failproofai 1.0.2-beta.6 → 1.0.2-beta.7

package/dist/worker.mjs

@@ -2559,7 +2559,7 @@ var init_builtin_policies = __esm(() => {
 });
 
 // package.json
-var version = "1.0.2-beta.6";
+var version = "1.0.2-beta.7";
 var init_package = () => {};
 
 // src/posthog-key.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "1.0.2-beta.6",
+  "version": "1.0.2-beta.7",
   "description": "Observability and enforcement for AI agent harnesses. 39 built-in policies hooked into 12 of them — Claude Code, Codex, Cursor, Hermes, OpenClaw and more — blocking the tool call before it runs. Local dashboard included, no account needed.",
   "bin": {
     "failproofai": "./dist/cli.mjs",
@@ -120,15 +120,15 @@
     "sharp": "0.35.0"
   },
   "optionalDependencies": {
-    "@failproofai/failproofaid-linux-x64": "1.0.2-beta.6",
-    "@failproofai/failproofaid-linux-arm64": "1.0.2-beta.6",
-    "@failproofai/failproofaid-darwin-x64": "1.0.2-beta.6",
-    "@failproofai/failproofaid-darwin-arm64": "1.0.2-beta.6"
+    "@failproofai/failproofaid-linux-x64": "1.0.2-beta.7",
+    "@failproofai/failproofaid-linux-arm64": "1.0.2-beta.7",
+    "@failproofai/failproofaid-darwin-x64": "1.0.2-beta.7",
+    "@failproofai/failproofaid-darwin-arm64": "1.0.2-beta.7"
   },
   "failproofaidBinaries": {
-    "linux-x64": "1e883d50ea40dad46394a137fab9b8ecddb7b37064312af9ddf89cb3de5eb7b8",
-    "linux-arm64": "47a51a75a01c021417a4d67fb7eb5caa8fa9c46abca5ec85d23e8ddead1ebfdd",
-    "darwin-x64": "bbc4e714c1e961d53d7dd6c65b84dcc74b4e24439349ebdef3f7d8681ece1776",
-    "darwin-arm64": "ca6f6e688070a2d2a63fd333f7c3ac7c7d2bd991ca499cfced23b249e7ca684b"
+    "linux-x64": "75a8e231e057986f2b357e1fcb596641afd82a4b58f9271bb4b342951a364c2d",
+    "linux-arm64": "47d2933d06e70faefa78fe06fdd4e06bc03e94a319d13a8837145d192cd84d8c",
+    "darwin-x64": "6eae79c75746efe6922ca84e7dd899d01a50e651879abc8f90de69cd51c403f3",
+    "darwin-arm64": "ddca616decc3d2415ce6a58ae5fe15786bd2cfa5a5319803f4207a01d40e4a0a"
   }
 }

package/src/audit/cli.ts

@@ -35,7 +35,8 @@ import { getInstanceId } from "../../lib/telemetry-id";
 import { sanitizeErrorMessage } from "../../lib/telemetry-sanitize";
 import { openWhenReady } from "./open-browser";
 import { describeOutcome, reportHarm } from "./report-harm";
-import { brandAnsi, ANSI_RESET, ANSI_BOLD, ANSI_DIM } from "../hooks/tui";
+import { brandAnsi, ANSI_RESET, ANSI_BOLD, ANSI_DIM, helpScreen, helpOptsFor } from "../hooks/tui";
+import { version } from "../../package.json";
 
 /** Port the bundled dashboard binds to. Matches `scripts/launch.ts`'s default
  *  for `start` mode, which `failproofai` (bare) already uses. */
@@ -64,9 +65,6 @@ export const AUDIT_STAGES: ReadonlyArray<{ label: string; detail: string }> = [
   { label: "aggregating results", detail: "counting hits, ranking by frequency" },
 ];
 
