failproofai 1.0.4-beta.7 → 1.0.4-beta.8

package/dist/cli.mjs

@@ -29,7 +29,7 @@ var __esm = (fn, res, err) => () => {
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // package.json
-var version2 = "1.0.4-beta.7", package_default;
+var version2 = "1.0.4-beta.8", package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "failproofai",
@@ -154,16 +154,16 @@ var init_package = __esm(() => {
       browserslist: "4.28.8"
     },
     optionalDependencies: {
-      "@failproofai/failproofaid-linux-x64": "1.0.4-beta.7",
-      "@failproofai/failproofaid-linux-arm64": "1.0.4-beta.7",
-      "@failproofai/failproofaid-darwin-x64": "1.0.4-beta.7",
-      "@failproofai/failproofaid-darwin-arm64": "1.0.4-beta.7"
+      "@failproofai/failproofaid-linux-x64": "1.0.4-beta.8",
+      "@failproofai/failproofaid-linux-arm64": "1.0.4-beta.8",
+      "@failproofai/failproofaid-darwin-x64": "1.0.4-beta.8",
+      "@failproofai/failproofaid-darwin-arm64": "1.0.4-beta.8"
     },
     failproofaidBinaries: {
-      "linux-x64": "e59735a8f94cd8ac697b2bd67aafdd8d76a8394d53db229876980cc13a18f07e",
-      "linux-arm64": "b9ce50dd2f79b55f4f7112add265a776a4a6d002c2a56f971e666fbb796f3906",
-      "darwin-x64": "b46efc8ec33945a5cc26b7bb288fb87cea65b5983bd83094b5e607d53b8eda4c",
-      "darwin-arm64": "a8cc6112cee5ca8a7d517900e9ce32118855135980f22979fa0ff7aa6f68d954"
+      "linux-x64": "17274c1da30675b49de74953a4ce2777e09ba07b9da79250ab155e5fdb316a0a",
+      "linux-arm64": "a07b228d899914baca1c75024be19c0319eb4fc40c6d5a303ba733bf6721924a",
+      "darwin-x64": "d170fd5604cb419bc83f4a5ab1a6cb5be2f9aec957aed99ce237990aa5d3966f",
+      "darwin-arm64": "0e2bde5bd0762641fa072a6640e485c637b2102f2fb6c1afeca679f005e89679"
     }
   };
 });
@@ -17905,13 +17905,169 @@ var init_hermes_projects = __esm(() => {
   getCachedHermesSessionsByEncodedName = runtimeCache((name) => getHermesSessionsByEncodedName(name), 2, { maxSize: 50 });
 });
 
+// lib/openclaw-db.ts
+import { existsSync as existsSync12 } from "node:fs";
+import { join as join14 } from "node:path";
+function str(value) {
+  return typeof value === "string" && value.length > 0 ? value : undefined;
+}
+function parseObject(value) {
+  try {
+    const parsed = JSON.parse(value);
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : undefined;
+  } catch {
+    return;
+  }
+}
+function syntheticPath(agentId, sessionId) {
+  return `openclaw-sqlite://${encodeURIComponent(agentId)}/${sessionId}`;
+}
+function listOpenClawDatabases(home, agentIds) {
+  const out = [];
+  for (const agentId of agentIds) {
+    const dbPath = join14(home, "agents", agentId, "agent", DB_NAME);
+    if (existsSync12(dbPath))
+      out.push({ agentId, dbPath });
+  }
+  return out;
+}
+function readNodeMetadata(db) {
+  const out = new Map;
+  let rows;
+  try {
+    rows = db.query(`SELECT current_session_id, entry_json, label, display_name
+         FROM session_nodes`);
+  } catch {
+    return out;
+  }
+  for (const row of rows) {
+    const entry = parseObject(row.entry_json) ?? {};
+    const origin = entry.origin && typeof entry.origin === "object" && !Array.isArray(entry.origin) ? entry.origin : {};
+    out.set(row.current_session_id, {
+      channel: str(entry.lastChannel) ?? str(origin.provider) ?? str(origin.surface),
+      label: str(row.label) ?? str(row.display_name) ?? str(entry.displayName) ?? str(origin.label),
+      chatId: str(entry.lastTo) ?? str(origin.from),
+      chatType: str(entry.chatType) ?? str(origin.chatType)
+    });
+  }
+  return out;
+}
+function readConversationMetadata(db) {
+  const out = new Map;
+  let rows;
+  try {
+    rows = db.query(`SELECT sc.session_id, c.channel, c.kind, c.peer_id,
+              c.delivery_target, c.label
+         FROM session_conversations sc
+         JOIN conversations c ON c.conversation_id = sc.conversation_id
+        ORDER BY CASE sc.role WHEN 'primary' THEN 0 ELSE 1 END, sc.last_seen_at DESC`);
+  } catch {
+    return out;
+  }
+  for (const row of rows) {
+    if (out.has(row.session_id))
+      continue;
+    out.set(row.session_id, {
+      channel: str(row.channel),
+      label: str(row.label),
+      chatId: str(row.delivery_target) ?? str(row.peer_id),
+      chatType: str(row.kind)
+    });
+  }
+  return out;
+}
+async function listOpenClawSqliteSessions(home, agentIds) {
+  const sessions = [];
+  for (const { agentId, dbPath } of listOpenClawDatabases(home, agentIds)) {
+    const db = await openSqliteReadonly(dbPath);
+    if (!db)
+      continue;
+    try {
+      let rows;
+      try {
+        rows = db.query(`SELECT w.session_id, w.session_key, w.updated_at,
+                  w.transcript_updated_at, w.ended_at, w.channel,
+                  w.chat_type, w.display_name,
+                  COALESCE((SELECT MAX(e.created_at)
+                              FROM transcript_events e
+                             WHERE e.session_id = w.session_id), 0) AS event_updated_at,
+                  COALESCE((SELECT SUM(length(e.event_json) + 1)
+                              FROM transcript_events e
+                             WHERE e.session_id = w.session_id), 0) AS size_bytes
+             FROM session_windows w
+            WHERE EXISTS (SELECT 1 FROM transcript_events e
+                           WHERE e.session_id = w.session_id)`);
+      } catch {
+        continue;
+      }
+      const nodes = readNodeMetadata(db);
+      const conversations = readConversationMetadata(db);
+      for (const row of rows) {
+        const node = nodes.get(row.session_id);
+        const conversation = conversations.get(row.session_id);
+        sessions.push({
+          sessionId: row.session_id,
+          agentId,
+          dbPath,
+          transcriptPath: syntheticPath(agentId, row.session_id),
+          mtimeMs: Math.max(Number(row.updated_at) || 0, Number(row.transcript_updated_at) || 0, Number(row.ended_at) || 0, Number(row.event_updated_at) || 0),
+          sizeBytes: Number(row.size_bytes) || 0,
+          channel: str(row.channel) ?? conversation?.channel ?? node?.channel ?? "local",
+          label: str(row.display_name) ?? conversation?.label ?? node?.label,
+          chatId: conversation?.chatId ?? node?.chatId,
+          chatType: str(row.chat_type) ?? conversation?.chatType ?? node?.chatType
+        });
+      }
+    } finally {
+      db.close();
+    }
+  }
+  return sessions;
+}
+async function readOpenClawSqliteTranscript(home, agentIds, sessionId) {
+  for (const { agentId, dbPath } of listOpenClawDatabases(home, agentIds)) {
+    const db = await openSqliteReadonly(dbPath);
+    if (!db)
+      continue;
+    try {
+      let rows;
+      try {
+        rows = db.query(`SELECT event_json
+             FROM transcript_events
+            WHERE session_id = ?
+            ORDER BY seq ASC`, [sessionId]);
+      } catch {
+        continue;
+      }
+      if (rows.length === 0)
+        continue;
+      const eventJsonLines = rows.map((row) => row.event_json);
+      const rawLines = eventJsonLines.map(parseObject).filter((line) => line !== undefined);
+      return {
+        agentId,
+        dbPath,
+        filePath: syntheticPath(agentId, sessionId),
+        rawLines,
+        eventJsonLines
+      };
+    } finally {
+      db.close();
+    }
+  }
+  return null;
+}
+var DB_NAME = "openclaw-agent.sqlite";
+var init_openclaw_db = __esm(() => {
+  init_sqlite_reader();
+});
+
 // lib/openclaw-sessions.ts
 import { readFile as readFile7 } from "node:fs/promises";
 import { readdirSync as readdirSync5, statSync as statSync7 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
-import { join as join14 } from "node:path";
+import { join as join15 } from "node:path";
 function openclawHome() {
-  return process.env.OPENCLAW_HOME || join14(homedir12(), ".openclaw");
+  return process.env.OPENCLAW_STATE_DIR || process.env.OPENCLAW_HOME || join15(homedir12(), ".openclaw");
 }
 function isPlainObject3(v) {
   return !!v && typeof v === "object" && !Array.isArray(v);
@@ -17998,7 +18154,11 @@ function openclawLinesToLogEntries(lines, source = "session") {
       entries.push({
         type: "assistant",
         ...base,
-        message: { role: "assistant", content: blocks, model: typeof m.model === "string" ? m.model : undefined }
+        message: {
+          role: "assistant",
+          content: blocks,
+          model: typeof m.model === "string" ? m.model : undefined
+        }
       });
       continue;
     }
@@ -18026,13 +18186,13 @@ function openclawLinesToLogEntries(lines, source = "session") {
 }
 function listOpenClawAgents() {
   try {
-    return readdirSync5(join14(openclawHome(), "agents"), { withFileTypes: true }).filter((d) => d.isDirectory() && !d.name.startsWith(".")).map((d) => d.name).sort();
+    return readdirSync5(join15(openclawHome(), "agents"), { withFileTypes: true }).filter((d) => d.isDirectory() && !d.name.startsWith(".")).map((d) => d.name).sort();
   } catch {
     return [];
   }
 }
 function listOpenClawTranscripts() {
-  const agentsDir = join14(openclawHome(), "agents");
+  const agentsDir = join15(openclawHome(), "agents");
   const out = [];
   let agentIds;
   try {
@@ -18041,7 +18201,7 @@ function listOpenClawTranscripts() {
     return out;
   }
   for (const agentId of agentIds) {
-    const sessionsDir = join14(agentsDir, agentId, "sessions");
+    const sessionsDir = join15(agentsDir, agentId, "sessions");
     let files;
     try {
       files = readdirSync5(sessionsDir);
@@ -18054,10 +18214,16 @@ function listOpenClawTranscripts() {
       const sessionId = file.slice(0, -".jsonl".length);
       if (!OPENCLAW_SESSION_ID_RE.test(sessionId))
         continue;
-      const transcriptPath = join14(sessionsDir, file);
+      const transcriptPath = join15(sessionsDir, file);
       try {
         const st = statSync7(transcriptPath);
-        out.push({ agentId, sessionId, transcriptPath, mtimeMs: st.mtimeMs, sizeBytes: st.size });
+        out.push({
+          agentId,
+          sessionId,
+          transcriptPath,
+          mtimeMs: st.mtimeMs,
+          sizeBytes: st.size
+        });
       } catch {}
     }
   }
@@ -18073,6 +18239,25 @@ function findOpenClawTranscript(sessionId) {
   return null;
 }
 async function getOpenClawSessionLog(sessionId) {
+  if (!OPENCLAW_SESSION_ID_RE.test(sessionId))
+    return null;
+  const sqlite = await readOpenClawSqliteTranscript(openclawHome(), listOpenClawAgents(), sessionId);
+  if (sqlite) {
+    const entries = openclawLinesToLogEntries(sqlite.rawLines, "session");
+    let cwd;
+    for (const line of sqlite.rawLines) {
+      if (line.type === "session" && typeof line.cwd === "string" && line.cwd.length > 0) {
+        cwd = line.cwd;
+        break;
+      }
+    }
+    return {
+      entries,
+      rawLines: sqlite.rawLines,
+      cwd,
+      filePath: sqlite.filePath
+    };
+  }
   const filePath = findOpenClawTranscript(sessionId);
   if (!filePath)
     return null;
@@ -18096,6 +18281,7 @@ async function getOpenClawSessionLog(sessionId) {
 var OPENCLAW_SESSION_ID_RE, getCachedOpenClawSessionLog;
 var init_openclaw_sessions = __esm(() => {
   init_log_entries();
+  init_openclaw_db();
   OPENCLAW_SESSION_ID_RE = /^[0-9a-fA-F-]{36}$/;
   getCachedOpenClawSessionLog = runtimeCache((sessionId) => getOpenClawSessionLog(sessionId), 2, { maxSize: 50 });
 });
@@ -18108,13 +18294,13 @@ __export(exports_openclaw_projects, {
   openClawProjectPath: () => openClawProjectPath
 });
 import { readFileSync as readFileSync9 } from "node:fs";
-import { join as join15 } from "node:path";
-function str(v) {
+import { join as join16 } from "node:path";
+function str2(v) {
   return typeof v === "string" && v.length > 0 ? v : undefined;
 }
 function readSessionsIndex(agentId) {
   const out = new Map;
-  const indexPath = join15(openclawHome(), "agents", agentId, "sessions", "sessions.json");
+  const indexPath = join16(openclawHome(), "agents", agentId, "sessions", "sessions.json");
   let raw;
   try {
     raw = JSON.parse(readFileSync9(indexPath, "utf-8"));
@@ -18127,17 +18313,17 @@ function readSessionsIndex(agentId) {
     if (!v || typeof v !== "object")
       continue;
     const e = v;
-    const sessionId = str(e.sessionId);
+    const sessionId = str2(e.sessionId);
     if (!sessionId)
       continue;
     const origin = e.origin && typeof e.origin === "object" ? e.origin : {};
     const lastMs = typeof e.lastInteractionAt === "number" ? e.lastInteractionAt : typeof e.updatedAt === "number" ? e.updatedAt : undefined;
     out.set(sessionId, {
       lastMs,
-      channel: str(e.lastChannel) ?? str(origin.provider) ?? str(origin.surface),
-      chatType: str(e.chatType) ?? str(origin.chatType),
-      label: str(origin.label),
-      chatId: str(e.lastTo) ?? str(origin.from)
+      channel: str2(e.lastChannel) ?? str2(origin.provider) ?? str2(origin.surface),
+      chatType: str2(e.chatType) ?? str2(origin.chatType),
+      label: str2(origin.label),
+      chatId: str2(e.lastTo) ?? str2(origin.from)
     });
   }
   return out;
@@ -18145,7 +18331,7 @@ function readSessionsIndex(agentId) {
 async function getOpenClawSessions() {
   const transcripts = listOpenClawTranscripts();
   const indexByAgent = new Map;
-  const refs = [];
+  const refs = new Map;
   for (const t of transcripts) {
     let idx = indexByAgent.get(t.agentId);
     if (!idx) {
@@ -18153,7 +18339,7 @@ async function getOpenClawSessions() {
       indexByAgent.set(t.agentId, idx);
     }
     const meta = idx.get(t.sessionId);
-    refs.push({
+    refs.set(`${t.agentId}\x00${t.sessionId}`, {
       sessionId: t.sessionId,
       agentId: t.agentId,
       channel: meta?.channel ?? "local",
@@ -18165,8 +18351,11 @@ async function getOpenClawSessions() {
       sizeBytes: t.sizeBytes
     });
   }
-  refs.sort((a, b) => b.mtimeMs - a.mtimeMs);
-  return refs;
+  const sqliteSessions = await listOpenClawSqliteSessions(openclawHome(), listOpenClawAgents());
+  for (const s of sqliteSessions) {
+    refs.set(`${s.agentId}\x00${s.sessionId}`, s);
+  }
+  return [...refs.values()].sort((a, b) => b.mtimeMs - a.mtimeMs);
 }
 function openClawProjectName(agentId, channel) {
   return `openclaw-${agentId}-${channel}`;
@@ -18201,7 +18390,12 @@ async function getOpenClawProjects() {
       prev.latest = Math.max(prev.latest, s.mtimeMs);
       prev.count += 1;
     } else {
-      groups.set(key, { agentId: s.agentId, channel: s.channel, latest: s.mtimeMs, count: 1 });
+      groups.set(key, {
+        agentId: s.agentId,
+        channel: s.channel,
+        latest: s.mtimeMs,
+        count: 1
+      });
     }
   }
   const out = [];
@@ -18259,6 +18453,7 @@ async function getOpenClawSessionsByEncodedName(name) {
 var getCachedOpenClawSessions, getCachedOpenClawProjects, getCachedOpenClawSessionsByEncodedName;
 var init_openclaw_projects = __esm(() => {
   init_openclaw_sessions();
+  init_openclaw_db();
   getCachedOpenClawSessions = runtimeCache(getOpenClawSessions, 2);
   getCachedOpenClawProjects = runtimeCache(getOpenClawProjects, 2);
   getCachedOpenClawSessionsByEncodedName = runtimeCache((name) => getOpenClawSessionsByEncodedName(name), 2, { maxSize: 50 });
@@ -18268,12 +18463,12 @@ var init_openclaw_projects = __esm(() => {
 import { readFile as readFile8 } from "node:fs/promises";
 import { readdirSync as readdirSync6, statSync as statSync8 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
-import { join as join16 } from "node:path";
+import { join as join17 } from "node:path";
 function factoryHome() {
-  return process.env.FACTORY_HOME || join16(homedir13(), ".factory");
+  return process.env.FACTORY_HOME || join17(homedir13(), ".factory");
 }
 function factorySessionsRoot() {
-  return join16(factoryHome(), "sessions");
+  return join17(factoryHome(), "sessions");
 }
 function isPlainObject4(v) {
   return !!v && typeof v === "object" && !Array.isArray(v);
@@ -18419,7 +18614,7 @@ function listFactoryTranscripts() {
   for (const dir of projectDirs) {
     const projectName = dir.name;
     const cwd = decodeFolderName(projectName);
-    const projectPath = join16(root, projectName);
+    const projectPath = join17(root, projectName);
     let files;
     try {
       files = readdirSync6(projectPath);
@@ -18432,7 +18627,7 @@ function listFactoryTranscripts() {
       const sessionId = file.slice(0, -".jsonl".length);
       if (!FACTORY_SESSION_ID_RE.test(sessionId))
         continue;
-      const transcriptPath = join16(projectPath, file);
+      const transcriptPath = join17(projectPath, file);
       try {
         const st = statSync8(transcriptPath);
         out.push({ projectName, cwd, sessionId, transcriptPath, mtimeMs: st.mtimeMs, sizeBytes: st.size });
@@ -18556,12 +18751,12 @@ var init_factory_projects = __esm(() => {
 
