failproofai 0.0.10-beta.9 → 0.0.10

package/dist/cli.mjs

@@ -16,7 +16,7 @@ var __export = (target, all) => {
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 
 // src/hooks/types.ts
-var HOOK_SCOPES, INTEGRATION_TYPES, CODEX_HOOK_SCOPES, CODEX_HOOK_EVENT_TYPES, CODEX_EVENT_MAP, CODEX_TOOL_MAP, COPILOT_HOOK_SCOPES, COPILOT_HOOK_EVENT_TYPES, COPILOT_TOOL_MAP, CURSOR_HOOK_SCOPES, CURSOR_HOOK_EVENT_TYPES, CURSOR_EVENT_MAP, CURSOR_TOOL_MAP, OPENCODE_HOOK_SCOPES, OPENCODE_HOOK_EVENT_TYPES, PI_HOOK_SCOPES, PI_HOOK_EVENT_TYPES, PI_EVENT_MAP, GEMINI_HOOK_SCOPES, GEMINI_HOOK_EVENT_TYPES, GEMINI_EVENT_MAP, GEMINI_TOOL_MAP, HOOK_EVENT_TYPES, FAILPROOFAI_HOOK_MARKER = "__failproofai_hook__";
+var HOOK_SCOPES, INTEGRATION_TYPES, CODEX_HOOK_SCOPES, CODEX_HOOK_EVENT_TYPES, CODEX_EVENT_MAP, CODEX_TOOL_MAP, COPILOT_HOOK_SCOPES, COPILOT_HOOK_EVENT_TYPES, COPILOT_TOOL_MAP, CURSOR_HOOK_SCOPES, CURSOR_HOOK_EVENT_TYPES, CURSOR_EVENT_MAP, CURSOR_TOOL_MAP, OPENCODE_HOOK_SCOPES, OPENCODE_HOOK_EVENT_TYPES, OPENCODE_TOOL_MAP, OPENCODE_TOOL_INPUT_MAP, PI_HOOK_SCOPES, PI_HOOK_EVENT_TYPES, PI_EVENT_MAP, PI_TOOL_MAP, PI_TOOL_INPUT_MAP, GEMINI_HOOK_SCOPES, GEMINI_HOOK_EVENT_TYPES, GEMINI_EVENT_MAP, GEMINI_TOOL_MAP, HOOK_EVENT_TYPES, FAILPROOFAI_HOOK_MARKER = "__failproofai_hook__";
 var init_types = __esm(() => {
   HOOK_SCOPES = ["user", "project", "local"];
   INTEGRATION_TYPES = ["claude", "codex", "copilot", "cursor", "opencode", "pi", "gemini"];
@@ -108,6 +108,30 @@ var init_types = __esm(() => {
     "message.updated",
     "permission.ask"
   ];
+  OPENCODE_TOOL_MAP = {
+    bash: "Bash",
+    read: "Read",
+    write: "Write",
+    edit: "Edit",
+    apply_patch: "Edit",
+    glob: "Glob",
+    grep: "Grep",
+    list: "LS",
+    webfetch: "WebFetch",
+    websearch: "WebSearch",
+    todowrite: "TodoWrite",
+    todoread: "TodoRead"
+  };
+  OPENCODE_TOOL_INPUT_MAP = {
+    Read: { filePath: "file_path" },
+    Write: { filePath: "file_path" },
+    Edit: {
+      filePath: "file_path",
+      oldString: "old_string",
+      newString: "new_string",
+      replaceAll: "replace_all"
+    }
+  };
   PI_HOOK_SCOPES = ["user", "project"];
   PI_HOOK_EVENT_TYPES = [
     "session_start",
@@ -127,6 +151,19 @@ var init_types = __esm(() => {
     tool_result: "PostToolUse",
     agent_end: "Stop"
   };
+  PI_TOOL_MAP = {
+    bash: "Bash",
+    read: "Read",
+    write: "Write",
+    edit: "Edit",
+    glob: "Glob",
+    grep: "Grep"
+  };
+  PI_TOOL_INPUT_MAP = {
+    Read: { path: "file_path" },
+    Write: { path: "file_path" },
+    Edit: { path: "file_path" }
+  };
   GEMINI_HOOK_SCOPES = ["user", "project"];
   GEMINI_HOOK_EVENT_TYPES = [
     "SessionStart",
@@ -2089,6 +2126,19 @@ You MUST complete the above action NOW. Do NOT ask the user for confirmation —
         };
       }
       if (session?.cli === "pi") {
+        if (eventType === "Stop") {
+          const reasonText = `MANDATORY ACTION REQUIRED from failproofai (policy: ${policy.name}): ${reason}
+
+You MUST complete the above action NOW. Do NOT ask the user for confirmation — execute the required action, then attempt to finish your task again.`;
+          return {
+            exitCode: 0,
+            stdout: JSON.stringify({ permission: "deny", reason: reasonText }),
+            stderr: "",
+            policyName: policy.name,
+            reason,
+            decision: "deny"
+          };
+        }
         const response = {
           permission: "deny",
           reason: blockedMessage
@@ -2267,6 +2317,21 @@ You MUST complete the above action NOW. Do NOT ask the user for confirmation —
       };
     }
     if (session?.cli === "pi") {
+      if (eventType === "Stop") {
+        const policyAttribution = policyNames.length === 1 ? `policy: ${policyNames[0]}` : `policies: ${policyNames.join(", ")}`;
+        const reasonText = `MANDATORY ACTION REQUIRED from failproofai (${policyAttribution}): ${combined}
+
+You MUST complete the above action(s) NOW. Do NOT ask the user for confirmation — execute the required action(s), then attempt to finish your task again.`;
+        return {
+          exitCode: 0,
+          stdout: JSON.stringify({ permission: "deny", reason: reasonText }),
+          stderr: "",
+          policyName: policyNames[0],
+          policyNames,
+          reason: combined,
+          decision: "instruct"
+        };
+      }
       const response2 = {
         permission: "allow",
         reason: `Instruction from failproofai: ${combined}`
@@ -2864,7 +2929,7 @@ var init_hook_activity_store = __esm(() => {
 });
 