-/** Column the description text starts at. The widest command line is 37 wide. */
-const HELP_DESC_COL = 40;
-
 /**
  * `audit --help`.
  *
@@ -82,41 +80,44 @@ const HELP_DESC_COL = 40;
  * one. It still works, and still refuses every argument it always refused.
  */
 export function helpText(): string {
-  const row = (command: string, lines: string[]): string => {
-    // Padding is measured on the RAW command — `c()` adds escape bytes that
-    // occupy no columns, so colouring first would misalign every row.
-    const pad = " ".repeat(Math.max(1, HELP_DESC_COL - 2 - command.length));
-    return lines
-      .map((line, i) =>
-        i === 0 ? `  ${c(CYAN, command)}${pad}${line}` : `${" ".repeat(HELP_DESC_COL)}${line}`,
-      )
-      .join("\n");
-  };
-
-  return [
-    `${c(BOLD, "failproofai audit")} — review your agent CLIs for risky and wasteful patterns.`,
-    c(DIM, "Everything runs on this machine; only a scheduled digest ever leaves it."),
-    "",
-    c(BOLD, "USAGE"),
-    row("failproofai audit", [
-      "Scan your session history, then open",
-      `http://localhost:${DASHBOARD_PORT}/audit`,
-    ]),
-    row("failproofai audit --schedule [days]", [
-      "Scan on a timer and email the findings.",
-      "Default 7 days, range 1-90.",
-      "Signs you in the first time; add",
-      "--email <address> to skip a prompt.",
-    ]),
-    row("failproofai audit --no-schedule", ["Stop the timer. Leaves you signed in."]),
-    row("failproofai audit --status", [
-      "Whether scheduling is on, where reports",
-      "go, the daemon's state, and when the",
-      "next scan is due.",
-    ]),
-    row("failproofai audit -h, --help", ["Show this help."]),
-    "",
-  ].join("\n");
+  // Drawn by the same renderer as `config --help` and `policies --help`, from
+  // the same kit `audit`'s output already uses for its palette. It used to
+  // build its own rows against a hand-set HELP_DESC_COL, which is how `audit`
+  // and `config` ended up with their descriptions in different columns.
+  //
+  // The `failproofai audit` prefix is dropped from the rows: the heading two
+  // lines above already carries it, and repeating it cost 17 of the 80 columns
+  // on every row — which is what forced the four-word-per-line descriptions.
+  const lines = helpScreen(
+    {
+      command: "audit",
+      version,
+      tagline: "review your agent CLIs for risky and wasteful patterns",
+      sections: [
+        {
+          label: "usage",
+          entries: [
+            ["(bare)", `Scan your session history, then open http://localhost:${DASHBOARD_PORT}/audit`],
+            ["--schedule [days]", "Scan on a timer and email the findings. Default 7 days, range 1-90. Signs you in the first time."],
+            // Its own row now, rather than a clause inside --schedule's. It
+            // does not stand alone, which is why it used to be a clause — but
+            // a clause wraps, and `--email <address>` landing with the flag at
+            // the end of one line and its placeholder at the start of the next
+            // is not a flag anybody can read or copy.
+            ["--email <address>", "With --schedule, skips the sign-in prompt."],
+            ["--no-schedule", "Stop the timer. Leaves you signed in."],
+            ["--status", "Whether scheduling is on, where reports go, the daemon's state, and when the next scan is due."],
+            ["-h, --help", "Show this help."],
+          ],
+        },
+      ],
+      footer: ["Everything runs on this machine; only a scheduled digest ever leaves it."],
+    },
+    helpOptsFor(process.stdout),
+  );
+  // The margins `printBlock` would add, spelled out because this one returns
+  // its text for a caller to write rather than writing it.
+  return ["", ...lines, ""].join("\n") + "\n";
 }
 
 // ── ANSI helpers ────────────────────────────────────────────────────────────

package/src/hooks/backfill-cli.ts

@@ -149,7 +149,7 @@ export function runBackfillCommand(opts: BackfillOptions = {}): BackfillResult {
       exitCode: 1,
       lines: [
         "This machine is not connected, so there is nowhere to send history.",
-        "Connect first: `failproofai config --connect <url> --token <key>`.",
+        "Connect first: `failproofai config --token <key>`.",
       ],
     };
   }

package/src/hooks/configure-wizard.ts

@@ -743,6 +743,16 @@ export async function runConfigureWizard(
   // reaching this function, so setup never runs off the back of some other
   // command on a headless box.
   const unattended = !stdin.isTTY || !stdout.isTTY;
+  // A key on the command line settles the whole run, not just the question it
+  // literally answers.
+  //
+  // Somebody typing `failproofai config --token <key>` has said: set this
+  // machine up, connect it, send its data. There is nothing left to confirm —
+  // so asking "Connect to Cloud?", then the key, then "Ready to apply?" made
+  // the flag look like it had not been read. The only thing still worth
+  // stopping for is the sudo password, which is a CREDENTIAL rather than a
+  // question, and no flag can supply it.
+  const preAnswered = Boolean(answers.token);
 
 
   // Running the wizard itself under sudo configures the WRONG ACCOUNT, and
@@ -1020,9 +1030,15 @@ export async function runConfigureWizard(
     // one — so an unattended run with a token skips straight past the question,
     // and one without a token stays local, which is the same "Not now" branch a
     // person picks. Neither needs a separate flag to say so.
-    const choice = unattended
-      ? (answers.token ? "key" : "local")
-      : await selectOne<"key" | "local">({
+    const choice = answers.token
+      // A key on the command line IS the answer to this question. Gating it on
+      // there being no terminal was wrong: `--token` means "use this key", not
+      // "use this key only if nobody is watching", and a run that asked anyway
+      // made the flag look broken to the person who had just typed it.
+      ? "key"
+      : unattended
+        ? "local"
+        : await selectOne<"key" | "local">({
       message: "Connect this machine to FailproofAI Cloud?",
       // The hint says what you GET; the body says what LEAVES.
       //
@@ -1186,12 +1202,10 @@ export async function runConfigureWizard(
         }
       }
 
