failproofai 0.0.13-beta.2 → 0.0.14-beta.0

package/src/hooks/policy-presets.ts

@@ -0,0 +1,71 @@
+/**
+ * Curated policy bundles for the `failproofai config` wizard.
+ *
+ * Presets are resolved against BUILTIN_POLICIES by category (+ optional extras)
+ * so that adding a new builtin to an existing category automatically flows into
+ * the matching preset — the wizard stays in sync with the policy catalog with no
+ * manual list maintenance. Order here is the order shown in the wizard (before
+ * the "Everything" and "Custom…" entries).
+ */
+import { BUILTIN_POLICIES } from "./builtin-policies";
+
+export interface PolicyPreset {
+  id: string;
+  label: string;
+  description: string;
+  /** Categories whose (non-beta) policies are included in this preset. */
+  categories: string[];
+  /** Extra policy names to include beyond the category members. */
+  extra?: string[];
+}
+
+export const POLICY_PRESETS: PolicyPreset[] = [
+  {
+    id: "secrets",
+    label: "Secrets & data",
+    description:
+      "Redact secrets in tool output, block .env & secret-file writes, keep reads inside the repo",
+    categories: ["Sanitize", "Environment"],
+    extra: ["block-secrets-write"],
+  },
+  {
+    id: "git",
+    label: "Git safety",
+    description: "Block force-push & pushes to main, warn on history-rewriting git ops",
+    categories: ["Git"],
+  },
+  {
+    id: "ship",
+    label: "Ship discipline",
+    description:
+      "Don't let the agent finish until changes are committed, pushed, PR'd and CI is green",
+    categories: ["Workflow"],
+  },
+  {
+    id: "infra",
+    label: "Cloud & infra",
+    description: "Block kubectl / terraform / aws / gcloud / az / helm / gh pipeline commands",
+    categories: ["Infra Commands"],
+  },
+];
+
+/** Resolve a preset id to the concrete list of non-beta builtin policy names it
+ * enables. (Beta policies are wizard-excluded by design; reintroduce an
+ * includeBeta flag here if a `--beta` wizard path ever lands.) */
+export function resolvePreset(id: string): string[] {
+  const preset = POLICY_PRESETS.find((p) => p.id === id);
+  if (!preset) return [];
+  const cats = new Set(preset.categories);
+  const fromCategories = BUILTIN_POLICIES.filter(
+    (p) => !p.beta && cats.has(p.category),
+  ).map((p) => p.name);
+  const extras = (preset.extra ?? []).filter((name) =>
+    BUILTIN_POLICIES.some((p) => p.name === name && !p.beta),
+  );
+  return [...new Set([...fromCategories, ...extras])];
+}
+
+/** Every non-beta builtin policy (the "Everything" option). */
+export function resolveEverything(): string[] {
+  return BUILTIN_POLICIES.filter((p) => !p.beta).map((p) => p.name);
+}

package/src/hooks/resolve-cwd.ts

@@ -13,7 +13,7 @@
  *     the dashboard renders an em-dash, and `readMergedHooksConfig(cwd)` /
  *     `loadAllCustomHooks({ sessionCwd })` skip project-scope discovery.
  *
- *   • Claude / Codex / Copilot / Gemini / Pi / OpenCode: stdin's top-level
+ *   • Claude / Codex / Copilot / Pi / OpenCode: stdin's top-level
  *     `cwd` is reliable for every event; passthrough.
  *
  * Mirrors the dispatch pattern of `resolve-permission-mode.ts` and

package/src/hooks/resolve-permission-mode.ts

@@ -32,10 +32,6 @@
  *     `tool_call` handlers always run with the same authority. Falls back to
  *     "default" via the same final branch as Copilot/Cursor.
  *
- *   • Gemini CLI: hook payload doesn't carry a permission-mode field today.
- *     Falls back to "default" via the same final branch as Copilot/Cursor/
- *     OpenCode/Pi. Revisit when Gemini's hook protocol exposes a per-session
- *     authority signal (the docs as of 2026-04-13 do not).
  */
 import { readFileSync } from "node:fs";
 import { findCodexTranscript } from "../../lib/codex-sessions";
@@ -54,7 +50,7 @@ export function resolvePermissionMode(
     return resolveCodexMode(sessionId) ?? "default";
   }
 
