failproofai 1.0.2-beta.5 → 1.0.2-beta.6

package/dist/cli.mjs

@@ -19,7 +19,7 @@ var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // package.json
-var version2 = "1.0.2-beta.5", package_default;
+var version2 = "1.0.2-beta.6", package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "failproofai",
@@ -143,16 +143,16 @@ var init_package = __esm(() => {
       sharp: "0.35.0"
     },
     optionalDependencies: {
-      "@failproofai/failproofaid-linux-x64": "1.0.2-beta.5",
-      "@failproofai/failproofaid-linux-arm64": "1.0.2-beta.5",
-      "@failproofai/failproofaid-darwin-x64": "1.0.2-beta.5",
-      "@failproofai/failproofaid-darwin-arm64": "1.0.2-beta.5"
+      "@failproofai/failproofaid-linux-x64": "1.0.2-beta.6",
+      "@failproofai/failproofaid-linux-arm64": "1.0.2-beta.6",
+      "@failproofai/failproofaid-darwin-x64": "1.0.2-beta.6",
+      "@failproofai/failproofaid-darwin-arm64": "1.0.2-beta.6"
     },
     failproofaidBinaries: {
-      "linux-x64": "e19a1cf9a254df830f205fac024b8a229c162c93ae73851b985d2794e09da035",
-      "linux-arm64": "fafcff01e4cce00809b5cd9ff2822705d7373acbab79444e0384cb058b6da921",
-      "darwin-x64": "d7bd609387e13f5e75287674d948c69d739bac8d6963aa731b93111d1bdd2ea2",
-      "darwin-arm64": "9a57c8eb0f23ed25328e0f7b06638a6ab7f51e1deebf479bac2c779bf9912941"
+      "linux-x64": "1e883d50ea40dad46394a137fab9b8ecddb7b37064312af9ddf89cb3de5eb7b8",
+      "linux-arm64": "47a51a75a01c021417a4d67fb7eb5caa8fa9c46abca5ec85d23e8ddead1ebfdd",
+      "darwin-x64": "bbc4e714c1e961d53d7dd6c65b84dcc74b4e24439349ebdef3f7d8681ece1776",
+      "darwin-arm64": "ca6f6e688070a2d2a63fd333f7c3ac7c7d2bd991ca499cfced23b249e7ca684b"
     }
   };
 });
@@ -937,35 +937,50 @@ var exports_read_stdin = {};
 __export(exports_read_stdin, {
   readStdinPayload: () => readStdinPayload
 });
-async function readStdinPayload(maxBytes = 1048576) {
+async function readStdinPayload(maxBytes = 1048576, timeoutMs = STDIN_TIMEOUT_MS, stream = process.stdin) {
   let payload = "";
   let oversized = false;
   let readError = false;
+  let timedOut = false;
+  if (stream.isTTY) {
+    return { payload: "", oversized: false, readError: false, timedOut: false };
+  }
+  let timer;
   try {
     payload = await new Promise((resolve2, reject) => {
       const chunks = [];
       let totalBytes = 0;
-      process.stdin.setEncoding("utf8");
-      process.stdin.on("data", (chunk) => {
+      stream.setEncoding("utf8");
+      stream.on("data", (chunk) => {
         totalBytes += Buffer.byteLength(chunk);
         if (totalBytes > maxBytes) {
           oversized = true;
-          process.stdin.destroy();
+          stream.destroy?.();
           resolve2("");
           return;
         }
         chunks.push(chunk);
       });
-      process.stdin.on("end", () => resolve2(chunks.join("")));
-      process.stdin.on("error", reject);
-      if (process.stdin.readableEnded)
+      stream.on("end", () => resolve2(chunks.join("")));
+      stream.on("error", reject);
+      if (stream.readableEnded)
         resolve2("");
+      timer = setTimeout(() => {
+        timedOut = true;
+        stream.destroy?.();
+        resolve2("");
+      }, timeoutMs);
+      timer.unref?.();
     });
   } catch {
     readError = true;
+  } finally {
+    if (timer)
+      clearTimeout(timer);
   }
-  return { payload, oversized, readError };
+  return { payload, oversized, readError, timedOut };
 }
+var STDIN_TIMEOUT_MS = 1e4;
 
 // src/hooks/types.ts
 var HOOK_SCOPES, INTEGRATION_TYPES, CODEX_HOOK_SCOPES, CODEX_HOOK_EVENT_TYPES, CODEX_EVENT_MAP, CODEX_TOOL_MAP, HERMES_TOOL_MAP, HERMES_TOOL_INPUT_MAP, HERMES_HOOK_SCOPES, HERMES_HOOK_EVENT_TYPES, HERMES_EVENT_MAP, COPILOT_HOOK_SCOPES, COPILOT_HOOK_EVENT_TYPES, COPILOT_TOOL_MAP, COPILOT_TOOL_INPUT_MAP, CURSOR_HOOK_SCOPES, CURSOR_HOOK_EVENT_TYPES, CURSOR_EVENT_MAP, CURSOR_TOOL_MAP, OPENCODE_HOOK_SCOPES, OPENCODE_HOOK_EVENT_TYPES, OPENCODE_TOOL_MAP, OPENCODE_TOOL_INPUT_MAP, PI_HOOK_SCOPES, PI_HOOK_EVENT_TYPES, PI_EVENT_MAP, PI_TOOL_MAP, PI_TOOL_INPUT_MAP, OPENCLAW_HOOK_SCOPES, OPENCLAW_HOOK_EVENT_TYPES, OPENCLAW_EVENT_MAP, OPENCLAW_TOOL_MAP, OPENCLAW_TOOL_INPUT_MAP, FACTORY_HOOK_SCOPES, FACTORY_HOOK_EVENT_TYPES, FACTORY_TOOL_MAP, DEVIN_HOOK_SCOPES, DEVIN_HOOK_EVENT_TYPES, DEVIN_TOOL_MAP, ANTIGRAVITY_HOOK_SCOPES, ANTIGRAVITY_HOOK_EVENT_TYPES, ANTIGRAVITY_EVENT_MAP, ANTIGRAVITY_TOOL_MAP, ANTIGRAVITY_TOOL_INPUT_MAP, GOOSE_HOOK_SCOPES, GOOSE_HOOK_EVENT_TYPES, GOOSE_TOOL_MAP, GOOSE_TOOL_INPUT_MAP, HOOK_EVENT_TYPES, CLAUDE_INSTALL_EVENT_TYPES, FAILPROOFAI_HOOK_MARKER = "__failproofai_hook__";
@@ -9934,35 +9949,50 @@ var init_resolve_transcript_path = __esm(() => {
 });
 
 // src/hooks/read-stdin.ts
-async function readStdinPayload2(maxBytes = 1048576) {
+async function readStdinPayload2(maxBytes = 1048576, timeoutMs = STDIN_TIMEOUT_MS2, stream = process.stdin) {
   let payload = "";
   let oversized = false;
   let readError = false;
+  let timedOut = false;
+  if (stream.isTTY) {
+    return { payload: "", oversized: false, readError: false, timedOut: false };
+  }
+  let timer;
   try {
     payload = await new Promise((resolve11, reject) => {
       const chunks = [];
       let totalBytes = 0;
-      process.stdin.setEncoding("utf8");
-      process.stdin.on("data", (chunk) => {
+      stream.setEncoding("utf8");
+      stream.on("data", (chunk) => {
         totalBytes += Buffer.byteLength(chunk);
         if (totalBytes > maxBytes) {
           oversized = true;
-          process.stdin.destroy();
+          stream.destroy?.();
           resolve11("");
           return;
         }
         chunks.push(chunk);
       });
-      process.stdin.on("end", () => resolve11(chunks.join("")));
-      process.stdin.on("error", reject);
-      if (process.stdin.readableEnded)
+      stream.on("end", () => resolve11(chunks.join("")));
+      stream.on("error", reject);
+      if (stream.readableEnded)
+        resolve11("");
+      timer = setTimeout(() => {
+        timedOut = true;
+        stream.destroy?.();
         resolve11("");
+      }, timeoutMs);
+      timer.unref?.();
     });
   } catch {
     readError = true;
+  } finally {
+    if (timer)
+      clearTimeout(timer);
   }
-  return { payload, oversized, readError };
+  return { payload, oversized, readError, timedOut };
 }
+var STDIN_TIMEOUT_MS2 = 1e4;
 
 // src/hooks/cloud-managed-policies.ts
 import { createHash as createHash3 } from "node:crypto";
@@ -12009,7 +12039,7 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
       const legacyNames = activePause || packsInstalledHere ? [] : config.enabledPolicies;
       registerBuiltinPolicies(activePause ? [] : legacyNames);
       if (legacyNames.length > 0) {
-        hookLogWarn(`enforcing ${legacyNames.length} policies from this build because no pack is installed — ` + `run \`failproofai policies add core\` to move them into a real pack`);
+        hookLogWarn(`enforcing ${legacyNames.length} policies from this build because no pack is installed — ` + `run \`failproofai policies add FailproofAI/policies\` to move them into a real pack`);
       }
       const enabledBuiltinNames = new Set(legacyNames);
       let cloudManagedPolicies = [];
@@ -12251,6 +12281,14 @@ async function handleHookEvent(eventType, cli = "claude") {
       error_type: "oversized"
     });
   }
+  if (stdinRead.timedOut) {
+    hookLogWarn(`stdin never closed for ${eventType}; evaluated nothing`);
+    trackHookEvent2(getInstanceId2(), "hook_stdin_error", {
+      event_type: eventType,
+      cli,
+      error_type: "timeout"
+    });
+  }
   const result = await evaluateHookEvent(eventType, cli, stdinRead.payload);
   try {
     if (canonicalizeEventType(eventType, cli) === "SessionStart") {
@@ -14555,6 +14593,426 @@ var init_first_run_gate = __esm(() => {
   ];
 });
 
