failproofai 1.0.2-beta.8 → 1.0.2

package/dist/worker.mjs

@@ -702,7 +702,10 @@ var init_policy_catalog = __esm(() => {
       displayTitle: "Tried to disable, pause or modify failproofai itself",
       impact: "An agent that can pause or remove enforcement can switch off every other policy.",
       description: "Block failproofai CLI commands, self-pause and uninstallation",
-      match: { events: ["PreToolUse", "PermissionRequest"], toolNames: ["Bash"] },
+      match: {
+        events: ["PreToolUse", "PermissionRequest"],
+        toolNames: ["Bash", "Write", "Edit", "NotebookEdit"]
+      },
       defaultEnabled: true,
       alwaysOn: true,
       category: "Dangerous Commands"
@@ -1278,6 +1281,415 @@ function stripShellQuoting(command) {
   const ansiDecoded = joined.replace(/\$'((?:[^'\\]|\\.)*)'/g, (_, body) => decodeAnsiC(body));
   return ansiDecoded.replace(/\\(.)/g, "$1").replace(/['"]/g, "");
 }
+function gitSubcommand(args) {
+  for (let i = 0;i < args.length; i++) {
+    const arg = args[i];
+    if (GIT_FLAGS_WITH_OPERANDS.has(arg)) {
+      i++;
+      continue;
+    }
+    if (arg.startsWith("-"))
+      continue;
+    return arg;
+  }
+  return;
+}
+function globCouldNameState(raw) {
+  const stripped = raw.replace(/^[()]+|[()]+$/g, "");
+  return globWordCouldNameState(raw) || stripped !== raw && globWordCouldNameState(stripped);
+}
+function globWordCouldNameState(token) {
+  if (!GLOB_METACHAR_RE.test(token))
+    return false;
+  for (const word of expandBraces(token)) {
+    if (wordNamesState(word))
+      return true;
+  }
+  return false;
+}
+function expandBraces(token) {
+  let words = [token];
+  for (let round = 0;round < BRACE_EXPANSION_ROUNDS; round++) {
+    const next = [];
+    let expanded = false;
+    for (const word of words) {
+      const group = firstBraceGroup(word);
+      if (!group) {
+        next.push(word);
+        continue;
+      }
+      expanded = true;
+      for (const alternative of group.alternatives) {
+        next.push(word.slice(0, group.start) + alternative + word.slice(group.end + 1));
+      }
+    }
+    if (!expanded)
+      return next;
+    if (next.length > BRACE_EXPANSION_LIMIT)
+      return [collapseBraces(token)];
+    words = next;
+  }
+  return words.map(collapseBraces);
+}
+function collapseBraces(word) {
+  let out = "";
+  let depth = 0;
+  for (const ch of word) {
+    if (ch === "{") {
+      if (depth === 0)
+        out += "*";
+      depth++;
+      continue;
+    }
+    if (ch === "}") {
+      if (depth > 0)
+        depth--;
+      continue;
+    }
+    if (depth === 0)
+      out += ch;
+  }
+  return out;
+}
+function firstBraceGroup(word) {
+  const start = word.indexOf("{");
+  if (start === -1)
+    return null;
+  let depth = 0;
+  const alternatives = [];
+  let current = "";
+  for (let i = start;i < word.length; i++) {
+    const ch = word[i];
+    if (ch === "{") {
+      depth++;
+      if (depth === 1)
+        continue;
+    } else if (ch === "}") {
+      depth--;
+      if (depth === 0) {
+        alternatives.push(current);
+        return { start, end: i, alternatives };
+      }
+    } else if (ch === "," && depth === 1) {
+      alternatives.push(current);
+      current = "";
+      continue;
+    }
+    current += ch;
+  }
+  return null;
+}
+function wordNamesState(word) {
+  if (FAILPROOFAI_STATE_PATH_RE.test(word))
+    return true;
+  const segments = word.split("/");
+  for (let end = 1;end <= segments.length; end++) {
+    if (globPrefixNamesState(segments.slice(0, end).join("/")))
+      return true;
+  }
+  return false;
+}
+function compileGlobPattern(token) {
+  let pattern = "";
+  for (let i = 0;i < token.length; i++) {
+    const extended = extglobAt(token, i);
+    if (extended) {
+      pattern += extended.source;
+      i = extended.end;
+      continue;
+    }
+    const ch = token[i];
+    if (ch === "*")
+      pattern += "[^/]*";
+    else if (ch === "?")
+      pattern += "[^/]";
+    else if (ch === "[") {
+      const bracket = bracketExpressionAt(token, i);
+      if (!bracket) {
+        pattern += "\\[";
+        continue;
+      }
+      pattern += bracket.source;
+      i = bracket.end;
+    } else
+      pattern += ch.replace(/[.+^${}()|\\\]]/g, "\\$&");
+  }
+  return pattern;
+}
+function extglobAt(token, start) {
+  const operator = token[start];
+  if (!"?*+@!".includes(operator) || token[start + 1] !== "(")
+    return null;
+  const alternatives = [];
+  let current = "";
+  let depth = 0;
+  let i = start + 1;
+  for (;i < token.length; i++) {
+    const ch = token[i];
+    if (ch === "(") {
+      depth++;
+      if (depth === 1)
+        continue;
+    } else if (ch === ")") {
+      depth--;
+      if (depth === 0) {
+        alternatives.push(current);
+        break;
+      }
+    } else if (ch === "|" && depth === 1) {
+      alternatives.push(current);
+      current = "";
+      continue;
+    }
+    current += ch;
+  }
+  if (i >= token.length)
+    return null;
+  if (operator === "!")
+    return { source: "[^/]*", end: i };
+  const body = alternatives.map((alternative) => compileGlobPattern(alternative)).join("|");
+  const quantifier = operator === "?" ? "?" : operator === "*" ? "*" : operator === "+" ? "+" : "";
+  return { source: `(?:${body})${quantifier}`, end: i };
+}
+function bracketExpressionAt(token, start) {
+  let i = start + 1;
+  let negated = false;
+  if (token[i] === "!" || token[i] === "^") {
+    negated = true;
+    i++;
+  }
+  let body = "";
+  if (token[i] === "]") {
+    body += "]";
+    i++;
+  }
+  while (i < token.length && token[i] !== "]") {
+    const inner = token[i] === "[" ? token[i + 1] : undefined;
+    if (inner === ":" || inner === "." || inner === "=") {
+      const close = token.indexOf(`${inner}]`, i + 2);
+      if (close !== -1) {
+        body += token.slice(i, close + 2);
+        i = close + 2;
+        continue;
+      }
+    }
+    body += token[i];
+    i++;
+  }
+  if (i >= token.length)
+    return null;
+  if (/\[[.=:]/.test(body))
+    return { source: "[^/]", end: i };
+  const escaped = body.replace(/[\\\]]/g, "\\$&");
+  if (escaped.length === 0)
+    return { source: "[^/]", end: i };
+  return { source: `[${negated ? "^" : ""}${escaped}]`, end: i };
+}
+function globPrefixNamesState(token) {
+  if (!GLOB_METACHAR_RE.test(token))
+    return false;
+  const pattern = "^" + compileGlobPattern(token);
+  let re;
+  try {
+    re = new RegExp(pattern + "$");
+  } catch {
+    return false;
+  }
+  if (!STATE_GLOB_CANDIDATES.some((candidate) => re.test(candidate)))
+    return false;
+  return !GLOB_DECOYS.some((decoy) => re.test(decoy));
+}
+function substitutionBodies(command) {
+  const bodies = [];
+  for (let i = 0;i < command.length; i++) {
+    if (command[i] === "`") {
+      const close = command.indexOf("`", i + 1);
+      if (close === -1)
+        break;
+      bodies.push(command.slice(i + 1, close));
+      i = close;
+      continue;
+    }
+    if (command[i] !== "$" || command[i + 1] !== "(")
+      continue;
+    let depth = 1;
+    let j = i + 2;
+    for (;j < command.length && depth > 0; j++) {
+      if (command[j] === "(")
+        depth++;
+      else if (command[j] === ")")
+        depth--;
+    }
+    if (depth === 0)
+      bodies.push(command.slice(i + 2, j - 1));
+    i = j - 1;
+  }
+  return bodies;
+}
+function bareToken(token) {
+  return token.replace(/^[(){}'"]+|[(){}'"]+$/g, "");
+}
+function unquotedToken(token) {
+  return token.replace(/^['"]+|['"]+$/g, "");
+}
+function commandBasename(token) {
+  const bare = bareToken(token);
+  return bare.slice(bare.lastIndexOf("/") + 1);
+}
+function commandWords(simpleCommand) {
+  const tokens = simpleCommand.trim().split(/\s+/).map(bareToken).filter(Boolean);
+  let i = 0;
+  while (i < tokens.length) {
+    const token = tokens[i];
+    if (/^\d*(?:>{1,2}\|?|<{1,3})/.test(token)) {
+      i += /^\d*(?:>{1,2}\|?|<{1,3})$/.test(token) ? 2 : 1;
+      continue;
+    }
+    const skippable = ENV_ASSIGNMENT_RE.test(token) || token.startsWith("-") || RUNNER_OPERAND_RE.test(token) || SHELL_KEYWORD_PREFIXES.has(token) || COMMAND_PREFIX_TOKENS.has(commandBasename(token));
+    if (!skippable)
+      break;
+    i++;
+  }
+  return tokens.slice(i);
+}
+function simpleCommandDestroys(words, namesState) {
+  if (words.length === 0)
+    return false;
+  const head = commandBasename(words[0]);
+  const args = words.slice(1);
+  if (head === "find") {
+    if (args.some((a) => a === "-delete"))
+      return true;
+    if (args.some((a) => FIND_WRITE_ACTIONS.has(a)))
+      return true;
+    return args.some((a, i) => FIND_EXEC_ACTIONS.has(a) && !SAFE_EXEC_COMMANDS.has(commandBasename(args[i + 1] ?? "")));
+  }
+  if (head === "sed") {
+    if (args.some((a) => a.startsWith("-i") || a.startsWith("--in-place")))
+      return true;
+    return args.some((a, i) => /(?:^|[;}/\s])w$/.test(a) && namesState(args[i + 1] ?? "")) || args.some((a) => /(?:^|[;}/\s])w\s*\S*\.failproofai/.test(a));
+  }
+  if (head === "awk" || head === "gawk" || head === "mawk") {
+    return args.some((a) => /system\s*\(|\|\s*["']|\|&/.test(a));
+  }
+  if (COPY_COMMANDS.has(head)) {
+    if (args.includes("--remove-source-files") && args.some((a) => namesState(a)))
+      return true;
+    const targetAt = args.findIndex((a) => a === "-t" || a === "--target-directory");
+    if (targetAt !== -1 && namesState(args[targetAt + 1] ?? ""))
+      return true;
+    if (args.some((a) => a.startsWith("--target-directory=") && namesState(a)))
+      return true;
+    const operands = args.filter((a) => !a.startsWith("-"));
+    const destination = operands[operands.length - 1];
+    return destination !== undefined && namesState(destination);
+  }
+  if (OPERAND_WRITE_COMMANDS.has(head)) {
+    return args.some((a) => !a.startsWith("-") && namesState(a));
+  }
+  if (SECOND_OPERAND_WRITERS.has(head)) {
+    const operands = args.filter((a) => !a.startsWith("-"));
+    return operands.length > 1 && namesState(operands[operands.length - 1]);
+  }
+  if (head === "git") {
+    const subcommand = gitSubcommand(args);
+    return subcommand !== undefined && GIT_DESTRUCTIVE_SUBCOMMANDS.has(subcommand);
+  }
+  if (writesViaOutputFlag(head, args, namesState))
+    return true;
+  if (STATE_READ_COMMANDS.has(head) || STATE_MENTION_COMMANDS.has(head))
+    return false;
+  return true;
+}
+function writesViaOutputFlag(head, args, namesState) {
+  const flags = OUTPUT_FLAG_COMMANDS[head];
+  if (!flags)
+    return false;
+  for (let i = 0;i < args.length; i++) {
+    const arg = args[i];
+    const long = flags.find((f) => f.startsWith("--") && arg.startsWith(`${f}=`));
+    if (long && namesState(arg))
+      return true;
+    const bundled = /^-[A-Za-z]*[oD]$/.test(arg) && flags.includes(`-${arg[arg.length - 1]}`);
+    if ((flags.includes(arg) || bundled) && namesState(args[i + 1] ?? ""))
+      return true;
+  }
+  return false;
+}
+function destroysFailproofaiState(command, depth = 0) {
+  if (depth === 0) {
+    const bodies = substitutionBodies(command);
+    for (let i = 0;i < bodies.length && i < 64; i++) {
+      if (destroysFailproofaiState(bodies[i], 1))
