failproofai 1.0.3 → 1.0.4-beta.2

package/dist/worker.mjs

@@ -1,5 +1,4 @@
 #!/usr/bin/env node
-import { createRequire } from "node:module";
 var __defProp = Object.defineProperty;
 var __returnValue = (v) => v;
 function __exportSetter(name, newValue) {
@@ -14,8 +13,17 @@ var __export = (target, all) => {
       set: __exportSetter.bind(all, name)
     });
 };
-var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
-var __require = /* @__PURE__ */ createRequire(import.meta.url);
+var __esm = (fn, res, err) => () => {
+  if (fn)
+    try {
+      res = fn(fn = 0);
+    } catch (e) {
+      err = [e];
+    }
+  if (err)
+    throw err[0];
+  return res;
+};
 
 // src/hooks/types.ts
 var CODEX_EVENT_MAP, CODEX_TOOL_MAP, HERMES_TOOL_MAP, HERMES_TOOL_INPUT_MAP, HERMES_EVENT_MAP, COPILOT_TOOL_MAP, COPILOT_TOOL_INPUT_MAP, CURSOR_EVENT_MAP, CURSOR_TOOL_MAP, OPENCODE_TOOL_MAP, OPENCODE_TOOL_INPUT_MAP, PI_EVENT_MAP, PI_TOOL_MAP, PI_TOOL_INPUT_MAP, OPENCLAW_EVENT_MAP, OPENCLAW_TOOL_MAP, OPENCLAW_TOOL_INPUT_MAP, FACTORY_TOOL_MAP, DEVIN_TOOL_MAP, ANTIGRAVITY_EVENT_MAP, ANTIGRAVITY_TOOL_MAP, ANTIGRAVITY_TOOL_INPUT_MAP, GOOSE_TOOL_MAP, GOOSE_TOOL_INPUT_MAP, HOOK_EVENT_TYPES, CLAUDE_INSTALL_EVENT_TYPES;
@@ -370,7 +378,7 @@ function failproofaiHome(home) {
     return resolve(home, ".failproofai");
   return process.env.FAILPROOFAI_HOME || resolve(homedir(), ".failproofai");
 }
-var LAYOUT_VERSION = 4, at = (...parts) => resolve(failproofaiHome(), ...parts), atHome = (home, ...parts) => home ? resolve(failproofaiHome(home), ...parts) : at(...parts), versionFile = (home) => atHome(home, "VERSION"), configFile = (home) => atHome(home, "config.json"), policiesDir = (home) => atHome(home, "policies"), customPoliciesDir, globalPolicyConfigFile = (home) => atHome(home, "policies-config.json"), cloudPoliciesDir = (home) => resolve(policiesDir(home), "cloud-policies"), packsDir = (home) => resolve(policiesDir(home), "packs"), packsInstalledFile = (home) => resolve(packsDir(home), "installed.json"), hookActivityDir = (home) => atHome(home, "hook-activity"), stateDir = (home) => atHome(home, "state"), shimsDir = (home) => resolve(stateDir(home), "shims"), sessionPauseDir = () => resolve(stateDir(), "sessions"), telemetryIdFile = (home) => resolve(stateDir(home), "telemetry-id"), codexSessionPathsFile = (home) => resolve(stateDir(home), "codex-session-paths.json"), logsDir = (home) => atHome(home, "logs"), legacy;
+var LAYOUT_VERSION = 4, at = (...parts) => resolve(failproofaiHome(), ...parts), atHome = (home, ...parts) => home ? resolve(failproofaiHome(home), ...parts) : at(...parts), versionFile = (home) => atHome(home, "VERSION"), configFile = (home) => atHome(home, "config.json"), policiesDir = (home) => atHome(home, "policies"), customPoliciesDir, globalPolicyConfigFile = (home) => atHome(home, "policies-config.json"), cloudPoliciesDir = (home) => resolve(policiesDir(home), "cloud-policies"), packsDir = (home) => resolve(policiesDir(home), "packs"), packsInstalledFile = (home) => resolve(packsDir(home), "installed.json"), auditDir = (home) => atHome(home, "audit"), auditLeaksFile = (home) => resolve(auditDir(home), "leaks.json"), auditLeakIdentityFile = (home) => resolve(auditDir(home), "leak-identity.json"), hookActivityDir = (home) => atHome(home, "hook-activity"), stateDir = (home) => atHome(home, "state"), shimsDir = (home) => resolve(stateDir(home), "shims"), sessionPauseDir = () => resolve(stateDir(), "sessions"), telemetryIdFile = (home) => resolve(stateDir(home), "telemetry-id"), codexSessionPathsFile = (home) => resolve(stateDir(home), "codex-session-paths.json"), logsDir = (home) => atHome(home, "logs"), legacy;
 var init_fp_home = __esm(() => {
   customPoliciesDir = policiesDir;
   legacy = {
@@ -1155,8 +1163,8 @@ import { statSync as statSync3 } from "node:fs";
 import { readFile, writeFile } from "node:fs/promises";
 import { execSync, execFileSync } from "node:child_process";
 import { homedir as homedir3 } from "node:os";
-function isAgentInternalPath(resolved2) {
-  const normResolved = resolved2.replaceAll("\\", "/");
+function isAgentInternalPath(resolved) {
+  const normResolved = resolved.replaceAll("\\", "/");
   for (const dir of [".claude", ".codex", ".copilot", ".cursor", ".opencode", ".pi", ".gemini"]) {
     const root = join2(homedir3(), dir).replaceAll("\\", "/");
     if (normResolved === root || normResolved.startsWith(root + "/"))
@@ -1169,34 +1177,34 @@ function isAgentInternalPath(resolved2) {
   }
   return false;
 }
-function isAgentSettingsFile(resolved2) {
-  if (/[\\/]\.claude[\\/]settings(?:\.[^/\\]+)?\.json$/.test(resolved2))
+function isAgentSettingsFile(resolved) {
+  if (/[\\/]\.claude[\\/]settings(?:\.[^/\\]+)?\.json$/.test(resolved))
     return true;
-  if (/[\\/]\.codex[\\/]hooks\.json$/.test(resolved2))
+  if (/[\\/]\.codex[\\/]hooks\.json$/.test(resolved))
     return true;
-  if (/[\\/]\.copilot[\\/]hooks[\\/][^/\\]+\.json$/.test(resolved2))
+  if (/[\\/]\.copilot[\\/]hooks[\\/][^/\\]+\.json$/.test(resolved))
     return true;
-  if (/[\\/]\.github[\\/]hooks[\\/][^/\\]+\.json$/.test(resolved2))
+  if (/[\\/]\.github[\\/]hooks[\\/][^/\\]+\.json$/.test(resolved))
     return true;
-  if (/[\\/]\.cursor[\\/]hooks\.json$/.test(resolved2))
+  if (/[\\/]\.cursor[\\/]hooks\.json$/.test(resolved))
     return true;
-  if (/[\\/]\.opencode[\\/]opencode\.jsonc?$/.test(resolved2))
+  if (/[\\/]\.opencode[\\/]opencode\.jsonc?$/.test(resolved))
     return true;
-  if (/[\\/]\.opencode[\\/]plugins[\\/][^/\\]+\.(?:mjs|js|ts)$/.test(resolved2))
+  if (/[\\/]\.opencode[\\/]plugins[\\/][^/\\]+\.(?:mjs|js|ts)$/.test(resolved))
     return true;
-  if (/[\\/]\.config[\\/]opencode[\\/]opencode\.jsonc?$/.test(resolved2))
+  if (/[\\/]\.config[\\/]opencode[\\/]opencode\.jsonc?$/.test(resolved))
     return true;
-  if (/[\\/]\.config[\\/]opencode[\\/]config\.json$/.test(resolved2))
+  if (/[\\/]\.config[\\/]opencode[\\/]config\.json$/.test(resolved))
     return true;
-  if (/[\\/]\.config[\\/]opencode[\\/]plugins[\\/][^/\\]+\.(?:mjs|js|ts)$/.test(resolved2))
+  if (/[\\/]\.config[\\/]opencode[\\/]plugins[\\/][^/\\]+\.(?:mjs|js|ts)$/.test(resolved))
     return true;
-  if (/[\\/]\.pi[\\/](?:agent[\\/])?settings\.json$/.test(resolved2))
+  if (/[\\/]\.pi[\\/](?:agent[\\/])?settings\.json$/.test(resolved))
     return true;
-  if (/[\\/]\.pi[\\/](?:agent[\\/])?extensions[\\/]/.test(resolved2))
+  if (/[\\/]\.pi[\\/](?:agent[\\/])?extensions[\\/]/.test(resolved))
     return true;
-  if (/[\\/]\.gemini[\\/]settings\.json$/.test(resolved2))
+  if (/[\\/]\.gemini[\\/]settings\.json$/.test(resolved))
     return true;
-  if (/[\\/]\.gemini[\\/]config[\\/]hooks\.json$/.test(resolved2))
+  if (/[\\/]\.gemini[\\/]config[\\/]hooks\.json$/.test(resolved))
     return true;
   return false;
 }
@@ -2246,20 +2254,20 @@ function blockReadOutsideCwd(ctx) {
     if (!READ_LIKE_CMDS.test(cmd))
       return allow();
     const paths = extractAbsolutePaths(cmd);
-    const cwdWithSep2 = cwd.endsWith("/") ? cwd : cwd + "/";
+    const cwdWithSep = cwd.endsWith("/") ? cwd : cwd + "/";
     for (const p of paths) {
-      const resolved3 = resolve3(cwd, p);
-      if (isClaudeSettingsFile(resolved3)) {
-        return deny(`Reading agent settings file blocked: ${resolved3}`);
+      const resolved = resolve3(cwd, p);
+      if (isClaudeSettingsFile(resolved)) {
+        return deny(`Reading agent settings file blocked: ${resolved}`);
       }
-      if (isClaudeInternalPath(resolved3))
+      if (isClaudeInternalPath(resolved))
         continue;
-      if (resolved3 === "/dev/null")
+      if (resolved === "/dev/null")
         continue;
-      if (resolved3 !== cwd && !resolved3.startsWith(cwdWithSep2)) {
-        if (allowPaths.some((ap) => resolved3 === ap || resolved3.startsWith(ap.endsWith("/") ? ap : ap + "/")))
+      if (resolved !== cwd && !resolved.startsWith(cwdWithSep)) {
+        if (allowPaths.some((ap) => resolved === ap || resolved.startsWith(ap.endsWith("/") ? ap : ap + "/")))
           continue;
-        return deny(`Bash read outside project directory blocked: ${resolved3}`);
+        return deny(`Bash read outside project directory blocked: ${resolved}`);
       }
     }
     return allow();
@@ -2269,19 +2277,19 @@ function blockReadOutsideCwd(ctx) {
   const target = filePath || searchPath;
   if (!target)
     return allow();
-  const resolved2 = resolve3(cwd, target);
-  if (isClaudeSettingsFile(resolved2)) {
-    return deny(`Reading agent settings file blocked: ${resolved2}`);
+  const resolved = resolve3(cwd, target);
+  if (isClaudeSettingsFile(resolved)) {
+    return deny(`Reading agent settings file blocked: ${resolved}`);
   }
-  if (isClaudeInternalPath(resolved2))
+  if (isClaudeInternalPath(resolved))
     return allow();
-  if (resolved2 === "/dev/null")
+  if (resolved === "/dev/null")
     return allow();
   const cwdWithSep = cwd.endsWith("/") ? cwd : cwd + "/";
-  if (resolved2 !== cwd && !resolved2.startsWith(cwdWithSep)) {
-    if (allowPaths.some((ap) => resolved2 === ap || resolved2.startsWith(ap.endsWith("/") ? ap : ap + "/")))
+  if (resolved !== cwd && !resolved.startsWith(cwdWithSep)) {
+    if (allowPaths.some((ap) => resolved === ap || resolved.startsWith(ap.endsWith("/") ? ap : ap + "/")))
       return allow();
-    return deny(`Access outside project directory blocked: ${resolved2}`);
+    return deny(`Access outside project directory blocked: ${resolved}`);
   }
   return allow();
 }
@@ -2797,15 +2805,39 @@ var init_builtin_policies = __esm(() => {
   SHELL_METACHAR_RE = /[;&<>`$()\\]/;
   JWT_RE = /eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/;
   API_KEY_PATTERNS = [
+    [/sk-ant-api03-[A-Za-z0-9\-_]{20,}/, "Anthropic API key"],
+    [/sk-ant-oat01-[A-Za-z0-9\-_]{20,}/, "Anthropic OAuth token"],
     [/sk-ant-[A-Za-z0-9\-_]{20,}/, "Anthropic API key"],
     [/sk-proj-[A-Za-z0-9\-_]{20,}/, "OpenAI project API key"],
-    [/sk-[A-Za-z0-9]{20,}/, "OpenAI API key"],
-    [/ghp_[A-Za-z0-9]{36}/, "GitHub personal access token"],
+    [/sk-svcacct-[A-Za-z0-9\-_]{20,}/, "OpenAI service-account key"],
+    [/sk-admin-[A-Za-z0-9\-_]{20,}/, "OpenAI admin key"],
+    [/sk-or-v1-[A-Za-z0-9\-_]{20,}/, "OpenRouter API key"],
+    [/sk-[A-Za-z0-9]{20,}/, "OpenAI-compatible key (issuer unknown)"],
     [/github_pat_[A-Za-z0-9_]{82}/, "GitHub fine-grained token"],
+    [/ghp_[A-Za-z0-9]{36}/, "GitHub personal access token"],
+    [/gho_[A-Za-z0-9]{36}/, "GitHub OAuth token"],
+    [/ghu_[A-Za-z0-9]{36}/, "GitHub user-to-server token"],
+    [/ghs_[A-Za-z0-9]{36}/, "GitHub server-to-server token"],
+    [/ghr_[A-Za-z0-9]{36}/, "GitHub refresh token"],
+    [/glpat-[A-Za-z0-9\-_]{20,}/, "GitLab personal access token"],
     [/AKIA[A-Z0-9]{16}/, "AWS access key ID"],
+    [/ASIA[A-Z0-9]{16}/, "AWS temporary access key ID"],
     [/sk_live_[A-Za-z0-9]{24,}/, "Stripe live secret key"],
     [/sk_test_[A-Za-z0-9]{24,}/, "Stripe test secret key"],
-    [/AIza[0-9A-Za-z\-_]{35}/, "Google API key"]
+    [/rk_live_[A-Za-z0-9]{24,}/, "Stripe restricted key"],
+    [/AIza[0-9A-Za-z\-_]{35}/, "Google API key"],
+    [/\d{8,10}:[A-Za-z0-9_-]{35}/, "Telegram bot token"],
+    [/xox[baprs]-[A-Za-z0-9-]{10,}/, "Slack token"],
+    [/xapp-[0-9]-[A-Za-z0-9-]{10,}/, "Slack app-level token"],
+    [/hf_[A-Za-z0-9]{30,}/, "Hugging Face token"],
+    [/gsk_[A-Za-z0-9]{40,}/, "Groq API key"],
+    [/r8_[A-Za-z0-9]{30,}/, "Replicate token"],
+    [/xai-[A-Za-z0-9]{40,}/, "xAI API key"],
+    [/npm_[A-Za-z0-9]{36}/, "npm access token"],
+    [/dop_v1_[a-f0-9]{64}/, "DigitalOcean token"],
+    [/shpat_[a-fA-F0-9]{32}/, "Shopify access token"],
+    [/sb_secret_[A-Za-z0-9\-_]{20,}/, "Supabase secret key"],
+    [/sbp_[a-f0-9]{40}/, "Supabase personal token"]
   ];
   CONNECTION_STRING_RE = /(?:postgresql|postgres|mysql|mongodb(?:\+srv)?|redis|amqps?|smtps?):\/\/[^@\s]+@/;
   PRIVATE_KEY_RE = /-----BEGIN (?:[A-Z]+ )?PRIVATE KEY-----/;
@@ -3302,10 +3334,10 @@ function parsePackPolicy(packId, value, index) {
   }
   const matchShape = raw.match;
   for (const key of ["events", "toolNames"]) {
-    const value2 = matchShape[key];
-    if (value2 === undefined)
+    const value = matchShape[key];
+    if (value === undefined)
       continue;
-    if (!Array.isArray(value2) || value2.some((e) => typeof e !== "string" || e.length === 0)) {
+    if (!Array.isArray(value) || value.some((e) => typeof e !== "string" || e.length === 0)) {
       throw new Error(`${where} has a match.${key} that is not a list of names`);
     }
   }
@@ -3467,15 +3499,15 @@ function parsePackPolicyName(canonicalName) {
   if (slash <= 0)
     return null;
   const idWithVersion = rest.slice(0, slash);
-  const at2 = idWithVersion.lastIndexOf("@");
+  const at = idWithVersion.lastIndexOf("@");
   return {
-    packId: at2 > 0 ? idWithVersion.slice(0, at2) : idWithVersion,
+    packId: at > 0 ? idWithVersion.slice(0, at) : idWithVersion,
     name: rest.slice(slash + 1)
   };
 }
 
