failproofai 1.0.12 → 1.0.13-beta.2

package/dist/worker.mjs

@@ -1166,7 +1166,7 @@ function instruct(reason) {
 }
 
 // package.json
-var version = "1.0.12";
+var version = "1.0.13-beta.2";
 var init_package = () => {};
 
 // src/hooks/agent-targets.ts

package/hermes-plugin/plugin.yaml

@@ -1,5 +1,5 @@
 name: failproofai
-version: 1.0.12
+version: 1.0.13-beta.2
 description: Real-time FailproofAI policy enforcement for Hermes
 manifest_version: 2
 api_version: 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "1.0.12",
+  "version": "1.0.13-beta.2",
   "description": "Observability and enforcement for AI agent harnesses. 40 built-in policies hooked into 12 of them — Claude Code, Codex, Cursor, Hermes, OpenClaw and more — blocking the tool call before it runs. Local dashboard included, no account needed.",
   "bin": {
     "failproofai": "./dist/cli.mjs",
@@ -81,7 +81,7 @@
     "access": "public"
   },
   "devDependencies": {
-    "@anthropic-ai/sdk": "^0.135.0",
+    "@anthropic-ai/sdk": "^1.3.0",
     "@mdx-js/mdx": "^3.1.1",
     "@tailwindcss/postcss": "^4.3.1",
     "@tanstack/react-virtual": "^3.14.10",
@@ -126,15 +126,15 @@
     "browserslist": "4.28.8"
   },
   "optionalDependencies": {
-    "@failproofai/failproofaid-linux-x64": "1.0.12",
-    "@failproofai/failproofaid-linux-arm64": "1.0.12",
-    "@failproofai/failproofaid-darwin-x64": "1.0.12",
-    "@failproofai/failproofaid-darwin-arm64": "1.0.12"
+    "@failproofai/failproofaid-linux-x64": "1.0.13-beta.2",
+    "@failproofai/failproofaid-linux-arm64": "1.0.13-beta.2",
+    "@failproofai/failproofaid-darwin-x64": "1.0.13-beta.2",
+    "@failproofai/failproofaid-darwin-arm64": "1.0.13-beta.2"
   },
   "failproofaidBinaries": {
-    "linux-x64": "3b379ce2b03dd8a74393daed2c3120309f591fe6433e0c939d70c7b20da55be7",
-    "linux-arm64": "bd77d7fee68dc2723fb57cc9c7fcf957b7e939c797e61b099c412263880aa16e",
-    "darwin-x64": "fce3faab9406b1c2267955f0e07d04ef7a2b7a0b007e12ecd144fcfef563ebc8",
-    "darwin-arm64": "765732f8f64aa3d3dbd98e93b1aba71fc02956f65baeb73b08447b37fac3a17b"
+    "linux-x64": "8301567948ddf752b6db30ed5998e62139df4c7e1669b280159a83a9b951b94c",
+    "linux-arm64": "ad53ec24d7c09b2dbc07b792c0739dc1e5f443fdb9a795174d3a40453f90bbcf",
+    "darwin-x64": "e4e65a1071a5793bafb73625dc49d211ff19d7e0d8c03c804959d1357aebea1e",
+    "darwin-arm64": "78aa90272e2ace07ac3648a419b961f8d8bfe56c7fd3a0193d3579085d77e9cb"
   }
 }

package/scripts/sync-agent-cli-harnesses-prompt.md

@@ -13,11 +13,11 @@ pull request with the fix — or, if a sync PR is already open, comment on it in
   finish the work.
 - The entrypoint has **already cut a fresh branch** named `auto/sync-cli-harnesses-<UTC>`.
   Do all your work here; do **not** switch branches or work on `main`.
-- failproofai's own Stop hooks are active in this checkout. If you make commits, you
-  will not be allowed to stop until you have **committed**, **pushed**, and **opened a
-  PR** for them. If you make **no** commits (nothing to sync, or you only commented on
-  an already-open sync PR), a clean working tree stops fine — so on those paths, do
-  **not** edit any files.
+- **You publish your own work.** If you edit files, you must **commit**, **push**, and
+  **open a PR** for them (Phase 3) before you stop — no hook does it for you, and the
+  entrypoint fails the run if you leave uncommitted changes. If you make **no**
+  commits (nothing to sync, or you only commented on an already-open sync PR), do
+  **not** edit any files, so the working tree stays clean.
 - Use ultracode / multi-agent orchestration: in Phase 1, fan out **one subagent per
   CLI** so the seven harnesses are checked in parallel.
 
