failproofai 1.0.12-beta.1 → 1.0.12

package/dist/worker.mjs

@@ -1166,7 +1166,7 @@ function instruct(reason) {
 }
 
 // package.json
-var version = "1.0.12-beta.1";
+var version = "1.0.12";
 var init_package = () => {};
 
 // src/hooks/agent-targets.ts
@@ -1474,6 +1474,40 @@ function readCloudJevState() {
   const deployment = Number.isSafeInteger(active.deployment) ? active.deployment : null;
   return { jevMode, deployment, errors };
 }
+function readCloudJevAssignments() {
+  try {
+    const active = readActiveRaw();
+    if (!active || !Array.isArray(active.jevPolicies))
+      return null;
+    const schema = active.schemaVersion;
+    const out = [];
+    for (const raw of active.jevPolicies) {
+      if (!raw || typeof raw !== "object" || Array.isArray(raw))
+        return null;
+      const entry = raw;
+      if (typeof entry.id !== "string" || !POLICY_ID_RE.test(entry.id))
+        return null;
+      if (!Number.isSafeInteger(entry.version) || entry.version < 0)
+        return null;
+      if (entry.effect !== undefined && entry.effect !== "enforce" && entry.effect !== "observe")
+        return null;
+      const targets = parseAgentTargets(entry.agentTargets, schema);
+      out.push({
+        id: entry.id,
+        version: entry.version,
+        effect: entry.effect === "observe" ? "observe" : "enforce",
+        ...targets ? { agentTargets: targets } : {}
+      });
+    }
+    return out;
+  } catch {
+    return null;
+  }
+}
+function cloudJevAssignmentsFor(agent) {
+  const all = readCloudJevAssignments();
+  return all === null ? null : all.filter((a) => agentTargetsMatch(a.agentTargets, agent));
+}
 function cloudReviewerName(policyId, name) {
   return `cloud:${policyId}/${name}`;
 }
@@ -2104,9 +2138,11 @@ function effectiveReviewerNames() {
     return cached;
   let names = NO_REVIEWERS;
   cachedContested = new Map;
+  cachedPackChecks = false;
   try {
     const packs = jevPacks(readInstalledPacks().packs, reviewerCli);
     names = reviewerNamesFor(packs);
+    cachedPackChecks = names.size > 0;
     cachedContested = contestedSemanticNames(packs);
   } catch {}
   try {
@@ -2124,6 +2160,10 @@ function contestedReviewerNames() {
 function jevChecksInstalled() {
   return effectiveReviewerNames().size > 0;
 }
+function packJevChecksInstalled() {
+  effectiveReviewerNames();
+  return cachedPackChecks;
+}
 function reviewerNamesFor(packs) {
   const contested = contestedSemanticNames(packs);
   const declared = packs.flatMap((p) => (p.semantic ?? []).filter((s) => !isReservedClaim(p, s.name)).map((s) => s.name)).filter((name) => !contested.has(name));
@@ -2136,7 +2176,7 @@ function forgetEffectiveReviewerNames(cli, agent = null) {
   reviewerCli = cli;
   reviewerAgent = agent;
 }
-var cached = null, cachedContested, reviewerCli, reviewerAgent = null;
+var cached = null, cachedPackChecks = false, cachedContested, reviewerCli, reviewerAgent = null;
 var init_effective_reviewers = __esm(() => {
   init_pack_manifest();
   init_policy_authority();
@@ -4362,6 +4402,57 @@ function normalizeJevFallbackReason(raw) {
   const code = JEV_FREE_TEXT_PREFIXES.get(head) ?? head;
   return JEV_REASON_CODES.has(code) ? code : JEV_REASON_OTHER;
 }
+function sanitizeCheck(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return null;
+  const r = raw;
+  if (typeof r.check !== "string" || !JEV_CHECK_NAME_RE.test(r.check))
+    return null;
+  if (typeof r.verdict !== "string" || !CHECK_VERDICT_SET.has(r.verdict))
+    return null;
+  if (typeof r.why !== "string" || !CHECK_WHY_SET.has(r.why))
+    return null;
+  if (!isP(r.p))
+    return null;
+  const out = {
+    check: r.check,
+    verdict: r.verdict,
+    why: r.why,
+    p: round2(r.p)
+  };
+  if (typeof r.policy === "string" && isJevPolicyName(r.policy) && !/\s/.test(r.policy) && /^(?:cloud|pack)\//.test(r.policy)) {
+    out.policy = r.policy;
+  }
+  if (isP(r.exempt))
+    out.exempt = round2(r.exempt);
+  if (r.watched === true)
+    out.watched = true;
+  if (r.probes && typeof r.probes === "object" && !Array.isArray(r.probes)) {
+    const probes = {};
+    for (const [id, v] of Object.entries(r.probes)) {
+      if (Object.keys(probes).length >= JEV_CHECK_PROBES_MAX)
+        break;
+      if (JEV_PROBE_ID_RE.test(id) && isP(v))
+        probes[id] = round2(v);
+    }
+    if (Object.keys(probes).length > 0)
+      out.probes = probes;
+  }
+  return out;
+}
+function sanitizeJevChecks(raw) {
+  if (!Array.isArray(raw))
+    return;
+  const out = [];
+  for (const item of raw) {
+    if (out.length >= JEV_CHECKS_MAX)
+      break;
+    const rec = sanitizeCheck(item);
+    if (rec)
+      out.push(rec);
+  }
+  return raw.length > 0 && out.length === 0 ? undefined : out;
+}
 function sanitizeJevActivity(entry) {
   if (!JEV_ACTIVITY_KEYS.some((k) => entry[k] !== undefined))
     return entry;
@@ -4400,6 +4491,11 @@ function sanitizeJevActivity(entry) {
     out.jevModel = out.jevModel.trim();
   else
     drop("jevModel");
+  const checks = out.evaluator === "jev" ? sanitizeJevChecks(out.jevChecks) : undefined;
+  if (checks === undefined)
+    drop("jevChecks");
+  else
+    out.jevChecks = checks;
   return out;
 }
 function jevOutcome(raw) {
