failproofai 1.0.12-beta.1 → 1.0.12-beta.2

package/dist/worker.mjs

@@ -1166,7 +1166,7 @@ function instruct(reason) {
 }
 
 // package.json
-var version = "1.0.12-beta.1";
+var version = "1.0.12-beta.2";
 var init_package = () => {};
 
 // src/hooks/agent-targets.ts
@@ -1474,6 +1474,40 @@ function readCloudJevState() {
   const deployment = Number.isSafeInteger(active.deployment) ? active.deployment : null;
   return { jevMode, deployment, errors };
 }
+function readCloudJevAssignments() {
+  try {
+    const active = readActiveRaw();
+    if (!active || !Array.isArray(active.jevPolicies))
+      return null;
+    const schema = active.schemaVersion;
+    const out = [];
+    for (const raw of active.jevPolicies) {
+      if (!raw || typeof raw !== "object" || Array.isArray(raw))
+        return null;
+      const entry = raw;
+      if (typeof entry.id !== "string" || !POLICY_ID_RE.test(entry.id))
+        return null;
+      if (!Number.isSafeInteger(entry.version) || entry.version < 0)
+        return null;
+      if (entry.effect !== undefined && entry.effect !== "enforce" && entry.effect !== "observe")
+        return null;
+      const targets = parseAgentTargets(entry.agentTargets, schema);
+      out.push({
+        id: entry.id,
+        version: entry.version,
+        effect: entry.effect === "observe" ? "observe" : "enforce",
+        ...targets ? { agentTargets: targets } : {}
+      });
+    }
+    return out;
+  } catch {
+    return null;
+  }
+}
+function cloudJevAssignmentsFor(agent) {
+  const all = readCloudJevAssignments();
+  return all === null ? null : all.filter((a) => agentTargetsMatch(a.agentTargets, agent));
+}
 function cloudReviewerName(policyId, name) {
   return `cloud:${policyId}/${name}`;
 }
@@ -2104,9 +2138,11 @@ function effectiveReviewerNames() {
     return cached;
   let names = NO_REVIEWERS;
   cachedContested = new Map;
+  cachedPackChecks = false;
   try {
     const packs = jevPacks(readInstalledPacks().packs, reviewerCli);
     names = reviewerNamesFor(packs);
+    cachedPackChecks = names.size > 0;
     cachedContested = contestedSemanticNames(packs);
   } catch {}
   try {
@@ -2124,6 +2160,10 @@ function contestedReviewerNames() {
 function jevChecksInstalled() {
   return effectiveReviewerNames().size > 0;
 }
+function packJevChecksInstalled() {
+  effectiveReviewerNames();
+  return cachedPackChecks;
+}
 function reviewerNamesFor(packs) {
   const contested = contestedSemanticNames(packs);
   const declared = packs.flatMap((p) => (p.semantic ?? []).filter((s) => !isReservedClaim(p, s.name)).map((s) => s.name)).filter((name) => !contested.has(name));
@@ -2136,7 +2176,7 @@ function forgetEffectiveReviewerNames(cli, agent = null) {
   reviewerCli = cli;
   reviewerAgent = agent;
 }
-var cached = null, cachedContested, reviewerCli, reviewerAgent = null;
+var cached = null, cachedPackChecks = false, cachedContested, reviewerCli, reviewerAgent = null;
 var init_effective_reviewers = __esm(() => {
   init_pack_manifest();
   init_policy_authority();
@@ -4362,6 +4402,57 @@ function normalizeJevFallbackReason(raw) {
   const code = JEV_FREE_TEXT_PREFIXES.get(head) ?? head;
   return JEV_REASON_CODES.has(code) ? code : JEV_REASON_OTHER;
 }
+function sanitizeCheck(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return null;
+  const r = raw;
+  if (typeof r.check !== "string" || !JEV_CHECK_NAME_RE.test(r.check))
+    return null;
+  if (typeof r.verdict !== "string" || !CHECK_VERDICT_SET.has(r.verdict))
+    return null;
+  if (typeof r.why !== "string" || !CHECK_WHY_SET.has(r.why))
+    return null;
+  if (!isP(r.p))
+    return null;
+  const out = {
+    check: r.check,
+    verdict: r.verdict,
+    why: r.why,
+    p: round2(r.p)
+  };
+  if (typeof r.policy === "string" && isJevPolicyName(r.policy) && !/\s/.test(r.policy) && /^(?:cloud|pack)\//.test(r.policy)) {
+    out.policy = r.policy;
+  }
+  if (isP(r.exempt))
