15 } from "node:fs/promises";
 async function listClaudeTranscriptMetadata(opts = {}) {
   const projectFilter = opts.projects ? new Set(opts.projects) : null;
   const sinceMs = opts.sinceMs ?? 0;
@@ -20131,7 +20692,7 @@ async function listClaudeTranscriptMetadata(opts = {}) {
 async function streamClaudeEvents(meta) {
   let content;
   try {
-    content = await readFile14(meta.transcriptPath, "utf-8");
+    content = await readFile15(meta.transcriptPath, "utf-8");
   } catch {
     return [];
   }
@@ -20663,7 +21224,7 @@ var init_openclaw = __esm(() => {
 });
 
 // src/audit/cli-adapters/factory.ts
-import { readFile as readFile15 } from "node:fs/promises";
+import { readFile as readFile16 } from "node:fs/promises";
 async function listFactoryTranscriptMetadata(opts = {}) {
   const projectFilter = opts.projects ? new Set(opts.projects) : null;
   const sinceMs = opts.sinceMs ?? 0;
@@ -20687,7 +21248,7 @@ async function listFactoryTranscriptMetadata(opts = {}) {
 async function streamFactoryEvents(meta) {
   let content;
   try {
-    content = await readFile15(meta.transcriptPath, "utf-8");
+    content = await readFile16(meta.transcriptPath, "utf-8");
   } catch {
     return [];
   }
@@ -20717,7 +21278,7 @@ var init_factory = __esm(() => {
 });
 
 // src/audit/cli-adapters/antigravity.ts
-import { readFile as readFile16 } from "node:fs/promises";
+import { readFile as readFile17 } from "node:fs/promises";
 async function listAntigravityTranscriptMetadata(opts = {}) {
   const projectFilter = opts.projects ? new Set(opts.projects) : null;
   const sinceMs = opts.sinceMs ?? 0;
@@ -20743,7 +21304,7 @@ async function listAntigravityTranscriptMetadata(opts = {}) {
 async function streamAntigravityEvents(meta) {
   let content;
   try {
-    content = await readFile16(meta.transcriptPath, "utf-8");
+    content = await readFile17(meta.transcriptPath, "utf-8");
   } catch {
     return [];
   }
@@ -21278,16 +21839,16 @@ var init_features = __esm(() => {
 });
 
 // src/audit/cache.ts
-import { createHash } from "node:crypto";
-import { existsSync as existsSync16, mkdirSync as mkdirSync9, readFileSync as readFileSync14, writeFileSync as writeFileSync8, chmodSync as chmodSync2 } from "node:fs";
-import { join as join28 } from "node:path";
-import { homedir as homedir27 } from "node:os";
+import { createHash as createHash4 } from "node:crypto";
+import { existsSync as existsSync19, mkdirSync as mkdirSync10, readFileSync as readFileSync16, writeFileSync as writeFileSync8, chmodSync as chmodSync2 } from "node:fs";
+import { join as join29 } from "node:path";
+import { homedir as homedir29 } from "node:os";
 function getEngineVersion() {
   if (cachedEngineVersion)
     return cachedEngineVersion;
   const blob = BUILTIN_POLICIES.map((p) => `${p.name}|${p.fn.toString()}`).sort().join(`
 `);
-  cachedEngineVersion = createHash("sha1").update(blob).digest("hex").slice(0, 16);
+  cachedEngineVersion = createHash4("sha1").update(blob).digest("hex").slice(0, 16);
   return cachedEngineVersion;
 }
 function getDetectorVersion() {
@@ -21295,22 +21856,22 @@ function getDetectorVersion() {
     return cachedDetectorVersion;
   const blob = AUDIT_DETECTORS.map((d) => `${d.name}|${d.detect.toString()}`).sort().join(`
 `);
-  cachedDetectorVersion = createHash("sha1").update(blob).digest("hex").slice(0, 16);
+  cachedDetectorVersion = createHash4("sha1").update(blob).digest("hex").slice(0, 16);
   return cachedDetectorVersion;
 }
 function getCachePathFor(transcriptPath) {
-  const root = join28(homedir27(), ".failproofai", "cache", "audit");
-  const key = createHash("sha1").update(transcriptPath).digest("hex");
-  return join28(root, `${key}.json`);
+  const root = join29(homedir29(), ".failproofai", "cache", "audit");
+  const key = createHash4("sha1").update(transcriptPath).digest("hex");
+  return join29(root, `${key}.json`);
 }
 function readCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes) {
   if (sizeBytes === 0)
     return null;
   const cachePath = getCachePathFor(transcriptPath);
-  if (!existsSync16(cachePath))
+  if (!existsSync19(cachePath))
     return null;
   try {
-    const raw = readFileSync14(cachePath, "utf-8");
+    const raw = readFileSync16(cachePath, "utf-8");
     const entry = JSON.parse(raw);
     if (entry.schemaVersion !== CACHE_SCHEMA_VERSION)
       return null;
@@ -21334,7 +21895,7 @@ function writeCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes, result)
     return;
   const cachePath = getCachePathFor(transcriptPath);
   try {
-    mkdirSync9(join28(homedir27(), ".failproofai", "cache", "audit"), { recursive: true });
+    mkdirSync10(join29(homedir29(), ".failproofai", "cache", "audit"), { recursive: true });
     const entry = {
       schemaVersion: CACHE_SCHEMA_VERSION,
       cachedAt: Date.now(),
@@ -21706,10 +22267,10 @@ var init_audit = __esm(() => {
 });
 
 // src/audit/dashboard-cache.ts
-import { join as join29 } from "node:path";
-import { homedir as homedir28 } from "node:os";
+import { join as join30 } from "node:path";
+import { homedir as homedir30 } from "node:os";
 function getCachePath() {
-  return join29(homedir28(), ".failproofai", "audit-dashboard.json");
+  return join30(homedir30(), ".failproofai", "audit-dashboard.json");
 }
 function writeDashboardCache(params, result) {
   try {
@@ -21799,14 +22360,14 @@ var POLL_INTERVAL_MS = 150, POLL_TIMEOUT_MS = 30000;
 var init_open_browser = () => {};
 
 // scripts/parse-script-args.ts
-import { resolve as resolve14 } from "path";
+import { resolve as resolve16 } from "path";
 function parseStringFlag(flagName, errorLabel, inlineValue, args, index, options) {
   const raw = inlineValue ?? args[index + 1];
   if (raw === undefined || inlineValue === null && raw.startsWith("-")) {
     console.error(`Error: ${flagName} requires ${errorLabel}`);
     process.exit(1);
   }
-  const value = options?.resolve ? resolve14(raw) : raw;
+  const value = options?.resolve ? resolve16(raw) : raw;
   return { value, spliceCount: inlineValue !== null ? 1 : 2 };
 }
 function parseScriptArgs(argv) {
@@ -21854,21 +22415,21 @@ function parseScriptArgs(argv) {
 var init_parse_script_args = () => {};
 
 // scripts/install-diagnosis.mjs
-import { existsSync as existsSync17, readFileSync as readFileSync15, realpathSync } from "node:fs";
-import { dirname as dirname7, resolve as resolve15 } from "node:path";
-import { homedir as homedir29, platform as platform4 } from "node:os";
+import { existsSync as existsSync20, readFileSync as readFileSync17, realpathSync as realpathSync2 } from "node:fs";
+import { dirname as dirname7, resolve as resolve17 } from "node:path";
+import { homedir as homedir31, platform as platform4 } from "node:os";
 import { spawnSync } from "node:child_process";
 function findPackageRoot(start) {
   try {
-    let dir = realpathSync(start);
-    if (existsSync17(dir) && !existsSync17(resolve15(dir, "package.json"))) {
+    let dir = realpathSync2(start);
+    if (existsSync20(dir) && !existsSync20(resolve17(dir, "package.json"))) {
       dir = dirname7(dir);
     }
     while (true) {
-      const pkgPath = resolve15(dir, "package.json");
-      if (existsSync17(pkgPath)) {
+      const pkgPath = resolve17(dir, "package.json");
+      if (existsSync20(pkgPath)) {
         try {
-          const pkg = JSON.parse(readFileSync15(pkgPath, "utf8"));
+          const pkg = JSON.parse(readFileSync17(pkgPath, "utf8"));
           if (pkg.name === PKG_NAME)
             return dir;
         } catch {}
@@ -21886,7 +22447,7 @@ function readPackageVersion(packageRoot) {
   if (!packageRoot)
     return null;
   try {
-    const pkg = JSON.parse(readFileSync15(resolve15(packageRoot, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync17(resolve17(packageRoot, "package.json"), "utf8"));
     return typeof pkg.version === "string" ? pkg.version : null;
   } catch {
     return null;
@@ -21912,16 +22473,16 @@ function locateNpmGlobal() {
     const root = (res.stdout || "").trim();
     if (!root)
       return null;
-    const candidate = resolve15(root, PKG_NAME);
-    return existsSync17(resolve15(candidate, "package.json")) ? candidate : null;
+    const candidate = resolve17(root, PKG_NAME);
+    return existsSync20(resolve17(candidate, "package.json")) ? candidate : null;
   } catch {
     return null;
   }
 }
 function locateBunGlobal() {
   try {
-    const candidate = resolve15(homedir29(), ".bun", "install", "global", "node_modules", PKG_NAME);
-    return existsSync17(resolve15(candidate, "package.json")) ? candidate : null;
+    const candidate = resolve17(homedir31(), ".bun", "install", "global", "node_modules", PKG_NAME);
+    return existsSync20(resolve17(candidate, "package.json")) ? candidate : null;
   } catch {
     return null;
   }
@@ -21929,8 +22490,8 @@ function locateBunGlobal() {
 function buildRecommendation(pathFirstBin) {
   if (!pathFirstBin)
     return null;
-  const bunBinPrefix = resolve15(homedir29(), ".bun", "bin") + "/";
-  const bunGlobalPrefix = resolve15(homedir29(), ".bun", "install", "global") + "/";
+  const bunBinPrefix = resolve17(homedir31(), ".bun", "bin") + "/";
+  const bunGlobalPrefix = resolve17(homedir31(), ".bun", "install", "global") + "/";
   const isBun = pathFirstBin.startsWith(bunBinPrefix) || pathFirstBin.startsWith(bunGlobalPrefix);
   if (isBun) {
     return `rm -f ~/.bun/bin/${PKG_NAME} && rm -rf ~/.bun/install/global/node_modules/${PKG_NAME}`;
@@ -21940,7 +22501,7 @@ function buildRecommendation(pathFirstBin) {
 function diagnoseShadow(self) {
   const selfPackageRoot = (() => {
     try {
-      return self?.selfPackageRoot ? realpathSync(self.selfPackageRoot) : null;
+      return self?.selfPackageRoot ? realpathSync2(self.selfPackageRoot) : null;
     } catch {
       return self?.selfPackageRoot ?? null;
     }
@@ -22010,8 +22571,8 @@ __export(exports_launch, {
   launch: () => launch
 });
 import { spawn as spawn2 } from "child_process";
-import { realpathSync as realpathSync2, existsSync as existsSync18 } from "node:fs";
-import { resolve as resolve16, dirname as dirname8 } from "node:path";
+import { realpathSync as realpathSync3, existsSync as existsSync21 } from "node:fs";
+import { resolve as resolve18, dirname as dirname8 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { createInterface as createInterface2 } from "node:readline";
 function launch(mode) {
@@ -22026,9 +22587,9 @@ function launch(mode) {
     process.env.PORT = port;
     process.env.HOSTNAME = "0.0.0.0";
     cmd = "node";
-    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve16(dirname8(realpathSync2(fileURLToPath2(import.meta.url))), "..");
-    const serverJsPath = resolve16(packageRoot, ".next/standalone/server.js");
-    if (!existsSync18(serverJsPath)) {
+    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve18(dirname8(realpathSync3(fileURLToPath2(import.meta.url))), "..");
+    const serverJsPath = resolve18(packageRoot, ".next/standalone/server.js");
+    if (!existsSync21(serverJsPath)) {
       let shadowMessage = null;
       try {
         const diag = diagnoseShadow({ selfPackageRoot: packageRoot, selfVersion: version2 });
@@ -22378,381 +22939,182 @@ WHAT IT DOES
   SPINNER = ["⠋", "⠙", "⠹", "⠸", "⠼", "⠴", "⠦", "⠧", "⠇", "⠏"];
 });
 
-// src/hooks/manager.ts
-import { execSync as execSync7 } from "node:child_process";
-import { existsSync as existsSync19 } from "node:fs";
-import { resolve as resolve17, basename as basename6 } from "node:path";
-import { homedir as homedir30, platform as platform5, arch as arch4, release as release3, hostname as hostname4 } from "node:os";
-function getSettingsPath2(scope, cwd) {
-  return claudeCode.getSettingsPath(scope, cwd);
+// src/hooks/cloud-enrollment.ts
+import { existsSync as existsSync22, readFileSync as readFileSync18, rmSync as rmSync4 } from "node:fs";
+import { homedir as homedir32 } from "node:os";
+import { join as join31 } from "node:path";
+function cloudCredentialPath() {
+  const override = process.env.FAILPROOFAI_CLOUD_CREDENTIALS;
+  if (override)
+    return override;
+  return join31(homedir32(), ".failproofai", "cloud.json");
 }
-function scopeLabel2(scope) {
-  switch (scope) {
-    case "user":
-      return `~/.claude/settings.json`;
-    case "project":
-      return `{cwd}/.claude/settings.json`;
-    case "local":
-      return `{cwd}/.claude/settings.local.json`;
+function validateCloudUrl(raw) {
+  let parsed;
+  try {
+    parsed = new URL(raw);
+  } catch {
+    return { ok: false, reason: `"${raw}" is not a valid URL. Expected something like https://be.failproof.ai` };
+  }
+  if (parsed.protocol !== "https:" && parsed.protocol !== "http:") {
+    return { ok: false, reason: `Unsupported scheme "${parsed.protocol}" — use https (or http for localhost).` };
+  }
+  if (parsed.protocol === "http:") {
+    const host = parsed.hostname;
+    const loopback = host === "localhost" || host === "127.0.0.1" || host === "::1" || host === "[::1]";
+    if (!loopback) {
+      return {
+        ok: false,
+        reason: `Refusing to send the machine token to ${parsed.origin} over plain http. ` + `Use https, or http only for localhost during development.`
+      };
+    }
   }
+  return { ok: true, url: parsed.origin + (parsed.pathname === "/" ? "" : parsed.pathname.replace(/\/$/, "")) };
 }
-function resolveFailproofaiBinary2() {
-  const override = process.env.FAILPROOFAI_BINARY_OVERRIDE;
-  if (override && override.trim())
-    return override.trim();
+function maskToken(token) {
+  if (token.length <= 4)
+    return "****";
+  return `****${token.slice(-4)}`;
+}
+function readCloudCredentials() {
+  const path3 = cloudCredentialPath();
+  if (!existsSync22(path3))
+    return null;
   try {
-    const cmd = process.platform === "win32" ? "where failproofai" : "which failproofai";
-    const result = execSync7(cmd, { encoding: "utf8" }).trim();
-    return result.split(`
-`)[0].trim();
+    const raw = JSON.parse(readFileSync18(path3, "utf8"));
+    if (raw.schemaVersion !== SCHEMA_VERSION2)
+      return null;
+    if (typeof raw.url !== "string" || typeof raw.machineId !== "string" || typeof raw.token !== "string") {
+      return null;
+    }
+    if (!raw.url || !raw.machineId || !raw.token)
+      return null;
+    return { url: raw.url, machineId: raw.machineId, token: raw.token };
   } catch {
-    throw new CliError(`failproofai binary not found in PATH.
