failproofai 1.0.5 → 1.0.6-beta.0

package/dist/cli.mjs

@@ -29,7 +29,7 @@ var __esm = (fn, res, err) => () => {
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // package.json
-var version2 = "1.0.5", package_default;
+var version2 = "1.0.6-beta.0", package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "failproofai",
@@ -45,6 +45,7 @@ var init_package = __esm(() => {
       "scripts/",
       "lib/",
       "pi-extension/",
+      "hermes-plugin/",
       "openclaw-plugin/",
       ".next/standalone/",
       "dist/",
@@ -113,15 +114,15 @@ var init_package = __esm(() => {
       access: "public"
     },
     devDependencies: {
-      "@anthropic-ai/sdk": "^0.123.0",
+      "@anthropic-ai/sdk": "^0.125.0",
       "@mdx-js/mdx": "^3.1.1",
       "@tailwindcss/postcss": "^4.3.1",
       "@tanstack/react-virtual": "^3.14.10",
       "@testing-library/jest-dom": "^7.0.0",
       "@testing-library/react": "^16.3.2",
       "@testing-library/user-event": "^14.6.5",
-      "@types/node": "26.4.1",
-      "@types/react": "19.2.18",
+      "@types/node": "26.5.1",
+      "@types/react": "19.3.0",
       "@types/react-dom": "^19.2.3",
       "@vitejs/plugin-react": "^6.1.0",
       clsx: "^2.1.1",
@@ -154,16 +155,16 @@ var init_package = __esm(() => {
       browserslist: "4.28.8"
     },
     optionalDependencies: {
-      "@failproofai/failproofaid-linux-x64": "1.0.5",
-      "@failproofai/failproofaid-linux-arm64": "1.0.5",
-      "@failproofai/failproofaid-darwin-x64": "1.0.5",
-      "@failproofai/failproofaid-darwin-arm64": "1.0.5"
+      "@failproofai/failproofaid-linux-x64": "1.0.6-beta.0",
+      "@failproofai/failproofaid-linux-arm64": "1.0.6-beta.0",
+      "@failproofai/failproofaid-darwin-x64": "1.0.6-beta.0",
+      "@failproofai/failproofaid-darwin-arm64": "1.0.6-beta.0"
     },
     failproofaidBinaries: {
-      "linux-x64": "5fb4c8a993af9279e46306803c68d6650ea57290bbd7ec92795a7f7b696bb506",
-      "linux-arm64": "21c502073649d9c12710fc2707b9dee08b7ac1528b8544b85a755017c8fdff0e",
-      "darwin-x64": "5e02c2f4887793c64f5553d8d00fd21507f88dce1a6869ca1aca2f6468129373",
-      "darwin-arm64": "65be288a3485ca86869580a036e6c7e9b7b5660a6589143b375586b6c28b5c84"
+      "linux-x64": "38637a91db9a0e5683bbfbfffbba3d65e421960c3135510f23541df5f9d60478",
+      "linux-arm64": "b9a2d9126fb9816b7743ec5b068d36d6515fa3a93fc2e3801fbe3a7a1b2143bf",
+      "darwin-x64": "a06675cd28b3d2f54d45a28f527643841a69006dd68f989dad654806b190948b",
+      "darwin-arm64": "6ef65b956ebff944c38cf2d65b6dc1066384aba7952d7d19c4805c1f1ba593ba"
     }
   };
 });
@@ -5101,36 +5102,38 @@ var require_Alias = __commonJS(function(exports) {
         if (node.anchor === this.source)
           found = node;
       }
+      if (found && ctx) {
+        const { anchors, doc, maxAliasCount } = ctx;
+        let data = anchors.get(found);
+        if (!data) {
+          toJS.toJS(found, null, ctx);
+          data = anchors.get(found);
+        }
+        if (data?.res === undefined) {
+          const msg = "This should not happen: Alias anchor was not resolved?";
+          throw new ReferenceError(msg);
+        }
+        if (maxAliasCount >= 0) {
+          data.count += 1;
+          if (data.aliasCount === 0)
+            data.aliasCount = getAliasCount(doc, found, anchors);
+          if (data.count * data.aliasCount > maxAliasCount) {
+            const msg = "Excessive alias count indicates a resource exhaustion attack";
+            throw new ReferenceError(msg);
+          }
+        }
+      }
       return found;
     }
     toJSON(_arg, ctx) {
       if (!ctx)
         return { source: this.source };
-      const { anchors, doc, maxAliasCount } = ctx;
-      const source = this.resolve(doc, ctx);
+      const source = this.resolve(ctx.doc, ctx);
       if (!source) {
         const msg = `Unresolved alias (the anchor must be set before the alias): ${this.source}`;
         throw new ReferenceError(msg);
       }
-      let data = anchors.get(source);
-      if (!data) {
-        toJS.toJS(source, null, ctx);
-        data = anchors.get(source);
-      }
-      if (data?.res === undefined) {
-        const msg = "This should not happen: Alias anchor was not resolved?";
-        throw new ReferenceError(msg);
-      }
-      if (maxAliasCount >= 0) {
-        data.count += 1;
-        if (data.aliasCount === 0)
-          data.aliasCount = getAliasCount(doc, source, anchors);
-        if (data.count * data.aliasCount > maxAliasCount) {
-          const msg = "Excessive alias count indicates a resource exhaustion attack";
-          throw new ReferenceError(msg);
-        }
-      }
-      return data.res;
+      return ctx.anchors.get(source).res;
     }
     toString(ctx, _onComment, _onChompKeep) {
       const src = `*${this.source}`;
@@ -8892,33 +8895,32 @@ var require_resolve_flow_scalar = __commonJS(function(exports) {
     }
     if (badChar)
       onError(0, "BAD_SCALAR_START", `Plain value cannot start with ${badChar}`);
-    return foldLines(source);
+    return unfoldLines(source);
   }
   function singleQuotedValue(source, onError) {
     if (source[source.length - 1] !== "'" || source.length === 1)
       onError(source.length, "MISSING_CHAR", "Missing closing 'quote");
-    return foldLines(source.slice(1, -1)).replace(/''/g, "'");
+    return unfoldLines(source.slice(1, -1)).replace(/''/g, "'");
   }
-  function foldLines(source) {
-    let first, line;
+  function unfoldLines(source) {
+    const line = /(.*?)\r?\n/sy;
+    let match = line.exec(source);
+    if (!match)
+      return source;
+    let trimEnd, trimBoth;
     try {
-      first = new RegExp(`(.*?)(?<![ 	])[ 	]*\r?
-`, "sy");
-      line = new RegExp(`[ 	]*(.*?)(?:(?<![ 	])[ 	]*)?\r?
