failproofai 1.0.11-beta.0 → 1.0.11-beta.2

package/.next/standalone/.next/server/chunks/src_hooks_1eem5a7cyqlb2._.js

@@ -0,0 +1,3 @@
+(()=>{"use strict";module.exports=[73634,38791,e=>{var t=e.i(50227),i=e.i(2157),r=e.i(12714),o=e.i(74533),a=e.i(60526);let n=[{name:"sanitize-jwt",description:"Stop Claude from reading JWTs in tool responses",displayTitle:"Redacted JWT tokens from tool output",impact:"Stops the agent from echoing auth tokens it saw in command output.",match:{events:["PostToolUse"]},authority:"hard",defaultEnabled:!0,category:"Sanitize"},{name:"sanitize-api-keys",description:"Stop Claude from reading API keys (OpenAI, Anthropic, GitHub, AWS, Stripe, Google) in tool responses",displayTitle:"Redacted API keys from tool output",impact:"Catches OpenAI / Anthropic / GitHub / AWS / Stripe / Google keys before the model sees them.",match:{events:["PostToolUse"]},authority:"hard",defaultEnabled:!0,category:"Sanitize",params:{additionalPatterns:{type:"pattern[]",description:"Additional API key patterns to scrub, each with { regex, label }",default:[]}}},{name:"sanitize-connection-strings",description:"Stop Claude from reading database connection strings with embedded credentials in tool responses",displayTitle:"Redacted database connection strings from tool output",impact:"Strips embedded DB credentials before they reach the model context.",match:{events:["PostToolUse"]},authority:"hard",defaultEnabled:!0,category:"Sanitize"},{name:"sanitize-private-key-content",description:"Stop Claude from reading PEM private key content in tool responses",displayTitle:"Redacted PEM private keys from tool output",impact:"Prevents private key bodies from being echoed into chat context.",match:{events:["PostToolUse"]},authority:"hard",defaultEnabled:!0,category:"Sanitize"},{name:"sanitize-bearer-tokens",displayTitle:"Redacted bearer tokens from tool output",impact:"Strips Authorization: Bearer values before they hit the model.",description:"Stop Claude from reading Authorization Bearer tokens in tool responses",match:{events:["PostToolUse"]},authority:"hard",defaultEnabled:!0,category:"Sanitize"},{name:"protect-env-vars",displayTitle:"Tried to dump environment variables to chat",impact:"Env vars often contain secrets; blocking `env` / `printenv` keeps them out of the model context.",description:"Prevent commands that read environment variables",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["env-secrets-dump","secret-exposure"],defaultEnabled:!0,category:"Environment"},{name:"block-env-files",displayTitle:"Tried to read or write a .env file",impact:"`.env` files routinely contain API keys and DB credentials.",description:"Block reading/writing .env files",match:{events:["PreToolUse"]},authority:"reviewable",reviewedBy:["secret-exposure"],defaultEnabled:!0,category:"Environment"},{name:"block-read-outside-cwd",displayTitle:"Tried to read files outside your project directory",impact:"Stops the agent from peeking at neighboring repos or your home directory.",description:"Block file reads outside the session working directory",match:{events:["PreToolUse"],toolNames:["Read","Glob","Grep","Bash"]},authority:"reviewable",reviewedBy:["read-outside-workspace"],defaultEnabled:!1,category:"Environment",params:{allowPaths:{type:"string[]",description:"Absolute paths outside cwd that are allowed to be read",default:[]}}},{name:"block-sudo",displayTitle:"Tried to run a command with sudo",impact:"Sudo gives the agent root — blocked unless explicitly allow-listed.",description:"Block sudo commands",match:{events:["PreToolUse","PermissionRequest"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!0,category:"Dangerous Commands",params:{allowPatterns:{type:"string[]",description:"Sudo command patterns to allow, matched token-by-token (e.g. 'sudo systemctl status')",default:[]}}},{name:"block-curl-pipe-sh",displayTitle:"Tried to pipe a downloaded script straight to a shell",impact:"`curl ... | sh` runs unverified remote code on your machine.",description:"Block piping downloads to shell",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!0,category:"Dangerous Commands"},{name:"block-rm-rf",displayTitle:"Tried to recursively delete a system path",impact:"Catches catastrophic `rm -rf /` and Windows equivalents.",description:"Prevent catastrophic deletions",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["destructive-deletion"],defaultEnabled:!1,category:"Dangerous Commands",params:{allowPaths:{type:"string[]",description:"Paths that are allowed to be recursively deleted",default:[]}}},{name:"block-failproofai-commands",displayTitle:"Tried to disable, pause or modify failproofai itself",impact:"An agent that can pause or remove enforcement can switch off every other policy.",description:"Block failproofai CLI commands, self-pause and uninstallation",match:{events:["PreToolUse","PermissionRequest"],toolNames:["Bash","Write","Edit","NotebookEdit"]},defaultEnabled:!0,alwaysOn:!0,authority:"hard",category:"Dangerous Commands"},{name:"block-kubectl",displayTitle:"Tried to run a Kubernetes command",impact:"kubectl can change live cluster state — gated unless allow-listed.",description:"Block kubectl commands (Kubernetes cluster mutations)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["production-infra-change"],defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"kubectl command patterns to allow, matched token-by-token (e.g. 'kubectl get *', 'kubectl describe *')",default:[]}}},{name:"block-terraform",displayTitle:"Tried to run a Terraform/OpenTofu command",impact:"Terraform mutates real infrastructure — gated unless allow-listed.",description:"Block terraform and tofu (OpenTofu) commands",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["production-infra-change"],defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"terraform/tofu command patterns to allow (e.g. 'terraform plan', 'terraform validate')",default:[]}}},{name:"block-aws-cli",displayTitle:"Tried to run an AWS CLI command",impact:"AWS CLI can spend money or break prod — gated.",description:"Block aws CLI commands",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["production-infra-change"],defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"aws CLI command patterns to allow (e.g. 'aws s3 ls *', 'aws sts get-caller-identity')",default:[]}}},{name:"block-gcloud",displayTitle:"Tried to run a Google Cloud command",impact:"gcloud can spend money or break prod — gated.",description:"Block gcloud (Google Cloud) CLI commands",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["production-infra-change"],defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"gcloud command patterns to allow (e.g. 'gcloud auth list', 'gcloud config list')",default:[]}}},{name:"block-az-cli",displayTitle:"Tried to run an Azure CLI command",impact:"az can spend money or break prod — gated.",description:"Block az (Azure) CLI commands",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["production-infra-change"],defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"az CLI command patterns to allow (e.g. 'az account show', 'az group list')",default:[]}}},{name:"block-helm",displayTitle:"Tried to run a Helm command",impact:"Helm releases mutate cluster state — gated.",description:"Block helm commands",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["production-infra-change"],defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"helm command patterns to allow (e.g. 'helm list', 'helm status *')",default:[]}}},{name:"block-gh-pipeline",displayTitle:"Tried to run a privileged GitHub CLI pipeline command",impact:"Catches `gh workflow run`, `gh pr merge`, `gh secret set`, etc.",description:"Block gh CLI pipeline-trigger subcommands (workflow run, run rerun/cancel, pr merge, release create/delete, cache delete, secret set/delete)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"gh pipeline command patterns to allow (e.g. specific scripted invocations); read-only gh subcommands like 'gh pr view' and 'gh run list' are not matched by this policy",default:[]}}},{name:"block-secrets-write",displayTitle:"Tried to write a secret-key file",impact:"Stops the agent from creating `.pem`, `id_rsa`, `credentials.json`, etc.",description:"Block writing secret key files",match:{events:["PreToolUse"],toolNames:["Write"]},authority:"reviewable",reviewedBy:["secret-exposure"],defaultEnabled:!1,category:"Dangerous Commands",params:{additionalPatterns:{type:"string[]",description:"Additional filename patterns (substrings) to block",default:[]}}},{name:"block-push-master",displayTitle:"Tried to push directly to main/master",impact:"Direct pushes to a protected branch bypass review.",description:"Block pushing to main/master",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!0,category:"Git",params:{protectedBranches:{type:"string[]",description:"Branch names to protect from direct pushes",default:["main","master"]}}},{name:"block-force-push",displayTitle:"Tried to force-push",impact:"Force-pushes rewrite history and can clobber teammates' work.",description:"Prevent force-pushing to any branch",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["git-history-rewrite"],defaultEnabled:!1,category:"Git"},{name:"block-work-on-main",displayTitle:"Tried to commit or merge on main/master",impact:"Work should land via PR — direct commits skip review.",description:"Block git commits and merges on main/master branch",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Git",params:{protectedBranches:{type:"string[]",description:"Branch names where commits/merges are blocked",default:["main","master"]}}},{name:"warn-git-amend",displayTitle:"Used git commit --amend",impact:"Amending after a push rewrites history that others may have pulled.",description:"Warns before amending git commits, which rewrites history",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["git-history-rewrite"],defaultEnabled:!1,category:"Git"},{name:"warn-git-stash-drop",displayTitle:"Tried to drop or clear git stash",impact:"Stash deletions are permanent and silent.",description:"Warns before permanently deleting stashed changes",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Git"},{name:"warn-git-clean",displayTitle:"Tried to delete untracked or ignored files with git clean",impact:"`git clean -fdx` takes `.env`, local config and unstaged work — git never had a copy of any of it.",description:"Warns before git clean deletes untracked directories (-d) or ignored files (-x / -X)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Git",params:{destructiveFlags:{type:"string[]",description:"git clean flag letters that make it worth warning about, checked alongside --force. Narrow to ['x','X'] to allow `git clean -fd`, or widen with 'f' to warn on a bare `git clean -f`.",default:["d","x","X"]}}},{name:"warn-all-files-staged",displayTitle:"Staged all files with git add -A / .",impact:"Wide stages routinely catch generated files or secrets you didn't intend to commit.",description:"Warns before staging all working tree files with git add -A / . / --all",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Git"},{name:"warn-destructive-sql",displayTitle:"Ran destructive SQL (DROP / TRUNCATE / DELETE without WHERE)",impact:"Easy way to wipe a table by accident.",description:"Warn before executing destructive SQL (DROP/TRUNCATE/DELETE without WHERE) via database clients",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["database-destruction"],defaultEnabled:!1,category:"Database"},{name:"warn-schema-alteration",displayTitle:"Altered a database schema column",impact:"ALTER TABLE operations can lock tables and break readers.",description:"Warns before SQL schema changes (ALTER TABLE with column or rename operations)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Database"},{name:"warn-package-publish",displayTitle:"Tried to publish a package",impact:"Publishes are irreversible — `npm publish` / `cargo publish` shouldn't happen without intent.",description:"Warn before publishing packages to public registries (npm, PyPI, crates.io, RubyGems, etc.)