failproofai 1.0.0-beta.6 → 1.0.0-beta.8

package/dist/cli.mjs

@@ -19,7 +19,7 @@ var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // package.json
-var version2 = "1.0.0-beta.6";
+var version2 = "1.0.0-beta.8";
 var init_package = () => {};
 
 // src/posthog-key.ts
@@ -1025,7 +1025,7 @@ function resettablePaths() {
     logsDir()
   ];
 }
-var LAYOUT_VERSION = 2, at = (...parts) => resolve(failproofaiHome(), ...parts), atHome = (home, ...parts) => home ? resolve(failproofaiHome(home), ...parts) : at(...parts), versionFile = (home) => atHome(home, "VERSION"), configFile = (home) => atHome(home, "config.toml"), credentialsFile = (home) => atHome(home, "credentials.toml"), binDir = (home) => atHome(home, "bin"), policiesDir = (home) => atHome(home, "policies"), localPoliciesDir = (home) => atHome(home, "policies", "local-policies"), globalPolicyConfigFile = (home) => resolve(localPoliciesDir(home), "policies-config.json"), cloudPoliciesDir = (home) => resolve(policiesDir(home), "cloud-policies"), customPoliciesDir = (home) => resolve(policiesDir(home), "custom-policies"), customAgentsDir = (home) => atHome(home, "custom-agents"), auditDir = (home) => atHome(home, "audit"), auditDashboardFile = (home) => resolve(auditDir(home), "dashboard.json"), auditCacheDir = (home) => resolve(auditDir(home), "cache"), hookActivityDir = (home) => atHome(home, "hook-activity"), runDir = (home) => atHome(home, "run"), daemonSocket = () => process.env.FAILPROOFAI_DAEMON_SOCKET || resolve(runDir(), "failproofaid.sock"), auditLockFile = (home) => resolve(runDir(home), "audit.lock"), stateDir = (home) => atHome(home, "state"), shimsDir = (home) => resolve(stateDir(home), "shims"), sessionPauseDir = () => resolve(stateDir(), "sessions"), telemetryIdFile = (home) => resolve(stateDir(home), "telemetry-id"), launcherMarker = (home) => resolve(stateDir(home), "launcher-configured"), lastVersionFile = (home) => resolve(stateDir(home), "last-version"), onboardingLockFile = (home) => resolve(stateDir(home), "onboarding.lock"), codexSessionPathsFile = (home) => resolve(stateDir(home), "codex-session-paths.json"), logsDir = (home) => atHome(home, "logs"), legacy;
+var LAYOUT_VERSION = 2, at = (...parts) => resolve(failproofaiHome(), ...parts), atHome = (home, ...parts) => home ? resolve(failproofaiHome(home), ...parts) : at(...parts), versionFile = (home) => atHome(home, "VERSION"), configFile = (home) => atHome(home, "config.toml"), credentialsFile = (home) => atHome(home, "credentials.toml"), binDir = (home) => atHome(home, "bin"), policiesDir = (home) => atHome(home, "policies"), localPoliciesDir = (home) => atHome(home, "policies", "local-policies"), globalPolicyConfigFile = (home) => resolve(localPoliciesDir(home), "policies-config.json"), cloudPoliciesDir = (home) => resolve(policiesDir(home), "cloud-policies"), customPoliciesDir = (home) => resolve(policiesDir(home), "custom-policies"), customAgentsDir = (home) => atHome(home, "custom-agents"), auditDir = (home) => atHome(home, "audit"), auditDashboardFile = (home) => resolve(auditDir(home), "dashboard.json"), auditCacheDir = (home) => resolve(auditDir(home), "cache"), hookActivityDir = (home) => atHome(home, "hook-activity"), runDir = (home) => atHome(home, "run"), daemonSocket = () => process.env.FAILPROOFAI_DAEMON_SOCKET || resolve(runDir(), "failproofaid.sock"), auditLockFile = (home) => resolve(runDir(home), "audit.lock"), stateDir = (home) => atHome(home, "state"), shimsDir = (home) => resolve(stateDir(home), "shims"), sessionPauseDir = () => resolve(stateDir(), "sessions"), telemetryIdFile = (home) => resolve(stateDir(home), "telemetry-id"), launcherMarker = (home) => resolve(stateDir(home), "launcher-configured"), onboardingAttemptFile = (home) => resolve(stateDir(home), "onboarding-attempt.json"), lastVersionFile = (home) => resolve(stateDir(home), "last-version"), onboardingLockFile = (home) => resolve(stateDir(home), "onboarding.lock"), codexSessionPathsFile = (home) => resolve(stateDir(home), "codex-session-paths.json"), logsDir = (home) => atHome(home, "logs"), legacy;
 var init_fp_home = __esm(() => {
   legacy = {
     policyConfig: () => at("policies-config.json"),
@@ -1454,6 +1454,7 @@ __export(exports_daemon_client, {
   tryDaemonHook: () => tryDaemonHook,
   isDaemonConfigured: () => isDaemonConfigured,
   daemonSocketPresent: () => daemonSocketPresent,
+  daemonAcceptsConnections: () => daemonAcceptsConnections,
   attemptDaemonHook: () => attemptDaemonHook
 });
 import { createConnection } from "node:net";
@@ -1465,6 +1466,27 @@ function daemonSocketPresent() {
     return false;
   }
 }
+async function daemonAcceptsConnections(timeoutMs = DAEMON_CONNECT_TIMEOUT_MS) {
+  if (process.platform === "win32")
+    return false;
+  return new Promise((resolve2) => {
+    let settled = false;
+    const done = (v) => {
+      if (settled)
+        return;
+      settled = true;
+      clearTimeout(timer);
+      socket.removeAllListeners();
+      socket.destroy();
+      resolve2(v);
+    };
+    const socket = createConnection({ path: socketPath() });
+    const timer = setTimeout(() => done(false), timeoutMs);
+    timer.unref?.();
+    socket.on("connect", () => done(true));
+    socket.on("error", () => done(false));
+  });
+}
 function socketPath() {
   if (process.env.FAILPROOFAI_DAEMON_SOCKET)
     return process.env.FAILPROOFAI_DAEMON_SOCKET;
@@ -2751,11 +2773,82 @@ function blockEnvFiles(ctx) {
   }
   return allow();
 }
+function quoteAwareSegments(command) {
+  const segments = [];
+  let tokens = [];
+  let token = "";
+  let quote = null;
+  const endToken = () => {
+    if (token)
+      tokens.push(token);
+    token = "";
+  };
+  const endSegment = () => {
+    endToken();
+    if (tokens.length)
+      segments.push(tokens);
+    tokens = [];
+  };
+  for (let i = 0;i < command.length; i++) {
+    const c = command[i];
+    if (quote) {
+      if (c === "\\" && quote === '"' && i + 1 < command.length) {
+        token += command[++i];
+        continue;
+      }
+      if (c === quote) {
+        quote = null;
+        continue;
+      }
+      token += c;
+      continue;
+    }
+    if (c === "\\" && i + 1 < command.length) {
+      token += command[++i];
+      continue;
+    }
+    if (c === '"' || c === "'") {
+      quote = c;
+      continue;
+    }
+    if (/\s/.test(c)) {
+      endToken();
+      continue;
+    }
+    if (/[;&|\n\r(){}`]/.test(c)) {
+      endSegment();
+      continue;
+    }
+    token += c;
+  }
+  endSegment();
+  return segments;
+}
+function namesElevation(command, depth = 0) {
+  for (const tokens of quoteAwareSegments(command)) {
+    let i = 0;
+    while (i < tokens.length) {
+      const token = tokens[i];
+      const base = token.slice(token.lastIndexOf("/") + 1);
+      if (base === "sudo" || base === "doas")
+        return true;
+      const isSkippable = ENV_ASSIGNMENT_RE.test(token) || token.startsWith("-") || token.startsWith(">") || token.startsWith("<") || RUNNER_OPERAND_RE.test(token) || COMMAND_PREFIX_TOKENS.has(base);
+      if (!isSkippable)
+        break;
+      if (EVAL_FLAG_RE.test(token) && depth < 3 && i + 1 < tokens.length) {
+        if (namesElevation(tokens[i + 1], depth + 1))
+          return true;
+      }
+      i++;
+    }
+  }
+  return false;
+}
 function blockSudo(ctx) {
   if (ctx.toolName !== "Bash")
     return allow();
   const cmd = getCommand(ctx).trimStart();
-  if (SUDO_RE.test(cmd) || cmd.startsWith("sudo ")) {
+  if (namesElevation(cmd)) {
     const allowPatterns = ctx.params?.allowPatterns ?? [];
     if (allowPatterns.some((p) => matchesAllowedPattern(cmd, p)))
       return allow();
@@ -3515,7 +3608,7 @@ function registerBuiltinPolicies(enabledNames) {
     }
   }
 }
-var isClaudeInternalPath, isClaudeSettingsFile, SHELL_OPERATORS, SHELL_METACHAR_RE, JWT_RE, API_KEY_PATTERNS, CONNECTION_STRING_RE, PRIVATE_KEY_RE, BEARER_TOKEN_RE, SQL_TOOL_RE, DESTRUCTIVE_SQL_RE, DELETE_NO_WHERE_RE, SQL_WHERE_RE, SCHEMA_ALTER_RE, PUBLISH_CMD_RE, ENV_PRINTENV_RE, ECHO_ENV_RE, EXPORT_RE, PS_ENV_VAR_RE, PS_CHILDITEM_ENV_RE, DOTNET_GETENV_RE, CMD_ECHO_ENV_RE, ENV_FILE_PATH_RE, ENV_CMD_RE, SUDO_RE, PS_ELEVATION_RE, RUNAS_RE, CURL_PIPE_SH_RE, SEGMENT_SEPARATORS, COMMAND_PREFIX_TOKENS, SELF_BINARY_TOKEN_RE, CONFIG_SUBCOMMAND_RE, PAUSE_FLAG_RE, ENV_ASSIGNMENT_RE, RUNNER_OPERAND_RE, PS_WEB_PIPE_RE, SHORT_FLAG_BUNDLE_RE, SAFE_FORCE_PREFIXES, SECRET_FILE_RE, SECRET_FILE_ID_RSA_RE, SECRET_FILE_CREDENTIALS_RE, GIT_COMMIT_MERGE_RE, FAILPROOFAI_CLI_RE, FAILPROOFAI_UNINSTALL_RE, GIT_AMEND_RE, GIT_STASH_DROP_RE, GIT_ADD_ALL_RE, NPM_GLOBAL_RE, YARN_GLOBAL_RE, PNPM_GLOBAL_RE, BUN_GLOBAL_RE, CARGO_INSTALL_RE, PIP_SYSTEM_RE, PKG_MANAGER_DETECTORS, NOHUP_RE, SCREEN_DETACH_RE, TMUX_DETACH_RE, DISOWN_RE, BACKGROUND_AMPERSAND_RE, KUBECTL_RE, TERRAFORM_RE, AWS_CLI_RE, GCLOUD_RE, AZ_CLI_RE, HELM_RE, GH_PIPELINE_RE, gitBranchCache, GIT_BRANCH_CACHE_MAX_ENTRIES = 500, HOME_PREFIX_RE, RM_CMD_RE, FIND_CMD_RE, FIND_EXEC_RE, FIND_GLOBAL_OPT_RE, FIND_EXPR_START_RE, SCRATCH_ROOTS, CATASTROPHIC_DEPTH = 2, READ_LIKE_CMDS, TOOL_CALL_TRACKER_MAX_BYTES = 65536, SEGMENT_SPLIT_RE, BUILTIN_POLICIES;
+var isClaudeInternalPath, isClaudeSettingsFile, SHELL_OPERATORS, SHELL_METACHAR_RE, JWT_RE, API_KEY_PATTERNS, CONNECTION_STRING_RE, PRIVATE_KEY_RE, BEARER_TOKEN_RE, SQL_TOOL_RE, DESTRUCTIVE_SQL_RE, DELETE_NO_WHERE_RE, SQL_WHERE_RE, SCHEMA_ALTER_RE, PUBLISH_CMD_RE, ENV_PRINTENV_RE, ECHO_ENV_RE, EXPORT_RE, PS_ENV_VAR_RE, PS_CHILDITEM_ENV_RE, DOTNET_GETENV_RE, CMD_ECHO_ENV_RE, ENV_FILE_PATH_RE, ENV_CMD_RE, PS_ELEVATION_RE, RUNAS_RE, CURL_PIPE_SH_RE, SEGMENT_SEPARATORS, COMMAND_PREFIX_TOKENS, SELF_BINARY_TOKEN_RE, CONFIG_SUBCOMMAND_RE, PAUSE_FLAG_RE, ENV_ASSIGNMENT_RE, RUNNER_OPERAND_RE, PS_WEB_PIPE_RE, SHORT_FLAG_BUNDLE_RE, SAFE_FORCE_PREFIXES, SECRET_FILE_RE, SECRET_FILE_ID_RSA_RE, SECRET_FILE_CREDENTIALS_RE, GIT_COMMIT_MERGE_RE, FAILPROOFAI_CLI_RE, FAILPROOFAI_UNINSTALL_RE, GIT_AMEND_RE, GIT_STASH_DROP_RE, GIT_ADD_ALL_RE, NPM_GLOBAL_RE, YARN_GLOBAL_RE, PNPM_GLOBAL_RE, BUN_GLOBAL_RE, CARGO_INSTALL_RE, PIP_SYSTEM_RE, PKG_MANAGER_DETECTORS, NOHUP_RE, SCREEN_DETACH_RE, TMUX_DETACH_RE, DISOWN_RE, BACKGROUND_AMPERSAND_RE, KUBECTL_RE, TERRAFORM_RE, AWS_CLI_RE, GCLOUD_RE, AZ_CLI_RE, HELM_RE, GH_PIPELINE_RE, gitBranchCache, GIT_BRANCH_CACHE_MAX_ENTRIES = 500, EVAL_FLAG_RE, HOME_PREFIX_RE, RM_CMD_RE, FIND_CMD_RE, FIND_EXEC_RE, FIND_GLOBAL_OPT_RE, FIND_EXPR_START_RE, SCRATCH_ROOTS, CATASTROPHIC_DEPTH = 2, READ_LIKE_CMDS, TOOL_CALL_TRACKER_MAX_BYTES = 65536, SEGMENT_SPLIT_RE, BUILTIN_POLICIES;
