failproofai 0.0.11-beta.4 → 0.0.11-beta.6

package/.next/standalone/app/audit/audit-styles.css

@@ -2064,3 +2064,261 @@
   .share-dock-fab { transition: none; }
   .share-dock-caret { transition: none; }
 }
+
+/* ─────────────────────────────────────────────────────────────────────
+   top-audit-bar — thin strip above the IdentitySection. Echoes
+   .arch-mast's dashed bottom border so the bar reads as a sibling band.
+   Lowercase mono throughout; bracketed [ ... ] button label keeps it
+   visually paired with the bottom `[ re-audit now ]` in return-section.
+   ───────────────────────────────────────────────────────────────────── */
+.top-audit-bar {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) auto auto;
+  align-items: center;
+  gap: 18px;
+  padding: 14px 4px;
+  margin-bottom: 18px;
+  border-bottom: 1px dashed var(--line);
+  font-family: var(--font-mono);
+  font-size: 12px;
+  color: var(--ink-2);
+  /* Subtle left rail mark — keeps the strip from reading as a plain hr */
+  position: relative;
+}
+.top-audit-bar::before {
+  content: "";
+  position: absolute;
+  left: -10px;
+  top: 50%;
+  width: 6px;
+  height: 6px;
+  transform: translateY(-50%) rotate(45deg);
+  background: var(--accent-pink);
+  opacity: 0.55;
+}
+.top-audit-bar--expired::before { background: var(--amber); opacity: 0.85; }
+.top-audit-bar--empty::before   { background: var(--accent-green); opacity: 0.65; }
+
+.top-audit-bar__left {
+  display: flex;
+  align-items: baseline;
+  gap: 14px;
+  min-width: 0;
+}
+.top-audit-bar__label {
+  text-transform: lowercase;
+  letter-spacing: 0.16em;
+  font-size: 11px;
+  color: var(--dim);
+  white-space: nowrap;
+}
+.top-audit-bar__label--warn { color: var(--amber); }
+.top-audit-bar__glyph {
+  color: var(--accent-pink);
+  letter-spacing: -2px;
+  margin-right: 4px;
+}
+.top-audit-bar--expired .top-audit-bar__glyph { color: var(--amber); }
+.top-audit-bar--empty   .top-audit-bar__glyph { color: var(--accent-green); }
+
+.top-audit-bar__time {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  color: var(--ink);
+  letter-spacing: 0.02em;
+  white-space: nowrap;
+}
+.top-audit-bar__time--fresh { color: var(--accent-green); }
+
+.top-audit-bar__dot {
+  width: 6px;
+  height: 6px;
+  border-radius: 50%;
+  background: var(--accent-green);
+  display: inline-block;
+  box-shadow: 0 0 0 2px rgba(102, 209, 181, 0.16);
+}
+.top-audit-bar__time:not(.top-audit-bar__time--fresh) .top-audit-bar__dot {
+  background: var(--dim);
+  box-shadow: none;
+}
+
+.top-audit-bar__expired-copy { color: var(--ink); }
+
+.top-audit-bar__center {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  padding: 6px 12px;
+  background: var(--amber-bg);
+  border: 1px dashed var(--amber);
+  color: var(--amber);
+  font-size: 11px;
+  text-transform: lowercase;
+  letter-spacing: 0.04em;
+  justify-self: end;
+}
+.top-audit-bar__amber-dot {
+  width: 6px;
+  height: 6px;
+  border-radius: 50%;
+  background: var(--amber);
+  animation: top-audit-amber-pulse 1.6s ease-in-out infinite;
+}
+@keyframes top-audit-amber-pulse {
+  0%, 100% { opacity: 0.5; transform: scale(0.85); }
+  50%      { opacity: 1;   transform: scale(1); }
+}
+
+.top-audit-bar__right {
+  justify-self: end;
+}
+/* Compact override of `.share-btn` so it fits the bar's 14px padding. The
+   parent class drives the colors, hard-offset hover shadow, and disabled
+   state — we only tweak geometry. */
+.top-audit-bar__btn {
+  grid-template-columns: 1fr;
+  padding: 8px 14px;
+  gap: 0;
+  font-size: 12px;
+  letter-spacing: 0.06em;
+  text-transform: lowercase;
+  color: var(--ink);
+}
+.top-audit-bar__btn[data-state="scanning"] {
+  color: var(--accent-pink);
+  border-right-color: var(--accent-pink);
+}
+
+@media (max-width: 720px) {
+  .top-audit-bar {
+    grid-template-columns: 1fr;
+    gap: 10px;
+  }