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Packages & System"},{name:"warn-global-package-install",displayTitle:"Installed a package globally",impact:"`npm i -g`, `cargo install`, `pip --user` pollute your machine outside the project.",description:"Warns before installing packages globally (npm -g, cargo install, etc.)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["system-modification"],defaultEnabled:!1,category:"Packages & System"},{name:"prefer-package-manager",displayTitle:"Used a non-preferred package manager",impact:"Mixing package managers creates lockfile churn for your team.",description:"Blocks non-preferred package managers and tells Claude to use an allowed one (e.g., uv instead of pip)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Packages & System",params:{allowed:{type:"string[]",description:"Allowed package manager names (e.g. ['uv', 'bun']). Any detected manager not in this list is blocked.",default:[]},blocked:{type:"string[]",description:"Additional manager names to block beyond the built-in list (e.g. ['pdm', 'pipx']).",default:[]}}},{name:"warn-large-file-write",displayTitle:"Wrote a file larger than the configured threshold",impact:"Catches accidentally large file writes (logs, binaries, model dumps).",description:"Warn before writing files larger than 1MB (configurable via thresholdKb param)",match:{events:["PreToolUse"],toolNames:["Write"]},authority:"hard",defaultEnabled:!1,category:"Packages & System",params:{thresholdKb:{type:"number",description:"File size threshold in KB above which a warning is issued",default:1024}}},{name:"warn-background-process",displayTitle:"Started a long-lived background process",impact:"Catches `nohup` / `&` / `screen` / `tmux` / `disown` patterns that the agent often forgets to clean up.",description:"Warns before starting detached or background processes",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Packages & System"},{name:"warn-repeated-tool-calls",displayTitle:"Called the same tool 3+ times with identical arguments",impact:"Usually a sign of a stuck loop burning tokens.",description:"Warn when the same tool is called 3+ times with identical parameters",match:{events:["PreToolUse"]},authority:"hard",defaultEnabled:!1,category:"AI Behavior"},{name:"require-commit-before-stop",displayTitle:"Stopped with uncommitted changes",impact:"Work not in a commit is invisible to teammates and easy to lose.",description:"Require all changes to be committed before Claude stops",match:{events:["Stop"]},authority:"hard",defaultEnabled:!1,category:"Workflow"},{name:"require-push-before-stop",displayTitle:"Stopped with unpushed commits",impact:"Local-only commits won't trigger CI or be reviewable.",description:"Require all commits to be pushed to remote before Claude stops",match:{events:["Stop"]},authority:"hard",defaultEnabled:!1,category:"Workflow",params:{remote:{type:"string",description:"Remote name to push to (default: origin)",default:"origin"},baseBranch:{type:"string",description:"Base branch to compare against (default: main)",default:"main"}}},{name:"require-pr-before-stop",displayTitle:"Stopped without a PR for the branch",impact:"Branches without PRs don't get reviewed.",description:"Require a pull request to exist for the current branch before Claude stops",match:{events:["Stop"]},authority:"hard",defaultEnabled:!1,category:"Workflow",params:{baseBranch:{type:"string",description:"Base branch to compare against (default: main)",default:"main"}}},{name:"require-no-conflicts-before-stop",displayTitle:"Stopped with a branch that conflicts with main",impact:"Conflicting branches can't merge — surface them early.",description:"Require the current branch to merge cleanly with the base branch before Claude stops",match:{events:["Stop"]},authority:"hard",defaultEnabled:!1,category:"Workflow",params:{baseBranch:{type:"string",description:"Base branch to check for conflicts against (default: main)",default:"main"}}},{name:"require-ci-green-before-stop",displayTitle:"Stopped with failing CI",impact:"Failing CI blocks deploy.",description:"Require CI checks to pass on the current HEAD commit before Claude stops (ignores stale runs on prior commits)",match:{events:["Stop"]},authority:"hard",defaultEnabled:!1,category:"Workflow"}];function s(e){return e?{decision:"allow",reason:e}:{decision:"allow"}}function l(e){return{decision:"deny",reason:e}}function c(e){return{decision:"instruct",reason:e}}var d=e.i(16774),p=e.i(99891);let u="__FAILPROOFAI_POLICY_REGISTRY__",h="__FAILPROOFAI_POLICY_INDEX_CACHE__",m="failproofai";function f(e){return e.includes("/")?e:`${m}/${e}`}function g(e){globalThis[h]=e}function b(){let e=globalThis;return e[u]||(e[u]=[]),e[u]}function y(e,t,i,r,o=0,a,n){let s=f(e),l=b(),c=l.findIndex(e=>e.name===s),u=n?(0,p.d)(n,(0,d.j)()):void 0,h={name:s,description:t,fn:i,match:r,priority:o,...a?{params:a}:{},...u?{authority:u.authority}:{},...u?.reviewedBy?{reviewedBy:u.reviewedBy}:{}};c>=0?l[c]=h:l.push(h),g(null)}e.s(["l",0,m,"G",0,function(e){globalThis[u]=[],g(null),(0,d.Z)(e)},"Z",0,function(){return[...b()]},"w",0,function(e,t){let i=globalThis[h];i||g(i=new Map);let r=`${e}:${t??""}`,o=i.get(r);if(o)return o;let a=b().filter(i=>(!i.match.events||!(i.match.events.length>0)||!!i.match.events.includes(e))&&(!i.match.toolNames||!(i.match.toolNames.length>0)||!!t&&!!i.match.toolNames.includes(t))).sort((e,t)=>t.priority-e.priority);return i.set(r,a),a},"o",0,f,"T",0,y,"c",0,function(e){globalThis[u]=[...e],g(null)}],38791);var k=e.i(97348);let w=function(e){let i=e.replaceAll("\\","/");for(let e of[".claude",".codex",".copilot",".cursor",".opencode",".pi",".gemini"]){let r=(0,t.join)((0,a.homedir)(),e).replaceAll("\\","/");if(i===r||i.startsWith(r+"/"))return!0}for(let e of[(0,t.join)(".config","opencode"),(0,t.join)(".local","share","opencode")]){let r=(0,t.join)((0,a.homedir)(),e).replaceAll("\\","/");if(i===r||i.startsWith(r+"/"))return!0}return!1},v=function(e){return!!(/[\\/]\.claude[\\/]settings(?:\.[^/\\]+)?\.json$/.test(e)||/[\\/]\.codex[\\/]hooks\.json$/.test(e)||/[\\/]\.copilot[\\/]hooks[\\/][^/\\]+\.json$/.test(e)||/[\\/]\.github[\\/]hooks[\\/][^/\\]+\.json$/.test(e)||/[\\/]\.cursor[\\/]hooks\.json$/.test(e)||/[\\/]\.opencode[\\/]opencode\.jsonc?$/.test(e)||/[\\/]\.opencode[\\/]plugins[\\/][^/\\]+\.(?:mjs|js|ts)$/.test(e)||/[\\/]\.config[\\/]opencode[\\/]opencode\.jsonc?$/.test(e)||/[\\/]\.config[\\/]opencode[\\/]config\.json$/.test(e)||/[\\/]\.config[\\/]opencode[\\/]plugins[\\/][^/\\]+\.(?:mjs|js|ts)$/.test(e)||/[\\/]\.pi[\\/](?:agent[\\/])?settings\.json$/.test(e)||/[\\/]\.pi[\\/](?:agent[\\/])?extensions[\\/]/.test(e)||/[\\/]\.gemini[\\/]settings\.json$/.test(e)||/[\\/]\.gemini[\\/]config[\\/]hooks\.json$/.test(e))};function S(e){return e.toolInput?.command??""}function T(e){return e.toolInput?.file_path??""}function $(e){return e.trim().split(/\s+/).map(e=>e.replace(/^['"]|['"]$/g,""))}let _=new Set(["&&","||","|",";"]),E=/[;&<>`$()\\]/,P=/eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/,A=[[/sk-ant-[A-Za-z0-9\-_]{20,}/,"Anthropic API key"],[/sk-proj-[A-Za-z0-9\-_]{20,}/,"OpenAI project API key"],[/sk-[A-Za-z0-9]{20,}/,"OpenAI API key"],[/ghp_[A-Za-z0-9]{36}/,"GitHub personal access token"],[/github_pat_[A-Za-z0-9_]{82}/,"GitHub fine-grained token"],[/AKIA[A-Z0-9]{16}/,"AWS access key ID"],[/sk_live_[A-Za-z0-9]{24,}/,"Stripe live secret key"],[/sk_test_[A-Za-z0-9]{24,}/,"Stripe test secret key"],[/AIza[0-9A-Za-z\-_]{35}/,"Google API key"]],B=/(?:postgresql|postgres|mysql|mongodb(?:\+srv)?|redis|amqps?|smtps?):\/\/[^@\s]+@/,C=/-----BEGIN (?:[A-Z]+ )?PRIVATE KEY-----/,x=/Authorization:\s*Bearer\s+[A-Za-z0-9\-._~+/]{20,}/i,W=[[C,"private key"],[P,"JWT"],[x,"bearer token"],[B,"database credentials"],...A],R=/\b(?:psql|mysql|sqlite3|pgcli|clickhouse-client)\b/,N=/\b(?:DROP\s+(?:TABLE|DATABASE|SCHEMA)|TRUNCATE\b)/i,I=/\bDELETE\s+FROM\b/i,U=/\bWHERE\b/i,O=/\bALTER\s+TABLE\b[\s\S]*\b(?:DROP\s+COLUMN|ADD\s+COLUMN|RENAME\s+(?:COLUMN|TO)|MODIFY\s+COLUMN)\b/i,z=/(?:npm\s+publish|bun\s+publish|pnpm\s+publish|yarn\s+npm\s+publish|twine\s+upload|poetry\s+publish|cargo\s+publish|gem\s+push)\b/,j=/(?:^|\s|;|&&|\|\|)(?:env|printenv)(?:\s|$|;|&&|\|)/,D=/echo\s+.*\$\{?[A-Za-z_]/,L=/(?:^|\s|;|&&|\|\|)export\s+\w+/,G=/(?:^|[;&|({\n`'"]|\$\()\s*(?:set|export(?:\s+-p)?)\s*(?:$|[|;&>)\n])|\b(?:declare|typeset)\s+-[A-Za-z]*[xp]|\bcompgen\s+-[A-Za-z]*[ev]|\/proc\/(?:self|thread-self|\d+|\$\$|\$BASHPID)\/environ/,q=/\b(?:python[\d.]*|node|bun|deno)\b/,F=/\bos\.environ(?!\s*\[|\.(?:get|setdefault|pop|update)\b)|\bprocess\.env(?![.\[\w])/,H=/\$env:[A-Za-z_]/i,Z=/(?:Get-ChildItem|dir|gci|ls)\s+Env:/i,M=/\[Environment\]::GetEnvironment/i,J=/echo\s+%[A-Za-z_]/i,K=/(?:^|[\\/])\.env(?:\.|$)/,Y=/\.env(?:\b|\s|$|\.)/,X=/Start-Process\s+.*-Verb\s+RunAs/i,Q=/(?:^|;|&&|\|\|)\s*runas\s/i,V=/(?:curl|wget)\s.