failproofai 0.0.2-beta.1 → 0.0.2

package/dist/cli.mjs

@@ -1536,7 +1536,7 @@ var init_hook_activity_store = __esm(() => {
 });
 
 // package.json
-var version2 = "0.0.2-beta.1";
+var version2 = "0.0.2";
 var init_package = () => {};
 
 // src/posthog-key.ts
@@ -2077,6 +2077,19 @@ var init_install_prompt = __esm(() => {
   init_builtin_policies();
 });
 
+// src/cli-error.ts
+var CliError;
+var init_cli_error = __esm(() => {
+  CliError = class CliError extends Error {
+    exitCode;
+    constructor(message, exitCode = 1) {
+      super(message);
+      this.name = "CliError";
+      this.exitCode = exitCode;
+    }
+  };
+});
+
 // src/hooks/manager.ts
 var exports_manager = {};
 __export(exports_manager, {
@@ -2130,7 +2143,7 @@ function resolveFailproofaiBinary() {
     return result.split(`
 `)[0].trim();
   } catch {
-    throw new Error(`failproofai binary not found in PATH.
+    throw new CliError(`failproofai binary not found in PATH.
 ` + "Install it globally first: npm install -g failproofai");
   }
 }
@@ -2144,7 +2157,7 @@ function validatePolicyNames(names) {
   const invalid = names.filter((n) => !VALID_POLICY_NAMES.has(n));
   if (invalid.length > 0) {
     const validList = [...VALID_POLICY_NAMES].join(", ");
-    throw new Error(`Unknown policy name(s): ${invalid.join(", ")}
+    throw new CliError(`Unknown policy name(s): ${invalid.join(", ")}
 ` + `Valid policies: ${validList}`);
   }
 }
@@ -2211,6 +2224,15 @@ function removeHooksFromSettingsFile(settingsPath) {
   return removed;
 }
 async function installHooks(policyNames, scope = "user", cwd, includeBeta = false, source, customPoliciesPath, removeCustomHooks = false) {
+  if (policyNames !== undefined && policyNames.length > 0) {
+    const nonAllNames = policyNames.filter((n) => n !== "all");
+    if (nonAllNames.length > 0)
+      validatePolicyNames(nonAllNames);
+    if (policyNames.includes("all") && nonAllNames.length > 0) {
+      throw new CliError(`"all" cannot be combined with specific policy names.
+` + `Use either: --install all  or  --install block-sudo sanitize-jwt ...`);
+    }
+  }
   const binaryPath = resolveFailproofaiBinary();
   const previousConfig = readHooksConfig();
   const previousEnabled = new Set(previousConfig.enabledPolicies);
@@ -2220,8 +2242,6 @@ async function installHooks(policyNames, scope = "user", cwd, includeBeta = fals
     if (policyNames.length === 1 && policyNames[0] === "all") {
       incoming = BUILTIN_POLICIES.filter((p) => includeBeta || !p.beta).map((p) => p.name);
     } else {
-      if (policyNames.length > 0)
-        validatePolicyNames(policyNames);
       incoming = policyNames;
     }
     selectedPolicies = [...new Set([...previousConfig.enabledPolicies, ...incoming])];
@@ -2565,6 +2585,7 @@ var init_manager = __esm(() => {
   init_custom_hooks_loader();
   init_hook_telemetry();
   init_telemetry_id();
+  init_cli_error();
   VALID_POLICY_NAMES = new Set(BUILTIN_POLICIES.map((p) => p.name));
 });
 
@@ -2719,12 +2740,29 @@ var init_launch = __esm(() => {
   init_package();
 });
 