-`, "sy");
+      trimEnd = new RegExp("(?<![ \t])[ \t]+$");
+      trimBoth = new RegExp("^[ \t]+|(?<![ \t])[ \t]+$", "g");
     } catch {
-      first = /(.*?)[ \t]*\r?\n/sy;
-      line = /[ \t]*(.*?)[ \t]*\r?\n/sy;
+      trimEnd = /[ \t]+$/;
+      trimBoth = /^[ \t]+|[ \t]+$/g;
     }
-    let match = first.exec(source);
-    if (!match)
-      return source;
-    let res = match[1];
+    let res = match[1].replace(trimEnd, "");
     let sep = " ";
-    let pos = first.lastIndex;
-    line.lastIndex = pos;
+    let pos = line.lastIndex;
     while (match = line.exec(source)) {
-      if (match[1] === "") {
+      const lm = match[1].replace(trimBoth, "");
+      if (lm === "") {
         if (sep === `
 `)
           res += sep;
@@ -8926,7 +8928,7 @@ var require_resolve_flow_scalar = __commonJS(function(exports) {
           sep = `
 `;
       } else {
-        res += sep + match[1];
+        res += sep + lm;
         sep = " ";
       }
       pos = line.lastIndex;
@@ -11619,7 +11621,17 @@ var init_openclaw_profiles = () => {};
 
 // src/hooks/integrations.ts
 import { execSync as execSync3 } from "node:child_process";
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync3, existsSync as existsSync7, mkdirSync as mkdirSync4, unlinkSync } from "node:fs";
+import {
+  cpSync,
+  readFileSync as readFileSync5,
+  writeFileSync as writeFileSync3,
+  existsSync as existsSync7,
+  lstatSync,
+  mkdirSync as mkdirSync4,
+  renameSync as renameSync2,
+  rmSync as rmSync2,
+  unlinkSync
+} from "node:fs";
 import { resolve as resolve8, dirname as dirname5 } from "node:path";
 import { fileURLToPath } from "node:url";
 import { homedir as homedir6 } from "node:os";
@@ -11921,19 +11933,125 @@ function makePiProjectRelativeEntry(extPath) {
   }
   return extResolved;
 }
-function hermesConfigHasHooks(settingsPath) {
-  if (!existsSync7(settingsPath))
-    return false;
+function getHermesPluginSourcePath() {
+  const fromEnv = process.env.FAILPROOFAI_PACKAGE_ROOT;
+  if (fromEnv)
+    return resolve8(fromEnv, "hermes-plugin");
+  return resolve8(fileURLToPath(import.meta.url), "..", "..", "..", "hermes-plugin");
+}
+function hermesPluginPathForSettings(settingsPath) {
+  return resolve8(dirname5(settingsPath), "plugins", HERMES_PLUGIN_ID);
+}
+function hasManagedHermesPlugin(settingsPath) {
+  const pluginPath = hermesPluginPathForSettings(settingsPath);
   try {
-    const doc = readYamlDoc(settingsPath);
-    const js = doc.toJS() ?? {};
-    const hooks = js.hooks;
-    if (!hooks || typeof hooks !== "object")
+    if (lstatSync(pluginPath).isSymbolicLink())
       return false;
-    for (const entries of Object.values(hooks)) {
-      if (Array.isArray(entries) && entries.some((h) => isMarkedHook(h)))
-        return true;
+    if (!existsSync7(resolve8(pluginPath, HERMES_PLUGIN_MARKER)))
+      return false;
+    return HERMES_PLUGIN_FILES.every((file) => existsSync7(resolve8(pluginPath, file)));
+  } catch {
+    return false;
+  }
+}
+function hasHermesPluginMarker(settingsPath) {
+  const pluginPath = hermesPluginPathForSettings(settingsPath);
+  try {
+    return !lstatSync(pluginPath).isSymbolicLink() && existsSync7(resolve8(pluginPath, HERMES_PLUGIN_MARKER));
+  } catch {
+    return false;
+  }
+}
+function installHermesPlugin(settingsPath) {
+  const source = getHermesPluginSourcePath();
+  for (const file of HERMES_PLUGIN_FILES) {
+    if (!existsSync7(resolve8(source, file))) {
+      throw new Error(`Hermes plugin asset is missing from the failproofai package: ${file}`);
     }
+  }
+  const destination = hermesPluginPathForSettings(settingsPath);
+  if (existsSync7(destination)) {
+    if (lstatSync(destination).isSymbolicLink() || !existsSync7(resolve8(destination, HERMES_PLUGIN_MARKER))) {
+      throw new Error(`Refusing to overwrite an unmanaged Hermes plugin at ${destination}. ` + `Move it aside or install FailproofAI under a different Hermes profile.`);
+    }
+  }
+  mkdirSync4(dirname5(destination), { recursive: true });
+  const suffix = `${process.pid}-${Date.now()}`;
+  const temporary = `${destination}.install-${suffix}`;
+  const backup = `${destination}.backup-${suffix}`;
+  let movedExisting = false;
+  try {
+    mkdirSync4(temporary, { recursive: true });
+    for (const file of HERMES_PLUGIN_FILES) {
+      cpSync(resolve8(source, file), resolve8(temporary, file));
+    }
+    writeFileSync3(resolve8(temporary, HERMES_PLUGIN_MARKER), "Managed by failproofai. Remove with `failproofai policies --uninstall --cli hermes`.\n", { encoding: "utf8", mode: 384 });
+    if (existsSync7(destination)) {
+      renameSync2(destination, backup);
+      movedExisting = true;
+    }
+    renameSync2(temporary, destination);
+    if (movedExisting)
+      rmSync2(backup, { recursive: true, force: true });
+  } catch (err) {
+    rmSync2(temporary, { recursive: true, force: true });
+    if (movedExisting && !existsSync7(destination) && existsSync7(backup)) {
+      renameSync2(backup, destination);
+    }
+    throw err;
+  }
+}
+function removeManagedHermesPlugin(settingsPath) {
+  const pluginPath = hermesPluginPathForSettings(settingsPath);
+  if (!hasHermesPluginMarker(settingsPath))
+    return false;
+  rmSync2(pluginPath, { recursive: true, force: true });
+  return true;
+}
+function removeLegacyHermesHooks(doc) {
+  const js = doc.toJS() ?? {};
+  const hooks = js.hooks;
+  let removed = 0;
+  if (hooks && typeof hooks === "object") {
+    for (const eventType of Object.keys(hooks)) {
+      const entries = hooks[eventType];
+      if (!Array.isArray(entries))
+        continue;
+      const before = entries.length;
+      const filtered = entries.filter((hook) => !isMarkedHook(hook));
+      removed += before - filtered.length;
+      if (filtered.length === 0)
+        delete hooks[eventType];
+      else
+        hooks[eventType] = filtered;
+    }
+    if (Object.keys(hooks).length === 0) {
+      doc.delete("hooks");
+      if (removed > 0)