*\|\s*(?:sh|bash|zsh|dash|ksh|csh|tcsh|fish|ash)\b/,ee=/[;&|\n\r(){}`]+/,et=new Set(["npx","bunx","pnpx","npm","pnpm","yarn","dlx","exec","run","eval","node","bun","deno","env","command","builtin","nohup","setsid","time","timeout","nice","stdbuf","xargs","sudo","doas","sh","bash","zsh","dash","ksh","fish","ash"]),ei=/(?:^|\/)failproofai[^/]*$/,er=/failproofai\/(?:dist\/(?:cli|index)\.mjs|bin\/failproofai\.mjs)$/,eo=/^(?:config|configure|setup)$/,ea=/^--pause(?:=|$)/,en=/^[A-Za-z_][A-Za-z0-9_]*=/,es=/^\d+[a-z]*$/i;function el(e){let t=e.replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g,"$$$1"),i=null,r=new Set;for(let[,e,i]of t.matchAll(/(?:^|[\s;&|])([A-Za-z_][A-Za-z0-9_]*)=("[^"]*"|'[^']*'|[^\s;&|]+)/g)){let t=i.replace(/^["']|["']$/g,"");(ei.test(t)||er.test(t))&&r.add(e)}let o=e=>{let t=/^\$\{?([A-Za-z_][A-Za-z0-9_]*)\}?$/.exec(e);return!!t&&r.has(t[1])};for(let e of t.split(ee)){let t=e.split(/\s+/).filter(Boolean),r=0;for(;r<t.length;){let e=t[r];if(!(en.test(e)||e.startsWith("-")||e.startsWith(">")||e.startsWith("<")||es.test(e)||et.has(e.slice(e.lastIndexOf("/")+1))))break;r++}if(r>=t.length||!ei.test(t[r])&&!er.test(t[r])&&!o(t[r]))continue;let a=t.slice(r+1),n=a.findIndex(e=>eo.test(e));if(-1!==n&&a.slice(n+1).some(e=>ea.test(e)))return"pause";i="cli"}return i}let ec=/(?:Invoke-WebRequest|iwr|Invoke-RestMethod|irm)\s+.*\|\s*(?:Invoke-Expression|iex)/i,ed=/^-[a-zA-Z]*f[a-zA-Z]*$/,ep=["--force-with-lease","--force-if-includes"],eu=/\.(?:pem|key)$/,eh=/id_rsa/,em=/credentials/,ef=/git\s+(commit|merge|rebase|cherry-pick)\b/,eg=/\.failproofai(?:\/|\b)/,eb=new Set(["cat","bat","less","more","head","tail","nl","strings","xxd","od","jq","yq","diff","cmp","wc","sort","uniq","column","awk","cut","ls","dir","tree","stat","file","du","df","readlink","realpath","basename","dirname","pwd","test","find","grep","egrep","fgrep","rg","ag","ack","md5sum","sha1sum","sha256sum","shasum","cksum","cd","pushd","popd","cp","rsync","install","tee","sed","true","false",":","echo","printf","[","[[","]","]]","test","read","for","select","case","done","fi","esac"]),ey=new Set(["do","then","else","elif","if","while","until","!"]),ek=/(?:^|[\s(])(?:while|until|for|select)\s/,ew=new Set(["cp","rsync","install"]),ev=new Set(["tee"]),eS=new Set(["uniq","xxd"]),eT={sort:["-o","--output"],tree:["-o","--output"],curl:["-o","--output","--output-dir","-D","--dump-header","--trace","--trace-ascii"]},e$=new Set(["-fprint","-fprint0","-fprintf","-fls"]),e_=new Set(["cat","bat","head","tail","nl","strings","xxd","od","jq","yq","wc","ls","stat","file","du","readlink","realpath","basename","dirname","grep","egrep","fgrep","rg","md5sum","sha1sum","sha256sum","shasum","cksum","echo","printf","true",":"]),eE=new Set(["clean","rm","restore","checkout","reset","stash"]),eP=new Set(["-C","-c","--git-dir","--work-tree","--namespace","--exec-path"]);function eA(e){for(let t=0;t<e.length;t++){let i=e[t];if(eP.has(i)){t++;continue}if(!i.startsWith("-"))return t}return -1}let eB=new Set(["git","gh","glab","echo","printf","curl","code","open"]),eC=new Set(["-exec","-execdir","-ok","-okdir"]),ex=/\|\||&&|[;\n\r&]+/,eW=/\$\{?([A-Za-z_][A-Za-z0-9_]*)\}?/g,eR=[".failproofai","~/.failproofai","$HOME/.failproofai","${HOME}/.failproofai","/root/.failproofai","/home/u/.failproofai","/Users/u/.failproofai"],eN=[".config",".cache",".local",".git",".npm",".ssh",".bashrc","node_modules","dist","build","target","coverage","tmp","src","~/.config","~/.cache","$HOME/.config","${HOME}/.cache","/home/u/.config","/Users/u/.config","/root/.cache","/tmp/build","a","foo.txt","test-failures"];function eI(e){if(!eO.test(e))return!1;for(let t of function(e){let t=[e];for(let i=0;i<24;i++){let i=[],r=!1;for(let e of t){let t=function(e){let t=e.indexOf("{");if(-1===t)return null;let i=0,r=[],o="";for(let a=t;a<e.length;a++){let n=e[a];if("{"===n){if(1==++i)continue}else if("}"===n){if(0==--i)return r.push(o),{start:t,end:a,alternatives:r}}else if(","===n&&1===i){r.push(o),o="";continue}o+=n}return null}(e);if(!t){i.push(e);continue}for(let o of(r=!0,t.alternatives))i.push(e.slice(0,t.start)+o+e.slice(t.end+1))}if(!r)return i;if(i.length>4096)return[eU(e)];t=i}return t.map(eU)}(e))if(function(e){if(eg.test(e))return!0;let t=e.split("/");for(let e=1;e<=t.length;e++)if(function(e){let t;if(!eO.test(e))return!1;let i="^"+function e(t){let i="";for(let r=0;r<t.length;r++){let o=function(t,i){let r=t[i];if(!"?*+@!".includes(r)||"("!==t[i+1])return null;let o=[],a="",n=0,s=i+1;for(;s<t.length;s++){let e=t[s];if("("===e){if(1==++n)continue}else if(")"===e){if(0==--n){o.push(a);break}}else if("|"===e&&1===n){o.push(a),a="";continue}a+=e}if(s>=t.length)return null;if("!"===r)return{source:"[^/]*",end:s};let l=o.map(t=>e(t)).join("|");return{source:`(?:${l})${"?"===r?"?":"*"===r?"*":"+"===r?"+":""}`,end:s}}(t,r);if(o){i+=o.source,r=o.end;continue}let a=t[r];if("*"===a)i+="[^/]*";else if("?"===a)i+="[^/]";else if("["===a){let e=function(e,t){let i=t+1,r=!1;("!"===e[i]||"^"===e[i])&&(r=!0,i++);let o="";for("]"===e[i]&&(o+="]",i++);i<e.length&&"]"!==e[i];){let t="["===e[i]?e[i+1]:void 0;if(":"===t||"."===t||"="===t){let r=e.indexOf(`${t}]`,i+2);if(-1!==r){o+=e.slice(i,r+2),i=r+2;continue}}o+=e[i],i++}if(i>=e.length)return null;if(/\[[.=:]/.test(o))return{source:"[^/]",end:i};let a=o.replace(/[\\\]]/g,"\\$&");return 0===a.length?{source:"[^/]",end:i}:{source:`[${r?"^":""}${a}]`,end:i}}(t,r);if(!e){i+="\\[";continue}i+=e.source,r=e.end}else i+=a.replace(/[.+^${}()|\\\]]/g,"\\$&")}return i}(e);try{t=RegExp(i+"$")}catch{return!1}return!!eR.some(e=>t.test(e))&&!eN.some(e=>t.test(e))}(t.slice(0,e).join("/")))return!0;return!1}(t))return!0;return!1}function eU(e){let t="",i=0;for(let r of e){if("{"===r){0===i&&(t+="*"),i++;continue}if("}"===r){i>0&&i--;continue}0===i&&(t+=r)}return t}let eO=/[*?[{]|[@+!]\(/;function ez(e){let t=[];for(let i=0;i<e.length;i++){if("`"===e[i]){let r=e.indexOf("`",i+1);if(-1===r)break;t.push(e.slice(i+1,r)),i=r;continue}if("$"!==e[i]||"("!==e[i+1])continue;let r=1,o=i+2;for(;o<e.length&&r>0;o++)"("===e[o]?r++:")"===e[o]&&r--;0===r&&t.push(e.slice(i+2,o-1)),i=o-1}return t}let ej=/\d*>{1,2}\|?\s*("[^"]*"|'[^']*'|[^\s;&|<>]+)/g;function eD(e){return e.replace(/^[(){}'"]+|[(){}'"]+$/g,"")}function eL(e){let t=eD(e);return t.slice(t.lastIndexOf("/")+1)}function eG(e,t=0){if(0===t){let t=ez(e);for(let e=0;e<t.length&&e<64;e++){if(eG(t[e],1))return!0;t.push(...ez(t[e]))}}let i=[...e.matchAll(/(?:^|[\s;&|(])(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)=("[^"]*"|'[^']*'|[^\s;&|)]+)/g)].map(([,e,t])=>[e,t.replace(/^["']|["']$/g,"")]),r=new Set;for(let e=0;e<i.length+1;e++){let e=r.size;for(let[e,t]of i)(eg.test(t)||[...t.matchAll(eW)].some(([,e])=>r.has(e)))&&r.add(e);if(r.size===e)break}let o=e=>{if(eg.test(e))return!0;for(let[,t]of e.matchAll(eW))if(r.has(t))return!0;return e.split(/\s+/).some(e=>{var t;let i;return i=(t=e.replace(/^['"]+|['"]+$/g,"")).replace(/^[()]+|[()]+$/g,""),eI(t)||i!==t&&eI(i)})},a=!1,n=0,s=null,l=!1;for(let t of e.split(ex)){if(!t.trim())continue;let e=t.split("|"),i=o(t)||a||l;if(i&&ek.test(t)&&(l=!0),/(?:^|\s)done(?:\s|$)/.test(t)&&(l=!1),i){for(let[,e]of t.matchAll(ej))if(o(e.replace(/^["']|["']$/g,"")))return!0}for(let t of e){n+=(t.match(/\(/g)??[]).length;let e=function(e){let t=e.trim().split(/\s+/).map(eD).filter(Boolean),i=0;for(;i<t.length;){let e=t[i];if(/^\d*(?:>{1,2}\|?|<{1,3})/.test(e)){i+=/^\d*(?:>{1,2}\|?|<{1,3})$/.test(e)?2:1;continue}if(!(en.test(e)||e.startsWith("-")||es.test(e)||ey.has(e)||et.has(eL(e))))break;i++}return t.slice(i)}(t),r=e.length>0?eL(e[0]):"";if("cd"===r||"pushd"===r){let t=e.slice(1).find(e=>!e.startsWith("-"));s=(a=void 0!==t&&o(t))?n:null}else if("popd"===r)a=!1,s=null;else if(i&&e.length>0&&function(e,t){if(0===e.length)return!1;let i=eL(e[0]),r=e.slice(1);if("find"===i)return!!(r.some(e=>"-delete"===e)||r.some(e=>e$.has(e)))||r.some((e,t)=>eC.has(e)&&!e_.has(eL(r[t+1]??"")));if("sed"===i)return!!r.some(e=>e.startsWith("-i")||e.startsWith("--in-place"))||r.some((e,i)=>/(?:^|[;}/\s])w$/.test(e)&&t(r[i+1]??""))||r.some(e=>/(?:^|[;}/\s])w\s*\S*\.failproofai/.test(e));if("awk"===i||"gawk"===i||"mawk"===i)return r.some(e=>/system\s*\(|\|\s*["']|\|&/.test(e));if(ew.has(i)){if(r.includes("--remove-source-files")&&r.some(e=>t(e)))return!0;let e=r.findIndex(e=>"-t"===e||"--target-directory"===e);if(-1!==e&&t(r[e+1]??"")||r.some(e=>e.startsWith("--target-directory=")&&t(e)))return!0;let i=r.filter(e=>!e.startsWith("-")),o=i[i.length-1];return void 0!==o&&t(o)}if(ev.has(i))return r.some(e=>!e.startsWith("-")&&t(e));if(eS.has(i)){let e=r.filter(e=>!e.startsWith("-"));return e.length>1&&t(e[e.length-1])}if("git"===i){let e,t=(e=eA(r))<0?void 0:r[e];return void 0!==t&&eE.has(t)}return!!function(e,t,i){let r=eT[e];if(!r)return!1;for(let e=0;e<t.length;e++){let o=t[e];if(r.find(e=>e.startsWith("--")&&o.startsWith(`${e}=`))&&i(o))return!0;let a=/^-[A-Za-z]*[oD]$/.test(o)&&r.includes(`-${o[o.length-1]}`);if((r.includes(o)||a)&&i(t[e+1]??""))return!0}return!1}(i,r,t)||!(eb.has(i)||eB.has(i))}(e,o))return!0;n-=(t.match(/\)/g)??[]).length,null!==s&&n<s&&(a=!1,s=null)}}return!1}let eq=/(?:npm\s+(?:uninstall|remove|un|r)\s.*failproofai|bun\s+remove\s.*failproofai|yarn\s+global\s+remove\s+failproofai|pnpm\s+(?:remove|uninstall|un)\s.*failproofai)/,eF=/\bgit\s+commit\b.*--amend\b/,eH=/\bgit\s+stash\s+(?:drop|clear)\b/,eZ=/^(?:\/\S*\/)?git$/,eM=/^-[A-Za-z]+$/,eJ=/^clean\.requireforce=(?:false|0|no|off)$/i,eK=["d","x","X"],eY=/\bgit\s+add\s+(?:-A\b|--all\b|\.(?:\s|$|;|&&|\|\|))/,eX=/\bnpm\s+(?:install|i)\b(?=.*(?:\s-g\b|--global\b))/,eQ=/\byarn\s+global\s+add\b/,eV=/\bpnpm\s+(?:add|install|i)\b(?=.*(?:\s-g\b|--global\b))/,e0=/\bbun\s+(?:install|add)\b(?=.*(?:\s-g\b|--global\b))/,e1=/\bcargo\s+install\b/,e3=/\bpip(?:3)?\s+install\b(?=.*(?:--user\b|--break-system-packages\b))/,e2={pip:[/\bpip\b/,/\bpip3\b/,/\bpython3?\s+-m\s+pip\b/],npm:[/\bnpm\b/,/\bnpx\b/],yarn:[/\byarn\b/],pnpm:[/\bpnpm\b/,/\bpnpx\b/],bun:[/\bbun\b/,/\bbunx\b/],uv:[/\buv\b/],poetry:[/\bpoetry\b/],pipenv:[/\bpipenv\b/],conda:[/\bconda\b/],cargo:[/\bcargo\b/]},e8=/\bnohup\s+\S/,e9=/\bscreen\s+-[A-Za-z]*d[A-Za-z]*\b/,e5=/\btmux\s+(?:new-session|new)\b[^|&;]*-d\b/,e4=/\bdisown\b/,e6=/(?<![&|])\s?&\s*(?:$|#|;)/,e7=/(?:^|[;\n]|&&|\|\|?|&)\s*kubectl(?:\s|$)/,te=/(?:^|[;\n]|&&|\|\|?|&)\s*(?:terraform|tofu)(?:\s|$)/,tt=/(?:^|[;\n]|&&|\|\|?|&)\s*aws(?:\s|$)/,ti=/(?:^|[;\n]|&&|\|\|?|&)\s*gcloud(?:\s|$)/,tr=/(?:^|[;\n]|&&|\|\|?|&)\s*az(?:\s|$)/,to=/(?:^|[;\n]|&&|\|\|?|&)\s*helm(?:\s|$)/,ta=/(?:^|[;\n]|&&|\|\|?