 // package.json
-var version = "1.0.3";
+var version = "1.0.4-beta.2";
 var init_package = () => {};
 
 // src/posthog-key.ts
@@ -3579,7 +3611,8 @@ function projectConfig(parsed) {
     const daemon = parsed.daemon ?? {};
     const collector = parsed.collector ?? {};
     const telemetry = parsed.telemetry ?? {};
-    const audit = parsed.audit ?? {};
+    const auditPresent = !!parsed.audit && typeof parsed.audit === "object" && !Array.isArray(parsed.audit);
+    const audit = auditPresent ? parsed.audit : {};
     return {
       mode: mode === "cloud" ? "cloud" : "oss",
       daemon: { configured: daemon.configured === true },
@@ -3594,7 +3627,8 @@ function projectConfig(parsed) {
       },
       telemetry: { enabled: telemetry.enabled !== false },
       audit: {
-        auto: audit.auto === true,
+        auto: auditPresent && audit.auto !== false,
+        notify: audit.notify !== false,
         intervalDays: readIntervalDays(audit.interval_days),
         reportsConsentedAt: typeof audit.reports_consented_at === "number" && Number.isFinite(audit.reports_consented_at) ? audit.reports_consented_at : undefined
       }
@@ -3616,7 +3650,7 @@ var init_fp_config = __esm(() => {
       environment: "local"
     },
     telemetry: { enabled: true },
-    audit: { auto: false, intervalDays: DEFAULT_AUDIT_INTERVAL_DAYS }
+    audit: { auto: false, notify: true, intervalDays: DEFAULT_AUDIT_INTERVAL_DAYS }
   };
 });
 
