failproofai 1.0.0-beta.3 → 1.0.0-beta.5

package/.next/standalone/server.js

@@ -9,7 +9,7 @@ const currentPort = parseInt(process.env.PORT, 10) || 3000
 const hostname = process.env.HOSTNAME || '0.0.0.0'
 
 let keepAliveTimeout = parseInt(process.env.KEEP_ALIVE_TIMEOUT, 10)
-const nextConfig = {"env":{"NEXT_PUBLIC_APP_VERSION":"1.0.0-beta.3"},"typescript":{"ignoreBuildErrors":false},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.ts","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/work/failproofai/failproofai","cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":false,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"partialFallbacks":false,"dynamicOnHover":false,"varyParams":false,"prefetchInlining":false,"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":3,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"useTypeScriptCli":false,"viewTransition":false,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":false,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":false,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.ts","outputFileTracingExcludes":{"*":["node_modules/@img/**","node_modules/sharp/**"]},"turbopack":{"root":"/home/runner/work/failproofai/failproofai"},"distDirRoot":".next"}
+const nextConfig = {"env":{"NEXT_PUBLIC_APP_VERSION":"1.0.0-beta.5"},"typescript":{"ignoreBuildErrors":false},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.ts","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/work/failproofai/failproofai","cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":false,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"partialFallbacks":false,"dynamicOnHover":false,"varyParams":false,"prefetchInlining":false,"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":3,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"useTypeScriptCli":false,"viewTransition":false,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":false,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":false,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.ts","outputFileTracingExcludes":{"*":["node_modules/@img/**","node_modules/sharp/**"]},"turbopack":{"root":"/home/runner/work/failproofai/failproofai"},"distDirRoot":".next"}
 
 process.env.__NEXT_PRIVATE_STANDALONE_CONFIG = JSON.stringify(nextConfig)
 

package/dist/cli.mjs

@@ -19,7 +19,7 @@ var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // package.json
-var version2 = "1.0.0-beta.3";
+var version2 = "1.0.0-beta.5";
 var init_package = () => {};
 
 // src/posthog-key.ts
@@ -23051,9 +23051,10 @@ var init_cloud_enrollment = __esm(() => {
 
