failproofai 1.0.0-beta.2 → 1.0.0-beta.3

package/dist/worker.mjs

@@ -655,6 +655,41 @@ function getFilePath(ctx) {
 function parseArgvTokens(cmd) {
   return cmd.trim().split(/\s+/).map((t) => t.replace(/^['"]|['"]$/g, ""));
 }
+function decodeAnsiC(body) {
+  return body.replace(/\\(x[0-9A-Fa-f]{1,2}|u[0-9A-Fa-f]{1,4}|U[0-9A-Fa-f]{1,8}|[0-7]{1,3}|.)/g, (_, seq) => {
+    try {
+      if (seq[0] === "x")
+        return String.fromCharCode(parseInt(seq.slice(1), 16));
+      if (seq[0] === "u" || seq[0] === "U")
+        return String.fromCodePoint(parseInt(seq.slice(1), 16));
+      if (/^[0-7]+$/.test(seq))
+        return String.fromCharCode(parseInt(seq, 8));
+    } catch {
+      return seq;
+    }
+    const named = {
+      a: "\x07",
+      b: "\b",
+      e: "\x1B",
+      f: "\f",
+      n: `
+`,
+      r: "\r",
+      t: "\t",
+      v: "\v",
+      "\\": "\\",
+      "'": "'",
+      '"': '"',
+      "?": "?"
+    };
+    return named[seq] ?? seq;
+  });
+}
+function stripShellQuoting(command) {
+  const joined = command.replace(/\\\r?\n/g, "");
+  const ansiDecoded = joined.replace(/\$'((?:[^'\\]|\\.)*)'/g, (_, body) => decodeAnsiC(body));
+  return ansiDecoded.replace(/\\(.)/g, "$1").replace(/['"]/g, "");
+}
 function statGitHeadMtimeMs(cwd) {
   try {
     return statSync3(join2(cwd, ".git", "HEAD")).mtimeMs;
@@ -917,6 +952,15 @@ function blockSudo(ctx) {
   }
   return allow();
 }
+function blockSelfPause(ctx) {
+  if (ctx.toolName !== "Bash")
+    return allow();
+  const cmd = getCommand(ctx);
+  if (SELF_PAUSE_RE.test(cmd) || SELF_PAUSE_RE.test(stripShellQuoting(cmd))) {
+    return deny("Pausing failproofai enforcement is a human action, not an agent one. " + "If a policy is blocking legitimate work, say so and let the operator decide.");
+  }
+  return allow();
+}
 function blockCurlPipeSh(ctx) {
   if (ctx.toolName !== "Bash")
     return allow();
@@ -1654,7 +1698,7 @@ function registerBuiltinPolicies(enabledNames) {
     }
   }
 }
-var isClaudeInternalPath, isClaudeSettingsFile, SHELL_OPERATORS, SHELL_METACHAR_RE, JWT_RE, API_KEY_PATTERNS, CONNECTION_STRING_RE, PRIVATE_KEY_RE, BEARER_TOKEN_RE, SQL_TOOL_RE, DESTRUCTIVE_SQL_RE, DELETE_NO_WHERE_RE, SQL_WHERE_RE, SCHEMA_ALTER_RE, PUBLISH_CMD_RE, ENV_PRINTENV_RE, ECHO_ENV_RE, EXPORT_RE, PS_ENV_VAR_RE, PS_CHILDITEM_ENV_RE, DOTNET_GETENV_RE, CMD_ECHO_ENV_RE, ENV_FILE_PATH_RE, ENV_CMD_RE, SUDO_RE, PS_ELEVATION_RE, RUNAS_RE, CURL_PIPE_SH_RE, PS_WEB_PIPE_RE, SHORT_FLAG_BUNDLE_RE, SAFE_FORCE_PREFIXES, SECRET_FILE_RE, SECRET_FILE_ID_RSA_RE, SECRET_FILE_CREDENTIALS_RE, GIT_COMMIT_MERGE_RE, FAILPROOFAI_CLI_RE, FAILPROOFAI_UNINSTALL_RE, GIT_AMEND_RE, GIT_STASH_DROP_RE, GIT_ADD_ALL_RE, NPM_GLOBAL_RE, YARN_GLOBAL_RE, PNPM_GLOBAL_RE, BUN_GLOBAL_RE, CARGO_INSTALL_RE, PIP_SYSTEM_RE, PKG_MANAGER_DETECTORS, NOHUP_RE, SCREEN_DETACH_RE, TMUX_DETACH_RE, DISOWN_RE, BACKGROUND_AMPERSAND_RE, KUBECTL_RE, TERRAFORM_RE, AWS_CLI_RE, GCLOUD_RE, AZ_CLI_RE, HELM_RE, GH_PIPELINE_RE, gitBranchCache, GIT_BRANCH_CACHE_MAX_ENTRIES = 500, HOME_PREFIX_RE, RM_CMD_RE, FIND_CMD_RE, FIND_EXEC_RE, FIND_GLOBAL_OPT_RE, FIND_EXPR_START_RE, SCRATCH_ROOTS, CATASTROPHIC_DEPTH = 2, READ_LIKE_CMDS, TOOL_CALL_TRACKER_MAX_BYTES = 65536, SEGMENT_SPLIT_RE, BUILTIN_POLICIES;