+        doc.delete("hooks_auto_accept");
+    } else {
+      doc.set("hooks", hooks);
+    }
+  }
+  return removed;
+}
+function hermesConfigState(settingsPath) {
+  if (!existsSync7(settingsPath)) {
+    return { pluginEnabled: false, legacyShellHookPresent: false };
+  }
+  const doc = readYamlDoc(settingsPath);
+  const js = doc.toJS() ?? {};
+  const enabled = js.plugins?.enabled;
+  const legacyShellHookPresent = !!js.hooks && typeof js.hooks === "object" && Object.values(js.hooks).some((entries) => Array.isArray(entries) && entries.some((entry) => isMarkedHook(entry)));
+  return {
+    pluginEnabled: Array.isArray(enabled) && enabled.includes(HERMES_PLUGIN_ID),
+    legacyShellHookPresent
+  };
+}
+function hermesConfigHasHooks(settingsPath) {
+  try {
+    const state = hermesConfigState(settingsPath);
+    return state.pluginEnabled && hasManagedHermesPlugin(settingsPath) && !state.legacyShellHookPresent;
   } catch {}
   return false;
 }
@@ -11967,7 +12085,7 @@ function listInstallableIds() {
 function detectInstalledClis() {
   return INTEGRATION_TYPES.filter((id) => INTEGRATIONS[id]?.detectInstalled());
 }
-var claudeCode, codex, copilot, cursor, OPENCODE_PLUGIN_REL_PATH = "./plugins/failproofai.mjs", opencode, pi, hermes, OPENCLAW_PLUGIN_ID = "failproofai", openclaw, factory, devin, ANTIGRAVITY_HOOK_NAME = "failproofai", ANTIGRAVITY_TOOL_EVENTS, antigravity, goose, INTEGRATIONS;
+var claudeCode, codex, copilot, cursor, OPENCODE_PLUGIN_REL_PATH = "./plugins/failproofai.mjs", opencode, pi, HERMES_PLUGIN_ID = "failproofai", HERMES_PLUGIN_MARKER = ".failproofai-managed", HERMES_PLUGIN_FILES, hermes, OPENCLAW_PLUGIN_ID = "failproofai", openclaw, factory, devin, ANTIGRAVITY_HOOK_NAME = "failproofai", ANTIGRAVITY_TOOL_EVENTS, antigravity, goose, INTEGRATIONS;
 var init_integrations = __esm(() => {
   init_dist();
   init_hermes_profiles();
@@ -12620,6 +12738,7 @@ var init_integrations = __esm(() => {
       return binaryExists("pi");
     }
   };
+  HERMES_PLUGIN_FILES = ["plugin.yaml", "__init__.py", "client.py", "ledger.py"];
   hermes = {
     id: "hermes",
     displayName: "Hermes",
@@ -12637,62 +12756,62 @@ var init_integrations = __esm(() => {
     writeSettings(settingsPath, settings) {
       writeYamlDoc(settingsPath, settings);
     },
-    buildHookEntry(binaryPath, eventType, scope) {
-      const command = scope === "project" ? `npx -y failproofai --hook ${eventType} --cli hermes` : `"${binaryPath}" --hook ${eventType} --cli hermes`;
+    prepareInstall(settingsPath) {
+      installHermesPlugin(settingsPath);
+    },
+    buildHookEntry(_binaryPath, _eventType, _scope) {
       return {
-        command,
-        timeout: 30,
-        [FAILPROOFAI_HOOK_MARKER]: true
+        [FAILPROOFAI_HOOK_MARKER]: true,
+        _hermesPluginPath: getHermesPluginSourcePath()
       };
     },
     isFailproofaiHook: isMarkedHook,
-    writeHookEntries(settings, binaryPath, scope) {
+    writeHookEntries(settings) {
       const doc = settings;
+      removeLegacyHermesHooks(doc);
       const js = doc.toJS() ?? {};
-      const hooks = js.hooks && typeof js.hooks === "object" ? js.hooks : {};
-      for (const eventType of HERMES_HOOK_EVENT_TYPES) {
-        const entry = this.buildHookEntry(binaryPath, eventType, scope);
-        const arr = Array.isArray(hooks[eventType]) ? hooks[eventType] : [];
-        const idx = arr.findIndex((h) => isMarkedHook(h));
-        if (idx >= 0)
-          arr[idx] = entry;
-        else
-          arr.push(entry);
-        hooks[eventType] = arr;
-      }
-      doc.set("hooks", hooks);
-      doc.set("hooks_auto_accept", true);
+      const plugins = js.plugins && typeof js.plugins === "object" ? js.plugins : {};
+      const enabled = Array.isArray(plugins.enabled) ? [...plugins.enabled] : [];
+      if (!enabled.includes(HERMES_PLUGIN_ID))
+        enabled.push(HERMES_PLUGIN_ID);
+      plugins.enabled = enabled;
+      if (Array.isArray(plugins.disabled)) {
+        plugins.disabled = plugins.disabled.filter((name) => name !== HERMES_PLUGIN_ID);
+        if (plugins.disabled.length === 0)
+          delete plugins.disabled;
+      }
+      doc.set("plugins", plugins);
     },
     removeHooksFromFile(settingsPath) {
-      if (!existsSync7(settingsPath))
-        return 0;
       const doc = readYamlDoc(settingsPath);
+      let removed = removeLegacyHermesHooks(doc);
       const js = doc.toJS() ?? {};
-      const hooks = js.hooks;
-      let removed = 0;
-      if (hooks && typeof hooks === "object") {
-        for (const eventType of Object.keys(hooks)) {
-          const entries = hooks[eventType];
-          if (!Array.isArray(entries))
-            continue;
-          const before = entries.length;
-          const filtered = entries.filter((h) => !isMarkedHook(h));
-          removed += before - filtered.length;
-          if (filtered.length === 0)
-            delete hooks[eventType];
-          else
-            hooks[eventType] = filtered;
+      const plugins = js.plugins;
+      let configChanged = removed > 0;
+      if (plugins && typeof plugins === "object") {
+        if (Array.isArray(plugins.enabled)) {
+          const before = plugins.enabled.length;
+          plugins.enabled = plugins.enabled.filter((name) => name !== HERMES_PLUGIN_ID);
+          if (plugins.enabled.length !== before) {
+            removed += 1;
+            configChanged = true;
+          }
+          if (plugins.enabled.length === 0)
+            delete plugins.enabled;
         }
-        if (removed > 0) {
-          if (Object.keys(hooks).length === 0)
-            doc.delete("hooks");
-          else
-            doc.set("hooks", hooks);
+        if (plugins.entries && HERMES_PLUGIN_ID in plugins.entries) {
+          delete plugins.entries[HERMES_PLUGIN_ID];
+          configChanged = true;
         }
+        if (Object.keys(plugins).length === 0)
+          doc.delete("plugins");
+        else