-      if (token === null && unattended) {
-        // Supplied on the command line, so nothing is asked and nothing is
-        // echoed. Reaching here without one cannot happen — an unattended run
-        // only takes the "key" branch BECAUSE a token was given.
-        token = answers.token ?? null;
-      }
+      // Supplied on the command line, so nothing is asked and nothing is
+      // echoed — terminal or not. Prompting for a value the caller already gave
+      // is the failure this whole flag exists to avoid.
+      if (token === null) token = answers.token ?? null;
       if (token === null) {
         token = await promptText({
           // The destination is in the question now that it is no longer a
@@ -1255,7 +1269,7 @@ export async function runConfigureWizard(
   // NOT the same call as `uninstall`, which does require --yes: that one
   // REMOVES things, so silence there would destroy on a signal as weak as a
   // missing terminal. This one does exactly what its name says.
-  const decision = unattended ? "apply" : await selectOne<"apply" | "cancel">({
+  const decision = unattended || preAnswered ? "apply" : await selectOne<"apply" | "cancel">({
     message: "Ready to apply?",
     body: reviewLines({
       target,

package/src/hooks/manager.ts

@@ -15,7 +15,6 @@ import { INTEGRATION_TYPES,
   type IntegrationType,
 } from "./types";
 import { claudeCode, getIntegration, settingsPathsFor, type Integration } from "./integrations";
-import { promptPolicySelection } from "./install-prompt";
 import { configuredCustomPolicyPaths, readMergedHooksConfig, readScopedHooksConfig, writeScopedHooksConfig, syncConventionPolicies, findProjectConfigDir } from "./hooks-config";
 import type { HooksConfig, ConventionPolicyRecord } from "./policy-types";
 import { BUILTIN_POLICIES } from "./builtin-policies";
@@ -462,9 +461,25 @@ async function installHooksImpl(
       ? [...new Set(incoming)]
       : [...new Set([...previousConfig.enabledPolicies, ...incoming])];
   } else {
-    // Interactive — pre-load current config if it exists
-    const preSelected = previousConfig.enabledPolicies.length > 0 ? previousConfig.enabledPolicies : undefined;
-    selectedPolicies = await promptPolicySelection(preSelected, { includeBeta });
+    // NOT a policy picker. `--install` wires hooks; choosing what they enforce
+    // is `policies add` / `policies remove`.
+    //
+    // It used to open a second picker here, over `BUILTIN_POLICIES` — the
+    // COMPILED catalog, which is no longer how policies arrive. So it offered a
+    // list that did not match what was installed, in an older prompt engine
+    // that looks nothing like the rest, and wrote its answer to
+    // `enabledPolicies` while every pack records its selection in
+    // `installed.json`.
+    //
+    // Two independent enabled-sets, and this one silently overwrote the other:
+    // `policies remove block-env-files` followed by `policies --install` put
+    // block-env-files straight back on, because the picker pre-ticked from the
+    // legacy key and saved all of it again. A command whose job is wiring must
+    // not undo a policy decision made somewhere else.
+    //
+    // Whatever was enabled stays enabled. Explicit names still work
+    // (`--install block-sudo`) for the migration shim, which has only this key.
+    selectedPolicies = previousConfig.enabledPolicies;
   }
 
   // Preserve existing config fields when updating. New writes use the plural
@@ -556,7 +571,21 @@ async function installHooksImpl(
   // pack does not carry it and asking for it by name is a selection the pack
   // cannot satisfy. It ships compiled in and registers regardless.
   const alwaysOnNames = new Set(BUILTIN_POLICIES.filter((p) => p.alwaysOn).map((p) => p.name));
-  const fromPack = selectedPolicies.filter((name) => !alwaysOnNames.has(name));
+  // ONLY names the caller actually asked for.
+  //
+  // This used to take whatever sat in `enabledPolicies` and switch those names
+  // on in the pack. It is additive — it can turn a policy on and never off — so
+  // a stale entry in that key resurrected a policy the user had deliberately
+  // removed, on the next `policies --install`, with no mention of it.
+  // `remove block-env-files` then `--install` put it straight back.
+  //
+  // And the key goes stale by design now: nothing writes pack selections there,
+  // so anything left in it is a leftover from before packs, kept only for the
+  // migration shim. Re-applying a leftover as if it were a decision is how a
+  // machine ends up enforcing something its owner switched off.
+  const fromPack = policyNames === undefined
+    ? []
+    : selectedPolicies.filter((name) => !alwaysOnNames.has(name));
   if (fromPack.length > 0) {
     // ONLY when there is no pack yet. Fetching the core pack with
     // `only: <selection>` REPLACES whatever the machine had chosen, and
@@ -592,7 +621,13 @@ async function installHooksImpl(
       }
     }
   }
-  console.log(`\nEnabled ${selectedPolicies.length} policy(ies): ${selectedPolicies.join(", ")}\n`);
+  // Only when this run actually changed something. `--install` with no names
+  // wires hooks and touches no policy, and announcing "Enabled 0 policy(ies):"
+  // with an empty list described work it had not done — or worse, re-stated a
+  // stale key as though it were this run's decision.
+  if (policyNames !== undefined && selectedPolicies.length > 0) {
+    console.log(`\nEnabled ${selectedPolicies.length} policy(ies): ${selectedPolicies.join(", ")}\n`);
+  }
   if (removeCustomHooks) {
     console.log("Custom hooks path cleared.");
   } else if (configToWrite.customPoliciesPaths?.length || configToWrite.customPoliciesPath) {