 // package.json
-var version2 = "0.0.10-beta.9";
+var version2 = "0.0.10";
 var init_package = () => {};
 
 // src/posthog-key.ts
@@ -3609,7 +3674,6 @@ __export(exports_opencode_projects, {
   getCachedOpenCodeProjects: () => getCachedOpenCodeProjects
 });
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { basename as basename2 } from "node:path";
 function runOpenCodeDb(sql) {
   try {
     const stdout = execFileSync2("opencode", ["db", "--format", "json", sql], {
@@ -3661,7 +3725,7 @@ async function getOpenCodeProjects() {
     seen.add(projectId);
     const proj = projectMap.get(projectId);
     const worktree = proj?.worktree ?? group.rows[0]?.directory ?? null;
-    const name = proj?.name?.trim() || (worktree ? basename2(worktree) : projectId);
+    const name = worktree ? encodeFolderName(worktree) : projectId;
     const path = worktree ?? "";
     const lastModified = new Date(Math.max(group.latest, proj?.time_updated ?? 0));
     out.push({
@@ -3677,7 +3741,7 @@ async function getOpenCodeProjects() {
     if (seen.has(p.id))
       continue;
     const worktree = p.worktree ?? "";
-    const name = p.name?.trim() || (worktree ? basename2(worktree) : p.id);
+    const name = worktree ? encodeFolderName(worktree) : p.id;
     const lastModified = new Date(p.time_updated);
     out.push({
       name,
@@ -3930,7 +3994,7 @@ __export(exports_gemini_projects, {
   getCachedGeminiSessionsByEncodedName: () => getCachedGeminiSessionsByEncodedName,
   getCachedGeminiProjects: () => getCachedGeminiProjects
 });
-import { readdir as readdir5, readFile as readFile6, stat as stat5 } from "node:fs/promises";
+import { open as open3, readdir as readdir5, readFile as readFile6, stat as stat5 } from "node:fs/promises";
 import { homedir as homedir11 } from "node:os";
 import { join as join9 } from "node:path";
 function getGeminiTmpRoot() {
@@ -3950,6 +4014,37 @@ async function statMtime4(path) {
     return null;
   }
 }
+async function readFirstLine2(filePath) {
+  let fh = null;
+  try {
+    fh = await open3(filePath, "r");
+    const buf = Buffer.alloc(FIRST_LINE_CHUNK_BYTES2);
+    const { bytesRead } = await fh.read(buf, 0, FIRST_LINE_CHUNK_BYTES2, 0);
+    if (bytesRead === 0)
+      return null;
+    const slice = buf.subarray(0, bytesRead);
+    const nl = slice.indexOf(10);
+    const end = nl === -1 ? bytesRead : nl;
+    return slice.subarray(0, end).toString("utf-8");
+  } catch {
+    return null;
+  } finally {
+    if (fh)
+      await fh.close().catch(() => {});
+  }
+}
+function extractFullSessionId(line) {
+  if (!line)
+    return;
+  try {
+    const meta = JSON.parse(line);
+    if (typeof meta.sessionId !== "string")
+      return;
+    return UUID_RE.test(meta.sessionId) ? meta.sessionId : undefined;
+  } catch {
+    return;
+  }
+}
 async function readProjectRoot(projectDir) {
   try {
     const text = await readFile6(join9(projectDir, ".project_root"), "utf-8");
@@ -3983,7 +4078,8 @@ async function scanGeminiSessions() {
       const mtime = await statMtime4(filePath);
       if (!mtime)
         continue;
-      out.push({ filePath, sessionFilename: f.name, cwd, fileMtime: mtime });
+      const sessionId = extractFullSessionId(await readFirstLine2(filePath));
+      out.push({ filePath, sessionFilename: f.name, cwd, fileMtime: mtime, sessionId });
     }
   }), 16);
   return out;
@@ -4011,17 +4107,14 @@ async function getGeminiProjects() {
 async function getGeminiSessionsForCwd(cwd) {
   const sessions = await scanGeminiSessions();
   const matches = sessions.filter((s) => s.cwd === cwd);
-  const files = matches.map((s) => {
-    const m = s.sessionFilename.match(SESSION_FILE_RE2);
-    return {
-      name: s.sessionFilename,
-      path: s.filePath,
-      lastModified: s.fileMtime,
-      lastModifiedFormatted: formatDate(s.fileMtime),
-      sessionId: m ? m[2] : undefined,
-      cli: "gemini"
-    };
-  });
+  const files = matches.map((s) => ({
+    name: s.sessionFilename,
+    path: s.filePath,
+    lastModified: s.fileMtime,
+    lastModifiedFormatted: formatDate(s.fileMtime),
+    sessionId: s.sessionId,
+    cli: "gemini"
+  }));
   files.sort((a, b) => b.lastModified.getTime() - a.lastModified.getTime());
   return files;
 }
@@ -4038,25 +4131,24 @@ async function getGeminiSessionsByEncodedName(name) {
   if (uniqueCwds.length !== 1) {
     return { cwd: null, sessions: [] };
   }
-  const sessions = matches.map((s) => {
-    const m = s.sessionFilename.match(SESSION_FILE_RE2);
-    return {
-      name: s.sessionFilename,
-      path: s.filePath,
-      lastModified: s.fileMtime,
-      lastModifiedFormatted: formatDate(s.fileMtime),
-      sessionId: m ? m[2] : undefined,
-      cli: "gemini"
-    };
-  });
+  const sessions = matches.map((s) => ({
+    name: s.sessionFilename,
+    path: s.filePath,
+    lastModified: s.fileMtime,
+    lastModifiedFormatted: formatDate(s.fileMtime),
+    sessionId: s.sessionId,
+    cli: "gemini"
+  }));
   sessions.sort((a, b) => b.lastModified.getTime() - a.lastModified.getTime());
