failproofai 0.0.14-beta.0 → 0.0.14-beta.2

package/.next/standalone/integration-suite/run.sh

@@ -0,0 +1,107 @@
+#!/usr/bin/env bash
+# ─────────────────────────────────────────────────────────────────────────────
+# failproofai integration suite — orchestrator (runs on the GitHub Actions runner).
+#   ./run.sh [cli ...]      default: all 12
+#
+# Mirrors the box's run-canary.sh, but every path is env-parameterised (the
+# runner is ephemeral) and the report is POSTed to a Slack Incoming Webhook
+# instead of delivered via Hermes. Assumes ci-entrypoint.sh has already:
+#   • checked out + built failproofai (dist/index.js + dist/cli.mjs) at $CANARY_REPO
+#   • built the sandbox image ($CANARY_IMAGE)
+#   • created the per-run volume ($CANARY_VOL) and INSTALLED the CLIs into it
+#   • injected OAuth token files into the volume (inject-tokens.sh)
+#   • assembled the gateway/PAT env-file ($CANARY_ENVFILE)
+#
+# VERSION-GATING (identical to the box): a CLI is re-probed only when its own
+# binary version OR failproofai's HEAD changed since its last GREEN run — so
+# daily runs don't burn LLM credits re-testing an unchanged (CLI, failproofai)
+# pair. FAIL/INCONCLUSIVE/ERROR always re-probe until they recover. Override the
+# gated set with CANARY_VERSION_GATED (comma-sep) or "" to force-probe all.
+# ─────────────────────────────────────────────────────────────────────────────
+set -u
+HERE="$(cd "$(dirname "$0")" && pwd)"
+
+REPO="${CANARY_REPO:?CANARY_REPO (built failproofai checkout) required}"
+SANDBOX="${CANARY_SANDBOX:-$HERE}"
+VOL="${CANARY_VOL:-integration-suite}"
+IMAGE="${CANARY_IMAGE:-failproofai-integration-suite:base}"
+STATE="${CANARY_STATE:-$HERE/state.json}"
+ENVFILE="${CANARY_ENVFILE:?CANARY_ENVFILE (docker --env-file with gateway creds) required}"
+MODEL="${CANARY_LLM_MODEL:-deepseek-v4-pro}"
+GATED="${CANARY_VERSION_GATED-all}"
+
+CLIS=("$@"); [ ${#CLIS[@]} -eq 0 ] && CLIS=(claude codex copilot cursor factory devin antigravity goose opencode pi hermes openclaw)
+
+# failproofai main HEAD — the second gate dimension. Prefer the value the workflow
+# computed; fall back to git in the checkout.
+FP_SHA="${CANARY_FP_SHA:-$(git -C "$REPO" rev-parse --short HEAD 2>/dev/null || echo unknown)}"
+
+# Installed versions from the install step, keyed by cli.
+VERSIONS_JSON="$(docker run --rm -v "$VOL:/home/canary" "$IMAGE" cat /home/canary/canary-tier0.json 2>/dev/null || echo '[]')"
+
+run_probe() {
+  docker run --rm --env-file "$ENVFILE" \
+    -v "$REPO:/repo:ro" -v "$SANDBOX:/opt/canary:ro" -v "$VOL:/home/canary" \
+    "$IMAGE" bash /opt/canary/probe-cli.sh "$1" 2>&1
+}
+
+results="[]"
+for cli in "${CLIS[@]}"; do
+  cur_ver="$(node -e 'const a=JSON.parse(process.argv[1]);const x=a.find(y=>y.cli===process.argv[2]);process.stdout.write(x&&x.version?x.version:"")' "$VERSIONS_JSON" "$cli")"
+
+  gate="$(node -e '
+    const [statePath, cli, curVer, curSha, gated] = process.argv.slice(1);
+    let st={clis:{}}; try{ st=JSON.parse(require("fs").readFileSync(statePath,"utf8")); }catch{}
+    const isGated = gated === "all" || gated.split(",").filter(Boolean).includes(cli);