package/src/hooks/tui.ts

@@ -1254,9 +1254,14 @@ export function rule(label?: string, opts?: RenderOpts): string[] {
   const { cols, c } = ctx(opts);
   const width = Math.max(4, cols - INDENT.length * 2);
   if (!label) return [`${INDENT}${c.dim("─".repeat(width))}`];
-  const head = `━━ ${label} `;
-  const tail = Math.max(3, width - head.length);
-  return [`${INDENT}${c.dim(head + "━".repeat(tail))}`];
+  const tail = Math.max(3, width - `━━ ${label} `.length);
+  // The one accent every sectioned surface carries: a pink lead into a bold
+  // label. Decoration only — the glyphs and the spacing are identical without
+  // colour, so a piped render and a painted one are the same width and say the
+  // same thing. Changing it here moves `policies`, `harness`, `pack list`,
+  // every `table` section and all twelve help screens together, which is the
+  // reason they share this function instead of each drawing their own line.
+  return [`${INDENT}${c.pink("━━")} ${c.bold(label)} ${c.dim("━".repeat(tail))}`];
 }
 
 export interface Row {
@@ -1524,52 +1529,181 @@ export interface HelpSpec {
   usage: Array<[string, string?]>;
   options?: Array<[string, string]>;
   examples?: string[];
-  /** Free lines under the heading, before USAGE. */
+  /** Free lines above the first section. */
   lead?: string[];
 }
 