@@ -4410,6 +4506,8 @@ function outcomeOf(e) {
     return "fallback";
   if (e.evaluator !== "jev")
     return null;
+  if (Array.isArray(e.jevChecks) && e.jevChecks.length === 0)
+    return "no-request";
   if (e.jevCleared !== undefined || e.jevLatencyMs !== undefined || e.jevModel !== undefined)
     return "answered";
   if (e.jevDecision === "deny" || e.jevDecision === "instruct")
@@ -4418,7 +4516,7 @@ function outcomeOf(e) {
     return "no-request";
   return "not-consulted";
 }
-var JEV_ACTIVITY_KEYS, EVALUATORS, DECISIONS, MODES, REASON_HEAD_RE, HTTP_CODE_RE, JEV_REASON_MAX_CHARS = 40, JEV_REASON_OTHER = "other", JEV_REASON_CODE_LIST, JEV_REASON_CODES, JEV_REASON_REQUEST_CUT = "request-cut", JEV_REASON_PROVIDER_REFUSED = "provider-refused", JEV_FREE_TEXT_PREFIXES, JEV_MODEL_RE, JEV_POLICY_NAME_MAX_CHARS = 200, NAME_FORBIDDEN_RE, REGISTERED_NAMESPACE_RE, JEV_CLEARED_MAX = 64, ANSWERED_BUT_NOT_APPLIED_REASONS;
+var JEV_ACTIVITY_KEYS, EVALUATORS, DECISIONS, MODES, REASON_HEAD_RE, HTTP_CODE_RE, JEV_REASON_MAX_CHARS = 40, JEV_REASON_OTHER = "other", JEV_REASON_CODE_LIST, JEV_REASON_CODES, JEV_REASON_REQUEST_CUT = "request-cut", JEV_REASON_PROVIDER_REFUSED = "provider-refused", JEV_FREE_TEXT_PREFIXES, JEV_MODEL_RE, JEV_POLICY_NAME_MAX_CHARS = 200, NAME_FORBIDDEN_RE, REGISTERED_NAMESPACE_RE, JEV_CLEARED_MAX = 64, JEV_CHECK_VERDICTS, JEV_CHECK_WHY, JEV_CHECKS_MAX = 32, JEV_CHECK_PROBES_MAX = 8, JEV_CHECK_NAME_RE, JEV_PROBE_ID_RE, CHECK_VERDICT_SET, CHECK_WHY_SET, isP = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 && v <= 1, round2 = (v) => Math.round(v * 100) / 100, ANSWERED_BUT_NOT_APPLIED_REASONS;
 var init_jev_activity = __esm(() => {
   JEV_ACTIVITY_KEYS = [
     "evaluator",
@@ -4427,7 +4525,8 @@ var init_jev_activity = __esm(() => {
     "jevFallbackReason",
     "jevLatencyMs",
     "jevModel",
-    "jevMode"
+    "jevMode",
+    "jevChecks"
   ];
   EVALUATORS = new Set(["jev", "jev-fallback"]);
   DECISIONS = new Set(["allow", "instruct", "deny"]);
@@ -4474,6 +4573,22 @@ var init_jev_activity = __esm(() => {
   JEV_MODEL_RE = /^[A-Za-z0-9._:/@~+-]{1,200}$/;
   NAME_FORBIDDEN_RE = /[\u0000-\u001f\u007f-\u009f\u2028\u2029]/;
   REGISTERED_NAMESPACE_RE = /^(?:custom|pack|cloud|failproofai|\.failproofai-[A-Za-z0-9_-]{1,32})\//;
+  JEV_CHECK_VERDICTS = ["none", "deny", "instruct", "overridden"];
+  JEV_CHECK_WHY = [
+    "not-detected",
+    "exempt",
+    "fired",
+    "injection",
+    "user-asked",
+    "op-requested",
+    "task-step",
+    "downgraded",
+    "scan-incomplete"
+  ];
+  JEV_CHECK_NAME_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
+  JEV_PROBE_ID_RE = /^[a-z][a-z0-9_]{0,31}$/;
+  CHECK_VERDICT_SET = new Set(JEV_CHECK_VERDICTS);
+  CHECK_WHY_SET = new Set(JEV_CHECK_WHY);
   ANSWERED_BUT_NOT_APPLIED_REASONS = new Set([
     JEV_REASON_REQUEST_CUT,
     "truncated",
@@ -4534,7 +4649,8 @@ function combineTwoTier(verdicts, review, mode) {
     ...cleared.length > 0 && RANK[enforced.final.decision] < RANK[legacy.decision] ? { jevCleared: cleared } : {},
     ...review.latencyMs !== null ? { jevLatencyMs: review.latencyMs } : {},
     ...review.model ? { jevModel: review.model } : {},
-    jevMode: mode
+    jevMode: mode,
+    ...review.checks ? { jevChecks: [...review.checks] } : {}
   };
   if (mode === "observe") {
     const observeVerdict = review.decision === "deny" || review.decision === "instruct" ? {
@@ -5201,6 +5317,12 @@ async function evaluatePolicies(eventType, payload, session, config, twoTier) {
     twoTier.releaseRegistry?.();
     review = await twoTier.review;
   }
+  if (review.kind === "answered" && review.asked.length === 0 && review.decision === "allow" && !review.observedAsked?.length) {
+    return formatVerdict(eventType, session, toolName, regexOnly(collected.verdicts));
+  }
+  if (review.kind === "not-consulted" && twoTier.cloud) {
+    return formatVerdict(eventType, session, toolName, regexOnly(collected.verdicts));
+  }
   const combined = combineTwoTier(collected.verdicts, review, twoTier.mode);
   if (combined.cleared.length > 0) {
     hookLogInfo(`jev ${twoTier.mode === "observe" ? "would clear" : "cleared"}: ${combined.cleared.join(", ")}`);
@@ -5214,7 +5336,8 @@ async function evaluatePolicies(eventType, payload, session, config, twoTier) {
       activity: combined.activity,
       decidedByJev: combined.decidedByJev,
       ...(combined.decidedByJev || combined.observeVerdict) && review.kind === "answered" && review.origin ? { jevOrigin: review.origin } : {},
-      ...combined.observeVerdict ? { observeVerdict: combined.observeVerdict } : {}
+      ...combined.observeVerdict ? { observeVerdict: combined.observeVerdict } : {},
+      ...review.kind === "answered" && review.observedCloud?.length ? { observedCloud: review.observedCloud } : {}
     }
   };
 }
@@ -12092,7 +12215,13 @@ function runtimeAgentSettingsPath(cli, cwd, userHome = homedir21(), hookScope) {
     if (config?.trim())
       return resolve15(config);
     const state = process.env.OPENCLAW_STATE_DIR || process.env.OPENCLAW_HOME;
-    return resolve15(state?.trim() ? state : resolve15(userHome, ".openclaw"), "openclaw.json");
+    if (state?.trim())
+      return resolve15(state, "openclaw.json");