+        return true;
+      bodies.push(...substitutionBodies(bodies[i]));
+    }
+  }
+  const assignments = [
+    ...command.matchAll(/(?:^|[\s;&|(])(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)=("[^"]*"|'[^']*'|[^\s;&|)]+)/g)
+  ].map(([, name, value]) => [name, value.replace(/^["']|["']$/g, "")]);
+  const stateVars = new Set;
+  for (let pass = 0;pass < assignments.length + 1; pass++) {
+    const before = stateVars.size;
+    for (const [name, value] of assignments) {
+      const holdsState = FAILPROOFAI_STATE_PATH_RE.test(value) || [...value.matchAll(VAR_REFERENCE_RE)].some(([, ref]) => stateVars.has(ref));
+      if (holdsState)
+        stateVars.add(name);
+    }
+    if (stateVars.size === before)
+      break;
+  }
+  const namesState = (text) => {
+    if (FAILPROOFAI_STATE_PATH_RE.test(text))
+      return true;
+    for (const [, name] of text.matchAll(VAR_REFERENCE_RE)) {
+      if (stateVars.has(name))
+        return true;
+    }
+    return text.split(/\s+/).some((token) => globCouldNameState(unquotedToken(token)));
+  };
+  let cwdInState = false;
+  let parenDepth = 0;
+  let cdParenDepth = null;
+  let loopCarriesState = false;
+  for (const pipeline of command.split(PIPELINE_SEPARATORS)) {
+    if (!pipeline.trim())
+      continue;
+    const simpleCommands = pipeline.split("|");
+    const reachesState = namesState(pipeline) || cwdInState || loopCarriesState;
+    if (reachesState && LOOP_HEADER_RE.test(pipeline))
+      loopCarriesState = true;
+    if (/(?:^|\s)done(?:\s|$)/.test(pipeline))
+      loopCarriesState = false;
+    if (reachesState) {
+      for (const [, target] of pipeline.matchAll(REDIRECT_TARGET_RE)) {
+        if (namesState(target.replace(/^["']|["']$/g, "")))
+          return true;
+      }
+    }
+    for (const simple of simpleCommands) {
+      parenDepth += (simple.match(/\(/g) ?? []).length;
+      const words = commandWords(simple);
+      const head = words.length > 0 ? commandBasename(words[0]) : "";
+      if (head === "cd" || head === "pushd") {
+        const operand = words.slice(1).find((w) => !w.startsWith("-"));
+        cwdInState = operand !== undefined && namesState(operand);
+        cdParenDepth = cwdInState ? parenDepth : null;
+      } else if (head === "popd") {
+        cwdInState = false;
+        cdParenDepth = null;
+      } else if (reachesState && words.length > 0 && simpleCommandDestroys(words, namesState)) {
+        return true;
+      }
+      parenDepth -= (simple.match(/\)/g) ?? []).length;
+      if (cdParenDepth !== null && parenDepth < cdParenDepth) {
+        cwdInState = false;
+        cdParenDepth = null;
+      }
+    }
+  }
+  return false;
+}
 function statGitHeadMtimeMs(cwd) {
   try {
     return statSync3(join2(cwd, ".git", "HEAD")).mtimeMs;
@@ -1893,6 +2305,13 @@ function blockWorkOnMain(ctx) {
   return allow();
 }
 function blockFailproofaiCommands(ctx) {
+  if (ctx.toolName === "Write" || ctx.toolName === "Edit" || ctx.toolName === "NotebookEdit") {
+    const path = getFilePath(ctx) || (ctx.toolInput?.notebook_path ?? "");
+    if (FAILPROOFAI_STATE_PATH_RE.test(path)) {
+      return deny("Writing to failproofai's own state would switch enforcement off. " + "If a policy is blocking legitimate work, say so and let the operator decide.");
+    }
+    return allow();
+  }
   if (ctx.toolName !== "Bash")
     return allow();
   const cmd = getCommand(ctx);
@@ -1907,8 +2326,8 @@ function blockFailproofaiCommands(ctx) {
   if (FAILPROOFAI_UNINSTALL_RE.test(cmd) || FAILPROOFAI_UNINSTALL_RE.test(unescaped)) {
     return deny("Uninstalling failproofai is blocked");
   }
-  if (FAILPROOFAI_STATE_WRITE_RE.test(cmd) || FAILPROOFAI_STATE_WRITE_RE.test(unescaped)) {
-    return deny("Deleting or moving failproofai's own state would switch enforcement off. " + "If a policy is blocking legitimate work, say so and let the operator decide.");
+  if (destroysFailproofaiState(cmd) || destroysFailproofaiState(unescaped)) {
+    return deny("Deleting, moving or overwriting failproofai's own state would switch enforcement off. " + "If a policy is blocking legitimate work, say so and let the operator decide.");
   }
   return allow();
 }
@@ -2368,7 +2787,7 @@ function registerBuiltinPolicies(enabledNames) {
     }
   }
 }
-var isClaudeInternalPath, isClaudeSettingsFile, SHELL_OPERATORS, SHELL_METACHAR_RE, JWT_RE, API_KEY_PATTERNS, CONNECTION_STRING_RE, PRIVATE_KEY_RE, BEARER_TOKEN_RE, SECRET_PATTERNS, SQL_TOOL_RE, DESTRUCTIVE_SQL_RE, DELETE_NO_WHERE_RE, SQL_WHERE_RE, SCHEMA_ALTER_RE, PUBLISH_CMD_RE, ENV_PRINTENV_RE, ECHO_ENV_RE, EXPORT_RE, PS_ENV_VAR_RE, PS_CHILDITEM_ENV_RE, DOTNET_GETENV_RE, CMD_ECHO_ENV_RE, ENV_FILE_PATH_RE, ENV_CMD_RE, PS_ELEVATION_RE, RUNAS_RE, CURL_PIPE_SH_RE, SEGMENT_SEPARATORS, COMMAND_PREFIX_TOKENS, SELF_BINARY_TOKEN_RE, SELF_ENTRY_PATH_RE, CONFIG_SUBCOMMAND_RE, PAUSE_FLAG_RE, ENV_ASSIGNMENT_RE, RUNNER_OPERAND_RE, PS_WEB_PIPE_RE, SHORT_FLAG_BUNDLE_RE, SAFE_FORCE_PREFIXES, SECRET_FILE_RE, SECRET_FILE_ID_RSA_RE, SECRET_FILE_CREDENTIALS_RE, GIT_COMMIT_MERGE_RE, FAILPROOFAI_STATE_WRITE_RE, FAILPROOFAI_UNINSTALL_RE, GIT_AMEND_RE, GIT_STASH_DROP_RE, GIT_ADD_ALL_RE, NPM_GLOBAL_RE, YARN_GLOBAL_RE, PNPM_GLOBAL_RE, BUN_GLOBAL_RE, CARGO_INSTALL_RE, PIP_SYSTEM_RE, PKG_MANAGER_DETECTORS, NOHUP_RE, SCREEN_DETACH_RE, TMUX_DETACH_RE, DISOWN_RE, BACKGROUND_AMPERSAND_RE, KUBECTL_RE, TERRAFORM_RE, AWS_CLI_RE, GCLOUD_RE, AZ_CLI_RE, HELM_RE, GH_PIPELINE_RE, gitBranchCache, GIT_BRANCH_CACHE_MAX_ENTRIES = 500, EVAL_FLAG_RE, HOME_PREFIX_RE, RM_CMD_RE, FIND_CMD_RE, FIND_EXEC_RE, FIND_GLOBAL_OPT_RE, FIND_EXPR_START_RE, SCRATCH_ROOTS, CATASTROPHIC_DEPTH = 2, READ_LIKE_CMDS, TOOL_CALL_TRACKER_MAX_BYTES = 65536, SEGMENT_SPLIT_RE, POLICY_IMPLEMENTATIONS, BUILTIN_POLICIES;
+var isClaudeInternalPath, isClaudeSettingsFile, SHELL_OPERATORS, SHELL_METACHAR_RE, JWT_RE, API_KEY_PATTERNS, CONNECTION_STRING_RE, PRIVATE_KEY_RE, BEARER_TOKEN_RE, SECRET_PATTERNS, SQL_TOOL_RE, DESTRUCTIVE_SQL_RE, DELETE_NO_WHERE_RE, SQL_WHERE_RE, SCHEMA_ALTER_RE, PUBLISH_CMD_RE, ENV_PRINTENV_RE, ECHO_ENV_RE, EXPORT_RE, PS_ENV_VAR_RE, PS_CHILDITEM_ENV_RE, DOTNET_GETENV_RE, CMD_ECHO_ENV_RE, ENV_FILE_PATH_RE, ENV_CMD_RE, PS_ELEVATION_RE, RUNAS_RE, CURL_PIPE_SH_RE, SEGMENT_SEPARATORS, COMMAND_PREFIX_TOKENS, SELF_BINARY_TOKEN_RE, SELF_ENTRY_PATH_RE, CONFIG_SUBCOMMAND_RE, PAUSE_FLAG_RE, ENV_ASSIGNMENT_RE, RUNNER_OPERAND_RE, PS_WEB_PIPE_RE, SHORT_FLAG_BUNDLE_RE, SAFE_FORCE_PREFIXES, SECRET_FILE_RE, SECRET_FILE_ID_RSA_RE, SECRET_FILE_CREDENTIALS_RE, GIT_COMMIT_MERGE_RE, FAILPROOFAI_STATE_PATH_RE, STATE_READ_COMMANDS, SHELL_KEYWORD_PREFIXES, LOOP_HEADER_RE, COPY_COMMANDS, OPERAND_WRITE_COMMANDS, SECOND_OPERAND_WRITERS, OUTPUT_FLAG_COMMANDS, FIND_WRITE_ACTIONS, SAFE_EXEC_COMMANDS, GIT_DESTRUCTIVE_SUBCOMMANDS, GIT_FLAGS_WITH_OPERANDS, STATE_MENTION_COMMANDS, FIND_EXEC_ACTIONS, PIPELINE_SEPARATORS, VAR_REFERENCE_RE, STATE_GLOB_CANDIDATES, GLOB_DECOYS, BRACE_EXPANSION_LIMIT = 4096, BRACE_EXPANSION_ROUNDS = 24, GLOB_METACHAR_RE, REDIRECT_TARGET_RE, FAILPROOFAI_UNINSTALL_RE, GIT_AMEND_RE, GIT_STASH_DROP_RE, GIT_ADD_ALL_RE, NPM_GLOBAL_RE, YARN_GLOBAL_RE, PNPM_GLOBAL_RE, BUN_GLOBAL_RE, CARGO_INSTALL_RE, PIP_SYSTEM_RE, PKG_MANAGER_DETECTORS, NOHUP_RE, SCREEN_DETACH_RE, TMUX_DETACH_RE, DISOWN_RE, BACKGROUND_AMPERSAND_RE, KUBECTL_RE, TERRAFORM_RE, AWS_CLI_RE, GCLOUD_RE, AZ_CLI_RE, HELM_RE, GH_PIPELINE_RE, gitBranchCache, GIT_BRANCH_CACHE_MAX_ENTRIES = 500, EVAL_FLAG_RE, HOME_PREFIX_RE, RM_CMD_RE, FIND_CMD_RE, FIND_EXEC_RE, FIND_GLOBAL_OPT_RE, FIND_EXPR_START_RE, SCRATCH_ROOTS, CATASTROPHIC_DEPTH = 2, READ_LIKE_CMDS, TOOL_CALL_TRACKER_MAX_BYTES = 65536, SEGMENT_SPLIT_RE, POLICY_IMPLEMENTATIONS, BUILTIN_POLICIES;
 var init_builtin_policies = __esm(() => {
   init_policy_catalog();
   init_hook_logger();
@@ -2464,7 +2883,175 @@ var init_builtin_policies = __esm(() => {
   SECRET_FILE_ID_RSA_RE = /id_rsa/;
   SECRET_FILE_CREDENTIALS_RE = /credentials/;
   GIT_COMMIT_MERGE_RE = /git\s+(commit|merge|rebase|cherry-pick)\b/;
-  FAILPROOFAI_STATE_WRITE_RE = /\b(?:rm|unlink|shred|mv|truncate)\b[^;&|]*\.failproofai(?:\/|\b)/;
+  FAILPROOFAI_STATE_PATH_RE = /\.failproofai(?:\/|\b)/;
+  STATE_READ_COMMANDS = new Set([
+    "cat",
+    "bat",
+    "less",
+    "more",
+    "head",
+    "tail",
+    "nl",
+    "strings",
+    "xxd",
+    "od",
+    "jq",
+    "yq",
+    "diff",
+    "cmp",
+    "wc",
+    "sort",
+    "uniq",
+    "column",
+    "awk",
+    "cut",
+    "ls",
+    "dir",
+    "tree",
+    "stat",
+    "file",
+    "du",
+    "df",
+    "readlink",
+    "realpath",
+    "basename",
+    "dirname",
+    "pwd",
+    "test",
+    "find",
+    "grep",
+    "egrep",
+    "fgrep",
+    "rg",
+    "ag",
+    "ack",
+    "md5sum",
+    "sha1sum",
+    "sha256sum",
+    "shasum",
+    "cksum",
+    "cd",
+    "pushd",
+    "popd",
+    "cp",
+    "rsync",
+    "install",
+    "tee",
+    "sed",
+    "true",
+    "false",
+    ":",
+    "echo",
+    "printf",
+    "[",
+    "[[",
+    "]",
+    "]]",
+    "test",
+    "read",
+    "for",
+    "select",
+    "case",
+    "done",
+    "fi",
+    "esac"
+  ]);
+  SHELL_KEYWORD_PREFIXES = new Set(["do", "then", "else", "elif", "if", "while", "until", "!"]);
+  LOOP_HEADER_RE = /(?:^|[\s(])(?:while|until|for|select)\s/;
+  COPY_COMMANDS = new Set(["cp", "rsync", "install"]);
+  OPERAND_WRITE_COMMANDS = new Set(["tee"]);
+  SECOND_OPERAND_WRITERS = new Set(["uniq", "xxd"]);
+  OUTPUT_FLAG_COMMANDS = {
+    sort: ["-o", "--output"],
+    tree: ["-o", "--output"],
+    curl: ["-o", "--output", "--output-dir", "-D", "--dump-header", "--trace", "--trace-ascii"]
+  };
+  FIND_WRITE_ACTIONS = new Set(["-fprint", "-fprint0", "-fprintf", "-fls"]);
+  SAFE_EXEC_COMMANDS = new Set([
+    "cat",
+    "bat",
+    "head",
+    "tail",
+    "nl",
+    "strings",
+    "xxd",
+    "od",
+    "jq",
+    "yq",
+    "wc",
+    "ls",
+    "stat",
+    "file",
+    "du",
+    "readlink",
+    "realpath",
+    "basename",
+    "dirname",
+    "grep",
+    "egrep",
+    "fgrep",
+    "rg",
+    "md5sum",
+    "sha1sum",
+    "sha256sum",
+    "shasum",
+    "cksum",
+    "echo",
+    "printf",
+    "true",
+    ":"
+  ]);
+  GIT_DESTRUCTIVE_SUBCOMMANDS = new Set([
+    "clean",
+    "rm",
+    "restore",
+    "checkout",
+    "reset",
+    "stash"
+  ]);
+  GIT_FLAGS_WITH_OPERANDS = new Set(["-C", "-c", "--git-dir", "--work-tree", "--namespace", "--exec-path"]);
+  STATE_MENTION_COMMANDS = new Set(["git", "gh", "glab", "echo", "printf", "curl", "code", "open"]);
+  FIND_EXEC_ACTIONS = new Set(["-exec", "-execdir", "-ok", "-okdir"]);
+  PIPELINE_SEPARATORS = /\|\||&&|[;\n\r&]+/;
+  VAR_REFERENCE_RE = /\$\{?([A-Za-z_][A-Za-z0-9_]*)\}?/g;
+  STATE_GLOB_CANDIDATES = [
+    ".failproofai",
+    "~/.failproofai",
+    "$HOME/.failproofai",
+    "${HOME}/.failproofai",
+    "/root/.failproofai",
+    "/home/u/.failproofai",
+    "/Users/u/.failproofai"
+  ];
+  GLOB_DECOYS = [
+    ".config",
+    ".cache",
+    ".local",
+    ".git",
+    ".npm",
+    ".ssh",
+    ".bashrc",
+    "node_modules",
+    "dist",
+    "build",
+    "target",
+    "coverage",
+    "tmp",
+    "src",
+    "~/.config",
+    "~/.cache",
+    "$HOME/.config",
+    "${HOME}/.cache",
+    "/home/u/.config",
