failproofai 0.0.13 → 0.0.14-beta.1

package/bin/failproofai.mjs

@@ -36,6 +36,9 @@ const args = process.argv.slice(2);
 
 // Normalize 'p' → 'policies' (shorthand alias)
 if (args[0] === "p") args[0] = "policies";
+// Normalize 'configure' / 'setup' → 'config' (aliases), so every later check
+// (SUBCOMMANDS, dispatch) mentions only the canonical name.
+if (args[0] === "configure" || args[0] === "setup") args[0] = "config";
 
 // Lightweight telemetry helper for CLI lifecycle events. Lazy-loads to avoid
 // pulling in the hook-telemetry / telemetry-id modules on the fast --hook path.
@@ -65,7 +68,7 @@ const hookIdx = args.indexOf("--hook");
 if (hookIdx >= 0) {
   if (!args[hookIdx + 1]) {
     console.error("Error: Missing event type after --hook");
-    console.error("Usage: failproofai --hook <event> [--cli <claude|codex|copilot|cursor|opencode|pi|gemini|hermes>]");
+    console.error("Usage: failproofai --hook <event> [--cli <claude|codex|copilot|cursor|opencode|pi|hermes|openclaw|factory|devin|antigravity|goose>]");
     process.exit(1);
   }
   const eventType = args[hookIdx + 1];
@@ -81,14 +84,20 @@ if (hookIdx >= 0) {
       || cliArg === "cursor"
       || cliArg === "opencode"
       || cliArg === "pi"
-      || cliArg === "gemini"
       || cliArg === "hermes"
+      || cliArg === "openclaw"
+      || cliArg === "factory"
+      || cliArg === "devin"
+      || cliArg === "antigravity"
+      || cliArg === "goose"
     )
       ? cliArg
       : "claude";
   try {
     const { handleHookEvent } = await import("../src/hooks/handler");
     const exitCode = await handleHookEvent(eventType, cli);
+    // handleHookEvent already flushes its own telemetry before returning; this
+    // is the normal, reliable exit.
     process.exit(exitCode);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -97,6 +106,13 @@ if (hookIdx >= 0) {
       cli,
       error_type: err instanceof Error ? err.name : "unknown",
     });
+    // handleHookEvent threw before its own flush ran, so any events it fired
+    // with `void trackHookEvent(...)` are still in flight — drain them (plus the
+    // hook_dispatch_error above) before exiting so they aren't dropped.
+    try {
+      const { flushHookTelemetry } = await import("../src/hooks/hook-telemetry");
+      await flushHookTelemetry();
+    } catch {}
     console.error(`Unexpected error: ${msg}`);
     process.exit(2);
   }
@@ -108,8 +124,18 @@ if (hookIdx >= 0) {
  * Error     → unexpected; shows message only, exits 2
  */
 async function runCli() {
+  // Report a fresh install / upgrade. Deliberately here rather than at module
+  // scope: everything above this point is the --hook fast path, which runs on
+  // every tool call. No-ops after the first run on a given version.
+  try {
+    const { maybeReportInstall } = await import("../lib/install-check");
+    await maybeReportInstall(version);
+  } catch {
+    // never block a command on reporting
+  }
+
   // --help / -h  (only when not inside a subcommand that handles its own --help)
-  const SUBCOMMANDS = ["policies", "policy", "auth", "audit"];
+  const SUBCOMMANDS = ["policies", "policy", "auth", "audit", "config"];
   if ((args.includes("--help") || args.includes("-h")) && !SUBCOMMANDS.includes(args[0])) {
     const extraArgs = args.filter((a) => a !== "--help" && a !== "-h");
     if (extraArgs.length > 0) {
@@ -123,6 +149,7 @@ USAGE
 