+    const profile = process.env.OPENCLAW_PROFILE?.trim();
+    if (profile && profile !== "default" && /^[A-Za-z0-9._-]{1,80}$/.test(profile) && !profile.startsWith(".")) {
+      return resolve15(userHome, `.openclaw-${profile}`, "openclaw.json");
+    }
+    return resolve15(userHome, ".openclaw", "openclaw.json");
   }
   const relative = USER_SETTINGS[cli];
   if (!relative)
@@ -12246,13 +12375,6 @@ function validateBaseUrl(raw) {
   url.pathname = url.pathname.replace(/\/+$/, "") || "/";
   return { ok: true, value: url.toString() };
 }
-function isPlainHttp(url) {
-  try {
-    return new URL(url).protocol === "http:";
-  } catch {
-    return false;
-  }
-}
 function originOf(raw) {
   try {
     const url = new URL(raw);
@@ -12387,12 +12509,6 @@ function validateJevConfig(raw, envKey, cloud) {
       return { ok: false, problem: 'mode must be "off", "observe" or "enforce"' };
     cfg.mode = mode;
   }
-  if (cfg.baseUrl !== undefined && isPlainHttp(cfg.baseUrl) && cfg.mode === "enforce") {
-    return {
-      ok: false,
-      problem: "plain http (to localhost) is accepted only with mode observe: in enforce mode Jev's answers can clear a deny, " + "and while the local proxy is down any process on this machine could take its port and answer. " + (cfg.provider === JEV_CLOUD_PROVIDER ? "Reconnect to an https FailproofAI Cloud URL (failproofai config --token <key> --url https://…), or keep mode observe" : "Use https, or mode observe")
-    };
-  }
   return { ok: true, value: cfg };
 }
 function validateLoadedJevConfig(cfg) {
@@ -15590,6 +15706,7 @@ __export(exports_intent, {
   cleanHumanTurn: () => cleanHumanTurn,
   cleanUserSaid: () => cleanUserSaid,
   humanMessageText: () => humanMessageText,
+  intentProfileKey: () => intentProfileKey,
   lastAgentMessage: () => lastAgentMessage,
   looseIntentStoreDir: () => looseIntentStoreDir,
   pruneExpiredSessions: () => pruneExpiredSessions,
@@ -15609,13 +15726,27 @@ import {
   writeFileSync as writeFileSync8
 } from "node:fs";
 import { dirname as dirname10, resolve as resolve17 } from "node:path";
+function intentProfileKey(profile) {
+  if (validAgentIdentity(profile.agent))
+    return `${profile.agent.integration}.${profile.agent.instanceId}`;
+  return isKnownCli(profile.cli) ? profile.cli : null;
+}
+function storeSlot(sessionId, profile) {
+  if (profile === undefined)
+    return { dir: sessionsDir(), file: resolve17(sessionsDir(), `${sessionId}.json`) };
+  const key = intentProfileKey(profile);
+  if (key === null || !PROFILE_DIR_RE.test(key))
+    return null;
+  const dir = resolve17(sessionsDir(), key);
+  return { dir, file: resolve17(dir, `${sessionId}.json`) };
+}
 function modesAreMeaningful2() {
   return process.platform !== "win32";
 }
-function storeDirChain() {
+function storeDirChain(innermost = sessionsDir()) {
   const home = resolve17(failproofaiHome());
   const chain = [];
-  let dir = sessionsDir();
+  let dir = innermost;
   for (let i = 0;i < 8; i++) {
     chain.push(dir);
     if (dir === home)
@@ -15627,10 +15758,10 @@ function storeDirChain() {
   }
   return chain;
 }
-function looseIntentStoreDir() {
+function looseIntentStoreDir(innermost) {
   if (!modesAreMeaningful2())
     return null;
-  for (const dir of storeDirChain()) {
+  for (const dir of storeDirChain(innermost)) {
     let mode;
     try {
       mode = statSync20(dir).mode & 511;
@@ -15649,23 +15780,22 @@ function looseIntentStoreDir() {
   }
   return null;
 }
-function readIntentFile(sessionId) {
+function readIntentFile(slot) {
   try {
-    const parsed = JSON.parse(readFileSync19(intentFile(sessionId), "utf8"));
+    const parsed = JSON.parse(readFileSync19(slot.file, "utf8"));
     return Array.isArray(parsed?.prompts) ? parsed : { prompts: [] };
   } catch {
     return { prompts: [] };
   }
 }
-function appendPrompt(sessionId, entry) {
+function appendPrompt(slot, entry) {
   try {
-    const file = readIntentFile(sessionId);
+    const file = readIntentFile(slot);
     const last = file.prompts[file.prompts.length - 1];
     const kept = last && last.text === entry.text ? file.prompts.slice(0, -1) : file.prompts;
     file.prompts = [...kept, entry].slice(-MAX_RECORDED_PROMPTS);
-    const dir = sessionsDir();
-    mkdirSync9(dir, { recursive: true, mode: 448 });
-    const target = intentFile(sessionId);
+    mkdirSync9(slot.dir, { recursive: true, mode: 448 });
+    const target = slot.file;
     const isNew = !fileExists2(target);
     const tmp = `${target}.${process.pid}.tmp`;
     writeFileSync8(tmp, JSON.stringify(file), { mode: 384 });
@@ -15686,9 +15816,24 @@ function fileExists2(path) {
   }
 }
 function pruneExpiredSessions(now = Date.now()) {
+  const root = sessionsDir();
+  let removed = pruneDir(root, now);
+  try {
+    for (const name of readdirSync13(root)) {
+      if (!PROFILE_DIR_RE.test(name))
+        continue;
+      const dir = resolve17(root, name);
+      try {
+        if (statSync20(dir).isDirectory())
+          removed += pruneDir(dir, now);
+      } catch {}
+    }
+  } catch {}
+  return removed;
+}
+function pruneDir(dir, now) {
   let removed = 0;
   try {
-    const dir = sessionsDir();
     for (const name of readdirSync13(dir)) {