-  // copilot, cursor, opencode, pi, gemini, unknown integrations, or codex without a sessionId
+  // copilot, cursor, opencode, pi, unknown integrations, or codex without a sessionId
   return "default";
 }
 

package/src/hooks/resolve-transcript-path.ts

@@ -22,10 +22,6 @@
  *   • Pi: shim doesn't forward transcript_path. Discover at
  *     ~/.pi/agent/sessions/<encodedCwd>/<isoTimestamp>_<sessionId>.jsonl.
  *
- *   • Gemini: docs say stdin carries transcript_path, but coverage is uneven
- *     across versions. Trust stdin first; fall back to discovery under
- *     ~/.gemini/tmp/<projectHash>/chats/<sessionId>.json.
- *
  * Mirrors the dispatch pattern of `resolve-permission-mode.ts`. Each
  * `find*Transcript` helper performs its own existsSync + path-traversal
  * containment check, so passing in a malformed sessionId is safe (returns
@@ -35,7 +31,8 @@ import { findCodexTranscript } from "../../lib/codex-sessions";
 import { findCopilotTranscript } from "../../lib/copilot-sessions";
 import { findCursorTranscript } from "../../lib/cursor-sessions";
 import { findPiTranscript } from "../../lib/pi-sessions";
-import { findGeminiTranscript } from "../../lib/gemini-sessions";
+import { findFactoryTranscript } from "../../lib/factory-sessions";
+import { findAntigravityTranscript } from "../../lib/antigravity-sessions";
 import type { IntegrationType } from "./types";
 
 export function resolveTranscriptPath(
@@ -59,14 +56,35 @@ export function resolveTranscriptPath(
       return findCursorTranscript(sessionId) ?? undefined;
     case "pi":
       return findPiTranscript(sessionId) ?? undefined;
-    case "gemini":
-      return findGeminiTranscript(sessionId) ?? undefined;
+    case "factory":
+      // Factory writes real JSONL at
+      // ~/.factory/sessions/<encoded-cwd>/<sessionId>.jsonl (Claude-style).
+      return findFactoryTranscript(sessionId) ?? undefined;
+    case "antigravity":
+      // Antigravity writes real JSONL at ~/.gemini/antigravity-cli/brain/
+      // <conversationId>/.system_generated/logs/transcript_full.jsonl.
+      return findAntigravityTranscript(sessionId) ?? undefined;
+    case "devin":
+      // Devin keeps sessions in SQLite (~/.local/share/devin/cli/sessions.db);
+      // there is no on-disk transcript file, so hand back a virtual path (like
+      // opencode) — audit/download read the DB directly.
+      return `devin-db://${sessionId}`;
+    case "goose":
+      // Goose keeps sessions in SQLite (~/.local/share/goose/sessions/sessions.db);
+      // its live-hook payload carries no transcript file, so hand back a virtual
+      // path (like devin) — audit/download read the DB directly.
+      return `goose-db://${sessionId}`;
     case "opencode":
       return `opencode-db://${sessionId}`;
     case "hermes":
       // Hermes live-hook payloads carry no transcript file; the audit path
       // reads sessions straight from ~/.hermes/state.db (see hermes-sessions.ts).
       return undefined;
+    case "openclaw":
+      // OpenClaw's plugin shim forwards transcript_path in stdin (handled by the
+      // early return above); its audit path reads the real JSONL sessions
+      // directly via lib/openclaw-sessions.ts, so no discovery is needed here.
+      return undefined;
     default:
       return undefined;
   }

package/src/hooks/tool-name-canonicalize.ts

@@ -9,14 +9,22 @@ import type { IntegrationType } from "./types";
 import {
   CODEX_TOOL_MAP,
   COPILOT_TOOL_MAP,
+  COPILOT_TOOL_INPUT_MAP,
   CURSOR_TOOL_MAP,
   OPENCODE_TOOL_MAP,
   OPENCODE_TOOL_INPUT_MAP,
   PI_TOOL_MAP,
   PI_TOOL_INPUT_MAP,
-  GEMINI_TOOL_MAP,
   HERMES_TOOL_MAP,
   HERMES_TOOL_INPUT_MAP,
+  OPENCLAW_TOOL_MAP,
+  OPENCLAW_TOOL_INPUT_MAP,
+  FACTORY_TOOL_MAP,
+  DEVIN_TOOL_MAP,
+  ANTIGRAVITY_TOOL_MAP,
+  ANTIGRAVITY_TOOL_INPUT_MAP,
+  GOOSE_TOOL_MAP,
+  GOOSE_TOOL_INPUT_MAP,
 } from "./types";
 
