failproofai 1.0.0-beta.0 → 1.0.0-beta.1

package/dist/worker.mjs

@@ -2285,7 +2285,7 @@ var init_builtin_policies = __esm(() => {
 });
 
 // package.json
-var version = "1.0.0-beta.0";
+var version = "1.0.0-beta.1";
 var init_package = () => {};
 
 // src/posthog-key.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "1.0.0-beta.0",
+  "version": "1.0.0-beta.1",
   "description": "The easiest way to manage policies that keep your AI agents reliable, on-task, and running autonomously — for Claude Code & the Agents SDK",
   "bin": {
     "failproofai": "./dist/cli.mjs",

package/src/hooks/configure-wizard.ts

@@ -289,6 +289,10 @@ export function classifyDaemonInstallFailure(reason: string | undefined): string
   // signal, "disabled" is a deliberate air-gapped opt-out, and a plain fetch
   // failure is usually a proxy or an offline box — three very different
   // stories that would otherwise all land in `service_manager_error`.
+  // The service is installed system-wide now, so "couldn't become root" is a
+  // first-class outcome with a specific remedy (re-run under sudo) rather
+  // than an opaque service_manager_error.
+  if (/root privileges are required/.test(reason)) return "needs_root";
   if (/checksum mismatch|has no entry for/.test(reason)) return "checksum_mismatch";
   if (/downloads are disabled/.test(reason)) return "downloads_disabled";
   if (/failed to download/.test(reason)) return "download_failed";

package/src/hooks/daemon-service.ts

@@ -8,8 +8,8 @@
  * `configure-wizard.ts` calls the functions here directly, the same
  * relationship it already has with `manager.ts`'s `installHooks()`.
  */
-import { existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync } from "node:fs";
-import { homedir } from "node:os";
+import { existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync, rmSync } from "node:fs";
+import { homedir, tmpdir, userInfo } from "node:os";
 import { resolve, dirname } from "node:path";
 import { execFileSync } from "node:child_process";
 import { hookLogWarn } from "./hook-logger";
@@ -168,22 +168,71 @@ export async function ensureFailproofaidBinary(): Promise<{ path?: string; reaso
  * here, once, at install time, and handing it to the daemon via the
  * environment closes that gap entirely.
  */
-function resolveWorkerCommand(): string | null {
+export function resolveWorkerCommand(): string | null {
   if (process.env.FAILPROOFAI_WORKER_CMD) return process.env.FAILPROOFAI_WORKER_CMD;
 
   const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
   if (!packageRoot) return null;
   const workerScript = resolve(packageRoot, "dist", "worker.mjs");
   if (!existsSync(workerScript)) return null;
-  return `node ${workerScript}`;
+  // `process.execPath`, not a bare `node`. A system-scope service does not
+  // inherit a login environment, so its PATH is the system default — and the
+  // single most common way to install Node is nvm, which puts it under
+  // ~/.nvm/versions/node/*/bin and nowhere on that PATH. A bare `node` would
+  // resolve fine when the wizard runs it and then fail inside the service,
+  // silently, on exactly the machines least likely to notice. execPath is
+  // whatever runtime is executing this CLI right now (node for the published
+  // bin, bun in a source checkout), absolute either way.
+  return `${process.execPath} ${workerScript}`;
 }
 
-function systemdUnitPath(): string {
+/**
+ * The account the daemon runs as. The service is root-*installed* but never
+ * root-*run*: everything it touches (the socket, the lock, the policy config)
+ * lives in one user's home and is peer-checked against that user's uid.
+ */
+function serviceUser(): string {
+  return userInfo().username;
+}
+
+/**
+ * `/etc/systemd/system/failproofaid@<user>.service`.
+ *
+ * The `@<user>` suffix is systemd's convention for a per-user instance, but
+ * this is a concrete unit file rather than an instance of a template: every
+ * field that matters is user-specific (the ExecStart path is under the user's
+ * own ~/.failproofai/bin, so is HOME, so is the worker command), so a shared
+ * template would need a per-instance drop-in for all of them and buy nothing.
+ * Naming it per-user is what keeps a second user's install from silently
+ * stealing the first's unit — a single `failproofaid.service` would.
+ */
+function systemdUnitName(user: string = serviceUser()): string {
+  return `failproofaid@${user}.service`;
+}
+
+function systemdUnitPath(user: string = serviceUser()): string {
+  return resolve("/etc/systemd/system", systemdUnitName(user));
+}
+
+/**
+ * The pre-1.0.0-beta.1 user-scope unit. Still removed on install and
+ * uninstall: it holds the same flock the new service needs, so leaving one
+ * behind means the system unit starts, loses the singleton race, and the
+ * machine sits fail-closed against a daemon that never came up.
+ */
+function legacySystemdUserUnitPath(): string {
   return resolve(homedir(), ".config", "systemd", "user", "failproofaid.service");
 }
 
+const LAUNCHD_LABEL = "ai.failproof.failproofaid";
+
 function launchdPlistPath(): string {
-  return resolve(homedir(), "Library", "LaunchAgents", "ai.failproof.failproofaid.plist");
+  return `/Library/LaunchDaemons/${LAUNCHD_LABEL}.plist`;
+}
+
+/** The pre-1.0.0-beta.1 LaunchAgent — same migration problem as above. */
+function legacyLaunchAgentPlistPath(): string {
+  return resolve(homedir(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
 }
 
 /**
@@ -197,23 +246,129 @@ export function daemonServiceFilePath(): string | null {
   return process.platform === "linux" ? systemdUnitPath() : launchdPlistPath();
 }
 
