failproofai 1.0.0-beta.7 → 1.0.0-beta.9

package/dist/cli.mjs

@@ -19,7 +19,7 @@ var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // package.json
-var version2 = "1.0.0-beta.7";
+var version2 = "1.0.0-beta.9";
 var init_package = () => {};
 
 // src/posthog-key.ts
@@ -1007,7 +1007,8 @@ function resettablePaths() {
     legacy.launcherMarker(),
     legacy.lastVersion(),
     legacy.auditDashboard(),
-    legacy.cacheDir(),
+    legacy.auditCacheDir(),
+    legacy.codexSessionPaths(),
     legacy.spoolDir(),
     legacy.failedDir(),
     legacy.collectorHealth(),
@@ -1015,12 +1016,10 @@ function resettablePaths() {
     legacy.cloudManagedPolicies(),
     localPoliciesDir(),
     cloudPoliciesDir(),
-    at("cursors"),
     at("state"),
     configFile(),
     credentialsFile(),
     auditDir(),
-    hookActivityDir(),
     customAgentsDir(),
     logsDir()
   ];
@@ -1454,6 +1453,7 @@ __export(exports_daemon_client, {
   tryDaemonHook: () => tryDaemonHook,
   isDaemonConfigured: () => isDaemonConfigured,
   daemonSocketPresent: () => daemonSocketPresent,
+  daemonAcceptsConnections: () => daemonAcceptsConnections,
   attemptDaemonHook: () => attemptDaemonHook
 });
 import { createConnection } from "node:net";
@@ -1465,6 +1465,27 @@ function daemonSocketPresent() {
     return false;
   }
 }
+async function daemonAcceptsConnections(timeoutMs = DAEMON_CONNECT_TIMEOUT_MS) {
+  if (process.platform === "win32")
+    return false;
+  return new Promise((resolve2) => {
+    let settled = false;
+    const done = (v) => {
+      if (settled)
+        return;
+      settled = true;
+      clearTimeout(timer);
+      socket.removeAllListeners();
+      socket.destroy();
+      resolve2(v);
+    };
+    const socket = createConnection({ path: socketPath() });
+    const timer = setTimeout(() => done(false), timeoutMs);
+    timer.unref?.();
+    socket.on("connect", () => done(true));
+    socket.on("error", () => done(false));
+  });
+}
 function socketPath() {
   if (process.env.FAILPROOFAI_DAEMON_SOCKET)
     return process.env.FAILPROOFAI_DAEMON_SOCKET;
@@ -2751,11 +2772,82 @@ function blockEnvFiles(ctx) {
   }
   return allow();
 }
+function quoteAwareSegments(command) {
+  const segments = [];
+  let tokens = [];
+  let token = "";
+  let quote = null;
+  const endToken = () => {
+    if (token)
+      tokens.push(token);
+    token = "";
+  };
+  const endSegment = () => {
+    endToken();
+    if (tokens.length)
+      segments.push(tokens);
+    tokens = [];
+  };
+  for (let i = 0;i < command.length; i++) {
+    const c = command[i];
+    if (quote) {
+      if (c === "\\" && quote === '"' && i + 1 < command.length) {
+        token += command[++i];
+        continue;
+      }
+      if (c === quote) {
+        quote = null;
+        continue;
+      }
+      token += c;
+      continue;
+    }
+    if (c === "\\" && i + 1 < command.length) {
+      token += command[++i];
+      continue;
+    }
+    if (c === '"' || c === "'") {
+      quote = c;
+      continue;
+    }
+    if (/\s/.test(c)) {
+      endToken();
+      continue;
+    }
+    if (/[;&|\n\r(){}`]/.test(c)) {
+      endSegment();
+      continue;
+    }
+    token += c;
+  }
+  endSegment();
+  return segments;
+}
+function namesElevation(command, depth = 0) {
+  for (const tokens of quoteAwareSegments(command)) {
+    let i = 0;
+    while (i < tokens.length) {
+      const token = tokens[i];
+      const base = token.slice(token.lastIndexOf("/") + 1);
+      if (base === "sudo" || base === "doas")
+        return true;
+      const isSkippable = ENV_ASSIGNMENT_RE.test(token) || token.startsWith("-") || token.startsWith(">") || token.startsWith("<") || RUNNER_OPERAND_RE.test(token) || COMMAND_PREFIX_TOKENS.has(base);
+      if (!isSkippable)
+        break;
+      if (EVAL_FLAG_RE.test(token) && depth < 3 && i + 1 < tokens.length) {
+        if (namesElevation(tokens[i + 1], depth + 1))
+          return true;
+      }
+      i++;
+    }
+  }
+  return false;
+}
 function blockSudo(ctx) {
   if (ctx.toolName !== "Bash")
     return allow();
   const cmd = getCommand(ctx).trimStart();
-  if (SUDO_RE.test(cmd) || cmd.startsWith("sudo ")) {
+  if (namesElevation(cmd)) {
     const allowPatterns = ctx.params?.allowPatterns ?? [];
     if (allowPatterns.some((p) => matchesAllowedPattern(cmd, p)))
       return allow();
@@ -3515,7 +3607,7 @@ function registerBuiltinPolicies(enabledNames) {
     }
   }
 }
-var isClaudeInternalPath, isClaudeSettingsFile, SHELL_OPERATORS, SHELL_METACHAR_RE, JWT_RE, API_KEY_PATTERNS, CONNECTION_STRING_RE, PRIVATE_KEY_RE, BEARER_TOKEN_RE, SQL_TOOL_RE, DESTRUCTIVE_SQL_RE, DELETE_NO_WHERE_RE, SQL_WHERE_RE, SCHEMA_ALTER_RE, PUBLISH_CMD_RE, ENV_PRINTENV_RE, ECHO_ENV_RE, EXPORT_RE, PS_ENV_VAR_RE, PS_CHILDITEM_ENV_RE, DOTNET_GETENV_RE, CMD_ECHO_ENV_RE, ENV_FILE_PATH_RE, ENV_CMD_RE, SUDO_RE, PS_ELEVATION_RE, RUNAS_RE, CURL_PIPE_SH_RE, SEGMENT_SEPARATORS, COMMAND_PREFIX_TOKENS, SELF_BINARY_TOKEN_RE, CONFIG_SUBCOMMAND_RE, PAUSE_FLAG_RE, ENV_ASSIGNMENT_RE, RUNNER_OPERAND_RE, PS_WEB_PIPE_RE, SHORT_FLAG_BUNDLE_RE, SAFE_FORCE_PREFIXES, SECRET_FILE_RE, SECRET_FILE_ID_RSA_RE, SECRET_FILE_CREDENTIALS_RE, GIT_COMMIT_MERGE_RE, FAILPROOFAI_CLI_RE, FAILPROOFAI_UNINSTALL_RE, GIT_AMEND_RE, GIT_STASH_DROP_RE, GIT_ADD_ALL_RE, NPM_GLOBAL_RE, YARN_GLOBAL_RE, PNPM_GLOBAL_RE, BUN_GLOBAL_RE, CARGO_INSTALL_RE, PIP_SYSTEM_RE, PKG_MANAGER_DETECTORS, NOHUP_RE, SCREEN_DETACH_RE, TMUX_DETACH_RE, DISOWN_RE, BACKGROUND_AMPERSAND_RE, KUBECTL_RE, TERRAFORM_RE, AWS_CLI_RE, GCLOUD_RE, AZ_CLI_RE, HELM_RE, GH_PIPELINE_RE, gitBranchCache, GIT_BRANCH_CACHE_MAX_ENTRIES = 500, HOME_PREFIX_RE, RM_CMD_RE, FIND_CMD_RE, FIND_EXEC_RE, FIND_GLOBAL_OPT_RE, FIND_EXPR_START_RE, SCRATCH_ROOTS, CATASTROPHIC_DEPTH = 2, READ_LIKE_CMDS, TOOL_CALL_TRACKER_MAX_BYTES = 65536, SEGMENT_SPLIT_RE, BUILTIN_POLICIES;
+var isClaudeInternalPath, isClaudeSettingsFile, SHELL_OPERATORS, SHELL_METACHAR_RE, JWT_RE, API_KEY_PATTERNS, CONNECTION_STRING_RE, PRIVATE_KEY_RE, BEARER_TOKEN_RE, SQL_TOOL_RE, DESTRUCTIVE_SQL_RE, DELETE_NO_WHERE_RE, SQL_WHERE_RE, SCHEMA_ALTER_RE, PUBLISH_CMD_RE, ENV_PRINTENV_RE, ECHO_ENV_RE, EXPORT_RE, PS_ENV_VAR_RE, PS_CHILDITEM_ENV_RE, DOTNET_GETENV_RE, CMD_ECHO_ENV_RE, ENV_FILE_PATH_RE, ENV_CMD_RE, PS_ELEVATION_RE, RUNAS_RE, CURL_PIPE_SH_RE, SEGMENT_SEPARATORS, COMMAND_PREFIX_TOKENS, SELF_BINARY_TOKEN_RE, CONFIG_SUBCOMMAND_RE, PAUSE_FLAG_RE, ENV_ASSIGNMENT_RE, RUNNER_OPERAND_RE, PS_WEB_PIPE_RE, SHORT_FLAG_BUNDLE_RE, SAFE_FORCE_PREFIXES, SECRET_FILE_RE, SECRET_FILE_ID_RSA_RE, SECRET_FILE_CREDENTIALS_RE, GIT_COMMIT_MERGE_RE, FAILPROOFAI_CLI_RE, FAILPROOFAI_UNINSTALL_RE, GIT_AMEND_RE, GIT_STASH_DROP_RE, GIT_ADD_ALL_RE, NPM_GLOBAL_RE, YARN_GLOBAL_RE, PNPM_GLOBAL_RE, BUN_GLOBAL_RE, CARGO_INSTALL_RE, PIP_SYSTEM_RE, PKG_MANAGER_DETECTORS, NOHUP_RE, SCREEN_DETACH_RE, TMUX_DETACH_RE, DISOWN_RE, BACKGROUND_AMPERSAND_RE, KUBECTL_RE, TERRAFORM_RE, AWS_CLI_RE, GCLOUD_RE, AZ_CLI_RE, HELM_RE, GH_PIPELINE_RE, gitBranchCache, GIT_BRANCH_CACHE_MAX_ENTRIES = 500, EVAL_FLAG_RE, HOME_PREFIX_RE, RM_CMD_RE, FIND_CMD_RE, FIND_EXEC_RE, FIND_GLOBAL_OPT_RE, FIND_EXPR_START_RE, SCRATCH_ROOTS, CATASTROPHIC_DEPTH = 2, READ_LIKE_CMDS, TOOL_CALL_TRACKER_MAX_BYTES = 65536, SEGMENT_SPLIT_RE, BUILTIN_POLICIES;
 var init_builtin_policies = __esm(() => {
   init_hook_logger();
   isClaudeInternalPath = isAgentInternalPath;
@@ -3552,7 +3644,6 @@ var init_builtin_policies = __esm(() => {
   CMD_ECHO_ENV_RE = /echo\s+%[A-Za-z_]/i;
   ENV_FILE_PATH_RE = /(?:^|[\\/])\.env(?:\.|$)/;
   ENV_CMD_RE = /\.env(?:\b|\s|$|\.)/;
-  SUDO_RE = /(?:^|;|&&|\|\|)\s*sudo\s/;
   PS_ELEVATION_RE = /Start-Process\s+.*-Verb\s+RunAs/i;
   RUNAS_RE = /(?:^|;|&&|\|\|)\s*runas\s/i;
   CURL_PIPE_SH_RE = /(?:curl|wget)\s.*\|\s*(?:sh|bash|zsh|dash|ksh|csh|tcsh|fish|ash)\b/;
@@ -3638,6 +3729,7 @@ var init_builtin_policies = __esm(() => {
   HELM_RE = /(?:^|[;\n]|&&|\|\|?|&)\s*helm(?:\s|$)/;
   GH_PIPELINE_RE = /(?:^|[;\n]|&&|\|\|?|&)\s*gh\s+(?:workflow\s+(?:run|enable|disable)|run\s+(?:rerun|cancel)|pr\s+merge|release\s+(?:create|delete)|cache\s+delete|secret\s+(?:set|delete))\b/;
   gitBranchCache = new Map;
+  EVAL_FLAG_RE = /^-{1,2}c$/;
   HOME_PREFIX_RE = /^(?:~[A-Za-z0-9_.-]*|\$HOME|\$\{HOME\})(?=$|\/)/;
   RM_CMD_RE = /^(?:\/\S*\/)?rm$/;
   FIND_CMD_RE = /^(?:\/\S*\/)?find$/;
@@ -10739,6 +10831,7 @@ __export(exports_daemon_client2, {
   tryDaemonHook: () => tryDaemonHook2,
   isDaemonConfigured: () => isDaemonConfigured2,
   daemonSocketPresent: () => daemonSocketPresent2,
+  daemonAcceptsConnections: () => daemonAcceptsConnections2,
   attemptDaemonHook: () => attemptDaemonHook2