+    const prev = st.clis && st.clis[cli];
+    let skip = false;
+    if (isGated && prev && prev.version && curVer && prev.version===curVer
+        && prev.fpSha && curSha && prev.fpSha===curSha) {
+      const vals=Object.values((prev.probes||prev)||{});
+      // Only carry forward a genuinely GREEN result — FAIL/INCONCLUSIVE/ERROR
+      // must keep re-probing so they recover (e.g. an expired token clears once
+      // the secret is refreshed) instead of being frozen.
+      const green = vals.length>0 && !vals.includes("FAIL") && !vals.includes("INCONCLUSIVE") && !vals.includes("ERROR");
+      if (green) skip = true;
+    }
+    process.stdout.write(skip ? "skip" : "probe");
+  ' "$STATE" "$cli" "$cur_ver" "$FP_SHA" "$GATED")"
+
+  if [ "$gate" = skip ]; then
+    echo ">> $cli: CLI $cur_ver + failproofai $FP_SHA both unchanged & last green → gated-skip (protecting quota)" >&2
+    vj="$(node -e 'const st=JSON.parse(require("fs").readFileSync(process.argv[1],"utf8"));const p=st.clis[process.argv[2]];process.stdout.write(JSON.stringify({cli:process.argv[2],probes:p.probes||p,version:p.version,fpSha:p.fpSha,gated:true}))' "$STATE" "$cli")"
+  else
+    echo ">> probing $cli ..." >&2
+    vj="$(run_probe "$cli" | sed -n 's/^VERDICT_JSON //p' | tail -1)"
+    [ -z "$vj" ] && vj="{\"cli\":\"$cli\",\"probes\":{}}"
+    vj="$(node -e 'const v=JSON.parse(process.argv[1]);v.version=process.argv[2]||null;v.fpSha=process.argv[3]||null;process.stdout.write(JSON.stringify(v))' "$vj" "$cur_ver" "$FP_SHA")"
+  fi
+  results="$(node -e 'const a=JSON.parse(process.argv[1]);a.push(JSON.parse(process.argv[2]));process.stdout.write(JSON.stringify(a))' "$results" "$vj")"
+done
+
+report="$(node "$HERE/report.js" "$results" "$STATE" "$MODEL")"
+echo "════ report ════" >&2; printf '%s\n' "$report" >&2; echo "════════════════" >&2
+printf '%s\n' "$report"   # also to stdout for the workflow log / artifact
+
+if [ -n "${CANARY_SLACK_WEBHOOK:-}" ]; then
+  payload="$(node -e 'const t=require("fs").readFileSync(0,"utf8");process.stdout.write(JSON.stringify({text:t}))' <<<"$report")"
+  code="$(curl -sS --connect-timeout 10 --max-time 30 \
+            -o /dev/null -w '%{http_code}' -X POST -H 'Content-type: application/json' \
+            --data "$payload" "$CANARY_SLACK_WEBHOOK" 2>/dev/null || echo 000)"
+  if [ "$code" = 200 ]; then echo "✓ posted to Slack webhook" >&2
+  else echo "⚠️  Slack webhook POST returned HTTP $code" >&2; fi
+else
+  echo "(no CANARY_SLACK_WEBHOOK set — report not posted)" >&2
+fi
+
+# Fail the job when any probe reported a hard FAIL (broken enforcement) so this
+# scheduled check actually blocks regressions. ERROR (vendor quota/auth) and
+# INCONCLUSIVE (model didn't attempt the tool) are NOT failures — they mean
+# "couldn't confirm", not "enforcement broke". The report is already emitted +
+# posted above regardless, so the signal is never lost.
+if node -e 'const r=JSON.parse(process.argv[1]);process.exit(r.some(x=>Object.values(x.probes||{}).includes("FAIL"))?1:0)' "$results"; then
+  exit 0
+else
+  echo "✗ FAIL verdict(s) present — failing the job" >&2
+  exit 1
+fi