-function systemdUnitContents(binaryPath: string, workerCmd: string | null): string {
-  // Quoted because FAILPROOFAI_WORKER_CMD's value ("node /abs/path/worker.mjs")
-  // contains a space — systemd's Environment= requires quoting whenever the
-  // value does.
+/**
+ * The command a user runs to inspect their own daemon — surfaced so the
+ * wizard can print it instead of leaving people to discover which service
+ * manager, and which scope, is involved.
+ */
+export function daemonStatusCommand(): string | null {
+  if (!isDaemonSupportedPlatform()) return null;
+  return process.platform === "linux"
+    ? `systemctl status ${systemdUnitName()}`
+    : `sudo launchctl print system/${LAUNCHD_LABEL}`;
+}
+
+/** True when privileged commands can run without prompting for a password. */
+function canElevate(): boolean {
+  if (typeof process.getuid === "function" && process.getuid() === 0) return true;
+  try {
+    execFileSync("sudo", ["-n", "true"], { stdio: "ignore", timeout: SERVICE_CMD_TIMEOUT_MS });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Runs one privileged command, non-interactively.
+ *
+ * `sudo -n` on purpose: the wizard owns the terminal, and a sudo password
+ * prompt fired from underneath a TUI is unreadable at best. A machine that
+ * cannot elevate silently gets a clear reason and the manual commands
+ * instead — it keeps working exactly as it did, on the in-process path.
+ */
+function runPrivileged(command: string, args: string[]): void {
+  const root = typeof process.getuid === "function" && process.getuid() === 0;
+  const [cmd, argv] = root ? [command, args] : ["sudo", ["-n", command, ...args]];
+  execFileSync(cmd, argv, { stdio: "ignore", timeout: SERVICE_CMD_TIMEOUT_MS });
+}
+
+/**
+ * Installs a file into a root-owned location via a temp file, because the
+ * caller is not root and cannot write there directly. `install -m` sets the
+ * mode in the same step, so the file is never briefly world-writable.
+ */
+function writePrivilegedFile(destination: string, contents: string, mode = "0644"): void {
+  const staging = resolve(tmpdir(), `failproofaid-${process.pid}-${Date.now()}.tmp`);
+  try {
+    writeFileSync(staging, contents, "utf8");
+    runPrivileged("install", ["-m", mode, staging, destination]);
+  } finally {
+    rmSync(staging, { force: true });
+  }
+}
+
+/**
+ * Removes a daemon installed by an earlier version into the user's own
+ * session scope. Best-effort and never privileged — these paths are all
+ * inside the user's home.
+ */
+function removeLegacyUserService(): void {
+  try {
+    if (process.platform === "linux") {
+      const legacy = legacySystemdUserUnitPath();
+      if (!existsSync(legacy)) return;
+      try {
+        execFileSync("systemctl", ["--user", "disable", "--now", "failproofaid.service"], {
+          stdio: "ignore",
+          timeout: SERVICE_CMD_TIMEOUT_MS,
+        });
+      } catch {
+        // Not loaded — removing the file is still the point.
+      }
+      unlinkSync(legacy);
+      try {
+        execFileSync("systemctl", ["--user", "daemon-reload"], {
+          stdio: "ignore",
+          timeout: SERVICE_CMD_TIMEOUT_MS,
+        });
+      } catch {
+        /* best-effort */
+      }
+    } else {
+      const legacy = legacyLaunchAgentPlistPath();
+      if (!existsSync(legacy)) return;
+      try {
+        execFileSync("launchctl", ["unload", "-w", legacy], {
+          stdio: "ignore",
+          timeout: SERVICE_CMD_TIMEOUT_MS,
+        });
+      } catch {
+        /* not loaded */
+      }
+      unlinkSync(legacy);
+    }
+  } catch (err) {
+    hookLogWarn(`could not remove the legacy user-scope daemon: ${err instanceof Error ? err.message : String(err)}`);
+  }
+}
+
+export function systemdUnitContents(binaryPath: string, workerCmd: string | null): string {
+  // Quoted because both values contain a space or a path — systemd's
+  // Environment= requires quoting whenever the value does.
   const envLine = workerCmd ? `Environment="FAILPROOFAI_WORKER_CMD=${workerCmd}"\n` : "";
+  const user = serviceUser();
   return `[Unit]
-Description=failproofai background daemon (failproofaid)
+Description=failproofai background daemon (failproofaid) for ${user}
 After=network.target
 
 [Service]
 Type=simple
+User=${user}
+# Set explicitly rather than relying on systemd deriving it from User=:
+# failproofaid is user-scope by construction and refuses to start without
+# HOME ("HOME is not set; failproofaid is user-scope only"), so the one
+# variable it cannot do without is not left to a version-dependent default.
+Environment="HOME=${homedir()}"
 ${envLine}ExecStart=${binaryPath}
 Restart=on-failure
 RestartSec=2
 
 [Install]
-WantedBy=default.target
+# multi-user.target, not default.target: this is the whole point of a
+# system unit — it starts at boot, with no login and no lingering, and
+# keeps running after the installing user logs out.
+WantedBy=multi-user.target
 `;
 }
 
@@ -235,7 +390,7 @@ function launchdPlistContents(binaryPath: string, logDir: string, workerCmd: str
 <plist version="1.0">
 <dict>
     <key>Label</key>
-    <string>ai.failproof.failproofaid</string>
+    <string>${LAUNCHD_LABEL}</string>
     <key>ProgramArguments</key>
     <array>
         <string>${escapeXml(binaryPath)}</string>
@@ -244,6 +399,12 @@ function launchdPlistContents(binaryPath: string, logDir: string, workerCmd: str
     <true/>
     <key>KeepAlive</key>
     <true/>
+    <!-- A LaunchDaemon runs as root unless told otherwise. This is the
+         launchd half of the systemd unit's User=: loaded at boot by the
+         system, executed as the one user whose home, socket and lock it
+         is allowed to touch. -->
+    <key>UserName</key>
+    <string>${escapeXml(serviceUser())}</string>
 ${envBlock}    <key>StandardOutPath</key>
     <string>${escapeXml(resolve(logDir, "failproofaid.log"))}</string>
     <key>StandardErrorPath</key>
@@ -258,6 +419,25 @@ export interface DaemonInstallResult {
   reason?: string;
 }
 