+    out.exempt = round2(r.exempt);
+  if (r.watched === true)
+    out.watched = true;
+  if (r.probes && typeof r.probes === "object" && !Array.isArray(r.probes)) {
+    const probes = {};
+    for (const [id, v] of Object.entries(r.probes)) {
+      if (Object.keys(probes).length >= JEV_CHECK_PROBES_MAX)
+        break;
+      if (JEV_PROBE_ID_RE.test(id) && isP(v))
+        probes[id] = round2(v);
+    }
+    if (Object.keys(probes).length > 0)
+      out.probes = probes;
+  }
+  return out;
+}
+function sanitizeJevChecks(raw) {
+  if (!Array.isArray(raw))
+    return;
+  const out = [];
+  for (const item of raw) {
+    if (out.length >= JEV_CHECKS_MAX)
+      break;
+    const rec = sanitizeCheck(item);
+    if (rec)
+      out.push(rec);
+  }
+  return raw.length > 0 && out.length === 0 ? undefined : out;
+}
 function sanitizeJevActivity(entry) {
   if (!JEV_ACTIVITY_KEYS.some((k) => entry[k] !== undefined))
     return entry;
@@ -4400,6 +4491,11 @@ function sanitizeJevActivity(entry) {
     out.jevModel = out.jevModel.trim();
   else
     drop("jevModel");
+  const checks = out.evaluator === "jev" ? sanitizeJevChecks(out.jevChecks) : undefined;
+  if (checks === undefined)
+    drop("jevChecks");
+  else
+    out.jevChecks = checks;
   return out;
 }
 function jevOutcome(raw) {
@@ -4410,6 +4506,8 @@ function outcomeOf(e) {
     return "fallback";
   if (e.evaluator !== "jev")
     return null;
+  if (Array.isArray(e.jevChecks) && e.jevChecks.length === 0)
+    return "no-request";
   if (e.jevCleared !== undefined || e.jevLatencyMs !== undefined || e.jevModel !== undefined)
     return "answered";
   if (e.jevDecision === "deny" || e.jevDecision === "instruct")
@@ -4418,7 +4516,7 @@ function outcomeOf(e) {
     return "no-request";
   return "not-consulted";
 }
-var JEV_ACTIVITY_KEYS, EVALUATORS, DECISIONS, MODES, REASON_HEAD_RE, HTTP_CODE_RE, JEV_REASON_MAX_CHARS = 40, JEV_REASON_OTHER = "other", JEV_REASON_CODE_LIST, JEV_REASON_CODES, JEV_REASON_REQUEST_CUT = "request-cut", JEV_REASON_PROVIDER_REFUSED = "provider-refused", JEV_FREE_TEXT_PREFIXES, JEV_MODEL_RE, JEV_POLICY_NAME_MAX_CHARS = 200, NAME_FORBIDDEN_RE, REGISTERED_NAMESPACE_RE, JEV_CLEARED_MAX = 64, ANSWERED_BUT_NOT_APPLIED_REASONS;
+var JEV_ACTIVITY_KEYS, EVALUATORS, DECISIONS, MODES, REASON_HEAD_RE, HTTP_CODE_RE, JEV_REASON_MAX_CHARS = 40, JEV_REASON_OTHER = "other", JEV_REASON_CODE_LIST, JEV_REASON_CODES, JEV_REASON_REQUEST_CUT = "request-cut", JEV_REASON_PROVIDER_REFUSED = "provider-refused", JEV_FREE_TEXT_PREFIXES, JEV_MODEL_RE, JEV_POLICY_NAME_MAX_CHARS = 200, NAME_FORBIDDEN_RE, REGISTERED_NAMESPACE_RE, JEV_CLEARED_MAX = 64, JEV_CHECK_VERDICTS, JEV_CHECK_WHY, JEV_CHECKS_MAX = 32, JEV_CHECK_PROBES_MAX = 8, JEV_CHECK_NAME_RE, JEV_PROBE_ID_RE, CHECK_VERDICT_SET, CHECK_WHY_SET, isP = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 && v <= 1, round2 = (v) => Math.round(v * 100) / 100, ANSWERED_BUT_NOT_APPLIED_REASONS;
 var init_jev_activity = __esm(() => {
   JEV_ACTIVITY_KEYS = [
     "evaluator",
@@ -4427,7 +4525,8 @@ var init_jev_activity = __esm(() => {
     "jevFallbackReason",
     "jevLatencyMs",
     "jevModel",
-    "jevMode"
+    "jevMode",
+    "jevChecks"
   ];
   EVALUATORS = new Set(["jev", "jev-fallback"]);
   DECISIONS = new Set(["allow", "instruct", "deny"]);
@@ -4474,6 +4573,22 @@ var init_jev_activity = __esm(() => {
   JEV_MODEL_RE = /^[A-Za-z0-9._:/@~+-]{1,200}$/;
   NAME_FORBIDDEN_RE = /[\u0000-\u001f\u007f-\u009f\u2028\u2029]/;
   REGISTERED_NAMESPACE_RE = /^(?:custom|pack|cloud|failproofai|\.failproofai-[A-Za-z0-9_-]{1,32})\//;
+  JEV_CHECK_VERDICTS = ["none", "deny", "instruct", "overridden"];
+  JEV_CHECK_WHY = [
+    "not-detected",
+    "exempt",
+    "fired",
+    "injection",
+    "user-asked",
+    "op-requested",
+    "task-step",
+    "downgraded",
+    "scan-incomplete"
+  ];
+  JEV_CHECK_NAME_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
