failproofai 1.0.7-beta.1 → 1.0.7

package/.next/standalone/.next/server/chunks/ssr/app_actions_get-scheduled-audit_ts_0ei9sni._.js

@@ -1,3 +0,0 @@
-module.exports=[36119,81243,87481,41289,a=>{"use strict";var b=a.i(37936),c=a.i(21572),d=a.i(2157),e=a.i(75818),f=a.i(8284),g=a.i(15501),h=a.i(50227),i=a.i(8674),j=a.i(93328);function k(){return(process.env.FAILPROOF_API_URL??process.env.FAILPROOFAI_API_URL??"https://api.befailproof.ai").replace(/\/+$/,"")}class l extends Error{status;code;retryAfterSecs;constructor(a,b,c,d){super(c),this.status=a,this.code=b,this.retryAfterSecs=d,this.name="AuthApiError"}}async function m(a){let b={};try{b=await a.json()}catch{}let c=b.code??`http_${a.status}`,d=b.message??b.detail??a.statusText??"request failed",e=b.retry_after_secs;if(void 0===e){let b=a.headers.get("retry-after");if(b){let a=Number(b);Number.isFinite(a)&&(e=a)}}return void 0!==e&&(e=Math.max(0,Math.min(86400,e))),new l(a.status,c,d,e)}async function n(a,b){try{return await fetch(a,{...b,signal:function(a){let b=AbortSignal.timeout(1e4);if(!a)return b;let c=AbortSignal.any;if(c)return c([b,a]);let d=new AbortController;if(b.aborted)d.abort(b.reason);else b.addEventListener("abort",()=>d.abort(b.reason),{once:!0});if(a.aborted)d.abort(a.reason);else a.addEventListener("abort",()=>d.abort(a.reason),{once:!0});return d.signal}(b.signal??void 0)})}catch(d){let c=function(a){if(null===a||"object"!=typeof a)return!1;let b=a.name;return"AbortError"===b||"TimeoutError"===b}(d);if((0,j.trackEvent)("api_server_unreachable",{kind:c?"timeout":"network",path:function(a){try{return new URL(a).pathname}catch{return a}}(a),method:"string"==typeof b.method?b.method:"GET"}),c)throw new l(0,"timeout",`request to ${a} timed out after 10000ms`);throw d}}async function o(a,b,c){let d={"content-type":"application/json"};c?.accessToken&&(d.authorization=`Bearer ${c.accessToken}`);let e=await n(`${k()}${a}`,{method:"POST",headers:d,body:JSON.stringify(b)});if(204!==e.status){if(!e.ok)throw await m(e);return await e.json()}}async function p(a,b){let c=await n(`${k()}${a}`,{method:"GET",headers:{authorization:`Bearer ${b}`}});if(!c.ok)throw await m(c);return await c.json()}async function q(a){return o("/v0/auth/token/refresh",{refresh_token:a})}async function r(a){return p("/v0/auth/me",a)}function s(){let a=process.env.FAILPROOFAI_AUTH_DIR;return a?(0,h.join)(a,"session.json"):(0,e.auditSessionFile)()}function t(){let a=s();if(!(0,d.existsSync)(a))return null;try{let b=(0,d.readFileSync)(a,"utf-8"),c=JSON.parse(b);if("string"!=typeof c.access_token||"string"!=typeof c.refresh_token||"number"!=typeof c.access_expires_at||"object"!=typeof c.user||!c.user||"string"!=typeof c.user.id||"string"!=typeof c.user.email)return null;return{access_token:c.access_token,refresh_token:c.refresh_token,access_expires_at:c.access_expires_at,refresh_expires_at:"number"==typeof c.refresh_expires_at?c.refresh_expires_at:c.access_expires_at,user:{id:c.user.id,email:c.user.email}}}catch{return null}}function u(){let a=s();(0,d.existsSync)(a)&&(0,d.rmSync)(a,{force:!0});try{let a=(0,e.migrationsDir)();if(!(0,d.existsSync)(a))return;for(let b of(0,d.readdirSync)(a)){if(!b.startsWith("backup-layout"))continue;let c=(0,h.resolve)(a,b,"auth.json");(0,d.existsSync)(c)&&(0,d.rmSync)(c,{force:!0})}}catch{}}let v=new Map;async function w(a){let b=v.get(a.refresh_token);if(b)return b;let c=(async()=>{let b=function(a,b){let c=Math.floor(Date.now()/1e3),d=a.user??b;if(!d)throw Error("authFromTokenResponse: missing user identity");return{access_token:a.access_token,refresh_token:a.refresh_token,access_expires_at:c+a.access_expires_in,refresh_expires_at:c+a.refresh_expires_in,user:d}}(await q(a.refresh_token),a.user);return(0,i.writeJsonAtomically)(s(),b),b})();v.set(a.refresh_token,c);try{return await c}finally{v.delete(a.refresh_token)}}async function x(){let a=t();if(!a)return null;let b=Math.floor(Date.now()/1e3);if(a.access_expires_at-b>60)return a;try{return await w(a)}catch(a){return a instanceof l&&401===a.status&&u(),null}}async function y(){let a=await x();if(!a)return null;try{return{me:await r(a.access_token),auth:a}}catch(a){if(a instanceof l&&401===a.status){let a=t();if(!a)return null;try{let b=await w(a);return{me:await r(b.access_token),auth:b}}catch(a){a instanceof l&&401===a.status&&u()}}return null}}a.s(["readAuth",0,t,"whoAmI",0,y],81243);var z=a.i(13095);async function A(){let a=(0,c.readConfig)(),b=function(){let a,b;try{a=(0,d.readFileSync)((0,e.auditScheduleFile)(void 0),"utf8")}catch{return null}try{b=JSON.parse(a)}catch{return null}if(!b||"object"!=typeof b||Array.isArray(b))return null;let c=b,f=a=>"number"==typeof a&&Number.isFinite(a)?a:null,g=f(c.schema);return{schema:g,nextDueAtMs:f(c.next_due_at_ms),lastAttemptAtMs:f(c.last_attempt_at_ms),lastRunAtMs:f(c.last_run_at_ms),lastExitCode:f(c.last_exit_code),schemaAhead:null!==g&&g>1}}(),h=(0,g.readDashboardCacheMeta)(),i=t(),j=(0,f.daemonServiceStatus)();return{auto:a.audit.auto,intervalDays:a.audit.intervalDays,signedInAs:i?{id:i.user.id,email:i.user.email}:null,daemon:j,schedule:b?{nextDueAtMs:b.nextDueAtMs,lastAttemptAtMs:b.lastAttemptAtMs,lastRunAtMs:b.lastRunAtMs,lastExitCode:b.lastExitCode,schemaAhead:b.schemaAhead}:null,lastResultAt:h?.cachedAt??null,lastScan:h?{finishedAt:h.cachedAt,findings:h.findings,sessionsScanned:h.sessionsScanned,eventsScanned:h.eventsScanned}:null,daemonStartedAtMs:"running"===j?(0,f.daemonStartedAtMs)():null}}(0,z.ensureServerEntryExports)([A]),(0,b.registerServerReference)(A,"002eb5166525ca4405347da654e6c3feb16e203ec5",null),a.s(["getScheduledAuditAction",0,A],36119);let B="enforce",C=["typesafe","openrouter","vercel","cloudflare","custom"],D="FAILPROOFAI_JEV_API_KEY",E=d.constants.O_RDONLY|(d.constants.O_NONBLOCK??0);function F(){return(0,e.jevConfigFile)()}let G=/^(?:(?:typesafe|typesafe-ai)\/)?jev-(\d{1,4})\.(\d{1,4})(?:\.(\d{1,6}))?(?:-(\d{8}))?$/,H=/^[0-9a-f]{32}$/,I=/^[\x21-\x7e]{1,4096}$/,J=/^[A-Za-z0-9._:/@~+-]{1,200}$/,K=new Set(["localhost","127.0.0.1","[::1]","::1"]);function L(a){return"string"!=typeof a||0===a.length?"the API key is empty":I.test(a)?null:"the API key must be one line of visible ASCII with no spaces (at most 4096 characters)"}function M(a){let b;if("string"!=typeof a||""===a.trim())return{ok:!1,problem:"baseUrl must be a non-empty string"};try{b=new URL(a.trim())}catch{return{ok:!1,problem:"baseUrl is not a valid URL"}}return"https:"===b.protocol||"http:"===b.protocol&&K.has(b.hostname)?b.username||b.password?{ok:!1,problem:"baseUrl must not carry credentials; put the key in the key field"}:b.hash?{ok:!1,problem:"baseUrl must not have a #fragment"}:(b.pathname=b.pathname.replace(/\/+$/,"")||"/",{ok:!0,value:b.toString()}):{ok:!1,problem:"baseUrl must use https (plain http is accepted only for localhost)"}}let N=/^(?:(?:sk|rk)[-_]|gh[pousr]_|github_pat_|glpat-|xox[abprs]-|AKIA[0-9A-Z]{12}|AIza[0-9A-Za-z_-]{20}|hf_[A-Za-z0-9]{16}|vck_)/;function O(a){return!!N.test(a)||a.length>=32&&!a.includes("/")&&!/jev/i.test(a)&&/[A-Za-z]/.test(a)&&/[0-9]/.test(a)}function P(a,b){let c;if(!a||"object"!=typeof a||Array.isArray(a))return{ok:!1,problem:"the file must hold a JSON object"};let d=a.provider;if("string"!=typeof d||!C.includes(d))return{ok:!1,problem:`provider must be one of ${C.join(", ")}`};if(void 0!==a.apiKey){let b=L(a.apiKey);if(b)return{ok:!1,problem:b};c=a.apiKey}else{if(null==b||""===b)return{ok:!1,problem:`no API key: set apiKey in the file (failproofai jev setup), or ${D} for this session`,missingKey:!0};let a=L(b);if(a)return{ok:!1,problem:`${D} is set but invalid: ${a}`};c=b}let e={provider:d,apiKey:c,mode:B,timeoutMs:3e3};if(void 0!==a.baseUrl){let b=M(a.baseUrl);if(!b.ok)return b;e.baseUrl=b.value}else if("custom"===d)return{ok:!1,problem:"provider custom needs a baseUrl"};if("cloudflare"===d){if("string"!=typeof a.accountId||!H.test(a.accountId))return{ok:!1,problem:"provider cloudflare needs accountId: 32 lowercase hex characters"};e.accountId=a.accountId}if(void 0!==a.model){let b=function(a){let b;if("string"!=typeof a||!J.test(a))return{ok:!1,problem:"model must be 1–200 characters of letters, digits and . _ : / @ ~ + -"};if(O(a))return{ok:!1,problem:"model looks like an API key, not a model id (not repeated here). The key goes on stdin: failproofai jev setup --key-stdin"};let c=(b=G.exec(a))?{major:Number(b[1]),minor:Number(b[2]),patch:void 0===b[3]?null:Number(b[3]),date:b[4]??null}:null;return c&&(1!==c.major||13!==c.minor)?{ok:!1,problem:`model ${a} names Jev ${c.major}.${c.minor}, but the thresholds are calibrated for Jev 1.13 — every call would fall back to regex`}:{ok:!0,value:a}}(a.model);if(!b.ok)return b;if(b.value===c)return{ok:!1,problem:"model is the API key (not repeated here); give the model id, or leave --model out for the provider's default"};e.model=b.value}if(void 0!==a.timeoutMs){let b=a.timeoutMs;if("number"!=typeof b||!Number.isInteger(b)||b<100||b>1e4)return{ok:!1,problem:"timeoutMs must be a whole number of milliseconds from 100 to 10000"};e.timeoutMs=b}if(void 0!==a.mode){if("shadow"!==a.mode&&"enforce"!==a.mode)return{ok:!1,problem:'mode must be "shadow" or "enforce"'};e.mode=a.mode}return void 0!==e.baseUrl&&function(a){try{return"http:"===new URL(a).protocol}catch{return!1}}(e.baseUrl)&&"shadow"!==e.mode?{ok:!1,problem:"plain http (to localhost) is accepted only with mode shadow: in enforce mode Jev's answers can clear a deny, and while the local proxy is down any process on this machine could take its port and answer. Use https, or mode shadow"}:{ok:!0,value:e}}function Q(a){R();try{let b=511&(0,d.statSync)((0,h.dirname)(a)).mode;return(18&b)!=0?b:null}catch{return null}}function R(){return"win32"!==process.platform}function S(){let a,b,c,e,f=F();try{a=(0,d.openSync)(f,E)}catch(b){let a=b.code;if("ENOENT"===a||"ENOTDIR"===a)return{status:"absent",path:f};return{status:"refused",path:f,mode:null,reason:"unreadable",problem:`cannot open it (${a??"error"})`}}let g=null;try{let c=(0,d.fstatSync)(a);if(!c.isFile())return{status:"refused",path:f,mode:null,reason:"unreadable",problem:"it is not a regular file"};if(g=511&c.mode,R()&&(63&g)!=0)return{status:"refused",path:f,mode:g,reason:"too-open",problem:`its permissions are ${g.toString(8).padStart(4,"0")}; it holds a key, so it must be owner-only (chmod 600 ${f})`,fix:`chmod 600 ${f}`};let e=Q(f);if(null!==e)return{status:"refused",path:f,mode:g,reason:"too-open",problem:`its directory ${(0,h.dirname)(f)} is ${e.toString(8).padStart(4,"0")} — other users can write there, so they can put their own config in its place; it must be owner-only (chmod 700 ${(0,h.dirname)(f)})`,fix:`chmod 700 ${(0,h.dirname)(f)}`};if(c.size>65536)return{status:"refused",path:f,mode:g,reason:"too-large",problem:"it is larger than 65536 bytes"};let i=Buffer.alloc(c.size),j=0;for(;j<i.length;){let b=(0,d.readSync)(a,i,j,i.length-j,j);if(0===b)break;j+=b}b=i.subarray(0,j).toString("utf8")}catch(a){return{status:"refused",path:f,mode:g,reason:"unreadable",problem:`cannot read it (${a.code??"error"})`}}finally{try{(0,d.closeSync)(a)}catch{}}try{c=JSON.parse(b)}catch{return{status:"refused",path:f,mode:g,reason:"not-json",problem:"it is not valid JSON"}}let i=P(c,void 0===(e=process.env[D])||""===e?null:e);if(!i.ok){if(!0===i.missingKey){let a=P(c,"supplied-by-the-environment");if(a.ok){let b={provider:a.value.provider,mode:a.value.mode,timeoutMs:a.value.timeoutMs};return void 0!==a.value.baseUrl&&(b.baseUrl=a.value.baseUrl),void 0!==a.value.accountId&&(b.accountId=a.value.accountId),void 0!==a.value.model&&(b.model=a.value.model),{status:"key-missing",path:f,mode:g,routing:b,problem:`it carries no apiKey, so the key comes from ${D} — which is not set in this environment`}}return{status:"refused",path:f,mode:g,reason:"invalid",problem:a.problem}}return{status:"refused",path:f,mode:g,reason:"invalid",problem:i.problem}}return{status:"ok",path:f,mode:g,keySource:void 0!==c.apiKey?"file":"env",config:i.value}}function T(){let a,b=F();try{a=(0,d.openSync)(b,E)}catch{return null}try{let c=(0,d.fstatSync)(a);if(!c.isFile()||c.size>65536)return null;let e=Buffer.alloc(c.size),f=0;for(;f<e.length;){let b=(0,d.readSync)(a,e,f,e.length-f,f);if(0===b)break;f+=b}let g=JSON.parse(e.subarray(0,f).toString("utf8"));if(!g||"object"!=typeof g||Array.isArray(g))return null;R();let h=511&c.mode,i=null!==h&&((63&h)!=0||null!==Q(b));return{raw:g,mode:h,tooOpen:i}}catch{return null}finally{try{(0,d.closeSync)(a)}catch{}}}function U(){return T()?.raw??null}a.s(["DEFAULT_JEV_MODE",0,B,"JEV_API_KEY_ENV",0,D,"JEV_PROVIDER_KINDS",0,C,"inspectJevConfig",0,S,"jevConfigPath",0,F,"looksLikeCredential",0,O,"readJevConfigFileForUpdate",0,T,"readJevConfigForUpdate",0,U,"validateApiKey",0,L,"validateBaseUrl",0,M,"validateJevConfig",0,P],87481),a.i(60526);let V={typesafe:{baseUrl:"https://api.typesafe.ai/v1",model:"jev-1.13.0"},openrouter:{baseUrl:"https://openrouter.ai/api/v1",model:"typesafe/jev-1.13"},vercel:{baseUrl:"https://ai-gateway.vercel.sh/typesafe/v1",model:"typesafe-ai/jev"},cloudflare:{baseUrl:"https://api.cloudflare.com/client/v4",model:"typesafe/jev"},custom:{baseUrl:null,model:"jev-1.13.0"}};class W extends Error{code;constructor(a,b){super(b),this.name="JevError",this.code=a}}var X=a.i(1144);let Y=["evaluator","jevDecision","jevCleared","jevFallbackReason","jevLatencyMs","jevModel","jevMode"],Z=new Set(["jev","jev-fallback"]),$=new Set(["allow","instruct","deny"]),_=new Set(["shadow","enforce"]),aa=/^([a-z0-9]+(?:-[a-z0-9]+)*)\s*(?:$|[:(])/,ab=/^http-\d{3}$/,ac="other",ad=new Set(["aborted","cloudflare-error","cloudflare-incomplete","config","error","malformed","model-mismatch","network","no-api-key","no-transport","other","out-of-credits","prepare-error","provider-refused","rate-limited","request-cut","request-too-large","timeout","truncated","unavailable","upstream-error"]),ae=new Map([["prepare","prepare-error"],["error","error"],["timeout","timeout"],["network","network"],["malformed","malformed"],["truncated","truncated"],["rate-limited","rate-limited"],["out-of-credits","out-of-credits"],["model-mismatch","model-mismatch"],["request-too-large","request-too-large"],["config","config"]]),af=/^[A-Za-z0-9._:/@~+-]{1,200}$/,ag=/[\u0000-\u001f\u007f-\u009f\u2028\u2029]/,ah=/^(?:custom|pack|cloud|failproofai|\.failproofai-[A-Za-z0-9_-]{1,32})\//;function ai(a){return!("string"!=typeof a||0===a.length||[...a].length>200||ag.test(a))&&(!/\s/.test(a)||ah.test(a))}function aj(a){if(!Y.some(b=>void 0!==a[b]))return a;let b={...a},c=a=>{delete b[a]};if("string"==typeof b.evaluator&&Z.has(b.evaluator)||c("evaluator"),"string"==typeof b.jevDecision&&$.has(b.jevDecision)||c("jevDecision"),"string"==typeof b.jevMode&&_.has(b.jevMode)||c("jevMode"),Array.isArray(b.jevCleared)){let a=[...new Set(b.jevCleared.filter(ai))].slice(0,64);b.jevCleared=a}else c("jevCleared");let d=function(a){if("string"!=typeof a)return;let b=a.trim().toLowerCase();if(0===b.length)return;let c=aa.exec(b)?.[1];if(void 0===c||c.length>40)return ac;if(ab.test(c))return c;let d=ae.get(c)??c;return ad.has(d)?d:ac}(b.jevFallbackReason);return void 0===d?c("jevFallbackReason"):b.jevFallbackReason=d,"number"==typeof b.jevLatencyMs&&Number.isFinite(b.jevLatencyMs)&&b.jevLatencyMs>=0?b.jevLatencyMs=Math.round(b.jevLatencyMs):c("jevLatencyMs"),"string"==typeof b.jevModel&&af.test(b.jevModel.trim())?b.jevModel=b.jevModel.trim():c("jevModel"),b}function ak(a){return"number"!=typeof a||Number.isNaN(a)||a<=0?864e5:Math.min(a,7776e6)}function al(a){return"number"==typeof a&&Number.isFinite(a)?a:Date.now()}function am(a,b){if(0===a.length)return null;let c=Math.ceil(b/100*a.length);return a[Math.min(a.length,Math.max(1,c))-1]}class an{counts=new Map;bump(a){this.counts.set(a,(this.counts.get(a)??0)+1)}toRecord(){return Object.fromEntries(this.counts)}}async function ao(a={}){let b=ak(a.windowMs),c=al(a.now),d=[];try{d=(0,X.getHookActivityEntriesSince)(c-b)}catch{d=[]}return function(a,b={}){let c=ak(b.windowMs),d=al(b.now),e=d-c,f={windowMs:c,total:0,fallbackRate:0,fallbackReasons:{},latencyP50Ms:null,latencyP95Ms:null,clearsByPolicy:{},since:e,answered:0,fallbacks:0,notConsulted:0,noRequest:0,decisions:{allow:0,instruct:0,deny:0},modes:{shadow:0,enforce:0},shadowClearsByPolicy:{},models:{}},g=[],h=new an,i=new an,j=new an,k=new an;for(let b of a){var l;if("number"!=typeof b.timestamp||b.timestamp<e||b.timestamp>d)continue;let a=aj(b),c="jev-fallback"===(l=aj(a)).evaluator?"fallback":"jev"!==l.evaluator?null:void 0!==l.jevCleared||void 0!==l.jevLatencyMs||void 0!==l.jevModel||"deny"===l.jevDecision||"instruct"===l.jevDecision?"answered":"allow"===l.jevDecision?"no-request":"not-consulted";if(null===c)continue;if("not-consulted"===c){f.notConsulted+=1;continue}if("no-request"===c){f.noRequest+=1;continue}if(f.total+=1,a.jevMode&&(f.modes[a.jevMode]+=1),"fallback"===c){f.fallbacks+=1,h.bump(a.jevFallbackReason??"unknown");continue}f.answered+=1,a.jevDecision&&(f.decisions[a.jevDecision]+=1),void 0!==a.jevLatencyMs&&g.push(a.jevLatencyMs),a.jevModel&&k.bump(a.jevModel);let m="shadow"===a.jevMode?j:i;for(let b of a.jevCleared??[])m.bump(b)}return f.fallbackReasons=h.toRecord(),f.clearsByPolicy=i.toRecord(),f.shadowClearsByPolicy=j.toRecord(),f.models=k.toRecord(),f.fallbackRate=f.total>0?f.fallbacks/f.total:0,g.sort((a,b)=>a-b),f.latencyP50Ms=am(g,50),f.latencyP95Ms=am(g,95),f}(d,{windowMs:b,now:c})}var ap=a.i(89790),aq=a.i(28120),ar=a.i(9909),as=a.i(91609),at=a.i(65917),au=a.i(75534);let av="display-only";function aw(a){return a?a.length>40||O(a)?{kind:"withheld"}:{kind:"id",id:a}:{kind:"default"}}function ax(a){return null===a?null:a.toString(8).padStart(4,"0")}function ay(a){return"string"==typeof a?a:""}function az(a){try{var b=function(a){let b,c=function(a){let b=P(a);if(!b.ok)throw new W("config",b.problem);return b.value}(a),d=V[c.provider],e=c.model??d.model,f=void 0===c.model;if("cloudflare"===c.provider)return{via:"cloudflare",endpoint:function(a,b){if(!b)return((a,b=V.cloudflare.baseUrl)=>`${b.replace(/\/+$/,"")}/accounts/${a}/ai/run`)(a);let c=new URL(b);return/\/ai\/run$/.test(c.pathname)||(c.pathname=`${c.pathname.replace(/\/+$/,"")}/accounts/${a}/ai/run`),c.toString()}(c.accountId,c.baseUrl),model:e,modelIsDefault:f};let g=c.baseUrl??d.baseUrl;if(!g)throw new W("config","provider custom needs a baseUrl");return{via:c.provider,endpoint:(b=new URL(g),/\/systemone$/.test(b.pathname)||(b.pathname=`${b.pathname.replace(/\/+$/,"")}/systemone`),b.toString()),model:e,modelIsDefault:f}}(a).endpoint;try{let a=new URL(b),c=`${a.origin}${a.pathname}`;return a.search?