 var init_builtin_policies = __esm(() => {
   init_hook_logger();
   isClaudeInternalPath = isAgentInternalPath;
@@ -3552,7 +3645,6 @@ var init_builtin_policies = __esm(() => {
   CMD_ECHO_ENV_RE = /echo\s+%[A-Za-z_]/i;
   ENV_FILE_PATH_RE = /(?:^|[\\/])\.env(?:\.|$)/;
   ENV_CMD_RE = /\.env(?:\b|\s|$|\.)/;
-  SUDO_RE = /(?:^|;|&&|\|\|)\s*sudo\s/;
   PS_ELEVATION_RE = /Start-Process\s+.*-Verb\s+RunAs/i;
   RUNAS_RE = /(?:^|;|&&|\|\|)\s*runas\s/i;
   CURL_PIPE_SH_RE = /(?:curl|wget)\s.*\|\s*(?:sh|bash|zsh|dash|ksh|csh|tcsh|fish|ash)\b/;
@@ -3638,6 +3730,7 @@ var init_builtin_policies = __esm(() => {
   HELM_RE = /(?:^|[;\n]|&&|\|\|?|&)\s*helm(?:\s|$)/;
   GH_PIPELINE_RE = /(?:^|[;\n]|&&|\|\|?|&)\s*gh\s+(?:workflow\s+(?:run|enable|disable)|run\s+(?:rerun|cancel)|pr\s+merge|release\s+(?:create|delete)|cache\s+delete|secret\s+(?:set|delete))\b/;
   gitBranchCache = new Map;
+  EVAL_FLAG_RE = /^-{1,2}c$/;
   HOME_PREFIX_RE = /^(?:~[A-Za-z0-9_.-]*|\$HOME|\$\{HOME\})(?=$|\/)/;
   RM_CMD_RE = /^(?:\/\S*\/)?rm$/;
   FIND_CMD_RE = /^(?:\/\S*\/)?find$/;
@@ -10739,6 +10832,7 @@ __export(exports_daemon_client2, {
   tryDaemonHook: () => tryDaemonHook2,
   isDaemonConfigured: () => isDaemonConfigured2,
   daemonSocketPresent: () => daemonSocketPresent2,
+  daemonAcceptsConnections: () => daemonAcceptsConnections2,
   attemptDaemonHook: () => attemptDaemonHook2
 });
 import { createConnection as createConnection2 } from "node:net";
@@ -10750,6 +10844,27 @@ function daemonSocketPresent2() {
     return false;
   }
 }
+async function daemonAcceptsConnections2(timeoutMs = DAEMON_CONNECT_TIMEOUT_MS2) {
+  if (process.platform === "win32")
+    return false;
+  return new Promise((resolve14) => {
+    let settled = false;
+    const done = (v) => {
+      if (settled)
+        return;
+      settled = true;
+      clearTimeout(timer);
+      socket.removeAllListeners();
+      socket.destroy();
+      resolve14(v);
+    };
+    const socket = createConnection2({ path: socketPath2() });
+    const timer = setTimeout(() => done(false), timeoutMs);
+    timer.unref?.();
+    socket.on("connect", () => done(true));
+    socket.on("error", () => done(false));
+  });
+}
 function socketPath2() {
   if (process.env.FAILPROOFAI_DAEMON_SOCKET)
     return process.env.FAILPROOFAI_DAEMON_SOCKET;
@@ -10947,6 +11062,15 @@ function resolveCliCommand() {
 function shellQuote(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
 }
+function workerScriptPath() {
+  if (process.env.FAILPROOFAI_WORKER_CMD)
+    return null;
+  const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
+  if (!packageRoot)
+    return null;
+  const workerScript = resolve14(packageRoot, "dist", "worker.mjs");
+  return existsSync17(workerScript) ? workerScript : null;
+}
 function assertUnitSafe(value, field) {
   if (UNIT_UNSAFE_RE.test(value)) {
     throw new Error(`refusing to write a service definition: ${field} contains a quote, backslash or newline ` + `(${JSON.stringify(value)}), which would inject directives into a root-owned unit file`);
@@ -11085,10 +11209,13 @@ function systemdUnitContents(binaryPath, workerCmd, cliCmd = null) {
   const user = assertUnitSafe(serviceUser(), "User");
   assertUnitSafe(binaryPath, "ExecStart");
   assertUnitSafe(homedir19(), "HOME");
+  const conditionPaths = [binaryPath, workerScriptPath()].filter((p) => typeof p === "string" && existsSync17(p));
+  const conditionLines = conditionPaths.map((p) => `ConditionPathExists=${assertUnitSafe(p, "ConditionPathExists")}
+`).join("");
   return `[Unit]
 Description=failproofai background daemon (failproofaid) for ${user}
 After=network.target
-
+${conditionLines}
 [Service]
 Type=simple
 User=${user}
@@ -11209,19 +11336,37 @@ async function installDaemonService() {
   }
   return { installed: true };
 }
-async function probeDaemonEndToEnd() {
+async function probeDaemon() {
   try {
-    const { attemptDaemonHook: attemptDaemonHook3 } = await Promise.resolve().then(() => (init_daemon_client2(), exports_daemon_client2));
-    const attempt = await attemptDaemonHook3({
-      hookEvent: "SessionStart",
-      cli: "claude",
-      stdin: JSON.stringify({ hook_event_name: "SessionStart", source: "failproofai-health-probe" })
-    }, { responseTimeoutMs: DAEMON_PROBE_TIMEOUT_MS });
-    return attempt.ok || attempt.failure === "protocol-mismatch";
+    const { attemptDaemonHook: attemptDaemonHook3, daemonAcceptsConnections: daemonAcceptsConnections3 } = await Promise.resolve().then(() => (init_daemon_client2(), exports_daemon_client2));
+    const deadline = Date.now() + DAEMON_PROBE_READY_TIMEOUT_MS;
+    let everConnected = false;
+    for (;; ) {
+      if (await daemonAcceptsConnections3()) {
+        everConnected = true;
+        const attempt = await attemptDaemonHook3({
+          hookEvent: "SessionStart",
+          cli: "claude",
+          stdin: JSON.stringify({
+            hook_event_name: "SessionStart",
+            source: "failproofai-health-probe"
+          })
+        }, { responseTimeoutMs: DAEMON_PROBE_TIMEOUT_MS });
+        if (attempt.ok || attempt.failure === "protocol-mismatch")
+          return { ok: true };
+      }
+      if (Date.now() >= deadline)
+        break;
+      await new Promise((r) => setTimeout(r, DAEMON_PROBE_RETRY_MS));
+    }
+    return { ok: false, reason: everConnected ? "worker" : "unreachable" };
   } catch {
-    return false;
+    return { ok: false, reason: "unreachable" };
   }
 }
+async function probeDaemonEndToEnd() {
+  return (await probeDaemon()).ok;
+}
 async function waitForDaemonRunning() {
   const deadline = Date.now() + SERVICE_START_TIMEOUT_MS;
   for (;; ) {
@@ -11406,6 +11551,16 @@ function daemonVersionSkew() {
     return null;
   return recorded === version2 ? null : { installed: recorded, expected: version2 };
 }
+function inactiveLinuxStatus() {
+  try {
+    return interpretConditionResult(execFileSync3("systemctl", ["show", systemdUnitName(), "--property=ConditionResult", "--value"], { stdio: ["ignore", "pipe", "ignore"], timeout: SERVICE_CMD_TIMEOUT_MS }).toString());
+  } catch {
+    return "stopped";
+  }
+}
+function interpretConditionResult(raw) {
+  return raw.trim() === "no" ? "condition-failed" : "stopped";
+}
 function daemonServiceStatus() {
   if (!isDaemonSupportedPlatform())
     return "unsupported-platform";
@@ -11417,9 +11572,9 @@ function daemonServiceStatus() {
         stdio: ["ignore", "pipe", "ignore"],
         timeout: SERVICE_CMD_TIMEOUT_MS
       }).toString().trim();
-      return out === "active" ? "running" : "stopped";
+      return out === "active" ? "running" : inactiveLinuxStatus();
     } catch {
-      return "stopped";
+      return inactiveLinuxStatus();
     }
   }
   const plistPath = launchdPlistPath();
@@ -11440,7 +11595,7 @@ function daemonServiceStatus() {
     return "stopped";
   }
 }
-var SERVICE_CMD_TIMEOUT_MS = 1e4, SERVICE_START_TIMEOUT_MS = 5000, SERVICE_START_POLL_MS = 100, SERVICE_SETTLE_MS = 750, SUDO_PROMPT_TIMEOUT_MS = 120000, UNIT_UNSAFE_RE, DAEMON_PROBE_TIMEOUT_MS = 5000;
+var SERVICE_CMD_TIMEOUT_MS = 1e4, SERVICE_START_TIMEOUT_MS = 5000, SERVICE_START_POLL_MS = 100, SERVICE_SETTLE_MS = 750, SUDO_PROMPT_TIMEOUT_MS = 120000, UNIT_UNSAFE_RE, DAEMON_PROBE_TIMEOUT_MS = 5000, DAEMON_PROBE_READY_TIMEOUT_MS = 1e4, DAEMON_PROBE_RETRY_MS = 150;
 var init_daemon_service = __esm(() => {
   init_hook_logger();
   init_daemon_download();
@@ -11906,6 +12061,20 @@ async function healDaemonFlag() {
         ``
       ];
     }
+    if (status === "condition-failed") {
+      updateConfig({ daemon: { configured: false } });
+      return [
+        `failproofaid is installed but cannot start — a file its service requires is`,
+        `gone (most often because failproofai was removed with \`npm rm -g\`, which`,
+        `deletes the worker but leaves the service behind). This machine was`,
+        `configured to require the daemon, which denies every tool call, so that flag`,
+        `is cleared; policies now evaluate in-process.`,
+        ``,
+        `Run \`failproofai uninstall\` to remove the leftover service, or`,
+        `\`failproofai config\` to rebuild it. \`${daemonStatusCommand()}\` names the missing path.`,
+        ``
+      ];
+    }
     if (status === "running" && !await probeDaemonEndToEnd()) {
       updateConfig({ daemon: { configured: false } });
       return [
@@ -12215,7 +12384,8 @@ var init_first_run_gate = __esm(() => {
   FIRST_RUN_EXEMPT_SUBCOMMANDS = [
     "config",
     "policies",
-    "policy"
+    "policy",
+    "uninstall"
   ];
 });
 
@@ -21925,6 +22095,129 @@ This file can be committed to git — no machine-specific paths.`);
     } catch {}
   }
 }
+async function removeHooks(policyNames, scope = "user", cwd, opts) {
+  const configScope = scope === "all" ? "user" : scope;
+  const selectedClis = opts?.cli && opts.cli.length > 0 ? [...new Set(opts.cli)] : ["claude"];
+  if (opts?.removeCustomHooks) {
+    const config = readScopedHooksConfig(configScope, cwd);
+    delete config.customPoliciesPath;
+    delete config.customPoliciesPaths;
+    writeScopedHooksConfig(config, configScope, cwd);
+    console.log("Custom hooks path cleared.");
+  }
+  if (policyNames && policyNames.length > 0 && !(policyNames.length === 1 && policyNames[0] === "all")) {
+    validatePolicyNames(policyNames);
+    const config = readScopedHooksConfig(configScope, cwd);
+    const removeSet = new Set(policyNames);
+    const remaining = config.enabledPolicies.filter((p) => !removeSet.has(p));
+    const notEnabled = policyNames.filter((p) => !config.enabledPolicies.includes(p));
+    if (notEnabled.length > 0) {
+      console.log(`Warning: policy(ies) not currently enabled: ${notEnabled.join(", ")}`);
+    }
+    const { policyParams: existingParams, ...baseConfig } = config;
+    const filteredParams = existingParams ? Object.fromEntries(Object.entries(existingParams).filter(([k]) => !removeSet.has(k))) : null;
+    const updatedConfig = {
+      ...baseConfig,
+      enabledPolicies: remaining,
+      ...filteredParams && Object.keys(filteredParams).length > 0 ? { policyParams: filteredParams } : {}
+    };
+    writeScopedHooksConfig(updatedConfig, configScope, cwd);
+    try {
+      const distinctId = getInstanceId2();