 });
 import { createConnection as createConnection2 } from "node:net";
@@ -10750,6 +10843,27 @@ function daemonSocketPresent2() {
     return false;
   }
 }
+async function daemonAcceptsConnections2(timeoutMs = DAEMON_CONNECT_TIMEOUT_MS2) {
+  if (process.platform === "win32")
+    return false;
+  return new Promise((resolve14) => {
+    let settled = false;
+    const done = (v) => {
+      if (settled)
+        return;
+      settled = true;
+      clearTimeout(timer);
+      socket.removeAllListeners();
+      socket.destroy();
+      resolve14(v);
+    };
+    const socket = createConnection2({ path: socketPath2() });
+    const timer = setTimeout(() => done(false), timeoutMs);
+    timer.unref?.();
+    socket.on("connect", () => done(true));
+    socket.on("error", () => done(false));
+  });
+}
 function socketPath2() {
   if (process.env.FAILPROOFAI_DAEMON_SOCKET)
     return process.env.FAILPROOFAI_DAEMON_SOCKET;
@@ -10947,6 +11061,15 @@ function resolveCliCommand() {
 function shellQuote(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
 }
+function workerScriptPath() {
+  if (process.env.FAILPROOFAI_WORKER_CMD)
+    return null;
+  const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
+  if (!packageRoot)
+    return null;
+  const workerScript = resolve14(packageRoot, "dist", "worker.mjs");
+  return existsSync17(workerScript) ? workerScript : null;
+}
 function assertUnitSafe(value, field) {
   if (UNIT_UNSAFE_RE.test(value)) {
     throw new Error(`refusing to write a service definition: ${field} contains a quote, backslash or newline ` + `(${JSON.stringify(value)}), which would inject directives into a root-owned unit file`);
@@ -11085,10 +11208,13 @@ function systemdUnitContents(binaryPath, workerCmd, cliCmd = null) {
   const user = assertUnitSafe(serviceUser(), "User");
   assertUnitSafe(binaryPath, "ExecStart");
   assertUnitSafe(homedir19(), "HOME");
+  const conditionPaths = [binaryPath, workerScriptPath()].filter((p) => typeof p === "string" && existsSync17(p));
+  const conditionLines = conditionPaths.map((p) => `ConditionPathExists=${assertUnitSafe(p, "ConditionPathExists")}
+`).join("");
   return `[Unit]
 Description=failproofai background daemon (failproofaid) for ${user}
 After=network.target
-
+${conditionLines}
 [Service]
 Type=simple
 User=${user}
@@ -11209,19 +11335,37 @@ async function installDaemonService() {
   }
   return { installed: true };
 }
-async function probeDaemonEndToEnd() {
+async function probeDaemon() {
   try {
-    const { attemptDaemonHook: attemptDaemonHook3 } = await Promise.resolve().then(() => (init_daemon_client2(), exports_daemon_client2));
-    const attempt = await attemptDaemonHook3({
-      hookEvent: "SessionStart",
-      cli: "claude",
-      stdin: JSON.stringify({ hook_event_name: "SessionStart", source: "failproofai-health-probe" })
-    }, { responseTimeoutMs: DAEMON_PROBE_TIMEOUT_MS });
-    return attempt.ok || attempt.failure === "protocol-mismatch";
+    const { attemptDaemonHook: attemptDaemonHook3, daemonAcceptsConnections: daemonAcceptsConnections3 } = await Promise.resolve().then(() => (init_daemon_client2(), exports_daemon_client2));
+    const deadline = Date.now() + DAEMON_PROBE_READY_TIMEOUT_MS;
+    let everConnected = false;
+    for (;; ) {
+      if (await daemonAcceptsConnections3()) {
+        everConnected = true;
+        const attempt = await attemptDaemonHook3({
+          hookEvent: "SessionStart",
+          cli: "claude",
+          stdin: JSON.stringify({
+            hook_event_name: "SessionStart",
+            source: "failproofai-health-probe"
+          })
+        }, { responseTimeoutMs: DAEMON_PROBE_TIMEOUT_MS });
+        if (attempt.ok || attempt.failure === "protocol-mismatch")
+          return { ok: true };
+      }
+      if (Date.now() >= deadline)
+        break;
+      await new Promise((r) => setTimeout(r, DAEMON_PROBE_RETRY_MS));
+    }
+    return { ok: false, reason: everConnected ? "worker" : "unreachable" };
   } catch {
-    return false;
+    return { ok: false, reason: "unreachable" };
   }
 }
+async function probeDaemonEndToEnd() {
+  return (await probeDaemon()).ok;
+}
 async function waitForDaemonRunning() {
   const deadline = Date.now() + SERVICE_START_TIMEOUT_MS;
   for (;; ) {
@@ -11406,6 +11550,16 @@ function daemonVersionSkew() {
     return null;
   return recorded === version2 ? null : { installed: recorded, expected: version2 };
 }
+function inactiveLinuxStatus() {
+  try {
+    return interpretConditionResult(execFileSync3("systemctl", ["show", systemdUnitName(), "--property=ConditionResult", "--value"], { stdio: ["ignore", "pipe", "ignore"], timeout: SERVICE_CMD_TIMEOUT_MS }).toString());
+  } catch {
+    return "stopped";
+  }
+}
+function interpretConditionResult(raw) {
+  return raw.trim() === "no" ? "condition-failed" : "stopped";
+}
 function daemonServiceStatus() {
   if (!isDaemonSupportedPlatform())
     return "unsupported-platform";
@@ -11417,9 +11571,9 @@ function daemonServiceStatus() {
         stdio: ["ignore", "pipe", "ignore"],
         timeout: SERVICE_CMD_TIMEOUT_MS
       }).toString().trim();
-      return out === "active" ? "running" : "stopped";
+      return out === "active" ? "running" : inactiveLinuxStatus();
     } catch {
-      return "stopped";
+      return inactiveLinuxStatus();
     }
   }
   const plistPath = launchdPlistPath();
@@ -11440,7 +11594,7 @@ function daemonServiceStatus() {
     return "stopped";
   }
 }
-var SERVICE_CMD_TIMEOUT_MS = 1e4, SERVICE_START_TIMEOUT_MS = 5000, SERVICE_START_POLL_MS = 100, SERVICE_SETTLE_MS = 750, SUDO_PROMPT_TIMEOUT_MS = 120000, UNIT_UNSAFE_RE, DAEMON_PROBE_TIMEOUT_MS = 5000;
+var SERVICE_CMD_TIMEOUT_MS = 1e4, SERVICE_START_TIMEOUT_MS = 5000, SERVICE_START_POLL_MS = 100, SERVICE_SETTLE_MS = 750, SUDO_PROMPT_TIMEOUT_MS = 120000, UNIT_UNSAFE_RE, DAEMON_PROBE_TIMEOUT_MS = 5000, DAEMON_PROBE_READY_TIMEOUT_MS = 1e4, DAEMON_PROBE_RETRY_MS = 150;
 var init_daemon_service = __esm(() => {
   init_hook_logger();
   init_daemon_download();
@@ -11800,11 +11954,12 @@ var init_handler = __esm(() => {
 var exports_fp_reset = {};
 __export(exports_fp_reset, {
   resetHome: () => resetHome,
+  migrateHookActivity: () => migrateHookActivity,
   migrateConventionPolicies: () => migrateConventionPolicies,
   layoutWarningForHook: () => layoutWarningForHook2,
   checkLayoutForCli: () => checkLayoutForCli
 });
-import { existsSync as existsSync18, mkdirSync as mkdirSync10, readdirSync as readdirSync13, renameSync as renameSync5, rmSync as rmSync6 } from "node:fs";
+import { copyFileSync, existsSync as existsSync18, mkdirSync as mkdirSync10, readdirSync as readdirSync13, renameSync as renameSync5, rmSync as rmSync6 } from "node:fs";
 import { resolve as resolve15 } from "node:path";
 function migrateConventionPolicies() {
   const from = policiesDir();
@@ -11829,8 +11984,45 @@ function migrateConventionPolicies() {
   } catch {}
   return moved.sort((a, b) => a.localeCompare(b));
 }
+function migrateHookActivity() {
+  const from = legacy.hookActivityDir();
+  if (!existsSync18(from))
+    return [];
+  const moved = [];
+  try {
+    const entries = readdirSync13(from, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".jsonl"));
+    if (entries.length === 0)
+      return [];
+    const to = hookActivityDir();
+    mkdirSync10(to, { recursive: true });
+    const stamp2 = Date.now();
+    let seq = 0;
+    for (const entry of entries) {
+      const source = resolve15(from, entry.name);
+      let name = entry.name === "current.jsonl" ? `page-${stamp2}-${seq++}.jsonl` : entry.name;
+      let target = resolve15(to, name);
+      while (existsSync18(target)) {
+        name = `page-${stamp2}-${seq++}.jsonl`;
+        target = resolve15(to, name);
+      }
+      try {
+        renameSync5(source, target);
+        moved.push(name);
+      } catch (err) {
+        if (err?.code === "EXDEV") {
+          try {
+            copyFileSync(source, target);
+            moved.push(name);
+          } catch {}
+        }
+      }
+    }
+  } catch {}
+  return moved.sort((a, b) => a.localeCompare(b));
+}
 function resetHome(from) {
   const migrated = migrateConventionPolicies();
+  const activity = migrateHookActivity();
   const removed = [];
   for (const path3 of resettablePaths()) {
     if (!existsSync18(path3))
@@ -11841,7 +12033,7 @@ function resetHome(from) {
     } catch {}
   }
   writeVersionFile();
-  return { removed, migrated, from };
+  return { removed, migrated, activity, from };
 }
 async function checkLayoutForCli() {
   const state = detectLayout();