`${c}?…`:c}catch{return"(invalid URL)"}}catch{return null}}async function aA(a){if(!a)return null;try{let a=await ao();return{windowMs:a.windowMs,total:a.total,answered:a.answered,fallbacks:a.fallbacks,fallbackRate:a.fallbackRate}}catch{return null}}async function aB(){var a,b;let c=S(),d={path:c.path,permissions:null,provider:null,baseUrl:"",accountId:"",model:{kind:"default"},endpoint:null,mode:B,timeoutMs:null,token:null,problem:null,fix:null,reviewable:null};if("ok"===c.status){let b=c.config;return{...d,status:"ok",on:!0,permissions:ax(c.mode),provider:b.provider,baseUrl:b.baseUrl??"",accountId:b.accountId??"",model:aw(b.model??""),endpoint:az(b),mode:b.mode??B,timeoutMs:b.timeoutMs??null,token:{source:c.keySource,hint:(a=b.apiKey).length>=12?a.slice(-4):null},stats:await aA(!0),reviewable:function(a){if(!a)return null;try{let a=function(){let a,b=[],c=!1,d=new Set;try{for(let a of(c=(0,ar.hasInstalledPacks)(),(0,ar.readInstalledPacks)().packs)){let c=a.enabled;for(let e of(b.push(...c?a.policies.filter(a=>c.includes(a.name)):a.policies),(0,ar.packSemantic)(a)))d.add(e.name)}}catch{}try{a=(0,aq.readMergedHooksConfig)(void 0)}catch{a={enabledPolicies:[]}}let e=new Set(c?[]:a.enabledPolicies.map(au.normalizePolicyName));for(let a of at.POLICY_CATALOG)(a.alwaysOn||e.has((0,au.normalizePolicyName)(a.name)))&&b.push(a);try{for(let a of(0,ap.readActiveCloudManagedPolicies)())b.push({authority:a.authority,reviewedBy:a.reviewedBy})}catch{}let f=0;try{f=(0,aq.configuredCustomPolicyPaths)(a).length}catch{f=0}return{...function(a,b){let c=0,d=0;for(let e of a)c+=1,"reviewable"===(0,as.resolvePolicyAuthority)(e,b).authority&&(d+=1);return{enabled:c,reviewable:d}}(b,d.size>0?d:void 0),customFiles:f}}();return{enabled:a.enabled,reviewable:a.reviewable,summary:function(a){let{enabled:b,reviewable:c}=a,d=a.customFiles>0?" (policies from your own files are not counted)":"";if(0===b)return`No policies are enabled here, so there is nothing for Jev to clear${d}.`;let e=1===b?"1 enabled policy is":`${b} enabled policies are`;return 0===c?`0 of ${e} reviewable${d}.`:`${c} of ${e} reviewable: Jev may clear a deny or an instruction from those, and from no others${d}.`}(a),problem:0===a.enabled||a.reviewable>0?null:"Jev can add a deny or an instruction on this machine, but it can never clear one. No enabled policy is marked reviewable — a policy pack published before this release carries no such marks — so re-take the pack (`failproofai policies add FailproofAI/policies`) to get a marked copy, or enforce this build's builtin policies, which carry them."}}catch{return null}}(!0)}}if("key-missing"===c.status){let a=c.routing;return{...d,status:"key-missing",on:!1,permissions:ax(c.mode),provider:a.provider,baseUrl:a.baseUrl??"",accountId:a.accountId??"",model:aw(a.model??""),endpoint:az({...a,apiKey:av}),mode:a.mode??B,timeoutMs:a.timeoutMs??null,token:null,problem:c.problem,fix:`set ${D}, or save a token here`,stats:null}}if("refused"===c.status){let a,e,f,g=(b=U(),a=ay(b?.provider),e=C.includes(a)?a:null,f=b?.mode,{provider:e,baseUrl:ay(b?.baseUrl),accountId:ay(b?.accountId),model:ay(b?.model),mode:"shadow"===f||"enforce"===f?f:B});return{...d,status:"refused",on:!1,permissions:ax(c.mode),provider:g.provider,baseUrl:g.baseUrl,accountId:g.accountId,model:aw(g.model),endpoint:null===g.provider?null:az({provider:g.provider,apiKey:av,...g.baseUrl?{baseUrl:g.baseUrl}:{},...g.accountId?{accountId:g.accountId}:{},mode:g.mode}),mode:g.mode,problem:c.problem,fix:c.fix??null,stats:null}}return{...d,status:"absent",on:!1,stats:null}}(0,z.ensureServerEntryExports)([aB]),(0,b.registerServerReference)(aB,"003cf8cf6fa84a66423a2f59b779aa93edfbd80bd4",null),a.s(["getJevSettingsAction",0,aB],41289)}];
-
-//# sourceMappingURL=app_actions_get-scheduled-audit_ts_0ei9sni._.js.map

package/.next/standalone/.next/server/chunks/ssr/app_settings_02tf1h4._.js

@@ -1,3 +0,0 @@
-module.exports=[4614,a=>{"use strict";var b=a.i(87924),c=a.i(72131),d=a.i(5050);let e=(0,d.createServerReference)("003cf8cf6fa84a66423a2f59b779aa93edfbd80bd4",d.callServer,void 0,d.findSourceMapURL,"getJevSettingsAction"),f=(0,d.createServerReference)("00dd0def23d79715a77049f83bd44d3e571a3f9e35",d.callServer,void 0,d.findSourceMapURL,"removeJevConfigAction"),g=(0,d.createServerReference)("403e29806edfbe288ff52c6c81371bd44545e988aa",d.callServer,void 0,d.findSourceMapURL,"saveJevConfigAction");var h=a.i(18952);let i=[{value:"typesafe",label:"typesafe"},{value:"openrouter",label:"openrouter"},{value:"vercel",label:"vercel ai gateway"},{value:"cloudflare",label:"cloudflare workers ai"},{value:"custom",label:"custom endpoint"}],j=[{value:"enforce",label:"enforce — jev's verdict counts"},{value:"shadow",label:"shadow — log only, regex decides"}];function k(a){return{provider:a.provider??"typesafe",baseUrl:a.baseUrl,accountId:a.accountId,mode:a.mode}}function l({id:a,label:c,hint:d,children:e}){return(0,b.jsxs)("div",{className:"set-field",children:[(0,b.jsx)("label",{className:"set-field-label",htmlFor:a,children:c}),e,d?(0,b.jsx)("span",{className:"set-hint",children:d}):null]})}a.s(["default",0,function({initial:a}){var d,m;let n,[o,p]=(0,c.useState)(a),[q,r]=(0,c.useState)(a?k(a):{provider:"typesafe",baseUrl:"",accountId:"",mode:"enforce"}),[s,t]=(0,c.useState)(""),[u,v]=(0,c.useState)(!1),[w,x]=(0,c.useState)(null),[y,z]=(0,c.useState)(!1),A=(0,c.useRef)(!0),B=(0,c.useRef)(!1),C=(0,c.useCallback)(async()=>{try{let a=await e();if(!A.current)return;p(a),B.current||r(k(a))}catch{}},[]);(0,c.useEffect)(()=>(A.current=!0,C(),()=>{A.current=!1}),[C]),(0,c.useEffect)(()=>{let a=()=>void C();return window.addEventListener("focus",a),document.addEventListener("visibilitychange",a),()=>{window.removeEventListener("focus",a),document.removeEventListener("visibilitychange",a)}},[C]);let D=(0,c.useCallback)((a,b)=>{B.current=!0,r(c=>({...c,[a]:b}))},[]),E=(0,c.useCallback)(async()=>{v(!0),x(null);try{let a=await g({provider:q.provider,baseUrl:q.baseUrl,accountId:q.accountId,mode:q.mode,token:s});if(!a.ok){x(a.problem),z(!0===a.needsToken);return}B.current=!1,z(!1),t(""),p(a.view),r(k(a.view)),(0,h.toast)(a.view.on?"jev is on.":"saved.")}catch{x("could not save that.")}finally{v(!1)}},[q,s]),F=(0,c.useCallback)(async()=>{v(!0),x(null),z(!1);try{let a=await f();if(!a.ok)return void x(a.problem);B.current=!1,t(""),p(a.view),r(k(a.view)),(0,h.toast)("jev is off. hooks run the regex policies.")}catch{x("could not turn that off.")}finally{v(!1)}},[]),G=null!==o&&"absent"!==o.status,H=o?.token,I=y?"needed for this save — type the token for this endpoint":H?"env"===H.source?"configured, read from the environment — leave blank to keep it":H.hint?`configured, ending ${H.hint} — leave blank to keep it`:"configured — leave blank to keep it":o?.status==="key-missing"?"read from the environment, which is not set in this shell — leave blank to keep it that way":"sent as a bearer token; stored owner-only at 0600";return(0,b.jsxs)("div",{className:"set-cell set-jev",children:[(0,b.jsx)("h2",{className:"set-cell-title",children:"jev · semantic evaluation"}),(0,b.jsx)("div",{className:"set-row set-row-main",children:(0,b.jsxs)("div",{className:"set-row-copy",children:[(0,b.jsx)("span",{className:o?.on?"set-strong":"set-dim",children:null===o?"reading…":o.on?`on. every judged command is also asked of ${o.provider}.`:"off. hooks run the regex policies exactly as before."}),(0,b.jsx)("span",{className:"set-dim",children:o?.on?"shadow"===o.mode?"shadow: jev's answers are logged, the regex result is what gets enforced.":"enforce: jev's answers can clear a reviewable deny.":"a second opinion on the commands the regex policies flag. needs your own endpoint and token."})]})}),o&&G&&(0,b.jsxs)("dl",{className:"set-how-list",children:[o.endpoint&&(0,b.jsxs)("div",{className:"set-how-row",children:[(0,b.jsx)("dt",{className:"set-how-label",children:"endpoint"}),(0,b.jsx)("dd",{className:"set-how-body",children:o.endpoint})]}),(0,b.jsxs)("div",{className:"set-how-row",children:[(0,b.jsx)("dt",{className:"set-how-label",children:"model"}),(0,b.jsx)("dd",{className:"set-how-body",children:function(a){switch(a.kind){case"id":return a.id;case"withheld":return"set to something that is not a model id — not shown here, in case it is a key";default:return"the provider's default"}}(o.model)})]}),(0,b.jsxs)("div",{className:"set-how-row",children:[(0,b.jsx)("dt",{className:"set-how-label",children:"token"}),(0,b.jsx)("dd",{className:"set-how-body",children:H?"env"===H.source?"from FAILPROOFAI_JEV_API_KEY":H.hint?`configured, ending ${H.hint}`:"configured":"none stored"})]}),o.permissions&&(0,b.jsxs)("div",{className:"set-how-row",children:[(0,b.jsx)("dt",{className:"set-how-label",children:"file"}),(0,b.jsx)("dd",{className:"set-how-body",children:`${o.path} \xb7 ${o.permissions}`})]}),o.reviewable&&(0,b.jsxs)("div",{className:"set-how-row",children:[(0,b.jsx)("dt",{className:"set-how-label",children:"reviewable"}),(0,b.jsx)("dd",{className:"set-how-body",children:o.reviewable.summary})]}),o.stats&&o.stats.total>0&&(0,b.jsxs)("div",{className:"set-how-row",children:[(0,b.jsx)("dt",{className:"set-how-label",children:"fallbacks"}),(0,b.jsx)("dd",{className:"set-how-body",children:`${(d=o.stats.fallbackRate,`${Math.round(100*d)}%`)} of ${o.stats.total} calls in the last ${Number.isInteger(n=(m=o.stats.windowMs)/36e5)&&n>=1?n%24==0?`${n/24}d`:`${n}h`:`${Math.max(1,Math.round(m/6e4))}m`} fell back to the regex engine.`})]})]}),o?.problem&&(0,b.jsxs)("p",{className:"set-warn",children:[o.problem,o.fix?` — ${o.fix}`:""]}),o?.reviewable?.problem&&(0,b.jsx)("p",{className:"set-warn",children:o.reviewable.problem}),(0,b.jsx)("div",{className:"set-rule"}),(0,b.jsxs)("div",{className:"set-jev-fields",children:[(0,b.jsx)(l,{id:"jev-provider",label:"provider",children:(0,b.jsx)("select",{id:"jev-provider",className:"set-select",value:q.provider,disabled:u,onChange:a=>D("provider",a.target.value),children:i.map(a=>(0,b.jsx)("option",{value:a.value,children:a.label},a.value))})}),(0,b.jsx)(l,{id:"jev-url",label:"endpoint url",hint:"custom"===q.provider?"required — https, or http to localhost in shadow mode":"leave blank for the provider's own api",children:(0,b.jsx)("input",{id:"jev-url",type:"text",className:"set-text",inputMode:"url",autoComplete:"off",spellCheck:!1,placeholder:"custom"===q.provider?"https://…":"the provider's own api",value:q.baseUrl,disabled:u,onChange:a=>D("baseUrl",a.target.value)})}),"cloudflare"===q.provider&&(0,b.jsx)(l,{id:"jev-account",label:"account id",hint:"32 lowercase hex characters",children:(0,b.jsx)("input",{id:"jev-account",type:"text",className:"set-text",autoComplete:"off",spellCheck:!1,value:q.accountId,disabled:u,onChange:a=>D("accountId",a.target.value)})}),(0,b.jsx)(l,{id:"jev-token",label:"token",hint:I,children:(0,b.jsx)("input",{id:"jev-token",type:"password",className:"set-text",autoComplete:"off",spellCheck:!1,placeholder:H?"•••• kept":"",value:s,disabled:u,"aria-invalid":y||void 0,onChange:a=>{B.current=!0,t(a.target.value)}})}),(0,b.jsx)(l,{id:"jev-mode",label:"mode",children:(0,b.jsx)("select",{id:"jev-mode",className:"set-select",value:q.mode,disabled:u,onChange:a=>D("mode",a.target.value),children:j.map(a=>(0,b.jsx)("option",{value:a.value,children:a.label},a.value))})})]}),w&&(0,b.jsx)("p",{className:"set-warn",children:w}),(0,b.jsxs)("div",{className:"set-actions set-jev-actions",children:[(0,b.jsx)("button",{type:"button",className:"btn btn-press",disabled:u,onClick:()=>void E(),children:u?"[ saving… ]":G?"[ save changes ]":"[ turn jev on ]"}),G&&(0,b.jsx)("button",{type:"button",className:"set-link",disabled:u,onClick:()=>void F(),children:"turn jev off"})]})]})}],4614)},41857,a=>{"use strict";var b=a.i(87924),c=a.i(72131),d=a.i(5050);let e=(0,d.createServerReference)("002eb5166525ca4405347da654e6c3feb16e203ec5",d.callServer,void 0,d.findSourceMapURL,"getScheduledAuditAction"),f=(0,d.createServerReference)("4077a262ce50f7cbcf3025517e5801a9e3c7ec0a44",d.callServer,void 0,d.findSourceMapURL,"setAutoAuditAction"),g=(0,d.createServerReference)("401bab636c01ff92a891caacddd8f29f62aa73ddec",d.callServer,void 0,d.findSourceMapURL,"setAuditIntervalAction");var h=a.i(89564),i=a.i(4543),j=a.i(18952),k=a.i(80977);function l(a){return new Date(a).toLocaleString(void 0,{month:"short",day:"numeric",hour:"2-digit",minute:"2-digit"})}function m(a,b){let c=a-b;if(c<=0)return"now";let d=Math.floor(c/864e5),e=Math.floor(c%864e5/36e5);return d>0?e>0?`${d}d ${e}h`:`${d}d`:e>0?`${e}h`:`${Math.max(1,Math.floor(c/6e4))}m`}function n(a){return a.toLocaleString("en-US")}function o({label:a,value:c,sub:d,tone:e}){return(0,b.jsxs)("div",{className:"set-stat",children:[(0,b.jsx)("div",{className:"set-stat-label",children:a}),(0,b.jsx)("div",{className:`set-stat-value${e?` ${e}`:""}`,children:c}),(0,b.jsx)("div",{className:"set-stat-sub",children:d??" "})]})}function p({lastRunAtMs:a,nextDueAtMs:c,now:d}){if(null==a||null==c||c<=a)return null;let e=Math.min(100,Math.max(0,(d-a)/(c-a)*100));return(0,b.jsxs)("div",{className:"tape","aria-hidden":"true",children:[(0,b.jsxs)("div",{className:"tape-rail",children:[(0,b.jsx)("div",{className:"tape-fill",style:{width:`${e}%`}}),(0,b.jsx)("div",{className:"tape-now",style:{left:`${e}%`}})]}),(0,b.jsxs)("div",{className:"tape-ends",children:[(0,b.jsxs)("span",{children:["last scan · ",l(a)]}),(0,b.jsxs)("span",{className:"tape-next",children:["next · ",m(c,d)]})]})]})}function q({enabled:a,onChange:c,disabled:d,label:e}){return(0,b.jsx)("button",{type:"button",role:"switch","aria-checked":a,"aria-label":e,disabled:d,onClick:c,className:"sw","data-on":a?"true":"false",children:(0,b.jsx)("span",{className:"sw-knob"})})}let r=[{label:"reads",body:"every session transcript on disk — your prompts, the files your agents read and wrote, and command output."},{label:"runs",body:"entirely on this machine. the transcripts never leave it."},{label:"sends",body:"counts, redacted examples, and this machine's name — and only when a scan finds something harmful."}];a.s(["default",0,function({initial:a,jevPanel:d}){let[s,t]=(0,c.useState)(a),[u,v]=(0,c.useState)(a?.auto??!1),[w,x]=(0,c.useState)(a?.intervalDays??7),[y,z]=(0,c.useState)(!1),[A,B]=(0,c.useState)(!1),[C,D]=(0,c.useState)(!1),[E,F]=(0,c.useState)(null===a),[G,H]=(0,c.useState)(0),I=(0,c.useRef)(!0),J=(0,c.useRef)(null!==a),K=(0,c.useCallback)(async()=>{try{let a=await e();if(!I.current)return;t(a),J.current=!0,v(a.auto),x(a.intervalDays),H(Date.now()),F(!1)}catch{I.current&&!J.current&&F(!0)}},[]);(0,c.useEffect)(()=>(I.current=!0,K(),()=>{I.current=!1}),[K]),(0,c.useEffect)(()=>{let a=()=>void K();return window.addEventListener("focus",a),document.addEventListener("visibilitychange",a),()=>{window.removeEventListener("focus",a),document.removeEventListener("visibilitychange",a)}},[K]);let L=s?.signedInAs??null,M=s?.daemon==="running",N=s?.daemon==="unsupported-platform",O=s?.schedule??null,P=s?.lastScan??null,Q=O?.lastExitCode!=null&&0!==O.lastExitCode&&75!==O.lastExitCode,R=(0,c.useCallback)(async()=>{z(!0);try{let a=await f(!0);if(!a.ok){if(v(!1),"unreachable"===a.reason)return void(0,j.toast)("could not reach the server. check your connection and try again.");await K(),D(!0),(0,j.toast)("that sign-in expired. one more code and it's on.");return}v(a.auto),(0,j.toast)("scheduled audits on."),await K()}catch{v(!1),(0,j.toast)("could not turn that on.")}finally{z(!1)}},[K]),S=(0,c.useCallback)(async()=>{if(u){z(!0);try{let a=await f(!1);a.ok&&v(a.auto),(0,j.toast)("scheduled audits off."),await K()}catch{(0,j.toast)("could not turn that off.")}finally{z(!1)}return}L?await R():D(!0)},[u,R,K,L]),T=(0,c.useCallback)(async a=>{z(!0);try{let b=await g(a);x(b.intervalDays),t(a=>a?{...a,intervalDays:b.intervalDays}:a),(0,j.toast)(`scanning every ${b.intervalDays} day${1===b.intervalDays?"":"s"}.`)}catch{x(s?.intervalDays??7),(0,j.toast)("could not save that.")}finally{z(!1)}},[s?.intervalDays]),U=(0,c.useCallback)(async()=>{z(!0);try{await fetch("/api/auth/logout",{method:"POST"}),(0,j.toast)("signed out. scans continue; digests pause."),await K()}catch{(0,j.toast)("could not sign out.")}finally{z(!1)}},[K]),V=(0,c.useCallback)(async()=>{if(!A){B(!0);try{await (0,h.triggerRun)({cli:[],since:"all",noCache:!1}),(0,j.toast)("scan complete."),await K()}catch(a){(0,j.toast)(a instanceof h.RerunError&&"timeout"===a.kind?"the scan is taking a while — it will finish in the background.":"the scan could not be completed.")}finally{B(!1)}}},[K,A]),W=(0,c.useCallback)(async a=>{D(!1),await K(),await R()},[R,K]),X=s?M?{value:"running",sub:null!=s.daemonStartedAtMs&&G>0?`up ${function(a){let b=Math.floor(a/864e5);if(b>0)return`${b}d`;let c=Math.floor(a/36e5);return c>0?`${c}h`:`${Math.max(1,Math.floor(a/6e4))}m`}(Math.max(0,G-s.daemonStartedAtMs))}`:"",tone:"ok"}:N?{value:"unavailable",sub:"not on this platform"}:"not-installed"===s.daemon?{value:"not installed",sub:"run failproofai config",tone:"warn"}:"unknown"===s.daemon?{value:"unknown",sub:"could not read it"}:{value:"stopped",sub:"run failproofai config",tone:"warn"}:{value:"…",sub:"reading"},Y=u?O?.nextDueAtMs==null?{value:"pending",sub:"after the next scan"}:{value:G>0?m(O.nextDueAtMs,G):"—",sub:l(O.nextDueAtMs)}:{value:"off",sub:"nothing scheduled"},Z=P?{value:(0,k.formatRelativeTime)(Date.parse(P.finishedAt)),sub:null!=P.sessionsScanned?`${n(P.sessionsScanned)} sessions`:"scanned"}:{value:"none yet",sub:"run one below"},$=P?null==P.findings?{value:"—",sub:"unreadable"}:{value:n(P.findings),sub:"this scan",...P.findings>0?{tone:"warn"}:{}}:{value:"—",sub:"no scan yet"};return(0,b.jsxs)("main",{className:"report",children:[(0,b.jsxs)("section",{className:"section set-sec",children:[(0,b.jsxs)("div",{className:"set-mast",children:[(0,b.jsx)("h1",{className:"set-title",children:"settings"}),(0,b.jsx)("p",{className:"set-lede",children:"keeping watch, so you don't have to."})]}),E?(0,b.jsxs)("div",{className:"set-console",children:[(0,b.jsx)("div",{className:"set-cell",children:(0,b.jsxs)("p",{className:"set-warn",children:["could not read this machine's settings. check that the dashboard can reach ",(0,b.jsx)("code",{children:"~/.failproofai/config.json"}),"."]})}),d]}):(0,b.jsxs)("div",{className:"set-console",children:[(0,b.jsxs)("div",{className:"set-stats",children:[(0,b.jsx)(o,{label:"daemon",...X}),(0,b.jsx)(o,{label:"next scan",...Y}),(0,b.jsx)(o,{label:"last scan",...Z}),(0,b.jsx)(o,{label:"findings",...