+          doc.set("plugins", plugins);
       }
-      const droppedAutoAccept = doc.delete("hooks_auto_accept");
-      if (removed > 0 || droppedAutoAccept)
+      if (configChanged)
         writeYamlDoc(settingsPath, doc);
+      if (removeManagedHermesPlugin(settingsPath))
+        removed += 1;
       return removed;
     },
     hooksInstalledInSettings(scope, cwd) {
@@ -14883,7 +15002,7 @@ var init_pack_cli = __esm(() => {
 
 // src/hooks/pack-store.ts
 import { createHash as createHash5 } from "node:crypto";
-import { existsSync as existsSync9, mkdirSync as mkdirSync5, readFileSync as readFileSync6, renameSync as renameSync2, rmSync as rmSync2, writeFileSync as writeFileSync4 } from "node:fs";
+import { existsSync as existsSync9, mkdirSync as mkdirSync5, readFileSync as readFileSync6, renameSync as renameSync3, rmSync as rmSync3, writeFileSync as writeFileSync4 } from "node:fs";
 import { dirname as dirname7, resolve as resolve11 } from "node:path";
 function baseUrl() {
   return (process.env.FAILPROOFAI_PACK_BASE_URL || DEFAULT_BASE_URL).replace(/\/+$/, "");
@@ -15057,9 +15176,9 @@ function writeAtomic(target, bytes) {
   try {
     mkdirSync5(dirname7(target), { recursive: true });
     writeFileSync4(tempPath, bytes);
-    renameSync2(tempPath, target);
+    renameSync3(tempPath, target);
   } catch (err) {
-    rmSync2(tempPath, { force: true });
+    rmSync3(tempPath, { force: true });
     throw err;
   }
 }
@@ -16178,7 +16297,7 @@ import {
   readFileSync as readFileSync7,
   writeFileSync as writeFileSync5,
   appendFileSync as appendFileSync2,
-  renameSync as renameSync3,
+  renameSync as renameSync4,
   readdirSync as readdirSync4,
   mkdirSync as mkdirSync6,
   existsSync as existsSync10,
@@ -16243,7 +16362,7 @@ function persistHookActivity(entry) {
 function rotate(currentPath, countPath) {
   const archiveName = `page-${Date.now()}-${rotateSeq++}.jsonl`;
   const archivePath = join6(storeDirValue(), archiveName);
-  renameSync3(currentPath, archivePath);
+  renameSync4(currentPath, archivePath);
   writeCount(countPath, 0);
 }
 function readCount(countPath) {
@@ -16289,7 +16408,7 @@ function writeStoredStats(s) {
   const tmpPath = join6(storeDirValue(), `stats.json.${process.pid}.tmp`);
   try {
     writeFileSync5(tmpPath, JSON.stringify(s), "utf-8");
-    renameSync3(tmpPath, join6(storeDirValue(), STATS_FILE));
+    renameSync4(tmpPath, join6(storeDirValue(), STATS_FILE));
     return true;
   } catch {
     try {
@@ -21444,8 +21563,8 @@ import {
   chmodSync as chmodSync2,
   existsSync as existsSync18,
   mkdirSync as mkdirSync8,
-  renameSync as renameSync4,
-  rmSync as rmSync3,
+  renameSync as renameSync5,
+  rmSync as rmSync4,
   statSync as statSync15,
   writeFileSync as writeFileSync7
 } from "node:fs";
@@ -21464,14 +21583,14 @@ function writeJsonAtomically(filePath, value, opts = {}) {
       if ((statSync15(tmp).mode & 63) !== 0)
         chmodSync2(tmp, mode);
     } catch {}
-    renameSync4(tmp, filePath);
+    renameSync5(tmp, filePath);
     try {
       if ((statSync15(filePath).mode & 63) !== 0)
         chmodSync2(filePath, mode);
     } catch {}
   } catch (err) {
     try {
-      rmSync3(tmp, { force: true });
+      rmSync4(tmp, { force: true });
     } catch {}
     throw err;
   }
@@ -21479,7 +21598,7 @@ function writeJsonAtomically(filePath, value, opts = {}) {
 var init_atomic_write = () => {};
 
 // src/hooks/session-pause.ts
-import { existsSync as existsSync19, mkdirSync as mkdirSync9, readdirSync as readdirSync13, readFileSync as readFileSync15, rmSync as rmSync4 } from "node:fs";
+import { existsSync as existsSync19, mkdirSync as mkdirSync9, readdirSync as readdirSync13, readFileSync as readFileSync15, rmSync as rmSync5 } from "node:fs";
 import { createHash as createHash6 } from "node:crypto";
 import { join as join30, resolve as resolve16 } from "node:path";
 function pauseStateDir() {
@@ -21580,7 +21699,7 @@ function clearPause(sessionId) {
   if (!existsSync19(path))
     return false;
   try {
-    rmSync4(path);
+    rmSync5(path);
     return true;
   } catch {
     return false;
@@ -21646,8 +21765,8 @@ import {
   mkdirSync as mkdirSync10,
   readdirSync as readdirSync14,
   readFileSync as readFileSync16,
-  renameSync as renameSync5,
-  rmSync as rmSync5,
+  renameSync as renameSync6,
+  rmSync as rmSync6,
   statSync as statSync16,
   writeFileSync as writeFileSync8
 } from "node:fs";
@@ -21706,7 +21825,7 @@ function pruneOldDaemonBinaries(keep = 2) {
     }).sort((a, b) => b.mtime - a.mtime);
     for (const stale of entries.slice(keep)) {
       try {
-        rmSync5(stale.full, { force: true });
+        rmSync6(stale.full, { force: true });
         removed.push(stale.full);
       } catch {}
     }
@@ -21720,10 +21839,10 @@ function installBinaryBytes(binary) {
     mkdirSync10(daemonBinaryDir(), { recursive: true });
     writeFileSync8(tempPath, binary);
     chmodSync3(tempPath, 493);
-    renameSync5(tempPath, target);
+    renameSync6(tempPath, target);
     return target;
   } catch (err) {
-    rmSync5(tempPath, { force: true });
+    rmSync6(tempPath, { force: true });
     throw err;
   }
 }
@@ -21941,7 +22060,7 @@ import {
   readFileSync as readFileSync17,
   writeFileSync as writeFileSync9,
   unlinkSync as unlinkSync3,
-  rmSync as rmSync6
+  rmSync as rmSync7
 } from "node:fs";
 import { homedir as homedir22, tmpdir as tmpdir2, userInfo } from "node:os";
 import { resolve as resolve18 } from "node:path";
@@ -22120,7 +22239,7 @@ function writePrivilegedFile(destination, contents, mode = "0644") {
     writeFileSync9(staging, contents, "utf8");
     runPrivileged("install", ["-m", mode, staging, destination]);
   } finally {
-    rmSync6(stagingDir, { recursive: true, force: true });
+    rmSync7(stagingDir, { recursive: true, force: true });
   }
 }
 function removeLegacyUserService() {
@@ -22597,8 +22716,8 @@ import {
   mkdirSync as mkdirSync12,
   readFileSync as readFileSync18,