 /**
- * One shape for all five help screens.
+ * The description column for one block of entries, derived from its widest
+ * described name and capped.
  *
- * `policy --help`, `audit --help`, `pack --help`, `harness --help` and the top
- * level each position their description column differently and indent
- * differently, so reading two of them in a row feels like two products. The
- * column is computed here from the widest entry, capped so a long flag cannot
- * push every description off the right edge.
+ * Its own step because the callers differ on the SCOPE they compute it over —
+ * {@link helpBlock} across usage and options together, {@link helpScreen} per
+ * section — and neither should be restating the cap or the floor.
  */
-export function helpBlock(spec: HelpSpec, opts?: RenderOpts): string[] {
+export function helpColumn(entries: Array<[string, string?]>): number {
+  // Only DESCRIBED entries set the column. A bare usage line — `failproofai
+  // flush [--wait] [--timeout <secs>]`, which describes itself — is 44
+  // characters and has nothing in the second column, so letting it vote pushed
+  // every real description on the screen out to column 38.
+  const named = entries.filter(([, d]) => d).map(([n]) => visibleWidth(n));
+  return Math.min(34, Math.max(12, ...named));
+}
+
+/** `<name>  <description>` at a column the caller fixed. */
+export function helpEntries(
+  items: Array<[string, string?]>,
+  nameWidth: number,
+  opts?: RenderOpts,
+): string[] {
   const { cols, c } = ctx(opts);
-  const entries = [...spec.usage.map(([n]) => n), ...(spec.options ?? []).map(([n]) => n)];
-  const nameWidth = Math.min(34, Math.max(12, ...entries.map((n) => n.length)));
-  const section = (heading: string, body: string[]): string[] =>
-    body.length === 0 ? [] : [c.dim(heading), ...body];
-  const entryLines = (items: Array<[string, string?]>): string[] => {
-    const out: string[] = [];
-    for (const [name, description] of items) {
-      if (!description) {
-        out.push(`${INDENT}${name}`);
-        continue;
-      }
-      const budget = Math.max(12, cols - INDENT.length * 2 - nameWidth - 2);
-      const [first, ...rest] = wrap(description, budget);
-      // A name wider than the column takes its own line rather than shoving the
-      // description out — the top-level help has several of these today.
-      if (name.length > nameWidth) {
-        out.push(`${INDENT}${name}`);
-        for (const line of [first, ...rest]) {
-          if (line !== undefined) out.push(`${INDENT}${" ".repeat(nameWidth)}  ${c.dim(line)}`);
-        }
-        continue;
+  const out: string[] = [];
+  for (const [raw, description] of items) {
+    // Pink is what you TYPE, dim is what it means, bold is the section it sits
+    // in. Three tones, the same three on every screen, so a flag looks like a
+    // flag whether you found it on `publish --help` or on the index. Decoration
+    // only: the column already separates the two halves, so the screen reads
+    // the same piped to a file or under NO_COLOR.
+    const name = c.pink(raw);
+    if (!description) {
+      out.push(`${INDENT}${name}`);
+      continue;
+    }
+    const budget = Math.max(12, cols - INDENT.length * 2 - nameWidth - 2);
+    const [first, ...rest] = wrap(description, budget);
+    // A name wider than the column takes its own line rather than shoving the
+    // description out — the top-level help has several of these today.
+    if (visibleWidth(raw) > nameWidth) {
+      out.push(`${INDENT}${name}`);
+      for (const line of [first, ...rest]) {
+        if (line !== undefined) out.push(`${INDENT}${" ".repeat(nameWidth)}  ${c.dim(line)}`);
       }
-      out.push(`${INDENT}${name.padEnd(nameWidth)}  ${c.dim(first ?? "")}`);
-      for (const line of rest) out.push(`${INDENT}${" ".repeat(nameWidth)}  ${c.dim(line)}`);
+      continue;
     }
-    return out;
-  };
+    // Padded on the VISIBLE width, so a painted name still lands the column
+    // where an unpainted one does.
+    const gap = nameWidth - visibleWidth(raw);
+    out.push(`${INDENT}${name}${" ".repeat(gap)}  ${c.dim(first ?? "")}`);
+    for (const line of rest) out.push(`${INDENT}${" ".repeat(nameWidth)}  ${c.dim(line)}`);
+  }
+  return out;
+}
+
+/**
+ * A usage/options/examples block, on one column across all three.
+ *
+ * The plain shape, for a surface with nothing else to say. A screen with prose
+ * sections, a heading, or a footer wants {@link helpScreen}, which is what the
+ * twelve `--help` screens use.
+ */
+export function helpBlock(spec: HelpSpec, opts?: RenderOpts): string[] {
+  const nameWidth = helpColumn([...spec.usage, ...(spec.options ?? [])]);
+  const section = (label: string, body: string[]): string[] =>
+    body.length === 0 ? [] : [...rule(label, opts), ...body];
   return stack(
     spec.lead ? spec.lead.map((l) => `${INDENT}${l}`) : null,
-    section("USAGE", entryLines(spec.usage)),