@@ -4192,12 +4226,12 @@ You MUST complete the above action NOW. Do NOT ask the user for confirmation —
     const policyNames = instructEntries.map((e) => e.policyName);
     if (session?.cli === "cursor") {
       if (eventType === "Stop" || eventType === "SubagentStop") {
-        const response3 = {
+        const response = {
           followup_message: `Instruction from failproofai: ${combined}`
         };
         return {
           exitCode: 0,
-          stdout: JSON.stringify(response3),
+          stdout: JSON.stringify(response),
           stderr: "",
           policyName: policyNames[0],
           policyNames,
@@ -4205,13 +4239,13 @@ You MUST complete the above action NOW. Do NOT ask the user for confirmation —
           decision: "instruct"
         };
       }
-      const response2 = {
+      const response = {
         permission: "allow",
         additional_context: `Instruction from failproofai: ${combined}`
       };
       return {
         exitCode: 0,
-        stdout: JSON.stringify(response2),
+        stdout: JSON.stringify(response),
         stderr: "",
         policyName: policyNames[0],
         policyNames,
@@ -4235,13 +4269,13 @@ You MUST complete the above action(s) NOW. Do NOT ask the user for confirmation
           decision: "instruct"
         };
       }
-      const response2 = {
+      const response = {
         permission: "allow",
         reason: `Instruction from failproofai: ${combined}`
       };
       return {
         exitCode: 0,
-        stdout: JSON.stringify(response2),
+        stdout: JSON.stringify(response),
         stderr: "",
         policyName: policyNames[0],
         policyNames,
@@ -4466,12 +4500,12 @@ You MUST complete the above action(s) NOW. Do NOT ask the user for confirmation
         permission: "allow",
         additional_context: `Note from failproofai: ${combined}`
       };
-      const stderrMsg2 = allowEntries.map((e) => `[failproofai] ${e.policyName}: ${e.reason}`).join(`
+      const stderrMsg = allowEntries.map((e) => `[failproofai] ${e.policyName}: ${e.reason}`).join(`
 `);
       return {
         exitCode: 0,
         stdout: JSON.stringify(response),
-        stderr: stderrMsg2 + `
+        stderr: stderrMsg + `
 `,
         policyName: policyNames[0],
         policyNames,
@@ -4484,12 +4518,12 @@ You MUST complete the above action(s) NOW. Do NOT ask the user for confirmation
         permission: "allow",
         reason: `Note from failproofai: ${combined}`
       };
-      const stderrMsg2 = allowEntries.map((e) => `[failproofai] ${e.policyName}: ${e.reason}`).join(`
+      const stderrMsg = allowEntries.map((e) => `[failproofai] ${e.policyName}: ${e.reason}`).join(`
 `);
       return {
         exitCode: 0,
         stdout: JSON.stringify(response),
-        stderr: stderrMsg2 + `
+        stderr: stderrMsg + `
 `,
         policyName: policyNames[0],
         policyNames,
@@ -4498,7 +4532,7 @@ You MUST complete the above action(s) NOW. Do NOT ask the user for confirmation
       };
     }
     if (session?.cli === "openclaw") {
-      const stderrMsg2 = allowEntries.map((e) => `[failproofai] ${e.policyName}: ${e.reason}`).join(`
+      const stderrMsg = allowEntries.map((e) => `[failproofai] ${e.policyName}: ${e.reason}`).join(`
 `);
       return {
         exitCode: 0,
@@ -4506,7 +4540,7 @@ You MUST complete the above action(s) NOW. Do NOT ask the user for confirmation
           permission: "allow",
           reason: `Note from failproofai: ${combined}`
         }),
-        stderr: stderrMsg2 + `
+        stderr: stderrMsg + `
 `,
         policyName: policyNames[0],
         policyNames,
@@ -4573,21 +4607,21 @@ async function sweepStaleTmpArtifacts(dir, now = Date.now()) {
     for (const name of await readdir(dir)) {
       if (!isTmpArtifact(name))
         continue;
-      const path2 = resolve6(dir, name);
+      const path = resolve6(dir, name);
       try {
-        const info = await stat(path2);
+        const info = await stat(path);
         if (now - info.mtimeMs < TMP_SWEEP_MIN_AGE_MS)
           continue;
-        await unlink(path2);
+        await unlink(path);
         removed++;
       } catch {}
     }
   } catch {}
   return removed;
 }
-async function fileExists(path2) {
+async function fileExists(path) {
   try {
-    await access(path2);
+    await access(path);
     return true;
   } catch {
     return false;
@@ -4650,8 +4684,8 @@ async function createEsmShim(_distIndex, distUrl, tmpSuffix = TMP_SUFFIX) {
     if (!st.isDirectory() || st.isSymbolicLink() || uid !== null && st.uid !== uid || st.mode & 63) {
       throw new Error(`${dir} is not a private directory owned by this user`);
     }
-    const shimPath2 = await writeShim(dir, name, shimCode, false);
-    return { shimPath: shimPath2, shimUrl: pathToFileURL(shimPath2).href };
+    const shimPath = await writeShim(dir, name, shimCode, false);
+    return { shimPath, shimUrl: pathToFileURL(shimPath).href };
   } catch (err) {
     hookLogWarn(`policy shim directory unusable (${err instanceof Error ? err.message : String(err)}); falling back to ${tmpdir()}`);
   }
@@ -4699,13 +4733,13 @@ async function rewriteFileTree(entryPath, distUrl, distIndex, tmpSuffix = TMP_SU
         const specifier = match[2];
         if (rewrites.has(specifier))
           continue;
-        const resolved2 = await resolveLocalImport(dir, specifier);
-        if (!resolved2)
+        const resolved = await resolveLocalImport(dir, specifier);
+        if (!resolved)
           continue;
-        if (!visited.has(resolved2) && !queue.includes(resolved2)) {
-          queue.push(resolved2);
+        if (!visited.has(resolved) && !queue.includes(resolved)) {
+          queue.push(resolved);
         }
-        let relPath = relative2(dir, resolved2 + tmpSuffix).split("\\").join("/");
+        let relPath = relative2(dir, resolved + tmpSuffix).split("\\").join("/");
         if (!relPath.startsWith("."))
           relPath = "./" + relPath;
         rewrites.set(specifier, relPath);
@@ -5021,8 +5055,8 @@ async function loadAllCustomHooks(customPoliciesPaths, opts) {
     }
   }
   const packAliases = new Map;
-  for (const [path2, ids] of packIdsByPath) {
-    const winner = packByPath.get(path2);
+  for (const [path, ids] of packIdsByPath) {
+    const winner = packByPath.get(path);
     if (winner && ids.length > 1)
       packAliases.set(winner.id, ids);
   }
@@ -5177,6 +5211,234 @@ var init_delivery_health = __esm(() => {
   CREDENTIAL_STATUSES = new Set([401, 403]);
 });
 