+      const actuallyRemoved = policyNames.filter((p) => config.enabledPolicies.includes(p));
+      await trackHookEvent2(distinctId, "hooks_removed", {
+        scope,
+        cli: selectedClis,
+        removal_mode: opts?.betaOnly ? "beta_policies" : "policies",
+        beta_only: opts?.betaOnly ?? false,
+        policies_removed: actuallyRemoved,
+        removed_count: actuallyRemoved.length,
+        ...opts?.source ? { source: opts.source } : {},
+        platform: platform3(),
+        arch: arch3(),
+        os_release: release2(),
+        hostname_hash: hashToId2(hostname3())
+      });
+    } catch {}
+    console.log(`Disabled ${policyNames.length - notEnabled.length} policy(ies).`);
+    console.log(`Remaining: ${remaining.length > 0 ? remaining.join(", ") : "(none)"}`);
+    return;
+  }
+  const configBeforeRemoval = readScopedHooksConfig(configScope, cwd);
+  let totalRemoved = 0;
+  let nothingToReport = false;
+  for (const cliId of selectedClis) {
+    const integration = getIntegration(cliId);
+    const scopesToRemove = scope === "all" ? [...integration.scopes] : integration.scopes.includes(scope) ? [scope] : [];
+    for (const s of scopesToRemove) {
+      const settingsPaths = settingsPathsFor(integration, s, cwd);
+      const existing = settingsPaths.filter((p) => existsSync21(p));
+      if (existing.length === 0) {
+        if (scope !== "all" && selectedClis.length === 1) {
+          console.log("No settings file found. Nothing to remove.");
+          nothingToReport = true;
+        }
+        continue;
+      }
+      let removedHere = 0;
+      for (const settingsPath of existing) {
+        const removed = integration.removeHooksFromFile(settingsPath);
+        removedHere += removed;
+        if (removed > 0 && scope !== "all") {
+          console.log(`Removed ${removed} failproofai hook(s) from ${integration.displayName} settings.`);
+          console.log(`Settings: ${settingsPath}`);
+        }
+      }
+      if (removedHere === 0 && scope !== "all" && selectedClis.length === 1) {
+        console.log("No hooks found in settings. Nothing to remove.");
+        nothingToReport = true;
+        continue;
+      }
+      totalRemoved += removedHere;
+    }
+  }
+  if (nothingToReport && totalRemoved === 0)
+    return;
+  if (scope === "all") {
+    console.log(`Removed ${totalRemoved} failproofai hook(s) from all scopes.`);
+    for (const cliId of selectedClis) {
+      const integration = getIntegration(cliId);
+      for (const s of integration.scopes) {
+        for (const p of settingsPathsFor(integration, s, cwd)) {
+          console.log(`  ${integration.displayName} / ${s}: ${p}`);
+        }
+      }
+    }
+  }
+  try {
+    const distinctId = getInstanceId2();
+    await trackHookEvent2(distinctId, "hooks_removed", {
+      scope,
+      cli: selectedClis,
+      removal_mode: "hooks",
+      policies_removed: configBeforeRemoval.enabledPolicies,
+      removed_count: totalRemoved,
+      ...opts?.source ? { source: opts.source } : {},
+      platform: platform3(),
+      arch: arch3(),
+      os_release: release2(),
+      hostname_hash: hashToId2(hostname3())
+    });
+  } catch {}
+  if (scope === "all") {
+    for (const s of HOOK_SCOPES) {
+      const existing = readScopedHooksConfig(s, cwd);
+      if (existing.enabledPolicies.length > 0 || existing.customPoliciesPaths?.length || existing.customPoliciesPath || existing.policyParams) {
+        const { customPoliciesPath: _drop, customPoliciesPaths: _dropMany, policyParams: _dropParams, ...rest } = existing;
+        writeScopedHooksConfig({ ...rest, enabledPolicies: [] }, s, cwd);
+      }
+    }
+  } else if (!HOOK_SCOPES.some((s) => hooksInstalledInSettings(s, cwd))) {
+    const existing = readScopedHooksConfig(configScope, cwd);
+    const { customPoliciesPath: _drop, customPoliciesPaths: _dropMany, policyParams: _dropParams, ...rest } = existing;
+    writeScopedHooksConfig({ ...rest, enabledPolicies: [] }, configScope, cwd);
+  }
+}
 var VALID_POLICY_NAMES;
 var init_manager = __esm(() => {
   init_types();
@@ -22438,8 +22731,87 @@ var init_setup_state = __esm(() => {
   init_fp_home();
 });
 
+// src/hooks/onboarding-attempt.ts
+import { existsSync as existsSync24, mkdirSync as mkdirSync14, readFileSync as readFileSync19, rmSync as rmSync8, writeFileSync as writeFileSync11 } from "node:fs";
+import { dirname as dirname12 } from "node:path";
+function readOnboardingAttempt() {
+  const path3 = onboardingAttemptFile();
+  if (!existsSync24(path3))
+    return null;
+  try {
+    const raw = JSON.parse(readFileSync19(path3, "utf8"));
+    if (raw.schemaVersion !== SCHEMA_VERSION3)
+      return null;
+    if (typeof raw.reason !== "string" || typeof raw.cliVersion !== "string")
+      return null;
+    return {
+      schemaVersion: SCHEMA_VERSION3,
+      reason: raw.reason,
+      cliVersion: raw.cliVersion,
+      daemonStatus: typeof raw.daemonStatus === "string" ? raw.daemonStatus : "",
+      at: typeof raw.at === "number" ? raw.at : 0
+    };
+  } catch {
+    return null;
+  }
+}
+function recordOnboardingAttempt(reason, cliVersion, daemonStatus, now = Date.now()) {
+  try {
+    const path3 = onboardingAttemptFile();
+    mkdirSync14(dirname12(path3), { recursive: true });
+    const record = {
+      schemaVersion: SCHEMA_VERSION3,
+      reason,
+      cliVersion,
+      daemonStatus,
+      at: now
+    };
+    writeFileSync11(path3, JSON.stringify(record, null, 2), "utf8");
+  } catch {}
+}
+function clearOnboardingAttempt() {
+  try {
+    rmSync8(onboardingAttemptFile(), { force: true });
+  } catch {}
+}
+function blockerCleared(attempt, probe) {
+  switch (attempt.reason) {
+    case "needs_root":
+      return probe.canElevate();
+    case "daemon_failed":
+      return probe.daemonStatus() !== attempt.daemonStatus || probe.canElevate();
+    case "cancelled":
+      return probe.cliVersion !== attempt.cliVersion;
+    case "not_a_tty":
+    case "running_as_sudo":
+      return true;
+    default:
+      return true;
+  }
+}
+function attemptHintLines(attempt) {
+  const why = {
+    needs_root: "it needs root to install the failproofaid service",
+    daemon_failed: "the failproofaid service could not be started",
+    cancelled: "it was cancelled",
+    not_a_tty: "there was no terminal to ask in",
+    running_as_sudo: "it was run under sudo"
+  };
+  const detail = why[attempt.reason] ?? "it did not finish";
+  return [
+    ``,
+    `[failproofai] Setup is not finished — ${detail}.`,
+    `              Run \`failproofai config\` when you are ready.`,
+    ``
+  ];
+}
+var SCHEMA_VERSION3 = 1;
+var init_onboarding_attempt = __esm(() => {
+  init_fp_home();
+});
+
 // src/hooks/onboarding-lock.ts
-import { mkdirSync as mkdirSync14, readFileSync as readFileSync19, rmSync as rmSync8, writeFileSync as writeFileSync11 } from "node:fs";
+import { mkdirSync as mkdirSync15, readFileSync as readFileSync20, rmSync as rmSync9, writeFileSync as writeFileSync12 } from "node:fs";
 import { homedir as homedir26 } from "node:os";
 function onboardingLockPath(home = homedir26()) {
   return onboardingLockFile(home);
@@ -22456,7 +22828,7 @@ function processAlive(pid) {
 }
 function readLock(path3) {
   try {
-    const parsed = JSON.parse(readFileSync19(path3, "utf8"));
+    const parsed = JSON.parse(readFileSync20(path3, "utf8"));
     if (typeof parsed.pid !== "number")
       return null;
     return { pid: parsed.pid, startedAt: Number(parsed.startedAt) || 0 };
@@ -22470,9 +22842,9 @@ function acquireOnboardingLock(home = homedir26()) {
     const held = readLock(path3);
     if (held && held.pid !== process.pid && processAlive(held.pid))
       return null;
-    mkdirSync14(stateDir(home), { recursive: true });
+    mkdirSync15(stateDir(home), { recursive: true });
     const body = { pid: process.pid, startedAt: Date.now() };
-    writeFileSync11(path3, JSON.stringify(body), "utf8");
+    writeFileSync12(path3, JSON.stringify(body), "utf8");
     let released = false;
     return {
       release() {
@@ -22482,7 +22854,7 @@ function acquireOnboardingLock(home = homedir26()) {
         try {
           const current = readLock(path3);
           if (!current || current.pid === process.pid)
-            rmSync8(path3, { force: true });
+            rmSync9(path3, { force: true });
         } catch {}
       }
     };
@@ -22495,7 +22867,7 @@ var init_onboarding_lock = __esm(() => {
 });
 
 // lib/claude-sessions.ts
-import { readdirSync as readdirSync14, statSync as statSync16, existsSync as existsSync25 } from "node:fs";
+import { readdirSync as readdirSync14, statSync as statSync16, existsSync as existsSync26 } from "node:fs";
 import { join as join28, basename as basename5 } from "node:path";
 function getClaudeProjectsRoot() {
   return getClaudeProjectsPath();
@@ -22542,7 +22914,7 @@ function listClaudeTranscripts(project) {
       } catch {}
     } else if (entry.isDirectory() && UUID_RE2.test(entry.name)) {
       const subDir = join28(project.path, entry.name, "subagents");
-      if (!existsSync25(subDir))
+      if (!existsSync26(subDir))
         continue;
       let subEntries;
       try {
@@ -23817,7 +24189,7 @@ var init_features = __esm(() => {
 
 // src/audit/cache.ts
 import { createHash as createHash6 } from "node:crypto";
-import { existsSync as existsSync26, mkdirSync as mkdirSync15, readFileSync as readFileSync20, writeFileSync as writeFileSync12, chmodSync as chmodSync4 } from "node:fs";
+import { existsSync as existsSync27, mkdirSync as mkdirSync16, readFileSync as readFileSync21, writeFileSync as writeFileSync13, chmodSync as chmodSync4 } from "node:fs";
 import { join as join29 } from "node:path";
 function getEngineVersion() {
   if (cachedEngineVersion)
@@ -23844,10 +24216,10 @@ function readCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes) {
   if (sizeBytes === 0)
     return null;
   const cachePath = getCachePathFor(transcriptPath);
-  if (!existsSync26(cachePath))
+  if (!existsSync27(cachePath))
     return null;
   try {
-    const raw = readFileSync20(cachePath, "utf-8");
+    const raw = readFileSync21(cachePath, "utf-8");
     const entry = JSON.parse(raw);
     if (entry.schemaVersion !== CACHE_SCHEMA_VERSION)
       return null;
@@ -23871,7 +24243,7 @@ function writeCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes, result)
     return;
   const cachePath = getCachePathFor(transcriptPath);