|&)\s*gh\s+(?:workflow\s+(?:run|enable|disable)|run\s+(?:rerun|cancel)|pr\s+merge|release\s+(?:create|delete)|cache\s+delete|secret\s+(?:set|delete))\b/,tn=new Map;function ts(e){try{let r=function(e){try{return(0,i.statSync)((0,t.join)(e,".git","HEAD")).mtimeMs}catch{return null}}(e),a=tn.get(e);if(a&&null!==r&&a.headMtimeMs===r)return a.branch||null;let n=(0,o.execSync)("git rev-parse --abbrev-ref HEAD",{cwd:e,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3}).trim();return null!==r&&(tn.size>=500&&tn.clear(),tn.set(e,{branch:n,headMtimeMs:r})),n||null}catch{return null}}function tl(e,t){let i=$(e),r=$(t);return!(i.length<r.length||i.some(e=>_.has(e))||i.some(e=>E.test(e)))&&r.every((e,t)=>"*"===e||e===i[t])}let tc=/^-{1,2}c$/;function td(e){return e.split(/&&|\|\||[|;\n]/).map(e=>e.trim()).filter(e=>/^git\s+push\s/.test(e)).map(e=>e.replace(/^git\s+push\s+/,""))}let tp=/^(?:~[A-Za-z0-9_.-]*|\$HOME|\$\{HOME\})(?=$|\/)/,tu=/^(?:\/\S*\/)?rm$/,th=/^(?:\/\S*\/)?find$/,tm=/^-(?:exec|execdir|ok|okdir)$/,tf=/^-(?:[HLP]|D|O\d*)$/,tg=/^(?:-|\\?[(!])/,tb=["/tmp","/var/tmp"];function ty(e){let t=e.match(/^(?:~|\$HOME|\$\{HOME\})(?=$|\/)/);return t?(0,a.homedir)()+e.slice(t[0].length):e}function tk(e){return e.replace(/\/\*$/,"").replace(/\/+$/,"")}function tw(e){let t=e.replace(/^['"]|['"]$/g,"");if(""===t)return!1;let i=t.match(tp);if(!i&&/^[$`]/.test(t))return!0;let r=i?t.slice(i[0].length):t.startsWith("/")?t:null;if(null===r)return!1;let o=tk(r).split("/").filter(Boolean);return!(!i&&tb.some(e=>`/${o.join("/")}`.startsWith(`${e}/`)))&&o.length<=2}function tv(e){let t=$(e),i=t.findIndex(e=>th.test(e));if(i>=0){let e=t.slice(i+1),r=e.findIndex(e=>tm.test(e));if(e.includes("-delete")||r>=0&&tu.test(e[r+1]??"")){let t=0;for(;t<e.length&&tf.test(e[t]);)t+="-D"===e[t]?2:1;let i=e.slice(t),r=i.findIndex(e=>tg.test(e));return r<0?i:i.slice(0,r)}}let r=t.findIndex(e=>tu.test(e));if(r>=0){let e=t.slice(r+1),i=e.filter(e=>/^-[^-]/.test(e)).join(""),o=e.filter(e=>/^--/.test(e)),a=/r/i.test(i)||o.some(e=>/^--recursive$/i.test(e)),n=/f/.test(i)||o.some(e=>/^--force$/i.test(e));if(a&&n)return e.filter(e=>!e.startsWith("-"))}return null}function tS(e){return e.split(/&&|\|\||[|;\n]/).map(e=>e.trim()).filter(e=>""!==e)}let tT=/(?:^|;|&&|\|\||\|)\s*(?:ls|find|cat|head|tail|less|more|wc|file|stat|tree|du)\s/;function t$(e,t,i){if("Bash"!==e.toolName)return s();let r=S(e);return!t.test(r)||(e.params?.allowPatterns??[]).some(e=>tl(r,e))?s():l(i)}let t_=/\s*(?:&&|\|\||\||;)\s*/;function tE(e){return e.session?.permissionMode==="plan"}let tP={"sanitize-jwt":function(e){let t=JSON.stringify(e.payload);return P.test(t)?{decision:"deny",reason:"JWT token detected in tool output",message:"[REDACTED: JWT token removed by failproofai]"}:s()},"sanitize-api-keys":function(e){let t=JSON.stringify(e.payload);for(let[e,i]of A)if(e.test(t))return{decision:"deny",reason:`${i} detected in tool output`,message:`[REDACTED: ${i} removed by failproofai]`};for(let{regex:i,label:r}of e.params?.additionalPatterns??[])try{if(new RegExp(i).test(t))return{decision:"deny",reason:`${r} detected in tool output`,message:`[REDACTED: ${r} removed by failproofai]`}}catch{(0,k.g)(`additionalPatterns: invalid regex "${i}", skipping`)}return s()},"sanitize-connection-strings":function(e){let t=JSON.stringify(e.payload);return B.test(t)?{decision:"deny",reason:"Database connection string with credentials detected in tool output",message:"[REDACTED: connection string removed by failproofai]"}:s()},"sanitize-private-key-content":function(e){let t=JSON.stringify(e.payload);return C.test(t)?{decision:"deny",reason:"Private key content detected in tool output",message:"[REDACTED: private key content removed by failproofai]"}:s()},"sanitize-bearer-tokens":function(e){let t=JSON.stringify(e.payload);return x.test(t)?{decision:"deny",reason:"Bearer token detected in tool output",message:"[REDACTED: Bearer token removed by failproofai]"}:s()},"protect-env-vars":function(e){if("Bash"!==e.toolName)return s();let t=S(e);return j.test(t)?l("Command reads environment variables"):D.test(t)?l("Command echoes environment variable"):L.test(t)?l("Command exports environment variable"):G.test(t)||q.test(t)&&F.test(t)?l("Command dumps environment variables"):H.test(t)?l("Command reads environment variable via PowerShell"):Z.test(t)?l("Command reads environment variables via PowerShell"):M.test(t)?l("Command reads environment variable via .NET"):J.test(t)?l("Command echoes environment variable via cmd"):s()},"block-env-files":function(e){let t=S(e),i=T(e);return i&&K.test(i)?l("Access to .env file blocked"):"Bash"===e.toolName&&Y.test(t)?l("Command references .env file"):s()},"block-read-outside-cwd":function(e){let i=process.env.CLAUDE_PROJECT_DIR||e.session?.cwd;if(!i)return s();let r=e.params?.allowPaths??[];if("Bash"===e.toolName){let o=S(e);if(!tT.test(o))return s();let n=function(e){let i,r=[],o=/(?<![a-zA-Z0-9_.\-~\\*?:=/])(?:~\/[^\s;|&"'()\[\]{}]*|~(?=\s|$|[;|&"'()\[\]{}])|\/[^\s;|&"'()\[\]{}]*)/g;function n(e){let i;for(o.lastIndex=0;null!==(i=o.exec(e));){let o=i[0];if(/^\/{2,}$/.test(o)){let t=e.lastIndexOf("\n",i.index-1);if(-1!==t&&"\\"!==e[t-1]&&/^[ \t]*$/.test(e.slice(t+1,i.index)))continue}"~"===o?o=(0,a.homedir)():o.startsWith("~/")&&(o=(0,t.join)((0,a.homedir)(),o.slice(2))),r.push(o)}}let s=e.length,l=!1,c=!1;for(let t=0;t<e.length;t++){let i=e[t];if('"'!==i||c)if("'"!==i||l){if("|"===i&&!l&&!c){s=t;break}}else c=!c;else l=!l}let d=e.slice(0,s),p=/"([^"]*)"|'([^']*)'/g;for(;null!==(i=p.exec(d));){let e=i[1]??i[2]??"";/[*?\[\]^$+()\\]/.test(e)||n(e)}return n(e.replace(/"[^"]*"/g,e=>" ".repeat(e.length)).replace(/'[^']*'/g,e=>" ".repeat(e.length))),r}(o),c=i.endsWith("/")?i:i+"/";for(let e of n){let o=(0,t.resolve)(i,e);if(v(o))return l(`Reading agent settings file blocked: ${o}`);if(!w(o)&&"/dev/null"!==o&&o!==i&&!o.startsWith(c)){if(r.some(e=>o===e||o.startsWith(e.endsWith("/")?e:e+"/")))continue;return l(`Bash read outside project directory blocked: ${o}`)}}return s()}let o=T(e),n=e.toolInput?.path??"",c=o||n;if(!c)return s();let d=(0,t.resolve)(i,c);if(v(d))return l(`Reading agent settings file blocked: ${d}`);if(w(d)||"/dev/null"===d)return s();let p=i.endsWith("/")?i:i+"/";return d===i||d.startsWith(p)?s():r.some(e=>d===e||d.startsWith(e.endsWith("/")?e:e+"/"))?s():l(`Access outside project directory blocked: ${d}`)},"block-sudo":function(e){if("Bash"!==e.toolName)return s();let t=S(e).trimStart();return function e(t,i=0){for(let r of function(e){let t=[],i=[],r="",o=null,a=()=>{r&&i.push(r),r=""},n=()=>{a(),i.length&&t.push(i),i=[]};for(let t=0;t<e.length;t++){let i=e[t];if(o){if("\\"===i&&'"'===o&&t+1<e.length){r+=e[++t];continue}if(i===o){o=null;continue}r+=i;continue}if("\\"===i&&t+1<e.length){r+=e[++t];continue}if('"'===i||"'"===i){o=i;continue}if(/\s/.test(i)){a();continue}if(/[;&|\n\r(){}`]/.test(i)){n();continue}r+=i}return n(),t}(t)){let t=0;for(;t<r.length;){let o=r[t],a=o.slice(o.lastIndexOf("/")+1);if("sudo"===a||"doas"===a)return!0;if(!(en.test(o)||o.startsWith("-")||o.startsWith(">")||o.startsWith("<")||es.test(o)||et.has(a)))break;if(tc.test(o)&&i<3&&t+1<r.length&&e(r[t+1],i+1))return!0;t++}}return!1}(t)?(e.params?.allowPatterns??[]).some(e=>tl(t,e))?s():l("sudo commands are blocked"):X.test(t)?l("Elevated process launch is blocked"):Q.test(t)?l("runas elevation is blocked"):s()},"block-curl-pipe-sh":function(e){if("Bash"!==e.toolName)return s();let t=S(e);return V.test(t)?l("Piping downloads to shell is blocked"):ec.test(t)?l("Piping downloads to Invoke-Expression is blocked"):s()},"block-rm-rf":function(e){if("Bash"!==e.toolName)return s();let t=S(e);return tS(t).some(e=>{let t=tv(e);return null!==t&&t.some(tw)})?!function(e,t){if(0===t.length)return!1;let i=t.map(e=>tk(ty(e))||"/"),r=!1;for(let o of tS(e)){let e=tv(o);if(null!==e)for(let a of(r=!0,e)){let e=tk(ty(a))||"/";if(!i.some(t=>e===t||e.startsWith(t+"/"))&&!t.some(e=>{let t=e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");return RegExp(`${t}(?:[/"'\\s/*]|$)`).test(o)}))return!1}}return r}(t,e.params?.allowPaths??[])?l("Catastrophic deletion blocked"):s():/Remove-Item\s+.*-Recurse.*-Force.*(?:[A-Z]:\\(?:\s|$)|\\\*)/i.test(t)||/(?:rd|rmdir)\s+\/s\s+\/q\s+[A-Z]:\\/i.test(t)?l("Catastrophic deletion blocked"):s()},"block-failproofai-commands":function(e){if("Write"===e.toolName||"Edit"===e.toolName||"NotebookEdit"===e.toolName){let t=T(e)||(e.toolInput?.notebook_path??"");return eg.test(t)?l("Writing to failproofai's own state would switch enforcement off. If a policy is blocking legitimate work, say so and let the operator decide."):s()}if("Bash"!==e.toolName)return s();let t=S(e),i=t.replace(/\\\r?\n/g,"").replace(/\$'((?:[^'\\]|\\.)*)'/g,(e,t)=>t.replace(/\\(x[0-9A-Fa-f]{1,2}|u[0-9A-Fa-f]{1,4}|U[0-9A-Fa-f]{1,8}|[0-7]{1,3}|.)/g,(e,t)=>{try{if("x"===t[0])return String.fromCharCode(parseInt(t.slice(1),16));if("u"===t[0]||"U"===t[0])return String.fromCodePoint(parseInt(t.slice(1),16));if(/^[0-7]+$/.test(t))return String.fromCharCode(parseInt(t,8))}catch{return t}return({a:"\x07",b:"\b",e:"\x1b",f:"\f",n:"\n",r:"\r",t:"	",v:"\v","\\":"\\","'":"'",'"':'"',"?":"?"})[t]??t})).replace(/\\(.)/g,"$1").replace(/['"]/g,""),r=el(t)??el(i);return"pause"===r?l("Pausing failproofai enforcement is a human action, not an agent one. If a policy is blocking legitimate work, say so and let the operator decide."):"cli"===r?l("Running failproofai CLI commands is blocked"):eq.test(t)||eq.test(i)?l("Uninstalling failproofai is blocked"):eG(t)||eG(i)?l("Deleting, moving or overwriting failproofai's own state would switch enforcement off. If a policy is blocking legitimate work, say so and let the operator decide."):s()},"block-kubectl":function(e){return t$(e,e7,"kubectl commands are blocked")},"block-terraform":function(e){return t$(e,te,"terraform/tofu commands are blocked")},"block-aws-cli":function(e){return t$(e,tt,"aws CLI commands are blocked")},"block-gcloud":function(e){return t$(e,ti,"gcloud commands are blocked")},"block-az-cli":function(e){return t$(e,tr,"az (Azure) CLI commands are blocked")},"block-helm":function(e){return t$(e,to,"helm commands are blocked")},"block-gh-pipeline":function(e){return t$(e,ta,"gh pipeline-trigger commands are blocked")},"block-secrets-write":function(e){if("Write"!==e.toolName)return s();let t=T(e);if(eu.test(t)||eh.test(t)||em.test(t))return l("Writing secret key files is blocked");for(let i of e.params?.additionalPatterns??[])if(t.includes(i))return l(`Writing blocked file pattern: ${i}`);return s()},"block-push-master":function(e){if("Bash"!