+// src/hooks/pack-store.ts
+import { createHash as createHash7 } from "node:crypto";
+import { existsSync as existsSync25, mkdirSync as mkdirSync16, readFileSync as readFileSync21, renameSync as renameSync8, rmSync as rmSync9, writeFileSync as writeFileSync14 } from "node:fs";
+import { dirname as dirname13, resolve as resolve20 } from "node:path";
+function baseUrl2() {
+  return (process.env.FAILPROOFAI_PACK_BASE_URL || DEFAULT_BASE_URL2).replace(/\/+$/, "");
+}
+function parsePackSpec(source) {
+  const raw = source.trim();
+  if (raw.length === 0)
+    throw new Error("pack source is empty");
+  const url = raw.match(/^(?:https?:\/\/)?(?:www\.)?github\.com\/(.+)$/i);
+  if (url) {
+    const parts = url[1].replace(/\/+$/, "").split("/");
+    const [owner, repo, ...rest] = parts;
+    let tag2 = null;
+    if (rest[0] === "releases" && (rest[1] === "tag" || rest[1] === "download")) {
+      const tail = rest.slice(2);
+      tag2 = (rest[1] === "download" ? tail.slice(0, -1) : tail).join("/") || null;
+    } else if (rest[0] === "releases" && rest[1] === "latest") {
+      tag2 = null;
+    }
+    return validated(owner, repo, tag2);
+  }
+  const withoutScheme = raw.replace(/^github:/i, "");
+  const at2 = withoutScheme.lastIndexOf("@");
+  const repoPart = at2 > 0 ? withoutScheme.slice(0, at2) : withoutScheme;
+  const tag = at2 > 0 ? withoutScheme.slice(at2 + 1) : null;
+  const slash = repoPart.indexOf("/");
+  if (slash <= 0 || slash === repoPart.length - 1) {
+    if (RETIRED_CORE_ALIASES.has(repoPart.trim().toLowerCase())) {
+      throw new Error(`${JSON.stringify(source)} is no longer a pack name — ours is a pack like anyone else's now. Use ${CORE_SOURCE} instead.`);
+    }
+    throw new Error(`pack source must be owner/repo, owner/repo@tag, or a github.com URL — got ${JSON.stringify(source)}`);
+  }
+  return validated(repoPart.slice(0, slash), repoPart.slice(slash + 1), tag);
+}
+function validated(owner, repo, tag) {
+  if (!owner || !OWNER_RE.test(owner))
+    throw new Error(`unsafe owner ${JSON.stringify(owner)}`);
+  if (!repo || !OWNER_RE.test(repo))
+    throw new Error(`unsafe repo ${JSON.stringify(repo)}`);
+  if (tag !== null && !TAG_RE.test(tag))
+    throw new Error(`unsafe tag ${JSON.stringify(tag)}`);
+  return { owner, repo, tag };
+}
+async function resolveLatestTag(spec) {
+  const url = `${baseUrl2()}/${spec.owner}/${spec.repo}/releases/latest`;
+  const response = await fetch(url, {
+    signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
+    redirect: "manual"
+  });
+  const location = response.headers.get("location");
+  if (!location) {
+    throw new Error(`could not resolve the newest release of ${spec.owner}/${spec.repo} ` + `(GET ${url} returned ${response.status} with no redirect). That redirect is issued only ` + `for a published, non-prerelease release, so either the repository has no releases at all ` + `or every release it has is a prerelease or a draft. Name a tag explicitly.`);
+  }
+  const match = location.match(/\/releases\/tag\/(.+)$/);
+  if (!match)
+    throw new Error(`unexpected redirect from ${url}: ${location}`);
+  const tag = decodeURIComponent(match[1]).replace(/\/+$/, "");
+  if (!TAG_RE.test(tag))
+    throw new Error(`unsafe tag ${JSON.stringify(tag)} from ${url}`);
+  return tag;
+}
+function formatPackSpec(spec) {
+  return `github:${spec.owner}/${spec.repo}@${spec.tag}`;
+}
+function packAssetUrl(spec, asset) {
+  return `${baseUrl2()}/${spec.owner}/${spec.repo}/releases/download/${spec.tag}/${asset}`;
+}
+function packTagMatchesVersion(tag, version3) {
+  const tail = tag.slice(tag.lastIndexOf("/") + 1);
+  return tail === version3 || tail === `v${version3}`;
+}
+async function fetchBytes2(url) {
+  const response = await fetch(url, {
+    signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
+    redirect: "follow"
+  });
+  if (!response.ok)
+    throw new Error(`GET ${url} returned ${response.status}`);
+  const contentLength = response.headers.get("content-length");
+  if (contentLength !== null) {
+    const declared = Number(contentLength);
+    if (Number.isFinite(declared) && declared > MAX_ARTIFACT_BYTES) {
+      await response.body?.cancel();
+      throw new Error(`${url} declares ${declared} bytes, over the ${MAX_ARTIFACT_BYTES} limit`);
+    }
+  }
+  if (!response.body)
+    return Buffer.alloc(0);
+  const chunks = [];
+  const reader = response.body.getReader();
+  let total = 0;
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done)
+        break;
+      total += value.byteLength;
+      if (total > MAX_ARTIFACT_BYTES) {
+        await reader.cancel();
+        throw new Error(`${url} is over the ${MAX_ARTIFACT_BYTES} byte limit`);
+      }
+      chunks.push(Buffer.from(value));
+    }
+  } finally {
+    reader.releaseLock();
+  }
+  return Buffer.concat(chunks, total);
+}
+function digestFor2(manifest, assetName) {
+  for (const line of manifest.split(`
+`)) {
+    const match = line.trim().match(/^([0-9a-f]{64})\s+\*?(.+)$/i);
+    if (match && match[2].trim() === assetName)
+      return match[1].toLowerCase();
+  }
+  return null;
+}
+function sha256(bytes) {
+  return createHash7("sha256").update(bytes).digest("hex");
+}
+function writeAtomic(target, bytes) {
+  const tempPath = `${target}.${process.pid}.tmp`;
+  try {
+    mkdirSync16(dirname13(target), { recursive: true });
+    writeFileSync14(tempPath, bytes);
+    renameSync8(tempPath, target);
+  } catch (err) {
+    rmSync9(tempPath, { force: true });
+    throw err;
+  }
+}
+async function fetchPackPreview(source) {
+  if (process.env.FAILPROOFAI_NO_DOWNLOAD === "1") {
+    throw new Error("FAILPROOFAI_NO_DOWNLOAD is set, so nothing can be fetched to preview");
+  }
+  const parsed = parsePackSpec(source);
+  const resolvedFromLatest = parsed.tag === null;
+  const spec = parsed.tag !== null ? { ...parsed, tag: parsed.tag } : { ...parsed, tag: await resolveLatestTag(parsed) };
+  const checksums = (await fetchBytes2(packAssetUrl(spec, PACK_CHECKSUMS_ASSET))).toString("utf8");
+  const manifestBytes = await fetchBytes2(packAssetUrl(spec, PACK_MANIFEST_ASSET));
+  const manifestDigest = digestFor2(checksums, PACK_MANIFEST_ASSET);
+  if (!manifestDigest) {
+    throw new Error(`${PACK_CHECKSUMS_ASSET} has no entry for ${PACK_MANIFEST_ASSET}`);
+  }
+  if (sha256(manifestBytes) !== manifestDigest) {
+    throw new Error(`${PACK_MANIFEST_ASSET} failed integrity verification`);
+  }
+  let raw;
+  try {
+    raw = JSON.parse(manifestBytes.toString("utf8"));
+  } catch (err) {
+    throw new Error(`${PACK_MANIFEST_ASSET} is not valid JSON: ${errText2(err)}`);
+  }
+  if (!raw || typeof raw !== "object")
+    throw new Error(`${PACK_MANIFEST_ASSET} is not an object`);
+  const value = raw;
+  const identity = parsePackIdentity(value);
+  if (!Array.isArray(value.policies) || value.policies.length === 0) {
+    throw new Error("pack manifest declares no policies");
+  }
+  return {
+    id: identity.id,
+    version: identity.version,
+    effect: identity.effect,
+    policies: value.policies.map((policy, i) => parsePackPolicy(identity.id, policy, i)),
+    source: formatPackSpec(spec),
+    resolvedFromLatest
+  };
+}
+function priorRecordFor(id, sha2562) {
+  const installed = readInstalledPacks().packs;
+  return installed.find((p) => p.id === id) ?? installed.find((p) => p.sha256 === sha2562);
+}
+async function fetchPack(spec) {
+  const checksums = (await fetchBytes2(packAssetUrl(spec, PACK_CHECKSUMS_ASSET))).toString("utf8");
+  const manifestBytes = await fetchBytes2(packAssetUrl(spec, PACK_MANIFEST_ASSET));
+  const manifestDigest = digestFor2(checksums, PACK_MANIFEST_ASSET);
+  if (!manifestDigest)
+    throw new Error(`${PACK_CHECKSUMS_ASSET} has no entry for ${PACK_MANIFEST_ASSET}`);
+  if (sha256(manifestBytes) !== manifestDigest) {
+    throw new Error(`${PACK_MANIFEST_ASSET} failed integrity verification`);
+  }
+  const artifact = await fetchBytes2(packAssetUrl(spec, PACK_ENTRY_ASSET));
+  const entryDigest = digestFor2(checksums, PACK_ENTRY_ASSET);
+  if (!entryDigest)
+    throw new Error(`${PACK_CHECKSUMS_ASSET} has no entry for ${PACK_ENTRY_ASSET}`);
+  const artifactDigest = sha256(artifact);
+  if (artifactDigest !== entryDigest) {
+    throw new Error(`${PACK_ENTRY_ASSET} failed integrity verification`);
+  }
+  let parsed;
+  try {
+    parsed = JSON.parse(manifestBytes.toString("utf8"));
+  } catch (err) {
+    throw new Error(`${PACK_MANIFEST_ASSET} is not valid JSON: ${errText2(err)}`);
+  }
+  if (!parsed || typeof parsed !== "object")
+    throw new Error(`${PACK_MANIFEST_ASSET} is not an object`);
+  const raw = parsed;
+  const identity = parsePackIdentity(raw);
+  if (!Array.isArray(raw.policies) || raw.policies.length === 0) {
+    throw new Error("pack manifest declares no policies");
+  }
+  const policies = raw.policies.map((p, i) => parsePackPolicy(identity.id, p, i));
+  return {
+    id: identity.id,
+    version: identity.version,
+    policies,
+    ...raw.effect !== undefined ? { effect: identity.effect } : {},
+    artifact,
+    artifactDigest
+  };
+}
+function slugifyCategory(category) {
+  return category.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
+}
+function resolveSelection(policies, opts, previous, previouslyInstalled) {
+  const available = policies.map((p) => p.name);
+  if (opts?.all)
+    return { enabled: null, reason: "all" };
+  const picked = new Set;
+  if (opts?.categories?.length) {
+    const wanted = new Set(opts.categories.map(slugifyCategory));
+    const known = new Map(policies.map((p) => [slugifyCategory(p.category), p.category]));
+    const unknown = [...wanted].filter((c) => !known.has(c));
+    if (unknown.length > 0) {
+      throw new Error(`no such categor${unknown.length === 1 ? "y" : "ies"}: ${unknown.join(", ")} ` + `(has: ${[...new Set(policies.map((p) => slugifyCategory(p.category)))].join(", ")})`);
+    }
+    for (const p of policies)
+      if (wanted.has(slugifyCategory(p.category)))
+        picked.add(p.name);
+  }
+  if (opts?.only?.length) {
+    const unknown = opts.only.filter((n) => !available.includes(n));
+    if (unknown.length > 0) {
+      throw new Error(`pack does not contain ${unknown.join(", ")}`);
+    }
+    for (const n of opts.only)
+      picked.add(n);
+  }
+  if (opts?.only !== undefined || opts?.categories?.length) {