-    section("OPTIONS", entryLines(spec.options ?? [])),
-    section("EXAMPLES", (spec.examples ?? []).map((e) => `${INDENT}${e}`)),
+    section("usage", helpEntries(spec.usage, nameWidth, opts)),
+    section("options", helpEntries(spec.options ?? [], nameWidth, opts)),
+    section("examples", (spec.examples ?? []).map((e) => `${INDENT}${e}`)),
   );
 }
+
+/**
+ * Help is the one family of screens read at every width that belongs to no
+ * terminal in particular. Capped at 80 so `publish --help` is the same shape in
+ * a maximised window as in a tmux pane — and never wider than the terminal it
+ * is actually in, so the cap can only ever narrow.
+ */
+export const HELP_COLS = 80;
+
+/** {@link optsFor}, capped to {@link HELP_COLS}. Every help screen uses this. */
+export function helpOptsFor(stdout: TTYOut = process.stdout): Required<RenderOpts> {
+  const base = optsFor(stdout);
+  return { cols: Math.min(base.cols, HELP_COLS), color: base.color };
+}
+
+export interface HelpHeading {
+  /** The command being documented. Omitted for the top-level index. */
+  command?: string;
+  version: string;
+  /** One line: what this command is for. */
+  tagline: string;
+}
+
+/**
+ * The two lines every help screen opens with.
+ *
+ * The wordmark carries the same pink on `il` that {@link renderBrandLogo} tints,
+ * so a help screen and the wizard are visibly one product rather than two that
+ * happen to ship together. The version sits right-aligned and dim because it is
+ * the fact you want when a help screen and its binary disagree, and the fact you
+ * never want in the way otherwise.
+ */
+export function helpHeading(spec: HelpHeading, opts?: RenderOpts): string[] {
+  const { cols, c } = ctx(opts);
+  const mark = `${c.bold("fa")}${c.pink("il")}${c.bold("proofai")}`;
+  const left = `${INDENT}${mark}${spec.command ? ` ${c.bold(spec.command)}` : ""}`;
+  const right = c.dim(`v${spec.version}`);
+  const gap = cols - visibleWidth(left) - visibleWidth(right) - INDENT.length;
+  // Too narrow for both: the version goes under rather than wrapping into the
+  // middle of the name, where it reads as part of the command.
+  const head = gap < 2 ? [left, `${INDENT}${right}`] : [left + " ".repeat(gap) + right];
+  return [...head, ...note(spec.tagline, opts)];
+}
+
+/**
+ * A section of a help screen: a table of names, a paragraph, or lines that are
+ * already laid out. Every one of them gets the same `rule` heading, which is
+ * what makes twelve screens one screen.
+ */
+export type HelpSection =
+  /** A table of names. `after` is a paragraph under it, in the same section —
+   *  the alternative was a second heading over three lines of caveat, or an
+   *  unlabelled `rule` that read as the screen having lost its place. */
+  | { label: string; entries: Array<[string, string?]>; after?: string[] }
+  | { label: string; prose: string }
+  | { label: string; lines: string[] };
+
+export interface HelpScreenSpec extends HelpHeading {
+  sections: HelpSection[];
+  /** Dim closing lines — where to read more. */
+  footer?: string[];
+}
+
+/**
+ * A whole `--help`, assembled the same way twelve times.
+ *
+ * Before this, every screen was its own template literal: `USAGE` here and
+ * `Usage:` there, a description column hand-counted per file, no version on the
+ * page, and no colour on any of them while the index it was reached from had
+ * all three. The screens still say exactly what their authors wrote — this owns
+ * only the shape.
+ */
+export function helpScreen(spec: HelpScreenSpec, opts?: RenderOpts): string[] {
+  const { cols, c } = ctx(opts);
+  const width = Math.max(12, cols - INDENT.length * 2);
+  const groups: Array<string[] | null> = [helpHeading(spec, opts)];
+  for (const section of spec.sections) {
+    // Per SECTION, not per screen. One column across the whole page is what a
+    // screen of like-shaped entries wants, and it is exactly wrong on a screen
+    // that has both: `failproofai policies show <owner>/<repo>` is 40 columns
+    // and `--all` is 5, so a shared column left every flag description hanging
+    // 34 columns out with nothing under it. What made two screens read as two
+    // products was the INDENT and the heading, and those are shared here.
+    const body =
+      "entries" in section
+        ? [
+            ...helpEntries(section.entries, helpColumn(section.entries), opts),
+            ...(section.after?.length
+              ? ["", ...section.after.map((l) => (l.trim() === "" ? "" : `${INDENT}${l}`))]
+              : []),
+          ]
+        : "prose" in section
+          ? wrap(section.prose, width).map((l) => `${INDENT}${l}`)
+          : section.lines.map((l) => (l.trim() === "" ? "" : `${INDENT}${l}`));
+    if (body.length === 0) continue;
+    groups.push([...rule(section.label, opts), ...body]);
+  }
+  if (spec.footer?.length) groups.push(spec.footer.map((l) => `${INDENT}${c.dim(l)}`));
+  return stack(...groups);
+}