+    "/Users/u/.config",
+    "/root/.cache",
+    "/tmp/build",
+    "a",
+    "foo.txt",
+    "test-failures"
+  ];
+  GLOB_METACHAR_RE = /[*?[{]|[@+!]\(/;
+  REDIRECT_TARGET_RE = /\d*>{1,2}\|?\s*("[^"]*"|'[^']*'|[^\s;&|<>]+)/g;
   FAILPROOFAI_UNINSTALL_RE = /(?:npm\s+(?:uninstall|remove|un|r)\s.*failproofai|bun\s+remove\s.*failproofai|yarn\s+global\s+remove\s+failproofai|pnpm\s+(?:remove|uninstall|un)\s.*failproofai)/;
   GIT_AMEND_RE = /\bgit\s+commit\b.*--amend\b/;
   GIT_STASH_DROP_RE = /\bgit\s+stash\s+(?:drop|clear)\b/;
@@ -2558,87 +3145,416 @@ var init_builtin_policies = __esm(() => {
   }));
 });
 
-// package.json
-var version = "1.0.2-beta.8";
-var init_package = () => {};
-
-// src/posthog-key.ts
-var POSTHOG_API_KEY = "phc_Ac1Ww1GqKc0z1SyrRWbmatEeQdlOQIsDEEdP8l8JRgX", POSTHOG_PRODUCT = "failproofai-oss";
-
-// src/hooks/fp-config.ts
-import { chmodSync, existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync2, statSync as statSync4, writeFileSync as writeFileSync2 } from "node:fs";
-function detectLayout() {
-  const raw = readVersionFile();
-  if (raw) {
-    if (raw.layout === LAYOUT_VERSION)
-      return { kind: "current", version: raw };
-    return raw.layout > LAYOUT_VERSION ? { kind: "future", found: raw.layout } : { kind: "stale", found: raw.layout };
+// src/hooks/cloud-managed-policies.ts
+import { createHash } from "node:crypto";
+import { existsSync as existsSync3, readFileSync as readFileSync2, realpathSync, rmSync } from "node:fs";
+import { isAbsolute, relative, resolve as resolve4 } from "node:path";
+function cloudManagedPolicyRoot() {
+  return process.env.FAILPROOFAI_CLOUD_POLICY_DIR ?? cloudPoliciesDir();
+}
+function parseManifest(value) {
+  if (!value || typeof value !== "object")
+    throw new Error("active manifest is not an object");
+  const raw = value;
+  if (!ACCEPTED_ACTIVE_SCHEMA_VERSIONS.includes(raw.schemaVersion)) {
+    throw new Error(`unsupported active manifest schema ${String(raw.schemaVersion)} ` + `(supported: ${ACCEPTED_ACTIVE_SCHEMA_VERSIONS.join(", ")})`);
   }
-  if (existsSync3(configFile())) {
-    const layoutThreePositions = [
-      legacy.authJson(),
-      legacy.nextAudit(),
-      legacy.auditSchedule()
-    ];
-    if (layoutThreePositions.some((p) => existsSync3(p)))
-      return { kind: "stale", found: 3 };
-    return { kind: "current", version: { layout: LAYOUT_VERSION, cli: "" }, inferred: true };
+  const deployment = raw.deployment ?? raw.generation;
+  if (!Number.isSafeInteger(deployment) || (deployment ?? -1) < 0) {
+    throw new Error("active manifest deployment is invalid");
   }
-  if (existsSync3(legacy.configToml()))
-    return { kind: "stale", found: 2 };
-  const layoutOneMarkers = [
-    legacy.policyConfig(),
-    legacy.cacheDir(),
-    legacy.launcherMarker(),
-    legacy.lastVersion(),
-    legacy.cloudCredentials(),
-    legacy.ingestCredentials(),
-    legacy.auditDashboard()
-  ];
-  return layoutOneMarkers.some((p) => existsSync3(p)) ? { kind: "stale", found: 1 } : { kind: "absent" };
+  if (!Array.isArray(raw.policies))
+    throw new Error("active manifest policies is not an array");
+  const policies = raw.policies.map((p) => {
+    const entry = p;
+    return { ...entry, version: entry.version ?? entry.revision };
+  });
+  return { schemaVersion: raw.schemaVersion, deployment, policies };
 }
-function readLegacyTomlVersion(text) {
-  const layout = Number(/^\s*layout\s*=\s*(\d+)\s*$/m.exec(text)?.[1]);
-  if (!Number.isFinite(layout))
-    return null;
-  const str = (key) => new RegExp(`^\\s*${key}\\s*=\\s*"([^"]*)"`, "m").exec(text)?.[1];
-  return { layout, cli: str("cli") ?? "", daemon: str("daemon") };
+function resolveManagedPath(root, candidate) {
+  if (!candidate || isAbsolute(candidate))
+    throw new Error(`unsafe managed policy path ${JSON.stringify(candidate)}`);
+  const absolute = resolve4(root, candidate);
+  const lexicalRelative = relative(root, absolute);
+  if (lexicalRelative.startsWith("..") || isAbsolute(lexicalRelative)) {
+    throw new Error(`managed policy path escapes its root: ${JSON.stringify(candidate)}`);
+  }
+  const realRoot = realpathSync(root);
+  const realFile = realpathSync(absolute);
+  const physicalRelative = relative(realRoot, realFile);
+  if (physicalRelative.startsWith("..") || isAbsolute(physicalRelative)) {
+    throw new Error(`managed policy symlink escapes its root: ${JSON.stringify(candidate)}`);
+  }
+  return realFile;
 }
-function readVersionFile() {
-  let text;
+function readActiveCloudManagedPolicies() {
+  const root = cloudManagedPolicyRoot();
+  const activePath = resolve4(root, "active.json");
+  if (!existsSync3(activePath))
+    return [];
+  let raw;
   try {
-    text = readFileSync2(versionFile(), "utf8");
-  } catch {
-    return null;
+    raw = JSON.parse(readFileSync2(activePath, "utf8"));
+  } catch (err) {
+    throw new Error(`failed to read cloud-managed active manifest: ${err instanceof Error ? err.message : String(err)}`);
   }
-  try {
-    const parsed = JSON.parse(text);
-    const layout = Number(parsed.layout);
-    if (!Number.isFinite(layout))
-      return null;
+  const manifest = parseManifest(raw);
+  const seen = new Set;
+  return manifest.policies.map((policy) => {
+    if (!POLICY_ID_RE.test(policy.id) || policy.id === "." || policy.id === "..") {
+      throw new Error(`unsafe cloud-managed policy id ${JSON.stringify(policy.id)}`);
+    }
+    if (!Number.isSafeInteger(policy.version) || policy.version < 0) {
+      throw new Error(`invalid version for cloud-managed policy ${policy.id}`);
+    }
+    if (!SHA256_RE.test(policy.sha256)) {
+      throw new Error(`invalid SHA-256 for cloud-managed policy ${policy.id}`);
+    }
+    if (seen.has(policy.id))
+      throw new Error(`duplicate cloud-managed policy id ${policy.id}`);
+    seen.add(policy.id);
+    const path = resolveManagedPath(root, policy.path);
+    const bytes = readFileSync2(path);
+    const actual = createHash("sha256").update(bytes).digest("hex");
+    if (actual !== policy.sha256) {
+      throw new Error(`cloud-managed policy ${policy.id} failed integrity verification: expected ${policy.sha256}, got ${actual}`);
+    }
+    if (policy.effect !== undefined && policy.effect !== "enforce" && policy.effect !== "observe") {
+      throw new Error(`unknown effect ${JSON.stringify(policy.effect)} for cloud-managed policy ${policy.id}`);
+    }
     return {
-      layout,
-      cli: typeof parsed.cli === "string" ? parsed.cli : "",
-      daemon: typeof parsed.daemon === "string" ? parsed.daemon : undefined
+      id: policy.id,
+      version: policy.version,
+      effect: policy.effect ?? "enforce",
+      sha256: policy.sha256,
+      path,
+      deployment: manifest.deployment
     };
-  } catch {
-    return readLegacyTomlVersion(text);
-  }
-}
-function readIntervalDays(raw) {
-  if (typeof raw !== "number" || !Number.isFinite(raw))
-    return DEFAULT_AUDIT_INTERVAL_DAYS;
-  const days = Math.floor(raw);
-  if (days < MIN_AUDIT_INTERVAL_DAYS)
-    return DEFAULT_AUDIT_INTERVAL_DAYS;
-  return Math.min(days, MAX_AUDIT_INTERVAL_DAYS);
+  });
 }
-function readSources(raw) {
-  if (!raw || typeof raw !== "object" || Array.isArray(raw))
-    return;
-  const out = {};
-  for (const [name, table] of Object.entries(raw)) {
-    if (!table || typeof table !== "object" || Array.isArray(table))
+var ACCEPTED_ACTIVE_SCHEMA_VERSIONS, SHA256_RE, POLICY_ID_RE;
+var init_cloud_managed_policies = __esm(() => {
+  init_fp_home();
+  ACCEPTED_ACTIVE_SCHEMA_VERSIONS = [1, 2];
+  SHA256_RE = /^[a-f0-9]{64}$/;
+  POLICY_ID_RE = /^[A-Za-z0-9._-]{1,128}$/;
+});
+
+// src/hooks/pack-manifest.ts
+import { createHash as createHash2 } from "node:crypto";
+import { existsSync as existsSync4, readFileSync as readFileSync3 } from "node:fs";
+import { resolve as resolve5 } from "node:path";
+function packsRoot() {
+  return process.env.FAILPROOFAI_PACK_DIR ?? packsDir();
+}
+function parsePackIdentity(value) {
+  if (typeof value.id !== "string" || !PACK_ID_RE.test(value.id)) {
+    throw new Error(`unsafe pack id ${JSON.stringify(value.id)}`);
+  }
+  if (typeof value.version !== "string" || !PACK_VERSION_RE.test(value.version)) {
+    throw new Error(`invalid version for pack ${value.id}`);
+  }
+  if (value.effect !== undefined && value.effect !== "enforce" && value.effect !== "observe") {
+    throw new Error(`unknown effect ${JSON.stringify(value.effect)} for pack ${value.id}`);
+  }
+  const commit = typeof value.commit === "string" && PACK_COMMIT_RE.test(value.commit.trim().toLowerCase()) ? value.commit.trim().toLowerCase() : undefined;
+  return {
+    id: value.id,
+    version: value.version,
+    effect: value.effect ?? "enforce",
+    ...commit ? { commit } : {}
+  };
+}
+function hasInstalledPacks() {
+  try {
+    const raw = JSON.parse(readFileSync3(installedFilePath(), "utf8"));
+    return Array.isArray(raw.packs) && raw.packs.length > 0;
+  } catch {
+    return false;
+  }
+}
+function installedFilePath() {
+  return process.env.FAILPROOFAI_PACK_DIR ? resolve5(process.env.FAILPROOFAI_PACK_DIR, "installed.json") : packsInstalledFile();
+}
+function parsePackPolicy(packId, value, index) {
+  const where = `${packId} policy #${index}`;
+  if (!value || typeof value !== "object")
+    throw new Error(`${where} is not an object`);
+  const raw = value;
+  const name = raw.name;
+  if (typeof name !== "string" || !PACK_POLICY_NAME_RE.test(name)) {
+    throw new Error(`${where} has an unsafe name ${JSON.stringify(name)}`);
+  }
+  if ("alwaysOn" in raw) {
+    throw new Error(`${where} declares alwaysOn, which packs may not set`);
+  }
+  if (typeof raw.description !== "string" || raw.description.length === 0) {
+    throw new Error(`${where} is missing a description`);
+  }
+  if (typeof raw.category !== "string" || raw.category.length === 0) {
+    throw new Error(`${where} is missing a category`);
+  }
+  if (typeof raw.defaultEnabled !== "boolean") {
+    throw new Error(`${where} is missing defaultEnabled`);
+  }
+  if (!raw.match || typeof raw.match !== "object") {
+    throw new Error(`${where} is missing a match`);
+  }
+  const matchShape = raw.match;
+  for (const key of ["events", "toolNames"]) {
+    const value2 = matchShape[key];
+    if (value2 === undefined)
+      continue;
+    if (!Array.isArray(value2) || value2.some((e) => typeof e !== "string" || e.length === 0)) {
+      throw new Error(`${where} has a match.${key} that is not a list of names`);
+    }
+  }
+  return raw;
+}
+function parsePack(root, value) {
+  if (!value || typeof value !== "object")
+    throw new Error("pack entry is not an object");
+  const raw = value;
+  const identity = parsePackIdentity(raw);
+  if (typeof raw.source !== "string" || raw.source.length === 0) {
+    throw new Error(`pack ${raw.id} has no source`);
+  }
+  if (typeof raw.sha256 !== "string" || !SHA256_RE2.test(raw.sha256)) {
+    throw new Error(`invalid SHA-256 for pack ${raw.id}`);
+  }
+  const effect = identity.effect;
+  const path = resolveManagedPath(root, raw.entry);
+  const actual = createHash2("sha256").update(readFileSync3(path)).digest("hex");
+  if (actual !== raw.sha256) {