 // lib/devin-sessions.ts
 import { homedir as homedir14 } from "node:os";
-import { join as join17 } from "node:path";
+import { join as join18 } from "node:path";
 function devinHome() {
-  return process.env.DEVIN_HOME || join17(homedir14(), ".local", "share", "devin");
+  return process.env.DEVIN_HOME || join18(homedir14(), ".local", "share", "devin");
 }
 function devinDbPath() {
-  return process.env.DEVIN_DB_PATH || join17(devinHome(), "cli", "sessions.db");
+  return process.env.DEVIN_DB_PATH || join18(devinHome(), "cli", "sessions.db");
 }
 function devinEpochToMs(value) {
   if (typeof value === "number" && Number.isFinite(value)) {
@@ -18856,15 +19051,15 @@ var init_devin_projects = __esm(() => {
 import { readFile as readFile9 } from "node:fs/promises";
 import { readdirSync as readdirSync7, statSync as statSync9 } from "node:fs";
 import { homedir as homedir15 } from "node:os";
-import { join as join18 } from "node:path";
+import { join as join19 } from "node:path";
 function antigravityHome() {
-  return process.env.ANTIGRAVITY_HOME || join18(homedir15(), ".gemini", "antigravity-cli");
+  return process.env.ANTIGRAVITY_HOME || join19(homedir15(), ".gemini", "antigravity-cli");
 }
 function antigravityBrainRoot() {
-  return join18(antigravityHome(), "brain");
+  return join19(antigravityHome(), "brain");
 }
 function antigravityTranscriptRelPath() {
-  return join18(".system_generated", "logs", "transcript_full.jsonl");
+  return join19(".system_generated", "logs", "transcript_full.jsonl");
 }
 function isPlainObject6(v) {
   return !!v && typeof v === "object" && !Array.isArray(v);
@@ -18987,7 +19182,7 @@ function listAntigravityTranscripts() {
     const conversationId = dir.name;
     if (!ANTIGRAVITY_CONVERSATION_ID_RE.test(conversationId))
       continue;
-    const transcriptPath = join18(root, conversationId, rel);
+    const transcriptPath = join19(root, conversationId, rel);
     try {
       const st = statSync9(transcriptPath);
       if (!st.isFile())
@@ -19000,7 +19195,7 @@ function listAntigravityTranscripts() {
 function findAntigravityTranscript(conversationId) {
   if (!ANTIGRAVITY_CONVERSATION_ID_RE.test(conversationId))
     return null;
-  const transcriptPath = join18(antigravityBrainRoot(), conversationId, antigravityTranscriptRelPath());
+  const transcriptPath = join19(antigravityBrainRoot(), conversationId, antigravityTranscriptRelPath());
   try {
     if (statSync9(transcriptPath).isFile())
       return transcriptPath;
@@ -19036,9 +19231,9 @@ __export(exports_antigravity_projects, {
   getAntigravityIndex: () => getAntigravityIndex,
   getAntigravityProjects: () => getAntigravityProjects
 });
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 function antigravitySummariesDbPath() {
-  return join19(antigravityHome(), "conversation_summaries.db");
+  return join20(antigravityHome(), "conversation_summaries.db");
 }
 function parseWorkspaceCwd(raw) {
   if (!raw)
@@ -19182,15 +19377,15 @@ var init_antigravity_projects = __esm(() => {
 
 // lib/goose-sessions.ts
 import { homedir as homedir16 } from "node:os";
-import { join as join20 } from "node:path";
+import { join as join21 } from "node:path";
 function gooseHome() {
   if (process.env.GOOSE_HOME)
     return process.env.GOOSE_HOME;
   const xdg = process.env.XDG_DATA_HOME;
-  return join20(xdg && xdg.length > 0 ? xdg : join20(homedir16(), ".local", "share"), "goose");
+  return join21(xdg && xdg.length > 0 ? xdg : join21(homedir16(), ".local", "share"), "goose");
 }
 function gooseDbPath() {
-  return process.env.GOOSE_DB_PATH || join20(gooseHome(), "sessions", "sessions.db");
+  return process.env.GOOSE_DB_PATH || join21(gooseHome(), "sessions", "sessions.db");
 }
 function gooseTimestampToMs(value) {
   if (typeof value === "number" && Number.isFinite(value)) {
@@ -19454,7 +19649,7 @@ var init_goose_projects = __esm(() => {
 
 // lib/projects.ts
 import { readdir as readdir5, stat as stat4 } from "node:fs/promises";
-import { join as join21, resolve as resolve11, sep } from "node:path";
+import { join as join22, resolve as resolve11, sep } from "node:path";
 async function getMtime(path, label) {
   try {
     return (await stat4(path)).mtime;
@@ -19480,7 +19675,7 @@ async function getClaudeProjectFolders() {
     if (!entries)
       return [];
     const settled = await batchAll(entries.filter((entry) => entry.isDirectory()).map((entry) => async () => {
-      const folderPath = join21(projectsPath, entry.name);
+      const folderPath = join22(projectsPath, entry.name);
       const mtime = await getMtime(folderPath, entry.name);
       return {
         name: entry.name,
@@ -19607,7 +19802,7 @@ function resolveProjectPath(projectName) {
   if (/^[/\\]/.test(projectName))
     throw new RangeError("Absolute project name");
   const projectsPath = resolve11(getClaudeProjectsPath());
-  const candidate = resolve11(join21(projectsPath, projectName));
+  const candidate = resolve11(join22(projectsPath, projectName));
   if (!candidate.startsWith(projectsPath + sep)) {
     throw new RangeError("Project path escapes root");
   }
@@ -19625,7 +19820,7 @@ async function getSessionFiles(projectPath) {
       return [];
     const jsonlEntries = entries.filter((entry) => entry.isFile() && entry.name.endsWith(".jsonl") && extractSessionId2(entry.name));
     const settled = await batchAll(jsonlEntries.map((entry) => async () => {
-      const filePath = join21(projectPath, entry.name);
+      const filePath = join22(projectPath, entry.name);
       const mtime = await getMtime(filePath, entry.name);
       return {
         name: entry.name,
@@ -19654,13 +19849,13 @@ var init_projects = __esm(() => {
 