-` + "Install it globally first: npm install -g failproofai");
+    return null;
   }
 }
-function validatePolicyNames2(names) {
-  const invalid = names.filter((n) => !VALID_POLICY_NAMES2.has(n));
-  if (invalid.length > 0) {
-    const validList = [...VALID_POLICY_NAMES2].join(", ");
-    throw new CliError(`Unknown policy name(s): ${invalid.join(", ")}
-` + `Valid policies: ${validList}`);
-  }
+function writeCloudCredentials(creds) {
+  writeJsonAtomically(cloudCredentialPath(), { schemaVersion: SCHEMA_VERSION2, ...creds });
 }
-function deduplicateScopes2(scopes, cwd) {
-  const seen = new Set;
-  return scopes.filter((s) => {
-    const p = getSettingsPath2(s, cwd);
-    if (seen.has(p))
-      return false;
-    seen.add(p);
+function clearCloudCredentials() {
+  const path3 = cloudCredentialPath();
+  if (!existsSync22(path3))
+    return false;
+  try {
+    rmSync4(path3);
     return true;
-  });
-}
-function hooksInstalledInSettings2(scope, cwd) {
-  return claudeCode.hooksInstalledInSettings(scope, cwd);
+  } catch {
+    return false;
+  }
 }
-async function installHooks2(policyNames, scope = "user", cwd, includeBeta = false, source, customPoliciesPath, removeCustomHooks = false, cli, options = {}) {
-  const { replace = false, quiet = false } = options;
-  if (!quiet) {
-    return installHooksImpl2(policyNames, scope, cwd, includeBeta, source, customPoliciesPath, removeCustomHooks, cli, replace);
+async function verifyCloudCredentials(creds) {
+  const url = `${creds.url}/enforcement/v1/desired-state?machineId=${encodeURIComponent(creds.machineId)}`;
+  let response;
+  try {
+    response = await fetchWithTimeout(url, { headers: { Authorization: `Bearer ${creds.token}` } }, VERIFY_TIMEOUT_MS);
+  } catch (err) {
+    if (isAbortError(err))
+      return { ok: false, reason: `No response from ${creds.url} within ${VERIFY_TIMEOUT_MS / 1000}s.` };
+    return { ok: false, reason: `Could not reach ${creds.url}: ${err instanceof Error ? err.message : String(err)}` };
+  }
+  if (response.status === 401) {
+    return { ok: false, reason: "The server rejected this token (401). Check the key was copied whole." };
+  }
+  if (response.status === 403) {
+    return {
+      ok: false,
+      reason: "This key is valid but lacks the `policies:pull` permission (403). Create a machine key with that permission."
+    };
+  }
+  if (!response.ok) {
+    return { ok: false, reason: `The server answered ${response.status} ${response.statusText}.` };
   }
-  const origLog = console.log;
-  console.log = () => {};
   try {
-    return await installHooksImpl2(policyNames, scope, cwd, includeBeta, source, customPoliciesPath, removeCustomHooks, cli, replace);
-  } finally {
-    console.log = origLog;
+    const body = await response.json();
+    return {
+      ok: true,
+      policyCount: Array.isArray(body.policies) ? body.policies.length : 0,
+      generation: typeof body.generation === "number" ? body.generation : 0
+    };
+  } catch {
+    return {
+      ok: false,
+      reason: `${creds.url} answered, but not with a desired-state document. Is this a Failproof Cloud URL?`
+    };
   }
 }
-async function installHooksImpl2(policyNames, scope = "user", cwd, includeBeta = false, source, customPoliciesPath, removeCustomHooks = false, cli, replace = false) {
-  if (policyNames !== undefined && policyNames.length > 0) {
-    const nonAllNames = policyNames.filter((n) => n !== "all");
-    if (nonAllNames.length > 0)
-      validatePolicyNames2(nonAllNames);
-    if (policyNames.includes("all") && nonAllNames.length > 0) {
-      throw new CliError(`"all" cannot be combined with specific policy names.
-` + `Use either: --install all  or  --install block-sudo sanitize-jwt ...`);
-    }
+var SCHEMA_VERSION2 = 1, VERIFY_TIMEOUT_MS = 1e4;
+var init_cloud_enrollment = __esm(() => {
+  init_atomic_write();
+});
+
+// src/hooks/daemon-download.ts
+import { createHash as createHash5 } from "node:crypto";
+import { chmodSync as chmodSync3, existsSync as existsSync23, mkdirSync as mkdirSync11, renameSync as renameSync4, rmSync as rmSync5, writeFileSync as writeFileSync9 } from "node:fs";
+import { homedir as homedir33 } from "node:os";
+import { resolve as resolve19 } from "node:path";
+import { gunzipSync } from "node:zlib";
+function baseUrl() {
+  return (process.env.FAILPROOFAI_DAEMON_BASE_URL || DEFAULT_BASE_URL).replace(/\/+$/, "");
+}
+function daemonBinaryDir() {
+  return resolve19(homedir33(), ".failproofai", "bin");
+}
+function installedBinaryPath(ver = version2) {
+  return resolve19(daemonBinaryDir(), `failproofaid-${ver}`);
+}
+function daemonAssetUrl(key, ver = version2) {
+  return `${baseUrl()}/v${ver}/failproofaid-${key}.gz`;
+}
+function checksumsUrl(ver = version2) {
+  return `${baseUrl()}/v${ver}/SHA256SUMS`;
+}
+async function fetchBytes(url) {
+  const response = await fetch(url, { signal: AbortSignal.timeout(DOWNLOAD_TIMEOUT_MS) });
+  if (!response.ok)
+    throw new Error(`GET ${url} returned ${response.status}`);
+  return Buffer.from(await response.arrayBuffer());
+}
+function digestFor(manifest, assetName) {
+  for (const line of manifest.split(`
+`)) {
+    const match = line.trim().match(/^([0-9a-f]{64})\s+\*?(.+)$/i);
+    if (match && match[2].trim() === assetName)
+      return match[1].toLowerCase();
   }
-  const selectedClis = cli && cli.length > 0 ? [...new Set(cli)] : ["claude"];
-  for (const cliId of selectedClis) {
-    const integration = getIntegration(cliId);
-    if (!integration.scopes.includes(scope)) {
-      try {
-        await trackHookEvent2(getInstanceId2(), "scope_validation_failed", {
-          cli: cliId,
-          scope,
-          supported_scopes: integration.scopes
-        });
-      } catch {}
-      throw new CliError(`Scope "${scope}" is not supported by ${integration.displayName}. ` + `Valid scopes: ${integration.scopes.join(", ")}`);
-    }
+  return null;
+}
+async function downloadFailproofaidBinary(key) {
+  const target = installedBinaryPath();
+  if (existsSync23(target))
+    return { path: target };
+  if (process.env.FAILPROOFAI_NO_DOWNLOAD) {
+    return { error: "daemon downloads are disabled (FAILPROOFAI_NO_DOWNLOAD)" };
   }
-  const binaryPath = resolveFailproofaiBinary2();
-  const previousConfig = readScopedHooksConfig(scope, cwd);
-  const previousEnabled = new Set(previousConfig.enabledPolicies);
-  let selectedPolicies;
-  if (policyNames !== undefined) {
-    let incoming;
-    if (policyNames.length === 1 && policyNames[0] === "all") {
-      incoming = BUILTIN_POLICIES.filter((p) => includeBeta || !p.beta).map((p) => p.name);
-    } else {
-      incoming = policyNames;
+  const assetName = `failproofaid-${key}.gz`;
+  const tempPath = `${target}.${process.pid}.tmp`;
+  try {
+    const [asset, manifest] = await Promise.all([
+      fetchBytes(daemonAssetUrl(key)),
+      fetchBytes(checksumsUrl()).then((b) => b.toString("utf8"))
+    ]);
+    const expected = digestFor(manifest, assetName);
+    if (!expected) {
+      return { error: `SHA256SUMS for v${version2} has no entry for ${assetName}` };
     }
-    selectedPolicies = replace ? [...new Set(incoming)] : [...new Set([...previousConfig.enabledPolicies, ...incoming])];
-  } else {
-    const preSelected = previousConfig.enabledPolicies.length > 0 ? previousConfig.enabledPolicies : undefined;
-    selectedPolicies = await promptPolicySelection(preSelected, { includeBeta });
-  }
-  const configToWrite = { ...previousConfig, enabledPolicies: selectedPolicies };
-  if (removeCustomHooks) {
-    delete configToWrite.customPoliciesPath;
-    delete configToWrite.customPoliciesPaths;
-  } else if (customPoliciesPath && (typeof customPoliciesPath === "string" || customPoliciesPath.length > 0)) {
-    const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path3) => resolve17(path3));
-    const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path3) => resolve17(path3)).filter((path3) => {
-      if (existsSync19(path3))
-        return true;
-      console.log(`Dropping custom policies path (file no longer exists): ${path3}`);
-      return false;
-    });
-    configToWrite.customPoliciesPaths = replace ? [...new Set(incoming)] : [...new Set([...carried, ...incoming])];
-    delete configToWrite.customPoliciesPath;
-    for (const path3 of incoming) {
-      let validatedHooks = [];
-      try {
-        validatedHooks = await loadCustomHooks(path3, { strict: true });
-      } catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        try {
-          await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
-            scope,
-            error_type: /not found/i.test(msg) ? "file_not_found" : "load_error"
-          });
-        } catch {}
-        console.error(`Error: ${msg}`);
-        process.exit(1);
-      }
-      if (validatedHooks.length === 0) {
-        try {
-          await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
-            scope,
-            error_type: "no_hooks_registered"
-          });
-        } catch {}
-        console.error(`Error: no hooks registered in ${path3}. ` + `Make sure your file calls customPolicies.add(...) at least once.`);
-        process.exit(1);
-      }
-      console.log(`
-Validated ${validatedHooks.length} custom hook(s) from ${path3}: ${validatedHooks.map((h) => h.name).join(", ")}`);
-    }
-  }
-  writeScopedHooksConfig(configToWrite, scope, cwd);
-  console.log(`
-Enabled ${selectedPolicies.length} policy(ies): ${selectedPolicies.join(", ")}
-`);
-  if (removeCustomHooks) {
-    console.log("Custom hooks path cleared.");
-  } else if (configToWrite.customPoliciesPaths?.length || configToWrite.customPoliciesPath) {
-    const paths = configToWrite.customPoliciesPaths ?? [configToWrite.customPoliciesPath];
-    console.log(`Custom hooks paths: ${paths.join(", ")}`);
-  }
-  const writtenSettingsPaths = [];
-  for (const cliId of selectedClis) {
-    const integration = getIntegration(cliId);
-    const settingsPaths = settingsPathsFor(integration, scope, cwd);
-    try {
-      for (const settingsPath of settingsPaths) {
-        const settings = integration.readSettings(settingsPath);
-        integration.writeHookEntries(settings, binaryPath, scope);
-        integration.writeSettings(settingsPath, settings);
-        writtenSettingsPaths.push({ cli: cliId, path: settingsPath });
-      }
-    } catch (err) {
-      const errorType = err instanceof Error && /EACCES|EPERM/.test(err.message) ? "permission_denied" : err instanceof Error && /ENOENT|ENOTDIR/.test(err.message) ? "path_not_found" : "write_error";
-      try {
-        await trackHookEvent2(getInstanceId2(), "hook_write_failed", {
-          cli: cliId,
-          scope,
-          error_type: errorType
-        });
-      } catch {}
-      throw err;
-    }
-  }
-  try {
-    const newSet = new Set(selectedPolicies);
-    const policiesAdded = selectedPolicies.filter((p) => !previousEnabled.has(p));
-    const policiesRemoved = [...previousEnabled].filter((p) => !newSet.has(p));
-    const distinctId = getInstanceId2();
-    await trackHookEvent2(distinctId, "hooks_installed", {
-      scope,
-      cli: selectedClis,
-      cli_count: selectedClis.length,
-      policies: selectedPolicies,
-      policy_count: selectedPolicies.length,
-      policies_added: policiesAdded,
-      policies_removed: policiesRemoved,
-      ...source ? { source } : {},
-      platform: platform5(),
-      arch: arch4(),
-      os_release: release3(),
-      hostname_hash: hashToId2(hostname4()),
-      has_custom_hooks_path: !!(configToWrite.customPoliciesPaths?.length || configToWrite.customPoliciesPath),
-      has_policy_params: !!(configToWrite.policyParams && Object.keys(configToWrite.policyParams).length > 0),
-      param_policy_names: configToWrite.policyParams ? Object.keys(configToWrite.policyParams) : [],
-      command_format: scope === "project" ? "npx" : "absolute"
-    });