+  JEV_PROBE_ID_RE = /^[a-z][a-z0-9_]{0,31}$/;
+  CHECK_VERDICT_SET = new Set(JEV_CHECK_VERDICTS);
+  CHECK_WHY_SET = new Set(JEV_CHECK_WHY);
   ANSWERED_BUT_NOT_APPLIED_REASONS = new Set([
     JEV_REASON_REQUEST_CUT,
     "truncated",
@@ -4534,7 +4649,8 @@ function combineTwoTier(verdicts, review, mode) {
     ...cleared.length > 0 && RANK[enforced.final.decision] < RANK[legacy.decision] ? { jevCleared: cleared } : {},
     ...review.latencyMs !== null ? { jevLatencyMs: review.latencyMs } : {},
     ...review.model ? { jevModel: review.model } : {},
-    jevMode: mode
+    jevMode: mode,
+    ...review.checks ? { jevChecks: [...review.checks] } : {}
   };
   if (mode === "observe") {
     const observeVerdict = review.decision === "deny" || review.decision === "instruct" ? {
@@ -5201,6 +5317,12 @@ async function evaluatePolicies(eventType, payload, session, config, twoTier) {
     twoTier.releaseRegistry?.();
     review = await twoTier.review;
   }
+  if (review.kind === "answered" && review.asked.length === 0 && review.decision === "allow" && !review.observedAsked?.length) {
+    return formatVerdict(eventType, session, toolName, regexOnly(collected.verdicts));
+  }
+  if (review.kind === "not-consulted" && twoTier.cloud) {
+    return formatVerdict(eventType, session, toolName, regexOnly(collected.verdicts));
+  }
   const combined = combineTwoTier(collected.verdicts, review, twoTier.mode);
   if (combined.cleared.length > 0) {
     hookLogInfo(`jev ${twoTier.mode === "observe" ? "would clear" : "cleared"}: ${combined.cleared.join(", ")}`);
@@ -5214,7 +5336,8 @@ async function evaluatePolicies(eventType, payload, session, config, twoTier) {
       activity: combined.activity,
       decidedByJev: combined.decidedByJev,
       ...(combined.decidedByJev || combined.observeVerdict) && review.kind === "answered" && review.origin ? { jevOrigin: review.origin } : {},
-      ...combined.observeVerdict ? { observeVerdict: combined.observeVerdict } : {}
+      ...combined.observeVerdict ? { observeVerdict: combined.observeVerdict } : {},
+      ...review.kind === "answered" && review.observedCloud?.length ? { observedCloud: review.observedCloud } : {}
     }
   };
 }
@@ -12092,7 +12215,13 @@ function runtimeAgentSettingsPath(cli, cwd, userHome = homedir21(), hookScope) {
     if (config?.trim())
       return resolve15(config);
     const state = process.env.OPENCLAW_STATE_DIR || process.env.OPENCLAW_HOME;
-    return resolve15(state?.trim() ? state : resolve15(userHome, ".openclaw"), "openclaw.json");
+    if (state?.trim())
+      return resolve15(state, "openclaw.json");
+    const profile = process.env.OPENCLAW_PROFILE?.trim();
+    if (profile && profile !== "default" && /^[A-Za-z0-9._-]{1,80}$/.test(profile) && !profile.startsWith(".")) {
+      return resolve15(userHome, `.openclaw-${profile}`, "openclaw.json");
+    }
+    return resolve15(userHome, ".openclaw", "openclaw.json");
   }
   const relative = USER_SETTINGS[cli];
   if (!relative)
@@ -12246,13 +12375,6 @@ function validateBaseUrl(raw) {
   url.pathname = url.pathname.replace(/\/+$/, "") || "/";
   return { ok: true, value: url.toString() };
 }
-function isPlainHttp(url) {
-  try {
-    return new URL(url).protocol === "http:";
-  } catch {
-    return false;
-  }
-}
 function originOf(raw) {
   try {
     const url = new URL(raw);
@@ -12387,12 +12509,6 @@ function validateJevConfig(raw, envKey, cloud) {
       return { ok: false, problem: 'mode must be "off", "observe" or "enforce"' };
     cfg.mode = mode;
   }
-  if (cfg.baseUrl !== undefined && isPlainHttp(cfg.baseUrl) && cfg.mode === "enforce") {
-    return {
-      ok: false,
-      problem: "plain http (to localhost) is accepted only with mode observe: in enforce mode Jev's answers can clear a deny, " + "and while the local proxy is down any process on this machine could take its port and answer. " + (cfg.provider === JEV_CLOUD_PROVIDER ? "Reconnect to an https FailproofAI Cloud URL (failproofai config --token <key> --url https://…), or keep mode observe" : "Use https, or mode observe")
