failproofai 0.0.13 → 0.0.14-beta.1

package/.next/standalone/openclaw-plugin/index.js

@@ -0,0 +1,223 @@
+/**
+ * failproofai policy bridge for OpenClaw (openclaw gateway).
+ *
+ * Loaded in-process by the gateway (registered via `plugins.load.paths` +
+ * `plugins.entries.failproofai` in ~/.openclaw/openclaw.json). It subscribes to
+ * OpenClaw's typed PLUGIN hooks — the only surface that can block; OpenClaw's
+ * file-based "internal hooks" are observation-only — and forwards each to the
+ * failproofai binary as `failproofai --hook <event> --cli openclaw`. failproofai
+ * prints a flat `{permission, reason}` verdict on stdout; this shim maps it to
+ * each hook's native return shape.
+ *
+ * Marker comment for failproofai's installer detection (do not remove):
+ *   __failproofai_hook__: true
+ *
+ * Design notes (verified live against openclaw v2026.7.1):
+ *  • ASYNC spawn, never spawnSync — the gateway is a long-running multi-channel
+ *    process; a synchronous spawn on every hook would stall every channel.
+ *    30s guard timer; fail-open on any error (never block on infra failure).
+ *  • Raw forwarding — we send the raw tool name / params and a Claude-shaped
+ *    stdin (params→tool_input, toolName→tool_name, transcriptPath→
+ *    transcript_path, stopHookActive→stop_hook_active, sessionKey→session_id).
+ *    The binary canonicalizes via OPENCLAW_* maps (single source of truth); the
+ *    shim ships NO inline maps (unlike the OpenCode/Pi shims).
+ *  • No top-level `await` — OpenClaw's plugin loader rejects it; all async work
+ *    happens inside register()'s handlers.
+ *
+ * Binary resolution mirrors pi-extension/index.ts: prefer the bundled
+ * dist/cli.mjs (node-compatible), fall back to bin/failproofai.mjs with bun for
+ * dev; honor FAILPROOFAI_BINARY_OVERRIDE. Paths resolve relative to this file
+ * via import.meta.url (the gateway spawns plugins with an undefined cwd).
+ */
+import { definePluginEntry } from "openclaw/plugin-sdk/plugin-entry";
+import { spawn } from "node:child_process";
+import { existsSync } from "node:fs";
+import { resolve, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const HERE = dirname(fileURLToPath(import.meta.url));
+const DIST_BIN = resolve(HERE, "..", "dist", "cli.mjs");
+const SRC_BIN = resolve(HERE, "..", "bin", "failproofai.mjs");
+
+function resolveSpawn() {
+  if (process.env.FAILPROOFAI_BINARY_OVERRIDE) {
+    return { cmd: "node", args: [process.env.FAILPROOFAI_BINARY_OVERRIDE] };
+  }
+  if (existsSync(DIST_BIN)) {
+    return { cmd: "node", args: [DIST_BIN] };
+  }
+  return { cmd: "bun", args: [SRC_BIN] };
+}
+
+function debug(msg) {
+  if (process.env.FAILPROOFAI_OPENCLAW_DEBUG === "1") {
+    process.stderr.write(`[failproofai-openclaw-shim] ${msg}\n`);
+  }
+}
+
+/**
+ * Spawn `failproofai --hook <rawEvent> --cli openclaw`, write the JSON payload
+ * to stdin, and resolve the parsed flat `{permission, reason}` verdict. Async +
+ * fail-open: any spawn/parse error or timeout resolves to `{permission:"allow"}`
+ * so a failproofai fault never blocks the gateway.
+ */
+function callPolicy(rawEvent, payload) {
+  return new Promise((done) => {
+    const { cmd, args } = resolveSpawn();
+    let child;
+    try {
+      child = spawn(cmd, [...args, "--hook", rawEvent, "--cli", "openclaw"], {
+        stdio: ["pipe", "pipe", "pipe"],
+      });
+    } catch (err) {
+      debug(`spawn threw: ${err && err.message ? err.message : String(err)}`);
+      done({ permission: "allow" });
+      return;
+    }
+    let out = "";
+    let settled = false;
+    const finish = (verdict) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      done(verdict);
+    };
+    const timer = setTimeout(() => {
+      debug(`timeout on ${rawEvent}; killing child`);
+      try { child.kill(); } catch { /* ignore */ }
+      finish({ permission: "allow" });
+    }, 30_000);
+    child.stdout.on("data", (d) => { out += d; });
+    child.on("error", (err) => {
+      debug(`child error: ${err && err.message ? err.message : String(err)}`);
+      finish({ permission: "allow" });
+    });
+    child.on("close", () => {
+      const stdout = out.trim();
+      if (!stdout) { finish({ permission: "allow" }); return; }