 // lib/resolve-subagent-path.ts
 import { access as access2 } from "fs/promises";
-import { join as join22, relative as relative3 } from "path";
+import { join as join23, relative as relative3 } from "path";
 async function resolveSubagentPath(projectsPath, projectName, sessionId, agentId) {
   const fileName = `agent-${agentId}.jsonl`;
   const candidatePaths = [
-    join22(projectsPath, projectName, fileName),
-    join22(projectsPath, projectName, sessionId, fileName),
-    join22(projectsPath, projectName, sessionId, "subagents", fileName)
+    join23(projectsPath, projectName, fileName),
+    join23(projectsPath, projectName, sessionId, fileName),
+    join23(projectsPath, projectName, sessionId, "subagents", fileName)
   ];
   for (const candidatePath of candidatePaths) {
     if (relative3(projectsPath, candidatePath).startsWith("..")) {
@@ -19682,7 +19877,7 @@ var init_resolve_subagent_path = () => {};
 
 // lib/log-entries.ts
 import { readFile as readFile10 } from "fs/promises";
-import { join as join23 } from "path";
+import { join as join24 } from "path";
 function formatTimestamp(date) {
   const base = formatDate(date);
   const ms = date.getMilliseconds().toString().padStart(3, "0");
@@ -19880,7 +20075,7 @@ async function parseLogContent(fileContent, source = "session") {
 async function parseSessionLog(projectName, sessionId) {
   const projectDir = resolveProjectPath(projectName);
   const projectsPath = getClaudeProjectsPath();
-  const filePath = join23(projectDir, `${sessionId}.jsonl`);
+  const filePath = join24(projectDir, `${sessionId}.jsonl`);
   const fileContent = await readFile10(filePath, "utf-8");
   const { entries: sessionEntries, rawLines: sessionRawLines, subagentIds } = await parseFileContent(fileContent, "session");
   if (subagentIds.length === 0) {
@@ -19917,13 +20112,13 @@ var init_log_entries = __esm(() => {
 });
 
 // lib/codex-sessions.ts
-import { readFileSync as readFileSync10, readdirSync as readdirSync8, existsSync as existsSync12, writeFileSync as writeFileSync6, mkdirSync as mkdirSync7, statSync as statSync10 } from "node:fs";
+import { readFileSync as readFileSync10, readdirSync as readdirSync8, existsSync as existsSync13, writeFileSync as writeFileSync6, mkdirSync as mkdirSync7, statSync as statSync10 } from "node:fs";
 import { readFile as readFile11 } from "node:fs/promises";
-import { dirname as dirname7, join as join24 } from "node:path";
+import { dirname as dirname7, join as join25 } from "node:path";
 import { homedir as homedir17 } from "node:os";
 function readCache() {
   try {
-    if (!existsSync12(CACHE_PATH))
+    if (!existsSync13(CACHE_PATH))
       return {};
     return JSON.parse(readFileSync10(CACHE_PATH, "utf-8"));
   } catch {
@@ -19942,7 +20137,7 @@ function dirSearch(dir, sessionId) {
   try {
     for (const f of readdirSync8(dir, { withFileTypes: true })) {
       if (f.isFile() && f.name.includes(sessionId) && f.name.endsWith(".jsonl")) {
-        return join24(dir, f.name);
+        return join25(dir, f.name);
       }
     }
   } catch {}
@@ -19951,16 +20146,16 @@ function dirSearch(dir, sessionId) {
 function findCodexTranscript(sessionId) {
   const cache = readCache();
   const cached = cache[sessionId];
-  if (cached && existsSync12(cached))
+  if (cached && existsSync13(cached))
     return cached;
-  const root = join24(homedir17(), ".codex", "sessions");
+  const root = join25(homedir17(), ".codex", "sessions");
   const today = new Date;
   const yesterday = new Date(today.getTime() - 24 * 60 * 60 * 1000);
   const datedDirs = [today, yesterday].map((d) => {
     const y = String(d.getUTCFullYear());
     const m = String(d.getUTCMonth() + 1).padStart(2, "0");
     const day = String(d.getUTCDate()).padStart(2, "0");
-    return join24(root, y, m, day);
+    return join25(root, y, m, day);
   });
   for (const dir of datedDirs) {
     const hit = dirSearch(dir, sessionId);
@@ -19973,13 +20168,13 @@ function findCodexTranscript(sessionId) {
     for (const y of readdirSync8(root, { withFileTypes: true })) {
       if (!y.isDirectory())
         continue;
-      for (const m of readdirSync8(join24(root, y.name), { withFileTypes: true })) {
+      for (const m of readdirSync8(join25(root, y.name), { withFileTypes: true })) {
         if (!m.isDirectory())
           continue;
-        for (const d of readdirSync8(join24(root, y.name, m.name), { withFileTypes: true })) {
+        for (const d of readdirSync8(join25(root, y.name, m.name), { withFileTypes: true })) {
           if (!d.isDirectory())
             continue;
-          const hit = dirSearch(join24(root, y.name, m.name, d.name), sessionId);
+          const hit = dirSearch(join25(root, y.name, m.name, d.name), sessionId);
           if (hit) {
             writeCacheEntry(sessionId, hit);
             return hit;
@@ -20255,15 +20450,15 @@ var init_resolve_permission_mode = __esm(() => {
 });
 
 // lib/copilot-sessions.ts
-import { readFileSync as readFileSync12, readdirSync as readdirSync9, existsSync as existsSync13, statSync as statSync11 } from "node:fs";
+import { readFileSync as readFileSync12, readdirSync as readdirSync9, existsSync as existsSync14, statSync as statSync11 } from "node:fs";
 import { readFile as readFile12 } from "node:fs/promises";
-import { join as join25, resolve as resolve12, sep as sep2 } from "node:path";
+import { join as join26, resolve as resolve12, sep as sep2 } from "node:path";
 import { homedir as homedir18 } from "node:os";
 function getCopilotHome() {
-  return process.env.COPILOT_HOME || join25(homedir18(), ".copilot");
+  return process.env.COPILOT_HOME || join26(homedir18(), ".copilot");
 }
 function getCopilotSessionStateRoot2() {
-  return join25(getCopilotHome(), "session-state");
+  return join26(getCopilotHome(), "session-state");
 }
 function getCopilotSessionDir(sessionId) {
   if (!sessionId)
@@ -20278,19 +20473,19 @@ function resolveSessionFile(sessionId, filename) {
   const dir = getCopilotSessionDir(sessionId);
   if (!dir)
     return null;
-  return join25(dir, filename);
+  return join26(dir, filename);
 }
 function findCopilotTranscript(sessionId) {
   const candidate = resolveSessionFile(sessionId, "events.jsonl");
   if (!candidate)
     return null;
-  return existsSync13(candidate) ? candidate : null;
+  return existsSync14(candidate) ? candidate : null;
 }
 function findCopilotWorkspace(sessionId) {
   const candidate = resolveSessionFile(sessionId, "workspace.yaml");
   if (!candidate)
     return null;
-  return existsSync13(candidate) ? candidate : null;
+  return existsSync14(candidate) ? candidate : null;
 }
 function readYamlScalar(path, key) {
   try {
@@ -20491,12 +20686,12 @@ var init_copilot_sessions = __esm(() => {
 });
 
 // lib/cursor-sessions.ts
-import { readFileSync as readFileSync13, readdirSync as readdirSync10, existsSync as existsSync14, statSync as statSync12 } from "node:fs";
+import { readFileSync as readFileSync13, readdirSync as readdirSync10, existsSync as existsSync15, statSync as statSync12 } from "node:fs";
 import { readFile as readFile13 } from "node:fs/promises";
-import { basename as basename3, join as join26, resolve as resolve13, sep as sep3 } from "node:path";
+import { basename as basename3, join as join27, resolve as resolve13, sep as sep3 } from "node:path";
 import { homedir as homedir19 } from "node:os";
 function getCursorHome2() {
-  return process.env.CURSOR_HOME || join26(homedir19(), ".cursor");
+  return process.env.CURSOR_HOME || join27(homedir19(), ".cursor");
 }
 function getCursorSessionDir(sessionId) {
   if (!sessionId)
@@ -20514,7 +20709,7 @@ function getCursorSessionDir(sessionId) {
     const transcriptRoot = resolve13(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2);
     if (candidate === transcriptRoot || !candidate.startsWith(`${transcriptRoot}${sep3}`))
       continue;
-    if (existsSync14(candidate))
+    if (existsSync15(candidate))
       return candidate;
   }
   for (const sub of LEGACY_SESSION_ROOT_CANDIDATES2) {
@@ -20522,7 +20717,7 @@ function getCursorSessionDir(sessionId) {
     const candidate = resolve13(root, sessionId);
     if (candidate === root || !candidate.startsWith(`${root}${sep3}`))
       continue;
-    if (existsSync14(candidate))
+    if (existsSync15(candidate))
       return candidate;
   }
   return null;
@@ -20531,12 +20726,12 @@ function findCursorTranscript(sessionId) {
   const dir = getCursorSessionDir(sessionId);
   if (!dir)
     return null;
-  const newCandidate = join26(dir, `${basename3(dir)}.jsonl`);
-  if (existsSync14(newCandidate))
+  const newCandidate = join27(dir, `${basename3(dir)}.jsonl`);
+  if (existsSync15(newCandidate))
     return newCandidate;
   for (const name of LEGACY_TRANSCRIPT_FILE_CANDIDATES2) {
-    const candidate = join26(dir, name);
-    if (existsSync14(candidate))
+    const candidate = join27(dir, name);
+    if (existsSync15(candidate))
       return candidate;
   }
   return null;
@@ -20790,12 +20985,12 @@ var init_cursor_sessions = __esm(() => {
 });
 
 // lib/pi-sessions.ts
-import { readFileSync as readFileSync14, readdirSync as readdirSync11, existsSync as existsSync15, statSync as statSync13 } from "node:fs";
+import { readFileSync as readFileSync14, readdirSync as readdirSync11, existsSync as existsSync16, statSync as statSync13 } from "node:fs";
 import { readFile as readFile14 } from "node:fs/promises";
-import { join as join27, resolve as resolve14, sep as sep4 } from "node:path";
+import { join as join28, resolve as resolve14, sep as sep4 } from "node:path";
 import { homedir as homedir20 } from "node:os";
 function getPiSessionStateRoot() {
-  return process.env.PI_SESSIONS_DIR || join27(homedir20(), ".pi", "agent", "sessions");
+  return process.env.PI_SESSIONS_DIR || join28(homedir20(), ".pi", "agent", "sessions");
 }
 function isSafeSessionId(sessionId) {
   return UUID_RE.test(sessionId);
@@ -20827,7 +21022,7 @@ function findPiTranscript(sessionId) {
       const candidate = resolve14(cwdPath, f);
       if (!candidate.startsWith(`${cwdPath}${sep4}`))
         continue;
-      if (existsSync15(candidate))
+      if (existsSync16(candidate))
         return candidate;
     }
   }
@@ -21233,7 +21428,7 @@ var init_pack_failclosed = __esm(() => {
 // lib/atomic-write.ts
 import {
   chmodSync as chmodSync2,
-  existsSync as existsSync16,
+  existsSync as existsSync17,
   mkdirSync as mkdirSync8,
   renameSync as renameSync4,
   rmSync as rmSync3,
@@ -21246,7 +21441,7 @@ function writeJsonAtomically(filePath, value, opts = {}) {
   const mode = opts.mode ?? 384;
   const dirMode = opts.dirMode ?? 448;
   const dir = dirname8(filePath);
-  if (!existsSync16(dir))
+  if (!existsSync17(dir))
     mkdirSync8(dir, { recursive: true, mode: dirMode });
   const tmp = `${filePath}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
   try {
@@ -21270,9 +21465,9 @@ function writeJsonAtomically(filePath, value, opts = {}) {
 var init_atomic_write = () => {};
 
