failproofai 0.0.1-beta.1 → 0.0.1-beta.2

package/.next/standalone/examples/policies-notification.js

@@ -0,0 +1,59 @@
+/**
+ * policies-notification.js — Notification event example
+ *
+ * Forwards Claude's idle notifications to Slack.
+ *
+ * Prerequisites:
+ *   Set the SLACK_WEBHOOK_URL environment variable to your Slack incoming webhook URL.
+ *
+ * Install:
+ *   failproofai --install-hooks custom ./examples/policies-notification.js
+ *
+ * Test by letting Claude finish a task and go idle — you should receive a Slack message.
+ */
+import { customPolicies, allow } from "failproofai";
+
+// Forward Claude idle notifications to Slack
+customPolicies.add({
+  name: "slack-on-idle-notification",
+  description: "Forward Claude idle notifications to Slack (set SLACK_WEBHOOK_URL env var)",
+  match: { events: ["Notification"] },
+  fn: async (ctx) => {
+    const webhookUrl = process.env.SLACK_WEBHOOK_URL;
+    if (!webhookUrl) return allow(); // skip if not configured
+
+    const type = String(ctx.payload?.notification_type ?? "");
+    if (type !== "idle") return allow(); // only forward idle notifications
+
+    const message = String(ctx.payload?.message ?? "Claude is waiting for input");
+    const cwd = ctx.session?.cwd ?? "unknown";
+    const sessionId = ctx.session?.sessionId ?? "unknown";
+
+    // Fire-and-forget — never block Claude if Slack is unreachable
+    fetch(webhookUrl, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        blocks: [
+          {
+            type: "header",
+            text: { type: "plain_text", text: "💬 Claude is waiting for you", emoji: true },
+          },
+          {
+            type: "section",
+            text: { type: "mrkdwn", text: message },
+          },
+          {
+            type: "section",
+            fields: [
+              { type: "mrkdwn", text: `*Project*\n\`${cwd}\`` },
+              { type: "mrkdwn", text: `*Session*\n\`${sessionId}\`` },
+            ],
+          },
+        ],
+      }),
+    }).catch(() => {});
+
+    return allow(); // Notification hooks must always return allow
+  },
+});

package/.next/standalone/next.config.ts

@@ -1,6 +1,11 @@
 import type { NextConfig } from "next";
 
+const allowedDevOrigins = process.env.FAILPROOFAI_ALLOWED_DEV_ORIGINS
+  ? process.env.FAILPROOFAI_ALLOWED_DEV_ORIGINS.split(",").map((s) => s.trim()).filter(Boolean)
+  : undefined;
+
 const nextConfig: NextConfig = {
+  ...(allowedDevOrigins ? { allowedDevOrigins } : {}),
   output: "standalone",
   productionBrowserSourceMaps: false,
   turbopack: {

package/.next/standalone/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "0.0.1-beta.1",
+  "version": "0.0.1-beta.2",
   "description": "Open-source hooks, policies, and project visualization for Claude Code & Agents SDK",
   "bin": {
     "failproofai": "./bin/failproofai.mjs"

package/.next/standalone/scripts/launch.ts

@@ -3,13 +3,14 @@
  */
 import { getDefaultClaudeProjectsPath } from "../lib/paths";
 import { spawn } from "child_process";
+import { realpathSync } from "node:fs";
 import { resolve, dirname } from "node:path";
 import { fileURLToPath } from "node:url";
 import { parseScriptArgs } from "./parse-script-args";
 import { version } from "../package.json";
 
 export function launch(mode: "dev" | "start"): void {
-  const { claudeProjectsPath: parsedPath, loggingLevel, disableTelemetry, remainingArgs } = parseScriptArgs(process.argv.slice(2));
+  const { claudeProjectsPath: parsedPath, loggingLevel, disableTelemetry, allowedDevOrigins, remainingArgs } = parseScriptArgs(process.argv.slice(2));
 