+    throw new Error(`pack ${raw.id} failed integrity verification: expected ${raw.sha256}, got ${actual}`);
+  }
+  if (!Array.isArray(raw.policies))
+    throw new Error(`pack ${raw.id} policies is not an array`);
+  const policies = raw.policies.map((p, i) => parsePackPolicy(raw.id, p, i));
+  const names = new Set;
+  for (const p of policies) {
+    if (names.has(p.name))
+      throw new Error(`pack ${raw.id} declares ${p.name} twice`);
+    names.add(p.name);
+  }
+  let enabled = null;
+  if (raw.enabled !== undefined) {
+    if (!Array.isArray(raw.enabled) || raw.enabled.some((n) => typeof n !== "string")) {
+      throw new Error(`pack ${raw.id} enabled is not an array of names`);
+    }
+    enabled = raw.enabled.filter((n) => names.has(n));
+  }
+  let clis = null;
+  if (raw.clis !== undefined) {
+    if (!Array.isArray(raw.clis) || raw.clis.some((c) => typeof c !== "string")) {
+      throw new Error(`pack ${raw.id} clis is not an array of agent names`);
+    }
+    clis = raw.clis;
+  }
+  return {
+    clis,
+    id: identity.id,
+    version: identity.version,
+    source: raw.source,
+    path,
+    sha256: raw.sha256,
+    effect,
+    policies,
+    enabled
+  };
+}
+function readInstalledPacks() {
+  const manifestPath = installedFilePath();
+  if (!existsSync4(manifestPath))
+    return { packs: [], errors: [] };
+  let raw;
+  try {
+    raw = JSON.parse(readFileSync3(manifestPath, "utf8"));
+  } catch (err) {
+    return {
+      packs: [],
+      errors: [{ id: null, reason: `unreadable pack manifest: ${errText(err)}` }]
+    };
+  }
+  if (!raw || typeof raw !== "object") {
+    return { packs: [], errors: [{ id: null, reason: "pack manifest is not an object" }] };
+  }
+  const manifest = raw;
+  if (!ACCEPTED_PACK_SCHEMA_VERSIONS.includes(manifest.schemaVersion)) {
+    return {
+      packs: [],
+      errors: [
+        {
+          id: null,
+          reason: `unsupported pack manifest schema ${String(manifest.schemaVersion)} ` + `(supported: ${ACCEPTED_PACK_SCHEMA_VERSIONS.join(", ")})`
+        }
+      ]
+    };
+  }
+  if (!Array.isArray(manifest.packs)) {
+    return { packs: [], errors: [{ id: null, reason: "pack manifest packs is not an array" }] };
+  }
+  const root = packsRoot();
+  const packs = [];
+  const errors = [];
+  const seen = new Set;
+  for (const entry of manifest.packs) {
+    const declaredId = entry && typeof entry === "object" && typeof entry.id === "string" ? entry.id : null;
+    try {
+      const pack = parsePack(root, entry);
+      if (seen.has(pack.id))
+        throw new Error(`duplicate pack id ${pack.id}`);
+      seen.add(pack.id);
+      packs.push(pack);
+    } catch (err) {
+      const rec = entry;
+      const declaredEffect = rec && (rec.effect === "observe" || rec.effect === "enforce") ? rec.effect : "enforce";
+      errors.push({
+        id: declaredId,
+        reason: errText(err),
+        effect: declaredEffect,
+        ...Array.isArray(rec?.policies) ? { declared: safeDeclared(rec.policies) } : {},
+        ...Array.isArray(rec?.clis) && rec.clis.every((c) => typeof c === "string") ? { clis: rec.clis } : {}
+      });
+    }
+  }
+  return { packs, errors };
+}
+function safeDeclared(raw) {
+  const out = [];
+  for (const value of raw) {
+    if (!value || typeof value !== "object")
+      continue;
+    const p = value;
+    if (typeof p.name !== "string" || !p.match || typeof p.match !== "object")
+      continue;
+    out.push(p);
+  }
+  return out;
+}
+function errText(err) {
+  return err instanceof Error ? err.message : String(err);
+}
+var ACCEPTED_PACK_SCHEMA_VERSIONS, SHA256_RE2, PACK_ID_RE, PACK_VERSION_RE, PACK_COMMIT_RE, PACK_POLICY_NAME_RE;
+var init_pack_manifest = __esm(() => {
+  init_fp_home();
+  init_cloud_managed_policies();
+  ACCEPTED_PACK_SCHEMA_VERSIONS = [1];
+  SHA256_RE2 = /^[a-f0-9]{64}$/;
+  PACK_ID_RE = /^[A-Za-z0-9._-]{1,64}\/[A-Za-z0-9._-]{1,64}$/;
+  PACK_VERSION_RE = /^[A-Za-z0-9][A-Za-z0-9._+-]{0,63}$/;
+  PACK_COMMIT_RE = /^[0-9a-f]{7,40}$/;
+  PACK_POLICY_NAME_RE = /^[A-Za-z0-9._-]{1,128}$/;
+});
+
+// src/hooks/pack-store.ts
+var MAX_ARTIFACT_BYTES, CORE_SOURCE = "FailproofAI/policies", RETIRED_CORE_ALIASES;
+var init_pack_store = __esm(() => {
+  init_pack_manifest();
+  MAX_ARTIFACT_BYTES = 8 * 1024 * 1024;
+  RETIRED_CORE_ALIASES = new Set(["core", "failproofai", "official"]);
+});
+
+// src/hooks/pack-param-key.ts
+function packPolicyParamKey(packId, policyName) {
+  return `pack/${packId}/${policyName}`;
+}
+function parsePackPolicyName(canonicalName) {
+  if (!canonicalName.startsWith("pack/"))
+    return null;
+  const rest = canonicalName.slice("pack/".length);
+  const slash = rest.lastIndexOf("/");
+  if (slash <= 0)
+    return null;
+  const idWithVersion = rest.slice(0, slash);
+  const at2 = idWithVersion.lastIndexOf("@");
+  return {
+    packId: at2 > 0 ? idWithVersion.slice(0, at2) : idWithVersion,
+    name: rest.slice(slash + 1)
+  };
+}
+
+// package.json
+var version = "1.0.2";
+var init_package = () => {};
+
+// src/posthog-key.ts
+var POSTHOG_API_KEY = "phc_Ac1Ww1GqKc0z1SyrRWbmatEeQdlOQIsDEEdP8l8JRgX", POSTHOG_PRODUCT = "failproofai-oss";
+
+// src/hooks/fp-config.ts
+import { chmodSync, existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync4, statSync as statSync4, writeFileSync as writeFileSync2 } from "node:fs";
+function detectLayout() {
+  const raw = readVersionFile();
+  if (raw) {
+    if (raw.layout === LAYOUT_VERSION)
+      return { kind: "current", version: raw };
+    return raw.layout > LAYOUT_VERSION ? { kind: "future", found: raw.layout } : { kind: "stale", found: raw.layout };
+  }
+  if (existsSync5(configFile())) {
+    const layoutThreePositions = [
+      legacy.authJson(),
+      legacy.nextAudit(),
+      legacy.auditSchedule()
+    ];
+    if (layoutThreePositions.some((p) => existsSync5(p)))
+      return { kind: "stale", found: 3 };
+    return { kind: "current", version: { layout: LAYOUT_VERSION, cli: "" }, inferred: true };
+  }
+  if (existsSync5(legacy.configToml()))
+    return { kind: "stale", found: 2 };
+  const layoutOneMarkers = [
+    legacy.policyConfig(),
+    legacy.cacheDir(),
+    legacy.launcherMarker(),
+    legacy.lastVersion(),
+    legacy.cloudCredentials(),
+    legacy.ingestCredentials(),
+    legacy.auditDashboard()
+  ];
+  return layoutOneMarkers.some((p) => existsSync5(p)) ? { kind: "stale", found: 1 } : { kind: "absent" };
+}
+function readLegacyTomlVersion(text) {
+  const layout = Number(/^\s*layout\s*=\s*(\d+)\s*$/m.exec(text)?.[1]);
+  if (!Number.isFinite(layout))
+    return null;
+  const str = (key) => new RegExp(`^\\s*${key}\\s*=\\s*"([^"]*)"`, "m").exec(text)?.[1];
+  return { layout, cli: str("cli") ?? "", daemon: str("daemon") };
+}
+function readVersionFile() {
+  let text;
+  try {
+    text = readFileSync4(versionFile(), "utf8");
+  } catch {
+    return null;
+  }
+  try {
+    const parsed = JSON.parse(text);
+    const layout = Number(parsed.layout);
+    if (!Number.isFinite(layout))
+      return null;
+    return {
+      layout,
+      cli: typeof parsed.cli === "string" ? parsed.cli : "",
+      daemon: typeof parsed.daemon === "string" ? parsed.daemon : undefined
+    };
+  } catch {
+    return readLegacyTomlVersion(text);
+  }
+}
+function readIntervalDays(raw) {
+  if (typeof raw !== "number" || !Number.isFinite(raw))
+    return DEFAULT_AUDIT_INTERVAL_DAYS;
+  const days = Math.floor(raw);
+  if (days < MIN_AUDIT_INTERVAL_DAYS)
+    return DEFAULT_AUDIT_INTERVAL_DAYS;
+  return Math.min(days, MAX_AUDIT_INTERVAL_DAYS);
+}
+function readSources(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return;
+  const out = {};
+  for (const [name, table] of Object.entries(raw)) {
+    if (!table || typeof table !== "object" || Array.isArray(table))
       continue;
     const entries = table.extra_paths;
     if (!Array.isArray(entries))
@@ -2651,7 +3567,7 @@ function readSources(raw) {
 }
 function readConfig() {
   try {
-    const parsed = JSON.parse(readFileSync2(configFile(), "utf8"));
+    const parsed = JSON.parse(readFileSync4(configFile(), "utf8"));
     return projectConfig(parsed);
   } catch {
     return structuredClone(DEFAULT_CONFIG);
@@ -2871,12 +3787,26 @@ function appendHint(baseReason, hint) {
     return normalizedHint;
   return `${base}. ${normalizedHint}`;
 }
+function readPackPolicyParams(policyParams, packId, policyName) {
+  if (!policyParams)
+    return;
+  const qualified = policyParams[packPolicyParamKey(packId, policyName)];
+  if (qualified)
+    return qualified;
+  if (packId.toLowerCase() === CORE_SOURCE.toLowerCase())
+    return policyParams[policyName];
+  return;
+}
 function getConfigParamsFor(config, canonicalName) {
   if (!config?.policyParams)
     return;
   const canonicalParams = config.policyParams[canonicalName];
   if (canonicalParams)
     return canonicalParams;
+  const packPolicy = parsePackPolicyName(canonicalName);
+  if (packPolicy) {
+    return readPackPolicyParams(config.policyParams, packPolicy.packId, packPolicy.name);
+  }
   const defaultPrefix = `${DEFAULT_POLICY_NAMESPACE}/`;
   if (!canonicalName.startsWith(defaultPrefix))
     return;
@@ -3598,6 +4528,7 @@ You MUST complete the above action(s) NOW. Do NOT ask the user for confirmation
   return { exitCode: 0, stdout: "", stderr: "", policyName: null, reason: null, decision: "allow" };
 }
 var init_policy_evaluator = __esm(() => {
+  init_pack_store();
   init_hook_logger();
   init_hook_telemetry();
   init_telemetry_id();
@@ -3629,9 +4560,9 @@ var init_custom_hooks_registry = __esm(() => {
 // src/hooks/loader-utils.ts
 import { readFile as readFile2, writeFile as writeFile2, unlink, access, mkdir, lstat } from "fs/promises";
 import { tmpdir } from "os";
-import { resolve as resolve4, dirname as dirname2, relative, join as join3 } from "path";
+import { resolve as resolve6, dirname as dirname2, relative as relative2, join as join3 } from "path";
 import { pathToFileURL } from "url";
-import { createHash } from "crypto";
+import { createHash as createHash3 } from "crypto";
 function isTmpArtifact(name) {
   return TMP_ARTIFACT_RE.test(name);
 }
@@ -3642,7 +4573,7 @@ async function sweepStaleTmpArtifacts(dir, now = Date.now()) {
     for (const name of await readdir(dir)) {
       if (!isTmpArtifact(name))
         continue;
-      const path2 = resolve4(dir, name);
+      const path2 = resolve6(dir, name);
       try {
         const info = await stat(path2);
         if (now - info.mtimeMs < TMP_SWEEP_MIN_AGE_MS)
@@ -3665,14 +4596,14 @@ async function fileExists(path2) {
 async function findDistIndex() {
   const distPath = process.env.FAILPROOFAI_DIST_PATH;
   if (distPath) {
-    const candidate = resolve4(distPath, "index.js");
+    const candidate = resolve6(distPath, "index.js");
     if (await fileExists(candidate))
       return candidate;
   }
   const candidates = [
-    resolve4(dirname2(process.execPath), "..", "assets", "dist", "index.js"),
-    resolve4(process.cwd(), "dist", "index.js"),
-    resolve4(process.cwd(), "node_modules", "failproofai", "dist", "index.js")
+    resolve6(dirname2(process.execPath), "..", "assets", "dist", "index.js"),