 // src/hooks/session-pause.ts
-import { existsSync as existsSync17, mkdirSync as mkdirSync9, readdirSync as readdirSync12, readFileSync as readFileSync15, rmSync as rmSync4 } from "node:fs";
+import { existsSync as existsSync18, mkdirSync as mkdirSync9, readdirSync as readdirSync12, readFileSync as readFileSync15, rmSync as rmSync4 } from "node:fs";
 import { createHash as createHash6 } from "node:crypto";
-import { join as join28, resolve as resolve15 } from "node:path";
+import { join as join29, resolve as resolve15 } from "node:path";
 function pauseStateDir() {
   const override = process.env.FAILPROOFAI_STATE_DIR;
   if (override)
@@ -21281,7 +21476,7 @@ function pauseStateDir() {
 }
 function pauseFilePath(sessionId) {
   const digest = createHash6("sha256").update(sessionId).digest("hex").slice(0, 32);
-  return join28(pauseStateDir(), `${digest}.json`);
+  return join29(pauseStateDir(), `${digest}.json`);
 }
 function parsePauseDuration(input, ceilingMs = PAUSE_CEILING_MS) {
   if (input === undefined || input === "")
@@ -21337,7 +21532,7 @@ function readActivePause(sessionId, now = Date.now()) {
     return null;
   try {
     const path = pauseFilePath(sessionId);
-    if (!existsSync17(path))
+    if (!existsSync18(path))
       return null;
     const stored = parseStored(JSON.parse(readFileSync15(path, "utf8")));
     if (!stored)
@@ -21368,7 +21563,7 @@ function writePause(opts) {
 }
 function clearPause(sessionId) {
   const path = pauseFilePath(sessionId);
-  if (!existsSync17(path))
+  if (!existsSync18(path))
     return false;
   try {
     rmSync4(path);
@@ -21379,7 +21574,7 @@ function clearPause(sessionId) {
 }
 function listActivePauses(now = Date.now()) {
   const dir = pauseStateDir();
-  if (!existsSync17(dir))
+  if (!existsSync18(dir))
     return [];
   const out = [];
   let names;
@@ -21392,7 +21587,7 @@ function listActivePauses(now = Date.now()) {
     if (!name.endsWith(".json"))
       continue;
     try {
-      const stored = parseStored(JSON.parse(readFileSync15(join28(dir, name), "utf8")));
+      const stored = parseStored(JSON.parse(readFileSync15(join29(dir, name), "utf8")));
       if (!stored || stored.expiresAt <= now)
         continue;
       const { schemaVersion: _ignored, ...pause } = stored;
@@ -21433,7 +21628,7 @@ var init_session_pause = __esm(() => {
 import { createHash as createHash7 } from "node:crypto";
 import {
   chmodSync as chmodSync3,
-  existsSync as existsSync18,
+  existsSync as existsSync19,
   mkdirSync as mkdirSync10,
   readdirSync as readdirSync13,
   readFileSync as readFileSync16,
@@ -21485,7 +21680,7 @@ function platformPackageBinary(dir) {
     return null;
   }
   const candidate = resolve16(dir, "bin", "failproofaid");
-  return existsSync18(candidate) ? candidate : null;
+  return existsSync19(candidate) ? candidate : null;
 }
 function pruneOldDaemonBinaries(keep = 2) {
   const removed = [];
@@ -21563,7 +21758,7 @@ function digestFor2(manifest, assetName) {
 }
 async function downloadFailproofaidBinary(key) {
   const target = installedBinaryPath();
-  if (existsSync18(target))
+  if (existsSync19(target))
     return { path: target };
   if (process.env.FAILPROOFAI_NO_DOWNLOAD) {
     return { error: "daemon downloads are disabled (FAILPROOFAI_NO_DOWNLOAD)" };
@@ -21597,10 +21792,10 @@ var init_daemon_download = __esm(() => {
 
 // src/hooks/daemon-client.ts
 import { createConnection as createConnection2 } from "node:net";
-import { existsSync as existsSync19 } from "node:fs";
+import { existsSync as existsSync20 } from "node:fs";
 function daemonSocketPresent() {
   try {
-    return existsSync19(socketPath2());
+    return existsSync20(socketPath2());
   } catch {
     return false;
   }
@@ -21726,7 +21921,7 @@ var init_daemon_client2 = __esm(() => {
 
 // src/hooks/daemon-service.ts
 import {
-  existsSync as existsSync20,
+  existsSync as existsSync21,
   mkdirSync as mkdirSync11,
   mkdtempSync,
   readFileSync as readFileSync17,
@@ -21757,13 +21952,13 @@ function resolveFailproofaidBinaryPath() {
   if (process.env.FAILPROOFAI_DAEMON_BINARY)
     return process.env.FAILPROOFAI_DAEMON_BINARY;
   const downloaded = installedBinaryPath();
-  if (existsSync20(downloaded))
+  if (existsSync21(downloaded))
     return downloaded;
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (packageRoot) {
     for (const profile of ["release", "debug"]) {
       const candidate = resolve17(packageRoot, "target", profile, "failproofaid");
-      if (existsSync20(candidate))
+      if (existsSync21(candidate))
         return candidate;
     }
   }
@@ -21794,7 +21989,7 @@ function resolveWorkerCommand() {
   if (!packageRoot)
     return null;
   const workerScript = resolve17(packageRoot, "dist", "worker.mjs");
-  if (!existsSync20(workerScript))
+  if (!existsSync21(workerScript))
     return null;
   return `${shellQuote(process.execPath)} ${shellQuote(workerScript)}`;
 }
@@ -21805,7 +22000,7 @@ function resolveCliCommand() {
   if (!packageRoot)
     return null;
   const cliScript = resolve17(packageRoot, "dist", "cli.mjs");
-  if (!existsSync20(cliScript))
+  if (!existsSync21(cliScript))
     return null;
   return `${shellQuote(process.execPath)} ${shellQuote(cliScript)}`;
 }
@@ -21819,7 +22014,7 @@ function workerScriptPath() {
   if (!packageRoot)
     return null;
   const workerScript = resolve17(packageRoot, "dist", "worker.mjs");
-  return existsSync20(workerScript) ? workerScript : null;
+  return existsSync21(workerScript) ? workerScript : null;
 }
 function assertUnitSafe(value, field) {
   if (UNIT_UNSAFE_RE.test(value)) {
@@ -21918,7 +22113,7 @@ function removeLegacyUserService() {
   try {
     if (process.platform === "linux") {
       const legacy = legacySystemdUserUnitPath();
-      if (!existsSync20(legacy))
+      if (!existsSync21(legacy))
         return;
       try {
         execFileSync2("systemctl", ["--user", "disable", "--now", "failproofaid.service"], {
@@ -21935,7 +22130,7 @@ function removeLegacyUserService() {
       } catch {}
     } else {
       const legacyAgent = legacyLaunchAgentPlistPath();
-      if (existsSync20(legacyAgent)) {
+      if (existsSync21(legacyAgent)) {
         try {
           execFileSync2("launchctl", ["unload", "-w", legacyAgent], {
             stdio: "ignore",
@@ -21945,7 +22140,7 @@ function removeLegacyUserService() {
         unlinkSync3(legacyAgent);
       }
       const legacyDaemon = legacySharedLaunchDaemonPath();
-      if (existsSync20(legacyDaemon)) {
+      if (existsSync21(legacyDaemon)) {
         try {
           runPrivileged("launchctl", ["unload", "-w", legacyDaemon]);
         } catch {}
@@ -21962,7 +22157,7 @@ function systemdUnitContents(binaryPath, workerCmd, cliCmd = null) {
   const user = assertUnitSafe(serviceUser(), "User");
   assertUnitSafe(binaryPath, "ExecStart");
   assertUnitSafe(homedir21(), "HOME");
-  const conditionPaths = [binaryPath, workerScriptPath()].filter((p) => typeof p === "string" && existsSync20(p));
+  const conditionPaths = [binaryPath, workerScriptPath()].filter((p) => typeof p === "string" && existsSync21(p));
   const conditionLines = conditionPaths.map((p) => `ConditionPathExists=${assertUnitSafe(p, "ConditionPathExists")}
 `).join("");
   return `[Unit]
@@ -22157,7 +22352,7 @@ function readInstalledServiceDefinition() {
   if (!isDaemonSupportedPlatform())
     return null;
   const path = daemonServiceFilePath();
-  if (!path || !existsSync20(path))
+  if (!path || !existsSync21(path))
     return null;
   try {
     return readFileSync17(path, "utf8");
@@ -22293,7 +22488,7 @@ async function uninstallDaemonService() {
   try {
     if (process.platform === "linux") {
       const unitPath = systemdUnitPath();
-      if (!existsSync20(unitPath))
+      if (!existsSync21(unitPath))
         return;
       try {
         runPrivileged("systemctl", ["disable", "--now", systemdUnitName()]);
@@ -22304,7 +22499,7 @@ async function uninstallDaemonService() {
       } catch {}
     } else {
       const plistPath = launchdPlistPath();
-      if (!existsSync20(plistPath))
+      if (!existsSync21(plistPath))
         return;
       try {
         runPrivileged("launchctl", ["unload", "-w", plistPath]);
@@ -22321,7 +22516,7 @@ function daemonVersionSkew() {
   const recorded = readVersionFile()?.daemon;
   if (!recorded)
     return null;
-  if (!existsSync20(installedBinaryPath(recorded)))
+  if (!existsSync21(installedBinaryPath(recorded)))
     return null;
   return recorded === version2 ? null : { installed: recorded, expected: version2 };
 }
@@ -22339,7 +22534,7 @@ function daemonServiceStatus() {
   if (!isDaemonSupportedPlatform())
     return "unsupported-platform";
   if (process.platform === "linux") {
-    if (!existsSync20(systemdUnitPath()))
+    if (!existsSync21(systemdUnitPath()))
       return "not-installed";
     try {
       const out = execFileSync2("systemctl", ["is-active", systemdUnitName()], {
@@ -22352,7 +22547,7 @@ function daemonServiceStatus() {
     }
   }
   const plistPath = launchdPlistPath();
-  if (!existsSync20(plistPath))
+  if (!existsSync21(plistPath))
     return "not-installed";
   try {
     const root = typeof process.getuid === "function" && process.getuid() === 0;
@@ -22384,7 +22579,7 @@ var init_daemon_service = __esm(() => {
 // src/hooks/fp-reset.ts
 import {
   copyFileSync,
-  existsSync as existsSync21,
+  existsSync as existsSync22,
   mkdirSync as mkdirSync12,
   readFileSync as readFileSync18,
   readdirSync as readdirSync14,
@@ -22397,7 +22592,7 @@ import {
 import { dirname as dirname10, isAbsolute as isAbsolute3, relative as relative4, resolve as resolve18 } from "node:path";
 function migrateConventionPolicies() {
   const from = legacy.customPoliciesDir();
-  if (!existsSync21(from))
+  if (!existsSync22(from))
     return [];
   const moved = [];
   const mergeInto = (dir, dest, prefix) => {
@@ -22418,7 +22613,7 @@ function migrateConventionPolicies() {
       const source = resolve18(dir, entry.name);
       const target = resolve18(dest, entry.name);
       const name = `${prefix}${entry.name}`;
-      if (!existsSync21(target)) {
+      if (!existsSync22(target)) {
         try {
           renameSync6(source, target);
           moved.push(name);
@@ -22445,7 +22640,7 @@ function migrateLegacySpool() {
     [legacy.spoolDir(), spoolDir()],
     [legacy.failedDir(), failedDir()]
   ]) {
-    if (!existsSync21(from))
+    if (!existsSync22(from))
       continue;
     try {
       mkdirSync12(to, { recursive: true });
@@ -22454,7 +22649,7 @@ function migrateLegacySpool() {
           continue;
         let name = entry.name;
         let n = 0;
-        while (existsSync21(resolve18(to, name)))
+        while (existsSync22(resolve18(to, name)))
           name = `legacy-${n++}-${entry.name}`;
         try {
           renameSync6(resolve18(from, entry.name), resolve18(to, name));
@@ -22472,7 +22667,7 @@ function migrateLegacySpool() {
 }
 function migrateHookActivity() {
   const from = legacy.hookActivityDir();
-  if (!existsSync21(from))
+  if (!existsSync22(from))
     return [];
   const moved = [];
   try {
@@ -22487,7 +22682,7 @@ function migrateHookActivity() {
       const source = resolve18(from, entry.name);
       let name = entry.name === "current.jsonl" ? `page-${stamp}-${seq++}.jsonl` : entry.name;
       let target = resolve18(to, name);
-      while (existsSync21(target)) {
+      while (existsSync22(target)) {
         name = `page-${stamp}-${seq++}.jsonl`;
         target = resolve18(to, name);
       }
@@ -22538,7 +22733,7 @@ function retirePolicyConfigKeys() {
 }
 function readCarriedPolicyConfig() {
   const from = resolve18(legacy.localPoliciesDir(), "policies-config.json");
-  if (!existsSync21(from))
+  if (!existsSync22(from))
     return null;
   let parsed;
   try {
@@ -22602,7 +22797,7 @@ function writeCarriedPolicyConfig(carried) {
 }
 function readCarriedTelemetryOptOut() {
   const from = legacy.configToml();
-  if (!existsSync21(from))
+  if (!existsSync22(from))
     return false;
   try {
     const text = readFileSync18(from, "utf8");
@@ -22657,7 +22852,7 @@ function parseLegacyToml(text) {
 }
 function readCarriedLegacyConfig() {
   const from = legacy.configToml();
-  if (!existsSync21(from))
+  if (!existsSync22(from))
     return null;
   try {
     return projectConfig(parseLegacyToml(readFileSync18(from, "utf8")));
@@ -22667,7 +22862,7 @@ function readCarriedLegacyConfig() {
 }
 function readCarriedLegacyCredentials() {
   const toml = legacy.credentialsToml();
-  if (existsSync21(toml)) {
+  if (existsSync22(toml)) {
     try {
       const creds = projectCredentials(parseLegacyToml(readFileSync18(toml, "utf8")));
       if (Object.keys(creds).length > 0)
@@ -22710,7 +22905,7 @@ function resetHome(from, to = LAYOUT_VERSION) {
   const spooled = migrateLegacySpool();
   const removed = [];
   for (const path of resettablePaths()) {
-    if (!existsSync21(path))
+    if (!existsSync22(path))
       continue;
     try {
       rmSync7(path, { recursive: true, force: true });
@@ -22735,7 +22930,7 @@ function layoutWarningForHook() {
   if (state.kind === "future") {
     return `[failproofai] this directory was written by a newer version (layout ${state.found} vs ${LAYOUT_VERSION}) — policies are NOT being enforced. ` + `Upgrade failproofai.`;
   }
-  if (existsSync21(globalPolicyConfigFile()))
+  if (existsSync22(globalPolicyConfigFile()))
     return null;
   return `[failproofai] setup predates this version — global policies are NOT being enforced. ` + `Run \`failproofai config\` to re-create it.`;
 }
@@ -23783,17 +23978,17 @@ var init_collector_config = __esm(() => {
 });
 