+    return { enabled: available.filter((n) => picked.has(n)), reason: "selected" };
+  }
+  if (previouslyInstalled) {
+    return { enabled: previous === null ? null : previous ?? null, reason: "carried" };
+  }
+  return { enabled: policies.filter((p) => p.defaultEnabled).map((p) => p.name), reason: "defaults" };
+}
+async function verifyArtifactRegisters(artifactPath, declared) {
+  const { loadCustomHooks: loadCustomHooks2 } = await Promise.resolve().then(() => (init_custom_hooks_loader(), exports_custom_hooks_loader));
+  let registered;
+  try {
+    registered = (await loadCustomHooks2(artifactPath, { strict: true })).map((h) => h.name);
+  } catch (err) {
+    throw new Error(`its artifact could not be loaded: ${err instanceof Error ? err.message : String(err)}`);
+  }
+  const missing = declared.filter((name) => !registered.includes(name));
+  const extra = registered.filter((name) => !declared.includes(name));
+  if (missing.length > 0) {
+    throw new Error(`its manifest declares ${missing.join(", ")} but the artifact does not register ${missing.length === 1 ? "it" : "them"} — that would install as protection that never runs`);
+  }
+  if (extra.length > 0) {
+    throw new Error(`its artifact registers undeclared ${extra.join(", ")} — a policy that enforces but ` + `appears in no listing cannot be reviewed or switched off`);
+  }
+}
+async function checkPackArtifact(artifactPath, declared) {
+  try {
+    await verifyArtifactRegisters(artifactPath, declared);
+    return null;
+  } catch (err) {
+    return err instanceof Error ? err.message : String(err);
+  }
+}
+async function addPack(source, opts) {
+  if (process.env.FAILPROOFAI_NO_DOWNLOAD) {
+    throw new Error("pack downloads are disabled (FAILPROOFAI_NO_DOWNLOAD). Already-installed packs keep enforcing.");
+  }
+  const parsed = parsePackSpec(source);
+  const spec = parsed.tag ? { ...parsed, tag: parsed.tag } : { ...parsed, tag: await resolveLatestTag(parsed) };
+  const resolvedFromLatest = parsed.tag === null;
+  const fetched = await fetchPack(spec);
+  if (!packTagMatchesVersion(spec.tag, fetched.version)) {
+    const fromTag = spec.tag.slice(spec.tag.lastIndexOf("/") + 1).replace(/^v/, "");
+    const fix = `re-tag the release ${fetched.version} (a leading v is fine), or rebuild the pack with --version ${fromTag}`;
+    throw new Error(`${fetched.id} was not installed: release tag ${spec.tag} does not match the version its manifest declares (${fetched.version}). ` + (resolvedFromLatest ? `That is the newest release of ${spec.owner}/${spec.repo}, so the release and the pack ` + `disagree at the source — ask the publisher to ${fix}.` : `Name the tag whose manifest says ${fetched.version}, or fix the pack: ${fix}.`));
+  }
+  const available = fetched.policies.map((p) => p.name);
+  const prior = priorRecordFor(fetched.id, fetched.artifactDigest);
+  const { enabled, reason } = resolveSelection(fetched.policies, opts, prior?.enabled ? prior.enabled.filter((n) => available.includes(n)) : prior?.enabled, Boolean(prior));
+  const root = packsRoot();
+  const artifactRel = `artifacts/${fetched.artifactDigest}.mjs`;
+  const artifactAbs = resolve20(root, artifactRel);
+  if (!existsSync25(artifactAbs))
+    writeAtomic(artifactAbs, fetched.artifact);
+  try {
+    await verifyArtifactRegisters(artifactAbs, available);
+  } catch (err) {
+    throw new Error(`${fetched.id}@${fetched.version} was not installed: ${err instanceof Error ? err.message : String(err)}`);
+  }
+  const repoOf = (source2) => {
+    const at2 = source2.lastIndexOf("@");
+    return at2 > source2.indexOf(":") ? source2.slice(0, at2) : source2;
+  };
+  if (prior && !prior.source.startsWith("bundled:") && repoOf(prior.source) !== repoOf(formatPackSpec(spec))) {
+    throw new Error(`pack id ${fetched.id} is already installed from ${prior.source}. Refusing to replace it with ${formatPackSpec(spec)} — remove it first if that is what you mean.`);
+  }
+  const record = {
+    id: fetched.id,
+    version: fetched.version,
+    source: formatPackSpec(spec),
+    entry: artifactRel,
+    sha256: fetched.artifactDigest,
+    policies: fetched.policies,
+    ...fetched.effect ? { effect: fetched.effect } : {},
+    ...enabled ? { enabled } : {},
+    ...opts?.clis ? { clis: opts.clis } : {}
+  };
+  const absorbed = upsertInstalled(record);
+  return {
+    replaced: absorbed,
+    id: fetched.id,
+    version: fetched.version,
+    source: record.source,
+    tag: spec.tag,
+    resolvedFromLatest,
+    enabled: enabled ?? available,
+    available,
+    selection: reason,
+    categories: [...new Set(fetched.policies.map((p) => slugifyCategory(p.category)))],
+    artifact: artifactAbs
+  };
+}
+function setPackPolicyEnabled(packId, name, on) {
+  const manifestPath = resolve20(packsRoot(), "installed.json");
+  if (!existsSync25(manifestPath))
+    return { ok: false, reason: "no packs are installed" };
+  let raw;
+  try {
+    raw = JSON.parse(readFileSync21(manifestPath, "utf8"));
+  } catch {
+    return { ok: false, reason: `pack manifest at ${manifestPath} is unreadable` };
+  }
+  const packs = Array.isArray(raw.packs) ? raw.packs : [];
+  const pack = packs.find((p) => p?.id === packId);
+  if (!pack)
+    return { ok: false, reason: `no installed pack with id ${packId}` };
+  const declared = Array.isArray(pack.policies) ? pack.policies : [];
+  const available = declared.map((p) => typeof p?.name === "string" ? p.name : null).filter((n) => n !== null);
+  if (!available.includes(name)) {
+    return { ok: false, reason: `pack ${packId} declares no policy named ${name}` };
+  }
+  const current = pack.enabled ?? available;
+  const next = on ? [...new Set([...current, name])] : current.filter((n) => n !== name);
+  pack.enabled = available.filter((n) => next.includes(n));
+  writeAtomic(manifestPath, JSON.stringify({ schemaVersion: 1, packs }, null, 2) + `
+`);
+  return { ok: true };
+}
+function removePack(id) {
+  const manifestPath = resolve20(packsRoot(), "installed.json");
+  if (!existsSync25(manifestPath))
+    return false;
+  let raw;
+  try {
+    raw = JSON.parse(readFileSync21(manifestPath, "utf8"));
+  } catch {
+    return false;
+  }
+  const packs = Array.isArray(raw.packs) ? raw.packs : [];
+  const remaining = packs.filter((p) => p?.id !== id);
+  if (remaining.length === packs.length)
+    return false;
+  writeAtomic(manifestPath, JSON.stringify({ schemaVersion: 1, packs: remaining }, null, 2) + `
+`);
+  return true;
+}
+function upsertInstalled(record) {
+  const manifestPath = resolve20(packsRoot(), "installed.json");
+  let packs = [];
+  if (existsSync25(manifestPath)) {
+    try {
+      const raw = JSON.parse(readFileSync21(manifestPath, "utf8"));
+      if (Array.isArray(raw.packs))
+        packs = raw.packs;
+    } catch {
+      throw new Error(`existing pack manifest at ${manifestPath} is unreadable; move it aside and re-add`);
+    }
+  }
+  const absorbed = packs.filter((p) => p?.sha256 === record.sha256 && p?.id !== record.id).map((p) => p.id);
+  if (!record.enabled) {
+    const prior = packs.find((p) => absorbed.includes(p?.id));
+    const carried = prior?.enabled?.filter((n) => record.policies?.some((rp) => rp?.name === n));
+    if (carried && carried.length > 0)
+      record.enabled = carried;
+  }
+  const remaining = packs.filter((p) => !absorbed.includes(p?.id));
+  const idx = remaining.findIndex((p) => p?.id === record.id);
+  if (idx >= 0)
+    remaining[idx] = record;
+  else
+    remaining.push(record);
+  writeAtomic(manifestPath, JSON.stringify({ schemaVersion: 1, packs: remaining }, null, 2) + `
+`);
+  return absorbed;
+}
+function errText2(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+var DEFAULT_BASE_URL2 = "https://github.com", FETCH_TIMEOUT_MS = 30000, MAX_ARTIFACT_BYTES, PACK_MANIFEST_ASSET = "failproofai-pack.json", PACK_ENTRY_ASSET = "failproofai-pack.mjs", PACK_CHECKSUMS_ASSET = "SHA256SUMS", OWNER_RE, TAG_RE, CORE_SOURCE = "FailproofAI/policies", RETIRED_CORE_ALIASES;
+var init_pack_store = __esm(() => {
+  init_pack_manifest();
+  MAX_ARTIFACT_BYTES = 8 * 1024 * 1024;
+  OWNER_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
+  TAG_RE = /^[A-Za-z0-9][A-Za-z0-9._/-]{0,127}$/;
+  RETIRED_CORE_ALIASES = new Set(["core", "failproofai", "official"]);
+});
+
 // src/hooks/tui.ts
 import * as readline2 from "node:readline";
 function colorsEnabled2(out) {
@@ -14824,7 +15282,7 @@ function runPrompt2(p) {
       `${c.dim(BAR2)}  ${c.dim(summary)}`
     ]);
   };
-  return new Promise((resolve20) => {
+  return new Promise((resolve21) => {
     hideCursor2(stdout);
     repaint2(stdout, region, build());
     readline2.emitKeypressEvents(stdin);
@@ -14840,7 +15298,7 @@ function runPrompt2(p) {
     const finish = (result) => {
       cleanup();
       collapse(result);
-      resolve20(result);
+      resolve21(result);
     };
     function onKey(_s, key) {
       if (!key)
@@ -14970,7 +15428,7 @@ function promptText2(opts) {
     return error ? { ok: false, error } : { ok: true, value };
   };
   if (!stdin.isTTY) {
-    return new Promise((resolve20) => {
+    return new Promise((resolve21) => {
       let buf = "";
       const onData = (chunk) => {
         buf += String(chunk);
@@ -14983,13 +15441,13 @@ function promptText2(opts) {
         stdin.removeListener("end", done);
         const r = accept(buf.split(`
 `)[0] ?? "");
-        resolve20(r.ok ? r.value : null);
+        resolve21(r.ok ? r.value : null);
       };
       stdin.on("data", onData);
       stdin.on("end", done);
     });
   }
-  return new Promise((resolve20) => {
+  return new Promise((resolve21) => {
     let value = "";
     const draw = (error) => {
       const cols = stdout.columns || 80;
@@ -15019,14 +15477,14 @@ ${opts.prefix ?? "  "}${truncate2(c.warn(error), cols - 3)}` : "";
         return;
       if (key.ctrl && (key.name === "c" || key.name === "d") || key.name === "escape") {
         cleanup();
-        resolve20(null);
+        resolve21(null);
         return;
       }
       if (key.name === "return" || key.name === "enter") {
         const r = accept(value);
         if (r.ok) {
           cleanup();
-          resolve20(r.value);
+          resolve21(r.value);
         } else {
           draw(r.error);
         }
@@ -22376,31 +22834,31 @@ var init_dist = __esm(() => {
 
