failproofai 1.0.0-beta.2 → 1.0.0-beta.21

package/.next/standalone/Cargo.lock

@@ -1,428 +0,0 @@
-# This file is automatically @generated by Cargo.
-# It is not intended for manual editing.
-version = 4
-
-[[package]]
-name = "autocfg"
-version = "1.5.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2032f911046de80f0a198e0901378627c33f59ea0ac00e363d481118bd70a53"
-
-[[package]]
-name = "bit-set"
-version = "0.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "08807e080ed7f9d5433fa9b275196cfc35414f66a0c79d864dc51a0d825231a3"
-dependencies = [
- "bit-vec",
-]
-
-[[package]]
-name = "bit-vec"
-version = "0.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5e764a1d40d510daf35e07be9eb06e75770908c27d411ee6c92109c9840eaaf7"
-
-[[package]]
-name = "bitflags"
-version = "2.13.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b588b76d00fde79687d7646a9b5bdf3cc0f655e0bbd080335a95d7e96f3587da"
-
-[[package]]
-name = "cfg-if"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
-
-[[package]]
-name = "errno"
-version = "0.3.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
-dependencies = [
- "libc",
- "windows-sys",
-]
-
-[[package]]
-name = "failproofaid"
-version = "1.0.0-beta.2"
-dependencies = [
- "fpai-ipc",
- "libc",
- "serde",
- "serde_json",
-]
-
-[[package]]
-name = "fastrand"
-version = "2.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "da7c62ceae207dd37ea5b845da6a0696c799f85e97da1ab5b7910be3c1c80223"
-
-[[package]]
-name = "fnv"
-version = "1.0.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
-
-[[package]]
-name = "fpai-ipc"
-version = "1.0.0-beta.2"
-dependencies = [
- "libc",
- "proptest",
- "serde",
- "serde_json",
-]
-
-[[package]]
-name = "getrandom"
-version = "0.3.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
-dependencies = [
- "cfg-if",
- "libc",
- "r-efi 5.3.0",
- "wasip2",
-]
-
-[[package]]
-name = "getrandom"
-version = "0.4.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "300e883d756b2e4ec94e02791f39b04b522276138852cfc41d9fb7e904106099"
-dependencies = [
- "cfg-if",
- "libc",
- "r-efi 6.0.0",
-]
-
-[[package]]
-name = "itoa"
-version = "1.0.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8f42a60cbdf9a97f5d2305f08a87dc4e09308d1276d28c869c684d7777685682"
-
-[[package]]
-name = "libc"
-version = "0.2.189"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3eaf3ede3fee6db1a4c2ee091bf8a8b4dccdc6d17f656fb07896ee72867612f2"
-
-[[package]]
-name = "linux-raw-sys"
-version = "0.12.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"
-
-[[package]]
-name = "memchr"
-version = "2.8.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cf8baf1c55e62ffcace7a9f06f4bd9cd3f0c4beb022d3b367256b91b87513d98"
-
-[[package]]
-name = "num-traits"
-version = "0.2.19"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
-dependencies = [
- "autocfg",
-]
-
-[[package]]
-name = "once_cell"
-version = "1.21.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
-
-[[package]]
-name = "ppv-lite86"
-version = "0.2.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
-dependencies = [
- "zerocopy",
-]
-
-[[package]]
-name = "proc-macro2"
-version = "1.0.107"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "985e7ec9bb745e6ce6535b544d84d6cd6f7ad8bd711c398938ae983b91a766d9"
-dependencies = [
- "unicode-ident",
-]
-
-[[package]]
-name = "proptest"
-version = "1.11.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4b45fcc2344c680f5025fe57779faef368840d0bd1f42f216291f0dc4ace4744"
-dependencies = [
- "bit-set",
- "bit-vec",
- "bitflags",
- "num-traits",
- "rand",
- "rand_chacha",
- "rand_xorshift",
- "regex-syntax",
- "rusty-fork",
- "tempfile",
- "unarray",
-]
-
-[[package]]
-name = "quick-error"
-version = "1.2.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a1d01941d82fa2ab50be1e79e6714289dd7cde78eba4c074bc5a4374f650dfe0"
-
-[[package]]
-name = "quote"
-version = "1.0.47"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1fbf4db142a473a8d80c26bbf18454ed458bf8d26c8219c331daecfdbd079001"
-dependencies = [
- "proc-macro2",
-]
-
-[[package]]
-name = "r-efi"
-version = "5.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
-
-[[package]]
-name = "r-efi"
-version = "6.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
-
-[[package]]
-name = "rand"
-version = "0.9.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b9ef1d0d795eb7d84685bca4f72f3649f064e6641543d3a8c415898726a57b41"
-dependencies = [
- "rand_chacha",
- "rand_core",
-]
