failproofai 1.0.2-beta.5 → 1.0.2-beta.6

package/.next/standalone/server.js

@@ -9,7 +9,7 @@ const currentPort = parseInt(process.env.PORT, 10) || 3000
 const hostname = process.env.HOSTNAME || '0.0.0.0'
 
 let keepAliveTimeout = parseInt(process.env.KEEP_ALIVE_TIMEOUT, 10)
-const nextConfig = {"env":{"NEXT_PUBLIC_APP_VERSION":"1.0.2-beta.5"},"typescript":{"ignoreBuildErrors":false},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.ts","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"instrumentationClientInject":[],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/work/failproofai/failproofai","enablePrerenderSourceMaps":true,"cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":true,"coldCacheBadge":false,"devValidationWorker":true,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"dynamicOnHover":false,"useOffline":false,"varyParams":true,"optimisticRouting":true,"instrumentationClientRouterTransitionEvents":false,"prefetchInlining":{"maxSize":2048,"maxBundleSize":10240},"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":3,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptOperationCache":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"devMemoryThresholdRestart":true,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"requestInsights":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"useTypeScriptCli":true,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":true,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"serverComponentsHmrCancellation":false,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":true,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","turbopackMemoryEvictionMode":"auto","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"useCacheTimeout":54,"instantInsights":{"validationLevel":"warning"},"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.ts","outputFileTracingExcludes":{"*":["node_modules/@img/**","node_modules/sharp/**"]},"turbopack":{"root":"/home/runner/work/failproofai/failproofai"},"repoRoot":"/home/runner/work/failproofai/failproofai","distDirRoot":".next"}
+const nextConfig = {"env":{"NEXT_PUBLIC_APP_VERSION":"1.0.2-beta.6"},"typescript":{"ignoreBuildErrors":false},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.ts","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"instrumentationClientInject":[],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/work/failproofai/failproofai","enablePrerenderSourceMaps":true,"cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":true,"coldCacheBadge":false,"devValidationWorker":true,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"dynamicOnHover":false,"useOffline":false,"varyParams":true,"optimisticRouting":true,"instrumentationClientRouterTransitionEvents":false,"prefetchInlining":{"maxSize":2048,"maxBundleSize":10240},"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":3,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptOperationCache":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"devMemoryThresholdRestart":true,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"requestInsights":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"useTypeScriptCli":true,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":true,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"serverComponentsHmrCancellation":false,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":true,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","turbopackMemoryEvictionMode":"auto","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"useCacheTimeout":54,"instantInsights":{"validationLevel":"warning"},"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.ts","outputFileTracingExcludes":{"*":["node_modules/@img/**","node_modules/sharp/**"]},"turbopack":{"root":"/home/runner/work/failproofai/failproofai"},"repoRoot":"/home/runner/work/failproofai/failproofai","distDirRoot":".next"}
 
 process.env.__NEXT_PRIVATE_STANDALONE_CONFIG = JSON.stringify(nextConfig)
 

package/bin/failproofai.mjs

@@ -725,10 +725,10 @@ OPTIONS
 failproofai pack — install policy packs published as GitHub releases
 
 Usage:
-  failproofai pack add core                     the Failproof AI policies
-  failproofai pack add core --policy <a,b>      just these
-  failproofai pack add core --category <x,y>    whole categories
-  failproofai pack add core --all               everything in it
+  failproofai policies add FailproofAI/policies                     the Failproof AI policies
+  failproofai policies add FailproofAI/policies --policy <a,b>      just these
+  failproofai policies add FailproofAI/policies --category <x,y>    whole categories
+  failproofai policies add FailproofAI/policies --all               everything in it
   failproofai pack list                         packs installed here
   failproofai pack list <source>                what a pack out there contains
   failproofai pack add <source> [--policy <a,b>] [--category <x,y>] [--all]
@@ -739,7 +739,7 @@ A pack is one entry artifact plus a manifest, verified against the release's
 SHA256SUMS at install time. The digest is recorded, and re-verified before every
 import — so a pack cannot change under this machine after you installed it.
 
-<source> is core for the Failproof AI policies, or any of these:
+<source> is any GitHub repo publishing a pack — ours included:
   acme/support-agent                 newest release, pinned to its exact tag
   acme/support-agent@v2.1.0          that release
   github:acme/support-agent@v2.1.0   same, explicit
@@ -761,7 +761,7 @@ rest back on.
 