+    resolve6(process.cwd(), "dist", "index.js"),
+    resolve6(process.cwd(), "node_modules", "failproofai", "dist", "index.js")
   ];
   for (const c of candidates) {
     if (await fileExists(c))
@@ -3681,8 +4612,8 @@ async function findDistIndex() {
   return null;
 }
 async function resolveLocalImport(fromDir, specifier) {
-  const base = resolve4(fromDir, specifier);
-  const candidates = [base, `${base}.js`, `${base}.mjs`, `${base}.ts`, resolve4(base, "index.js")];
+  const base = resolve6(fromDir, specifier);
+  const candidates = [base, `${base}.js`, `${base}.mjs`, `${base}.ts`, resolve6(base, "index.js")];
   for (const c of candidates) {
     if (await fileExists(c))
       return c;
@@ -3745,7 +4676,7 @@ async function rewriteFileTree(entryPath, distUrl, distIndex, tmpSuffix = TMP_SU
     let code;
     if (entrySha256 && filePath === entryPath) {
       const buf = await readFile2(filePath);
-      const actual = createHash("sha256").update(buf).digest("hex");
+      const actual = createHash3("sha256").update(buf).digest("hex");
       if (actual !== entrySha256) {
         throw new Error(`cloud-managed policy failed integrity re-verification at load: expected ${entrySha256}, got ${actual}`);
       }
@@ -3774,7 +4705,7 @@ async function rewriteFileTree(entryPath, distUrl, distIndex, tmpSuffix = TMP_SU
         if (!visited.has(resolved2) && !queue.includes(resolved2)) {
           queue.push(resolved2);
         }
-        let relPath = relative(dir, resolved2 + tmpSuffix).split("\\").join("/");
+        let relPath = relative2(dir, resolved2 + tmpSuffix).split("\\").join("/");
         if (!relPath.startsWith("."))
           relPath = "./" + relPath;
         rewrites.set(specifier, relPath);
@@ -3810,24 +4741,24 @@ var init_loader_utils = __esm(() => {
 });
 
 // src/hooks/custom-hooks-loader.ts
-import { resolve as resolve5, isAbsolute, basename } from "node:path";
+import { resolve as resolve7, isAbsolute as isAbsolute2, basename } from "node:path";
 import { randomUUID } from "crypto";
-import { existsSync as existsSync4, readdirSync } from "node:fs";
+import { existsSync as existsSync6, readdirSync } from "node:fs";
 import { readFile as readFile3 } from "node:fs/promises";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
-import { createHash as createHash2 } from "node:crypto";
+import { createHash as createHash4 } from "node:crypto";
 function discoverPolicyFiles(dir) {
-  if (!existsSync4(dir))
+  if (!existsSync6(dir))
     return [];
   try {
     const entries = readdirSync(dir, { withFileTypes: true });
-    return entries.filter((e) => e.isFile() && CONVENTION_FILE_RE.test(e.name)).sort((a, b) => a.name.localeCompare(b.name)).map((e) => resolve5(dir, e.name));
+    return entries.filter((e) => e.isFile() && CONVENTION_FILE_RE.test(e.name)).sort((a, b) => a.name.localeCompare(b.name)).map((e) => resolve7(dir, e.name));
   } catch {
     return [];
   }
 }
 function findSkippedPolicyFiles(dir) {
-  if (!existsSync4(dir))
+  if (!existsSync6(dir))
     return [];
   try {
     return readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && LOADABLE_EXT_RE.test(e.name) && !CONVENTION_FILE_RE.test(e.name) && !e.name.endsWith(".d.ts") && !isTmpArtifact(e.name)).map((e) => e.name).sort((a, b) => a.localeCompare(b));
@@ -3902,7 +4833,7 @@ async function loadSingleFile(absPath, opts) {
   }
 }
 async function fingerprintTemporaryTree(tmpFiles, tmpSuffix) {
-  const hash = createHash2("sha256");
+  const hash = createHash4("sha256");
   for (const tmpFile of [...tmpFiles].sort()) {
     hash.update(tmpFile.replaceAll(tmpSuffix, TMP_SUFFIX));
     const contents = await readFile3(tmpFile, "utf8");
@@ -3946,7 +4877,7 @@ async function loadAllCustomHooks(customPoliciesPaths, opts) {
   const loadedPaths = new Set;
   const cloudManagedByPath = new Map;
   for (const policy of opts?.cloudManagedPolicies ?? []) {
-    const key = resolve5(policy.path);
+    const key = resolve7(policy.path);
     const existing = cloudManagedByPath.get(key);
     if (!existing) {
       cloudManagedByPath.set(key, policy);
@@ -3957,32 +4888,46 @@ async function loadAllCustomHooks(customPoliciesPaths, opts) {
       cloudManagedByPath.set(key, policy);
     }
   }
+  const unionSelection = (a, b) => a === null || b === null ? null : [...new Set([...a, ...b])];
+  const unionCatalog = (winner, other) => [
+    ...winner,
+    ...other.filter((p) => !winner.some((w) => w.name === p.name))
+  ];
   const packByPath = new Map;
+  const packIdsByPath = new Map;
   for (const pack of opts?.packs ?? []) {
-    const key = resolve5(pack.path);
+    const key = resolve7(pack.path);
+    packIdsByPath.set(key, [...packIdsByPath.get(key) ?? [], pack.id]);
     const existing = packByPath.get(key);
     if (!existing) {
       packByPath.set(key, pack);
       continue;
     }
-    hookLogWarn(`packs ${existing.id} and ${pack.id} have identical source, so they share one artifact ` + `and load as one pack; enforcing it if either asks to enforce`);
-    if (existing.effect !== "enforce" && pack.effect === "enforce") {
-      packByPath.set(key, pack);
-    }
+    hookLogWarn(`packs ${existing.id} and ${pack.id} have identical source, so they share one artifact ` + `and load as one pack; enforcing it if either asks to enforce, and taking ` + `the union of what each has enabled and of the agents each guards`);
+    const winner = existing.effect !== "enforce" && pack.effect === "enforce" ? pack : existing;
+    const other = winner === existing ? pack : existing;
+    packByPath.set(key, {
+      ...winner,
+      policies: unionCatalog(winner.policies, other.policies),
+      enabled: unionSelection(winner.enabled, other.enabled),
+      clis: unionSelection(winner.clis, other.clis)
+    });
   }
   for (const customPoliciesPath of typeof customPoliciesPaths === "string" ? [customPoliciesPaths] : customPoliciesPaths ?? []) {
-    const absPath = resolve5(projectRoot, customPoliciesPath);
+    const absPath = resolve7(projectRoot, customPoliciesPath);
     const cloudManaged = cloudManagedByPath.get(absPath);
     const pack = packByPath.get(absPath);
-    if (existsSync4(absPath)) {
+    if (existsSync6(absPath)) {
       if (!loadedPaths.has(absPath)) {
         loadedPaths.add(absPath);
         const hooksBefore = getCustomHooks().length;
         const failure = await loadSingleFile(absPath, {
           verifyEntrySha: cloudManaged?.sha256 ?? pack?.sha256
         });
-        if (failure && pack)
-          packFailures.set(pack.id, failure);
+        if (failure && pack) {
+          for (const id of packIdsByPath.get(absPath) ?? [pack.id])
+            packFailures.set(id, failure);
+        }
         for (const hook of getCustomHooks().slice(hooksBefore)) {
           const tagged = hook;
           if (cloudManaged) {
@@ -3999,12 +4944,15 @@ async function loadAllCustomHooks(customPoliciesPaths, opts) {
       }
     } else {
       hookLogWarn(`custom policy path not found: ${absPath}`);
-      if (pack)
-        packFailures.set(pack.id, { type: "path_missing", reason: `path missing: ${absPath}` });
+      if (pack) {
+        const missing = { type: "path_missing", reason: `path missing: ${absPath}` };
+        for (const id of packIdsByPath.get(absPath) ?? [pack.id])
+          packFailures.set(id, missing);
+      }
     }
   }
   const hooksBeforeConvention = getCustomHooks().length;
-  const projectDir = resolve5(projectRoot, ".failproofai", "policies");
+  const projectDir = resolve7(projectRoot, ".failproofai", "policies");
   const projectScope = projectDir === customPoliciesDir() ? "user" : "project";
   if (conventionEnabled) {
     sweepStaleTmpArtifacts(projectDir);
@@ -4072,7 +5020,13 @@ async function loadAllCustomHooks(customPoliciesPaths, opts) {
       hook.__conventionScope = hookNameToScope.get(hook.name) ?? "project";
     }
   }
-  return { hooks: allHooks, conventionSources, packFailures };
+  const packAliases = new Map;
+  for (const [path2, ids] of packIdsByPath) {
+    const winner = packByPath.get(path2);
+    if (winner && ids.length > 1)
+      packAliases.set(winner.id, ids);
+  }
+  return { hooks: allHooks, conventionSources, packFailures, packAliases };
 }
 var LOADING_KEY = "__FAILPROOFAI_LOADING_HOOKS__", CONVENTION_FILE_RE, loadSequence = 0, policyModuleCache, POLICY_MODULE_CACHE_MAX_ENTRIES = 500, LOADABLE_EXT_RE;
 var init_custom_hooks_loader = __esm(() => {
@@ -4090,19 +5044,19 @@ var init_custom_hooks_loader = __esm(() => {
 
 // src/hooks/hook-activity-store.ts
 import {
-  readFileSync as readFileSync3,
+  readFileSync as readFileSync5,
   writeFileSync as writeFileSync3,
   appendFileSync as appendFileSync2,
   renameSync as renameSync2,
   readdirSync as readdirSync2,
   mkdirSync as mkdirSync4,
-  existsSync as existsSync5,
+  existsSync as existsSync7,
   statSync as statSync5,
   unlinkSync
 } from "node:fs";
 import { join as join4 } from "node:path";
 function ensureDir() {
-  if (!existsSync5(storeDirValue())) {
+  if (!existsSync7(storeDirValue())) {
     mkdirSync4(storeDirValue(), { recursive: true });
   }
 }
@@ -4163,7 +5117,7 @@ function rotate(currentPath, countPath) {
 }
 function readCount(countPath) {
   try {
-    const n = parseInt(readFileSync3(countPath, "utf-8"), 10);
+    const n = parseInt(readFileSync5(countPath, "utf-8"), 10);
     return isNaN(n) ? 0 : n;
   } catch {
     return 0;
@@ -4176,7 +5130,7 @@ function writeCount(countPath, n) {
 }
 function readStoredStats() {
   try {
-    return JSON.parse(readFileSync3(join4(storeDirValue(), STATS_FILE), "utf-8"));
+    return JSON.parse(readFileSync5(join4(storeDirValue(), STATS_FILE), "utf-8"));
   } catch {
     return { totalEvents: 0, denyCount: 0, policyMap: {} };
   }
@@ -4927,7 +5881,7 @@ var init_cursor_projects = __esm(() => {
 });
 
 // lib/sqlite-reader.ts
-import { existsSync as existsSync6, readFileSync as readFileSync4 } from "node:fs";
+import { existsSync as existsSync8, readFileSync as readFileSync6 } from "node:fs";
 import initSqlJs from "sql.js/dist/sql-asm.js";
 async function tryNodeSqlite(dbPath) {
   try {
@@ -4954,7 +5908,7 @@ function loadSqlJs() {
 async function trySqlJs(dbPath) {
   try {
     const SQL = await loadSqlJs();
-    const db = new SQL.Database(readFileSync4(dbPath));
+    const db = new SQL.Database(readFileSync6(dbPath));
     return {
       query(sql, params) {
         const stmt = db.prepare(sql);
@@ -4978,7 +5932,7 @@ async function trySqlJs(dbPath) {
   }
 }
 async function openSqliteReadonly(dbPath) {
-  if (!existsSync6(dbPath))
+  if (!existsSync8(dbPath))
     return null;
   return await tryNodeSqlite(dbPath) ?? await trySqlJs(dbPath);
 }
@@ -5325,11 +6279,11 @@ var init_pi_projects = __esm(() => {
 // lib/hermes-profiles.ts
 import { readdirSync as readdirSync3 } from "node:fs";
 import { homedir as homedir10 } from "node:os";
-import { basename as basename2, dirname as dirname3, join as join11, resolve as resolve6 } from "node:path";
+import { basename as basename2, dirname as dirname3, join as join11, resolve as resolve8 } from "node:path";
 function hermesRoot() {
   const env = (process.env.HERMES_HOME || "").trim();
   if (env) {