$})]}),(0,b.jsxs)("div",{className:"set-cols",children:[(0,b.jsxs)("div",{className:"set-cell set-config",children:[(0,b.jsx)("h2",{className:"set-cell-title",children:"scheduled audit"}),(0,b.jsxs)("div",{className:"set-row set-row-main",children:[(0,b.jsx)(q,{enabled:u,disabled:y||null===s,onChange:()=>void S(),label:u?"turn off scheduled audits":"turn on scheduled audits"}),(0,b.jsxs)("div",{className:"set-row-copy",children:[(0,b.jsx)("span",{className:"set-strong",children:u?"scanning on a schedule.":"scan on a schedule."}),(0,b.jsx)("span",{className:"set-dim",children:u?"you'll get an email only when a scan finds something.":"off. nothing runs and nothing is sent."})]})]}),(0,b.jsxs)("div",{className:"set-row set-row-interval",children:[(0,b.jsx)("span",{className:"set-dim",children:"scan every"}),(0,b.jsx)("input",{type:"number",className:"set-num",min:1,max:90,value:w,disabled:y||null===s,"aria-label":"days between scheduled scans",onChange:a=>x(Number(a.target.value)),onBlur:a=>{let b=Number(a.target.value);Number.isFinite(b)?b!==s?.intervalDays&&T(b):x(s?.intervalDays??7)}}),(0,b.jsx)("span",{className:"set-dim",children:"days"}),(0,b.jsxs)("span",{className:"set-hint",children:[1,"–",90]})]}),(0,b.jsx)("div",{className:"set-rule"}),(0,b.jsx)("div",{className:"set-row set-row-identity",children:L?(0,b.jsxs)(b.Fragment,{children:[(0,b.jsx)("span",{className:"set-dim",children:"reports go to"}),(0,b.jsx)("span",{className:"set-email",children:L.email}),(0,b.jsx)("button",{type:"button",className:"set-link",disabled:y,onClick:()=>void U(),children:"sign out"})]}):u?(0,b.jsxs)(b.Fragment,{children:[(0,b.jsx)("span",{className:"set-warn",children:"signed out — scans continue, digests are paused."}),(0,b.jsx)("button",{type:"button",className:"set-link",disabled:y,onClick:()=>D(!0),children:"sign in to resume"})]}):(0,b.jsx)("span",{className:"set-dim",children:"turning this on asks for an email, so there is somewhere to send the report."})}),u&&s&&!M&&(0,b.jsx)("p",{className:"set-warn",children:N?"the background service isn't available on this platform, so scheduled scans can't run here. you can still run one now.":"not-installed"===s.daemon?"the background service isn't installed, so nothing will run on the timer. install it with `failproofai config`.":"the background service is stopped, so nothing will run until it starts. repair it with `failproofai config`."}),Q&&(0,b.jsxs)("p",{className:"set-warn",children:["the last scheduled scan exited ",O?.lastExitCode,". the next one will still run."]}),(0,b.jsx)("div",{className:"set-actions",children:(0,b.jsx)("button",{type:"button",className:"btn btn-press",disabled:A,onClick:()=>void V(),children:A?"[ scanning… ]":"[ run a scan now ]"})})]}),(0,b.jsxs)("div",{className:"set-cell set-how",children:[(0,b.jsx)("h2",{className:"set-cell-title",children:"how it works"}),(0,b.jsx)("dl",{className:"set-how-list",children:r.map(a=>(0,b.jsxs)("div",{className:"set-how-row",children:[(0,b.jsx)("dt",{className:"set-how-label",children:a.label}),(0,b.jsx)("dd",{className:"set-how-body",children:a.body})]},a.label))})]})]}),d]}),u&&G>0&&(0,b.jsx)(p,{lastRunAtMs:O?.lastRunAtMs??null,nextDueAtMs:O?.nextDueAtMs??null,now:G})]}),(0,b.jsx)(i.AuthDialog,{open:C,source:"settings_scheduled_audit",headline:"where should the report go?",subhead:"we'll send a one-time code to confirm.",onClose:()=>D(!1),onAuthed:a=>void W(a)})]})}],41857)}];
-
-//# sourceMappingURL=app_settings_02tf1h4._.js.map

package/.next/standalone/.next/server/chunks/ssr/node_modules_next_dist_0w6mzq5._.js

@@ -1,151 +0,0 @@
-module.exports=[96556,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d={DynamicServerError:function(){return g},isDynamicServerError:function(){return h}};for(var e in d)Object.defineProperty(c,e,{enumerable:!0,get:d[e]});let f="DYNAMIC_SERVER_USAGE";class g extends Error{constructor(a){super(`Dynamic server usage: ${a}`),this.description=a,this.digest=f}}function h(a){return"object"==typeof a&&null!==a&&"digest"in a&&"string"==typeof a.digest&&a.digest===f}("function"==typeof c.default||"object"==typeof c.default&&null!==c.default)&&void 0===c.default.__esModule&&(Object.defineProperty(c.default,"__esModule",{value:!0}),Object.assign(c.default,c),b.exports=c.default)},60312,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d={StaticGenBailoutError:function(){return g},isStaticGenBailoutError:function(){return h}};for(var e in d)Object.defineProperty(c,e,{enumerable:!0,get:d[e]});let f="NEXT_STATIC_GEN_BAILOUT";class g extends Error{constructor(...a){super(...a),this.code=f}}function h(a){return"object"==typeof a&&null!==a&&"code"in a&&a.code===f}("function"==typeof c.default||"object"==typeof c.default&&null!==c.default)&&void 0===c.default.__esModule&&(Object.defineProperty(c.default,"__esModule",{value:!0}),Object.assign(c.default,c),b.exports=c.default)},17491,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d={METADATA_BOUNDARY_NAME:function(){return f},OUTLET_BOUNDARY_NAME:function(){return h},ROOT_LAYOUT_BOUNDARY_NAME:function(){return i},VIEWPORT_BOUNDARY_NAME:function(){return g}};for(var e in d)Object.defineProperty(c,e,{enumerable:!0,get:d[e]});let f="__next_metadata_boundary__",g="__next_viewport_boundary__",h="__next_outlet_boundary__",i="__next_root_layout_boundary__"},61933,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d={atLeastOneTask:function(){return h},scheduleImmediate:function(){return g},scheduleOnNextTick:function(){return f},waitAtLeastOneReactRenderTask:function(){return i}};for(var e in d)Object.defineProperty(c,e,{enumerable:!0,get:d[e]});let f=a=>{Promise.resolve().then(()=>{process.nextTick(a)})},g=a=>{setImmediate(a)};function h(){return new Promise(a=>g(a))}function i(){return new Promise(a=>setImmediate(a))}},14068,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d={createDynamicBodyError:function(){return g},createDynamicBodyErrorInNavigation:function(){return j},createDynamicMetadataError:function(){return n},createDynamicOrRuntimeBodyError:function(){return k},createDynamicOrRuntimeMetadataError:function(){return s},createDynamicOrRuntimeViewportError:function(){return r},createDynamicViewportError:function(){return q},createLinkBodyErrorInNavigation:function(){return i},createLinkMetadataError:function(){return l},createLinkViewportError:function(){return o},createRuntimeBodyError:function(){return f},createRuntimeBodyErrorInNavigation:function(){return h},createRuntimeMetadataError:function(){return m},createRuntimeViewportError:function(){return p},logBuildDebugHint:function(){return t}};for(var e in d)Object.defineProperty(c,e,{enumerable:!0,get:d[e]});function f(a){return Object.defineProperty(Error(`Route "${a}": Next.js encountered runtime data during prerendering.
-
-\`cookies()\`, \`headers()\`, \`params\`, or \`searchParams\` accessed outside of \`<Suspense>\` prevents the route from being prerendered, blocking the page load and leading to a slower user experience.
-
-Ways to fix this:
-  - [stream] Provide a placeholder with \`<Suspense fallback={...}>\` around the data access
-  - [block] Set \`export const instant = false\` to allow a blocking route
-
-Learn more: https://nextjs.org/docs/messages/blocking-prerender-runtime`),"__NEXT_ERROR_CODE",{value:"E1427",enumerable:!1,configurable:!0})}function g(a){return Object.defineProperty(Error(`Route "${a}": Next.js encountered uncached data during prerendering.
-
-\`fetch(...)\` or \`connection()\` accessed outside of \`<Suspense>\` prevents the route from being prerendered, blocking the page load and leading to a slower user experience.
-
-Ways to fix this:
-  - [stream] Provide a placeholder with \`<Suspense fallback={...}>\` around the data access
-  - [cache] Cache the data access with \`"use cache"\` (does not apply to \`connection()\`)
-  - [block] Set \`export const instant = false\` to allow a blocking route
-
-Learn more: https://nextjs.org/docs/messages/blocking-prerender-dynamic`),"__NEXT_ERROR_CODE",{value:"E1440",enumerable:!1,configurable:!0})}function h(a){return Object.defineProperty(Error(`Route "${a}": Next.js encountered runtime data during prerendering or a navigation.
-
-\`cookies()\`, \`headers()\`, \`params\`, or \`searchParams\` accessed outside of \`<Suspense>\` prevents the route from being prerendered or the navigation from being instant, leading to a slower user experience.
-
-Ways to fix this:
-  - [stream] Provide a placeholder with \`<Suspense fallback={...}>\` around the data access
-  - [block] Set \`export const instant = false\` to allow a blocking route
-
-Learn more: https://nextjs.org/docs/messages/blocking-prerender-runtime`),"__NEXT_ERROR_CODE",{value:"E1430",enumerable:!1,configurable:!0})}function i(a){return Object.defineProperty(Error(`Route "${a}": Next.js encountered URL data during prerendering or a navigation.
-
-\`params\` or \`searchParams\` accessed outside of \`<Suspense>\` may prevent the navigation from being instant, leading to a slower user experience.
-
-Ways to fix this:
-  - [stream] Provide a placeholder with \`<Suspense fallback={...}>\` around the data access
-  - [block] Set \`export const instant = false\` to allow a blocking route
-
-Learn more: https://nextjs.org/docs/messages/instant-shell-url-data`),"__NEXT_ERROR_CODE",{value:"E1439",enumerable:!1,configurable:!0})}function j(a){return Object.defineProperty(Error(`Route "${a}": Next.js encountered uncached data during prerendering or a navigation.
-
-\`fetch(...)\` or \`connection()\` accessed outside of \`<Suspense>\` prevents the route from being prerendered or the navigation from being instant, leading to a slower user experience.
-
-Ways to fix this:
-  - [stream] Provide a placeholder with \`<Suspense fallback={...}>\` around the data access
-  - [cache] Cache the data access with \`"use cache"\` (does not apply to \`connection()\`)
-  - [block] Set \`export const instant = false\` to allow a blocking route
-
-Learn more: https://nextjs.org/docs/messages/blocking-prerender-dynamic`),"__NEXT_ERROR_CODE",{value:"E1437",enumerable:!1,configurable:!0})}function k(a){return Object.defineProperty(Error(`Route "${a}": Next.js encountered uncached or runtime data during prerendering.
-
-\`fetch(...)\`, \`cookies()\`, \`headers()\`, \`params\`, \`searchParams\`, or \`connection()\` accessed outside of \`<Suspense>\` prevents the route from being prerendered, blocking the page load and leading to a slower user experience.
-
-Ways to fix this:
-  - [stream] Provide a placeholder with \`<Suspense fallback={...}>\` around the data access
-  - [cache] For uncached data (\`fetch\`, database calls): cache the access with \`"use cache"\` (does not apply to \`connection()\`)
-  - [block] Set \`export const instant = false\` to allow a blocking route
-
-Learn more: https://nextjs.org/docs/messages/blocking-prerender-dynamic`),"__NEXT_ERROR_CODE",{value:"E1428",enumerable:!1,configurable:!0})}function l(a){return Object.defineProperty(Error(`Route "${a}": Next.js encountered URL data in \`generateMetadata()\`.
-
-This route's metadata is blocked, but the rest of its content can be prefetched. \`params\` or \`searchParams\` accessed in \`generateMetadata()\` prevent it from being prefetched.
-
-Ways to fix this:
-  - [static] Use a static metadata export instead of \`generateMetadata()\`
-  - [dynamic] Render a marker component that calls \`await connection()\` inside \`<Suspense>\` on the page
-
-Learn more: https://nextjs.org/docs/messages/blocking-prerender-metadata-runtime`),"__NEXT_ERROR_CODE",{value:"E1429",enumerable:!1,configurable:!0})}function m(a){return Object.defineProperty(Error(`Route "${a}": Next.js encountered runtime data in \`generateMetadata()\`.
-
-This route's metadata is blocked, but the rest of its content can be prerendered. \`cookies()\`, \`headers()\`, \`params\`, or \`searchParams\` accessed in \`generateMetadata()\` cause it to run dynamically.
-
-Ways to fix this:
-  - [static] Use a static metadata export instead of \`generateMetadata()\`
-  - [dynamic] Render a marker component that calls \`await connection()\` inside \`<Suspense>\` on the page
-
-Learn more: https://nextjs.org/docs/messages/blocking-prerender-metadata-runtime`),"__NEXT_ERROR_CODE",{value:"E1423",enumerable:!1,configurable:!0})}function n(a){return Object.defineProperty(Error(`Route "${a}": Next.js encountered uncached data in \`generateMetadata()\`.
-
-This route's metadata is blocked, but the rest of its content can be prerendered. \`fetch(...)\` or \`connection()\` accessed in \`generateMetadata()\` cause it to run dynamically.
-
-Ways to fix this:
-  - [cache] Cache the metadata with \`"use cache"\` in \`generateMetadata()\` (does not apply to \`connection()\`)
-  - [dynamic] Render a marker component that calls \`await connection()\` inside \`<Suspense>\` on the page
-
-Learn more: https://nextjs.org/docs/messages/blocking-prerender-metadata-dynamic`),"__NEXT_ERROR_CODE",{value:"E1425",enumerable:!1,configurable:!0})}function o(a){return Object.defineProperty(Error(`Route "${a}": Next.js encountered URL data in \`generateViewport()\`.
-
-\`params\` or \`searchParams\` in \`generateViewport()\` prevents the page from being prerendered, leading to a slower user experience.
-
-Ways to fix this:
-  - [static] Use a static viewport export instead of \`generateViewport()\`
-  - [block] Set \`export const instant = false\` to allow a blocking route
-
-Learn more: https://nextjs.org/docs/messages/blocking-prerender-viewport-runtime`),"__NEXT_ERROR_CODE",{value:"E1431",enumerable:!1,configurable:!0})}function p(a){return Object.defineProperty(Error(`Route "${a}": Next.js encountered runtime data in \`generateViewport()\`.
-
-\`cookies()\`, \`headers()\`, \`params\`, or \`searchParams\` in \`generateViewport()\` prevents the page from being prerendered, leading to a slower user experience.
-
-Ways to fix this:
-  - [static] Use a static viewport export instead of \`generateViewport()\`
-  - [block] Set \`export const instant = false\` to allow a blocking route
-
-Learn more: https://nextjs.org/docs/messages/blocking-prerender-viewport-runtime`),"__NEXT_ERROR_CODE",{value:"E1424",enumerable:!1,configurable:!0})}function q(a){return Object.defineProperty(Error(`Route "${a}": Next.js encountered uncached data in \`generateViewport()\`.
-
-\`fetch(...)\` or \`connection()\` in \`generateViewport()\` prevents the page from being prerendered, leading to a slower user experience.
-
-Ways to fix this:
-  - [cache] Cache the viewport data with \`"use cache"\` in \`generateViewport()\` (does not apply to \`connection()\`)
-  - [block] Set \`export const instant = false\` to allow a blocking route
-
-Learn more: https://nextjs.org/docs/messages/blocking-prerender-viewport-dynamic`),"__NEXT_ERROR_CODE",{value:"E1438",enumerable:!1,configurable:!0})}function r(a){return Object.defineProperty(Error(`Route "${a}": Next.js encountered uncached or runtime data in \`generateViewport()\`.
-
-This prevents the page from being prerendered, leading to a slower user experience. Unlike metadata, viewport cannot be streamed behind \`<Suspense>\` because it affects the initial page load.
-
-Ways to fix this:
-  - [static] Use a static viewport export instead of \`generateViewport()\`
-  - [cache] For uncached data (\`fetch\`, database calls): cache the viewport with \`"use cache"\` in \`generateViewport()\` (does not apply to \`connection()\`)
-  - [block] Set \`export const instant = false\` to allow a blocking route
-
-Learn more: https://nextjs.org/docs/messages/blocking-prerender-viewport-runtime`),"__NEXT_ERROR_CODE",{value:"E1436",enumerable:!1,configurable:!0})}function s(a){return Object.defineProperty(Error(`Route "${a}": Next.js encountered uncached or runtime data in \`generateMetadata()\`.
-
-This route's metadata is blocked, but the rest of its content can be prerendered.
-
-Ways to fix this:
-  - [static] Use a static metadata export instead of \`generateMetadata()\`
-  - [cache] Cache the metadata with \`"use cache"\` in \`generateMetadata()\` (does not apply to \`connection()\`)
-  - [dynamic] Render a marker component that calls \`await connection()\` inside \`<Suspense>\` on the page
-
-Learn more: https://nextjs.org/docs/messages/blocking-prerender-metadata-runtime`),"__NEXT_ERROR_CODE",{value:"E1426",enumerable:!1,configurable:!0})}function t(a){console.error(`To get a more detailed stack trace and pinpoint the issue, try one of the following:
-  - Start the app in development mode by running \`next dev\`, then open "${a}" in your browser to investigate the error.
-  - Rerun the production build with \`next build --debug-prerender\` to generate better stack traces.`)}},99195,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d={INSTANT_SLOT_MARKER_PREFIX:function(){return g},INSTANT_SLOT_MARKER_SUFFIX:function(){return h},INSTANT_VALIDATION_BOUNDARY_NAME:function(){return f}};for(var e in d)Object.defineProperty(c,e,{enumerable:!0,get:d[e]});let f="__next_instant_validation_boundary__",g="__next_instant_slot_",h="__"},64393,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d={allRequiredBoundariesRendered:function(){return g},createValidationBoundaryTracking:function(){return f}};for(var e in d)Object.defineProperty(c,e,{enumerable:!0,get:d[e]});function f(){return{requiredIds:new Map,renderedIds:new Set}}function g(a){for(let b of a.requiredIds.keys())if(!a.renderedIds.has(b))return!1;return!0}},939,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d={createLinkPrefetchPartialError:function(){return g},createUnrenderedSegmentError:function(){return f}};for(var e in d)Object.defineProperty(c,e,{enumerable:!0,get:d[e]});function f(a,b){let c=`Route "${a}": Could not validate that a segment in your UI has instant navigation.`;if(b.length>0){let a=1===b.length?"Dropped segment":"Dropped segments";c+=`
-
-This segment was dropped from rendering. Issues that would prevent instant navigation will go undetected.
-
-${a}:
-${b.map(a=>`  ${a}`).join("\n")}
-
-Ways to fix this:
-  - [render] Render the dropped segment
-  - [ignore] Set \`export const instant = false\` to opt the dropped segment out of instant-navigation validation
-
-Learn more: https://nextjs.org/docs/messages/instant-unrendered-segment`}return Object.defineProperty(Error(c),"__NEXT_ERROR_CODE",{value:"E1286",enumerable:!1,configurable:!0})}function g(a){return Object.defineProperty(Error(`Next.js encountered dynamic data during prefetching for "${a}".
-
-This will lead to slower, more expensive prefetches.