 // src/hooks/flush-cli.ts
-import { existsSync as existsSync22, mkdirSync as mkdirSync13, writeFileSync as writeFileSync11, readdirSync as readdirSync15 } from "node:fs";
-import { dirname as dirname11, join as join29 } from "node:path";
+import { existsSync as existsSync23, mkdirSync as mkdirSync13, writeFileSync as writeFileSync11, readdirSync as readdirSync15 } from "node:fs";
+import { dirname as dirname11, join as join30 } from "node:path";
 function flushRequestPath(home) {
-  return join29(failproofaiHome(home), "state", "flush-request.json");
+  return join30(failproofaiHome(home), "state", "flush-request.json");
 }
 function spoolDirs(home) {
   const root = spoolDir(home);
-  if (!existsSync22(root))
+  if (!existsSync23(root))
     return [];
   try {
-    return readdirSync15(root, { withFileTypes: true }).filter((e) => e.isDirectory() && e.name !== "failed").map((e) => join29(root, e.name));
+    return readdirSync15(root, { withFileTypes: true }).filter((e) => e.isDirectory() && e.name !== "failed").map((e) => join30(root, e.name));
   } catch {
     return [];
   }
@@ -23894,14 +24089,14 @@ var init_flush_cli = __esm(() => {
 import {
   chmodSync as chmodSync4,
   copyFileSync as copyFileSync2,
-  existsSync as existsSync23,
+  existsSync as existsSync24,
   mkdirSync as mkdirSync14,
   readFileSync as readFileSync19,
   renameSync as renameSync7,
   rmSync as rmSync8,
   writeFileSync as writeFileSync12
 } from "node:fs";
-import { basename as basename4, dirname as dirname12, join as join30, resolve as resolve19 } from "node:path";
+import { basename as basename4, dirname as dirname12, join as join31, resolve as resolve19 } from "node:path";
 function migrateToLayout4() {
   const moves = [
     { from: legacy.authJson(), to: auditSessionFile() },
@@ -23910,16 +24105,16 @@ function migrateToLayout4() {
   ];
   const authDirOverride = process.env.FAILPROOFAI_AUTH_DIR;
   if (authDirOverride) {
-    moves.push({ from: join30(authDirOverride, "auth.json"), to: join30(authDirOverride, "session.json") }, {
-      from: join30(authDirOverride, "next-audit.json"),
-      to: join30(authDirOverride, "reminder.json")
+    moves.push({ from: join31(authDirOverride, "auth.json"), to: join31(authDirOverride, "session.json") }, {
+      from: join31(authDirOverride, "next-audit.json"),
+      to: join31(authDirOverride, "reminder.json")
     });
   }
   const migrated = [];
   for (const { from, to } of moves) {
-    if (!existsSync23(from))
+    if (!existsSync24(from))
       continue;
-    if (existsSync23(to)) {
+    if (existsSync24(to)) {
       rmSync8(from, { force: true });
       continue;
     }
@@ -23940,7 +24135,7 @@ function migrateToLayout4() {
     migrated.push(`${basename4(from)} → audit/${basename4(to)}`);
   }
   for (const secret of [auditSessionFile()]) {
-    if (!existsSync23(secret))
+    if (!existsSync24(secret))
       continue;
     try {
       chmodSync4(secret, 384);
@@ -23988,10 +24183,10 @@ function pruneMigratedCredentials(from) {
   for (let layout = from;layout < LAYOUT_VERSION; layout++) {
     for (const { as, landsAt } of PRUNED_AFTER_SUCCESS) {
       try {
-        if (!existsSync23(landsAt()))
+        if (!existsSync24(landsAt()))
           continue;
         const copy = resolve19(migrationBackupDir(layout), as);
-        if (!existsSync23(copy))
+        if (!existsSync24(copy))
           continue;
         rmSync8(copy, { force: true });
         pruned.push(as);
@@ -24004,7 +24199,7 @@ function filesToBackUp() {
   const seen = new Map;
   for (const f of [...BACKED_UP, ...BACKED_UP_LEGACY]) {
     const path = f.at();
-    if (existsSync23(path))
+    if (existsSync24(path))
       seen.set(path, backupNameOf(f));
   }
   return [...seen].map(([path, as]) => ({ path, as }));
@@ -24312,13 +24507,13 @@ import { createHmac, randomUUID as randomUUID2 } from "node:crypto";
 import { execSync as execSync5 } from "node:child_process";
 import { readFileSync as readFileSync20, writeFileSync as writeFileSync13, mkdirSync as mkdirSync15 } from "node:fs";
 import { homedir as homedir22, platform, arch, hostname, cpus } from "node:os";
-import { join as join31 } from "node:path";
+import { join as join32 } from "node:path";
 function hashToId3(raw) {
   return createHmac("sha256", NAMESPACE3).update(raw).digest("hex");
 }
 function getInstanceId3() {
-  const idDir = join31(homedir22(), ".failproofai");
-  const idFile = join31(idDir, "instance-id");
+  const idDir = join32(homedir22(), ".failproofai");
+  const idFile = join32(idDir, "instance-id");
   try {
     const existing = readFileSync20(idFile, "utf-8").trim();
     if (existing)
@@ -24394,7 +24589,7 @@ var NAMESPACE3 = "failproofai-telemetry-v1", API_KEY3 = "phc_Ac1Ww1GqKc0z1SyrRWb
 var init_install_telemetry = () => {};
 
 // lib/install-check.ts
-import { existsSync as existsSync24, readFileSync as readFileSync21, writeFileSync as writeFileSync14, mkdirSync as mkdirSync16 } from "node:fs";
+import { existsSync as existsSync25, readFileSync as readFileSync21, writeFileSync as writeFileSync14, mkdirSync as mkdirSync16 } from "node:fs";
 import { dirname as dirname13, resolve as resolve20 } from "node:path";
 import { platform as platform2, arch as arch2, release, homedir as homedir23, hostname as hostname2 } from "node:os";
 import { createHmac as createHmac2 } from "node:crypto";
@@ -24450,7 +24645,7 @@ function compareSemver(a, b) {
 }
 function checkHooks() {
   const hooksConfigPath = globalPolicyConfigFile();
-  if (!existsSync24(hooksConfigPath)) {
+  if (!existsSync25(hooksConfigPath)) {
     return { configured: false, registered: false, policyCount: 0 };
   }
   let config;
@@ -24464,7 +24659,7 @@ function checkHooks() {
   }
   const policyCount = config.enabledPolicies.length;
   const settingsPath = resolve20(homedir23(), ".claude", "settings.json");
-  if (!existsSync24(settingsPath))
+  if (!existsSync25(settingsPath))
     return { configured: true, registered: false, policyCount };
   let settings;
   try {
@@ -24492,7 +24687,7 @@ async function maybeReportInstall(version) {
     const versionFile = lastVersionPath();
     let previousVersion = null;
     try {
-      if (existsSync24(versionFile)) {
+      if (existsSync25(versionFile)) {
         previousVersion = readFileSync21(versionFile, "utf8").trim() || null;
       }
     } catch {}
@@ -24580,7 +24775,7 @@ var init_cli_error = __esm(() => {
 
 // src/hooks/manager.ts
 import { execSync as execSync6 } from "node:child_process";
-import { existsSync as existsSync25 } from "node:fs";
+import { existsSync as existsSync26 } from "node:fs";
 import { resolve as resolve21, basename as basename5 } from "node:path";
 import { platform as platform3, arch as arch3, release as release2, hostname as hostname3 } from "node:os";
 function getSettingsPath(scope, cwd) {
@@ -24802,7 +24997,7 @@ async function installHooksImpl(policyNames, scope = "user", cwd, includeBeta =
   } else if (customPoliciesPath && (typeof customPoliciesPath === "string" || customPoliciesPath.length > 0)) {
     const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path) => resolve21(path));
     const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path) => resolve21(path)).filter((path) => {
-      if (existsSync25(path))
+      if (existsSync26(path))
         return true;
       console.log(`Dropping custom policies path (file no longer exists): ${path}`);
       return false;
@@ -25025,7 +25220,7 @@ async function removeHooks(policyNames, scope = "user", cwd, opts) {
     const scopesToRemove = scope === "all" ? [...integration.scopes] : integration.scopes.includes(scope) ? [scope] : [];
     for (const s of scopesToRemove) {
       const settingsPaths = settingsPathsFor(integration, s, cwd);
-      const existing = settingsPaths.filter((p) => existsSync25(p));
+      const existing = settingsPaths.filter((p) => existsSync26(p));
       if (existing.length === 0) {
         if (scope !== "all" && selectedClis.length === 1) {
           console.log("No settings file found. Nothing to remove.");
@@ -25190,7 +25385,7 @@ var init_leak_fingerprint = __esm(() => {
 
 // src/audit/macos-notifier.ts
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { chmodSync as chmodSync5, existsSync as existsSync26, mkdirSync as mkdirSync17, readdirSync as readdirSync16, renameSync as renameSync8, rmSync as rmSync9, writeFileSync as writeFileSync15 } from "node:fs";
+import { chmodSync as chmodSync5, existsSync as existsSync27, mkdirSync as mkdirSync17, readdirSync as readdirSync16, renameSync as renameSync8, rmSync as rmSync9, writeFileSync as writeFileSync15 } from "node:fs";
 import { homedir as homedir24 } from "node:os";
 import { resolve as resolve22 } from "node:path";
 function macNotifierAppPath(home) {
@@ -25315,12 +25510,12 @@ ${body.replace(/\s+/g, " ")}
   }
 }
 function macNotifierInstalled(home) {
-  return existsSync26(macNotifierPlistPath()) && existsSync26(macNotifierRunnerPath(home));
+  return existsSync27(macNotifierPlistPath()) && existsSync27(macNotifierRunnerPath(home));
 }
 function pruneMacNotifyQueue(home, maxAgeMs = 7 * 86400000) {
   try {
     const dir = macNotifyDir(home);
-    if (!existsSync26(dir))
+    if (!existsSync27(dir))
       return;
     const { statSync } = __require("node:fs");
     for (const name of readdirSync16(dir)) {
@@ -25354,7 +25549,7 @@ var DEFAULT_FETCH_TIMEOUT_MS = 15000;
 