+  .top-audit-bar__right { justify-self: stretch; }
+  .top-audit-bar__btn { text-align: center; }
+}
+@media (prefers-reduced-motion: reduce) {
+  .top-audit-bar__amber-dot { animation: none; }
+}
+
+/* ─────────────────────────────────────────────────────────────────────
+   audit-progress-strip — sticky banner pinned to the top of the viewport
+   while a re-audit is in flight. Pink hard-offset shadow matches the
+   page's `.share-btn:hover` vocabulary. Right-edge pulse is a CSS-only
+   keyframe (transform-only — no layout thrash) and is not a fake
+   progress bar.
+   ───────────────────────────────────────────────────────────────────── */
+.audit-progress-strip {
+  position: sticky;
+  top: 0;
+  left: 0;
+  right: 0;
+  z-index: 60;
+  background: var(--bg-2);
+  border-bottom: 1px solid var(--accent-pink);
+  box-shadow: 0 4px 0 0 var(--accent-pink-shadow);
+  font-family: var(--font-mono);
+  /* Slide in from above on mount */
+  animation: audit-progress-slide-in 220ms cubic-bezier(0.22, 1, 0.36, 1);
+}
+.audit-progress-strip--failed {
+  border-bottom-color: var(--accent-pink);
+  background: linear-gradient(to right, var(--accent-pink-bg), var(--bg-2));
+}
+.audit-progress-strip__inner {
+  position: relative;
+  max-width: 1480px;
+  margin: 0 auto;
+  padding: 12px clamp(20px, 3vw, 48px);
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 16px;
+}
+.audit-progress-strip__label {
+  display: inline-flex;
+  align-items: center;
+  gap: 10px;
+  color: var(--ink);
+  font-size: 12px;
+  letter-spacing: 0.06em;
+  text-transform: lowercase;
+}
+.audit-progress-strip--failed .audit-progress-strip__label { color: var(--accent-pink); }
+.audit-progress-strip__elapsed {
+  font-variant-numeric: tabular-nums;
+  font-size: 12px;
+  color: var(--accent-pink);
+  letter-spacing: 0.08em;
+}
+.audit-progress-strip__spinner {
+  width: 9px;
+  height: 9px;
+  border-radius: 50%;
+  background: transparent;
+  border: 1.5px solid var(--accent-pink);
+  border-top-color: transparent;
+  animation: audit-progress-spin 800ms linear infinite;
+}
+.audit-progress-strip__x {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 14px;
+  height: 14px;
+  border: 1px solid var(--accent-pink);
+  color: var(--accent-pink);
+  font-size: 11px;
+  line-height: 1;
+}
+.audit-progress-strip__dismiss {
+  background: transparent;
+  border: 1px solid var(--line-2);
+  color: var(--ink-2);
+  padding: 5px 10px;
+  font-family: var(--font-mono);
+  font-size: 11px;
+  text-transform: lowercase;
+  letter-spacing: 0.06em;
+  cursor: pointer;
+  transition: border-color 140ms ease, color 140ms ease;
+}
+.audit-progress-strip__dismiss:hover {
+  border-color: var(--accent-pink);
+  color: var(--accent-pink);
+}
+.audit-progress-strip__pulse {
+  position: absolute;
+  bottom: -1px;
+  left: 0;
+  right: 0;
+  height: 1px;
+  background: linear-gradient(
+    90deg,
+    transparent 0%,
+    var(--accent-pink) 20%,
+    var(--accent-pink) 80%,
+    transparent 100%
+  );
+  transform-origin: left center;
+  animation: audit-progress-pulse 2400ms cubic-bezier(0.55, 0.1, 0.45, 0.9) infinite;
+}
+@keyframes audit-progress-spin {
+  to { transform: rotate(360deg); }
+}
+@keyframes audit-progress-pulse {
+  0%   { transform: scaleX(0)   translateX(0%);    opacity: 0.4; }
+  50%  { transform: scaleX(0.6) translateX(20%);   opacity: 1; }
+  100% { transform: scaleX(0)   translateX(100%);  opacity: 0.2; }
+}
+@keyframes audit-progress-slide-in {
+  from { transform: translateY(-100%); opacity: 0; }
+  to   { transform: translateY(0);     opacity: 1; }
+}
+@media (prefers-reduced-motion: reduce) {
+  .audit-progress-strip { animation: none; }
+  .audit-progress-strip__spinner { animation: none; border-top-color: var(--accent-pink); }
+  .audit-progress-strip__pulse { animation: none; opacity: 0.4; transform: scaleX(0.4) translateX(30%); }
+}