-    };
-  }
   return { ok: true, value: cfg };
 }
 function validateLoadedJevConfig(cfg) {
@@ -17004,7 +17120,11 @@ function parseOutcome(raw, i) {
   if (!origin || typeof origin !== "object" || typeof origin.cloudPolicyId !== "string" || !POLICY_ID_RE2.test(origin.cloudPolicyId) || !Number.isSafeInteger(origin.cloudVersion) || origin.cloudVersion < 0) {
     malformed(`outcome ${i} has no Cloud origin`);
   }
-  return {
+  if (o.effect !== undefined && o.effect !== "enforce" && o.effect !== "observe")
+    malformed(`outcome ${i} has an unknown effect`);
+  if (o.reason !== undefined && o.reason !== null && typeof o.reason !== "string")
+    malformed(`outcome ${i} reason is not text`);
+  const outcome = {
     policy: o.policy,
     mode: o.mode,
     ...typeof o.userCanOverride === "boolean" ? { userCanOverride: o.userCanOverride } : {},
@@ -17018,41 +17138,103 @@ function parseOutcome(raw, i) {
     ...o.intent !== undefined ? { intent: o.intent } : {},
     ...o.targetScanIncomplete === true ? { targetScanIncomplete: true } : {}
   };
+  return {
+    outcome,
+    cloudPolicyId: origin.cloudPolicyId,
+    cloudVersion: origin.cloudVersion,
+    observe: o.effect === "observe",
+    reason: typeof o.reason === "string" ? capReason(o.reason) : null
+  };
 }
-function parseCloudReply(raw) {
-  if (!raw || typeof raw !== "object" || Array.isArray(raw))
-    malformed("no cloud block");
-  const block = raw;
-  const v = block.verdict;
+function capReason(reason) {
+  return reason.length > MAX_CLOUD_REASON_CHARS ? `${reason.slice(0, MAX_CLOUD_REASON_CHARS - 1)}…` : reason;
+}
+function observedChecks(parsed, watched = null) {
+  const firing = watched?.parsed.filter((p) => p.outcome.verdict === "deny" || p.outcome.verdict === "instruct") ?? [];
+  const watchedReason = firing.length === 1 && typeof watched?.v.reason === "string" ? capReason(watched.v.reason) : null;
+  const byPolicy = new Map;
+  for (const p of parsed) {
+    const verdict = p.outcome.verdict;
+    if (verdict !== "deny" && verdict !== "instruct")
+      continue;
+    const prev = byPolicy.get(p.cloudPolicyId);
+    if (prev && SEVERITY[prev.decision] >= SEVERITY[verdict])
+      continue;
+    byPolicy.set(p.cloudPolicyId, {
+      cloudPolicyId: p.cloudPolicyId,
+      cloudVersion: p.cloudVersion,
+      check: p.outcome.policy,
+      decision: verdict,
+      reason: p.reason ?? (firing[0] === p ? watchedReason : null) ?? `Flagged by semantic review (semantic/${p.outcome.policy})`
+    });
+  }
+  return [...byPolicy.values()];
+}
+function parseVerdictBlock(rawVerdict, rawAsked, what) {
+  const v = rawVerdict;
   if (!v || typeof v !== "object" || Array.isArray(v))
-    malformed("no verdict");
+    malformed(`no ${what}`);
   if (typeof v.decision !== "string" || !DECISIONS2.has(v.decision))
-    malformed("verdict has no decision");
+    malformed(`${what} has no decision`);
   if (v.reason !== null && v.reason !== undefined && typeof v.reason !== "string")
-    malformed("verdict reason is not text");
+    malformed(`${what} reason is not text`);
   if (!Array.isArray(v.outcomes) || v.outcomes.length > MAX_LIST)
-    malformed("verdict has no outcomes list");
+    malformed(`${what} has no outcomes list`);
   if (v.beyondTask !== undefined && typeof v.beyondTask !== "boolean")
-    malformed("verdict beyondTask is not a flag");
-  const outcomes = v.outcomes.map(parseOutcome);
-  const asked = names(block.asked, "asked");
+    malformed(`${what} beyondTask is not a flag`);
+  const parsed = v.outcomes.map(parseOutcome);
+  const asked = names(rawAsked, `${what} asked`);
   const askedSet = new Set(asked);
   const seen = new Set;
-  outcomes.forEach((o, i) => {
+  parsed.forEach(({ outcome: o }, i) => {