-    if (includeBeta) {
-      const betaNames = new Set(BUILTIN_POLICIES.filter((p) => p.beta).map((p) => p.name));
-      const installedBeta = selectedPolicies.filter((p) => betaNames.has(p));
-      if (installedBeta.length > 0) {
-        await trackHookEvent2(distinctId, "beta_policies_installed", {
-          scope,
-          cli: selectedClis,
-          beta_count: installedBeta.length,
-          beta_policy_names: installedBeta,
-          ...source ? { source } : {}
-        });
-      }
-    }
-  } catch {}
-  for (const { cli: cliId, path: path3 } of writtenSettingsPaths) {
-    const integration = getIntegration(cliId);
-    console.log(`Failproof AI hooks installed for ${integration.displayName} ` + `(${integration.eventTypes.length} event types, scope: ${scope}).`);
-    console.log(`Settings: ${path3}`);
-  }
-  if (scope === "project") {
-    console.log(`Command:  npx -y failproofai`);
-    console.log(`
-This file can be committed to git — no machine-specific paths.`);
-  } else {
-    console.log(`Binary:   ${binaryPath}`);
-  }
-  const otherScopes = deduplicateScopes2(HOOK_SCOPES, cwd).filter((s) => s !== scope);
-  const duplicates = otherScopes.filter((s) => hooksInstalledInSettings2(s, cwd));
-  if (duplicates.length > 0) {
-    const scopeList = duplicates.map((s) => `${s} (${scopeLabel2(s)})`).join(", ");
-    console.log();
-    console.log(`\x1B[33mWarning: Failproof AI hooks are also installed at ${scopeList}.\x1B[0m`);
-    console.log(`Having hooks in multiple scopes may cause duplicate policy evaluation.`);
-    console.log(`Use \`failproofai policies --uninstall --scope ${duplicates[0]}\` to remove the other installation,`);
-    console.log(`or \`failproofai policies\` to see all scopes.`);
-    try {
-      await trackHookEvent2(getInstanceId2(), "multi_scope_warning_shown", {
-        new_scope: scope,
-        existing_scopes: duplicates,
-        cli: selectedClis
-      });
-    } catch {}
-  }
-}
-var VALID_POLICY_NAMES2;
-var init_manager2 = __esm(() => {
-  init_types();
-  init_integrations();
-  init_install_prompt();
-  init_hooks_config();
-  init_builtin_policies();
-  init_custom_hooks_loader();
-  init_hook_telemetry2();
-  init_telemetry_id2();
-  init_cli_error();
-  init_hook_logger();
-  VALID_POLICY_NAMES2 = new Set(BUILTIN_POLICIES.map((p) => p.name));
-});
-
-// src/hooks/policy-presets.ts
-function resolvePreset(id) {
-  const preset = POLICY_PRESETS.find((p) => p.id === id);
-  if (!preset)
-    return [];
-  const cats = new Set(preset.categories);
-  const fromCategories = BUILTIN_POLICIES.filter((p) => !p.beta && cats.has(p.category)).map((p) => p.name);
-  const extras = (preset.extra ?? []).filter((name) => BUILTIN_POLICIES.some((p) => p.name === name && !p.beta));
-  return [...new Set([...fromCategories, ...extras])];
-}
-function resolveEverything() {
-  return BUILTIN_POLICIES.filter((p) => !p.beta).map((p) => p.name);
-}
-var POLICY_PRESETS;
-var init_policy_presets = __esm(() => {
-  init_builtin_policies();
-  POLICY_PRESETS = [
-    {
-      id: "secrets",
-      label: "Secrets & data",
-      description: "Redact secrets in tool output, block .env & secret-file writes, keep reads inside the repo",
-      categories: ["Sanitize", "Environment"],
-      extra: ["block-secrets-write"]
-    },
-    {
-      id: "git",
-      label: "Git safety",
-      description: "Block force-push & pushes to main, warn on history-rewriting git ops",
-      categories: ["Git"]
-    },
-    {
-      id: "ship",
-      label: "Ship discipline",
-      description: "Don't let the agent finish until changes are committed, pushed, PR'd and CI is green",
-      categories: ["Workflow"]
-    },
-    {
-      id: "infra",
-      label: "Cloud & infra",
-      description: "Block kubectl / terraform / aws / gcloud / az / helm / gh pipeline commands",
-      categories: ["Infra Commands"]
-    }
-  ];
-});
-
-// src/hooks/daemon-download.ts
-import { createHash as createHash2 } from "node:crypto";
-import { chmodSync as chmodSync3, existsSync as existsSync20, mkdirSync as mkdirSync10, renameSync as renameSync4, rmSync as rmSync3, writeFileSync as writeFileSync9 } from "node:fs";
-import { homedir as homedir31 } from "node:os";
-import { resolve as resolve18 } from "node:path";
-import { gunzipSync } from "node:zlib";
-function baseUrl() {
-  return (process.env.FAILPROOFAI_DAEMON_BASE_URL || DEFAULT_BASE_URL).replace(/\/+$/, "");
-}
-function daemonBinaryDir() {
-  return resolve18(homedir31(), ".failproofai", "bin");
-}
-function installedBinaryPath(ver = version2) {
-  return resolve18(daemonBinaryDir(), `failproofaid-${ver}`);
-}
-function daemonAssetUrl(key, ver = version2) {
-  return `${baseUrl()}/v${ver}/failproofaid-${key}.gz`;
-}
-function checksumsUrl(ver = version2) {
-  return `${baseUrl()}/v${ver}/SHA256SUMS`;
-}
-async function fetchBytes(url) {
-  const response = await fetch(url, { signal: AbortSignal.timeout(DOWNLOAD_TIMEOUT_MS) });
-  if (!response.ok)
-    throw new Error(`GET ${url} returned ${response.status}`);
-  return Buffer.from(await response.arrayBuffer());
-}
-function digestFor(manifest, assetName) {
-  for (const line of manifest.split(`
-`)) {
-    const match = line.trim().match(/^([0-9a-f]{64})\s+\*?(.+)$/i);
-    if (match && match[2].trim() === assetName)
-      return match[1].toLowerCase();
-  }
-  return null;
-}
-async function downloadFailproofaidBinary(key) {
-  const target = installedBinaryPath();
-  if (existsSync20(target))
-    return { path: target };
-  if (process.env.FAILPROOFAI_NO_DOWNLOAD) {
-    return { error: "daemon downloads are disabled (FAILPROOFAI_NO_DOWNLOAD)" };
-  }
-  const assetName = `failproofaid-${key}.gz`;
-  const tempPath = `${target}.${process.pid}.tmp`;
-  try {
-    const [asset, manifest] = await Promise.all([
-      fetchBytes(daemonAssetUrl(key)),
-      fetchBytes(checksumsUrl()).then((b) => b.toString("utf8"))
-    ]);
-    const expected = digestFor(manifest, assetName);
-    if (!expected) {
-      return { error: `SHA256SUMS for v${version2} has no entry for ${assetName}` };
-    }
-    const actual = createHash2("sha256").update(asset).digest("hex");
-    if (actual !== expected) {
-      return { error: `checksum mismatch for ${assetName} (expected ${expected}, got ${actual})` };
+    const actual = createHash5("sha256").update(asset).digest("hex");
+    if (actual !== expected) {
+      return { error: `checksum mismatch for ${assetName} (expected ${expected}, got ${actual})` };
     }
     const binary = gunzipSync(asset);
-    mkdirSync10(daemonBinaryDir(), { recursive: true });
+    mkdirSync11(daemonBinaryDir(), { recursive: true });
     writeFileSync9(tempPath, binary);
     chmodSync3(tempPath, 493);
     renameSync4(tempPath, target);
     return { path: target };
   } catch (err) {
-    rmSync3(tempPath, { force: true });
+    rmSync5(tempPath, { force: true });
     const message = err instanceof Error ? err.message : String(err);
     return { error: `failed to download failproofaid v${version2} for ${key}: ${message}` };
   }
@@ -22763,16 +23125,24 @@ var init_daemon_download = __esm(() => {
 });
 
 // src/hooks/daemon-service.ts
-import { existsSync as existsSync21, mkdirSync as mkdirSync11, readFileSync as readFileSync16, writeFileSync as writeFileSync10, unlinkSync as unlinkSync3, rmSync as rmSync4 } from "node:fs";
-import { homedir as homedir32, tmpdir, userInfo } from "node:os";
-import { resolve as resolve19, dirname as dirname9 } from "node:path";
+import {
+  existsSync as existsSync24,
+  mkdirSync as mkdirSync12,
+  mkdtempSync,
+  readFileSync as readFileSync19,
+  writeFileSync as writeFileSync10,
+  unlinkSync as unlinkSync3,
+  rmSync as rmSync6
+} from "node:fs";
+import { homedir as homedir34, tmpdir, userInfo } from "node:os";
+import { resolve as resolve20, dirname as dirname9 } from "node:path";
 import { execFileSync as execFileSync4 } from "node:child_process";
 function setDaemonConfigured(value) {
   const path3 = getConfigPathForScope("user");
   let config = {};
   try {
-    if (existsSync21(path3))
-      config = JSON.parse(readFileSync16(path3, "utf8"));
+    if (existsSync24(path3))
+      config = JSON.parse(readFileSync19(path3, "utf8"));
   } catch {
     return;
   }
@@ -22781,7 +23151,7 @@ function setDaemonConfigured(value) {
   else
     delete config.daemonConfigured;
   try {
-    mkdirSync11(dirname9(path3), { recursive: true });
+    mkdirSync12(dirname9(path3), { recursive: true });
     writeFileSync10(path3, JSON.stringify(config, null, 2) + `
 `, "utf8");
   } catch {}
@@ -22791,22 +23161,22 @@ function isDaemonSupportedPlatform() {
 }
 function platformKey() {
   const os4 = process.platform === "linux" ? "linux" : process.platform === "darwin" ? "darwin" : null;
-  const arch5 = process.arch === "x64" ? "x64" : process.arch === "arm64" ? "arm64" : null;
-  if (!os4 || !arch5)
+  const arch4 = process.arch === "x64" ? "x64" : process.arch === "arm64" ? "arm64" : null;
+  if (!os4 || !arch4)
     return null;
-  return `${os4}-${arch5}`;
+  return `${os4}-${arch4}`;
 }
 function resolveFailproofaidBinaryPath() {
   if (process.env.FAILPROOFAI_DAEMON_BINARY)
     return process.env.FAILPROOFAI_DAEMON_BINARY;
   const downloaded = installedBinaryPath();
-  if (existsSync21(downloaded))
+  if (existsSync24(downloaded))
     return downloaded;
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (packageRoot) {
     for (const profile of ["release", "debug"]) {
-      const candidate = resolve19(packageRoot, "target", profile, "failproofaid");
-      if (existsSync21(candidate))
+      const candidate = resolve20(packageRoot, "target", profile, "failproofaid");
+      if (existsSync24(candidate))
         return candidate;
     }
   }
@@ -22831,10 +23201,13 @@ function resolveWorkerCommand() {
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (!packageRoot)
     return null;
-  const workerScript = resolve19(packageRoot, "dist", "worker.mjs");
-  if (!existsSync21(workerScript))
+  const workerScript = resolve20(packageRoot, "dist", "worker.mjs");
+  if (!existsSync24(workerScript))
     return null;
-  return `${process.execPath} ${workerScript}`;
+  return `${shellQuote(process.execPath)} ${shellQuote(workerScript)}`;
+}
+function shellQuote(value) {
+  return `'${value.replace(/'/g, `'\\''`)}'`;
 }
 function serviceUser() {
   return userInfo().username;
@@ -22843,22 +23216,40 @@ function systemdUnitName(user = serviceUser()) {
   return `failproofaid@${user}.service`;
 }
 function systemdUnitPath(user = serviceUser()) {
-  return resolve19("/etc/systemd/system", systemdUnitName(user));
+  return resolve20("/etc/systemd/system", systemdUnitName(user));
 }
 function legacySystemdUserUnitPath() {
-  return resolve19(homedir32(), ".config", "systemd", "user", "failproofaid.service");
+  return resolve20(homedir34(), ".config", "systemd", "user", "failproofaid.service");
 }
-function launchdPlistPath() {
-  return `/Library/LaunchDaemons/${LAUNCHD_LABEL}.plist`;
+function launchdLabel(user = serviceUser()) {
+  return `ai.failproof.failproofaid.${user}`;
+}
+function launchdPlistPath(user = serviceUser()) {
+  return `/Library/LaunchDaemons/${launchdLabel(user)}.plist`;
 }
 function legacyLaunchAgentPlistPath() {
-  return resolve19(homedir32(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
+  return resolve20(homedir34(), "Library", "LaunchAgents", "ai.failproof.failproofaid.plist");
+}
+function legacySharedLaunchDaemonPath() {
+  return "/Library/LaunchDaemons/ai.failproof.failproofaid.plist";
 }
 function daemonServiceFilePath() {
   if (!isDaemonSupportedPlatform())
     return null;
   return process.platform === "linux" ? systemdUnitPath() : launchdPlistPath();
 }
+function primeElevation() {
+  if (typeof process.getuid === "function" && process.getuid() === 0)
+    return true;
+  if (canElevate())
+    return true;
+  try {