+// src/cli-error.ts
+var exports_cli_error = {};
+__export(exports_cli_error, {
+  CliError: () => CliError2
+});
+var CliError2;
+var init_cli_error2 = __esm(() => {
+  CliError2 = class CliError2 extends Error {
+    exitCode;
+    constructor(message, exitCode = 1) {
+      super(message);
+      this.name = "CliError";
+      this.exitCode = exitCode;
+    }
+  };
+});
+
 // bin/failproofai.mjs
 import { realpathSync as realpathSync2 } from "fs";
 import { dirname as dirname5, resolve as resolve8 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 // package.json
-var version = "0.0.2-beta.1";
+var version = "0.0.2";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {
@@ -2736,9 +2774,32 @@ if (!process.env.FAILPROOFAI_DIST_PATH) {
 var args = process.argv.slice(2);
 if (args[0] === "p")
   args[0] = "policies";
-var SUBCOMMANDS = ["policies"];
-if ((args.includes("--help") || args.includes("-h")) && !SUBCOMMANDS.includes(args[0])) {
-  console.log(`
+var hookIdx = args.indexOf("--hook");
+if (hookIdx >= 0) {
+  if (!args[hookIdx + 1]) {
+    console.error("Error: Missing event type after --hook");
+    console.error("Usage: failproofai --hook <event>  (e.g. PreToolUse, PostToolUse)");
+    process.exit(1);
+  }
+  try {
+    const { handleHookEvent: handleHookEvent2 } = await Promise.resolve().then(() => (init_handler(), exports_handler));
+    const exitCode = await handleHookEvent2(args[hookIdx + 1]);
+    process.exit(exitCode);
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    console.error(`Unexpected error: ${msg}`);
+    process.exit(2);
+  }
+}
+async function runCli() {
+  const SUBCOMMANDS = ["policies"];
+  if ((args.includes("--help") || args.includes("-h")) && !SUBCOMMANDS.includes(args[0])) {
+    const extraArgs = args.filter((a) => a !== "--help" && a !== "-h");
+    if (extraArgs.length > 0) {
+      throw new CliError3(`Unexpected argument: ${extraArgs[0]}
+Run \`failproofai --help\` for usage.`);
+    }
+    console.log(`
 failproofai v${version}
 
 USAGE
@@ -2778,25 +2839,24 @@ LINKS
   \u2B50 Star us:      https://github.com/exospherehost/failproofai
   \uD83D\uDCD6 Docs:         https://befailproof.ai
 `.trimStart());
-  process.exit(0);
-}
-if (args.includes("--version") || args.includes("-v")) {
-  console.log(version);
-  process.exit(0);
-}
-var hookIdx = args.indexOf("--hook");
-if (hookIdx >= 0 && args[hookIdx + 1]) {
-  const { handleHookEvent: handleHookEvent2 } = await Promise.resolve().then(() => (init_handler(), exports_handler));
-  const exitCode = await handleHookEvent2(args[hookIdx + 1]);
-  process.exit(exitCode);
-}
-if (args[0] === "policies") {
-  const subArgs = args.slice(1);
-  const isInstall = subArgs.includes("--install") || subArgs.includes("-i");
-  const isUninstall = subArgs.includes("--uninstall") || subArgs.includes("-u");
-  const isHelp = subArgs.includes("--help") || subArgs.includes("-h");
-  if (isHelp) {
-    console.log(`
+    process.exit(0);
+  }
+  if ((args.includes("--version") || args.includes("-v")) && !SUBCOMMANDS.includes(args[0])) {
+    const extraArgs = args.filter((a) => a !== "--version" && a !== "-v");
+    if (extraArgs.length > 0) {
+      throw new CliError3(`Unexpected argument: ${extraArgs[0]}
+Run \`failproofai --help\` for usage.`);
+    }
+    console.log(version);
+    process.exit(0);
+  }
+  if (args[0] === "policies") {
+    const subArgs = args.slice(1);
+    const isInstall = subArgs.includes("--install") || subArgs.includes("-i");
+    const isUninstall = subArgs.includes("--uninstall") || subArgs.includes("-u");
+    const isHelp = subArgs.includes("--help") || subArgs.includes("-h");
+    if (isHelp) {
+      console.log(`
 failproofai policies \u2014 manage Failproof AI policies
 