-    const home = resolve6(env);
+    const home = resolve8(env);
     const parent = dirname3(home);
     if (basename2(parent) === PROFILES_DIR)
       return dirname3(parent);
@@ -5913,7 +6867,7 @@ __export(exports_openclaw_projects, {
   openClawProjectPath: () => openClawProjectPath,
   parseOpenClawProjectName: () => parseOpenClawProjectName
 });
-import { readFileSync as readFileSync5 } from "node:fs";
+import { readFileSync as readFileSync7 } from "node:fs";
 import { join as join14 } from "node:path";
 function str(v) {
   return typeof v === "string" && v.length > 0 ? v : undefined;
@@ -5923,7 +6877,7 @@ function readSessionsIndex(agentId) {
   const indexPath = join14(openclawHome(), "agents", agentId, "sessions", "sessions.json");
   let raw;
   try {
-    raw = JSON.parse(readFileSync5(indexPath, "utf-8"));
+    raw = JSON.parse(readFileSync7(indexPath, "utf-8"));
   } catch {
     return out;
   }
@@ -7278,7 +8232,7 @@ var init_goose_projects = __esm(() => {
 
 // lib/projects.ts
 import { readdir as readdir5, stat as stat4 } from "node:fs/promises";
-import { join as join20, resolve as resolve7, sep } from "node:path";
+import { join as join20, resolve as resolve9, sep } from "node:path";
 async function getMtime(path2, label) {
   try {
     return (await stat4(path2)).mtime;
@@ -7430,8 +8384,8 @@ function resolveProjectPath(projectName) {
     throw new RangeError("Empty project name");
   if (/^[/\\]/.test(projectName))
     throw new RangeError("Absolute project name");
-  const projectsPath = resolve7(getClaudeProjectsPath());
-  const candidate = resolve7(join20(projectsPath, projectName));
+  const projectsPath = resolve9(getClaudeProjectsPath());
+  const candidate = resolve9(join20(projectsPath, projectName));
   if (!candidate.startsWith(projectsPath + sep)) {
     throw new RangeError("Project path escapes root");
   }
@@ -7478,7 +8432,7 @@ var init_projects = __esm(() => {
 
 // lib/resolve-subagent-path.ts
 import { access as access2 } from "fs/promises";
-import { join as join21, relative as relative2 } from "path";
+import { join as join21, relative as relative3 } from "path";
 async function resolveSubagentPath(projectsPath, projectName, sessionId, agentId) {
   const fileName = `agent-${agentId}.jsonl`;
   const candidatePaths = [
@@ -7487,7 +8441,7 @@ async function resolveSubagentPath(projectsPath, projectName, sessionId, agentId
     join21(projectsPath, projectName, sessionId, "subagents", fileName)
   ];
   for (const candidatePath of candidatePaths) {
-    if (relative2(projectsPath, candidatePath).startsWith("..")) {
+    if (relative3(projectsPath, candidatePath).startsWith("..")) {
       continue;
     }
     try {
@@ -7737,15 +8691,15 @@ var init_log_entries = __esm(() => {
 });
 
 // lib/codex-sessions.ts
-import { readFileSync as readFileSync6, readdirSync as readdirSync7, existsSync as existsSync7, writeFileSync as writeFileSync4, mkdirSync as mkdirSync5, statSync as statSync9 } from "node:fs";
+import { readFileSync as readFileSync8, readdirSync as readdirSync7, existsSync as existsSync9, writeFileSync as writeFileSync4, mkdirSync as mkdirSync5, statSync as statSync9 } from "node:fs";
 import { readFile as readFile11 } from "node:fs/promises";
 import { dirname as dirname4, join as join23 } from "node:path";
 import { homedir as homedir16 } from "node:os";
 function readCache() {
   try {
-    if (!existsSync7(CACHE_PATH))
+    if (!existsSync9(CACHE_PATH))
       return {};
-    return JSON.parse(readFileSync6(CACHE_PATH, "utf-8"));
+    return JSON.parse(readFileSync8(CACHE_PATH, "utf-8"));
   } catch {
     return {};
   }
@@ -7771,7 +8725,7 @@ function dirSearch(dir, sessionId) {
 function findCodexTranscript(sessionId) {
   const cache = readCache();
   const cached = cache[sessionId];
-  if (cached && existsSync7(cached))
+  if (cached && existsSync9(cached))
     return cached;
   const root = join23(homedir16(), ".codex", "sessions");
   const today = new Date;
@@ -8025,7 +8979,7 @@ var init_codex_sessions = __esm(() => {
 });
 
 // src/hooks/resolve-permission-mode.ts
-import { readFileSync as readFileSync7 } from "node:fs";
+import { readFileSync as readFileSync9 } from "node:fs";
 function resolvePermissionMode(integration, parsed, sessionId) {
   if (integration === "claude") {
     return parsed.permission_mode ?? "default";
@@ -8040,7 +8994,7 @@ function resolveCodexMode(sessionId) {
     const path2 = findCodexTranscript(sessionId);
     if (!path2)
       return;
-    for (const line of readFileSync7(path2, "utf-8").split(`
+    for (const line of readFileSync9(path2, "utf-8").split(`
 `)) {
       if (!line.includes("turn_context"))
         continue;
@@ -8065,9 +9019,9 @@ var init_resolve_permission_mode = __esm(() => {
 });
 
 // lib/copilot-sessions.ts
-import { readFileSync as readFileSync8, readdirSync as readdirSync8, existsSync as existsSync8, statSync as statSync10 } from "node:fs";
+import { readFileSync as readFileSync10, readdirSync as readdirSync8, existsSync as existsSync10, statSync as statSync10 } from "node:fs";
 import { readFile as readFile12 } from "node:fs/promises";
-import { join as join24, resolve as resolve8, sep as sep2 } from "node:path";
+import { join as join24, resolve as resolve10, sep as sep2 } from "node:path";
 import { homedir as homedir17 } from "node:os";
 function getCopilotHome() {
   return process.env.COPILOT_HOME || join24(homedir17(), ".copilot");
@@ -8078,8 +9032,8 @@ function getCopilotSessionStateRoot2() {
 function getCopilotSessionDir(sessionId) {
   if (!sessionId)
     return null;
-  const root = resolve8(getCopilotSessionStateRoot2());
-  const candidate = resolve8(root, sessionId);
+  const root = resolve10(getCopilotSessionStateRoot2());
+  const candidate = resolve10(root, sessionId);
   if (candidate === root || !candidate.startsWith(`${root}${sep2}`))
     return null;
   return candidate;
@@ -8094,17 +9048,17 @@ function findCopilotTranscript(sessionId) {
   const candidate = resolveSessionFile(sessionId, "events.jsonl");
   if (!candidate)
     return null;
-  return existsSync8(candidate) ? candidate : null;
+  return existsSync10(candidate) ? candidate : null;
 }
 function findCopilotWorkspace(sessionId) {
   const candidate = resolveSessionFile(sessionId, "workspace.yaml");
   if (!candidate)
     return null;
-  return existsSync8(candidate) ? candidate : null;
+  return existsSync10(candidate) ? candidate : null;
 }
 function readYamlScalar(path2, key) {
   try {
-    const text = readFileSync8(path2, "utf-8");
+    const text = readFileSync10(path2, "utf-8");
     const re = new RegExp(`^${key}\\s*:\\s*(.+?)\\s*$`, "m");
     const m = text.match(re);
     if (!m)
@@ -8282,9 +9236,9 @@ var init_copilot_sessions = __esm(() => {
 });
 
 // lib/cursor-sessions.ts
-import { readFileSync as readFileSync9, readdirSync as readdirSync9, existsSync as existsSync9, statSync as statSync11 } from "node:fs";
+import { readFileSync as readFileSync11, readdirSync as readdirSync9, existsSync as existsSync11, statSync as statSync11 } from "node:fs";
 import { readFile as readFile13 } from "node:fs/promises";
-import { basename as basename3, join as join25, resolve as resolve9, sep as sep3 } from "node:path";
+import { basename as basename3, join as join25, resolve as resolve11, sep as sep3 } from "node:path";
 import { homedir as homedir18 } from "node:os";
 function getCursorHome2() {
   return process.env.CURSOR_HOME || join25(homedir18(), ".cursor");
@@ -8292,8 +9246,8 @@ function getCursorHome2() {
 function getCursorSessionDir(sessionId) {
   if (!sessionId)
     return null;
-  const home = resolve9(getCursorHome2());
-  const projectsRoot = resolve9(home, NEW_PROJECTS_DIR2);
+  const home = resolve11(getCursorHome2());
+  const projectsRoot = resolve11(home, NEW_PROJECTS_DIR2);
   let projectEntries = [];
   try {
     projectEntries = readdirSync9(projectsRoot, { withFileTypes: true });
@@ -8301,19 +9255,19 @@ function getCursorSessionDir(sessionId) {
   for (const entry of projectEntries) {
     if (!entry.isDirectory())
       continue;
-    const candidate = resolve9(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2, sessionId);
-    const transcriptRoot = resolve9(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2);
+    const candidate = resolve11(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2, sessionId);
+    const transcriptRoot = resolve11(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2);
     if (candidate === transcriptRoot || !candidate.startsWith(`${transcriptRoot}${sep3}`))
       continue;
-    if (existsSync9(candidate))
+    if (existsSync11(candidate))
       return candidate;
   }
   for (const sub of LEGACY_SESSION_ROOT_CANDIDATES2) {
-    const root = resolve9(home, sub);
-    const candidate = resolve9(root, sessionId);
+    const root = resolve11(home, sub);
+    const candidate = resolve11(root, sessionId);
     if (candidate === root || !candidate.startsWith(`${root}${sep3}`))
       continue;
-    if (existsSync9(candidate))
+    if (existsSync11(candidate))
       return candidate;
   }
   return null;
@@ -8323,11 +9277,11 @@ function findCursorTranscript(sessionId) {
   if (!dir)
     return null;
   const newCandidate = join25(dir, `${basename3(dir)}.jsonl`);
-  if (existsSync9(newCandidate))
+  if (existsSync11(newCandidate))
     return newCandidate;
   for (const name of LEGACY_TRANSCRIPT_FILE_CANDIDATES2) {
     const candidate = join25(dir, name);
-    if (existsSync9(candidate))
+    if (existsSync11(candidate))
       return candidate;
   }
   return null;
@@ -8538,9 +9492,9 @@ var init_cursor_sessions = __esm(() => {
 });
 
 // lib/pi-sessions.ts
-import { readFileSync as readFileSync10, readdirSync as readdirSync10, existsSync as existsSync10, statSync as statSync12 } from "node:fs";
+import { readFileSync as readFileSync12, readdirSync as readdirSync10, existsSync as existsSync12, statSync as statSync12 } from "node:fs";
 import { readFile as readFile14 } from "node:fs/promises";
-import { join as join26, resolve as resolve10, sep as sep4 } from "node:path";
+import { join as join26, resolve as resolve12, sep as sep4 } from "node:path";
 import { homedir as homedir19 } from "node:os";
 function getPiSessionStateRoot() {
   return process.env.PI_SESSIONS_DIR || join26(homedir19(), ".pi", "agent", "sessions");
@@ -8551,7 +9505,7 @@ function isSafeSessionId(sessionId) {
 function findPiTranscript(sessionId) {
   if (!isSafeSessionId(sessionId))
     return null;
-  const root = resolve10(getPiSessionStateRoot());
+  const root = resolve12(getPiSessionStateRoot());
   let cwdDirs;
   try {
     cwdDirs = readdirSync10(root);
@@ -8559,7 +9513,7 @@ function findPiTranscript(sessionId) {
     return null;
   }
   for (const cwdDir of cwdDirs) {
-    const cwdPath = resolve10(root, cwdDir);
+    const cwdPath = resolve12(root, cwdDir);
     if (!cwdPath.startsWith(`${root}${sep4}`))
       continue;
     let files;
@@ -8572,10 +9526,10 @@ function findPiTranscript(sessionId) {
       const m = SESSION_FILE_RE2.exec(f);
       if (!m || m[1].toLowerCase() !== sessionId.toLowerCase())
         continue;
-      const candidate = resolve10(cwdPath, f);