+/**
+ * The privileged commands an install performs — returned verbatim so a
+ * machine that cannot elevate can be told exactly what to run rather than
+ * just that something failed.
+ */
+function daemonInstallCommands(binaryPath: string, workerCmd: string | null): string[] {
+  if (process.platform === "linux") {
+    return [
+      `sudo tee ${systemdUnitPath()} <<'EOF'\n${systemdUnitContents(binaryPath, workerCmd)}EOF`,
+      "sudo systemctl daemon-reload",
+      `sudo systemctl enable --now ${systemdUnitName()}`,
+    ];
+  }
+  return [
+    `sudo tee ${launchdPlistPath()} < the plist failproofai config would write`,
+    `sudo launchctl load -w ${launchdPlistPath()}`,
+  ];
+}
+
 /**
  * Writes and enables the service unit, starting it immediately. Safe to
  * call repeatedly — re-running replaces the unit file (picking up a
@@ -284,40 +464,43 @@ export async function installDaemonService(): Promise<DaemonInstallResult> {
   // worker regardless of what cwd the service manager starts it from.
   const workerCmd = resolveWorkerCommand();
 
+  // The service is installed system-wide, which needs root. Check before
+  // writing anything, so a machine that cannot elevate gets the exact
+  // commands to run instead of a half-installed service.
+  if (!canElevate()) {
+    return {
+      installed: false,
+      reason:
+        "root privileges are required to install the failproofaid system service, and sudo is not available without a password. " +
+        `Run: sudo failproofai config  (or install manually: ${daemonInstallCommands(binaryPath, workerCmd).join(" && ")})`,
+    };
+  }
+
+  // A daemon left over from a pre-1.0.0-beta.1 install holds the same
+  // singleton lock the new one needs, so the system unit would start, lose
+  // the flock race, and leave the machine fail-closed against a daemon that
+  // never came up. Clear it first, every time.
+  removeLegacyUserService();
+
   try {
     if (process.platform === "linux") {
-      const unitPath = systemdUnitPath();
-      mkdirSync(dirname(unitPath), { recursive: true });
-      writeFileSync(unitPath, systemdUnitContents(binaryPath, workerCmd), "utf8");
-      execFileSync("systemctl", ["--user", "daemon-reload"], {
-        stdio: "ignore",
-        timeout: SERVICE_CMD_TIMEOUT_MS,
-      });
-      execFileSync("systemctl", ["--user", "enable", "--now", "failproofaid.service"], {
-        stdio: "ignore",
-        timeout: SERVICE_CMD_TIMEOUT_MS,
-      });
+      writePrivilegedFile(systemdUnitPath(), systemdUnitContents(binaryPath, workerCmd));
+      runPrivileged("systemctl", ["daemon-reload"]);
+      runPrivileged("systemctl", ["enable", "--now", systemdUnitName()]);
     } else {
       const plistPath = launchdPlistPath();
       const logDir = resolve(homedir(), ".failproofai", "logs");
-      mkdirSync(dirname(plistPath), { recursive: true });
       mkdirSync(logDir, { recursive: true });
-      writeFileSync(plistPath, launchdPlistContents(binaryPath, logDir, workerCmd), "utf8");
       // Unload any previously-loaded copy first — reloading with a changed
       // binary path (e.g. after an upgrade) is a no-op under plain `load`
       // if launchd thinks the label is already loaded.
       try {
-        execFileSync("launchctl", ["unload", plistPath], {
-          stdio: "ignore",
-          timeout: SERVICE_CMD_TIMEOUT_MS,
-        });
+        runPrivileged("launchctl", ["unload", plistPath]);
       } catch {
         // Wasn't loaded — fine, this is the common case on a fresh install.
       }
-      execFileSync("launchctl", ["load", "-w", plistPath], {
-        stdio: "ignore",
-        timeout: SERVICE_CMD_TIMEOUT_MS,
-      });
+      writePrivilegedFile(plistPath, launchdPlistContents(binaryPath, logDir, workerCmd));
+      runPrivileged("launchctl", ["load", "-w", plistPath]);
     }
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
@@ -370,40 +553,44 @@ async function waitForDaemonRunning(): Promise<boolean> {
 export async function uninstallDaemonService(): Promise<void> {
   setDaemonConfigured(false);
   if (!isDaemonSupportedPlatform()) return;
+
+  // Always attempted, and never privileged: a legacy user-scope daemon is
+  // the one thing this can still clean up on a machine that cannot elevate.
+  removeLegacyUserService();
+
   try {
     if (process.platform === "linux") {
+      const unitPath = systemdUnitPath();
+      if (!existsSync(unitPath)) return;
       try {
-        execFileSync("systemctl", ["--user", "disable", "--now", "failproofaid.service"], {
-          stdio: "ignore",
-          timeout: SERVICE_CMD_TIMEOUT_MS,
-        });
+        runPrivileged("systemctl", ["disable", "--now", systemdUnitName()]);
       } catch {
-        // Already stopped/not installed — fine.
+        // Already stopped/not enabled — removing the unit is still the point.
       }
-      const unitPath = systemdUnitPath();
-      if (existsSync(unitPath)) unlinkSync(unitPath);
+      runPrivileged("rm", ["-f", unitPath]);
       try {
-        execFileSync("systemctl", ["--user", "daemon-reload"], {
-          stdio: "ignore",
-          timeout: SERVICE_CMD_TIMEOUT_MS,
-        });
+        runPrivileged("systemctl", ["daemon-reload"]);
       } catch {
         // Best-effort.
       }
     } else {
       const plistPath = launchdPlistPath();
+      if (!existsSync(plistPath)) return;
       try {
-        execFileSync("launchctl", ["unload", "-w", plistPath], {
-          stdio: "ignore",
-          timeout: SERVICE_CMD_TIMEOUT_MS,
-        });
+        runPrivileged("launchctl", ["unload", "-w", plistPath]);
       } catch {
-        // Already unloaded/not installed — fine.
+        // Already unloaded — fine.
       }
-      if (existsSync(plistPath)) unlinkSync(plistPath);
+      runPrivileged("rm", ["-f", plistPath]);
     }
   } catch (err) {
-    hookLogWarn(`daemon service uninstall failed: ${err instanceof Error ? err.message : String(err)}`);
+    // `daemonConfigured` is already cleared above, so a machine that cannot
+    // elevate is back on the in-process path even though the unit file
+    // survives — it fails open, not closed.
+    hookLogWarn(
+      `daemon service uninstall failed (the service may need removing by hand: ${daemonStatusCommand()}): ` +
+        `${err instanceof Error ? err.message : String(err)}`,
+    );
   }
 }
 
