failproofai 0.0.11-beta.2 → 0.0.11-beta.4

package/lib/share-card.ts

@@ -0,0 +1,144 @@
+/**
+ * Helpers for attaching the audit-card PNG to a social share.
+ *
+ *   X and LinkedIn intent URLs cannot carry image attachments — only text
+ *   and a target URL. To actually get an image into a post we have three
+ *   options at different levels of "automatic":
+ *
+ *     1. `shareCardNative` → `navigator.share({ files })` — the system
+ *        share sheet handles the image + text in one step. Works on
+ *        iOS, Android, recent Safari, recent Chrome desktop. When the
+ *        user picks their target (X / LinkedIn / …) the image is
+ *        already attached.
+ *     2. `copyOrDownloadCard` → clipboard + open intent URL — the user
+ *        pastes (⌘/Ctrl+V) in the share dialog and the image attaches.
+ *     3. `downloadCard` → straight download to disk, no other side
+ *        effects. Used by the dedicated "save audit-card" button so
+ *        the user gets a file every time, regardless of clipboard
+ *        permissions.
+ */
+
+export type ShareCardMethod = "native" | "clipboard" | "download" | "failed";
+
+/**
+ * Best-effort "is this a mobile device" check. On mobile, the system share
+ * sheet exposes the actual X / LinkedIn apps as targets so `navigator.share`
+ * is a one-tap UX win. On desktop (notably Windows Chromium / Edge) the same
+ * call opens the OS share dialog — useless for X / LinkedIn — so we
+ * deliberately skip it and fall back to clipboard + intent URL.
+ *
+ * Prefers `userAgentData.mobile` (Chromium UA-Client-Hints, no sniffing),
+ * falls back to a tight UA pattern for Safari / Firefox, and treats
+ * iPadOS 13+ (UA says Mac but multi-touch is available) as mobile.
+ */
+function isLikelyMobile(): boolean {
+  if (typeof navigator === "undefined") return false;
+  type UADataNav = Navigator & { userAgentData?: { mobile?: boolean } };
+  const uaData = (navigator as UADataNav).userAgentData;
+  if (uaData && typeof uaData.mobile === "boolean") return uaData.mobile;
+  const ua = navigator.userAgent || "";
+  if (/Android|iPhone|iPad|iPod|webOS|BlackBerry|IEMobile|Opera Mini/i.test(ua)) return true;
+  if (ua.includes("Mac") && typeof navigator.maxTouchPoints === "number" && navigator.maxTouchPoints > 1) return true;
+  return false;
+}
+
+/**
+ * Try the native Web Share API with a file attachment. Returns `true` on
+ * success, `false` if the API is unavailable, files-sharing isn't
+ * supported, the device is desktop (where the OS share sheet doesn't
+ * include X / LinkedIn), or the user dismissed the sheet. Caller should
+ * fall back to `copyOrDownloadCard` on `false`.
+ */
+export async function shareCardNative(
+  blob: Blob,
+  filename: string,
+  text: string,
+): Promise<boolean> {
+  if (typeof navigator === "undefined" || typeof navigator.share !== "function") {
+    return false;
+  }
+  if (!isLikelyMobile()) return false;
+  const file = new File([blob], filename, { type: "image/png" });
+  // Some browsers (older Chrome desktop) expose `navigator.share` but reject
+  // file payloads. `canShare({ files })` gates that cleanly.
+  type CanShareNav = Navigator & { canShare?: (data: ShareData) => boolean };
+  const navWithCan = navigator as CanShareNav;
+  if (typeof navWithCan.canShare === "function" && !navWithCan.canShare({ files: [file] })) {
+    return false;
+  }
+  try {
+    await navigator.share({ files: [file], text });
+    return true;
+  } catch (err) {
+    // AbortError → user dismissed the sheet. Treat as a soft failure so the
+    // caller can decide whether to open the intent URL anyway.
+    if (err instanceof Error && err.name === "AbortError") return false;
+    return false;
+  }
+}
+
+/**
+ * Copy a captured share-card PNG to the system clipboard, or fall back to a
+ * download if the browser doesn't support image clipboard writes (or the
+ * user denied permission). The caller MUST be inside an active user gesture
+ * (click handler) — Chromium gates `navigator.clipboard.write` on user
+ * activation.
+ */
+export async function copyOrDownloadCard(
+  blob: Blob,
+  filename: string,
+): Promise<Exclude<ShareCardMethod, "native">> {
+  if (
+    typeof ClipboardItem !== "undefined"
+    && typeof navigator !== "undefined"
+    && navigator.clipboard
+    && typeof navigator.clipboard.write === "function"
+  ) {
+    try {
+      await navigator.clipboard.write([
+        new ClipboardItem({ "image/png": blob }),
+      ]);
+      return "clipboard";
+    } catch {
+      /* permission denied, secure-context issue, browser fence, … */
+    }
+  }
+  return downloadCard(blob, filename) ? "download" : "failed";
+}
+
+/**
+ * Trigger a local download of the PNG. Returns `true` on success. No
+ * clipboard interaction — used by the explicit "save audit-card" CTA so the
+ * user reliably gets a file even when clipboard write would succeed.
+ */
+export function downloadCard(blob: Blob, filename: string): boolean {
+  try {
+    if (typeof document === "undefined" || typeof URL === "undefined") return false;
+    const url = URL.createObjectURL(blob);
+    const a = document.createElement("a");
+    a.href = url;
+    a.download = filename;
+    a.style.display = "none";
+    document.body.appendChild(a);
+    a.click();
+    a.remove();
+    queueMicrotask(() => URL.revokeObjectURL(url));
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/** Human-readable toast copy keyed by share method. */
+export function shareCardToastMessage(method: ShareCardMethod): string {
+  switch (method) {
+    case "native":
+      return "✅ image attached — pick where to post";
+    case "clipboard":
+      return "📋 image copied — paste it in the post (⌘/Ctrl+V)";
+    case "download":
+      return "⬇ image downloaded — attach it to your post";
+    case "failed":
+      return "couldn't capture image — opening text-only share";
+  }
+}