@@ -48,23 +48,17 @@ For each verified CLI, compare the upstream docs to this repo across three scope
    `src/hooks/integrations.ts` (matcher-wrapper vs flat-array vs packages-array vs
    plugin registration; field names like `command` vs `bash`/`powershell`;
    `timeout` vs `timeoutSec` and its **unit** seconds-vs-ms; presence of `version`
-   / `$schema` / `matcher`; the settings-file path) **and** the committed dogfood
-   fixture on disk. The canonical worked example is git history / PR #482, which
-   dropped an invalid top-level `version` field and fixed a `60000`ms→`60`s timeout
-   unit in `.codex/hooks.json` by editing the writer, the fixture, and the tests
-   together.
+   / `$schema` / `matcher`; the settings-file path). The canonical worked example is
+   git history / PR #482, which dropped an invalid top-level `version` field and
+   fixed a `60000`ms→`60`s timeout unit in the `.codex/hooks.json` writer by editing
+   the writer and the tests together.
 
 ## Reading rules
 
-- This run relaxed two policies (`require-ci-green-before-stop`,
-  `block-read-outside-cwd`) so you can read and edit the settings fixtures. Even so,
-  when you only need to **inspect** a committed fixture, prefer
-  `git show HEAD:<path>` (e.g. `git show HEAD:.codex/hooks.json`) — it is never
-  blocked and is the reliable way to read `.claude/settings.json`, `.codex/hooks.json`,
-  `.cursor/hooks.json`, `.github/hooks/failproofai.json`,
-  `.pi/settings.json`, and `.opencode/*`.
-- Do **NOT** run `failproofai policies --install` (or any `failproofai` subcommand)
-  to regenerate a fixture — it is blocked. Edit fixtures by hand.
+- Do **NOT** run `failproofai policies --install` (or any `failproofai` subcommand):
+  it would write hook configs into this clone, and those must never land in the PR.
+  The settings-file shape lives in the writer in `src/hooks/integrations.ts` and its
+  tests — read and edit those.
 
 ## Phase 1 — Fan out one subagent per CLI
 
@@ -80,7 +74,7 @@ Spawn one subagent per CLI (seven, in parallel). Each subagent, for its CLI:
 2. Compare against this repo: the CLI's `*HOOK_EVENT_TYPES` array + paired
    `*EVENT_MAP` (scope 1); its `*_TOOL_MAP` / `*_TOOL_INPUT_MAP` and its branch in
    `src/hooks/policy-evaluator.ts` (scope 2); its literals in
-   `src/hooks/integrations.ts` + its dogfood fixture read via `git show` (scope 3).
+   `src/hooks/integrations.ts` (scope 3).
 3. Return a structured report: `{ cli, status: up-to-date | drift | unverified,
    scope1: {added, removed}, scope2: {...}, scope3: {...}, sources: [...] }`.
 
@@ -102,7 +96,7 @@ surface is documented in the package source, not a clean enumeration).
 
 Merge the subagent reports into one list of detected drift. Then, **before you edit a
 single file**, decide which path you are on — editing first would leave uncommitted
-changes that block a clean stop on the comment / no-op paths below.
+changes behind on the comment / no-op paths below, which fails the run.
 
 1. **No drift in any verified CLI** → do nothing: make no edits, open no PR, post no
    comment. Stop. (`unverified` alone is not drift — the docs may just be unreachable
@@ -124,7 +118,7 @@ changes that block a clean stop on the comment / no-op paths below.
      > (hook-sync bot — please fold these into this PR rather than opening a second sync PR.)
 
      Never push commits to another PR's branch; only comment, and leave the working
-     tree clean so this run stops cleanly.
+     tree clean.
 
    - **If no open sync PR exists → go to Phase 3** to apply the fixes and open one.
 