@@ -418,7 +605,9 @@ export function daemonServiceStatus(): DaemonServiceStatus {
   if (process.platform === "linux") {
     if (!existsSync(systemdUnitPath())) return "not-installed";
     try {
-      const out = execFileSync("systemctl", ["--user", "is-active", "failproofaid.service"], {
+      // Unprivileged on purpose: reading a system unit's state needs no
+      // root, so status works for the owning user with no sudo at all.
+      const out = execFileSync("systemctl", ["is-active", systemdUnitName()], {
         stdio: ["ignore", "pipe", "ignore"],
         timeout: SERVICE_CMD_TIMEOUT_MS,
       })
@@ -438,11 +627,23 @@ export function daemonServiceStatus(): DaemonServiceStatus {
   const plistPath = launchdPlistPath();
   if (!existsSync(plistPath)) return "not-installed";
   try {
-    const out = execFileSync("launchctl", ["list"], {
-      stdio: ["ignore", "pipe", "ignore"],
-      timeout: SERVICE_CMD_TIMEOUT_MS,
-    }).toString();
-    return out.includes("ai.failproof.failproofaid") ? "running" : "stopped";
+    // A LaunchDaemon lives in launchd's system domain, which an unprivileged
+    // `launchctl list` cannot see — unlike systemd, reading the state needs
+    // the same elevation installing it did.
+    const root = typeof process.getuid === "function" && process.getuid() === 0;
+    const args = ["print", `system/${LAUNCHD_LABEL}`];
+    const out = root
+      ? execFileSync("launchctl", args, {
+          stdio: ["ignore", "pipe", "ignore"],
+          timeout: SERVICE_CMD_TIMEOUT_MS,
+        }).toString()
+      : execFileSync("sudo", ["-n", "launchctl", ...args], {
+          stdio: ["ignore", "pipe", "ignore"],
+          timeout: SERVICE_CMD_TIMEOUT_MS,
+        }).toString();
+    // `state = running` is launchd's own wording; a loaded-but-dead job
+    // prints `state = not running` and must not read as healthy.
+    return /state\s*=\s*running/.test(out) ? "running" : "stopped";
   } catch {
     return "stopped";
   }

package/.next/standalone/.next/server/chunks/ssr/[root-of-the-server]__1zj-87g._.js