@@ -11860,21 +12052,25 @@ async function checkLayoutForCli() {
     };
   }
   if (state.kind === "stale") {
-    const { removed, migrated } = resetHome(state.found);
+    const { removed, migrated, activity } = resetHome(state.found);
     return {
       state,
       fatal: false,
       didReset: true,
       lines: [
         `failproofai reorganised ${failproofaiHome()} in this version.`,
-        `Removed ${removed.length} item(s) from the old layout — policy config, activity`,
-        `history and audit cache. Your downloaded daemon binary was kept.`,
+        `Removed ${removed.length} item(s) from the old layout — policy config and`,
+        `audit cache. Your daemon binary and decision history were kept.`,
         ...migrated.length > 0 ? [
           ``,
           `Kept your own policy file(s) and moved them to where this version`,
           `loads them (${customPoliciesDir()}):`,
           ...migrated.map((name) => `  ${name}`)
         ] : [],
+        ...activity.length > 0 ? [
+          ``,
+          `Carried ${activity.length} page(s) of decision history into ${hookActivityDir()}.`
+        ] : [],
         ``,
         `Run \`failproofai config\` to set up again.`
       ]
@@ -11906,6 +12102,20 @@ async function healDaemonFlag() {
         ``
       ];
     }
+    if (status === "condition-failed") {
+      updateConfig({ daemon: { configured: false } });
+      return [
+        `failproofaid is installed but cannot start — a file its service requires is`,
+        `gone (most often because failproofai was removed with \`npm rm -g\`, which`,
+        `deletes the worker but leaves the service behind). This machine was`,
+        `configured to require the daemon, which denies every tool call, so that flag`,
+        `is cleared; policies now evaluate in-process.`,
+        ``,
+        `Run \`failproofai uninstall\` to remove the leftover service, or`,
+        `\`failproofai config\` to rebuild it. \`${daemonStatusCommand()}\` names the missing path.`,
+        ``
+      ];
+    }
     if (status === "running" && !await probeDaemonEndToEnd()) {
       updateConfig({ daemon: { configured: false } });
       return [
@@ -12215,7 +12425,8 @@ var init_first_run_gate = __esm(() => {
   FIRST_RUN_EXEMPT_SUBCOMMANDS = [
     "config",
     "policies",
-    "policy"
+    "policy",
+    "uninstall"
   ];
 });
 
@@ -12787,7 +12998,7 @@ async function validateIngestKey(cred, fetchImpl = fetch, timeoutMs = 1e4) {
     clearTimeout(timer);
   }
 }
-var DEFAULT_INGEST_URL = "https://server.befailproof.ai/v1/events";
+var DEFAULT_INGEST_URL = "https://app.befailproof.ai/v1/events";
 var init_collector_config = __esm(() => {
   init_fp_home();
   init_fp_config();
@@ -21925,6 +22136,129 @@ This file can be committed to git — no machine-specific paths.`);
     } catch {}
   }
 }
+async function removeHooks(policyNames, scope = "user", cwd, opts) {
+  const configScope = scope === "all" ? "user" : scope;
+  const selectedClis = opts?.cli && opts.cli.length > 0 ? [...new Set(opts.cli)] : ["claude"];
+  if (opts?.removeCustomHooks) {
+    const config = readScopedHooksConfig(configScope, cwd);
+    delete config.customPoliciesPath;
+    delete config.customPoliciesPaths;
+    writeScopedHooksConfig(config, configScope, cwd);
+    console.log("Custom hooks path cleared.");
+  }
+  if (policyNames && policyNames.length > 0 && !(policyNames.length === 1 && policyNames[0] === "all")) {
+    validatePolicyNames(policyNames);
+    const config = readScopedHooksConfig(configScope, cwd);
+    const removeSet = new Set(policyNames);
+    const remaining = config.enabledPolicies.filter((p) => !removeSet.has(p));
+    const notEnabled = policyNames.filter((p) => !config.enabledPolicies.includes(p));
+    if (notEnabled.length > 0) {
+      console.log(`Warning: policy(ies) not currently enabled: ${notEnabled.join(", ")}`);
+    }
+    const { policyParams: existingParams, ...baseConfig } = config;
+    const filteredParams = existingParams ? Object.fromEntries(Object.entries(existingParams).filter(([k]) => !removeSet.has(k))) : null;
+    const updatedConfig = {
+      ...baseConfig,
+      enabledPolicies: remaining,
+      ...filteredParams && Object.keys(filteredParams).length > 0 ? { policyParams: filteredParams } : {}
+    };
+    writeScopedHooksConfig(updatedConfig, configScope, cwd);
+    try {
+      const distinctId = getInstanceId2();
+      const actuallyRemoved = policyNames.filter((p) => config.enabledPolicies.includes(p));
+      await trackHookEvent2(distinctId, "hooks_removed", {
+        scope,
+        cli: selectedClis,
+        removal_mode: opts?.betaOnly ? "beta_policies" : "policies",
+        beta_only: opts?.betaOnly ?? false,
+        policies_removed: actuallyRemoved,
+        removed_count: actuallyRemoved.length,
+        ...opts?.source ? { source: opts.source } : {},
+        platform: platform3(),
+        arch: arch3(),
+        os_release: release2(),
+        hostname_hash: hashToId2(hostname3())
+      });
+    } catch {}
+    console.log(`Disabled ${policyNames.length - notEnabled.length} policy(ies).`);
+    console.log(`Remaining: ${remaining.length > 0 ? remaining.join(", ") : "(none)"}`);
+    return;
+  }
+  const configBeforeRemoval = readScopedHooksConfig(configScope, cwd);
+  let totalRemoved = 0;
+  let nothingToReport = false;
+  for (const cliId of selectedClis) {
+    const integration = getIntegration(cliId);
+    const scopesToRemove = scope === "all" ? [...integration.scopes] : integration.scopes.includes(scope) ? [scope] : [];
+    for (const s of scopesToRemove) {
+      const settingsPaths = settingsPathsFor(integration, s, cwd);
+      const existing = settingsPaths.filter((p) => existsSync21(p));
+      if (existing.length === 0) {
+        if (scope !== "all" && selectedClis.length === 1) {
+          console.log("No settings file found. Nothing to remove.");
+          nothingToReport = true;
+        }
+        continue;
+      }
+      let removedHere = 0;
+      for (const settingsPath of existing) {
+        const removed = integration.removeHooksFromFile(settingsPath);
+        removedHere += removed;
+        if (removed > 0 && scope !== "all") {
+          console.log(`Removed ${removed} failproofai hook(s) from ${integration.displayName} settings.`);
+          console.log(`Settings: ${settingsPath}`);
+        }
+      }
+      if (removedHere === 0 && scope !== "all" && selectedClis.length === 1) {
+        console.log("No hooks found in settings. Nothing to remove.");
+        nothingToReport = true;
+        continue;
+      }
+      totalRemoved += removedHere;
+    }
+  }
+  if (nothingToReport && totalRemoved === 0)
+    return;
+  if (scope === "all") {
+    console.log(`Removed ${totalRemoved} failproofai hook(s) from all scopes.`);
+    for (const cliId of selectedClis) {
+      const integration = getIntegration(cliId);
+      for (const s of integration.scopes) {
+        for (const p of settingsPathsFor(integration, s, cwd)) {
+          console.log(`  ${integration.displayName} / ${s}: ${p}`);
+        }
+      }
+    }
+  }
+  try {
+    const distinctId = getInstanceId2();
+    await trackHookEvent2(distinctId, "hooks_removed", {
+      scope,
+      cli: selectedClis,
+      removal_mode: "hooks",
+      policies_removed: configBeforeRemoval.enabledPolicies,
+      removed_count: totalRemoved,
+      ...opts?.source ? { source: opts.source } : {},
+      platform: platform3(),
+      arch: arch3(),
+      os_release: release2(),
+      hostname_hash: hashToId2(hostname3())
+    });
+  } catch {}
+  if (scope === "all") {
+    for (const s of HOOK_SCOPES) {
+      const existing = readScopedHooksConfig(s, cwd);
+      if (existing.enabledPolicies.length > 0 || existing.customPoliciesPaths?.length || existing.customPoliciesPath || existing.policyParams) {
+        const { customPoliciesPath: _drop, customPoliciesPaths: _dropMany, policyParams: _dropParams, ...rest } = existing;
+        writeScopedHooksConfig({ ...rest, enabledPolicies: [] }, s, cwd);
+      }
+    }
+  } else if (!HOOK_SCOPES.some((s) => hooksInstalledInSettings(s, cwd))) {
+    const existing = readScopedHooksConfig(configScope, cwd);
+    const { customPoliciesPath: _drop, customPoliciesPaths: _dropMany, policyParams: _dropParams, ...rest } = existing;
+    writeScopedHooksConfig({ ...rest, enabledPolicies: [] }, configScope, cwd);
+  }
+}
 var VALID_POLICY_NAMES;
 var init_manager = __esm(() => {
   init_types();
@@ -25743,31 +26077,26 @@ refreshed. Re-run \`failproofai config\` once you can use sudo.