     if (!askedSet.has(o.policy))
-      malformed(`outcome ${i} answers ${JSON.stringify(o.policy)}, which Cloud did not ask`);
+      malformed(`${what} outcome ${i} answers ${JSON.stringify(o.policy)}, which Cloud did not ask`);
     const key = `${o.origin?.packId ?? ""}\x00${o.policy}`;
     if (seen.has(key))
-      malformed(`outcome ${i} answers ${JSON.stringify(o.policy)} twice`);
+      malformed(`${what} outcome ${i} answers ${JSON.stringify(o.policy)} twice`);
     seen.add(key);
   });
-  if (outcomes.some((o) => o.verdict === "deny") && v.decision !== "deny")
+  return { v, parsed, asked };
+}
+function parseCloudReply(raw, observedPolicies = []) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    malformed("no cloud block");
+  const block = raw;
+  const { v, parsed, asked } = parseVerdictBlock(block.verdict, block.asked, "verdict");
+  let watched = null;
+  if (block.observed !== undefined && block.observed !== null) {
+    const o = block.observed;
+    if (typeof o !== "object" || Array.isArray(o))
+      malformed("observed is not an object");
+    watched = parseVerdictBlock(o.verdict, o.asked, "observed verdict");
+    if (watched.parsed.some((p) => p.outcome.verdict === "deny") && watched.v.decision !== "deny") {
+      malformed("an observed check denied but its verdict does not");
+    }
+  }
+  const observeIds = new Set(observedPolicies);
+  const isObserved = (p) => p.observe || observeIds.has(p.cloudPolicyId);
+  const enforced = parsed.filter((p) => !isObserved(p)).map((p) => p.outcome);
+  const observedHere = parsed.filter(isObserved);
+  const observed = [...observedHere, ...watched?.parsed ?? []];
+  if (enforced.some((o) => o.verdict === "deny") && v.decision !== "deny")
     malformed("a check denied but the verdict does not");
+  const cloudReason = typeof v.reason === "string" ? capReason(v.reason) : null;
+  let decision = v.decision;
+  let reason = cloudReason;
+  if (observedHere.length > 0) {
+    const own = enforced.some((o) => o.verdict === "deny") ? "deny" : enforced.some((o) => o.verdict === "instruct") || v.beyondTask === true ? "instruct" : "allow";
+    const capped = RANK2[own] <= RANK2[decision] ? own : decision;
+    if (capped !== decision)
+      reason = null;
+    decision = capped;
+  }
   return {
+    observed: observedChecks(observed, watched),
+    observedAsked: [...observedHere.map((p) => p.outcome.policy), ...watched?.asked ?? []],
     verdict: {
-      decision: v.decision,
-      reason: typeof v.reason === "string" ? v.reason.length > MAX_CLOUD_REASON_CHARS ? `${v.reason.slice(0, MAX_CLOUD_REASON_CHARS - 1)}…` : v.reason : null,
-      outcomes,
+      decision,
+      reason,
+      outcomes: enforced,
       injectionSuspected: nullableProbability(v.injectionSuspected, "injectionSuspected"),
       scopeWithinRequest: nullableProbability(v.scopeWithinRequest, "scopeWithinRequest"),
       beyondTask: v.beyondTask === true
@@ -17062,6 +17244,29 @@ function parseCloudReply(raw) {
     droppedCloud: names(block.droppedCloud, "droppedCloud")
   };
 }
+function parseObservedOutcomes(raw) {
+  try {
+    const block = raw?.observed;
+    if (!block || typeof block !== "object" || Array.isArray(block))
+      return [];
+    const asked = new Set(names(block.asked, "observed.asked"));
+    const outcomes = block.verdict?.outcomes ?? [];
+    if (!Array.isArray(outcomes) || outcomes.length > MAX_LIST)
+      return [];
+    const seen = new Set;
+    const out = [];
+    outcomes.forEach((o, i) => {
+      const parsed = parseOutcome(o, i).outcome;
+      if (!asked.has(parsed.policy) || seen.has(parsed.policy))
+        return;
+      seen.add(parsed.policy);
+      out.push(parsed);
+    });
+    return out;
+  } catch {
+    return [];
+  }
+}
 function joinLines(reasons) {
   const lines = [];
   for (const reason of reasons) {
@@ -17108,6 +17313,22 @@ function expectedQuestions(request, prepared, dropped) {