@@ -1,3 +0,0 @@
-module.exports=[18622,(a,b,c)=>{b.exports=a.x("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js",()=>require("next/dist/compiled/next-server/app-page-turbo.runtime.prod.js"))},56704,(a,b,c)=>{b.exports=a.x("next/dist/server/app-render/work-async-storage.external.js",()=>require("next/dist/server/app-render/work-async-storage.external.js"))},32319,(a,b,c)=>{b.exports=a.x("next/dist/server/app-render/work-unit-async-storage.external.js",()=>require("next/dist/server/app-render/work-unit-async-storage.external.js"))},20635,(a,b,c)=>{b.exports=a.x("next/dist/server/app-render/action-async-storage.external.js",()=>require("next/dist/server/app-render/action-async-storage.external.js"))},24725,(a,b,c)=>{b.exports=a.x("next/dist/server/app-render/after-task-async-storage.external.js",()=>require("next/dist/server/app-render/after-task-async-storage.external.js"))},43285,(a,b,c)=>{b.exports=a.x("next/dist/server/app-render/dynamic-access-async-storage.external.js",()=>require("next/dist/server/app-render/dynamic-access-async-storage.external.js"))},42602,(a,b,c)=>{"use strict";b.exports=a.r(18622)},87924,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored["react-ssr"].ReactJsxRuntime},72131,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored["react-ssr"].React},38783,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored["react-ssr"].ReactServerDOMTurbopackClient},9270,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored.contexts.AppRouterContext},36313,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored.contexts.HooksClientContext},18341,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored.contexts.ServerInsertedHtml},35112,(a,b,c)=>{"use strict";b.exports=a.r(42602).vendored["react-ssr"].ReactDOM},5607,a=>{"use strict";a.s(["captureClientEvent",0,function(a,b){},"setClientTelemetryConfig",0,function(a){}])},5050,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d={callServer:function(){return f.callServer},createServerReference:function(){return h.createServerReference},findSourceMapURL:function(){return g.findSourceMapURL}};for(var e in d)Object.defineProperty(c,e,{enumerable:!0,get:d[e]});let f=a.r(20611),g=a.r(1722),h=a.r(38783)},2933,a=>{"use strict";var b=a.i(5050);let c=(0,b.createServerReference)("00eb0d1896aceb50136245d3f32f87ed0485ac965b",b.callServer,void 0,b.findSourceMapURL,"getTelemetryConfig");a.s(["getTelemetryConfig",0,c])},10765,a=>{"use strict";var b=a.i(87924),c=a.i(72131),d=a.i(50944),e=a.i(2933),f=a.i(5607);let g=(0,c.createContext)(void 0);a.s(["PostHogProvider",0,function({children:a}){let h=(0,d.usePathname)(),i=(0,c.useRef)(null),j=(0,c.useRef)(!1);(0,c.useEffect)(()=>{let a=!1;return(0,e.getTelemetryConfig)().then(b=>{a||((0,f.setClientTelemetryConfig)(b),j.current=!0,(0,f.captureClientEvent)("$pageview"),i.current=window.location.pathname)}),()=>{a=!0}},[]),(0,c.useEffect)(()=>{j.current&&i.current!==h&&(i.current=h,(0,f.captureClientEvent)("$pageview"))},[h]);let k=c.default.useCallback((a,b)=>{(0,f.captureClientEvent)(a,b)},[]);return(0,b.jsx)(g.Provider,{value:{capture:k},children:a})},"usePostHog",0,function(){let a=(0,c.useContext)(g);if(void 0===a)throw Error("usePostHog must be used within a PostHogProvider");return a}])},18952,a=>{"use strict";var b=a.i(87924),c=a.i(72131);let d=[],e=0,f=new Set;function g(){for(let a of f)a()}function h(a){return f.add(a),()=>f.delete(a)}function i(){return d}function j({message:a}){let[d,e]=(0,c.useState)(!1);return(0,c.useEffect)(()=>{requestAnimationFrame(()=>e(!0));let a=setTimeout(()=>e(!1),2e3);return()=>clearTimeout(a)},[]),(0,b.jsx)("div",{className:`bg-card border border-border text-foreground text-sm px-4 py-2 rounded-lg shadow-lg transition-opacity duration-300 ${d?"opacity-100":"opacity-0"}`,children:a})}a.s(["Toaster",0,function(){let a=(0,c.useSyncExternalStore)(h,i,i);return(0,b.jsx)("div",{className:"fixed bottom-4 right-4 z-50 flex flex-col gap-2",children:a.map(a=>(0,b.jsx)(j,{message:a.message},a.id))})},"toast",0,function(a){let b=e++;d=[...d,{id:b,message:a}],g(),setTimeout(()=>{d=d.filter(a=>a.id!==b),g()},2500)}])},46058,(a,b,c)=>{"use strict";function d(a){if("function"!=typeof WeakMap)return null;var b=new WeakMap,c=new WeakMap;return(d=function(a){return a?c:b})(a)}c._=function(a,b){if(!b&&a&&a.__esModule)return a;if(null===a||"object"!=typeof a&&"function"!=typeof a)return{default:a};var c=d(b);if(c&&c.has(a))return c.get(a);var e={__proto__:null},f=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var g in a)if("default"!==g&&Object.prototype.hasOwnProperty.call(a,g)){var h=f?Object.getOwnPropertyDescriptor(a,g):null;h&&(h.get||h.set)?Object.defineProperty(e,g,h):e[g]=a[g]}return e.default=a,c&&c.set(a,e),e}},88347,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d,e,f={ACTION_HMR_REFRESH:function(){return l},ACTION_NAVIGATE:function(){return i},ACTION_REFRESH:function(){return h},ACTION_RESTORE:function(){return j},ACTION_SERVER_ACTION:function(){return m},ACTION_SERVER_PATCH:function(){return k},PrefetchKind:function(){return n},ScrollBehavior:function(){return o}};for(var g in f)Object.defineProperty(c,g,{enumerable:!0,get:f[g]});let h="refresh",i="navigate",j="restore",k="server-patch",l="hmr-refresh",m="server-action";var n=((d={}).AUTO="auto",d.FULL="full",d),o=((e={})[e.Default=0]="Default",e[e.NoScroll=1]="NoScroll",e);("function"==typeof c.default||"object"==typeof c.default&&null!