   readdirSync as readdirSync15,
-  renameSync as renameSync6,
-  rmSync as rmSync7,
+  renameSync as renameSync7,
+  rmSync as rmSync8,
   rmdirSync,
   statSync as statSync17,
   writeFileSync as writeFileSync10
@@ -22629,7 +22748,7 @@ function migrateConventionPolicies() {
       const name = `${prefix}${entry.name}`;
       if (!existsSync23(target)) {
         try {
-          renameSync6(source, target);
+          renameSync7(source, target);
           moved.push(name);
         } catch {}
         continue;
@@ -22666,7 +22785,7 @@ function migrateLegacySpool() {
         while (existsSync23(resolve19(to, name)))
           name = `legacy-${n++}-${entry.name}`;
         try {
-          renameSync6(resolve19(from, entry.name), resolve19(to, name));
+          renameSync7(resolve19(from, entry.name), resolve19(to, name));
           moved.push(name);
         } catch {
           try {
@@ -22701,7 +22820,7 @@ function migrateHookActivity() {
         target = resolve19(to, name);
       }
       try {
-        renameSync6(source, target);
+        renameSync7(source, target);
         moved.push(name);
       } catch {
         try {
@@ -22736,7 +22855,7 @@ function retirePolicyConfigKeys() {
     delete parsed[key];
   try {
     if (Object.keys(parsed).length === 0)
-      rmSync7(at, { force: true });
+      rmSync8(at, { force: true });
     else
       writeFileSync10(at, JSON.stringify(parsed, null, 2) + `
 `, "utf8");
@@ -22922,7 +23041,7 @@ function resetHome(from, to = LAYOUT_VERSION) {
     if (!existsSync23(path))
       continue;
     try {
-      rmSync7(path, { recursive: true, force: true });
+      rmSync8(path, { recursive: true, force: true });
       removed.push(path);
     } catch {}
   }
@@ -23293,7 +23412,20 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
         }
       } catch {}
     }
-    return { exitCode: result.exitCode, stdout: result.stdout, stderr: result.stderr };
+    return {
+      exitCode: result.exitCode,
+      stdout: result.stdout,
+      stderr: result.stderr,
+      evaluation: {
+        decision: result.decision,
+        policyName: result.policyName,
+        policyNames: result.policyNames ?? (result.policyName ? [result.policyName] : []),
+        reason: result.reason,
+        matchedPolicies,
+        durationMs,
+        toolName: parsed.tool_name ?? null
+      }
+    };
   } finally {
     if (opts?.awaitTelemetryFlush ?? true) {
       await flushHookTelemetry2();
@@ -24106,8 +24238,8 @@ import {
   existsSync as existsSync25,
   mkdirSync as mkdirSync14,
   readFileSync as readFileSync19,
-  renameSync as renameSync7,
-  rmSync as rmSync8,
+  renameSync as renameSync8,
+  rmSync as rmSync9,
   writeFileSync as writeFileSync12
 } from "node:fs";
 import { basename as basename5, dirname as dirname13, join as join32, resolve as resolve20 } from "node:path";
@@ -24129,22 +24261,22 @@ function migrateToLayout4() {
     if (!existsSync25(from))
       continue;
     if (existsSync25(to)) {
-      rmSync8(from, { force: true });
+      rmSync9(from, { force: true });
       continue;
     }
     mkdirSync14(dirname13(to), { recursive: true });
     try {
-      renameSync7(from, to);
+      renameSync8(from, to);
     } catch {
       try {
         copyFileSync2(from, to);
       } catch (err) {
         try {
-          rmSync8(to, { force: true });
+          rmSync9(to, { force: true });
         } catch {}
         throw err;
       }
-      rmSync8(from, { force: true });
+      rmSync9(from, { force: true });
     }
     migrated.push(`${basename5(from)} → audit/${basename5(to)}`);
   }
@@ -24202,7 +24334,7 @@ function pruneMigratedCredentials(from) {
         const copy = resolve20(migrationBackupDir(layout), as);
         if (!existsSync25(copy))
           continue;
-        rmSync8(copy, { force: true });
+        rmSync9(copy, { force: true });
         pruned.push(as);
       } catch {}
     }
@@ -24222,7 +24354,7 @@ function backupBeforeMigrating(from) {
   const dir = migrationBackupDir(from);
   const saved = [];
   try {
-    rmSync8(dir, { recursive: true, force: true });
+    rmSync9(dir, { recursive: true, force: true });
     mkdirSync14(dir, { recursive: true });
   } catch {
     return [];
@@ -25087,6 +25219,7 @@ Enabled ${selectedPolicies.length} policy(ies): ${selectedPolicies.join(", ")}
     const settingsPaths = settingsPathsFor(integration, scope, cwd);
     try {
       for (const settingsPath of settingsPaths) {
+        integration.prepareInstall?.(settingsPath);
         const settings = integration.readSettings(settingsPath);
         integration.writeHookEntries(settings, binaryPath, scope);
         integration.writeSettings(settingsPath, settings);
@@ -25143,7 +25276,11 @@ Enabled ${selectedPolicies.length} policy(ies): ${selectedPolicies.join(", ")}
   } catch {}
   for (const { cli: cliId, path } of writtenSettingsPaths) {
     const integration = getIntegration(cliId);
-    console.log(`Failproof AI hooks installed for ${integration.displayName} ` + `(${integration.eventTypes.length} event types, scope: ${scope}).`);
+    if (cliId === "hermes") {
+      console.log(`Failproof AI native plugin installed for ${integration.displayName} ` + `(8 registered hooks, scope: ${scope}).`);
+    } else {
+      console.log(`Failproof AI hooks installed for ${integration.displayName} ` + `(${integration.eventTypes.length} event types, scope: ${scope}).`);
+    }
     console.log(`Settings: ${path}`);
   }
   if (scope === "project") {
@@ -25234,7 +25371,7 @@ async function removeHooks(policyNames, scope = "user", cwd, opts) {
     const scopesToRemove = scope === "all" ? [...integration.scopes] : integration.scopes.includes(scope) ? [scope] : [];
     for (const s of scopesToRemove) {
       const settingsPaths = settingsPathsFor(integration, s, cwd);
-      const existing = settingsPaths.filter((p) => existsSync27(p));
+      const existing = cliId === "hermes" ? settingsPaths : settingsPaths.filter((p) => existsSync27(p));