 Examples:
   failproofai pack add FailproofAI/policies
-  failproofai pack add core --category sanitize,git
+  failproofai policies add FailproofAI/policies --category sanitize,git
   failproofai pack add github:acme/support-agent@v2.1.0 --only block-refunds
   failproofai pack remove acme/support-agent
 
@@ -1371,7 +1371,7 @@ USAGE
   failproofai policies add                 Pick from what is installed here
   failproofai policies add <name>          Turn one policy on
   failproofai policies add <owner>/<repo>  Install someone's pack
-  failproofai policies add core            Our pack, fetched like any other
+  failproofai policies add FailproofAI/policies            Our pack, fetched like any other
   failproofai policies remove <name>       Turn one policy off
   failproofai policies remove <pack-id>    Uninstall a pack
   failproofai policies show <owner>/<repo> What a pack contains, before you take it
@@ -1404,7 +1404,7 @@ EXAMPLES
   failproofai policies add
   failproofai policies add block-sudo
   failproofai policies add sanitize-api-keys --scope project
-  failproofai policies add core --category sanitize,git
+  failproofai policies add FailproofAI/policies --category sanitize,git
   failproofai policies add acme/deploy-guard --policy block-prod-deploy
   failproofai policies show acme/deploy-guard
   failproofai policies remove block-sudo
@@ -1424,18 +1424,41 @@ keep enforcing. FAILPROOFAI_PACK_BASE_URL points it all at a mirror.
     // without a slash that is still a source — it is the short spelling of our
     // own pack, and is checked by the pack lane itself rather than duplicated
     // here.
-    const firstPositional = rest.find((a) => !a.startsWith("-"));
+    // The first positional that is NOT some flag's value.
+    //
+    // A plain `rest.find(a => !a.startsWith("-"))` reads the first VALUE it
+    // meets instead: `policies add --cli claude codex acme/x` picked "claude",
+    // decided that was not a source because it has no slash, and sent the whole
+    // command down the policy lane — where it died on "Unknown flag: --policy".
+    // The same shape works, and misroutes, for --scope and --custom.
+    //
+    // `--cli` takes SEVERAL values, bounded the way pack-cli.ts bounds them: a
+    // pack source always carries a slash and an agent name never does, which
+    // separates the list from what follows it exactly.
+    const VALUE_TAKING = new Set(["--scope", "--policy", "--category", "--only", "--custom", "-c"]);
+    const skip = new Set();
+    for (let i = 0; i < rest.length; i += 1) {
+      if (VALUE_TAKING.has(rest[i])) skip.add(i + 1);
+      if (rest[i] !== "--cli") continue;
+      for (let j = i + 1; j < rest.length && !rest[j].startsWith("-") && !rest[j].includes("/"); j += 1) {
+        skip.add(j);
+      }
+    }
+    const firstPositional = rest.find((a, i) => !a.startsWith("-") && !skip.has(i));
     let looksLikeSource =
       !!firstPositional &&
       (firstPositional.includes("/") || firstPositional.startsWith("github:"));
     if (!looksLikeSource && firstPositional) {
-      // `core` is the one sourcey word with no slash in it. Read the alias set
-      // from the layer that OWNS it rather than restating it here, where the
-      // copy would drift the first time an alias is added — that exact drift
-      // already shipped once, when the dashboard could not resolve a name the
-      // CLI could.
-      const { CORE_ALIASES } = await import("../src/hooks/pack-store");
-      looksLikeSource = CORE_ALIASES.has(firstPositional.toLowerCase());
+      // A retired spelling of our own pack — `core` and friends — is still
+      // routed to the pack lane, which is the only layer that can say what to
+      // type instead. Sent anywhere else it reads as an unknown POLICY name and
+      // the reply lists 38 names, none of which is the answer.
+      //
+      // Read from the layer that owns the set rather than restated here, where
+      // the copy would drift. That exact drift already shipped once, when the
+      // dashboard could not resolve a name the CLI could.
+      const { RETIRED_CORE_ALIASES } = await import("../src/hooks/pack-store");
+      looksLikeSource = RETIRED_CORE_ALIASES.has(firstPositional.toLowerCase());
     }
 