+    execFileSync4("sudo", ["-v"], { stdio: "inherit", timeout: SUDO_PROMPT_TIMEOUT_MS });
+    return canElevate();
+  } catch {
+    return false;
+  }
+}
 function canElevate() {
   if (typeof process.getuid === "function" && process.getuid() === 0)
     return true;
@@ -22875,19 +23266,20 @@ function runPrivileged(command, args) {
   execFileSync4(cmd, argv, { stdio: "ignore", timeout: SERVICE_CMD_TIMEOUT_MS });
 }
 function writePrivilegedFile(destination, contents, mode = "0644") {
-  const staging = resolve19(tmpdir(), `failproofaid-${process.pid}-${Date.now()}.tmp`);
+  const stagingDir = mkdtempSync(resolve20(tmpdir(), "failproofaid-stage-"));
+  const staging = resolve20(stagingDir, "service-definition");
   try {
     writeFileSync10(staging, contents, "utf8");
     runPrivileged("install", ["-m", mode, staging, destination]);
   } finally {
-    rmSync4(staging, { force: true });
+    rmSync6(stagingDir, { recursive: true, force: true });
   }
 }
 function removeLegacyUserService() {
   try {
     if (process.platform === "linux") {
       const legacy = legacySystemdUserUnitPath();
-      if (!existsSync21(legacy))
+      if (!existsSync24(legacy))
         return;
       try {
         execFileSync4("systemctl", ["--user", "disable", "--now", "failproofaid.service"], {
@@ -22903,16 +23295,23 @@ function removeLegacyUserService() {
         });
       } catch {}
     } else {
-      const legacy = legacyLaunchAgentPlistPath();
-      if (!existsSync21(legacy))
-        return;
-      try {
-        execFileSync4("launchctl", ["unload", "-w", legacy], {
-          stdio: "ignore",
-          timeout: SERVICE_CMD_TIMEOUT_MS
-        });
-      } catch {}
-      unlinkSync3(legacy);
+      const legacyAgent = legacyLaunchAgentPlistPath();
+      if (existsSync24(legacyAgent)) {
+        try {
+          execFileSync4("launchctl", ["unload", "-w", legacyAgent], {
+            stdio: "ignore",
+            timeout: SERVICE_CMD_TIMEOUT_MS
+          });
+        } catch {}
+        unlinkSync3(legacyAgent);
+      }
+      const legacyDaemon = legacySharedLaunchDaemonPath();
+      if (existsSync24(legacyDaemon)) {
+        try {
+          runPrivileged("launchctl", ["unload", "-w", legacyDaemon]);
+        } catch {}
+        runPrivileged("rm", ["-f", legacyDaemon]);
+      }
     }
   } catch (err) {
     hookLogWarn(`could not remove the legacy user-scope daemon: ${err instanceof Error ? err.message : String(err)}`);
@@ -22933,7 +23332,7 @@ User=${user}
 # failproofaid is user-scope by construction and refuses to start without
 # HOME ("HOME is not set; failproofaid is user-scope only"), so the one
 # variable it cannot do without is not left to a version-dependent default.
-Environment="HOME=${homedir32()}"
+Environment="HOME=${homedir34()}"
 ${envLine}ExecStart=${binaryPath}
 Restart=on-failure
 RestartSec=2
@@ -22960,7 +23359,7 @@ function launchdPlistContents(binaryPath, logDir2, workerCmd) {
 <plist version="1.0">
 <dict>
     <key>Label</key>
-    <string>${LAUNCHD_LABEL}</string>
+    <string>${escapeXml(launchdLabel())}</string>
     <key>ProgramArguments</key>
     <array>
         <string>${escapeXml(binaryPath)}</string>
@@ -22976,9 +23375,9 @@ function launchdPlistContents(binaryPath, logDir2, workerCmd) {
     <key>UserName</key>
     <string>${escapeXml(serviceUser())}</string>
 ${envBlock}    <key>StandardOutPath</key>
-    <string>${escapeXml(resolve19(logDir2, "failproofaid.log"))}</string>
+    <string>${escapeXml(resolve20(logDir2, "failproofaid.log"))}</string>
     <key>StandardErrorPath</key>
-    <string>${escapeXml(resolve19(logDir2, "failproofaid.err.log"))}</string>
+    <string>${escapeXml(resolve20(logDir2, "failproofaid.err.log"))}</string>
 </dict>
 </plist>
 `;
@@ -23009,7 +23408,7 @@ async function installDaemonService() {
   if (!canElevate()) {
     return {
       installed: false,
-      reason: "root privileges are required to install the failproofaid system service, and sudo is not available without a password. " + `Run: sudo failproofai config  (or install manually: ${daemonInstallCommands(binaryPath, workerCmd).join(" && ")})`
+      reason: "root privileges are required to install the failproofaid system service, and sudo credentials were not available. " + "Re-run `failproofai config` and approve the sudo prompt — do NOT run the CLI itself under sudo, which would " + "configure root's account instead of yours. To install by hand: " + daemonInstallCommands(binaryPath, workerCmd).join(" && ")
     };
   }
   removeLegacyUserService();
@@ -23020,77 +23419,874 @@ async function installDaemonService() {
       runPrivileged("systemctl", ["enable", "--now", systemdUnitName()]);
     } else {
       const plistPath = launchdPlistPath();
-      const logDir2 = resolve19(homedir32(), ".failproofai", "logs");
-      mkdirSync11(logDir2, { recursive: true });
+      const logDir2 = resolve20(homedir34(), ".failproofai", "logs");
+      mkdirSync12(logDir2, { recursive: true });
+      try {
+        runPrivileged("launchctl", ["unload", plistPath]);
+      } catch {}
+      writePrivilegedFile(plistPath, launchdPlistContents(binaryPath, logDir2, workerCmd));
+      runPrivileged("launchctl", ["load", "-w", plistPath]);
+    }
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    hookLogWarn(`daemon service install failed: ${msg}`);
+    return { installed: false, reason: msg };
+  }
+  if (!await waitForDaemonRunning()) {
+    const reason = `failproofaid was installed but did not reach a running state within ${SERVICE_START_TIMEOUT_MS}ms (status: ${daemonServiceStatus()})`;
+    hookLogWarn(`daemon service install failed: ${reason}`);
+    return { installed: false, reason };
+  }
+  return { installed: true };
+}
+async function waitForDaemonRunning() {
+  const deadline = Date.now() + SERVICE_START_TIMEOUT_MS;
+  for (;; ) {
+    if (daemonServiceStatus() === "running")
+      break;
+    if (Date.now() >= deadline)
+      return false;
+    await new Promise((r) => setTimeout(r, SERVICE_START_POLL_MS));
+  }
+  await new Promise((r) => setTimeout(r, SERVICE_SETTLE_MS));
+  return daemonServiceStatus() === "running";
+}
+function daemonServiceStatus() {
+  if (!isDaemonSupportedPlatform())
+    return "unsupported-platform";
+  if (process.platform === "linux") {
+    if (!existsSync24(systemdUnitPath()))
+      return "not-installed";
+    try {
+      const out = execFileSync4("systemctl", ["is-active", systemdUnitName()], {
+        stdio: ["ignore", "pipe", "ignore"],
+        timeout: SERVICE_CMD_TIMEOUT_MS
+      }).toString().trim();
+      return out === "active" ? "running" : "stopped";
+    } catch {
+      return "stopped";
+    }
+  }
+  const plistPath = launchdPlistPath();
+  if (!existsSync24(plistPath))
+    return "not-installed";
+  try {
+    const root = typeof process.getuid === "function" && process.getuid() === 0;
+    const args = ["print", `system/${launchdLabel()}`];
+    const out = root ? execFileSync4("launchctl", args, {
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: SERVICE_CMD_TIMEOUT_MS
+    }).toString() : execFileSync4("sudo", ["-n", "launchctl", ...args], {
+      stdio: ["ignore", "pipe", "ignore"],
+      timeout: SERVICE_CMD_TIMEOUT_MS
+    }).toString();
+    return /state\s*=\s*running/.test(out) ? "running" : "stopped";
+  } catch {
+    return "stopped";
+  }
+}
+var SERVICE_CMD_TIMEOUT_MS = 1e4, SERVICE_START_TIMEOUT_MS = 5000, SERVICE_START_POLL_MS = 100, SERVICE_SETTLE_MS = 750, SUDO_PROMPT_TIMEOUT_MS = 120000;
+var init_daemon_service = __esm(() => {
+  init_hook_logger();
+  init_hooks_config();
+  init_daemon_download();
+});
+
+// src/hooks/daemon-client.ts
+import { resolve as resolve21 } from "node:path";
+import { homedir as homedir35 } from "node:os";
+import { existsSync as existsSync25 } from "node:fs";
+function daemonSocketPresent2() {
+  try {
+    return existsSync25(socketPath2());
+  } catch {
+    return false;
+  }
+}
+function socketPath2() {
+  if (process.env.FAILPROOFAI_DAEMON_SOCKET)
+    return process.env.FAILPROOFAI_DAEMON_SOCKET;
+  return resolve21(homedir35(), ".failproofai", "run", "failproofaid.sock");
+}
+var MAX_FRAME_LEN2;
+var init_daemon_client2 = __esm(() => {
+  init_hooks_config();
+  MAX_FRAME_LEN2 = 16 * 1024 * 1024;
+});
+
+// src/hooks/collector-config.ts
+import {
+  writeFileSync as writeFileSync11,
+  mkdirSync as mkdirSync13,
+  existsSync as existsSync26,
+  chmodSync as chmodSync4,
+  statSync as statSync18,
+  readFileSync as readFileSync20,
+  rmSync as rmSync7
+} from "node:fs";
+import { join as join32 } from "node:path";
+import { homedir as homedir36 } from "node:os";
+function failproofaiHome() {
+  return process.env.FAILPROOFAI_HOME || join32(homedir36(), ".failproofai");
+}
+function ingestPath() {
+  return join32(failproofaiHome(), "ingest.json");
+}
+function hasIngestCredential() {
+  return existsSync26(ingestPath());
+}
+function readIngestCredential() {
+  try {
+    const raw = JSON.parse(readFileSync20(ingestPath(), "utf8"));
+    if (typeof raw.url !== "string" || typeof raw.key !== "string")
+      return null;
+    if (!raw.url || !raw.key)
+      return null;
+    return { url: raw.url, key: raw.key };
+  } catch {
+    return null;
+  }
+}
+function clearIngestCredential() {
+  try {
+    rmSync7(ingestPath());
+    return true;
+  } catch {
+    return false;
+  }
+}
+function writeIngestCredential(cred) {
+  const home = failproofaiHome();
+  mkdirSync13(home, { recursive: true });
+  try {
+    const mode = statSync18(home).mode & 511;
+    if (mode & 63)
+      chmodSync4(home, 448);
+  } catch {}
+  const path3 = ingestPath();
+  writeFileSync11(path3, JSON.stringify(cred, null, 2) + `
+`, { mode: 384 });
+  try {
+    chmodSync4(path3, 384);
+  } catch {}
+  return path3;
+}
+function writeCollectorSettings(settings) {
+  const config = readHooksConfig();
+  writeHooksConfig({
+    ...config,
+    collector: {
+      sessions: settings.sessions,
+      hooks: settings.hooks,
+      hooksVerbosity: settings.hooksVerbosity ?? "decisions",
+      redact: settings.redact ?? "minimal",
+      environment: settings.environment ?? "local"
+    }
+  });
+}
+async function validateIngestKey(cred, fetchImpl = fetch, timeoutMs = 1e4) {
+  const controller = new AbortController;
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    const res = await fetchImpl(cred.url, {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${cred.key}`,
+        "Content-Type": "application/x-ndjson"
+      },
+      body: "",
+      redirect: "manual",
+      signal: controller.signal
+    });
+    if (res.status >= 300 && res.status < 400) {
+      return {
+        ok: false,
+        reason: "that URL redirects rather than accepting events — it looks like the dashboard, not the ingest API"
+      };
+    }
+    if (res.status === 401 || res.status === 403) {
+      return { ok: false, reason: `the server rejected that key (${res.status})` };
+    }
+    if (res.status === 404) {
+      return { ok: false, reason: `no ingest endpoint at that URL (404)` };
+    }
+    if (!res.ok) {
+      return { ok: false, reason: `the server answered ${res.status}` };
+    }
+    let body;
+    try {
+      body = await res.json();
+    } catch {
+      return {
+        ok: false,
+        reason: "that URL answered without an ingest response — it is not the events endpoint"
+      };
+    }
+    const shaped = typeof body === "object" && body !== null && typeof body.accepted === "number";
+    if (!shaped) {
+      return {
+        ok: false,
+        reason: "that URL answered, but not with an ingest response — it is not the events endpoint"
+      };
+    }
+    return { ok: true };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return { ok: false, reason: `could not reach the server (${msg})` };
+  } finally {
+    clearTimeout(timer);
+  }
+}
+var DEFAULT_INGEST_URL = "https://server.befailproof.ai/events";