       if (existing.length === 0) {
         if (scope !== "all" && selectedClis.length === 1) {
           console.log("No settings file found. Nothing to remove.");
@@ -25337,7 +25474,7 @@ var DEFAULT_FETCH_TIMEOUT_MS = 15000;
 
 // src/hooks/cloud-enrollment.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { existsSync as existsSync28, readFileSync as readFileSync22, rmSync as rmSync9 } from "node:fs";
+import { existsSync as existsSync28, readFileSync as readFileSync22, rmSync as rmSync10 } from "node:fs";
 import { hostname as hostname4 } from "node:os";
 function cloudCredentialPath() {
   return process.env.FAILPROOFAI_CLOUD_CREDENTIALS ?? credentialsFile();
@@ -25421,7 +25558,7 @@ function clearCloudCredentials() {
     if (!existsSync28(path))
       return false;
     try {
-      rmSync9(path);
+      rmSync10(path);
       return true;
     } catch {
       return false;
@@ -25746,7 +25883,7 @@ var init_setup_state = __esm(() => {
 });
 
 // src/hooks/onboarding-attempt.ts
-import { existsSync as existsSync30, mkdirSync as mkdirSync17, readFileSync as readFileSync23, rmSync as rmSync10, writeFileSync as writeFileSync15 } from "node:fs";
+import { existsSync as existsSync30, mkdirSync as mkdirSync17, readFileSync as readFileSync23, rmSync as rmSync11, writeFileSync as writeFileSync15 } from "node:fs";
 import { dirname as dirname16 } from "node:path";
 function readOnboardingAttempt() {
   const path = onboardingAttemptFile();
@@ -25785,7 +25922,7 @@ function recordOnboardingAttempt(reason, cliVersion, daemonStatus, now = Date.no
 }
 function clearOnboardingAttempt() {
   try {
-    rmSync10(onboardingAttemptFile(), { force: true });
+    rmSync11(onboardingAttemptFile(), { force: true });
   } catch {}
 }
 function blockerCleared(attempt, probe) {
@@ -25827,7 +25964,7 @@ var init_onboarding_attempt = __esm(() => {
 });
 
 // src/hooks/onboarding-lock.ts
-import { mkdirSync as mkdirSync18, readFileSync as readFileSync24, rmSync as rmSync11, writeFileSync as writeFileSync16 } from "node:fs";
+import { mkdirSync as mkdirSync18, readFileSync as readFileSync24, rmSync as rmSync12, writeFileSync as writeFileSync16 } from "node:fs";
 import { homedir as homedir26 } from "node:os";
 function onboardingLockPath(home = homedir26()) {
   return onboardingLockFile(home);
@@ -25870,7 +26007,7 @@ function acquireOnboardingLock(home = homedir26()) {
         try {
           const current = readLock(path);
           if (!current || current.pid === process.pid)
-            rmSync11(path, { force: true });
+            rmSync12(path, { force: true });
         } catch {}
       }
     };
@@ -28201,7 +28338,7 @@ var init_api_server_client = __esm(() => {
 });
 
 // lib/auth/auth-store.ts
-import { existsSync as existsSync34, readFileSync as readFileSync28, readdirSync as readdirSync18, rmSync as rmSync12 } from "node:fs";
+import { existsSync as existsSync34, readFileSync as readFileSync28, readdirSync as readdirSync18, rmSync as rmSync13 } from "node:fs";
 import { join as join36, resolve as resolve24 } from "node:path";
 function getAuthFilePath() {
   const override = process.env.FAILPROOFAI_AUTH_DIR;
@@ -28237,7 +28374,7 @@ function writeAuth(auth) {
 function deleteAuth() {
   const p = getAuthFilePath();
   if (existsSync34(p))
-    rmSync12(p, { force: true });
+    rmSync13(p, { force: true });
   try {
     const root = migrationsDir();
     if (!existsSync34(root))
@@ -28247,7 +28384,7 @@ function deleteAuth() {
         continue;
       const copy = resolve24(root, entry, "auth.json");
       if (existsSync34(copy))
-        rmSync12(copy, { force: true });
+        rmSync13(copy, { force: true });
     }
   } catch {}
 }
@@ -28497,7 +28634,7 @@ var init_harm_report = __esm(() => {
 });
 
 // src/audit/machine-store.ts
-import { existsSync as existsSync35, readFileSync as readFileSync29, rmSync as rmSync13 } from "node:fs";
+import { existsSync as existsSync35, readFileSync as readFileSync29, rmSync as rmSync14 } from "node:fs";
 import { hostname as hostname5 } from "node:os";
 import { randomUUID as randomUUID4 } from "node:crypto";
 function readMachineIdentity(home) {
@@ -30050,8 +30187,8 @@ import {
   existsSync as existsSync40,
   mkdirSync as mkdirSync25,
   readFileSync as readFileSync32,
-  renameSync as renameSync8,
-  rmSync as rmSync14,
+  renameSync as renameSync9,
+  rmSync as rmSync15,
   writeFileSync as writeFileSync23
 } from "node:fs";
 import { basename as basename8, dirname as dirname20, join as join39, resolve as resolve27 } from "node:path";
@@ -30073,22 +30210,22 @@ function migrateToLayout42() {
     if (!existsSync40(from))
       continue;
     if (existsSync40(to)) {
-      rmSync14(from, { force: true });
+      rmSync15(from, { force: true });
       continue;
     }
     mkdirSync25(dirname20(to), { recursive: true });
     try {
-      renameSync8(from, to);
+      renameSync9(from, to);
     } catch {
       try {
         copyFileSync3(from, to);
       } catch (err) {
         try {
-          rmSync14(to, { force: true });
+          rmSync15(to, { force: true });
         } catch {}
         throw err;
       }
-      rmSync14(from, { force: true });
+      rmSync15(from, { force: true });
     }
     migrated.push(`${basename8(from)} → audit/${basename8(to)}`);
   }
@@ -30146,7 +30283,7 @@ function pruneMigratedCredentials2(from) {
         const copy = resolve27(migrationBackupDir(layout), as);
         if (!existsSync40(copy))
           continue;
-        rmSync14(copy, { force: true });
+        rmSync15(copy, { force: true });
         pruned.push(as);
       } catch {}
     }
@@ -30166,7 +30303,7 @@ function backupBeforeMigrating2(from) {
   const dir = migrationBackupDir(from);
   const saved = [];
   try {
-    rmSync14(dir, { recursive: true, force: true });
+    rmSync15(dir, { recursive: true, force: true });
     mkdirSync25(dir, { recursive: true });