+// src/hooks/notice.ts
+function shapeNotice(cli, notice, existingStdout = "") {
+  const empty = { stdout: existingStdout, stderr: "" };
+  if (!notice.trim() || !cli)
+    return empty;
+  const channel = NOTICE_CHANNEL[cli] ?? "none";
+  const text = notice.length > MAX_NOTICE_CHARS ? notice.slice(0, MAX_NOTICE_CHARS - 1) + "…" : notice;
+  switch (channel) {
+    case "systemMessage": {
+      if (existingStdout.trim().startsWith("{")) {
+        try {
+          const parsed = JSON.parse(existingStdout);
+          parsed.systemMessage = text;
+          return { stdout: JSON.stringify(parsed), stderr: "" };
+        } catch {
+          return empty;
+        }
+      }
+      if (existingStdout.trim())
+        return empty;
+      return { stdout: JSON.stringify({ systemMessage: text }), stderr: "" };
+    }
+    case "stderr":
+      return { stdout: existingStdout, stderr: text + `
+` };
+    case "stdout":
+      if (existingStdout.trim())
+        return empty;
+      return { stdout: text + `
+`, stderr: "" };
+    default:
+      return empty;
+  }
+}
+function canDeliverNotice(cli) {
+  return !!cli && (NOTICE_CHANNEL[cli] ?? "none") !== "none";
+}
+function leakNoticeText(newFindings) {
+  const n = newFindings === 1 ? "a credential" : `${newFindings} credentials`;
+  return `failproofai found ${n} in this project's agent transcripts.
+` + "Run `failproofai audit` to see the details, " + "or `failproofai audit --schedule` to get these by email.";
+}
+var NOTICE_CHANNEL, MAX_NOTICE_CHARS = 900;
+var init_notice = __esm(() => {
+  NOTICE_CHANNEL = {
+    claude: "systemMessage",
+    codex: "systemMessage",
+    copilot: "stderr",
+    factory: "stdout"
+  };
+});
+
+// lib/atomic-write.ts
+import {
+  chmodSync as chmodSync2,
+  existsSync as existsSync8,
+  mkdirSync as mkdirSync5,
+  renameSync as renameSync3,
+  rmSync as rmSync2,
+  statSync as statSync6,
+  writeFileSync as writeFileSync4
+} from "node:fs";
+import { dirname as dirname3 } from "node:path";
+import { randomBytes } from "node:crypto";
+function writeJsonAtomically(filePath, value, opts = {}) {
+  const mode = opts.mode ?? 384;
+  const dirMode = opts.dirMode ?? 448;
+  const dir = dirname3(filePath);
+  if (!existsSync8(dir))
+    mkdirSync5(dir, { recursive: true, mode: dirMode });
+  const tmp = `${filePath}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
+  try {
+    writeFileSync4(tmp, JSON.stringify(value, null, 2), { mode });
+    try {
+      if ((statSync6(tmp).mode & 63) !== 0)
+        chmodSync2(tmp, mode);
+    } catch {}
+    renameSync3(tmp, filePath);
+    try {
+      if ((statSync6(filePath).mode & 63) !== 0)
+        chmodSync2(filePath, mode);
+    } catch {}
+  } catch (err) {
+    try {
+      rmSync2(tmp, { force: true });
+    } catch {}
+    throw err;
+  }
+}
+var init_atomic_write = () => {};
+
+// src/audit/leak-record.ts
+function emptyRecord(salt, nowIso) {
+  return {
+    schemaVersion: LEAK_RECORD_SCHEMA_VERSION,
+    salt,
+    updatedAt: nowIso,
+    findings: []
+  };
+}
+var LEAK_RECORD_SCHEMA_VERSION = 1;
+
+// src/audit/leak-fingerprint.ts
+function isFindingId(id) {
+  return /^[0-9a-f]{16}$/.test(id);
+}
+var init_leak_fingerprint = () => {};
+
+// src/audit/leak-store.ts
+import { randomBytes as randomBytes2 } from "node:crypto";
+import { existsSync as existsSync9, mkdirSync as mkdirSync6, readFileSync as readFileSync6 } from "node:fs";
+import { dirname as dirname4 } from "node:path";
+function readJson(path) {
+  try {
+    if (!existsSync9(path))
+      return null;
+    return JSON.parse(readFileSync6(path, "utf8"));
+  } catch {
+    return null;
+  }
+}
+function readLeakIdentity(home) {
+  const existing = readJson(auditLeakIdentityFile(home));
+  if (existing && typeof existing.salt === "string" && existing.salt.length >= 32) {
+    return { salt: existing.salt, dismissed: existing.dismissed ?? [] };
+  }
+  const minted = { salt: randomBytes2(32).toString("hex"), dismissed: [] };
+  writeLeakIdentity(minted, home);
+  return minted;
+}
+function writeLeakIdentity(identity, home) {
+  const path = auditLeakIdentityFile(home);
+  try {
+    mkdirSync6(dirname4(path), { recursive: true });
+    writeJsonAtomically(path, identity, { mode: FILE_MODE });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function sanitizeFinding(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return null;
+  const f = raw;
+  if (typeof f.id !== "string" || !isFindingId(f.id))
+    return null;
+  const fp = f.fingerprint;
+  if (!fp || typeof fp !== "object" || typeof fp.display !== "string" || typeof fp.label !== "string") {
+    return null;
+  }
+  const sightings = Array.isArray(f.sightings) ? f.sightings.filter((s) => {
+    if (!s || typeof s !== "object")
+      return false;
+    const m = s.mechanism;
+    return !!m && typeof m === "object" && typeof m.summary === "string";
+  }) : [];
+  return {
+    ...f,
+    fingerprint: {
+      display: fp.display,
+      label: fp.label,
+      length: typeof fp.length === "number" && Number.isFinite(fp.length) ? fp.length : 0,
+      attributed: fp.attributed === true
+    },
+    name: typeof f.name === "string" ? f.name : null,
+    firstSeen: typeof f.firstSeen === "string" ? f.firstSeen : "",
+    lastSeen: typeof f.lastSeen === "string" ? f.lastSeen : "",
+    occurrences: typeof f.occurrences === "number" && Number.isFinite(f.occurrences) ? f.occurrences : sightings.length,
+    sightings
+  };
+}
+function readLeakRecord(home) {
+  const identity = readLeakIdentity(home);
+  const raw = readJson(auditLeaksFile(home));
+  if (!raw || raw.schemaVersion !== LEAK_RECORD_SCHEMA_VERSION || !Array.isArray(raw.findings)) {
+    return emptyRecord(identity.salt, new Date().toISOString());
+  }
+  const findings = raw.findings.map(sanitizeFinding).filter((f) => f !== null);
+  return { ...raw, findings, salt: identity.salt };
+}
+function activeFindings(record, home) {
+  const dismissed = new Set(readLeakIdentity(home).dismissed);
+  return record.findings.filter((f) => !dismissed.has(f.id)).sort((a, b) => a.lastSeen < b.lastSeen ? 1 : a.lastSeen > b.lastSeen ? -1 : 0);
+}
+var FILE_MODE = 384;
+var init_leak_store = __esm(() => {
+  init_fp_home();
+  init_atomic_write();
+  init_leak_fingerprint();
+});
+
+// src/audit/leak-notice.ts
+import { existsSync as existsSync10, mkdirSync as mkdirSync7, readdirSync as readdirSync3, statSync as statSync7, writeFileSync as writeFileSync5, rmSync as rmSync3 } from "node:fs";
+import { resolve as resolve8 } from "node:path";
+function pendingLeakNotice(home, channel = "cli") {
+  try {
+    const dir = NOTICE_DIR(home, channel);
+    const claimed = new Set(existsSync10(dir) ? readdirSync3(dir) : []);
+    const ids = activeFindings(readLeakRecord(home), home).map((f) => f.id).filter((id) => !claimed.has(id));
+    return { ids, count: ids.length };
+  } catch {
+    return { ids: [], count: 0 };
+  }
+}
+function markLeakNoticeDelivered(ids, home, channel = "cli") {
+  const won = [];
+  try {
+    const dir = NOTICE_DIR(home, channel);
+    mkdirSync7(dir, { recursive: true });
+    for (const id of ids) {
+      if (!isFindingId(id))
+        continue;
+      try {
+        writeFileSync5(resolve8(dir, id), "", { flag: "wx", mode: 384 });
+        won.push(id);
+      } catch {}
+    }
+  } catch {}
+  return won;
+}
+var NOTICE_DIR = (home, channel = "cli") => resolve8(auditDir(home), channel === "cli" ? "notified" : `notified-${channel}`), MARKER_TTL_MS;
+var init_leak_notice = __esm(() => {
+  init_fp_home();
+  init_leak_store();
+  init_leak_fingerprint();
+  MARKER_TTL_MS = 120 * 86400000;
+});
+
 // src/hooks/resolve-cwd.ts
 function resolveCwd(integration, parsed) {
   const direct = typeof parsed.cwd === "string" && parsed.cwd.length > 0 ? parsed.cwd : undefined;
@@ -5234,12 +5496,12 @@ function decodeFolderName(name) {
   }
   return name.replace(/-/g, "/");
 }
-function encodeFolderName(path2) {
-  const driveMatch = /^([A-Za-z]):[\\/](.*)$/.exec(path2);
+function encodeFolderName(path) {
+  const driveMatch = /^([A-Za-z]):[\\/](.*)$/.exec(path);
   if (driveMatch) {
     return driveMatch[1] + "--" + driveMatch[2].replace(/[\\/]/g, "-");
   }
-  return path2.replace(/[\\/]/g, "-");
+  return path.replace(/[\\/]/g, "-");
 }
 function getClaudeProjectsPath() {
   const envPath = process.env.CLAUDE_PROJECTS_PATH;
@@ -5312,12 +5574,7 @@ function formatDate(date) {
 // lib/codex-projects.ts
 var exports_codex_projects = {};
 __export(exports_codex_projects, {
-  getCachedCodexProjects: () => getCachedCodexProjects,
-  getCachedCodexSessionsByEncodedName: () => getCachedCodexSessionsByEncodedName,
-  getCachedCodexSessionsForCwd: () => getCachedCodexSessionsForCwd,
-  getCodexProjects: () => getCodexProjects,
-  getCodexSessionsByEncodedName: () => getCodexSessionsByEncodedName,
-  getCodexSessionsForCwd: () => getCodexSessionsForCwd
+  getCodexProjects: () => getCodexProjects
 });
 import { open, readdir } from "node:fs/promises";
 import { homedir as homedir5 } from "node:os";
@@ -5511,12 +5768,7 @@ var init_codex_projects = __esm(() => {
 // lib/copilot-projects.ts
 var exports_copilot_projects = {};
 __export(exports_copilot_projects, {
-  getCachedCopilotProjects: () => getCachedCopilotProjects,
-  getCachedCopilotSessionsByEncodedName: () => getCachedCopilotSessionsByEncodedName,
-  getCachedCopilotSessionsForCwd: () => getCachedCopilotSessionsForCwd,
-  getCopilotProjects: () => getCopilotProjects,
-  getCopilotSessionsByEncodedName: () => getCopilotSessionsByEncodedName,
-  getCopilotSessionsForCwd: () => getCopilotSessionsForCwd
+  getCopilotProjects: () => getCopilotProjects
 });
 import { readdir as readdir2, readFile as readFile4, stat } from "node:fs/promises";
 import { homedir as homedir6 } from "node:os";
@@ -5537,9 +5789,9 @@ function parseCwdFromWorkspace(text) {
     return;
   return m[1].replace(/^['"]|['"]$/g, "");
 }
-async function statMtime(path2) {
+async function statMtime(path) {
   try {
-    return (await stat(path2)).mtime;
+    return (await stat(path)).mtime;
   } catch {
     return null;
   }
@@ -5659,12 +5911,7 @@ var init_copilot_projects = __esm(() => {
 // lib/cursor-projects.ts
 var exports_cursor_projects = {};
 __export(exports_cursor_projects, {
-  getCachedCursorProjects: () => getCachedCursorProjects,
-  getCachedCursorSessionsByEncodedName: () => getCachedCursorSessionsByEncodedName,
-  getCachedCursorSessionsForCwd: () => getCachedCursorSessionsForCwd,
-  getCursorProjects: () => getCursorProjects,
-  getCursorSessionsByEncodedName: () => getCursorSessionsByEncodedName,
-  getCursorSessionsForCwd: () => getCursorSessionsForCwd
+  getCursorProjects: () => getCursorProjects
 });
 import { readdir as readdir3, readFile as readFile5, stat as stat2 } from "node:fs/promises";
 import { homedir as homedir7 } from "node:os";
@@ -5679,9 +5926,9 @@ async function safeReaddir3(dir) {
     return null;
   }
 }
-async function statMtime2(path2) {
+async function statMtime2(path) {
   try {
-    return (await stat2(path2)).mtime;
+    return (await stat2(path)).mtime;
   } catch {
     return null;
   }
@@ -5702,26 +5949,26 @@ function parseCwdFromMetaText(text) {
 }
 async function findFirstUsableMeta(dir, candidates) {
   for (const name of candidates) {
-    const path2 = join8(dir, name);
-    if (await statMtime2(path2) === null)
+    const path = join8(dir, name);
+    if (await statMtime2(path) === null)
       continue;
     let text;
     try {
-      text = await readFile5(path2, "utf-8");
+      text = await readFile5(path, "utf-8");
     } catch {
       continue;
     }
     const cwd = parseCwdFromMetaText(text);
     if (cwd)
-      return { path: path2, cwd };
+      return { path, cwd };
   }
   return null;
 }
 async function findFirstExistingPath(dir, candidates) {
   for (const name of candidates) {
-    const path2 = join8(dir, name);
-    if (await statMtime2(path2) !== null)
-      return path2;
+    const path = join8(dir, name);
+    if (await statMtime2(path) !== null)
+      return path;
   }
   return null;
 }
@@ -5881,7 +6128,7 @@ var init_cursor_projects = __esm(() => {
 });
 
 // lib/sqlite-reader.ts
-import { existsSync as existsSync8, readFileSync as readFileSync6 } from "node:fs";
+import { existsSync as existsSync11, readFileSync as readFileSync7 } from "node:fs";
 import initSqlJs from "sql.js/dist/sql-asm.js";
 async function tryNodeSqlite(dbPath) {
   try {
@@ -5908,7 +6155,7 @@ function loadSqlJs() {
 async function trySqlJs(dbPath) {
   try {
     const SQL = await loadSqlJs();
-    const db = new SQL.Database(readFileSync6(dbPath));
+    const db = new SQL.Database(readFileSync7(dbPath));
     return {
       query(sql, params) {
         const stmt = db.prepare(sql);
@@ -5932,7 +6179,7 @@ async function trySqlJs(dbPath) {
   }
 }
 async function openSqliteReadonly(dbPath) {
-  if (!existsSync8(dbPath))
+  if (!existsSync11(dbPath))
     return null;
   return await tryNodeSqlite(dbPath) ?? await trySqlJs(dbPath);
 }
@@ -5972,12 +6219,7 @@ var init_opencode_db = __esm(() => {
 // lib/opencode-projects.ts
 var exports_opencode_projects = {};
 __export(exports_opencode_projects, {
-  getCachedOpenCodeProjects: () => getCachedOpenCodeProjects,
-  getCachedOpenCodeSessionsByEncodedName: () => getCachedOpenCodeSessionsByEncodedName,
-  getCachedOpenCodeSessionsForCwd: () => getCachedOpenCodeSessionsForCwd,
-  getOpenCodeProjects: () => getOpenCodeProjects,
-  getOpenCodeSessionsByEncodedName: () => getOpenCodeSessionsByEncodedName,
-  getOpenCodeSessionsForCwd: () => getOpenCodeSessionsForCwd
+  getOpenCodeProjects: () => getOpenCodeProjects
 });
 async function readSessionRows() {
   return queryOpenCodeDb("SELECT id, project_id, slug, directory, title, time_created, time_updated FROM session ORDER BY time_updated DESC LIMIT ?", [SESSION_LIMIT]);
@@ -6017,11 +6259,11 @@ async function getOpenCodeProjects() {
     const proj = projectMap.get(projectId);
     const worktree = proj?.worktree ?? group.rows[0]?.directory ?? null;
     const name = worktree ? encodeFolderName(worktree) : projectId;
-    const path2 = worktree ?? "";
+    const path = worktree ?? "";
     const lastModified = new Date(Math.max(group.latest, proj?.time_updated ?? 0));
     out.push({
       name,
-      path: path2,
+      path,
       isDirectory: true,
       lastModified,
       lastModifiedFormatted: formatDate(lastModified),
@@ -6106,12 +6348,7 @@ var init_opencode_projects = __esm(() => {
 // lib/pi-projects.ts
 var exports_pi_projects = {};
 __export(exports_pi_projects, {
-  getCachedPiProjects: () => getCachedPiProjects,
-  getCachedPiSessionsByEncodedName: () => getCachedPiSessionsByEncodedName,
-  getCachedPiSessionsForCwd: () => getCachedPiSessionsForCwd,
-  getPiProjects: () => getPiProjects,
-  getPiSessionsByEncodedName: () => getPiSessionsByEncodedName,
-  getPiSessionsForCwd: () => getPiSessionsForCwd
+  getPiProjects: () => getPiProjects
 });
 import { readdir as readdir4, readFile as readFile6, stat as stat3 } from "node:fs/promises";
 import { homedir as homedir9 } from "node:os";
@@ -6126,9 +6363,9 @@ async function safeReaddir4(dir) {
     return null;
   }
 }
-async function statMtime3(path2) {
+async function statMtime3(path) {
   try {
-    return (await stat3(path2)).mtime;
+    return (await stat3(path)).mtime;
   } catch {
     return null;
   }
@@ -6277,16 +6514,16 @@ var init_pi_projects = __esm(() => {
 });
 