   try {
-    mkdirSync15(auditCacheDir(), { recursive: true });
+    mkdirSync16(auditCacheDir(), { recursive: true });
     const entry = {
       schemaVersion: CACHE_SCHEMA_VERSION,
       cachedAt: Date.now(),
@@ -23881,7 +24253,7 @@ function writeCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes, result)
       detectorVersion: getDetectorVersion(),
       result
     };
-    writeFileSync12(cachePath, JSON.stringify(entry), { encoding: "utf-8", mode: 384 });
+    writeFileSync13(cachePath, JSON.stringify(entry), { encoding: "utf-8", mode: 384 });
     try {
       chmodSync4(cachePath, 384);
     } catch {}
@@ -24247,11 +24619,11 @@ var init_audit = __esm(() => {
 import {
   closeSync,
   linkSync,
-  mkdirSync as mkdirSync16,
+  mkdirSync as mkdirSync17,
   openSync,
-  readFileSync as readFileSync21,
+  readFileSync as readFileSync22,
   unlinkSync as unlinkSync4,
-  writeFileSync as writeFileSync13,
+  writeFileSync as writeFileSync14,
   writeSync
 } from "node:fs";
 function acquireAuditLock(source, now = Date.now()) {
@@ -24310,7 +24682,7 @@ function handleFor(path3, info) {
 }
 function readLock2(path3) {
   try {
-    const parsed = JSON.parse(readFileSync21(path3, "utf8"));
+    const parsed = JSON.parse(readFileSync22(path3, "utf8"));
     if (typeof parsed?.pid !== "number" || typeof parsed?.startedAt !== "number")
       return null;
     return {
@@ -24326,7 +24698,7 @@ function writeLockExclusive(path3, info) {
   const body = JSON.stringify(info);
   const staging = `${path3}.${process.pid}.tmp`;
   try {
-    writeFileSync13(staging, body, { mode: 384 });
+    writeFileSync14(staging, body, { mode: 384 });
   } catch {
     return false;
   }
@@ -24360,8 +24732,8 @@ function createThenWrite(path3, body) {
   }
 }
 function ensureRunDir() {
-  mkdirSync16(failproofaiHome(), { recursive: true });
-  mkdirSync16(runDir(), { recursive: true, mode: 448 });
+  mkdirSync17(failproofaiHome(), { recursive: true });
+  mkdirSync17(runDir(), { recursive: true, mode: 448 });
 }
 var AUDIT_LOCK_MAX_AGE_MS;
 var init_audit_lock = __esm(() => {
@@ -24525,26 +24897,26 @@ function parseScriptArgs(argv) {
 var init_parse_script_args = () => {};
 
 // scripts/install-diagnosis.mjs
-import { existsSync as existsSync27, readFileSync as readFileSync22, realpathSync as realpathSync3 } from "node:fs";
-import { dirname as dirname12, resolve as resolve21 } from "node:path";
+import { existsSync as existsSync28, readFileSync as readFileSync23, realpathSync as realpathSync3 } from "node:fs";
+import { dirname as dirname13, resolve as resolve21 } from "node:path";
 import { homedir as homedir27, platform as platform4 } from "node:os";
 import { spawnSync } from "node:child_process";
 function findPackageRoot(start) {
   try {
     let dir = realpathSync3(start);
-    if (existsSync27(dir) && !existsSync27(resolve21(dir, "package.json"))) {
-      dir = dirname12(dir);
+    if (existsSync28(dir) && !existsSync28(resolve21(dir, "package.json"))) {
+      dir = dirname13(dir);
     }
     while (true) {
       const pkgPath = resolve21(dir, "package.json");
-      if (existsSync27(pkgPath)) {
+      if (existsSync28(pkgPath)) {
         try {
-          const pkg = JSON.parse(readFileSync22(pkgPath, "utf8"));
+          const pkg = JSON.parse(readFileSync23(pkgPath, "utf8"));
           if (pkg.name === PKG_NAME)
             return dir;
         } catch {}
       }
-      const parent = dirname12(dir);
+      const parent = dirname13(dir);
       if (parent === dir)
         return null;
       dir = parent;
@@ -24557,7 +24929,7 @@ function readPackageVersion(packageRoot) {
   if (!packageRoot)
     return null;
   try {
-    const pkg = JSON.parse(readFileSync22(resolve21(packageRoot, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync23(resolve21(packageRoot, "package.json"), "utf8"));
     return typeof pkg.version === "string" ? pkg.version : null;
   } catch {
     return null;
@@ -24584,7 +24956,7 @@ function locateNpmGlobal() {
     if (!root)
       return null;
     const candidate = resolve21(root, PKG_NAME);
-    return existsSync27(resolve21(candidate, "package.json")) ? candidate : null;
+    return existsSync28(resolve21(candidate, "package.json")) ? candidate : null;
   } catch {
     return null;
   }
@@ -24592,7 +24964,7 @@ function locateNpmGlobal() {
 function locateBunGlobal() {
   try {
     const candidate = resolve21(homedir27(), ".bun", "install", "global", "node_modules", PKG_NAME);
-    return existsSync27(resolve21(candidate, "package.json")) ? candidate : null;
+    return existsSync28(resolve21(candidate, "package.json")) ? candidate : null;
   } catch {
     return null;
   }
@@ -24699,8 +25071,8 @@ __export(exports_launch, {
   launch: () => launch
 });
 import { spawn as spawn2 } from "child_process";
-import { realpathSync as realpathSync4, existsSync as existsSync28 } from "node:fs";
-import { resolve as resolve22, dirname as dirname13 } from "node:path";
+import { realpathSync as realpathSync4, existsSync as existsSync29 } from "node:fs";
+import { resolve as resolve22, dirname as dirname14 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { createInterface } from "node:readline";
 function launch(mode) {
@@ -24724,9 +25096,9 @@ function launch(mode) {
     process.env.PORT = port;
     process.env.HOSTNAME = bindHost;
     cmd = "node";
-    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve22(dirname13(realpathSync4(fileURLToPath2(import.meta.url))), "..");
+    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve22(dirname14(realpathSync4(fileURLToPath2(import.meta.url))), "..");
     const serverJsPath = resolve22(packageRoot, ".next/standalone/server.js");
-    if (!existsSync28(serverJsPath)) {
+    if (!existsSync29(serverJsPath)) {
       let shadowMessage = null;
       try {
         const diag = diagnoseShadow({ selfPackageRoot: packageRoot, selfVersion: version2 });
@@ -25171,9 +25543,9 @@ __export(exports_configure_wizard, {
   buildPresetChoices: () => buildPresetChoices,
   buildAgentChoices: () => buildAgentChoices
 });
-import { existsSync as existsSync29, mkdirSync as mkdirSync17, writeFileSync as writeFileSync14, readFileSync as readFileSync23 } from "node:fs";
+import { existsSync as existsSync30, mkdirSync as mkdirSync18, writeFileSync as writeFileSync15, readFileSync as readFileSync24 } from "node:fs";
 import { homedir as homedir28 } from "node:os";
-import { dirname as dirname14, resolve as resolve23, sep as sep5 } from "node:path";
+import { dirname as dirname15, resolve as resolve23, sep as sep5 } from "node:path";
 async function emit(event, props) {
   try {
     await trackHookEvent2(getInstanceId2(), event, props);
@@ -25280,8 +25652,8 @@ function setCustomPoliciesEnabled(scope, cwd, enabled) {
   const path3 = getConfigPathForScope(scope, cwd);
   let config = {};
   try {
-    if (existsSync29(path3))
-      config = JSON.parse(readFileSync23(path3, "utf8"));
+    if (existsSync30(path3))
+      config = JSON.parse(readFileSync24(path3, "utf8"));
   } catch {
     return;
   }
@@ -25290,7 +25662,7 @@ function setCustomPoliciesEnabled(scope, cwd, enabled) {
   else
     config.customPoliciesEnabled = false;
   try {
-    writeFileSync14(path3, JSON.stringify(config, null, 2) + `
+    writeFileSync15(path3, JSON.stringify(config, null, 2) + `
 `, "utf8");
   } catch {}
 }
@@ -25390,14 +25762,33 @@ function firstRunMarkerPath() {
   return launcherMarker();
 }
 function hasSeenLauncher() {
-  return existsSync29(firstRunMarkerPath());
+  return existsSync30(firstRunMarkerPath());
 }
 function markLauncherSeen() {
   try {
-    mkdirSync17(dirname14(firstRunMarkerPath()), { recursive: true });
-    writeFileSync14(firstRunMarkerPath(), "1", "utf8");
+    mkdirSync18(dirname15(firstRunMarkerPath()), { recursive: true });
+    writeFileSync15(firstRunMarkerPath(), "1", "utf8");
   } catch {}
 }
+function retryProbe() {
+  return {
+    canElevate: () => {
+      try {
+        return canElevate();
+      } catch {
+        return false;
+      }
+    },
+    daemonStatus: () => {
+      try {
+        return daemonServiceStatus();
+      } catch {
+        return "";
+      }
+    },
+    cliVersion: version2
+  };
+}
 async function maybeFirstRunConfigure(io = {}, opts = {}) {
   if (process.env.FAILPROOFAI_NO_FIRST_RUN === "1")
     return false;
@@ -25409,6 +25800,13 @@ async function maybeFirstRunConfigure(io = {}, opts = {}) {
       markLauncherSeen();
     return false;
   }
+  const attempt = opts.force ? null : readOnboardingAttempt();
+  if (attempt && !blockerCleared(attempt, retryProbe())) {
+    for (const line of attemptHintLines(attempt))
+      stdout.write(`${line}
+`);
+    return false;
+  }
   if (!stdin.isTTY || !stdout.isTTY) {
     stdout.write(`
 [failproofai] Not set up yet — run \`failproofai config\` to get started.
@@ -25427,6 +25825,9 @@ async function maybeFirstRunConfigure(io = {}, opts = {}) {
   try {
     emit("first_run_configure_shown", {});
     const result = await runConfigureWizard(io);
+    if (!result.applied && result.abort) {
+      recordOnboardingAttempt(result.abort, version2, daemonServiceStatus());
+    }
     if (result.applied && opts.postSetupAudit !== false) {
       try {
         const { runPostSetupAudit: runPostSetupAudit2 } = await Promise.resolve().then(() => (init_cli(), exports_cli));
@@ -25754,18 +26155,22 @@ Setup stopped before changing anything. Once that is fixed, re-run:
       outro("Nothing was changed.", { ok: false }, stdout);
       return { applied: false, abort: "daemon_failed" };
     }
-    if (!await probeDaemonEndToEnd()) {
-      hookLogWarn("failproofaid was installed and running but did not answer a policy evaluation");
-      stdout.write(`
-failproofaid started but cannot evaluate policies — its worker process
-` + `could not be run. Setup stopped before changing anything, because a machine
-configured to require a daemon that cannot answer denies every tool call.
+    const probe = await probeDaemon();
+    if (!probe.ok) {
+      hookLogWarn(`failproofaid was installed and running but did not answer a policy evaluation (${probe.reason})`);
+      stdout.write((probe.reason === "worker" ? `
+failproofaid started but cannot evaluate policies — it is listening, and
+` + `its worker process could not be run.
+` : `
+failproofaid started but could not be reached on its socket.