@@ -155,7 +149,7 @@ requires.
   an invalid field to remove, a wrong timeout unit, or a renamed tool id (the PR
   #482 class). When you do, move the whole quartet together, exactly like #482:
   the writer in `src/hooks/integrations.ts` (+ a shared helper if it dedupes
-  logic), the committed dogfood fixture, the unit test in
+  logic), the unit test in
   `__tests__/hooks/integrations.test.ts`, and the e2e test in
   `__tests__/e2e/hooks/<cli>-integration.e2e.test.ts` — plus a `types.ts` comment
   if it documents the old shape.
@@ -176,11 +170,14 @@ version's section. There is no `## Unreleased` section. Use the `### Features` (
 ### Commit, push, open the PR
 1. Stage only the files you intentionally edited (never `git add -A`):
    `src/hooks/types.ts`, `src/hooks/integrations.ts`, `src/hooks/policy-evaluator.ts`,
-   the touched `__tests__/...` files, the touched dogfood fixtures, and
-   `CHANGELOG.md` — whichever actually changed.
+   the touched `__tests__/...` files, and `CHANGELOG.md` — whichever actually
+   changed.
 2. Commit (e.g. `feat: sync agent CLI harnesses with upstream docs`), then
    `git push -u origin "$(git branch --show-current)"`.
 3. `gh pr create --base main --title "[auto] sync agent CLI harnesses with upstream docs" --body "<body>"`.
+4. Confirm before you stop: `git status --porcelain` is empty, the branch is pushed,
+   and `gh pr list --head "$(git branch --show-current)"` shows the PR. If any of
+   these fails, fix it — nothing else will.
 
 The PR **body** must contain, in order:
 
@@ -205,12 +202,10 @@ The PR **body** must contain, in order:
 - **Only edit** these paths, and only where drift requires it: `src/hooks/types.ts`,
   `src/hooks/integrations.ts`, `src/hooks/policy-evaluator.ts`,
   `__tests__/hooks/manager.test.ts`, `__tests__/hooks/integrations.test.ts`,
-  `__tests__/e2e/hooks/<cli>-integration.e2e.test.ts`, the seven dogfood fixtures
-  (`.claude/settings.json`, `.codex/hooks.json`, `.cursor/hooks.json`,
-  `.github/hooks/failproofai.json`, `.opencode/opencode.json`,
-  `.opencode/plugins/failproofai.mjs`, `.pi/settings.json`),
-  and `CHANGELOG.md`.
-- Do **NOT** edit `.failproofai/policies-config.json` (the entrypoint manages it),
+  `__tests__/e2e/hooks/<cli>-integration.e2e.test.ts`, and `CHANGELOG.md`.
+- Do **NOT** create hook configs in this clone (`.claude/settings.json`,
+  `.codex/hooks.json`, `.cursor/hooks.json`, `.github/hooks/`, `.opencode/`,
+  `.pi/settings.json`, `.failproofai/`), and do **NOT** edit
   `src/hooks/handler.ts`, `src/hooks/manager.ts`, or any other source file.
 - Do **NOT** add entries to any `*EVENT_MAP`, `*_TOOL_MAP`, or `*_TOOL_INPUT_MAP`
   for newly-added items. Removing a key when its array entry is removed IS allowed

package/src/hooks/daemon-service.ts

@@ -13,12 +13,14 @@ import {
   mkdirSync,
   mkdtempSync,
   readFileSync,
+  readdirSync,
+  statSync,
   writeFileSync,
   unlinkSync,
   rmSync,
 } from "node:fs";
 import { homedir, tmpdir, userInfo } from "node:os";
-import { resolve } from "node:path";
+import { dirname, resolve } from "node:path";
 import { execFileSync } from "node:child_process";
 import { hookLogWarn } from "./hook-logger";
 import { downloadFailproofaidBinary, installFromNpmPackage, installedBinaryPath } from "./daemon-download";
@@ -413,6 +415,142 @@ function systemdUnitPath(user: string = serviceUser()): string {
   return resolve(systemdUnitDir(), systemdUnitName(user));
 }
 