+var isClaudeInternalPath, isClaudeSettingsFile, SHELL_OPERATORS, SHELL_METACHAR_RE, JWT_RE, API_KEY_PATTERNS, CONNECTION_STRING_RE, PRIVATE_KEY_RE, BEARER_TOKEN_RE, SQL_TOOL_RE, DESTRUCTIVE_SQL_RE, DELETE_NO_WHERE_RE, SQL_WHERE_RE, SCHEMA_ALTER_RE, PUBLISH_CMD_RE, ENV_PRINTENV_RE, ECHO_ENV_RE, EXPORT_RE, PS_ENV_VAR_RE, PS_CHILDITEM_ENV_RE, DOTNET_GETENV_RE, CMD_ECHO_ENV_RE, ENV_FILE_PATH_RE, ENV_CMD_RE, SUDO_RE, PS_ELEVATION_RE, RUNAS_RE, CURL_PIPE_SH_RE, SELF_PAUSE_RE, PS_WEB_PIPE_RE, SHORT_FLAG_BUNDLE_RE, SAFE_FORCE_PREFIXES, SECRET_FILE_RE, SECRET_FILE_ID_RSA_RE, SECRET_FILE_CREDENTIALS_RE, GIT_COMMIT_MERGE_RE, FAILPROOFAI_CLI_RE, FAILPROOFAI_UNINSTALL_RE, GIT_AMEND_RE, GIT_STASH_DROP_RE, GIT_ADD_ALL_RE, NPM_GLOBAL_RE, YARN_GLOBAL_RE, PNPM_GLOBAL_RE, BUN_GLOBAL_RE, CARGO_INSTALL_RE, PIP_SYSTEM_RE, PKG_MANAGER_DETECTORS, NOHUP_RE, SCREEN_DETACH_RE, TMUX_DETACH_RE, DISOWN_RE, BACKGROUND_AMPERSAND_RE, KUBECTL_RE, TERRAFORM_RE, AWS_CLI_RE, GCLOUD_RE, AZ_CLI_RE, HELM_RE, GH_PIPELINE_RE, gitBranchCache, GIT_BRANCH_CACHE_MAX_ENTRIES = 500, HOME_PREFIX_RE, RM_CMD_RE, FIND_CMD_RE, FIND_EXEC_RE, FIND_GLOBAL_OPT_RE, FIND_EXPR_START_RE, SCRATCH_ROOTS, CATASTROPHIC_DEPTH = 2, READ_LIKE_CMDS, TOOL_CALL_TRACKER_MAX_BYTES = 65536, SEGMENT_SPLIT_RE, BUILTIN_POLICIES;
 var init_builtin_policies = __esm(() => {
   init_hook_logger();
   isClaudeInternalPath = isAgentInternalPath;
@@ -1695,6 +1739,7 @@ var init_builtin_policies = __esm(() => {
   PS_ELEVATION_RE = /Start-Process\s+.*-Verb\s+RunAs/i;
   RUNAS_RE = /(?:^|;|&&|\|\|)\s*runas\s/i;
   CURL_PIPE_SH_RE = /(?:curl|wget)\s.*\|\s*(?:sh|bash|zsh|dash|ksh|csh|tcsh|fish|ash)\b/;
+  SELF_PAUSE_RE = /failproofai[^\s]*(?:\s+\S+)*?\s+(?:config|configure|setup)\b(?:\s+\S+)*?\s+--pause\b/;
   PS_WEB_PIPE_RE = /(?:Invoke-WebRequest|iwr|Invoke-RestMethod|irm)\s+.*\|\s*(?:Invoke-Expression|iex)/i;
   SHORT_FLAG_BUNDLE_RE = /^-[a-zA-Z]*f[a-zA-Z]*$/;
   SAFE_FORCE_PREFIXES = ["--force-with-lease", "--force-if-includes"];
@@ -1842,6 +1887,16 @@ var init_builtin_policies = __esm(() => {
         }
       }
     },
+    {
+      name: "block-self-pause",
+      displayTitle: "Tried to pause failproofai enforcement",
+      impact: "An agent that can pause enforcement can switch off every other policy.",
+      description: "Block agents from pausing failproofai enforcement",
+      fn: blockSelfPause,
+      match: { events: ["PreToolUse", "PermissionRequest"], toolNames: ["Bash"] },
+      defaultEnabled: true,
+      category: "Dangerous Commands"
+    },
     {
       name: "block-sudo",
       displayTitle: "Tried to run a command with sudo",
@@ -2285,7 +2340,7 @@ var init_builtin_policies = __esm(() => {
 });
 