+var init_collector_config = __esm(() => {
+  init_hooks_config();
+});
+
+// src/hooks/cloud-connection.ts
+function ingestUrlFor(baseUrl2) {
+  return `${baseUrl2.replace(/\/$/, "")}${INGEST_PATH}`;
+}
+function cloudBaseFor(url) {
+  const trimmed = url.replace(/\/$/, "");
+  return trimmed.endsWith(INGEST_PATH) ? trimmed.slice(0, -INGEST_PATH.length) : trimmed;
+}
+async function connectToCloud(input) {
+  const creds = {
+    url: input.url,
+    machineId: input.machineId,
+    token: input.token
+  };
+  const verifyPolicy = input.verifyPolicy ?? verifyCloudCredentials;
+  const verifyIngest = input.verifyIngest ?? validateIngestKey;
+  const ingestUrl = ingestUrlFor(input.url);
+  const [policyResult, ingestResult] = await Promise.all([
+    verifyPolicy(creds),
+    verifyIngest({ url: ingestUrl, key: input.token })
+  ]);
+  const outcome = {
+    policy: policyResult.ok ? { ok: true, policyCount: policyResult.policyCount, generation: policyResult.generation } : { ok: false, reason: policyResult.reason },
+    ingest: ingestResult.ok ? { ok: true } : { ok: false, reason: ingestResult.reason },
+    anyConfigured: false
+  };
+  if (policyResult.ok) {
+    writeCloudCredentials(creds);
+    outcome.anyConfigured = true;
+  }
+  if (ingestResult.ok) {
+    writeIngestCredential({ url: ingestUrl, key: input.token });
+    const settings = {
+      hooks: true,
+      sessions: input.sessions === true,
+      environment: input.environment
+    };
+    writeCollectorSettings(settings);
+    outcome.anyConfigured = true;
+  }
+  return outcome;
+}
+function describeOutcome(outcome, machineId, url) {
+  const lines = [];
+  if (outcome.policy.ok && outcome.ingest.ok) {
+    lines.push(`Connected to ${url} as ${machineId}.`);
+    const n = outcome.policy.policyCount ?? 0;
+    lines.push(`  Policy    ${n} polic${n === 1 ? "y" : "ies"} assigned (generation ${outcome.policy.generation ?? 0}).`);
+    lines.push(`  Dashboard hook activity will be sent to ${ingestUrlFor(url)}.`);
+    return lines;
+  }
+  if (outcome.policy.ok && !outcome.ingest.ok) {
+    const n = outcome.policy.policyCount ?? 0;
+    lines.push(`Connected to ${url} as ${machineId} for policy only.`);
+    lines.push(`  Policy    ${n} polic${n === 1 ? "y" : "ies"} assigned (generation ${outcome.policy.generation ?? 0}).`);
+    lines.push(`  Dashboard NOT configured: ${outcome.ingest.reason}`);
+    lines.push("");
+    lines.push("  Enforcement works. Nothing will appear in the dashboard until this");
+    lines.push("  key also carries `events:add`, or you re-run --connect with one that does.");
+    return lines;
+  }
+  if (!outcome.policy.ok && outcome.ingest.ok) {
+    lines.push(`Connected to ${url} as ${machineId} for dashboard reporting only.`);
+    lines.push(`  Dashboard hook activity will be sent to ${ingestUrlFor(url)}.`);
+    lines.push(`  Cloud policy NOT configured: ${outcome.policy.reason}`);
+    lines.push("");
+    lines.push("  This machine keeps enforcing its LOCAL policies and will report what");
+    lines.push("  they decide, but will not receive centrally-managed ones.");
+    return lines;
+  }
+  lines.push(`Could not connect to ${url}.`);
+  lines.push(`  Policy:    ${outcome.policy.reason}`);
+  lines.push(`  Dashboard: ${outcome.ingest.reason}`);
+  return lines;
+}
+function configuredPaths(outcome) {
+  const paths = [];
+  if (outcome.policy.ok)
+    paths.push(cloudCredentialPath());
+  if (outcome.ingest.ok)
+    paths.push(ingestPath());
+  return paths;
+}
+var INGEST_PATH = "/events";
+var init_cloud_connection = __esm(() => {
+  init_cloud_enrollment();
+  init_collector_config();
+});
+
+// src/hooks/cloud-enrollment-cli.ts
+var exports_cloud_enrollment_cli = {};
+__export(exports_cloud_enrollment_cli, {
+  runDisconnectCommand: () => runDisconnectCommand,
+  runConnectCommand: () => runConnectCommand,
+  connectionStatusLines: () => connectionStatusLines
+});
+function daemonWarning(status) {
+  if (status === "running")
+    return [];
+  if (daemonSocketPresent2()) {
+    return [
+      "",
+      "  A daemon is running outside the service manager, so policy is being pulled.",
+      "  Install it as a service to survive reboot and logout: failproofai config"
+    ];
+  }
+  if (status === "unsupported-platform") {
+    return [
+      "",
+      "! failproofaid does not run on this platform yet, so nothing will be pulled.",
+      "  The credentials are stored and will work on a supported machine."
+    ];
+  }
+  if (status === "not-installed") {
+    return [
+      "",
+      "! failproofaid is not installed as a service, so nothing will be pulled yet.",
+      "  Install it with: failproofai config"
+    ];
+  }
+  return [
+    "",
+    "! failproofaid is installed but not running, so nothing will be pulled yet.",
+    "  Check it with: failproofai config --status"
+  ];
+}
+async function runConnectCommand(opts) {
+  if (!opts.url)
+    return { exitCode: 1, lines: ["--connect needs a URL, e.g. --connect https://be.failproof.ai"] };
+  if (!opts.token) {
+    return {
+      exitCode: 1,
+      lines: [
+        "--connect needs a machine token: --token <key>",
+        "",
+        "Create an API key carrying only the `policies:pull` permission for this",
+        "machine. Do not use an admin key."
+      ]
+    };
+  }
+  const validated = validateCloudUrl(cloudBaseFor(opts.url));
+  if (!validated.ok)
+    return { exitCode: 1, lines: [validated.reason] };
+  const machineId = (opts.machineId ?? opts.defaultMachineId ?? "").trim();
+  if (!machineId) {
+    return { exitCode: 1, lines: ["Could not determine a machine id — pass one with --machine-id <id>."] };
+  }
+  const outcome = await connectToCloud({
+    url: validated.url,
+    token: opts.token,
+    machineId,
+    sessions: opts.sessions,
+    environment: opts.environment,
+    verifyPolicy: opts.verify,
+    verifyIngest: opts.verifyIngest
+  });
+  if (!outcome.anyConfigured) {
+    return { exitCode: 1, lines: describeOutcome(outcome, machineId, validated.url) };
+  }
+  const exitCode = outcome.policy.ok ? 0 : 1;
+  const status = (opts.daemonStatus ?? daemonServiceStatus)();
+  const paths = configuredPaths(outcome);
+  const lines = [
+    ...describeOutcome(outcome, machineId, validated.url),
+    `  Token ${maskToken(opts.token)} stored in ${paths.join(" and ")} (owner-only).`
+  ];
+  if (outcome.ingest.ok && opts.sessions !== true) {
+    lines.push("  Session transcripts are NOT being sent. Add --send-transcripts to include them.");
+  }
+  lines.push(...daemonWarning(status));
+  return { exitCode, lines };
+}
+function runDisconnectCommand() {
+  const existing = readCloudCredentials();
+  const hadIngest = hasIngestCredential();
+  const removed = clearCloudCredentials();
+  const removedIngest = clearIngestCredential();
+  if (!removed && !existing && !hadIngest) {
+    return { exitCode: 0, lines: ["This machine is not connected to Failproof Cloud."] };
+  }
+  const lines = [
+    "Disconnected from Failproof Cloud.",
+    "",
+    "  Cloud-managed policies already on disk stop being refreshed. Local",
+    "  builtin, custom and convention policies are unaffected."
+  ];
+  if (removedIngest) {
+    lines.push("  Hook activity and transcripts stop being sent.");
+  }
+  return { exitCode: 0, lines };
+}
+function connectionStatusLines(daemonStatus = daemonServiceStatus) {
+  const envUrl = process.env.FAILPROOFAI_CLOUD_URL;
+  if (envUrl) {
+    return [
+      `Cloud: configured by environment (${envUrl}), which takes precedence over ${cloudCredentialPath()}.`
+    ];
+  }
+  const creds = readCloudCredentials();
+  const ingest = readIngestCredential();
+  if (!creds && !ingest)
+    return ["Cloud: not connected."];
+  const lines = [];
+  if (creds) {
+    lines.push(`Cloud: connected to ${creds.url} as ${creds.machineId} (token ${maskToken(creds.token)}).`);
+    lines.push(`  Policy    pulling centrally-managed policies.`);
+  } else {
+    lines.push(`Cloud: connected to ${cloudBaseFor(ingest.url)} for reporting only.`);
+    lines.push(`  Policy    NOT pulling — this machine enforces only its local policies.`);
+  }
+  if (ingest) {
+    lines.push(`  Dashboard sending hook activity to ${ingest.url}.`);
+  } else {
+    lines.push(`  Dashboard NOT sending — nothing from this machine appears in the dashboard.`);
+    lines.push(`            Re-run: failproofai config --connect ${creds.url} --token <key>`);
+  }
+  lines.push(...daemonWarning(daemonStatus()).map((l) => l === "" ? "" : `  ${l.trim()}`));
+  return lines;
+}
+var init_cloud_enrollment_cli = __esm(() => {
+  init_cloud_enrollment();
+  init_daemon_service();
+  init_daemon_client2();
+  init_cloud_connection();
+  init_collector_config();
+});
+
+// src/hooks/session-pause-cli.ts
+var exports_session_pause_cli = {};
+__export(exports_session_pause_cli, {
+  runPauseCommand: () => runPauseCommand,
+  effectiveCeilingMs: () => effectiveCeilingMs
+});
+function effectiveCeilingMs(cwd) {
+  try {
+    const configured = readMergedHooksConfig(cwd).maxPauseMs;
+    if (typeof configured === "number" && Number.isFinite(configured) && configured > 0) {
+      return Math.min(configured, PAUSE_CEILING_MS);
+    }
+  } catch {}
+  return PAUSE_CEILING_MS;
+}
+function describe(pause, now) {
+  const remaining = formatDuration2(Math.max(0, pause.expiresAt - now));
+  const at = new Date(pause.expiresAt).toLocaleTimeString();
+  const where = pause.cwd ? ` · ${pause.cwd}` : "";
+  return `  ${pause.sessionId}  ${remaining} left (until ${at})${where}`;
+}
+function runPauseCommand(opts) {
+  const now = opts.now ?? Date.now();
+  const cwd = opts.cwd ?? process.cwd();
+  if (opts.action === "status") {
+    const active = listActivePauses(now);
+    if (active.length === 0) {
+      return { exitCode: 0, lines: ["Enforcement is active — nothing is paused."], affected: 0 };
+    }
+    return {
+      exitCode: 0,
+      lines: [
+        `Enforcement paused for ${active.length} session${active.length === 1 ? "" : "s"}:`,
+        ...active.map((p) => describe(p, now)),
+        "",
+        "Cloud-managed policies keep enforcing regardless.",
+        "Resume early with: failproofai config --resume"
+      ],
+      affected: active.length
+    };
+  }
+  if (opts.action === "resume") {
+    if (opts.all) {
+      const active = listActivePauses(now);
+      let cleared2 = 0;
+      for (const pause2 of active)
+        if (clearPause(pause2.sessionId))
+          cleared2++;
+      return {
+        exitCode: 0,
+        lines: [cleared2 === 0 ? "Nothing was paused." : `Resumed enforcement for ${cleared2} session(s).`],
+        affected: cleared2
+      };
+    }
+    const sessionId2 = opts.sessionId ?? resolveSessionForCwd(cwd, undefined, now);
+    if (!sessionId2) {
+      return { exitCode: 0, lines: ["Nothing was paused for this directory."], affected: 0 };
+    }
+    const cleared = clearPause(sessionId2);
+    return {
+      exitCode: 0,
+      lines: [cleared ? "Enforcement resumed." : "Nothing was paused for that session."],
+      affected: cleared ? 1 : 0
+    };
+  }
+  let durationMs;
+  try {
+    durationMs = parsePauseDuration(opts.duration, effectiveCeilingMs(cwd));
+  } catch (err) {
+    return { exitCode: 1, lines: [err instanceof Error ? err.message : String(err)], affected: 0 };
+  }
+  const sessionId = opts.sessionId ?? resolveSessionForCwd(cwd, undefined, now);
+  if (!sessionId) {
+    return {
+      exitCode: 1,
+      lines: [
+        "No recent agent session found for this directory.",
+        "",
+        "A pause applies to one agent session, and the session id only appears once",
+        "an agent has run at least one tool call here. Either run your agent first,",
+        "or name the session explicitly:",
+        "",
+        "  failproofai config --pause --session <id>",
+        "",
+        "Session ids are listed in the dashboard's activity view."