+      const candidate = resolve12(cwdPath, f);
       if (!candidate.startsWith(`${cwdPath}${sep4}`))
         continue;
-      if (existsSync10(candidate))
+      if (existsSync12(candidate))
         return candidate;
     }
   }
@@ -8709,404 +9663,123 @@ async function parsePiLog(fileContent, source = "session") {
       entries.push({
         type: "system",
         ...baseEntry(rawCopy, timestamp, date, source),
-        raw: rawCopy
-      });
-      continue;
-    }
-    entries.push({
-      type: "system",
-      ...baseEntry(rawCopy, timestamp, date, source),
-      raw: rawCopy
-    });
-  }
-  if (entries.length > 500)
-    await new Promise((r) => setImmediate(r));
-  entries.sort((a, b) => a.timestampMs - b.timestampMs);
-  return { entries, rawLines, cwd };
-}
-async function getPiSessionLog(sessionId) {
-  const filePath = findPiTranscript(sessionId);
-  if (!filePath)
-    return null;
-  let fileContent;
-  try {
-    fileContent = await readFile14(filePath, "utf-8");
-  } catch {
-    return null;
-  }
-  let parsed;
-  try {
-    parsed = await parsePiLog(fileContent, "session");
-  } catch {
-    return null;
-  }
-  return {
-    entries: parsed.entries,
-    rawLines: parsed.rawLines,
-    cwd: parsed.cwd,
-    filePath
-  };
-}
-var UUID_RE, SESSION_FILE_RE2, getCachedPiSessionLog;
-var init_pi_sessions = __esm(() => {
-  init_log_entries();
-  UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-  SESSION_FILE_RE2 = /^[\d-]+T[\d-]+Z_([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.jsonl$/i;
-  getCachedPiSessionLog = runtimeCache((sessionId) => getPiSessionLog(sessionId), 60, { maxSize: 50 });
-});
-
-// src/hooks/resolve-transcript-path.ts
-function resolveTranscriptPath(integration, parsed, sessionId) {
-  const stdinPath = typeof parsed.transcript_path === "string" ? parsed.transcript_path : undefined;
-  if (stdinPath)
-    return stdinPath;
-  if (typeof sessionId !== "string" || sessionId.length === 0)
-    return;
-  switch (integration) {
-    case "claude":
-      return;
-    case "codex":
-      return findCodexTranscript(sessionId) ?? undefined;
-    case "copilot":
-      return findCopilotTranscript(sessionId) ?? undefined;
-    case "cursor":
-      return findCursorTranscript(sessionId) ?? undefined;
-    case "pi":
-      return findPiTranscript(sessionId) ?? undefined;
-    case "factory":
-      return findFactoryTranscript(sessionId) ?? undefined;
-    case "antigravity":
-      return findAntigravityTranscript(sessionId) ?? undefined;
-    case "devin":
-      return `devin-db://${sessionId}`;
-    case "goose":
-      return `goose-db://${sessionId}`;
-    case "opencode":
-      return `opencode-db://${sessionId}`;
-    case "hermes":
-      return;
-    case "openclaw":
-      return;
-    default:
-      return;
-  }
-}
-var init_resolve_transcript_path = __esm(() => {
-  init_codex_sessions();
-  init_copilot_sessions();
-  init_cursor_sessions();
-  init_pi_sessions();
-  init_factory_sessions();
-  init_antigravity_sessions();
-});
-// src/hooks/cloud-managed-policies.ts
-import { createHash as createHash3 } from "node:crypto";
-import { existsSync as existsSync11, readFileSync as readFileSync11, realpathSync, rmSync } from "node:fs";
-import { isAbsolute as isAbsolute2, relative as relative3, resolve as resolve11 } from "node:path";
-function cloudManagedPolicyRoot() {
-  return process.env.FAILPROOFAI_CLOUD_POLICY_DIR ?? cloudPoliciesDir();
-}
-function parseManifest(value) {
-  if (!value || typeof value !== "object")
-    throw new Error("active manifest is not an object");
-  const raw = value;
-  if (!ACCEPTED_ACTIVE_SCHEMA_VERSIONS.includes(raw.schemaVersion)) {
-    throw new Error(`unsupported active manifest schema ${String(raw.schemaVersion)} ` + `(supported: ${ACCEPTED_ACTIVE_SCHEMA_VERSIONS.join(", ")})`);
-  }
-  const deployment = raw.deployment ?? raw.generation;
-  if (!Number.isSafeInteger(deployment) || (deployment ?? -1) < 0) {
-    throw new Error("active manifest deployment is invalid");
-  }
-  if (!Array.isArray(raw.policies))
-    throw new Error("active manifest policies is not an array");
-  const policies = raw.policies.map((p) => {
-    const entry = p;
-    return { ...entry, version: entry.version ?? entry.revision };
-  });
-  return { schemaVersion: raw.schemaVersion, deployment, policies };
-}
-function resolveManagedPath(root, candidate) {
-  if (!candidate || isAbsolute2(candidate))
-    throw new Error(`unsafe managed policy path ${JSON.stringify(candidate)}`);
-  const absolute = resolve11(root, candidate);
-  const lexicalRelative = relative3(root, absolute);
-  if (lexicalRelative.startsWith("..") || isAbsolute2(lexicalRelative)) {
-    throw new Error(`managed policy path escapes its root: ${JSON.stringify(candidate)}`);
-  }
-  const realRoot = realpathSync(root);
-  const realFile = realpathSync(absolute);
-  const physicalRelative = relative3(realRoot, realFile);
-  if (physicalRelative.startsWith("..") || isAbsolute2(physicalRelative)) {
-    throw new Error(`managed policy symlink escapes its root: ${JSON.stringify(candidate)}`);
-  }
-  return realFile;
-}
-function readActiveCloudManagedPolicies() {
-  const root = cloudManagedPolicyRoot();
-  const activePath = resolve11(root, "active.json");
-  if (!existsSync11(activePath))
-    return [];
-  let raw;
-  try {
-    raw = JSON.parse(readFileSync11(activePath, "utf8"));
-  } catch (err) {
-    throw new Error(`failed to read cloud-managed active manifest: ${err instanceof Error ? err.message : String(err)}`);
-  }
-  const manifest = parseManifest(raw);
-  const seen = new Set;
-  return manifest.policies.map((policy) => {
-    if (!POLICY_ID_RE.test(policy.id) || policy.id === "." || policy.id === "..") {
-      throw new Error(`unsafe cloud-managed policy id ${JSON.stringify(policy.id)}`);
-    }
-    if (!Number.isSafeInteger(policy.version) || policy.version < 0) {
-      throw new Error(`invalid version for cloud-managed policy ${policy.id}`);
-    }
-    if (!SHA256_RE.test(policy.sha256)) {
-      throw new Error(`invalid SHA-256 for cloud-managed policy ${policy.id}`);
-    }
-    if (seen.has(policy.id))
-      throw new Error(`duplicate cloud-managed policy id ${policy.id}`);
-    seen.add(policy.id);
-    const path2 = resolveManagedPath(root, policy.path);
-    const bytes = readFileSync11(path2);
-    const actual = createHash3("sha256").update(bytes).digest("hex");
-    if (actual !== policy.sha256) {
-      throw new Error(`cloud-managed policy ${policy.id} failed integrity verification: expected ${policy.sha256}, got ${actual}`);
-    }
-    if (policy.effect !== undefined && policy.effect !== "enforce" && policy.effect !== "observe") {
-      throw new Error(`unknown effect ${JSON.stringify(policy.effect)} for cloud-managed policy ${policy.id}`);
-    }
-    return {
-      id: policy.id,
-      version: policy.version,
-      effect: policy.effect ?? "enforce",
-      sha256: policy.sha256,
-      path: path2,
-      deployment: manifest.deployment
-    };
-  });
-}
-var ACCEPTED_ACTIVE_SCHEMA_VERSIONS, SHA256_RE, POLICY_ID_RE;
-var init_cloud_managed_policies = __esm(() => {
-  init_fp_home();
-  ACCEPTED_ACTIVE_SCHEMA_VERSIONS = [1, 2];
-  SHA256_RE = /^[a-f0-9]{64}$/;
-  POLICY_ID_RE = /^[A-Za-z0-9._-]{1,128}$/;
-});
-
-// src/hooks/pack-manifest.ts
-import { createHash as createHash4 } from "node:crypto";
-import { existsSync as existsSync12, readFileSync as readFileSync12 } from "node:fs";
-import { resolve as resolve12 } from "node:path";
-function packsRoot() {
-  return process.env.FAILPROOFAI_PACK_DIR ?? packsDir();
-}
-function parsePackIdentity(value) {
-  if (typeof value.id !== "string" || !PACK_ID_RE.test(value.id)) {
-    throw new Error(`unsafe pack id ${JSON.stringify(value.id)}`);
-  }
-  if (typeof value.version !== "string" || !PACK_VERSION_RE.test(value.version)) {
-    throw new Error(`invalid version for pack ${value.id}`);
-  }
-  if (value.effect !== undefined && value.effect !== "enforce" && value.effect !== "observe") {
-    throw new Error(`unknown effect ${JSON.stringify(value.effect)} for pack ${value.id}`);
+        raw: rawCopy
+      });
+      continue;
+    }
+    entries.push({
+      type: "system",
+      ...baseEntry(rawCopy, timestamp, date, source),
+      raw: rawCopy
+    });
   }
-  const commit = typeof value.commit === "string" && PACK_COMMIT_RE.test(value.commit.trim().toLowerCase()) ? value.commit.trim().toLowerCase() : undefined;
-  return {
-    id: value.id,
-    version: value.version,
-    effect: value.effect ?? "enforce",
-    ...commit ? { commit } : {}
-  };
+  if (entries.length > 500)
+    await new Promise((r) => setImmediate(r));
+  entries.sort((a, b) => a.timestampMs - b.timestampMs);
+  return { entries, rawLines, cwd };
 }
-function hasInstalledPacks() {
+async function getPiSessionLog(sessionId) {
+  const filePath = findPiTranscript(sessionId);
+  if (!filePath)
+    return null;
+  let fileContent;
   try {
-    const raw = JSON.parse(readFileSync12(installedFilePath(), "utf8"));
-    return Array.isArray(raw.packs) && raw.packs.length > 0;
+    fileContent = await readFile14(filePath, "utf-8");
   } catch {
-    return false;
-  }
-}
-function installedFilePath() {
-  return process.env.FAILPROOFAI_PACK_DIR ? resolve12(process.env.FAILPROOFAI_PACK_DIR, "installed.json") : packsInstalledFile();
-}
-function parsePackPolicy(packId, value, index) {
-  const where = `${packId} policy #${index}`;
-  if (!value || typeof value !== "object")
-    throw new Error(`${where} is not an object`);
-  const raw = value;
-  const name = raw.name;
-  if (typeof name !== "string" || !PACK_POLICY_NAME_RE.test(name)) {
-    throw new Error(`${where} has an unsafe name ${JSON.stringify(name)}`);
-  }
-  if ("alwaysOn" in raw) {
-    throw new Error(`${where} declares alwaysOn, which packs may not set`);
-  }
-  if (typeof raw.description !== "string" || raw.description.length === 0) {
-    throw new Error(`${where} is missing a description`);
-  }
-  if (typeof raw.category !== "string" || raw.category.length === 0) {
-    throw new Error(`${where} is missing a category`);
-  }
-  if (typeof raw.defaultEnabled !== "boolean") {
-    throw new Error(`${where} is missing defaultEnabled`);
-  }
-  if (!raw.match || typeof raw.match !== "object") {
-    throw new Error(`${where} is missing a match`);
-  }
-  return raw;
-}
-function parsePack(root, value) {
-  if (!value || typeof value !== "object")
-    throw new Error("pack entry is not an object");
-  const raw = value;
-  const identity = parsePackIdentity(raw);
-  if (typeof raw.source !== "string" || raw.source.length === 0) {
-    throw new Error(`pack ${raw.id} has no source`);
-  }
-  if (typeof raw.sha256 !== "string" || !SHA256_RE2.test(raw.sha256)) {
-    throw new Error(`invalid SHA-256 for pack ${raw.id}`);
-  }
-  const effect = identity.effect;
-  const path2 = resolveManagedPath(root, raw.entry);
-  const actual = createHash4("sha256").update(readFileSync12(path2)).digest("hex");
-  if (actual !== raw.sha256) {
-    throw new Error(`pack ${raw.id} failed integrity verification: expected ${raw.sha256}, got ${actual}`);