-
-Ways to fix this:
-  - [upgrade] Opt into Partial Prefetching by exporting \`const prefetch = 'partial'\` from the page or layout, or by setting \`partialPrefetching: true\` in next.config to opt the whole app in
-  - [disable] Remove \`prefetch={true}\` from the <Link> to use the default prefetch
-  - [ignore] Set \`export const instant = false\` to opt the route out of instant-navigation validation
-
-Learn more: https://nextjs.org/docs/messages/instant-link-prefetch-partial`),"__NEXT_ERROR_CODE",{value:"E1435",enumerable:!1,configurable:!0})}},60384,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d,e,f,g={DynamicHoleKind:function(){return af},Postpone:function(){return H},PreludeState:function(){return am},abortAndThrowOnSynchronousRequestDataAccess:function(){return G},abortOnSynchronousPlatformIOAccess:function(){return F},accessedDynamicData:function(){return P},annotateDynamicAccess:function(){return V},consumeDynamicAccess:function(){return Q},createDynamicTrackingState:function(){return x},createDynamicValidationState:function(){return y},createHangingInputAbortSignal:function(){return T},createInstantValidationState:function(){return ag},createRenderInBrowserAbortSignal:function(){return S},formatDynamicAPIAccesses:function(){return R},getFirstDynamicReason:function(){return A},getNavigationDisallowedDynamicReasons:function(){return ar},getStaticShellDisallowedDynamicReasons:function(){return aq},isDynamicPostpone:function(){return K},isPrerenderInterruptedError:function(){return O},logDisallowedDynamicError:function(){return an},markCurrentScopeAsDynamic:function(){return B},postponeWithTracking:function(){return I},throwIfDisallowedDynamic:function(){return ap},throwIfSyncIOUsed:function(){return ao},throwToInterruptStaticGeneration:function(){return C},trackAllowedDynamicAccess:function(){return ae},trackDynamicDataInDynamicRender:function(){return D},trackDynamicHoleInNavigation:function(){return ah},trackDynamicHoleInRuntimeShell:function(){return aj},trackDynamicHoleInStaticShell:function(){return ak},trackThrownErrorInNavigation:function(){return ai},useDynamicRouteParams:function(){return W},useDynamicSearchParams:function(){return X}};for(var h in g)Object.defineProperty(c,h,{enumerable:!0,get:g[h]});let i=(d=a.r(717))&&d.__esModule?d:{default:d},j=a.r(96556),k=a.r(60312),l=a.r(32319),m=a.r(56704),n=a.r(13091),o=a.r(17491),p=a.r(61933),q=a.r(49640),r=a.r(14068),s=a.r(50640),t=a.r(99195),u=a.r(64393),v=a.r(939),w="function"==typeof i.default.unstable_postpone;function x(a){return{isDebugDynamicAccesses:a,dynamicAccesses:[],syncDynamicErrorWithStack:null,syncDynamicErrorWithStackPostMicrotask:!1}}function y(){return{hasSuspenseAboveBody:!1,hasDynamicMetadata:!1,dynamicMetadata:null,hasDynamicViewport:!1,hasAllowedDynamic:!1,dynamicErrors:[]}}function z(a){return a.syncDynamicErrorWithStackPostMicrotask?null:a.syncDynamicErrorWithStack}function A(a){var b;return null==(b=a.dynamicAccesses[0])?void 0:b.expression}function B(a,b,c){if(b)switch(b.type){case"cache":case"unstable-cache":case"private-cache":return}if(!a.forceDynamic&&!a.forceStatic){if(a.dynamicShouldError)throw Object.defineProperty(new k.StaticGenBailoutError(`Route ${a.route} with \`dynamic = "error"\` couldn't be rendered statically because it used \`${c}\`. See more info here: https://nextjs.org/docs/app/building-your-application/rendering/static-and-dynamic#dynamic-rendering`),"__NEXT_ERROR_CODE",{value:"E553",enumerable:!1,configurable:!0});if(b)switch(b.type){case"prerender-ppr":return I(a.route,c,b.dynamicTracking);case"prerender-legacy":b.revalidate=0;let d=Object.defineProperty(new j.DynamicServerError(`Route ${a.route} couldn't be rendered statically because it used ${c}. See more info here: https://nextjs.org/docs/messages/dynamic-server-error`),"__NEXT_ERROR_CODE",{value:"E550",enumerable:!1,configurable:!0});throw a.dynamicUsageDescription=c,a.dynamicUsageStack=d.stack,d}}}function C(a,b,c){let d=Object.defineProperty(new j.DynamicServerError(`Route ${b.route} couldn't be rendered statically because it used \`${a}\`. See more info here: https://nextjs.org/docs/messages/dynamic-server-error`),"__NEXT_ERROR_CODE",{value:"E558",enumerable:!1,configurable:!0});throw c.revalidate=0,b.dynamicUsageDescription=a,b.dynamicUsageStack=d.stack,d}function D(a){switch(a.type){case"cache":case"unstable-cache":case"private-cache":return}}function E(a,b,c){let d=N(`Route ${a} needs to bail out of prerendering at this point because it used ${b}.`);c.controller.abort(d);let e=c.dynamicTracking;e&&e.dynamicAccesses.push({stack:e.isDebugDynamicAccesses?Error().stack:void 0,expression:b})}function F(a,b,c,d){let e=d.dynamicTracking;e&&null===e.syncDynamicErrorWithStack&&(e.syncDynamicErrorWithStack=c,queueMicrotask(()=>{e.syncDynamicErrorWithStackPostMicrotask=!0})),E(a,b,d)}function G(a,b,c,d){if((0,n.trackRuntimeDataAccessed)(d),!1===d.controller.signal.aborted){E(a,b,d);let e=d.dynamicTracking;e&&null===e.syncDynamicErrorWithStack&&(e.syncDynamicErrorWithStack=c)}throw N(`Route ${a} needs to bail out of prerendering at this point because it used ${b}.`)}function H({reason:a,route:b}){let c=l.workUnitAsyncStorage.getStore();I(b,a,c&&"prerender-ppr"===c.type?c.dynamicTracking:null)}function I(a,b,c){(function(){if(!w)throw Object.defineProperty(Error("Invariant: React.unstable_postpone is not defined. This suggests the wrong version of React was loaded. This is a bug in Next.js"),"__NEXT_ERROR_CODE",{value:"E224",enumerable:!1,configurable:!0})})(),c&&c.dynamicAccesses.push({stack:c.isDebugDynamicAccesses?Error().stack:void 0,expression:b}),i.default.unstable_postpone(J(a,b))}function J(a,b){return`Route ${a} needs to bail out of prerendering at this point because it used ${b}. React throws this special object to indicate where. It should not be caught by your own try/catch. Learn more: https://nextjs.org/docs/messages/ppr-caught-error`}function K(a){return"object"==typeof a&&null!==a&&"string"==typeof a.message&&L(a.message)}function L(a){return a.includes("needs to bail out of prerendering at this point because it used")&&a.includes("Learn more: https://nextjs.org/docs/messages/ppr-caught-error")}if(!1===L(J("%%%","^^^")))throw Object.defineProperty(Error("Invariant: isDynamicPostpone misidentified a postpone reason. This is a bug in Next.js"),"__NEXT_ERROR_CODE",{value:"E296",enumerable:!1,configurable:!0});let M="NEXT_PRERENDER_INTERRUPTED";function N(a){let b=Object.defineProperty(Error(a),"__NEXT_ERROR_CODE",{value:"E394",enumerable:!1,configurable:!0});return b.digest=M,b}function O(a){return"object"==typeof a&&null!==a&&a.digest===M&&"name"in a&&"message"in a&&a instanceof Error}function P(a){return a.length>0}function Q(a,b){return a.dynamicAccesses.push(...b.dynamicAccesses),a.dynamicAccesses}function R(a){return a.filter(a=>"string"==typeof a.stack&&a.stack.length>0).map(({expression:a,stack:b})=>(b=b.split("\n").slice(4).filter(a=>!(a.includes("node_modules/next/")||a.includes(" (<anonymous>)")||a.includes(" (node:"))).join("\n"),`Dynamic API Usage Debug - ${a}:
-${b}`))}function S(){let a=new AbortController;return a.abort(Object.defineProperty(new q.BailoutToCSRError("Render in Browser"),"__NEXT_ERROR_CODE",{value:"E721",enumerable:!1,configurable:!0})),a.signal}function T(a){switch(a.type){case"prerender":case"prerender-runtime":let b=new AbortController;if(a.cacheSignal)a.cacheSignal.inputReady().then(()=>{b.abort()});else{let c=(0,l.getStagedRenderingController)(a);c&&null!==c.finalStage?c.waitForStage(c.finalStage).then(()=>(0,p.scheduleOnNextTick)(()=>b.abort()),U):(0,p.scheduleOnNextTick)(()=>b.abort())}return b.signal;case"prerender-client":case"validation-client":case"prerender-ppr":case"prerender-legacy":case"request":case"cache":case"private-cache":case"unstable-cache":case"generate-static-params":return}}function U(){}function V(a,b){let c=b.dynamicTracking;c&&c.dynamicAccesses.push({stack:c.isDebugDynamicAccesses?Error().stack:void 0,expression:a})}function W(a){let b=m.workAsyncStorage.getStore(),c=l.workUnitAsyncStorage.getStore();if(b&&c)switch(c.type){case"prerender-client":{let d=c.fallbackRouteParams;d&&d.size>0&&i.default.use((0,n.makeClientHookHangingPromise)(c.renderSignal,new n.ClientHookDynamicError(b.route,a)));break}case"prerender":throw Object.defineProperty(new s.InvariantError(`\`${a}\` was called from a Server Component. Next.js should be preventing ${a} from being included in server components statically, but did not in this case.`),"__NEXT_ERROR_CODE",{value:"E795",enumerable:!1,configurable:!0});case"prerender-ppr":{let d=c.fallbackRouteParams;if(d&&d.size>0)return I(b.route,a,c.dynamicTracking);break}case"validation-client":case"prerender-legacy":case"request":case"unstable-cache":break;case"prerender-runtime":throw Object.defineProperty(new s.InvariantError(`\`${a}\` was called during a runtime prerender. Next.js should be preventing ${a} from being included in server components statically, but did not in this case.`),"__NEXT_ERROR_CODE",{value:"E771",enumerable:!1,configurable:!0});case"cache":case"private-cache":throw Object.defineProperty(new s.InvariantError(`\`${a}\` was called inside a cache scope. Next.js should be preventing ${a} from being included in server components statically, but did not in this case.`),"__NEXT_ERROR_CODE",{value:"E745",enumerable:!1,configurable:!0});case"generate-static-params":throw Object.defineProperty(new s.InvariantError(`\`${a}\` was called in \`generateStaticParams\`. Next.js should be preventing ${a} from being included in server component files statically, but did not in this case.`),"__NEXT_ERROR_CODE",{value:"E1130",enumerable:!1,configurable:!0})}}function X(a){let b=m.workAsyncStorage.getStore(),c=l.workUnitAsyncStorage.getStore();if(b)switch(!c&&(0,l.throwForMissingRequestStore)(a),c.type){case"validation-client":case"request":return;case"prerender-client":i.default.use((0,n.makeClientHookHangingPromise)(c.renderSignal,new n.ClientHookDynamicError(b.route,a)));break;case"prerender-legacy":case"prerender-ppr":if(b.forceStatic)return;throw Object.defineProperty(new q.BailoutToCSRError(a),"__NEXT_ERROR_CODE",{value:"E394",enumerable:!1,configurable:!0});case"prerender":case"prerender-runtime":throw Object.defineProperty(new s.InvariantError(`\`${a}\` was called from a Server Component. Next.js should be preventing ${a} from being included in server components statically, but did not in this case.`),"__NEXT_ERROR_CODE",{value:"E795",enumerable:!1,configurable:!0});case"cache":case"unstable-cache":case"private-cache":throw Object.defineProperty(new s.InvariantError(`\`${a}\` was called inside a cache scope. Next.js should be preventing ${a} from being included in server components statically, but did not in this case.`),"__NEXT_ERROR_CODE",{value:"E745",enumerable:!1,configurable:!0});case"generate-static-params":throw Object.defineProperty(new s.InvariantError(`\`${a}\` was called in \`generateStaticParams\`. Next.js should be preventing ${a} from being included in server component files statically, but did not in this case.`),"__NEXT_ERROR_CODE",{value:"E1130",enumerable:!1,configurable:!0})}}let Y=/\n\s+at Suspense \(<anonymous>\)/,Z=RegExp(`\\n\\s+at Suspense \\(<anonymous>\\)(?:(?!\\n\\s+at (?:body|div|main|section|article|aside|header|footer|nav|form|p|span|h1|h2|h3|h4|h5|h6) \\(<anonymous>\\))[\\s\\S])*?\\n\\s+at ${o.ROOT_LAYOUT_BOUNDARY_NAME} \\([^\\n]*\\)`),$=RegExp(`\\n\\s+at ${o.METADATA_BOUNDARY_NAME}[\\n\\s]`),_=RegExp(`\\n\\s+at ${o.VIEWPORT_BOUNDARY_NAME}[\\n\\s]`),aa=RegExp(`\\n\\s+at ${o.OUTLET_BOUNDARY_NAME}[\\n\\s]`),ab=RegExp(`\\n\\s+at ${t.INSTANT_VALIDATION_BOUNDARY_NAME}[\\n\\s]`),ac=RegExp(`\\n\\s+at ${t.INSTANT_SLOT_MARKER_PREFIX}(\\d+)${t.INSTANT_SLOT_MARKER_SUFFIX}[\\n\\s]`);function ad(a,b){Z.test(a)&&(b.hasSuspenseAboveBody=!0)}function ae(a,b,c,d,e){let f=z(e);if(aa.test(c))return void ad(c,d);if($.test(c)){d.hasDynamicMetadata=!0;return}if(_.test(c)){d.hasDynamicViewport=!0;return}if(Z.test(c)){d.hasAllowedDynamic=!0,d.hasSuspenseAboveBody=!0;return}if(Y.test(c)){d.hasAllowedDynamic=!0;return}else if(f)return void d.dynamicErrors.push(f);if((0,n.isClientHookDynamicError)(a))return void d.dynamicErrors.push(al(a,c,null));let g=al((0,r.createDynamicOrRuntimeBodyError)(b.route),c,null);d.dynamicErrors.push(g)}var af=((e={})[e.Link=1]="Link",e[e.Runtime=2]="Runtime",e[e.Dynamic=3]="Dynamic",e);function ag(a){return{hasDynamicMetadata:!1,hasAllowedClientDynamicAboveBoundary:!1,dynamicMetadata:null,hasDynamicViewport:!1,hasAllowedDynamic:!1,dynamicErrors:[],validationPreventingErrors:[],thrownErrorsOutsideBoundary:[],slotStacks:a}}function ah(a,b,c,d,e,f,g){let h=z(e);if(aa.test(c))return;let i=function(a,b){let{slotStacks:c}=b;if(c.length>1){let b=ac.exec(a);if(b){let a=c[parseInt(b[1],10)+1];if(null!=a)return a}}return c[0]??null}(c,d);if($.test(c)){d.dynamicMetadata=al(1===f?(0,r.createLinkMetadataError)(b.route):2===f?(0,r.createRuntimeMetadataError)(b.route):(0,r.createDynamicMetadataError)(b.route),c,i);return}if(_.test(c)){let a=al(1===f?(0,r.createLinkViewportError)(b.route):2===f?(0,r.createRuntimeViewportError)(b.route):(0,r.createDynamicViewportError)(b.route),c,i);d.dynamicErrors.push(a);return}let j=ab.exec(c);if(j){let a=Y.exec(c);if(a&&a.index<j.index){d.hasAllowedDynamic=!0;return}}else if((0,u.allRequiredBoundariesRendered)(g)){d.hasAllowedClientDynamicAboveBoundary=!0,d.hasAllowedDynamic=!0;return}else{let a=al(Object.defineProperty(Error(`Route "${b.route}": Could not validate \`instant\` because a Client Component in a parent segment prevented the page from rendering.`),"__NEXT_ERROR_CODE",{value:"E1331",enumerable:!1,configurable:!0}),c,i);d.validationPreventingErrors.push(a);return}if(h){null!==i&&void 0===h.cause&&(h.cause=i()),d.dynamicErrors.push(h);return}if((0,n.isClientHookDynamicError)(a))return void d.dynamicErrors.push(al(a,c,i));let k=al(1===f?(0,r.createLinkBodyErrorInNavigation)(b.route):2===f?(0,r.createRuntimeBodyErrorInNavigation)(b.route):(0,r.createDynamicBodyErrorInNavigation)(b.route),c,i);d.dynamicErrors.push(k)}function ai(a,b,c,d){let e=ab.exec(d);if(e){let f=Y.exec(d);if(f&&f.index<e.index)return;let g=al(Object.defineProperty(Error(`Route "${a.route}": Could not validate \`instant\` because an error prevented the target segment from rendering.`,{cause:c}),"__NEXT_ERROR_CODE",{value:"E1338",enumerable:!1,configurable:!0}),d,null);b.validationPreventingErrors.push(g)}else{let a=al(Object.defineProperty(Error("An error occurred while attempting to validate instant UI. This error may be preventing the validation from completing.",{cause:c}),"__NEXT_ERROR_CODE",{value:"E1118",enumerable:!1,configurable:!0}),d,null);b.thrownErrorsOutsideBoundary.push(a)}}function aj(a,b,c,d,e){let f=z(e);if(aa.test(c))return void ad(c,d);if($.test(c)){d.dynamicMetadata=al((0,r.createDynamicMetadataError)(b.route),c,null);return}if(_.test(c)){let a=al((0,r.createDynamicViewportError)(b.route),c,null);d.dynamicErrors.push(a);return}if(Z.test(c)){d.hasAllowedDynamic=!0,d.hasSuspenseAboveBody=!0;return}if(Y.test(c)){d.hasAllowedDynamic=!0;return}else if(f)return void d.dynamicErrors.push(f);if((0,n.isClientHookDynamicError)(a))return void d.dynamicErrors.push(al(a,c,null));let g=al((0,r.createDynamicBodyError)(b.route),c,null);d.dynamicErrors.push(g)}function ak(a,b,c,d,e){let f=z(e);if(aa.test(c))return void ad(c,d);if($.test(c)){d.dynamicMetadata=al((0,r.createRuntimeMetadataError)(b.route),c,null);return}if(_.test(c)){let a=al((0,r.createRuntimeViewportError)(b.route),c,null);d.dynamicErrors.push(a);return}if(Z.test(c)){d.hasAllowedDynamic=!0,d.hasSuspenseAboveBody=!0;return}if(Y.test(c)){d.hasAllowedDynamic=!0;return}else if(f)return void d.dynamicErrors.push(f);if((0,n.isClientHookDynamicError)(a))return void d.dynamicErrors.push(al(a,c,null));let g=al((0,r.createRuntimeBodyError)(b.route),c,null);d.dynamicErrors.push(g)}function al(a,b,c){return null!==c&&(a.cause=c()),a.stack=a.name+": "+a.message+b,a}var am=((f={})[f.Full=0]="Full",f[f.Empty=1]="Empty",f[f.Errored=2]="Errored",f);function an(a,b){console.error(b),(0,r.logBuildDebugHint)(a.route)}function ao(a,b){if(b.syncDynamicErrorWithStack)throw an(a,b.syncDynamicErrorWithStack),new k.StaticGenBailoutError}function ap(a,b,c,d,e){if(ao(a,d),0===b&&!1===c.hasAllowedDynamic&&c.hasDynamicMetadata)throw console.error((0,r.createDynamicOrRuntimeMetadataError)(a.route).message),new k.StaticGenBailoutError;if(!e&&!c.hasSuspenseAboveBody&&0!==b){let d=c.dynamicErrors;if(d.length>0){for(let b=0;b<d.length;b++)an(a,d[b]);throw new k.StaticGenBailoutError}if(c.hasDynamicViewport)throw console.error((0,r.createDynamicOrRuntimeViewportError)(a.route).message),new k.StaticGenBailoutError;if(1===b)throw console.error(`Route "${a.route}" did not produce a static shell and Next.js was unable to determine a reason. This is a bug in Next.js.`),new k.StaticGenBailoutError}}function aq(a,b,c,d){if(0===b&&!1===c.hasAllowedDynamic&&0===c.dynamicErrors.length&&c.dynamicMetadata)return[c.dynamicMetadata];if(d||c.hasSuspenseAboveBody)return[];if(0!==b){let d=c.dynamicErrors;if(d.length>0)return d;if(1===b)return[Object.defineProperty(new s.InvariantError(`Route "${a.route}" did not produce a static shell and Next.js was unable to determine a reason.`),"__NEXT_ERROR_CODE",{value:"E936",enumerable:!1,configurable:!0})]}return[]}function ar(a,b,c,d,e,f){if(d){let{missingSampleErrors:a}=d;if(a.length>0)return a}let{validationPreventingErrors:g}=c;if(g.length>0)return g;if(0!==b){let d=c.dynamicErrors;if(d.length>0)return d;if(1===b&&!c.hasAllowedClientDynamicAboveBoundary&&(0,u.allRequiredBoundariesRendered)(e))return Object.defineProperty(new s.InvariantError(`Route "${a.route}" failed to render during instant validation and Next.js was unable to determine a reason.`),"__NEXT_ERROR_CODE",{value:"E1055",enumerable:!1,configurable:!0})}else{let a=c.dynamicErrors;if(a.length>0)return a;if(!1===c.hasAllowedDynamic&&c.dynamicMetadata)return[c.dynamicMetadata]}if(!(0,u.allRequiredBoundariesRendered)(e)){let{thrownErrorsOutsideBoundary:b}=c,d=c.slotStacks[0];if(0===b.length){let b=[];for(let[a,c]of e.requiredIds)if(!e.renderedIds.has(a))for(let a of c){let c=a.replace(/^\[project\][\\/]?/,"").replace(process.cwd()+"/","").replace(process.cwd()+"\\","");b.push(c)}return b.sort(),(0,v.createUnrenderedSegmentError)(a.route,b)}if(1===b.length){let c=`Route "${a.route}": Could not validate \`instant\` because the target segment was prevented from rendering, likely due to the following error.`,e=null!==d?d():Error();return e.name="Error",e.message=c,AggregateError([e,b[0]])}{let c=`Route "${a.route}": Could not validate \`instant\` because the target segment was prevented from rendering, likely due to one of the following errors.`,e=null!==d?d():Error();return e.name="Error",e.message=c,AggregateError([e,...b])}}return[]}},13091,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d={ClientHookDynamicError:function(){return k},RENDER_STAGES_BY_DATA_KIND:function(){return A},applyOwnerStack:function(){return B},isClientHookDynamicError:function(){return l},isHangingPromiseRejectionError:function(){return g},makeClientHookHangingPromise:function(){return v},makeDevtoolsIOAwarePromise:function(){return z},makeDynamicHangingPromise:function(){return n},makeFallbackParamsHangingPromise:function(){return q},makePromiseFromTrigger:function(){return y},makeRuntimeHangingPromise:function(){return p},makeStageHangingPromise:function(){return r},makeUntrackedHangingPromise:function(){return o},trackFallbackParamsAccessed:function(){return t},trackRuntimeDataAccessed:function(){return s}};for(var e in d)Object.defineProperty(c,e,{enumerable:!0,get:d[e]});let f=a.r(31382);function g(a){return"object"==typeof a&&null!==a&&"digest"in a&&a.digest===h}a.r(32319),a.r(59043);let h="HANGING_PROMISE_REJECTION";class i extends Error{constructor(a,b){super(`During prerendering, ${b} rejects when the prerender is complete. Typically these errors are handled by React but if you move ${b} to a different context by using \`setTimeout\`, \`after\`, or similar functions you may observe this error and you should handle it in that context. This occurred at route "${a}".`),this.route=a,this.expression=b,this.digest=h}}let j="CLIENT_HOOK_DYNAMIC";class k extends Error{constructor(a,b){super(`Route "${a}": Next.js encountered URL data \`${b}\` in a Client Component outside of \`<Suspense>\`.