+`) + `Setup stopped before changing anything, because a machine configured to
+require a daemon that cannot answer denies every tool call.
 
   Check it with:  ${daemonStatusCommand() ?? "systemctl status failproofaid"}
   Then re-run:    failproofai config
 
 `);
-      emit("configure_aborted", { reason: "daemon_not_answering" });
+      emit("configure_aborted", { reason: `daemon_not_answering_${probe.reason}` });
       outro("Nothing was changed.", { ok: false }, stdout);
       return { applied: false, abort: "daemon_failed" };
     }
@@ -25850,6 +26255,7 @@ Hooks keep enforcing; scheduled audits stay off until it is.
   }
   await applied;
   markLauncherSeen();
+  clearOnboardingAttempt();
   const customNote = customEnabled === true ? " + your custom policies" : customEnabled === false ? " · custom policies DISABLED" : "";
   const daemonNote = daemonInstalled ? " · daemon on" : "";
   const cloudNote = connected ? " · reporting on" : "";
@@ -25885,20 +26291,701 @@ var init_configure_wizard = __esm(() => {
   init_fp_home();
   init_daemon_download();
   init_package();
+  init_onboarding_attempt();
   init_onboarding_lock();
 });
 
-// src/hooks/manager.ts
-var exports_manager = {};
-__export(exports_manager, {
-  removeHooks: () => removeHooks,
-  listHooks: () => listHooks,
-  installHooks: () => installHooks2,
-  hooksInstalledInSettings: () => hooksInstalledInSettings2,
+// src/hooks/uninstall-cli.ts
+var exports_uninstall_cli = {};
+__export(exports_uninstall_cli, {
+  serviceStateLabel: () => serviceStateLabel,
+  runUninstallCommand: () => runUninstallCommand
+});
+import { existsSync as existsSync31, rmSync as rmSync10 } from "node:fs";
+function survey(cwd) {
+  const clis = [];
+  for (const id of listInstallableIds()) {
+    for (const scope of ["user", "project", "local"]) {
+      try {
+        if (getIntegration(id).hooksInstalledInSettings(scope, cwd)) {
+          clis.push(id);
+          break;
+        }
+      } catch {}
+    }
+  }
+  let daemonConfigured = false;
+  try {
+    daemonConfigured = readConfig().daemon.configured;
+  } catch {}
+  const servicePath = isDaemonSupportedPlatform() ? daemonServiceFilePath() : null;
+  return {
+    clis,
+    servicePath,
+    serviceInstalled: !!servicePath && existsSync31(servicePath),
+    daemonConfigured,
+    homeExists: existsSync31(failproofaiHome())
+  };
+}
+async function runUninstallCommand(opts = {}) {
+  const found = survey(opts.cwd);
+  const lines = [];
+  const nothingToDo = found.clis.length === 0 && !found.serviceInstalled && !found.daemonConfigured && !(opts.purge && found.homeExists);
+  if (nothingToDo) {
+    return {
+      exitCode: 0,
+      planLines: 0,
+      purged: false,
+      lines: [
+        "Nothing to uninstall — no hook entries, no daemon service, and nothing configured.",
+        ...found.homeExists && !opts.purge ? [
+          ``,
+          `${failproofaiHome()} still holds settings and audit history.`,
+          `Remove it with \`failproofai uninstall --purge\`.`
+        ] : []
+      ]
+    };
+  }
+  const plan = [];
+  if (found.clis.length > 0) {
+    plan.push(`  • remove failproofai hook entries from ${found.clis.length} agent CLI${found.clis.length === 1 ? "" : "s"}: ` + found.clis.map((id) => getIntegration(id).displayName ?? id).join(", "));
+  }
+  if (found.daemonConfigured) {
+    plan.push(`  • stop requiring the daemon (policies go back to evaluating in-process)`);
+  }
+  if (found.serviceInstalled) {
+    plan.push(`  • stop, disable and delete the service at ${found.servicePath} — needs sudo`);
+  }
+  let purged = false;
+  if (opts.purge && found.homeExists) {
+    plan.push(`  • delete ${failproofaiHome()} — settings, credentials, audit history and the daemon binary`);
+  }
+  lines.push("failproofai uninstall will:", ...plan);
+  if (!opts.purge && found.homeExists) {
+    lines.push(``, `${failproofaiHome()} is KEPT (settings and audit history survive a reinstall).`, `Add --purge to delete it too.`);
+  }
+  const planLines = lines.length;
+  if (opts.dryRun) {
+    lines.push(``, `--dry-run: nothing was changed.`);
+    return { exitCode: 0, lines, planLines, purged: false };
+  }
+  if (!opts.yes) {
+    if (!opts.confirm) {
+      lines.push(``, `Refusing to uninstall without confirmation. Re-run with --yes.`);
+      return { exitCode: 1, lines, planLines, purged: false };
+    }
+    if (!await opts.confirm(lines)) {
+      return { exitCode: 1, planLines, purged: false, lines: [...lines, ``, `Cancelled — nothing was changed.`] };
+    }
+  }
+  lines.push(``);
+  const failures = [];
+  if (found.daemonConfigured) {
+    try {
+      setDaemonConfigured(false);
+      lines.push(`✓ policies now evaluate in-process (this machine no longer requires the daemon)`);
+    } catch (err) {
+      return {
+        exitCode: 2,
+        planLines,
+        purged: false,
+        lines: [
+          ...lines,
+          `✗ could not update ${failproofaiHome()}/config.toml: ${err instanceof Error ? err.message : String(err)}`,
+          ``,
+          `Stopped before touching the service. Removing it while this machine still`,
+          `requires it would deny every tool call. Fix the file's permissions and re-run.`
+        ]
+      };
+    }
+  }
+  if (found.clis.length > 0) {
+    try {
+      await removeHooks(undefined, "all", opts.cwd, {
+        cli: found.clis,
+        removeCustomHooks: true,
+        source: "uninstall_command"
+      });
+      lines.push(`✓ removed hook entries from ${found.clis.length} agent CLI${found.clis.length === 1 ? "" : "s"}`);
+    } catch (err) {
+      failures.push(`hook entries: ${err instanceof Error ? err.message : String(err)} ` + `(finish with \`failproofai policies --uninstall --scope all\`)`);
+    }
+  }
+  if (found.serviceInstalled) {
+    try {
+      await uninstallDaemonService();
+      if (found.servicePath && existsSync31(found.servicePath)) {
+        failures.push(`the service at ${found.servicePath} is still there (most often: no sudo). ` + `Remove it with the commands below.`);
+      } else {
+        lines.push(`✓ stopped and removed the daemon service`);
+      }
+    } catch (err) {
+      failures.push(`daemon service: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  }
+  if (opts.purge && found.homeExists) {
+    try {
+      rmSync10(failproofaiHome(), { recursive: true, force: true });
+      purged = true;
+      lines.push(`✓ deleted ${failproofaiHome()}`);
+    } catch (err) {
+      failures.push(`${failproofaiHome()}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  }
+  if (failures.length > 0) {
+    lines.push(``, `Not everything could be removed:`);
+    for (const f of failures)
+      lines.push(`  ✗ ${f}`);
+    if (found.servicePath && existsSync31(found.servicePath)) {
+      lines.push(``, `To remove the service by hand:`, ...manualServiceRemoval(found.servicePath), ``, `(\`${daemonStatusCommand()}\` shows its current state.)`);
+    }
+    return { exitCode: 1, lines, planLines, purged };
+  }
+  lines.push(``, `Done. failproofai no longer enforces anything on this machine.`, ``, `The npm package itself is still installed — npm runs no uninstall script, which`, `is why this command exists. Remove it with:`, `  npm rm -g failproofai`);
+  if (!opts.purge && found.homeExists) {
+    lines.push(``, `${failproofaiHome()} was kept. Delete it with \`failproofai uninstall --purge\`.`);
+  }
+  return { exitCode: 0, lines, planLines, purged };
+}
+function manualServiceRemoval(servicePath) {
+  if (process.platform === "darwin") {
+    return [`  sudo launchctl unload -w ${servicePath}`, `  sudo rm -f ${servicePath}`];
+  }
+  const unit = servicePath.split("/").pop() ?? servicePath;
+  return [
+    `  sudo systemctl disable --now ${unit}`,
+    `  sudo rm -f ${servicePath}`,
+    `  sudo systemctl daemon-reload`
+  ];
+}
+function serviceStateLabel() {
+  const status = daemonServiceStatus();
+  return status === "condition-failed" ? "installed but skipped by systemd (a file it needs is missing)" : status;
+}
+var init_uninstall_cli = __esm(() => {
+  init_fp_home();
+  init_fp_config();
+  init_daemon_service();
+  init_integrations();
+  init_manager();
+});
+
+// src/hooks/tui.ts
+var exports_tui = {};
+__export(exports_tui, {
+  truncate: () => truncate2,
+  summarize: () => summarize2,
+  selectOne: () => selectOne2,
+  renderLaunchBanner: () => renderLaunchBanner2,
+  renderBrandLogo: () => renderBrandLogo2,
+  promptText: () => promptText2,
+  paint: () => paint2,
+  outro: () => outro2,
+  multiSelect: () => multiSelect2,
+  intro: () => intro2,
+  ellipsize: () => ellipsize2,
+  colorsEnabled: () => colorsEnabled2,
+  brandAnsi: () => brandAnsi2,
+  STEP_DONE: () => STEP_DONE2,
+  STEP_ACTIVE: () => STEP_ACTIVE2,
+  CHECK_ON: () => CHECK_ON2,
+  CHECK_OFF: () => CHECK_OFF2,
+  CARET: () => CARET2,
+  BAR: () => BAR2,
+  ANSI_RESET: () => ANSI_RESET2,
+  ANSI_DIM: () => ANSI_DIM2,
+  ANSI_BOLD: () => ANSI_BOLD2
+});
+import * as readline3 from "node:readline";
+function colorsEnabled2(out) {
+  return !!out.isTTY && !process.env.NO_COLOR;
+}
+function brandAnsi2(role) {
+  const h = HUES2[role];
+  const code = truecolorEnabled2() ? `38;2;${h.rgb.join(";")}` : h.basic;
+  return `${ESC2}[${code}m`;
+}
+function truecolorEnabled2() {
+  return /truecolor|24bit/i.test(process.env.COLORTERM || "");
+}
+function paint2(on) {
+  const tc = on && truecolorEnabled2();
+  const mk = (h, bold = false) => (s) => {
+    if (!on)
+      return s;
+    const code = tc ? `38;2;${h.rgb[0]};${h.rgb[1]};${h.rgb[2]}` : h.basic;
+    return `${ESC2}[${bold ? "1;" : ""}${code}m${s}${ESC2}[0m`;
+  };
+  return {
+    bold: (s) => on ? `${ESC2}[1m${s}${ESC2}[0m` : s,
+    dim: mk(HUES2.dim),
+    guide: mk(HUES2.guide),
+    pink: mk(HUES2.pink),
+    pinkBold: mk(HUES2.pink, true),
+    softPink: mk(HUES2.logoPink),
+    warn: mk(HUES2.warn)
+  };
+}
+function renderLogo2(colorize) {
+  const pad = ".".repeat(LOGO_GRID2[0]?.length ?? 0);
+  const rgb = (ch) => ch === "t" ? LOGO_TEAL2 : ch === "p" ? LOGO_PINK2 : null;
+  const lines = [];
+  for (let r = 0;r < LOGO_GRID2.length; r += 2) {
+    const top = LOGO_GRID2[r];
+    const bot = LOGO_GRID2[r + 1] ?? pad;
+    let line = "";
+    for (let x = 0;x < top.length; x++) {
+      const t = rgb(top[x]);
+      const b = rgb(bot[x]);
+      if (!t && !b) {
+        line += " ";
+      } else if (!colorize) {
+        line += t && b ? "█" : t ? "▀" : "▄";
+      } else if (t && b) {
+        line += t === b ? `${ESC2}[38;2;${t.join(";")}m█${ESC2}[0m` : `${ESC2}[38;2;${t.join(";")};48;2;${b.join(";")}m▀${ESC2}[0m`;
+      } else if (t) {
+        line += `${ESC2}[38;2;${t.join(";")}m▀${ESC2}[0m`;
+      } else {
+        line += `${ESC2}[38;2;${b.join(";")}m▄${ESC2}[0m`;
+      }
+    }
+    lines.push(line);
+  }
+  return lines;
+}
+function truncate2(line, width) {
+  let visual = 0;
+  let out = "";
+  let i = 0;
+  while (i < line.length) {
+    if (line[i] === ESC2 && line[i + 1] === "[") {