       if (!SESSION_FILE_RE3.test(name))
         continue;
@@ -15704,23 +15849,29 @@ function pruneExpiredSessions(now = Date.now()) {
   } catch {}
   return removed;
 }
-function recordPrompt(sessionId, prompt, agent, now) {
+function recordPrompt(sessionId, profile, prompt, agent, now) {
   if (!SESSION_ID_RE2.test(sessionId))
     return false;
   if (prompt.trim().length === 0)
     return false;
+  const slot = storeSlot(sessionId, profile);
+  if (!slot)
+    return false;
   try {
-    return appendPrompt(sessionId, { at: now, text: storable(prompt.trim()), agent: agent === null ? null : storable(agent) });
+    return appendPrompt(slot, { at: now, text: storable(prompt.trim()), agent: agent === null ? null : storable(agent) });
   } catch {
     return false;
   }
 }
-function livePrompts(sessionId, now) {
+function livePrompts(sessionId, now, profile) {
   if (!sessionId || !SESSION_ID_RE2.test(sessionId))
     return [];
-  if (looseIntentStoreDir() !== null)
+  const slot = storeSlot(sessionId, profile);
+  if (!slot)
+    return [];
+  if (looseIntentStoreDir(slot.dir) !== null)
     return [];
-  return readIntentFile(sessionId).prompts.filter((p) => typeof p?.text === "string" && typeof p.at === "number" && now - p.at <= INTENT_MAX_AGE_MS && p.at - now <= MAX_CLOCK_SKEW_MS);
+  return readIntentFile(slot).prompts.filter((p) => typeof p?.text === "string" && typeof p.at === "number" && now - p.at <= INTENT_MAX_AGE_MS && p.at - now <= MAX_CLOCK_SKEW_MS);
 }
 function replaceTagBlocks(text, tag, replace, attributes = false) {
   const open = attributes ? `<${tag}` : `<${tag}>`;
@@ -16067,16 +16218,16 @@ function captureIntent(ev, now = Date.now()) {
     const cleaned = cleanHumanTurn(raw);
     if (cleaned === null)
       return;
-    recordPrompt(sessionId, cleaned, lastAgentMessage(ev.transcriptPath), now);
+    recordPrompt(sessionId, ev.profile, cleaned, lastAgentMessage(ev.transcriptPath), now);
   } catch {}
 }
-function readIntent(sessionId, now = Date.now()) {
-  const prompts = livePrompts(sessionId, now);
+function readIntent(sessionId, now = Date.now(), profile) {
+  const prompts = livePrompts(sessionId, now, profile);
   const latest = prompts[prompts.length - 1];
   const agent = latest && typeof latest.agent === "string" && latest.agent.length > 0 ? latest.agent : null;
   return { userSaid: prompts.map((p) => p.text), agentLastMessage: agent };
 }
-var MAX_RECORDED_PROMPTS = 5, INTENT_MAX_AGE_MS, MAX_CLOCK_SKEW_MS, SESSION_ID_RE2, sessionsDir = () => resolve17(semanticDir(), "sessions"), intentFile = (sessionId) => resolve17(sessionsDir(), `${sessionId}.json`), DIR_WRITABLE_BY_OTHERS3 = 18, SESSION_FILE_RE3, NON_HUMAN_PREFIXES, CONTINUATION_PREFIX = "This session is being continued from a previous conversation", IDE_MACHINE_OPENERS, IDE_AMBIGUOUS_OPENERS, IDE_REQUEST_HEADINGS, obj = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : undefined, CLAUDE_MACHINE_SOURCES, claudeMachineTurn = (payload) => typeof payload.source === "string" && CLAUDE_MACHINE_SOURCES.has(payload.source), piMachineTurn = (payload) => payload.input_source === "extension" || payload.source === "extension", openclawMachineRun = (payload) => {
+var MAX_RECORDED_PROMPTS = 5, INTENT_MAX_AGE_MS, MAX_CLOCK_SKEW_MS, SESSION_ID_RE2, sessionsDir = () => resolve17(semanticDir(), "sessions"), PROFILE_DIR_RE, DIR_WRITABLE_BY_OTHERS3 = 18, SESSION_FILE_RE3, NON_HUMAN_PREFIXES, CONTINUATION_PREFIX = "This session is being continued from a previous conversation", IDE_MACHINE_OPENERS, IDE_AMBIGUOUS_OPENERS, IDE_REQUEST_HEADINGS, obj = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : undefined, CLAUDE_MACHINE_SOURCES, claudeMachineTurn = (payload) => typeof payload.source === "string" && CLAUDE_MACHINE_SOURCES.has(payload.source), piMachineTurn = (payload) => payload.input_source === "extension" || payload.source === "extension", openclawMachineRun = (payload) => {
   const meta = obj(payload.openclaw);
   if (!meta)
     return false;
@@ -16092,9 +16243,11 @@ var MAX_RECORDED_PROMPTS = 5, INTENT_MAX_AGE_MS, MAX_CLOCK_SKEW_MS, SESSION_ID_R
 var init_intent = __esm(() => {
   init_fp_home();
   init_envelope();
+  init_agent_targets();
   INTENT_MAX_AGE_MS = 6 * 60 * 60 * 1000;
   MAX_CLOCK_SKEW_MS = 5 * 60 * 1000;
   SESSION_ID_RE2 = /^[A-Za-z0-9._-]{1,128}$/;
+  PROFILE_DIR_RE = /^[a-z]+(?:\.agt_[0-9a-f]{16,32})?$/;
   SESSION_FILE_RE3 = /^[A-Za-z0-9._-]{1,128}\.json(?:\.\d+\.tmp)?$/;
   NON_HUMAN_PREFIXES = [
     "<local-command-caveat>",
@@ -17004,7 +17157,11 @@ function parseOutcome(raw, i) {
   if (!origin || typeof origin !== "object" || typeof origin.cloudPolicyId !== "string" || !POLICY_ID_RE2.test(origin.cloudPolicyId) || !Number.isSafeInteger(origin.cloudVersion) || origin.cloudVersion < 0) {
     malformed(`outcome ${i} has no Cloud origin`);
   }
-  return {
+  if (o.effect !== undefined && o.effect !== "enforce" && o.effect !== "observe")
+    malformed(`outcome ${i} has an unknown effect`);
+  if (o.reason !== undefined && o.reason !== null && typeof o.reason !== "string")
+    malformed(`outcome ${i} reason is not text`);
+  const outcome = {
     policy: o.policy,
     mode: o.mode,
     ...typeof o.userCanOverride === "boolean" ? { userCanOverride: o.userCanOverride } : {},