 // package.json
-var version = "1.0.0-beta.2";
+var version = "1.0.0-beta.3";
 var init_package = () => {};
 
 // src/posthog-key.ts
@@ -3158,8 +3213,14 @@ function clearCustomHooks() {
   const g = globalThis;
   g[REGISTRY_KEY2] = [];
 }
-var REGISTRY_KEY2 = "__failproofai_custom_hooks__";
-var init_custom_hooks_registry = () => {};
+var REGISTRY_KEY2 = "__failproofai_custom_hooks__", customPolicies;
+var init_custom_hooks_registry = __esm(() => {
+  customPolicies = {
+    add(hook) {
+      getRegistry2().push(hook);
+    }
+  };
+});
 
 // src/hooks/loader-utils.ts
 import { readFile as readFile2, writeFile as writeFile2, unlink, access } from "fs/promises";
@@ -3200,8 +3261,8 @@ async function resolveLocalImport(fromDir, specifier) {
   }
   return null;
 }
-async function createEsmShim(distIndex, distUrl) {
-  const shimPath = distIndex + ".__failproofai_esm_shim__.mjs";
+async function createEsmShim(distIndex, distUrl, tmpSuffix = TMP_SUFFIX) {
+  const shimPath = `${distIndex}${tmpSuffix}.shim.mjs`;
   const shimCode = [
     `import _cjs from '${distUrl}';`,
     `export const customPolicies = _cjs.customPolicies;`,
@@ -3216,13 +3277,13 @@ async function createEsmShim(distIndex, distUrl) {
   await writeFile2(shimPath, shimCode, "utf-8");
   return { shimPath, shimUrl: pathToFileURL(shimPath).href };
 }
-async function rewriteFileTree(entryPath, distUrl, distIndex) {
+async function rewriteFileTree(entryPath, distUrl, distIndex, tmpSuffix = TMP_SUFFIX) {
   const queue = [entryPath];
   const visited = new Set;
   const tmpFiles = [];
   let esmShimUrl = null;
   if (distIndex && distUrl) {
-    const shim = await createEsmShim(distIndex, distUrl);
+    const shim = await createEsmShim(distIndex, distUrl, tmpSuffix);
     tmpFiles.push(shim.shimPath);
     esmShimUrl = shim.shimUrl;
   }
@@ -3253,7 +3314,7 @@ async function rewriteFileTree(entryPath, distUrl, distIndex) {
         if (!visited.has(resolved2) && !queue.includes(resolved2)) {
           queue.push(resolved2);
         }
-        let relPath = relative(dir, resolved2 + TMP_SUFFIX).split("\\").join("/");
+        let relPath = relative(dir, resolved2 + tmpSuffix).split("\\").join("/");
         if (!relPath.startsWith("."))
           relPath = "./" + relPath;
         rewrites.set(specifier, relPath);
@@ -3266,7 +3327,7 @@ async function rewriteFileTree(entryPath, distUrl, distIndex) {
       code = code.replace(new RegExp(`'${escaped}'`, "g"), `'${replacement}'`);
       code = code.replace(new RegExp(`"${escaped}"`, "g"), `"${replacement}"`);
     }
-    const tmpPath = filePath + TMP_SUFFIX;
+    const tmpPath = filePath + tmpSuffix;
     await writeFile2(tmpPath, code, "utf-8");
     tmpFiles.push(tmpPath);
   }
@@ -3288,8 +3349,10 @@ var init_loader_utils = __esm(() => {
 // src/hooks/custom-hooks-loader.ts
 import { resolve as resolve4, isAbsolute, basename } from "node:path";
 import { existsSync as existsSync3, readdirSync } from "node:fs";
+import { readFile as readFile3 } from "node:fs/promises";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
 import { homedir as homedir4 } from "node:os";
+import { createHash } from "node:crypto";
 function discoverPolicyFiles(dir) {
   if (!existsSync3(dir))
     return [];
@@ -3316,10 +3379,24 @@ async function loadSingleFile(absPath, opts) {
   try {
     const distIndex = await findDistIndex();
     const distUrl = distIndex ? pathToFileURL2(distIndex).href : null;
-    tmpFiles = await rewriteFileTree(absPath, distUrl, distIndex);
-    const entryTmp = absPath + TMP_SUFFIX;
-    const fileUrl = `${pathToFileURL2(entryTmp).href}?v=${++loadSequence}`;
+    const sequence = ++loadSequence;
+    const tmpSuffix = `${TMP_SUFFIX}.${process.pid}.${sequence}.mjs`;
+    tmpFiles = await rewriteFileTree(absPath, distUrl, distIndex, tmpSuffix);
+    const fingerprint = await fingerprintTemporaryTree(tmpFiles, tmpSuffix);
+    const cached = policyModuleCache.get(absPath);
+    if (cached?.fingerprint === fingerprint) {
+      for (const hook of cached.hooks)
+        customPolicies.add({ ...hook });
+      return;
+    }
+    const entryTmp = absPath + tmpSuffix;
+    const fileUrl = pathToFileURL2(entryTmp).href;
+    const hooksBefore = getCustomHooks().length;
     await import(fileUrl);
+    policyModuleCache.set(absPath, {
+      fingerprint,
+      hooks: getCustomHooks().slice(hooksBefore).map((hook) => ({ ...hook }))
+    });
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     const errorType = /Cannot find module|MODULE_NOT_FOUND|ENOENT/i.test(msg) ? "module_not_found" : /SyntaxError|Unexpected token/i.test(msg) ? "syntax_error" : "runtime_error";
@@ -3337,6 +3414,15 @@ async function loadSingleFile(absPath, opts) {
     await cleanupTmpFiles(tmpFiles);
   }
 }
+async function fingerprintTemporaryTree(tmpFiles, tmpSuffix) {
+  const hash = createHash("sha256");
+  for (const tmpFile of [...tmpFiles].sort()) {
+    hash.update(tmpFile.replaceAll(tmpSuffix, TMP_SUFFIX));
+    const contents = await readFile3(tmpFile, "utf8");
+    hash.update(contents.replaceAll(tmpSuffix, TMP_SUFFIX));
+  }
+  return hash.digest("hex");
+}
 function customPolicyId(file, name) {
   return `custom:${file}:${name}`;
 }
@@ -3356,6 +3442,7 @@ async function loadAllCustomHooks(customPoliciesPaths, opts) {
   const projectRoot = findProjectConfigDir(opts?.sessionCwd ?? process.cwd());
   const conventionEnabled = opts?.customPoliciesEnabled !== false;
   const loadedPaths = new Set;
+  const cloudManagedByPath = new Map((opts?.cloudManagedPolicies ?? []).map((policy) => [resolve4(policy.path), policy]));
   for (const customPoliciesPath of typeof customPoliciesPaths === "string" ? [customPoliciesPaths] : customPoliciesPaths ?? []) {
     const absPath = resolve4(projectRoot, customPoliciesPath);
     if (existsSync3(absPath)) {
@@ -3364,7 +3451,14 @@ async function loadAllCustomHooks(customPoliciesPaths, opts) {
         const hooksBefore = getCustomHooks().length;
         await loadSingleFile(absPath);
         for (const hook of getCustomHooks().slice(hooksBefore)) {
-          hook.__policyId = customPolicyId(absPath, hook.name);
+          const cloudManaged = cloudManagedByPath.get(absPath);
+          const tagged = hook;
+          if (cloudManaged) {
+            tagged.__cloudManaged = cloudManaged;
+            tagged.__policyId = `cloud:${cloudManaged.id}@${cloudManaged.revision}:${hook.name}`;
+          } else {
+            tagged.__policyId = customPolicyId(absPath, hook.name);
+          }
         }
       }
     } else {
@@ -3436,7 +3530,7 @@ async function loadAllCustomHooks(customPoliciesPaths, opts) {
   }
   return { hooks: allHooks, conventionSources };
 }
-var LOADING_KEY = "__FAILPROOFAI_LOADING_HOOKS__", CONVENTION_FILE_RE, loadSequence = 0, LOADABLE_EXT_RE;
+var LOADING_KEY = "__FAILPROOFAI_LOADING_HOOKS__", CONVENTION_FILE_RE, loadSequence = 0, policyModuleCache, LOADABLE_EXT_RE;
 var init_custom_hooks_loader = __esm(() => {
   init_hook_logger();
   init_custom_hooks_registry();
@@ -3445,6 +3539,7 @@ var init_custom_hooks_loader = __esm(() => {
   init_hook_telemetry();
   init_telemetry_id();
   CONVENTION_FILE_RE = /policies\.(js|mjs|ts)$/;
+  policyModuleCache = new Map;
   LOADABLE_EXT_RE = /\.(js|mjs|ts)$/;
 });
 