         }
       }
       if (url === null) {
-        const entered = await promptText({
-          message: "Failproof Cloud URL",
-          defaultValue: cloudBaseFor(DEFAULT_INGEST_URL),
-          hint: "Enter for the hosted endpoint",
-          validate: (v) => {
-            const check = validateCloudUrl(cloudBaseFor(v));
-            return check.ok ? null : check.reason;
-          },
-          stdin,
-          stdout
-        });
-        if (entered === null)
-          return cancel();
-        const validated = validateCloudUrl(cloudBaseFor(entered));
-        if (!validated.ok) {
+        const override = process.env.FAILPROOFAI_CLOUD_URL?.trim();
+        if (override) {
+          const validated = validateCloudUrl(cloudBaseFor(override));
+          if (!validated.ok) {
+            stdout.write(`
+FAILPROOFAI_CLOUD_URL is set to "${override}", which cannot be used: ${validated.reason}
+`);
+            return cancel();
+          }
+          url = validated.url;
           stdout.write(`
-${validated.reason}
+Using ${url} (from FAILPROOFAI_CLOUD_URL).
 `);
-          return cancel();
+        } else {
+          url = cloudBaseFor(DEFAULT_INGEST_URL);
         }
-        url = validated.url;
       }
       if (token === null) {
         token = await promptText({
-          message: "API key",
+          message: `API key for ${new URL(url).host}`,
           hint: "needs events:add · policies:pull enables managed policy too",
           mask: true,
           validate: (v) => v.length >= 8 ? null : "that looks too short to be a key",
@@ -25862,18 +26191,22 @@ Setup stopped before changing anything. Once that is fixed, re-run:
       outro("Nothing was changed.", { ok: false }, stdout);
       return { applied: false, abort: "daemon_failed" };
     }
-    if (!await probeDaemonEndToEnd()) {
-      hookLogWarn("failproofaid was installed and running but did not answer a policy evaluation");
-      stdout.write(`
-failproofaid started but cannot evaluate policies — its worker process
-` + `could not be run. Setup stopped before changing anything, because a machine
-configured to require a daemon that cannot answer denies every tool call.
+    const probe = await probeDaemon();
+    if (!probe.ok) {
+      hookLogWarn(`failproofaid was installed and running but did not answer a policy evaluation (${probe.reason})`);
+      stdout.write((probe.reason === "worker" ? `
+failproofaid started but cannot evaluate policies — it is listening, and
+` + `its worker process could not be run.
+` : `
+failproofaid started but could not be reached on its socket.
+`) + `Setup stopped before changing anything, because a machine configured to
+require a daemon that cannot answer denies every tool call.
 
   Check it with:  ${daemonStatusCommand() ?? "systemctl status failproofaid"}
   Then re-run:    failproofai config
 
 `);
-      emit("configure_aborted", { reason: "daemon_not_answering" });
+      emit("configure_aborted", { reason: `daemon_not_answering_${probe.reason}` });
       outro("Nothing was changed.", { ok: false }, stdout);
       return { applied: false, abort: "daemon_failed" };
     }
@@ -25998,21 +26331,701 @@ var init_configure_wizard = __esm(() => {
   init_onboarding_lock();
 });
 
-// src/hooks/manager.ts
-var exports_manager = {};
-__export(exports_manager, {
-  removeHooks: () => removeHooks,
-  listHooks: () => listHooks,
-  installHooks: () => installHooks2,
-  hooksInstalledInSettings: () => hooksInstalledInSettings2,
-  getSettingsPath: () => getSettingsPath2
+// src/hooks/uninstall-cli.ts
+var exports_uninstall_cli = {};
+__export(exports_uninstall_cli, {
+  serviceStateLabel: () => serviceStateLabel,
+  runUninstallCommand: () => runUninstallCommand
 });
-import { execSync as execSync7 } from "node:child_process";
-import { existsSync as existsSync31 } from "node:fs";
-import { resolve as resolve24, basename as basename6 } from "node:path";
-import { platform as platform5, arch as arch4, release as release3, hostname as hostname5 } from "node:os";
-function getSettingsPath2(scope, cwd) {
-  return claudeCode.getSettingsPath(scope, cwd);
+import { existsSync as existsSync31, rmSync as rmSync10 } from "node:fs";
+function survey(cwd) {
+  const clis = [];
+  for (const id of listInstallableIds()) {
+    for (const scope of ["user", "project", "local"]) {
+      try {
+        if (getIntegration(id).hooksInstalledInSettings(scope, cwd)) {
+          clis.push(id);
+          break;
+        }
+      } catch {}
+    }
+  }
+  let daemonConfigured = false;
+  try {
+    daemonConfigured = readConfig().daemon.configured;
+  } catch {}
+  const servicePath = isDaemonSupportedPlatform() ? daemonServiceFilePath() : null;
+  return {
+    clis,
+    servicePath,
+    serviceInstalled: !!servicePath && existsSync31(servicePath),
+    daemonConfigured,
+    homeExists: existsSync31(failproofaiHome())
+  };
+}
+async function runUninstallCommand(opts = {}) {
+  const found = survey(opts.cwd);
+  const lines = [];
+  const nothingToDo = found.clis.length === 0 && !found.serviceInstalled && !found.daemonConfigured && !(opts.purge && found.homeExists);
+  if (nothingToDo) {
+    return {
+      exitCode: 0,
+      planLines: 0,
+      purged: false,
+      lines: [
+        "Nothing to uninstall — no hook entries, no daemon service, and nothing configured.",
+        ...found.homeExists && !opts.purge ? [
+          ``,
+          `${failproofaiHome()} still holds settings and audit history.`,
+          `Remove it with \`failproofai uninstall --purge\`.`
+        ] : []
+      ]
+    };
+  }
+  const plan = [];
+  if (found.clis.length > 0) {
+    plan.push(`  • remove failproofai hook entries from ${found.clis.length} agent CLI${found.clis.length === 1 ? "" : "s"}: ` + found.clis.map((id) => getIntegration(id).displayName ?? id).join(", "));
+  }
+  if (found.daemonConfigured) {
+    plan.push(`  • stop requiring the daemon (policies go back to evaluating in-process)`);
+  }
+  if (found.serviceInstalled) {
+    plan.push(`  • stop, disable and delete the service at ${found.servicePath} — needs sudo`);
+  }
+  let purged = false;
+  if (opts.purge && found.homeExists) {
+    plan.push(`  • delete ${failproofaiHome()} — settings, credentials, audit history and the daemon binary`);
+  }
+  lines.push("failproofai uninstall will:", ...plan);
+  if (!opts.purge && found.homeExists) {
+    lines.push(``, `${failproofaiHome()} is KEPT (settings and audit history survive a reinstall).`, `Add --purge to delete it too.`);
+  }
+  const planLines = lines.length;
+  if (opts.dryRun) {
+    lines.push(``, `--dry-run: nothing was changed.`);
+    return { exitCode: 0, lines, planLines, purged: false };
+  }
+  if (!opts.yes) {
+    if (!opts.confirm) {
+      lines.push(``, `Refusing to uninstall without confirmation. Re-run with --yes.`);
+      return { exitCode: 1, lines, planLines, purged: false };
+    }
+    if (!await opts.confirm(lines)) {
+      return { exitCode: 1, planLines, purged: false, lines: [...lines, ``, `Cancelled — nothing was changed.`] };
+    }
+  }
+  lines.push(``);
+  const failures = [];
+  if (found.daemonConfigured) {
+    try {
+      setDaemonConfigured(false);
+      lines.push(`✓ policies now evaluate in-process (this machine no longer requires the daemon)`);
+    } catch (err) {
+      return {
+        exitCode: 2,
+        planLines,
+        purged: false,
+        lines: [
+          ...lines,
+          `✗ could not update ${failproofaiHome()}/config.toml: ${err instanceof Error ? err.message : String(err)}`,
+          ``,
+          `Stopped before touching the service. Removing it while this machine still`,
+          `requires it would deny every tool call. Fix the file's permissions and re-run.`
+        ]
+      };
+    }
+  }
+  if (found.clis.length > 0) {
+    try {
+      await removeHooks(undefined, "all", opts.cwd, {
+        cli: found.clis,
+        removeCustomHooks: true,
+        source: "uninstall_command"
+      });
+      lines.push(`✓ removed hook entries from ${found.clis.length} agent CLI${found.clis.length === 1 ? "" : "s"}`);
+    } catch (err) {
+      failures.push(`hook entries: ${err instanceof Error ? err.message : String(err)} ` + `(finish with \`failproofai policies --uninstall --scope all\`)`);
+    }
+  }
+  if (found.serviceInstalled) {
+    try {
+      await uninstallDaemonService();
+      if (found.servicePath && existsSync31(found.servicePath)) {
+        failures.push(`the service at ${found.servicePath} is still there (most often: no sudo). ` + `Remove it with the commands below.`);
+      } else {
+        lines.push(`✓ stopped and removed the daemon service`);
+      }
+    } catch (err) {
+      failures.push(`daemon service: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  }
+  if (opts.purge && found.homeExists) {
+    try {