 // src/hooks/cloud-enrollment.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { existsSync as existsSync27, readFileSync as readFileSync22, rmSync as rmSync10 } from "node:fs";
+import { existsSync as existsSync28, readFileSync as readFileSync22, rmSync as rmSync10 } from "node:fs";
 import { hostname as hostname4 } from "node:os";
 function cloudCredentialPath() {
   return process.env.FAILPROOFAI_CLOUD_CREDENTIALS ?? credentialsFile();
@@ -25393,7 +25588,7 @@ function readCloudCredentials() {
   if (!usingJsonOverride())
     return readCredentials().cloud ?? null;
   const path = cloudCredentialPath();
-  if (!existsSync27(path))
+  if (!existsSync28(path))
     return null;
   try {
     const raw = JSON.parse(readFileSync22(path, "utf8"));
@@ -25435,7 +25630,7 @@ function resolveMachineLabel(explicit) {
 function clearCloudCredentials() {
   if (usingJsonOverride()) {
     const path = cloudCredentialPath();
-    if (!existsSync27(path))
+    if (!existsSync28(path))
       return false;
     try {
       rmSync10(path);
@@ -25686,7 +25881,7 @@ var init_cloud_connection = __esm(() => {
 });
 
 // src/hooks/setup-state.ts
-import { existsSync as existsSync28, realpathSync as realpathSync2, statSync as statSync17 } from "node:fs";
+import { existsSync as existsSync29, realpathSync as realpathSync2, statSync as statSync17 } from "node:fs";
 import { dirname as dirname14, resolve as resolve23 } from "node:path";
 import { homedir as homedir25 } from "node:os";
 function globalConfigPath(home = homedir25()) {
@@ -25743,10 +25938,10 @@ function detectSetupState(cwd = process.cwd(), home = homedir25()) {
     cwd: resolvedCwd,
     home: resolvedHome,
     projectRoot,
-    hasGlobalConfig: existsSync28(globalConfigPath(resolvedHome)),
-    hasProjectConfig: projectRoot !== resolvedHome && existsSync28(projectConfigPath(projectRoot)),
+    hasGlobalConfig: existsSync29(globalConfigPath(resolvedHome)),
+    hasProjectConfig: projectRoot !== resolvedHome && existsSync29(projectConfigPath(projectRoot)),
     hasGlobalHooks: hasGlobalHooksInstalled(),
-    hasLegacyMarker: existsSync28(legacyMarkerPath(resolvedHome)),
+    hasLegacyMarker: existsSync29(legacyMarkerPath(resolvedHome)),
     inHomeDir: resolvedCwd === resolvedHome
   };
 }
@@ -25763,11 +25958,11 @@ var init_setup_state = __esm(() => {
 });
 
 // src/hooks/onboarding-attempt.ts
-import { existsSync as existsSync29, mkdirSync as mkdirSync18, readFileSync as readFileSync23, rmSync as rmSync11, writeFileSync as writeFileSync16 } from "node:fs";
+import { existsSync as existsSync30, mkdirSync as mkdirSync18, readFileSync as readFileSync23, rmSync as rmSync11, writeFileSync as writeFileSync16 } from "node:fs";
 import { dirname as dirname15 } from "node:path";
 function readOnboardingAttempt() {
   const path = onboardingAttemptFile();
-  if (!existsSync29(path))
+  if (!existsSync30(path))
     return null;
   try {
     const raw = JSON.parse(readFileSync23(path, "utf8"));
@@ -25900,8 +26095,8 @@ var init_onboarding_lock = __esm(() => {
 });
 
 // lib/claude-sessions.ts
-import { readdirSync as readdirSync17, statSync as statSync18, existsSync as existsSync30 } from "node:fs";
-import { join as join32, basename as basename6 } from "node:path";
+import { readdirSync as readdirSync17, statSync as statSync18, existsSync as existsSync31 } from "node:fs";
+import { join as join33, basename as basename6 } from "node:path";
 function getClaudeProjectsRoot() {
   return getClaudeProjectsPath();
 }
@@ -25916,7 +26111,7 @@ function listClaudeProjects() {
   return entries.filter((e) => e.isDirectory()).map((e) => ({
     name: e.name,
     cwd: decodeFolderName(e.name),
-    path: join32(root, e.name)
+    path: join33(root, e.name)
   }));
 }
 function collectSubagentTranscripts(dir, relPrefix, project, out, depth) {
@@ -25932,13 +26127,13 @@ function collectSubagentTranscripts(dir, relPrefix, project, out, depth) {
     if (entry.isSymbolicLink())
       continue;
     if (entry.isDirectory()) {
-      collectSubagentTranscripts(join32(dir, entry.name), relPrefix ? `${relPrefix}__${entry.name}` : entry.name, project, out, depth + 1);
+      collectSubagentTranscripts(join33(dir, entry.name), relPrefix ? `${relPrefix}__${entry.name}` : entry.name, project, out, depth + 1);
       continue;
     }
     if (!entry.isFile() || !entry.name.endsWith(".jsonl"))
       continue;
     const stem = entry.name.slice(0, -".jsonl".length);
-    const transcriptPath = join32(dir, entry.name);
+    const transcriptPath = join33(dir, entry.name);
     try {
       const s = statSync18(transcriptPath);
       out.push({
@@ -25966,7 +26161,7 @@ function listClaudeTranscripts(project) {
       const sessionId = entry.name.slice(0, -".jsonl".length);
       if (!UUID_RE2.test(sessionId))
         continue;
-      const transcriptPath = join32(project.path, entry.name);
+      const transcriptPath = join33(project.path, entry.name);
       try {
         const s = statSync18(transcriptPath);
         out.push({
@@ -25980,8 +26175,8 @@ function listClaudeTranscripts(project) {
         });
       } catch {}
     } else if (entry.isDirectory() && UUID_RE2.test(entry.name)) {
-      const subDir = join32(project.path, entry.name, "subagents");
-      if (!existsSync30(subDir))
+      const subDir = join33(project.path, entry.name, "subagents");
+      if (!existsSync31(subDir))
         continue;
       collectSubagentTranscripts(subDir, entry.name, project, out, 0);
     }
@@ -27483,11 +27678,11 @@ var MAX_SIGHTINGS = 5, FINDING_TTL_DAYS = 90, MAX_FINDINGS = 500, LEAK_RECORD_SC
 
 // src/audit/leak-store.ts
 import { randomBytes as randomBytes2 } from "node:crypto";
-import { existsSync as existsSync31, mkdirSync as mkdirSync20, readFileSync as readFileSync26 } from "node:fs";
+import { existsSync as existsSync32, mkdirSync as mkdirSync20, readFileSync as readFileSync26 } from "node:fs";
 import { dirname as dirname16 } from "node:path";
 function readJson(path) {
   try {
-    if (!existsSync31(path))
+    if (!existsSync32(path))
       return null;
     return JSON.parse(readFileSync26(path, "utf8"));
   } catch {
@@ -27722,8 +27917,8 @@ var init_redact_example = __esm(() => {
 
 // src/audit/cache.ts
 import { createHash as createHash8 } from "node:crypto";
-import { existsSync as existsSync32, mkdirSync as mkdirSync21, readFileSync as readFileSync27, writeFileSync as writeFileSync18, chmodSync as chmodSync6, openSync, readSync, closeSync } from "node:fs";
-import { join as join33 } from "node:path";
+import { existsSync as existsSync33, mkdirSync as mkdirSync21, readFileSync as readFileSync27, writeFileSync as writeFileSync18, chmodSync as chmodSync6, openSync, readSync, closeSync } from "node:fs";
+import { join as join34 } from "node:path";
 function getEngineVersion() {
   if (cachedEngineVersion)
     return cachedEngineVersion;
@@ -27743,7 +27938,7 @@ function getDetectorVersion() {
 function getCachePathFor(transcriptPath) {
   const root = auditCacheDir();
   const key = createHash8("sha1").update(transcriptPath).digest("hex");
-  return join33(root, `${key}.json`);
+  return join34(root, `${key}.json`);
 }
 function encodeDetectorState(state) {
   return JSON.stringify(state, (_k, v) => v instanceof Map ? { __map: [...v.entries()] } : v);
@@ -27783,7 +27978,7 @@ function readCachedTranscript(transcriptPath, mtimeMs, sizeBytes) {
   if (sizeBytes === 0)
     return null;
   const cachePath = getCachePathFor(transcriptPath);
-  if (!existsSync32(cachePath))
+  if (!existsSync33(cachePath))
     return null;
   try {
     const raw = readFileSync27(cachePath, "utf-8");
@@ -28547,7 +28742,7 @@ var init_audit_lock = __esm(() => {
 });
 
 // src/audit/dashboard-cache.ts
-import { existsSync as existsSync33, readFileSync as readFileSync29 } from "node:fs";
+import { existsSync as existsSync34, readFileSync as readFileSync29 } from "node:fs";
 function getCachePath() {
   return auditDashboardFile();
 }
@@ -28567,7 +28762,7 @@ function writeDashboardCache(params, result) {
 }
 function readDashboardCacheMeta() {
   const cachePath = getCachePath();
-  if (!existsSync33(cachePath))
+  if (!existsSync34(cachePath))
     return null;
   try {
     const raw = readFileSync29(cachePath, "utf-8");
@@ -28794,15 +28989,15 @@ var init_api_server_client = __esm(() => {
 });
 
 // lib/auth/auth-store.ts
-import { existsSync as existsSync34, readFileSync as readFileSync30, readdirSync as readdirSync18, rmSync as rmSync13 } from "node:fs";
-import { join as join34, resolve as resolve24 } from "node:path";
+import { existsSync as existsSync35, readFileSync as readFileSync30, readdirSync as readdirSync18, rmSync as rmSync13 } from "node:fs";
+import { join as join35, resolve as resolve24 } from "node:path";
 function getAuthFilePath() {
   const override = process.env.FAILPROOFAI_AUTH_DIR;
-  return override ? join34(override, "session.json") : auditSessionFile();
+  return override ? join35(override, "session.json") : auditSessionFile();
 }
 function readAuth() {
   const p = getAuthFilePath();
-  if (!existsSync34(p))
+  if (!existsSync35(p))
     return null;
   try {
     const raw = readFileSync30(p, "utf-8");
@@ -28829,17 +29024,17 @@ function writeAuth(auth) {
 }
 function deleteAuth() {
   const p = getAuthFilePath();
-  if (existsSync34(p))
+  if (existsSync35(p))
     rmSync13(p, { force: true });
   try {
     const root = migrationsDir();
-    if (!existsSync34(root))
+    if (!existsSync35(root))
       return;
     for (const entry of readdirSync18(root)) {
       if (!entry.startsWith("backup-layout"))
         continue;
       const copy = resolve24(root, entry, "auth.json");
-      if (existsSync34(copy))
+      if (existsSync35(copy))
         rmSync13(copy, { force: true });
     }
   } catch {}
@@ -29019,12 +29214,12 @@ var init_harm_report = __esm(() => {
 });
 
 // src/audit/machine-store.ts
-import { existsSync as existsSync35, readFileSync as readFileSync31, rmSync as rmSync14 } from "node:fs";
+import { existsSync as existsSync36, readFileSync as readFileSync31, rmSync as rmSync14 } from "node:fs";
 import { hostname as hostname5 } from "node:os";
 import { randomUUID as randomUUID4 } from "node:crypto";
 function readMachineIdentity(home) {
   const path = auditMachineFile(home);
-  if (!existsSync35(path))
+  if (!existsSync36(path))
     return null;
   try {
     const parsed = JSON.parse(readFileSync31(path, "utf8"));
@@ -29623,7 +29818,7 @@ var init_cli = __esm(() => {
 });
 
 // src/hooks/configure-wizard.ts
-import { existsSync as existsSync36, mkdirSync as mkdirSync23, writeFileSync as writeFileSync20, readFileSync as readFileSync32 } from "node:fs";
+import { existsSync as existsSync37, mkdirSync as mkdirSync23, writeFileSync as writeFileSync20, readFileSync as readFileSync32 } from "node:fs";
 import { homedir as homedir28 } from "node:os";
 import { dirname as dirname17, resolve as resolve25, sep as sep5 } from "node:path";
 async function emit(event, props) {
@@ -29648,7 +29843,7 @@ function setCustomPoliciesEnabled(scope, cwd, enabled) {
   const path = getConfigPathForScope(scope, cwd);
   let config = {};
   try {
-    if (existsSync36(path))
+    if (existsSync37(path))
       config = JSON.parse(readFileSync32(path, "utf8"));
   } catch {
     return;
@@ -30303,17 +30498,17 @@ var init_configure_wizard = __esm(() => {
 });
 