+      try {
+        finish(JSON.parse(stdout));
+      } catch (err) {
+        debug(`parse error: ${err && err.message ? err.message : String(err)}`);
+        finish({ permission: "allow" });
+      }
+    });
+    try {
+      child.stdin.end(JSON.stringify(payload));
+    } catch (err) {
+      debug(`stdin write failed: ${err && err.message ? err.message : String(err)}`);
+      finish({ permission: "allow" });
+    }
+  });
+}
+
+/** Claude-shaped stdin base. Extra keys are ignored by the binary's payload
+ *  parser; they're forwarded for future use / activity attribution. */
+function baseMeta(payload, ctx) {
+  const p = payload || {};
+  const c = ctx || {};
+  return {
+    session_id: c.sessionId ?? p.sessionId ?? c.sessionKey ?? p.sessionKey,
+    cwd: p.cwd ?? c.workspaceDir ?? process.cwd(),
+    transcript_path: p.transcriptPath,
+    stop_hook_active: p.stopHookActive === true,
+    openclaw: {
+      agentId: c.agentId,
+      sessionKey: c.sessionKey ?? p.sessionKey,
+      runId: c.runId ?? p.runId,
+      provider: p.provider,
+      model: p.model,
+    },
+  };
+}
+
+export default definePluginEntry({
+  id: "failproofai",
+  name: "failproofai",
+  description: "Real-time policy enforcement for OpenClaw by failproofai",
+  register(api) {
+    // before_tool_call → PreToolUse. Full deny: return {block:true, blockReason}.
+    api.on(
+      "before_tool_call",
+      async (payload, ctx) => {
+        const p = payload || {};
+        const verdict = await callPolicy("before_tool_call", {
+          ...baseMeta(payload, ctx),
+          tool_name: p.toolName,
+          tool_input: p.params,
+          hook_event_name: "before_tool_call",
+        });
+        if (verdict.permission === "deny") {
+          return { block: true, blockReason: verdict.reason || "Blocked by failproofai" };
+        }
+        return undefined;
+      },
+      { priority: 100, timeoutMs: 60_000 },
+    );
+
+    // before_agent_run → UserPromptSubmit. Deny: return {outcome:"block", reason}.
+    api.on(
+      "before_agent_run",
+      async (payload, ctx) => {
+        const p = payload || {};
+        const verdict = await callPolicy("before_agent_run", {
+          ...baseMeta(payload, ctx),
+          prompt: p.prompt,
+          hook_event_name: "before_agent_run",
+        });
+        if (verdict.permission === "deny") {
+          return { outcome: "block", reason: verdict.reason || "Blocked by failproofai" };
+        }
+        return undefined;
+      },
+      { priority: 100, timeoutMs: 60_000 },
+    );
+
+    // before_agent_finalize → Stop. The real turn-end gate: a deny becomes a
+    // revise so the agent runs another pass. The evaluator supplies the
+    // MANDATORY ACTION wording; the payload's stop_hook_active guards the
+    // require-*-before-stop builtins against infinite loops.
+    api.on(
+      "before_agent_finalize",
+      async (payload, ctx) => {
+        const verdict = await callPolicy("before_agent_finalize", {
+          ...baseMeta(payload, ctx),
+          hook_event_name: "before_agent_finalize",
+        });
+        if (verdict.permission === "deny") {
+          return { action: "revise", reason: verdict.reason || "Action required by failproofai" };
+        }
+        return undefined;
+      },
+      { priority: 100, timeoutMs: 60_000 },
+    );
+
+    // Observation hooks — await so activity ordering is stable, ignore verdict.
+    // after_tool_call → PostToolUse; session_start/end → SessionStart/End;
+    // subagent_ended → SubagentStop (obs only); before_compaction → PreCompact.
+    for (const ev of [
+      "after_tool_call",
+      "session_start",
+      "session_end",
+      "subagent_ended",
+      "before_compaction",
+    ]) {
+      api.on(
+        ev,
+        async (payload, ctx) => {
+          const p = payload || {};
+          await callPolicy(ev, {
+            ...baseMeta(payload, ctx),
+            tool_name: p.toolName,
+            tool_input: p.params,
+            tool_response: p.result,
+            reason: p.reason,
+            hook_event_name: ev,
+          });
+          return undefined;
+        },
+        { priority: 100, timeoutMs: 60_000 },
+      );
+    }
+  },
+});