+      ],
+      affected: 0
+    };
+  }
+  const existing = readActivePause(sessionId, now);
+  const pause = writePause({ sessionId, durationMs, cwd, setBy: "cli", now });
+  const until = new Date(pause.expiresAt).toLocaleTimeString();
+  return {
+    exitCode: 0,
+    lines: [
+      existing ? `Enforcement pause extended · ${formatDuration2(durationMs)} · resumes at ${until}` : `Enforcement paused · ${formatDuration2(durationMs)} · resumes at ${until}`,
+      "",
+      "  Builtin, custom and convention policies are suspended for this session.",
+      "  Cloud-managed policies keep enforcing.",
+      "",
+      "It lifts on its own — no action needed. To end it early:",
+      "  failproofai config --resume"
+    ],
+    affected: 1
+  };
+}
+var init_session_pause_cli = __esm(() => {
+  init_session_pause();
+  init_hooks_config();
+});
+
+// src/hooks/manager.ts
+import { execSync as execSync7 } from "node:child_process";
+import { existsSync as existsSync27 } from "node:fs";
+import { resolve as resolve22, basename as basename6 } from "node:path";
+import { homedir as homedir37, platform as platform5, arch as arch4, release as release3, hostname as hostname4 } from "node:os";
+function getSettingsPath2(scope, cwd) {
+  return claudeCode.getSettingsPath(scope, cwd);
+}
+function scopeLabel2(scope) {
+  switch (scope) {
+    case "user":
+      return `~/.claude/settings.json`;
+    case "project":
+      return `{cwd}/.claude/settings.json`;
+    case "local":
+      return `{cwd}/.claude/settings.local.json`;
+  }
+}
+function resolveFailproofaiBinary2() {
+  const override = process.env.FAILPROOFAI_BINARY_OVERRIDE;
+  if (override && override.trim())
+    return override.trim();
+  try {
+    const cmd = process.platform === "win32" ? "where failproofai" : "which failproofai";
+    const result = execSync7(cmd, { encoding: "utf8" }).trim();
+    return result.split(`
+`)[0].trim();
+  } catch {
+    throw new CliError(`failproofai binary not found in PATH.
+` + "Install it globally first: npm install -g failproofai");
+  }
+}
+function validatePolicyNames2(names) {
+  const invalid = names.filter((n) => !VALID_POLICY_NAMES2.has(n));
+  if (invalid.length > 0) {
+    const validList = [...VALID_POLICY_NAMES2].join(", ");
+    throw new CliError(`Unknown policy name(s): ${invalid.join(", ")}
+` + `Valid policies: ${validList}`);
+  }
+}
+function deduplicateScopes2(scopes, cwd) {
+  const seen = new Set;
+  return scopes.filter((s) => {
+    const p = getSettingsPath2(s, cwd);
+    if (seen.has(p))
+      return false;
+    seen.add(p);
+    return true;
+  });
+}
+function hooksInstalledInSettings2(scope, cwd) {
+  return claudeCode.hooksInstalledInSettings(scope, cwd);
+}
+async function installHooks2(policyNames, scope = "user", cwd, includeBeta = false, source, customPoliciesPath, removeCustomHooks = false, cli, options = {}) {
+  const { replace = false, quiet = false } = options;
+  if (!quiet) {
+    return installHooksImpl2(policyNames, scope, cwd, includeBeta, source, customPoliciesPath, removeCustomHooks, cli, replace);
+  }
+  const origLog = console.log;
+  console.log = () => {};
+  try {
+    return await installHooksImpl2(policyNames, scope, cwd, includeBeta, source, customPoliciesPath, removeCustomHooks, cli, replace);
+  } finally {
+    console.log = origLog;
+  }
+}
+async function installHooksImpl2(policyNames, scope = "user", cwd, includeBeta = false, source, customPoliciesPath, removeCustomHooks = false, cli, replace = false) {
+  if (policyNames !== undefined && policyNames.length > 0) {
+    const nonAllNames = policyNames.filter((n) => n !== "all");
+    if (nonAllNames.length > 0)
+      validatePolicyNames2(nonAllNames);
+    if (policyNames.includes("all") && nonAllNames.length > 0) {
+      throw new CliError(`"all" cannot be combined with specific policy names.
+` + `Use either: --install all  or  --install block-sudo sanitize-jwt ...`);
+    }
+  }
+  const selectedClis = cli && cli.length > 0 ? [...new Set(cli)] : ["claude"];
+  for (const cliId of selectedClis) {
+    const integration = getIntegration(cliId);
+    if (!integration.scopes.includes(scope)) {
+      try {
+        await trackHookEvent2(getInstanceId2(), "scope_validation_failed", {
+          cli: cliId,
+          scope,
+          supported_scopes: integration.scopes
+        });
+      } catch {}
+      throw new CliError(`Scope "${scope}" is not supported by ${integration.displayName}. ` + `Valid scopes: ${integration.scopes.join(", ")}`);
+    }
+  }
+  const binaryPath = resolveFailproofaiBinary2();
+  const previousConfig = readScopedHooksConfig(scope, cwd);
+  const previousEnabled = new Set(previousConfig.enabledPolicies);
+  let selectedPolicies;
+  if (policyNames !== undefined) {
+    let incoming;
+    if (policyNames.length === 1 && policyNames[0] === "all") {
+      incoming = BUILTIN_POLICIES.filter((p) => includeBeta || !p.beta).map((p) => p.name);
+    } else {
+      incoming = policyNames;
+    }
+    selectedPolicies = replace ? [...new Set(incoming)] : [...new Set([...previousConfig.enabledPolicies, ...incoming])];
+  } else {
+    const preSelected = previousConfig.enabledPolicies.length > 0 ? previousConfig.enabledPolicies : undefined;
+    selectedPolicies = await promptPolicySelection(preSelected, { includeBeta });
+  }
+  const configToWrite = { ...previousConfig, enabledPolicies: selectedPolicies };
+  if (removeCustomHooks) {
+    delete configToWrite.customPoliciesPath;
+    delete configToWrite.customPoliciesPaths;
+  } else if (customPoliciesPath && (typeof customPoliciesPath === "string" || customPoliciesPath.length > 0)) {
+    const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path3) => resolve22(path3));
+    const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path3) => resolve22(path3)).filter((path3) => {
+      if (existsSync27(path3))
+        return true;
+      console.log(`Dropping custom policies path (file no longer exists): ${path3}`);
+      return false;
+    });
+    configToWrite.customPoliciesPaths = replace ? [...new Set(incoming)] : [...new Set([...carried, ...incoming])];
+    delete configToWrite.customPoliciesPath;
+    for (const path3 of incoming) {
+      let validatedHooks = [];
+      try {
+        validatedHooks = await loadCustomHooks(path3, { strict: true });
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        try {
+          await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
+            scope,
+            error_type: /not found/i.test(msg) ? "file_not_found" : "load_error"
+          });
+        } catch {}
+        console.error(`Error: ${msg}`);
+        process.exit(1);
+      }
+      if (validatedHooks.length === 0) {
+        try {
+          await trackHookEvent2(getInstanceId2(), "custom_policy_validation_failed", {
+            scope,
+            error_type: "no_hooks_registered"
+          });
+        } catch {}
+        console.error(`Error: no hooks registered in ${path3}. ` + `Make sure your file calls customPolicies.add(...) at least once.`);
+        process.exit(1);
+      }
+      console.log(`
+Validated ${validatedHooks.length} custom hook(s) from ${path3}: ${validatedHooks.map((h) => h.name).join(", ")}`);
+    }
+  }
+  writeScopedHooksConfig(configToWrite, scope, cwd);
+  console.log(`
+Enabled ${selectedPolicies.length} policy(ies): ${selectedPolicies.join(", ")}
+`);
+  if (removeCustomHooks) {
+    console.log("Custom hooks path cleared.");
+  } else if (configToWrite.customPoliciesPaths?.length || configToWrite.customPoliciesPath) {
+    const paths = configToWrite.customPoliciesPaths ?? [configToWrite.customPoliciesPath];
+    console.log(`Custom hooks paths: ${paths.join(", ")}`);
+  }
+  const writtenSettingsPaths = [];
+  for (const cliId of selectedClis) {
+    const integration = getIntegration(cliId);
+    const settingsPaths = settingsPathsFor(integration, scope, cwd);
+    try {
+      for (const settingsPath of settingsPaths) {
+        const settings = integration.readSettings(settingsPath);
+        integration.writeHookEntries(settings, binaryPath, scope);
+        integration.writeSettings(settingsPath, settings);
+        writtenSettingsPaths.push({ cli: cliId, path: settingsPath });
+      }
+    } catch (err) {
+      const errorType = err instanceof Error && /EACCES|EPERM/.test(err.message) ? "permission_denied" : err instanceof Error && /ENOENT|ENOTDIR/.test(err.message) ? "path_not_found" : "write_error";
       try {
-        runPrivileged("launchctl", ["unload", plistPath]);
+        await trackHookEvent2(getInstanceId2(), "hook_write_failed", {
+          cli: cliId,
+          scope,
+          error_type: errorType
+        });
       } catch {}
-      writePrivilegedFile(plistPath, launchdPlistContents(binaryPath, logDir2, workerCmd));
-      runPrivileged("launchctl", ["load", "-w", plistPath]);
+      throw err;
     }
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    hookLogWarn(`daemon service install failed: ${msg}`);
-    return { installed: false, reason: msg };
   }
-  if (!await waitForDaemonRunning()) {
-    const reason = `failproofaid was installed but did not reach a running state within ${SERVICE_START_TIMEOUT_MS}ms (status: ${daemonServiceStatus()})`;
-    hookLogWarn(`daemon service install failed: ${reason}`);
-    return { installed: false, reason };
+  try {
+    const newSet = new Set(selectedPolicies);
+    const policiesAdded = selectedPolicies.filter((p) => !previousEnabled.has(p));
+    const policiesRemoved = [...previousEnabled].filter((p) => !newSet.has(p));
+    const distinctId = getInstanceId2();
+    await trackHookEvent2(distinctId, "hooks_installed", {
+      scope,
+      cli: selectedClis,
+      cli_count: selectedClis.length,
+      policies: selectedPolicies,
+      policy_count: selectedPolicies.length,
+      policies_added: policiesAdded,
+      policies_removed: policiesRemoved,
+      ...source ? { source } : {},
+      platform: platform5(),
+      arch: arch4(),
+      os_release: release3(),
+      hostname_hash: hashToId2(hostname4()),
+      has_custom_hooks_path: !!(configToWrite.customPoliciesPaths?.length || configToWrite.customPoliciesPath),
+      has_policy_params: !!(configToWrite.policyParams && Object.keys(configToWrite.policyParams).length > 0),
+      param_policy_names: configToWrite.policyParams ? Object.keys(configToWrite.policyParams) : [],
+      command_format: scope === "project" ? "npx" : "absolute"
+    });
+    if (includeBeta) {
+      const betaNames = new Set(BUILTIN_POLICIES.filter((p) => p.beta).map((p) => p.name));
+      const installedBeta = selectedPolicies.filter((p) => betaNames.has(p));
+      if (installedBeta.length > 0) {
+        await trackHookEvent2(distinctId, "beta_policies_installed", {
+          scope,
+          cli: selectedClis,
+          beta_count: installedBeta.length,
+          beta_policy_names: installedBeta,
+          ...source ? { source } : {}
+        });
+      }
+    }
+  } catch {}
+  for (const { cli: cliId, path: path3 } of writtenSettingsPaths) {
+    const integration = getIntegration(cliId);
+    console.log(`Failproof AI hooks installed for ${integration.displayName} ` + `(${integration.eventTypes.length} event types, scope: ${scope}).`);
+    console.log(`Settings: ${path3}`);
   }
-  return { installed: true };
-}
-async function waitForDaemonRunning() {
-  const deadline = Date.now() + SERVICE_START_TIMEOUT_MS;
-  for (;; ) {
-    if (daemonServiceStatus() === "running")
-      break;
-    if (Date.now() >= deadline)
-      return false;
-    await new Promise((r) => setTimeout(r, SERVICE_START_POLL_MS));
+  if (scope === "project") {
+    console.log(`Command:  npx -y failproofai`);
+    console.log(`
+This file can be committed to git — no machine-specific paths.`);
+  } else {
+    console.log(`Binary:   ${binaryPath}`);
   }
-  await new Promise((r) => setTimeout(r, SERVICE_SETTLE_MS));
-  return daemonServiceStatus() === "running";
-}
-function daemonServiceStatus() {
-  if (!isDaemonSupportedPlatform())
-    return "unsupported-platform";
-  if (process.platform === "linux") {
-    if (!existsSync21(systemdUnitPath()))
-      return "not-installed";
+  const otherScopes = deduplicateScopes2(HOOK_SCOPES, cwd).filter((s) => s !== scope);
+  const duplicates = otherScopes.filter((s) => hooksInstalledInSettings2(s, cwd));
+  if (duplicates.length > 0) {
+    const scopeList = duplicates.map((s) => `${s} (${scopeLabel2(s)})`).join(", ");
+    console.log();
+    console.log(`\x1B[33mWarning: Failproof AI hooks are also installed at ${scopeList}.\x1B[0m`);
+    console.log(`Having hooks in multiple scopes may cause duplicate policy evaluation.`);
+    console.log(`Use \`failproofai policies --uninstall --scope ${duplicates[0]}\` to remove the other installation,`);
+    console.log(`or \`failproofai policies\` to see all scopes.`);
     try {
-      const out = execFileSync4("systemctl", ["is-active", systemdUnitName()], {
-        stdio: ["ignore", "pipe", "ignore"],
-        timeout: SERVICE_CMD_TIMEOUT_MS
-      }).toString().trim();
-      return out === "active" ? "running" : "stopped";
-    } catch {
-      return "stopped";
-    }
-  }
-  const plistPath = launchdPlistPath();
-  if (!existsSync21(plistPath))
-    return "not-installed";
-  try {
-    const root = typeof process.getuid === "function" && process.getuid() === 0;
-    const args = ["print", `system/${LAUNCHD_LABEL}`];