package/.next/standalone/lib/error-origin.ts

@@ -0,0 +1,67 @@
+/**
+ * Works out whether a browser error actually came from the dashboard.
+ *
+ * `window`'s "error" and "unhandledrejection" events are page-global: browser
+ * extensions inject content scripts into the same page and share the same
+ * window, so their failures reach our listeners and get reported as ours. The
+ * observed case was MetaMask's "Failed to connect to MetaMask" arriving as a
+ * failproofai `unhandled_rejection`. Extensions are user-installed and
+ * open-ended, so the noise is unbounded and unrelated to our code.
+ *
+ * We therefore attribute positively — report an error only when it can be
+ * traced to our own origin — rather than maintaining a denylist of extensions
+ * we happen to know about. React render errors don't depend on this: the error
+ * boundaries (`app/global-error.tsx`, `app/components/error-fallback.tsx`)
+ * report `client_error` directly, and React only invokes those for errors thrown
+ * inside our own tree.
+ */
+
+/**
+ * Any `<vendor>-extension://` URL — `chrome-extension://`, `moz-extension://`,
+ * `safari-web-extension://`, `ms-browser-extension://`. Matching the shared
+ * suffix rather than an explicit vendor list means a new browser's scheme is
+ * filtered the day it ships.
+ */
+const EXTENSION_URL = /\b[\w-]+-extension:\/\//i;
+
+export type ErrorOrigin =
+  /** Traceable to our own origin — a real dashboard failure. */
+  | "app"
+  /** Came from a browser extension sharing the page. */
+  | "extension"
+  /** Not attributable: no stack, or a cross-origin "Script error.". */
+  | "unknown";
+
+export interface ErrorOriginInput {
+  /** `error.stack` / `reason.stack`, when the thrown value was an Error. */
+  stack?: string | null;
+  /** `ErrorEvent.filename` — the script URL. Absent on rejections. */
+  filename?: string | null;
+  /** Typically `window.location.origin`. */
+  appOrigin: string;
+}
+
+/**
+ * Classify where an error came from, using whatever location information the
+ * browser gave us.
+ *
+ * Extension frames are checked first: an error whose stack passes through an
+ * extension is that extension's problem even if one of our frames appears
+ * further down.
+ */
+export function classifyErrorOrigin({ stack, filename, appOrigin }: ErrorOriginInput): ErrorOrigin {
+  const text = [filename, stack].filter(Boolean).join("\n");
+  if (!text.trim()) return "unknown";
+  if (EXTENSION_URL.test(text)) return "extension";
+  if (appOrigin && text.includes(appOrigin)) return "app";
+  return "unknown";
+}
+
+/**
+ * Whether an error is ours to report. Only positively-attributed errors qualify:
+ * `unknown` covers cross-origin "Script error." and stack-less rejections, which
+ * are unactionable anyway — there's nothing in them to debug.
+ */
+export function isAppError(input: ErrorOriginInput): boolean {
+  return classifyErrorOrigin(input) === "app";
+}

package/.next/standalone/lib/format-duration.ts

@@ -16,14 +16,28 @@ export function formatRelativeTime(ts: number): string {
 
 export function formatDuration(ms: number): string {
   if (ms < 1000) return `${ms}ms`;
-  const seconds = ms / 1000;
-  if (seconds < 60) return `${seconds.toFixed(1)}s`;
-  const totalMinutes = Math.floor(seconds / 60);
-  if (totalMinutes >= 60) {
-    const hours = Math.floor(totalMinutes / 60);
-    const remainingMinutes = totalMinutes % 60;
-    return `${hours}h ${remainingMinutes}m`;
+
+  // Round to the precision the output will actually use, then bucket.
+  // Seconds are shown with one decimal place, so round to the nearest 0.1 s
+  // before deciding whether we have crossed into the minute range.
+  const deciseconds = Math.round(ms / 100);
+  if (deciseconds < 600) {
+    return `${(deciseconds / 10).toFixed(1)}s`;
+  }
+
+  // Minutes are shown with whole seconds, so round to the nearest second
+  // before splitting into minutes and seconds.
+  const totalSeconds = Math.round(ms / 1000);
+  if (totalSeconds < 3600) {
+    const minutes = Math.floor(totalSeconds / 60);
+    const seconds = totalSeconds % 60;
+    return `${minutes}m ${seconds}s`;
   }
-  const remainingSeconds = (seconds % 60).toFixed(0);
-  return `${totalMinutes}m ${remainingSeconds}s`;
+
+  // Hours are shown with whole minutes, so round to the nearest minute
+  // before splitting into hours and minutes.
+  const totalMinutes = Math.round(ms / 60000);
+  const hours = Math.floor(totalMinutes / 60);
+  const minutes = totalMinutes % 60;
+  return `${hours}h ${minutes}m`;
 }