   return { cwd: uniqueCwds[0], sessions };
 }
-var SESSION_FILE_RE2, getCachedGeminiProjects, getCachedGeminiSessionsByEncodedName;
+var SESSION_FILE_RE2, UUID_RE, FIRST_LINE_CHUNK_BYTES2, getCachedGeminiProjects, getCachedGeminiSessionsByEncodedName;
 var init_gemini_projects = __esm(() => {
   init_paths();
   init_logger();
   SESSION_FILE_RE2 = /^session-(\d{4}-\d{2}-\d{2}T\d{2}-\d{2})-([0-9a-f]{8})\.jsonl$/i;
+  UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+  FIRST_LINE_CHUNK_BYTES2 = 4 * 1024;
   getCachedGeminiProjects = runtimeCache(getGeminiProjects, 30);
   getCachedGeminiSessionsByEncodedName = runtimeCache((name) => getGeminiSessionsByEncodedName(name), 30, { maxSize: 50 });
 });
@@ -5041,7 +5133,7 @@ var init_copilot_sessions = __esm(() => {
 // lib/cursor-sessions.ts
 import { readFileSync as readFileSync6, readdirSync as readdirSync5, existsSync as existsSync7, statSync as statSync6 } from "node:fs";
 import { readFile as readFile10 } from "node:fs/promises";
-import { basename as basename3, join as join15, resolve as resolve7, sep as sep3 } from "node:path";
+import { basename as basename2, join as join15, resolve as resolve7, sep as sep3 } from "node:path";
 import { homedir as homedir14 } from "node:os";
 function getCursorHome2() {
   return process.env.CURSOR_HOME || join15(homedir14(), ".cursor");
@@ -5079,7 +5171,7 @@ function findCursorTranscript(sessionId) {
   const dir = getCursorSessionDir(sessionId);
   if (!dir)
     return null;
-  const newCandidate = join15(dir, `${basename3(dir)}.jsonl`);
+  const newCandidate = join15(dir, `${basename2(dir)}.jsonl`);
   if (existsSync7(newCandidate))
     return newCandidate;
   for (const name of LEGACY_TRANSCRIPT_FILE_CANDIDATES2) {
@@ -5303,7 +5395,7 @@ function getPiSessionStateRoot() {
   return process.env.PI_SESSIONS_DIR || join16(homedir15(), ".pi", "agent", "sessions");
 }
 function isSafeSessionId(sessionId) {
-  return UUID_RE.test(sessionId);
+  return UUID_RE2.test(sessionId);
 }
 function findPiTranscript(sessionId) {
   if (!isSafeSessionId(sessionId))
@@ -5475,10 +5567,10 @@ async function getPiSessionLog(sessionId) {
     filePath
   };
 }
-var UUID_RE, SESSION_FILE_RE3, getCachedPiSessionLog;
+var UUID_RE2, SESSION_FILE_RE3, getCachedPiSessionLog;
 var init_pi_sessions = __esm(() => {
   init_log_entries();
-  UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+  UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
   SESSION_FILE_RE3 = /^[\d-]+T[\d-]+Z_([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.jsonl$/i;
   getCachedPiSessionLog = runtimeCache((sessionId) => getPiSessionLog(sessionId), 60, { maxSize: 50 });
 });
@@ -5492,7 +5584,7 @@ function getGeminiSessionStateRoot() {
   return process.env.GEMINI_SESSIONS_DIR || join17(homedir16(), ".gemini", "tmp");
 }
 function isSafeSessionId2(sessionId) {
-  return UUID_RE2.test(sessionId);
+  return UUID_RE3.test(sessionId);
 }
 function readFirstLineSync(path) {
   let fd;
@@ -5703,10 +5795,10 @@ async function getGeminiSessionLog(sessionId) {
     filePath
   };
 }
-var UUID_RE2, SESSION_FILE_RE4, getCachedGeminiSessionLog;
+var UUID_RE3, SESSION_FILE_RE4, getCachedGeminiSessionLog;
 var init_gemini_sessions = __esm(() => {
   init_log_entries();
-  UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+  UUID_RE3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
   SESSION_FILE_RE4 = /^session-(.+)-([0-9a-f]{8})\.jsonl$/i;
   getCachedGeminiSessionLog = runtimeCache((sessionId) => getGeminiSessionLog(sessionId), 60, { maxSize: 50 });
 });
@@ -6397,8 +6489,28 @@ function canonicalizeToolName(raw, cli) {
     return CODEX_TOOL_MAP[raw] ?? raw;
   if (cli === "gemini")
     return GEMINI_TOOL_MAP[raw] ?? raw;
+  if (cli === "opencode")
+    return OPENCODE_TOOL_MAP[raw] ?? raw;
+  if (cli === "pi")
+    return PI_TOOL_MAP[raw] ?? raw;
   return raw;
 }
+function canonicalizeToolInput(toolName, rawInput, cli) {
+  if (!toolName || !rawInput || typeof rawInput !== "object")
+    return rawInput;
+  let perToolMap;
+  if (cli === "opencode")
+    perToolMap = OPENCODE_TOOL_INPUT_MAP[toolName];
+  else if (cli === "pi")
+    perToolMap = PI_TOOL_INPUT_MAP[toolName];
+  if (!perToolMap)
+    return rawInput;
+  const out = {};
+  for (const [k, v] of Object.entries(rawInput)) {
+    out[perToolMap[k] ?? k] = v;
+  }
+  return out;
+}
 async function handleHookEvent(eventType, cli = "claude") {
   const startTime = performance.now();
   const MAX_STDIN_BYTES = 1048576;
@@ -6440,6 +6552,11 @@ async function handleHookEvent(eventType, cli = "claude") {
   if (canonicalToolName !== rawToolName) {
     parsed.tool_name = canonicalToolName;
   }
+  const rawInput = parsed.tool_input;
+  const canonicalInput = canonicalizeToolInput(canonicalToolName, rawInput, cli);
+  if (canonicalInput !== rawInput) {
+    parsed.tool_input = canonicalInput;
+  }
   const sessionId = parsed.session_id;
   const session = {
     sessionId,
@@ -6955,6 +7072,28 @@ function canonicalizeTool(raw) {
   return TOOL_NAME_MAP[raw] != null ? TOOL_NAME_MAP[raw] : raw;
 }
 