 // lib/hermes-profiles.ts
-import { readdirSync as readdirSync3 } from "node:fs";
+import { readdirSync as readdirSync4 } from "node:fs";
 import { homedir as homedir10 } from "node:os";
-import { basename as basename2, dirname as dirname3, join as join11, resolve as resolve8 } from "node:path";
+import { basename as basename2, dirname as dirname5, join as join11, resolve as resolve9 } from "node:path";
 function hermesRoot() {
   const env = (process.env.HERMES_HOME || "").trim();
   if (env) {
-    const home = resolve8(env);
-    const parent = dirname3(home);
+    const home = resolve9(env);
+    const parent = dirname5(home);
     if (basename2(parent) === PROFILES_DIR)
-      return dirname3(parent);
+      return dirname5(parent);
     return home;
   }
   return join11(homedir10(), ".hermes");
@@ -6297,7 +6534,7 @@ function listHermesProfiles() {
   const seen = new Set([HERMES_DEFAULT_PROFILE]);
   let names;
   try {
-    names = readdirSync3(join11(root, PROFILES_DIR), { withFileTypes: true }).filter((e) => (e.isDirectory() || e.isSymbolicLink()) && !e.name.startsWith(".")).map((e) => e.name).sort();
+    names = readdirSync4(join11(root, PROFILES_DIR), { withFileTypes: true }).filter((e) => (e.isDirectory() || e.isSymbolicLink()) && !e.name.startsWith(".")).map((e) => e.name).sort();
   } catch {
     return out;
   }
@@ -6345,9 +6582,9 @@ function formatDuration(ms) {
   }
   const totalSeconds = Math.round(ms / 1000);
   if (totalSeconds < 3600) {
-    const minutes2 = Math.floor(totalSeconds / 60);
+    const minutes = Math.floor(totalSeconds / 60);
     const seconds = totalSeconds % 60;
-    return `${minutes2}m ${seconds}s`;
+    return `${minutes}m ${seconds}s`;
   }
   const totalMinutes = Math.round(ms / 60000);
   const hours = Math.floor(totalMinutes / 60);
@@ -6538,12 +6775,7 @@ var init_hermes_sessions = __esm(() => {
 // lib/hermes-projects.ts
 var exports_hermes_projects = {};
 __export(exports_hermes_projects, {
-  getCachedHermesProjects: () => getCachedHermesProjects,
-  getCachedHermesSessions: () => getCachedHermesSessions,
-  getCachedHermesSessionsByEncodedName: () => getCachedHermesSessionsByEncodedName,
-  getHermesProjects: () => getHermesProjects,
-  getHermesSessions: () => getHermesSessions,
-  getHermesSessionsByEncodedName: () => getHermesSessionsByEncodedName
+  getHermesProjects: () => getHermesProjects
 });
 async function getHermesSessions() {
   const out = [];
@@ -6660,7 +6892,7 @@ var init_hermes_projects = __esm(() => {
 
 // lib/openclaw-sessions.ts
 import { readFile as readFile7 } from "node:fs/promises";
-import { readdirSync as readdirSync4, statSync as statSync6 } from "node:fs";
+import { readdirSync as readdirSync5, statSync as statSync8 } from "node:fs";
 import { homedir as homedir11 } from "node:os";
 import { join as join13 } from "node:path";
 function openclawHome() {
@@ -6779,7 +7011,7 @@ function openclawLinesToLogEntries(lines, source = "session") {
 }
 function listOpenClawAgents() {
   try {
-    return readdirSync4(join13(openclawHome(), "agents"), { withFileTypes: true }).filter((d) => d.isDirectory() && !d.name.startsWith(".")).map((d) => d.name).sort();
+    return readdirSync5(join13(openclawHome(), "agents"), { withFileTypes: true }).filter((d) => d.isDirectory() && !d.name.startsWith(".")).map((d) => d.name).sort();
   } catch {
     return [];
   }
@@ -6789,7 +7021,7 @@ function listOpenClawTranscripts() {
   const out = [];
   let agentIds;
   try {
-    agentIds = readdirSync4(agentsDir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
+    agentIds = readdirSync5(agentsDir, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name);
   } catch {
     return out;
   }
@@ -6797,7 +7029,7 @@ function listOpenClawTranscripts() {
     const sessionsDir = join13(agentsDir, agentId, "sessions");
     let files;
     try {
-      files = readdirSync4(sessionsDir);
+      files = readdirSync5(sessionsDir);
     } catch {
       continue;
     }
@@ -6809,7 +7041,7 @@ function listOpenClawTranscripts() {
         continue;
       const transcriptPath = join13(sessionsDir, file);
       try {
-        const st = statSync6(transcriptPath);
+        const st = statSync8(transcriptPath);
         out.push({ agentId, sessionId, transcriptPath, mtimeMs: st.mtimeMs, sizeBytes: st.size });
       } catch {}
     }
@@ -6856,18 +7088,9 @@ var init_openclaw_sessions = __esm(() => {
 // lib/openclaw-projects.ts
 var exports_openclaw_projects = {};
 __export(exports_openclaw_projects, {
-  getCachedOpenClawProjects: () => getCachedOpenClawProjects,
-  getCachedOpenClawSessions: () => getCachedOpenClawSessions,
-  getCachedOpenClawSessionsByEncodedName: () => getCachedOpenClawSessionsByEncodedName,
-  getOpenClawProjects: () => getOpenClawProjects,
-  getOpenClawSessions: () => getOpenClawSessions,
-  getOpenClawSessionsByEncodedName: () => getOpenClawSessionsByEncodedName,
-  openClawProjectName: () => openClawProjectName,
-  openClawProjectNameCandidates: () => openClawProjectNameCandidates,
-  openClawProjectPath: () => openClawProjectPath,
-  parseOpenClawProjectName: () => parseOpenClawProjectName
+  getOpenClawProjects: () => getOpenClawProjects
 });
-import { readFileSync as readFileSync7 } from "node:fs";
+import { readFileSync as readFileSync8 } from "node:fs";
 import { join as join14 } from "node:path";
 function str(v) {
   return typeof v === "string" && v.length > 0 ? v : undefined;
@@ -6877,7 +7100,7 @@ function readSessionsIndex(agentId) {
   const indexPath = join14(openclawHome(), "agents", agentId, "sessions", "sessions.json");
   let raw;
   try {
-    raw = JSON.parse(readFileSync7(indexPath, "utf-8"));
+    raw = JSON.parse(readFileSync8(indexPath, "utf-8"));
   } catch {
     return out;
   }
@@ -6951,9 +7174,6 @@ function openClawProjectNameCandidates(name) {
   out.push({ agentId: null, channel: rest });
   return out;
 }
-function parseOpenClawProjectName(name) {
-  return openClawProjectNameCandidates(name)[0] ?? null;
-}
 async function getOpenClawProjects() {
   const sessions = await getOpenClawSessions();
   const groups = new Map;
@@ -7029,7 +7249,7 @@ var init_openclaw_projects = __esm(() => {
 
 // lib/factory-sessions.ts
 import { readFile as readFile8 } from "node:fs/promises";
-import { readdirSync as readdirSync5, statSync as statSync7 } from "node:fs";
+import { readdirSync as readdirSync6, statSync as statSync9 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
 import { join as join15 } from "node:path";
 function factoryHome() {
@@ -7175,7 +7395,7 @@ function listFactoryTranscripts() {
   const out = [];
   let projectDirs;
   try {
-    projectDirs = readdirSync5(root, { withFileTypes: true }).filter((d) => d.isDirectory());
+    projectDirs = readdirSync6(root, { withFileTypes: true }).filter((d) => d.isDirectory());
   } catch {
     return out;
   }
@@ -7185,7 +7405,7 @@ function listFactoryTranscripts() {
     const projectPath = join15(root, projectName);
     let files;
     try {
-      files = readdirSync5(projectPath);
+      files = readdirSync6(projectPath);
     } catch {
       continue;
     }
@@ -7197,7 +7417,7 @@ function listFactoryTranscripts() {
         continue;
       const transcriptPath = join15(projectPath, file);
       try {
-        const st = statSync7(transcriptPath);
+        const st = statSync9(transcriptPath);
         out.push({ projectName, cwd, sessionId, transcriptPath, mtimeMs: st.mtimeMs, sizeBytes: st.size });
       } catch {}
     }
@@ -7245,10 +7465,7 @@ var init_factory_sessions = __esm(() => {
 // lib/factory-projects.ts
 var exports_factory_projects = {};
 __export(exports_factory_projects, {
-  getCachedFactoryProjects: () => getCachedFactoryProjects,
-  getCachedFactorySessionsByEncodedName: () => getCachedFactorySessionsByEncodedName,
-  getFactoryProjects: () => getFactoryProjects,
-  getFactorySessionsByEncodedName: () => getFactorySessionsByEncodedName
+  getFactoryProjects: () => getFactoryProjects
 });
 async function getFactoryProjects() {
   let transcripts;
@@ -7476,14 +7693,14 @@ function devinActiveConversationPath(rows) {
     if (typeof r.node_id === "number")
       byId.set(r.node_id, r);
   let cur = rows.reduce((a, b) => (a.node_id ?? -1) > (b.node_id ?? -1) ? a : b);
-  const path2 = [];
+  const path = [];
   const seen = new Set;
   while (cur && typeof cur.node_id === "number" && !seen.has(cur.node_id)) {
     seen.add(cur.node_id);
-    path2.push(cur);
+    path.push(cur);
     cur = cur.parent_node_id != null ? byId.get(cur.parent_node_id) : undefined;
   }
-  return path2.reverse();
+  return path.reverse();
 }
 function parseNodeRows(rows) {
   const out = [];
@@ -7535,12 +7752,7 @@ var init_devin_sessions = __esm(() => {
 // lib/devin-projects.ts
 var exports_devin_projects = {};
 __export(exports_devin_projects, {
-  getCachedDevinProjects: () => getCachedDevinProjects,
-  getCachedDevinSessions: () => getCachedDevinSessions,
-  getCachedDevinSessionsByEncodedName: () => getCachedDevinSessionsByEncodedName,
-  getDevinProjects: () => getDevinProjects,
-  getDevinSessions: () => getDevinSessions,
-  getDevinSessionsByEncodedName: () => getDevinSessionsByEncodedName
+  getDevinProjects: () => getDevinProjects
 });
 async function getDevinSessions() {
   const db = await openSqliteReadonly(devinDbPath());
@@ -7624,7 +7836,7 @@ var init_devin_projects = __esm(() => {
 