+      rmSync10(failproofaiHome(), { recursive: true, force: true });
+      purged = true;
+      lines.push(`✓ deleted ${failproofaiHome()}`);
+    } catch (err) {
+      failures.push(`${failproofaiHome()}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  }
+  if (failures.length > 0) {
+    lines.push(``, `Not everything could be removed:`);
+    for (const f of failures)
+      lines.push(`  ✗ ${f}`);
+    if (found.servicePath && existsSync31(found.servicePath)) {
+      lines.push(``, `To remove the service by hand:`, ...manualServiceRemoval(found.servicePath), ``, `(\`${daemonStatusCommand()}\` shows its current state.)`);
+    }
+    return { exitCode: 1, lines, planLines, purged };
+  }
+  lines.push(``, `Done. failproofai no longer enforces anything on this machine.`, ``, `The npm package itself is still installed — npm runs no uninstall script, which`, `is why this command exists. Remove it with:`, `  npm rm -g failproofai`);
+  if (!opts.purge && found.homeExists) {
+    lines.push(``, `${failproofaiHome()} was kept. Delete it with \`failproofai uninstall --purge\`.`);
+  }
+  return { exitCode: 0, lines, planLines, purged };
+}
+function manualServiceRemoval(servicePath) {
+  if (process.platform === "darwin") {
+    return [`  sudo launchctl unload -w ${servicePath}`, `  sudo rm -f ${servicePath}`];
+  }
+  const unit = servicePath.split("/").pop() ?? servicePath;
+  return [
+    `  sudo systemctl disable --now ${unit}`,
+    `  sudo rm -f ${servicePath}`,
+    `  sudo systemctl daemon-reload`
+  ];
+}
+function serviceStateLabel() {
+  const status = daemonServiceStatus();
+  return status === "condition-failed" ? "installed but skipped by systemd (a file it needs is missing)" : status;
+}
+var init_uninstall_cli = __esm(() => {
+  init_fp_home();
+  init_fp_config();
+  init_daemon_service();
+  init_integrations();
+  init_manager();
+});
+
+// src/hooks/tui.ts
+var exports_tui = {};
+__export(exports_tui, {
+  truncate: () => truncate2,
+  summarize: () => summarize2,
+  selectOne: () => selectOne2,
+  renderLaunchBanner: () => renderLaunchBanner2,
+  renderBrandLogo: () => renderBrandLogo2,
+  promptText: () => promptText2,
+  paint: () => paint2,
+  outro: () => outro2,
+  multiSelect: () => multiSelect2,
+  intro: () => intro2,
+  ellipsize: () => ellipsize2,
+  colorsEnabled: () => colorsEnabled2,
+  brandAnsi: () => brandAnsi2,
+  STEP_DONE: () => STEP_DONE2,
+  STEP_ACTIVE: () => STEP_ACTIVE2,
+  CHECK_ON: () => CHECK_ON2,
+  CHECK_OFF: () => CHECK_OFF2,
+  CARET: () => CARET2,
+  BAR: () => BAR2,
+  ANSI_RESET: () => ANSI_RESET2,
+  ANSI_DIM: () => ANSI_DIM2,
+  ANSI_BOLD: () => ANSI_BOLD2
+});
+import * as readline3 from "node:readline";
+function colorsEnabled2(out) {
+  return !!out.isTTY && !process.env.NO_COLOR;
+}
+function brandAnsi2(role) {
+  const h = HUES2[role];
+  const code = truecolorEnabled2() ? `38;2;${h.rgb.join(";")}` : h.basic;
+  return `${ESC2}[${code}m`;
+}
+function truecolorEnabled2() {
+  return /truecolor|24bit/i.test(process.env.COLORTERM || "");
+}
+function paint2(on) {
+  const tc = on && truecolorEnabled2();
+  const mk = (h, bold = false) => (s) => {
+    if (!on)
+      return s;
+    const code = tc ? `38;2;${h.rgb[0]};${h.rgb[1]};${h.rgb[2]}` : h.basic;
+    return `${ESC2}[${bold ? "1;" : ""}${code}m${s}${ESC2}[0m`;
+  };
+  return {
+    bold: (s) => on ? `${ESC2}[1m${s}${ESC2}[0m` : s,
+    dim: mk(HUES2.dim),
+    guide: mk(HUES2.guide),
+    pink: mk(HUES2.pink),
+    pinkBold: mk(HUES2.pink, true),
+    softPink: mk(HUES2.logoPink),
+    warn: mk(HUES2.warn)
+  };
+}
+function renderLogo2(colorize) {
+  const pad = ".".repeat(LOGO_GRID2[0]?.length ?? 0);
+  const rgb = (ch) => ch === "t" ? LOGO_TEAL2 : ch === "p" ? LOGO_PINK2 : null;
+  const lines = [];
+  for (let r = 0;r < LOGO_GRID2.length; r += 2) {
+    const top = LOGO_GRID2[r];
+    const bot = LOGO_GRID2[r + 1] ?? pad;
+    let line = "";
+    for (let x = 0;x < top.length; x++) {
+      const t = rgb(top[x]);
+      const b = rgb(bot[x]);
+      if (!t && !b) {
+        line += " ";
+      } else if (!colorize) {
+        line += t && b ? "█" : t ? "▀" : "▄";
+      } else if (t && b) {
+        line += t === b ? `${ESC2}[38;2;${t.join(";")}m█${ESC2}[0m` : `${ESC2}[38;2;${t.join(";")};48;2;${b.join(";")}m▀${ESC2}[0m`;
+      } else if (t) {
+        line += `${ESC2}[38;2;${t.join(";")}m▀${ESC2}[0m`;
+      } else {
+        line += `${ESC2}[38;2;${b.join(";")}m▄${ESC2}[0m`;
+      }
+    }
+    lines.push(line);
+  }
+  return lines;
+}
+function truncate2(line, width) {
+  let visual = 0;
+  let out = "";
+  let i = 0;
+  while (i < line.length) {
+    if (line[i] === ESC2 && line[i + 1] === "[") {
+      let j = i + 2;
+      while (j < line.length && !/[A-Za-z]/.test(line[j]))
+        j++;
+      j++;
+      out += line.slice(i, j);
+      i = j;
+    } else {
+      if (visual >= width)
+        break;
+      out += line[i];
+      visual++;
+      i++;
+    }
+  }
+  return out;
+}
+function ellipsize2(text, width) {
+  if (width <= 0)
+    return "";
+  if (text.length <= width)
+    return text;
+  return text.slice(0, width - 1).trimEnd() + "…";
+}
+function summarize2(labels, noun = "selected") {
+  if (labels.length === 0)
+    return "none";
+  if (labels.length <= 3)
+    return labels.join(", ");
+  const head = labels.slice(0, 3).join(", ");
+  return `${labels.length} ${noun} · ${head} +${labels.length - 3}`;
+}
+function writeLines2(out, lines) {
+  const cols = out.columns || 80;
+  out.write(lines.map((l) => l === "" ? l : truncate2(l, cols)).join(`
+`) + `
+`);
+}
+function renderBrandLogo2(stdout = process.stdout) {
+  const c2 = paint2(colorsEnabled2(stdout));
+  const cols = stdout.columns || 80;
+  if (cols < LOGO_MIN_COLS2) {
+    return [`${c2.guide(FLOWER2)} fa${c2.pink("il")}proof ai  ${c2.dim("· " + TAGLINE2)}`];
+  }
+  const tc = colorsEnabled2(stdout) && truecolorEnabled2();
+  const lines = renderLogo2(tc).map((l) => `  ${l}`);
+  lines.push("");
+  lines.push(`  fa${c2.pink("il")}proof ai`);
+  lines.push(`  ${c2.dim(TAGLINE2)}`);
+  return lines;
+}
+function intro2(message, stdout = process.stdout) {
+  if (!stdout.isTTY)
+    return;
+  const c2 = paint2(colorsEnabled2(stdout));
+  const lines = ["", ...renderBrandLogo2(stdout)];
+  lines.push(c2.dim(BAR2));
+  lines.push(`${c2.guide(STEP_ACTIVE2)}  ${c2.bold(message)}`);
+  writeLines2(stdout, lines);
+}
+function renderLaunchBanner2(version3, stdout = process.stdout) {
+  const c2 = paint2(colorsEnabled2(stdout));
+  const row = (label, value) => `  ${c2.guide(label.padEnd(9))}${value}`;
+  const header = stdout.isTTY ? renderBrandLogo2(stdout) : ["  failproof ai", `  ${TAGLINE2}`];
+  return [
+    "",
+    ...header,
+    "",
+    row("version", c2.pink(version3)),
+    row("star", c2.dim("https://github.com/failproofai/failproofai")),
+    row("docs", c2.dim("https://docs.befailproof.ai/introduction")),
+    row("discord", c2.dim("https://discord.befailproof.ai/")),
+    ""
+  ];
+}
+function outro2(message, opts = {}, stdout = process.stdout) {
+  const c2 = paint2(colorsEnabled2(stdout));
+  const ok = opts.ok !== false;
+  if (!stdout.isTTY) {
+    stdout.write(message + `
+`);
+    return;
+  }
+  const end = ok ? c2.pink(BAR_END2) : c2.dim(BAR_END2);
+  const text = ok ? c2.pink(message) : c2.dim(message);
+  writeLines2(stdout, [c2.dim(BAR2), `${end}  ${text}`]);
+}
+function repaint2(out, region, lines) {
+  if (region.lastCount > 0)
+    out.write(`${ESC2}[${region.lastCount}A${ESC2}[J`);
+  writeLines2(out, lines);
+  region.lastCount = lines.length;
+}
+function hideCursor2(out) {
+  out.write(`${ESC2}[?25l`);
+}
+function showCursor2(out) {
+  out.write(`${ESC2}[?25h`);
+}
+function nameWidth2(labels) {
+  return Math.min(24, Math.max(6, ...labels.map((l) => l.length)));
+}
+function displayRows2(choices) {
+  const rows = [];
+  let lastSection;
+  choices.forEach((choice, index) => {
+    if (choice.section && choice.section !== lastSection) {
+      lastSection = choice.section;
+      rows.push({ kind: "header", text: choice.section });
+    }
+    rows.push({ kind: "item", index });
+  });
+  return rows;
+}
+function viewport2(rows, cursorRow, window) {
+  if (rows.length <= window)
+    return { start: 0, end: rows.length };
+  let start = cursorRow - Math.floor(window / 2);
+  start = Math.max(0, Math.min(start, rows.length - window));
+  return { start, end: start + window };
+}
+function runPrompt2(p) {
+  const { stdin, stdout, c: c2, choices } = p;
+  const region = { lastCount: 0 };
+  const nameCol = nameWidth2(choices.map((ch) => ch.label));
+  let cursor2 = 0;
+  const build = () => {
+    const cols = stdout.columns || 80;
+    const lines = [c2.dim(BAR2), `${c2.guide(STEP_ACTIVE2)}  ${c2.bold(p.message)}`];
+    for (const b of p.body ?? [])
+      lines.push(`${c2.dim(BAR2)}  ${c2.dim(b)}`);