+// Per-tool input-key translation: opencode native tools deliver args as
+// camelCase (\`filePath\`, \`oldString\`, …) but failproofai builtin policies
+// (\`block-read-outside-cwd\`, \`block-env-files\`, \`block-secrets-write\`)
+// read \`ctx.toolInput.file_path\` etc. Without this map every Read/Write/Edit
+// path-check silently no-ops on opencode. Keys are PascalCase canonical tool
+// names so the lookup pairs with canonicalizeTool's output. Tools outside the
+// map (MCP \`mcp_*\`, plugins) pass through unchanged. Keep in sync with
+// OPENCODE_TOOL_INPUT_MAP in failproofai/src/hooks/types.ts.
+const TOOL_INPUT_MAP = {
+  Read: { filePath: "file_path" },
+  Write: { filePath: "file_path" },
+  Edit: { filePath: "file_path", oldString: "old_string", newString: "new_string", replaceAll: "replace_all" },
+};
+function canonicalizeToolInput(canonicalToolName, args) {
+  if (!args || typeof args !== "object") return args;
+  const map = TOOL_INPUT_MAP[canonicalToolName];
+  if (!map) return args;
+  const out = {};
+  for (const k of Object.keys(args)) out[map[k] != null ? map[k] : k] = args[k];
+  return out;
+}
+
 const FAILPROOFAI_BIN = ${escapedBin};
 const USE_NPX = ${useNpx};
 