-    const out = root ? execFileSync4("launchctl", args, {
-      stdio: ["ignore", "pipe", "ignore"],
-      timeout: SERVICE_CMD_TIMEOUT_MS
-    }).toString() : execFileSync4("sudo", ["-n", "launchctl", ...args], {
-      stdio: ["ignore", "pipe", "ignore"],
-      timeout: SERVICE_CMD_TIMEOUT_MS
-    }).toString();
-    return /state\s*=\s*running/.test(out) ? "running" : "stopped";
-  } catch {
-    return "stopped";
+      await trackHookEvent2(getInstanceId2(), "multi_scope_warning_shown", {
+        new_scope: scope,
+        existing_scopes: duplicates,
+        cli: selectedClis
+      });
+    } catch {}
   }
 }
-var SERVICE_CMD_TIMEOUT_MS = 1e4, SERVICE_START_TIMEOUT_MS = 5000, SERVICE_START_POLL_MS = 100, SERVICE_SETTLE_MS = 750, LAUNCHD_LABEL = "ai.failproof.failproofaid";
-var init_daemon_service = __esm(() => {
-  init_hook_logger();
+var VALID_POLICY_NAMES2;
+var init_manager2 = __esm(() => {
+  init_types();
+  init_integrations();
+  init_install_prompt();
   init_hooks_config();
-  init_daemon_download();
+  init_builtin_policies();
+  init_custom_hooks_loader();
+  init_hook_telemetry2();
+  init_telemetry_id2();
+  init_cli_error();
+  init_hook_logger();
+  VALID_POLICY_NAMES2 = new Set(BUILTIN_POLICIES.map((p) => p.name));
+});
+
+// src/hooks/policy-presets.ts
+function resolvePreset(id) {
+  const preset = POLICY_PRESETS.find((p) => p.id === id);
+  if (!preset)
+    return [];
+  const cats = new Set(preset.categories);
+  const fromCategories = BUILTIN_POLICIES.filter((p) => !p.beta && cats.has(p.category)).map((p) => p.name);
+  const extras = (preset.extra ?? []).filter((name) => BUILTIN_POLICIES.some((p) => p.name === name && !p.beta));
+  return [...new Set([...fromCategories, ...extras])];
+}
+function resolveEverything() {
+  return BUILTIN_POLICIES.filter((p) => !p.beta).map((p) => p.name);
+}
+var POLICY_PRESETS;
+var init_policy_presets = __esm(() => {
+  init_builtin_policies();
+  POLICY_PRESETS = [
+    {
+      id: "secrets",
+      label: "Secrets & data",
+      description: "Redact secrets in tool output, block .env & secret-file writes, keep reads inside the repo",
+      categories: ["Sanitize", "Environment"],
+      extra: ["block-secrets-write"]
+    },
+    {
+      id: "git",
+      label: "Git safety",
+      description: "Block force-push & pushes to main, warn on history-rewriting git ops",
+      categories: ["Git"]
+    },
+    {
+      id: "ship",
+      label: "Ship discipline",
+      description: "Don't let the agent finish until changes are committed, pushed, PR'd and CI is green",
+      categories: ["Workflow"]
+    },
+    {
+      id: "infra",
+      label: "Cloud & infra",
+      description: "Block kubectl / terraform / aws / gcloud / az / helm / gh pipeline commands",
+      categories: ["Infra Commands"]
+    }
+  ];
 });
 
 // src/audit/cli.ts
@@ -23384,16 +24580,16 @@ __export(exports_configure_wizard, {
   buildPresetChoices: () => buildPresetChoices,
   buildAgentChoices: () => buildAgentChoices
 });
-import { existsSync as existsSync22, mkdirSync as mkdirSync12, writeFileSync as writeFileSync11, readFileSync as readFileSync17 } from "node:fs";
-import { homedir as homedir33 } from "node:os";
-import { resolve as resolve20, sep as sep5 } from "node:path";
+import { existsSync as existsSync28, mkdirSync as mkdirSync14, writeFileSync as writeFileSync12, readFileSync as readFileSync21 } from "node:fs";
+import { homedir as homedir38, hostname as hostname5 } from "node:os";
+import { resolve as resolve23, sep as sep5 } from "node:path";
 async function emit(event, props) {
   try {
     await trackHookEvent2(getInstanceId2(), event, props);
   } catch {}
 }
 function homeify(p) {
-  const home = homedir33();
+  const home = homedir38();
   if (p === home)
     return "~";
   if (p.startsWith(home + sep5))
@@ -23507,8 +24703,8 @@ function setCustomPoliciesEnabled(scope, cwd, enabled) {
   const path3 = getConfigPathForScope(scope, cwd);
   let config = {};
   try {
-    if (existsSync22(path3))
-      config = JSON.parse(readFileSync17(path3, "utf8"));
+    if (existsSync28(path3))
+      config = JSON.parse(readFileSync21(path3, "utf8"));
   } catch {
     return;
   }
@@ -23517,7 +24713,7 @@ function setCustomPoliciesEnabled(scope, cwd, enabled) {
   else
     config.customPoliciesEnabled = false;
   try {
-    writeFileSync11(path3, JSON.stringify(config, null, 2) + `
+    writeFileSync12(path3, JSON.stringify(config, null, 2) + `
 `, "utf8");
   } catch {}
 }
@@ -23548,8 +24744,8 @@ function describeCustomPolicies(cwd) {
   const scopes = [];
   let fileCount = 0;
   const dirs = [
-    { dir: resolve20(cwd, ".failproofai", "policies"), label: "project" },
-    { dir: resolve20(homedir33(), ".failproofai", "policies"), label: "global" }
+    { dir: resolve23(cwd, ".failproofai", "policies"), label: "project" },
+    { dir: resolve23(homedir38(), ".failproofai", "policies"), label: "global" }
   ];
   for (const { dir, label } of dirs) {
     const found = discoverPolicyFiles(dir);
@@ -23559,21 +24755,21 @@ function describeCustomPolicies(cwd) {
       fileCount += found.length;
     }
     for (const name of findSkippedPolicyFiles(dir)) {
-      warnings.push(`! ${homeify(resolve20(dir, name))} is NOT loaded — rename to ` + `${name.replace(/\.(js|mjs|ts)$/, "-policies.$1")}`);
+      warnings.push(`! ${homeify(resolve23(dir, name))} is NOT loaded — rename to ` + `${name.replace(/\.(js|mjs|ts)$/, "-policies.$1")}`);
     }
   }
   return { active, warnings, fileCount, scopes };
 }
 function reviewLines(state) {
-  const { scope, clis, policies, cwd, customEnabled } = state;
+  const { scope, clis, policies, cwd, customEnabled, installDaemon } = state;
   const where = scope === "project" ? `This project (${homeify(cwd)})` : "Everywhere (global)";
   const lines = [];
   const assistantNames = clis.map((c3) => getIntegration(c3).displayName);
   lines.push(`  Where      : ${where}`);
   lines.push(`  Assistants : ${assistantNames.length ? summarize(assistantNames, "assistants") : "(none)"}`);
-  lines.push(`  Policies   : ${policies.length} enabled`);
-  if (scope === "user" && isDaemonSupportedPlatform()) {
-    lines.push(`  Daemon     : failproofaid will be installed/started as a background service`);
+  lines.push(policies.length === 0 ? "  Policies   : none enabled (add later: failproofai policies --install)" : `  Policies   : ${policies.length} enabled`);
+  if (installDaemon && isDaemonSupportedPlatform()) {
+    lines.push(`  Daemon     : failproofaid, installed as a system service running as you`);
   }
   const custom = describeCustomPolicies(cwd);
   if (custom.active.length > 0) {
@@ -23590,23 +24786,23 @@ function reviewLines(state) {
     }
   }
   lines.push(`    ${homeify(getConfigPathForScope(scope, cwd))}   ${policies.length} policies`);
-  if (scope === "user" && isDaemonSupportedPlatform()) {
+  if (installDaemon && isDaemonSupportedPlatform()) {
     const servicePath = daemonServiceFilePath();
     if (servicePath)
-      lines.push(`    ${homeify(servicePath)}   failproofaid service`);
+      lines.push(`    ${homeify(servicePath)}   failproofaid service (needs root)`);
   }
   return lines;
 }
 function firstRunMarkerPath() {
-  return resolve20(homedir33(), ".failproofai", ".launcher-configured");
+  return resolve23(homedir38(), ".failproofai", ".launcher-configured");
 }
 function hasSeenLauncher() {
-  return existsSync22(firstRunMarkerPath());
+  return existsSync28(firstRunMarkerPath());
 }
 function markLauncherSeen() {
   try {
-    mkdirSync12(resolve20(homedir33(), ".failproofai"), { recursive: true });
-    writeFileSync11(firstRunMarkerPath(), "1", "utf8");
+    mkdirSync14(resolve23(homedir38(), ".failproofai"), { recursive: true });
+    writeFileSync12(firstRunMarkerPath(), "1", "utf8");
   } catch {}
 }
 function anyHooksInstalledGlobally() {
@@ -23654,6 +24850,15 @@ async function runConfigureWizard(io = {}) {
     stdout.write(`failproofai config needs an interactive terminal.
 Use the flag form instead, e.g.:
   failproofai policies --install --scope user --cli claude
+`);
+    return { applied: false };
+  }
+  if (typeof process.getuid === "function" && process.getuid() === 0 && process.env.SUDO_USER) {
+    stdout.write(`Run failproofai config as ${process.env.SUDO_USER}, not under sudo.
+` + `Everything it configures is per-user — hooks, policies and the daemon's own
+` + `account — so under sudo it would set all of that up for root instead of you.
+` + `The one step that needs root (installing the service) asks for your password
+on its own.
 `);
     return { applied: false };
   }
@@ -23663,6 +24868,43 @@ Use the flag form instead, e.g.:
     outro("Cancelled — nothing was changed.", { ok: false }, stdout);
     return { applied: false };
   };
+  let daemonWanted = false;
+  let elevated = false;
+  if (isDaemonSupportedPlatform()) {
+    const choice = await selectOne({
+      message: "Install the failproofaid background daemon?",
+      choices: [
+        {
+          label: "Yes — keep policy evaluation warm",
+          value: "install",
+          hint: "a system service, started at boot, running as you · needs your password once"
+        },
+        {
+          label: "Not now",
+          value: "skip",
+          hint: "policies still enforce, evaluated per hook call"
+        }
+      ],
+      stdin,
+      stdout
+    });
+    if (choice === null)
+      return cancel();
+    daemonWanted = choice === "install";
+    if (daemonWanted) {
+      stdout.write(`
+Installing the failproofaid service needs root. Your password stays with sudo.
+`);
+      elevated = primeElevation();
+      if (!elevated) {
+        stdout.write(`Could not get sudo — carrying on without the daemon.
+` + `Everything else still applies, and policies still enforce in-process.
+
+`);
+        daemonWanted = false;
+      }
+    }
+  }
   const scope = await selectOne({
     message: "Where should this apply?",
     choices: buildScopeChoices(cwd),
@@ -23698,9 +24940,8 @@ Use the flag form instead, e.g.:
   const presets = await multiSelect({
     message: "What should we guard against?",
     choices: presetChoices,
-    minSelected: 1,
     summaryNoun: "bundles",
-    hint: "space toggles · combine presets · ↵ confirm",
+    hint: "space toggles · combine presets · ↵ confirm · none is fine",
     stdin,
     stdout
   });
@@ -23708,9 +24949,141 @@ Use the flag form instead, e.g.:
     return cancel();
   const policies = resolvePresetSelection(presets);
   const customEnabled = hasCustomFiles ? presets.includes(CUSTOM) : undefined;
+  let collector = null;
+  if (daemonWanted) {
+    const send = await selectOne({
+      message: "Send session and hook data to AgentEye?",
+      choices: [
+        {
+          label: "Not now",
+          value: "no",
+          hint: "nothing leaves this machine"
+        },
+        {
+          label: "Yes — connect to a dashboard",
+          value: "yes",
+          hint: "needs an events:add API key"
+        }
+      ],
+      stdin,
+      stdout
+    });
+    if (send === null)
+      return cancel();
+    if (send === "yes") {
+      const existing = readCloudCredentials();
+      let url = null;
+      let key = null;
+      if (existing) {
+        const reuse = await selectOne({
+          message: `Use this machine's existing connection to ${existing.url}?`,
+          choices: [
+            {
+              label: `Yes — reuse it`,
+              value: "reuse",
+              hint: `as ${existing.machineId}, same token`
+            },
+            { label: "No — use a different endpoint and key", value: "other", hint: "" }
+          ],
+          stdin,
+          stdout
+        });
+        if (reuse === null)
+          return cancel();
+        if (reuse === "reuse") {
+          url = ingestUrlFor(existing.url);
+          key = existing.token;
+        }
+      }
+      if (url === null) {
+        const entered = await promptText({
+          message: "Failproof Cloud URL",
+          defaultValue: cloudBaseFor(DEFAULT_INGEST_URL),
+          hint: "Enter for the hosted endpoint",
+          validate: (v) => /^https?:\/\//.test(v) ? null : "must be an http(s) URL",
+          stdin,
+          stdout
+        });
+        if (entered === null)
+          return cancel();
+        url = ingestUrlFor(cloudBaseFor(entered));
+      }
+      if (key === null) {
+        key = await promptText({
+          message: "API key",
+          hint: "needs events:add",
+          mask: true,
+          validate: (v) => v.length >= 8 ? null : "that looks too short to be a key",
+          stdin,
+          stdout
+        });
+        if (key === null)
+          return cancel();
+      }
+      stdout.write(`
+Checking the key… `);
+      const check = await validateIngestKey({ url, key });
+      if (!check.ok) {
+        stdout.write(`
+That did not work: ${check.reason}
+`);
+        const retry = await selectOne({
+          message: "Carry on without sending data?",
+          choices: [
+            { label: "Yes, skip it", value: "skip", hint: "re-run failproofai config later" },
+            { label: "Save it anyway", value: "anyway", hint: "if you know the server is just down" }
+          ],
+          stdin,
+          stdout
+        });
+        if (retry === null)
+          return cancel();
+        if (retry === "skip") {
+          stdout.write(`Skipping data collection. Everything else still applies.
