failproofai 0.0.13 → 0.0.14-beta.1

package/src/audit/cli-adapters/factory.ts

@@ -0,0 +1,75 @@
+/**
+ * Factory (droid) transcript adapter — AUDIT (Pillar 2).
+ *
+ * droid writes real JSONL transcripts at
+ * `~/.factory/sessions/<encoded-cwd>/<sessionId>.jsonl` (Claude-style
+ * encoded-cwd folders; verified live against droid v0.171.0).
+ * lib/factory-sessions.ts enumerates and parses them into the shared
+ * LogEntry[] shape, so `logEntriesToEvents` handles the rest.
+ */
+import { readFile } from "node:fs/promises";
+import {
+  listFactoryTranscripts,
+  factoryLinesToLogEntries,
+} from "../../../lib/factory-sessions";
+import { parseRawLines } from "../../../lib/log-entries";
+import type { NormalizedToolEvent, TranscriptMetadata } from "../types";
+import type { ListOpts } from "./claude";
+import { logEntriesToEvents } from "./shared";
+
+export async function listFactoryTranscriptMetadata(
+  opts: ListOpts = {},
+): Promise<TranscriptMetadata[]> {
+  const projectFilter = opts.projects ? new Set(opts.projects) : null;
+  const sinceMs = opts.sinceMs ?? 0;
+  const out: TranscriptMetadata[] = [];
+
+  for (const t of listFactoryTranscripts()) {
+    if (t.mtimeMs < sinceMs) continue;
+    // `audit --project <cwd>` filters on the decoded working directory.
+    if (projectFilter && !projectFilter.has(t.cwd)) continue;
+    out.push({
+      cli: "factory",
+      projectName: t.projectName,
+      sessionId: t.sessionId,
+      transcriptPath: t.transcriptPath,
+      mtimeMs: t.mtimeMs,
+      sizeBytes: t.sizeBytes,
+    });
+  }
+  return out;
+}
+
+export async function streamFactoryEvents(
+  meta: TranscriptMetadata,
+): Promise<NormalizedToolEvent[]> {
+  let content: string;
+  try {
+    content = await readFile(meta.transcriptPath, "utf-8");
+  } catch {
+    return [];
+  }
+
+  const rawLines = parseRawLines(content, "session");
+  const entries = factoryLinesToLogEntries(rawLines, "session");
+
+  // cwd lives on the `type:"session_start"` header line — recover the canonical
+  // value rather than re-decoding the (lossy) folder name.
+  let cwd = "";
+  for (const line of rawLines) {
+    if (line && typeof line === "object" && (line as Record<string, unknown>).type === "session_start") {
+      const c = (line as Record<string, unknown>).cwd;
+      if (typeof c === "string" && c.length > 0) {
+        cwd = c;
+        break;
+      }
+    }
+  }
+
+  return logEntriesToEvents(entries, {
+    cli: "factory",
+    sessionId: meta.sessionId,
+    transcriptPath: meta.transcriptPath,
+    cwd,
+  });
+}