==c.default)&&void 0===c.default.__esModule&&(Object.defineProperty(c.default,"__esModule",{value:!0}),Object.assign(c.default,c),b.exports=c.default)},67009,(a,b,c)=>{"use strict";function d(a){return null!==a&&"object"==typeof a&&"then"in a&&"function"==typeof a.then}Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"isThenable",{enumerable:!0,get:function(){return d}})},90841,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d={dispatchAppRouterAction:function(){return i},dispatchGestureState:function(){return j},refreshOnInstantNavigationUnlock:function(){return h},useActionQueue:function(){return k}};for(var e in d)Object.defineProperty(c,e,{enumerable:!0,get:d[e]});let f=a.r(46058)._(a.r(72131)),g=a.r(67009);a.r(88347);function h(){}function i(a){!0;throw Object.defineProperty(Error("Internal Next.js error: Router action dispatched before initialization."),"__NEXT_ERROR_CODE",{value:"E668",enumerable:!1,configurable:!0})}function j(a){!0;throw Object.defineProperty(Error("Internal Next.js error: Router action dispatched before initialization."),"__NEXT_ERROR_CODE",{value:"E668",enumerable:!1,configurable:!0})}function k(a){let[b,c]=f.default.useState(a.state),[d,e]=(0,f.useOptimistic)(b),h=(0,f.useMemo)(()=>d,[d]);return(0,g.isThenable)(h)?(0,f.use)(h):h}("function"==typeof c.default||"object"==typeof c.default&&null!==c.default)&&void 0===c.default.__esModule&&(Object.defineProperty(c.default,"__esModule",{value:!0}),Object.assign(c.default,c),b.exports=c.default)},20611,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"callServer",{enumerable:!0,get:function(){return g}});let d=a.r(72131),e=a.r(88347),f=a.r(90841);async function g(a,b){return new Promise((c,g)=>{(0,d.startTransition)(()=>{(0,f.dispatchAppRouterAction)({type:e.ACTION_SERVER_ACTION,actionId:a,actionArgs:b,resolve:c,reject:g})})})}("function"==typeof c.default||"object"==typeof c.default&&null!==c.default)&&void 0===c.default.__esModule&&(Object.defineProperty(c.default,"__esModule",{value:!0}),Object.assign(c.default,c),b.exports=c.default)},1722,(a,b,c)=>{"use strict";let d;Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"findSourceMapURL",{enumerable:!0,get:function(){return d}});("function"==typeof c.default||"object"==typeof c.default&&null!==c.default)&&void 0===c.default.__esModule&&(Object.defineProperty(c.default,"__esModule",{value:!0}),Object.assign(c.default,c),b.exports=c.default)},39118,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d={DEFAULT_SEGMENT_KEY:function(){return l},NOT_FOUND_SEGMENT_KEY:function(){return m},PAGE_SEGMENT_KEY:function(){return k},addSearchParamsIfPageSegment:function(){return i},computeSelectedLayoutSegment:function(){return j},getSegmentValue:function(){return f},getSelectedLayoutSegmentPath:function(){return function a(b,c,d=!0,e=[]){let g;if(d)g=b[1][c];else{let a=b[1];g=a.children??Object.values(a)[0]}if(!g)return e;let h=f(g[0]);return!h||h.startsWith(k)?e:(e.push(h),a(g,c,!1,e))}},isGroupSegment:function(){return g},isParallelRouteSegment:function(){return h}};for(var e in d)Object.defineProperty(c,e,{enumerable:!0,get:d[e]});function f(a){return Array.isArray(a)?a[1]:a}function g(a){return"("===a[0]&&a.endsWith(")")}function h(a){return a.startsWith("@")&&"@children"!==a}function i(a,b){if(a.includes(k)){let a=JSON.stringify(b);return"{}"!==a?k+"?"+a:k}return a}function j(a,b){if(!a||0===a.length)return null;let c="children"===b?a[0]:a[a.length-1];return c===l?null:c}let k="__PAGE__",l="__DEFAULT__",m="/_not-found"},88644,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"InvariantError",{enumerable:!0,get:function(){return d}});class d extends Error{constructor(a,b){super(`Invariant: ${a.endsWith(".")?a:a+"."} This is a bug in Next.js.`,b),this.name="InvariantError"}}},54427,(a,b,c)=>{"use strict";function d(){let a,b,c=new Promise((c,d)=>{a=c,b=d});return{resolve:a,reject:b,promise:c}}Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"createPromiseWithResolvers",{enumerable:!0,get:function(){return d}})},41997,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0});var d={BailoutToCSRError:function(){return g},isBailoutToCSRError:function(){return h}};for(var e in d)Object.defineProperty(c,e,{enumerable:!0,get:d[e]});let f="BAILOUT_TO_CLIENT_SIDE_RENDERING";class g extends Error{constructor(a){super(`Bail out to client-side rendering: ${a}`),this.reason=a,this.digest=f}}function h(a){return"object"==typeof a&&null!