package/.next/standalone/lib/install-check.ts

@@ -0,0 +1,231 @@
+/**
+ * Install reporting, driven from the CLI instead of an npm lifecycle script.
+ *
+ * This used to live in `scripts/postinstall.mjs`. Every package manager now
+ * blocks dependency install scripts by default — npm 12 (`allowScripts`), pnpm,
+ * bun, and Yarn ≥4.14 — and a publisher cannot opt its own package in, so a
+ * postinstall hook is no longer a channel that reaches users. The first non-hook
+ * CLI invocation is.
+ *
+ * Two constraints shape this module:
+ *
+ *   1. It must never run on the `--hook` fast path in bin/failproofai.mjs. That
+ *      path fires on every tool call of every agent session; the check belongs
+ *      in runCli() only.
+ *   2. It must be free on the steady-state path. When the recorded version
+ *      matches, this returns before touching anything else.
+ *
+ * Everything here is best-effort: telemetry must never break, delay, or fail a
+ * real command.
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { resolve } from "node:path";
+import { platform, arch, release, homedir, hostname } from "node:os";
+import { createHmac } from "node:crypto";
+import { trackInstallEvent } from "../scripts/install-telemetry.mjs";
+
+const FAILPROOFAI_HOOK_MARKER = "__failproofai_hook__";
+const NAMESPACE = "failproofai-telemetry-v1";
+
+/**
+ * Cap on the once-per-version report so a hanging network never stalls a command.
+ *
+ * A ceiling, not a cost: delivery resolves as soon as PostHog answers, measured
+ * at ~1.1s from a cold process (these events are the first thing a fresh process
+ * sends, so they always pay the DNS + TLS handshake). Raising this only matters
+ * when the network is slow — precisely when a tight budget would silently drop
+ * the report instead.
+ *
+ * 5s matches hook-telemetry and the postinstall script this replaces. An earlier
+ * 2s left barely any headroom over a 1.85s worst case seen in testing, for a
+ * saving nobody experiences on a healthy network.
+ */
+const REPORT_TIMEOUT_MS = 5000;
+
+function hashToId(raw: string): string {
+  return createHmac("sha256", NAMESPACE).update(raw).digest("hex");
+}
+
+function lastVersionPath(): string {
+  return resolve(homedir(), ".failproofai", "last-version");
+}
+
+/**
+ * Semver ordering. A release outranks the same version carrying a prerelease
+ * tag (semver §11); within a prerelease, numeric identifiers rank below
+ * non-numeric ones.
+ *
+ * Prerelease identifiers are separated by dots only (semver §9). A hyphen is a
+ * legal character *inside* an identifier, so `beta-2` is one non-numeric
+ * identifier compared lexically — not `beta` and `2`.
+ */
+export function compareSemver(a: string, b: string): number {
+  const parse = (v: string) => {
+    const m = /^(\d+)\.(\d+)\.(\d+)(?:-(.+))?$/.exec(v);
+    if (!m) return null;
+    return { nums: [Number(m[1]), Number(m[2]), Number(m[3])], pre: m[4] ?? null };
+  };
+  const pa = parse(a);
+  const pb = parse(b);
+  if (!pa || !pb) return a < b ? -1 : a > b ? 1 : 0;
+  for (let i = 0; i < 3; i++) {
+    if (pa.nums[i] !== pb.nums[i]) return pa.nums[i] < pb.nums[i] ? -1 : 1;
+  }
+  if (pa.pre === null && pb.pre === null) return 0;
+  if (pa.pre === null) return 1;
+  if (pb.pre === null) return -1;
+  const ax = pa.pre.split(".");
+  const bx = pb.pre.split(".");
+  for (let i = 0; i < Math.max(ax.length, bx.length); i++) {
+    const ai = ax[i], bi = bx[i];
+    if (ai === undefined) return -1;
+    if (bi === undefined) return 1;
+    const aNum = /^\d+$/.test(ai), bNum = /^\d+$/.test(bi);
+    if (aNum && bNum) {
+      const d = Number(ai) - Number(bi);
+      if (d !== 0) return d < 0 ? -1 : 1;
+    } else if (aNum) {
+      return -1;
+    } else if (bNum) {
+      return 1;
+    } else if (ai !== bi) {
+      return ai < bi ? -1 : 1;
+    }
+  }
+  return 0;
+}
+
+export interface HooksState {
+  configured: boolean;
+  registered: boolean;
+  policyCount: number;
+}
+
+/**
+ * Snapshot of the user's hook configuration, carried as properties on
+ * package_installed.
+ *
+ * Only inspects Claude's settings, which understates `registered` for someone
+ * running failproofai against another CLI. Preserved as-is from the postinstall