package/.next/standalone/app/audit/page.tsx

@@ -8,7 +8,7 @@
  */
 import { Suspense } from "react";
 import { notFound } from "next/navigation";
-import { readDashboardCache } from "@/src/audit/dashboard-cache";
+import { readDashboardCache, readDashboardCacheMeta } from "@/src/audit/dashboard-cache";
 import { BUILTIN_POLICIES } from "@/src/hooks/builtin-policies";
 import { AUDIT_DETECTORS } from "@/src/audit/detectors";
 import { AuditDashboard } from "./_components/audit-dashboard";
@@ -32,14 +32,24 @@ export default async function AuditPage({ searchParams }: PageProps) {
   const { p } = await searchParams;
 
   const cache = readDashboardCache();
-  const initial = cache
-    ? {
-        status: "cached" as const,
-        cachedAt: cache.cachedAt,
-        params: cache.params,
-        result: cache.result,
-      }
-    : { status: "empty" as const };
+  let initial;
+  if (cache) {
+    initial = {
+      status: "cached" as const,
+      cachedAt: cache.cachedAt,
+      params: cache.params,
+      result: cache.result,
+    };
+  } else {
+    // No fresh cache. Probe meta so we can distinguish "first run" from
+    // "your last audit expired" and surface the right top-bar nudge.
+    const meta = readDashboardCacheMeta();
+    initial = {
+      status: "empty" as const,
+      expired: meta !== null,
+      expiredAt: meta?.cachedAt ?? null,
+    };
+  }
 
   return (
     <Suspense>

package/.next/standalone/lib/fetch-with-timeout.ts

@@ -1,14 +1,28 @@
 /**
- * Shared fetch wrapper with per-request timeout via AbortController.
+ * Shared fetch wrapper with per-request timeout and external-signal
+ * composition.
  *
  * Replaces three byte-equivalent implementations that had drifted on the
  * default timeout (15s in two client components, 10s in the server-side
  * api-server-client). Co-locates the `isAbortError` predicate so callers
  * can classify timeout vs network failures consistently.
  *
- * Server-side uses `AbortSignal.timeout` where available (cheaper); this
- * helper uses the AbortController+setTimeout form because the client
- * code-paths need a guaranteed cleanup hook.
+ * Built on the platform primitives `AbortSignal.timeout()` — which
+ * aborts with a typed `DOMException(..., "TimeoutError")` rather than
+ * the default bare abort that surfaces as Next.js 16's dev-overlay
+ * "signal is aborted without reason" warning — and `AbortSignal.any()`,
+ * which composes the timeout signal with any caller-supplied
+ * `init.signal` so a component-unmount or parent-controller abort
+ * actually stops the in-flight fetch. The prior `AbortController` +
+ * `setTimeout` implementation called `controller.abort()` with no
+ * reason AND silently dropped `init.signal` by spreading then
+ * overwriting it with the controller's own signal.
+ *
+ * Both APIs are available in every runtime Next.js 16 supports:
+ * `AbortSignal.timeout` since Node 17.3 / 16.14, `AbortSignal.any`
+ * since Node 20.3 (also backported to 18.17). Next.js 16's minimum
+ * runtime (Node >= 20.9, per its engines field) covers both. Browser
+ * support: Chrome 116+, Firefox 124+, Safari 17.4+.
  */
 
 /** Hard cap on every fetch using this helper unless overridden. Picked to
@@ -16,27 +30,30 @@
  *  so a slow but successful upstream response still lands. */
 export const DEFAULT_FETCH_TIMEOUT_MS = 15_000;
 