   } catch {
     return [];
@@ -30317,7 +30454,7 @@ import {
   readFileSync as readFileSync33,
   writeFileSync as writeFileSync24,
   unlinkSync as unlinkSync5,
-  rmSync as rmSync15
+  rmSync as rmSync16
 } from "node:fs";
 import { homedir as homedir30, tmpdir as tmpdir3, userInfo as userInfo2 } from "node:os";
 import { resolve as resolve28 } from "node:path";
@@ -30480,7 +30617,7 @@ function writePrivilegedFile2(destination, contents, mode = "0644") {
     writeFileSync24(staging, contents, "utf8");
     runPrivileged2("install", ["-m", mode, staging, destination]);
   } finally {
-    rmSync15(stagingDir, { recursive: true, force: true });
+    rmSync16(stagingDir, { recursive: true, force: true });
   }
 }
 function removeLegacyUserService2() {
@@ -30779,7 +30916,7 @@ var init_daemon_service2 = __esm(() => {
 });
 
 // src/hooks/uninstall-cli.ts
-import { existsSync as existsSync42, rmSync as rmSync16 } from "node:fs";
+import { existsSync as existsSync42, rmSync as rmSync17 } from "node:fs";
 function survey(cwd) {
   const clis = [];
   for (const id of listInstallableIds()) {
@@ -30912,7 +31049,7 @@ async function runUninstallCommand(opts = {}) {
   }
   if (opts.purge && found.homeExists) {
     try {
-      rmSync16(failproofaiHome(), { recursive: true, force: true });
+      rmSync17(failproofaiHome(), { recursive: true, force: true });
       purged = true;
       lines.push(`✓ deleted ${failproofaiHome()}`);
     } catch (err) {
@@ -30957,7 +31094,7 @@ var init_uninstall_cli = __esm(() => {
 import { execFileSync as execFileSync4 } from "node:child_process";
 import { homedir as homedir31, tmpdir as tmpdir4 } from "node:os";
 import { createHash as createHash9 } from "node:crypto";
-import { copyFileSync as copyFileSync4, existsSync as existsSync43, mkdirSync as mkdirSync27, mkdtempSync as mkdtempSync3, readFileSync as readFileSync34, readdirSync as readdirSync21, realpathSync as realpathSync3, rmSync as rmSync17, statSync as statSync26, writeFileSync as writeFileSync25 } from "node:fs";
+import { copyFileSync as copyFileSync4, existsSync as existsSync43, mkdirSync as mkdirSync27, mkdtempSync as mkdtempSync3, readFileSync as readFileSync34, readdirSync as readdirSync21, realpathSync as realpathSync3, rmSync as rmSync18, statSync as statSync26, writeFileSync as writeFileSync25 } from "node:fs";
 import { basename as basename9, dirname as dirname21, isAbsolute as isAbsolute4, join as join40, relative as relative5, resolve as resolve29, sep as sep6 } from "node:path";
 function parseList(rest, flag) {
   const idx = rest.findIndex((a) => a === flag || a.startsWith(`${flag}=`));
@@ -31741,7 +31878,7 @@ esac
     return true;
   } finally {
     try {
-      rmSync17(dirname21(askpass), { recursive: true, force: true });
+      rmSync18(dirname21(askpass), { recursive: true, force: true });
     } catch {}
   }
 }
@@ -33063,6 +33200,7 @@ Enabled ${selectedPolicies.length} policy(ies): ${selectedPolicies.join(", ")}
     const settingsPaths = settingsPathsFor(integration, scope, cwd);
     try {
       for (const settingsPath of settingsPaths) {
+        integration.prepareInstall?.(settingsPath);
         const settings = integration.readSettings(settingsPath);
         integration.writeHookEntries(settings, binaryPath, scope);
         integration.writeSettings(settingsPath, settings);
@@ -33119,7 +33257,11 @@ Enabled ${selectedPolicies.length} policy(ies): ${selectedPolicies.join(", ")}
   } catch {}
   for (const { cli: cliId, path } of writtenSettingsPaths) {
     const integration = getIntegration(cliId);
-    console.log(`Failproof AI hooks installed for ${integration.displayName} ` + `(${integration.eventTypes.length} event types, scope: ${scope}).`);
+    if (cliId === "hermes") {
+      console.log(`Failproof AI native plugin installed for ${integration.displayName} ` + `(8 registered hooks, scope: ${scope}).`);
+    } else {
+      console.log(`Failproof AI hooks installed for ${integration.displayName} ` + `(${integration.eventTypes.length} event types, scope: ${scope}).`);
+    }
     console.log(`Settings: ${path}`);
   }
   if (scope === "project") {
@@ -33210,7 +33352,7 @@ async function removeHooks2(policyNames, scope = "user", cwd, opts) {
     const scopesToRemove = scope === "all" ? [...integration.scopes] : integration.scopes.includes(scope) ? [scope] : [];
     for (const s of scopesToRemove) {
       const settingsPaths = settingsPathsFor(integration, s, cwd);
-      const existing = settingsPaths.filter((p) => existsSync44(p));
+      const existing = cliId === "hermes" ? settingsPaths : settingsPaths.filter((p) => existsSync44(p));
       if (existing.length === 0) {
         if (scope !== "all" && selectedClis.length === 1) {
           console.log("No settings file found. Nothing to remove.");
@@ -34868,10 +35010,108 @@ var init_session_pause_cli = __esm(() => {
   init_tui();
 });
 
+// src/hooks/integrations.ts
+import {
+  cpSync as cpSync2,
+  readFileSync as readFileSync37,
+  writeFileSync as writeFileSync26,
+  existsSync as existsSync47,
+  lstatSync as lstatSync2,
+  mkdirSync as mkdirSync28,
+  renameSync as renameSync10,
+  rmSync as rmSync19,
+  unlinkSync as unlinkSync6
+} from "node:fs";
+import { resolve as resolve34, dirname as dirname24 } from "node:path";
+function readYamlDoc2(path) {
+  try {
+    return existsSync47(path) ? $parseDocument(readFileSync37(path, "utf8")) : $parseDocument("");
+  } catch {
+    return $parseDocument("");
+  }
+}
+function isMarkedHook2(hook) {
+  if (!hook || typeof hook !== "object")
+    return false;
+  const h = hook;
+  if (h[FAILPROOFAI_HOOK_MARKER] === true)
+    return true;
+  const cmd = typeof h.command === "string" ? h.command : "";
+  return cmd.includes("failproofai") && cmd.includes("--hook");
+}
+function hermesPluginPathForSettings2(settingsPath) {
+  return resolve34(dirname24(settingsPath), "plugins", HERMES_PLUGIN_ID2);
+}
+function hasManagedHermesPlugin2(settingsPath) {