+      let j = i + 2;
+      while (j < line.length && !/[A-Za-z]/.test(line[j]))
+        j++;
+      j++;
+      out += line.slice(i, j);
+      i = j;
+    } else {
+      if (visual >= width)
+        break;
+      out += line[i];
+      visual++;
+      i++;
+    }
+  }
+  return out;
+}
+function ellipsize2(text, width) {
+  if (width <= 0)
+    return "";
+  if (text.length <= width)
+    return text;
+  return text.slice(0, width - 1).trimEnd() + "…";
+}
+function summarize2(labels, noun = "selected") {
+  if (labels.length === 0)
+    return "none";
+  if (labels.length <= 3)
+    return labels.join(", ");
+  const head = labels.slice(0, 3).join(", ");
+  return `${labels.length} ${noun} · ${head} +${labels.length - 3}`;
+}
+function writeLines2(out, lines) {
+  const cols = out.columns || 80;
+  out.write(lines.map((l) => l === "" ? l : truncate2(l, cols)).join(`
+`) + `
+`);
+}
+function renderBrandLogo2(stdout = process.stdout) {
+  const c2 = paint2(colorsEnabled2(stdout));
+  const cols = stdout.columns || 80;
+  if (cols < LOGO_MIN_COLS2) {
+    return [`${c2.guide(FLOWER2)} fa${c2.pink("il")}proof ai  ${c2.dim("· " + TAGLINE2)}`];
+  }
+  const tc = colorsEnabled2(stdout) && truecolorEnabled2();
+  const lines = renderLogo2(tc).map((l) => `  ${l}`);
+  lines.push("");
+  lines.push(`  fa${c2.pink("il")}proof ai`);
+  lines.push(`  ${c2.dim(TAGLINE2)}`);
+  return lines;
+}
+function intro2(message, stdout = process.stdout) {
+  if (!stdout.isTTY)
+    return;
+  const c2 = paint2(colorsEnabled2(stdout));
+  const lines = ["", ...renderBrandLogo2(stdout)];
+  lines.push(c2.dim(BAR2));
+  lines.push(`${c2.guide(STEP_ACTIVE2)}  ${c2.bold(message)}`);
+  writeLines2(stdout, lines);
+}
+function renderLaunchBanner2(version3, stdout = process.stdout) {
+  const c2 = paint2(colorsEnabled2(stdout));
+  const row = (label, value) => `  ${c2.guide(label.padEnd(9))}${value}`;
+  const header = stdout.isTTY ? renderBrandLogo2(stdout) : ["  failproof ai", `  ${TAGLINE2}`];
+  return [
+    "",
+    ...header,
+    "",
+    row("version", c2.pink(version3)),
+    row("star", c2.dim("https://github.com/failproofai/failproofai")),
+    row("docs", c2.dim("https://docs.befailproof.ai/introduction")),
+    row("discord", c2.dim("https://discord.befailproof.ai/")),
+    ""
+  ];
+}
+function outro2(message, opts = {}, stdout = process.stdout) {
+  const c2 = paint2(colorsEnabled2(stdout));
+  const ok = opts.ok !== false;
+  if (!stdout.isTTY) {
+    stdout.write(message + `
+`);
+    return;
+  }
+  const end = ok ? c2.pink(BAR_END2) : c2.dim(BAR_END2);
+  const text = ok ? c2.pink(message) : c2.dim(message);
+  writeLines2(stdout, [c2.dim(BAR2), `${end}  ${text}`]);
+}
+function repaint2(out, region, lines) {
+  if (region.lastCount > 0)
+    out.write(`${ESC2}[${region.lastCount}A${ESC2}[J`);
+  writeLines2(out, lines);
+  region.lastCount = lines.length;
+}
+function hideCursor2(out) {
+  out.write(`${ESC2}[?25l`);
+}
+function showCursor2(out) {
+  out.write(`${ESC2}[?25h`);
+}
+function nameWidth2(labels) {
+  return Math.min(24, Math.max(6, ...labels.map((l) => l.length)));
+}
+function displayRows2(choices) {
+  const rows = [];
+  let lastSection;
+  choices.forEach((choice, index) => {
+    if (choice.section && choice.section !== lastSection) {
+      lastSection = choice.section;
+      rows.push({ kind: "header", text: choice.section });
+    }
+    rows.push({ kind: "item", index });
+  });
+  return rows;
+}
+function viewport2(rows, cursorRow, window) {
+  if (rows.length <= window)
+    return { start: 0, end: rows.length };
+  let start = cursorRow - Math.floor(window / 2);
+  start = Math.max(0, Math.min(start, rows.length - window));
+  return { start, end: start + window };
+}
+function runPrompt2(p) {
+  const { stdin, stdout, c: c2, choices } = p;
+  const region = { lastCount: 0 };
+  const nameCol = nameWidth2(choices.map((ch) => ch.label));
+  let cursor2 = 0;
+  const build = () => {
+    const cols = stdout.columns || 80;
+    const lines = [c2.dim(BAR2), `${c2.guide(STEP_ACTIVE2)}  ${c2.bold(p.message)}`];
+    for (const b of p.body ?? [])
+      lines.push(`${c2.dim(BAR2)}  ${c2.dim(b)}`);
+    const rows = displayRows2(choices);
+    let cursorRow = 0;
+    rows.forEach((r, ri) => {
+      if (r.kind === "item" && r.index === cursor2)
+        cursorRow = ri;
+    });
+    const { start, end } = viewport2(rows, cursorRow, WINDOW3);
+    const above = rows.slice(0, start).filter((r) => r.kind === "item").length;
+    const below = rows.slice(end).filter((r) => r.kind === "item").length;
+    if (above > 0)
+      lines.push(`${c2.dim(BAR2)}    ${c2.dim(`↑ ${above} more`)}`);
+    const budget = Math.max(6, cols - nameCol - 10);
+    for (let ri = start;ri < end; ri++) {
+      const row = rows[ri];
+      if (row.kind === "header") {
+        lines.push(`${c2.dim(BAR2)}  ${c2.dim(row.text)}`);
+      } else {
+        lines.push(`${c2.dim(BAR2)}  ${p.renderRow(row.index, row.index === cursor2, budget)}`);
+      }
+    }
+    if (below > 0)
+      lines.push(`${c2.dim(BAR2)}    ${c2.dim(`↓ ${below} more`)}`);
+    const warn = p.warnLine?.();
+    if (warn)
+      lines.push(`${c2.dim(BAR2)}  ${warn}`);
+    lines.push(`${c2.dim(BAR2)}  ${c2.dim(p.footer)}`);
+    return lines;
+  };
+  const collapse = (result) => {
+    repaint2(stdout, region, [
+      c2.dim(BAR2),
+      `${c2.dim(STEP_DONE2)}  ${p.message}`,
+      `${c2.dim(BAR2)}  ${c2.dim(p.summaryFor(result))}`
+    ]);
+  };
+  return new Promise((resolve24) => {
+    hideCursor2(stdout);
+    repaint2(stdout, region, build());
+    readline3.emitKeypressEvents(stdin);
+    const wasRaw = stdin.isRaw;
+    stdin.setRawMode?.(true);
+    stdin.resume();
+    const cleanup = () => {
+      stdin.removeListener("keypress", onKey);
+      stdin.setRawMode?.(wasRaw ?? false);
+      stdin.pause();
+      showCursor2(stdout);
+    };
+    const finish = (result) => {
+      cleanup();
+      collapse(result);
+      resolve24(result);
+    };
+    function onKey(_s, key) {
+      if (!key)
+        return;
+      if (key.ctrl && (key.name === "c" || key.name === "d") || key.name === "escape") {
+        finish(null);
+      } else if (key.name === "up") {
+        cursor2 = cursor2 > 0 ? cursor2 - 1 : choices.length - 1;
+        repaint2(stdout, region, build());
+      } else if (key.name === "down") {
+        cursor2 = cursor2 < choices.length - 1 ? cursor2 + 1 : 0;
+        repaint2(stdout, region, build());
+      } else {
+        const outcome = p.onKey(key, cursor2);
+        if (outcome === "redraw")
+          repaint2(stdout, region, build());
+        else if (outcome)
+          finish(outcome.done);
+      }
+    }
+    stdin.on("keypress", onKey);
+  });
+}
+function selectOne2(opts) {
+  const stdin = opts.stdin ?? process.stdin;
+  const stdout = opts.stdout ?? process.stdout;
+  const choices = opts.choices;
+  if (!choices.length)
+    return Promise.resolve(null);
+  if (!stdin.isTTY || !stdout.isTTY) {
+    return Promise.resolve(choices[0].value);
+  }
+  const c2 = paint2(colorsEnabled2(stdout));
+  const nameCol = nameWidth2(choices.map((ch) => ch.label));
+  return runPrompt2({
+    stdin,
+    stdout,
+    message: opts.message,
+    c: c2,
+    body: opts.body,
+    choices,
+    renderRow: (index, active, budget) => {
+      const choice = choices[index];
+      const dot = active ? c2.pink(RADIO_ON2) : c2.dim(RADIO_OFF2);
+      const rawLabel = choice.label.padEnd(nameCol);
+      const label = active ? c2.pinkBold(rawLabel) : rawLabel;
+      const hint = choice.hint ? `  ${c2.dim(ellipsize2(choice.hint, budget))}` : "";
+      return `${dot} ${label}${hint}`;
+    },
+    footer: "↑/↓ navigate · enter to select · esc to cancel",
+    onKey: (key, cursor2) => key.name === "return" ? { done: choices[cursor2].value } : undefined,
+    summaryFor: (value) => value === null ? "cancelled" : choices.find((ch) => ch.value === value)?.label ?? String(value)
+  });
+}
+function multiSelect2(opts) {
+  const stdin = opts.stdin ?? process.stdin;
+  const stdout = opts.stdout ?? process.stdout;
+  const choices = opts.choices;
+  const minSelected = opts.minSelected ?? 0;
+  const noun = opts.summaryNoun ?? "selected";
+  const checked = choices.map((ch) => ch.locked ? ch.checked ?? true : !!ch.checked);
+  if (!stdin.isTTY || !stdout.isTTY) {
+    return Promise.resolve(choices.filter((_, i) => checked[i]).map((ch) => ch.value));
+  }
+  const c2 = paint2(colorsEnabled2(stdout));
+  const nameCol = nameWidth2(choices.map((ch) => ch.label));
+  let warn = false;
+  return runPrompt2({
+    stdin,
+    stdout,
+    message: opts.message,
+    c: c2,
+    choices,
+    renderRow: (index, active, budget) => {
+      const choice = choices[index];
+      const caret = active ? c2.pink(CARET2) : " ";
+      const box = choice.locked ? checked[index] ? c2.guide(CHECK_ON2) : c2.dim(CHECK_OFF2) : checked[index] ? c2.pink(CHECK_ON2) : c2.dim(CHECK_OFF2);
+      const rawLabel = choice.label.padEnd(nameCol);
+      const label = active ? c2.pinkBold(rawLabel) : checked[index] ? rawLabel : c2.dim(rawLabel);
+      const hint = choice.hint ? `  ${c2.dim(ellipsize2(choice.hint, budget))}` : "";
+      return `${caret} ${box} ${label}${hint}`;
+    },
+    warnLine: () => warn ? c2.warn(`Select at least ${minSelected}.`) : null,
+    footer: opts.hint ?? "↑/↓ move · space select · ctrl+a all · enter confirm",
+    onKey: (key, cursor2) => {
+      if (key.name === "space") {
+        if (choices[cursor2]?.locked)
+          return "redraw";
+        checked[cursor2] = !checked[cursor2];
+        warn = false;
+        return "redraw";
+      }
+      if (key.ctrl && key.name === "a") {
+        const allOn = choices.every((ch, i) => checked[i] || ch.locked);
+        for (let i = 0;i < checked.length; i++) {
+          checked[i] = choices[i]?.locked ? true : !allOn;
+        }
+        return "redraw";
+      }
+      if (key.name === "return") {
+        const selected = choices.filter((_, i) => checked[i]).map((ch) => ch.value);
+        const chosen = choices.filter((ch, i) => checked[i] && !ch.locked).length;
+        if (chosen < minSelected) {
+          warn = true;
+          return "redraw";
+        }
+        return { done: selected };
+      }
+      return;
+    },
+    summaryFor: (values) => values === null ? "cancelled" : summarize2(choices.filter((ch) => values.includes(ch.value) && !ch.summaryExclude).map((ch) => ch.label), noun)
+  });
+}
+function promptText2(opts) {
+  const stdin = opts.stdin ?? process.stdin;
+  const stdout = opts.stdout ?? process.stdout;
+  const c2 = paint2(colorsEnabled2(stdout));
+  const accept = (raw) => {
+    const value = raw.trim() || opts.defaultValue || "";
+    const error = opts.validate?.(value) ?? null;
+    return error ? { ok: false, error } : { ok: true, value };
+  };
+  if (!stdin.isTTY) {
+    return new Promise((resolve24) => {
+      let buf = "";
+      const onData = (chunk) => {
+        buf += String(chunk);