@@ -3911,7 +4006,7 @@ __export(exports_copilot_projects, {
   getCachedCopilotSessionsByEncodedName: () => getCachedCopilotSessionsByEncodedName,
   getCachedCopilotProjects: () => getCachedCopilotProjects
 });
-import { readdir as readdir2, readFile as readFile3, stat as stat2 } from "node:fs/promises";
+import { readdir as readdir2, readFile as readFile4, stat as stat2 } from "node:fs/promises";
 import { homedir as homedir8 } from "node:os";
 import { join as join6 } from "node:path";
 function getCopilotSessionStateRoot() {
@@ -3950,7 +4045,7 @@ async function scanCopilotSessions() {
   const settled = await batchAll(candidates.map((c) => async () => {
     let workspaceText;
     try {
-      workspaceText = await readFile3(c.workspacePath, "utf-8");
+      workspaceText = await readFile4(c.workspacePath, "utf-8");
     } catch {
       return null;
     }
@@ -4059,7 +4154,7 @@ __export(exports_cursor_projects, {
   getCachedCursorSessionsByEncodedName: () => getCachedCursorSessionsByEncodedName,
   getCachedCursorProjects: () => getCachedCursorProjects
 });
-import { readdir as readdir3, readFile as readFile4, stat as stat3 } from "node:fs/promises";
+import { readdir as readdir3, readFile as readFile5, stat as stat3 } from "node:fs/promises";
 import { homedir as homedir9 } from "node:os";
 import { join as join7 } from "node:path";
 function getCursorHome() {
@@ -4100,7 +4195,7 @@ async function findFirstUsableMeta(dir, candidates) {
       continue;
     let text;
     try {
-      text = await readFile4(path2, "utf-8");
+      text = await readFile5(path2, "utf-8");
     } catch {
       continue;
     }
@@ -4432,7 +4527,7 @@ __export(exports_pi_projects, {
   getCachedPiSessionsByEncodedName: () => getCachedPiSessionsByEncodedName,
   getCachedPiProjects: () => getCachedPiProjects
 });
-import { readdir as readdir4, readFile as readFile5, stat as stat4 } from "node:fs/promises";
+import { readdir as readdir4, readFile as readFile6, stat as stat4 } from "node:fs/promises";
 import { homedir as homedir10 } from "node:os";
 import { join as join8 } from "node:path";
 function getPiSessionsRoot() {
@@ -4455,7 +4550,7 @@ async function statMtime3(path2) {
 async function readSessionCwd(filePath) {
   let text;
   try {
-    text = await readFile5(filePath, "utf-8");
+    text = await readFile6(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -5037,7 +5132,7 @@ var init_hermes_projects = __esm(() => {
 });
 
 // lib/openclaw-sessions.ts
-import { readFile as readFile6 } from "node:fs/promises";
+import { readFile as readFile7 } from "node:fs/promises";
 import { readdirSync as readdirSync4, statSync as statSync5 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
 import { join as join11 } from "node:path";
@@ -5209,7 +5304,7 @@ async function getOpenClawSessionLog(sessionId) {
     return null;
   let content;
   try {
-    content = await readFile6(filePath, "utf-8");
+    content = await readFile7(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -5406,7 +5501,7 @@ var init_openclaw_projects = __esm(() => {
 });
 
