failproofai 0.0.9-beta.2 → 0.0.10-beta.0

package/.next/standalone/lib/pi-sessions.ts

@@ -0,0 +1,325 @@
+/**
+ * Pi (pi-coding-agent) session transcript discovery + JSONL parser.
+ *
+ * Empirically verified against pi-coding-agent v0.72.1 (Phase 0.7 of plan):
+ *
+ * Session files live at
+ *   `~/.pi/agent/sessions/<encoded-cwd>/<ISO-timestamp>_<UUID>.jsonl`
+ * where `<encoded-cwd>` wraps `--`-prefixed-and-suffixed `/`-separated paths
+ * (e.g. `/home/user/repo` → `--home-user-repo--`). The encoding is lossy
+ * (literal `-` is preserved); we use the `cwd` field of the first JSONL
+ * record (`{type: "session", cwd, …}`) as the canonical cwd.
+ *
+ * Record schema (observed):
+ *   {type: "session",                version, id, timestamp, cwd}
+ *   {type: "model_change",           id, parentId, timestamp, provider, modelId}
+ *   {type: "thinking_level_change",  id, parentId, timestamp, thinkingLevel}
+ *   {type: "message",                id, parentId, timestamp,
+ *                                    message: {role, content[], timestamp}}
+ *
+ * `message.content[]` items can be `{type: "text", text}` or
+ * `{type: "thinking", thinking, thinkingSignature}`. Tool-call blocks are not
+ * yet observed in this codebase (no tool-using runs were captured during
+ * Phase 0); when Pi does emit them, this parser preserves them as-is via the
+ * fallback "system" branch and the test suite asserts at least the
+ * round-trip rather than a specific shape.
+ */
+import { readFileSync, readdirSync, existsSync, statSync } from "node:fs";
+import { readFile } from "node:fs/promises";
+import { join, resolve, sep } from "node:path";
+import { homedir } from "node:os";
+import { runtimeCache } from "./runtime-cache";
+import {
+  baseEntry,
+  formatTimestamp,
+  type LogEntry,
+  type UserEntry,
+  type AssistantEntry,
+  type GenericEntry,
+  type QueueOperationEntry,
+  type ContentBlock,
+  type LogSource,
+} from "./log-entries";
+
+// ── Paths ──
+
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+const SESSION_FILE_RE = /^[\d-]+T[\d-]+Z_([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.jsonl$/i;
+
+/** Root directory for Pi session state, honoring PI_SESSIONS_DIR. */
+export function getPiSessionStateRoot(): string {
+  return process.env.PI_SESSIONS_DIR
+    || join(homedir(), ".pi", "agent", "sessions");
+}
+
+/** Reject a sessionId that isn't a UUID — defends against path traversal. */
+function isSafeSessionId(sessionId: string): boolean {
+  return UUID_RE.test(sessionId);
+}
+
+/** Find the JSONL transcript for `sessionId` by walking each per-cwd subdir
+ *  of the session-state root. Rejects path-traversal sessionIds and verifies
+ *  the resolved path stays under the root. Returns null on miss. */
+export function findPiTranscript(sessionId: string): string | null {
+  if (!isSafeSessionId(sessionId)) return null;
+  const root = resolve(getPiSessionStateRoot());
+
+  let cwdDirs: string[];
+  try {
+    cwdDirs = readdirSync(root);
+  } catch {
+    return null;
+  }
+
+  for (const cwdDir of cwdDirs) {
+    const cwdPath = resolve(root, cwdDir);
+    if (!cwdPath.startsWith(`${root}${sep}`)) continue;
+    let files: string[];
+    try {
+      files = readdirSync(cwdPath);
+    } catch {
+      continue;
+    }
+    for (const f of files) {
+      const m = SESSION_FILE_RE.exec(f);
+      if (!m || m[1].toLowerCase() !== sessionId.toLowerCase()) continue;
+      const candidate = resolve(cwdPath, f);
+      if (!candidate.startsWith(`${cwdPath}${sep}`)) continue;
+      if (existsSync(candidate)) return candidate;
+    }
+  }
+  return null;
+}
+
+// ── Parser ──
+
+interface PiSessionRecord {
+  type?: string;