@@ -17018,41 +17175,103 @@ function parseOutcome(raw, i) {
     ...o.intent !== undefined ? { intent: o.intent } : {},
     ...o.targetScanIncomplete === true ? { targetScanIncomplete: true } : {}
   };
+  return {
+    outcome,
+    cloudPolicyId: origin.cloudPolicyId,
+    cloudVersion: origin.cloudVersion,
+    observe: o.effect === "observe",
+    reason: typeof o.reason === "string" ? capReason(o.reason) : null
+  };
 }
-function parseCloudReply(raw) {
-  if (!raw || typeof raw !== "object" || Array.isArray(raw))
-    malformed("no cloud block");
-  const block = raw;
-  const v = block.verdict;
+function capReason(reason) {
+  return reason.length > MAX_CLOUD_REASON_CHARS ? `${reason.slice(0, MAX_CLOUD_REASON_CHARS - 1)}…` : reason;
+}
+function observedChecks(parsed, watched = null) {
+  const firing = watched?.parsed.filter((p) => p.outcome.verdict === "deny" || p.outcome.verdict === "instruct") ?? [];
+  const watchedReason = firing.length === 1 && typeof watched?.v.reason === "string" ? capReason(watched.v.reason) : null;
+  const byPolicy = new Map;
+  for (const p of parsed) {
+    const verdict = p.outcome.verdict;
+    if (verdict !== "deny" && verdict !== "instruct")
+      continue;
+    const prev = byPolicy.get(p.cloudPolicyId);
+    if (prev && SEVERITY[prev.decision] >= SEVERITY[verdict])
+      continue;
+    byPolicy.set(p.cloudPolicyId, {
+      cloudPolicyId: p.cloudPolicyId,
+      cloudVersion: p.cloudVersion,
+      check: p.outcome.policy,
+      decision: verdict,
+      reason: p.reason ?? (firing[0] === p ? watchedReason : null) ?? `Flagged by semantic review (semantic/${p.outcome.policy})`
+    });
+  }
+  return [...byPolicy.values()];
+}
+function parseVerdictBlock(rawVerdict, rawAsked, what) {
+  const v = rawVerdict;
   if (!v || typeof v !== "object" || Array.isArray(v))
-    malformed("no verdict");
+    malformed(`no ${what}`);
   if (typeof v.decision !== "string" || !DECISIONS2.has(v.decision))
-    malformed("verdict has no decision");
+    malformed(`${what} has no decision`);
   if (v.reason !== null && v.reason !== undefined && typeof v.reason !== "string")
-    malformed("verdict reason is not text");
+    malformed(`${what} reason is not text`);
   if (!Array.isArray(v.outcomes) || v.outcomes.length > MAX_LIST)
-    malformed("verdict has no outcomes list");
+    malformed(`${what} has no outcomes list`);
   if (v.beyondTask !== undefined && typeof v.beyondTask !== "boolean")
-    malformed("verdict beyondTask is not a flag");
-  const outcomes = v.outcomes.map(parseOutcome);
-  const asked = names(block.asked, "asked");
+    malformed(`${what} beyondTask is not a flag`);
+  const parsed = v.outcomes.map(parseOutcome);
+  const asked = names(rawAsked, `${what} asked`);
   const askedSet = new Set(asked);
   const seen = new Set;
-  outcomes.forEach((o, i) => {
+  parsed.forEach(({ outcome: o }, i) => {
     if (!askedSet.has(o.policy))
-      malformed(`outcome ${i} answers ${JSON.stringify(o.policy)}, which Cloud did not ask`);
+      malformed(`${what} outcome ${i} answers ${JSON.stringify(o.policy)}, which Cloud did not ask`);
     const key = `${o.origin?.packId ?? ""}\x00${o.policy}`;
     if (seen.has(key))
-      malformed(`outcome ${i} answers ${JSON.stringify(o.policy)} twice`);
+      malformed(`${what} outcome ${i} answers ${JSON.stringify(o.policy)} twice`);
     seen.add(key);
   });
-  if (outcomes.some((o) => o.verdict === "deny") && v.decision !== "deny")
+  return { v, parsed, asked };
+}
+function parseCloudReply(raw, observedPolicies = []) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    malformed("no cloud block");
+  const block = raw;
+  const { v, parsed, asked } = parseVerdictBlock(block.verdict, block.asked, "verdict");
+  let watched = null;
+  if (block.observed !== undefined && block.observed !== null) {
+    const o = block.observed;
+    if (typeof o !== "object" || Array.isArray(o))
+      malformed("observed is not an object");
+    watched = parseVerdictBlock(o.verdict, o.asked, "observed verdict");
+    if (watched.parsed.some((p) => p.outcome.verdict === "deny") && watched.v.decision !== "deny") {
+      malformed("an observed check denied but its verdict does not");
+    }
+  }
+  const observeIds = new Set(observedPolicies);
+  const isObserved = (p) => p.observe || observeIds.has(p.cloudPolicyId);
+  const enforced = parsed.filter((p) => !isObserved(p)).map((p) => p.outcome);
+  const observedHere = parsed.filter(isObserved);
+  const observed = [...observedHere, ...watched?.parsed ?? []];
+  if (enforced.some((o) => o.verdict === "deny") && v.decision !== "deny")
     malformed("a check denied but the verdict does not");
+  const cloudReason = typeof v.reason === "string" ? capReason(v.reason) : null;
+  let decision = v.decision;
+  let reason = cloudReason;
+  if (observedHere.length > 0) {
+    const own = enforced.some((o) => o.verdict === "deny") ? "deny" : enforced.some((o) => o.verdict === "instruct") || v.beyondTask === true ? "instruct" : "allow";
+    const capped = RANK2[own] <= RANK2[decision] ? own : decision;
+    if (capped !== decision)
+      reason = null;
+    decision = capped;
+  }
   return {