@@ -7053,11 +7192,12 @@ export default async function failproofaiPlugin({ client, directory }) {
 
     // First-class PreToolUse hook. Note: tool args live on output.args (mutable).
     "tool.execute.before": async (input, output) => {
+      const canonicalTool = canonicalizeTool(input.tool);
       const r = runFailproofai("PreToolUse", {
         session_id: input.sessionID,
         cwd: directory,
-        tool_name: canonicalizeTool(input.tool),
-        tool_input: output.args,
+        tool_name: canonicalTool,
+        tool_input: canonicalizeToolInput(canonicalTool, output.args),
         hook_event_name: "PreToolUse",
       }, directory);
       await applyDecision(r, { client, sessionID: input.sessionID }, "PreToolUse");
@@ -7065,11 +7205,12 @@ export default async function failproofaiPlugin({ client, directory }) {
 
     // First-class PostToolUse hook. Note: tool args live on input.args here.
     "tool.execute.after": async (input, output) => {
+      const canonicalTool = canonicalizeTool(input.tool);
       const r = runFailproofai("PostToolUse", {
         session_id: input.sessionID,
         cwd: directory,
-        tool_name: canonicalizeTool(input.tool),
-        tool_input: input.args,
+        tool_name: canonicalTool,
+        tool_input: canonicalizeToolInput(canonicalTool, input.args),
         tool_response: { title: output.title, output: output.output, metadata: output.metadata },
         hook_event_name: "PostToolUse",
       }, directory);
@@ -7078,11 +7219,12 @@ export default async function failproofaiPlugin({ client, directory }) {
 