+ * script so the event keeps its historical meaning.
+ */
+export function checkHooks(): HooksState {
+  const hooksConfigPath = resolve(homedir(), ".failproofai", "policies-config.json");
+  if (!existsSync(hooksConfigPath)) {
+    return { configured: false, registered: false, policyCount: 0 };
+  }
+
+  let config;
+  try {
+    config = JSON.parse(readFileSync(hooksConfigPath, "utf8"));
+  } catch {
+    return { configured: false, registered: false, policyCount: 0 };
+  }
+
+  if (!Array.isArray(config.enabledPolicies) || config.enabledPolicies.length === 0) {
+    return { configured: false, registered: false, policyCount: 0 };
+  }
+
+  const policyCount = config.enabledPolicies.length;
+  const settingsPath = resolve(homedir(), ".claude", "settings.json");
+  if (!existsSync(settingsPath)) return { configured: true, registered: false, policyCount };
+
+  let settings;
+  try {
+    settings = JSON.parse(readFileSync(settingsPath, "utf8"));
+  } catch {
+    return { configured: true, registered: false, policyCount };
+  }
+
+  if (!settings?.hooks) return { configured: true, registered: false, policyCount };
+
+  for (const matchers of Object.values(settings.hooks)) {
+    if (!Array.isArray(matchers)) continue;
+    for (const matcher of matchers) {
+      if (!matcher?.hooks) continue;
+      if (matcher.hooks.some((h: Record<string, unknown>) => h[FAILPROOFAI_HOOK_MARKER] === true)) {
+        return { configured: true, registered: true, policyCount };
+      }
+    }
+  }
+
+  return { configured: true, registered: false, policyCount };
+}
+
+/**
+ * Report an install or upgrade, at most once per version.
+ *
+ * Fires first_install (nothing recorded yet) or version_changed (recorded
+ * version differs), then package_installed, then records `version`. A same-version
+ * run is a no-op — unlike the postinstall script this replaces, the CLI has no
+ * signal that would distinguish a reinstall from an ordinary invocation, so
+ * `direction: "reinstall"` is no longer reported.
+ */
+export async function maybeReportInstall(version: string): Promise<void> {
+  try {
+    const versionFile = lastVersionPath();
+
+    let previousVersion: string | null = null;
+    try {
+      if (existsSync(versionFile)) {
+        previousVersion = readFileSync(versionFile, "utf8").trim() || null;
+      }
+    } catch {
+      // Unreadable marker — treat as first run rather than give up.
+    }
+
+    // Steady state: same version already reported. Costs one stat() per command.
+    if (previousVersion === version) return;
+
+    const hooks = checkHooks();
+
+    const events: Promise<void>[] = [];
+    if (previousVersion === null) {
+      events.push(
+        trackInstallEvent("first_install", {
+          platform: platform(),
+          arch: arch(),
+          os_release: release(),
+          node_version: process.versions.node,
+        }, { version, timeoutMs: REPORT_TIMEOUT_MS }),
+      );
+    } else {
+      const cmp = compareSemver(previousVersion, version);
+      events.push(
+        trackInstallEvent("version_changed", {
+          from_version: previousVersion,
+          to_version: version,
+          direction: cmp < 0 ? "upgrade" : "downgrade",
+          platform: platform(),
+          arch: arch(),
+        }, { version, timeoutMs: REPORT_TIMEOUT_MS }),
+      );
+    }
+
+    events.push(
+      trackInstallEvent("package_installed", {
+        platform: platform(),
+        arch: arch(),
+        os_release: release(),
+        node_version: process.versions.node,
+        hostname_hash: hashToId(hostname()),
+        hooks_configured: hooks.configured,
+        hooks_registered: hooks.registered,
+        enabled_policy_count: hooks.policyCount,
+      }, { version, timeoutMs: REPORT_TIMEOUT_MS }),
+    );
+
+    // Record before awaiting: a dropped event is cheaper than re-reporting the
+    // same version on every command because delivery kept failing.
+    try {
+      mkdirSync(resolve(homedir(), ".failproofai"), { recursive: true });
+      writeFileSync(versionFile, version, "utf8");
+    } catch {
+      // best-effort
+    }
+
+    await Promise.all(events.map((p) => p.catch(() => {})));
+  } catch {
+    // Reporting must never break a command.
+  }
+}