+    const rows = displayRows2(choices);
+    let cursorRow = 0;
+    rows.forEach((r, ri) => {
+      if (r.kind === "item" && r.index === cursor2)
+        cursorRow = ri;
+    });
+    const { start, end } = viewport2(rows, cursorRow, WINDOW3);
+    const above = rows.slice(0, start).filter((r) => r.kind === "item").length;
+    const below = rows.slice(end).filter((r) => r.kind === "item").length;
+    if (above > 0)
+      lines.push(`${c2.dim(BAR2)}    ${c2.dim(`↑ ${above} more`)}`);
+    const budget = Math.max(6, cols - nameCol - 10);
+    for (let ri = start;ri < end; ri++) {
+      const row = rows[ri];
+      if (row.kind === "header") {
+        lines.push(`${c2.dim(BAR2)}  ${c2.dim(row.text)}`);
+      } else {
+        lines.push(`${c2.dim(BAR2)}  ${p.renderRow(row.index, row.index === cursor2, budget)}`);
+      }
+    }
+    if (below > 0)
+      lines.push(`${c2.dim(BAR2)}    ${c2.dim(`↓ ${below} more`)}`);
+    const warn = p.warnLine?.();
+    if (warn)
+      lines.push(`${c2.dim(BAR2)}  ${warn}`);
+    lines.push(`${c2.dim(BAR2)}  ${c2.dim(p.footer)}`);
+    return lines;
+  };
+  const collapse = (result) => {
+    repaint2(stdout, region, [
+      c2.dim(BAR2),
+      `${c2.dim(STEP_DONE2)}  ${p.message}`,
+      `${c2.dim(BAR2)}  ${c2.dim(p.summaryFor(result))}`
+    ]);
+  };
+  return new Promise((resolve24) => {
+    hideCursor2(stdout);
+    repaint2(stdout, region, build());
+    readline3.emitKeypressEvents(stdin);
+    const wasRaw = stdin.isRaw;
+    stdin.setRawMode?.(true);
+    stdin.resume();
+    const cleanup = () => {
+      stdin.removeListener("keypress", onKey);
+      stdin.setRawMode?.(wasRaw ?? false);
+      stdin.pause();
+      showCursor2(stdout);
+    };
+    const finish = (result) => {
+      cleanup();
+      collapse(result);
+      resolve24(result);
+    };
+    function onKey(_s, key) {
+      if (!key)
+        return;
+      if (key.ctrl && (key.name === "c" || key.name === "d") || key.name === "escape") {
+        finish(null);
+      } else if (key.name === "up") {
+        cursor2 = cursor2 > 0 ? cursor2 - 1 : choices.length - 1;
+        repaint2(stdout, region, build());
+      } else if (key.name === "down") {
+        cursor2 = cursor2 < choices.length - 1 ? cursor2 + 1 : 0;
+        repaint2(stdout, region, build());
+      } else {
+        const outcome = p.onKey(key, cursor2);
+        if (outcome === "redraw")
+          repaint2(stdout, region, build());
+        else if (outcome)
+          finish(outcome.done);
+      }
+    }
+    stdin.on("keypress", onKey);
+  });
+}
+function selectOne2(opts) {
+  const stdin = opts.stdin ?? process.stdin;
+  const stdout = opts.stdout ?? process.stdout;
+  const choices = opts.choices;
+  if (!choices.length)
+    return Promise.resolve(null);
+  if (!stdin.isTTY || !stdout.isTTY) {
+    return Promise.resolve(choices[0].value);
+  }
+  const c2 = paint2(colorsEnabled2(stdout));
+  const nameCol = nameWidth2(choices.map((ch) => ch.label));
+  return runPrompt2({
+    stdin,
+    stdout,
+    message: opts.message,
+    c: c2,
+    body: opts.body,
+    choices,
+    renderRow: (index, active, budget) => {
+      const choice = choices[index];
+      const dot = active ? c2.pink(RADIO_ON2) : c2.dim(RADIO_OFF2);
+      const rawLabel = choice.label.padEnd(nameCol);
+      const label = active ? c2.pinkBold(rawLabel) : rawLabel;
+      const hint = choice.hint ? `  ${c2.dim(ellipsize2(choice.hint, budget))}` : "";
+      return `${dot} ${label}${hint}`;
+    },
+    footer: "↑/↓ navigate · enter to select · esc to cancel",
+    onKey: (key, cursor2) => key.name === "return" ? { done: choices[cursor2].value } : undefined,
+    summaryFor: (value) => value === null ? "cancelled" : choices.find((ch) => ch.value === value)?.label ?? String(value)
+  });
+}
+function multiSelect2(opts) {
+  const stdin = opts.stdin ?? process.stdin;
+  const stdout = opts.stdout ?? process.stdout;
+  const choices = opts.choices;
+  const minSelected = opts.minSelected ?? 0;
+  const noun = opts.summaryNoun ?? "selected";
+  const checked = choices.map((ch) => ch.locked ? ch.checked ?? true : !!ch.checked);
+  if (!stdin.isTTY || !stdout.isTTY) {
+    return Promise.resolve(choices.filter((_, i) => checked[i]).map((ch) => ch.value));
+  }
+  const c2 = paint2(colorsEnabled2(stdout));
+  const nameCol = nameWidth2(choices.map((ch) => ch.label));
+  let warn = false;
+  return runPrompt2({
+    stdin,
+    stdout,
+    message: opts.message,
+    c: c2,
+    choices,
+    renderRow: (index, active, budget) => {
+      const choice = choices[index];
+      const caret = active ? c2.pink(CARET2) : " ";
+      const box = choice.locked ? checked[index] ? c2.guide(CHECK_ON2) : c2.dim(CHECK_OFF2) : checked[index] ? c2.pink(CHECK_ON2) : c2.dim(CHECK_OFF2);
+      const rawLabel = choice.label.padEnd(nameCol);
+      const label = active ? c2.pinkBold(rawLabel) : checked[index] ? rawLabel : c2.dim(rawLabel);
+      const hint = choice.hint ? `  ${c2.dim(ellipsize2(choice.hint, budget))}` : "";
+      return `${caret} ${box} ${label}${hint}`;
+    },
+    warnLine: () => warn ? c2.warn(`Select at least ${minSelected}.`) : null,
+    footer: opts.hint ?? "↑/↓ move · space select · ctrl+a all · enter confirm",
+    onKey: (key, cursor2) => {
+      if (key.name === "space") {
+        if (choices[cursor2]?.locked)
+          return "redraw";
+        checked[cursor2] = !checked[cursor2];
+        warn = false;
+        return "redraw";
+      }
+      if (key.ctrl && key.name === "a") {
+        const allOn = choices.every((ch, i) => checked[i] || ch.locked);
+        for (let i = 0;i < checked.length; i++) {
+          checked[i] = choices[i]?.locked ? true : !allOn;
+        }
+        return "redraw";
+      }
+      if (key.name === "return") {
+        const selected = choices.filter((_, i) => checked[i]).map((ch) => ch.value);
+        const chosen = choices.filter((ch, i) => checked[i] && !ch.locked).length;
+        if (chosen < minSelected) {
+          warn = true;
+          return "redraw";
+        }
+        return { done: selected };
+      }
+      return;
+    },
+    summaryFor: (values) => values === null ? "cancelled" : summarize2(choices.filter((ch) => values.includes(ch.value) && !ch.summaryExclude).map((ch) => ch.label), noun)
+  });
+}
+function promptText2(opts) {
+  const stdin = opts.stdin ?? process.stdin;
+  const stdout = opts.stdout ?? process.stdout;
+  const c2 = paint2(colorsEnabled2(stdout));
+  const accept = (raw) => {
+    const value = raw.trim() || opts.defaultValue || "";
+    const error = opts.validate?.(value) ?? null;
+    return error ? { ok: false, error } : { ok: true, value };
+  };
+  if (!stdin.isTTY) {
+    return new Promise((resolve24) => {
+      let buf = "";
+      const onData = (chunk) => {
+        buf += String(chunk);
+        if (buf.includes(`
+`))
+          done();
+      };
+      const done = () => {
+        stdin.removeListener("data", onData);
+        stdin.removeListener("end", done);
+        const r = accept(buf.split(`
+`)[0] ?? "");
+        resolve24(r.ok ? r.value : null);
+      };
+      stdin.on("data", onData);
+      stdin.on("end", done);
+    });
+  }
+  return new Promise((resolve24) => {
+    let value = "";
+    const draw = (error) => {
+      const shown = opts.mask ? "•".repeat(value.length) : value;
+      const hint = opts.hint ? `  ${c2.dim(opts.hint)}` : "";
+      const err = error ? `
+  ${c2.warn(error)}` : "";
+      stdout.write(`\r\x1B[2K${c2.bold(opts.message)} ${shown}${hint}${err}`);
+      if (err)
+        stdout.write("\x1B[1A");
+    };
+    draw();
+    readline3.emitKeypressEvents(stdin);
+    const wasRaw = stdin.isRaw;
+    stdin.setRawMode?.(true);
+    stdin.resume();
+    const cleanup = () => {
+      stdin.removeListener("keypress", onKey);
+      stdin.setRawMode?.(wasRaw ?? false);
+      stdin.pause();
+      stdout.write(`
+`);
+    };
+    function onKey(str2, key) {
+      if (!key)
+        return;
+      if (key.ctrl && (key.name === "c" || key.name === "d") || key.name === "escape") {
+        cleanup();
+        resolve24(null);
+        return;
+      }
+      if (key.name === "return" || key.name === "enter") {
+        const r = accept(value);
+        if (r.ok) {
+          cleanup();
+          resolve24(r.value);
+        } else {
+          draw(r.error);
+        }
+        return;
+      }
+      if (key.name === "backspace") {
+        value = value.slice(0, -1);
+        draw();
+        return;
+      }
+      if (str2 && !key.ctrl && !key.meta) {
+        value += str2;
+        draw();
+      }
+    }
+    stdin.on("keypress", onKey);
+  });
+}