 // src/hooks/integrations.ts
 import { execSync as execSync5 } from "node:child_process";
-import { readFileSync as readFileSync21, writeFileSync as writeFileSync14, existsSync as existsSync25, mkdirSync as mkdirSync16, unlinkSync as unlinkSync3 } from "node:fs";
-import { resolve as resolve20, dirname as dirname13 } from "node:path";
+import { readFileSync as readFileSync22, writeFileSync as writeFileSync15, existsSync as existsSync26, mkdirSync as mkdirSync17, unlinkSync as unlinkSync3 } from "node:fs";
+import { resolve as resolve21, dirname as dirname14 } from "node:path";
 import { fileURLToPath } from "node:url";
 import { homedir as homedir23 } from "node:os";
 function readJsonFile(path3) {
-  if (!existsSync25(path3))
+  if (!existsSync26(path3))
     return {};
-  const raw = readFileSync21(path3, "utf8");
+  const raw = readFileSync22(path3, "utf8");
   return JSON.parse(raw);
 }
 function writeJsonFile(path3, data) {
-  mkdirSync16(dirname13(path3), { recursive: true });
-  writeFileSync14(path3, JSON.stringify(data, null, 2) + `
+  mkdirSync17(dirname14(path3), { recursive: true });
+  writeFileSync15(path3, JSON.stringify(data, null, 2) + `
 `, "utf8");
 }
 function readYamlDoc(path3) {
   try {
-    return existsSync25(path3) ? $parseDocument(readFileSync21(path3, "utf8")) : $parseDocument("");
+    return existsSync26(path3) ? $parseDocument(readFileSync22(path3, "utf8")) : $parseDocument("");
   } catch {
     return $parseDocument("");
   }
 }
 function writeYamlDoc(path3, doc) {
-  mkdirSync16(dirname13(path3), { recursive: true });
-  writeFileSync14(path3, doc.toString(), "utf8");
+  mkdirSync17(dirname14(path3), { recursive: true });
+  writeFileSync15(path3, doc.toString(), "utf8");
 }
 function isMarkedHook(hook) {
   if (!hook || typeof hook !== "object")
@@ -22443,7 +22901,7 @@ function isMarkedCopilotHook(hook) {
   return false;
 }
 function opencodePluginFilePath(settingsPath) {
-  return resolve20(dirname13(settingsPath), "plugins", "failproofai.mjs");
+  return resolve21(dirname14(settingsPath), "plugins", "failproofai.mjs");
 }
 function buildOpenCodePluginShim(binaryPath, scope) {
   const useNpx = scope === "project";
@@ -22658,8 +23116,8 @@ export default async function failproofaiPlugin({ client, directory }) {
 function getPiExtensionPath() {
   const fromEnv = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (fromEnv)
-    return resolve20(fromEnv, "pi-extension");
-  return resolve20(fileURLToPath(import.meta.url), "..", "..", "..", "pi-extension");
+    return resolve21(fromEnv, "pi-extension");
+  return resolve21(fileURLToPath(import.meta.url), "..", "..", "..", "pi-extension");
 }
 function isFailproofaiPiEntry(source) {
   if (typeof source !== "string")
@@ -22670,8 +23128,8 @@ function isFailproofaiPiEntry(source) {
 }
 function makePiProjectRelativeEntry(extPath) {
   const cwd = process.cwd();
-  const cwdResolved = resolve20(cwd);
-  const extResolved = resolve20(extPath);
+  const cwdResolved = resolve21(cwd);
+  const extResolved = resolve21(extPath);
   if (extResolved.startsWith(cwdResolved + "/") || extResolved === cwdResolved) {
     const fromSettingsDir = "../" + extResolved.slice(cwdResolved.length + 1);
     return fromSettingsDir;
@@ -22679,7 +23137,7 @@ function makePiProjectRelativeEntry(extPath) {
   return extResolved;
 }
 function hermesConfigHasHooks(settingsPath) {
-  if (!existsSync25(settingsPath))
+  if (!existsSync26(settingsPath))
     return false;
   try {
     const doc = readYamlDoc(settingsPath);
@@ -22695,13 +23153,13 @@ function hermesConfigHasHooks(settingsPath) {
   return false;
 }
 function unhookedHermesProfiles() {
-  return listHermesProfiles().filter((p) => existsSync25(p.home)).filter((p) => !hermesConfigHasHooks(resolve20(p.home, "config.yaml"))).map((p) => p.name);
+  return listHermesProfiles().filter((p) => existsSync26(p.home)).filter((p) => !hermesConfigHasHooks(resolve21(p.home, "config.yaml"))).map((p) => p.name);
 }
 function getOpenClawPluginPath() {
   const fromEnv = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (fromEnv)
-    return resolve20(fromEnv, "openclaw-plugin");
-  return resolve20(fileURLToPath(import.meta.url), "..", "..", "..", "openclaw-plugin");
+    return resolve21(fromEnv, "openclaw-plugin");
+  return resolve21(fileURLToPath(import.meta.url), "..", "..", "..", "openclaw-plugin");
 }
 function isFailproofaiOpenClawPath(p) {
   if (typeof p !== "string")
@@ -22738,14 +23196,14 @@ var init_integrations = __esm(() => {
     scopes: HOOK_SCOPES,
     eventTypes: CLAUDE_INSTALL_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve20(cwd) : process.cwd();
+      const base = cwd ? resolve21(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve20(homedir23(), ".claude", "settings.json");
+          return resolve21(homedir23(), ".claude", "settings.json");
         case "project":
-          return resolve20(base, ".claude", "settings.json");
+          return resolve21(base, ".claude", "settings.json");
         case "local":
-          return resolve20(base, ".claude", "settings.local.json");
+          return resolve21(base, ".claude", "settings.local.json");
       }
     },
     readSettings(settingsPath) {
@@ -22841,7 +23299,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync25(settingsPath))
+      if (!existsSync26(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -22870,14 +23328,14 @@ var init_integrations = __esm(() => {
     scopes: CODEX_HOOK_SCOPES,
     eventTypes: CODEX_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve20(cwd) : process.cwd();
+      const base = cwd ? resolve21(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve20(homedir23(), ".codex", "hooks.json");
+          return resolve21(homedir23(), ".codex", "hooks.json");
         case "project":
-          return resolve20(base, ".codex", "hooks.json");
+          return resolve21(base, ".codex", "hooks.json");
         case "local":
-          return resolve20(base, ".codex", "hooks.json");
+          return resolve21(base, ".codex", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -22957,7 +23415,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync25(settingsPath))
+      if (!existsSync26(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -22986,14 +23444,14 @@ var init_integrations = __esm(() => {
     scopes: COPILOT_HOOK_SCOPES,
     eventTypes: COPILOT_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve20(cwd) : process.cwd();
+      const base = cwd ? resolve21(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve20(homedir23(), ".copilot", "hooks", "failproofai.json");
+          return resolve21(homedir23(), ".copilot", "hooks", "failproofai.json");
         case "project":
-          return resolve20(base, ".github", "hooks", "failproofai.json");
+          return resolve21(base, ".github", "hooks", "failproofai.json");
         case "local":
-          return resolve20(base, ".github", "hooks", "failproofai.json");
+          return resolve21(base, ".github", "hooks", "failproofai.json");
       }
     },
     readSettings(settingsPath) {
@@ -23071,7 +23529,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync25(settingsPath))
+      if (!existsSync26(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -23100,14 +23558,14 @@ var init_integrations = __esm(() => {
     scopes: CURSOR_HOOK_SCOPES,
     eventTypes: CURSOR_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve20(cwd) : process.cwd();
+      const base = cwd ? resolve21(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve20(homedir23(), ".cursor", "hooks.json");
+          return resolve21(homedir23(), ".cursor", "hooks.json");
         case "project":
-          return resolve20(base, ".cursor", "hooks.json");
+          return resolve21(base, ".cursor", "hooks.json");
         case "local":
-          return resolve20(base, ".cursor", "hooks.json");
+          return resolve21(base, ".cursor", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -23174,7 +23632,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync25(settingsPath))
+      if (!existsSync26(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -23199,14 +23657,14 @@ var init_integrations = __esm(() => {
     scopes: OPENCODE_HOOK_SCOPES,
     eventTypes: OPENCODE_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve20(cwd) : process.cwd();
+      const base = cwd ? resolve21(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve20(homedir23(), ".config", "opencode", "opencode.json");
+          return resolve21(homedir23(), ".config", "opencode", "opencode.json");
         case "project":
-          return resolve20(base, ".opencode", "opencode.json");
+          return resolve21(base, ".opencode", "opencode.json");
         case "local":
-          return resolve20(base, ".opencode", "opencode.json");
+          return resolve21(base, ".opencode", "opencode.json");
       }
     },
     readSettings(settingsPath) {
@@ -23217,7 +23675,7 @@ var init_integrations = __esm(() => {
     },
     buildHookEntry(_binaryPath, _eventType, scope) {
       if (scope === "user") {
-        const abs = resolve20(homedir23(), ".config", "opencode", "plugins", "failproofai.mjs");
+        const abs = resolve21(homedir23(), ".config", "opencode", "plugins", "failproofai.mjs");
         return { spec: `file://${abs}`, [FAILPROOFAI_HOOK_MARKER]: true };
       }
       return { spec: OPENCODE_PLUGIN_REL_PATH, [FAILPROOFAI_HOOK_MARKER]: true };
@@ -23232,10 +23690,10 @@ var init_integrations = __esm(() => {
     writeHookEntries(settings, binaryPath, scope) {
       const s = settings;
       const effectiveScope = scope ?? "project";
-      const settingsPath = effectiveScope === "user" ? resolve20(homedir23(), ".config", "opencode", "opencode.json") : resolve20(process.cwd(), ".opencode", "opencode.json");
+      const settingsPath = effectiveScope === "user" ? resolve21(homedir23(), ".config", "opencode", "opencode.json") : resolve21(process.cwd(), ".opencode", "opencode.json");
       const pluginPath = opencodePluginFilePath(settingsPath);
-      mkdirSync16(dirname13(pluginPath), { recursive: true });
-      writeFileSync14(pluginPath, buildOpenCodePluginShim(binaryPath, effectiveScope), "utf8");
+      mkdirSync17(dirname14(pluginPath), { recursive: true });
+      writeFileSync15(pluginPath, buildOpenCodePluginShim(binaryPath, effectiveScope), "utf8");
       if (!Array.isArray(s.plugin))
         s.plugin = [];
       const desired = effectiveScope === "user" ? `file://${pluginPath}` : OPENCODE_PLUGIN_REL_PATH;
@@ -23258,9 +23716,9 @@ var init_integrations = __esm(() => {
       }
       this.writeSettings(settingsPath, settings);
       const pluginPath = opencodePluginFilePath(settingsPath);
-      if (existsSync25(pluginPath)) {
+      if (existsSync26(pluginPath)) {
         try {
-          const content = readFileSync21(pluginPath, "utf8");
+          const content = readFileSync22(pluginPath, "utf8");
           if (content.includes(FAILPROOFAI_HOOK_MARKER)) {
             unlinkSync3(pluginPath);
             if (removed === 0)
@@ -23272,7 +23730,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync25(settingsPath))
+      if (!existsSync26(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -23282,9 +23740,9 @@ var init_integrations = __esm(() => {
         if (!hasEntry)
           return false;
         const pluginPath = opencodePluginFilePath(settingsPath);
-        if (!existsSync25(pluginPath))
+        if (!existsSync26(pluginPath))
           return false;
-        const content = readFileSync21(pluginPath, "utf8");
+        const content = readFileSync22(pluginPath, "utf8");
         return content.includes(FAILPROOFAI_HOOK_MARKER);
       } catch {
         return false;
@@ -23300,14 +23758,14 @@ var init_integrations = __esm(() => {
     scopes: PI_HOOK_SCOPES,
     eventTypes: PI_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve20(cwd) : process.cwd();
+      const base = cwd ? resolve21(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve20(homedir23(), ".pi", "agent", "settings.json");
+          return resolve21(homedir23(), ".pi", "agent", "settings.json");
         case "project":
-          return resolve20(base, ".pi", "settings.json");
+          return resolve21(base, ".pi", "settings.json");
         case "local":
-          return resolve20(base, ".pi", "settings.json");
+          return resolve21(base, ".pi", "settings.json");
       }
     },
     readSettings(settingsPath) {
@@ -23349,7 +23807,7 @@ var init_integrations = __esm(() => {
       }
     },
     removeHooksFromFile(settingsPath) {
-      if (!existsSync25(settingsPath))
+      if (!existsSync26(settingsPath))
         return 0;
       const settings = this.readSettings(settingsPath);
       if (!Array.isArray(settings.packages))
@@ -23364,7 +23822,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync25(settingsPath))
+      if (!existsSync26(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -23385,10 +23843,10 @@ var init_integrations = __esm(() => {
     scopes: HERMES_HOOK_SCOPES,
     eventTypes: HERMES_HOOK_EVENT_TYPES,
     getSettingsPath() {
-      return resolve20(hermesRoot(), "config.yaml");
+      return resolve21(hermesRoot(), "config.yaml");
     },
     getSettingsPaths() {
-      return listHermesProfiles().map((p) => resolve20(p.home, "config.yaml"));
+      return listHermesProfiles().map((p) => resolve21(p.home, "config.yaml"));
     },
     readSettings(settingsPath) {
       return readYamlDoc(settingsPath);
@@ -23423,7 +23881,7 @@ var init_integrations = __esm(() => {
       doc.set("hooks_auto_accept", true);
     },
     removeHooksFromFile(settingsPath) {
-      if (!existsSync25(settingsPath))
+      if (!existsSync26(settingsPath))
         return 0;
       const doc = readYamlDoc(settingsPath);
       const js = doc.toJS() ?? {};
@@ -23468,7 +23926,7 @@ var init_integrations = __esm(() => {
     scopes: OPENCLAW_HOOK_SCOPES,
     eventTypes: OPENCLAW_HOOK_EVENT_TYPES,
     getSettingsPath() {
-      return resolve20(homedir23(), ".openclaw", "openclaw.json");
+      return resolve21(homedir23(), ".openclaw", "openclaw.json");
     },
     readSettings(settingsPath) {
       return readJsonFile(settingsPath);
@@ -23513,7 +23971,7 @@ var init_integrations = __esm(() => {
       hooks.allowConversationAccess = true;
     },
     removeHooksFromFile(settingsPath) {
-      if (!existsSync25(settingsPath))
+      if (!existsSync26(settingsPath))
         return 0;
       const settings = this.readSettings(settingsPath);
       const plugins = settings.plugins;
@@ -23542,7 +24000,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync25(settingsPath))
+      if (!existsSync26(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -23564,14 +24022,14 @@ var init_integrations = __esm(() => {
     scopes: FACTORY_HOOK_SCOPES,
     eventTypes: FACTORY_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve20(cwd) : process.cwd();
+      const base = cwd ? resolve21(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve20(homedir23(), ".factory", "hooks.json");
+          return resolve21(homedir23(), ".factory", "hooks.json");
         case "project":
-          return resolve20(base, ".factory", "hooks.json");
+          return resolve21(base, ".factory", "hooks.json");
         case "local":
-          return resolve20(base, ".factory", "hooks.json");
+          return resolve21(base, ".factory", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -23639,7 +24097,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync25(settingsPath))
+      if (!existsSync26(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -23666,14 +24124,14 @@ var init_integrations = __esm(() => {
     scopes: DEVIN_HOOK_SCOPES,
     eventTypes: DEVIN_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve20(cwd) : process.cwd();
+      const base = cwd ? resolve21(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve20(homedir23(), ".config", "devin", "config.json");
+          return resolve21(homedir23(), ".config", "devin", "config.json");
         case "project":
-          return resolve20(base, ".devin", "config.json");
+          return resolve21(base, ".devin", "config.json");
         case "local":
-          return resolve20(base, ".devin", "config.json");
+          return resolve21(base, ".devin", "config.json");
       }
     },
     readSettings(settingsPath) {
@@ -23745,7 +24203,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync25(settingsPath))
+      if (!existsSync26(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -23775,14 +24233,14 @@ var init_integrations = __esm(() => {
     scopes: ANTIGRAVITY_HOOK_SCOPES,
     eventTypes: ANTIGRAVITY_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve20(cwd) : process.cwd();
+      const base = cwd ? resolve21(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve20(homedir23(), ".gemini", "config", "hooks.json");
+          return resolve21(homedir23(), ".gemini", "config", "hooks.json");
         case "project":
-          return resolve20(base, ".agents", "hooks.json");
+          return resolve21(base, ".agents", "hooks.json");
         case "local":
-          return resolve20(base, ".agents", "hooks.json");
+          return resolve21(base, ".agents", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -23884,7 +24342,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync25(settingsPath))
+      if (!existsSync26(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -23916,14 +24374,14 @@ var init_integrations = __esm(() => {
     scopes: GOOSE_HOOK_SCOPES,
     eventTypes: GOOSE_HOOK_EVENT_TYPES,
     getSettingsPath(scope, cwd) {
-      const base = cwd ? resolve20(cwd) : process.cwd();
+      const base = cwd ? resolve21(cwd) : process.cwd();
       switch (scope) {
         case "user":
-          return resolve20(homedir23(), ".agents", "plugins", "failproofai", "hooks", "hooks.json");
+          return resolve21(homedir23(), ".agents", "plugins", "failproofai", "hooks", "hooks.json");
         case "project":
-          return resolve20(base, ".agents", "plugins", "failproofai", "hooks", "hooks.json");
+          return resolve21(base, ".agents", "plugins", "failproofai", "hooks", "hooks.json");
         case "local":
-          return resolve20(base, ".agents", "plugins", "failproofai", "hooks", "hooks.json");
+          return resolve21(base, ".agents", "plugins", "failproofai", "hooks", "hooks.json");
       }
     },
     readSettings(settingsPath) {
@@ -23990,7 +24448,7 @@ var init_integrations = __esm(() => {
     },
     hooksInstalledInSettings(scope, cwd) {
       const settingsPath = this.getSettingsPath(scope, cwd);
-      if (!existsSync25(settingsPath))
+      if (!existsSync26(settingsPath))
         return false;
       try {
         const settings = this.readSettings(settingsPath);
@@ -24179,7 +24637,7 @@ async function promptPolicySelection(preSelected, options = {}) {
 `);
     lastLineCount = lines.length;
   }
-  return new Promise((resolve21) => {
+  return new Promise((resolve22) => {
     render();
     process.stdin.setRawMode(true);
     process.stdin.resume();
@@ -24217,7 +24675,7 @@ async function promptPolicySelection(preSelected, options = {}) {
 ${dim(STEP_DONE2)}  Policies
 ${dim(BAR2)}  ${dim(summary)}
 `);
-        resolve21([...selected, ...carried]);
+        resolve22([...selected, ...carried]);
       } else if (key.name === "escape") {
         search = "";
         cursor2 = 0;
@@ -24269,423 +24727,6 @@ var init_cli_error = __esm(() => {
   };
 });
 