package/src/audit/cli-adapters/goose.ts

@@ -0,0 +1,53 @@
+/**
+ * Goose (codename goose, Block) transcript adapter — AUDIT-ONLY (Pillar 2).
+ *
+ * Goose keeps every session in one SQLite DB at
+ * `~/.local/share/goose/sessions/sessions.db`. We read it directly via the
+ * bundled sql.js reader (lib/goose-projects.ts enumerates the `sessions` table;
+ * lib/goose-sessions.ts parses each session's `messages`), producing the same
+ * LogEntry[] shape the other adapters do — so `logEntriesToEvents` handles the
+ * rest. Like Devin, each Goose session carries a real `working_dir`, so
+ * `audit --project <cwd>` filters work (unlike the cwd-less Hermes gateway).
+ */
+import { getGooseSessions } from "../../../lib/goose-projects";
+import { getGooseSessionLog } from "../../../lib/goose-sessions";
+import type { NormalizedToolEvent, TranscriptMetadata } from "../types";
+import type { ListOpts } from "./claude";
+import { logEntriesToEvents } from "./shared";
+
+export async function listGooseTranscriptMetadata(
+  opts: ListOpts = {},
+): Promise<TranscriptMetadata[]> {
+  const projectFilter = opts.projects ? new Set(opts.projects) : null;
+  const sinceMs = opts.sinceMs ?? 0;
+  const sessions = await getGooseSessions();
+  const out: TranscriptMetadata[] = [];
+  for (const s of sessions) {
+    if (s.mtimeMs < sinceMs) continue;
+    // `audit --project <cwd>` filters on the session's working directory.
+    if (projectFilter && (!s.cwd || !projectFilter.has(s.cwd))) continue;
+    out.push({
+      cli: "goose",
+      projectName: s.projectName,
+      sessionId: s.sessionId,
+      transcriptPath: `goose-db://${s.sessionId}`,
+      mtimeMs: s.mtimeMs,
+      // mtime advances on each message, so (mtime) forms a real cache key.
+      sizeBytes: 0,
+    });
+  }
+  return out;
+}
+
+export async function streamGooseEvents(
+  meta: TranscriptMetadata,
+): Promise<NormalizedToolEvent[]> {
+  const log = await getGooseSessionLog(meta.sessionId);
+  if (!log) return [];
+  return logEntriesToEvents(log.entries, {
+    cli: "goose",
+    sessionId: meta.sessionId,
+    transcriptPath: meta.transcriptPath,
+    cwd: log.cwd ?? "",
+  });
+}

package/src/audit/cli-adapters/index.ts

@@ -17,8 +17,12 @@ import { listCopilotTranscriptMetadata, streamCopilotEvents } from "./copilot";
 import { listCursorTranscriptMetadata, streamCursorEvents } from "./cursor";
 import { listOpenCodeTranscriptMetadata, streamOpenCodeEvents } from "./opencode";
 import { listPiTranscriptMetadata, streamPiEvents } from "./pi";
-import { listGeminiTranscriptMetadata, streamGeminiEvents } from "./gemini";
 import { listHermesTranscriptMetadata, streamHermesEvents } from "./hermes";
+import { listOpenClawTranscriptMetadata, streamOpenClawEvents } from "./openclaw";
+import { listFactoryTranscriptMetadata, streamFactoryEvents } from "./factory";
+import { listAntigravityTranscriptMetadata, streamAntigravityEvents } from "./antigravity";
+import { listDevinTranscriptMetadata, streamDevinEvents } from "./devin";
+import { listGooseTranscriptMetadata, streamGooseEvents } from "./goose";
 
 export type { ListOpts };
 
@@ -59,16 +63,36 @@ export const ADAPTERS: Record<IntegrationType, CliAdapter> = {
     listTranscripts: listPiTranscriptMetadata,
     streamEvents: streamPiEvents,
   },
-  gemini: {
-    cli: "gemini",
-    listTranscripts: listGeminiTranscriptMetadata,
-    streamEvents: streamGeminiEvents,
-  },
   hermes: {
     cli: "hermes",
     listTranscripts: listHermesTranscriptMetadata,
     streamEvents: streamHermesEvents,
   },
+  openclaw: {
+    cli: "openclaw",
+    listTranscripts: listOpenClawTranscriptMetadata,
+    streamEvents: streamOpenClawEvents,
+  },
+  factory: {
+    cli: "factory",
+    listTranscripts: listFactoryTranscriptMetadata,
+    streamEvents: streamFactoryEvents,
+  },
+  devin: {
+    cli: "devin",
+    listTranscripts: listDevinTranscriptMetadata,
+    streamEvents: streamDevinEvents,
+  },
+  antigravity: {
+    cli: "antigravity",
+    listTranscripts: listAntigravityTranscriptMetadata,
+    streamEvents: streamAntigravityEvents,
+  },
+  goose: {
+    cli: "goose",
+    listTranscripts: listGooseTranscriptMetadata,
+    streamEvents: streamGooseEvents,
+  },
 };
 