     // Cleaner deny UX for prompted tools — mutate output.status instead of throwing.
     "permission.ask": async (input, output) => {
+      const canonicalTool = canonicalizeTool(input.tool);
       const r = runFailproofai("PermissionRequest", {
         session_id: input.sessionID,
         cwd: directory,
-        tool_name: canonicalizeTool(input.tool) || input.command || "permission",
-        tool_input: input,
+        tool_name: canonicalTool || input.command || "permission",
+        tool_input: canonicalizeToolInput(canonicalTool, input),
         hook_event_name: "PermissionRequest",
       }, directory);
       try {
@@ -8153,7 +8295,7 @@ __export(exports_manager, {
 });
 import { execSync as execSync4 } from "node:child_process";
 import { existsSync as existsSync16 } from "node:fs";
-import { resolve as resolve11, basename as basename4 } from "node:path";
+import { resolve as resolve11, basename as basename3 } from "node:path";
 import { homedir as homedir23, platform, arch, release, hostname } from "node:os";
 function getSettingsPath(scope, cwd) {
   return claudeCode.getSettingsPath(scope, cwd);
@@ -8584,15 +8726,15 @@ Failproof AI Hook Policies
       try {
         const hooks = await loadCustomHooks(file);
         if (hooks.length === 0) {
-          const filename = basename4(file);
+          const filename = basename3(file);
           console.log(`  \x1B[31m✗\x1B[0m       ${filename.padEnd(nameColWidth)}\x1B[31mfailed to load\x1B[0m`);
         } else {
-          const filename = basename4(file);
+          const filename = basename3(file);
           const hookSummary = hooks.map((h) => h.name).join(", ");
           console.log(`  \x1B[32m✓\x1B[0m       ${filename.padEnd(nameColWidth)}${hooks.length} hook(s): ${hookSummary}`);
         }
       } catch {
-        const filename = basename4(file);
+        const filename = basename3(file);
         console.log(`  \x1B[31m✗\x1B[0m       ${filename.padEnd(nameColWidth)}\x1B[31merror\x1B[0m`);
       }
     }
@@ -9470,27 +9612,10 @@ import { resolve as resolve14, dirname as dirname8 } from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 function launch(mode) {
   const { loggingLevel, disableTelemetry, allowedDevOrigins, remainingArgs } = parseScriptArgs(process.argv.slice(2));
-  const bannerLines = [
-    "      ███                                                ▐███            ▐█",
-    "    ▐█▛▀▀         ▟█▖                                   ▟█▛▀▀            ▝▀",
-    "   ██████ ▗████▌ ▝██▛ ██   ███    ▐██▙  ▗███    ▐██▙  ▗█████▙     ████▌  ▐█",
-    "   ▀▜█▛▀▀ ▝▀▀▀▀█▙ ▄▙  ██ ▗▟▀▀▜▄▖ ▄▟▀▀▘ ▄▟▛▀▜▙▖ ▄█▀▀█▄▖▝▀██▛▀▀     ▀▀▀▀▙▄ ▐█",
-    "    ▐█▌   ▗██████ ███ ██ ▐█  ▐█▌ ██    ██▌ ▐█▌ ██  ██▌  ██▌       ██████ ▐█",
-    "    ▐█▌   ▐█▛▀▀██ ██▀ ██ ▐█  ▐█▌ ██    ██▌ ▐█▌ ██  ██▌  ██▌       █▛▀▀██ ▐█",
-    "    ▐█▌   ▝▀█████ ██▄▄██ ▐████▀▘ ██    ▀▜███▀▘ ▀▜███▀▘  ██▌       ▀█████ ▐█",
-    "    ▝▀▘     ▀▀▀▀▀ ▀▀▀▀▀▀ ▐█▀▀▀   ▀▀     ▝▀▀▀    ▝▀▀▀    ▀▀▘        ▀▀▀▀▀ ▝▀",
-    "                         ▐█",
-    "                         ▝▀"
-  ];
-  const bannerWidth = bannerLines.reduce((w, l) => Math.max(w, l.length), 0);
-  const cols = process.stdout.columns;
-  const banner = cols !== undefined && cols < bannerWidth ? "  failproof ai" : bannerLines.join(`
-`);
   console.log(`
-${banner}
-
-  v${version2}
+  failproof ai
 `);
+  console.log(`  \uD83D\uDCE6 Version:      ${version2}`);
   console.log(`  ⭐ Star us:      https://github.com/exospherehost/failproofai`);
   console.log(`  \uD83D\uDCD6 Docs:         https://befailproof.ai`);
   console.log(`  \uD83D\uDCAC Slack:        https://join.slack.com/t/failproofai/shared_invite/zt-3v63b7k5e-O3NBHmj8X6n9gZSGDx6ggQ
@@ -9583,7 +9708,7 @@ import { realpathSync as realpathSync3 } from "fs";
 import { dirname as dirname9, resolve as resolve15 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 // package.json
-var version = "0.0.10-beta.9";
+var version = "0.0.10";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {

package/lib/gemini-projects.ts

@@ -21,7 +21,7 @@
  * missing `~/.gemini/` returns `[]`, malformed JSONL falls open without
  * surfacing the session.
  */
-import { readdir, readFile, stat } from "node:fs/promises";
+import { open, readdir, readFile, stat } from "node:fs/promises";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import type { ProjectFolder, SessionFile } from "./projects";
@@ -34,6 +34,13 @@ import { logWarn } from "./logger";
 /** Filename pattern for a Gemini session JSONL:
  *  `session-<ISO-timestamp-with-dashes>-<8-hex-uuid-prefix>.jsonl`. */
 const SESSION_FILE_RE = /^session-(\d{4}-\d{2}-\d{2}T\d{2}-\d{2})-([0-9a-f]{8})\.jsonl$/i;
+/** Full UUID — the filename only embeds the first 8 hex chars; the rest is on
+ *  the JSONL metadata header line. The session detail route requires a full
+ *  UUID, so links built from the truncated filename prefix 404. */
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/** Metadata header sits on line 1 and is well under 1 KB; 4 KB covers it
+ *  comfortably without slurping a multi-MB transcript. */
+const FIRST_LINE_CHUNK_BYTES = 4 * 1024;
 
 /** Override for tests. Defaults to the live Gemini session-state root. */
 function getGeminiTmpRoot(): string {
@@ -46,6 +53,10 @@ interface GeminiSessionMeta {
   sessionFilename: string;
   cwd: string;
   fileMtime: Date;
+  /** Full UUID parsed from the JSONL metadata header (line 1). Undefined when
+   *  the header is missing, malformed, or carries a non-UUID `sessionId`;
+   *  callers fall through to rendering an un-linked row. */
+  sessionId?: string;
 }
 
 async function safeReaddir(dir: string) {
@@ -64,6 +75,40 @@ async function statMtime(path: string): Promise<Date | null> {
   }
 }
 
+/** Read the first newline-delimited line of `filePath` without slurping the
+ *  rest. Mirrors `lib/codex-projects.ts`'s readFirstLine; the Gemini metadata
+ *  header is always on line 1. */
+async function readFirstLine(filePath: string): Promise<string | null> {
+  let fh: Awaited<ReturnType<typeof open>> | null = null;
+  try {
+    fh = await open(filePath, "r");
+    const buf = Buffer.alloc(FIRST_LINE_CHUNK_BYTES);
+    const { bytesRead } = await fh.read(buf, 0, FIRST_LINE_CHUNK_BYTES, 0);
+    if (bytesRead === 0) return null;
+    const slice = buf.subarray(0, bytesRead);
+    const nl = slice.indexOf(0x0a); // '\n'
+    const end = nl === -1 ? bytesRead : nl;
+    return slice.subarray(0, end).toString("utf-8");
+  } catch {
+    return null;
+  } finally {
+    if (fh) await fh.close().catch(() => {});
+  }
+}
+
+/** Extract a full-UUID `sessionId` from a JSONL metadata header line. Returns
+ *  undefined on parse failure, missing field, or a non-UUID value. */
+function extractFullSessionId(line: string | null): string | undefined {
+  if (!line) return undefined;
+  try {
+    const meta = JSON.parse(line) as { sessionId?: unknown };
+    if (typeof meta.sessionId !== "string") return undefined;
+    return UUID_RE.test(meta.sessionId) ? meta.sessionId : undefined;
+  } catch {
+    return undefined;
+  }
+}
+
 /** Read `.project_root` to recover the absolute cwd for a basename folder.
  *  Returns null if missing or empty (caller treats the folder as un-mappable). */
 async function readProjectRoot(projectDir: string): Promise<string | null> {
@@ -101,7 +146,8 @@ async function scanGeminiSessions(): Promise<GeminiSessionMeta[]> {
           const filePath = join(chatsDir, f.name);
           const mtime = await statMtime(filePath);
           if (!mtime) continue;
-          out.push({ filePath, sessionFilename: f.name, cwd, fileMtime: mtime });
+          const sessionId = extractFullSessionId(await readFirstLine(filePath));
+          out.push({ filePath, sessionFilename: f.name, cwd, fileMtime: mtime, sessionId });
         }
       }),
     16,
@@ -140,17 +186,14 @@ export async function getGeminiProjects(): Promise<ProjectFolder[]> {
 export async function getGeminiSessionsForCwd(cwd: string): Promise<SessionFile[]> {
   const sessions = await scanGeminiSessions();
   const matches = sessions.filter((s) => s.cwd === cwd);
-  const files: SessionFile[] = matches.map((s) => {
-    const m = s.sessionFilename.match(SESSION_FILE_RE);
-    return {
-      name: s.sessionFilename,
-      path: s.filePath,
-      lastModified: s.fileMtime,
-      lastModifiedFormatted: formatDate(s.fileMtime),
-      sessionId: m ? m[2] : undefined,
-      cli: "gemini",
-    };
-  });
+  const files: SessionFile[] = matches.map((s) => ({
+    name: s.sessionFilename,
+    path: s.filePath,
+    lastModified: s.fileMtime,
+    lastModifiedFormatted: formatDate(s.fileMtime),
+    sessionId: s.sessionId,
+    cli: "gemini",
+  }));
   files.sort((a, b) => b.lastModified.getTime() - a.lastModified.getTime());
   return files;
 }
@@ -180,17 +223,14 @@ export async function getGeminiSessionsByEncodedName(name: string): Promise<Gemi
   if (uniqueCwds.length !== 1) {
     return { cwd: null, sessions: [] };
   }
-  const sessions = matches.map((s) => {
-    const m = s.sessionFilename.match(SESSION_FILE_RE);
-    return {
-      name: s.sessionFilename,
-      path: s.filePath,
-      lastModified: s.fileMtime,
-      lastModifiedFormatted: formatDate(s.fileMtime),
-      sessionId: m ? m[2] : undefined,
-      cli: "gemini" as const,
-    };
-  });
+  const sessions = matches.map((s) => ({
+    name: s.sessionFilename,
+    path: s.filePath,
+    lastModified: s.fileMtime,
+    lastModifiedFormatted: formatDate(s.fileMtime),
+    sessionId: s.sessionId,
+    cli: "gemini" as const,
+  }));
   sessions.sort((a, b) => b.lastModified.getTime() - a.lastModified.getTime());
   return { cwd: uniqueCwds[0], sessions };
 }