 USAGE
@@ -2827,65 +2887,119 @@ EXAMPLES
   failproofai policies -u
   failproofai policies --uninstall --custom
 `.trimStart());
+      process.exit(0);
+    }
+    if (isInstall) {
+      const { installHooks: installHooks2 } = await Promise.resolve().then(() => (init_manager(), exports_manager));
+      const scopeIdx = subArgs.indexOf("--scope");
+      const scope = scopeIdx >= 0 ? subArgs[scopeIdx + 1] : "user";
+      if (scopeIdx >= 0 && (!scope || scope.startsWith("-"))) {
+        throw new CliError3("Missing value for --scope. Valid values: user, project, local");
+      }
+      if (scopeIdx >= 0 && !["user", "project", "local"].includes(scope)) {
+        throw new CliError3(`Invalid scope: ${scope}. Valid values: user, project, local`);
+      }
+      const customIdx = subArgs.includes("--custom") ? subArgs.indexOf("--custom") : subArgs.includes("-c") ? subArgs.indexOf("-c") : -1;
+      const customPoliciesPath = customIdx >= 0 ? subArgs[customIdx + 1] : undefined;
+      if (customIdx >= 0 && (!customPoliciesPath || customPoliciesPath.startsWith("-"))) {
+        throw new CliError3(`Missing path after --custom/-c
+Usage: --custom <path>  (e.g. --custom ./my-policies.js)`);
+      }
+      const includeBeta = subArgs.includes("--beta");
+      const consumedIdxs = new Set;
+      if (scopeIdx >= 0)
+        consumedIdxs.add(scopeIdx + 1);
+      if (customIdx >= 0)
+        consumedIdxs.add(customIdx + 1);
+      const flags = new Set(["--install", "-i", "--scope", "--beta", "--custom", "-c"]);
+      const unknownInstallFlag = subArgs.find((a) => a.startsWith("-") && !flags.has(a));
+      if (unknownInstallFlag) {
+        throw new CliError3(`Unknown flag: ${unknownInstallFlag}
+Run \`failproofai policies --help\` for usage.`);
+      }
+      const explicitPolicyNames = subArgs.filter((a, idx) => !a.startsWith("-") && !consumedIdxs.has(idx));
+      const policyNames = explicitPolicyNames.length > 0 ? explicitPolicyNames : customPoliciesPath !== undefined ? [] : undefined;
+      await installHooks2(policyNames, scope, undefined, includeBeta, undefined, customPoliciesPath);
+      process.exit(0);
+    }
+    if (isUninstall) {
+      const { removeHooks: removeHooks2 } = await Promise.resolve().then(() => (init_manager(), exports_manager));
+      const scopeIdx = subArgs.indexOf("--scope");
+      const scope = scopeIdx >= 0 ? subArgs[scopeIdx + 1] : "user";
+      if (scopeIdx >= 0 && (!scope || scope.startsWith("-"))) {
+        throw new CliError3("Missing value for --scope. Valid values: user, project, local, all");
+      }
+      if (scopeIdx >= 0 && !["user", "project", "local", "all"].includes(scope)) {
+        throw new CliError3(`Invalid scope: ${scope}. Valid values: user, project, local, all`);
+      }
+      const betaOnly = subArgs.includes("--beta");
+      const removeCustomHooks = subArgs.includes("--custom") || subArgs.includes("-c");
+      const consumedIdxs = new Set;
+      if (scopeIdx >= 0)
+        consumedIdxs.add(scopeIdx + 1);
+      const flags = new Set(["--uninstall", "-u", "--scope", "--beta", "--custom", "-c"]);
+      const unknownUninstallFlag = subArgs.find((a) => a.startsWith("-") && !flags.has(a));
+      if (unknownUninstallFlag) {
+        throw new CliError3(`Unknown flag: ${unknownUninstallFlag}