 export function getAdapter(cli: IntegrationType): CliAdapter {

package/src/audit/cli-adapters/openclaw.ts

@@ -0,0 +1,56 @@
+/**
+ * OpenClaw (openclaw gateway) transcript adapter — AUDIT (Pillar 2).
+ *
+ * OpenClaw writes real JSONL transcripts at
+ * `~/.openclaw/agents/<agentId>/sessions/<uuid>.jsonl` (verified live against
+ * v2026.7.1). lib/openclaw-sessions.ts enumerates and parses them into the
+ * shared LogEntry[] shape, so `logEntriesToEvents` handles the rest.
+ *
+ * Gateway sessions run in the container workspace, not a host repo, so they
+ * group by agentId (`openclaw:<agentId>`) and contribute nothing to a
+ * cwd-scoped audit.
+ */
+import {
+  listOpenClawTranscripts,
+  getOpenClawSessionLog,
+} from "../../../lib/openclaw-sessions";
+import type { NormalizedToolEvent, TranscriptMetadata } from "../types";
+import type { ListOpts } from "./claude";
+import { logEntriesToEvents } from "./shared";
+
+export async function listOpenClawTranscriptMetadata(
+  opts: ListOpts = {},
+): Promise<TranscriptMetadata[]> {
+  // `audit --project <cwd>` filters on working directory; gateway sessions run
+  // in the container workspace, not a host repo, so OpenClaw contributes
+  // nothing to a cwd-scoped audit.
+  if (opts.projects && opts.projects.length > 0) return [];
+
+  const sinceMs = opts.sinceMs ?? 0;
+  const out: TranscriptMetadata[] = [];
+  for (const t of listOpenClawTranscripts()) {
+    if (t.mtimeMs < sinceMs) continue;
+    out.push({
+      cli: "openclaw",
+      projectName: `openclaw:${t.agentId}`,
+      sessionId: t.sessionId,
+      transcriptPath: t.transcriptPath,
+      mtimeMs: t.mtimeMs,
+      sizeBytes: t.sizeBytes,
+    });
+  }
+  return out;
+}
+
+export async function streamOpenClawEvents(
+  meta: TranscriptMetadata,
+): Promise<NormalizedToolEvent[]> {
+  const log = await getOpenClawSessionLog(meta.sessionId);
+  if (!log) return [];
+  return logEntriesToEvents(log.entries, {
+    cli: "openclaw",
+    sessionId: meta.sessionId,
+    transcriptPath: meta.transcriptPath,
+    cwd: log.cwd ?? "",
+  });
+}

package/src/audit/cli.ts

@@ -20,6 +20,7 @@ import { writeDashboardCache } from "./dashboard-cache";
 import type { AuditResult, RunAuditOptions } from "./types";
 import { trackHookEvent } from "../hooks/hook-telemetry";
 import { getInstanceId } from "../../lib/telemetry-id";
+import { sanitizeErrorMessage } from "../../lib/telemetry-sanitize";
 import { openWhenReady } from "./open-browser";
 
 /** Port the bundled dashboard binds to. Matches `scripts/launch.ts`'s default
@@ -49,7 +50,7 @@ USAGE
 
 WHAT IT DOES
   1. Scans past sessions from every installed agent CLI (Claude, Codex, Cursor,
-     Copilot, OpenCode, Pi, Gemini) — entirely on your machine.
+     Copilot, OpenCode, Pi) — entirely on your machine.
   2. Starts the local dashboard and opens
      http://localhost:${DASHBOARD_PORT}/audit with your results.
 