-// src/hooks/pack-store.ts
-import { createHash as createHash7 } from "node:crypto";
-import { existsSync as existsSync26, mkdirSync as mkdirSync17, readFileSync as readFileSync22, renameSync as renameSync8, rmSync as rmSync9, writeFileSync as writeFileSync15 } from "node:fs";
-import { dirname as dirname14, resolve as resolve21 } from "node:path";
-function baseUrl2() {
-  return (process.env.FAILPROOFAI_PACK_BASE_URL || DEFAULT_BASE_URL2).replace(/\/+$/, "");
-}
-function parsePackSpec(source) {
-  const raw = source.trim();
-  if (raw.length === 0)
-    throw new Error("pack source is empty");
-  const url = raw.match(/^(?:https?:\/\/)?(?:www\.)?github\.com\/(.+)$/i);
-  if (url) {
-    const parts = url[1].replace(/\/+$/, "").split("/");
-    const [owner, repo, ...rest] = parts;
-    let tag2 = null;
-    if (rest[0] === "releases" && (rest[1] === "tag" || rest[1] === "download")) {
-      const tail = rest.slice(2);
-      tag2 = (rest[1] === "download" ? tail.slice(0, -1) : tail).join("/") || null;
-    } else if (rest[0] === "releases" && rest[1] === "latest") {
-      tag2 = null;
-    }
-    return validated(owner, repo, tag2);
-  }
-  const withoutScheme = raw.replace(/^github:/i, "");
-  const at2 = withoutScheme.lastIndexOf("@");
-  const repoPart = at2 > 0 ? withoutScheme.slice(0, at2) : withoutScheme;
-  const tag = at2 > 0 ? withoutScheme.slice(at2 + 1) : null;
-  const slash = repoPart.indexOf("/");
-  if (slash <= 0 || slash === repoPart.length - 1) {
-    throw new Error(`pack source must be owner/repo, owner/repo@tag, or a github.com URL — got ${JSON.stringify(source)}`);
-  }
-  return validated(repoPart.slice(0, slash), repoPart.slice(slash + 1), tag);
-}
-function validated(owner, repo, tag) {
-  if (!owner || !OWNER_RE.test(owner))
-    throw new Error(`unsafe owner ${JSON.stringify(owner)}`);
-  if (!repo || !OWNER_RE.test(repo))
-    throw new Error(`unsafe repo ${JSON.stringify(repo)}`);
-  if (tag !== null && !TAG_RE.test(tag))
-    throw new Error(`unsafe tag ${JSON.stringify(tag)}`);
-  return { owner, repo, tag };
-}
-async function resolveLatestTag(spec) {
-  const url = `${baseUrl2()}/${spec.owner}/${spec.repo}/releases/latest`;
-  const response = await fetch(url, {
-    signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
-    redirect: "manual"
-  });
-  const location = response.headers.get("location");
-  if (!location) {
-    throw new Error(`could not resolve the newest release of ${spec.owner}/${spec.repo} ` + `(GET ${url} returned ${response.status} with no redirect). That redirect is issued only ` + `for a published, non-prerelease release, so either the repository has no releases at all ` + `or every release it has is a prerelease or a draft. Name a tag explicitly.`);
-  }
-  const match = location.match(/\/releases\/tag\/(.+)$/);
-  if (!match)
-    throw new Error(`unexpected redirect from ${url}: ${location}`);
-  const tag = decodeURIComponent(match[1]).replace(/\/+$/, "");
-  if (!TAG_RE.test(tag))
-    throw new Error(`unsafe tag ${JSON.stringify(tag)} from ${url}`);
-  return tag;
-}
-function formatPackSpec(spec) {
-  return `github:${spec.owner}/${spec.repo}@${spec.tag}`;
-}
-function packAssetUrl(spec, asset) {
-  return `${baseUrl2()}/${spec.owner}/${spec.repo}/releases/download/${spec.tag}/${asset}`;
-}
-function packTagMatchesVersion(tag, version3) {
-  const tail = tag.slice(tag.lastIndexOf("/") + 1);
-  return tail === version3 || tail === `v${version3}`;
-}
-async function fetchBytes2(url) {
-  const response = await fetch(url, {
-    signal: AbortSignal.timeout(FETCH_TIMEOUT_MS),
-    redirect: "follow"
-  });
-  if (!response.ok)
-    throw new Error(`GET ${url} returned ${response.status}`);
-  const contentLength = response.headers.get("content-length");
-  if (contentLength !== null) {
-    const declared = Number(contentLength);
-    if (Number.isFinite(declared) && declared > MAX_ARTIFACT_BYTES) {
-      await response.body?.cancel();
-      throw new Error(`${url} declares ${declared} bytes, over the ${MAX_ARTIFACT_BYTES} limit`);
-    }
-  }
-  if (!response.body)
-    return Buffer.alloc(0);
-  const chunks = [];
-  const reader = response.body.getReader();
-  let total = 0;
-  try {
-    while (true) {
-      const { done, value } = await reader.read();
-      if (done)
-        break;
-      total += value.byteLength;
-      if (total > MAX_ARTIFACT_BYTES) {
-        await reader.cancel();
-        throw new Error(`${url} is over the ${MAX_ARTIFACT_BYTES} byte limit`);
-      }
-      chunks.push(Buffer.from(value));
-    }
-  } finally {
-    reader.releaseLock();
-  }
-  return Buffer.concat(chunks, total);
-}
-function digestFor2(manifest, assetName) {
-  for (const line of manifest.split(`
-`)) {
-    const match = line.trim().match(/^([0-9a-f]{64})\s+\*?(.+)$/i);
-    if (match && match[2].trim() === assetName)
-      return match[1].toLowerCase();
-  }
-  return null;
-}
-function sha256(bytes) {
-  return createHash7("sha256").update(bytes).digest("hex");
-}
-function writeAtomic(target, bytes) {
-  const tempPath = `${target}.${process.pid}.tmp`;
-  try {
-    mkdirSync17(dirname14(target), { recursive: true });
-    writeFileSync15(tempPath, bytes);
-    renameSync8(tempPath, target);
-  } catch (err) {
-    rmSync9(tempPath, { force: true });
-    throw err;
-  }
-}
-async function fetchPackPreview(source) {
-  if (process.env.FAILPROOFAI_NO_DOWNLOAD === "1") {
-    throw new Error("FAILPROOFAI_NO_DOWNLOAD is set, so nothing can be fetched to preview");
-  }
-  const parsed = parsePackSpec(source);
-  const resolvedFromLatest = parsed.tag === null;
-  const spec = parsed.tag !== null ? { ...parsed, tag: parsed.tag } : { ...parsed, tag: await resolveLatestTag(parsed) };
-  const checksums = (await fetchBytes2(packAssetUrl(spec, PACK_CHECKSUMS_ASSET))).toString("utf8");
-  const manifestBytes = await fetchBytes2(packAssetUrl(spec, PACK_MANIFEST_ASSET));
-  const manifestDigest = digestFor2(checksums, PACK_MANIFEST_ASSET);
-  if (!manifestDigest) {
-    throw new Error(`${PACK_CHECKSUMS_ASSET} has no entry for ${PACK_MANIFEST_ASSET}`);
-  }
-  if (sha256(manifestBytes) !== manifestDigest) {
-    throw new Error(`${PACK_MANIFEST_ASSET} failed integrity verification`);
-  }
-  let raw;
-  try {
-    raw = JSON.parse(manifestBytes.toString("utf8"));
-  } catch (err) {
-    throw new Error(`${PACK_MANIFEST_ASSET} is not valid JSON: ${errText2(err)}`);
-  }
-  if (!raw || typeof raw !== "object")
-    throw new Error(`${PACK_MANIFEST_ASSET} is not an object`);
-  const value = raw;
-  const identity2 = parsePackIdentity(value);
-  if (!Array.isArray(value.policies) || value.policies.length === 0) {
-    throw new Error("pack manifest declares no policies");
-  }
-  return {
-    id: identity2.id,
-    version: identity2.version,
-    effect: identity2.effect,
-    policies: value.policies.map((policy, i) => parsePackPolicy(identity2.id, policy, i)),
-    source: formatPackSpec(spec),
-    resolvedFromLatest
-  };
-}
-function priorRecordFor(id, sha2562) {
-  const installed = readInstalledPacks().packs;
-  return installed.find((p) => p.id === id) ?? installed.find((p) => p.sha256 === sha2562);
-}
-async function fetchPack(spec) {
-  const checksums = (await fetchBytes2(packAssetUrl(spec, PACK_CHECKSUMS_ASSET))).toString("utf8");
-  const manifestBytes = await fetchBytes2(packAssetUrl(spec, PACK_MANIFEST_ASSET));
-  const manifestDigest = digestFor2(checksums, PACK_MANIFEST_ASSET);
-  if (!manifestDigest)
-    throw new Error(`${PACK_CHECKSUMS_ASSET} has no entry for ${PACK_MANIFEST_ASSET}`);
-  if (sha256(manifestBytes) !== manifestDigest) {
-    throw new Error(`${PACK_MANIFEST_ASSET} failed integrity verification`);
-  }
-  const artifact = await fetchBytes2(packAssetUrl(spec, PACK_ENTRY_ASSET));
-  const entryDigest = digestFor2(checksums, PACK_ENTRY_ASSET);
-  if (!entryDigest)
-    throw new Error(`${PACK_CHECKSUMS_ASSET} has no entry for ${PACK_ENTRY_ASSET}`);
-  const artifactDigest = sha256(artifact);
-  if (artifactDigest !== entryDigest) {
-    throw new Error(`${PACK_ENTRY_ASSET} failed integrity verification`);
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(manifestBytes.toString("utf8"));
-  } catch (err) {
-    throw new Error(`${PACK_MANIFEST_ASSET} is not valid JSON: ${errText2(err)}`);
-  }
-  if (!parsed || typeof parsed !== "object")
-    throw new Error(`${PACK_MANIFEST_ASSET} is not an object`);
-  const raw = parsed;
-  const identity2 = parsePackIdentity(raw);
-  if (!Array.isArray(raw.policies) || raw.policies.length === 0) {
-    throw new Error("pack manifest declares no policies");
-  }
-  const policies = raw.policies.map((p, i) => parsePackPolicy(identity2.id, p, i));
-  return {
-    id: identity2.id,
-    version: identity2.version,
-    policies,
-    ...raw.effect !== undefined ? { effect: identity2.effect } : {},
-    artifact,
-    artifactDigest
-  };
-}
-function slugifyCategory(category) {
-  return category.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
-}
-function resolveSelection(policies, opts, previous, previouslyInstalled) {
-  const available = policies.map((p) => p.name);
-  if (opts?.all)
-    return { enabled: null, reason: "all" };
-  const picked = new Set;
-  if (opts?.categories?.length) {
-    const wanted = new Set(opts.categories.map(slugifyCategory));
-    const known = new Map(policies.map((p) => [slugifyCategory(p.category), p.category]));
-    const unknown = [...wanted].filter((c) => !known.has(c));
-    if (unknown.length > 0) {
-      throw new Error(`no such categor${unknown.length === 1 ? "y" : "ies"}: ${unknown.join(", ")} ` + `(has: ${[...new Set(policies.map((p) => slugifyCategory(p.category)))].join(", ")})`);
-    }
-    for (const p of policies)
-      if (wanted.has(slugifyCategory(p.category)))
-        picked.add(p.name);
-  }
-  if (opts?.only?.length) {
-    const unknown = opts.only.filter((n) => !available.includes(n));
-    if (unknown.length > 0) {
-      throw new Error(`pack does not contain ${unknown.join(", ")}`);
-    }
-    for (const n of opts.only)
-      picked.add(n);
-  }
-  if (opts?.only !== undefined || opts?.categories?.length) {
-    return { enabled: available.filter((n) => picked.has(n)), reason: "selected" };
-  }
-  if (previouslyInstalled) {
-    return { enabled: previous === null ? null : previous ?? null, reason: "carried" };
-  }
-  return { enabled: policies.filter((p) => p.defaultEnabled).map((p) => p.name), reason: "defaults" };
-}
-async function verifyArtifactRegisters(artifactPath, declared) {
-  const { loadCustomHooks: loadCustomHooks2 } = await Promise.resolve().then(() => (init_custom_hooks_loader(), exports_custom_hooks_loader));
-  let registered;
-  try {
-    registered = (await loadCustomHooks2(artifactPath, { strict: true })).map((h) => h.name);
-  } catch (err) {
-    throw new Error(`its artifact could not be loaded: ${err instanceof Error ? err.message : String(err)}`);
-  }
-  const missing = declared.filter((name) => !registered.includes(name));
-  const extra = registered.filter((name) => !declared.includes(name));
-  if (missing.length > 0) {
-    throw new Error(`its manifest declares ${missing.join(", ")} but the artifact does not register ${missing.length === 1 ? "it" : "them"} — that would install as protection that never runs`);
-  }
-  if (extra.length > 0) {