   }));
   return { ...request, questions };
 }
+function cloudCheckAnswers(response, asked) {
+  const out = {};
+  if (asked.length === 0)
+    return out;
+  const names = new Set(asked);
+  const answers = response.answers && typeof response.answers === "object" ? response.answers : {};
+  for (const [id, a] of Object.entries(answers)) {
+    const dot = id.lastIndexOf(".");
+    if (dot <= 0 || !names.has(id.slice(0, dot)) || !QUESTION_PART_RE.test(id.slice(dot + 1)))
+      continue;
+    const p = a?.noul;
+    if (isProbability(p))
+      out[id] = p;
+  }
+  return out;
+}
 function presentAnswers(response) {
   const out = {};
   const answers = response.answers && typeof response.answers === "object" ? response.answers : {};
@@ -17136,7 +17357,7 @@ async function evaluateCloudSemantic(input, opts) {
       model: opts.model ?? DEFAULT_JEV_MODEL,
       modelVerified: true,
       via: "none",
-      cloud: { asked: [], droppedLocal: [], droppedCloud: [] }
+      cloud: { asked: [], droppedLocal: [], droppedCloud: [], answers: {}, observed: [], observedAsked: [], observedOutcomes: [] }
     };
   }
   let prepared;
@@ -17177,11 +17398,13 @@ async function evaluateCloudSemantic(input, opts) {
     const timeout = AbortSignal.timeout(opts.timeoutMs ?? envNumber2("FAILPROOFAI_JEV_TIMEOUT_MS", DEFAULT_JEV_TIMEOUT_MS));
     const signal = opts.signal ? AbortSignal.any([timeout, opts.signal]) : timeout;
     const response = await transport(request, signal);
-    const reply = parseCloudReply(response.cloud);
+    const reply = parseCloudReply(response.cloud, opts.observedPolicies);
+    const observedAsked = new Set(reply.observedAsked);
+    const observedOutcomes = parseObservedOutcomes(response.cloud).filter((o) => observedAsked.has(o.policy));
     const own = new Map(prepared.selected.map((p) => [p.name, p]));
     const dropped = new Set(reply.droppedLocal.filter((name) => own.has(name)));
     const kept = prepared.selected.filter((p) => !dropped.has(p.name));
-    const shortCircuit = kept.length === 0 && reply.asked.length === 0 && reply.verdict.outcomes.length === 0;
+    const shortCircuit = kept.length === 0 && reply.asked.length === 0 && reply.verdict.outcomes.length === 0 && reply.observedAsked.length === 0;
     const answers = shortCircuit ? presentAnswers(response) : readAnswers(expectedQuestions(request, prepared, dropped), response);
     const local = prepared.intent === "v1" ? decideV1(kept, answers, input.toolInput, prepared.userSaid, prepared.agentLastMessage, {
       ...opts.v1,
@@ -17203,7 +17426,11 @@ async function evaluateCloudSemantic(input, opts) {
       cloud: {
         asked: reply.asked,
         droppedLocal: [...dropped].map((name) => ({ name, packId: own.get(name)?.origin?.packId ?? null })),
-        droppedCloud: reply.droppedCloud
+        droppedCloud: reply.droppedCloud,
+        answers: cloudCheckAnswers(response, [...reply.asked, ...reply.observedAsked]),
+        observed: reply.observed,
+        observedAsked: reply.observedAsked,
+        observedOutcomes
       }
     };
   } catch (err) {
@@ -17216,7 +17443,7 @@ async function evaluateCloudSemantic(input, opts) {
     return degraded(`error: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
-var CLOUD_BLOCK_VERSION = 1, MAX_TARGET_SCAN_CHARS = 64000, MAX_CLOUD_BLOCK_BYTES = 240000, blockBytes = (block) => Buffer.byteLength(JSON.stringify(block), "utf8"), REDACTED_TARGET_WORD = "\x00redacted", MAX_SECRET_SCAN_CHARS, REDACTION_MARKER, REDACTED_SAID = "\x00", POLICY_ID_RE2, MAX_NAME_CHARS = 256, MAX_LIST = 4096, MAX_CLOUD_REASON_CHARS = 8192, isProbability = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 && v <= 1, isName2 = (v) => typeof v === "string" && v.length > 0 && v.length <= MAX_NAME_CHARS, DECISIONS2, VERDICTS, INTENTS, RANK2, EMPTY_ALLOW;