 /**
@@ -32,10 +40,22 @@ export function canonicalizeToolName(
   if (cli === "copilot") return COPILOT_TOOL_MAP[raw] ?? raw;
   if (cli === "cursor") return CURSOR_TOOL_MAP[raw] ?? raw;
   if (cli === "codex") return CODEX_TOOL_MAP[raw] ?? raw;
-  if (cli === "gemini") return GEMINI_TOOL_MAP[raw] ?? raw;
   if (cli === "opencode") return OPENCODE_TOOL_MAP[raw] ?? raw;
   if (cli === "pi") return PI_TOOL_MAP[raw] ?? raw;
   if (cli === "hermes") return HERMES_TOOL_MAP[raw] ?? raw;
+  if (cli === "openclaw") return OPENCLAW_TOOL_MAP[raw] ?? raw;
+  // Factory droid: Execute→Bash, Create→Write, FetchUrl→WebFetch, … (verified
+  // live against droid v0.171.0). tool_input keys are already canonical.
+  if (cli === "factory") return FACTORY_TOOL_MAP[raw] ?? raw;
+  // Devin CLI: exec→Bash (verified live against devin v3000.1.27).
+  // tool_input.command is already canonical.
+  if (cli === "devin") return DEVIN_TOOL_MAP[raw] ?? raw;
+  // Antigravity CLI: run_command→Bash (verified agy v1.1.2), view_file→Read, …
+  // (best-effort). tool_input keys are PascalCase → ANTIGRAVITY_TOOL_INPUT_MAP.
+  if (cli === "antigravity") return ANTIGRAVITY_TOOL_MAP[raw] ?? raw;
+  // Goose: shell→Bash, write/edit/view→file ops, todo__todo_write→TodoWrite, …
+  // (verified live against goose v1.43.0). Handles bare + `<ext>__<tool>` names.
+  if (cli === "goose") return GOOSE_TOOL_MAP[raw] ?? raw;
   return raw;
 }
 
@@ -57,11 +77,24 @@ export function canonicalizeToolInput(
     return rawInput;
   }
   let perToolMap: Record<string, string> | undefined;
-  if (cli === "opencode") perToolMap = OPENCODE_TOOL_INPUT_MAP[toolName];
+  // Copilot file tools deliver `path` (+ Write's `file_text`, Edit's
+  // `old_str`/`new_str`); map to canonical keys so path/content builtins fire
+  // (verified live against Copilot CLI 1.0.71).
+  if (cli === "copilot") perToolMap = COPILOT_TOOL_INPUT_MAP[toolName];
+  else if (cli === "opencode") perToolMap = OPENCODE_TOOL_INPUT_MAP[toolName];
   else if (cli === "pi") perToolMap = PI_TOOL_INPUT_MAP[toolName];
   // Hermes read_file/write_file/patch deliver the file path as `path`; map it to
   // `file_path` so path/content builtins fire (verified against a live state.db).
   else if (cli === "hermes") perToolMap = HERMES_TOOL_INPUT_MAP[toolName];
+  // OpenClaw file tools (read/write/edit) deliver the path as `path`; exec
+  // already delivers `command`. Map path → file_path so path builtins fire.
+  else if (cli === "openclaw") perToolMap = OPENCLAW_TOOL_INPUT_MAP[toolName];
+  // Antigravity's run_command args are PascalCase (`CommandLine`, `Cwd`); map
+  // to `command`/`cwd` so Bash builtins fire (verified agy v1.1.2).
+  else if (cli === "antigravity") perToolMap = ANTIGRAVITY_TOOL_INPUT_MAP[toolName];
+  // Goose file tools (write/edit/view) deliver the path as `path`, read_image as
+  // `source`; map to `file_path` so path builtins fire (verified goose v1.43.0).
+  else if (cli === "goose") perToolMap = GOOSE_TOOL_INPUT_MAP[toolName];
   if (!perToolMap) return rawInput;
   const out: Record<string, unknown> = {};
   for (const [k, v] of Object.entries(rawInput as Record<string, unknown>)) {