-    throw new Error(`its artifact registers undeclared ${extra.join(", ")} — a policy that enforces but ` + `appears in no listing cannot be reviewed or switched off`);
-  }
-}
-async function checkPackArtifact(artifactPath, declared) {
-  try {
-    await verifyArtifactRegisters(artifactPath, declared);
-    return null;
-  } catch (err) {
-    return err instanceof Error ? err.message : String(err);
-  }
-}
-async function addPack(source, opts) {
-  if (process.env.FAILPROOFAI_NO_DOWNLOAD) {
-    throw new Error("pack downloads are disabled (FAILPROOFAI_NO_DOWNLOAD). Already-installed packs keep enforcing.");
-  }
-  const parsed = parsePackSpec(source);
-  const spec = parsed.tag ? { ...parsed, tag: parsed.tag } : { ...parsed, tag: await resolveLatestTag(parsed) };
-  const resolvedFromLatest = parsed.tag === null;
-  const fetched = await fetchPack(spec);
-  if (!packTagMatchesVersion(spec.tag, fetched.version)) {
-    const fromTag = spec.tag.slice(spec.tag.lastIndexOf("/") + 1).replace(/^v/, "");
-    const fix = `re-tag the release ${fetched.version} (a leading v is fine), or rebuild the pack with --version ${fromTag}`;
-    throw new Error(`${fetched.id} was not installed: release tag ${spec.tag} does not match the version its manifest declares (${fetched.version}). ` + (resolvedFromLatest ? `That is the newest release of ${spec.owner}/${spec.repo}, so the release and the pack ` + `disagree at the source — ask the publisher to ${fix}.` : `Name the tag whose manifest says ${fetched.version}, or fix the pack: ${fix}.`));
-  }
-  const available = fetched.policies.map((p) => p.name);
-  const prior = priorRecordFor(fetched.id, fetched.artifactDigest);
-  const { enabled, reason } = resolveSelection(fetched.policies, opts, prior?.enabled ? prior.enabled.filter((n) => available.includes(n)) : prior?.enabled, Boolean(prior));
-  const root = packsRoot();
-  const artifactRel = `artifacts/${fetched.artifactDigest}.mjs`;
-  const artifactAbs = resolve21(root, artifactRel);
-  if (!existsSync26(artifactAbs))
-    writeAtomic(artifactAbs, fetched.artifact);
-  try {
-    await verifyArtifactRegisters(artifactAbs, available);
-  } catch (err) {
-    throw new Error(`${fetched.id}@${fetched.version} was not installed: ${err instanceof Error ? err.message : String(err)}`);
-  }
-  const repoOf = (source2) => {
-    const at2 = source2.lastIndexOf("@");
-    return at2 > source2.indexOf(":") ? source2.slice(0, at2) : source2;
-  };
-  if (prior && !prior.source.startsWith("bundled:") && repoOf(prior.source) !== repoOf(formatPackSpec(spec))) {
-    throw new Error(`pack id ${fetched.id} is already installed from ${prior.source}. Refusing to replace it with ${formatPackSpec(spec)} — remove it first if that is what you mean.`);
-  }
-  const record = {
-    id: fetched.id,
-    version: fetched.version,
-    source: formatPackSpec(spec),
-    entry: artifactRel,
-    sha256: fetched.artifactDigest,
-    policies: fetched.policies,
-    ...fetched.effect ? { effect: fetched.effect } : {},
-    ...enabled ? { enabled } : {},
-    ...opts?.clis ? { clis: opts.clis } : {}
-  };
-  const absorbed = upsertInstalled(record);
-  return {
-    replaced: absorbed,
-    id: fetched.id,
-    version: fetched.version,
-    source: record.source,
-    tag: spec.tag,
-    resolvedFromLatest,
-    enabled: enabled ?? available,
-    available,
-    selection: reason,
-    categories: [...new Set(fetched.policies.map((p) => slugifyCategory(p.category)))],
-    artifact: artifactAbs
-  };
-}
-function setPackPolicyEnabled(packId, name, on) {
-  const manifestPath = resolve21(packsRoot(), "installed.json");
-  if (!existsSync26(manifestPath))
-    return { ok: false, reason: "no packs are installed" };
-  let raw;
-  try {
-    raw = JSON.parse(readFileSync22(manifestPath, "utf8"));
-  } catch {
-    return { ok: false, reason: `pack manifest at ${manifestPath} is unreadable` };
-  }
-  const packs = Array.isArray(raw.packs) ? raw.packs : [];
-  const pack = packs.find((p) => p?.id === packId);
-  if (!pack)
-    return { ok: false, reason: `no installed pack with id ${packId}` };
-  const declared = Array.isArray(pack.policies) ? pack.policies : [];
-  const available = declared.map((p) => typeof p?.name === "string" ? p.name : null).filter((n) => n !== null);
-  if (!available.includes(name)) {
-    return { ok: false, reason: `pack ${packId} declares no policy named ${name}` };
-  }
-  const current = pack.enabled ?? available;
-  const next = on ? [...new Set([...current, name])] : current.filter((n) => n !== name);
-  pack.enabled = available.filter((n) => next.includes(n));
-  writeAtomic(manifestPath, JSON.stringify({ schemaVersion: 1, packs }, null, 2) + `
-`);
-  return { ok: true };
-}
-function removePack(id) {
-  const manifestPath = resolve21(packsRoot(), "installed.json");
-  if (!existsSync26(manifestPath))
-    return false;
-  let raw;
-  try {
-    raw = JSON.parse(readFileSync22(manifestPath, "utf8"));
-  } catch {
-    return false;
-  }
-  const packs = Array.isArray(raw.packs) ? raw.packs : [];
-  const remaining = packs.filter((p) => p?.id !== id);
-  if (remaining.length === packs.length)
-    return false;
-  writeAtomic(manifestPath, JSON.stringify({ schemaVersion: 1, packs: remaining }, null, 2) + `
-`);
-  return true;
-}
-function upsertInstalled(record) {
-  const manifestPath = resolve21(packsRoot(), "installed.json");
-  let packs = [];
-  if (existsSync26(manifestPath)) {
-    try {
-      const raw = JSON.parse(readFileSync22(manifestPath, "utf8"));
-      if (Array.isArray(raw.packs))
-        packs = raw.packs;
-    } catch {
-      throw new Error(`existing pack manifest at ${manifestPath} is unreadable; move it aside and re-add`);
-    }
-  }
-  const absorbed = packs.filter((p) => p?.sha256 === record.sha256 && p?.id !== record.id).map((p) => p.id);
-  if (!record.enabled) {
-    const prior = packs.find((p) => absorbed.includes(p?.id));
-    const carried = prior?.enabled?.filter((n) => record.policies?.some((rp) => rp?.name === n));
-    if (carried && carried.length > 0)
-      record.enabled = carried;
-  }
-  const remaining = packs.filter((p) => !absorbed.includes(p?.id));
-  const idx = remaining.findIndex((p) => p?.id === record.id);
-  if (idx >= 0)
-    remaining[idx] = record;
-  else
-    remaining.push(record);
-  writeAtomic(manifestPath, JSON.stringify({ schemaVersion: 1, packs: remaining }, null, 2) + `
-`);
-  return absorbed;
-}
-function errText2(err) {
-  return err instanceof Error ? err.message : String(err);
-}
-var DEFAULT_BASE_URL2 = "https://github.com", FETCH_TIMEOUT_MS = 30000, MAX_ARTIFACT_BYTES, PACK_MANIFEST_ASSET = "failproofai-pack.json", PACK_ENTRY_ASSET = "failproofai-pack.mjs", PACK_CHECKSUMS_ASSET = "SHA256SUMS", OWNER_RE, TAG_RE, CORE_SOURCE = "FailproofAI/policies", CORE_ALIASES;
-var init_pack_store = __esm(() => {
-  init_pack_manifest();
-  MAX_ARTIFACT_BYTES = 8 * 1024 * 1024;
-  OWNER_RE = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
-  TAG_RE = /^[A-Za-z0-9][A-Za-z0-9._/-]{0,127}$/;
-  CORE_ALIASES = new Set(["core", "failproofai", "official"]);
-});
-
 // src/hooks/manager.ts
 import { execSync as execSync6 } from "node:child_process";
 import { existsSync as existsSync27 } from "node:fs";
@@ -24951,7 +24992,7 @@ Validated ${validatedHooks.length} custom hook(s) from ${path3}: ${validatedHook
       } catch (err) {
         console.log(`
 Warning: could not fetch the policy pack (${err instanceof Error ? err.message : String(err)}).
-` + `Run \`failproofai policies add core\` once you are online.`);
+` + `Run \`failproofai policies add FailproofAI/policies\` once you are online.`);
       }
     } else {
       for (const name of fromPack) {
@@ -25690,7 +25731,6 @@ function blockerCleared(attempt, probe) {
       return probe.cliVersion !== attempt.cliVersion;
     case "unsupported_platform":
       return probe.cliVersion !== attempt.cliVersion;
-    case "not_a_tty":
     case "running_as_sudo":
       return true;
     default:
@@ -25703,7 +25743,6 @@ function attemptHintLines(attempt) {
     daemon_failed: "the failproofaid service could not be started",
     cancelled: "it was cancelled",
     unsupported_platform: "failproofaid does not run on this platform",
-    not_a_tty: "there was no terminal to ask in",
     running_as_sudo: "it was run under sudo"
   };
   const detail = why[attempt.reason] ?? "it did not finish";
@@ -27602,6 +27641,13 @@ async function runAuditInner(opts, startedAt) {
   const sinceMs = parseSinceOpt(opts.since);
   const userConfig = readMergedHooksConfig();
   const enabledBuiltins = new Set((userConfig.enabledPolicies ?? []).map((n) => normalizePolicyName(n)));
+  try {
+    for (const pack of readInstalledPacks().packs) {
+      const taken = pack.enabled ?? pack.policies.map((entry) => entry.name);
+      for (const name of taken)
+        enabledBuiltins.add(normalizePolicyName(name));
+    }
+  } catch {}
   const allTranscripts = [];
   for (const cli of clis) {
     const adapter = ADAPTERS[cli];
@@ -27702,6 +27748,7 @@ var TRANSCRIPT_CONCURRENCY = 8;
 var init_audit = __esm(() => {
   init_builtin_policies();
   init_hooks_config();
+  init_pack_manifest();
   init_types();
   init_cli_adapters();
   init_detectors();
@@ -29509,6 +29556,12 @@ async function runPostSetupAudit() {
     printSummary(result);
     process.stdout.write(`
 `);
+    if (!hasInstalledPacks()) {
+      process.stdout.write(`  ${c(DIM, "none of this is being enforced yet. take ours, or anyone's:")}
+` + `    ${c(CYAN, `failproofai policies add ${CORE_SOURCE}`)}
+
+`);
+    }
   } finally {
     attempt.lock.release();
   }
@@ -29638,6 +29691,8 @@ Two audits write the same cache files, so this one won't start. Try again shortl
 var DASHBOARD_PORT = 8020, EXIT_AUDIT_ALREADY_RUNNING = 75, AUDIT_STAGES, HELP_DESC_COL = 40, RESET, DIM, BOLD, PINK, GREEN, CYAN, SPINNER;
 var init_cli = __esm(() => {
   init_audit();
+  init_pack_manifest();
+  init_pack_store();
   init_audit_lock();
   init_dashboard_cache();
   init_hook_telemetry2();
@@ -29967,17 +30022,11 @@ async function maybeFirstRunConfigure(io = {}, opts = {}) {
     lock.release();
   }
 }
-async function runConfigureWizard(io = {}) {
+async function runConfigureWizard(io = {}, answers = {}) {
   const stdin = io.stdin ?? process.stdin;
   const stdout = io.stdout ?? process.stdout;
   const cwd = process.cwd();
-  if (!stdin.isTTY || !stdout.isTTY) {
-    stdout.write(`failproofai config needs an interactive terminal.
-Use the flag form instead, e.g.:
-  failproofai policies --install --scope user --cli claude
-`);
-    return { applied: false };
-  }
+  const unattended = !stdin.isTTY || !stdout.isTTY;
   if (typeof process.getuid === "function" && process.getuid() === 0 && process.env.SUDO_USER) {
     stdout.write(`Run failproofai config as ${process.env.SUDO_USER}, not under sudo.
 ` + `Everything it configures is per-user — hooks, policies and the daemon's own
@@ -29985,7 +30034,7 @@ Use the flag form instead, e.g.:
 ` + `The one step that needs root (installing the service) asks for your password
 on its own.
 `);
-    return { applied: false };
+    return { applied: false, abort: "running_as_sudo" };
   }
   emit("configure_started", {});
   if (!isDaemonSupportedPlatform()) {
@@ -30021,7 +30070,7 @@ ${process.platform} service target.
 ` : `Installing failproofaid — needs sudo once.
 