-export async function fetchWithTimeout(
+export function fetchWithTimeout(
   input: RequestInfo | URL,
   init: RequestInit = {},
   timeoutMs: number = DEFAULT_FETCH_TIMEOUT_MS,
 ): Promise<Response> {
-  const controller = new AbortController();
-  const id = setTimeout(() => controller.abort(), timeoutMs);
-  try {
-    return await fetch(input, { ...init, signal: controller.signal });
-  } finally {
-    clearTimeout(id);
-  }
+  const timeoutSignal = AbortSignal.timeout(timeoutMs);
+  const signal = init.signal
+    ? AbortSignal.any([init.signal, timeoutSignal])
+    : timeoutSignal;
+  return fetch(input, { ...init, signal });
 }
 
-/** True when an error came from an AbortController.abort() OR a
- *  `AbortSignal.timeout` firing. Both surface as `Error` with `name`
- *  set to "AbortError" or "TimeoutError" respectively. Keeping the two
- *  in one predicate prevents the "I forgot TimeoutError" drift class. */
+/** True when an error came from an `AbortController.abort()` OR an
+ *  `AbortSignal.timeout()` firing. Both surface as objects whose `name`
+ *  is "AbortError" or "TimeoutError" respectively — depending on the
+ *  runtime, they may be `Error` subclasses, `DOMException` instances,
+ *  both, or neither (the jsdom polyfill, for one, breaks the Error
+ *  prototype chain), so we duck-type on `name` rather than the
+ *  provenance. Callers always pass values caught from a try/catch, so
+ *  the universe of inputs is narrow enough that name-matching is
+ *  unambiguous. Keeping the two names in one predicate prevents the
+ *  "I forgot TimeoutError" drift class. */
 export function isAbortError(err: unknown): boolean {
-  return (
-    err instanceof Error
-    && (err.name === "AbortError" || err.name === "TimeoutError")
-  );
+  if (err === null || typeof err !== "object") return false;
+  const name = (err as { name?: unknown }).name;
+  return name === "AbortError" || name === "TimeoutError";
 }

package/.next/standalone/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "0.0.11-beta.4",
+  "version": "0.0.11-beta.6",
   "description": "The easiest way to manage policies that keep your AI agents reliable, on-task, and running autonomously — for Claude Code & the Agents SDK",
   "bin": {
     "failproofai": "./dist/cli.mjs"

package/.next/standalone/server.js

@@ -9,7 +9,7 @@ const currentPort = parseInt(process.env.PORT, 10) || 3000
 const hostname = process.env.HOSTNAME || '0.0.0.0'
 
 let keepAliveTimeout = parseInt(process.env.KEEP_ALIVE_TIMEOUT, 10)
-const nextConfig = {"env":{"NEXT_PUBLIC_APP_VERSION":"0.0.11-beta.4"},"typescript":{"ignoreBuildErrors":false},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.ts","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/work/failproofai/failproofai","cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":false,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"partialFallbacks":false,"dynamicOnHover":false,"varyParams":false,"prefetchInlining":false,"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":3,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"imgOptSkipMetadata":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"viewTransition":false,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":false,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":false,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.ts","outputFileTracingExcludes":{"*":["node_modules/@img/**","node_modules/sharp/**"]},"turbopack":{"root":"/home/runner/work/failproofai/failproofai"},"distDirRoot":".next"}
+const nextConfig = {"env":{"NEXT_PUBLIC_APP_VERSION":"0.0.11-beta.6"},"typescript":{"ignoreBuildErrors":false},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.ts","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/work/failproofai/failproofai","cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":false,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"partialFallbacks":false,"dynamicOnHover":false,"varyParams":false,"prefetchInlining":false,"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":3,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"imgOptSkipMetadata":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"viewTransition":false,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":false,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":false,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.ts","outputFileTracingExcludes":{"*":["node_modules/@img/**","node_modules/sharp/**"]},"turbopack":{"root":"/home/runner/work/failproofai/failproofai"},"distDirRoot":".next"}
 
 process.env.__NEXT_PRIVATE_STANDALONE_CONFIG = JSON.stringify(nextConfig)
 

package/README.md

@@ -166,6 +166,12 @@ MIT with [Commons Clause](https://commonsclause.com/) — free for internal and
 
 See [CONTRIBUTING.md](./CONTRIBUTING.md). New policies, edge cases, and translations all welcome.
 