package/.next/standalone/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "0.0.14-beta.0",
+  "version": "0.0.14-beta.2",
   "description": "The easiest way to manage policies that keep your AI agents reliable, on-task, and running autonomously — for Claude Code & the Agents SDK",
   "bin": {
     "failproofai": "./dist/cli.mjs"
@@ -30,8 +30,6 @@
     "test": "vitest",
     "test:run": "vitest run",
     "lint": "eslint . --config eslint.config.mjs",
-    "postinstall": "node scripts/postinstall.mjs",
-    "preuninstall": "node scripts/preuninstall.mjs",
     "prepare": "bun run build",
     "test:e2e": "vitest run --config vitest.config.e2e.mts",
     "test:e2e:watch": "vitest --config vitest.config.e2e.mts",

package/.next/standalone/server.js

@@ -9,7 +9,7 @@ const currentPort = parseInt(process.env.PORT, 10) || 3000
 const hostname = process.env.HOSTNAME || '0.0.0.0'
 
 let keepAliveTimeout = parseInt(process.env.KEEP_ALIVE_TIMEOUT, 10)
-const nextConfig = {"env":{"NEXT_PUBLIC_APP_VERSION":"0.0.14-beta.0"},"typescript":{"ignoreBuildErrors":false},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.ts","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/work/failproofai/failproofai","cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":false,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"partialFallbacks":false,"dynamicOnHover":false,"varyParams":false,"prefetchInlining":false,"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":3,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"imgOptSkipMetadata":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"viewTransition":false,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":false,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":false,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.ts","outputFileTracingExcludes":{"*":["node_modules/@img/**","node_modules/sharp/**"]},"turbopack":{"root":"/home/runner/work/failproofai/failproofai"},"distDirRoot":".next"}
+const nextConfig = {"env":{"NEXT_PUBLIC_APP_VERSION":"0.0.14-beta.2"},"typescript":{"ignoreBuildErrors":false},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.ts","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/work/failproofai/failproofai","cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":false,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"partialFallbacks":false,"dynamicOnHover":false,"varyParams":false,"prefetchInlining":false,"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":3,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"imgOptSkipMetadata":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"viewTransition":false,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":false,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":false,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.ts","outputFileTracingExcludes":{"*":["node_modules/@img/**","node_modules/sharp/**"]},"turbopack":{"root":"/home/runner/work/failproofai/failproofai"},"distDirRoot":".next"}
 
 process.env.__NEXT_PRIVATE_STANDALONE_CONFIG = JSON.stringify(nextConfig)
 

package/README.md

@@ -5,7 +5,7 @@
 [![npm](https://img.shields.io/npm/v/failproofai?style=flat-square&color=CB3837)](https://www.npmjs.com/package/failproofai)
 [![CI](https://img.shields.io/github/actions/workflow/status/failproofai/failproofai/ci.yml?branch=main&style=flat-square&label=CI)](https://github.com/failproofai/failproofai/actions)
 [![Supply Chain](https://img.shields.io/badge/supply%20chain-secure-brightgreen?style=flat-square)](https://github.com/failproofai/failproofai/actions/workflows/osv-scanner.yml)
-[![Discord](https://img.shields.io/badge/Discord-join%20us-5865F2?style=flat-square&logo=discord)](https://discord.gg/2zjBZP7yQJ)
+[![Discord](https://img.shields.io/badge/Discord-join%20us-5865F2?style=flat-square&logo=discord)](https://discord.befailproof.ai/)
 [![Docs](https://img.shields.io/badge/docs-befailproof.ai-002CA7?style=flat-square)](https://docs.befailproof.ai/introduction)
 [![License](https://img.shields.io/badge/license-MIT%20%2B%20Commons%20Clause-blue?style=flat-square)](./LICENSE)
 
@@ -119,22 +119,6 @@ before they become incidents. Zero latency. Runs locally.
   </tr>
 </table>
 