 COMMANDS
   (no args)                      Launch the policy dashboard
+  config                         Interactive setup — pick scope, agents & policies
 
   policy add <name>              Enable a single policy (see \`policy --help\`)
   policy remove <name>           Disable a single policy
@@ -130,18 +157,18 @@ COMMANDS
   policies, p                    List all available policies and their status
   policies --install, -i         Enable policies in agent CLI settings
     [names...]                     Specific policy names to enable
-    --cli claude|codex|copilot|cursor|opencode|pi|gemini|hermes
+    --cli claude|codex|copilot|cursor|opencode|pi|hermes|openclaw|factory|devin|antigravity|goose
                                    Agent CLI(s) to install for; space-separated
-                                   (e.g. --cli claude codex copilot cursor opencode pi gemini hermes) or repeated.
+                                   (e.g. --cli claude codex copilot cursor opencode pi hermes openclaw factory devin antigravity goose) or repeated.
                                    Default: detect installed CLIs and prompt.
     --scope user|project|local     Config scope to write to (default: user)
-                                   (Codex / Copilot / Cursor / OpenCode / Pi / Gemini support user|project only)
+                                   (Codex / Copilot / Cursor / OpenCode / Pi support user|project only)
     --beta                         Include beta policies
     --custom, -c <path>            Path to a JS file of custom policies
 
   policies --uninstall, -u       Disable policies or remove hooks
     [names...]                     Specific policy names to disable
-    --cli claude|codex|copilot|cursor|opencode|pi|gemini|hermes
+    --cli claude|codex|copilot|cursor|opencode|pi|hermes|openclaw|factory|devin|antigravity|goose
                                    Agent CLI(s) to uninstall from
     --scope user|project|local|all Config scope to remove from (default: user)
     --beta                         Remove only beta policies
@@ -176,8 +203,9 @@ EXAMPLES
   failproofai policies --install --cli cursor --scope project
   failproofai policies --install --cli opencode --scope project
   failproofai policies --install --cli pi --scope project
-  failproofai policies --install --cli gemini --scope project
-  failproofai policies --install --cli claude codex copilot cursor opencode pi gemini hermes
+  failproofai policies --install --cli factory --scope project
+  failproofai policies --install --cli devin --scope project
+  failproofai policies --install --cli claude codex copilot cursor opencode pi hermes openclaw factory devin antigravity goose
   failproofai policies --install --custom ./my-policies.js
   failproofai policies -i -c ./my-policies.js
   failproofai policies --uninstall block-sudo
@@ -186,13 +214,12 @@ EXAMPLES
   failproofai policies --uninstall --cli cursor
   failproofai policies --uninstall --cli opencode
   failproofai policies --uninstall --cli pi
-  failproofai policies --uninstall --cli gemini
   failproofai policies --uninstall --custom
 
 LINKS
   ⭐ Star us:      https://github.com/failproofai/failproofai
   📖 Docs:         https://docs.befailproof.ai/introduction
-  💬 Discord:      https://discord.gg/2zjBZP7yQJ
+  💬 Discord:      https://discord.befailproof.ai/
 `.trimStart());
     process.exit(0);
   }
@@ -226,20 +253,20 @@ USAGE
 
 OPTIONS (install)
   [names...]                     Specific policy names to enable (omit for interactive)
-  --cli claude|codex|copilot|cursor|opencode|pi|gemini|hermes
+  --cli claude|codex|copilot|cursor|opencode|pi|hermes|openclaw|factory|devin|antigravity|goose
                                  Agent CLI(s) to install for; space-separated
-                                 (e.g. --cli claude codex copilot cursor opencode pi gemini hermes) or repeated.
+                                 (e.g. --cli claude codex copilot cursor opencode pi hermes openclaw factory devin antigravity goose) or repeated.
                                  Omit to detect installed CLIs and prompt (or
                                  auto-pick if only one is found).
   --scope user|project|local     Config scope to write to (default: user)
-                                 (Codex / Copilot / Cursor / OpenCode / Pi / Gemini support user|project only)
+                                 (Codex / Copilot / Cursor / OpenCode / Pi support user|project only)
   --beta                         Include beta policies
   --custom, -c <path>            Path to a JS file of custom policies
                                  (skips interactive prompt; validates file first)
 