+> **Build before you start.** Run `bun install && bun run build` first. This repo runs
+> failproofai's own hooks on itself, and they resolve the `failproofai` import against the
+> compiled `dist/` bundle — without a build you'll hit `Cannot find package 'failproofai'`
+> hook errors. Rebuild after changing `src/`. See
+> [Build before the in-repo dev hooks will work](./CONTRIBUTING.md#build-before-the-in-repo-dev-hooks-will-work).
+
 ---
 
 Built by [Nivedit Jain](https://github.com/NiveditJain) and [Nikita Agarwal](https://github.com/nk-ag).

package/dist/cli.mjs

@@ -16,7 +16,7 @@ var __export = (target, all) => {
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 
 // package.json
-var version2 = "0.0.11-beta.4";
+var version2 = "0.0.11-beta.6";
 var init_package = () => {};
 
 // src/posthog-key.ts
@@ -8747,7 +8747,10 @@ var init_telemetry = __esm(() => {
 
 // lib/fetch-with-timeout.ts
 function isAbortError(err) {
-  return err instanceof Error && (err.name === "AbortError" || err.name === "TimeoutError");
+  if (err === null || typeof err !== "object")
+    return false;
+  const name = err.name;
+  return name === "AbortError" || name === "TimeoutError";
 }
 
 // lib/auth/api-server-client.ts
@@ -9900,7 +9903,7 @@ import { realpathSync as realpathSync3 } from "fs";
 import { dirname as dirname8, resolve as resolve16 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 // package.json
-var version = "0.0.11-beta.4";
+var version = "0.0.11-beta.6";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {

package/lib/fetch-with-timeout.ts

@@ -1,14 +1,28 @@
 /**
- * Shared fetch wrapper with per-request timeout via AbortController.
+ * Shared fetch wrapper with per-request timeout and external-signal
+ * composition.
  *
  * Replaces three byte-equivalent implementations that had drifted on the
  * default timeout (15s in two client components, 10s in the server-side
  * api-server-client). Co-locates the `isAbortError` predicate so callers
  * can classify timeout vs network failures consistently.
  *
- * Server-side uses `AbortSignal.timeout` where available (cheaper); this
- * helper uses the AbortController+setTimeout form because the client
- * code-paths need a guaranteed cleanup hook.
+ * Built on the platform primitives `AbortSignal.timeout()` — which
+ * aborts with a typed `DOMException(..., "TimeoutError")` rather than
+ * the default bare abort that surfaces as Next.js 16's dev-overlay
+ * "signal is aborted without reason" warning — and `AbortSignal.any()`,
+ * which composes the timeout signal with any caller-supplied
+ * `init.signal` so a component-unmount or parent-controller abort
+ * actually stops the in-flight fetch. The prior `AbortController` +
+ * `setTimeout` implementation called `controller.abort()` with no
+ * reason AND silently dropped `init.signal` by spreading then
+ * overwriting it with the controller's own signal.
+ *
+ * Both APIs are available in every runtime Next.js 16 supports:
+ * `AbortSignal.timeout` since Node 17.3 / 16.14, `AbortSignal.any`
+ * since Node 20.3 (also backported to 18.17). Next.js 16's minimum
+ * runtime (Node >= 20.9, per its engines field) covers both. Browser
+ * support: Chrome 116+, Firefox 124+, Safari 17.4+.
  */
 
 /** Hard cap on every fetch using this helper unless overridden. Picked to
@@ -16,27 +30,30 @@
  *  so a slow but successful upstream response still lands. */
 export const DEFAULT_FETCH_TIMEOUT_MS = 15_000;
 
-export async function fetchWithTimeout(
+export function fetchWithTimeout(
   input: RequestInfo | URL,
   init: RequestInit = {},
   timeoutMs: number = DEFAULT_FETCH_TIMEOUT_MS,
 ): Promise<Response> {
-  const controller = new AbortController();
-  const id = setTimeout(() => controller.abort(), timeoutMs);
-  try {
-    return await fetch(input, { ...init, signal: controller.signal });
-  } finally {
-    clearTimeout(id);
-  }
+  const timeoutSignal = AbortSignal.timeout(timeoutMs);
+  const signal = init.signal
+    ? AbortSignal.any([init.signal, timeoutSignal])
+    : timeoutSignal;
+  return fetch(input, { ...init, signal });
 }
 