-
-This blocks prerendering because the value is only available at runtime.
-
-Ways to fix this:
-  - [stream] Wrap the component in \`<Suspense fallback={...}>\` so the hook value streams in after prerendering
-  - [block] Set \`export const instant = false\` to allow a blocking route
-
-Learn more: https://nextjs.org/docs/messages/blocking-prerender-client-hook`),this.digest=j,Object.defineProperty(this,"__NEXT_ERROR_CODE",{value:"E1433",enumerable:!1,configurable:!0})}}function l(a){return"object"==typeof a&&null!==a&&"digest"in a&&a.digest===j}let m=new WeakMap;function n(a,b,c){return w(a,new i(b,c))}function o(a,b,c){return w(a,new i(b,c))}function p(a,b,c,d){return null!==d&&s(d),w(a,new i(b,c))}function q(a,b,c,d){return null!==d&&t(d),w(a,new i(b,c))}function r(a,b,c,d){return s(d),w(a,new i(b,c))}function s(a){u(a,!1)}function t(a){u(a,!0)}function u(a,b){if("prerender"===a.type){var c;null==(c=a.runtimeDataAccessed)||c.resolve(!0);let d=a.shouldAttemptStaticPrefetch;null===d||b&&a.isFallbackUpgradeable||(d.current=!1)}}function v(a,b){return w(a,b)}function w(a,b){if(a.aborted)return Promise.reject(b);{let c=new Promise((c,d)=>{let e=d.bind(null,b),f=m.get(a);if(f)f.push(e);else{let b=[e];m.set(a,b),a.addEventListener("abort",()=>{for(let a=0;a<b.length;a++)b[a]()},{once:!0})}});return c.catch(x),c}}function x(){}function y(a,b){let c=a.then(()=>b);return c.catch(x),c}function z(a,b,c){return b.stagedRendering?b.stagedRendering.delayUntilStage(c,void 0,a):new Promise(b=>{setTimeout(()=>{b(a)},0)})}let A={sessionData:f.RenderStage.ShellRuntime,staticLinkData:f.RenderStage.Static,runtimeLinkData:f.RenderStage.Runtime};function B(a){return a}},50640,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"InvariantError",{enumerable:!0,get:function(){return d}});class d extends Error{constructor(a,b){super(`Invariant: ${a.endsWith(".")?a:a+"."} This is a bug in Next.js.`,b),Object.defineProperty(this,"__NEXT_ERROR_CODE",{value:"E1179",enumerable:!1,configurable:!0}),this.name="InvariantError"}}},49640,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d={BailoutToCSRError:function(){return g},isBailoutToCSRError:function(){return h}};for(var e in d)Object.defineProperty(c,e,{enumerable:!0,get:d[e]});let f="BAILOUT_TO_CLIENT_SIDE_RENDERING";class g extends Error{constructor(a){super(`Bail out to client-side rendering: ${a}`),this.reason=a,this.digest=f}}function h(a){return"object"==typeof a&&null!==a&&"digest"in a&&a.digest===f}},28340,(a,b,c)=>{"use strict";function d(){let a,b,c=new Promise((c,d)=>{a=c,b=d});return{resolve:a,reject:b,promise:c}}Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"createPromiseWithResolvers",{enumerable:!0,get:function(){return d}})},31382,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d,e,f={RENDER_STAGE_ADVANCE_ORDER:function(){return k},RenderStage:function(){return j},StagedRenderingController:function(){return o},SyncIOMode:function(){return n},getNextStage:function(){return l},isAdvanceableRenderStage:function(){return m}};for(var g in f)Object.defineProperty(c,g,{enumerable:!0,get:f[g]});let h=a.r(50640),i=a.r(28340);var j=((d={})[d.Before=1]="Before",d[d.ShellStatic=11]="ShellStatic",d[d.Static=13]="Static",d[d.ShellRuntime=21]="ShellRuntime",d[d.Runtime=23]="Runtime",d[d.Dynamic=30]="Dynamic",d[d.Abandoned=40]="Abandoned",d);let k=[11,13,21,23,30];function l(a){return k[k.indexOf(a)+1]}function m(a){return 1<a&&a<=30}var n=((e={})[e.Untracked=1]="Untracked",e[e.AllowedInRuntimeOrDynamic=2]="AllowedInRuntimeOrDynamic",e[e.AllowedInDynamic=3]="AllowedInDynamic",e);class o{constructor({abortSignal:a,abandonController:b,syncIO:c,finalStage:d}){this.currentStage=1,this.syncInterruptReason=null,this.triggers={11:q(),13:q(),21:q(),23:q(),30:q()},this.abortSignal=a,this.abandonController=b,this.syncIOMode=c,this.finalStage=d,a&&a.addEventListener("abort",()=>{let{reason:b}=a;for(let a of Object.values(this.triggers)){var c,d;c=a,d=b,"pending"===c.state&&(c.state="cancelled",c._listeners.length=0,c.promise.catch(p),c._rejectPromise(d))}},{once:!0}),b&&b.signal.addEventListener("abort",()=>{this.abandonRender()},{once:!0})}onStage(a,b){var c,d;c=this.triggers[a],d=b,"pending"===c.state?c._listeners.push(d):d()}shouldTrackSyncInterrupt(){if(1===this.syncIOMode)return!1;switch(this.currentStage){case 1:return!1;case 11:case 13:return!0;case 21:case 23:switch(this.syncIOMode){case 2:return!1;case 3:return!0}case 30:case 40:return!1;default:return this.currentStage,!1}}syncInterruptCurrentStageWithReason(a){let{currentStage:b}=this;if(1!==b&&30!==b&&40!==b){if(this.abandonController)return void this.abandonController.abort();if(this.abortSignal){this.syncInterruptReason=a,this.currentStage=40;return}this.syncInterruptReason=a,this.advanceStage(30)}}getSyncInterruptReason(){return this.syncInterruptReason}getStageEndTime(a){return this.triggers[l(a)].triggeredAt??1/0}abandonRender(){let{currentStage:a}=this;if(1===a)throw Object.defineProperty(new h.InvariantError("A render that hasn't started yet cannot be abandoned"),"__NEXT_ERROR_CODE",{value:"E1300",enumerable:!1,configurable:!0});if(30===a||40===a)return;let b=k.indexOf(a)+1,c=k.indexOf(30);for(let a=b;a<c;a++)this.resolveStage(k[a]);this.currentStage=40}advanceStage(a){if(null!==this.finalStage&&a>this.finalStage)throw Object.defineProperty(new h.InvariantError(`Attempted to advance to stage ${j[a]} but the render is limited to ${j[this.finalStage]}`),"__NEXT_ERROR_CODE",{value:"E1302",enumerable:!1,configurable:!0});let{currentStage:b}=this;if(30===b||40===b||a<=b)return;this.currentStage=a;let c=1===b?0:k.indexOf(b)+1,d=k.indexOf(a);for(let a=c;a<=d;a++)this.resolveStage(k[a])}resolveStage(a){var b=this.triggers[a];if("pending"===b.state){b.state="triggered",b.triggeredAt=performance.now()+performance.timeOrigin;try{let{_listeners:a}=b;for(let b=0;b<a.length;b++)a[b]();a.length=0}finally{b._resolvePromise()}}}getStagePromise(a){return this.triggers[a].promise}waitForStage(a){return this.getStagePromise(a)}delayUntilStage(a,b,c){let d=this.getStagePromise(a).then(()=>c);return this.abortSignal&&d.catch(p),d}}function p(){}function q(){let{promise:a,resolve:b,reject:c}=(0,i.createPromiseWithResolvers)();return{state:"pending",triggeredAt:null,promise:a,_listeners:[],_resolvePromise:b,_rejectPromise:c}}}];
-
-//# sourceMappingURL=node_modules_next_dist_0w6mzq5._.js.map

package/.next/standalone/.next/server/chunks/ssr/src_hooks_095a_79._.js

@@ -1,5 +0,0 @@
-module.exports=[1144,a=>{"use strict";var b=a.i(2157),c=a.i(50227),d=a.i(75818);let e="current.jsonl",f=()=>(0,d.hookActivityDir)();function g(){(0,b.existsSync)(f())||(0,b.mkdirSync)(f(),{recursive:!0})}function h(){let a=function(){try{return JSON.parse((0,b.readFileSync)((0,c.join)(f(),"stats.json"),"utf-8"))}catch{return{totalEvents:0,denyCount:0,policyMap:{}}}}(),d=null,e=0;for(let[b,c]of Object.entries(a.policyMap))c>e&&(d=b,e=c);return{totalEvents:a.totalEvents,denyCount:a.denyCount,topPolicy:d,topPolicyCount:e}}function i(a){let c=function(a){try{return(0,b.readFileSync)(a,"utf-8")}catch{return""}}(a);if(!c.trim())return[];let d=[];for(let a of c.trim().split("\n"))try{var e;d.push((e=JSON.parse(a),void 0===e.cloudVersion&&"number"==typeof e.cloudRevision&&(e.cloudVersion=e.cloudRevision),void 0===e.cloudDeployment&&"number"==typeof e.cloudGeneration&&(e.cloudDeployment=e.cloudGeneration),e))}catch{}return d}function j(){try{return(0,b.readdirSync)(f()).filter(a=>a.startsWith("page-")&&a.endsWith(".jsonl")).sort((a,b)=>{let c=a.slice(5,-6).split("-"),d=b.slice(5,-6).split("-"),e=parseInt(c[0],10),f=parseInt(d[0],10);if(e!==f)return f-e;let g=c.length>1?parseInt(c[1],10):0;return(d.length>1?parseInt(d[1],10):0)-g})}catch{return[]}}a.s(["getHookActivityEntriesSince",0,function(a){g();let b=f(),d=b=>"number"==typeof b.timestamp&&b.timestamp>=a,h=new Set(j());let k=i((0,c.join)(b,e));let l=new Map;for(let a of k){let b=JSON.stringify(a);l.set(b,(l.get(b)??0)+1)}let m=a=>{let b=JSON.stringify(a),c=l.get(b)??0;return 0===c||(l.set(b,c-1),!1)},n=k.reverse().filter(d);for(let e of j()){let f=parseInt(e.slice(5,-6).split("-")[0],10);if(Number.isFinite(f)&&f<a-6e5)break;let g=i((0,c.join)(b,e));h.has(e)||(g=g.filter(m)),n.push(...g.reverse().filter(d))}return n},"getHookActivityHistory",0,function(a){let b=function(a){if(g(),a<1)return[];if(1===a)return i((0,c.join)(f(),e)).reverse();let b=j(),d=a-2;return d>=b.length?[]:i((0,c.join)(f(),b[d])).reverse()}(a);return{entries:b,totalPages:(g(),1+j().length),page:a,stats:h()}},"searchHookActivity",0,function(a,b){let d=(function(){g();let a=i((0,c.join)(f(),e)).reverse(),b=j(),d=[];for(let a of b){let b=i((0,c.join)(f(),a));d.push(...b.reverse())}return[...a,...d]})().filter(b=>(!a.decision||b.decision===a.decision)&&(!a.eventType||b.eventType===a.eventType)&&(!a.policyName||!!b.policyName&&!!b.policyName.toLowerCase().includes(a.policyName.toLowerCase()))&&(!a.sessionId||!!b.sessionId&&!!b.sessionId.toLowerCase().includes(a.sessionId.toLowerCase()))&&(!a.integration||b.integration===a.integration)&&(!a.source||b.policySource===a.source)&&!0),k=Math.max(1,Math.ceil(d.length/25)),l=(b-1)*25;return{entries:d.slice(l,l+25),totalPages:k,page:b,stats:h()}}])},28120,a=>{"use strict";var b=a.i(2157),c=a.i(50227),d=a.i(60526),e=a.i(10695),f=a.i(75818);function g(a){if(!(0,b.existsSync)(a))return{};try{let c=(0,b.readFileSync)(a,"utf8");return JSON.parse(c)}catch(b){return(0,e.hookLogWarn)(`failed to parse config at ${a}: ${b instanceof Error?b.message:String(b)}`),{}}}function h(a){let e=(0,d.homedir)(),f=(0,c.resolve)(a);for(;f!==e;){let a=(0,c.resolve)(f,".failproofai");try{if((0,b.statSync)(a).isDirectory())return f}catch{}let d=(0,c.dirname)(f);if(d===f)break;f=d}return(0,c.resolve)(a)}function i(){return(0,f.globalPolicyConfigFile)()}function j(a,b){switch(a){case"user":return(0,f.globalPolicyConfigFile)();case"project":return(0,c.resolve)(h(b??process.cwd()),".failproofai","policies-config.json");case"local":return(0,c.resolve)(h(b??process.cwd()),".failproofai","policies-config.local.json")}}a.s(["configuredCustomPolicyPaths",0,function(a){return a.customPoliciesPaths??(a.customPoliciesPath?[a.customPoliciesPath]:[])},"findProjectConfigDir",0,h,"readHooksConfig",0,function(){let a=i();if(!(0,b.existsSync)(a))return{enabledPolicies:[]};try{let c=(0,b.readFileSync)(a,"utf8");return JSON.parse(c)}catch(b){return(0,e.hookLogWarn)(`failed to parse config at ${a}: ${b instanceof Error?b.message:String(b)}`),{enabledPolicies:[]}}},"readMergedHooksConfig",0,function(a){let b=h(a??process.cwd()),d=(0,c.resolve)(b,".failproofai","policies-config.json"),e=(0,c.resolve)(b,".failproofai","policies-config.local.json"),i=(0,f.globalPolicyConfigFile)(),j=g(d),k=g(e),l=g(i),m=new Set([...j.enabledPolicies??[],...k.enabledPolicies??[],...l.enabledPolicies??[]]),n={};for(let a of[j,k,l])if(a.policyParams)for(let[b,c]of Object.entries(a.policyParams))b in n||(n[b]=c);let o=[j,k,l].map(a=>void 0!==a.customPoliciesPaths?a.customPoliciesPaths:void 0!==a.customPoliciesPath?[a.customPoliciesPath]:void 0).find(a=>void 0!==a),p=new Set([...j.disabledCustomPolicies??[],...k.disabledCustomPolicies??[],...l.disabledCustomPolicies??[]]),q=j.customPoliciesEnabled??k.customPoliciesEnabled??l.customPoliciesEnabled,r=j.llm??k.llm??l.llm;return{enabledPolicies:[...m],...Object.keys(n).length>0?{policyParams:n}:{},...void 0!==o?{customPoliciesPaths:o}:{},...p.size?{disabledCustomPolicies:[...p]}:{},...void 0!==q?{customPoliciesEnabled:q}:{},...void 0!==r?{llm:r}:{}}},"readScopedHooksConfig",0,function(a,c){let d=j(a,c);if(!(0,b.existsSync)(d))return{enabledPolicies:[]};try{let a=(0,b.readFileSync)(d,"utf8");return JSON.parse(a)}catch(a){return(0,e.hookLogWarn)(`failed to parse config at ${d}: ${a instanceof Error?a.message:String(a)}`),{enabledPolicies:[]}}},"writeHooksConfig",0,function(a){let d=i(),e=(0,c.dirname)(d);(0,b.existsSync)(e)||(0,b.mkdirSync)(e,{recursive:!0}),(0,b.writeFileSync)(d,JSON.stringify(a,null,2)+"\n","utf8")},"writeScopedHooksConfig",0,function(a,d,e){let f=j(d,e),g=(0,c.dirname)(f);(0,b.existsSync)(g)||(0,b.mkdirSync)(g,{recursive:!0}),(0,b.writeFileSync)(f,JSON.stringify(a,null,2)+"\n","utf8")}])},91609,10695,a=>{"use strict";var b=a.i(2157),c=a.i(75818),d=a.i(50227);let e={info:0,warn:1,error:2},f=(0,c.logsDir)(),g=!1,h="warn",i=!1,j=f;function k(a){return!function(){if(g)return;g=!0;let a=(process.env.FAILPROOFAI_LOG_LEVEL??"").toLowerCase();("info"===a||"warn"===a||"error"===a)&&(h=a);let b=(process.env.FAILPROOFAI_HOOK_LOG_FILE??"").trim();b&&(i=!0,"1"!==b&&"true"!==b&&(j=b))}(),e[a]>=e[h]}function l(a,b){process.stderr.write(`[failproofai:hook] ${a} ${b}
-`)}function m(a,c){if(i)try{(0,b.existsSync)(j)||(0,b.mkdirSync)(j,{recursive:!0});let e=(0,d.join)(j,"hooks.log");try{if((0,b.statSync)(e).size>=524288){let a=`hooks-${Date.now()}.log`;(0,b.renameSync)(e,(0,d.join)(j,a))}}catch{}let f=new Date().toISOString(),g=`[${f}] ${a} ${c}
-`;(0,b.appendFileSync)(e,g,"utf-8")}catch{}}a.s(["hookLogError",0,function(a){k("error")&&(l("ERROR",a),m("ERROR",a))},"hookLogWarn",0,function(a){k("warn")&&(l("WARN",a),m("WARN",a))}],10695);let n=new Set(["destructive-deletion","production-infra-change","git-history-rewrite","push-to-protected-branch","commit-on-protected-branch","secret-exposure","credential-exfiltration","remote-code-execution","privilege-escalation","database-destruction","read-outside-workspace","agent-config-tampering","system-modification","env-secrets-dump","external-destructive-action","external-data-egress"]),o=a=>"string"==typeof a&&a.length>0;a.s(["authorityFieldsOf",0,function(a){let b={};("hard"===a.authority||"reviewable"===a.authority)&&(b.authority=a.authority);let c=a.reviewedBy;return Array.isArray(c)&&c.length>0&&c.every(o)&&(b.reviewedBy=[...c]),b},"resolvePolicyAuthority",0,function(a,b=n){let c=a?.authority==="reviewable";if(!a||"hard"==(!0!==a.alwaysOn&&"reviewable"===a.authority&&Array.isArray(a.reviewedBy)&&a.reviewedBy.filter(a=>"string"==typeof a&&a.length>0).length>0?"reviewable":"hard")){var d;return c?{authority:"hard",downgraded:!0===(d=a).alwaysOn?"it is alwaysOn, and the self-protection guard is never reviewable":Array.isArray(d.reviewedBy)&&0!==d.reviewedBy.length?"reviewedBy is not a list of semantic policy names":"reviewedBy does not name any semantic policy"}:{authority:"hard"}}let e=a.reviewedBy;if(!e.every(o))return{authority:"hard",downgraded:"reviewedBy is not a list of semantic policy names"};let f=e.filter(a=>!b.has(a));return f.length>0?{authority:"hard",downgraded:`reviewedBy names ${f.map(a=>JSON.stringify(a)).join(", ")}, which ${1===f.length?"is not a semantic policy":"are not semantic policies"} in this build`}:{authority:"reviewable",reviewedBy:[...new Set(e)]}}],91609)}];
-
-//# sourceMappingURL=src_hooks_095a_79._.js.map

package/.next/standalone/.next/server/chunks/ssr/src_hooks_15t8kqj._.js

@@ -1,3 +0,0 @@
-module.exports=[9909,89790,48630,a=>{"use strict";var b=a.i(66680),c=a.i(2157),d=a.i(50227),e=a.i(12072),f=a.i(75818),g=a.i(91609);let h=[1,2],i=/^[a-f0-9]{64}$/,j=/^[A-Za-z0-9._-]{1,128}$/;function k(a,b){if(!b||(0,d.isAbsolute)(b))throw Error(`unsafe managed policy path ${JSON.stringify(b)}`);let e=(0,d.resolve)(a,b),f=(0,d.relative)(a,e);if(f.startsWith("..")||(0,d.isAbsolute)(f))throw Error(`managed policy path escapes its root: ${JSON.stringify(b)}`);let g=(0,c.realpathSync)(a),h=(0,c.realpathSync)(e),i=(0,d.relative)(g,h);if(i.startsWith("..")||(0,d.isAbsolute)(i))throw Error(`managed policy symlink escapes its root: ${JSON.stringify(b)}`);return h}a.s(["readActiveCloudManagedPolicies",0,function(){let a,e=process.env.FAILPROOFAI_CLOUD_POLICY_DIR??(0,f.cloudPoliciesDir)(),l=(0,d.resolve)(e,"active.json");if(!(0,c.existsSync)(l))return[];try{a=JSON.parse((0,c.readFileSync)(l,"utf8"))}catch(a){throw Error(`failed to read cloud-managed active manifest: ${a instanceof Error?a.message:String(a)}`)}let m=function(a){if(!a||"object"!=typeof a)throw Error("active manifest is not an object");if(!h.includes(a.schemaVersion))throw Error(`unsupported active manifest schema ${String(a.schemaVersion)} (supported: ${h.join(", ")})`);let b=a.deployment??a.generation;if(!Number.isSafeInteger(b)||(b??-1)<0)throw Error("active manifest deployment is invalid");if(!Array.isArray(a.policies))throw Error("active manifest policies is not an array");let c=a.policies.map(a=>({...a,version:a.version??a.revision}));return{schemaVersion:a.schemaVersion,deployment:b,policies:c}}(a),n=new Set;return m.policies.map(a=>{if(!j.test(a.id)||"."===a.id||".."===a.id)throw Error(`unsafe cloud-managed policy id ${JSON.stringify(a.id)}`);if(!Number.isSafeInteger(a.version)||a.version<0)throw Error(`invalid version for cloud-managed policy ${a.id}`);if(!i.test(a.sha256))throw Error(`invalid SHA-256 for cloud-managed policy ${a.id}`);if(n.has(a.id))throw Error(`duplicate cloud-managed policy id ${a.id}`);n.add(a.id);let d=k(e,a.path),f=(0,c.readFileSync)(d),h=(0,b.createHash)("sha256").update(f).digest("hex");if(h!==a.sha256)throw Error(`cloud-managed policy ${a.id} failed integrity verification: expected ${a.sha256}, got ${h}`);if(void 0!==a.effect&&"enforce"!==a.effect&&"observe"!==a.effect)throw Error(`unknown effect ${JSON.stringify(a.effect)} for cloud-managed policy ${a.id}`);return{id:a.id,version:a.version,effect:a.effect??"enforce",sha256:a.sha256,path:d,deployment:m.deployment,...(0,g.authorityFieldsOf)(a)}})},"resolveManagedPath",0,k],89790);let l=/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*))*))?(?:\+([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?$/,m=/^(?:0|[1-9]\d*)$/;function n(a){if("string"!=typeof a)return null;let b=l.exec(a);return b?{major:Number(b[1]),minor:Number(b[2]),patch:Number(b[3]),prerelease:void 0===b[4]?[]:b[4].split(".").map(a=>m.test(a)?Number(a):a)}:null}let o=(a,b)=>a<b?-1:+(a>b),p=["always","protected_branch","in_git_repo","has_paths","paths_outside_project","system_or_root_paths"];function q(a){return"string"==typeof a&&p.includes(a)}a.s(["PACK_PRECONDITION_NAMES",0,p,"isPackPreconditionName",0,q],48630);let r=[1],s=/^[a-f0-9]{64}$/,t=/^[A-Za-z0-9._-]{1,64}\/[A-Za-z0-9._-]{1,64}$/,u=/^[A-Za-z0-9][A-Za-z0-9._+-]{0,63}$/,v=/^[0-9a-f]{7,40}$/,w=/^[A-Za-z0-9._-]{1,128}$/,x=/^[a-z][a-z0-9_]{0,31}$/,y=new Set(["exempt","user_asked"]),z=new Set(["shell","write","read","network","other"]);function A(){return process.env.FAILPROOFAI_PACK_DIR??(0,f.packsDir)()}function B(a){if("string"!=typeof a.id||!t.test(a.id))throw Error(`unsafe pack id ${JSON.stringify(a.id)}`);if("string"!=typeof a.version||!u.test(a.version))throw Error(`invalid version for pack ${a.id}`);if(void 0!==a.effect&&"enforce"!==a.effect&&"observe"!==a.effect)throw Error(`unknown effect ${JSON.stringify(a.effect)} for pack ${a.id}`);let b="string"==typeof a.commit&&v.test(a.commit.trim().toLowerCase())?a.commit.trim().toLowerCase():void 0;return{id:a.id,version:a.version,effect:a.effect??"enforce",...b?{commit:b}:{}}}function C(){return process.env.FAILPROOFAI_PACK_DIR?(0,d.resolve)(process.env.FAILPROOFAI_PACK_DIR,"installed.json"):(0,f.packsInstalledFile)()}let D=new Set(["string","number","boolean","string[]","pattern[]"]);function E(a,b,c,d){let e=`${a} policy #${c}`;if(!b||"object"!=typeof b)throw Error(`${e} is not an object`);let f=b.name;if("string"!=typeof f||!w.test(f))throw Error(`${e} has an unsafe name ${JSON.stringify(f)}`);if("alwaysOn"in b)throw Error(`${e} declares alwaysOn, which packs may not set`);if("string"!=typeof b.description||0===b.description.length)throw Error(`${e} is missing a description`);if("string"!=typeof b.category||0===b.category.length)throw Error(`${e} is missing a category`);if("boolean"!=typeof b.defaultEnabled)throw Error(`${e} is missing defaultEnabled`);if(!b.match||"object"!