+        if (buf.includes(`
+`))
+          done();
+      };
+      const done = () => {
+        stdin.removeListener("data", onData);
+        stdin.removeListener("end", done);
+        const r = accept(buf.split(`
+`)[0] ?? "");
+        resolve24(r.ok ? r.value : null);
+      };
+      stdin.on("data", onData);
+      stdin.on("end", done);
+    });
+  }
+  return new Promise((resolve24) => {
+    let value = "";
+    const draw = (error) => {
+      const shown = opts.mask ? "•".repeat(value.length) : value;
+      const hint = opts.hint ? `  ${c2.dim(opts.hint)}` : "";
+      const err = error ? `
+  ${c2.warn(error)}` : "";
+      stdout.write(`\r\x1B[2K${c2.bold(opts.message)} ${shown}${hint}${err}`);
+      if (err)
+        stdout.write("\x1B[1A");
+    };
+    draw();
+    readline3.emitKeypressEvents(stdin);
+    const wasRaw = stdin.isRaw;
+    stdin.setRawMode?.(true);
+    stdin.resume();
+    const cleanup = () => {
+      stdin.removeListener("keypress", onKey);
+      stdin.setRawMode?.(wasRaw ?? false);
+      stdin.pause();
+      stdout.write(`
+`);
+    };
+    function onKey(str2, key) {
+      if (!key)
+        return;
+      if (key.ctrl && (key.name === "c" || key.name === "d") || key.name === "escape") {
+        cleanup();
+        resolve24(null);
+        return;
+      }
+      if (key.name === "return" || key.name === "enter") {
+        const r = accept(value);
+        if (r.ok) {
+          cleanup();
+          resolve24(r.value);
+        } else {
+          draw(r.error);
+        }
+        return;
+      }
+      if (key.name === "backspace") {
+        value = value.slice(0, -1);
+        draw();
+        return;
+      }
+      if (str2 && !key.ctrl && !key.meta) {
+        value += str2;
+        draw();
+      }
+    }
+    stdin.on("keypress", onKey);
+  });
+}
+var ESC2 = "\x1B", BAR2 = "│", BAR_END2 = "└", STEP_ACTIVE2 = "◆", STEP_DONE2 = "◇", RADIO_ON2 = "●", RADIO_OFF2 = "○", CHECK_ON2 = "◼", CHECK_OFF2 = "◻", CARET2 = "❯", FLOWER2 = "❋", HUES2, ANSI_RESET2, ANSI_BOLD2, ANSI_DIM2, LOGO_MIN_COLS2 = 22, TAGLINE2 = "end-to-end failure layer for ai agents", LOGO_GRID2, LOGO_TEAL2, LOGO_PINK2, WINDOW3 = 8;
+var init_tui2 = __esm(() => {
+  HUES2 = {
+    guide: { rgb: [102, 209, 181], basic: "36" },
+    pink: { rgb: [255, 46, 136], basic: "95" },
+    logoPink: { rgb: [228, 88, 124], basic: "95" },
+    warn: { rgb: [227, 179, 65], basic: "33" },
+    dim: { rgb: [107, 118, 132], basic: "2" }
+  };
+  ANSI_RESET2 = `${ESC2}[0m`;
+  ANSI_BOLD2 = `${ESC2}[1m`;
+  ANSI_DIM2 = `${ESC2}[2m`;
+  LOGO_GRID2 = [
+    "...tt........",
+    "..tttt.......",
+    ".tttttt..pppp",
+    ".tttttt..pppp",
+    "..tttt...pppp",
+    "...tt....pppp",
+    ".........pppp",
+    ".........pppp",
+    "..pppp...pppp",
+    "..pppp...pppp",
+    "..pppp...pppp",
+    ".pppppp..pppp",
+    ".pppppp..pppp",
+    ".pppppp..pppp",
+    ".pppppp..pppp",
+    "..pppp...pppp",
+    "..ppppppppppp",
+    "..ppppppppppp",
+    "..ppppppppppp",
+    "..ppppppppppp"
+  ];
+  LOGO_TEAL2 = HUES2.guide.rgb;
+  LOGO_PINK2 = HUES2.logoPink.rgb;
+});
+
+// src/hooks/manager.ts
+var exports_manager = {};
+__export(exports_manager, {
+  removeHooks: () => removeHooks2,
+  listHooks: () => listHooks,
+  installHooks: () => installHooks2,
+  hooksInstalledInSettings: () => hooksInstalledInSettings2,
   getSettingsPath: () => getSettingsPath2
 });
 import { execSync as execSync7 } from "node:child_process";
-import { existsSync as existsSync30 } from "node:fs";
+import { existsSync as existsSync32 } from "node:fs";
 import { resolve as resolve24, basename as basename6 } from "node:path";
 import { platform as platform5, arch as arch4, release as release3, hostname as hostname5 } from "node:os";
 function getSettingsPath2(scope, cwd) {
@@ -26009,7 +27096,7 @@ async function installHooksImpl2(policyNames, scope = "user", cwd, includeBeta =
   } else if (customPoliciesPath && (typeof customPoliciesPath === "string" || customPoliciesPath.length > 0)) {
     const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path3) => resolve24(path3));
     const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path3) => resolve24(path3)).filter((path3) => {
-      if (existsSync30(path3))
+      if (existsSync32(path3))
         return true;
       console.log(`Dropping custom policies path (file no longer exists): ${path3}`);
       return false;
@@ -26145,7 +27232,7 @@ This file can be committed to git — no machine-specific paths.`);
     } catch {}
   }
 }
-async function removeHooks(policyNames, scope = "user", cwd, opts) {
+async function removeHooks2(policyNames, scope = "user", cwd, opts) {
   const configScope = scope === "all" ? "user" : scope;
   const selectedClis = opts?.cli && opts.cli.length > 0 ? [...new Set(opts.cli)] : ["claude"];
   if (opts?.removeCustomHooks) {
@@ -26201,7 +27288,7 @@ async function removeHooks(policyNames, scope = "user", cwd, opts) {
     const scopesToRemove = scope === "all" ? [...integration.scopes] : integration.scopes.includes(scope) ? [scope] : [];
     for (const s of scopesToRemove) {
       const settingsPaths = settingsPathsFor(integration, s, cwd);
-      const existing = settingsPaths.filter((p) => existsSync30(p));
+      const existing = settingsPaths.filter((p) => existsSync32(p));
       if (existing.length === 0) {
         if (scope !== "all" && selectedClis.length === 1) {
           console.log("No settings file found. Nothing to remove.");
@@ -26402,7 +27489,7 @@ Failproof AI Hook Policies
     for (const path3 of explicitPaths) {
       const absPath = resolve24(findProjectConfigDir(cwd ?? process.cwd()), path3);
       console.log(`  ${absPath}`);
-      if (!existsSync30(absPath)) {
+      if (!existsSync32(absPath)) {
         console.log(`  \x1B[31m✗ File not found: ${absPath}\x1B[0m`);
         continue;
       }
@@ -26499,7 +27586,7 @@ __export(exports_install_prompt, {
   promptPolicySelection: () => promptPolicySelection2,
   buildCliMenuOptions: () => buildCliMenuOptions
 });
-import * as readline3 from "node:readline";
+import * as readline4 from "node:readline";
 async function resolveTargetClis(explicit, action = "install") {
   const detected = explicit && explicit.length > 0 ? [] : detectInstalledClis();
   const stdinIsTty = !!process.stdin.isTTY;
@@ -26606,13 +27693,13 @@ async function promptCliTargetSelection(detected, action = "install") {
   let cursor2 = 0;
   let lastLineCount = 0;
   let cursorHidden = false;
-  function hideCursor2() {
+  function hideCursor3() {
     if (!cursorHidden) {
       process.stdout.write("\x1B[?25l");
       cursorHidden = true;
     }
   }
-  function showCursor2() {
+  function showCursor3() {
     if (cursorHidden) {
       process.stdout.write("\x1B[?25h");
       cursorHidden = false;
@@ -26622,7 +27709,7 @@ async function promptCliTargetSelection(detected, action = "install") {
   const heading = action === "uninstall" ? "Remove failproofai hooks" : "Install failproofai hooks";
   function render() {
     const cols = process.stdout.columns || 100;
-    hideCursor2();
+    hideCursor3();
     const g = dim(BAR);
     const lines = [g, `${teal(STEP_ACTIVE)}  ${bold(heading)}`];
     for (const row of buildDisplayRows()) {
@@ -26655,13 +27742,13 @@ async function promptCliTargetSelection(detected, action = "install") {
   const itemCount = options.length;
   return new Promise((resolve25) => {
     render();
-    readline3.emitKeypressEvents(process.stdin);
+    readline4.emitKeypressEvents(process.stdin);
     const wasRaw = process.stdin.isRaw;
     if (process.stdin.setRawMode)
       process.stdin.setRawMode(true);
     process.stdin.resume();
     function cleanup() {
-      showCursor2();
+      showCursor3();
       process.stdin.removeListener("keypress", onKey);
       if (process.stdin.setRawMode)
         process.stdin.setRawMode(wasRaw ?? false);
@@ -26722,13 +27809,13 @@ async function promptPolicySelection2(preSelected, options = {}) {
   let search = "";
   let lastLineCount = 0;
   let cursorHidden = false;
-  function hideCursor2() {
+  function hideCursor3() {
     if (!cursorHidden) {
       process.stdout.write("\x1B[?25l");
       cursorHidden = true;
     }
   }
-  function showCursor2() {
+  function showCursor3() {
     if (cursorHidden) {
       process.stdout.write("\x1B[?25h");
       cursorHidden = false;
@@ -26775,7 +27862,7 @@ async function promptPolicySelection2(preSelected, options = {}) {
   }
   function render() {
     const cols = process.stdout.columns || 100;
-    hideCursor2();
+    hideCursor3();
     const filtered = getFiltered();
     const shown = filtered.length;
     if (shown > 0 && cursor2 >= shown)
@@ -26794,10 +27881,10 @@ async function promptPolicySelection2(preSelected, options = {}) {
       for (let i = 0;i < WINDOW_SIZE + 1; i++)
         lines.push(g);
     } else {
-      const displayRows2 = buildDisplayRows(filtered);
+      const displayRows3 = buildDisplayRows(filtered);
       let cursorDisplayRow = 0;
-      for (let i = 0;i < displayRows2.length; i++) {
-        const row = displayRows2[i];
+      for (let i = 0;i < displayRows3.length; i++) {
+        const row = displayRows3[i];
         if (row.kind === "item" && row.filteredIndex === cursor2) {
           cursorDisplayRow = i;
           break;
@@ -26805,12 +27892,12 @@ async function promptPolicySelection2(preSelected, options = {}) {
       }
       let windowStart = cursorDisplayRow - Math.floor(WINDOW_SIZE / 2);
       windowStart = Math.max(0, windowStart);
-      windowStart = Math.min(windowStart, Math.max(0, displayRows2.length - WINDOW_SIZE));
-      const windowEnd = Math.min(displayRows2.length, windowStart + WINDOW_SIZE);
-      const aboveItems = displayRows2.slice(0, windowStart).filter((r) => r.kind === "item").length;
+      windowStart = Math.min(windowStart, Math.max(0, displayRows3.length - WINDOW_SIZE));
+      const windowEnd = Math.min(displayRows3.length, windowStart + WINDOW_SIZE);
+      const aboveItems = displayRows3.slice(0, windowStart).filter((r) => r.kind === "item").length;
       lines.push(aboveItems > 0 ? `${g}  ${dim(`↑ ${aboveItems} more`)}` : g);
       for (let i = windowStart;i < windowEnd; i++) {
-        const row = displayRows2[i];
+        const row = displayRows3[i];
         if (row.kind === "header") {
           lines.push(`${g}  ${dim(row.category.toUpperCase())}  ${dim(`${row.enabledCount}/${row.totalCount}`)}`);
         } else {
@@ -26827,7 +27914,7 @@ async function promptPolicySelection2(preSelected, options = {}) {
       }
       for (let i = windowEnd - windowStart;i < WINDOW_SIZE; i++)
         lines.push(g);
-      const belowItems = displayRows2.slice(windowEnd).filter((r) => r.kind === "item").length;
+      const belowItems = displayRows3.slice(windowEnd).filter((r) => r.kind === "item").length;
       lines.push(belowItems > 0 ? `${g}  ${dim(`↓ ${belowItems} more`)}` : g);
     }
     lines.push(g);
@@ -26843,7 +27930,7 @@ async function promptPolicySelection2(preSelected, options = {}) {