 // lib/antigravity-sessions.ts
 import { readFile as readFile9 } from "node:fs/promises";
-import { readdirSync as readdirSync6, statSync as statSync8 } from "node:fs";
+import { readdirSync as readdirSync7, statSync as statSync10 } from "node:fs";
 import { homedir as homedir14 } from "node:os";
 import { join as join17 } from "node:path";
 function antigravityHome() {
@@ -7697,9 +7909,9 @@ function antigravityLinesToLogEntries(lines, source = "session") {
           const block = { type: "tool_use", id, name, input };
           blocks.push(block);
           const key = name.toUpperCase();
-          const queue2 = pendingByType.get(key) ?? [];
-          queue2.push({ block, startMs: date.getTime() });
-          pendingByType.set(key, queue2);
+          const queue = pendingByType.get(key) ?? [];
+          queue.push({ block, startMs: date.getTime() });
+          pendingByType.set(key, queue);
         }
       }
       if (blocks.length === 0)
@@ -7749,7 +7961,7 @@ function listAntigravityTranscripts() {
   const out = [];
   let convoDirs;
   try {
-    convoDirs = readdirSync6(root, { withFileTypes: true }).filter((d) => d.isDirectory());
+    convoDirs = readdirSync7(root, { withFileTypes: true }).filter((d) => d.isDirectory());
   } catch {
     return out;
   }
@@ -7759,7 +7971,7 @@ function listAntigravityTranscripts() {
       continue;
     const transcriptPath = join17(root, conversationId, rel);
     try {
-      const st = statSync8(transcriptPath);
+      const st = statSync10(transcriptPath);
       if (!st.isFile())
         continue;
       out.push({ conversationId, transcriptPath, mtimeMs: st.mtimeMs, sizeBytes: st.size });
@@ -7772,7 +7984,7 @@ function findAntigravityTranscript(conversationId) {
     return null;
   const transcriptPath = join17(antigravityBrainRoot(), conversationId, antigravityTranscriptRelPath());
   try {
-    if (statSync8(transcriptPath).isFile())
+    if (statSync10(transcriptPath).isFile())
       return transcriptPath;
   } catch {}
   return null;
@@ -7803,12 +8015,7 @@ var init_antigravity_sessions = __esm(() => {
 // lib/antigravity-projects.ts
 var exports_antigravity_projects = {};
 __export(exports_antigravity_projects, {
-  antigravitySummariesDbPath: () => antigravitySummariesDbPath,
-  getAntigravityIndex: () => getAntigravityIndex,
-  getAntigravityProjects: () => getAntigravityProjects,
-  getAntigravitySessionsByEncodedName: () => getAntigravitySessionsByEncodedName,
-  getCachedAntigravityProjects: () => getCachedAntigravityProjects,
-  getCachedAntigravitySessionsByEncodedName: () => getCachedAntigravitySessionsByEncodedName
+  getAntigravityProjects: () => getAntigravityProjects
 });
 import { join as join18 } from "node:path";
 function antigravitySummariesDbPath() {
@@ -7900,18 +8107,18 @@ async function getAntigravityProjects() {
   const byName = new Map;
   for (const c of conversations) {
     const name = c.cwd ? encodeFolderName(c.cwd) : ANTIGRAVITY_UNGROUPED;
-    const path2 = c.cwd ?? "antigravity";
+    const path = c.cwd ?? "antigravity";
     const existing = byName.get(name);
     if (!existing || c.mtimeMs > existing.latest) {
-      byName.set(name, { latest: c.mtimeMs, path: path2 });
+      byName.set(name, { latest: c.mtimeMs, path });
     }
   }
   const folders = [];
-  for (const [name, { latest, path: path2 }] of byName) {
+  for (const [name, { latest, path }] of byName) {
     const lastModified = new Date(latest);
     folders.push({
       name,
-      path: path2,
+      path,
       isDirectory: true,
       lastModified,
       lastModifiedFormatted: formatDate(lastModified),
@@ -8142,12 +8349,7 @@ var init_goose_sessions = __esm(() => {
 // lib/goose-projects.ts
 var exports_goose_projects = {};
 __export(exports_goose_projects, {
-  getCachedGooseProjects: () => getCachedGooseProjects,
-  getCachedGooseSessions: () => getCachedGooseSessions,
-  getCachedGooseSessionsByEncodedName: () => getCachedGooseSessionsByEncodedName,
-  getGooseProjects: () => getGooseProjects,
-  getGooseSessions: () => getGooseSessions,
-  getGooseSessionsByEncodedName: () => getGooseSessionsByEncodedName
+  getGooseProjects: () => getGooseProjects
 });
 async function getGooseSessions() {
   const db = await openSqliteReadonly(gooseDbPath());
@@ -8232,10 +8434,10 @@ var init_goose_projects = __esm(() => {
 
 // lib/projects.ts
 import { readdir as readdir5, stat as stat4 } from "node:fs/promises";
-import { join as join20, resolve as resolve9, sep } from "node:path";
-async function getMtime(path2, label) {
+import { join as join20, resolve as resolve10, sep } from "node:path";
+async function getMtime(path, label) {
   try {
-    return (await stat4(path2)).mtime;
+    return (await stat4(path)).mtime;
   } catch (error) {
     logWarn(`Failed to stat ${label}:`, error);
     return new Date(0);
@@ -8306,17 +8508,17 @@ function mergeProjectFolders(...sources) {
 }
 async function getProjectFolders() {
   const [
-    { getCodexProjects: getCodexProjects2 },
-    { getCopilotProjects: getCopilotProjects2 },
-    { getCursorProjects: getCursorProjects2 },
-    { getOpenCodeProjects: getOpenCodeProjects2 },
-    { getPiProjects: getPiProjects2 },
-    { getHermesProjects: getHermesProjects2 },
-    { getOpenClawProjects: getOpenClawProjects2 },
-    { getFactoryProjects: getFactoryProjects2 },
-    { getDevinProjects: getDevinProjects2 },
-    { getAntigravityProjects: getAntigravityProjects2 },
-    { getGooseProjects: getGooseProjects2 }
+    { getCodexProjects },
+    { getCopilotProjects },
+    { getCursorProjects },
+    { getOpenCodeProjects },
+    { getPiProjects },
+    { getHermesProjects },
+    { getOpenClawProjects },
+    { getFactoryProjects },
+    { getDevinProjects },
+    { getAntigravityProjects },
+    { getGooseProjects }
   ] = await Promise.all([
     Promise.resolve().then(() => (init_codex_projects(), exports_codex_projects)),
     Promise.resolve().then(() => (init_copilot_projects(), exports_copilot_projects)),
@@ -8332,47 +8534,47 @@ async function getProjectFolders() {
   ]);
   const [claude, codex, copilot, cursor, opencode, pi, hermes, openclaw, factory, devin, antigravity, goose] = await Promise.all([
     getClaudeProjectFolders(),
-    getCodexProjects2().catch((error) => {
+    getCodexProjects().catch((error) => {
       logError("Error reading Codex projects:", error);
       return [];
     }),
-    getCopilotProjects2().catch((error) => {
+    getCopilotProjects().catch((error) => {
       logError("Error reading Copilot projects:", error);
       return [];
     }),
-    getCursorProjects2().catch((error) => {
+    getCursorProjects().catch((error) => {
       logError("Error reading Cursor projects:", error);
       return [];
     }),
-    getOpenCodeProjects2().catch((error) => {
+    getOpenCodeProjects().catch((error) => {
       logError("Error reading OpenCode projects:", error);
       return [];
     }),
-    getPiProjects2().catch((error) => {
+    getPiProjects().catch((error) => {
       logError("Error reading Pi projects:", error);
       return [];
     }),
-    getHermesProjects2().catch((error) => {
+    getHermesProjects().catch((error) => {
       logError("Error reading Hermes projects:", error);
       return [];
     }),
-    getOpenClawProjects2().catch((error) => {
+    getOpenClawProjects().catch((error) => {
       logError("Error reading OpenClaw projects:", error);
       return [];
     }),
-    getFactoryProjects2().catch((error) => {
+    getFactoryProjects().catch((error) => {
       logError("Error reading Factory projects:", error);
       return [];
     }),
-    getDevinProjects2().catch((error) => {
+    getDevinProjects().catch((error) => {
       logError("Error reading Devin projects:", error);
       return [];
     }),
-    getAntigravityProjects2().catch((error) => {
+    getAntigravityProjects().catch((error) => {
       logError("Error reading Antigravity projects:", error);
       return [];
     }),
-    getGooseProjects2().catch((error) => {
+    getGooseProjects().catch((error) => {
       logError("Error reading Goose projects:", error);
       return [];
     })
@@ -8384,8 +8586,8 @@ function resolveProjectPath(projectName) {
     throw new RangeError("Empty project name");
   if (/^[/\\]/.test(projectName))
     throw new RangeError("Absolute project name");
-  const projectsPath = resolve9(getClaudeProjectsPath());
-  const candidate = resolve9(join20(projectsPath, projectName));
+  const projectsPath = resolve10(getClaudeProjectsPath());
+  const candidate = resolve10(join20(projectsPath, projectName));
   if (!candidate.startsWith(projectsPath + sep)) {
     throw new RangeError("Project path escapes root");
   }
@@ -8691,30 +8893,30 @@ var init_log_entries = __esm(() => {
 });
 