-
-[[package]]
-name = "rand_chacha"
-version = "0.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
-dependencies = [
- "ppv-lite86",
- "rand_core",
-]
-
-[[package]]
-name = "rand_core"
-version = "0.9.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
-dependencies = [
- "getrandom 0.3.4",
-]
-
-[[package]]
-name = "rand_xorshift"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "513962919efc330f829edb2535844d1b912b0fbe2ca165d613e4e8788bb05a5a"
-dependencies = [
- "rand_core",
-]
-
-[[package]]
-name = "regex-syntax"
-version = "0.8.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d6f6ff9a378485b298a5286656da665ba74413d36db0979633275d2e708145d4"
-
-[[package]]
-name = "rustix"
-version = "1.1.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190"
-dependencies = [
- "bitflags",
- "errno",
- "libc",
- "linux-raw-sys",
- "windows-sys",
-]
-
-[[package]]
-name = "rusty-fork"
-version = "0.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cc6bf79ff24e648f6da1f8d1f011e9cac26491b619e6b9280f2b47f1774e6ee2"
-dependencies = [
- "fnv",
- "quick-error",
- "tempfile",
- "wait-timeout",
-]
-
-[[package]]
-name = "serde"
-version = "1.0.229"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4148590afebada386688f18773da617792bf2ef03ffc1e4cbd2b1d45b023e0ba"
-dependencies = [
- "serde_core",
- "serde_derive",
-]
-
-[[package]]
-name = "serde_core"
-version = "1.0.229"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "67dca2c9c51e58a4791a4b1ed58308b39c64224d349a935ab5039aa360942a48"
-dependencies = [
- "serde_derive",
-]
-
-[[package]]
-name = "serde_derive"
-version = "1.0.229"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e7a5d71263a5a7d47b41f6b3f06ba276f10cc18b0931f1799f710578e2309348"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 3.0.3",
-]
-
-[[package]]
-name = "serde_json"
-version = "1.0.151"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c841b55ecdae098c80dcae9cf767f6f8a0c2cdb3416bbef72181df4d0fe73f14"
-dependencies = [
- "itoa",
- "memchr",
- "serde",
- "serde_core",
- "zmij",
-]
-
-[[package]]
-name = "syn"
-version = "2.0.119"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "872831b642d1a07999a962a351ed35b955ea2cfc8f3862091e2a240a84f17297"
-dependencies = [
- "proc-macro2",
- "quote",
- "unicode-ident",
-]
-
-[[package]]
-name = "syn"
-version = "3.0.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "53e9bae58849f64dfa4f5d5ae372c8341f7305f82a3868709269343628b659a3"
-dependencies = [
- "proc-macro2",
- "quote",
- "unicode-ident",
-]
-
-[[package]]
-name = "tempfile"
-version = "3.27.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
-dependencies = [
- "fastrand",
- "getrandom 0.4.3",
- "once_cell",
- "rustix",
- "windows-sys",
-]
-
-[[package]]
-name = "unarray"
-version = "0.1.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eaea85b334db583fe3274d12b4cd1880032beab409c0d774be044d4480ab9a94"
-
-[[package]]
-name = "unicode-ident"
-version = "1.0.24"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
-
-[[package]]
-name = "wait-timeout"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "09ac3b126d3914f9849036f826e054cbabdc8519970b8998ddaf3b5bd3c65f11"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "wasip2"
-version = "1.0.4+wasi-0.2.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b67efb37e106e55ce722a510d6b5f9c17f083e5fc79afc2badeb12cc313d9487"
-dependencies = [
- "wit-bindgen",
-]
-
-[[package]]
-name = "windows-link"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
-
-[[package]]
-name = "windows-sys"
-version = "0.61.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
-dependencies = [
- "windows-link",
-]
-
-[[package]]
-name = "wit-bindgen"
-version = "0.57.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1ebf944e87a7c253233ad6766e082e3cd714b5d03812acc24c318f549614536e"
-
-[[package]]
-name = "zerocopy"
-version = "0.8.55"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b5a105cd7b140f6eeec8acff2ea38135d3cab283ada58540f629fe51e46696eb"
-dependencies = [
- "zerocopy-derive",
-]
-
-[[package]]
-name = "zerocopy-derive"
-version = "0.8.55"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0fe976fb70c78cd64cccfe3a6fc142244e8a77b70959b30faf9d0ac37ee228eb"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn 2.0.119",
-]
-
-[[package]]
-name = "zmij"
-version = "1.0.23"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "29666d0abbfad1e3dc4dcf6144730dd3a3ab225bbbdac83319345b1b44ccfc1b"

package/.next/standalone/Cargo.toml

@@ -1,9 +0,0 @@
-[workspace]
-resolver = "3"
-members = ["crates/*"]
-
-[workspace.package]
-version = "1.0.0-beta.2"
-edition = "2024"
-license-file = "LICENSE"
-repository = "https://github.com/FailproofAI/failproofai"

package/.next/standalone/crates/PROTOCOL.md

@@ -1,122 +0,0 @@
-# failproofaid wire protocol
-
-The contract between the `failproofai` CLI (thin client) and the `failproofaid`
-daemon over a Unix domain socket. This is the same contract every hook
-invocation already has today — see `src/hooks/handler.ts`'s
-`handleHookEvent`: `(argv --hook <Event> --cli <cli>, stdin JSON payload) ->
-(stdout, stderr, exitCode)`. The daemon adds nothing to that contract; it only
-relays it over a socket instead of a fresh process's argv/stdin/stdout.
-
-Implemented in `crates/fpai-ipc` (framing + envelope + peer verification) and
-`crates/failproofaid` (the socket server itself). As of Stage 2, the daemon
-answers `ping` and rejects `hook` with a stub "not implemented" error — Stage 3
-wires `hook` up to a real warm Node/Bun worker.
-
-## Transport
-
-One Unix domain socket, one connection per request. The daemon reads exactly
-one frame, dispatches it, writes exactly one frame back, and lets the
-connection close — there is no request-ID multiplexing because there is never
-more than one logical request in flight per connection.
-
-Default path: `~/.failproofai/run/failproofaid.sock`. Overridable via the
-`FAILPROOFAI_DAEMON_SOCKET` env var (used by local dev and tests — never point
-this at a directory failproofaid doesn't own itself; see
-`crates/failproofaid/src/paths.rs`'s `ensure_run_dir`, which refuses to modify
-permissions on a pre-existing directory it didn't create).
-
-Permissions: the run directory is `0700` and the socket file `0600` — this is
-the actual access-control boundary (user-scope only, no elevation, same OS
-user only). `crates/fpai-ipc/src/peer.rs`'s `SO_PEERCRED` (Linux) /
-`getpeereid` (macOS) check is defense-in-depth on top of that, not a stronger
-boundary — same-user access can always reach this daemon regardless.
-
-## Framing
-
-Every message, in both directions, is:
-
-```
-+----------------------------+------------------------------+
-| length (4 bytes, big-endian u32) | UTF-8 JSON body (length bytes) |
-+----------------------------+------------------------------+
-```
-
-A declared length over `MAX_FRAME_LEN` (16 MiB) is rejected without
-allocating a body buffer for it — a hook payload is at most 1 MiB (see
-`handler.ts`'s own stdin cap), so 16 MiB is headroom, not an expected size.
-
-## Envelope
-
-Tagged JSON, `"type"` as the discriminant, camelCase field names.
-
-### Client → daemon (`ClientMessage`)
-
-```jsonc
-// Liveness/handshake check.
-{ "type": "ping", "protocolVersion": 1 }
-
-// One hook evaluation request — one per `failproofai --hook <Event> --cli <cli>` invocation.
-{
-  "type": "hook",
-  "protocolVersion": 1,
-  "hookEvent": "PreToolUse",
-  "cli": "claude",
-  "stdin": "<raw stdin payload the calling agent CLI wrote to the one-shot failproofai process, forwarded verbatim>",
-  "cwd": "/path/to/session/cwd" // optional; see the note below
-}
-```
-
-`cwd` must be the *originating* CLI process's cwd, captured by the thin
-client before dispatch — never the daemon's own cwd. The daemon is a single
-long-lived process; its own `cwd` does not vary per request and must never be
-used to resolve project config or custom policies (this is the "process.cwd()
-hazard" the TS-side plan calls out explicitly).
-
-### Daemon → client (`ServerMessage`)
-
-```jsonc
-{ "type": "pong", "protocolVersion": 1 }
-
-{
-  "type": "hookResult",
-  "protocolVersion": 1,
-  "exitCode": 0,
-  "stdout": "...",
-  "stderr": "..."
-}
-
-// The daemon accepted the connection and parsed the request, but could not
-// produce a verdict (worker down/hung, or — in Stage 2 — hook evaluation
-// simply isn't wired up yet). Distinct from hookResult so the client can
-// tell "ran and decided" apart from "daemon couldn't evaluate at all" — the
-// latter is what drives the client's fail-closed path.
-{ "type": "error", "protocolVersion": 1, "message": "..." }
-```
-
-## Protocol versioning
-
-`protocolVersion` is carried on every message in both directions. A mismatch
-gets an explicit `error` response from the daemon — the client treats *any*
-failure mode (missing socket, refused connection, timeout, malformed
-response, or an explicit version mismatch) identically: fall through to
-whatever the client's fail-closed/in-process policy dictates. There is no
-negotiation, only agree-or-fall-back.
-
-## Peer verification
-
-Every connection is checked with `SO_PEERCRED`/`getpeereid` before a single
-byte of the request is read. A peer running as a different OS user gets the
-connection dropped with **no response at all** — not even an `error` frame —
-so a connection from the wrong user can't even confirm a daemon is listening
-there.
-
-## Malformed input handling
-
-- A frame whose declared length exceeds `MAX_FRAME_LEN`: connection closed,
-  no response, no allocation attempted for the declared size.
-- A syntactically invalid or truncated frame: connection closed, no response.
-- A well-formed frame with an unrecognized `"type"`: fails to deserialize,
-  same as above.
-
-None of these crash the daemon or the connection-handling thread — a bad
-frame from one connection has no effect on any other connection.