 // lib/factory-sessions.ts
-import { readFile as readFile7 } from "node:fs/promises";
+import { readFile as readFile8 } from "node:fs/promises";
 import { readdirSync as readdirSync5, statSync as statSync6 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
 import { join as join13 } from "node:path";
@@ -5597,7 +5692,7 @@ async function getFactorySessionLog(sessionId) {
     return null;
   let content;
   try {
-    content = await readFile7(filePath, "utf-8");
+    content = await readFile8(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -6001,7 +6096,7 @@ var init_devin_projects = __esm(() => {
 });
 
 // lib/antigravity-sessions.ts
-import { readFile as readFile8 } from "node:fs/promises";
+import { readFile as readFile9 } from "node:fs/promises";
 import { readdirSync as readdirSync6, statSync as statSync7 } from "node:fs";
 import { homedir as homedir15 } from "node:os";
 import { join as join15 } from "node:path";
@@ -6161,7 +6256,7 @@ async function getAntigravitySessionLog(conversationId) {
     return null;
   let content;
   try {
-    content = await readFile8(filePath, "utf-8");
+    content = await readFile9(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -6837,7 +6932,7 @@ async function resolveSubagentPath(projectsPath, projectName, sessionId, agentId
 var init_resolve_subagent_path = () => {};
 
 // lib/log-entries.ts
-import { readFile as readFile9 } from "fs/promises";
+import { readFile as readFile10 } from "fs/promises";
 import { join as join20 } from "path";
 function formatTimestamp(date) {
   const base = formatDate(date);
@@ -7033,7 +7128,7 @@ async function parseSessionLog(projectName, sessionId) {
   const projectDir = resolveProjectPath(projectName);
   const projectsPath = getClaudeProjectsPath();
   const filePath = join20(projectDir, `${sessionId}.jsonl`);
-  const fileContent = await readFile9(filePath, "utf-8");
+  const fileContent = await readFile10(filePath, "utf-8");
   const { entries: sessionEntries, rawLines: sessionRawLines, subagentIds } = await parseFileContent(fileContent, "session");
   if (subagentIds.length === 0) {
     return { entries: sessionEntries, rawLines: sessionRawLines, subagentIds: [] };
@@ -7043,7 +7138,7 @@ async function parseSessionLog(projectName, sessionId) {
     const agentPath = await resolveSubagentPath(projectsPath, projectName, sessionId, agentId);
     if (!agentPath)
       return null;
-    const agentContent = await readFile9(agentPath, "utf-8");
+    const agentContent = await readFile10(agentPath, "utf-8");
     const { entries, rawLines } = await parseFileContent(agentContent, agentSource);
     return { entries, rawLines };
   }), SUBAGENT_CONCURRENCY);
@@ -7070,7 +7165,7 @@ var init_log_entries = __esm(() => {
 
 // lib/codex-sessions.ts
 import { readFileSync as readFileSync5, readdirSync as readdirSync7, existsSync as existsSync6, writeFileSync as writeFileSync3, mkdirSync as mkdirSync4, statSync as statSync8 } from "node:fs";
-import { readFile as readFile10 } from "node:fs/promises";
+import { readFile as readFile11 } from "node:fs/promises";
 import { dirname as dirname4, join as join21 } from "node:path";
 import { homedir as homedir17 } from "node:os";
 function readCache() {
@@ -7344,7 +7439,7 @@ async function getCodexSessionLog(sessionId) {
   const filePath = findCodexTranscript(sessionId);
   if (!filePath)
     return null;
-  const fileContent = await readFile10(filePath, "utf-8");
+  const fileContent = await readFile11(filePath, "utf-8");
   const { entries, rawLines, cwd } = await parseCodexLog(fileContent, "session");
   return { entries, rawLines, cwd, filePath };
 }
@@ -7397,7 +7492,7 @@ var init_resolve_permission_mode = __esm(() => {
 
 // lib/copilot-sessions.ts
 import { readFileSync as readFileSync7, readdirSync as readdirSync8, existsSync as existsSync7, statSync as statSync9 } from "node:fs";
-import { readFile as readFile11 } from "node:fs/promises";
+import { readFile as readFile12 } from "node:fs/promises";
 import { join as join22, resolve as resolve7, sep as sep2 } from "node:path";
 import { homedir as homedir18 } from "node:os";
 function getCopilotHome() {
@@ -7598,7 +7693,7 @@ async function getCopilotSessionLog(sessionId) {
     return null;
   let fileContent;
   try {
-    fileContent = await readFile11(filePath, "utf-8");
+    fileContent = await readFile12(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -7614,7 +7709,7 @@ var init_copilot_sessions = __esm(() => {
 
 // lib/cursor-sessions.ts
 import { readFileSync as readFileSync8, readdirSync as readdirSync9, existsSync as existsSync8, statSync as statSync10 } from "node:fs";
-import { readFile as readFile12 } from "node:fs/promises";
+import { readFile as readFile13 } from "node:fs/promises";
 import { basename as basename3, join as join23, resolve as resolve8, sep as sep3 } from "node:path";
 import { homedir as homedir19 } from "node:os";
 function getCursorHome2() {
@@ -7853,7 +7948,7 @@ async function getCursorSessionLog(sessionId) {
     return null;
   let fileContent;
   try {
-    fileContent = await readFile12(filePath, "utf-8");
+    fileContent = await readFile13(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -7870,7 +7965,7 @@ var init_cursor_sessions = __esm(() => {
 