==e.toolName)return s();let t=e.params?.protectedBranches??["main","master"];if(0===t.length)return s();let i=td(S(e)),r=RegExp(`\\b(?:${t.map(e=>e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")).join("|")})\\b`);return i.some(e=>r.test(e))?l(`Pushing to ${t.join("/")} is blocked`):s()},"block-force-push":function(e){if("Bash"!==e.toolName)return s();for(let t of td(S(e))){let e=!1;for(let i of t.split(/\s+/)){if("--"===i){e=!0;continue}if(!e&&function(e){return"--force"===e||!ep.some(t=>e.startsWith(t))&&(!!e.startsWith("--force")||ed.test(e))}(i))return l("Force-pushing is blocked")}}return s()},"block-work-on-main":function(e){if("Bash"!==e.toolName)return s();let t=S(e).match(ef);if(!t)return s();let i=e.session?.cwd;if(!i)return s();let r=ts(i);return r&&(e.params?.protectedBranches??["main","master"]).includes(r)?l(`Git ${t[1]} on ${r} is blocked. Create a feature branch first.`):s()},"warn-git-amend":function(e){if("Bash"!==e.toolName)return s();let t=S(e);return eF.test(t)?c("STOP: This command amends the last commit, which rewrites git history. If this commit has already been pushed to a shared branch, this will cause divergence for other contributors. Confirm with the user before executing."):s()},"warn-git-stash-drop":function(e){if("Bash"!==e.toolName)return s();let t=S(e);return eH.test(t)?c("STOP: This command permanently deletes stashed changes (git stash drop/clear). Stash entries cannot be recovered after deletion. Confirm with the user before executing."):s()},"warn-git-clean":function(e){if("Bash"!==e.toolName)return s();let t=e.params?.destructiveFlags??eK;if(0===t.length)return s();for(let i of tS(S(e))){let e=$(i),r=e.findIndex(e=>eZ.test(e));if(r<0)continue;let o=e.slice(r+1),a=eA(o);if(a<0||"clean"!==o[a])continue;let n=function(e){let t=new Set,i=!1,r=!1,o=!1;for(let a of e){if("--"===a){o=!0;continue}if(!o){if("--force"===a){i=!0;continue}if("--dry-run"===a){r=!0;continue}if(!a.startsWith("--")&&eM.test(a))for(let e of a.slice(1))"f"===e&&(i=!0),"n"===e&&(r=!0),t.add(e)}}return i&&t.add("f"),{force:i,dryRun:r,letters:t}}(o.slice(a+1));if(!n.dryRun&&(n.force||function(e){for(let t=0;t<e.length;t++){let i=e[t],r="-c"===i?e[t+1]:i.startsWith("-c")?i.slice(2):void 0;if(void 0!==r&&eJ.test(r))return!0}return!1}(o.slice(0,a)))&&t.some(e=>n.letters.has(e)))return c("STOP: This command deletes untracked files from the working tree (git clean). Git has no copy of untracked or ignored files, so nothing it removes can be recovered: -d takes whole untracked directories, and -x / -X also take .gitignore'd files such as .env, local config and scratch work. Re-run it with --dry-run and confirm the exact paths with the user before executing.")}return s()},"warn-all-files-staged":function(e){if("Bash"!==e.toolName)return s();let t=S(e);return eY.test(t)?c("STOP: This command stages all files in the working tree (git add -A / --all / .). This may inadvertently include build artifacts, generated files, or sensitive files not covered by .gitignore. Confirm with the user before executing."):s()},"warn-destructive-sql":function(e){if("Bash"!==e.toolName)return s();let t=S(e);return R.test(t)&&(N.test(t)||I.test(t)&&!U.test(t))?c("STOP: This command contains destructive SQL (DROP/TRUNCATE/DELETE). Confirm with the user before executing."):s()},"warn-schema-alteration":function(e){if("Bash"!==e.toolName)return s();let t=S(e);return R.test(t)&&O.test(t)?c("STOP: This command contains a schema-altering SQL statement (ALTER TABLE with column or rename operation). Schema changes on production databases are irreversible or disruptive. Confirm with the user before executing."):s()},"warn-package-publish":function(e){if("Bash"!==e.toolName)return s();let t=S(e);return z.test(t)?c("STOP: This command publishes a package to a public registry. Confirm with the user that this is intentional."):s()},"warn-global-package-install":function(e){if("Bash"!==e.toolName)return s();let t=S(e);return eX.test(t)||eQ.test(t)||eV.test(t)||e0.test(t)||e1.test(t)||e3.test(t)?c("STOP: This command installs a package globally, which modifies the system-wide environment outside the project. This can conflict with other projects or system tools. Confirm with the user before executing."):s()},"prefer-package-manager":function(e){if("Bash"!==e.toolName)return s();let t=S(e);if(!t)return s();let i=e.params?.allowed??[];if(0===i.length)return s();let r=new Set(i.map(e=>e.toLowerCase())),o=e.params?.blocked??[],a=i.join(", ");for(let e of t.split(t_)){let t=e.trim();if(!t)continue;let i=!1;for(let e of r){let r=e2[e];if(r){for(let e of r)if(e.test(t)){i=!0;break}if(i)break}}if(!i){for(let[e,i]of Object.entries(e2))if(!r.has(e)){for(let r of i)if(r.test(t))return l(`"${e}" is not an allowed package manager. Allowed package managers for this project: ${a}. Rewrite this command using an allowed package manager.`)}for(let e of o){let i=e.toLowerCase();if(!r.has(i)&&RegExp(`\\b${i.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}\\b`).test(t))return l(`"${i}" is not an allowed package manager. Allowed package managers for this project: ${a}. Rewrite this command using an allowed package manager.`)}}}return s()},"warn-large-file-write":function(e){if("Write"!==e.toolName)return s();let t=e.toolInput?.content;if("string"!=typeof t)return s();let i=e.params?.thresholdKb??1024;return t.length>1024*i?c(`STOP: You are writing a file larger than ${i}KB (${Math.round(t.length/1024)}KB). This is unusually large. Confirm this is intentional before proceeding.`):s()},"warn-background-process":function(e){if("Bash"!==e.toolName)return s();let t=S(e);return e8.test(t)||e9.test(t)||e5.test(t)||e4.test(t)||e6.test(t)?c("STOP: This command starts a background or detached process (nohup, screen -d, tmux -d, or trailing &). Background processes persist after Claude's session and may be difficult to track or stop. Confirm with the user before executing."):s()},"warn-repeated-tool-calls":async function e(e){let t=e.session?.transcriptPath;if(!t||!e.toolName||!e.toolInput)return s();let i=`${t}.tool-calls.json`,o=JSON.stringify({tool:e.toolName,input:e.toolInput}),a={};try{let e=await (0,r.readFile)(i,"utf8");a=JSON.parse(e)}catch{}let n=a[o]??0;if(n>=3)return c(`STOP: You have already called ${e.toolName} ${n} times with identical parameters. This is wasteful and unproductive. Do NOT repeat this call — use a different approach or ask the user for clarification.`);a[o]=n+1;try{let e=JSON.stringify(a);e.length<=65536&&await (0,r.writeFile)(i,e,"utf8")}catch{}return s()},"require-commit-before-stop":function(e){if(tE(e))return s("Plan mode — no changes made, skipping commit check.");let t=e.session?.cwd;if(!t)return s("No working directory available, skipping commit check.");try{if((0,o.execSync)("git status --porcelain",{cwd:t,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim().length>0)return l("You have uncommitted changes in the working directory. Commit all changes now.");return s("All changes are committed.")}catch{return s("Not a git repository, skipping commit check.")}},"require-push-before-stop":function(e){if(tE(e))return s("Plan mode — no changes made, skipping push check.");let t=e.session?.cwd;if(!t)return s("No working directory available, skipping push check.");try{if(!(0,o.execSync)("git remote",{cwd:t,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3}).trim())return s("No git remote configured, skipping push check.");let i=e.params?.remote??"origin",r=ts(t);if(!r||"HEAD"===r)return s("Detached HEAD, skipping push check.");let a=e.params?.baseBranch??"main";if(r===a)return s(`On base branch "${a}", skipping push check.`);try{if(!(0,o.execFileSync)("git",["log",`${i}/${a}..HEAD`,"--oneline"],{cwd:t,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim())return s(`No commits ahead of ${i}/${a}, skipping push check.`);if(!(0,o.execFileSync)("git",["diff","--stat",`${i}/${a}`,"HEAD"],{cwd:t,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim())return s(`No file changes compared to ${i}/${a}, skipping push check.`)}catch{}let n=!1;try{(0,o.execFileSync)("git",["rev-parse","--verify",`${i}/${r}`],{cwd:t,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3}),n=!0}catch{}if(!n)return l(`Branch "${r}" has not been pushed to remote "${i}". Run now: git push -u ${i} ${r}`);let c=(0,o.execFileSync)("git",["log",`${i}/${r}..HEAD`,"--oneline"],{cwd:t,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim();if(c.length>0){let e=c.split("\n").length;return l(`You have ${e} unpushed commit${e>1?"s":""} on branch "${r}". Run now: git push`)}return s(`All commits pushed to "${i}".`)}catch{return s("Could not check push status, skipping.")}},"require-pr-before-stop":function(e){if(tE(e))return s("Plan mode — no changes made, skipping PR check.");let t=e.session?.cwd;if(!t)return s("No working directory available, skipping PR check.");try{let i;try{(0,o.execSync)("gh --version",{cwd:t,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3})}catch{return s("GitHub CLI (gh) not installed, skipping PR check.")}let r=ts(t);if(!r||"HEAD"===r)return s("Detached HEAD, skipping PR check.");let a=e.params?.baseBranch??"main";if(r===a)return s(`On base branch "${a}", skipping PR check.`);try{if(!(0,o.execFileSync)("git",["log",`origin/${a}..HEAD`,"--oneline"],{cwd:t,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim())return s(`No commits ahead of origin/${a}, skipping PR check.`);if(!(0,o.execFileSync)("git",["diff","--stat",`origin/${a}`,"HEAD"],{cwd:t,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim())return s(`No file changes compared to origin/${a}, skipping PR check.`)}catch{}try{i=(0,o.execSync)("gh pr view --json number,url,state",{cwd:t,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:15e3}).trim()}catch{return l(`No pull request found for branch "${r}". Run now: gh pr create`)}let n=JSON.parse(i);if("OPEN"===n.state)return s(`PR #${n.number} exists: ${n.url}`);if("MERGED"===n.state)return s(`PR #${n.number} was merged: ${n.url}. Switch off this branch (e.g. 'git checkout ${a} && git pull') before stopping again.`);return l(`Pull request for branch "${r}" is ${n.state.toLowerCase()}. Run now: gh pr create`)}catch{return s("Could not check PR status, skipping.")}},"require-no-conflicts-before-stop":function(e){let t,i;if(tE(e))return s("Plan mode — no changes made, skipping conflict check.");let r=e.session?.cwd;if(!r)return s("No working directory available, skipping conflict check.");let a=ts(r);if(!a||"HEAD"===a)return s("Detached HEAD, skipping conflict check.");let n=e.params?.baseBranch??"main";if(a===n)return s(`On base branch "${n}", skipping conflict check.