-/** True when an error came from an AbortController.abort() OR a
- *  `AbortSignal.timeout` firing. Both surface as `Error` with `name`
- *  set to "AbortError" or "TimeoutError" respectively. Keeping the two
- *  in one predicate prevents the "I forgot TimeoutError" drift class. */
+/** True when an error came from an `AbortController.abort()` OR an
+ *  `AbortSignal.timeout()` firing. Both surface as objects whose `name`
+ *  is "AbortError" or "TimeoutError" respectively — depending on the
+ *  runtime, they may be `Error` subclasses, `DOMException` instances,
+ *  both, or neither (the jsdom polyfill, for one, breaks the Error
+ *  prototype chain), so we duck-type on `name` rather than the
+ *  provenance. Callers always pass values caught from a try/catch, so
+ *  the universe of inputs is narrow enough that name-matching is
+ *  unambiguous. Keeping the two names in one predicate prevents the
+ *  "I forgot TimeoutError" drift class. */
 export function isAbortError(err: unknown): boolean {
-  return (
-    err instanceof Error
-    && (err.name === "AbortError" || err.name === "TimeoutError")
-  );
+  if (err === null || typeof err !== "object") return false;
+  const name = (err as { name?: unknown }).name;
+  return name === "AbortError" || name === "TimeoutError";
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "0.0.11-beta.4",
+  "version": "0.0.11-beta.6",
   "description": "The easiest way to manage policies that keep your AI agents reliable, on-task, and running autonomously — for Claude Code & the Agents SDK",
   "bin": {
     "failproofai": "./dist/cli.mjs"

package/src/audit/archetypes.ts

@@ -820,9 +820,20 @@ const ARCHITECT_CAUTION_MIN = 0.35;
 /** Architect only applies when cowboy isn't itself over-indexing. */
 const ARCHITECT_COWBOY_MAX_LIFT = 1.0;
 /** Normalised lift entropy above this (with enough distinct clusters lit)
- *  → goldfish (genuinely scattered). */
-const GOLDFISH_ENTROPY = 0.75;
+ *  → goldfish (genuinely scattered). Retuned from 0.75 → 0.70 when the lift
+ *  denominator moved from catalog weights to empirical firing shares
+ *  (see features.ts BASELINE_SHARE): the empirical baseline reshapes the lift
+ *  vector, and 0.75 left goldfish under-reachable (< 4% of the population). */
+const GOLDFISH_ENTROPY = 0.70;
 const GOLDFISH_MIN_NONZERO = 4;
+/** Goldfish also requires the SECOND-highest cluster lift to be meaningfully
+ *  above baseline. Entropy on its own is satisfied by a uniform-at-baseline
+ *  lift vector (every cluster firing at typical ambient rate → all lifts ≈ 1.0
+ *  → entropy = max), which would otherwise collapse every "typical" agent onto
+ *  goldfish. Requiring secondLift > 1.3 means at least TWO clusters are
+ *  genuinely over-indexing — the actual definition of scatter, not just
+ *  "average-volume noise spread across many clusters". */
+const GOLDFISH_MIN_SECOND_LIFT = 1.3;
 /** When the top-two lifts are within this ratio, resolve deterministically by
  *  the behaviour fingerprint instead of always taking the arithmetic winner —
  *  spreads near-ties across the population without any RNG. */
@@ -888,9 +899,18 @@ export function classifyAgent(result: AuditResult, seed = ""): Classification {
     return { archetype: "architect", secondary: ARCHETYPES.architect.secondary, ...base };
   }
 
-  // 3. goldfish — genuinely scattered across many clusters.
+  // 3. goldfish — genuinely scattered across many clusters. Both the entropy
+  //    and the second-lift gate must clear: entropy catches "many clusters
+  //    contribute", secondLift catches "the contribution is actually elevated
+  //    relative to ambient". Without secondLift, a high-volume average user
+  //    (lifts ≈ 1.0 everywhere) passes the entropy gate and collapses onto
+  //    goldfish — that's the bug fixed alongside this gate.
   const nonZero = MAPPABLE_KEYS.filter((k) => f.clusterLift[k] > 0).length;
-  if (nonZero >= GOLDFISH_MIN_NONZERO && f.entropy > GOLDFISH_ENTROPY) {
+  if (
+    nonZero >= GOLDFISH_MIN_NONZERO &&
+    f.entropy > GOLDFISH_ENTROPY &&
+    f.secondLift >= GOLDFISH_MIN_SECOND_LIFT
+  ) {
     const strongest = rankByLift(f, MAPPABLE_KEYS)[0];
     return { archetype: "goldfish", secondary: strongest, ...base };
   }