 OPTIONS (uninstall)
   [names...]                     Specific policy names to disable (omit to remove hooks)
-  --cli claude|codex|copilot|cursor|opencode|pi|gemini|hermes
+  --cli claude|codex|copilot|cursor|opencode|pi|hermes|openclaw|factory|devin|antigravity|goose
                                  Agent CLI(s) to uninstall from
   --scope user|project|local|all Config scope to remove from (default: user)
   --beta                         Remove only beta policies
@@ -254,8 +281,9 @@ EXAMPLES
   failproofai policies --install --cli cursor --scope project
   failproofai policies --install --cli opencode --scope project
   failproofai policies --install --cli pi --scope project
-  failproofai policies --install --cli gemini --scope project
-  failproofai policies --install --cli claude codex copilot cursor opencode pi gemini hermes
+  failproofai policies --install --cli factory --scope project
+  failproofai policies --install --cli devin --scope project
+  failproofai policies --install --cli claude codex copilot cursor opencode pi hermes openclaw factory devin antigravity goose
   failproofai policies --install --custom ./my-policies.js
   failproofai policies -i -c ./my-policies.js
   failproofai policies --uninstall block-sudo
@@ -296,7 +324,7 @@ EXAMPLES
       //   --cli claude codex copilot
       //   --cli claude --cli codex
       // Values are consumed greedily until the next flag or end of argv.
-      const VALID_CLIS = new Set(["claude", "codex", "copilot", "cursor", "opencode", "pi", "gemini", "hermes"]);
+      const VALID_CLIS = new Set(["claude", "codex", "copilot", "cursor", "opencode", "pi", "hermes", "openclaw", "factory", "devin", "antigravity", "goose"]);
       const cliFlagValues = [];
       const cliConsumedIdxs = new Set();
       const cliFlagIdxs = subArgs.map((a, i) => (a === "--cli" ? i : -1)).filter((i) => i >= 0);
@@ -313,7 +341,7 @@ EXAMPLES
           consumed++;
         }
         if (consumed === 0) {
-          throw new CliError("Missing value(s) for --cli. Usage: --cli claude codex copilot cursor opencode pi gemini hermes (or any subset)");
+          throw new CliError("Missing value(s) for --cli. Usage: --cli claude codex copilot cursor opencode pi hermes openclaw (or any subset)");
         }
       }
 
@@ -385,7 +413,7 @@ EXAMPLES
       }
 
       // --cli accepts one or more space-separated values; same parser as install.
-      const VALID_CLIS = new Set(["claude", "codex", "copilot", "cursor", "opencode", "pi", "gemini", "hermes"]);
+      const VALID_CLIS = new Set(["claude", "codex", "copilot", "cursor", "opencode", "pi", "hermes", "openclaw", "factory", "devin", "antigravity", "goose"]);
       const cliFlagValues = [];
       const cliConsumedIdxs = new Set();
       const cliFlagIdxs = subArgs.map((a, i) => (a === "--cli" ? i : -1)).filter((i) => i >= 0);
@@ -402,7 +430,7 @@ EXAMPLES
           consumed++;
         }
         if (consumed === 0) {
-          throw new CliError("Missing value(s) for --cli. Usage: --cli claude codex copilot cursor opencode pi gemini hermes (or any subset)");
+          throw new CliError("Missing value(s) for --cli. Usage: --cli claude codex copilot cursor opencode pi hermes openclaw (or any subset)");
         }
       }
 
@@ -511,7 +539,7 @@ USAGE
   failproofai policy remove <name>   Disable one policy
 
 OPTIONS
-  --cli claude|codex|copilot|cursor|opencode|pi|gemini|hermes
+  --cli claude|codex|copilot|cursor|opencode|pi|hermes|openclaw|factory|devin|antigravity|goose
                                      Agent CLI(s) to apply to; space-separated or repeated.
                                      Omit to detect installed CLIs and prompt.
   --scope user|project|local         Config scope (default: user)
@@ -549,7 +577,7 @@ EXAMPLES
     }
 