`);try{(0,o.execSync)("gh --version",{cwd:r,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3})}catch{return s("gh CLI not installed, skipping conflict check.")}try{t=(0,o.execSync)("gh pr view --json mergeable,number,url,state",{cwd:r,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:15e3}).trim()}catch{return s("No pull request found for branch, skipping conflict check.")}try{i=JSON.parse(t)}catch{return s("Could not parse gh pr view output, skipping conflict check.")}if("OPEN"!==i.state)return s(`PR #${i.number} is ${i.state.toLowerCase()}; skipping conflict check.`);try{(0,o.execFileSync)("git",["rev-parse","--verify",`origin/${n}`],{cwd:r,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3}),(0,o.execFileSync)("git",["log",`origin/${n}..HEAD`,"--oneline"],{cwd:r,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:5e3}).trim()&&(0,o.execFileSync)("git",["merge-tree","--write-tree","--name-only",`origin/${n}`,"HEAD"],{cwd:r,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:1e4})}catch(e){if(1===e.status){let t=("string"==typeof e.stdout?e.stdout:e.stdout?.toString("utf8")??"").trim().split("\n"),i=[];for(let e=1;e<t.length;e++){let r=t[e];if(""===r)break;i.push(r)}let r=i.length?i.join(", "):"one or more files";return l(`Branch "${a}" has merge conflicts with ${n} in: ${r}. Rebase or merge origin/${n} now and resolve the conflicts.`)}}return"CONFLICTING"===i.mergeable?l(`PR #${i.number} has merge conflicts per GitHub (${i.url}). Rebase or merge origin/${n} now and resolve the conflicts.`):"UNKNOWN"===i.mergeable?l(`GitHub is still computing mergeability for PR #${i.number} (${i.url}). Wait ~10 seconds, then re-check with \`gh pr view --json mergeable\` before attempting to stop again.`):s(`PR #${i.number} merges cleanly per GitHub.`)},"require-ci-green-before-stop":function(e){if(tE(e))return s("Plan mode — no changes made, skipping CI check.");let t=e.session?.cwd;if(!t)return s("No working directory available, skipping CI check.");try{try{(0,o.execSync)("gh --version",{cwd:t,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3})}catch{return s("GitHub CLI (gh) not installed, skipping CI check.")}let e=ts(t);if(!e||"HEAD"===e)return s("Detached HEAD, skipping CI check.");let i=function(e){try{return(0,o.execSync)("git rev-parse HEAD",{cwd:e,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:3e3}).trim()||null}catch{return null}}(t),r=[];try{let a=(0,o.execFileSync)("gh",["run","list","--branch",e,"--limit","20","--json","status,conclusion,name,headSha"],{cwd:t,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:15e3}).trim();if(a&&"[]"!==a){let e=JSON.parse(a),t=i?e.filter(e=>e.headSha===i):e,o=new Set;r=t.filter(e=>!o.has(e.name)&&(o.add(e.name),!0))}}catch{}let a=[],n=[];i&&(a=function(e,t){try{let i=(0,o.execFileSync)("gh",["api",`repos/{owner}/{repo}/commits/${t}/check-runs`,"--jq",'.check_runs | map(select(.app.slug != "github-actions")) | map({name: .name, status: .status, conclusion: (.conclusion // "")})'],{cwd:e,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:15e3}).trim();if(!i||"[]"===i)return[];return JSON.parse(i)}catch{return[]}}(t,i),n=function(e,t){try{let i=(0,o.execFileSync)("gh",["api",`repos/{owner}/{repo}/commits/${t}/statuses`,"--jq","map({name: .context, state: .state}) | unique_by(.name)"],{cwd:e,encoding:"utf8",stdio:["pipe","pipe","pipe"],timeout:15e3}).trim();if(!i||"[]"===i)return[];return JSON.parse(i).map(e=>({name:e.name,status:"pending"===e.state?"in_progress":"completed",conclusion:"pending"===e.state?"":"success"===e.state?"success":"failure"}))}catch{return[]}}(t,i));let c=[...r,...a,...n];if(0===c.length)return s(`No CI runs found for branch "${e}".`);let d=c.filter(e=>"completed"===e.status&&"success"!==e.conclusion&&"skipped"!==e.conclusion&&"cancelled"!==e.conclusion&&"neutral"!==e.conclusion);if(d.length>0){let t=d.map(e=>`"${e.name}"`).join(", ");return l(`CI checks are failing on branch "${e}": ${t}. Fix the failing checks now.`)}let p=c.filter(e=>"in_progress"===e.status||"queued"===e.status||"waiting"===e.status);if(p.length>0){let t=p.map(e=>`"${e.name}"`).join(", ");return l(`CI checks are still running on branch "${e}": ${t}. Wait for all checks to complete, then verify they pass.`)}return s(`All CI checks passed on branch "${e}".`)}catch{return s("Could not check CI status, skipping.")}}},tA=new Set(Object.keys(tP)),tB=n.filter(e=>!tA.has(e.name)).map(e=>e.name);if(tB.length>0)throw Error(`failproofai: builtin policies missing an implementation: ${tB.join(", ")}`);let tC=new Set(n.map(e=>e.name)),tx=[...tA].filter(e=>!tC.has(e));if(tx.length>0)throw Error(`failproofai: policy implementations with no catalog entry: ${tx.join(", ")}`);let tW=n.map(e=>({...e,fn:tP[e.name]}));e.s(["H",0,tW,"G",0,W,"k",0,function(e){let t=new Set(e.map(f));for(let e of tW)(e.alwaysOn||t.has(f(e.name)))&&y(e.name,e.description,e.fn,e.match,0,e.params,{authority:e.authority,reviewedBy:e.reviewedBy,alwaysOn:e.alwaysOn})}],73634)},71194,e=>{e.i(66680),e.i(2157),e.i(50227),e.i(52306),e.i(16774),e.s(["w",0,"FailproofAI/policies","U",0,"SHA256SUMS","Z",0,"failproofai-pack.mjs","v",0,"failproofai-pack.json"])},38441,e=>{let t=["SessionStart","SessionEnd","UserPromptSubmit","PreToolUse","PermissionRequest","PermissionDenied","PostToolUse","PostToolUseFailure","Notification","SubagentStart","SubagentStop","TaskCreated","TaskCompleted","Stop","StopFailure","TeammateIdle","InstructionsLoaded","ConfigChange","CwdChanged","FileChanged","WorktreeCreate","WorktreeRemove","PreCompact","PostCompact","Elicitation","ElicitationResult","UserPromptExpansion","PostToolBatch","Setup"].filter(e=>"WorktreeCreate"!==e);e.s(["X",0,["PreToolUse","PostToolUse","PreInvocation","Stop"],"m",0,["user","project"],"H",0,{Bash:{CommandLine:"command",Cwd:"cwd"},Write:{TargetFile:"file_path",CodeContent:"content"},Edit:{TargetFile:"file_path"},Read:{TargetFile:"file_path",AbsolutePath:"file_path",File:"file_path"}},"I",0,{run_command:"Bash",write_to_file:"Write",read_file:"Read",view_file:"Read",edit_file:"Edit",replace_file_content:"Edit",list_dir:"LS",find_by_name:"Glob",grep_search:"Grep",read_url_content:"WebFetch",search_web:"WebSearch"},"J",0,t,"p",0,{session_start:"SessionStart",pre_tool_use:"PreToolUse",permission_request:"PermissionRequest",post_tool_use:"PostToolUse",user_prompt_submit:"UserPromptSubmit",stop:"Stop",subagent_start:"SubagentStart",pre_compact:"PreCompact",post_compact:"PostCompact",subagent_stop:"SubagentStop"},"W",0,["session_start","pre_tool_use","permission_request","post_tool_use","user_prompt_submit","stop","subagent_start","pre_compact","post_compact","subagent_stop"],"L",0,["user","project"],"j",0,{apply_patch:"Edit",write_stdin:"Bash"},"d",0,["SessionStart","SessionEnd","UserPromptSubmit","PreToolUse","PostToolUse","Stop","SubagentStop","PostToolUseFailure","ErrorOccurred","PreCompact","PermissionRequest","Notification"],"w",0,["user","project"],"U",0,{Read:{path:"file_path"},Write:{path:"file_path",file_text:"content"},Edit:{path:"file_path",old_str:"old_string",new_str:"new_string"}},"s",0,{bash:"Bash",powershell:"Bash",list_bash:"Bash",read_bash:"Bash",stop_bash:"Bash",write_bash:"Bash",list_powershell:"Bash",read_powershell:"Bash",stop_powershell:"Bash",write_powershell:"Bash",read:"Read",view:"Read",show_file:"Read",write:"Write",create:"Write",edit:"Edit",apply_patch:"Edit",str_replace_editor:"Edit",glob:"Glob",grep:"Grep",rg:"Grep",ls:"LS",web_fetch:"WebFetch"},"t",0,["sessionStart","sessionEnd","beforeSubmitPrompt","preToolUse","postToolUse","stop","subagentStop"],"Y",0,["user","project"],"D",0,{Shell:"Bash"},"E",0,["SessionStart","UserPromptSubmit","PreToolUse","PostToolUse","PermissionRequest","Stop","SessionEnd"],"c",0,["user","project"],"u",0,{exec:"Bash"},"n",0,["SessionStart","UserPromptSubmit","PreToolUse","PostToolUse","Notification","Stop","SubagentStop","PreCompact","SessionEnd"],"B",0,["user","project"],"r",0,{Execute:"Bash",Read:"Read",Edit:"Edit",Create:"Write",Grep:"Grep",Glob:"Glob",LS:"LS",FetchUrl:"WebFetch",WebSearch:"WebSearch",TodoWrite:"TodoWrite",Task:"Task"},"Z",0,"__failproofai_hook__","i",0,["SessionStart","UserPromptSubmit","PreToolUse","PostToolUse","SessionEnd"],"x",0,["user","project"],"M",0,{Read:{path:"file_path",source:"file_path"},Write:{path:"file_path"},Edit:{path:"file_path"},LS:{path:"file_path"}},"K",0,{shell:"Bash",write:"Write",edit:"Edit",view:"Read",read_image:"Read",glob:"Glob",grep:"Grep",tree:"LS",delegate:"Task",todo__todo_write:"TodoWrite"},"y",0,["pre_tool_call","post_tool_call","on_session_start","on_session_end","subagent_stop"],"N",0,["user"],"z",0,{Read:{path:"file_path"},Write:{path:"file_path"},Edit:{path:"file_path"}},"C",0,{terminal:"Bash",bash:"Bash",read_file:"Read",write_file:"Write",patch:"Edit",web_search:"WebSearch",web_extract:"WebFetch",search_files:"Grep",todo:"TodoWrite",todo_list:"TodoWrite",process_manage:"process",cronjob_manage:"cronjob"},"F",0,["user","project","local"],"_",0,["claude","codex","copilot","cursor","opencode","pi","hermes","openclaw","factory","devin","antigravity","goose"],"P",0,["before_tool_call","after_tool_call","before_agent_run","before_agent_finalize","session_start","session_end","subagent_ended","before_compaction"],"G",0,["user"],"v",0,{Read:{path:"file_path"},Write:{path:"file_path"},Edit:{path:"file_path"}},"e",0,{exec:"Bash",read:"Read",write:"Write",edit:"Edit",grep:"Grep",glob:"Glob",web_search:"WebSearch",web_fetch:"WebFetch"},"f",0,["tool.execute.before","tool.execute.after","session.created","session.deleted","session.idle","message.updated","permission.ask"],"O",0,["user","project"],"k",0,{Read:{filePath:"file_path"},Write:{filePath:"file_path"},Edit:{filePath:"file_path",oldString:"old_string",newString:"new_string",replaceAll:"replace_all"}},"A",0,{bash:"Bash",read:"Read",write:"Write",edit:"Edit",apply_patch:"Edit",glob:"Glob",grep:"Grep",list:"LS",webfetch:"WebFetch",websearch:"WebSearch",todowrite:"TodoWrite",todoread:"TodoRead"},"Q",0,["session_start","session_shutdown","input","tool_call","user_bash","tool_result","agent_end"],"R",0,["user","project"],"V",0,{Read:{path:"file_path"},Write:{path:"file_path"},Edit:{path:"file_path"}},"S",0,{bash:"Bash",read:"Read",write:"Write",edit:"Edit",glob:"Glob",grep:"Grep"}])}]})();
+
+//# sourceMappingURL=src_hooks_1eem5a7cyqlb2._.js.map