+var ESC2 = "\x1B", BAR2 = "│", BAR_END2 = "└", STEP_ACTIVE2 = "◆", STEP_DONE2 = "◇", RADIO_ON2 = "●", RADIO_OFF2 = "○", CHECK_ON2 = "◼", CHECK_OFF2 = "◻", CARET2 = "❯", FLOWER2 = "❋", HUES2, ANSI_RESET2, ANSI_BOLD2, ANSI_DIM2, LOGO_MIN_COLS2 = 22, TAGLINE2 = "end-to-end failure layer for ai agents", LOGO_GRID2, LOGO_TEAL2, LOGO_PINK2, WINDOW3 = 8;
+var init_tui2 = __esm(() => {
+  HUES2 = {
+    guide: { rgb: [102, 209, 181], basic: "36" },
+    pink: { rgb: [255, 46, 136], basic: "95" },
+    logoPink: { rgb: [228, 88, 124], basic: "95" },
+    warn: { rgb: [227, 179, 65], basic: "33" },
+    dim: { rgb: [107, 118, 132], basic: "2" }
+  };
+  ANSI_RESET2 = `${ESC2}[0m`;
+  ANSI_BOLD2 = `${ESC2}[1m`;
+  ANSI_DIM2 = `${ESC2}[2m`;
+  LOGO_GRID2 = [
+    "...tt........",
+    "..tttt.......",
+    ".tttttt..pppp",
+    ".tttttt..pppp",
+    "..tttt...pppp",
+    "...tt....pppp",
+    ".........pppp",
+    ".........pppp",
+    "..pppp...pppp",
+    "..pppp...pppp",
+    "..pppp...pppp",
+    ".pppppp..pppp",
+    ".pppppp..pppp",
+    ".pppppp..pppp",
+    ".pppppp..pppp",
+    "..pppp...pppp",
+    "..ppppppppppp",
+    "..ppppppppppp",
+    "..ppppppppppp",
+    "..ppppppppppp"
+  ];
+  LOGO_TEAL2 = HUES2.guide.rgb;
+  LOGO_PINK2 = HUES2.logoPink.rgb;
+});
+
+// src/hooks/manager.ts
+var exports_manager = {};
+__export(exports_manager, {
+  removeHooks: () => removeHooks2,
+  listHooks: () => listHooks,
+  installHooks: () => installHooks2,
+  hooksInstalledInSettings: () => hooksInstalledInSettings2,
+  getSettingsPath: () => getSettingsPath2
+});
+import { execSync as execSync7 } from "node:child_process";
+import { existsSync as existsSync32 } from "node:fs";
+import { resolve as resolve24, basename as basename6 } from "node:path";
+import { platform as platform5, arch as arch4, release as release3, hostname as hostname5 } from "node:os";
+function getSettingsPath2(scope, cwd) {
+  return claudeCode.getSettingsPath(scope, cwd);
 }
 function scopeLabel2(scope) {
   switch (scope) {
@@ -26119,7 +27132,7 @@ async function installHooksImpl2(policyNames, scope = "user", cwd, includeBeta =
   } else if (customPoliciesPath && (typeof customPoliciesPath === "string" || customPoliciesPath.length > 0)) {
     const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path3) => resolve24(path3));
     const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path3) => resolve24(path3)).filter((path3) => {
-      if (existsSync31(path3))
+      if (existsSync32(path3))
         return true;
       console.log(`Dropping custom policies path (file no longer exists): ${path3}`);
       return false;
@@ -26255,7 +27268,7 @@ This file can be committed to git — no machine-specific paths.`);
     } catch {}
   }
 }
-async function removeHooks(policyNames, scope = "user", cwd, opts) {
+async function removeHooks2(policyNames, scope = "user", cwd, opts) {
   const configScope = scope === "all" ? "user" : scope;
   const selectedClis = opts?.cli && opts.cli.length > 0 ? [...new Set(opts.cli)] : ["claude"];
   if (opts?.removeCustomHooks) {
@@ -26311,7 +27324,7 @@ async function removeHooks(policyNames, scope = "user", cwd, opts) {
     const scopesToRemove = scope === "all" ? [...integration.scopes] : integration.scopes.includes(scope) ? [scope] : [];
     for (const s of scopesToRemove) {
       const settingsPaths = settingsPathsFor(integration, s, cwd);
-      const existing = settingsPaths.filter((p) => existsSync31(p));
+      const existing = settingsPaths.filter((p) => existsSync32(p));
       if (existing.length === 0) {
         if (scope !== "all" && selectedClis.length === 1) {
           console.log("No settings file found. Nothing to remove.");
@@ -26512,7 +27525,7 @@ Failproof AI Hook Policies
     for (const path3 of explicitPaths) {
       const absPath = resolve24(findProjectConfigDir(cwd ?? process.cwd()), path3);
       console.log(`  ${absPath}`);
-      if (!existsSync31(absPath)) {
+      if (!existsSync32(absPath)) {
         console.log(`  \x1B[31m✗ File not found: ${absPath}\x1B[0m`);
         continue;
       }
@@ -26609,7 +27622,7 @@ __export(exports_install_prompt, {
   promptPolicySelection: () => promptPolicySelection2,
   buildCliMenuOptions: () => buildCliMenuOptions
 });
-import * as readline3 from "node:readline";
+import * as readline4 from "node:readline";
 async function resolveTargetClis(explicit, action = "install") {
   const detected = explicit && explicit.length > 0 ? [] : detectInstalledClis();
   const stdinIsTty = !!process.stdin.isTTY;
@@ -26716,13 +27729,13 @@ async function promptCliTargetSelection(detected, action = "install") {
   let cursor2 = 0;
   let lastLineCount = 0;
   let cursorHidden = false;
-  function hideCursor2() {
+  function hideCursor3() {
     if (!cursorHidden) {
       process.stdout.write("\x1B[?25l");
       cursorHidden = true;
     }
   }
-  function showCursor2() {
+  function showCursor3() {
     if (cursorHidden) {
       process.stdout.write("\x1B[?25h");
       cursorHidden = false;
@@ -26732,7 +27745,7 @@ async function promptCliTargetSelection(detected, action = "install") {
   const heading = action === "uninstall" ? "Remove failproofai hooks" : "Install failproofai hooks";
   function render() {
     const cols = process.stdout.columns || 100;
-    hideCursor2();
+    hideCursor3();
     const g = dim(BAR);
     const lines = [g, `${teal(STEP_ACTIVE)}  ${bold(heading)}`];
     for (const row of buildDisplayRows()) {
@@ -26765,13 +27778,13 @@ async function promptCliTargetSelection(detected, action = "install") {
   const itemCount = options.length;
   return new Promise((resolve25) => {
     render();
-    readline3.emitKeypressEvents(process.stdin);
+    readline4.emitKeypressEvents(process.stdin);
     const wasRaw = process.stdin.isRaw;
     if (process.stdin.setRawMode)
       process.stdin.setRawMode(true);
     process.stdin.resume();
     function cleanup() {
-      showCursor2();
+      showCursor3();
       process.stdin.removeListener("keypress", onKey);
       if (process.stdin.setRawMode)
         process.stdin.setRawMode(wasRaw ?? false);
@@ -26832,13 +27845,13 @@ async function promptPolicySelection2(preSelected, options = {}) {
   let search = "";
   let lastLineCount = 0;
   let cursorHidden = false;
-  function hideCursor2() {
+  function hideCursor3() {
     if (!cursorHidden) {
       process.stdout.write("\x1B[?25l");
       cursorHidden = true;
     }
   }
-  function showCursor2() {
+  function showCursor3() {
     if (cursorHidden) {
       process.stdout.write("\x1B[?25h");
       cursorHidden = false;
@@ -26885,7 +27898,7 @@ async function promptPolicySelection2(preSelected, options = {}) {
   }
   function render() {
     const cols = process.stdout.columns || 100;
-    hideCursor2();
+    hideCursor3();
     const filtered = getFiltered();
     const shown = filtered.length;
     if (shown > 0 && cursor2 >= shown)
@@ -26904,10 +27917,10 @@ async function promptPolicySelection2(preSelected, options = {}) {
       for (let i = 0;i < WINDOW_SIZE + 1; i++)
         lines.push(g);
     } else {
-      const displayRows2 = buildDisplayRows(filtered);
+      const displayRows3 = buildDisplayRows(filtered);
       let cursorDisplayRow = 0;
-      for (let i = 0;i < displayRows2.length; i++) {
-        const row = displayRows2[i];
+      for (let i = 0;i < displayRows3.length; i++) {
+        const row = displayRows3[i];
         if (row.kind === "item" && row.filteredIndex === cursor2) {
           cursorDisplayRow = i;
           break;
@@ -26915,12 +27928,12 @@ async function promptPolicySelection2(preSelected, options = {}) {
       }
       let windowStart = cursorDisplayRow - Math.floor(WINDOW_SIZE / 2);
       windowStart = Math.max(0, windowStart);
-      windowStart = Math.min(windowStart, Math.max(0, displayRows2.length - WINDOW_SIZE));
-      const windowEnd = Math.min(displayRows2.length, windowStart + WINDOW_SIZE);
-      const aboveItems = displayRows2.slice(0, windowStart).filter((r) => r.kind === "item").length;
+      windowStart = Math.min(windowStart, Math.max(0, displayRows3.length - WINDOW_SIZE));
+      const windowEnd = Math.min(displayRows3.length, windowStart + WINDOW_SIZE);
+      const aboveItems = displayRows3.slice(0, windowStart).filter((r) => r.kind === "item").length;
       lines.push(aboveItems > 0 ? `${g}  ${dim(`↑ ${aboveItems} more`)}` : g);
       for (let i = windowStart;i < windowEnd; i++) {
-        const row = displayRows2[i];
+        const row = displayRows3[i];
         if (row.kind === "header") {
           lines.push(`${g}  ${dim(row.category.toUpperCase())}  ${dim(`${row.enabledCount}/${row.totalCount}`)}`);
         } else {
@@ -26937,7 +27950,7 @@ async function promptPolicySelection2(preSelected, options = {}) {
       }
       for (let i = windowEnd - windowStart;i < WINDOW_SIZE; i++)
         lines.push(g);
-      const belowItems = displayRows2.slice(windowEnd).filter((r) => r.kind === "item").length;