 // lib/codex-sessions.ts
-import { readFileSync as readFileSync8, readdirSync as readdirSync7, existsSync as existsSync9, writeFileSync as writeFileSync4, mkdirSync as mkdirSync5, statSync as statSync9 } from "node:fs";
+import { readFileSync as readFileSync9, readdirSync as readdirSync8, existsSync as existsSync12, writeFileSync as writeFileSync6, mkdirSync as mkdirSync8, statSync as statSync11 } from "node:fs";
 import { readFile as readFile11 } from "node:fs/promises";
-import { dirname as dirname4, join as join23 } from "node:path";
+import { dirname as dirname6, join as join23 } from "node:path";
 import { homedir as homedir16 } from "node:os";
 function readCache() {
   try {
-    if (!existsSync9(CACHE_PATH))
+    if (!existsSync12(CACHE_PATH))
       return {};
-    return JSON.parse(readFileSync8(CACHE_PATH, "utf-8"));
+    return JSON.parse(readFileSync9(CACHE_PATH, "utf-8"));
   } catch {
     return {};
   }
 }
-function writeCacheEntry(sessionId, path2) {
+function writeCacheEntry(sessionId, path) {
   try {
-    mkdirSync5(dirname4(CACHE_PATH), { recursive: true });
+    mkdirSync8(dirname6(CACHE_PATH), { recursive: true });
     const cache = readCache();
-    cache[sessionId] = path2;
-    writeFileSync4(CACHE_PATH, JSON.stringify(cache), "utf-8");
+    cache[sessionId] = path;
+    writeFileSync6(CACHE_PATH, JSON.stringify(cache), "utf-8");
   } catch {}
 }
 function dirSearch(dir, sessionId) {
   try {
-    for (const f of readdirSync7(dir, { withFileTypes: true })) {
+    for (const f of readdirSync8(dir, { withFileTypes: true })) {
       if (f.isFile() && f.name.includes(sessionId) && f.name.endsWith(".jsonl")) {
         return join23(dir, f.name);
       }
@@ -8725,7 +8927,7 @@ function dirSearch(dir, sessionId) {
 function findCodexTranscript(sessionId) {
   const cache = readCache();
   const cached = cache[sessionId];
-  if (cached && existsSync9(cached))
+  if (cached && existsSync12(cached))
     return cached;
   const root = join23(homedir16(), ".codex", "sessions");
   const today = new Date;
@@ -8744,13 +8946,13 @@ function findCodexTranscript(sessionId) {
     }
   }
   try {
-    for (const y of readdirSync7(root, { withFileTypes: true })) {
+    for (const y of readdirSync8(root, { withFileTypes: true })) {
       if (!y.isDirectory())
         continue;
-      for (const m of readdirSync7(join23(root, y.name), { withFileTypes: true })) {
+      for (const m of readdirSync8(join23(root, y.name), { withFileTypes: true })) {
         if (!m.isDirectory())
           continue;
-        for (const d of readdirSync7(join23(root, y.name, m.name), { withFileTypes: true })) {
+        for (const d of readdirSync8(join23(root, y.name, m.name), { withFileTypes: true })) {
           if (!d.isDirectory())
             continue;
           const hit = dirSearch(join23(root, y.name, m.name, d.name), sessionId);
@@ -8979,7 +9181,7 @@ var init_codex_sessions = __esm(() => {
 });
 
 // src/hooks/resolve-permission-mode.ts
-import { readFileSync as readFileSync9 } from "node:fs";
+import { readFileSync as readFileSync10 } from "node:fs";
 function resolvePermissionMode(integration, parsed, sessionId) {
   if (integration === "claude") {
     return parsed.permission_mode ?? "default";
@@ -8991,10 +9193,10 @@ function resolvePermissionMode(integration, parsed, sessionId) {
 }
 function resolveCodexMode(sessionId) {
   try {
-    const path2 = findCodexTranscript(sessionId);
-    if (!path2)
+    const path = findCodexTranscript(sessionId);
+    if (!path)
       return;
-    for (const line of readFileSync9(path2, "utf-8").split(`
+    for (const line of readFileSync10(path, "utf-8").split(`
 `)) {
       if (!line.includes("turn_context"))
         continue;
@@ -9019,9 +9221,9 @@ var init_resolve_permission_mode = __esm(() => {
 });
 
 // lib/copilot-sessions.ts
-import { readFileSync as readFileSync10, readdirSync as readdirSync8, existsSync as existsSync10, statSync as statSync10 } from "node:fs";
+import { readFileSync as readFileSync11, readdirSync as readdirSync9, existsSync as existsSync13, statSync as statSync12 } from "node:fs";
 import { readFile as readFile12 } from "node:fs/promises";
-import { join as join24, resolve as resolve10, sep as sep2 } from "node:path";
+import { join as join24, resolve as resolve11, sep as sep2 } from "node:path";
 import { homedir as homedir17 } from "node:os";
 function getCopilotHome() {
   return process.env.COPILOT_HOME || join24(homedir17(), ".copilot");
@@ -9032,8 +9234,8 @@ function getCopilotSessionStateRoot2() {
 function getCopilotSessionDir(sessionId) {
   if (!sessionId)
     return null;
-  const root = resolve10(getCopilotSessionStateRoot2());
-  const candidate = resolve10(root, sessionId);
+  const root = resolve11(getCopilotSessionStateRoot2());
+  const candidate = resolve11(root, sessionId);
   if (candidate === root || !candidate.startsWith(`${root}${sep2}`))
     return null;
   return candidate;
@@ -9048,17 +9250,17 @@ function findCopilotTranscript(sessionId) {
   const candidate = resolveSessionFile(sessionId, "events.jsonl");
   if (!candidate)
     return null;
-  return existsSync10(candidate) ? candidate : null;
+  return existsSync13(candidate) ? candidate : null;
 }
 function findCopilotWorkspace(sessionId) {
   const candidate = resolveSessionFile(sessionId, "workspace.yaml");
   if (!candidate)
     return null;
-  return existsSync10(candidate) ? candidate : null;
+  return existsSync13(candidate) ? candidate : null;
 }
-function readYamlScalar(path2, key) {
+function readYamlScalar(path, key) {
   try {
-    const text = readFileSync10(path2, "utf-8");
+    const text = readFileSync11(path, "utf-8");
     const re = new RegExp(`^${key}\\s*:\\s*(.+?)\\s*$`, "m");
     const m = text.match(re);
     if (!m)
@@ -9069,10 +9271,10 @@ function readYamlScalar(path2, key) {
   }
 }
 function readCopilotWorkspaceCwd(sessionId) {
-  const path2 = findCopilotWorkspace(sessionId);
-  if (!path2)
+  const path = findCopilotWorkspace(sessionId);
+  if (!path)
     return;
-  return readYamlScalar(path2, "cwd");
+  return readYamlScalar(path, "cwd");
 }
 async function parseCopilotLog(fileContent, source = "session") {
   const lines = fileContent.split(`
@@ -9236,9 +9438,9 @@ var init_copilot_sessions = __esm(() => {
 });
 
 // lib/cursor-sessions.ts
-import { readFileSync as readFileSync11, readdirSync as readdirSync9, existsSync as existsSync11, statSync as statSync11 } from "node:fs";
+import { readFileSync as readFileSync12, readdirSync as readdirSync10, existsSync as existsSync14, statSync as statSync13 } from "node:fs";
 import { readFile as readFile13 } from "node:fs/promises";
-import { basename as basename3, join as join25, resolve as resolve11, sep as sep3 } from "node:path";
+import { basename as basename3, join as join25, resolve as resolve12, sep as sep3 } from "node:path";
 import { homedir as homedir18 } from "node:os";
 function getCursorHome2() {
   return process.env.CURSOR_HOME || join25(homedir18(), ".cursor");
@@ -9246,28 +9448,28 @@ function getCursorHome2() {
 function getCursorSessionDir(sessionId) {
   if (!sessionId)
     return null;
-  const home = resolve11(getCursorHome2());
-  const projectsRoot = resolve11(home, NEW_PROJECTS_DIR2);
+  const home = resolve12(getCursorHome2());
+  const projectsRoot = resolve12(home, NEW_PROJECTS_DIR2);
   let projectEntries = [];
   try {
-    projectEntries = readdirSync9(projectsRoot, { withFileTypes: true });
+    projectEntries = readdirSync10(projectsRoot, { withFileTypes: true });
   } catch {}
   for (const entry of projectEntries) {
     if (!entry.isDirectory())
       continue;
-    const candidate = resolve11(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2, sessionId);
-    const transcriptRoot = resolve11(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2);
+    const candidate = resolve12(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2, sessionId);
+    const transcriptRoot = resolve12(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2);
     if (candidate === transcriptRoot || !candidate.startsWith(`${transcriptRoot}${sep3}`))
       continue;
-    if (existsSync11(candidate))
+    if (existsSync14(candidate))
       return candidate;
   }
   for (const sub of LEGACY_SESSION_ROOT_CANDIDATES2) {
-    const root = resolve11(home, sub);
-    const candidate = resolve11(root, sessionId);
+    const root = resolve12(home, sub);
+    const candidate = resolve12(root, sessionId);
     if (candidate === root || !candidate.startsWith(`${root}${sep3}`))
       continue;
-    if (existsSync11(candidate))
+    if (existsSync14(candidate))
       return candidate;
   }
   return null;
@@ -9277,11 +9479,11 @@ function findCursorTranscript(sessionId) {
   if (!dir)
     return null;
   const newCandidate = join25(dir, `${basename3(dir)}.jsonl`);
-  if (existsSync11(newCandidate))
+  if (existsSync14(newCandidate))
     return newCandidate;
   for (const name of LEGACY_TRANSCRIPT_FILE_CANDIDATES2) {
     const candidate = join25(dir, name);
-    if (existsSync11(candidate))
+    if (existsSync14(candidate))
       return candidate;
   }
   return null;
@@ -9492,9 +9694,9 @@ var init_cursor_sessions = __esm(() => {
 });
 