+  const pluginPath = hermesPluginPathForSettings2(settingsPath);
+  try {
+    if (lstatSync2(pluginPath).isSymbolicLink())
+      return false;
+    if (!existsSync47(resolve34(pluginPath, HERMES_PLUGIN_MARKER2)))
+      return false;
+    return HERMES_PLUGIN_FILES2.every((file) => existsSync47(resolve34(pluginPath, file)));
+  } catch {
+    return false;
+  }
+}
+function hermesConfigState2(settingsPath) {
+  if (!existsSync47(settingsPath)) {
+    return { pluginEnabled: false, legacyShellHookPresent: false };
+  }
+  const doc = readYamlDoc2(settingsPath);
+  const js = doc.toJS() ?? {};
+  const enabled = js.plugins?.enabled;
+  const legacyShellHookPresent = !!js.hooks && typeof js.hooks === "object" && Object.values(js.hooks).some((entries) => Array.isArray(entries) && entries.some((entry) => isMarkedHook2(entry)));
+  return {
+    pluginEnabled: Array.isArray(enabled) && enabled.includes(HERMES_PLUGIN_ID2),
+    legacyShellHookPresent
+  };
+}
+function hermesProfileHealth() {
+  return listHermesProfiles().map((profile) => {
+    const settingsPath = resolve34(profile.home, "config.yaml");
+    const config = hermesConfigState2(settingsPath);
+    const pluginInstalled = hasManagedHermesPlugin2(settingsPath);
+    return {
+      name: profile.name,
+      home: profile.home,
+      settingsPath,
+      pluginInstalled,
+      pluginEnabled: config.pluginEnabled,
+      legacyShellHookPresent: config.legacyShellHookPresent,
+      healthy: pluginInstalled && config.pluginEnabled && !config.legacyShellHookPresent
+    };
+  });
+}
+function hermesProfileStatusRows() {
+  return hermesProfileHealth().filter((profile) => existsSync47(profile.home)).map((profile) => {
+    const problems = [];
+    if (!profile.pluginInstalled)
+      problems.push("plugin files missing or incomplete");
+    if (!profile.pluginEnabled)
+      problems.push("plugin not enabled");
+    if (profile.legacyShellHookPresent)
+      problems.push("legacy shell hook also present");
+    return [
+      "hermes/" + profile.name,
+      problems.length === 0 ? "native plugin enabled" : "UNHEALTHY — " + problems.join("; ")
+    ];
+  });
+}
+var HERMES_PLUGIN_ID2 = "failproofai", HERMES_PLUGIN_MARKER2 = ".failproofai-managed", HERMES_PLUGIN_FILES2, ANTIGRAVITY_TOOL_EVENTS2;
+var init_integrations2 = __esm(() => {
+  init_dist();
+  init_hermes_profiles();
+  init_openclaw_profiles();
+  init_types();
+  HERMES_PLUGIN_FILES2 = ["plugin.yaml", "__init__.py", "client.py", "ledger.py"];
+  ANTIGRAVITY_TOOL_EVENTS2 = new Set(["PreToolUse", "PostToolUse"]);
+});
+
 // scripts/launch.ts
 import { spawn as spawn3 } from "child_process";
-import { realpathSync as realpathSync6, existsSync as existsSync47 } from "node:fs";
-import { resolve as resolve34, dirname as dirname24 } from "node:path";
+import { realpathSync as realpathSync6, existsSync as existsSync48 } from "node:fs";
+import { resolve as resolve35, dirname as dirname25 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { createInterface as createInterface2 } from "node:readline";
 function launch2(mode) {
@@ -34895,9 +35135,9 @@ function launch2(mode) {
     process.env.PORT = port;
     process.env.HOSTNAME = bindHost;
     cmd = "node";
-    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve34(dirname24(realpathSync6(fileURLToPath3(import.meta.url))), "..");
-    const serverJsPath = resolve34(packageRoot, ".next/standalone/server.js");
-    if (!existsSync47(serverJsPath)) {
+    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve35(dirname25(realpathSync6(fileURLToPath3(import.meta.url))), "..");
+    const serverJsPath = resolve35(packageRoot, ".next/standalone/server.js");
+    if (!existsSync48(serverJsPath)) {
       let shadowMessage = null;
       try {
         const diag = diagnoseShadow({ selfPackageRoot: packageRoot, selfVersion: version2 });
@@ -34994,17 +35234,17 @@ var init_cli_error2 = __esm(() => {
 
 // bin/failproofai.mjs
 import { realpathSync as realpathSync7 } from "fs";
-import { dirname as dirname25, resolve as resolve35 } from "path";
+import { dirname as dirname26, resolve as resolve36 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 // package.json
-var version = "1.0.5";
+var version = "1.0.6-beta.0";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {
-  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve35(dirname25(realpathSync7(fileURLToPath4(import.meta.url))), "..");
+  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve36(dirname26(realpathSync7(fileURLToPath4(import.meta.url))), "..");
 }
 if (!process.env.FAILPROOFAI_DIST_PATH) {
-  process.env.FAILPROOFAI_DIST_PATH = resolve35(dirname25(realpathSync7(fileURLToPath4(import.meta.url))), "..", "dist");
+  process.env.FAILPROOFAI_DIST_PATH = resolve36(dirname26(realpathSync7(fileURLToPath4(import.meta.url))), "..", "dist");
 }
 var args = process.argv.slice(2);
 if (args[0] === "p" || args[0] === "policy")
@@ -36580,7 +36820,9 @@ Run \`failproofai policies --help\` for usage.`);
         await Promise.resolve().then(() => init_tui2());
         const opts = optsFor2(process.stdout);
         const report = connectionStatusReport();
-        printBlock2(process.stdout, stack2(title2("failproofai config", versionStatusLines()[0], opts), rows2([...report.rows, ...result.rows ?? []], opts), report.warnings.length > 0 ? warning2(report.warnings, opts) : null, result.rows ? result.trailer ?? null : result.lines));
+        await Promise.resolve().then(() => init_integrations2());
+        const hermesRows = hermesProfileStatusRows();
+        printBlock2(process.stdout, stack2(title2("failproofai config", versionStatusLines()[0], opts), rows2([...report.rows, ...hermesRows, ...result.rows ?? []], opts), report.warnings.length > 0 ? warning2(report.warnings, opts) : null, result.rows ? result.trailer ?? null : result.lines));
       } else {
         await printLines(result.lines, result.exitCode === 0);
       }