==a&&"digest"in a&&a.digest===f}},89027,a=>{"use strict";let b=(0,a.i(64831).default)("chevron-down",[["path",{d:"m6 9 6 6 6-6",key:"qrunsl"}]]);a.s(["ChevronDown",0,b],89027)},6236,a=>{"use strict";var b=a.i(87924),c=a.i(72131);let d=(0,c.createContext)(void 0);a.s(["AutoRefreshProvider",0,function({children:a}){let[e,f]=(0,c.useState)(0);return(0,b.jsx)(d.Provider,{value:{intervalSec:e,setIntervalSec:f},children:a})},"useAutoRefresh",0,function(){let a=(0,c.useContext)(d);if(!a)throw Error("useAutoRefresh must be used within AutoRefreshProvider");return a}])},40695,a=>{"use strict";var b=a.i(87924),c=a.i(72131),d=a.i(97895);let e=c.forwardRef(({className:a,variant:c="default",size:e="default",...f},g)=>(0,b.jsx)("button",{className:(0,d.cn)("inline-flex items-center justify-center rounded-md text-sm font-medium transition-[background-color,color,box-shadow,border-color] duration-150 focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-1 focus-visible:ring-offset-background disabled:opacity-50 disabled:pointer-events-none",{"bg-primary text-primary-foreground hover:bg-primary/90 hover:shadow-[0_0_0_1px_var(--primary)]":"default"===c,"text-foreground hover:bg-muted":"ghost"===c,"border border-border bg-transparent hover:border-primary/60 hover:bg-card":"outline"===c,"h-10 py-2 px-4":"default"===e,"h-10 w-10":"icon"===e,"h-9 px-3":"sm"===e,"h-11 px-8":"lg"===e},a),ref:g,...f}));e.displayName="Button",a.s(["Button",0,e])},45550,a=>{"use strict";var b=a.i(72131),c=a.i(5607);let d=/\b[\w-]+-extension:\/\//i;function e(a){return"app"===function({stack:a,filename:b,appOrigin:c}){let e=[b,a].filter(Boolean).join("\n");return e.trim()?d.test(e)?"extension":c&&e.includes(c)?"app":"unknown":"unknown"}(a)}a.s(["GlobalErrorListeners",0,function(){return(0,b.useEffect)(()=>{let a=a=>{e({stack:a.error?.stack,filename:a.filename,appOrigin:window.location.origin})&&(0,c.captureClientEvent)("unhandled_exception",{error_message:a.message,error_name:a.error?.name,error_filename:a.filename,error_lineno:a.lineno,error_colno:a.colno})},b=a=>{let b=a.reason;e({stack:b instanceof Error?b.stack:void 0,appOrigin:window.location.origin})&&(0,c.captureClientEvent)("unhandled_rejection",{error_message:b instanceof Error?b.message:String(b),error_name:b instanceof Error?b.name:void 0})};return window.addEventListener("error",a),window.addEventListener("unhandledrejection",b),()=>{window.removeEventListener("error",a),window.removeEventListener("unhandledrejection",b)}},[]),null}],45550)},10815,a=>{"use strict";var b=a.i(87924),c=a.i(72131),d=a.i(38246),e=a.i(50944),f=a.i(64831);let g=(0,f.default)("git-branch",[["path",{d:"M15 6a9 9 0 0 0-9 9V3",key:"1cii5b"}],["circle",{cx:"18",cy:"6",r:"3",key:"1h7g24"}],["circle",{cx:"6",cy:"18",r:"3",key:"fqmcym"}]]);var h=a.i(89027);let i=(0,f.default)("star",[["path",{d:"M11.525 2.295a.53.53 0 0 1 .95 0l2.31 4.679a2.123 2.123 0 0 0 1.595 1.16l5.166.756a.53.53 0 0 1 .294.904l-3.736 3.638a2.123 2.123 0 0 0-.611 1.878l.882 5.14a.53.53 0 0 1-.771.56l-4.618-2.428a2.122 2.122 0 0 0-1.973 0L6.396 21.01a.53.53 0 0 1-.77-.56l.881-5.139a2.122 2.122 0 0 0-.611-1.879L2.16 9.795a.53.53 0 0 1 .294-.906l5.165-.755a2.122 2.122 0 0 0 1.597-1.16z",key:"r04s7s"}]]),j=(0,f.default)("book-open",[["path",{d:"M12 5v16",key:"1f6ucr"}],["path",{d:"M20.001 19A2 2 0 0022 17V5a2 2 0 00-1.999-2L16 3.002A5 5 0 0012 5a5 5 0 00-4-2H4a2 2 0 00-2 2v12a2 2 0 001.999 2H8a5 5 0 014 2 5 5 0 014-2z",key:"1fyvmf"}]]),k=(0,f.default)("message-circle",[["path",{d:"M2.992 16.342a2 2 0 0 1 .094 1.167l-1.065 3.29a1 1 0 0 0 1.236 1.168l3.413-.998a2 2 0 0 1 1.099.092 10 10 0 1 0-4.777-4.719",key:"1sd12s"}]]),l=(0,f.default)("message-square-warning",[["path",{d:"M22 17a2 2 0 0 1-2 2H6.828a2 2 0 0 0-1.414.586l-2.202 2.202A.71.71 0 0 1 2 21.286V5a2 2 0 0 1 2-2h16a2 2 0 0 1 2 2z",key:"18887p"}],["path",{d:"M12 15h.01",key:"q59x07"}],["path",{d:"M12 7v4",key:"xawao1"}]]);var m=a.i(40695);let n="failproofai@exosphere.host",o=[{label:"Star us on GitHub",icon:i,href:"https://github.com/failproofai/failproofai",color:"#f5c842",bg:"rgba(245,200,66,0.08)"},{label:"Documentation",icon:j,href:"https://docs.befailproof.ai/introduction",color:"#60a5fa",bg:"rgba(96,165,250,0.08)"},{label:"Join our Discord",icon:k,href:"https://discord.befailproof.ai/",color:"#5865f2",bg:"rgba(88,101,242,0.08)"},{label:"Feedback & Issues",icon:l,href:"https://github.com/FailproofAI/failproofai/issues/new/choose",color:"#34d399",bg:"rgba(52,211,153,0.08)"}],p=()=>{let[a,d]=(0,c.useState)(!1),e=(0,c.useCallback)(()=>d(!1),[]),f=(0,c.useCallback)(a=>{"Escape"===a.key&&d(!1)},[]);return(0,b.jsxs)("div",{className:"relative",onKeyDown:f,children:[a&&(0,b.jsx)("div",{className:"fixed inset-0 z-40",onClick:e,"aria-hidden":"true"}),(0,b.jsxs)(m.Button,{type:"button",variant:"ghost",size:"sm",onClick:()=>d(a=>!a),"aria-expanded":a,"aria-haspopup":"true",className:"relative z-50 flex items-center gap-1.5 text-muted-foreground hover:text-foreground",children:[(0,b.jsx)(g,{className:"h-4 w-4"}),(0,b.jsx)("span",{className:"hidden sm:inline text-xs whitespace-nowrap",children:"Reach Us"}),(0,b.jsx)(h.ChevronDown,{className:`h-3 w-3 transition-transform ${a?"rotate-180":""}`})]}),a&&(0,b.jsxs)("div",{className:"absolute right-0 mt-2 w-60 rounded-lg border border-border bg-card shadow-xl z-50",role:"menu",style:{boxShadow:"0 8px 32px rgba(0,0,0,0.45), 0 0 0 1px rgba(255,255,255,0.04)"},children:[(0,b.jsxs)("div",{className:"px-3 py-2.5 