package/.next/standalone/openclaw-plugin/openclaw.plugin.json

@@ -0,0 +1,6 @@
+{
+  "id": "failproofai",
+  "name": "failproofai",
+  "description": "Real-time policy enforcement for OpenClaw by failproofai",
+  "configSchema": {}
+}

package/.next/standalone/openclaw-plugin/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "@failproofai/openclaw-plugin",
+  "version": "0.0.1",
+  "description": "failproofai policy bridge for OpenClaw (openclaw gateway)",
+  "type": "module",
+  "main": "./index.js",
+  "private": true,
+  "keywords": [
+    "openclaw-plugin",
+    "failproofai"
+  ]
+}

package/.next/standalone/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "0.0.13",
+  "version": "0.0.14-beta.1",
   "description": "The easiest way to manage policies that keep your AI agents reliable, on-task, and running autonomously — for Claude Code & the Agents SDK",
   "bin": {
     "failproofai": "./dist/cli.mjs"
@@ -11,6 +11,7 @@
     "scripts/",
     "lib/",
     "pi-extension/",
+    "openclaw-plugin/",
     ".next/standalone/",
     "dist/",
     "README.md"
@@ -29,8 +30,6 @@
     "test": "vitest",
     "test:run": "vitest run",
     "lint": "eslint . --config eslint.config.mjs",
-    "postinstall": "node scripts/postinstall.mjs",
-    "preuninstall": "node scripts/preuninstall.mjs",
     "prepare": "bun run build",
     "test:e2e": "vitest run --config vitest.config.e2e.mts",
     "test:e2e:watch": "vitest --config vitest.config.e2e.mts",

package/.next/standalone/server.js

@@ -9,7 +9,7 @@ const currentPort = parseInt(process.env.PORT, 10) || 3000
 const hostname = process.env.HOSTNAME || '0.0.0.0'
 
 let keepAliveTimeout = parseInt(process.env.KEEP_ALIVE_TIMEOUT, 10)
-const nextConfig = {"env":{"NEXT_PUBLIC_APP_VERSION":"0.0.13"},"typescript":{"ignoreBuildErrors":false},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.ts","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/work/failproofai/failproofai","cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":false,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"partialFallbacks":false,"dynamicOnHover":false,"varyParams":false,"prefetchInlining":false,"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":3,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"imgOptSkipMetadata":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"viewTransition":false,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":false,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":false,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.ts","outputFileTracingExcludes":{"*":["node_modules/@img/**","node_modules/sharp/**"]},"turbopack":{"root":"/home/runner/work/failproofai/failproofai"},"distDirRoot":".next"}
+const nextConfig = {"env":{"NEXT_PUBLIC_APP_VERSION":"0.0.14-beta.1"},"typescript":{"ignoreBuildErrors":false},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.ts","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/work/failproofai/failproofai","cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":false,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"partialFallbacks":false,"dynamicOnHover":false,"varyParams":false,"prefetchInlining":false,"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":3,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"imgOptSkipMetadata":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"viewTransition":false,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":false,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":false,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.ts","outputFileTracingExcludes":{"*":["node_modules/@img/**","node_modules/sharp/**"]},"turbopack":{"root":"/home/runner/work/failproofai/failproofai"},"distDirRoot":".next"}
 
 process.env.__NEXT_PRIVATE_STANDALONE_CONFIG = JSON.stringify(nextConfig)
 