 // src/hooks/flush-cli.ts
-import { existsSync as existsSync37, mkdirSync as mkdirSync24, writeFileSync as writeFileSync21, readdirSync as readdirSync19 } from "node:fs";
-import { dirname as dirname18, join as join35 } from "node:path";
+import { existsSync as existsSync38, mkdirSync as mkdirSync24, writeFileSync as writeFileSync21, readdirSync as readdirSync19 } from "node:fs";
+import { dirname as dirname18, join as join36 } from "node:path";
 function flushRequestPath2(home) {
-  return join35(failproofaiHome(home), "state", "flush-request.json");
+  return join36(failproofaiHome(home), "state", "flush-request.json");
 }
 function spoolDirs2(home) {
   const root = spoolDir(home);
-  if (!existsSync37(root))
+  if (!existsSync38(root))
     return [];
   try {
-    return readdirSync19(root, { withFileTypes: true }).filter((e) => e.isDirectory() && e.name !== "failed").map((e) => join35(root, e.name));
+    return readdirSync19(root, { withFileTypes: true }).filter((e) => e.isDirectory() && e.name !== "failed").map((e) => join36(root, e.name));
   } catch {
     return [];
   }
@@ -30411,16 +30606,16 @@ var init_flush_cli2 = __esm(() => {
 });
 
 // src/hooks/backfill-cli.ts
-import { existsSync as existsSync38, mkdirSync as mkdirSync25, writeFileSync as writeFileSync22, readdirSync as readdirSync20, statSync as statSync23 } from "node:fs";
-import { dirname as dirname19, join as join36 } from "node:path";
+import { existsSync as existsSync39, mkdirSync as mkdirSync25, writeFileSync as writeFileSync22, readdirSync as readdirSync20, statSync as statSync23 } from "node:fs";
+import { dirname as dirname19, join as join37 } from "node:path";
 function backfillRequestPath(home) {
-  return join36(failproofaiHome(home), "state", "backfill-request.json");
+  return join37(failproofaiHome(home), "state", "backfill-request.json");
 }
 function surveySessions(sinceMs, homeDir) {
   const out = [];
   for (const { cli, dir } of SESSION_DIRS) {
-    const root = join36(homeDir, dir);
-    if (!existsSync38(root))
+    const root = join37(homeDir, dir);
+    if (!existsSync39(root))
       continue;
     let files = 0;
     let newest = 0;
@@ -30434,7 +30629,7 @@ function surveySessions(sinceMs, homeDir) {
         return;
       }
       for (const e of entries) {
-        const p = join36(d, e.name);
+        const p = join37(d, e.name);
         if (e.isDirectory()) {
           walk(p, depth + 1);
           continue;
@@ -30458,7 +30653,7 @@ function runBackfillCommand(opts = {}) {
   const now = opts.now ?? Date.now();
   const sinceMs = opts.sinceMs ?? now - DEFAULT_BACKFILL_DAYS * 24 * 60 * 60 * 1000;
   const home = failproofaiHome();
-  if (!existsSync38(home)) {
+  if (!existsSync39(home)) {
     return {
       exitCode: 1,
       lines: [`No failproofai home at ${home}. Run \`failproofai config\` first.`]
@@ -30789,7 +30984,7 @@ var init_harness_cli = __esm(() => {
 });
 
 // src/hooks/fp-config.ts
-import { chmodSync as chmodSync7, existsSync as existsSync39, mkdirSync as mkdirSync26, readFileSync as readFileSync33, statSync as statSync24, writeFileSync as writeFileSync23 } from "node:fs";
+import { chmodSync as chmodSync7, existsSync as existsSync40, mkdirSync as mkdirSync26, readFileSync as readFileSync33, statSync as statSync24, writeFileSync as writeFileSync23 } from "node:fs";
 function detectLayout2() {
   const raw = readVersionFile2();
   if (raw) {
@@ -30797,17 +30992,17 @@ function detectLayout2() {
       return { kind: "current", version: raw };
     return raw.layout > LAYOUT_VERSION ? { kind: "future", found: raw.layout } : { kind: "stale", found: raw.layout };
   }
-  if (existsSync39(configFile())) {
+  if (existsSync40(configFile())) {
     const layoutThreePositions = [
       legacy.authJson(),
       legacy.nextAudit(),
       legacy.auditSchedule()
     ];
-    if (layoutThreePositions.some((p) => existsSync39(p)))
+    if (layoutThreePositions.some((p) => existsSync40(p)))
       return { kind: "stale", found: 3 };
     return { kind: "current", version: { layout: LAYOUT_VERSION, cli: "" }, inferred: true };
   }
-  if (existsSync39(legacy.configToml()))
+  if (existsSync40(legacy.configToml()))
     return { kind: "stale", found: 2 };
   const layoutOneMarkers = [
     legacy.policyConfig(),
@@ -30818,7 +31013,7 @@ function detectLayout2() {
     legacy.ingestCredentials(),
     legacy.auditDashboard()
   ];
-  return layoutOneMarkers.some((p) => existsSync39(p)) ? { kind: "stale", found: 1 } : { kind: "absent" };
+  return layoutOneMarkers.some((p) => existsSync40(p)) ? { kind: "stale", found: 1 } : { kind: "absent" };
 }
 function readLegacyTomlVersion2(text) {
   const layout = Number(/^\s*layout\s*=\s*(\d+)\s*$/m.exec(text)?.[1]);
@@ -30861,14 +31056,14 @@ var init_fp_home2 = () => {};
 import {
   chmodSync as chmodSync8,
   copyFileSync as copyFileSync3,
-  existsSync as existsSync40,
+  existsSync as existsSync41,
   mkdirSync as mkdirSync27,
   readFileSync as readFileSync34,
   renameSync as renameSync9,
   rmSync as rmSync15,
   writeFileSync as writeFileSync24
 } from "node:fs";
-import { basename as basename7, dirname as dirname20, join as join37, resolve as resolve27 } from "node:path";
+import { basename as basename7, dirname as dirname20, join as join38, resolve as resolve27 } from "node:path";
 function migrateToLayout42() {
   const moves = [
     { from: legacy.authJson(), to: auditSessionFile() },
@@ -30877,16 +31072,16 @@ function migrateToLayout42() {
   ];
   const authDirOverride = process.env.FAILPROOFAI_AUTH_DIR;
   if (authDirOverride) {
-    moves.push({ from: join37(authDirOverride, "auth.json"), to: join37(authDirOverride, "session.json") }, {
-      from: join37(authDirOverride, "next-audit.json"),
-      to: join37(authDirOverride, "reminder.json")
+    moves.push({ from: join38(authDirOverride, "auth.json"), to: join38(authDirOverride, "session.json") }, {
+      from: join38(authDirOverride, "next-audit.json"),
+      to: join38(authDirOverride, "reminder.json")
     });
   }
   const migrated = [];
   for (const { from, to } of moves) {
-    if (!existsSync40(from))
+    if (!existsSync41(from))
       continue;
-    if (existsSync40(to)) {
+    if (existsSync41(to)) {
       rmSync15(from, { force: true });
       continue;
     }
@@ -30907,7 +31102,7 @@ function migrateToLayout42() {
     migrated.push(`${basename7(from)} → audit/${basename7(to)}`);
   }
   for (const secret of [auditSessionFile()]) {
-    if (!existsSync40(secret))
+    if (!existsSync41(secret))
       continue;
     try {
       chmodSync8(secret, 384);
@@ -30955,10 +31150,10 @@ function pruneMigratedCredentials2(from) {
   for (let layout = from;layout < LAYOUT_VERSION; layout++) {
     for (const { as, landsAt } of PRUNED_AFTER_SUCCESS2) {
       try {
-        if (!existsSync40(landsAt()))
+        if (!existsSync41(landsAt()))
           continue;
         const copy = resolve27(migrationBackupDir(layout), as);
-        if (!existsSync40(copy))
+        if (!existsSync41(copy))
           continue;
         rmSync15(copy, { force: true });
         pruned.push(as);
@@ -30971,7 +31166,7 @@ function filesToBackUp2() {
   const seen = new Map;
   for (const f of [...BACKED_UP2, ...BACKED_UP_LEGACY2]) {
     const path = f.at();
-    if (existsSync40(path))
+    if (existsSync41(path))
       seen.set(path, backupNameOf2(f));
   }
   return [...seen].map(([path, as]) => ({ path, as }));
@@ -31125,7 +31320,7 @@ var init_migrations2 = __esm(() => {
 
 // src/hooks/daemon-service.ts
 import {
-  existsSync as existsSync41,
+  existsSync as existsSync42,
   mkdirSync as mkdirSync28,
   mkdtempSync as mkdtempSync2,
   readFileSync as readFileSync35,
@@ -31150,13 +31345,13 @@ function resolveFailproofaidBinaryPath2() {
   if (process.env.FAILPROOFAI_DAEMON_BINARY)
     return process.env.FAILPROOFAI_DAEMON_BINARY;
   const downloaded = installedBinaryPath();
-  if (existsSync41(downloaded))
+  if (existsSync42(downloaded))
     return downloaded;
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (packageRoot) {
     for (const profile of ["release", "debug"]) {
       const candidate = resolve28(packageRoot, "target", profile, "failproofaid");
-      if (existsSync41(candidate))
+      if (existsSync42(candidate))
         return candidate;
     }
   }
@@ -31187,7 +31382,7 @@ function resolveWorkerCommand2() {
   if (!packageRoot)
     return null;
   const workerScript = resolve28(packageRoot, "dist", "worker.mjs");
-  if (!existsSync41(workerScript))
+  if (!existsSync42(workerScript))
     return null;
   return `${shellQuote2(process.execPath)} ${shellQuote2(workerScript)}`;
 }
@@ -31198,7 +31393,7 @@ function resolveCliCommand2() {
   if (!packageRoot)
     return null;
   const cliScript = resolve28(packageRoot, "dist", "cli.mjs");
-  if (!existsSync41(cliScript))
+  if (!existsSync42(cliScript))
     return null;
   return `${shellQuote2(process.execPath)} ${shellQuote2(cliScript)}`;
 }
@@ -31212,7 +31407,7 @@ function workerScriptPath2() {
   if (!packageRoot)
     return null;
   const workerScript = resolve28(packageRoot, "dist", "worker.mjs");
-  return existsSync41(workerScript) ? workerScript : null;
+  return existsSync42(workerScript) ? workerScript : null;
 }
 function assertUnitSafe2(value, field) {
   if (UNIT_UNSAFE_RE2.test(value)) {
@@ -31301,7 +31496,7 @@ function removeLegacyUserService2() {
   try {
     if (process.platform === "linux") {
       const legacy = legacySystemdUserUnitPath2();
-      if (!existsSync41(legacy))
+      if (!existsSync42(legacy))
         return;
       try {
         execFileSync4("systemctl", ["--user", "disable", "--now", "failproofaid.service"], {
@@ -31318,7 +31513,7 @@ function removeLegacyUserService2() {
       } catch {}
     } else {
       const legacyAgent = legacyLaunchAgentPlistPath2();
-      if (existsSync41(legacyAgent)) {
+      if (existsSync42(legacyAgent)) {
         try {
           execFileSync4("launchctl", ["unload", "-w", legacyAgent], {
             stdio: "ignore",
@@ -31328,7 +31523,7 @@ function removeLegacyUserService2() {
         unlinkSync5(legacyAgent);
       }
       const legacyDaemon = legacySharedLaunchDaemonPath2();
-      if (existsSync41(legacyDaemon)) {
+      if (existsSync42(legacyDaemon)) {
         try {
           runPrivileged2("launchctl", ["unload", "-w", legacyDaemon]);
         } catch {}
@@ -31345,7 +31540,7 @@ function systemdUnitContents2(binaryPath, workerCmd, cliCmd = null) {
   const user = assertUnitSafe2(serviceUser2(), "User");
   assertUnitSafe2(binaryPath, "ExecStart");
   assertUnitSafe2(homedir30(), "HOME");
-  const conditionPaths = [binaryPath, workerScriptPath2()].filter((p) => typeof p === "string" && existsSync41(p));
+  const conditionPaths = [binaryPath, workerScriptPath2()].filter((p) => typeof p === "string" && existsSync42(p));
   const conditionLines = conditionPaths.map((p) => `ConditionPathExists=${assertUnitSafe2(p, "ConditionPathExists")}
 `).join("");
   return `[Unit]
@@ -31550,7 +31745,7 @@ function daemonServiceStatus2() {
   if (!isDaemonSupportedPlatform2())
     return "unsupported-platform";
   if (process.platform === "linux") {
-    if (!existsSync41(systemdUnitPath2()))
+    if (!existsSync42(systemdUnitPath2()))
       return "not-installed";
     try {
       const out = execFileSync4("systemctl", ["is-active", systemdUnitName2()], {
@@ -31563,7 +31758,7 @@ function daemonServiceStatus2() {
     }
   }
   const plistPath = launchdPlistPath2();
-  if (!existsSync41(plistPath))
+  if (!existsSync42(plistPath))
     return "not-installed";
   try {
     const root = typeof process.getuid === "function" && process.getuid() === 0;
@@ -31593,7 +31788,7 @@ var init_daemon_service2 = __esm(() => {
 });
 