+  id?: string;
+  parentId?: string | null;
+  timestamp?: string;
+  cwd?: string;
+  version?: number;
+  provider?: string;
+  modelId?: string;
+  thinkingLevel?: string;
+  message?: {
+    role?: string;
+    content?: Array<Record<string, unknown>>;
+    timestamp?: number;
+  };
+}
+
+interface PiParseResult {
+  entries: LogEntry[];
+  rawLines: Record<string, unknown>[];
+  /** Working directory pulled from the first session record, when available. */
+  cwd?: string;
+}
+
+/** Extract a plain-text summary of a Pi message content block. Concatenates
+ *  every `"text"` block (joined by blank lines) so multi-part user messages
+ *  aren't truncated to just the first text segment. */
+function extractMessageText(content: Array<Record<string, unknown>> | undefined): string {
+  if (!Array.isArray(content)) return "";
+  const parts: string[] = [];
+  for (const block of content) {
+    if (block?.type === "text" && typeof block.text === "string") parts.push(block.text);
+  }
+  return parts.join("\n\n");
+}
+
+/** Build a list of ContentBlocks for the assistant entry, preserving text and
+ *  thinking blocks. Skips blocks with non-string payloads (typeof guards). */
+function buildAssistantContent(content: Array<Record<string, unknown>> | undefined): ContentBlock[] {
+  if (!Array.isArray(content)) return [];
+  const blocks: ContentBlock[] = [];
+  for (const block of content) {
+    if (block?.type === "text" && typeof block.text === "string" && block.text.length > 0) {
+      blocks.push({ type: "text", text: block.text });
+    }
+    // Pi's "thinking" blocks aren't a first-class entry type in our LogEntry
+    // hierarchy; embed as a text block prefixed for clarity.
+    if (block?.type === "thinking" && typeof block.thinking === "string" && block.thinking.length > 0) {
+      blocks.push({ type: "text", text: `[thinking] ${block.thinking}` });
+    }
+  }
+  return blocks;
+}
+
+/**
+ * Parse a Pi JSONL transcript into `LogEntry[]` plus the raw lines.
+ * Yields to the event loop every 200 lines so big transcripts don't block
+ * the request.
+ */
+export async function parsePiLog(
+  fileContent: string,
+  source: LogSource = "session",
+): Promise<PiParseResult> {
+  const lines = fileContent.split("\n").filter((line) => line.trim() !== "");
+  const entries: LogEntry[] = [];
+  const rawLines: Record<string, unknown>[] = [];
+  let cwd: string | undefined;
+  let seenSessionStart = false;
+
+  for (let i = 0; i < lines.length; i++) {
+    if (i > 0 && i % 200 === 0) await new Promise<void>((r) => setImmediate(r));
+
+    const line = lines[i];
+    let raw: PiSessionRecord;
+    try {
+      raw = JSON.parse(line) as PiSessionRecord;
+    } catch {
+      continue;
+    }
+
+    const rawCopy = { ...(raw as Record<string, unknown>), _source: source };
+    rawLines.push(rawCopy);
+
+    const timestampStr = raw.timestamp;
+    if (!timestampStr) continue;
+    const date = new Date(timestampStr);
+    if (Number.isNaN(date.getTime())) continue;
+    const timestamp = date.toISOString();
+
+    const recType = raw.type;
+
+    // Pi's first record per session is `{type: "session", cwd, ...}`.
+    if (recType === "session") {
+      if (typeof raw.cwd === "string" && !cwd) cwd = raw.cwd;
+      const label: QueueOperationEntry["label"] = seenSessionStart ? "Session Resumed" : "Session Started";
+      seenSessionStart = true;
+      entries.push({
+        type: "queue-operation",
+        ...baseEntry(rawCopy, timestamp, date, source),
+        label,
+      } satisfies QueueOperationEntry);
+      continue;
+    }
+
+    // Pi messages are `{type: "message", message: {role, content[]}}`. Branch