@@ -236,6 +237,85 @@ function printSummary(result: AuditResult): void {
   for (const line of buildSummary(result)) process.stdout.write(`  ${line}\n`);
 }
 
+// ── Audit telemetry ──────────────────────────────────────────────────────────
+
+/**
+ * Which entry point ran the audit. `onboarding` is the automatic post-setup run;
+ * `cli` is an explicit `failproofai audit`. Carried on every cli_audit_* event so
+ * the first audit a user ever runs is distinguishable from later deliberate ones.
+ */
+type AuditSource = "cli" | "onboarding";
+
+/** Shared so both entry points report cli_audit_completed identically. */
+function auditCompletedProps(source: AuditSource, result: AuditResult) {
+  return {
+    source,
+    events_scanned: result.eventsScanned,
+    sessions_scanned: result.transcripts.scanned,
+    total_hits: result.totals.hits,
+    findings: result.results.length,
+  };
+}
+
+// ── Post-setup background audit ────────────────────────────────────────────────
+
+/**
+ * Run the audit *pipeline* (scan + cache write + summary) once the setup flow
+ * completes, right before the dashboard boots. Pre-warms
+ * `~/.failproofai/audit-dashboard.json` so the dashboard renders instantly, and
+ * immediately shows the user what's slipping through.
+ *
+ * Shows the same animated stages as `failproofai audit`. The scan runs to
+ * completion; Ctrl+C interrupts it the usual way (default SIGINT). Best-effort:
+ * never throws, never exits the process; the caller boots the dashboard
+ * afterward. Opt out with `FAILPROOFAI_NO_AUTO_AUDIT=1`.
+ */
+export async function runPostSetupAudit(): Promise<void> {
+  if (process.env.FAILPROOFAI_NO_AUTO_AUDIT === "1") return;
+
+  const instanceId = getInstanceId();
+  // Fire-and-forget, as in runAuditCli: the multi-second scan below keeps the
+  // process alive long enough for this to land, and the completed/failed event
+  // that follows is awaited.
+  void trackHookEvent(instanceId, "cli_audit_started", { source: "onboarding" });
+
+  process.stdout.write(
+    `\n  ${c(PINK, "✦")} ${c(BOLD, "failproofai audit now running")}  ${c(DIM, "· ctrl+c to stop")}\n\n`,
+  );
+
+  let result: AuditResult;
+  try {
+    result = await runWithProgress({});
+  } catch (err) {
+    // Awaited: this function returns straight into the dashboard boot, and a
+    // fire-and-forget fetch would race it.
+    await trackHookEvent(instanceId, "cli_audit_failed", {
+      source: "onboarding",
+      error_type: err instanceof Error ? err.name : "unknown",
+      error_message: sanitizeErrorMessage(err),
+    });
+    process.stdout.write(
+      `  ${c(PINK, "!")} ${c(DIM, "audit couldn't finish — run")} ${c(CYAN, "failproofai audit")} ${c(DIM, "later.")}\n\n`,
+    );
+    return;
+  }
+
+  // Reported before the empty-history return below, so an onboarding audit that
+  // finds nothing is still counted — matching runAuditCli, which reports
+  // completed regardless of what the scan turned up.
+  await trackHookEvent(instanceId, "cli_audit_completed", auditCompletedProps("onboarding", result));
+
+  if (result.eventsScanned === 0) {
+    process.stdout.write(
+      `\n  ${c(DIM, "no agent sessions to audit yet — come back after using your agent.")}\n\n`,
+    );
+    return;
+  }
+  writeDashboardCache({}, result);
+  printSummary(result);
+  process.stdout.write("\n");
+}
+
 // ── Entry point ──────────────────────────────────────────────────────────────
 