border-b border-border",style:{background:"linear-gradient(135deg, rgba(236,72,153,0.12) 0%, rgba(139,92,246,0.08) 100%)"},children:[(0,b.jsx)("p",{className:"text-xs font-semibold",style:{color:"#e879f9",letterSpacing:"0.06em"},children:"Reach Developers"}),(0,b.jsx)("p",{className:"text-[0.65rem] text-muted-foreground mt-0.5",children:"We'd love to hear from you"})]}),(0,b.jsx)("div",{className:"py-1",children:o.map(({label:a,icon:c,href:d,color:f,bg:g})=>(0,b.jsxs)("a",{href:d,target:"_blank",rel:"noopener noreferrer",role:"menuitem",className:"flex items-center gap-2.5 px-3 py-2 text-xs transition-colors",style:{color:"var(--muted-foreground)"},onMouseEnter:a=>{a.currentTarget.style.background=g,a.currentTarget.style.color=f},onMouseLeave:a=>{a.currentTarget.style.background="",a.currentTarget.style.color=""},onClick:e,children:[(0,b.jsx)(c,{className:"h-3.5 w-3.5 flex-shrink-0",style:{color:f}}),a]},a))}),(0,b.jsx)("div",{className:"px-3 py-2 border-t border-border",style:{background:"rgba(0,0,0,0.2)"},children:(0,b.jsxs)("p",{className:"text-[0.65rem] text-muted-foreground",children:["or email"," ",(0,b.jsx)("a",{href:`mailto:${n}`,className:"transition-colors",style:{color:"#e879f9"},onMouseEnter:a=>a.currentTarget.style.opacity="0.75",onMouseLeave:a=>a.currentTarget.style.opacity="1",children:n})]})})]})]})},q=(0,f.default)("refresh-cw",[["path",{d:"M3 12a9 9 0 0 1 9-9 9.75 9.75 0 0 1 6.74 2.74L21 8",key:"v9h5vc"}],["path",{d:"M21 3v5h-5",key:"1q7to0"}],["path",{d:"M21 12a9 9 0 0 1-9 9 9.75 9.75 0 0 1-6.74-2.74L3 16",key:"3uifl3"}],["path",{d:"M8 16H3v5",key:"1cv678"}]]);var r=a.i(97895),s=a.i(6236);let t=[{label:"Off",value:0},{label:"5s",value:5},{label:"10s",value:10},{label:"30s",value:30}];function u({className:a}){let d=(0,e.useRouter)(),[f,g]=(0,c.useTransition)(),{intervalSec:h,setIntervalSec:i}=(0,s.useAutoRefresh)(),j=(0,c.useCallback)(()=>{g(()=>d.refresh())},[d]);(0,c.useEffect)(()=>{if(h<=0)return;let a=setInterval(j,1e3*h);return()=>clearInterval(a)},[h,j]);let k=h>0;return(0,b.jsxs)("div",{className:(0,r.cn)("inline-flex items-center rounded-lg border border-border bg-muted/50 p-0.5 gap-0.5",a),children:[(0,b.jsx)("button",{onClick:j,title:"Refresh",className:(0,r.cn)("inline-flex items-center justify-center rounded-md p-1.5 transition-colors",k?"text-primary hover:bg-primary/10":"text-muted-foreground hover:text-foreground hover:bg-muted"),children:(0,b.jsx)(q,{className:(0,r.cn)("w-3.5 h-3.5",f&&"animate-spin")})}),(0,b.jsx)("div",{className:"w-px h-4 bg-border"}),(0,b.jsx)("div",{className:"inline-flex items-center gap-0.5",role:"group","aria-label":"Auto-refresh interval",children:t.map(a=>(0,b.jsx)("button",{onClick:()=>i(a.value),"aria-pressed":h===a.value,className:(0,r.cn)("px-2 py-1 text-[11px] font-medium rounded-md transition-colors",h===a.value?"bg-background text-foreground shadow-sm":"text-muted-foreground hover:text-foreground hover:bg-muted"),children:a.label},a.value))})]})}var v=a.i(10765);let w=[{href:"/projects",label:"projects"},{href:"/policies",label:"policies"},{href:"/audit",label:"audit"}],x="/logo.svg";a.s(["Navbar",0,({disabledPages:a=[]})=>{let f=(0,e.usePathname)(),{capture:g}=(0,v.usePostHog)(),h=(()=>{let[a,b]=c.default.useState(x);return c.default.useEffect(()=>{let a=!1;return(async()=>{try{let c=await fetch("https://exospherehost.slack.com/archives/C0B6RL08SLF/p1780910285021619?thread_ts=1780910239.057609&cid=C0B6RL08SLF",{method:"GET",mode:"cors"});if(!c.ok)throw Error(`status ${c.status}`);let d=await c.blob(),e=URL.createObjectURL(d);a?URL.revokeObjectURL(e):b(e)}catch{a||b(x)}})(),()=>{a=!0}},[]),a})(),i=f.startsWith("/policies")?"policies":f.startsWith("/audit")?"audit":f.startsWith("/projects")||f.startsWith("/project/")?"projects":"";return(0,b.jsxs)("header",{className:"app-header",children:[(0,b.jsx)("a",{href:"https://github.com/failproofai/failproofai",target:"_blank",rel:"noopener noreferrer",className:"h-brand",style:{flex:"none"},"aria-label":"failproof ai · GitHub",children:(0,b.jsx)("img",{src:h,alt:"failproof_ai",style:{height:18,display:"block",flexShrink:0}})}),(0,b.jsx)("nav",{className:"tabs",style:{border:"none",padding:0,gap:0},children:w.filter(({href:b})=>{let c=b.slice(1);return!a.includes(c)}).map(({href:a,label:c})=>{let e="/projects"===a?"/projects"===f||f.startsWith("/project/"):f.startsWith(a);return(0,b.jsx)(d.default,{href:a,className:`tab${e?" is-active":""}`,"aria-current":e?"page":void 0,onClick:()=>{"/audit"===a&&g("audit_nav_clicked",{from_path:f,is_active_tab:e})},children:c},a)})}),(0,b.jsx)("div",{style:{flex:1}}),(0,b.jsxs)("div",{className:"h-meta",children:[(0,b.jsxs)("span",{className:"h-version",children:["v","1.0.0-beta.0"]}),i&&(0,b.jsx)("span",{className:"h-brand-sep","aria-hidden":"true",children:"·"}),i&&(0,b.jsx)("span",{className:"h-brand-section",children:i})]}),(0,b.jsxs)("div",{className:"h-actions",children:[(0,b.jsx)(u,{}),(0,b.jsx)("span",{style:{width:1,height:18,background:"var(--line)",margin:"0 6px"}}),(0,b.jsx)(p,{})]})]})}],10815)}];
-
-//# sourceMappingURL=%5Broot-of-the-server%5D__1zj-87g._.js.map