+/**
+ * Where a Linux install puts the copy of the daemon that systemd actually runs:
+ * `/opt/failproofai/<user>/bin/failproofaid-<version>`, root-owned.
+ *
+ * The binary is downloaded into `~/.failproofai/bin`, and a unit whose
+ * `ExecStart` points there works on Debian, Ubuntu and Mint — and on Fedora,
+ * RHEL, Rocky and Alma it never starts. Those ship SELinux enforcing, a file
+ * under a home directory is labelled `user_home_t`, and the targeted policy
+ * gives systemd (`init_t`) no execute permission on that type at all. The unit
+ * fails `203/EXEC Permission denied`, `waitForDaemonRunning()` times out, and
+ * `failproofai config` aborts at its very last step.
+ *
+ * The policy's generic `/opt/(.*\/)?bin(/.*)?` rule labels this path `bin_t`,
+ * which systemd may execute, and executing it moves the daemon into
+ * `unconfined_service_t` — the domain that may in turn run the worker's node
+ * from `~/.nvm` (also `user_home_t`) and accept hooks on the socket. So only
+ * the daemon binary moves; the worker command, the socket and the state under
+ * `~/.failproofai` stay where they are. Not `/usr/local/libexec`: both
+ * policies label that `usr_t`, which starts the daemon only through a
+ * secondary `init_t usr_t → unconfined_service_t` rule, where `bin_t` is the
+ * type the policy means for programs. Not `/usr/libexec` either: `/usr` is the
+ * package manager's, and read-only on Silverblue and CoreOS. All checked
+ * against the shipped policy on Fedora 41 and Rocky 9 with `matchpathcon` and
+ * `sesearch`.
+ *
+ * Per user for the same reason the unit name is: two people on one box may run
+ * different versions, and one's uninstall must not delete the other's binary.
+ * The `~/.failproofai/bin` copy is kept — `daemonVersionSkew()` and
+ * `refreshDaemonToCliVersion()` read the installed version from it.
+ *
+ * Redirectable for tests ONLY, like the unit directory.
+ */
+function systemBinaryRoot(user: string = serviceUser()): string {
+  return resolve(process.env.FAILPROOFAI_SYSTEM_BIN_DIR || "/opt/failproofai", user);
+}
+
+function systemBinaryDir(): string {
+  return resolve(systemBinaryRoot(), "bin");
+}
+
+/** The system binary directory on Linux, for the manual-removal instructions. */
+export function daemonSystemBinaryDir(): string | null {
+  return process.platform === "linux" ? systemBinaryRoot() : null;
+}
+
+/**
+ * The path systemd should start for `binaryPath`, or null when it should start
+ * `binaryPath` itself.
+ *
+ * Only a real file is copied. `FAILPROOFAI_DAEMON_BINARY` is "someone named a
+ * binary explicitly" and may be a command with arguments (this repo's own
+ * systemd tests use `/usr/bin/sleep infinity`), so it is started as given.
+ */
+export function systemBinaryTarget(binaryPath: string): string | null {
+  if (process.platform !== "linux" || process.env.FAILPROOFAI_DAEMON_BINARY) return null;
+  try {
+    if (!statSync(binaryPath).isFile()) return null;
+  } catch {
+    return null;
+  }
+  return resolve(systemBinaryDir(), `failproofaid-${version}`);
+}
+
+/**
+ * Whether this kernel has SELinux enabled. `/sys/fs/selinux` is mounted only
+ * when it is, enforcing or permissive.
+ */
+function selinuxEnabled(): boolean {
+  return existsSync("/sys/fs/selinux/enforce");
+}
+
+/**
+ * Copies the daemon binary into the system directory and returns the path the
+ * unit should start. Privileged; throws when the copy fails, which the caller
+ * reports as a failed install before any unit is written.
+ *
+ * Staged under a temp name and renamed into place, so a reinstall of the same
+ * version never writes into the file a running daemon was started from.
+ *
+ * `restorecon` afterwards, because a new file inherits the label of the
+ * directory it is created in, not the one the policy assigns to its path: the
+ * directories `install -d` creates under `/opt` (`usr_t`) come out `usr_t`
+ * too, never the `bin_t` the policy names for them.
+ */
+function stageSystemBinary(binaryPath: string): string {
+  const target = systemBinaryTarget(binaryPath);
+  if (!target) return binaryPath;
+  const dir = systemBinaryDir();
+  const staging = `${target}.${process.pid}.tmp`;
+  runPrivileged("install", ["-d", "-m", "0755", dir]);
+  try {
+    runPrivileged("install", ["-m", "0755", binaryPath, staging]);
+    runPrivileged("mv", ["-f", staging, target]);
+  } catch (err) {
+    try {
+      runPrivileged("rm", ["-f", staging]);
+    } catch {
+      /* best-effort */
+    }
+    throw err;
+  }
+  if (selinuxEnabled()) {
+    const root = systemBinaryRoot();
+    try {
+      runPrivileged("restorecon", ["-R", root]);
+    } catch (err) {
+      // Not fatal here: a wrong label still surfaces as the daemon not
+      // reaching a running state, which fails the install with its status.
+      hookLogWarn(`restorecon on ${root} failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  }
+  return target;
+}
+
+/**
+ * Removes system copies other than `current` and the most recent one before
+ * it — the same keep-one-for-rollback rule `pruneOldDaemonBinaries()` applies
+ * to `~/.failproofai/bin`. Best-effort; only called once the service runs
+ * `current`.
+ */
+function pruneSystemBinaries(current: string): void {
+  try {
+    const dir = systemBinaryDir();
+    const stale = readdirSync(dir)
+      .filter((f) => f.startsWith("failproofaid-"))
+      .map((f) => resolve(dir, f))
+      .filter((p) => p !== current)
+      .map((p) => ({ p, mtime: statSync(p).mtimeMs }))
+      .sort((a, b) => b.mtime - a.mtime)
+      .slice(1);
+    for (const { p } of stale) runPrivileged("rm", ["-f", p]);
+  } catch {
+    // Nothing to prune, or no elevation left — leaving a file costs disk only.
+  }
+}
+
 /**
  * The pre-1.0.0-beta.1 user-scope unit. Still removed on install and
  * uninstall: it holds the same flock the new service needs, so leaving one
@@ -792,8 +930,18 @@ function daemonInstallCommands(
   cliCmd: string | null,
 ): string[] {
   if (process.platform === "linux") {
+    const target = systemBinaryTarget(binaryPath);
+    const dir = systemBinaryDir();
+    const stage = target
+      ? [
+          `sudo install -d -m 0755 ${dir}`,
+          `sudo install -m 0755 ${binaryPath} ${target}`,
+          `{ sudo restorecon -R ${systemBinaryRoot()} 2>/dev/null || true; }`,
+        ]
+      : [];
     return [
-      `sudo tee ${systemdUnitPath()} <<'EOF'\n${systemdUnitContents(binaryPath, workerCmd, cliCmd)}EOF`,
+      ...stage,
+      `sudo tee ${systemdUnitPath()} <<'EOF'\n${systemdUnitContents(target ?? binaryPath, workerCmd, cliCmd)}EOF`,
       "sudo systemctl daemon-reload",
       `sudo systemctl enable ${systemdUnitName()}`,
       // `restart`, not `enable --now`, for the reason the install path gives:
@@ -865,9 +1013,13 @@ export async function installDaemonService(): Promise<DaemonInstallResult> {
   // never came up. Clear it first, every time.
   removeLegacyUserService();
 