 export async function runAuditCli(args: string[]): Promise<void> {
@@ -275,6 +355,7 @@ export async function runAuditCli(args: string[]): Promise<void> {
     await trackHookEvent(instanceId, "cli_audit_failed", {
       source: "cli",
       error_type: err instanceof Error ? err.name : "unknown",
+      error_message: sanitizeErrorMessage(err),
     });
     die(`Audit failed: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -285,13 +366,7 @@ export async function runAuditCli(args: string[]): Promise<void> {
   // would otherwise drop this event. On the dashboard path launch() keeps the
   // process alive, but awaiting makes delivery reliable on every exit path.
   // Bounded (5s) and never throws.
-  await trackHookEvent(instanceId, "cli_audit_completed", {
-    source: "cli",
-    events_scanned: result.eventsScanned,
-    sessions_scanned: result.transcripts.scanned,
-    total_hits: result.totals.hits,
-    findings: result.results.length,
-  });
+  await trackHookEvent(instanceId, "cli_audit_completed", auditCompletedProps("cli", result));
 
   // No sessions on disk — guide the user instead of opening an empty dashboard.
   if (result.eventsScanned === 0) {

package/src/audit/report.ts

@@ -273,7 +273,7 @@ export function formatMarkdown(result: AuditResult): string {
     );
   }
   out.push("");
-  out.push("> [failproofai](https://github.com/FailproofAI/failproofai) is a hook-based policy engine for Claude Code, Codex, Copilot, Cursor, OpenCode, Pi, and Gemini CLI. The `audit` command replays past agent sessions through every builtin policy to surface patterns that were (or could've been) stopped.");
+  out.push("> [failproofai](https://github.com/FailproofAI/failproofai) is a hook-based policy engine for Claude Code, Codex, Copilot, Cursor, OpenCode, and Pi. The `audit` command replays past agent sessions through every builtin policy to surface patterns that were (or could've been) stopped.");
   out.push("");
 
   if (totalHits === 0) return out.join("\n");

package/src/audit/types.ts

@@ -24,7 +24,7 @@ export interface NormalizedToolEvent {
   toolName: string;
   /** Canonicalized tool input (snake_case keys for OpenCode/Pi). */
   toolInput: Record<string, unknown>;
-  /** Pre-canonicalization tool name (e.g. "run_shell_command" for Gemini). */
+  /** Pre-canonicalization tool name (e.g. "exec" for OpenClaw). */
   rawToolName: string;
   /**
    * Result text from the matching tool_result block, if present in the

package/src/hooks/builtin-policies.ts

@@ -53,9 +53,9 @@ function isAgentInternalPath(resolved: string): boolean {
  *   • Pi:           `.pi/settings.json` (project) and `.pi/agent/settings.json`
  *                   (user); also the Pi-managed extension dir
  *                   `.pi/extensions/` / `.pi/agent/extensions/`.
- *   • Gemini CLI:   `.gemini/settings.json` (both project and user scope —
- *                   user is `~/.gemini/settings.json`); also the Gemini-managed
- *                   hooks scripts dir `.gemini/hooks/`.
+ *   • Antigravity CLI (agy): reuses `~/.gemini/` — `~/.gemini/settings.json`
+ *                   and the customization-root hook config
+ *                   `~/.gemini/config/hooks.json`.
  * These must NEVER be edited by the agent itself — that would let it disable
  * its own protections.
  */
@@ -74,9 +74,9 @@ function isAgentSettingsFile(resolved: string): boolean {
   // Pi: settings + extensions dirs (project and user-scope variants).
   if (/[\\/]\.pi[\\/](?:agent[\\/])?settings\.json$/.test(resolved)) return true;
   if (/[\\/]\.pi[\\/](?:agent[\\/])?extensions[\\/]/.test(resolved)) return true;
-  // Gemini: settings.json + hooks dir referenced by `command: $GEMINI_PROJECT_DIR/.gemini/hooks/...`.
+  // Antigravity (agy) reuses ~/.gemini/: settings.json + the customization-root hooks.json.
   if (/[\\/]\.gemini[\\/]settings\.json$/.test(resolved)) return true;
-  if (/[\\/]\.gemini[\\/]hooks[\\/]/.test(resolved)) return true;
+  if (/[\\/]\.gemini[\\/]config[\\/]hooks\.json$/.test(resolved)) return true;
   return false;
 }