package/.next/standalone/.next/server/chunks/src_hooks_custom-hooks-loader_ts_0lnb3n3h94wnn._.js

@@ -0,0 +1,12 @@
+module.exports=[90521,e=>{"use strict";var t=e.i(50227),i=e.i(54799),o=e.i(2157),r=e.i(12714),s=e.i(57764),a=e.i(66680),n=e.i(97348);let l="__failproofai_custom_hooks__",c="__failproofai_semantic_policies__";function u(){let e=globalThis;return Array.isArray(e[l])||(e[l]=[]),e[l]}let f={add(e){u().push(e)}};function d(){let e;return Array.isArray((e=globalThis)[c])||(e[c]=[]),e[c]}var p=e.i(24868),m=e.i(46786),h=e.i(14747),_=e.i(92509),g=e.i(79857);let w=".__failproofai_tmp__.mjs",y=/(?:import\s+(?:[\s\S]*?\s+from\s+)?|export\s+(?:[\s\S]*?\s+from\s+))(['"])(\.\.?\/[^'"]+)\1/g,$=/require\s*\(\s*(['"])(\.\.?\/[^'"]+)\1\s*\)/g;async function x(e){try{return await (0,p.access)(e),!0}catch{return!1}}async function j(){let e=process.env.FAILPROOFAI_DIST_PATH;if(e){let t=(0,h.resolve)(e,"index.js");if(await x(t))return t}for(let e of[(0,h.resolve)((0,h.dirname)(process.execPath),"..","assets","dist","index.js"),(0,h.resolve)(process.cwd(),"dist","index.js"),(0,h.resolve)(process.cwd(),"node_modules","failproofai","dist","index.js")])if(await x(e))return e;return null}async function k(e,t){let i=(0,h.resolve)(e,t);for(let e of[i,`${i}.js`,`${i}.mjs`,`${i}.ts`,(0,h.resolve)(i,"index.js")])if(await x(e))return e;return null}async function v(e,t,i,o){let r=(0,h.join)(e,t);return await (0,p.writeFile)(r,i,{encoding:"utf-8",mode:384,...o?{flag:"wx"}:{}}),r}async function F(e,t,i=w){let o=`import _cjs from '${t}';
+export const customPolicies = _cjs.customPolicies;
+export const semanticPolicies = _cjs.semanticPolicies;
+export const getCustomHooks = _cjs.getCustomHooks;
+export const getSemanticRegistrations = _cjs.getSemanticRegistrations;
+export const clearCustomHooks = _cjs.clearCustomHooks;
+export const allow = _cjs.allow;
+export const deny = _cjs.deny;
+export const instruct = _cjs.instruct;
+export default _cjs;`,r=`failproofai-dist${i}.shim.mjs`;try{let e=(0,g.q)();await (0,p.mkdir)(e,{recursive:!0,mode:448});let t=await (0,p.lstat)(e),i="function"==typeof process.getuid?process.getuid():null;if(!t.isDirectory()||t.isSymbolicLink()||null!==i&&t.uid!==i||63&t.mode)throw Error(`${e} is not a private directory owned by this user`);let s=await v(e,r,o,!1);return{shimPath:s,shimUrl:(0,_.pathToFileURL)(s).href}}catch(e){(0,n.g)(`policy shim directory unusable (${e instanceof Error?e.message:String(e)}); falling back to ${(0,m.tmpdir)()}`)}let s=await v((0,m.tmpdir)(),r,o,!0);return{shimPath:s,shimUrl:(0,_.pathToFileURL)(s).href}}async function S(e,t,o,r=w,s){let a=[e],n=new Set,l=[],c=null;if(o&&t){let e=await F(o,t,r);l.push(e.shimPath),c=e.shimUrl}for(;a.length>0;){let t,u=a.shift();if(n.has(u))continue;if(n.add(u),s&&u===e){let e=await (0,p.readFile)(u),o=(0,i.createHash)("sha256").update(e).digest("hex");if(o!==s)throw Error(`cloud-managed policy failed integrity re-verification at load: expected ${s}, got ${o}`);t=e.toString("utf-8")}else t=await (0,p.readFile)(u,"utf-8");c&&(t=t.replace(/from\s+(['"])(?:claudeye|failproofai)\1/g,`from '${c}'`)),o&&(t=t.replace(/require\s*\(\s*(['"])(?:claudeye|failproofai)\1\s*\)/g,`require('${o.replace(/\\/g,"\\\\")}')`));let f=(0,h.dirname)(u),d=new Map;for(let e of[y,$]){let i,o=new RegExp(e.source,e.flags);for(;null!==(i=o.exec(t));){let e=i[2];if(d.has(e))continue;let t=await k(f,e);if(!t)continue;n.has(t)||a.includes(t)||a.push(t);let o=(0,h.relative)(f,t+r).split("\\").join("/");o.startsWith(".")||(o="./"+o),d.set(e,o)}}for(let e of[...d.keys()].sort((e,t)=>t.length-e.length)){let i=d.get(e),o=e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");t=(t=t.replace(RegExp(`'${o}'`,"g"),`'${i}'`)).replace(RegExp(`"${o}"`,"g"),`"${i}"`)}let m=u+r;await (0,p.writeFile)(m,t,"utf-8"),l.push(m)}return l}async function P(e){for(let t of e)try{await (0,p.unlink)(t)}catch{}}e.i(73136);var b=e.i(49335),A=e.i(10659);e.i(16774),e.i(99891);let E="__FAILPROOFAI_LOADING_HOOKS__",O=0,T=new Map;async function U(e){let t,i,o=Number.isFinite(i=Number(process.env.FAILPROOFAI_POLICY_LOAD_TIMEOUT_MS))&&i>0?i:1e4;try{await Promise.race([import(e),new Promise((e,i)=>{t=setTimeout(()=>i(Error(`timed out loading module after ${o}ms`)),o),t.unref?.()})])}finally{t&&clearTimeout(t)}}let L=new Set;async function R(e,o){let r=globalThis;r[E]=!0;let a=[];try{let r=await j(),l=r?(0,s.pathToFileURL)(r).href:null,c=++O,p=`${w}.${process.pid}.${c}.${(0,i.randomUUID)()}.mjs`;a=await S(e,l,r,p,o?.verifyEntrySha);let m=await I(a,p),h=T.get(e);if(h?.fingerprint===m){for(let e of h.hooks)f.add({...e});return null}let _=e+p,g=(0,s.pathToFileURL)(_).href,y=u().length,$=d().length;await U(g);let x=d().slice($).map(e=>e?.name);return o?.outsidePack&&x.length>0&&!L.has(e)&&(L.add(e),(0,n.g)(`${(0,t.basename)(e)}: semanticPolicies.add only takes effect in a pack published with \`failproofai publish\`; ${x.join(", ")} ${1===x.length?"is":"are"} never asked here`)),T.size>=500&&T.clear(),T.set(e,{fingerprint:m,hooks:u().slice(y).map(e=>({...e}))}),null}catch(s){let i=s instanceof Error?s.message:String(s),r=/Cannot find module|MODULE_NOT_FOUND|ENOENT/i.test(i)?"module_not_found":/SyntaxError|Unexpected token/i.test(i)?"syntax_error":/timed out loading module/i.test(i)?"load_timeout":"runtime_error";if((0,b.f)((0,A.f)(),"custom_hooks_load_error",{error_type:r,is_convention:!!o?.conventionScope,convention_scope:o?.conventionScope??null,file_basename:(0,t.basename)(e)}),o?.strict)throw Error(`Failed to load custom hooks from ${e}: ${i}`);return(0,n.F)(`failed to load custom hooks from ${e}: ${i}`),{type:r,reason:i}}finally{r[E]=!1,await P(a)}}async function I(e,t){let i=(0,a.createHash)("sha256");for(let o of[...e].sort()){i.update(o.replaceAll(t,w));let e=await (0,r.readFile)(o,"utf8");i.update(e.replaceAll(t,w))}return i.digest("hex")}async function C(e,i){let r;if(!e)return[];let s=(0,t.isAbsolute)(e)?e:(0,t.resolve)(i?.sessionCwd??process.cwd(),e);if(!(0,o.existsSync)(s)){if(i?.strict)throw Error(`Custom hooks file not found: ${s}`);return(0,n.g)(`customPoliciesPath not found: ${s}`),[]}return(r=globalThis)[l]=[],r[c]=[],await R(s,i),u()}e.s(["loadCustomHooks",0,C],90521)}];
+
+//# sourceMappingURL=src_hooks_custom-hooks-loader_ts_0lnb3n3h94wnn._.js.map