+
+`);
+        } else {
+          collector = { cred: { url, key }, sessions: false };
+        }
+      } else {
+        stdout.write(`looks good.
+`);
+        const sessions = await selectOne({
+          message: "What should it send?",
+          choices: [
+            {
+              label: "Policy decisions only",
+              value: "hooks",
+              hint: "which hooks fired and what they decided · no file contents"
+            },
+            {
+              label: "Decisions and full session transcripts",
+              value: "both",
+              hint: "includes prompts, file contents and command output"
+            }
+          ],
+          stdin,
+          stdout
+        });
+        if (sessions === null)
+          return cancel();
+        collector = { cred: { url, key }, sessions: sessions === "both" };
+        if (!readCloudCredentials()) {
+          const base = cloudBaseFor(url);
+          const machineId = hostname5();
+          const enrol = await verifyCloudCredentials({ url: base, machineId, token: key });
+          if (enrol.ok) {
+            writeCloudCredentials({ url: base, machineId, token: key });
+            stdout.write(`Also connected for cloud-managed policy (${enrol.policyCount} assigned, generation ${enrol.generation}).
+`);
+          }
+        }
+      }
+    }
+  }
   const decision = await selectOne({
     message: "Ready to apply?",
-    body: reviewLines({ scope, clis, policies, cwd, customEnabled }),
+    body: reviewLines({ scope, clis, policies, cwd, customEnabled, installDaemon: daemonWanted }),
     choices: [
       { label: "Yes, apply now", value: "apply", hint: "write the config" },
       { label: "Cancel", value: "cancel", hint: "quit, no changes" }
@@ -23730,7 +25103,7 @@ Use the flag form instead, e.g.:
   await installHooks2(policies, scope, cwd, false, "configure-wizard", undefined, false, clis, { replace: true, quiet: true });
   setCustomPoliciesEnabled(scope, cwd, customEnabled);
   let daemonInstalled = false;
-  if (scope === "user" && isDaemonSupportedPlatform()) {
+  if (daemonWanted) {
     const daemonResult = await installDaemonService();
     if (daemonResult.installed) {
       setDaemonConfigured(true);
@@ -23744,6 +25117,22 @@ Use the flag form instead, e.g.:
       platform: process.platform
     });
   }
+  if (collector && daemonInstalled) {
+    try {
+      writeIngestCredential(collector.cred);
+      writeCollectorSettings({
+        sessions: collector.sessions,
+        hooks: true,
+        hooksVerbosity: "decisions",
+        redact: "minimal"
+      });
+      emit("configure_collector", { sessions: collector.sessions });
+    } catch (err) {
+      hookLogWarn(`collector configuration was not written: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  } else if (collector && !daemonInstalled) {
+    hookLogWarn("skipped collector configuration because the daemon was not installed");
+  }
   await applied;
   markLauncherSeen();
   const customNote = customEnabled === true ? " + your custom policies" : customEnabled === false ? " · custom policies DISABLED" : "";
@@ -23755,6 +25144,7 @@ Use the flag form instead, e.g.:
 var EVERYTHING = "__everything__", ALL_CLIS = "__all_clis__", CUSTOM = "__custom__", DIM_NOTE = "(auto-loaded)";
 var init_configure_wizard = __esm(() => {
   init_tui();
+  init_collector_config();
   init_integrations();
   init_types();
   init_manager2();
@@ -23765,6 +25155,8 @@ var init_configure_wizard = __esm(() => {
   init_telemetry_id2();
   init_daemon_service();
   init_hook_logger();
+  init_cloud_enrollment();
+  init_cloud_connection();
 });
 
 // scripts/launch.ts
@@ -23773,8 +25165,8 @@ __export(exports_launch2, {
   launch: () => launch2
 });
 import { spawn as spawn3 } from "child_process";
-import { realpathSync as realpathSync3, existsSync as existsSync23 } from "node:fs";
-import { resolve as resolve21, dirname as dirname10 } from "node:path";
+import { realpathSync as realpathSync4, existsSync as existsSync29 } from "node:fs";
+import { resolve as resolve24, dirname as dirname10 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { createInterface as createInterface3 } from "node:readline";
 function launch2(mode) {
@@ -23789,9 +25181,9 @@ function launch2(mode) {
     process.env.PORT = port;
     process.env.HOSTNAME = "0.0.0.0";
     cmd = "node";
-    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve21(dirname10(realpathSync3(fileURLToPath3(import.meta.url))), "..");
-    const serverJsPath = resolve21(packageRoot, ".next/standalone/server.js");
-    if (!existsSync23(serverJsPath)) {
+    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve24(dirname10(realpathSync4(fileURLToPath3(import.meta.url))), "..");
+    const serverJsPath = resolve24(packageRoot, ".next/standalone/server.js");
+    if (!existsSync29(serverJsPath)) {
       let shadowMessage = null;
       try {
         const diag = diagnoseShadow({ selfPackageRoot: packageRoot, selfVersion: version2 });
@@ -23885,18 +25277,18 @@ var init_cli_error2 = __esm(() => {
 });
 
 // bin/failproofai.mjs
-import { realpathSync as realpathSync4 } from "fs";
-import { dirname as dirname11, resolve as resolve22 } from "path";
+import { realpathSync as realpathSync5 } from "fs";
+import { dirname as dirname11, resolve as resolve25 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 // package.json
-var version = "1.0.0-beta.1";
+var version = "1.0.0-beta.3";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {
-  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve22(dirname11(realpathSync4(fileURLToPath4(import.meta.url))), "..");
+  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve25(dirname11(realpathSync5(fileURLToPath4(import.meta.url))), "..");
 }
 if (!process.env.FAILPROOFAI_DIST_PATH) {
-  process.env.FAILPROOFAI_DIST_PATH = resolve22(dirname11(realpathSync4(fileURLToPath4(import.meta.url))), "..", "dist");
+  process.env.FAILPROOFAI_DIST_PATH = resolve25(dirname11(realpathSync5(fileURLToPath4(import.meta.url))), "..", "dist");
 }
 var args = process.argv.slice(2);
 if (args[0] === "p")
@@ -24433,11 +25825,127 @@ WHAT IT DOES
     3. Policies   \u2014 presets (combine any), Everything, or a custom pick
     4. Review     \u2014 confirms the exact files it will change, then applies
 
+FAILPROOF CLOUD
+  failproofai config --connect <url> --token <key> [--machine-id <id>]
+                                    Connect this machine to Failproof Cloud
+                                    [--send-transcripts] also send full session transcripts
+  failproofai config --disconnect   Stop pulling policy and sending activity
+  failproofai config --status       Show connection and pause state
+
+  One connection, two capabilities: this machine PULLS centrally-managed
+  policies and SENDS what its hooks decided, so the dashboard shows the fleet
+  it is enforcing on. Both are checked against the server before anything is
+  written, and reported separately \u2014 a key carrying policies:pull but not
+  events:add connects for policy and says exactly why the dashboard is empty.
+
+  Tokens are stored owner-only in ~/.failproofai/, never in the service unit \u2014
+  that file is world-readable. Connecting needs no sudo, and the machine id
+  defaults to this host's name.
+
+  Session transcripts carry prompts, file contents and whatever was pasted into
+  a terminal, so they are NEVER sent unless --send-transcripts is passed.
+
+PAUSING ENFORCEMENT (one session, always time-boxed)
+  failproofai config --pause         Pause this directory's newest agent session (30m)
+  failproofai config --pause 10m     Pause for a given time (max 8h; s/m/h, bare = minutes)
+  failproofai config --resume        End the pause early
+  failproofai config --status        Show what is paused and when it lifts
+    --session <id>                     Target a specific session
+    --all                              With --resume, end every active pause
+
+  A pause suspends builtin, custom and convention policies for that session
+  only, and always expires on its own. Cloud-managed policies keep enforcing.
+
   Prefer flags? See \`failproofai policies --help\`.
 `.trimStart());
       process.exit(0);
     }
     lastSubcommand = "config";
+    const connectIdx = args.indexOf("--connect");
+    const wantsDisconnect = args.includes("--disconnect");
+    if (connectIdx >= 0 || wantsDisconnect) {
+      if (connectIdx >= 0 && wantsDisconnect) {
+        throw new CliError3("--connect and --disconnect cannot be combined.");
+      }
+      const valueAfter = (flag) => {
+        const i = args.indexOf(flag);
+        if (i < 0)
+          return;
+        const v = args[i + 1];
+        if (!v || v.startsWith("-"))
+          throw new CliError3(`Missing value after ${flag}.`);
+        return v;
+      };
+      let result2;
+      if (wantsDisconnect) {
+        const { runDisconnectCommand: runDisconnectCommand2 } = await Promise.resolve().then(() => (init_cloud_enrollment_cli(), exports_cloud_enrollment_cli));
+        result2 = runDisconnectCommand2();
+      } else {
+        const { hostname: hostname6 } = await import("os");
+        const { runConnectCommand: runConnectCommand2 } = await Promise.resolve().then(() => (init_cloud_enrollment_cli(), exports_cloud_enrollment_cli));
+        result2 = await runConnectCommand2({
+          url: valueAfter("--connect"),
+          token: valueAfter("--token"),
+          machineId: valueAfter("--machine-id"),
+          defaultMachineId: hostname6(),
+          sessions: args.includes("--send-transcripts")
+        });
+      }
+      for (const line of result2.lines) {
+        if (result2.exitCode === 0)
+          console.log(line);
+        else
+          console.error(line);
+      }
+      await track("cli_cloud_enrollment", {
+        action: wantsDisconnect ? "disconnect" : "connect",
+        ok: result2.exitCode === 0
+      });
+      await exitAfterFlush(result2.exitCode);
+      return;
+    }
+    const pauseIdx = args.indexOf("--pause");
+    const wantsResume = args.includes("--resume");
+    const wantsStatus = args.includes("--status");
+    if (pauseIdx >= 0 || wantsResume || wantsStatus) {
+      const chosen = [pauseIdx >= 0 && "--pause", wantsResume && "--resume", wantsStatus && "--status"].filter(Boolean);
+      if (chosen.length > 1) {
+        throw new CliError3(`${chosen.join(" and ")} cannot be combined.`);
+      }
+      const sessionIdx = args.indexOf("--session");
+      if (sessionIdx >= 0 && !args[sessionIdx + 1]) {
+        throw new CliError3("Missing session id after --session.");
+      }
+      const next = pauseIdx >= 0 ? args[pauseIdx + 1] : undefined;
+      const duration = next && !next.startsWith("-") ? next : undefined;
+      const { runPauseCommand: runPauseCommand2 } = await Promise.resolve().then(() => (init_session_pause_cli(), exports_session_pause_cli));
+      const result2 = runPauseCommand2({
+        action: pauseIdx >= 0 ? "pause" : wantsResume ? "resume" : "status",
+        duration,
+        sessionId: sessionIdx >= 0 ? args[sessionIdx + 1] : undefined,
+        all: args.includes("--all"),
+        cwd: process.cwd()
+      });
+      if (wantsStatus) {
+        const { connectionStatusLines: connectionStatusLines2 } = await Promise.resolve().then(() => (init_cloud_enrollment_cli(), exports_cloud_enrollment_cli));
+        for (const line of connectionStatusLines2())
+          console.log(line);
+        console.log("");
+      }
+      for (const line of result2.lines) {
+        if (result2.exitCode === 0)
+          console.log(line);
+        else
+          console.error(line);
+      }
+      await track("cli_pause_invoked", {
+        action: pauseIdx >= 0 ? "pause" : wantsResume ? "resume" : "status",
+        ok: result2.exitCode === 0,
+        affected: result2.affected
+      });
+      await exitAfterFlush(result2.exitCode);
+      return;
+    }
     const { runConfigureWizard: runConfigureWizard2 } = await Promise.resolve().then(() => (init_configure_wizard(), exports_configure_wizard));
     const result = await runConfigureWizard2();
     await track("cli_configure_invoked", {