package/.next/standalone/.next/server/chunks/ssr/[root-of-the-server]__15r6r7w._.js

@@ -1,10 +0,0 @@
-module.exports=[57764,(a,b,c)=>{b.exports=a.x("node:url",()=>require("node:url"))},92509,(a,b,c)=>{b.exports=a.x("url",()=>require("url"))},15638,a=>{"use strict";var b=a.i(50227),c=a.i(54799),d=a.i(2157),e=a.i(12714),f=a.i(57764),g=a.i(66680),h=a.i(10695),i=a.i(32352),j=a.i(84948);a.i(28120);var k=a.i(98378),l=a.i(69839);a.i(75818);let m="__FAILPROOFAI_LOADING_HOOKS__",n=/policies\.(js|mjs|ts)$/,o=0,p=new Map;async function q(a){let b,c,d=Number.isFinite(c=Number(process.env.FAILPROOFAI_POLICY_LOAD_TIMEOUT_MS))&&c>0?c:1e4;try{await Promise.race([import(a),new Promise((a,c)=>{b=setTimeout(()=>c(Error(`timed out loading module after ${d}ms`)),d),b.unref?.()})])}finally{b&&clearTimeout(b)}}async function r(a,d){let e=globalThis;e[m]=!0;let g=[];try{let b=await (0,j.findDistIndex)(),e=b?(0,f.pathToFileURL)(b).href:null,h=++o,k=`${j.TMP_SUFFIX}.${process.pid}.${h}.${(0,c.randomUUID)()}.mjs`;g=await (0,j.rewriteFileTree)(a,e,b,k,d?.verifyEntrySha);let l=await s(g,k),m=p.get(a);if(m?.fingerprint===l){for(let a of m.hooks)i.customPolicies.add({...a});return null}let n=a+k,r=(0,f.pathToFileURL)(n).href,t=(0,i.getCustomHooks)().length;return await q(r),p.size>=500&&p.clear(),p.set(a,{fingerprint:l,hooks:(0,i.getCustomHooks)().slice(t).map(a=>({...a}))}),null}catch(f){let c=f instanceof Error?f.message:String(f),e=/Cannot find module|MODULE_NOT_FOUND|ENOENT/i.test(c)?"module_not_found":/SyntaxError|Unexpected token/i.test(c)?"syntax_error":/timed out loading module/i.test(c)?"load_timeout":"runtime_error";if((0,k.trackHookEvent)((0,l.getInstanceId)(),"custom_hooks_load_error",{error_type:e,is_convention:!!d?.conventionScope,convention_scope:d?.conventionScope??null,file_basename:(0,b.basename)(a)}),d?.strict)throw Error(`Failed to load custom hooks from ${a}: ${c}`);return(0,h.hookLogError)(`failed to load custom hooks from ${a}: ${c}`),{type:e,reason:c}}finally{e[m]=!1,await (0,j.cleanupTmpFiles)(g)}}async function s(a,b){let c=(0,g.createHash)("sha256");for(let d of[...a].sort()){c.update(d.replaceAll(b,j.TMP_SUFFIX));let a=await (0,e.readFile)(d,"utf8");c.update(a.replaceAll(b,j.TMP_SUFFIX))}return c.digest("hex")}async function t(a,c){if(!a)return[];let e=(0,b.isAbsolute)(a)?a:(0,b.resolve)(c?.sessionCwd??process.cwd(),a);if(!(0,d.existsSync)(e)){if(c?.strict)throw Error(`Custom hooks file not found: ${e}`);return(0,h.hookLogWarn)(`customPoliciesPath not found: ${e}`),[]}return(0,i.clearCustomHooks)(),await r(e,c),(0,i.getCustomHooks)()}a.s(["conventionPolicyId",0,function(a,b,c){return`convention:${a}:${b}:${c}`},"customPolicyId",0,function(a,b){return`custom:${a}:${b}`},"discoverPolicyFiles",0,function(a){if(!(0,d.existsSync)(a))return[];try{return(0,d.readdirSync)(a,{withFileTypes:!0}).filter(a=>a.isFile()&&n.test(a.name)).sort((a,b)=>a.name.localeCompare(b.name)).map(c=>(0,b.resolve)(a,c.name))}catch{return[]}},"loadCustomHooks",0,t])},32352,84948,a=>{"use strict";let b="__failproofai_custom_hooks__";function c(){let a=globalThis;return Array.isArray(a[b])||(a[b]=[]),a[b]}a.s(["clearCustomHooks",0,function(){globalThis[b]=[]},"customPolicies",0,{add(a){c().push(a)}},"getCustomHooks",0,function(){return c()}],32352);var d=a.i(24868),e=a.i(46786),f=a.i(14747),g=a.i(92509),h=a.i(54799),i=a.i(75818),j=a.i(10695);let k=".__failproofai_tmp__.mjs",l=/(?:import\s+(?:[\s\S]*?\s+from\s+)?|export\s+(?:[\s\S]*?\s+from\s+))(['"])(\.\.?\/[^'"]+)\1/g,m=/require\s*\(\s*(['"])(\.\.?\/[^'"]+)\1\s*\)/g;async function n(a){try{return await (0,d.access)(a),!0}catch{return!1}}async function o(){let a=process.env.FAILPROOFAI_DIST_PATH;if(a){let b=(0,f.resolve)(a,"index.js");if(await n(b))return b}for(let a of[(0,f.resolve)((0,f.dirname)(process.execPath),"..","assets","dist","index.js"),(0,f.resolve)(process.cwd(),"dist","index.js"),(0,f.resolve)(process.cwd(),"node_modules","failproofai","dist","index.js")])if(await n(a))return a;return null}async function p(a,b){let c=(0,f.resolve)(a,b);for(let a of[c,`${c}.js`,`${c}.mjs`,`${c}.ts`,(0,f.resolve)(c,"index.js")])if(await n(a))return a;return null}async function q(a,b,c,e){let g=(0,f.join)(a,b);return await (0,d.writeFile)(g,c,{encoding:"utf-8",mode:384,...e?{flag:"wx"}:{}}),g}async function r(a,b,c=k){let f=`import _cjs from '${b}';
-export const customPolicies = _cjs.customPolicies;
-export const getCustomHooks = _cjs.getCustomHooks;
-export const clearCustomHooks = _cjs.clearCustomHooks;
-export const allow = _cjs.allow;
-export const deny = _cjs.deny;
-export const instruct = _cjs.instruct;