 // src/hooks/uninstall-cli.ts
-import { existsSync as existsSync42, rmSync as rmSync17 } from "node:fs";
+import { existsSync as existsSync43, rmSync as rmSync17 } from "node:fs";
 function survey(cwd) {
   const clis = [];
   for (const id of listInstallableIds()) {
@@ -31614,9 +31809,9 @@ function survey(cwd) {
   return {
     clis,
     servicePath,
-    serviceInstalled: !!servicePath && existsSync42(servicePath),
+    serviceInstalled: !!servicePath && existsSync43(servicePath),
     daemonConfigured,
-    homeExists: existsSync42(failproofaiHome())
+    homeExists: existsSync43(failproofaiHome())
   };
 }
 async function runUninstallCommand(opts = {}) {
@@ -31715,7 +31910,7 @@ async function runUninstallCommand(opts = {}) {
       } catch {}
       try {
         await uninstallDaemonService();
-        if (found.servicePath && existsSync42(found.servicePath)) {
+        if (found.servicePath && existsSync43(found.servicePath)) {
           failures.push(`the service at ${found.servicePath} is still there (most often: no sudo). ` + `Remove it with the commands below.`);
         } else {
           lines.push(`✓ stopped and removed the daemon service`);
@@ -31741,7 +31936,7 @@ async function runUninstallCommand(opts = {}) {
     lines.push(``, `Not everything could be removed:`);
     for (const f of failures)
       lines.push(`  ✗ ${f}`);
-    if (found.servicePath && existsSync42(found.servicePath)) {
+    if (found.servicePath && existsSync43(found.servicePath)) {
       lines.push(``, `To remove the service by hand:`, ...manualServiceRemoval(found.servicePath), ``, `(\`${daemonStatusCommand()}\` shows its current state.)`);
     }
     return { exitCode: 1, lines, planLines, purged };
@@ -31776,8 +31971,8 @@ var init_uninstall_cli = __esm(() => {
 import { execFileSync as execFileSync5 } from "node:child_process";
 import { homedir as homedir31, tmpdir as tmpdir4 } from "node:os";
 import { createHash as createHash9 } from "node:crypto";
-import { copyFileSync as copyFileSync4, existsSync as existsSync43, mkdirSync as mkdirSync29, mkdtempSync as mkdtempSync3, readFileSync as readFileSync36, readdirSync as readdirSync21, realpathSync as realpathSync3, rmSync as rmSync18, statSync as statSync25, writeFileSync as writeFileSync26 } from "node:fs";
-import { basename as basename8, dirname as dirname21, isAbsolute as isAbsolute4, join as join38, relative as relative5, resolve as resolve29, sep as sep6 } from "node:path";
+import { copyFileSync as copyFileSync4, existsSync as existsSync44, mkdirSync as mkdirSync29, mkdtempSync as mkdtempSync3, readFileSync as readFileSync36, readdirSync as readdirSync21, realpathSync as realpathSync3, rmSync as rmSync18, statSync as statSync25, writeFileSync as writeFileSync26 } from "node:fs";
+import { basename as basename8, dirname as dirname21, isAbsolute as isAbsolute4, join as join39, relative as relative5, resolve as resolve29, sep as sep6 } from "node:path";
 function parseList(rest, flag) {
   const idx = rest.findIndex((a) => a === flag || a.startsWith(`${flag}=`));
   if (idx === -1)
@@ -31891,7 +32086,7 @@ async function build(rest) {
     return fail2([err instanceof Error ? err.message : String(err)]);
   }
   const entryPath = resolve29(entry);
-  if (!existsSync43(entryPath))
+  if (!existsSync44(entryPath))
     return fail2([`No such file: ${entryPath}`]);
   const source = readFileSync36(entryPath, "utf8");
   const localImport = /(?:^|\n)\s*(?:import|export)[^;\n]*from\s+["'](\.[^"']*)["']/.exec(source);
@@ -32086,7 +32281,7 @@ async function scaffold(target) {
     chosen = answer.trim();
   }
   const path = resolve29(withPolicyExtension(chosen ?? "my-policies"));
-  if (existsSync43(path)) {
+  if (existsSync44(path)) {
     return fail2([`${path} already exists — name a different file, or edit that one.`]);
   }
   mkdirSync29(resolve29(path, ".."), { recursive: true });
@@ -32538,7 +32733,7 @@ function pushExistingHistory(dir, owner, name, token) {
   const branch = git(["rev-parse", "--abbrev-ref", "HEAD"]);
   if (!branch || branch === "HEAD" || !git(["rev-parse", "--verify", "HEAD"]))
     return false;
-  const askpass = join38(mkdtempSync3(join38(tmpdir4(), "fpai-askpass-")), "askpass.sh");
+  const askpass = join39(mkdtempSync3(join39(tmpdir4(), "fpai-askpass-")), "askpass.sh");
   try {
     writeFileSync26(askpass, `#!/bin/sh
 case "$1" in
@@ -33584,7 +33779,7 @@ var init_install_prompt = __esm(() => {
 
 // src/hooks/manager.ts
 import { execSync as execSync7 } from "node:child_process";
-import { existsSync as existsSync44 } from "node:fs";
+import { existsSync as existsSync45 } from "node:fs";
 import { resolve as resolve30, basename as basename9 } from "node:path";
 import { platform as platform4, arch as arch4, release as release3, hostname as hostname6 } from "node:os";
 function getSettingsPath2(scope, cwd) {
@@ -33806,7 +34001,7 @@ async function installHooksImpl2(policyNames, scope = "user", cwd, includeBeta =
   } else if (customPoliciesPath && (typeof customPoliciesPath === "string" || customPoliciesPath.length > 0)) {
     const incoming = (typeof customPoliciesPath === "string" ? [customPoliciesPath] : customPoliciesPath).map((path) => resolve30(path));
     const carried = (previousConfig.customPoliciesPaths ?? (previousConfig.customPoliciesPath ? [previousConfig.customPoliciesPath] : [])).map((path) => resolve30(path)).filter((path) => {
-      if (existsSync44(path))
+      if (existsSync45(path))
         return true;
       console.log(`Dropping custom policies path (file no longer exists): ${path}`);
       return false;
@@ -34029,7 +34224,7 @@ async function removeHooks2(policyNames, scope = "user", cwd, opts) {
     const scopesToRemove = scope === "all" ? [...integration.scopes] : integration.scopes.includes(scope) ? [scope] : [];
     for (const s of scopesToRemove) {
       const settingsPaths = settingsPathsFor(integration, s, cwd);
-      const existing = settingsPaths.filter((p) => existsSync44(p));
+      const existing = settingsPaths.filter((p) => existsSync45(p));
       if (existing.length === 0) {
         if (scope !== "all" && selectedClis.length === 1) {
           console.log("No settings file found. Nothing to remove.");
@@ -34175,7 +34370,7 @@ async function listHooks(cwd) {
     for (const path of explicitPaths) {
       const absPath = resolve30(findProjectConfigDir(cwd ?? process.cwd()), path);
       groups.push(note(absPath, opts));
-      if (!existsSync44(absPath)) {
+      if (!existsSync45(absPath)) {
         groups.push(warning([`file not found: ${absPath}`], opts));
         continue;
       }
@@ -34753,19 +34948,19 @@ function parseScriptArgs(argv) {
 var init_parse_script_args = () => {};
 
 // scripts/install-diagnosis.mjs
-import { existsSync as existsSync45, readFileSync as readFileSync38, realpathSync as realpathSync4 } from "node:fs";
+import { existsSync as existsSync46, readFileSync as readFileSync38, realpathSync as realpathSync4 } from "node:fs";
 import { dirname as dirname22, resolve as resolve32 } from "node:path";
 import { homedir as homedir32, platform as platform5 } from "node:os";
 import { spawnSync } from "node:child_process";
 function findPackageRoot(start) {
   try {
     let dir = realpathSync4(start);
-    if (existsSync45(dir) && !existsSync45(resolve32(dir, "package.json"))) {
+    if (existsSync46(dir) && !existsSync46(resolve32(dir, "package.json"))) {
       dir = dirname22(dir);
     }
     while (true) {
       const pkgPath = resolve32(dir, "package.json");
-      if (existsSync45(pkgPath)) {
+      if (existsSync46(pkgPath)) {
         try {
           const pkg = JSON.parse(readFileSync38(pkgPath, "utf8"));
           if (pkg.name === PKG_NAME)
@@ -34812,7 +35007,7 @@ function locateNpmGlobal() {
     if (!root)
       return null;
     const candidate = resolve32(root, PKG_NAME);
-    return existsSync45(resolve32(candidate, "package.json")) ? candidate : null;
+    return existsSync46(resolve32(candidate, "package.json")) ? candidate : null;
   } catch {
     return null;
   }
@@ -34820,7 +35015,7 @@ function locateNpmGlobal() {
 function locateBunGlobal() {
   try {
     const candidate = resolve32(homedir32(), ".bun", "install", "global", "node_modules", PKG_NAME);
-    return existsSync45(resolve32(candidate, "package.json")) ? candidate : null;
+    return existsSync46(resolve32(candidate, "package.json")) ? candidate : null;
   } catch {
     return null;
   }
@@ -34923,7 +35118,7 @@ var init_dashboard_host = __esm(() => {
 
 // scripts/launch.ts
 import { spawn as spawn2 } from "child_process";
-import { realpathSync as realpathSync5, existsSync as existsSync46 } from "node:fs";
+import { realpathSync as realpathSync5, existsSync as existsSync47 } from "node:fs";
 import { resolve as resolve33, dirname as dirname23 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 import { createInterface } from "node:readline";
@@ -34950,7 +35145,7 @@ function launch(mode) {
     cmd = "node";
     const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve33(dirname23(realpathSync5(fileURLToPath2(import.meta.url))), "..");
     const serverJsPath = resolve33(packageRoot, ".next/standalone/server.js");
-    if (!existsSync46(serverJsPath)) {
+    if (!existsSync47(serverJsPath)) {
       let shadowMessage = null;
       try {
         const diag = diagnoseShadow({ selfPackageRoot: packageRoot, selfVersion: version2 });
@@ -35760,7 +35955,7 @@ var init_session_pause_cli = __esm(() => {
 
 // scripts/launch.ts
 import { spawn as spawn3 } from "child_process";
-import { realpathSync as realpathSync6, existsSync as existsSync47 } from "node:fs";
+import { realpathSync as realpathSync6, existsSync as existsSync48 } from "node:fs";
 import { resolve as resolve34, dirname as dirname24 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { createInterface as createInterface2 } from "node:readline";
@@ -35787,7 +35982,7 @@ function launch2(mode) {
     cmd = "node";
     const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve34(dirname24(realpathSync6(fileURLToPath3(import.meta.url))), "..");
     const serverJsPath = resolve34(packageRoot, ".next/standalone/server.js");
-    if (!existsSync47(serverJsPath)) {
+    if (!existsSync48(serverJsPath)) {
       let shadowMessage = null;
       try {
         const diag = diagnoseShadow({ selfPackageRoot: packageRoot, selfVersion: version2 });
@@ -35887,7 +36082,7 @@ import { realpathSync as realpathSync7 } from "fs";
 import { dirname as dirname25, resolve as resolve35 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 // package.json
-var version = "1.0.4-beta.7";
+var version = "1.0.4-beta.8";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {