failproofai 0.0.6-beta.2 → 0.0.6-beta.4

package/.next/standalone/AGENTS.md

@@ -1,80 +0,0 @@
-# AGENTS.md — Codex / agent guidance for this repo
-
-This file is read by AI coding agents (Codex, Claude Code, etc.). It duplicates the most
-critical rules from CLAUDE.md in a format optimised for agent consumption.
-
-## Non-negotiable rules
-
-1. **Branch must contain all commits from main.** Before every push, run:
-   ```bash
-   git fetch origin && git log --oneline origin/main ^HEAD
-   ```
-   If that prints anything, rebase first: `git rebase origin/main`. Never push a branch
-   that is missing commits from `main`.
-
-3. **One PR per branch.** Check `gh pr list --head <current-branch>` before creating a PR.
-   Push to the existing PR if one already exists.
-
-4. **CI must be green before you stop.** After every push, poll `gh run list --limit 3`
-   until all checks complete. Fix failures before proceeding or declaring done.
-
-5. **Never edit a test to make it pass.** Fix the code. Tests may only be changed when the
-   test itself is wrong or when the feature under test was intentionally changed.
-
-6. **Always add unit tests for new behaviour.** Place tests in `__tests__/`. Unit tests live
-   in `__tests__/hooks/`, e2e tests in `__tests__/e2e/hooks/`.
-
-7. **Docker is available.** Use `oven/bun:latest` with `--network=host` to do clean-install
-   end-to-end testing after every non-trivial implementation. See CLAUDE.md for the exact
-   Docker test recipe.
-
-## Test commands
-
-```bash
-bun run test:run     # unit tests (fast, run first)
-bun run test:e2e     # end-to-end hook tests (slower, run before push)
-bun run lint         # eslint
-bunx tsc --noEmit    # type check
-```
-
-## Docker smoke test (run after every change to src/hooks/ or package.json)
-
-```bash
-npm pack --ignore-scripts
-docker run --rm --network=host \
-  -v $(pwd)/failproofai-*.tgz:/pkg.tgz \
-  oven/bun:latest bash -c "
-    apt-get update -qq && apt-get install -y -qq nodejs npm 2>&1 | tail -2
-    npm install -g /pkg.tgz --ignore-scripts 2>&1 | tail -3
-    cat > /tmp/tp.mjs << 'EOF'
-import { customPolicies, allow } from 'failproofai';
-customPolicies.add({ name: 't', description: 't', match: { events: ['PreToolUse'] }, fn: async () => allow() });
-EOF
-    failproofai p -i -c /tmp/tp.mjs
-  "
-rm failproofai-*.tgz
-```
-
-Expected: `Validated 1 custom hook(s): t`, exit 0.
-
-## Regression checklist
-
-Run through this mentally after any change to `src/hooks/` or `dist/` build:
-
-- [ ] ESM import (`from 'failproofai'`) in custom policy resolves
-- [ ] CJS require (`require('failproofai')`) in custom policy resolves  
-- [ ] Transitive local imports inside custom policy file work
-- [ ] Builtin policies run when no custom file is configured
-- [ ] `failproofai p -i -c <nonexistent>` fails gracefully (no crash)
-- [ ] `bun run test:run` — all unit tests pass
-- [ ] `bun run test:e2e` — all e2e tests pass
-- [ ] CI is green
-
-## Key files
-
-| File | Purpose |
-|------|---------|
-| `src/hooks/loader-utils.ts` | `findDistIndex()`, ESM shim, import rewriting |
-| `src/hooks/custom-hooks-loader.ts` | Top-level custom hook loading orchestrator |
-| `src/index.ts` | Public API → `dist/index.js` bundle entry |
-| `package.json` | `files` must include `dist/`; `build` must build `dist/index.js` |