package/.next/standalone/crates/failproofaid/Cargo.toml

@@ -1,18 +0,0 @@
-[package]
-name = "failproofaid"
-version.workspace = true
-edition.workspace = true
-license-file.workspace = true
-repository.workspace = true
-description = "Thin Rust supervisor: owns the failproofai IPC socket, service lifecycle, and warm worker process supervision. Carries no policy logic."
-publish = false
-
-[[bin]]
-name = "failproofaid"
-path = "src/main.rs"
-
-[dependencies]
-fpai-ipc = { path = "../fpai-ipc" }
-serde = { version = "1", features = ["derive"] }
-serde_json = "1"
-libc = "0.2"

package/.next/standalone/crates/failproofaid/src/lock.rs

@@ -1,81 +0,0 @@
-//! Single-instance guard: at most one `failproofaid` per OS user.
-//!
-//! Uses an advisory `flock()` on a dedicated lock file rather than a
-//! PID file — a PID file has to be checked-then-trusted (the PID could
-//! have been reused by an unrelated process since), whereas `flock` is
-//! released automatically by the kernel when the holding process exits or
-//! is killed, for any reason, with no stale-file cleanup required.
-
-use std::fs::{File, OpenOptions};
-use std::io;
-use std::os::unix::io::AsRawFd;
-use std::path::Path;
-
-pub struct SingletonLock {
-    // Held for the guard's lifetime; the flock is released when this File
-    // (and its underlying fd) is dropped.
-    _file: File,
-}
-
-#[derive(Debug)]
-pub enum LockError {
-    Io(io::Error),
-    AlreadyRunning,
-}
-
-impl std::fmt::Display for LockError {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        match self {
-            LockError::Io(e) => write!(f, "io error acquiring daemon lock: {e}"),
-            LockError::AlreadyRunning => {
-                write!(f, "another failproofaid is already running for this user")
-            }
-        }
-    }
-}
-
-impl std::error::Error for LockError {}
-
-/// Tries to acquire the singleton lock at `path`, creating the file if
-/// needed. Returns [`LockError::AlreadyRunning`] immediately (non-blocking)
-/// if another live process already holds it.
-pub fn acquire(path: &Path) -> Result<SingletonLock, LockError> {
-    let file = OpenOptions::new()
-        .create(true)
-        .truncate(false)
-        .write(true)
-        .open(path)
-        .map_err(LockError::Io)?;
-
-    let ret = unsafe { libc::flock(file.as_raw_fd(), libc::LOCK_EX | libc::LOCK_NB) };
-    if ret != 0 {
-        let err = io::Error::last_os_error();
-        return match err.raw_os_error() {
-            Some(libc::EWOULDBLOCK) => Err(LockError::AlreadyRunning),
-            _ => Err(LockError::Io(err)),
-        };
-    }
-    Ok(SingletonLock { _file: file })
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn a_second_acquire_in_the_same_process_fails_while_the_first_is_held() {
-        let tmp = std::env::temp_dir().join(format!(
-            "failproofaid-lock-test-{}-{}",
-            std::process::id(),
-            line!()
-        ));
-        let first = acquire(&tmp).expect("first acquire should succeed");
-        let second = acquire(&tmp);
-        assert!(matches!(second, Err(LockError::AlreadyRunning)));
-        drop(first);
-        // Once released, a fresh acquire succeeds again.
-        let third = acquire(&tmp);
-        assert!(third.is_ok());
-        std::fs::remove_file(&tmp).ok();
-    }
-}