=typeof b.match)throw Error(`${e} is missing a match`);let h=b.match;for(let a of["events","toolNames"]){let b=h[a];if(void 0!==b&&(!Array.isArray(b)||b.some(a=>"string"!=typeof a||0===a.length)))throw Error(`${e} has a match.${a} that is not a list of names`)}let i=(0,g.authorityFieldsOf)(b),j=["authority","reviewedBy"].filter(a=>a in b&&!(a in i));if("params"in b){let a=function(a){if(!a||"object"!=typeof a||Array.isArray(a))return"params is not an object";for(let[b,c]of Object.entries(a)){if(0===b.length)return"params has an empty parameter name";if(!c||"object"!=typeof c||Array.isArray(c))return`params.${b} is not an object`;if("string"!=typeof c.type||!D.has(c.type))return`params.${b} has type ${JSON.stringify(c.type)}, which is not one of ${[...D].join(", ")}`;if("string"!=typeof c.description||0===c.description.length)return`params.${b} is missing a description`;if(!("default"in c))return`params.${b} is missing a default`}}(b.params);a&&(d?.push(`${e} declares a params schema that was dropped: ${a}`),j.push("params"))}return j.length>0?Object.fromEntries(Object.entries(b).filter(([a])=>!j.includes(a))):b}function F(a,b,c=e.version){if(void 0===b)return{kind:"satisfied"};let d=function(a,b){let c=n(a),d=n(b);return c&&d?o(c.major,d.major)||o(c.minor,d.minor)||o(c.patch,d.patch)||function(a,b){if(0===a.length&&0===b.length)return 0;if(0===a.length)return 1;if(0===b.length)return -1;for(let c=0;c<Math.min(a.length,b.length);c++){let d=a[c],e=b[c];if(d===e)continue;let f="number"==typeof d,g="number"==typeof e;if(f!==g)return f?-1:1;if(f&&g)return o(d,e);return d<e?-1:1}return o(a.length,b.length)}(c.prerelease,d.prerelease):null}(c,b);return null===d?{kind:"unreadable",reason:`pack ${a} declares minCliVersion ${JSON.stringify(b)}, which is not a version this CLI can compare against its own (${c}) — the requirement was ignored`}:d<0?{kind:"too-old",reason:`pack ${a} needs failproofai ${String(b)} or newer and this is ${c} — run \`npm i -g failproofai && failproofai update\``}:{kind:"satisfied",declared:b}}function G(a,b,c,d){if("string"!=typeof c||0===c.length)throw Error(`${a} is missing ${b}`);if(c.length>d)throw Error(`${a} has a ${b} of ${c.length} characters, over the ${d}-character cap`);return c}function H(a,b,c){let d;if(!b||"object"!=typeof b||Array.isArray(b))throw Error(`${a} is not an object`);if(null!==c)d=c;else{if("string"!=typeof b.id||!x.test(b.id))throw Error(`${a} has an unsafe id ${JSON.stringify(b.id)}`);if(y.has(b.id))throw Error(`${a} uses the reserved probe id ${JSON.stringify(b.id)}`);d=b.id}let e=G(a,"instructions",b.instructions,600);if(void 0===b.criteria)return{id:d,instructions:e};if(!b.criteria||"object"!=typeof b.criteria||Array.isArray(b.criteria))throw Error(`${a} has criteria that is not an object`);let f=b.criteria;return{id:d,instructions:e,criteria:{true:G(a,"criteria.true",f.true,300),false:G(a,"criteria.false",f.false,300)}}}function I(a,b,c){let d=`${a} semantic policy #${c}`;if(!b||"object"!=typeof b||Array.isArray(b))throw Error(`${d} is not an object`);let e=b.name;if("string"!=typeof e||!w.test(e))throw Error(`${d} has an unsafe name ${JSON.stringify(e)}`);if("alwaysOn"in b)throw Error(`${d} declares alwaysOn, which packs may not set`);let f=G(`${a} semantic policy ${e}`,"title",b.title,120),g=`${a} semantic policy ${e}`;if(!Array.isArray(b.appliesTo)||0===b.appliesTo.length)throw Error(`${g} has no appliesTo tool classes`);let h=b.appliesTo.find(a=>"string"!=typeof a||!z.has(a));if(void 0!==h)throw Error(`${g} applies to ${JSON.stringify(h)}, which is not a tool class (${[...z].join(", ")})`);if("deny"!==b.mode&&"instruct"!==b.mode)throw Error(`${g} has mode ${JSON.stringify(b.mode)}, which must be "deny" or "instruct"`);if("boolean"!=typeof b.userCanOverride)throw Error(`${g} is missing userCanOverride, which has no default`);if(!Array.isArray(b.probes)||0===b.probes.length)throw Error(`${g} declares no probes`);if(b.probes.length>6)throw Error(`${g} declares ${b.probes.length} probes, over the cap of 6`);let i=b.probes.map((a,b)=>H(`${g} probe #${b}`,a,null)),j=new Set;for(let a of i){if(j.has(a.id))throw Error(`${g} declares probe ${a.id} twice`);j.add(a.id)}let k=void 0===b.exempt?void 0:H(`${g} exempt`,b.exempt,"exempt");if(void 0!==b.precondition&&!q(b.precondition))throw Error(`${g} names precondition ${JSON.stringify(b.precondition)}, which this build does not have (${p.join(", ")})`);let l=G(g,"guidance",b.guidance,600);return{name:e,title:f,appliesTo:b.appliesTo,mode:b.mode,userCanOverride:b.userCanOverride,probes:i,...k?{exempt:k}:{},...void 0!==b.precondition?{precondition:b.precondition}:{},guidance:l}}function J(a){return a instanceof Error?a.message:String(a)}a.s(["MAX_SEMANTIC_POLICIES_PER_PACK",0,24,"PACK_COMMIT_RE",0,v,"checkPackMinCliVersion",0,F,"hasInstalledPacks",0,function(){try{let a=JSON.parse((0,c.readFileSync)(C(),"utf8"));return Array.isArray(a.packs)&&a.packs.length>0}catch{return!1}},"packSemantic",0,function(a){return a.semantic??[]},"packsRoot",0,A,"parsePackIdentity",0,B,"parsePackPolicy",0,E,"parsePackSemanticPolicy",0,I,"readInstalledPacks",0,function(){let a,d=C();if(!(0,c.existsSync)(d))return{packs:[],errors:[]};try{a=JSON.parse((0,c.readFileSync)(d,"utf8"))}catch(a){return{packs:[],errors:[{id:null,reason:`unreadable pack manifest: ${J(a)}`}]}}if(!a||"object"!=typeof a)return{packs:[],errors:[{id:null,reason:"pack manifest is not an object"}]};let e=a;if(!r.includes(e.schemaVersion))return{packs:[],errors:[{id:null,reason:`unsupported pack manifest schema ${String(e.schemaVersion)} (supported: ${r.join(", ")})`}]};if(!Array.isArray(e.packs))return{packs:[],errors:[{id:null,reason:"pack manifest packs is not an array"}]};let f=A(),g=[],h=[],i=[],j=new Set;for(let a of e.packs){let d=a&&"object"==typeof a&&"string"==typeof a.id?a.id:null,e=[];try{let d=function(a,d,e){if(!d||"object"!=typeof d)throw Error("pack entry is not an object");let f=B(d);if("string"!=typeof d.source||0===d.source.length)throw Error(`pack ${d.id} has no source`);if("string"!=typeof d.sha256||!s.test(d.sha256))throw Error(`invalid SHA-256 for pack ${d.id}`);let g=f.effect,h=F(f.id,d.minCliVersion);if("too-old"===h.kind)throw Error(h.reason);"unreadable"===h.kind&&e.push(h.reason);let i=k(a,d.entry),j=(0,b.createHash)("sha256").update((0,c.readFileSync)(i)).digest("hex");if(j!==d.sha256)throw Error(`pack ${d.id} failed integrity verification: expected ${d.sha256}, got ${j}`);if(!Array.isArray(d.policies))throw Error(`pack ${d.id} policies is not an array`);let l=d.policies.map((a,b)=>E(d.id,a,b,e)),m=new Set;for(let a of l){if(m.has(a.name))throw Error(`pack ${d.id} declares ${a.name} twice`);m.add(a.name)}let n=null;if(void 0!==d.enabled){if(!Array.isArray(d.enabled)||d.enabled.some(a=>"string"!=typeof a))throw Error(`pack ${d.id} enabled is not an array of names`);n=d.enabled.filter(a=>m.has(a))}let o=null;if(void 0!==d.clis){if(!Array.isArray(d.clis)||d.clis.some(a=>"string"!=typeof a))throw Error(`pack ${d.id} clis is not an array of agent names`);o=d.clis}return{clis:o,id:f.id,version:f.version,source:d.source,path:i,sha256:d.sha256,effect:g,policies:l,semantic:function(a,b,c){if(void 0===b)return[];if(!Array.isArray(b))return c.push(`pack ${a} semantic is not an array, so none of it was loaded`),[];let d=[],e=new Set;for(let[f,g]of b.entries()){if(d.length>=24){c.push(`pack ${a} declares more than 24 semantic policies; the ${b.length-24} past that cap were dropped`);break}try{let b=I(a,g,f);if(e.has(b.name))throw Error(`pack ${a} declares semantic policy ${b.name} twice`);e.add(b.name),d.push(b)}catch(a){c.push(J(a))}}return d}(f.id,d.semantic,e),..."satisfied"===h.kind&&h.declared?{minCliVersion:h.declared}:{},enabled:n}}(f,a,e);if(j.has(d.id))throw Error(`duplicate pack id ${d.id}`);j.add(d.id),g.push(d),i.push(...e)}catch(c){let b=a&&("observe"===a.effect||"enforce"===a.effect)?a.effect:"enforce";h.push({id:d,reason:J(c),effect:b,...Array.isArray(a?.policies)?{declared:function(a){let b=[];for(let c of a)c&&"object"==typeof c&&"string"==typeof c.name&&c.match&&"object"==typeof c.match&&b.push(c);return b}(a.policies)}:{},...Array.isArray(a?.clis)&&a.clis.every(a=>"string"==typeof a)?{clis:a.clis}:{}})}}return{packs:g,errors:h,...i.length>0?{warnings:i}:{}}}],9909)},65917,a=>{"use strict";a.s(["POLICY_CATALOG",0,[{name:"sanitize-jwt",description:"Stop Claude from reading JWTs in tool responses",displayTitle:"Redacted JWT tokens from tool output",impact:"Stops the agent from echoing auth tokens it saw in command output.",match:{events:["PostToolUse"]},authority:"hard",defaultEnabled:!0,category:"Sanitize"},{name:"sanitize-api-keys",description:"Stop Claude from reading API keys (OpenAI, Anthropic, GitHub, AWS, Stripe, Google) in tool responses",displayTitle:"Redacted API keys from tool output",impact:"Catches OpenAI / Anthropic / GitHub / AWS / Stripe / Google keys before the model sees them.",match:{events:["PostToolUse"]},authority:"hard",defaultEnabled:!0,category:"Sanitize",params:{additionalPatterns:{type:"pattern[]",description:"Additional API key patterns to scrub, each with { regex, label }",default:[]}}},{name:"sanitize-connection-strings",description:"Stop Claude from reading database connection strings with embedded credentials in tool responses",displayTitle:"Redacted database connection strings from tool output",impact:"Strips embedded DB credentials before they reach the model context.",match:{events:["PostToolUse"]},authority:"hard",defaultEnabled:!0,category:"Sanitize"},{name:"sanitize-private-key-content",description:"Stop Claude from reading PEM private key content in tool responses",displayTitle:"Redacted PEM private keys from tool output",impact:"Prevents private key bodies from being echoed into chat context.",match:{events:["PostToolUse"]},authority:"hard",defaultEnabled:!0,category:"Sanitize"},{name:"sanitize-bearer-tokens",displayTitle:"Redacted bearer tokens from tool output",impact:"Strips Authorization: Bearer values before they hit the model.",description:"Stop Claude from reading Authorization Bearer tokens in tool responses",match:{events:["PostToolUse"]},authority:"hard",defaultEnabled:!0,category:"Sanitize"},{name:"protect-env-vars",displayTitle:"Tried to dump environment variables to chat",impact:"Env vars often contain secrets; blocking `env` / `printenv` keeps them out of the model context.",description:"Prevent commands that read environment variables",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["env-secrets-dump","secret-exposure"],defaultEnabled:!0,category:"Environment"},{name:"block-env-files",displayTitle:"Tried to read or write a .env file",impact:"`.env` files routinely contain API keys and DB credentials.",description:"Block reading/writing .env files",match:{events:["PreToolUse"]},authority:"reviewable",reviewedBy:["secret-exposure"],defaultEnabled:!0,category:"Environment"},{name:"block-read-outside-cwd",displayTitle:"Tried to read files outside your project directory",impact:"Stops the agent from peeking at neighboring repos or your home directory.",description:"Block file reads outside the session working directory",match:{events:["PreToolUse"],toolNames:["Read","Glob","Grep","Bash"]},authority:"reviewable",reviewedBy:["read-outside-workspace"],defaultEnabled:!1,category:"Environment",params:{allowPaths:{type:"string[]",description:"Absolute paths outside cwd that are allowed to be read",default:[]}}},{name:"block-sudo",displayTitle:"Tried to run a command with sudo",impact:"Sudo gives the agent root — blocked unless explicitly allow-listed.",description:"Block sudo commands",match:{events:["PreToolUse","PermissionRequest"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!0,category:"Dangerous Commands",params:{allowPatterns:{type:"string[]",description:"Sudo command patterns to allow, matched token-by-token (e.g. 'sudo systemctl status')",default:[]}}},{name:"block-curl-pipe-sh",displayTitle:"Tried to pipe a downloaded script straight to a shell",impact:"`curl ... | sh` runs unverified remote code on your machine.",description:"Block piping downloads to shell",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!0,category:"Dangerous Commands"},{name:"block-rm-rf",displayTitle:"Tried to recursively delete a system path",impact:"Catches catastrophic `rm -rf /` and Windows equivalents.",description:"Prevent catastrophic deletions",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Dangerous Commands",params:{allowPaths:{type:"string[]",description:"Paths that are allowed to be recursively deleted",default:[]}}},{name:"block-failproofai-commands",displayTitle:"Tried to disable, pause or modify failproofai itself",impact:"An agent that can pause or remove enforcement can switch off every other policy.",description:"Block failproofai CLI commands, self-pause and uninstallation",match:{events:["PreToolUse","PermissionRequest"],toolNames:["Bash","Write","Edit","NotebookEdit"]},defaultEnabled:!0,alwaysOn:!0,authority:"hard",category:"Dangerous Commands"},{name:"block-kubectl",displayTitle:"Tried to run a Kubernetes command",impact:"kubectl can change live cluster state — gated unless allow-listed.",description:"Block kubectl commands (Kubernetes cluster mutations)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"kubectl command patterns to allow, matched token-by-token (e.g. 'kubectl get *', 'kubectl describe *')",default:[]}}},{name:"block-terraform",displayTitle:"Tried to run a Terraform/OpenTofu command",impact:"Terraform mutates real infrastructure — gated unless allow-listed.",description:"Block terraform and tofu (OpenTofu) commands",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"terraform/tofu command patterns to allow (e.g. 'terraform plan', 'terraform validate')",default:[]}}},{name:"block-aws-cli",displayTitle:"Tried to run an AWS CLI command",impact:"AWS CLI can spend money or break prod — gated.",description:"Block aws CLI commands",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"aws CLI command patterns to allow (e.g. 'aws s3 ls *', 'aws sts get-caller-identity')",default:[]}}},{name:"block-gcloud",displayTitle:"Tried to run a Google Cloud command",impact:"gcloud can spend money or break prod — gated.",description:"Block gcloud (Google Cloud) CLI commands",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"gcloud command patterns to allow (e.g. 'gcloud auth list', 'gcloud config list')",default:[]}}},{name:"block-az-cli",displayTitle:"Tried to run an Azure CLI command",impact:"az can spend money or break prod — gated.",description:"Block az (Azure) CLI commands",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"az CLI command patterns to allow (e.g. 'az account show', 'az group list')",default:[]}}},{name:"block-helm",displayTitle:"Tried to run a Helm command",impact:"Helm releases mutate cluster state — gated.",description:"Block helm commands",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"helm command patterns to allow (e.g. 'helm list', 'helm status *')",default:[]}}},{name:"block-gh-pipeline",displayTitle:"Tried to run a privileged GitHub CLI pipeline command",impact:"Catches `gh workflow run`, `gh pr merge`, `gh secret set`, etc.",description:"Block gh CLI pipeline-trigger subcommands (workflow run, run rerun/cancel, pr merge, release create/delete, cache delete, secret set/delete)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"gh pipeline command patterns to allow (e.g. specific scripted invocations); read-only gh subcommands like 'gh pr view' and 'gh run list' are not matched by this policy",default:[]}}},{name:"block-secrets-write",displayTitle:"Tried to write a secret-key file",impact:"Stops the agent from creating `.pem`, `id_rsa`, `credentials.json`, etc.",description:"Block writing secret key files",match:{events:["PreToolUse"],toolNames:["Write"]},authority:"hard",defaultEnabled:!1,category:"Dangerous Commands",params:{additionalPatterns:{type:"string[]",description:"Additional filename patterns (substrings) to block",default:[]}}},{name:"block-push-master",displayTitle:"Tried to push directly to main/master",impact:"Direct pushes to a protected branch bypass review.",description:"Block pushing to main/master",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!0,category:"Git",params:{protectedBranches:{type:"string[]",description:"Branch names to protect from direct pushes",default:["main","master"]}}},{name:"block-force-push",displayTitle:"Tried to force-push",impact:"Force-pushes rewrite history and can clobber teammates' work.",description:"Prevent force-pushing to any branch",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Git"},{name:"block-work-on-main",displayTitle:"Tried to commit or merge on main/master",impact:"Work should land via PR — direct commits skip review.",description:"Block git commits and merges on main/master branch",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Git",params:{protectedBranches:{type:"string[]",description:"Branch names where commits/merges are blocked",default:["main","master"]}}},{name:"warn-git-amend",displayTitle:"Used git commit --amend",impact:"Amending after a push rewrites history that others may have pulled.",description:"Warns before amending git commits, which rewrites history",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["git-history-rewrite"],defaultEnabled:!1,category:"Git"},{name:"warn-git-stash-drop",displayTitle:"Tried to drop or clear git stash",impact:"Stash deletions are permanent and silent.",description:"Warns before permanently deleting stashed changes",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Git"},{name:"warn-all-files-staged",displayTitle:"Staged all files with git add -A / .",impact:"Wide stages routinely catch generated files or secrets you didn't intend to commit.",description:"Warns before staging all working tree files with git add -A / . / --all",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Git"},{name:"warn-destructive-sql",displayTitle:"Ran destructive SQL (DROP / TRUNCATE / DELETE without WHERE)",impact:"Easy way to wipe a table by accident.",description:"Warn before executing destructive SQL (DROP/TRUNCATE/DELETE without WHERE) via database clients",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["database-destruction"],defaultEnabled:!1,category:"Database"},{name:"warn-schema-alteration",displayTitle:"Altered a database schema column",impact:"ALTER TABLE operations can lock tables and break readers.",description:"Warns before SQL schema changes (ALTER TABLE with column or rename operations)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Database"},{name:"warn-package-publish",displayTitle:"Tried to publish a package",impact:"Publishes are irreversible — `npm publish` / `cargo publish` shouldn't happen without intent.",description:"Warn before publishing packages to public registries (npm, PyPI, crates.io, RubyGems, etc.)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Packages & System"},{name:"warn-global-package-install",displayTitle:"Installed a package globally",impact:"`npm i -g`, `cargo install`, `pip --user` pollute your machine outside the project.",description:"Warns before installing packages globally (npm -g, cargo install, etc.)