+    observed: observedChecks(observed, watched),
+    observedAsked: [...observedHere.map((p) => p.outcome.policy), ...watched?.asked ?? []],
     verdict: {
-      decision: v.decision,
-      reason: typeof v.reason === "string" ? v.reason.length > MAX_CLOUD_REASON_CHARS ? `${v.reason.slice(0, MAX_CLOUD_REASON_CHARS - 1)}…` : v.reason : null,
-      outcomes,
+      decision,
+      reason,
+      outcomes: enforced,
       injectionSuspected: nullableProbability(v.injectionSuspected, "injectionSuspected"),
       scopeWithinRequest: nullableProbability(v.scopeWithinRequest, "scopeWithinRequest"),
       beyondTask: v.beyondTask === true
@@ -17062,6 +17281,29 @@ function parseCloudReply(raw) {
     droppedCloud: names(block.droppedCloud, "droppedCloud")
   };
 }
+function parseObservedOutcomes(raw) {
+  try {
+    const block = raw?.observed;
+    if (!block || typeof block !== "object" || Array.isArray(block))
+      return [];
+    const asked = new Set(names(block.asked, "observed.asked"));
+    const outcomes = block.verdict?.outcomes ?? [];
+    if (!Array.isArray(outcomes) || outcomes.length > MAX_LIST)
+      return [];
+    const seen = new Set;
+    const out = [];
+    outcomes.forEach((o, i) => {
+      const parsed = parseOutcome(o, i).outcome;
+      if (!asked.has(parsed.policy) || seen.has(parsed.policy))
+        return;
+      seen.add(parsed.policy);
+      out.push(parsed);
+    });
+    return out;
+  } catch {
+    return [];
+  }
+}
 function joinLines(reasons) {
   const lines = [];
   for (const reason of reasons) {
@@ -17108,6 +17350,22 @@ function expectedQuestions(request, prepared, dropped) {
   }));
   return { ...request, questions };
 }
+function cloudCheckAnswers(response, asked) {
+  const out = {};
+  if (asked.length === 0)
+    return out;
+  const names = new Set(asked);
+  const answers = response.answers && typeof response.answers === "object" ? response.answers : {};
+  for (const [id, a] of Object.entries(answers)) {
+    const dot = id.lastIndexOf(".");
+    if (dot <= 0 || !names.has(id.slice(0, dot)) || !QUESTION_PART_RE.test(id.slice(dot + 1)))
+      continue;
+    const p = a?.noul;
+    if (isProbability(p))
+      out[id] = p;
+  }
+  return out;
+}
 function presentAnswers(response) {
   const out = {};
   const answers = response.answers && typeof response.answers === "object" ? response.answers : {};
@@ -17136,7 +17394,7 @@ async function evaluateCloudSemantic(input, opts) {
       model: opts.model ?? DEFAULT_JEV_MODEL,
       modelVerified: true,
       via: "none",
-      cloud: { asked: [], droppedLocal: [], droppedCloud: [] }
+      cloud: { asked: [], droppedLocal: [], droppedCloud: [], answers: {}, observed: [], observedAsked: [], observedOutcomes: [] }
     };
   }
   let prepared;
@@ -17177,11 +17435,13 @@ async function evaluateCloudSemantic(input, opts) {
     const timeout = AbortSignal.timeout(opts.timeoutMs ?? envNumber2("FAILPROOFAI_JEV_TIMEOUT_MS", DEFAULT_JEV_TIMEOUT_MS));
     const signal = opts.signal ? AbortSignal.any([timeout, opts.signal]) : timeout;
     const response = await transport(request, signal);
-    const reply = parseCloudReply(response.cloud);
+    const reply = parseCloudReply(response.cloud, opts.observedPolicies);
+    const observedAsked = new Set(reply.observedAsked);
+    const observedOutcomes = parseObservedOutcomes(response.cloud).filter((o) => observedAsked.has(o.policy));
     const own = new Map(prepared.selected.map((p) => [p.name, p]));
     const dropped = new Set(reply.droppedLocal.filter((name) => own.has(name)));
     const kept = prepared.selected.filter((p) => !dropped.has(p.name));
-    const shortCircuit = kept.length === 0 && reply.asked.length === 0 && reply.verdict.outcomes.length === 0;
+    const shortCircuit = kept.length === 0 && reply.asked.length === 0 && reply.verdict.outcomes.length === 0 && reply.observedAsked.length === 0;
     const answers = shortCircuit ? presentAnswers(response) : readAnswers(expectedQuestions(request, prepared, dropped), response);
     const local = prepared.intent === "v1" ? decideV1(kept, answers, input.toolInput, prepared.userSaid, prepared.agentLastMessage, {
       ...opts.v1,
@@ -17203,7 +17463,11 @@ async function evaluateCloudSemantic(input, opts) {
       cloud: {
         asked: reply.asked,
         droppedLocal: [...dropped].map((name) => ({ name, packId: own.get(name)?.origin?.packId ?? null })),
-        droppedCloud: reply.droppedCloud
+        droppedCloud: reply.droppedCloud,
+        answers: cloudCheckAnswers(response, [...reply.asked, ...reply.observedAsked]),
+        observed: reply.observed,
+        observedAsked: reply.observedAsked,
+        observedOutcomes
       }
     };
   } catch (err) {
@@ -17216,7 +17480,7 @@ async function evaluateCloudSemantic(input, opts) {
     return degraded(`error: ${err instanceof Error ? err.message : String(err)}`);
   }
 }
-var CLOUD_BLOCK_VERSION = 1, MAX_TARGET_SCAN_CHARS = 64000, MAX_CLOUD_BLOCK_BYTES = 240000, blockBytes = (block) => Buffer.byteLength(JSON.stringify(block), "utf8"), REDACTED_TARGET_WORD = "\x00redacted", MAX_SECRET_SCAN_CHARS, REDACTION_MARKER, REDACTED_SAID = "\x00", POLICY_ID_RE2, MAX_NAME_CHARS = 256, MAX_LIST = 4096, MAX_CLOUD_REASON_CHARS = 8192, isProbability = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 && v <= 1, isName2 = (v) => typeof v === "string" && v.length > 0 && v.length <= MAX_NAME_CHARS, DECISIONS2, VERDICTS, INTENTS, RANK2, EMPTY_ALLOW;