     if (action === "show" || looksLikeSource) {
@@ -1665,8 +1688,8 @@ EXAMPLES
   failproofai policies --uninstall --cli pi
   failproofai policies -u
   failproofai policies --uninstall --custom
-  failproofai pack add core
-  failproofai pack add core --category git,database
+  failproofai policies add FailproofAI/policies
+  failproofai policies add FailproofAI/policies --category git,database
   failproofai pack list acme/support-agent
   failproofai pack build ./my-policies.mjs --id acme/support --version 1.0.0
 `.trimStart());
@@ -1892,19 +1915,38 @@ EXAMPLES
   if (args[0] === "config") {
     if (args.includes("--help") || args.includes("-h")) {
       console.log(`
-failproofai config — interactive setup
+failproofai config — set this machine up
 
 USAGE
-  failproofai config             Guided setup: choose scope, agents, and policies
+  failproofai config             Guided setup
   failproofai configure          Alias for config
   failproofai setup              Alias for config
 
 WHAT IT DOES
-  Walks you through 4 quick steps and writes everything for you:
-    1. Where      — global (all projects) or just this project
-    2. Harnesses  — which agent CLIs to protect (Claude, Codex, ...)
-    3. Policies   — presets (combine any), Everything, or a custom pick
-    4. Review     — confirms the exact files it will change, then applies
+  Installs the failproofaid service (needs root once), wires hooks into every
+  agent CLI it supports, and optionally connects this machine to Cloud. It
+  chooses NO policies — take some with 'failproofai policies add <owner>/<repo>'.
+
+WITH NO TERMINAL (CI, containers, an agent driving it)
+  It just runs. There is nothing to confirm when nobody is watching, so it
+  applies rather than asking — no flag needed.
+
+  failproofai config                          set up, stay local
+  failproofai config --token <key>            set up and connect to Cloud
+    --url <url>                     somewhere other than app.befailproof.ai
+    --machine-id <id>               defaults to a stable per-machine key
+    --machine-label <name>          defaults to this host's name
+    --no-transcripts                decisions only, no session transcripts
+
+  The key can come from FAILPROOFAI_CLOUD_TOKEN instead of the command line,
+  and the url from FAILPROOFAI_CLOUD_URL — the same variable the daemon reads.
+  Prefer the environment: an argument is readable from 'ps' by every user on
+  the box, and lands in shell history and CI logs.
+
+  Exit 1 if anything it was asked to do did not happen — including a key the
+  server refused, and a machine that could not reach root. 'sudo' is never
+  prompted for here; it either works without a password or you are told the
+  exact commands to run.
 
 FAILPROOF CLOUD
   failproofai config --connect <url> --token <key> [--machine-id <id>]
@@ -2093,8 +2135,33 @@ PAUSING ENFORCEMENT (one session, always time-boxed)
       return;
     }
 
+    // Headless setup. `--token` IS the request to connect — there is no other
+    // reason to pass a key — so there is no separate --connect to remember, and
+    // the URL keeps the default the wizard already infers rather than being a
+    // question the flag path alone asks.
+    //
+    // The key is taken from the environment when the flag is absent, because a
+    // secret on argv is readable from `ps` by every user on the box and lands
+    // in shell history and CI logs. FAILPROOFAI_CLOUD_TOKEN is the name the
+    // Rust daemon already reads, so this unifies rather than invents.
+    const valueFor = (flag) => {
+      const i = args.indexOf(flag);
+      if (i < 0) return undefined;
+      const v = args[i + 1];
+      if (!v || v.startsWith("-")) throw new CliError(`Missing value after ${flag}.`);
+      return v;
+    };
     const { runConfigureWizard } = await import("../src/hooks/configure-wizard");
-    const result = await runConfigureWizard();
+    const result = await runConfigureWizard(
+      {},
+      {
+        token: valueFor("--token") ?? process.env.FAILPROOFAI_CLOUD_TOKEN,
+        url: valueFor("--url") ?? process.env.FAILPROOFAI_CLOUD_URL,
+        machineId: valueFor("--machine-id"),
+        machineLabel: valueFor("--machine-label"),
+        noTranscripts: args.includes("--no-transcripts"),
+      },
+    );
     await track("cli_configure_invoked", {
       applied: result.applied,
       // `target` and `scopes`, not `scope`: the wizard rework replaced that