-  }
-  if (!Array.isArray(raw.policies))
-    throw new Error(`pack ${raw.id} policies is not an array`);
-  const policies = raw.policies.map((p, i) => parsePackPolicy(raw.id, p, i));
-  const names = new Set;
-  for (const p of policies) {
-    if (names.has(p.name))
-      throw new Error(`pack ${raw.id} declares ${p.name} twice`);
-    names.add(p.name);
-  }
-  let enabled = null;
-  if (raw.enabled !== undefined) {
-    if (!Array.isArray(raw.enabled) || raw.enabled.some((n) => typeof n !== "string")) {
-      throw new Error(`pack ${raw.id} enabled is not an array of names`);
-    }
-    enabled = raw.enabled.filter((n) => names.has(n));
+    return null;
   }
-  let clis = null;
-  if (raw.clis !== undefined) {
-    if (!Array.isArray(raw.clis) || raw.clis.some((c) => typeof c !== "string")) {
-      throw new Error(`pack ${raw.id} clis is not an array of agent names`);
-    }
-    clis = raw.clis;
+  let parsed;
+  try {
+    parsed = await parsePiLog(fileContent, "session");
+  } catch {
+    return null;
   }
   return {
-    clis,
-    id: identity.id,
-    version: identity.version,
-    source: raw.source,
-    path: path2,
-    sha256: raw.sha256,
-    effect,
-    policies,
-    enabled
+    entries: parsed.entries,
+    rawLines: parsed.rawLines,
+    cwd: parsed.cwd,
+    filePath
   };
 }
-function readInstalledPacks() {
-  const manifestPath = installedFilePath();
-  if (!existsSync12(manifestPath))
-    return { packs: [], errors: [] };
-  let raw;
-  try {
-    raw = JSON.parse(readFileSync12(manifestPath, "utf8"));
-  } catch (err) {
-    return {
-      packs: [],
-      errors: [{ id: null, reason: `unreadable pack manifest: ${errText(err)}` }]
-    };
-  }
-  if (!raw || typeof raw !== "object") {
-    return { packs: [], errors: [{ id: null, reason: "pack manifest is not an object" }] };
-  }
-  const manifest = raw;
-  if (!ACCEPTED_PACK_SCHEMA_VERSIONS.includes(manifest.schemaVersion)) {
-    return {
-      packs: [],
-      errors: [
-        {
-          id: null,
-          reason: `unsupported pack manifest schema ${String(manifest.schemaVersion)} ` + `(supported: ${ACCEPTED_PACK_SCHEMA_VERSIONS.join(", ")})`
-        }
-      ]
-    };
-  }
-  if (!Array.isArray(manifest.packs)) {
-    return { packs: [], errors: [{ id: null, reason: "pack manifest packs is not an array" }] };
-  }
-  const root = packsRoot();
-  const packs = [];
-  const errors = [];
-  const seen = new Set;
-  for (const entry of manifest.packs) {
-    const declaredId = entry && typeof entry === "object" && typeof entry.id === "string" ? entry.id : null;
-    try {
-      const pack = parsePack(root, entry);
-      if (seen.has(pack.id))
-        throw new Error(`duplicate pack id ${pack.id}`);
-      seen.add(pack.id);
-      packs.push(pack);
-    } catch (err) {
-      const rec = entry;
-      const declaredEffect = rec && (rec.effect === "observe" || rec.effect === "enforce") ? rec.effect : "enforce";
-      errors.push({
-        id: declaredId,
-        reason: errText(err),
-        effect: declaredEffect,
-        ...Array.isArray(rec?.policies) ? { declared: safeDeclared(rec.policies) } : {}
-      });
-    }
-  }
-  return { packs, errors };
-}
-function safeDeclared(raw) {
-  const out = [];
-  for (const value of raw) {
-    if (!value || typeof value !== "object")
-      continue;
-    const p = value;
-    if (typeof p.name !== "string" || !p.match || typeof p.match !== "object")
-      continue;
-    out.push(p);
+var UUID_RE, SESSION_FILE_RE2, getCachedPiSessionLog;
+var init_pi_sessions = __esm(() => {
+  init_log_entries();
+  UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+  SESSION_FILE_RE2 = /^[\d-]+T[\d-]+Z_([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.jsonl$/i;
+  getCachedPiSessionLog = runtimeCache((sessionId) => getPiSessionLog(sessionId), 60, { maxSize: 50 });
+});
+
+// src/hooks/resolve-transcript-path.ts
+function resolveTranscriptPath(integration, parsed, sessionId) {
+  const stdinPath = typeof parsed.transcript_path === "string" ? parsed.transcript_path : undefined;
+  if (stdinPath)
+    return stdinPath;
+  if (typeof sessionId !== "string" || sessionId.length === 0)
+    return;
+  switch (integration) {
+    case "claude":
+      return;
+    case "codex":
+      return findCodexTranscript(sessionId) ?? undefined;
+    case "copilot":
+      return findCopilotTranscript(sessionId) ?? undefined;
+    case "cursor":
+      return findCursorTranscript(sessionId) ?? undefined;
+    case "pi":
+      return findPiTranscript(sessionId) ?? undefined;
+    case "factory":
+      return findFactoryTranscript(sessionId) ?? undefined;
+    case "antigravity":
+      return findAntigravityTranscript(sessionId) ?? undefined;
+    case "devin":
+      return `devin-db://${sessionId}`;
+    case "goose":
+      return `goose-db://${sessionId}`;
+    case "opencode":
+      return `opencode-db://${sessionId}`;
+    case "hermes":
+      return;
+    case "openclaw":
+      return;
+    default:
+      return;
   }
-  return out;
-}
-function errText(err) {
-  return err instanceof Error ? err.message : String(err);
 }
-var ACCEPTED_PACK_SCHEMA_VERSIONS, SHA256_RE2, PACK_ID_RE, PACK_VERSION_RE, PACK_COMMIT_RE, PACK_POLICY_NAME_RE;
-var init_pack_manifest = __esm(() => {
-  init_fp_home();
-  init_cloud_managed_policies();
-  ACCEPTED_PACK_SCHEMA_VERSIONS = [1];
-  SHA256_RE2 = /^[a-f0-9]{64}$/;
-  PACK_ID_RE = /^[A-Za-z0-9._-]{1,64}\/[A-Za-z0-9._-]{1,64}$/;
-  PACK_VERSION_RE = /^[A-Za-z0-9][A-Za-z0-9._+-]{0,63}$/;
-  PACK_COMMIT_RE = /^[0-9a-f]{7,40}$/;
-  PACK_POLICY_NAME_RE = /^[A-Za-z0-9._-]{1,128}$/;
+var init_resolve_transcript_path = __esm(() => {
+  init_codex_sessions();
+  init_copilot_sessions();
+  init_cursor_sessions();
+  init_pi_sessions();
+  init_factory_sessions();
+  init_antigravity_sessions();
 });
-
 // src/hooks/pack-failclosed.ts
+function declaredList(value) {
+  if (value === undefined || value === null)
+    return null;
+  if (!Array.isArray(value))
+    return null;
+  if (value.some((entry) => typeof entry !== "string" || entry.length === 0))
+    return null;
+  return value;
+}
 function unionMatch(matchers) {
   const events = new Set;
   const toolNames = new Set;
   let anyEvent = false;
   let anyTool = false;
   for (const m of matchers) {
-    if (!m.events || m.events.length === 0)
+    const declaredEvents = declaredList(m?.events);
+    const declaredTools = declaredList(m?.toolNames);
+    if (!declaredEvents || declaredEvents.length === 0)
       anyEvent = true;
     else
-      for (const e of m.events)
+      for (const e of declaredEvents)
         events.add(e);
-    if (!m.toolNames || m.toolNames.length === 0)
+    if (!declaredTools || declaredTools.length === 0)
       anyTool = true;
     else
-      for (const t of m.toolNames)
+      for (const t of declaredTools)
         toolNames.add(t);
   }
   const scoped = {};
@@ -9116,11 +9789,20 @@ function unionMatch(matchers) {
     scoped.toolNames = [...toolNames];
   return scoped;
 }
+function outOfScope(clis, cli) {
+  if (!cli)
+    return false;
+  if (!Array.isArray(clis) || clis.length === 0)
+    return false;
+  return !clis.every((c) => typeof c === "string") ? false : !clis.includes(cli);
+}
 function missingGuards(input) {
   const out = [];
   for (const err of input.errors) {
     if (err.effect === "observe")
       continue;
+    if (outOfScope(err.clis, input.cli))
+      continue;
     const declared = err.declared ?? [];
     out.push({
       packId: err.id ?? "(unnamed pack)",
@@ -9133,6 +9815,8 @@ function missingGuards(input) {
   for (const pack of input.packs) {
     if (pack.effect === "observe")
       continue;
+    if (outOfScope(pack.clis, input.cli))
+      continue;
     const loadFailure = input.failed.get(pack.id);
     if (loadFailure && PERMANENT_LOAD_FAILURES.has(loadFailure.type)) {
       const taken2 = pack.enabled ?? pack.policies.map((p) => p.name);
@@ -9165,6 +9849,24 @@ function missingGuards(input) {
   }
   return out.filter((g) => !(g.match.events && g.match.events.length === 0));
 }
+function guardsCover(guards, eventType, toolName) {
+  return guards.some((g) => {
+    const events = g.match.events;
+    if (events && events.length > 0 && !events.includes(eventType)) {
+      return false;
+    }
+    const tools = g.match.toolNames;
+    if (tools && tools.length > 0 && (!toolName || !tools.includes(toolName)))
+      return false;
+    return true;
+  });
+}
+function combinedGuardMatch(guards) {
+  if (guards.length === 1)
+    return guards[0].match;
+  const axis = (key) => guards.every((g) => g.match[key]?.length) ? [...new Set(guards.flatMap((g) => g.match[key] ?? []))] : undefined;
+  return { events: axis("events"), toolNames: axis("toolNames") };
+}
 function packFailureReason(guards) {
   const named = guards.map((g) => {
     const where = g.packVersion ? `${g.packId}@${g.packVersion}` : g.packId;
@@ -9468,9 +10170,11 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
         if (pack && enabledBuiltinNames.has(hook.name))
           continue;
         if (pack) {
-          const seen = registeredByPack.get(pack.id) ?? new Set;
-          seen.add(hook.name);
-          registeredByPack.set(pack.id, seen);
+          for (const id of loadResult.packAliases?.get(pack.id) ?? [pack.id]) {
+            const seen = registeredByPack.get(id) ?? new Set;
+            seen.add(hook.name);
+            registeredByPack.set(id, seen);
+          }
         }
         const hookName = hook.name;
         const conventionScope = hook.__conventionScope;
@@ -9526,20 +10230,23 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
           packs: installedPacks,
           registered: registeredByPack,
           failed: loadResult.packFailures,
-          disabled: disabledCustomPolicies
+          disabled: disabledCustomPolicies,
+          cli
         });
         if (guards.length > 0) {
           const reason = packFailureReason(guards);
-          const match = guards.length === 1 ? guards[0].match : {
-            events: guards.every((g) => g.match.events) ? [...new Set(guards.flatMap((g) => g.match.events ?? []))] : undefined
-          };
+          const match = combinedGuardMatch(guards);
           const name = "pack/failproofai-pack-unavailable";
           policyAttribution.set(name, {
             source: "pack",
             packId: guards[0].packId,
             ...guards[0].packVersion ? { packVersion: guards[0].packVersion } : {}
           });
-          registerPolicy(name, "A policy pack this machine enforces could not be loaded", async () => canonicalEventType === "UserPromptSubmit" ? { decision: "instruct", reason } : { decision: "deny", reason }, match, 1);
+          registerPolicy(name, "A policy pack this machine enforces could not be loaded", async (ctx) => {
+            if (!guardsCover(guards, canonicalEventType, ctx.toolName))
+              return { decision: "allow" };
+            return canonicalEventType === "UserPromptSubmit" ? { decision: "instruct", reason } : { decision: "deny", reason };
+          }, match, 1);
           hookLogWarn(reason);
         }
       }