package/lib/telemetry.ts

@@ -10,7 +10,7 @@
 
 import { getInstanceId } from "./telemetry-id";
 import { version } from "../package.json";
-import { POSTHOG_API_KEY } from "../src/posthog-key";
+import { POSTHOG_API_KEY, POSTHOG_PRODUCT } from "../src/posthog-key";
 
 const DEFAULT_API_KEY = POSTHOG_API_KEY;
 const DEFAULT_HOST = "https://us.i.posthog.com";
@@ -81,13 +81,18 @@ export function isTelemetryEnabled(): boolean {
 
 /**
  * Lazily import posthog-node and create a client.
- * No-op when telemetry is disabled.
+ *
+ * No-op when telemetry is disabled. **Never throws** — callers (the
+ * Next.js API routes and the CLI subcommands) can `await initTelemetry()`
+ * unguarded and a posthog init failure can't 500 a valid auth response.
+ * The outer try/catch is the single source of truth; do NOT add a
+ * per-call wrapper at the call sites.
  */
 export async function initTelemetry(): Promise<void> {
-  if (!isTelemetryEnabled()) return;
-  if (globalThis.__FAILPROOFAI_POSTHOG__) return;
-
   try {
+    if (!isTelemetryEnabled()) return;
+    if (globalThis.__FAILPROOFAI_POSTHOG__) return;
+
     const mod: { PostHog: new (key: string, opts: PostHogOptions) => PostHogClient } =
       await import("posthog-node");
     const apiKey = process.env.FAILPROOFAI_POSTHOG_KEY ?? DEFAULT_API_KEY;
@@ -110,7 +115,7 @@ export async function initTelemetry(): Promise<void> {
     process.on("SIGINT", onExit);
   } catch (err) {
     // Always log init failures — silent swallowing makes standalone debugging impossible
-    console.warn("[failproofai:telemetry] PostHog init failed:", err instanceof Error ? err.message : err);
+    console.warn("[failproofai:telemetry] init failed:", err instanceof Error ? err.message : err);
   }
 }
 
@@ -129,7 +134,7 @@ export function trackEvent(
   client.capture({
     distinctId: getInstanceId(),
     event: name,
-    properties: { ...properties, $lib: "failproofai", failproofai_version: version },
+    properties: { ...properties, $lib: "failproofai", failproofai_version: version, product: POSTHOG_PRODUCT },
   });
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "0.0.11-beta.2",
+  "version": "0.0.11-beta.4",
   "description": "The easiest way to manage policies that keep your AI agents reliable, on-task, and running autonomously — for Claude Code & the Agents SDK",
   "bin": {
     "failproofai": "./dist/cli.mjs"
@@ -71,7 +71,7 @@
     "access": "public"
   },
   "devDependencies": {
-    "@anthropic-ai/sdk": "^0.96.0",
+    "@anthropic-ai/sdk": "^0.102.0",
     "@tailwindcss/postcss": "^4.1.18",
     "@tanstack/react-virtual": "^3.13.18",
     "@testing-library/jest-dom": "^6.9.1",
@@ -84,7 +84,7 @@
     "clsx": "^2.1.1",
     "eslint": "^10.2.0",
     "eslint-config-next": "^16.2.2",
-    "happy-dom": "^20.7.0",
+    "jsdom": "^29.1.1",
     "lucide-react": "^1.0.1",
     "next": "^16.2.2",
     "react": "^19.2.4",
@@ -95,6 +95,11 @@
     "vitest": "^4.0.18"
   },
   "dependencies": {
+    "html2canvas": "^1.4.1",
     "posthog-node": "^5.28.11"
+  },
+  "overrides": {
+    "postcss": "8.5.14",
+    "eslint-plugin-react-hooks": "7.0.1"
   }
 }

package/scripts/install-telemetry.mjs

@@ -13,6 +13,9 @@ import { join } from "node:path";
 const NAMESPACE = "failproofai-telemetry-v1";
 const API_KEY = "phc_Ac1Ww1GqKc0z1SyrRWbmatEeQdlOQIsDEEdP8l8JRgX";
 const CAPTURE_URL = "https://us.i.posthog.com/capture/";
+// Mirrors POSTHOG_PRODUCT in src/posthog-key.ts — this standalone npm-lifecycle
+// script can't import the TS module at install time, so the literal is inlined.
+const PRODUCT = "failproofai-oss";
 
 function hashToId(raw) {
   return createHmac("sha256", NAMESPACE).update(raw).digest("hex");
@@ -91,6 +94,7 @@ export async function trackInstallEvent(event, properties = {}) {
       ...properties,
       $lib: "failproofai-install",
       failproofai_version: version,
+      product: PRODUCT,
     },
   });