+Run \`failproofai policies --help\` for usage.`);
+      }
+      const policyNames = subArgs.filter((a, idx) => !a.startsWith("-") && !consumedIdxs.has(idx));
+      await removeHooks2(policyNames.length > 0 ? policyNames : undefined, scope, undefined, { betaOnly, removeCustomHooks });
+      process.exit(0);
+    }
+    const knownListFlags = new Set(["--install", "-i", "--uninstall", "-u", "--help", "-h", "--list"]);
+    const unknownListArg = subArgs.find((a) => a.startsWith("-") && !knownListFlags.has(a));
+    if (unknownListArg) {
+      throw new CliError3(`Unknown flag: ${unknownListArg}
+Run \`failproofai policies --help\` for usage.`);
+    }
+    const positionalArgs = subArgs.filter((a) => !a.startsWith("-"));
+    if (positionalArgs.length > 0) {
+      throw new CliError3(`Unexpected argument: ${positionalArgs[0]}
+Run \`failproofai policies --help\` for usage.`);
+    }
+    const { listHooks: listHooks2 } = await Promise.resolve().then(() => (init_manager(), exports_manager));
+    await listHooks2();
     process.exit(0);
   }
-  if (isInstall) {
-    const { installHooks: installHooks2 } = await Promise.resolve().then(() => (init_manager(), exports_manager));
-    const scopeIdx = subArgs.indexOf("--scope");
-    const scope = scopeIdx >= 0 ? subArgs[scopeIdx + 1] : "user";
-    const customIdx = subArgs.includes("--custom") ? subArgs.indexOf("--custom") : subArgs.includes("-c") ? subArgs.indexOf("-c") : -1;
-    const customPoliciesPath = customIdx >= 0 ? subArgs[customIdx + 1] : undefined;
-    const includeBeta = subArgs.includes("--beta");
-    const consumed = new Set([scope, customPoliciesPath].filter(Boolean));
-    const flags = new Set(["--install", "-i", "--scope", "--beta", "--custom", "-c"]);
-    const explicitPolicyNames = subArgs.filter((a) => !a.startsWith("-") && !flags.has(a) && !consumed.has(a));
-    const policyNames = explicitPolicyNames.length > 0 ? explicitPolicyNames : customPoliciesPath !== undefined ? [] : undefined;
-    await installHooks2(policyNames, scope, undefined, includeBeta, undefined, customPoliciesPath);
-    process.exit(0);
-  }
-  if (isUninstall) {
-    const { removeHooks: removeHooks2 } = await Promise.resolve().then(() => (init_manager(), exports_manager));
-    const scopeIdx = subArgs.indexOf("--scope");
-    const scope = scopeIdx >= 0 ? subArgs[scopeIdx + 1] : "user";
-    const betaOnly = subArgs.includes("--beta");
-    const removeCustomHooks = subArgs.includes("--custom") || subArgs.includes("-c");
-    const consumed = new Set([scope].filter(Boolean));
-    const flags = new Set(["--uninstall", "-u", "--scope", "--beta", "--custom", "-c"]);
-    const policyNames = subArgs.filter((a) => !a.startsWith("-") && !flags.has(a) && !consumed.has(a));
-    await removeHooks2(policyNames.length > 0 ? policyNames : undefined, scope, undefined, { betaOnly, removeCustomHooks });
-    process.exit(0);
-  }
-  const { listHooks: listHooks2 } = await Promise.resolve().then(() => (init_manager(), exports_manager));
-  await listHooks2();
-  process.exit(0);
-}
-var knownFlags = ["--version", "-v", "--help", "-h", "--hook"];
-var unknownFlag = args.find((a) => a.startsWith("-") && !knownFlags.includes(a));
-if (unknownFlag) {
-  let levenshtein = function(a, b) {
-    const m = a.length, n = b.length;
