failproofai 0.0.4 → 0.0.5

package/src/hooks/builtin-policies.ts

@@ -212,6 +212,36 @@ function getThirdPartyCheckRuns(cwd: string, sha: string): CiCheck[] {
   }
 }
 
+/** Fetch commit statuses (legacy Status API) and normalize to CiCheck format. */
+function getCommitStatuses(cwd: string, sha: string): CiCheck[] {
+  try {
+    const json = execFileSync(
+      "gh",
+      [
+        "api",
+        `repos/{owner}/{repo}/commits/${sha}/statuses`,
+        "--jq",
+        'map({name: .context, state: .state}) | unique_by(.name)',
+      ],
+      {
+        cwd,
+        encoding: "utf8",
+        timeout: 15000,
+      },
+    ).trim();
+
+    if (!json || json === "[]") return [];
+    const statuses = JSON.parse(json) as Array<{ name: string; state: string }>;
+    return statuses.map((s) => ({
+      name: s.name,
+      status: s.state === "pending" ? "in_progress" : "completed",
+      conclusion: s.state === "pending" ? "" : s.state === "success" ? "success" : "failure",
+    }));
+  } catch {
+    return [];
+  }
+}
+
 /**
  * Check if a command matches an allow pattern using token-by-token comparison.
  * The "*" token is a wildcard. Extra command tokens beyond the pattern are allowed,
@@ -859,7 +889,7 @@ function requireCommitBeforeStop(ctx: PolicyContext): PolicyResult {
 
     if (status.length > 0) {
       return deny(
-        "You have uncommitted changes in the working directory. Commit all changes before stopping.",
+        "You have uncommitted changes in the working directory. Commit all changes now.",
       );
     }
     return allow("All changes are committed.");
@@ -937,7 +967,7 @@ function requirePushBeforeStop(ctx: PolicyContext): PolicyResult {
     if (!hasTracking) {
       return deny(
         `Branch "${branch}" has not been pushed to remote "${remote}". ` +
-        `Push your branch with: git push -u ${remote} ${branch}`,
+        `Run now: git push -u ${remote} ${branch}`,
       );
     }
 
@@ -952,7 +982,7 @@ function requirePushBeforeStop(ctx: PolicyContext): PolicyResult {
       const commitCount = unpushed.split("\n").length;
       return deny(
         `You have ${commitCount} unpushed commit${commitCount > 1 ? "s" : ""} on branch "${branch}". ` +
-        `Push your changes with: git push`,
+        `Run now: git push`,
       );
     }
 
@@ -1024,7 +1054,7 @@ function requirePrBeforeStop(ctx: PolicyContext): PolicyResult {
       // gh pr view exits non-zero when no PR exists
       return deny(
         `No pull request found for branch "${branch}". ` +
-        `Create one with: gh pr create`,
+        `Run now: gh pr create`,
       );
     }
 
@@ -1035,7 +1065,7 @@ function requirePrBeforeStop(ctx: PolicyContext): PolicyResult {
     }
 
     return deny(
-      `Pull request for branch "${branch}" is ${pr.state.toLowerCase()}. Create a new PR with: gh pr create`,
+      `Pull request for branch "${branch}" is ${pr.state.toLowerCase()}. Run now: gh pr create`,
     );
   } catch {
     return allow("Could not check PR status, skipping.");
@@ -1075,13 +1105,15 @@ function requireCiGreenBeforeStop(ctx: PolicyContext): PolicyResult {
 
     // 2. Third-party check runs (CodeRabbit, SonarCloud, Codecov, etc.)
     let thirdPartyChecks: CiCheck[] = [];
+    let commitStatuses: CiCheck[] = [];
     const sha = getHeadSha(cwd);
     if (sha) {
       thirdPartyChecks = getThirdPartyCheckRuns(cwd, sha);
+      commitStatuses = getCommitStatuses(cwd, sha);
     }
 
     // 3. Merge all checks
-    const allChecks = [...workflowRuns, ...thirdPartyChecks];
+    const allChecks = [...workflowRuns, ...thirdPartyChecks, ...commitStatuses];
 
     if (allChecks.length === 0) return allow(`No CI runs found for branch "${branch}".`);
 