 `);
-    if (!primeElevation()) {
+    if (!(unattended ? canElevate() : primeElevation())) {
       stdout.write(`
 Could not get root, so setup stopped before changing anything.
 
@@ -30038,7 +30087,7 @@ Could not get root, so setup stopped before changing anything.
 ` + `version — it cannot start a scheduled audit. Refreshing it needs root once.
 
 `);
-    if (!primeElevation()) {
+    if (!(unattended ? canElevate() : primeElevation())) {
       stdout.write(`
 Could not get root, so the service definition was left as it is.
 Everything else is set up as normal; scheduled audits stay off until it is
@@ -30066,7 +30115,7 @@ refreshed. Re-run \`failproofai config\` once you can use sudo.
   const clis = [...clisSupportingScope(primaryScope)];
   let connect = null;
   {
-    const choice = await selectOne2({
+    const choice = unattended ? answers.token ? "key" : "local" : await selectOne2({
       message: "Connect this machine to FailproofAI Cloud?",
       body: [
         "  Sessions include prompts, file contents and command output.",
@@ -30095,7 +30144,12 @@ refreshed. Re-run \`failproofai config\` once you can use sudo.
       let token = null;
       let machineId = resolveMachineId();
       let machineLabel2 = existing?.machineLabel ?? resolveMachineLabel();
-      if (existing) {
+      if (existing && unattended && !answers.url) {
+        url = existing.url;
+        token = answers.token ?? existing.token;
+        machineId = answers.machineId ?? existing.machineId;
+        machineLabel2 = answers.machineLabel ?? existing.machineLabel ?? machineLabel2;
+      } else if (existing && !unattended) {
         const reuse = await selectOne2({
           message: `Use this machine's existing connection to ${existing.url}?`,
           choices: [
@@ -30136,6 +30190,9 @@ Using ${url} (from FAILPROOFAI_CLOUD_URL).
           url = cloudBaseFor(DEFAULT_INGEST_URL);
         }
       }
+      if (token === null && unattended) {
+        token = answers.token ?? null;
+      }
       if (token === null) {
         token = await promptText2({
           message: `API key for ${new URL(url).host}`,
@@ -30151,6 +30208,12 @@ Using ${url} (from FAILPROOFAI_CLOUD_URL).
       stdout.write(`
 Checking the key… `);
       const probe = await validateIngestKey({ url: ingestUrlFor(url), key: token });
+      if (!probe.ok && unattended) {
+        stdout.write(`
+That key did not work: ${probe.reason}
+`);
+        return { applied: false, abort: "cloud_unverified" };
+      }
       if (!probe.ok) {
         stdout.write(`
 That did not work: ${probe.reason}
@@ -30179,7 +30242,7 @@ That did not work: ${probe.reason}
       }
     }
   }
-  const decision = await selectOne2({
+  const decision = unattended ? "apply" : await selectOne2({
     message: "Ready to apply?",
     body: reviewLines({
       target,
@@ -30334,6 +30397,14 @@ Hooks keep enforcing; scheduled audits stay off until it is.
   markLauncherSeen();
   clearOnboardingAttempt();
   outro2(buildCompletionSummary(policies.length, clis.length, customEnabled, daemonInstalled, connected), { ok: true }, stdout);
+  if (policies.length === 0) {
+    stdout.write(`
+  Nothing is enforcing yet. Take ours, or anyone's:
+    failproofai policies add ${CORE_SOURCE}
+    failproofai policies show <owner>/<repo>   (look first)
+
+`);
+  }
   return {
     applied: true,
     target,
@@ -30346,6 +30417,7 @@ Hooks keep enforcing; scheduled audits stay off until it is.
 }
 var DIM_NOTE = "(auto-loaded)", MAX_SUMMARY_COLUMNS = 77, POLICY_LIST_INDENT;
 var init_configure_wizard = __esm(() => {
+  init_pack_store();
   init_tui2();
   init_collector_config();
   init_integrations();
@@ -30641,7 +30713,8 @@ __export(exports_pack_cli, {
   packAddSource: () => packAddSource,
   runPackCommand: () => runPackCommand,
   runPolicyPicker: () => runPolicyPicker,
-  runPublishCommand: () => runPublishCommand
+  runPublishCommand: () => runPublishCommand,
+  selectionFromForTest: () => selectionFromForTest
 });
 import { execFileSync as execFileSync3 } from "node:child_process";
 import { homedir as homedir29, tmpdir as tmpdir3 } from "node:os";
@@ -30657,22 +30730,72 @@ function parseList(rest, flag) {
     return [];
   return raw.split(",").map((s) => s.trim()).filter(Boolean);
 }
+function looksLikeCliName(token) {
+  return !token.startsWith("-") && !token.includes("/");
+}
+function cliValueIndices(rest) {
+  const taken = new Set;
+  for (let i = 0;i < rest.length; i += 1) {
+    if (rest[i] !== "--cli" && !rest[i].startsWith("--cli="))
+      continue;
+    if (rest[i].startsWith("--cli="))
+      continue;
+    for (let j = i + 1;j < rest.length && looksLikeCliName(rest[j]); j += 1) {
+      taken.add(j);
+    }
+  }
+  return taken;
+}
 function packAddSource(rest) {
-  const consumed = new Set;
+  const consumed = cliValueIndices(rest);
   for (let i = 0;i < rest.length; i += 1) {
     if (VALUE_FLAGS.has(rest[i]))
       consumed.add(i + 1);
   }
-  return rest.find((arg, index) => !arg.startsWith("--") && !consumed.has(index));
+  return rest.find((arg, index) => !arg.startsWith("-") && !consumed.has(index));
+}
+function parseCliList(rest) {
+  const idx = rest.findIndex((a) => a === "--cli" || a.startsWith("--cli="));
+  if (idx === -1)
+    return {};
+  const values = [];
+  if (rest[idx].startsWith("--cli=")) {
+    values.push(...rest[idx].slice("--cli=".length).split(","));
+  } else {
+    for (let j = idx + 1;j < rest.length && looksLikeCliName(rest[j]); j += 1) {
+      values.push(...rest[j].split(","));
+    }
+  }
+  const names = values.map((v) => v.trim()).filter(Boolean);
+  if (names.length === 0)
+    return { clis: [] };
+  const known = new Set(INTEGRATION_TYPES);
+  const unknown = names.filter((n) => !known.has(n));
+  if (unknown.length > 0) {
+    const near = (bad) => INTEGRATION_TYPES.find((k) => k.startsWith(bad.slice(0, 3)) || bad.startsWith(k.slice(0, 3)));
+    const hint = unknown.map((u) => near(u) ? `${u} (did you mean ${near(u)}?)` : u).join(", ");
+    return {
+      error: [
+        `Not an agent: ${hint}`,
+        `--cli takes any of: ${INTEGRATION_TYPES.join(", ")}`
+      ]
+    };
+  }
+  return { clis: names };
+}
+function selectionFromForTest(rest) {
+  return selectionFrom(rest);
 }
 function selectionFrom(rest) {
   const only = parseList(rest, "--policy") ?? parseList(rest, "--only");
   const categories = parseList(rest, "--category");
-  const clis = parseList(rest, "--cli");
+  const parsedClis = parseCliList(rest);
+  if ("error" in parsedClis)
+    return { error: parsedClis.error };
   return {
     ...only ? { only } : {},
     ...categories ? { categories } : {},
-    ...clis ? { clis } : {},
+    ...parsedClis.clis ? { clis: parsedClis.clis } : {},
     ...rest.includes("--all") ? { all: true } : {}
   };
 }
@@ -30728,6 +30851,18 @@ async function build(rest) {
       "A pack entry calls customPolicies.add({ name, description, match, fn }) for each one."
     ]);
   }
+  const byName = new Map;
+  for (const hook of hooks)
+    byName.set(hook.name, (byName.get(hook.name) ?? 0) + 1);
+  const duplicates = [...byName.entries()].filter(([, n]) => n > 1).map(([name]) => name);
+  if (duplicates.length > 0) {
+    return fail([
+      duplicates.length === 1 ? `Two policies are called ${JSON.stringify(duplicates[0])}.` : `${duplicates.length} names are used by more than one policy: ${duplicates.join(", ")}.`,
+      "A name is what --policy selects and what the picker toggles, so a pack",
+      "cannot carry the same one twice — one of them would be unreachable.",
+      "Rename or delete one of each pair."
+    ]);
+  }
   const policies = [];
   for (const [index, hook] of hooks.entries()) {
     const extra = hook;
@@ -30783,7 +30918,7 @@ async function runPolicyPicker(action, io = {}) {
     return ok(stack2(emptyState2({
       what: "No policies are installed yet.",
       hint: "Take ours, or anyone's:",
-      cmd: "failproofai policies add core"
+      cmd: "failproofai policies add FailproofAI/policies"
     }, opts), note2("Someone else's:  failproofai policies add <owner>/<repo>", opts), note2("Look first:      failproofai policies show <owner>/<repo>", opts)));
   }
   const rows3 = [];
@@ -31448,7 +31583,9 @@ async function pickFromSource(source, io) {
 async function add(rest) {
   const source = packAddSource(rest);
   const selection = selectionFrom(rest);
-  const resolvedSource = source && CORE_ALIASES.has(source.toLowerCase()) ? CORE_SOURCE : source;
+  if (selection.error)
+    return fail(selection.error);
+  const resolvedSource = source;
   if (!resolvedSource) {
     return fail(["Usage: failproofai policies add <source> [--policy a,b] [--category x,y] [--all]"]);
   }
@@ -31630,7 +31767,15 @@ var init_pack_cli = __esm(() => {
   init_pack_store();
   init_custom_hooks_loader();
   init_tui2();
-  VALUE_FLAGS = new Set(["--only", "--policy", "--category", "--cli"]);
+  VALUE_FLAGS = new Set([
+    "--only",
+    "--policy",
+    "--category",
+    "--cli",
+    "--scope",
+    "--custom",
+    "-c"
+  ]);
   PUBLISH_VALUE_FLAGS = new Set([
     "--repo",
     "--version",
@@ -33669,11 +33814,11 @@ var init_uninstall_cli = __esm(() => {
 // src/hooks/pack-store.ts
 var exports_pack_store = {};
 __export(exports_pack_store, {
-  CORE_ALIASES: () => CORE_ALIASES2,
   CORE_SOURCE: () => CORE_SOURCE2,
   PACK_CHECKSUMS_ASSET: () => PACK_CHECKSUMS_ASSET2,
   PACK_ENTRY_ASSET: () => PACK_ENTRY_ASSET2,
   PACK_MANIFEST_ASSET: () => PACK_MANIFEST_ASSET2,
+  RETIRED_CORE_ALIASES: () => RETIRED_CORE_ALIASES2,
   addPack: () => addPack2,
   addPackFromSource: () => addPackFromSource,
   checkPackArtifact: () => checkPackArtifact2,
@@ -33717,6 +33862,9 @@ function parsePackSpec2(source) {
   const tag = at3 > 0 ? withoutScheme.slice(at3 + 1) : null;
   const slash = repoPart.indexOf("/");
   if (slash <= 0 || slash === repoPart.length - 1) {
+    if (RETIRED_CORE_ALIASES2.has(repoPart.trim().toLowerCase())) {
+      throw new Error(`${JSON.stringify(source)} is no longer a pack name — ours is a pack like anyone else's now. Use ${CORE_SOURCE2} instead.`);
+    }
     throw new Error(`pack source must be owner/repo, owner/repo@tag, or a github.com URL — got ${JSON.stringify(source)}`);
   }
   return validated2(repoPart.slice(0, slash), repoPart.slice(slash + 1), tag);
@@ -33819,8 +33967,7 @@ function writeAtomic2(target, bytes) {
   }
 }
 async function addPackFromSource(source, opts = {}) {
-  const resolved2 = CORE_ALIASES2.has(source.trim().toLowerCase()) ? CORE_SOURCE2 : source;
-  const result = await addPack2(resolved2, opts);
+  const result = await addPack2(source, opts);
   return {
     id: result.id,
     version: result.version,
@@ -34111,13 +34258,13 @@ function upsertInstalled2(record) {
 function errText3(err) {
   return err instanceof Error ? err.message : String(err);
 }
-var DEFAULT_BASE_URL3 = "https://github.com", FETCH_TIMEOUT_MS2 = 30000, MAX_ARTIFACT_BYTES2, PACK_MANIFEST_ASSET2 = "failproofai-pack.json", PACK_ENTRY_ASSET2 = "failproofai-pack.mjs", PACK_CHECKSUMS_ASSET2 = "SHA256SUMS", OWNER_RE2, TAG_RE2, CORE_SOURCE2 = "FailproofAI/policies", CORE_ALIASES2;
+var DEFAULT_BASE_URL3 = "https://github.com", FETCH_TIMEOUT_MS2 = 30000, MAX_ARTIFACT_BYTES2, PACK_MANIFEST_ASSET2 = "failproofai-pack.json", PACK_ENTRY_ASSET2 = "failproofai-pack.mjs", PACK_CHECKSUMS_ASSET2 = "SHA256SUMS", OWNER_RE2, TAG_RE2, CORE_SOURCE2 = "FailproofAI/policies", RETIRED_CORE_ALIASES2;
 var init_pack_store2 = __esm(() => {
   init_pack_manifest();
   MAX_ARTIFACT_BYTES2 = 8 * 1024 * 1024;
   OWNER_RE2 = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
   TAG_RE2 = /^[A-Za-z0-9][A-Za-z0-9._/-]{0,127}$/;
-  CORE_ALIASES2 = new Set(["core", "failproofai", "official"]);
+  RETIRED_CORE_ALIASES2 = new Set(["core", "failproofai", "official"]);
 });
 