-    const dp = Array.from({ length: m + 1 }, (_, i) => Array.from({ length: n + 1 }, (_2, j) => i === 0 ? j : j === 0 ? i : 0));
-    for (let i = 1;i <= m; i++)
-      for (let j = 1;j <= n; j++)
-        dp[i][j] = a[i - 1] === b[j - 1] ? dp[i - 1][j - 1] : 1 + Math.min(dp[i - 1][j], dp[i][j - 1], dp[i - 1][j - 1]);
-    return dp[m][n];
-  };
-  const primary = ["--version", "--help", "--hook", "policies"];
-  const closest = primary.reduce((best, flag) => {
-    const dist = levenshtein(unknownFlag, flag);
-    return dist < best.dist ? { flag, dist } : best;
-  }, { flag: primary[0], dist: Infinity });
-  console.error(`Unknown flag: ${unknownFlag}`);
-  console.error(`Did you mean: ${closest.flag}?`);
-  console.error(`Run \`failproofai --help\` for usage details.`);
-  process.exit(1);
-}
-var unknownSubcommand = args.find((a) => !a.startsWith("-") && a !== "policies");
-if (unknownSubcommand) {
-  console.error(`Unknown command: ${unknownSubcommand}`);
-  console.error(`Did you mean: failproofai policies?`);
-  console.error(`Run \`failproofai --help\` for usage details.`);
-  process.exit(1);
-}
-var { launch: launch2 } = await Promise.resolve().then(() => (init_launch(), exports_launch));
-launch2("start");
+  const knownFlags = ["--version", "-v", "--help", "-h", "--hook"];
+  const unknownFlag = args.find((a) => a.startsWith("-") && !knownFlags.includes(a));
+  if (unknownFlag) {
+    let levenshtein = function(a, b) {
+      const m = a.length, n = b.length;
+      const dp = Array.from({ length: m + 1 }, (_, i) => Array.from({ length: n + 1 }, (_2, j) => i === 0 ? j : j === 0 ? i : 0));
+      for (let i = 1;i <= m; i++)
+        for (let j = 1;j <= n; j++)
+          dp[i][j] = a[i - 1] === b[j - 1] ? dp[i - 1][j - 1] : 1 + Math.min(dp[i - 1][j], dp[i][j - 1], dp[i - 1][j - 1]);
+      return dp[m][n];
+    };
+    const primary = ["--version", "--help", "--hook", "policies"];
+    const closest = primary.reduce((best, flag) => {
+      const dist = levenshtein(unknownFlag, flag);
+      return dist < best.dist ? { flag, dist } : best;
+    }, { flag: primary[0], dist: Infinity });
+    throw new CliError3(`Unknown flag: ${unknownFlag}
+Did you mean: ${closest.flag}?
+Run \`failproofai --help\` for usage details.`);
+  }
+  const unknownSubcommand = args.find((a) => !a.startsWith("-") && a !== "policies");
+  if (unknownSubcommand) {
+    throw new CliError3(`Unknown command: ${unknownSubcommand}
+Did you mean: failproofai policies?
+Run \`failproofai --help\` for usage details.`);
+  }
+  const { launch: launch2 } = await Promise.resolve().then(() => (init_launch(), exports_launch));
+  launch2("start");
+}
+var { CliError: CliError3 } = await Promise.resolve().then(() => (init_cli_error2(), exports_cli_error));
+try {
+  await runCli();
+} catch (err) {
+  if (err instanceof CliError3) {
+    console.error(`Error: ${err.message}`);
+    process.exit(err.exitCode);
+  }
+  const msg = err instanceof Error ? err.message : String(err);
+  console.error(`Unexpected error: ${msg}`);
+  process.exit(2);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "0.0.2-beta.1",
+  "version": "0.0.2",
   "description": "Open-source hooks, policies, and project visualization for Claude Code & Agents SDK",
   "bin": {
     "failproofai": "./dist/cli.mjs"