+var CLOUD_BLOCK_VERSION = 1, MAX_TARGET_SCAN_CHARS = 64000, MAX_CLOUD_BLOCK_BYTES = 240000, blockBytes = (block) => Buffer.byteLength(JSON.stringify(block), "utf8"), REDACTED_TARGET_WORD = "\x00redacted", MAX_SECRET_SCAN_CHARS, REDACTION_MARKER, REDACTED_SAID = "\x00", POLICY_ID_RE2, MAX_NAME_CHARS = 256, MAX_LIST = 4096, MAX_CLOUD_REASON_CHARS = 8192, isProbability = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 && v <= 1, isName2 = (v) => typeof v === "string" && v.length > 0 && v.length <= MAX_NAME_CHARS, DECISIONS2, VERDICTS, INTENTS, SEVERITY, RANK2, EMPTY_ALLOW, QUESTION_PART_RE;
 var init_cloud_jev = __esm(() => {
   init_compile();
   init_decide();
@@ -17232,6 +17459,7 @@ var init_cloud_jev = __esm(() => {
   DECISIONS2 = new Set(["allow", "deny", "instruct"]);
   VERDICTS = new Set(["deny", "instruct", "overridden", "none"]);
   INTENTS = new Set(["op-requested", "task-step", "downgraded-task-step"]);
+  SEVERITY = { instruct: 1, deny: 2 };
   RANK2 = { allow: 0, instruct: 1, deny: 2 };
   EMPTY_ALLOW = {
     decision: "allow",
@@ -17241,6 +17469,7 @@ var init_cloud_jev = __esm(() => {
     scopeWithinRequest: null,
     beyondTask: false
   };
+  QUESTION_PART_RE = /^[a-z][a-z0-9_]{0,31}$/;
 });
 
 // src/hooks/semantic/jev-throttle.ts
@@ -17576,6 +17805,55 @@ function fallbackCode(reason) {
   const code = reason.split(":")[0].trim();
   return /^[a-z0-9][a-z0-9-]{0,63}$/.test(code) ? code : "error";
 }
+function checkWhy(o) {
+  switch (o.verdict) {
+    case "none":
+      return o.evidence < DEFAULT_THRESHOLDS_V1.fire ? "not-detected" : "exempt";
+    case "overridden":
+      return o.intent === "op-requested" ? "op-requested" : o.intent === "task-step" ? "task-step" : "user-asked";
+    case "deny":
+      return o.escalatedByInjection ? "injection" : "fired";
+    default:
+      if (o.intent === "downgraded-task-step")
+        return "downgraded";
+      return o.targetScanIncomplete ? "scan-incomplete" : "fired";
+  }
+}
+function checkPolicy(o) {
+  const packId = o.origin?.packId;
+  if (!packId)
+    return;
+  const at = o.origin?.packVersion ? `@${o.origin.packVersion}` : "";
+  return packId.startsWith("cloud:") ? `cloud/${packId.slice("cloud:".length)}${at}` : `pack/${packId}${at}`;
+}
+function checkRecords(outcomes, answers, watched = []) {
+  const all = [...outcomes.map((o) => ({ o, watched: false })), ...watched.map((o) => ({ o, watched: true }))];
+  return all.slice(0, JEV_CHECKS_MAX).map(({ o, watched: isWatched }) => {
+    const probes = {};
+    const prefix = `${o.policy}.`;
+    for (const [id, p] of Object.entries(answers)) {
+      if (Object.keys(probes).length >= JEV_CHECK_PROBES_MAX)
+        break;
+      if (!id.startsWith(prefix))
+        continue;
+      const part = id.slice(prefix.length);
+      if (part === "exempt" || part === "user_asked" || !JEV_PROBE_ID_RE.test(part))
+        continue;
+      probes[part] = round2(p);
+    }
+    const policy = checkPolicy(o);
+    return {
+      check: o.policy,
+      ...policy ? { policy } : {},
+      verdict: o.verdict,
+      why: checkWhy(o),
+      p: round2(o.evidence),
+      ...o.exempt !== null ? { exempt: round2(o.exempt) } : {},
+      ...Object.keys(probes).length > 0 ? { probes } : {},
+      ...isWatched ? { watched: true } : {}
+    };
+  });
+}
 function toReview(outcome, cached = false) {
   if (outcome.status === "degraded") {
     return { kind: "fallback", reason: fallbackCode(outcome.reason), latencyMs: outcome.latencyMs, model: null };
@@ -17584,15 +17862,19 @@ function toReview(outcome, cached = false) {
   const latencyMs = sent && !cached ? outcome.latencyMs : null;
   const model = sent ? outcome.model : null;
   const outcomes = outcome.verdict.outcomes;
-  const cloudAsked = "cloud" in outcome ? new Set(outcome.cloud.asked) : null;
+  const cloudSummary = "cloud" in outcome ? outcome.cloud : null;
+  const cloudAsked = cloudSummary ? new Set(cloudSummary.asked) : null;