package/.next/standalone/CHANGELOG.md

@@ -1,151 +0,0 @@
-# Changelog
-
-## Unreleased
-
-## 0.0.6-beta.2 — 2026-04-21
-
-### Features
-- Add `prefer-package-manager` builtin policy to enforce allowed package managers (e.g., uv instead of pip) (#126)
-
-### Fixes
-- Treat cancelled CI runs as non-failing in `require-ci-green-before-stop` policy (#129)
-
-### Docs
-- Emphasize convention-based policies as org-wide quality standards in getting-started, custom-policies, examples, and README (#126)
-
-## 0.0.6-beta.1 — 2026-04-20
-
-### Features
-- Add `prefer-package-manager` builtin policy to enforce allowed package managers (e.g., uv instead of pip) (#126)
-
-### Docs
-- Emphasize convention-based policies as org-wide quality standards in getting-started, custom-policies, examples, and README (#126)
-
-## 0.0.6-beta.0 — 2026-04-20
-
-### Fixes
-- Fix `require-pr-before-stop` falsely denying when PR is already merged and `origin/main` is stale (#112)
-
-## 0.0.5 — 2026-04-17
-
-### Fixes
-- Strengthen Stop-event deny/instruct instructions with mandatory framing so agents execute required actions instead of asking for confirmation (#109)
-- Include legacy commit statuses (CodeRabbit, etc.) in CI green check — previously only Check Runs API was queried (#109)
-
-### Docs
-- Remove beta version annotations from convention-based policies and allow(message) documentation (#110)
-
-## 0.0.4 — 2026-04-16
-
-### Features
-- Graduate 4 workflow policies from beta to stable: `require-commit-before-stop`, `require-push-before-stop`, `require-pr-before-stop`, `require-ci-green-before-stop` (#105)
-
-## 0.0.3 — 2026-04-15
-
-### Features
-- Use portable `npx -y failproofai` command for project-scope hooks, making `.claude/settings.json` committable to git (#96)
-- Parallelize translation workflow across 14 languages with concurrent file translation for faster CI (#98)
-- Add manual workflow dispatch for translations with `force` (ignore cache) and `languages` filter inputs (#98)
-- Tier-based model selection for translations: Sonnet for Tier 1, Haiku for Tier 2/3; add prompt caching on system prompt (#98)
-
-### Fixes
-- Fix hooks not working in failproofai's own repo by using local binary instead of npx (#98)
-- Fix translation workflow placing files at repo root instead of `docs/` by setting download artifact path (#100)
-
-## 0.0.2-beta.8 — 2026-04-14
-
-### Features
-- Add `changelog-check`, `docs-check`, and `pr-description-check` convention policies
-- Track `.claude/settings.json` in git
-- Add multilingual documentation with 14 languages and automated translation tooling (#93)
-- Add GitHub Actions workflow to auto-translate docs when English sources change (#95)
-- Add Mintlify docs validation to CI (#95)
-
-### Fixes
-- Accumulate all `instruct` messages instead of only delivering the first one
-- Rename convention policy prefix from `convention/` to `.failproofai-{scope}/` (e.g. `.failproofai-project/`, `.failproofai-user/`) and add `convention_scope` to telemetry
-
-### Docs
-- Document cross-cutting `hint` param in built-in policies reference and add `block-force-push` hint example
-- Add `block-force-push` hint to project config suggesting fresh branch as alternative
-
-## 0.0.2-beta.7 — 2026-04-14
-
-### Features
-- Check third-party bot statuses (CodeRabbit, SonarCloud, etc.) in `require-ci-green-before-stop` policy (#90)
-- Convention-based policy auto-discovery: drop `*policies.{js,mjs,ts}` files into `.failproofai/policies/` at project or user level for automatic loading — no config changes needed (#91)
-- Configurable `hint` field in `policyParams` — append custom guidance to deny/instruct messages without modifying policies (#91)
-- Auto-bump version after release (#73)
-
-### Fixes
-- Write `policies-config.json` to scope-appropriate path (#57)
-- Fix custom hooks loader cwd, ESM shim exports, and merged LLM config (#76)
-
-### Docs
-- Replace Discord links with Slack community invite (#87)
-
-### Dependencies
-- Bump `@types/node` 25.5.2 → 25.6.0 (#86)
-- Bump `react-dom` 19.2.4 → 19.2.5 (#85)
-- Bump `next` 16.2.2 → 16.2.3 (#84)
-- Bump `posthog-node` 5.28.11 → 5.29.2 (#83)
-- Bump `lucide-react` 1.7.0 → 1.8.0 (#82)
-- Bump `eslint-config-next` 16.2.2 → 16.2.3 (#81)
-- Bump `vitest` 4.1.2 → 4.1.4 (#80)
-- Bump `react` 19.2.4 → 19.2.5 (#79)
-- Bump `actions/checkout` 4 → 6 (#78)
-
-## 0.0.2-beta.6 — 2026-04-09
-
-### Fixes
-- `require-push-before-stop` skips when no changes vs base branch (#71)
-
-## 0.0.2-beta.5 — 2026-04-09
-
-### Features
-- Display package version in navbar (#66)
-
-### Fixes
-- `require-pr-before-stop` skips when no changes vs base branch (#67)
-- Show plain Allow badge instead of blue Allow(note) (#68)
-
-## 0.0.2-beta.4 — 2026-04-09
-
-### Features
-- Surface allow-with-message in terminal and dashboard (#65)
-
-### Fixes
-- Policy bypass gaps in `block-rm-rf`, `block-curl-pipe-sh`, `protect-env-vars` + Stop hook stderr bug (#64)
-
-## 0.0.2-beta.3 — 2026-04-09
-
-### Features
-- 4 beta workflow policies + allow-with-message support (#63)
-
-### Fixes
-- Disable PostHog telemetry in all CI jobs and test configs (#62)
-- README badge fixes — stable npm version, remove broken Discord (#53)
-
-### Docs
-- Rewrite README to focus on hooks management (#54)
-- Rewrite docs for Mintlify, fix CLI parity, add agent skill page (#55)
-- Rename custom-hooks to custom-policies, update Dockerfile for hot reload (#61)
-
-## 0.0.2-beta.2 — 2026-04-08
-
-### Features
-- Add Mintlify documentation configuration (#43)
-
-### Fixes
-- Bundle CLI for Node.js compatibility, support `npm install -g` (#46)
-- Correct CLI commands in README (#45)
-- Clean CLI error handling, reject unknown args (#48)
-
-## 0.0.1 — 2026-04-06
-
-Initial open-source release of **Failproof AI** — formerly Claudeye.
-
-Features included in this release:
-- **Hooks & Policies**: 35+ built-in security policies for Claude Code hooks (PreToolUse, PostToolUse, etc.), custom policy support, activity logging
-- **Projects**: Browse and search Claude Code projects and sessions
-- **Session Viewer**: Inspect session logs, tool calls, and per-session hook activity

package/.next/standalone/CLAUDE.md

@@ -1,165 +0,0 @@
-# CLAUDE.md — Agent guidance for this repo
-
-## Environment
-
-- **Runtime:** bun (≥1.3.0) and Node.js (≥20.9.0) are both present.
-- **Docker CLI** is available. Use it to spin up clean containers that mimic real user
-  installs and validate every non-trivial change end-to-end before pushing.
-- **Package manager:** bun (`bun install`, `bun run <script>`). Do not use npm/yarn to
-  install deps locally.
-
-## Dev hooks (this repo only)
-
-This repo's `.claude/settings.json` uses `bun ./bin/failproofai.mjs --hook <EventType>`
-instead of the standard `npx -y failproofai` command. This is because `npx -y failproofai`
-creates a self-referencing conflict when run inside the failproofai project itself.
-
-For all other repos, the recommended approach is `npx -y failproofai`, installed via:
-```bash
-failproofai policies --install --scope project
-```
-
-Do **not** run `failproofai policies --install --scope project` from this repo — it will
-overwrite the local binary path back to `npx -y failproofai`.
-
-## Workflow rules
-
-### One PR per branch
-Each local branch maps to exactly one PR. Before opening a PR, check with
-`gh pr list --head <branch>`. If one exists, push new commits to the same branch — never
-open a second PR for the same branch.
-
-### Branch must contain all commits from main
-Before pushing, verify your branch is up to date with `main`:
-
-```bash
-git fetch origin
-git log --oneline origin/main ^HEAD   # should print nothing
-```
-
-If it prints commits, rebase before pushing:
-
-```bash
-git rebase origin/main
-```
-
-Resolve any conflicts, then continue. Never push a branch that is missing commits from
-`main` — the PR diff will be polluted and CI may test against a stale base.
-
-### CI must be green after every commit you push
-After every `git push`, run `gh run watch` or poll `gh run list --limit 3` until all checks
-finish. If any job fails, **stop and fix it before continuing**. Never leave a red CI.
-
-The CI runs four jobs — all must pass:
-| Job | Command |
-|-----|---------|
-| quality | lint + tsc + version-consistency check |
-| test | `bun run test:run` (unit, 4 env configs) |
-| build | `bun run build` (Next.js + dist/index.js) |
-| test-e2e | `bun run test:e2e` |
-
-### Always add unit tests for new behaviour
-When you add or change logic, add a corresponding test in `__tests__/`. Never modify
-existing tests just to make them pass — if a test breaks, fix the code, not the test.
-Exception: updating a test that explicitly tests the value you're changing (e.g. a version
-string or an error message you intentionally changed).
-
-## Testing protocol
-
-### After every implementation change
-
-1. **Unit tests first** — fast, in-process:
-   ```bash
-   bun run test:run
-   ```
-
-2. **Local smoke test** — use the dev dist directly:
-   ```bash
-   bun build --target=node --format=cjs --outfile=dist/index.js src/index.ts
-   FAILPROOFAI_DIST_PATH=$(pwd)/dist failproofai p -i -c <policy-file>
-   ```
-
-3. **Docker clean-install test** — mimics a real `npm install -g` from scratch.
-   Use the `oven/bun:latest` image (bun pre-installed) with `--network=host`:
-
-   ```bash
-   # Pack without running the full build
-   npm pack --ignore-scripts
-
-   docker run --rm --network=host \
-     -v $(pwd)/failproofai-*.tgz:/pkg.tgz \
-     oven/bun:latest bash -c "
-       apt-get update -qq && apt-get install -y -qq nodejs npm 2>&1 | tail -2
-       npm install -g /pkg.tgz --ignore-scripts 2>&1 | tail -3
-       cat > /tmp/test-policy.mjs << 'EOF'
-   import { customPolicies, allow } from 'failproofai';
-   customPolicies.add({
-     name: 'smoke-test',
-     description: 'Smoke test',
-     match: { events: ['PreToolUse'] },
-     fn: async (ctx) => allow(),
-   });
-   EOF
-       failproofai --version
-       failproofai p -i -c /tmp/test-policy.mjs
-     "
-
-   rm failproofai-*.tgz
-   ```
-
-   Expected output includes `Validated 1 custom hook(s): smoke-test` and exit 0.
-
-4. **E2E tests** (before pushing):
-   ```bash
-   bun run test:e2e
-   ```
-
-### Regression areas to always check
-
-After any change to `src/hooks/`, verify these scenarios don't regress:
-
-| Scenario | How to check |
-|----------|-------------|
-| Custom policy with `from 'failproofai'` ESM import | Docker clean-install test above |
-| Custom policy with `require('failproofai')` CJS | Write a `.js` test file with `require` and run `p -i -c` |
-| Transitive local imports in custom policy | Use `examples/policies-advanced/index.js` |
-| Builtin policies still fire (no custom file) | `failproofai p -i` without `-c` |
-| `findDistIndex()` fallback when `FAILPROOFAI_DIST_PATH` unset | Unset the var and test |
-| `loadCustomHooks` fail-open (bad file path) | Pass a nonexistent file without `--strict` |
-
-## Project structure cheatsheet
-
-```
-bin/failproofai.mjs          Entry point (bun shebang); sets FAILPROOFAI_DIST_PATH
-src/hooks/
-  custom-hooks-loader.ts     Orchestrates temp-file creation + dynamic import
-  loader-utils.ts            findDistIndex(), createEsmShim(), rewriteFileTree()
-  custom-hooks-registry.ts   globalThis registry shared between loader and handler
-  policy-helpers.ts          allow() / deny() / instruct()
-  handler.ts                 Called by Claude Code --hook events
-  manager.ts                 policies --install / --uninstall / list
-src/index.ts                 Public API entry point → compiled to dist/index.js
-dist/index.js                CJS bundle (built by `bun run build`; shipped in npm pkg)
-__tests__/                   Unit + e2e tests (vitest)
-examples/                    Sample custom policy files
-```
-
-## Changelog
-
-Every PR **must** include an update to `CHANGELOG.md`. Add your entry under the
-`## Unreleased` section at the top. Use the appropriate subsection:
-
-- **Features** for new functionality
-- **Fixes** for bug fixes
-- **Docs** for documentation-only changes
-- **Dependencies** for dependency bumps
-
-Each entry should be a single line: a short description followed by the PR number
-(e.g. `- Add foo support (#123)`). When a release is cut, the `Unreleased` section gets
-renamed to the version and date, and a fresh `## Unreleased` heading is added.
-
-## Version bumps
-
-When bumping the version, update **only** `package.json` (root). The CI version-consistency
-check compares `packages/*/package.json` against root — that directory does not currently
-exist, so no other files need updating.