+var CLOUD_BLOCK_VERSION = 1, MAX_TARGET_SCAN_CHARS = 64000, MAX_CLOUD_BLOCK_BYTES = 240000, blockBytes = (block) => Buffer.byteLength(JSON.stringify(block), "utf8"), REDACTED_TARGET_WORD = "\x00redacted", MAX_SECRET_SCAN_CHARS, REDACTION_MARKER, REDACTED_SAID = "\x00", POLICY_ID_RE2, MAX_NAME_CHARS = 256, MAX_LIST = 4096, MAX_CLOUD_REASON_CHARS = 8192, isProbability = (v) => typeof v === "number" && Number.isFinite(v) && v >= 0 && v <= 1, isName2 = (v) => typeof v === "string" && v.length > 0 && v.length <= MAX_NAME_CHARS, DECISIONS2, VERDICTS, INTENTS, SEVERITY, RANK2, EMPTY_ALLOW, QUESTION_PART_RE;
 var init_cloud_jev = __esm(() => {
   init_compile();
   init_decide();
@@ -17232,6 +17496,7 @@ var init_cloud_jev = __esm(() => {
   DECISIONS2 = new Set(["allow", "deny", "instruct"]);
   VERDICTS = new Set(["deny", "instruct", "overridden", "none"]);
   INTENTS = new Set(["op-requested", "task-step", "downgraded-task-step"]);
+  SEVERITY = { instruct: 1, deny: 2 };
   RANK2 = { allow: 0, instruct: 1, deny: 2 };
   EMPTY_ALLOW = {
     decision: "allow",
@@ -17241,6 +17506,7 @@ var init_cloud_jev = __esm(() => {
     scopeWithinRequest: null,
     beyondTask: false
   };
+  QUESTION_PART_RE = /^[a-z][a-z0-9_]{0,31}$/;
 });
 
 // src/hooks/semantic/jev-throttle.ts
@@ -17576,6 +17842,55 @@ function fallbackCode(reason) {
   const code = reason.split(":")[0].trim();
   return /^[a-z0-9][a-z0-9-]{0,63}$/.test(code) ? code : "error";
 }
+function checkWhy(o) {
+  switch (o.verdict) {
+    case "none":
+      return o.evidence < DEFAULT_THRESHOLDS_V1.fire ? "not-detected" : "exempt";
+    case "overridden":
+      return o.intent === "op-requested" ? "op-requested" : o.intent === "task-step" ? "task-step" : "user-asked";
+    case "deny":
+      return o.escalatedByInjection ? "injection" : "fired";
+    default:
+      if (o.intent === "downgraded-task-step")
+        return "downgraded";
+      return o.targetScanIncomplete ? "scan-incomplete" : "fired";
+  }
+}
+function checkPolicy(o) {
+  const packId = o.origin?.packId;
+  if (!packId)
+    return;
+  const at = o.origin?.packVersion ? `@${o.origin.packVersion}` : "";
+  return packId.startsWith("cloud:") ? `cloud/${packId.slice("cloud:".length)}${at}` : `pack/${packId}${at}`;
+}
+function checkRecords(outcomes, answers, watched = []) {
+  const all = [...outcomes.map((o) => ({ o, watched: false })), ...watched.map((o) => ({ o, watched: true }))];
+  return all.slice(0, JEV_CHECKS_MAX).map(({ o, watched: isWatched }) => {
+    const probes = {};
+    const prefix = `${o.policy}.`;
+    for (const [id, p] of Object.entries(answers)) {
+      if (Object.keys(probes).length >= JEV_CHECK_PROBES_MAX)
+        break;
+      if (!id.startsWith(prefix))
+        continue;
+      const part = id.slice(prefix.length);
+      if (part === "exempt" || part === "user_asked" || !JEV_PROBE_ID_RE.test(part))
+        continue;
+      probes[part] = round2(p);
+    }
+    const policy = checkPolicy(o);
+    return {
+      check: o.policy,
+      ...policy ? { policy } : {},
+      verdict: o.verdict,
+      why: checkWhy(o),
+      p: round2(o.evidence),
+      ...o.exempt !== null ? { exempt: round2(o.exempt) } : {},
+      ...Object.keys(probes).length > 0 ? { probes } : {},
+      ...isWatched ? { watched: true } : {}
+    };
+  });
+}
 function toReview(outcome, cached = false) {
   if (outcome.status === "degraded") {
     return { kind: "fallback", reason: fallbackCode(outcome.reason), latencyMs: outcome.latencyMs, model: null };
@@ -17584,15 +17899,19 @@ function toReview(outcome, cached = false) {
   const latencyMs = sent && !cached ? outcome.latencyMs : null;
   const model = sent ? outcome.model : null;
   const outcomes = outcome.verdict.outcomes;
-  const cloudAsked = "cloud" in outcome ? new Set(outcome.cloud.asked) : null;
+  const cloudSummary = "cloud" in outcome ? outcome.cloud : null;
+  const cloudAsked = cloudSummary ? new Set(cloudSummary.asked) : null;
   const unvouched = outcomes.some((o) => isCloudOutcome(o) && !(cloudAsked?.has(o.policy) ?? false));
   if (unvouched)
     return { kind: "fallback", reason: "malformed", latencyMs, model: null };
   const injection = sent ? outcome.verdict.injectionSuspected : null;
   const warned = (o) => o.verdict === "instruct" && o.intent !== "downgraded-task-step";
+  const cloudAnswers = cloudSummary?.answers ?? {};
+  const watched = cloudSummary?.observedOutcomes ?? [];
   return {
     kind: "answered",
     decision: outcome.verdict.decision,
+    checks: sent ? checkRecords(outcomes, { ...outcome.answers, ...cloudAnswers }, watched) : [],
     reason: outcome.verdict.reason,
     policyName: jevPolicyName(outcome),
     ...jevDecider(outcome)?.origin ? { origin: jevDecider(outcome)?.origin } : {},
@@ -17604,7 +17923,16 @@ function toReview(outcome, cached = false) {
     truncated: outcome.truncated && sent,
     requestCut: outcome.requestCut && sent,
     latencyMs,
-    model
+    model,