     // --cli accepts one or more space-separated values, optionally repeated.
-    const VALID_CLIS = new Set(["claude", "codex", "copilot", "cursor", "opencode", "pi", "gemini", "hermes"]);
+    const VALID_CLIS = new Set(["claude", "codex", "copilot", "cursor", "opencode", "pi", "hermes", "openclaw", "factory", "devin", "antigravity", "goose"]);
     const cliFlagValues = [];
     const cliConsumedIdxs = new Set();
     const cliFlagIdxs = rest.map((a, i) => (a === "--cli" ? i : -1)).filter((i) => i >= 0);
@@ -564,7 +592,7 @@ EXAMPLES
         consumed++;
       }
       if (consumed === 0) {
-        throw new CliError("Missing value(s) for --cli. Usage: --cli claude codex copilot cursor opencode pi gemini hermes (or any subset)");
+        throw new CliError("Missing value(s) for --cli. Usage: --cli claude codex copilot cursor opencode pi hermes openclaw (or any subset)");
       }
     }
 
@@ -652,6 +680,42 @@ EXAMPLES
     process.exit(0);
   }
 
+  // config — the interactive setup launcher (scope, agents, policies).
+  // `configure` and `setup` are canonicalized to "config" up top. Running it
+  // explicitly does NOT run the post-setup audit (that only fires on first-run
+  // onboarding via bare `failproofai`).
+  if (args[0] === "config") {
+    if (args.includes("--help") || args.includes("-h")) {
+      console.log(`
+failproofai config — interactive setup
+
+USAGE
+  failproofai config             Guided setup: choose scope, agents, and policies
+  failproofai configure          Alias for config
+  failproofai setup              Alias for config
+
+WHAT IT DOES
+  Walks you through 4 quick steps and writes everything for you:
+    1. Where      — global (all projects) or just this project
+    2. Assistants — which agent CLIs to protect (Claude, Codex, ...)
+    3. Policies   — presets (combine any), Everything, or a custom pick
+    4. Review     — confirms the exact files it will change, then applies
+
+  Prefer flags? See \`failproofai policies --help\`.
+`.trimStart());
+      process.exit(0);
+    }
+    lastSubcommand = "config";
+    const { runConfigureWizard } = await import("../src/hooks/configure-wizard");
+    const result = await runConfigureWizard();
+    await track("cli_configure_invoked", {
+      applied: result.applied,
+      scope: result.scope ?? null,
+      cli_count: result.clis?.length ?? 0,
+    });
+    process.exit(0);
+  }
+
   // Unknown flag guard — must appear after all known-flag branches
   const knownFlags = ["--version", "-v", "--help", "-h", "--hook"];
   const unknownFlag = args.find(a => a.startsWith("-") && !knownFlags.includes(a));
@@ -693,18 +757,22 @@ EXAMPLES
     );
   }
 
-  // First-run nudge — only on truly bare `failproofai` invocations. Best-effort:
-  // any thrown error must not block the dashboard from launching.
+  // First-run onboarding — on the first bare `failproofai` invocation, run the
+  // configure wizard (which also fires the post-setup audit) BEFORE the
+  // dashboard. Unlike before, we then fall through to launch the dashboard, so a
+  // fresh user gets: setup → audit → dashboard, and every later `failproofai`
+  // goes straight to the dashboard. Best-effort: any error must not block launch.
   if (args.length === 0) {
     try {
-      const { maybeRunFirstRunNudge } = await import("../src/hooks/first-run-nudge");
-      await maybeRunFirstRunNudge();
+      const { maybeFirstRunConfigure } = await import("../src/hooks/configure-wizard");
+      await maybeFirstRunConfigure();
     } catch {
-      // Nudge is non-critical; fall through to dashboard.
+      // First-run onboarding is non-critical; fall through to the dashboard.
     }
   }
 
-  // Dashboard launch — always production mode
+  // Dashboard launch — always production mode. Runs on every bare `failproofai`
+  // (after first-run onboarding, if any).
   const { launch } = await import("../scripts/launch");
   launch("start");
 }