+      const belowItems = displayRows3.slice(windowEnd).filter((r) => r.kind === "item").length;
       lines.push(belowItems > 0 ? `${g}  ${dim(`↓ ${belowItems} more`)}` : g);
     }
     lines.push(g);
@@ -26953,7 +27966,7 @@ async function promptPolicySelection2(preSelected, options = {}) {
     render();
     process.stdin.setRawMode(true);
     process.stdin.resume();
-    readline3.emitKeypressEvents(process.stdin);
+    readline4.emitKeypressEvents(process.stdin);
     function keypressHandler(_str, key) {
       if (!key)
         return;
@@ -27009,7 +28022,7 @@ ${dim(BAR)}  ${dim(`${selected.length} selected`)}
       }
     }
     function cleanup() {
-      showCursor2();
+      showCursor3();
       process.stdin.removeListener("keypress", keypressHandler);
       process.stdin.setRawMode(false);
       process.stdin.pause();
@@ -27647,7 +28660,7 @@ __export(exports_launch2, {
   launch: () => launch2
 });
 import { spawn as spawn3 } from "child_process";
-import { realpathSync as realpathSync5, existsSync as existsSync32 } from "node:fs";
+import { realpathSync as realpathSync5, existsSync as existsSync33 } from "node:fs";
 import { resolve as resolve25, dirname as dirname16 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { createInterface as createInterface2 } from "node:readline";
@@ -27674,7 +28687,7 @@ function launch2(mode) {
     cmd = "node";
     const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve25(dirname16(realpathSync5(fileURLToPath3(import.meta.url))), "..");
     const serverJsPath = resolve25(packageRoot, ".next/standalone/server.js");
-    if (!existsSync32(serverJsPath)) {
+    if (!existsSync33(serverJsPath)) {
       let shadowMessage = null;
       try {
         const diag = diagnoseShadow({ selfPackageRoot: packageRoot, selfVersion: version2 });
@@ -27774,7 +28787,7 @@ import { realpathSync as realpathSync6 } from "fs";
 import { dirname as dirname17, resolve as resolve26 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 // package.json
-var version = "1.0.0-beta.7";
+var version = "1.0.0-beta.9";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {
@@ -27872,7 +28885,7 @@ if (hookIdx >= 0) {
   }
 }
 async function runCli() {
-  const SUBCOMMANDS = ["policies", "policy", "audit", "config"];
+  const SUBCOMMANDS = ["policies", "policy", "audit", "config", "uninstall"];
   if ((args.includes("--help") || args.includes("-h")) && !SUBCOMMANDS.includes(args[0])) {
     const extraArgs = args.filter((a) => a !== "--help" && a !== "-h");
     if (extraArgs.length > 0) {
@@ -27918,6 +28931,16 @@ COMMANDS
                                  dashboard at http://localhost:8020/audit
   audit --help, -h               Show this help for the audit command
 
+  uninstall                      Remove failproofai from this machine: hook
+                                 entries from every agent CLI, and the daemon
+                                 service. Run this BEFORE \`npm rm -g failproofai\`
+                                 \u2014 npm runs no uninstall script, so removing the
+                                 package alone leaves both behind.
+    --purge                        Also delete ~/.failproofai (settings,
+                                   credentials, audit history, daemon binary)
+    --dry-run                      Show what would be removed, change nothing
+    --yes, -y                      Skip the confirmation prompt
+
   --version, -v                  Print version and exit
   --help, -h                     Show this help message
 
@@ -27995,6 +29018,84 @@ Run \`failproofai --help\` for usage.`);
       await maybeFirstRunConfigure2({}, { postSetupAudit: args[0] !== "audit", force: layoutWasReset });
     } catch {}
   }
+  if (args[0] === "uninstall") {
+    const subArgs = args.slice(1);
+    if (subArgs.includes("--help") || subArgs.includes("-h")) {
+      console.log(`
+failproofai uninstall \u2014 remove failproofai from this machine
+
+USAGE
+  failproofai uninstall [--purge] [--dry-run] [--yes]
+
+WHAT IT REMOVES
+  \u2022 failproofai hook entries from every agent CLI that has them
+  \u2022 the failproofaid daemon service (needs sudo)
+  \u2022 the "require the daemon" flag \u2014 cleared FIRST, so a partial uninstall can
+    never leave this machine denying every tool call
+
+OPTIONS
+  --purge         Also delete ~/.failproofai \u2014 settings, credentials, audit
+                  history and the downloaded daemon binary. Off by default so a
+                  reinstall keeps your history.
+  --dry-run       Print what would be removed and change nothing.
+  --yes, -y       Skip the confirmation prompt. Required when there is no TTY.
+
+WHY THIS EXISTS
+  npm runs no uninstall script, so \`npm rm -g failproofai\` removes the package
+  and leaves the hook entries and the service behind. Run this first, then:
+      npm rm -g failproofai
+`);
+      process.exit(0);
+    }
+    const KNOWN = new Set(["--purge", "--dry-run", "--yes", "-y"]);
+    const unknown = subArgs.find((a) => !KNOWN.has(a));
+    if (unknown) {
+      throw new CliError3(`Unexpected argument: ${unknown}
+Run \`failproofai uninstall --help\` for usage.`);
+    }
+    lastSubcommand = "uninstall_command";
+    const { runUninstallCommand: runUninstallCommand2 } = await Promise.resolve().then(() => (init_uninstall_cli(), exports_uninstall_cli));
+    const purge = subArgs.includes("--purge");
+    const dryRun = subArgs.includes("--dry-run");
+    const yes = subArgs.includes("--yes") || subArgs.includes("-y");
+    let planWasShown = false;
+    const result = await runUninstallCommand2({
+      purge,
+      dryRun,
+      yes,
+      cwd: process.cwd(),
+      confirm: process.stdin.isTTY ? async (planLines) => {
+        planWasShown = true;
+        const { selectOne: selectOne3 } = await Promise.resolve().then(() => (init_tui2(), exports_tui));
+        const answer = await selectOne3({
+          message: purge ? "Remove failproofai and DELETE ~/.failproofai?" : "Remove failproofai from this machine?",
+          body: planLines,
+          choices: [
+            { label: "No, cancel", value: false },
+            { label: purge ? "Yes, remove and purge" : "Yes, remove it", value: true }
+          ]
+        });
+        return answer === true;
+      } : undefined
+    });
+    const skip = planWasShown ? result.planLines : 0;
+    for (const line of result.lines.slice(skip)) {
+      if (result.exitCode === 0)
+        console.log(line);
+      else
+        console.error(line);
+    }
+    if (!result.purged) {
+      await track("cli_uninstall_command", {
+        ok: result.exitCode === 0,
+        purge,
+        dry_run: dryRun
+      });
+    }
+    lastSubcommand = null;
+    await exitAfterFlush(result.exitCode);
+    return;
+  }
   if (args[0] === "policies") {
     const subArgs = args.slice(1);
     const isInstall = subArgs.includes("--install") || subArgs.includes("-i");
@@ -28124,7 +29225,7 @@ Run \`failproofai policies --help\` for usage.`);
     }
     if (isUninstall) {
       lastSubcommand = "uninstall";
-      const { removeHooks: removeHooks2 } = await Promise.resolve().then(() => (init_manager2(), exports_manager));
+      const { removeHooks: removeHooks3 } = await Promise.resolve().then(() => (init_manager2(), exports_manager));
       const { resolveTargetClis: resolveTargetClis2 } = await Promise.resolve().then(() => (init_install_prompt2(), exports_install_prompt));
       const scopeIdx = subArgs.indexOf("--scope");
       const scope = scopeIdx >= 0 ? subArgs[scopeIdx + 1] : "user";
@@ -28169,7 +29270,7 @@ Run \`failproofai policies --help\` for usage.`);
       }
       const policyNames = subArgs.filter((a, idx) => !a.startsWith("-") && !consumedIdxs.has(idx));
       const cli = await resolveTargetClis2(cliFlagValues.length > 0 ? cliFlagValues : undefined, "uninstall");
-      await removeHooks2(policyNames.length > 0 ? policyNames : undefined, scope, undefined, { betaOnly, removeCustomHooks, cli });
+      await removeHooks3(policyNames.length > 0 ? policyNames : undefined, scope, undefined, { betaOnly, removeCustomHooks, cli });
       await track("cli_uninstall_success", {
         scope,
         cli,
@@ -28301,8 +29402,8 @@ For multiple policies use \`failproofai policies --${action === "add" ? "install
         include_beta: includeBeta
       });
     } else {
-      const { removeHooks: removeHooks2 } = await Promise.resolve().then(() => (init_manager2(), exports_manager));
-      await removeHooks2([policyName], scope, undefined, { betaOnly: false, removeCustomHooks: false, cli });
+      const { removeHooks: removeHooks3 } = await Promise.resolve().then(() => (init_manager2(), exports_manager));
+      await removeHooks3([policyName], scope, undefined, { betaOnly: false, removeCustomHooks: false, cli });
       await track("cli_policy_remove_success", {
         scope,
         cli,