+    // on role; render text/thinking content. Validate types defensively.
+    if (recType === "message" && raw.message && typeof raw.message === "object") {
+      const role = raw.message.role;
+      const content = raw.message.content;
+
+      if (role === "user") {
+        const text = extractMessageText(content);
+        if (!text) continue;
+        entries.push({
+          type: "user",
+          ...baseEntry(rawCopy, timestamp, date, source),
+          message: { role: "user", content: text },
+        } satisfies UserEntry);
+        continue;
+      }
+
+      if (role === "assistant") {
+        const blocks = buildAssistantContent(content);
+        if (blocks.length === 0) {
+          entries.push({
+            type: "system",
+            ...baseEntry(rawCopy, timestamp, date, source),
+            raw: rawCopy,
+          } satisfies GenericEntry);
+          continue;
+        }
+        entries.push({
+          type: "assistant",
+          ...baseEntry(rawCopy, timestamp, date, source),
+          message: { role: "assistant", content: blocks },
+        } satisfies AssistantEntry);
+        continue;
+      }
+
+      // Unknown role — preserve raw so nothing is dropped.
+      entries.push({
+        type: "system",
+        ...baseEntry(rawCopy, timestamp, date, source),
+        raw: rawCopy,
+      } satisfies GenericEntry);
+      continue;
+    }
+
+    // model_change / thinking_level_change / unknown — preserve raw as system
+    // so the dashboard can surface them without ad-hoc renderers.
+    entries.push({
+      type: "system",
+      ...baseEntry(rawCopy, timestamp, date, source),
+      raw: rawCopy,
+    } satisfies GenericEntry);
+  }
+
+  if (entries.length > 500) await new Promise<void>((r) => setImmediate(r));
+  entries.sort((a, b) => a.timestampMs - b.timestampMs);
+
+  return { entries, rawLines, cwd };
+}
+
+// ── Public loader ──
+
+export interface PiSessionLogData {
+  entries: LogEntry[];
+  rawLines: Record<string, unknown>[];
+  cwd?: string;
+  filePath: string;
+}
+
+export async function getPiSessionLog(sessionId: string): Promise<PiSessionLogData | null> {
+  const filePath = findPiTranscript(sessionId);
+  if (!filePath) return null;
+  let fileContent: string;
+  try {
+    fileContent = await readFile(filePath, "utf-8");
+  } catch {
+    // The file vanished between findPiTranscript and read — fall open.
+    return null;
+  }
+  let parsed: PiParseResult;
+  try {
+    parsed = await parsePiLog(fileContent, "session");
+  } catch {
+    return null;
+  }
+  return {
+    entries: parsed.entries,
+    rawLines: parsed.rawLines,
+    cwd: parsed.cwd,
+    filePath,
+  };
+}
+
+export const getCachedPiSessionLog = runtimeCache(
+  (sessionId: string) => getPiSessionLog(sessionId),
+  60,
+  { maxSize: 50 },
+);
+
+// ── Test helpers ──
+
+/** For tests: read raw stat of the transcript path, returning null on miss. */
+export function _statPiTranscript(sessionId: string): { mtimeMs: number } | null {
+  const path = findPiTranscript(sessionId);
+  if (!path) return null;
+  try {
+    const s = statSync(path);
+    return { mtimeMs: s.mtimeMs };
+  } catch {
+    return null;
+  }
+}
+
+/** For tests: read transcript synchronously. Returns null on missing/error. */
+export function readPiTranscriptSync(sessionId: string): string | null {
+  const path = findPiTranscript(sessionId);
+  if (!path) return null;
+  try {
+    return readFileSync(path, "utf-8");
+  } catch {
+    return null;
+  }
+}
+
+/** Suppress unused-import warning for formatTimestamp; reserved for tool-call
+ *  rendering once Pi emits it (see header comment). */
+void formatTimestamp;

package/.next/standalone/lib/projects.ts

@@ -5,8 +5,8 @@
  * All functions return sorted arrays (newest-first) and pre-format dates
  * so that client components can display them without hydration mismatches.
  */
-import { readdir, stat } from "fs/promises";
-import { join, resolve, sep } from "path";
+import { readdir, stat } from "node:fs/promises";
+import { join, resolve, sep } from "node:path";
 import { getClaudeProjectsPath } from "./paths";
 import { runtimeCache } from "./runtime-cache";
 import { batchAll } from "./concurrency";
@@ -16,7 +16,7 @@ import { formatDate } from "./format-date";
 export const UUID_RE = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/;
 export const PATH_TRAVERSAL_RE = /(^|[\\/])\.\.($|[\\/])/;
 
-export type ProjectCli = "claude" | "codex";
+export type ProjectCli = "claude" | "codex" | "copilot" | "cursor" | "opencode" | "pi" | "gemini";
 
 export interface ProjectFolder {
   name: string;
@@ -26,7 +26,7 @@ export interface ProjectFolder {
   lastModifiedFormatted?: string; // Pre-formatted date string to avoid hydration issues
   /**
    * Which agent CLIs this project's data was found in. Multiple entries when
-   * the same cwd has both Claude and Codex transcripts; rendered as badges.
+   * the same cwd has transcripts from more than one CLI; rendered as badges.
    */
   cli: ProjectCli[];
 }
@@ -37,8 +37,8 @@ export interface SessionFile {
   lastModified: Date;
   lastModifiedFormatted?: string;
   sessionId?: string;
-  /** Originating agent CLI. Set when the session list mixes Claude + Codex sources
-   *  so the table can render a per-row CLI badge. */
+  /** Originating agent CLI. Set when the session list mixes sources from more
+   *  than one CLI, so the table can render a per-row CLI badge. */
   cli?: ProjectCli;
 }
 
@@ -99,28 +99,30 @@ async function getClaudeProjectFolders(): Promise<ProjectFolder[]> {
   }
 }
 
-/** Merges Claude + Codex project lists by encoded folder name. When both sources have
- *  the same name, keeps the Claude entry's `path` (so the Path column still points at
- *  `~/.claude/projects/<encoded>`), unions the `cli` arrays in [claude, codex] order,
- *  and takes the newer `lastModified`. */
-function mergeProjectFolders(claude: ProjectFolder[], codex: ProjectFolder[]): ProjectFolder[] {
+/** Merges any number of per-CLI project lists by encoded folder name. When
+ *  multiple sources share a name, the first source's `path` wins (so the Path
+ *  column still points at the primary store), the `cli` arrays are unioned in
+ *  source order, and `lastModified` takes the newest value. The first source
+ *  is treated as the "base" — pass Claude first to keep Claude paths primary. */
+function mergeProjectFolders(...sources: ProjectFolder[][]): ProjectFolder[] {
   const byName = new Map<string, ProjectFolder>();
-  for (const f of claude) byName.set(f.name, { ...f, cli: [...f.cli] });
-  for (const f of codex) {
-    const existing = byName.get(f.name);
-    if (!existing) {
-      byName.set(f.name, { ...f, cli: [...f.cli] });
-      continue;
+  for (const list of sources) {
+    for (const f of list) {
+      const existing = byName.get(f.name);
+      if (!existing) {
+        byName.set(f.name, { ...f, cli: [...f.cli] });
+        continue;
+      }
+      const mergedCli: ProjectCli[] = [...existing.cli];
+      for (const c of f.cli) if (!mergedCli.includes(c)) mergedCli.push(c);
+      const newer = f.lastModified.getTime() > existing.lastModified.getTime() ? f : existing;
+      byName.set(f.name, {
+        ...existing,
+        cli: mergedCli,
+        lastModified: newer.lastModified,
+        lastModifiedFormatted: newer.lastModifiedFormatted,
+      });
     }
-    const mergedCli: ProjectCli[] = [...existing.cli];
-    for (const c of f.cli) if (!mergedCli.includes(c)) mergedCli.push(c);
-    const newer = f.lastModified.getTime() > existing.lastModified.getTime() ? f : existing;
-    byName.set(f.name, {
-      ...existing,
-      cli: mergedCli,
-      lastModified: newer.lastModified,
-      lastModifiedFormatted: newer.lastModifiedFormatted,
-    });
   }
   const merged = Array.from(byName.values());
   merged.sort((a, b) => b.lastModified.getTime() - a.lastModified.getTime());
@@ -128,17 +130,51 @@ function mergeProjectFolders(claude: ProjectFolder[], codex: ProjectFolder[]): P
 }
 