package/README.md

@@ -5,7 +5,7 @@
 [![npm](https://img.shields.io/npm/v/failproofai?style=flat-square&color=CB3837)](https://www.npmjs.com/package/failproofai)
 [![CI](https://img.shields.io/github/actions/workflow/status/failproofai/failproofai/ci.yml?branch=main&style=flat-square&label=CI)](https://github.com/failproofai/failproofai/actions)
 [![Supply Chain](https://img.shields.io/badge/supply%20chain-secure-brightgreen?style=flat-square)](https://github.com/failproofai/failproofai/actions/workflows/osv-scanner.yml)
-[![Discord](https://img.shields.io/badge/Discord-join%20us-5865F2?style=flat-square&logo=discord)](https://discord.gg/2zjBZP7yQJ)
+[![Discord](https://img.shields.io/badge/Discord-join%20us-5865F2?style=flat-square&logo=discord)](https://discord.befailproof.ai/)
 [![Docs](https://img.shields.io/badge/docs-befailproof.ai-002CA7?style=flat-square)](https://docs.befailproof.ai/introduction)
 [![License](https://img.shields.io/badge/license-MIT%20%2B%20Commons%20Clause-blue?style=flat-square)](./LICENSE)
 
@@ -25,67 +25,99 @@ before they become incidents. Zero latency. Runs locally.
 