+  let execPath = binaryPath;
   try {
     if (process.platform === "linux") {
-      writePrivilegedFile(systemdUnitPath(), systemdUnitContents(binaryPath, workerCmd, cliCmd));
+      // Before the unit is written, so a copy that fails leaves the previous
+      // unit and the daemon it runs untouched. See `systemBinaryDir()`.
+      execPath = stageSystemBinary(binaryPath);
+      writePrivilegedFile(systemdUnitPath(), systemdUnitContents(execPath, workerCmd, cliCmd));
       runPrivileged("systemctl", ["daemon-reload"]);
       // `enable` for boot persistence, then `restart` — NOT `enable --now`.
       //
@@ -927,6 +1079,7 @@ export async function installDaemonService(): Promise<DaemonInstallResult> {
     hookLogWarn(`daemon service install failed: ${reason}`);
     return { installed: false, reason };
   }
+  if (execPath !== binaryPath) pruneSystemBinaries(execPath);
 
   // NOTE: this reports that the SERVICE is installed and running, which is all
   // it can honestly claim. Whether the daemon can actually evaluate a hook is a
@@ -1683,6 +1836,18 @@ export async function uninstallDaemonService(): Promise<void> {
       } catch {
         // Best-effort.
       }
+      // The copy systemd ran. After the unit is gone, so nothing enabled is
+      // left pointing at a deleted file. The shared parent goes only if no
+      // other user's directory is in it.
+      const binRoot = systemBinaryRoot();
+      if (existsSync(binRoot)) {
+        runPrivileged("rm", ["-rf", binRoot]);
+        try {
+          runPrivileged("rmdir", [dirname(binRoot)]);
+        } catch {
+          // Not empty — another user's daemon lives there.
+        }
+      }
     } else {
       const plistPath = launchdPlistPath();
       if (!existsSync(plistPath)) return;