+    ...sent && cloudSummary?.observedAsked?.length ? { observedAsked: cloudSummary.observedAsked } : {},
+    ...cloudSummary?.observed?.length ? {
+      observedCloud: cloudSummary.observed.map((o) => ({
+        cloudPolicyId: o.cloudPolicyId,
+        cloudVersion: o.cloudVersion,
+        decision: o.decision,
+        reason: o.reason
+      }))
+    } : {}
   };
 }
 function toolInputRecord(raw) {
@@ -17623,7 +17951,8 @@ function startJevReview(cfg, call) {
       if (!settled)
         controller.abort();
     },
-    authorityOf
+    authorityOf,
+    ...call.cloud ? { cloud: true } : {}
   });
   let route;
   let throttled;
@@ -17647,7 +17976,10 @@ function startJevReview(cfg, call) {
   }
   let intent;
   try {
-    intent = intentReader.readIntent(call.sessionId);
+    intent = intentReader.readIntent(call.sessionId, undefined, {
+      cli: call.cli,
+      agent: call.agent !== undefined ? call.agent : call.cloud?.agent ?? null
+    });
   } catch {
     intent = { userSaid: [], agentLastMessage: null };
   }
@@ -17685,6 +18017,7 @@ function startJevReview(cfg, call) {
     ...options,
     machineId: cloud.machineId,
     agent: cloud.agent,
+    observedPolicies: cloud.observedPolicies ?? [],
     ...call.localPaused ? { policies: [] } : {}
   }) : evaluateSemantic(input, options);
   const answered = evaluated.then((outcome) => {
@@ -17746,6 +18079,7 @@ var init_jev_review = __esm(() => {
   init_jev_config();
   init_jev_throttle();
   init_session_root();
+  init_jev_activity();
   throttle = exports_jev_throttle;
   intentReader = exports_intent;
   ALWAYS_ON = new Set(BUILTIN_POLICIES.filter((p) => p.alwaysOn).map((p) => normalizePolicyName(p.name)));
@@ -17959,7 +18293,13 @@ async function readJevConfig(agent) {
       return {
         config: resolved.config,
         defaultMode: DEFAULT_JEV_MODE,
-        cloud: { machineId: resolved.machineId, deployment: cloud.deployment, mode: cloud.jevMode, agent: agent ?? null }
+        cloud: {
+          machineId: resolved.machineId,
+          deployment: cloud.deployment,
+          mode: cloud.jevMode,
+          agent: agent ?? null,
+          observedPolicies: (cloudJevAssignmentsFor(agent ?? null) ?? []).filter((a) => a.effect === "observe").map((a) => a.id)
+        }
       };
     }
     if (!existsSync22(jevConfigFile()))
@@ -18033,6 +18373,8 @@ async function startTwoTier(canonicalEventType, parsed, session, cli, opts, acti
     return null;
   if (!cloudAsks && !jevChecksInstalled())
     return null;
+  if (cloudAsks && cloudJevAssignmentsFor(agent)?.length === 0 && (activePause || !packJevChecksInstalled()))
+    return null;
   const loaded = await readJevConfig(agent);
   if (!loaded)
     return null;
@@ -18049,6 +18391,7 @@ async function startTwoTier(canonicalEventType, parsed, session, cli, opts, acti
       permissionMode: session.permissionMode,
       sessionId: session.sessionId,
       cli,
+      agent,
       ...loaded.cloud ? { cloud: loaded.cloud } : {},
       ...activePause ? { localPaused: true } : {}
     });
@@ -18075,13 +18418,16 @@ function jevTelemetry(activity) {
     return {};
   }
 }
-async function captureJevIntent(canonicalEventType, decision, parsed, session, cli, opts) {
+async function captureJevIntent(canonicalEventType, decision, parsed, session, cli, opts, agent) {
   if (canonicalEventType !== "UserPromptSubmit" || jevForcedOff(opts))
     return;
   try {
-    if (!cloudJevAsks(readCloudJevMode()) && !jevChecksInstalled())
+    const cloudAsks = cloudJevAsks(readCloudJevMode());
+    if (!cloudAsks && !jevChecksInstalled())
+      return;
+    if (cloudAsks && cloudJevAssignmentsFor(agent)?.length === 0 && !packJevChecksInstalled())
       return;
-    if (!await readJevConfig())
+    if (!await readJevConfig(agent))
       return;
     if (decision === "deny") {
       await Promise.resolve().then(() => init_enforcement_capability());
@@ -18095,7 +18441,8 @@ async function captureJevIntent(canonicalEventType, decision, parsed, session, c
       transcriptPath: session.transcriptPath,
       cli,
       payload: parsed,
-      prompt: parsed.prompt
+      prompt: parsed.prompt,
+      profile: { cli, agent }
     };
     captureIntent(event);
   } catch (err) {
@@ -18356,9 +18703,12 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
         reason: observeVerdict.reason
       });
     }
+    for (const o of result.twoTier?.observedCloud ?? []) {
+      observedResults.push({ policyId: o.cloudPolicyId, version: o.cloudVersion, decision: o.decision, reason: o.reason });
+    }
     const durationMs = Math.round(performance.now() - startTime);
     hookLogInfo(`result=${result.decision} policy=${result.policyName ?? "none"} duration=${durationMs}ms`);
-    await captureJevIntent(canonicalEventType, result.decision, parsed, session, cli, opts);
+    await captureJevIntent(canonicalEventType, result.decision, parsed, session, cli, opts, runtimeAgent);
     const matchedPolicies = matchedBeforeRelease ?? getPoliciesForEvent(canonicalEventType, parsed.tool_name).map((p) => p.name);
     const jevOrigin = result.policyName && result.twoTier?.decidedByJev ? result.twoTier.jevOrigin : undefined;
     const activityEntry = {