 ## Supported agent CLIs
 
-<p align="center">
-  <a href="https://claude.com/claude-code" title="Claude Code">
-    <img src="assets/logos/claude.svg" alt="Claude Code" width="64" height="64" />
-  </a>
-  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-  <a href="https://developers.openai.com/codex" title="OpenAI Codex">
-    <picture>
-      <source media="(prefers-color-scheme: dark)" srcset="assets/logos/openai-dark.svg" />
-      <img src="assets/logos/openai-light.svg" alt="OpenAI Codex" width="64" height="64" />
-    </picture>
-  </a>
-  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-  <a href="https://docs.github.com/en/copilot/how-tos/copilot-cli/customize-copilot/use-hooks" title="GitHub Copilot CLI">
-    <picture>
-      <source media="(prefers-color-scheme: dark)" srcset="assets/logos/copilot-dark.svg" />
-      <img src="assets/logos/copilot-light.svg" alt="GitHub Copilot" width="64" height="64" />
-    </picture>
-  </a>
-  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-  <a href="https://cursor.com/docs/hooks" title="Cursor Agent CLI">
-    <picture>
-      <source media="(prefers-color-scheme: dark)" srcset="assets/logos/cursor-dark.svg" />
-      <img src="assets/logos/cursor-light.svg" alt="Cursor Agent" width="64" height="64" />
-    </picture>
-  </a>
-</p>
-<p align="center">
-  <a href="https://opencode.ai/docs/plugins/" title="OpenCode">
-    <picture>
-      <source media="(prefers-color-scheme: dark)" srcset="assets/logos/opencode-dark.svg" />
-      <img src="assets/logos/opencode-light.svg" alt="OpenCode" width="64" height="64" />
-    </picture>
-  </a>
-  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-  <a href="https://pi.dev" title="Pi (pi-coding-agent)">
-    <picture>
-      <source media="(prefers-color-scheme: dark)" srcset="assets/logos/pi-dark.svg" />
-      <img src="assets/logos/pi-light.svg" alt="Pi" width="64" height="64" />
-    </picture>
-  </a>
-  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-  <a href="https://geminicli.com/" title="Gemini CLI">
-    <picture>
-      <source media="(prefers-color-scheme: dark)" srcset="assets/logos/gemini-dark.svg" />
-      <img src="assets/logos/gemini-light.svg" alt="Gemini CLI" width="64" height="64" />
-    </picture>
-  </a>
-  &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
-  <a href="https://github.com/FailproofAI/failproofai/blob/main/docs/configuration.mdx" title="Hermes (hermes-agent)">
-    <picture>
-      <source media="(prefers-color-scheme: dark)" srcset="assets/logos/hermes-dark.svg" />
-      <img src="assets/logos/hermes-light.svg" alt="Hermes" width="64" height="64" />
-    </picture>
-  </a>
-</p>
-
-> Install hooks for one or any combination: `failproofai policies --install --cli opencode pi gemini` (or `--cli claude codex copilot cursor opencode pi gemini hermes`). Omit `--cli` to auto-detect installed CLIs and prompt.
->
-> **Hermes** (hermes-agent, a Slack/Telegram gateway) is supported for both **live-hook enforcement** (`--cli hermes` — one install intercepts tool calls from every platform and subagent) and offline **audit** replay of its gateway sessions from the single `~/.hermes/state.db`.
-
----
+<!-- A 6-column table instead of inline <img> runs: table columns never re-wrap,
+     so the grid stays 2×6 at any window width (scrolling on very narrow screens
+     instead of collapsing into ragged orphan rows). -->
+<table align="center">
+  <tr>
+    <td align="center" width="96">
+      <a href="https://claude.com/claude-code" title="Claude Code">
+        <img src="assets/logos/claude.svg" alt="Claude Code" width="56" height="56" />
+      </a>
+    </td>
+    <td align="center" width="96">
+      <a href="https://learn.chatgpt.com" title="OpenAI Codex">
+        <picture>
+          <source media="(prefers-color-scheme: dark)" srcset="assets/logos/openai-dark.svg" />
+          <img src="assets/logos/openai-light.svg" alt="OpenAI Codex" width="56" height="56" />
+        </picture>
+      </a>
+    </td>
+    <td align="center" width="96">
+      <a href="https://github.com/features/copilot/cli" title="GitHub Copilot CLI">
+        <picture>
+          <source media="(prefers-color-scheme: dark)" srcset="assets/logos/copilot-dark.svg" />
+          <img src="assets/logos/copilot-light.svg" alt="GitHub Copilot" width="56" height="56" />
+        </picture>
+      </a>
+    </td>
+    <td align="center" width="96">
+      <a href="https://cursor.com" title="Cursor Agent CLI">
+        <picture>
+          <source media="(prefers-color-scheme: dark)" srcset="assets/logos/cursor-dark.svg" />
+          <img src="assets/logos/cursor-light.svg" alt="Cursor Agent" width="56" height="56" />
+        </picture>
+      </a>
+    </td>
+    <td align="center" width="96">
+      <a href="https://opencode.ai/" title="OpenCode">
+        <picture>
+          <source media="(prefers-color-scheme: dark)" srcset="assets/logos/opencode-dark.svg" />
+          <img src="assets/logos/opencode-light.svg" alt="OpenCode" width="56" height="56" />
+        </picture>
+      </a>
+    </td>
+    <td align="center" width="96">
+      <a href="https://pi.dev/" title="Pi (pi-coding-agent)">
+        <picture>
+          <source media="(prefers-color-scheme: dark)" srcset="assets/logos/pi-dark.svg" />
+          <img src="assets/logos/pi-light.svg" alt="Pi" width="56" height="56" />
+        </picture>
+      </a>
+    </td>
+  </tr>
+  <tr>
+    <td align="center" width="96">
+      <a href="https://hermes-agent.nousresearch.com/" title="Hermes (hermes-agent)">
+        <picture>
+          <source media="(prefers-color-scheme: dark)" srcset="assets/logos/hermes-dark.svg" />
+          <img src="assets/logos/hermes-light.svg" alt="Hermes" width="56" height="56" />
+        </picture>
+      </a>
+    </td>
+    <td align="center" width="96">
+      <a href="https://openclaw.ai/" title="OpenClaw (openclaw gateway)">
+        <img src="assets/logos/openclaw.svg" alt="OpenClaw" width="56" height="56" />
+      </a>
+    </td>
+    <td align="center" width="96">
+      <a href="https://factory.ai/" title="Factory Droid (droid)">
+        <picture>
+          <source media="(prefers-color-scheme: dark)" srcset="assets/logos/factory-dark.png" />
+          <img src="assets/logos/factory-light.png" alt="Factory Droid" width="56" height="56" />
+        </picture>
+      </a>
+    </td>
+    <td align="center" width="96">
+      <a href="https://devin.ai" title="Devin CLI (Cognition)">
+        <img src="assets/logos/devin.svg" alt="Devin CLI" width="56" height="56" />
+      </a>
+    </td>
+    <td align="center" width="96">
+      <a href="https://antigravity.google" title="Antigravity CLI (agy)">
+        <img src="assets/logos/antigravity.svg" alt="Antigravity CLI" width="56" height="56" />
+      </a>
+    </td>
+    <td align="center" width="96">
+      <a href="https://goose-docs.ai/" title="Goose (codename goose)">
+        <picture>
+          <source media="(prefers-color-scheme: dark)" srcset="assets/logos/goose-dark.svg" />
+          <img src="assets/logos/goose-light.svg" alt="Goose" width="56" height="56" />
+        </picture>
+      </a>
+    </td>
+  </tr>
+</table>
 
 ## Install