package/src/hooks/uninstall-cli.ts

@@ -39,6 +39,7 @@ import {
   daemonServiceFilePath,
   daemonServiceStatus,
   daemonStatusCommand,
+  daemonSystemBinaryDir,
   isDaemonSupportedPlatform,
   primeElevation,
   setDaemonConfigured,
@@ -417,10 +418,12 @@ function manualServiceRemoval(servicePath: string): string[] {
     return [`sudo launchctl unload -w ${servicePath}`, `sudo rm -f ${servicePath}`];
   }
   const unit = servicePath.split("/").pop() ?? servicePath;
+  const binDir = daemonSystemBinaryDir();
   return [
     `sudo systemctl disable --now ${unit}`,
     `sudo rm -f ${servicePath}`,
     `sudo systemctl daemon-reload`,
+    ...(binDir ? [`sudo rm -rf ${binDir}`] : []),
   ];
 }
 

package/.next/standalone/.codex/hooks.json

@@ -1,76 +0,0 @@
-{
-  "hooks": {
-    "SessionStart": [
-      {
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 2; }; node scripts/dev-hook.mjs --hook SessionStart --cli codex",
-            "timeout": 60,
-            "__failproofai_hook__": true
-          }
-        ]
-      }
-    ],
-    "PreToolUse": [
-      {
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 2; }; node scripts/dev-hook.mjs --hook PreToolUse --cli codex",
-            "timeout": 60,
-            "__failproofai_hook__": true
-          }
-        ]
-      }
-    ],
-    "PermissionRequest": [
-      {
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 2; }; node scripts/dev-hook.mjs --hook PermissionRequest --cli codex",
-            "timeout": 60,
-            "__failproofai_hook__": true
-          }
-        ]
-      }
-    ],
-    "PostToolUse": [
-      {
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 2; }; node scripts/dev-hook.mjs --hook PostToolUse --cli codex",
-            "timeout": 60,
-            "__failproofai_hook__": true
-          }
-        ]
-      }
-    ],
-    "UserPromptSubmit": [
-      {
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 2; }; node scripts/dev-hook.mjs --hook UserPromptSubmit --cli codex",
-            "timeout": 60,
-            "__failproofai_hook__": true
-          }
-        ]
-      }
-    ],
-    "Stop": [
-      {
-        "hooks": [
-          {
-            "type": "command",
-            "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 1; }; node scripts/dev-hook.mjs --hook Stop --cli codex",
-            "timeout": 60,
-            "__failproofai_hook__": true
-          }
-        ]
-      }
-    ]
-  }
-}

package/.next/standalone/.cursor/hooks.json

@@ -1,47 +0,0 @@
-{
-  "version": 1,
-  "hooks": {
-    "sessionStart": [
-      {
-        "type": "command",
-        "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 2; }; node scripts/dev-hook.mjs --hook sessionStart --cli cursor",
-        "timeout": 60
-      }
-    ],
-    "sessionEnd": [
-      {
-        "type": "command",
-        "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 2; }; node scripts/dev-hook.mjs --hook sessionEnd --cli cursor",
-        "timeout": 60
-      }
-    ],
-    "beforeSubmitPrompt": [
-      {
-        "type": "command",
-        "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 2; }; node scripts/dev-hook.mjs --hook beforeSubmitPrompt --cli cursor",
-        "timeout": 60
-      }
-    ],
-    "preToolUse": [
-      {
-        "type": "command",
-        "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 2; }; node scripts/dev-hook.mjs --hook preToolUse --cli cursor",
-        "timeout": 60
-      }
-    ],
-    "postToolUse": [
-      {
-        "type": "command",
-        "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 2; }; node scripts/dev-hook.mjs --hook postToolUse --cli cursor",
-        "timeout": 60
-      }
-    ],
-    "stop": [
-      {
-        "type": "command",
-        "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 1; }; node scripts/dev-hook.mjs --hook stop --cli cursor",
-        "timeout": 60
-      }
-    ]
-  }
-}