package/scripts/publish-aliases.mjs

@@ -8,6 +8,8 @@ const __dirname = dirname(fileURLToPath(import.meta.url));
 const rootPkg = JSON.parse(readFileSync(join(__dirname, '..', 'package.json'), 'utf8'));
 const VERSION = rootPkg.version;
 const DRY_RUN = process.argv.includes('--dry-run');
+const distTagIdx = process.argv.indexOf('--dist-tag');
+const DIST_TAG = distTagIdx !== -1 ? process.argv[distTagIdx + 1] : (VERSION.includes('-') ? 'beta' : 'latest');
 
 const ALIASES = [
   // Formatting variants — no "ai", or hyphen/underscore separators
@@ -54,7 +56,7 @@ for (const name of ALIASES) {
   cpSync(join(__dirname, 'alias-proxy.js'), join(binDir, 'proxy.js'));
 
   if (DRY_RUN) {
-    console.log(`[dry-run] Would publish ${name}@${VERSION}`);
+    console.log(`[dry-run] Would publish ${name}@${VERSION} (tag: ${DIST_TAG})`);
     console.log(JSON.stringify(pkg, null, 2));
     console.log('---');
     rmSync(tmpDir, { recursive: true, force: true });
@@ -63,7 +65,7 @@ for (const name of ALIASES) {
 
   console.log(`Publishing ${name}@${VERSION}...`);
   try {
-    execSync('npm publish', { cwd: tmpDir, stdio: 'pipe' });
+    execSync(`npm publish --tag ${DIST_TAG}`, { cwd: tmpDir, stdio: 'pipe' });
     console.log(`Done: ${name}`);
   } catch (err) {
     const output = (err.stdout?.toString() ?? '') + (err.stderr?.toString() ?? '');

package/src/cli-error.ts

@@ -0,0 +1,18 @@
+/**
+ * CliError — structured error for the failproofai CLI.
+ *
+ * Throw this for any error that should be reported to the user as a clean
+ * message (no stack trace). The exit code communicates the failure class:
+ *
+ *   1 — user error   (bad args, unknown policy name, invalid flag)
+ *   2 — internal     (file I/O failure, unexpected state)
+ */
+export class CliError extends Error {
+  readonly exitCode: 1 | 2;
+
+  constructor(message: string, exitCode: 1 | 2 = 1) {
+    super(message);
+    this.name = "CliError";
+    this.exitCode = exitCode;
+  }
+}

package/src/hooks/manager.ts

@@ -21,6 +21,7 @@ import { BUILTIN_POLICIES } from "./builtin-policies";
 import { loadCustomHooks } from "./custom-hooks-loader";
 import { trackHookEvent } from "./hook-telemetry";
 import { getInstanceId, hashToId } from "../../lib/telemetry-id";
+import { CliError } from "../cli-error";
 
 const VALID_POLICY_NAMES = new Set(BUILTIN_POLICIES.map((p) => p.name));
 
@@ -67,7 +68,7 @@ function resolveFailproofaiBinary(): string {
     // `where` on Windows may return multiple lines; take the first
     return result.split("\n")[0].trim();
   } catch {
-    throw new Error(
+    throw new CliError(
       "failproofai binary not found in PATH.\n" +
       "Install it globally first: npm install -g failproofai"
     );
@@ -85,7 +86,7 @@ function validatePolicyNames(names: string[]): void {
   const invalid = names.filter((n) => !VALID_POLICY_NAMES.has(n));
   if (invalid.length > 0) {
     const validList = [...VALID_POLICY_NAMES].join(", ");
-    throw new Error(
+    throw new CliError(
       `Unknown policy name(s): ${invalid.join(", ")}\n` +
       `Valid policies: ${validList}`
     );
@@ -185,6 +186,20 @@ export async function installHooks(
   customPoliciesPath?: string,
   removeCustomHooks = false,
 ): Promise<void> {
+  // Validate user input first before any system checks
+  if (policyNames !== undefined && policyNames.length > 0) {
+    const nonAllNames = policyNames.filter((n) => n !== "all");
+    // Check unknown names first (most actionable error for the user)
+    if (nonAllNames.length > 0) validatePolicyNames(nonAllNames);
+    // Then check if "all" is mixed with valid specific names
+    if (policyNames.includes("all") && nonAllNames.length > 0) {
+      throw new CliError(
+        `"all" cannot be combined with specific policy names.\n` +
+        `Use either: --install all  or  --install block-sudo sanitize-jwt ...`
+      );
+    }
+  }
+
   const binaryPath = resolveFailproofaiBinary();
 
   // Capture existing config before overwriting (used for telemetry diff)
@@ -201,7 +216,6 @@ export async function installHooks(
         .filter((p) => includeBeta || !p.beta)
         .map((p) => p.name);
     } else {
-      if (policyNames.length > 0) validatePolicyNames(policyNames);
       incoming = policyNames;
     }
     // Additive: union with whatever was already enabled, deduplicated.