 // lib/pi-sessions.ts
 import { readFileSync as readFileSync9, readdirSync as readdirSync10, existsSync as existsSync9, statSync as statSync11 } from "node:fs";
-import { readFile as readFile13 } from "node:fs/promises";
+import { readFile as readFile14 } from "node:fs/promises";
 import { join as join24, resolve as resolve9, sep as sep4 } from "node:path";
 import { homedir as homedir20 } from "node:os";
 function getPiSessionStateRoot() {
@@ -8032,7 +8127,7 @@ async function getPiSessionLog(sessionId) {
     return null;
   let fileContent;
   try {
-    fileContent = await readFile13(filePath, "utf-8");
+    fileContent = await readFile14(filePath, "utf-8");
   } catch {
     return null;
   }
@@ -8101,6 +8196,158 @@ var init_resolve_transcript_path = __esm(() => {
   init_factory_sessions();
   init_antigravity_sessions();
 });
+// src/hooks/cloud-managed-policies.ts
+import { createHash as createHash2 } from "node:crypto";
+import { existsSync as existsSync10, readFileSync as readFileSync10, realpathSync } from "node:fs";
+import { homedir as homedir21 } from "node:os";
+import { isAbsolute as isAbsolute2, relative as relative3, resolve as resolve10 } from "node:path";
+function cloudManagedPolicyRoot() {
+  return process.env.FAILPROOFAI_CLOUD_POLICY_DIR ?? resolve10(homedir21(), ".failproofai", "policies", "cloud-managed");
+}
+function parseManifest(value) {
+  if (!value || typeof value !== "object")
+    throw new Error("active manifest is not an object");
+  const manifest = value;
+  if (manifest.schemaVersion !== ACTIVE_SCHEMA_VERSION) {
+    throw new Error(`unsupported active manifest schema ${String(manifest.schemaVersion)}`);
+  }
+  if (!Number.isSafeInteger(manifest.generation) || (manifest.generation ?? -1) < 0) {
+    throw new Error("active manifest generation is invalid");
+  }
+  if (!Array.isArray(manifest.policies))
+    throw new Error("active manifest policies is not an array");
+  return manifest;
+}
+function resolveManagedPath(root, candidate) {
+  if (!candidate || isAbsolute2(candidate))
+    throw new Error(`unsafe managed policy path ${JSON.stringify(candidate)}`);
+  const absolute = resolve10(root, candidate);
+  const lexicalRelative = relative3(root, absolute);
+  if (lexicalRelative.startsWith("..") || isAbsolute2(lexicalRelative)) {
+    throw new Error(`managed policy path escapes its root: ${JSON.stringify(candidate)}`);
+  }
+  const realRoot = realpathSync(root);
+  const realFile = realpathSync(absolute);
+  const physicalRelative = relative3(realRoot, realFile);
+  if (physicalRelative.startsWith("..") || isAbsolute2(physicalRelative)) {
+    throw new Error(`managed policy symlink escapes its root: ${JSON.stringify(candidate)}`);
+  }
+  return realFile;
+}
+function readActiveCloudManagedPolicies() {
+  const root = cloudManagedPolicyRoot();
+  const activePath = resolve10(root, "active.json");
+  if (!existsSync10(activePath))
+    return [];
+  let raw;
+  try {
+    raw = JSON.parse(readFileSync10(activePath, "utf8"));
+  } catch (err) {
+    throw new Error(`failed to read cloud-managed active manifest: ${err instanceof Error ? err.message : String(err)}`);
+  }
+  const manifest = parseManifest(raw);
+  const seen = new Set;
+  return manifest.policies.map((policy) => {
+    if (!POLICY_ID_RE.test(policy.id) || policy.id === "." || policy.id === "..") {
+      throw new Error(`unsafe cloud-managed policy id ${JSON.stringify(policy.id)}`);
+    }
+    if (!Number.isSafeInteger(policy.revision) || policy.revision < 0) {
+      throw new Error(`invalid revision for cloud-managed policy ${policy.id}`);
+    }
+    if (!SHA256_RE.test(policy.sha256)) {
+      throw new Error(`invalid SHA-256 for cloud-managed policy ${policy.id}`);
+    }
+    if (seen.has(policy.id))
+      throw new Error(`duplicate cloud-managed policy id ${policy.id}`);
+    seen.add(policy.id);
+    const path2 = resolveManagedPath(root, policy.path);
+    const bytes = readFileSync10(path2);
+    const actual = createHash2("sha256").update(bytes).digest("hex");
+    if (actual !== policy.sha256) {
+      throw new Error(`cloud-managed policy ${policy.id} failed integrity verification: expected ${policy.sha256}, got ${actual}`);
+    }
+    if (policy.effect !== undefined && policy.effect !== "enforce" && policy.effect !== "observe") {
+      throw new Error(`unknown effect ${JSON.stringify(policy.effect)} for cloud-managed policy ${policy.id}`);
+    }
+    return {
+      id: policy.id,
+      revision: policy.revision,
+      effect: policy.effect ?? "enforce",
+      sha256: policy.sha256,
+      path: path2,
+      generation: manifest.generation
+    };
+  });
+}
+var ACTIVE_SCHEMA_VERSION = 1, SHA256_RE, POLICY_ID_RE;
+var init_cloud_managed_policies = __esm(() => {
+  SHA256_RE = /^[a-f0-9]{64}$/;
+  POLICY_ID_RE = /^[A-Za-z0-9._-]{1,128}$/;
+});
+
+// lib/atomic-write.ts
+var init_atomic_write = () => {};
+
+// src/hooks/session-pause.ts
+import { existsSync as existsSync11, mkdirSync as mkdirSync5, readdirSync as readdirSync11, readFileSync as readFileSync11, rmSync } from "node:fs";
+import { homedir as homedir22 } from "node:os";
+import { createHash as createHash3 } from "node:crypto";
+import { join as join25, resolve as resolve11 } from "node:path";
+function pauseStateDir() {
+  const override = process.env.FAILPROOFAI_STATE_DIR;
+  if (override)
+    return resolve11(override, "sessions");
+  return join25(homedir22(), ".failproofai", "state", "sessions");
+}
+function pauseFilePath(sessionId) {
+  const digest = createHash3("sha256").update(sessionId).digest("hex").slice(0, 32);
+  return join25(pauseStateDir(), `${digest}.json`);
+}
+function parseStored(raw) {
+  if (!raw || typeof raw !== "object")
+    return null;
+  const p = raw;
+  if (p.schemaVersion !== SCHEMA_VERSION)
+    return null;
+  if (typeof p.sessionId !== "string" || p.sessionId.length === 0)
+    return null;
+  if (!Number.isFinite(p.pausedAt) || !Number.isFinite(p.expiresAt))
+    return null;
+  return {
+    schemaVersion: SCHEMA_VERSION,
+    sessionId: p.sessionId,
+    pausedAt: p.pausedAt,
+    expiresAt: p.expiresAt,
+    setBy: typeof p.setBy === "string" ? p.setBy : "unknown",
+    ...typeof p.cwd === "string" ? { cwd: p.cwd } : {}
+  };
+}
+function readActivePause(sessionId, now = Date.now()) {
+  if (!sessionId)
+    return null;
+  try {
+    const path2 = pauseFilePath(sessionId);
+    if (!existsSync11(path2))
+      return null;
+    const stored = parseStored(JSON.parse(readFileSync11(path2, "utf8")));
+    if (!stored)
+      return null;