   console.log(`
     ______      _ __                       ____   ___    ____
@@ -39,8 +40,11 @@ export function launch(mode: "dev" | "start"): void {
     process.env.PORT = port;
     process.env.HOSTNAME = "0.0.0.0";
     cmd = "node";
-    // Absolute path — required so the CLI works from any working directory after install
-    cmdArgs = [resolve(dirname(fileURLToPath(import.meta.url)), "../.next/standalone/server.js")];
+    // Resolve the real package root via realpathSync so symlinked npm global binaries
+    // don't cause import.meta.url to point at the symlink dir instead of the package dir.
+    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT
+      ?? resolve(dirname(realpathSync(fileURLToPath(import.meta.url))), "..");
+    cmdArgs = [resolve(packageRoot, ".next/standalone/server.js")];
   } else {
     cmd = "bunx";
     cmdArgs = ["--bun", "next", "dev", ...remainingArgs];
@@ -53,6 +57,7 @@ export function launch(mode: "dev" | "start"): void {
       CLAUDE_PROJECTS_PATH: claudeProjectsPath,
       ...(loggingLevel ? { FAILPROOFAI_LOG_LEVEL: loggingLevel } : {}),
       ...(disableTelemetry ? { FAILPROOFAI_TELEMETRY_DISABLED: "1" } : {}),
+      ...(allowedDevOrigins ? { FAILPROOFAI_ALLOWED_DEV_ORIGINS: allowedDevOrigins.join(",") } : {}),
     },
   });
 

package/.next/standalone/scripts/parse-script-args.ts

@@ -7,6 +7,7 @@ export interface ParsedScriptArgs {
   claudeProjectsPath: string | undefined;
   loggingLevel: string | undefined;
   disableTelemetry: boolean;
+  allowedDevOrigins: string[] | undefined;
   remainingArgs: string[];
 }
 
@@ -32,6 +33,7 @@ export function parseScriptArgs(argv: string[]): ParsedScriptArgs {
   let claudeProjectsPath: string | undefined;
   let loggingLevel: string | undefined;
   let disableTelemetry = false;
+  let allowedDevOrigins: string[] | undefined;
 
   for (let i = 0; i < args.length; i++) {
     const arg = args[i];
@@ -71,7 +73,15 @@ export function parseScriptArgs(argv: string[]): ParsedScriptArgs {
       i--;
       continue;
     }
+
+    if (flag === "--allowed-origins") {
+      const { value, spliceCount } = parseStringFlag(flag, "a comma-separated list of origins", inlineValue, args, i);
+      allowedDevOrigins = value.split(",").map(s => s.trim()).filter(Boolean);
+      args.splice(i, spliceCount);
+      i--;
+      continue;
+    }
   }
 
-  return { claudeProjectsPath, loggingLevel, disableTelemetry, remainingArgs: args };
+  return { claudeProjectsPath, loggingLevel, disableTelemetry, allowedDevOrigins, remainingArgs: args };
 }

package/bin/failproofai.mjs

@@ -10,8 +10,21 @@
  *   --list-policies       List available policies and their status
  *   (default)             Launch production dashboard
  */
+import { realpathSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
 import { version } from "../package.json";
 
+// Resolve the real package root early (following any npm bin symlinks) so that
+// scripts/launch.ts can locate .next/standalone/server.js correctly regardless
+// of how bun resolves import.meta.url for dynamically-imported modules.
+if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {
+  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve(
+    dirname(realpathSync(fileURLToPath(import.meta.url))),
+    ".."
+  );
+}
+
 const args = process.argv.slice(2);
 
 // --version / -v
@@ -89,6 +102,37 @@ if (args.includes("--list-policies")) {
   process.exit(0);
 }
 
+// Unknown flag guard — must appear after all known-flag branches
+const knownFlags = ["--version", "-v", "--hook", "--install-policies",
+                    "--remove-policies", "--list-policies"];
+const unknownFlag = args.find(a => a.startsWith("-") && !knownFlags.includes(a));
+
+if (unknownFlag) {
+  function levenshtein(a, b) {
+    const m = a.length, n = b.length;
+    const dp = Array.from({ length: m + 1 }, (_, i) =>
+      Array.from({ length: n + 1 }, (_, j) => (i === 0 ? j : j === 0 ? i : 0))
+    );
+    for (let i = 1; i <= m; i++)
+      for (let j = 1; j <= n; j++)
+        dp[i][j] = a[i - 1] === b[j - 1]
+          ? dp[i - 1][j - 1]
+          : 1 + Math.min(dp[i - 1][j], dp[i][j - 1], dp[i - 1][j - 1]);
+    return dp[m][n];
+  }
+
+  const primary = ["--version", "--hook", "--install-policies",
+                   "--remove-policies", "--list-policies"];
+  const closest = primary.reduce((best, flag) => {
+    const dist = levenshtein(unknownFlag, flag);
+    return dist < best.dist ? { flag, dist } : best;
+  }, { flag: primary[0], dist: Infinity });
+
+  console.error(`Unknown flag: ${unknownFlag}`);
+  console.error(`Did you mean: ${closest.flag}?`);
+  process.exit(1);
+}
+
 // Dashboard launch — always production mode
 const { launch } = await import("../scripts/launch");
 launch("start");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "0.0.1-beta.1",
+  "version": "0.0.1-beta.2",
   "description": "Open-source hooks, policies, and project visualization for Claude Code & Agents SDK",
   "bin": {
     "failproofai": "./bin/failproofai.mjs"