 // src/hooks/install-prompt.ts
@@ -34819,7 +34966,7 @@ Validated ${validatedHooks.length} custom hook(s) from ${path3}: ${validatedHook
       } catch (err) {
         console.log(`
 Warning: could not fetch the policy pack (${err instanceof Error ? err.message : String(err)}).
-` + `Run \`failproofai policies add core\` once you are online.`);
+` + `Run \`failproofai policies add FailproofAI/policies\` once you are online.`);
       }
     } else {
       for (const name of fromPack) {
@@ -35098,6 +35245,9 @@ async function listHooks(cwd) {
     ], opts) : nextStep2("failproofai config", config.enabledPolicies.length > 0 ? "These are configured but NOT installed — no hook is running them:" : "Nothing is set up yet. Get started with:", opts));
   }
   const footer = [note2(`Config: ${globalPolicyConfigFile()}`, opts)];
+  if (packCount === 0) {
+    footer.unshift(nextStep2(`failproofai policies add ${CORE_SOURCE}`, "Nothing is enforcing yet. Take ours, or anyone's:", opts), note2("Someone else's:  failproofai policies add <owner>/<repo>", opts), note2("Look first:      failproofai policies show <owner>/<repo>", opts));
+  }
   if (installedScopes.length > 1) {
     footer.push(warning2([
       `Hooks in multiple scopes (${installedScopes.join(", ")}).`,
@@ -35530,6 +35680,12 @@ async function runPostSetupAudit2() {
     printSummary2(result);
     process.stdout.write(`
 `);
+    if (!hasInstalledPacks()) {
+      process.stdout.write(`  ${c2(DIM2, "none of this is being enforced yet. take ours, or anyone's:")}
+` + `    ${c2(CYAN2, `failproofai policies add ${CORE_SOURCE}`)}
+
+`);
+    }
   } finally {
     attempt.lock.release();
   }
@@ -35659,6 +35815,8 @@ Two audits write the same cache files, so this one won't start. Try again shortl
 var DASHBOARD_PORT2 = 8020, EXIT_AUDIT_ALREADY_RUNNING2 = 75, AUDIT_STAGES2, HELP_DESC_COL2 = 40, RESET2, DIM2, BOLD2, PINK2, GREEN2, CYAN2, SPINNER2;
 var init_cli2 = __esm(() => {
   init_audit();
+  init_pack_manifest();
+  init_pack_store();
   init_audit_lock();
   init_dashboard_cache();
   init_hook_telemetry2();
@@ -36148,7 +36306,7 @@ import { realpathSync as realpathSync6 } from "fs";
 import { dirname as dirname27, resolve as resolve37 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 // package.json
-var version = "1.0.2-beta.5";
+var version = "1.0.2-beta.6";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {
@@ -36547,10 +36705,10 @@ Run \`failproofai backfill --help\` for usage.`);
 failproofai pack \u2014 install policy packs published as GitHub releases
 
 Usage:
-  failproofai pack add core                     the Failproof AI policies
-  failproofai pack add core --policy <a,b>      just these
-  failproofai pack add core --category <x,y>    whole categories
-  failproofai pack add core --all               everything in it
+  failproofai policies add FailproofAI/policies                     the Failproof AI policies
+  failproofai policies add FailproofAI/policies --policy <a,b>      just these
+  failproofai policies add FailproofAI/policies --category <x,y>    whole categories
+  failproofai policies add FailproofAI/policies --all               everything in it
   failproofai pack list                         packs installed here
   failproofai pack list <source>                what a pack out there contains
   failproofai pack add <source> [--policy <a,b>] [--category <x,y>] [--all]
@@ -36561,7 +36719,7 @@ A pack is one entry artifact plus a manifest, verified against the release's
 SHA256SUMS at install time. The digest is recorded, and re-verified before every
 import \u2014 so a pack cannot change under this machine after you installed it.
 
-<source> is core for the Failproof AI policies, or any of these:
+<source> is any GitHub repo publishing a pack \u2014 ours included:
   acme/support-agent                 newest release, pinned to its exact tag
   acme/support-agent@v2.1.0          that release
   github:acme/support-agent@v2.1.0   same, explicit
@@ -36583,7 +36741,7 @@ rest back on.
 
 Examples:
   failproofai pack add FailproofAI/policies
-  failproofai pack add core --category sanitize,git
+  failproofai policies add FailproofAI/policies --category sanitize,git
   failproofai pack add github:acme/support-agent@v2.1.0 --only block-refunds
   failproofai pack remove acme/support-agent
 
@@ -37093,7 +37251,7 @@ USAGE
   failproofai policies add                 Pick from what is installed here
   failproofai policies add <name>          Turn one policy on
   failproofai policies add <owner>/<repo>  Install someone's pack
-  failproofai policies add core            Our pack, fetched like any other
+  failproofai policies add FailproofAI/policies            Our pack, fetched like any other
   failproofai policies remove <name>       Turn one policy off
   failproofai policies remove <pack-id>    Uninstall a pack
   failproofai policies show <owner>/<repo> What a pack contains, before you take it
@@ -37126,7 +37284,7 @@ EXAMPLES
   failproofai policies add
   failproofai policies add block-sudo
   failproofai policies add sanitize-api-keys --scope project
-  failproofai policies add core --category sanitize,git
+  failproofai policies add FailproofAI/policies --category sanitize,git
   failproofai policies add acme/deploy-guard --policy block-prod-deploy
   failproofai policies show acme/deploy-guard
   failproofai policies remove block-sudo
@@ -37139,11 +37297,22 @@ keep enforcing. FAILPROOFAI_PACK_BASE_URL points it all at a mirror.
     }
     const action = subArgs[0];
     const rest = subArgs.slice(1);
-    const firstPositional = rest.find((a) => !a.startsWith("-"));
+    const VALUE_TAKING = new Set(["--scope", "--policy", "--category", "--only", "--custom", "-c"]);
+    const skip = new Set;
+    for (let i = 0;i < rest.length; i += 1) {
+      if (VALUE_TAKING.has(rest[i]))
+        skip.add(i + 1);
+      if (rest[i] !== "--cli")
+        continue;
+      for (let j = i + 1;j < rest.length && !rest[j].startsWith("-") && !rest[j].includes("/"); j += 1) {
+        skip.add(j);
+      }
+    }
+    const firstPositional = rest.find((a, i) => !a.startsWith("-") && !skip.has(i));
     let looksLikeSource = !!firstPositional && (firstPositional.includes("/") || firstPositional.startsWith("github:"));
     if (!looksLikeSource && firstPositional) {
-      const { CORE_ALIASES: CORE_ALIASES3 } = await Promise.resolve().then(() => (init_pack_store2(), exports_pack_store));
-      looksLikeSource = CORE_ALIASES3.has(firstPositional.toLowerCase());
+      const { RETIRED_CORE_ALIASES: RETIRED_CORE_ALIASES3 } = await Promise.resolve().then(() => (init_pack_store2(), exports_pack_store));
+      looksLikeSource = RETIRED_CORE_ALIASES3.has(firstPositional.toLowerCase());
     }
     if (action === "show" || looksLikeSource) {
       if (action === "show" && !firstPositional) {
@@ -37322,8 +37491,8 @@ EXAMPLES
   failproofai policies --uninstall --cli pi
   failproofai policies -u
   failproofai policies --uninstall --custom
-  failproofai pack add core
-  failproofai pack add core --category git,database
+  failproofai policies add FailproofAI/policies
+  failproofai policies add FailproofAI/policies --category git,database
   failproofai pack list acme/support-agent
   failproofai pack build ./my-policies.mjs --id acme/support --version 1.0.0
 `.trimStart());
@@ -37479,19 +37648,38 @@ Run \`failproofai policies --help\` for usage.`);
   if (args[0] === "config") {
     if (args.includes("--help") || args.includes("-h")) {
       console.log(`
-failproofai config \u2014 interactive setup
+failproofai config \u2014 set this machine up
 
 USAGE
-  failproofai config             Guided setup: choose scope, agents, and policies
+  failproofai config             Guided setup
   failproofai configure          Alias for config
   failproofai setup              Alias for config
 
 WHAT IT DOES
-  Walks you through 4 quick steps and writes everything for you:
-    1. Where      \u2014 global (all projects) or just this project
-    2. Harnesses  \u2014 which agent CLIs to protect (Claude, Codex, ...)
-    3. Policies   \u2014 presets (combine any), Everything, or a custom pick
-    4. Review     \u2014 confirms the exact files it will change, then applies
+  Installs the failproofaid service (needs root once), wires hooks into every
+  agent CLI it supports, and optionally connects this machine to Cloud. It
+  chooses NO policies \u2014 take some with 'failproofai policies add <owner>/<repo>'.
+
+WITH NO TERMINAL (CI, containers, an agent driving it)
+  It just runs. There is nothing to confirm when nobody is watching, so it
+  applies rather than asking \u2014 no flag needed.
+
+  failproofai config                          set up, stay local
+  failproofai config --token <key>            set up and connect to Cloud
+    --url <url>                     somewhere other than app.befailproof.ai
+    --machine-id <id>               defaults to a stable per-machine key
+    --machine-label <name>          defaults to this host's name
+    --no-transcripts                decisions only, no session transcripts
+
+  The key can come from FAILPROOFAI_CLOUD_TOKEN instead of the command line,
+  and the url from FAILPROOFAI_CLOUD_URL \u2014 the same variable the daemon reads.
+  Prefer the environment: an argument is readable from 'ps' by every user on
+  the box, and lands in shell history and CI logs.
+
+  Exit 1 if anything it was asked to do did not happen \u2014 including a key the
+  server refused, and a machine that could not reach root. 'sudo' is never
+  prompted for here; it either works without a password or you are told the
+  exact commands to run.
 
 FAILPROOF CLOUD
   failproofai config --connect <url> --token <key> [--machine-id <id>]
@@ -37630,8 +37818,23 @@ PAUSING ENFORCEMENT (one session, always time-boxed)
       await exitAfterFlush(result2.exitCode);
       return;
     }
+    const valueFor = (flag) => {
+      const i = args.indexOf(flag);
+      if (i < 0)
+        return;
+      const v = args[i + 1];
+      if (!v || v.startsWith("-"))
+        throw new CliError3(`Missing value after ${flag}.`);
+      return v;
+    };
     const { runConfigureWizard: runConfigureWizard2 } = await Promise.resolve().then(() => (init_configure_wizard(), exports_configure_wizard));
-    const result = await runConfigureWizard2();
+    const result = await runConfigureWizard2({}, {
+      token: valueFor("--token") ?? process.env.FAILPROOFAI_CLOUD_TOKEN,
+      url: valueFor("--url") ?? process.env.FAILPROOFAI_CLOUD_URL,
+      machineId: valueFor("--machine-id"),
+      machineLabel: valueFor("--machine-label"),
+      noTranscripts: args.includes("--no-transcripts")
+    });
     await track("cli_configure_invoked", {
       applied: result.applied,
       target: result.target ?? null,