package/.next/standalone/.next/server/chunks/src_hooks_daemon-client_ts_0il_yu1zc0291._.js

@@ -0,0 +1,3 @@
+module.exports=[4464,e=>{"use strict";var t=e.i(61095);e.i(2157);var o=e.i(79857);async function r(e=150){return new Promise(o=>{let r=!1,i=e=>{r||(r=!0,clearTimeout(s),a.removeAllListeners(),a.destroy(),o(e))},a=(0,t.createConnection)({path:n()}),s=setTimeout(()=>i(!1),e);s.unref?.(),a.on("connect",()=>i(!0)),a.on("error",()=>i(!1))})}function n(){return process.env.FAILPROOFAI_DAEMON_SOCKET?process.env.FAILPROOFAI_DAEMON_SOCKET:(0,o._)()}async function i(e,o){let r=o?.responseTimeoutMs??3e4;return new Promise(o=>{let i,a=!1,s=e=>{clearTimeout(i),i=setTimeout(()=>u("unreachable"),e),i.unref?.()},c=e=>{a||(a=!0,clearTimeout(i),l.removeAllListeners(),l.destroy(),o(e))},u=e=>c({ok:!1,failure:e}),l=(0,t.createConnection)({path:n()});s(150);let f=Buffer.alloc(0),d=null;l.on("connect",()=>{let t,o;s(r),l.write((t=Buffer.from(JSON.stringify(e),"utf8"),(o=Buffer.alloc(4)).writeUInt32BE(t.length,0),Buffer.concat([o,t])))}),l.on("data",e=>{let t;if(f=Buffer.concat([f,e]),null===d){if(f.length<4)return;if((d=f.readUInt32BE(0))>0x1000000)return void u("unreachable");f=f.subarray(4)}if(f.length<d)return;let o=f.subarray(0,d);try{t=JSON.parse(o.toString("utf8"))}catch{u("unreachable");return}if(!t||"object"!=typeof t||Array.isArray(t))return void u("unreachable");let r=t;1!==r.protocolVersion?u("protocol-mismatch"):c({ok:!0,message:r})}),l.on("error",()=>u("unreachable")),l.on("close",()=>u("unreachable"))})}async function a(e,t){let o=await i({type:"hook",protocolVersion:1,hookEvent:e.hookEvent,cli:e.cli,stdin:e.stdin,cwd:e.cwd},t);if(!o.ok)return o;let r=o.message;return"hookResult"===r.type&&"number"==typeof r.exitCode&&"string"==typeof r.stdout&&"string"==typeof r.stderr?{ok:!0,response:{exitCode:r.exitCode,stdout:r.stdout,stderr:r.stderr}}:{ok:!1,failure:"unreachable"}}function s(e){return Array.isArray(e)&&e.every(e=>"string"==typeof e)}async function c(e,t){let o=await i({type:"policyEvaluation",protocolVersion:1,integration:e.integration,event:e.event,payload:e.payload,cwd:e.cwd},t);if(!o.ok)return o;let r=o.message,n=e=>null==e||"string"==typeof e;return"policyResult"===r.type&&("allow"===r.decision||"deny"===r.decision||"instruct"===r.decision)&&s(r.policyNames)&&n(r.reason)&&s(r.matchedPolicies)&&"number"==typeof r.durationMs&&Number.isInteger(r.durationMs)&&r.durationMs>=0&&n(r.toolName)?{ok:!0}:{ok:!1,failure:"unreachable"}}e.i(32127),e.s(["attemptDaemonHook",0,a,"attemptDaemonPolicyEvaluation",0,c,"daemonAcceptsConnections",0,r])}];
+
+//# sourceMappingURL=src_hooks_daemon-client_ts_0il_yu1zc0291._.js.map

package/.next/standalone/.next/server/chunks/src_hooks_fp-config_ts_0ow57t1myy6o_._.js

@@ -0,0 +1,3 @@
+module.exports=[32127,e=>{"use strict";var t=e.i(2157);e.i(50227),e.i(94930);var r=e.i(79857);let o={mode:"oss",daemon:{configured:!1},collector:{sessions:!1,hooks:!0,hooksVerbosity:"decisions",redact:"minimal",environment:"local"},telemetry:{enabled:!0},audit:{auto:!1,intervalDays:7}};e.s(["f",0,function(){try{var e;let o,n,i,s,a;return e=JSON.parse((0,t.readFileSync)((0,r.y)(),"utf8")),o=e.mode?.kind,n=e.daemon??{},i=e.collector??{},s=e.telemetry??{},a=e.audit??{},{mode:"cloud"===o?"cloud":"oss",daemon:{configured:!0===n.configured},collector:{sessions:!0===i.sessions,hooks:!1!==i.hooks,hooksVerbosity:"all"===i.hooks_verbosity||"off"===i.hooks_verbosity?i.hooks_verbosity:"decisions",redact:"off"===i.redact?"off":"minimal",environment:"string"==typeof i.environment?i.environment:"local",machineId:"string"==typeof i.machine_id?i.machine_id:void 0,sources:function(e){if(!e||"object"!=typeof e||Array.isArray(e))return;let t={};for(let[r,o]of Object.entries(e)){if(!o||"object"!=typeof o||Array.isArray(o))continue;let e=o.extra_paths;if(!Array.isArray(e))continue;let n=e.filter(e=>"string"==typeof e&&""!==e.trim());n.length>0&&(t[r]={extraPaths:n})}return Object.keys(t).length>0?t:void 0}(i.sources),agents:function(e){if(!e||"object"!=typeof e||Array.isArray(e))return;let t=Object.fromEntries(Object.entries(e).flatMap(([e,t])=>{if(!t||"object"!=typeof t||Array.isArray(t))return[];let r=t.sessions;return"boolean"==typeof r?[[e,{sessions:r}]]:[]}));return Object.keys(t).length?t:void 0}(i.agents),otlp:function(e){if(!(!e||"object"!=typeof e||Array.isArray(e)))return{enabled:!0===e.enabled,..."number"==typeof e.port&&Number.isInteger(e.port)?{port:e.port}:{}}}(i.otlp)},telemetry:{enabled:!1!==s.enabled},audit:{auto:!0===a.auto,intervalDays:function(e){if("number"!=typeof e||!Number.isFinite(e))return 7;let t=Math.floor(e);return t<1?7:Math.min(t,90)}(a.interval_days),reportsConsentedAt:"number"==typeof a.reports_consented_at&&Number.isFinite(a.reports_consented_at)?a.reports_consented_at:void 0},agents:function(e){if(!e||"object"!=typeof e||Array.isArray(e))return;let t=e=>Array.isArray(e)?[...new Set(e.filter(e=>"string"==typeof e&&""!==e.trim()))]:[];if(Array.isArray(e.selected))return{selected:t(e.selected),seen:t(e.seen)}}(e.agents)}}catch{return structuredClone(o)}}])}];
+
+//# sourceMappingURL=src_hooks_fp-config_ts_0ow57t1myy6o_._.js.map

package/.next/standalone/.next/server/chunks/src_hooks_fp-home_ts_09kv0bn_4twyh._.js

@@ -0,0 +1,3 @@
+module.exports=[79857,e=>{"use strict";var s=e.i(60526),o=e.i(50227);function r(e){return e?(0,o.resolve)(e,".failproofai"):process.env.FAILPROOFAI_HOME||(0,o.resolve)((0,s.homedir)(),".failproofai")}let i=(e,...s)=>e?(0,o.resolve)(r(e),...s):((...e)=>(0,o.resolve)(r(),...e))(...s),l=e=>(0,o.resolve)(i(e,"policies"),"packs"),a=e=>i(e,"run");e.s(["r",0,e=>(0,o.resolve)(i(e,"audit"),"cache"),"X",0,e=>(0,o.resolve)(i(e,"audit"),"dashboard.json"),"D",0,e=>(0,o.resolve)(a(e),"audit.lock"),"e",0,e=>(0,o.resolve)(i(e,"audit"),"session.json"),"V",0,e=>(0,o.resolve)(i(e,"state"),"codex-session-paths.json"),"y",0,e=>i(e,"config.json"),"_",0,()=>process.env.FAILPROOFAI_DAEMON_SOCKET||(0,o.resolve)(a(),"failproofaid.sock"),"I",0,r,"O",0,e=>i(e,"policies-config.json"),"A",0,e=>i(e,"logs"),"u",0,e=>i(e,"migrations"),"n",0,l,"v",0,e=>(0,o.resolve)(l(e),"installed.json"),"m",0,a,"q",0,e=>(0,o.resolve)(i(e,"state"),"shims"),"z",0,e=>(0,o.resolve)(i(e,"state"),"telemetry-id")])}];
+
+//# sourceMappingURL=src_hooks_fp-home_ts_09kv0bn_4twyh._.js.map

package/.next/standalone/.next/server/chunks/ssr/{[externals]__0ilfh9m._.js → [externals]__0ilfh9mfnzsth._.js}

@@ -1,3 +1,3 @@
 module.exports=[78500,(a,b,c)=>{b.exports=a.x("node:async_hooks",()=>require("node:async_hooks"))},12057,(a,b,c)=>{b.exports=a.x("node:util",()=>require("node:util"))}];
 
-//# sourceMappingURL=%5Bexternals%5D__0ilfh9m._.js.map
+//# sourceMappingURL=%5Bexternals%5D__0ilfh9mfnzsth._.js.map

package/.next/standalone/.next/server/chunks/ssr/{[externals]__0ohnuzs._.js → [externals]__0ohnuzsaozaca._.js}

@@ -1,3 +1,3 @@
 module.exports=[78500,(a,b,c)=>{b.exports=a.x("node:async_hooks",()=>require("node:async_hooks"))},1457,(a,b,c)=>{b.exports=a.x("node:readline",()=>require("node:readline"))},12057,(a,b,c)=>{b.exports=a.x("node:util",()=>require("node:util"))}];
 
-//# sourceMappingURL=%5Bexternals%5D__0ohnuzs._.js.map
+//# sourceMappingURL=%5Bexternals%5D__0ohnuzsaozaca._.js.map

package/.next/standalone/.next/server/chunks/ssr/{[externals]__0vmspq5._.js → [externals]__12qr51qgrrt6o._.js}

@@ -1,3 +1,3 @@
-module.exports=[78500,(a,b,c)=>{b.exports=a.x("node:async_hooks",()=>require("node:async_hooks"))},12714,(a,b,c)=>{b.exports=a.x("node:fs/promises",()=>require("node:fs/promises"))},1457,(a,b,c)=>{b.exports=a.x("node:readline",()=>require("node:readline"))},12057,(a,b,c)=>{b.exports=a.x("node:util",()=>require("node:util"))}];
+module.exports=[78500,(a,b,c)=>{b.exports=a.x("node:async_hooks",()=>require("node:async_hooks"))},12714,(a,b,c)=>{b.exports=a.x("node:fs/promises",()=>require("node:fs/promises"))},1457,(a,b,c)=>{b.exports=a.x("node:readline",()=>require("node:readline"))},12057,(a,b,c)=>{b.exports=a.x("node:util",()=>require("node:util"))},27028,(a,b,c)=>{b.exports=a.x("node:zlib",()=>require("node:zlib"))},14747,(a,b,c)=>{b.exports=a.x("path",()=>require("path"))}];
 
-//# sourceMappingURL=%5Bexternals%5D__0vmspq5._.js.map
+//# sourceMappingURL=%5Bexternals%5D__12qr51qgrrt6o._.js.map

package/.next/standalone/.next/server/chunks/ssr/[externals]_fs_promises_03norioyty3bq._.js

@@ -0,0 +1,3 @@
+module.exports=[24868,(a,b,c)=>{b.exports=a.x("fs/promises",()=>require("fs/promises"))}];
+
+//# sourceMappingURL=%5Bexternals%5D_fs_promises_03norioyty3bq._.js.map

package/.next/standalone/.next/server/chunks/ssr/[externals]_node_net_1yam_zj43-40b._.js

@@ -0,0 +1,3 @@
+module.exports=[61095,(a,b,c)=>{b.exports=a.x("node:net",()=>require("node:net"))}];
+
+//# sourceMappingURL=%5Bexternals%5D_node_net_1yam_zj43-40b._.js.map