   const unvouched = outcomes.some((o) => isCloudOutcome(o) && !(cloudAsked?.has(o.policy) ?? false));
   if (unvouched)
     return { kind: "fallback", reason: "malformed", latencyMs, model: null };
   const injection = sent ? outcome.verdict.injectionSuspected : null;
   const warned = (o) => o.verdict === "instruct" && o.intent !== "downgraded-task-step";
+  const cloudAnswers = cloudSummary?.answers ?? {};
+  const watched = cloudSummary?.observedOutcomes ?? [];
   return {
     kind: "answered",
     decision: outcome.verdict.decision,
+    checks: sent ? checkRecords(outcomes, { ...outcome.answers, ...cloudAnswers }, watched) : [],
     reason: outcome.verdict.reason,
     policyName: jevPolicyName(outcome),
     ...jevDecider(outcome)?.origin ? { origin: jevDecider(outcome)?.origin } : {},
@@ -17604,7 +17886,16 @@ function toReview(outcome, cached = false) {
     truncated: outcome.truncated && sent,
     requestCut: outcome.requestCut && sent,
     latencyMs,
-    model
+    model,
+    ...sent && cloudSummary?.observedAsked?.length ? { observedAsked: cloudSummary.observedAsked } : {},
+    ...cloudSummary?.observed?.length ? {
+      observedCloud: cloudSummary.observed.map((o) => ({
+        cloudPolicyId: o.cloudPolicyId,
+        cloudVersion: o.cloudVersion,
+        decision: o.decision,
+        reason: o.reason
+      }))
+    } : {}
   };
 }
 function toolInputRecord(raw) {
@@ -17623,7 +17914,8 @@ function startJevReview(cfg, call) {
       if (!settled)
         controller.abort();
     },
-    authorityOf
+    authorityOf,
+    ...call.cloud ? { cloud: true } : {}
   });
   let route;
   let throttled;
@@ -17685,6 +17977,7 @@ function startJevReview(cfg, call) {
     ...options,
     machineId: cloud.machineId,
     agent: cloud.agent,
+    observedPolicies: cloud.observedPolicies ?? [],
     ...call.localPaused ? { policies: [] } : {}
   }) : evaluateSemantic(input, options);
   const answered = evaluated.then((outcome) => {
@@ -17746,6 +18039,7 @@ var init_jev_review = __esm(() => {
   init_jev_config();
   init_jev_throttle();
   init_session_root();
+  init_jev_activity();
   throttle = exports_jev_throttle;
   intentReader = exports_intent;
   ALWAYS_ON = new Set(BUILTIN_POLICIES.filter((p) => p.alwaysOn).map((p) => normalizePolicyName(p.name)));
@@ -17959,7 +18253,13 @@ async function readJevConfig(agent) {
       return {
         config: resolved.config,
         defaultMode: DEFAULT_JEV_MODE,
-        cloud: { machineId: resolved.machineId, deployment: cloud.deployment, mode: cloud.jevMode, agent: agent ?? null }
+        cloud: {
+          machineId: resolved.machineId,
+          deployment: cloud.deployment,
+          mode: cloud.jevMode,
+          agent: agent ?? null,
+          observedPolicies: (cloudJevAssignmentsFor(agent ?? null) ?? []).filter((a) => a.effect === "observe").map((a) => a.id)
+        }
       };
     }
     if (!existsSync22(jevConfigFile()))
@@ -18033,6 +18333,8 @@ async function startTwoTier(canonicalEventType, parsed, session, cli, opts, acti
     return null;
   if (!cloudAsks && !jevChecksInstalled())
     return null;
+  if (cloudAsks && cloudJevAssignmentsFor(agent)?.length === 0 && (activePause || !packJevChecksInstalled()))
+    return null;
   const loaded = await readJevConfig(agent);
   if (!loaded)
     return null;
@@ -18356,6 +18658,9 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
         reason: observeVerdict.reason
       });
     }
+    for (const o of result.twoTier?.observedCloud ?? []) {
+      observedResults.push({ policyId: o.cloudPolicyId, version: o.cloudVersion, decision: o.decision, reason: o.reason });
+    }
     const durationMs = Math.round(performance.now() - startTime);
     hookLogInfo(`result=${result.decision} policy=${result.policyName ?? "none"} duration=${durationMs}ms`);
     await captureJevIntent(canonicalEventType, result.decision, parsed, session, cli, opts);