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["system-modification"],defaultEnabled:!1,category:"Packages & System"},{name:"prefer-package-manager",displayTitle:"Used a non-preferred package manager",impact:"Mixing package managers creates lockfile churn for your team.",description:"Blocks non-preferred package managers and tells Claude to use an allowed one (e.g., uv instead of pip)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Packages & System",params:{allowed:{type:"string[]",description:"Allowed package manager names (e.g. ['uv', 'bun']). Any detected manager not in this list is blocked.",default:[]},blocked:{type:"string[]",description:"Additional manager names to block beyond the built-in list (e.g. ['pdm', 'pipx']).",default:[]}}},{name:"warn-large-file-write",displayTitle:"Wrote a file larger than the configured threshold",impact:"Catches accidentally large file writes (logs, binaries, model dumps).",description:"Warn before writing files larger than 1MB (configurable via thresholdKb param)",match:{events:["PreToolUse"],toolNames:["Write"]},authority:"hard",defaultEnabled:!1,category:"Packages & System",params:{thresholdKb:{type:"number",description:"File size threshold in KB above which a warning is issued",default:1024}}},{name:"warn-background-process",displayTitle:"Started a long-lived background process",impact:"Catches `nohup` / `&` / `screen` / `tmux` / `disown` patterns that the agent often forgets to clean up.",description:"Warns before starting detached or background processes",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Packages & System"},{name:"warn-repeated-tool-calls",displayTitle:"Called the same tool 3+ times with identical arguments",impact:"Usually a sign of a stuck loop burning tokens.",description:"Warn when the same tool is called 3+ times with identical parameters",match:{events:["PreToolUse"]},authority:"hard",defaultEnabled:!1,category:"AI Behavior"},{name:"require-commit-before-stop",displayTitle:"Stopped with uncommitted changes",impact:"Work not in a commit is invisible to teammates and easy to lose.",description:"Require all changes to be committed before Claude stops",match:{events:["Stop"]},authority:"hard",defaultEnabled:!1,category:"Workflow"},{name:"require-push-before-stop",displayTitle:"Stopped with unpushed commits",impact:"Local-only commits won't trigger CI or be reviewable.",description:"Require all commits to be pushed to remote before Claude stops",match:{events:["Stop"]},authority:"hard",defaultEnabled:!1,category:"Workflow",params:{remote:{type:"string",description:"Remote name to push to (default: origin)",default:"origin"},baseBranch:{type:"string",description:"Base branch to compare against (default: main)",default:"main"}}},{name:"require-pr-before-stop",displayTitle:"Stopped without a PR for the branch",impact:"Branches without PRs don't get reviewed.",description:"Require a pull request to exist for the current branch before Claude stops",match:{events:["Stop"]},authority:"hard",defaultEnabled:!1,category:"Workflow",params:{baseBranch:{type:"string",description:"Base branch to compare against (default: main)",default:"main"}}},{name:"require-no-conflicts-before-stop",displayTitle:"Stopped with a branch that conflicts with main",impact:"Conflicting branches can't merge — surface them early.",description:"Require the current branch to merge cleanly with the base branch before Claude stops",match:{events:["Stop"]},authority:"hard",defaultEnabled:!1,category:"Workflow",params:{baseBranch:{type:"string",description:"Base branch to check for conflicts against (default: main)",default:"main"}}},{name:"require-ci-green-before-stop",displayTitle:"Stopped with failing CI",impact:"Failing CI blocks deploy.",description:"Require CI checks to pass on the current HEAD commit before Claude stops (ignores stale runs on prior commits)",match:{events:["Stop"]},authority:"hard",defaultEnabled:!1,category:"Workflow"}]])},75534,a=>{"use strict";a.i(9909),a.i(91609),a.s(["normalizePolicyName",0,function(a){return a.includes("/")?a:`failproofai/${a}`}],75534)}];
-
-//# sourceMappingURL=src_hooks_15t8kqj._.js.map

package/.next/standalone/.next/server/chunks/ssr/src_hooks_18k8rl0._.js

@@ -1,12 +0,0 @@
-module.exports=[15638,a=>{"use strict";var b=a.i(50227),c=a.i(54799),d=a.i(2157),e=a.i(12714),f=a.i(57764),g=a.i(66680),h=a.i(10695),i=a.i(32352),j=a.i(84948);a.i(28120);var k=a.i(98378),l=a.i(69839);a.i(75818),a.i(91609);let m="__FAILPROOFAI_LOADING_HOOKS__",n=/policies\.(js|mjs|ts)$/,o=0,p=new Map;async function q(a){let b,c,d=Number.isFinite(c=Number(process.env.FAILPROOFAI_POLICY_LOAD_TIMEOUT_MS))&&c>0?c:1e4;try{await Promise.race([import(a),new Promise((a,c)=>{b=setTimeout(()=>c(Error(`timed out loading module after ${d}ms`)),d),b.unref?.()})])}finally{b&&clearTimeout(b)}}async function r(a,d){let e=globalThis;e[m]=!0;let g=[];try{let b=await (0,j.findDistIndex)(),e=b?(0,f.pathToFileURL)(b).href:null,h=++o,k=`${j.TMP_SUFFIX}.${process.pid}.${h}.${(0,c.randomUUID)()}.mjs`;g=await (0,j.rewriteFileTree)(a,e,b,k,d?.verifyEntrySha);let l=await s(g,k),m=p.get(a);if(m?.fingerprint===l){for(let a of m.hooks)i.customPolicies.add({...a});return null}let n=a+k,r=(0,f.pathToFileURL)(n).href,t=(0,i.getCustomHooks)().length;return await q(r),p.size>=500&&p.clear(),p.set(a,{fingerprint:l,hooks:(0,i.getCustomHooks)().slice(t).map(a=>({...a}))}),null}catch(f){let c=f instanceof Error?f.message:String(f),e=/Cannot find module|MODULE_NOT_FOUND|ENOENT/i.test(c)?"module_not_found":/SyntaxError|Unexpected token/i.test(c)?"syntax_error":/timed out loading module/i.test(c)?"load_timeout":"runtime_error";if((0,k.trackHookEvent)((0,l.getInstanceId)(),"custom_hooks_load_error",{error_type:e,is_convention:!!d?.conventionScope,convention_scope:d?.conventionScope??null,file_basename:(0,b.basename)(a)}),d?.strict)throw Error(`Failed to load custom hooks from ${a}: ${c}`);return(0,h.hookLogError)(`failed to load custom hooks from ${a}: ${c}`),{type:e,reason:c}}finally{e[m]=!1,await (0,j.cleanupTmpFiles)(g)}}async function s(a,b){let c=(0,g.createHash)("sha256");for(let d of[...a].sort()){c.update(d.replaceAll(b,j.TMP_SUFFIX));let a=await (0,e.readFile)(d,"utf8");c.update(a.replaceAll(b,j.TMP_SUFFIX))}return c.digest("hex")}async function t(a,c){if(!a)return[];let e=(0,b.isAbsolute)(a)?a:(0,b.resolve)(c?.sessionCwd??process.cwd(),a);if(!(0,d.existsSync)(e)){if(c?.strict)throw Error(`Custom hooks file not found: ${e}`);return(0,h.hookLogWarn)(`customPoliciesPath not found: ${e}`),[]}return(0,i.clearCustomHooks)(),await r(e,c),(0,i.getCustomHooks)()}a.s(["conventionPolicyId",0,function(a,b,c){return`convention:${a}:${b}:${c}`},"customPolicyId",0,function(a,b){return`custom:${a}:${b}`},"discoverPolicyFiles",0,function(a){if(!(0,d.existsSync)(a))return[];try{return(0,d.readdirSync)(a,{withFileTypes:!0}).filter(a=>a.isFile()&&n.test(a.name)).sort((a,b)=>a.name.localeCompare(b.name)).map(c=>(0,b.resolve)(a,c.name))}catch{return[]}},"loadCustomHooks",0,t])},32352,84948,a=>{"use strict";let b="__failproofai_custom_hooks__";function c(){let a=globalThis;return Array.isArray(a[b])||(a[b]=[]),a[b]}a.s(["clearCustomHooks",0,function(){let a=globalThis;a[b]=[],a.__failproofai_semantic_policies__=[]},"customPolicies",0,{add(a){c().push(a)}},"getCustomHooks",0,function(){return c()}],32352);var d=a.i(24868),e=a.i(46786),f=a.i(14747),g=a.i(92509),h=a.i(54799),i=a.i(75818),j=a.i(10695);let k=".__failproofai_tmp__.mjs",l=/(?:import\s+(?:[\s\S]*?\s+from\s+)?|export\s+(?:[\s\S]*?\s+from\s+))(['"])(\.\.?\/[^'"]+)\1/g,m=/require\s*\(\s*(['"])(\.\.?\/[^'"]+)\1\s*\)/g;async function n(a){try{return await (0,d.access)(a),!0}catch{return!1}}async function o(){let a=process.env.FAILPROOFAI_DIST_PATH;if(a){let b=(0,f.resolve)(a,"index.js");if(await n(b))return b}for(let a of[(0,f.resolve)((0,f.dirname)(process.execPath),"..","assets","dist","index.js"),(0,f.resolve)(process.cwd(),"dist","index.js"),(0,f.resolve)(process.cwd(),"node_modules","failproofai","dist","index.js")])if(await n(a))return a;return null}async function p(a,b){let c=(0,f.resolve)(a,b);for(let a of[c,`${c}.js`,`${c}.mjs`,`${c}.ts`,(0,f.resolve)(c,"index.js")])if(await n(a))return a;return null}async function q(a,b,c,e){let g=(0,f.join)(a,b);return await (0,d.writeFile)(g,c,{encoding:"utf-8",mode:384,...e?{flag:"wx"}:{}}),g}async function r(a,b,c=k){let f=`import _cjs from '${b}';
-export const customPolicies = _cjs.customPolicies;
-export const semanticPolicies = _cjs.semanticPolicies;
-export const getCustomHooks = _cjs.getCustomHooks;
-export const getSemanticRegistrations = _cjs.getSemanticRegistrations;
-export const clearCustomHooks = _cjs.clearCustomHooks;
-export const allow = _cjs.allow;
-export const deny = _cjs.deny;
-export const instruct = _cjs.instruct;
-export default _cjs;`,h=`failproofai-dist${c}.shim.mjs`;try{let a=(0,i.shimsDir)();await (0,d.mkdir)(a,{recursive:!0,mode:448});let b=await (0,d.lstat)(a),c="function"==typeof process.getuid?process.getuid():null;if(!b.isDirectory()||b.isSymbolicLink()||null!==c&&b.uid!==c||63&b.mode)throw Error(`${a} is not a private directory owned by this user`);let e=await q(a,h,f,!1);return{shimPath:e,shimUrl:(0,g.pathToFileURL)(e).href}}catch(a){(0,j.hookLogWarn)(`policy shim directory unusable (${a instanceof Error?a.message:String(a)}); falling back to ${(0,e.tmpdir)()}`)}let l=await q((0,e.tmpdir)(),h,f,!0);return{shimPath:l,shimUrl:(0,g.pathToFileURL)(l).href}}async function s(a,b,c,e=k,g){let i=[a],j=new Set,n=[],o=null;if(c&&b){let a=await r(c,b,e);n.push(a.shimPath),o=a.shimUrl}for(;i.length>0;){let b,k=i.shift();if(j.has(k))continue;if(j.add(k),g&&k===a){let a=await (0,d.readFile)(k),c=(0,h.createHash)("sha256").update(a).digest("hex");if(c!==g)throw Error(`cloud-managed policy failed integrity re-verification at load: expected ${g}, got ${c}`);b=a.toString("utf-8")}else b=await (0,d.readFile)(k,"utf-8");o&&(b=b.replace(/from\s+(['"])(?:claudeye|failproofai)\1/g,`from '${o}'`)),c&&(b=b.replace(/require\s*\(\s*(['"])(?:claudeye|failproofai)\1\s*\)/g,`require('${c.replace(/\\/g,"\\\\")}')`));let q=(0,f.dirname)(k),r=new Map;for(let a of[l,m]){let c,d=new RegExp(a.source,a.flags);for(;null!==(c=d.exec(b));){let a=c[2];if(r.has(a))continue;let b=await p(q,a);if(!b)continue;j.has(b)||i.includes(b)||i.push(b);let d=(0,f.relative)(q,b+e).split("\\").join("/");d.startsWith(".")||(d="./"+d),r.set(a,d)}}for(let a of[...r.keys()].sort((a,b)=>b.length-a.length)){let c=r.get(a),d=a.replace(/[.*+?^${}()|[\]\\]/g,"\\$&");b=(b=b.replace(RegExp(`'${d}'`,"g"),`'${c}'`)).replace(RegExp(`"${d}"`,"g"),`"${c}"`)}let s=k+e;await (0,d.writeFile)(s,b,"utf-8"),n.push(s)}return n}async function t(a){for(let b of a)try{await (0,d.unlink)(b)}catch{}}a.s(["TMP_SUFFIX",0,k,"cleanupTmpFiles",0,t,"findDistIndex",0,o,"rewriteFileTree",0,s],84948)},98378,a=>{"use strict";var b=a.i(12072),c=a.i(79779),d=a.i(31920);let e=c.POSTHOG_API_KEY,f=new Set;async function g(a,d,f){let g=JSON.stringify({api_key:process.env.FAILPROOFAI_POSTHOG_KEY??e,event:d,distinct_id:a,properties:{...f,$lib:"failproofai-hooks",failproofai_version:b.version,product:c.POSTHOG_PRODUCT}});try{await fetch(process.env.FAILPROOFAI_POSTHOG_HOST?`${process.env.FAILPROOFAI_POSTHOG_HOST}/capture/`:"https://us.i.posthog.com/capture/",{method:"POST",headers:{"Content-Type":"application/json"},body:g,signal:AbortSignal.timeout(5e3)})}catch{}}async function h(a,b,c){if(!(0,d.isTelemetryEnabled)())return;let e=g(a,b,c);f.add(e),e.finally(()=>f.delete(e)),await e}a.s(["trackHookEvent",0,h])}];
-
-//# sourceMappingURL=src_hooks_18k8rl0._.js.map

package/.next/standalone/.next/server/chunks/ssr/src_hooks_1fm2w5z._.js

@@ -1,3 +0,0 @@
-module.exports=[9909,89790,48630,a=>{"use strict";var b=a.i(66680),c=a.i(2157),d=a.i(50227),e=a.i(12072),f=a.i(75818),g=a.i(91609);let h=[1,2],i=/^[a-f0-9]{64}$/,j=/^[A-Za-z0-9._-]{1,128}$/;function k(a,b){if(!b||(0,d.isAbsolute)(b))throw Error(`unsafe managed policy path ${JSON.stringify(b)}`);let e=(0,d.resolve)(a,b),f=(0,d.relative)(a,e);if(f.startsWith("..")||(0,d.isAbsolute)(f))throw Error(`managed policy path escapes its root: ${JSON.stringify(b)}`);let g=(0,c.realpathSync)(a),h=(0,c.realpathSync)(e),i=(0,d.relative)(g,h);if(i.startsWith("..")||(0,d.isAbsolute)(i))throw Error(`managed policy symlink escapes its root: ${JSON.stringify(b)}`);return h}a.s(["readActiveCloudManagedPolicies",0,function(){let a,e=process.env.FAILPROOFAI_CLOUD_POLICY_DIR??(0,f.cloudPoliciesDir)(),l=(0,d.resolve)(e,"active.json");if(!(0,c.existsSync)(l))return[];try{a=JSON.parse((0,c.readFileSync)(l,"utf8"))}catch(a){throw Error(`failed to read cloud-managed active manifest: ${a instanceof Error?a.message:String(a)}`)}let m=function(a){if(!a||"object"!=typeof a)throw Error("active manifest is not an object");if(!h.includes(a.schemaVersion))throw Error(`unsupported active manifest schema ${String(a.schemaVersion)} (supported: ${h.join(", ")})`);let b=a.deployment??a.generation;if(!Number.isSafeInteger(b)||(b??-1)<0)throw Error("active manifest deployment is invalid");if(!Array.isArray(a.policies))throw Error("active manifest policies is not an array");let c=a.policies.map(a=>({...a,version:a.version??a.revision}));return{schemaVersion:a.schemaVersion,deployment:b,policies:c}}(a),n=new Set;return m.policies.map(a=>{if(!j.test(a.id)||"."===a.id||".."===a.id)throw Error(`unsafe cloud-managed policy id ${JSON.stringify(a.id)}`);if(!Number.isSafeInteger(a.version)||a.version<0)throw Error(`invalid version for cloud-managed policy ${a.id}`);if(!i.test(a.sha256))throw Error(`invalid SHA-256 for cloud-managed policy ${a.id}`);if(n.has(a.id))throw Error(`duplicate cloud-managed policy id ${a.id}`);n.add(a.id);let d=k(e,a.path),f=(0,c.readFileSync)(d),h=(0,b.createHash)("sha256").update(f).digest("hex");if(h!==a.sha256)throw Error(`cloud-managed policy ${a.id} failed integrity verification: expected ${a.sha256}, got ${h}`);if(void 0!==a.effect&&"enforce"!==a.effect&&"observe"!==a.effect)throw Error(`unknown effect ${JSON.stringify(a.effect)} for cloud-managed policy ${a.id}`);return{id:a.id,version:a.version,effect:a.effect??"enforce",sha256:a.sha256,path:d,deployment:m.deployment,...(0,g.authorityFieldsOf)(a)}})},"resolveManagedPath",0,k],89790);let l=/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*))*))?(?:\+([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?$/,m=/^(?:0|[1-9]\d*)$/;function n(a){if("string"!=typeof a)return null;let b=l.exec(a);return b?{major:Number(b[1]),minor:Number(b[2]),patch:Number(b[3]),prerelease:void 0===b[4]?[]:b[4].split(".").map(a=>m.test(a)?Number(a):a)}:null}let o=(a,b)=>a<b?-1:+(a>b),p=["always","protected_branch","in_git_repo","has_paths","paths_outside_project","system_or_root_paths"];function q(a){return"string"==typeof a&&p.includes(a)}a.s(["PACK_PRECONDITION_NAMES",0,p,"isPackPreconditionName",0,q],48630);let r=[1],s=/^[a-f0-9]{64}$/,t=/^[A-Za-z0-9._-]{1,64}\/[A-Za-z0-9._-]{1,64}$/,u=/^[A-Za-z0-9][A-Za-z0-9._+-]{0,63}$/,v=/^[0-9a-f]{7,40}$/,w=/^[A-Za-z0-9._-]{1,128}$/,x=/^[a-z][a-z0-9_]{0,31}$/,y=new Set(["exempt","user_asked"]),z=new Set(["shell","write","read","network","other"]);function A(){return process.env.FAILPROOFAI_PACK_DIR??(0,f.packsDir)()}function B(a){if("string"!=typeof a.id||!t.test(a.id))throw Error(`unsafe pack id ${JSON.stringify(a.id)}`);if("string"!=typeof a.version||!u.test(a.version))throw Error(`invalid version for pack ${a.id}`);if(void 0!==a.effect&&"enforce"!==a.effect&&"observe"!==a.effect)throw Error(`unknown effect ${JSON.stringify(a.effect)} for pack ${a.id}`);let b="string"==typeof a.commit&&v.test(a.commit.trim().toLowerCase())?a.commit.trim().toLowerCase():void 0;return{id:a.id,version:a.version,effect:a.effect??"enforce",...b?{commit:b}:{}}}function C(){return process.env.FAILPROOFAI_PACK_DIR?(0,d.resolve)(process.env.FAILPROOFAI_PACK_DIR,"installed.json"):(0,f.packsInstalledFile)()}let D=new Set(["string","number","boolean","string[]","pattern[]"]);function E(a,b,c,d){let e=`${a} policy #${c}`;if(!b||"object"!=typeof b)throw Error(`${e} is not an object`);let f=b.name;if("string"!=typeof f||!w.test(f))throw Error(`${e} has an unsafe name ${JSON.stringify(f)}`);if("alwaysOn"in b)throw Error(`${e} declares alwaysOn, which packs may not set`);if("string"!=typeof b.description||0===b.description.length)throw Error(`${e} is missing a description`);if("string"!=typeof b.category||0===b.category.length)throw Error(`${e} is missing a category`);if("boolean"!=typeof b.defaultEnabled)throw Error(`${e} is missing defaultEnabled`);if(!b.match||"object"!=typeof b.match)throw Error(`${e} is missing a match`);let h=b.match;for(let a of["events","toolNames"]){let b=h[a];if(void 0!==b&&(!Array.isArray(b)||b.some(a=>"string"!=typeof a||0===a.length)))throw Error(`${e} has a match.${a} that is not a list of names`)}let i=(0,g.authorityFieldsOf)(b),j=["authority","reviewedBy"].filter(a=>a in b&&!(a in i));if("params"in b){let a=function(a){if(!a||"object"!=typeof a||Array.isArray(a))return"params is not an object";for(let[b,c]of Object.entries(a)){if(0===b.length)return"params has an empty parameter name";if(!c||"object"!=typeof c||Array.isArray(c))return`params.${b} is not an object`;if("string"!=typeof c.type||!D.has(c.type))return`params.${b} has type ${JSON.stringify(c.type)}, which is not one of ${[...D].join(", ")}`;if("string"!=typeof c.description||0===c.description.length)return`params.${b} is missing a description`;if(!("default"in c))return`params.${b} is missing a default`}}(b.params);a&&(d?.push(`${e} declares a params schema that was dropped: ${a}`),j.push("params"))}return j.length>0?Object.fromEntries(Object.entries(b).filter(([a])=>!j.includes(a))):b}function F(a,b,c=e.version){if(void 0===b)return{kind:"satisfied"};let d=function(a,b){let c=n(a),d=n(b);return c&&d?o(c.major,d.major)||o(c.minor,d.minor)||o(c.patch,d.patch)||function(a,b){if(0===a.length&&0===b.length)return 0;if(0===a.length)return 1;if(0===b.length)return -1;for(let c=0;c<Math.min(a.length,b.length);c++){let d=a[c],e=b[c];if(d===e)continue;let f="number"==typeof d,g="number"==typeof e;if(f!==g)return f?-1:1;if(f&&g)return o(d,e);return d<e?-1:1}return o(a.length,b.length)}(c.prerelease,d.prerelease):null}(c,b);return null===d?{kind:"unreadable",reason:`pack ${a} declares minCliVersion ${JSON.stringify(b)}, which is not a version this CLI can compare against its own (${c}) — the requirement was ignored`}:d<0?{kind:"too-old",reason:`pack ${a} needs failproofai ${String(b)} or newer and this is ${c} — run \`npm i -g failproofai && failproofai update\``}:{kind:"satisfied",declared:b}}function G(a,b,c,d){if("string"!=typeof c||0===c.length)throw Error(`${a} is missing ${b}`);if(c.length>d)throw Error(`${a} has a ${b} of ${c.length} characters, over the ${d}-character cap`);return c}function H(a,b,c){let d;if(!b||"object"!=typeof b||Array.isArray(b))throw Error(`${a} is not an object`);if(null!==c)d=c;else{if("string"!=typeof b.id||!x.test(b.id))throw Error(`${a} has an unsafe id ${JSON.stringify(b.id)}`);if(y.has(b.id))throw Error(`${a} uses the reserved probe id ${JSON.stringify(b.id)}`);d=b.id}let e=G(a,"instructions",b.instructions,600);if(void 0===b.criteria)return{id:d,instructions:e};if(!b.criteria||"object"!=typeof b.criteria||Array.isArray(b.criteria))throw Error(`${a} has criteria that is not an object`);let f=b.criteria;return{id:d,instructions:e,criteria:{true:G(a,"criteria.true",f.true,300),false:G(a,"criteria.false",f.false,300)}}}function I(a,b,c){let d=`${a} semantic policy #${c}`;if(!b||"object"!=typeof b||Array.isArray(b))throw Error(`${d} is not an object`);let e=b.name;if("string"!=typeof e||!w.test(e))throw Error(`${d} has an unsafe name ${JSON.stringify(e)}`);if("alwaysOn"in b)throw Error(`${d} declares alwaysOn, which packs may not set`);let f=G(`${a} semantic policy ${e}`,"title",b.title,120),g=`${a} semantic policy ${e}`;if(!Array.isArray(b.appliesTo)||0===b.appliesTo.length)throw Error(`${g} has no appliesTo tool classes`);let h=b.appliesTo.find(a=>"string"!=typeof a||!z.has(a));if(void 0!==h)throw Error(`${g} applies to ${JSON.stringify(h)}, which is not a tool class (${[...z].join(", ")})`);if("deny"!==b.mode&&"instruct"!==b.mode)throw Error(`${g} has mode ${JSON.stringify(b.mode)}, which must be "deny" or "instruct"`);if("boolean"!