package/scripts/launch.ts

@@ -3,13 +3,14 @@
  */
 import { getDefaultClaudeProjectsPath } from "../lib/paths";
 import { spawn } from "child_process";
+import { realpathSync } from "node:fs";
 import { resolve, dirname } from "node:path";
 import { fileURLToPath } from "node:url";
 import { parseScriptArgs } from "./parse-script-args";
 import { version } from "../package.json";
 
 export function launch(mode: "dev" | "start"): void {
-  const { claudeProjectsPath: parsedPath, loggingLevel, disableTelemetry, remainingArgs } = parseScriptArgs(process.argv.slice(2));
+  const { claudeProjectsPath: parsedPath, loggingLevel, disableTelemetry, allowedDevOrigins, remainingArgs } = parseScriptArgs(process.argv.slice(2));
 
   console.log(`
     ______      _ __                       ____   ___    ____
@@ -39,8 +40,11 @@ export function launch(mode: "dev" | "start"): void {
     process.env.PORT = port;
     process.env.HOSTNAME = "0.0.0.0";
     cmd = "node";
-    // Absolute path — required so the CLI works from any working directory after install
-    cmdArgs = [resolve(dirname(fileURLToPath(import.meta.url)), "../.next/standalone/server.js")];
+    // Resolve the real package root via realpathSync so symlinked npm global binaries
+    // don't cause import.meta.url to point at the symlink dir instead of the package dir.
+    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT
+      ?? resolve(dirname(realpathSync(fileURLToPath(import.meta.url))), "..");
+    cmdArgs = [resolve(packageRoot, ".next/standalone/server.js")];
   } else {
     cmd = "bunx";
     cmdArgs = ["--bun", "next", "dev", ...remainingArgs];
@@ -53,6 +57,7 @@ export function launch(mode: "dev" | "start"): void {
       CLAUDE_PROJECTS_PATH: claudeProjectsPath,
       ...(loggingLevel ? { FAILPROOFAI_LOG_LEVEL: loggingLevel } : {}),
       ...(disableTelemetry ? { FAILPROOFAI_TELEMETRY_DISABLED: "1" } : {}),
+      ...(allowedDevOrigins ? { FAILPROOFAI_ALLOWED_DEV_ORIGINS: allowedDevOrigins.join(",") } : {}),
     },
   });
 

package/scripts/parse-script-args.ts

@@ -7,6 +7,7 @@ export interface ParsedScriptArgs {
   claudeProjectsPath: string | undefined;
   loggingLevel: string | undefined;
   disableTelemetry: boolean;
+  allowedDevOrigins: string[] | undefined;
   remainingArgs: string[];
 }
 
@@ -32,6 +33,7 @@ export function parseScriptArgs(argv: string[]): ParsedScriptArgs {
   let claudeProjectsPath: string | undefined;
   let loggingLevel: string | undefined;
   let disableTelemetry = false;
+  let allowedDevOrigins: string[] | undefined;
 
   for (let i = 0; i < args.length; i++) {
     const arg = args[i];
@@ -71,7 +73,15 @@ export function parseScriptArgs(argv: string[]): ParsedScriptArgs {
       i--;
       continue;
     }
+
+    if (flag === "--allowed-origins") {
+      const { value, spliceCount } = parseStringFlag(flag, "a comma-separated list of origins", inlineValue, args, i);
+      allowedDevOrigins = value.split(",").map(s => s.trim()).filter(Boolean);
+      args.splice(i, spliceCount);
+      i--;
+      continue;
+    }
   }
 
-  return { claudeProjectsPath, loggingLevel, disableTelemetry, remainingArgs: args };
+  return { claudeProjectsPath, loggingLevel, disableTelemetry, allowedDevOrigins, remainingArgs: args };
 }