 // src/hooks/daemon-download.ts
 import { createHash as createHash5 } from "node:crypto";
-import { chmodSync as chmodSync3, existsSync as existsSync23, mkdirSync as mkdirSync11, renameSync as renameSync4, rmSync as rmSync5, writeFileSync as writeFileSync9 } from "node:fs";
+import { chmodSync as chmodSync3, existsSync as existsSync23, mkdirSync as mkdirSync11, readFileSync as readFileSync19, renameSync as renameSync4, rmSync as rmSync5, writeFileSync as writeFileSync9 } from "node:fs";
+import { createRequire as createRequire2 } from "node:module";
 import { homedir as homedir33 } from "node:os";
-import { resolve as resolve19 } from "node:path";
+import { dirname as dirname9, resolve as resolve19 } from "node:path";
 import { gunzipSync } from "node:zlib";
 function baseUrl() {
   return (process.env.FAILPROOFAI_DAEMON_BASE_URL || DEFAULT_BASE_URL).replace(/\/+$/, "");
@@ -23070,6 +23071,58 @@ function daemonAssetUrl(key, ver = version2) {
 function checksumsUrl(ver = version2) {
   return `${baseUrl()}/v${ver}/SHA256SUMS`;
 }
+function platformPackageName(key) {
+  return `@failproofai/failproofaid-${key}`;
+}
+function npmPlatformBinaryPath(key) {
+  const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT;
+  if (!packageRoot)
+    return null;
+  const name = platformPackageName(key);
+  try {
+    const requireFromRoot = createRequire2(resolve19(packageRoot, "package.json"));
+    const found = platformPackageBinary(dirname9(requireFromRoot.resolve(`${name}/package.json`)));
+    if (found)
+      return found;
+  } catch {}
+  return platformPackageBinary(resolve19(packageRoot, "node_modules", name));
+}
+function platformPackageBinary(dir) {
+  try {
+    const manifest = JSON.parse(readFileSync19(resolve19(dir, "package.json"), "utf8"));
+    if (manifest.version !== version2)
+      return null;
+  } catch {
+    return null;
+  }
+  const candidate = resolve19(dir, "bin", "failproofaid");
+  return existsSync23(candidate) ? candidate : null;
+}
+function installBinaryBytes(binary) {
+  const target = installedBinaryPath();
+  const tempPath = `${target}.${process.pid}.tmp`;
+  try {
+    mkdirSync11(daemonBinaryDir(), { recursive: true });
+    writeFileSync9(tempPath, binary);
+    chmodSync3(tempPath, 493);
+    renameSync4(tempPath, target);
+    return target;
+  } catch (err) {
+    rmSync5(tempPath, { force: true });
+    throw err;
+  }
+}
+function installFromNpmPackage(key) {
+  const source = npmPlatformBinaryPath(key);
+  if (!source)
+    return { error: `${platformPackageName(key)} is not installed` };
+  try {
+    return { path: installBinaryBytes(readFileSync19(source)) };
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    return { error: `failed to install failproofaid from ${source}: ${message}` };
+  }
+}
 async function fetchBytes(url) {
   const response = await fetch(url, { signal: AbortSignal.timeout(DOWNLOAD_TIMEOUT_MS) });
   if (!response.ok)
@@ -23093,7 +23146,6 @@ async function downloadFailproofaidBinary(key) {
     return { error: "daemon downloads are disabled (FAILPROOFAI_NO_DOWNLOAD)" };
   }
   const assetName = `failproofaid-${key}.gz`;
-  const tempPath = `${target}.${process.pid}.tmp`;
   try {
     const [asset, manifest] = await Promise.all([
       fetchBytes(daemonAssetUrl(key)),
@@ -23107,14 +23159,8 @@ async function downloadFailproofaidBinary(key) {
     if (actual !== expected) {
       return { error: `checksum mismatch for ${assetName} (expected ${expected}, got ${actual})` };
     }
-    const binary = gunzipSync(asset);
-    mkdirSync11(daemonBinaryDir(), { recursive: true });
-    writeFileSync9(tempPath, binary);
-    chmodSync3(tempPath, 493);
-    renameSync4(tempPath, target);
-    return { path: target };
+    return { path: installBinaryBytes(gunzipSync(asset)) };
   } catch (err) {
-    rmSync5(tempPath, { force: true });
     const message = err instanceof Error ? err.message : String(err);
     return { error: `failed to download failproofaid v${version2} for ${key}: ${message}` };
   }
@@ -23129,20 +23175,20 @@ import {
   existsSync as existsSync24,
   mkdirSync as mkdirSync12,
   mkdtempSync,
-  readFileSync as readFileSync19,
+  readFileSync as readFileSync20,
   writeFileSync as writeFileSync10,
   unlinkSync as unlinkSync3,
   rmSync as rmSync6
 } from "node:fs";
 import { homedir as homedir34, tmpdir, userInfo } from "node:os";
-import { resolve as resolve20, dirname as dirname9 } from "node:path";
+import { resolve as resolve20, dirname as dirname10 } from "node:path";
 import { execFileSync as execFileSync4 } from "node:child_process";
 function setDaemonConfigured(value) {
   const path3 = getConfigPathForScope("user");
   let config = {};
   try {
     if (existsSync24(path3))
-      config = JSON.parse(readFileSync19(path3, "utf8"));
+      config = JSON.parse(readFileSync20(path3, "utf8"));
   } catch {
     return;
   }
@@ -23151,7 +23197,7 @@ function setDaemonConfigured(value) {
   else
     delete config.daemonConfigured;