=typeof b.userCanOverride)throw Error(`${g} is missing userCanOverride, which has no default`);if(!Array.isArray(b.probes)||0===b.probes.length)throw Error(`${g} declares no probes`);if(b.probes.length>6)throw Error(`${g} declares ${b.probes.length} probes, over the cap of 6`);let i=b.probes.map((a,b)=>H(`${g} probe #${b}`,a,null)),j=new Set;for(let a of i){if(j.has(a.id))throw Error(`${g} declares probe ${a.id} twice`);j.add(a.id)}let k=void 0===b.exempt?void 0:H(`${g} exempt`,b.exempt,"exempt");if(void 0!==b.precondition&&!q(b.precondition))throw Error(`${g} names precondition ${JSON.stringify(b.precondition)}, which this build does not have (${p.join(", ")})`);let l=G(g,"guidance",b.guidance,600);return{name:e,title:f,appliesTo:b.appliesTo,mode:b.mode,userCanOverride:b.userCanOverride,probes:i,...k?{exempt:k}:{},...void 0!==b.precondition?{precondition:b.precondition}:{},guidance:l}}function J(a){return a instanceof Error?a.message:String(a)}a.s(["MAX_SEMANTIC_POLICIES_PER_PACK",0,24,"PACK_COMMIT_RE",0,v,"checkPackMinCliVersion",0,F,"hasInstalledPacks",0,function(){try{let a=JSON.parse((0,c.readFileSync)(C(),"utf8"));return Array.isArray(a.packs)&&a.packs.length>0}catch{return!1}},"packSemantic",0,function(a){return a.semantic??[]},"packsRoot",0,A,"parsePackIdentity",0,B,"parsePackPolicy",0,E,"parsePackSemanticPolicy",0,I,"readInstalledPacks",0,function(){let a,d=C();if(!(0,c.existsSync)(d))return{packs:[],errors:[]};try{a=JSON.parse((0,c.readFileSync)(d,"utf8"))}catch(a){return{packs:[],errors:[{id:null,reason:`unreadable pack manifest: ${J(a)}`}]}}if(!a||"object"!=typeof a)return{packs:[],errors:[{id:null,reason:"pack manifest is not an object"}]};let e=a;if(!r.includes(e.schemaVersion))return{packs:[],errors:[{id:null,reason:`unsupported pack manifest schema ${String(e.schemaVersion)} (supported: ${r.join(", ")})`}]};if(!Array.isArray(e.packs))return{packs:[],errors:[{id:null,reason:"pack manifest packs is not an array"}]};let f=A(),g=[],h=[],i=[],j=new Set;for(let a of e.packs){let d=a&&"object"==typeof a&&"string"==typeof a.id?a.id:null,e=[];try{let d=function(a,d,e){if(!d||"object"!=typeof d)throw Error("pack entry is not an object");let f=B(d);if("string"!=typeof d.source||0===d.source.length)throw Error(`pack ${d.id} has no source`);if("string"!=typeof d.sha256||!s.test(d.sha256))throw Error(`invalid SHA-256 for pack ${d.id}`);let g=f.effect,h=F(f.id,d.minCliVersion);if("too-old"===h.kind)throw Error(h.reason);"unreadable"===h.kind&&e.push(h.reason);let i=k(a,d.entry),j=(0,b.createHash)("sha256").update((0,c.readFileSync)(i)).digest("hex");if(j!==d.sha256)throw Error(`pack ${d.id} failed integrity verification: expected ${d.sha256}, got ${j}`);if(!Array.isArray(d.policies))throw Error(`pack ${d.id} policies is not an array`);let l=d.policies.map((a,b)=>E(d.id,a,b,e)),m=new Set;for(let a of l){if(m.has(a.name))throw Error(`pack ${d.id} declares ${a.name} twice`);m.add(a.name)}let n=null;if(void 0!==d.enabled){if(!Array.isArray(d.enabled)||d.enabled.some(a=>"string"!=typeof a))throw Error(`pack ${d.id} enabled is not an array of names`);n=d.enabled.filter(a=>m.has(a))}let o=null;if(void 0!==d.clis){if(!Array.isArray(d.clis)||d.clis.some(a=>"string"!=typeof a))throw Error(`pack ${d.id} clis is not an array of agent names`);o=d.clis}return{clis:o,id:f.id,version:f.version,source:d.source,path:i,sha256:d.sha256,effect:g,policies:l,semantic:function(a,b,c){if(void 0===b)return[];if(!Array.isArray(b))return c.push(`pack ${a} semantic is not an array, so none of it was loaded`),[];let d=[],e=new Set;for(let[f,g]of b.entries()){if(d.length>=24){c.push(`pack ${a} declares more than 24 semantic policies; the ${b.length-24} past that cap were dropped`);break}try{let b=I(a,g,f);if(e.has(b.name))throw Error(`pack ${a} declares semantic policy ${b.name} twice`);e.add(b.name),d.push(b)}catch(a){c.push(J(a))}}return d}(f.id,d.semantic,e),..."satisfied"===h.kind&&h.declared?{minCliVersion:h.declared}:{},enabled:n}}(f,a,e);if(j.has(d.id))throw Error(`duplicate pack id ${d.id}`);j.add(d.id),g.push(d),i.push(...e)}catch(c){let b=a&&("observe"===a.effect||"enforce"===a.effect)?a.effect:"enforce";h.push({id:d,reason:J(c),effect:b,...Array.isArray(a?.policies)?{declared:function(a){let b=[];for(let c of a)c&&"object"==typeof c&&"string"==typeof c.name&&c.match&&"object"==typeof c.match&&b.push(c);return b}(a.policies)}:{},...Array.isArray(a?.clis)&&a.clis.every(a=>"string"==typeof a)?{clis:a.clis}:{}})}}return{packs:g,errors:h,...i.length>0?{warnings:i}:{}}}],9909)},65917,a=>{"use strict";a.s(["POLICY_CATALOG",0,[{name:"sanitize-jwt",description:"Stop Claude from reading JWTs in tool responses",displayTitle:"Redacted JWT tokens from tool output",impact:"Stops the agent from echoing auth tokens it saw in command output.",match:{events:["PostToolUse"]},authority:"hard",defaultEnabled:!0,category:"Sanitize"},{name:"sanitize-api-keys",description:"Stop Claude from reading API keys (OpenAI, Anthropic, GitHub, AWS, Stripe, Google) in tool responses",displayTitle:"Redacted API keys from tool output",impact:"Catches OpenAI / Anthropic / GitHub / AWS / Stripe / Google keys before the model sees them.",match:{events:["PostToolUse"]},authority:"hard",defaultEnabled:!0,category:"Sanitize",params:{additionalPatterns:{type:"pattern[]",description:"Additional API key patterns to scrub, each with { regex, label }",default:[]}}},{name:"sanitize-connection-strings",description:"Stop Claude from reading database connection strings with embedded credentials in tool responses",displayTitle:"Redacted database connection strings from tool output",impact:"Strips embedded DB credentials before they reach the model context.",match:{events:["PostToolUse"]},authority:"hard",defaultEnabled:!0,category:"Sanitize"},{name:"sanitize-private-key-content",description:"Stop Claude from reading PEM private key content in tool responses",displayTitle:"Redacted PEM private keys from tool output",impact:"Prevents private key bodies from being echoed into chat context.",match:{events:["PostToolUse"]},authority:"hard",defaultEnabled:!0,category:"Sanitize"},{name:"sanitize-bearer-tokens",displayTitle:"Redacted bearer tokens from tool output",impact:"Strips Authorization: Bearer values before they hit the model.",description:"Stop Claude from reading Authorization Bearer tokens in tool responses",match:{events:["PostToolUse"]},authority:"hard",defaultEnabled:!0,category:"Sanitize"},{name:"protect-env-vars",displayTitle:"Tried to dump environment variables to chat",impact:"Env vars often contain secrets; blocking `env` / `printenv` keeps them out of the model context.",description:"Prevent commands that read environment variables",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["env-secrets-dump","secret-exposure"],defaultEnabled:!0,category:"Environment"},{name:"block-env-files",displayTitle:"Tried to read or write a .env file",impact:"`.env` files routinely contain API keys and DB credentials.",description:"Block reading/writing .env files",match:{events:["PreToolUse"]},authority:"reviewable",reviewedBy:["secret-exposure"],defaultEnabled:!0,category:"Environment"},{name:"block-read-outside-cwd",displayTitle:"Tried to read files outside your project directory",impact:"Stops the agent from peeking at neighboring repos or your home directory.",description:"Block file reads outside the session working directory",match:{events:["PreToolUse"],toolNames:["Read","Glob","Grep","Bash"]},authority:"reviewable",reviewedBy:["read-outside-workspace"],defaultEnabled:!1,category:"Environment",params:{allowPaths:{type:"string[]",description:"Absolute paths outside cwd that are allowed to be read",default:[]}}},{name:"block-sudo",displayTitle:"Tried to run a command with sudo",impact:"Sudo gives the agent root — blocked unless explicitly allow-listed.",description:"Block sudo commands",match:{events:["PreToolUse","PermissionRequest"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!0,category:"Dangerous Commands",params:{allowPatterns:{type:"string[]",description:"Sudo command patterns to allow, matched token-by-token (e.g. 'sudo systemctl status')",default:[]}}},{name:"block-curl-pipe-sh",displayTitle:"Tried to pipe a downloaded script straight to a shell",impact:"`curl ... | sh` runs unverified remote code on your machine.",description:"Block piping downloads to shell",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!0,category:"Dangerous Commands"},{name:"block-rm-rf",displayTitle:"Tried to recursively delete a system path",impact:"Catches catastrophic `rm -rf /` and Windows equivalents.",description:"Prevent catastrophic deletions",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Dangerous Commands",params:{allowPaths:{type:"string[]",description:"Paths that are allowed to be recursively deleted",default:[]}}},{name:"block-failproofai-commands",displayTitle:"Tried to disable, pause or modify failproofai itself",impact:"An agent that can pause or remove enforcement can switch off every other policy.",description:"Block failproofai CLI commands, self-pause and uninstallation",match:{events:["PreToolUse","PermissionRequest"],toolNames:["Bash","Write","Edit","NotebookEdit"]},defaultEnabled:!0,alwaysOn:!0,authority:"hard",category:"Dangerous Commands"},{name:"block-kubectl",displayTitle:"Tried to run a Kubernetes command",impact:"kubectl can change live cluster state — gated unless allow-listed.",description:"Block kubectl commands (Kubernetes cluster mutations)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"kubectl command patterns to allow, matched token-by-token (e.g. 'kubectl get *', 'kubectl describe *')",default:[]}}},{name:"block-terraform",displayTitle:"Tried to run a Terraform/OpenTofu command",impact:"Terraform mutates real infrastructure — gated unless allow-listed.",description:"Block terraform and tofu (OpenTofu) commands",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"terraform/tofu command patterns to allow (e.g. 'terraform plan', 'terraform validate')",default:[]}}},{name:"block-aws-cli",displayTitle:"Tried to run an AWS CLI command",impact:"AWS CLI can spend money or break prod — gated.",description:"Block aws CLI commands",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"aws CLI command patterns to allow (e.g. 'aws s3 ls *', 'aws sts get-caller-identity')",default:[]}}},{name:"block-gcloud",displayTitle:"Tried to run a Google Cloud command",impact:"gcloud can spend money or break prod — gated.",description:"Block gcloud (Google Cloud) CLI commands",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"gcloud command patterns to allow (e.g. 'gcloud auth list', 'gcloud config list')",default:[]}}},{name:"block-az-cli",displayTitle:"Tried to run an Azure CLI command",impact:"az can spend money or break prod — gated.",description:"Block az (Azure) CLI commands",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"az CLI command patterns to allow (e.g. 'az account show', 'az group list')",default:[]}}},{name:"block-helm",displayTitle:"Tried to run a Helm command",impact:"Helm releases mutate cluster state — gated.",description:"Block helm commands",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"helm command patterns to allow (e.g. 'helm list', 'helm status *')",default:[]}}},{name:"block-gh-pipeline",displayTitle:"Tried to run a privileged GitHub CLI pipeline command",impact:"Catches `gh workflow run`, `gh pr merge`, `gh secret set`, etc.",description:"Block gh CLI pipeline-trigger subcommands (workflow run, run rerun/cancel, pr merge, release create/delete, cache delete, secret set/delete)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Infra Commands",params:{allowPatterns:{type:"string[]",description:"gh pipeline command patterns to allow (e.g. specific scripted invocations); read-only gh subcommands like 'gh pr view' and 'gh run list' are not matched by this policy",default:[]}}},{name:"block-secrets-write",displayTitle:"Tried to write a secret-key file",impact:"Stops the agent from creating `.pem`, `id_rsa`, `credentials.json`, etc.",description:"Block writing secret key files",match:{events:["PreToolUse"],toolNames:["Write"]},authority:"hard",defaultEnabled:!1,category:"Dangerous Commands",params:{additionalPatterns:{type:"string[]",description:"Additional filename patterns (substrings) to block",default:[]}}},{name:"block-push-master",displayTitle:"Tried to push directly to main/master",impact:"Direct pushes to a protected branch bypass review.",description:"Block pushing to main/master",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!0,category:"Git",params:{protectedBranches:{type:"string[]",description:"Branch names to protect from direct pushes",default:["main","master"]}}},{name:"block-force-push",displayTitle:"Tried to force-push",impact:"Force-pushes rewrite history and can clobber teammates' work.",description:"Prevent force-pushing to any branch",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Git"},{name:"block-work-on-main",displayTitle:"Tried to commit or merge on main/master",impact:"Work should land via PR — direct commits skip review.",description:"Block git commits and merges on main/master branch",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Git",params:{protectedBranches:{type:"string[]",description:"Branch names where commits/merges are blocked",default:["main","master"]}}},{name:"warn-git-amend",displayTitle:"Used git commit --amend",impact:"Amending after a push rewrites history that others may have pulled.",description:"Warns before amending git commits, which rewrites history",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["git-history-rewrite"],defaultEnabled:!1,category:"Git"},{name:"warn-git-stash-drop",displayTitle:"Tried to drop or clear git stash",impact:"Stash deletions are permanent and silent.",description:"Warns before permanently deleting stashed changes",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Git"},{name:"warn-all-files-staged",displayTitle:"Staged all files with git add -A / .",impact:"Wide stages routinely catch generated files or secrets you didn't intend to commit.",description:"Warns before staging all working tree files with git add -A / . / --all",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Git"},{name:"warn-destructive-sql",displayTitle:"Ran destructive SQL (DROP / TRUNCATE / DELETE without WHERE)",impact:"Easy way to wipe a table by accident.",description:"Warn before executing destructive SQL (DROP/TRUNCATE/DELETE without WHERE) via database clients",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["database-destruction"],defaultEnabled:!1,category:"Database"},{name:"warn-schema-alteration",displayTitle:"Altered a database schema column",impact:"ALTER TABLE operations can lock tables and break readers.",description:"Warns before SQL schema changes (ALTER TABLE with column or rename operations)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Database"},{name:"warn-package-publish",displayTitle:"Tried to publish a package",impact:"Publishes are irreversible — `npm publish` / `cargo publish` shouldn't happen without intent.",description:"Warn before publishing packages to public registries (npm, PyPI, crates.io, RubyGems, etc.)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Packages & System"},{name:"warn-global-package-install",displayTitle:"Installed a package globally",impact:"`npm i -g`, `cargo install`, `pip --user` pollute your machine outside the project.",description:"Warns before installing packages globally (npm -g, cargo install, etc.)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"reviewable",reviewedBy:["system-modification"],defaultEnabled:!1,category:"Packages & System"},{name:"prefer-package-manager",displayTitle:"Used a non-preferred package manager",impact:"Mixing package managers creates lockfile churn for your team.",description:"Blocks non-preferred package managers and tells Claude to use an allowed one (e.g., uv instead of pip)",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Packages & System",params:{allowed:{type:"string[]",description:"Allowed package manager names (e.g. ['uv', 'bun']). Any detected manager not in this list is blocked.",default:[]},blocked:{type:"string[]",description:"Additional manager names to block beyond the built-in list (e.g. ['pdm', 'pipx']).",default:[]}}},{name:"warn-large-file-write",displayTitle:"Wrote a file larger than the configured threshold",impact:"Catches accidentally large file writes (logs, binaries, model dumps).",description:"Warn before writing files larger than 1MB (configurable via thresholdKb param)",match:{events:["PreToolUse"],toolNames:["Write"]},authority:"hard",defaultEnabled:!1,category:"Packages & System",params:{thresholdKb:{type:"number",description:"File size threshold in KB above which a warning is issued",default:1024}}},{name:"warn-background-process",displayTitle:"Started a long-lived background process",impact:"Catches `nohup` / `&` / `screen` / `tmux` / `disown` patterns that the agent often forgets to clean up.",description:"Warns before starting detached or background processes",match:{events:["PreToolUse"],toolNames:["Bash"]},authority:"hard",defaultEnabled:!1,category:"Packages & System"},{name:"warn-repeated-tool-calls",displayTitle:"Called the same tool 3+ times with identical arguments",impact:"Usually a sign of a stuck loop burning tokens.",description:"Warn when the same tool is called 3+ times with identical parameters",match:{events:["PreToolUse"]},authority:"hard",defaultEnabled:!1,category:"AI Behavior"},{name:"require-commit-before-stop",displayTitle:"Stopped with uncommitted changes",impact:"Work not in a commit is invisible to teammates and easy to lose.",description:"Require all changes to be committed before Claude stops",match:{events:["Stop"]},authority:"hard",defaultEnabled:!1,category:"Workflow"},{name:"require-push-before-stop",displayTitle:"Stopped with unpushed commits",impact:"Local-only commits won't trigger CI or be reviewable.",description:"Require all commits to be pushed to remote before Claude stops",match:{events:["Stop"]},authority:"hard",defaultEnabled:!1,category:"Workflow",params:{remote:{type:"string",description:"Remote name to push to (default: origin)",default:"origin"},baseBranch:{type:"string",description:"Base branch to compare against (default: main)",default:"main"}}},{name:"require-pr-before-stop",displayTitle:"Stopped without a PR for the branch",impact:"Branches without PRs don't get reviewed.",description:"Require a pull request to exist for the current branch before Claude stops",match:{events:["Stop"]},authority:"hard",defaultEnabled:!1,category:"Workflow",params:{baseBranch:{type:"string",description:"Base branch to compare against (default: main)",default:"main"}}},{name:"require-no-conflicts-before-stop",displayTitle:"Stopped with a branch that conflicts with main",impact:"Conflicting branches can't merge — surface them early.",description:"Require the current branch to merge cleanly with the base branch before Claude stops",match:{events:["Stop"]},authority:"hard",defaultEnabled:!1,category:"Workflow",params:{baseBranch:{type:"string",description:"Base branch to check for conflicts against (default: main)",default:"main"}}},{name:"require-ci-green-before-stop",displayTitle:"Stopped with failing CI",impact:"Failing CI blocks deploy.",description:"Require CI checks to pass on the current HEAD commit before Claude stops (ignores stale runs on prior commits)",match:{events:["Stop"]},authority:"hard",defaultEnabled:!1,category:"Workflow"}]])},75534,a=>{"use strict";a.i(9909),a.i(91609),a.s(["normalizePolicyName",0,function(a){return a.includes("/")?a:`failproofai/${a}`}],75534)}];
-
-//# sourceMappingURL=src_hooks_1fm2w5z._.js.map