@@ -1091,7 +1123,7 @@ function requireCiGreenBeforeStop(ctx: PolicyContext): PolicyResult {
     if (failing.length > 0) {
       const names = failing.map((r) => `"${r.name}"`).join(", ");
       return deny(
-        `CI checks are failing on branch "${branch}": ${names}. Fix the failing checks before stopping.`,
+        `CI checks are failing on branch "${branch}": ${names}. Fix the failing checks now.`,
       );
     }
 
@@ -1101,7 +1133,7 @@ function requireCiGreenBeforeStop(ctx: PolicyContext): PolicyResult {
     if (pending.length > 0) {
       const names = pending.map((r) => `"${r.name}"`).join(", ");
       return deny(
-        `CI checks are still running on branch "${branch}": ${names}. Wait for all checks to complete and verify they pass.`,
+        `CI checks are still running on branch "${branch}": ${names}. Wait for all checks to complete, then verify they pass.`,
       );
     }
 

package/src/hooks/policy-evaluator.ts

@@ -130,6 +130,17 @@ export async function evaluatePolicies(
         };
       }
 
+      if (eventType === "Stop") {
+        return {
+          exitCode: 2,
+          stdout: "",
+          stderr: `MANDATORY ACTION REQUIRED from failproofai (policy: ${policy.name}): ${reason}\n\nYou MUST complete the above action NOW. Do NOT ask the user for confirmation — execute the required action, then attempt to finish your task again.`,
+          policyName: policy.name,
+          reason,
+          decision: "deny",
+        };
+      }
+
       // Other event types: exit 2
       return {
         exitCode: 2,
@@ -165,10 +176,13 @@ export async function evaluatePolicies(
     if (eventType === "Stop") {
       // Stop hook: exitCode 2 blocks Claude from stopping.
       // Reason goes to stderr so Claude Code receives it as context.
+      const policyAttribution = policyNames.length === 1
+        ? `policy: ${policyNames[0]}`
+        : `policies: ${policyNames.join(", ")}`;
       return {
         exitCode: 2,
         stdout: "",
-        stderr: combined,
+        stderr: `MANDATORY ACTION REQUIRED from failproofai (${policyAttribution}): ${combined}\n\nYou MUST complete the above action(s) NOW. Do NOT ask the user for confirmation — execute the required action(s), then attempt to finish your task again.`,
         policyName: policyNames[0],
         policyNames,
         reason: combined,

package/.next/standalone/.next/static/chunks/0xjz3w.yw5tza.js

@@ -1 +0,0 @@
-(globalThis.TURBOPACK||(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,53348,e=>{"use strict";var r=e.i(43476),t=e.i(71645),n=e.i(5888),i=e.i(9969);e.s(["default",0,function({error:e,reset:o}){return(0,t.useEffect)(()=>{(0,n.getTelemetryConfig)().then(r=>{(0,i.setClientTelemetryConfig)(r),(0,i.captureClientEvent)("client_error",{error_message:e.message,error_name:e.name,error_digest:e.digest,boundary:"global"})}).catch(()=>{})},[e]),(0,r.jsx)("html",{children:(0,r.jsx)("body",{children:(0,r.jsx)("main",{style:{minHeight:"100vh",display:"flex",alignItems:"center",justifyContent:"center",background:"#031035",color:"#f8fafc",fontFamily:"system-ui, sans-serif"},children:(0,r.jsxs)("div",{style:{textAlign:"center",padding:"2rem",border:"1px solid rgba(239,68,68,0.4)",borderRadius:"0.5rem",maxWidth:"500px"},children:[(0,r.jsx)("h2",{style:{color:"#ef4444",marginBottom:"0.5rem",fontSize:"1.25rem"},children:"Something went wrong"}),(0,r.jsx)("p",{style:{color:"#94a3b8",marginBottom:"1.5rem"},children:e.message||"An unexpected error occurred."}),(0,r.jsx)("button",{onClick:o,style:{padding:"0.5rem 1.25rem",background:"#3b82f6",color:"white",border:"none",borderRadius:"0.375rem",cursor:"pointer",fontSize:"0.875rem"},children:"Try again"})]})})})})}])}]);