 // lib/pi-sessions.ts
-import { readFileSync as readFileSync12, readdirSync as readdirSync10, existsSync as existsSync12, statSync as statSync12 } from "node:fs";
+import { readFileSync as readFileSync13, readdirSync as readdirSync11, existsSync as existsSync15, statSync as statSync14 } from "node:fs";
 import { readFile as readFile14 } from "node:fs/promises";
-import { join as join26, resolve as resolve12, sep as sep4 } from "node:path";
+import { join as join26, resolve as resolve13, sep as sep4 } from "node:path";
 import { homedir as homedir19 } from "node:os";
 function getPiSessionStateRoot() {
   return process.env.PI_SESSIONS_DIR || join26(homedir19(), ".pi", "agent", "sessions");
@@ -9505,20 +9707,20 @@ function isSafeSessionId(sessionId) {
 function findPiTranscript(sessionId) {
   if (!isSafeSessionId(sessionId))
     return null;
-  const root = resolve12(getPiSessionStateRoot());
+  const root = resolve13(getPiSessionStateRoot());
   let cwdDirs;
   try {
-    cwdDirs = readdirSync10(root);
+    cwdDirs = readdirSync11(root);
   } catch {
     return null;
   }
   for (const cwdDir of cwdDirs) {
-    const cwdPath = resolve12(root, cwdDir);
+    const cwdPath = resolve13(root, cwdDir);
     if (!cwdPath.startsWith(`${root}${sep4}`))
       continue;
     let files;
     try {
-      files = readdirSync10(cwdPath);
+      files = readdirSync11(cwdPath);
     } catch {
       continue;
     }
@@ -9526,10 +9728,10 @@ function findPiTranscript(sessionId) {
       const m = SESSION_FILE_RE2.exec(f);
       if (!m || m[1].toLowerCase() !== sessionId.toLowerCase())
         continue;
-      const candidate = resolve12(cwdPath, f);
+      const candidate = resolve13(cwdPath, f);
       if (!candidate.startsWith(`${cwdPath}${sep4}`))
         continue;
-      if (existsSync12(candidate))
+      if (existsSync15(candidate))
         return candidate;
     }
   }
@@ -9819,8 +10021,8 @@ function missingGuards(input) {
       continue;
     const loadFailure = input.failed.get(pack.id);
     if (loadFailure && PERMANENT_LOAD_FAILURES.has(loadFailure.type)) {
-      const taken2 = pack.enabled ?? pack.policies.map((p) => p.name);
-      const unavailable = pack.policies.filter((p) => taken2.includes(p.name) && !input.disabled.has(`pack:${pack.id}@${pack.version}:${p.name}`));
+      const taken = pack.enabled ?? pack.policies.map((p) => p.name);
+      const unavailable = pack.policies.filter((p) => taken.includes(p.name) && !input.disabled.has(`pack:${pack.id}@${pack.version}:${p.name}`));
       if (unavailable.length > 0) {
         out.push({
           packId: pack.id,
@@ -9885,17 +10087,14 @@ var init_pack_failclosed = __esm(() => {
   ]);
 });
 
-// lib/atomic-write.ts
-var init_atomic_write = () => {};
-
 // src/hooks/session-pause.ts
-import { existsSync as existsSync13, mkdirSync as mkdirSync6, readdirSync as readdirSync11, readFileSync as readFileSync13, rmSync as rmSync2 } from "node:fs";
+import { existsSync as existsSync16, mkdirSync as mkdirSync9, readdirSync as readdirSync12, readFileSync as readFileSync14, rmSync as rmSync4 } from "node:fs";
 import { createHash as createHash5 } from "node:crypto";
-import { join as join27, resolve as resolve13 } from "node:path";
+import { join as join27, resolve as resolve14 } from "node:path";
 function pauseStateDir() {
   const override = process.env.FAILPROOFAI_STATE_DIR;
   if (override)
-    return resolve13(override, "sessions");
+    return resolve14(override, "sessions");
   return sessionPauseDir();
 }
 function pauseFilePath(sessionId) {
@@ -9928,10 +10127,10 @@ function readActivePause(sessionId, now = Date.now()) {
   if (!sessionId)
     return null;
   try {
-    const path2 = pauseFilePath(sessionId);
-    if (!existsSync13(path2))
+    const path = pauseFilePath(sessionId);
+    if (!existsSync16(path))
       return null;
-    const stored = parseStored(JSON.parse(readFileSync13(path2, "utf8")));
+    const stored = parseStored(JSON.parse(readFileSync14(path, "utf8")));
     if (!stored)
       return null;
     if (stored.expiresAt <= now)
@@ -9970,15 +10169,15 @@ var init_daemon_service = __esm(() => {
 // src/hooks/fp-reset.ts
 import {
   copyFileSync,
-  existsSync as existsSync14,
-  mkdirSync as mkdirSync7,
-  readFileSync as readFileSync14,
-  readdirSync as readdirSync12,
-  renameSync as renameSync3,
-  rmSync as rmSync3,
+  existsSync as existsSync17,
+  mkdirSync as mkdirSync10,
+  readFileSync as readFileSync15,
+  readdirSync as readdirSync13,
+  renameSync as renameSync4,
+  rmSync as rmSync5,
   rmdirSync,
-  statSync as statSync13,
-  writeFileSync as writeFileSync5
+  statSync as statSync15,
+  writeFileSync as writeFileSync7
 } from "node:fs";
 function layoutWarningForHook() {
   const state = detectLayout();
@@ -9987,7 +10186,7 @@ function layoutWarningForHook() {
   if (state.kind === "future") {
     return `[failproofai] this directory was written by a newer version (layout ${state.found} vs ${LAYOUT_VERSION}) — policies are NOT being enforced. ` + `Upgrade failproofai.`;
   }
-  if (existsSync14(globalPolicyConfigFile()))
+  if (existsSync17(globalPolicyConfigFile()))
     return null;
   return `[failproofai] setup predates this version — global policies are NOT being enforced. ` + `Run \`failproofai config\` to re-create it.`;
 }
@@ -10032,6 +10231,31 @@ function canonicalizeEventType(raw, cli) {
   }
   return raw;
 }
+function attachLeakNotice(eventType, cli, outcome) {
+  try {
+    if (!canDeliverNotice(cli))
+      return outcome;
+    if (!cli)
+      return outcome;
+    const canonical = canonicalizeEventType(eventType, cli);
+    if (canonical !== "Stop" && canonical !== "SessionStart")
+      return outcome;
+    const pending = pendingLeakNotice();
+    if (pending.count === 0)
+      return outcome;
+    const shaped = shapeNotice(cli, leakNoticeText(pending.count), outcome.stdout);
+    if (shaped.stdout === outcome.stdout && !shaped.stderr)
+      return outcome;
+    markLeakNoticeDelivered(pending.ids);
+    return {
+      exitCode: outcome.exitCode,
+      stdout: shaped.stdout,
+      stderr: outcome.stderr + shaped.stderr
+    };
+  } catch {
+    return outcome;
+  }
+}
 async function runObserved(hook, ctx, hookName, eventType, cli) {
   try {
     return await Promise.race([
@@ -10196,11 +10420,11 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
             return { decision: "allow" };
           }
           try {
-            const result2 = await Promise.race([
+            const result = await Promise.race([
               hook.fn(ctx),
               new Promise((_, reject) => setTimeout(() => reject(new Error("timeout")), 1e4))
             ]);
-            return result2;
+            return result;
           } catch (err) {
             const msg = err instanceof Error ? err.message : String(err);
             const isTimeout = msg === "timeout";
@@ -10334,7 +10558,12 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
         }
       } catch {}
     }
-    return { exitCode: result.exitCode, stdout: result.stdout, stderr: result.stderr };
+    const withNotice = attachLeakNotice(eventType, cli, {
+      exitCode: result.exitCode,
+      stdout: result.stdout,
+      stderr: result.stderr
+    });
+    return withNotice;
   } finally {
     if (opts?.awaitTelemetryFlush ?? true) {
       await flushHookTelemetry();
@@ -10350,6 +10579,8 @@ var init_handler = __esm(() => {
   init_custom_hooks_loader();
   init_hook_activity_store();
   init_delivery_health();
+  init_notice();
+  init_leak_notice();
   init_hook_telemetry();
   init_resolve_permission_mode();
   init_resolve_transcript_path();
@@ -10363,12 +10594,8 @@ var init_handler = __esm(() => {
 });
 
 // src/hooks/worker-server.ts
-var exports_worker_server = {};
-__export(exports_worker_server, {
-  startWorkerServer: () => startWorkerServer
-});
 import { createConnection, createServer } from "node:net";
-import { existsSync as existsSync15, unlinkSync as unlinkSync2 } from "node:fs";
+import { existsSync as existsSync18, unlinkSync as unlinkSync2 } from "node:fs";
 function isWorkerHookRequest(msg) {
   if (!msg || typeof msg !== "object")
     return false;
@@ -10501,14 +10728,14 @@ function requestExistingWorkerShutdown(socketPath) {
 function startWorkerServer(socketPath, shutdown) {
   const server = createServer((socket) => handleConnection(socket, shutdown ?? (() => server.close())));
   const listen = () => {
-    if (existsSync15(socketPath)) {
+    if (existsSync18(socketPath)) {
       try {
         unlinkSync2(socketPath);
       } catch {}
     }
     server.listen(socketPath);
   };
-  if (!existsSync15(socketPath))
+  if (!existsSync18(socketPath))
     listen();
   else
     requestExistingWorkerShutdown(socketPath).then(listen, (err) => server.emit("error", err));
@@ -10524,21 +10751,21 @@ var init_worker_server = __esm(() => {
 
 // bin/failproofai-worker.mjs
 import { realpathSync as realpathSync2 } from "node:fs";
-import { dirname as dirname5, resolve as resolve14 } from "node:path";
+import { dirname as dirname7, resolve as resolve15 } from "node:path";
 import { fileURLToPath } from "node:url";
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {
-  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve14(dirname5(realpathSync2(fileURLToPath(import.meta.url))), "..");
+  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve15(dirname7(realpathSync2(fileURLToPath(import.meta.url))), "..");
 }
 if (!process.env.FAILPROOFAI_DIST_PATH) {
-  process.env.FAILPROOFAI_DIST_PATH = resolve14(dirname5(realpathSync2(fileURLToPath(import.meta.url))), "..", "dist");
+  process.env.FAILPROOFAI_DIST_PATH = resolve15(dirname7(realpathSync2(fileURLToPath(import.meta.url))), "..", "dist");
 }
 var socketPath = process.env.FAILPROOFAI_WORKER_SOCKET;
 if (!socketPath) {
   console.error("[failproofai-worker] FAILPROOFAI_WORKER_SOCKET is not set");
   process.exit(1);
 }
-var { startWorkerServer: startWorkerServer2 } = await Promise.resolve().then(() => (init_worker_server(), exports_worker_server));
-var server = startWorkerServer2(socketPath, shutdown);
+await Promise.resolve().then(() => init_worker_server());
+var server = startWorkerServer(socketPath, shutdown);
 server.on("error", (err) => {
   console.error(`[failproofai-worker] server error: ${err.message}`);
   process.exit(1);