+    if (stored.expiresAt <= now)
+      return null;
+    const { schemaVersion: _ignored, ...pause } = stored;
+    return pause;
+  } catch {
+    return null;
+  }
+}
+var SCHEMA_VERSION = 1, PAUSE_DEFAULT_MS, PAUSE_CEILING_MS;
+var init_session_pause = __esm(() => {
+  init_atomic_write();
+  init_hook_activity_store();
+  PAUSE_DEFAULT_MS = 30 * 60000;
+  PAUSE_CEILING_MS = 8 * 60 * 60000;
+});
+
 // src/hooks/handler.ts
 function canonicalizeEventType(raw, cli) {
   if (cli === "codex") {
@@ -8135,6 +8382,24 @@ function canonicalizeEventType(raw, cli) {
   }
   return raw;
 }
+async function runObserved(hook, ctx, hookName, eventType, cli) {
+  try {
+    return await Promise.race([
+      hook.fn(ctx),
+      new Promise((_, reject) => setTimeout(() => reject(new Error("timeout")), 1e4))
+    ]);
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    trackHookEvent(getInstanceId(), "custom_hook_error", {
+      hook_name: hookName,
+      error_type: msg === "timeout" ? "timeout" : "exception",
+      event_type: eventType,
+      cli,
+      is_observe_mode: true
+    });
+    return { decision: "allow" };
+  }
+}
 async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts) {
   const startTime = performance.now();
   try {
@@ -8176,6 +8441,10 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
     let config;
     let customHooksList = [];
     let conventionHookNames = new Set;
+    let activePause = null;
+    const policyAttribution = new Map;
+    let cloudGeneration;
+    const observedResults = [];
     if (opts?.forceDecision) {
       config = { enabledPolicies: [] };
       clearPolicies();
@@ -8184,23 +8453,49 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
     } else {
       config = readMergedHooksConfig(session.cwd);
       clearPolicies();
-      registerBuiltinPolicies(config.enabledPolicies);
-      const loadResult = await loadAllCustomHooks(config.customPoliciesPaths ?? config.customPoliciesPath, {
+      activePause = readActivePause(session.sessionId);
+      registerBuiltinPolicies(activePause ? [] : config.enabledPolicies);
+      const cloudManagedPolicies = readActiveCloudManagedPolicies();
+      cloudGeneration = cloudManagedPolicies[0]?.generation;
+      const configuredCustomPaths = config.customPoliciesPaths ?? config.customPoliciesPath;
+      const allExplicitPaths = cloudManagedPolicies.length === 0 ? configuredCustomPaths : [
+        ...typeof configuredCustomPaths === "string" ? [configuredCustomPaths] : configuredCustomPaths ?? [],
+        ...cloudManagedPolicies.map((policy) => policy.path)
+      ];
+      const loadResult = await loadAllCustomHooks(allExplicitPaths, {
         sessionCwd: session.cwd,
-        customPoliciesEnabled: config.customPoliciesEnabled
+        customPoliciesEnabled: config.customPoliciesEnabled,
+        ...cloudManagedPolicies.length > 0 ? { cloudManagedPolicies } : {}
       });
       customHooksList = loadResult.hooks;
       const disabledCustomPolicies = new Set(config.disabledCustomPolicies ?? []);
       conventionHookNames = new Set(loadResult.conventionSources.flatMap((s) => s.hookNames));
       for (const hook of customHooksList) {
-        const policyId = hook.__policyId;
-        if (policyId && disabledCustomPolicies.has(policyId))
+        const taggedHook = hook;
+        const policyId = taggedHook.__policyId;
+        const cloudManaged = taggedHook.__cloudManaged;
+        if (!cloudManaged && policyId && disabledCustomPolicies.has(policyId))
+          continue;
+        if (!cloudManaged && activePause)
           continue;
         const hookName = hook.name;
         const conventionScope = hook.__conventionScope;
         const isConvention = !!conventionScope;
-        const prefix = isConvention ? `.failproofai-${conventionScope}` : "custom";
+        const prefix = cloudManaged ? `cloud/${cloudManaged.id}@${cloudManaged.revision}` : isConvention ? `.failproofai-${conventionScope}` : "custom";
+        const observeOnly = cloudManaged?.effect === "observe";
         const fn = async (ctx) => {
+          if (observeOnly) {
+            const shadow = await runObserved(hook, ctx, hookName, eventType, cli);
+            if (shadow.decision !== "allow") {
+              observedResults.push({
+                policyId: cloudManaged.id,
+                revision: cloudManaged.revision,
+                decision: shadow.decision,
+                reason: shadow.reason ?? null
+              });
+            }
+            return { decision: "allow" };
+          }
           try {
             const result2 = await Promise.race([
               hook.fn(ctx),
@@ -8222,7 +8517,12 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
             return { decision: "allow" };
           }
         };
-        registerPolicy(`${prefix}/${hookName}`, hook.description ?? "", fn, hook.match ?? {}, -1);
+        const registeredName = `${prefix}/${hookName}`;
+        policyAttribution.set(registeredName, {
+          source: cloudManaged ? "cloud" : isConvention ? "convention" : "custom",
+          ...cloudManaged ? { cloudPolicyId: cloudManaged.id, cloudRevision: cloudManaged.revision } : {}
+        });
+        registerPolicy(registeredName, hook.description ?? "", fn, hook.match ?? {}, -1);
       }
       if (customHooksList.length > 0) {
         trackHookEvent(getInstanceId(), "custom_hooks_loaded", {
@@ -8263,7 +8563,18 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
       transcriptPath: session.transcriptPath,
       cwd: session.cwd,
       permissionMode: session.permissionMode,
-      hookEventName: session.hookEventName
+      hookEventName: session.hookEventName,
+      ...result.policyName ? (() => {
+        const attribution = policyAttribution.get(result.policyName);
+        return {
+          policySource: attribution?.source ?? "builtin",
+          ...attribution?.cloudPolicyId ? { cloudPolicyId: attribution.cloudPolicyId } : {},
+          ...attribution?.cloudRevision !== undefined ? { cloudRevision: attribution.cloudRevision } : {}
+        };
+      })() : {},
+      ...cloudGeneration !== undefined ? { cloudGeneration } : {},
+      ...observedResults.length > 0 ? { observed: observedResults } : {},
+      ...activePause ? { pausedBy: activePause.setBy, pauseExpiresAt: activePause.expiresAt } : {}
     };
     try {
       persistHookActivity(activityEntry);
@@ -8315,6 +8626,8 @@ var init_handler = __esm(() => {
   init_resolve_transcript_path();
   init_telemetry_id();
   init_hook_logger();
+  init_cloud_managed_policies();
+  init_session_pause();
 });
 