-> Install hooks for one or any combination: `failproofai policies --install --cli opencode pi` (or `--cli claude codex copilot cursor opencode pi hermes openclaw factory devin antigravity goose`). Omit `--cli` to auto-detect installed CLIs and prompt.
->
-> **Hermes** (hermes-agent, a Slack/Telegram gateway) is supported for both **live-hook enforcement** (`--cli hermes` — one install intercepts tool calls from every platform and subagent) and offline **audit** replay of its gateway sessions from the single `~/.hermes/state.db`.
->
-> **OpenClaw** (openclaw gateway, a self-hosted multi-channel assistant) is supported for both **live-hook enforcement** (`--cli openclaw`, user-scope) and offline **audit** replay of its JSONL sessions (`~/.openclaw/agents/<id>/sessions/*.jsonl`). Enforcement uses OpenClaw's **in-process plugin hooks** (a shipped `openclaw-plugin/` that async-spawns failproofai — its file-based internal hooks are observation-only and can't block): `before_tool_call` blocks a tool, and `before_agent_finalize` is a real turn-end gate, so the `require-*-before-stop` builtins enforce.
->
-> **Factory Droid** (`droid`) is supported for both **live-hook enforcement** (`--cli factory`, user + project scope) and offline **audit** replay of its on-disk JSONL sessions. droid blocks tool calls off hook **exit code 2** (not a JSON decision) and honors `{decision:"block"}` only on the turn-end `Stop` event — failproofai emits the right shape per event automatically.
->
-> **Devin CLI** (`devin`, Cognition) is supported for both **live-hook enforcement** (`--cli devin`, user + project scope) and offline **audit** replay of its SQLite sessions (`~/.local/share/devin/cli/sessions.db`). Devin is a **pure Claude-clone** — same event names, same snake_case payload, same `"hooks"`-wrapper config (`~/.config/devin/config.json` / `<cwd>/.devin/config.json`) — blocking via `{decision:"block"}` JSON on every event.
->
-> **Antigravity CLI** (`agy`) is supported for both **live-hook enforcement** (`--cli antigravity`, user + project scope) and offline **audit** replay of its plain-JSONL sessions (`~/.gemini/antigravity-cli/brain/<id>/…/transcript_full.jsonl`). Antigravity has its **own** contract (not a Claude-clone): a **named-hook** `hooks.json` schema (`~/.gemini/config/hooks.json` / `<cwd>/.agents/hooks.json`), a camelCase stdin payload that failproofai normalizes, and its own response shapes — `{decision:"deny"}` to block a tool, `{decision:"continue"}` to force another turn at `Stop`, `{injectSteps}` to inject a reminder before the model runs.
->
-> **Goose** (codename goose, Block) is supported for both **live-hook enforcement** (`--cli goose`, user + project scope) and offline **audit** replay of its SQLite sessions (`~/.local/share/goose/sessions/sessions.db`). Enforcement uses Goose's **hooks** system (the cross-agent **Open Plugins** spec) — the installer just drops a plugin dir at `~/.agents/plugins/failproofai/` and Goose auto-discovers it. Blocking is `{"decision":"block"}` JSON on the `PreToolUse` event (which fires for the shell tool and inside delegated subagents), verified live against goose v1.43.0; Goose has no turn-end `Stop` event, so the `require-*-before-stop` builtins don't apply (as with Hermes).
-
----
-
 ## Install
 
 ```sh

package/bin/failproofai.mjs

@@ -124,6 +124,16 @@ if (hookIdx >= 0) {
  * Error     → unexpected; shows message only, exits 2
  */
 async function runCli() {
+  // Report a fresh install / upgrade. Deliberately here rather than at module
+  // scope: everything above this point is the --hook fast path, which runs on
+  // every tool call. No-ops after the first run on a given version.
+  try {
+    const { maybeReportInstall } = await import("../lib/install-check");
+    await maybeReportInstall(version);
+  } catch {
+    // never block a command on reporting
+  }
+
   // --help / -h  (only when not inside a subcommand that handles its own --help)
   const SUBCOMMANDS = ["policies", "policy", "auth", "audit", "config"];
   if ((args.includes("--help") || args.includes("-h")) && !SUBCOMMANDS.includes(args[0])) {
@@ -209,7 +219,7 @@ EXAMPLES
 LINKS
   ⭐ Star us:      https://github.com/failproofai/failproofai
   📖 Docs:         https://docs.befailproof.ai/introduction
-  💬 Discord:      https://discord.gg/2zjBZP7yQJ
+  💬 Discord:      https://discord.befailproof.ai/
 `.trimStart());
     process.exit(0);
   }