 export async function getProjectFolders(): Promise<ProjectFolder[]> {
-  // Lazy import to keep `lib/codex-projects.ts` out of the dep graph for callers that
-  // only need Claude helpers (e.g. CLI codepaths).
-  const { getCodexProjects } = await import("./codex-projects");
-  const [claude, codex] = await Promise.all([
+  // Lazy imports keep the per-CLI project providers out of the dep graph for
+  // callers that only need Claude helpers (e.g. CLI codepaths).
+  const [
+    { getCodexProjects },
+    { getCopilotProjects },
+    { getCursorProjects },
+    { getOpenCodeProjects },
+    { getPiProjects },
+    { getGeminiProjects },
+  ] = await Promise.all([
+    import("./codex-projects"),
+    import("./copilot-projects"),
+    import("./cursor-projects"),
+    import("./opencode-projects"),
+    import("./pi-projects"),
+    import("./gemini-projects"),
+  ]);
+  const [claude, codex, copilot, cursor, opencode, pi, gemini] = await Promise.all([
     getClaudeProjectFolders(),
     getCodexProjects().catch((error) => {
       logError("Error reading Codex projects:", error);
       return [] as ProjectFolder[];
     }),
+    getCopilotProjects().catch((error) => {
+      logError("Error reading Copilot projects:", error);
+      return [] as ProjectFolder[];
+    }),
+    getCursorProjects().catch((error) => {
+      logError("Error reading Cursor projects:", error);
+      return [] as ProjectFolder[];
+    }),
+    getOpenCodeProjects().catch((error) => {
+      logError("Error reading OpenCode projects:", error);
+      return [] as ProjectFolder[];
+    }),
+    getPiProjects().catch((error) => {
+      logError("Error reading Pi projects:", error);
+      return [] as ProjectFolder[];
+    }),
+    getGeminiProjects().catch((error) => {
+      logError("Error reading Gemini projects:", error);
+      return [] as ProjectFolder[];
+    }),
   ]);
-  return mergeProjectFolders(claude, codex);
+  return mergeProjectFolders(claude, codex, copilot, cursor, opencode, pi, gemini);
 }
 
 /**

package/.next/standalone/next.config.ts

@@ -1,8 +1,9 @@
 import type { NextConfig } from "next";
-import { readFileSync } from "fs";
-import { join } from "path";
-
-const pkg = JSON.parse(readFileSync(join(__dirname, "package.json"), "utf-8"));
+// Static import (instead of `readFileSync(join(__dirname, "package.json"))`)
+// keeps Turbopack's Node File Tracer from flagging this file as doing
+// dynamic filesystem work, which produced an "Encountered unexpected file
+// in NFT list" warning during `bun run build`.
+import pkg from "./package.json";
 
 const allowedDevOrigins = process.env.FAILPROOFAI_ALLOWED_DEV_ORIGINS
   ? process.env.FAILPROOFAI_ALLOWED_DEV_ORIGINS.split(",").map((s) => s.trim()).filter(Boolean)

package/.next/standalone/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "0.0.9-beta.2",
+  "version": "0.0.10-beta.0",
   "description": "The easiest way to manage policies that keep your AI agents reliable, on-task, and running autonomously — for Claude Code & the Agents SDK",
   "bin": {
     "failproofai": "./dist/cli.mjs"
@@ -10,6 +10,7 @@
     "src/",
     "scripts/",
     "lib/",
+    "pi-extension/",
     ".next/standalone/",
     "dist/",
     "README.md"