 // src/hooks/worker-server.ts
@@ -8323,7 +8636,7 @@ __export(exports_worker_server, {
   startWorkerServer: () => startWorkerServer
 });
 import { createServer } from "node:net";
-import { existsSync as existsSync10, unlinkSync as unlinkSync2 } from "node:fs";
+import { existsSync as existsSync12, unlinkSync as unlinkSync2 } from "node:fs";
 function isWorkerHookRequest(msg) {
   if (!msg || typeof msg !== "object")
     return false;
@@ -8395,7 +8708,7 @@ function handleConnection(socket) {
   socket.on("error", () => {});
 }
 function startWorkerServer(socketPath) {
-  if (existsSync10(socketPath)) {
+  if (existsSync12(socketPath)) {
     try {
       unlinkSync2(socketPath);
     } catch {}
@@ -8413,14 +8726,14 @@ var init_worker_server = __esm(() => {
 });
 
 // bin/failproofai-worker.mjs
-import { realpathSync } from "node:fs";
-import { dirname as dirname5, resolve as resolve10 } from "node:path";
+import { realpathSync as realpathSync2 } from "node:fs";
+import { dirname as dirname5, resolve as resolve12 } from "node:path";
 import { fileURLToPath } from "node:url";
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {
-  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve10(dirname5(realpathSync(fileURLToPath(import.meta.url))), "..");
+  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve12(dirname5(realpathSync2(fileURLToPath(import.meta.url))), "..");
 }
 if (!process.env.FAILPROOFAI_DIST_PATH) {
-  process.env.FAILPROOFAI_DIST_PATH = resolve10(dirname5(realpathSync(fileURLToPath(import.meta.url))), "..", "dist");
+  process.env.FAILPROOFAI_DIST_PATH = resolve12(dirname5(realpathSync2(fileURLToPath(import.meta.url))), "..", "dist");
 }
 var socketPath = process.env.FAILPROOFAI_WORKER_SOCKET;
 if (!socketPath) {