package/.next/standalone/.factory/hooks.json

@@ -1,112 +0,0 @@
-{
-  "SessionStart": [
-    {
-      "hooks": [
-        {
-          "type": "command",
-          "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 2; }; node scripts/dev-hook.mjs --hook SessionStart --cli factory",
-          "timeout": 30,
-          "__failproofai_hook__": true
-        }
-      ]
-    }
-  ],
-  "UserPromptSubmit": [
-    {
-      "hooks": [
-        {
-          "type": "command",
-          "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 2; }; node scripts/dev-hook.mjs --hook UserPromptSubmit --cli factory",
-          "timeout": 30,
-          "__failproofai_hook__": true
-        }
-      ]
-    }
-  ],
-  "PreToolUse": [
-    {
-      "matcher": "*",
-      "hooks": [
-        {
-          "type": "command",
-          "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 2; }; node scripts/dev-hook.mjs --hook PreToolUse --cli factory",
-          "timeout": 30,
-          "__failproofai_hook__": true
-        }
-      ]
-    }
-  ],
-  "PostToolUse": [
-    {
-      "matcher": "*",
-      "hooks": [
-        {
-          "type": "command",
-          "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 2; }; node scripts/dev-hook.mjs --hook PostToolUse --cli factory",
-          "timeout": 30,
-          "__failproofai_hook__": true
-        }
-      ]
-    }
-  ],
-  "Notification": [
-    {
-      "hooks": [
-        {
-          "type": "command",
-          "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 2; }; node scripts/dev-hook.mjs --hook Notification --cli factory",
-          "timeout": 30,
-          "__failproofai_hook__": true
-        }
-      ]
-    }
-  ],
-  "Stop": [
-    {
-      "hooks": [
-        {
-          "type": "command",
-          "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 1; }; node scripts/dev-hook.mjs --hook Stop --cli factory",
-          "timeout": 30,
-          "__failproofai_hook__": true
-        }
-      ]
-    }
-  ],
-  "SubagentStop": [
-    {
-      "hooks": [
-        {
-          "type": "command",
-          "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 1; }; node scripts/dev-hook.mjs --hook SubagentStop --cli factory",
-          "timeout": 30,
-          "__failproofai_hook__": true
-        }
-      ]
-    }
-  ],
-  "PreCompact": [
-    {
-      "hooks": [
-        {
-          "type": "command",
-          "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 2; }; node scripts/dev-hook.mjs --hook PreCompact --cli factory",
-          "timeout": 30,
-          "__failproofai_hook__": true
-        }
-      ]
-    }
-  ],
-  "SessionEnd": [
-    {
-      "hooks": [
-        {
-          "type": "command",
-          "command": "command -v node >/dev/null 2>&1 || { echo '[failproofai] node not found; install Node >=20.9' >&2; exit 2; }; node scripts/dev-hook.mjs --hook SessionEnd --cli factory",
-          "timeout": 30,
-          "__failproofai_hook__": true
-        }
-      ]
-    }
-  ]
-}

package/.next/standalone/.next/server/chunks/[externals]__1x24dzcbbq6-g._.js

@@ -1,3 +0,0 @@
-module.exports=[54799,(e,r,t)=>{r.exports=e.x("crypto",()=>require("crypto"))},18622,(e,r,t)=>{r.exports=e.x("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js",()=>require("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js"))},20635,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/action-async-storage.external.js",()=>require("next/dist/server/app-render/action-async-storage.external.js"))},24725,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/after-task-async-storage.external.js",()=>require("next/dist/server/app-render/after-task-async-storage.external.js"))},56704,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/work-async-storage.external.js",()=>require("next/dist/server/app-render/work-async-storage.external.js"))},32319,(e,r,t)=>{r.exports=e.x("next/dist/server/app-render/work-unit-async-storage.external.js",()=>require("next/dist/server/app-render/work-unit-async-storage.external.js"))},59043,(e,r,t)=>{r.exports=e.x("next/dist/server/runtime-reacts.external.js",()=>require("next/dist/server/runtime-reacts.external.js"))},78500,(e,r,t)=>{r.exports=e.x("node:async_hooks",()=>require("node:async_hooks"))},50227,(e,r,t)=>{r.exports=e.x("node:path",()=>require("node:path"))},81111,(e,r,t)=>{r.exports=e.x("node:stream",()=>require("node:stream"))},14747,(e,r,t)=>{r.exports=e.x("path",()=>require("path"))}];
-
-//# sourceMappingURL=%5Bexternals%5D__1x24dzcbbq6-g._.js.map