package/.next/standalone/CONTRIBUTING.md

@@ -1,76 +0,0 @@
-# Contributing to Failproof AI
-
-Thanks for your interest in contributing! Here's how to get started.
-
-## Prerequisites
-
-- Bun >= 1.3.0 (or Node.js >= 20.9.0)
-
-## Development Setup
-
-```bash
-git clone https://github.com/exosphereHost/failproofai.git
-cd failproofai
-bun install
-bun run dev
-```
-
-The dev server starts at `http://localhost:8020`.
-
-## Available Scripts
-
-| Script | Description |
-|--------|-------------|
-| `bun run dev` | Start the development server |
-| `bun run lint` | Run ESLint |
-| `bunx tsc --noEmit` | Type-check without emitting |
-| `bun run test:run` | Run tests once (Vitest) |
-| `bun run test` | Run tests in watch mode |
-| `bun run build` | Production build (Next.js) |
-
-## Project Structure
-
-```
-failproofai/
-├── app/            # Next.js app router (pages, layouts, server actions)
-├── bin/            # CLI entry point
-├── components/     # Shared React components
-├── contexts/       # React context providers
-├── lib/            # Core logic (logging, telemetry, paths, URL utils)
-├── src/hooks/      # Hook handler, built-in policies, custom hooks loader
-├── scripts/        # Dev/start/build helper scripts
-├── __tests__/      # Test files
-├── examples/       # Example custom hook policies
-└── public/         # Static assets
-```
-
-### Key Subsystems
-
-| Directory | Description |
-|-----------|-------------|
-| `src/hooks/` | Hook handler, built-in policies, custom hooks loader |
-| `app/actions/` | Next.js server actions |
-| `app/components/` | Session viewer, project list, log viewer |
-
-### Environment Variables
-
-| Variable | Description |
-|----------|-------------|
-| `CLAUDE_PROJECTS_PATH` | Path to Claude projects directory |
-| `FAILPROOFAI_LOG_LEVEL` | Log level: `info`, `warn`, `error` (default: `warn`) |
-| `FAILPROOFAI_TELEMETRY_DISABLED` | Set to `1` to disable anonymous telemetry |
-| `FAILPROOFAI_DISABLE_PAGES` | Comma-separated pages to disable: `policies`, `projects` |
-
-## Pull Request Guidelines
-
-1. Keep changes focused — one concern per PR.
-2. Make sure all checks pass before requesting review:
-   ```bash
-   bun run lint && bunx tsc --noEmit && bun run test:run && bun run build
-   ```
-3. Include a clear description of what the PR does and why.
-4. Add tests for new functionality when applicable.
-
-## Reporting Issues
-
-Found a bug or have a feature idea? [Open an issue](https://github.com/exosphereHost/failproofai/issues). The issue templates will guide you through providing the right details.

package/.next/standalone/Dockerfile.docs

@@ -1,12 +0,0 @@
-FROM node:22-slim
-
-RUN npm install -g mintlify
-
-RUN useradd --create-home --uid 10001 docsuser
-WORKDIR /app/docs
-COPY --chown=docsuser:docsuser docs/ ./
-
-USER docsuser
-EXPOSE 3000
-
-CMD ["mintlify", "dev", "--host", "0.0.0.0"]

package/.next/standalone/LICENSE

@@ -1,42 +0,0 @@
-MIT License
-
-Copyright (c) 2025 ExosphereHost Inc
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
-Commons Clause License Condition v1.0
-
-The Software is provided to you by the Licensor under the License, as defined
-below, subject to the following condition.
-
-Without limiting other conditions in the License, the grant of rights under
-the License will not include, and the License does not grant to you, the right
-to Sell the Software.
-
-For purposes of the foregoing, "Sell" means practicing any or all of the
-rights granted to you under the License to provide to third parties, for a
-fee or other consideration (including without limitation fees for hosting or
-consulting/support services related to the Software), a product or service
-whose value derives, entirely or substantially, from the functionality of the
-Software. Any license notice or attribution required by the License must also
-include this Commons Clause License Condition notice.
-
-Software: failproofai
-License: MIT
-Licensor: ExosphereHost Inc