-export default _cjs;`,h=`failproofai-dist${c}.shim.mjs`;try{let a=(0,i.shimsDir)();await (0,d.mkdir)(a,{recursive:!0,mode:448});let b=await (0,d.lstat)(a),c="function"==typeof process.getuid?process.getuid():null;if(!b.isDirectory()||b.isSymbolicLink()||null!==c&&b.uid!==c||63&b.mode)throw Error(`${a} is not a private directory owned by this user`);let e=await q(a,h,f,!1);return{shimPath:e,shimUrl:(0,g.pathToFileURL)(e).href}}catch(a){(0,j.hookLogWarn)(`policy shim directory unusable (${a instanceof Error?a.message:String(a)}); falling back to ${(0,e.tmpdir)()}`)}let l=await q((0,e.tmpdir)(),h,f,!0);return{shimPath:l,shimUrl:(0,g.pathToFileURL)(l).href}}async function s(a,b,c,e=k,g){let i=[a],j=new Set,n=[],o=null;if(c&&b){let a=await r(c,b,e);n.push(a.shimPath),o=a.shimUrl}for(;i.length>0;){let b,k=i.shift();if(j.has(k))continue;if(j.add(k),g&&k===a){let a=await (0,d.readFile)(k),c=(0,h.createHash)("sha256").update(a).digest("hex");if(c!==g)throw Error(`cloud-managed policy failed integrity re-verification at load: expected ${g}, got ${c}`);b=a.toString("utf-8")}else b=await (0,d.readFile)(k,"utf-8");o&&(b=b.replace(/from\s+(['"])(?:claudeye|failproofai)\1/g,`from '${o}'`)),c&&(b=b.replace(/require\s*\(\s*(['"])(?:claudeye|failproofai)\1\s*\)/g,`require('${c.replace(/\\/g,"\\\\")}')`));let q=(0,f.dirname)(k),r=new Map;for(let a of[l,m]){let c,d=new RegExp(a.source,a.flags);for(;null!==(c=d.exec(b));){let a=c[2];if(r.has(a))continue;let b=await p(q,a);if(!b)continue;j.has(b)||i.includes(b)||i.push(b);let d=(0,f.relative)(q,b+e).split("\\").join("/");d.startsWith(".")||(d="./"+d),r.set(a,d)}}for(let a of[...r.keys()].sort((a,b)=>b.length-a.length)){let c=r.get(a),d=a.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");b=(b=b.replace(RegExp(`'${d}'`,"g"),`'${c}'`)).replace(RegExp(`"${d}"`,"g"),`"${c}"`)}let s=k+e;await (0,d.writeFile)(s,b,"utf-8"),n.push(s)}return n}async function t(a){for(let b of a)try{await (0,d.unlink)(b)}catch{}}a.s(["TMP_SUFFIX",0,k,"cleanupTmpFiles",0,t,"findDistIndex",0,o,"rewriteFileTree",0,s],84948)},28120,98378,a=>{"use strict";var b=a.i(2157),c=a.i(50227),d=a.i(60526),e=a.i(10695),f=a.i(75818);function g(a){if(!(0,b.existsSync)(a))return{};try{let c=(0,b.readFileSync)(a,"utf8");return JSON.parse(c)}catch(b){return(0,e.hookLogWarn)(`failed to parse config at ${a}: ${b instanceof Error?b.message:String(b)}`),{}}}function h(a){let e=(0,d.homedir)(),f=(0,c.resolve)(a);for(;f!==e;){let a=(0,c.resolve)(f,".failproofai");try{if((0,b.statSync)(a).isDirectory())return f}catch{}let d=(0,c.dirname)(f);if(d===f)break;f=d}return(0,c.resolve)(a)}function i(){return(0,f.globalPolicyConfigFile)()}function j(a,b){switch(a){case"user":return(0,f.globalPolicyConfigFile)();case"project":return(0,c.resolve)(h(b??process.cwd()),".failproofai","policies-config.json");case"local":return(0,c.resolve)(h(b??process.cwd()),".failproofai","policies-config.local.json")}}a.s(["configuredCustomPolicyPaths",0,function(a){return a.customPoliciesPaths??(a.customPoliciesPath?[a.customPoliciesPath]:[])},"findProjectConfigDir",0,h,"readHooksConfig",0,function(){let a=i();if(!(0,b.existsSync)(a))return{enabledPolicies:[]};try{let c=(0,b.readFileSync)(a,"utf8");return JSON.parse(c)}catch(b){return(0,e.hookLogWarn)(`failed to parse config at ${a}: ${b instanceof Error?b.message:String(b)}`),{enabledPolicies:[]}}},"readMergedHooksConfig",0,function(a){let b=h(a??process.cwd()),d=(0,c.resolve)(b,".failproofai","policies-config.json"),e=(0,c.resolve)(b,".failproofai","policies-config.local.json"),i=(0,f.globalPolicyConfigFile)(),j=g(d),k=g(e),l=g(i),m=new Set([...j.enabledPolicies??[],...k.enabledPolicies??[],...l.enabledPolicies??[]]),n={};for(let a of[j,k,l])if(a.policyParams)for(let[b,c]of Object.entries(a.policyParams))b in n||(n[b]=c);let o=[j,k,l].map(a=>void 0!==a.customPoliciesPaths?a.customPoliciesPaths:void 0!==a.customPoliciesPath?[a.customPoliciesPath]:void 0).find(a=>void 0!==a),p=new Set([...j.disabledCustomPolicies??[],...k.disabledCustomPolicies??[],...l.disabledCustomPolicies??[]]),q=j.customPoliciesEnabled??k.customPoliciesEnabled??l.customPoliciesEnabled,r=j.llm??k.llm??l.llm;return{enabledPolicies:[...m],...Object.keys(n).length>0?{policyParams:n}:{},...void 0!==o?{customPoliciesPaths:o}:{},...p.size?{disabledCustomPolicies:[...p]}:{},...void 0!==q?{customPoliciesEnabled:q}:{},...void 0!==r?{llm:r}:{}}},"readScopedHooksConfig",0,function(a,c){let d=j(a,c);if(!(0,b.existsSync)(d))return{enabledPolicies:[]};try{let a=(0,b.readFileSync)(d,"utf8");return JSON.parse(a)}catch(a){return(0,e.hookLogWarn)(`failed to parse config at ${d}: ${a instanceof Error?a.message:String(a)}`),{enabledPolicies:[]}}},"writeHooksConfig",0,function(a){let d=i(),e=(0,c.dirname)(d);(0,b.existsSync)(e)||(0,b.mkdirSync)(e,{recursive:!0}),(0,b.writeFileSync)(d,JSON.stringify(a,null,2)+"\n","utf8")},"writeScopedHooksConfig",0,function(a,d,e){let f=j(d,e),g=(0,c.dirname)(f);(0,b.existsSync)(g)||(0,b.mkdirSync)(g,{recursive:!0}),(0,b.writeFileSync)(f,JSON.stringify(a,null,2)+"\n","utf8")}],28120);var k=a.i(12072),l=a.i(79779),m=a.i(31920);let n=l.POSTHOG_API_KEY,o=new Set;async function p(a,b,c){let d=JSON.stringify({api_key:process.env.FAILPROOFAI_POSTHOG_KEY??n,event:b,distinct_id:a,properties:{...c,$lib:"failproofai-hooks",failproofai_version:k.version,product:l.POSTHOG_PRODUCT}});try{await fetch(process.env.FAILPROOFAI_POSTHOG_HOST?`${process.env.FAILPROOFAI_POSTHOG_HOST}/capture/`:"https://us.i.posthog.com/capture/",{method:"POST",headers:{"Content-Type":"application/json"},body:d,signal:AbortSignal.timeout(5e3)})}catch{}}async function q(a,b,c){if(!(0,m.isTelemetryEnabled)())return;let d=p(a,b,c);o.add(d),d.finally(()=>o.delete(d)),await d}a.s(["trackHookEvent",0,q],98378)}];
-
-//# sourceMappingURL=%5Broot-of-the-server%5D__15r6r7w._.js.map