package/lib/opencode-projects.ts

@@ -22,7 +22,6 @@
  *       https://opencode.ai/docs/plugins/  (plugin model context)
  */
 import { execFileSync } from "node:child_process";
-import { basename } from "node:path";
 import { encodeFolderName } from "./paths";
 import type { ProjectFolder, SessionFile } from "./projects";
 import { runtimeCache } from "./runtime-cache";
@@ -91,10 +90,11 @@ function readProjectRows(): OpenCodeProjectRow[] | null {
 
 /**
  * Group sessions by `project_id` and produce one ProjectFolder per project.
- * The folder name comes from `project.name` when set, else `basename(worktree)`,
- * else the project_id (last-resort). `lastModified` is the max session
- * `time_updated` for that project (or the project's own time_updated if no
- * sessions exist yet).
+ * The folder name is `encodeFolderName(worktree)` (matches every other CLI's
+ * URL-slug encoding so the dashboard's `/project/[name]` route resolves), or
+ * the project_id when no worktree is recorded. `lastModified` is the max
+ * session `time_updated` for that project (or the project's own time_updated
+ * if no sessions exist yet).
  */
 export async function getOpenCodeProjects(): Promise<ProjectFolder[]> {
   const sessions = readSessionRows();
@@ -122,13 +122,15 @@ export async function getOpenCodeProjects(): Promise<ProjectFolder[]> {
 
   // Emit one ProjectFolder per project that has at least one session OR a
   // project row (covers projects opencode knows about but hasn't run yet).
+  // `name` is the dashboard's URL slug — must be `encodeFolderName(cwd)` to
+  // match every other CLI (and the resolver in `getOpenCodeSessionsByEncodedName`).
   const seen = new Set<string>();
   const out: ProjectFolder[] = [];
   for (const [projectId, group] of groups) {
     seen.add(projectId);
     const proj = projectMap.get(projectId);
     const worktree = proj?.worktree ?? group.rows[0]?.directory ?? null;
-    const name = proj?.name?.trim() || (worktree ? basename(worktree) : projectId);
+    const name = worktree ? encodeFolderName(worktree) : projectId;
     const path = worktree ?? "";
     const lastModified = new Date(Math.max(group.latest, proj?.time_updated ?? 0));
     out.push({
@@ -143,7 +145,7 @@ export async function getOpenCodeProjects(): Promise<ProjectFolder[]> {
   for (const p of projects ?? []) {
     if (seen.has(p.id)) continue;
     const worktree = p.worktree ?? "";
-    const name = p.name?.trim() || (worktree ? basename(worktree) : p.id);
+    const name = worktree ? encodeFolderName(worktree) : p.id;
     const lastModified = new Date(p.time_updated);
     out.push({
       name,