     render();
     process.stdin.setRawMode(true);
     process.stdin.resume();
-    readline3.emitKeypressEvents(process.stdin);
+    readline4.emitKeypressEvents(process.stdin);
     function keypressHandler(_str, key) {
       if (!key)
         return;
@@ -26899,7 +27986,7 @@ ${dim(BAR)}  ${dim(`${selected.length} selected`)}
       }
     }
     function cleanup() {
-      showCursor2();
+      showCursor3();
       process.stdin.removeListener("keypress", keypressHandler);
       process.stdin.setRawMode(false);
       process.stdin.pause();
@@ -27537,8 +28624,8 @@ __export(exports_launch2, {
   launch: () => launch2
 });
 import { spawn as spawn3 } from "child_process";
-import { realpathSync as realpathSync5, existsSync as existsSync31 } from "node:fs";
-import { resolve as resolve25, dirname as dirname15 } from "node:path";
+import { realpathSync as realpathSync5, existsSync as existsSync33 } from "node:fs";
+import { resolve as resolve25, dirname as dirname16 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { createInterface as createInterface2 } from "node:readline";
 function launch2(mode) {
@@ -27562,9 +28649,9 @@ function launch2(mode) {
     process.env.PORT = port;
     process.env.HOSTNAME = bindHost;
     cmd = "node";
-    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve25(dirname15(realpathSync5(fileURLToPath3(import.meta.url))), "..");
+    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve25(dirname16(realpathSync5(fileURLToPath3(import.meta.url))), "..");
     const serverJsPath = resolve25(packageRoot, ".next/standalone/server.js");
-    if (!existsSync31(serverJsPath)) {
+    if (!existsSync33(serverJsPath)) {
       let shadowMessage = null;
       try {
         const diag = diagnoseShadow({ selfPackageRoot: packageRoot, selfVersion: version2 });
@@ -27661,17 +28748,17 @@ var init_cli_error2 = __esm(() => {
 
 // bin/failproofai.mjs
 import { realpathSync as realpathSync6 } from "fs";
-import { dirname as dirname16, resolve as resolve26 } from "path";
+import { dirname as dirname17, resolve as resolve26 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 // package.json
-var version = "1.0.0-beta.6";
+var version = "1.0.0-beta.8";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {
-  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve26(dirname16(realpathSync6(fileURLToPath4(import.meta.url))), "..");
+  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve26(dirname17(realpathSync6(fileURLToPath4(import.meta.url))), "..");
 }
 if (!process.env.FAILPROOFAI_DIST_PATH) {
-  process.env.FAILPROOFAI_DIST_PATH = resolve26(dirname16(realpathSync6(fileURLToPath4(import.meta.url))), "..", "dist");
+  process.env.FAILPROOFAI_DIST_PATH = resolve26(dirname17(realpathSync6(fileURLToPath4(import.meta.url))), "..", "dist");
 }
 var args = process.argv.slice(2);
 if (args[0] === "p")
@@ -27731,15 +28818,10 @@ if (hookIdx >= 0) {
       let result;
       if (attempt.ok) {
         result = attempt.response;
-      } else if (attempt.failure === "protocol-mismatch") {
-        console.error("[failproofai] failproofaid speaks a different protocol version than this CLI \u2014 " + "evaluating in-process instead (slower, identical policies). Run `failproofai config` to update the daemon.");
-        result = await evaluateHookEvent2(eventType, cli, stdinRead.payload);
       } else {
+        const reason = attempt.failure === "protocol-mismatch" ? "failproofaid is running a different protocol version than this CLI, so it cannot evaluate this call. Run `failproofai config` to update the daemon." : "failproofaid could not be reached. This machine is configured to run hooks through it " + "\u2014 check the daemon (see `failproofai config`) rather than retrying blindly.";
         result = await evaluateHookEvent2(eventType, cli, stdinRead.payload, {
-          forceDecision: {
-            decision: "deny",
-            reason: "failproofaid could not be reached. This machine is configured to run hooks through it " + "\u2014 check the daemon (see `failproofai config`) rather than retrying blindly."
-          }
+          forceDecision: { decision: "deny", reason }
         });
       }
       if (result.stdout)
@@ -27767,7 +28849,7 @@ if (hookIdx >= 0) {
   }
 }
 async function runCli() {
-  const SUBCOMMANDS = ["policies", "policy", "audit", "config"];
+  const SUBCOMMANDS = ["policies", "policy", "audit", "config", "uninstall"];
   if ((args.includes("--help") || args.includes("-h")) && !SUBCOMMANDS.includes(args[0])) {
     const extraArgs = args.filter((a) => a !== "--help" && a !== "-h");
     if (extraArgs.length > 0) {
@@ -27813,6 +28895,16 @@ COMMANDS
                                  dashboard at http://localhost:8020/audit
   audit --help, -h               Show this help for the audit command
 
+  uninstall                      Remove failproofai from this machine: hook
+                                 entries from every agent CLI, and the daemon
+                                 service. Run this BEFORE \`npm rm -g failproofai\`
+                                 \u2014 npm runs no uninstall script, so removing the
+                                 package alone leaves both behind.
+    --purge                        Also delete ~/.failproofai (settings,
+                                   credentials, audit history, daemon binary)
+    --dry-run                      Show what would be removed, change nothing
+    --yes, -y                      Skip the confirmation prompt
+
   --version, -v                  Print version and exit
   --help, -h                     Show this help message
 
@@ -27890,6 +28982,84 @@ Run \`failproofai --help\` for usage.`);
       await maybeFirstRunConfigure2({}, { postSetupAudit: args[0] !== "audit", force: layoutWasReset });
     } catch {}
   }
+  if (args[0] === "uninstall") {
+    const subArgs = args.slice(1);
+    if (subArgs.includes("--help") || subArgs.includes("-h")) {
+      console.log(`
+failproofai uninstall \u2014 remove failproofai from this machine
+
+USAGE
+  failproofai uninstall [--purge] [--dry-run] [--yes]
+
+WHAT IT REMOVES
+  \u2022 failproofai hook entries from every agent CLI that has them
+  \u2022 the failproofaid daemon service (needs sudo)
+  \u2022 the "require the daemon" flag \u2014 cleared FIRST, so a partial uninstall can
+    never leave this machine denying every tool call
+
+OPTIONS
+  --purge         Also delete ~/.failproofai \u2014 settings, credentials, audit
+                  history and the downloaded daemon binary. Off by default so a
+                  reinstall keeps your history.
+  --dry-run       Print what would be removed and change nothing.
+  --yes, -y       Skip the confirmation prompt. Required when there is no TTY.
+
+WHY THIS EXISTS
+  npm runs no uninstall script, so \`npm rm -g failproofai\` removes the package
+  and leaves the hook entries and the service behind. Run this first, then:
+      npm rm -g failproofai
+`);
+      process.exit(0);
+    }
+    const KNOWN = new Set(["--purge", "--dry-run", "--yes", "-y"]);
+    const unknown = subArgs.find((a) => !KNOWN.has(a));
+    if (unknown) {
+      throw new CliError3(`Unexpected argument: ${unknown}
+Run \`failproofai uninstall --help\` for usage.`);
+    }
+    lastSubcommand = "uninstall_command";
+    const { runUninstallCommand: runUninstallCommand2 } = await Promise.resolve().then(() => (init_uninstall_cli(), exports_uninstall_cli));
+    const purge = subArgs.includes("--purge");
+    const dryRun = subArgs.includes("--dry-run");
+    const yes = subArgs.includes("--yes") || subArgs.includes("-y");
+    let planWasShown = false;
+    const result = await runUninstallCommand2({
+      purge,
+      dryRun,
+      yes,
+      cwd: process.cwd(),
+      confirm: process.stdin.isTTY ? async (planLines) => {
+        planWasShown = true;
+        const { selectOne: selectOne3 } = await Promise.resolve().then(() => (init_tui2(), exports_tui));
+        const answer = await selectOne3({
+          message: purge ? "Remove failproofai and DELETE ~/.failproofai?" : "Remove failproofai from this machine?",
+          body: planLines,
+          choices: [
+            { label: "No, cancel", value: false },
+            { label: purge ? "Yes, remove and purge" : "Yes, remove it", value: true }
+          ]
+        });
+        return answer === true;
+      } : undefined
+    });
+    const skip = planWasShown ? result.planLines : 0;
+    for (const line of result.lines.slice(skip)) {
+      if (result.exitCode === 0)
+        console.log(line);
+      else
+        console.error(line);
+    }
+    if (!result.purged) {
+      await track("cli_uninstall_command", {
+        ok: result.exitCode === 0,
+        purge,
+        dry_run: dryRun
+      });
+    }
+    lastSubcommand = null;
+    await exitAfterFlush(result.exitCode);
+    return;
+  }
   if (args[0] === "policies") {
     const subArgs = args.slice(1);
     const isInstall = subArgs.includes("--install") || subArgs.includes("-i");
@@ -28019,7 +29189,7 @@ Run \`failproofai policies --help\` for usage.`);
     }
     if (isUninstall) {
       lastSubcommand = "uninstall";
-      const { removeHooks: removeHooks2 } = await Promise.resolve().then(() => (init_manager2(), exports_manager));
+      const { removeHooks: removeHooks3 } = await Promise.resolve().then(() => (init_manager2(), exports_manager));
       const { resolveTargetClis: resolveTargetClis2 } = await Promise.resolve().then(() => (init_install_prompt2(), exports_install_prompt));
       const scopeIdx = subArgs.indexOf("--scope");
       const scope = scopeIdx >= 0 ? subArgs[scopeIdx + 1] : "user";
@@ -28064,7 +29234,7 @@ Run \`failproofai policies --help\` for usage.`);
       }
       const policyNames = subArgs.filter((a, idx) => !a.startsWith("-") && !consumedIdxs.has(idx));
       const cli = await resolveTargetClis2(cliFlagValues.length > 0 ? cliFlagValues : undefined, "uninstall");
-      await removeHooks2(policyNames.length > 0 ? policyNames : undefined, scope, undefined, { betaOnly, removeCustomHooks, cli });
+      await removeHooks3(policyNames.length > 0 ? policyNames : undefined, scope, undefined, { betaOnly, removeCustomHooks, cli });
       await track("cli_uninstall_success", {
         scope,
         cli,
@@ -28196,8 +29366,8 @@ For multiple policies use \`failproofai policies --${action === "add" ? "install
         include_beta: includeBeta
       });
     } else {
-      const { removeHooks: removeHooks2 } = await Promise.resolve().then(() => (init_manager2(), exports_manager));
-      await removeHooks2([policyName], scope, undefined, { betaOnly: false, removeCustomHooks: false, cli });
+      const { removeHooks: removeHooks3 } = await Promise.resolve().then(() => (init_manager2(), exports_manager));
+      await removeHooks3([policyName], scope, undefined, { betaOnly: false, removeCustomHooks: false, cli });
       await track("cli_policy_remove_success", {
         scope,
         cli,