   try {
-    mkdirSync12(dirname9(path3), { recursive: true });
+    mkdirSync12(dirname10(path3), { recursive: true });
     writeFileSync10(path3, JSON.stringify(config, null, 2) + `
 `, "utf8");
   } catch {}
@@ -23190,10 +23236,15 @@ async function ensureFailproofaidBinary() {
   if (!key) {
     return { reason: `failproofaid has no prebuilt binary for ${process.platform}/${process.arch}` };
   }
+  const fromNpm = installFromNpmPackage(key);
+  if (fromNpm.path)
+    return { path: fromNpm.path };
   const result = await downloadFailproofaidBinary(key);
   if (result.path)
     return { path: result.path };
-  return { reason: result.error ?? "failproofaid binary could not be downloaded" };
+  return {
+    reason: result.error ? `${result.error} (${fromNpm.error})` : "failproofaid binary could not be installed"
+  };
 }
 function resolveWorkerCommand() {
   if (process.env.FAILPROOFAI_WORKER_CMD)
@@ -23521,7 +23572,7 @@ import {
   existsSync as existsSync26,
   chmodSync as chmodSync4,
   statSync as statSync18,
-  readFileSync as readFileSync20,
+  readFileSync as readFileSync21,
   rmSync as rmSync7
 } from "node:fs";
 import { join as join32 } from "node:path";
@@ -23537,7 +23588,7 @@ function hasIngestCredential() {
 }
 function readIngestCredential() {
   try {
-    const raw = JSON.parse(readFileSync20(ingestPath(), "utf8"));
+    const raw = JSON.parse(readFileSync21(ingestPath(), "utf8"));
     if (typeof raw.url !== "string" || typeof raw.key !== "string")
       return null;
     if (!raw.url || !raw.key)
@@ -23580,7 +23631,8 @@ function writeCollectorSettings(settings) {
       hooks: settings.hooks,
       hooksVerbosity: settings.hooksVerbosity ?? "decisions",
       redact: settings.redact ?? "minimal",
-      environment: settings.environment ?? "local"
+      environment: settings.environment ?? "local",
+      ...settings.machineId ? { machineId: settings.machineId } : {}
     }
   });
 }
@@ -23677,7 +23729,8 @@ async function connectToCloud(input) {
     const settings = {
       hooks: true,
       sessions: input.sessions === true,
-      environment: input.environment
+      environment: input.environment,
+      machineId: input.machineId
     };
     writeCollectorSettings(settings);
     outcome.anyConfigured = true;
@@ -24580,7 +24633,7 @@ __export(exports_configure_wizard, {
   buildPresetChoices: () => buildPresetChoices,
   buildAgentChoices: () => buildAgentChoices
 });
-import { existsSync as existsSync28, mkdirSync as mkdirSync14, writeFileSync as writeFileSync12, readFileSync as readFileSync21 } from "node:fs";
+import { existsSync as existsSync28, mkdirSync as mkdirSync14, writeFileSync as writeFileSync12, readFileSync as readFileSync22 } from "node:fs";
 import { homedir as homedir38, hostname as hostname5 } from "node:os";
 import { resolve as resolve23, sep as sep5 } from "node:path";
 async function emit(event, props) {
@@ -24704,7 +24757,7 @@ function setCustomPoliciesEnabled(scope, cwd, enabled) {
   let config = {};
   try {
     if (existsSync28(path3))
-      config = JSON.parse(readFileSync21(path3, "utf8"));
+      config = JSON.parse(readFileSync22(path3, "utf8"));
   } catch {
     return;
   }
@@ -25166,7 +25219,7 @@ __export(exports_launch2, {
 });
 import { spawn as spawn3 } from "child_process";
 import { realpathSync as realpathSync4, existsSync as existsSync29 } from "node:fs";
-import { resolve as resolve24, dirname as dirname10 } from "node:path";
+import { resolve as resolve24, dirname as dirname11 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 import { createInterface as createInterface3 } from "node:readline";
 function launch2(mode) {
@@ -25181,7 +25234,7 @@ function launch2(mode) {
     process.env.PORT = port;
     process.env.HOSTNAME = "0.0.0.0";
     cmd = "node";
-    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve24(dirname10(realpathSync4(fileURLToPath3(import.meta.url))), "..");
+    const packageRoot = process.env.FAILPROOFAI_PACKAGE_ROOT ?? resolve24(dirname11(realpathSync4(fileURLToPath3(import.meta.url))), "..");
     const serverJsPath = resolve24(packageRoot, ".next/standalone/server.js");
     if (!existsSync29(serverJsPath)) {
       let shadowMessage = null;
@@ -25278,17 +25331,17 @@ var init_cli_error2 = __esm(() => {
 
 // bin/failproofai.mjs
 import { realpathSync as realpathSync5 } from "fs";
-import { dirname as dirname11, resolve as resolve25 } from "path";
+import { dirname as dirname12, resolve as resolve25 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 // package.json
-var version = "1.0.0-beta.3";
+var version = "1.0.0-beta.5";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {
-  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve25(dirname11(realpathSync5(fileURLToPath4(import.meta.url))), "..");
+  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve25(dirname12(realpathSync5(fileURLToPath4(import.meta.url))), "..");
 }
 if (!process.env.FAILPROOFAI_DIST_PATH) {
-  process.env.FAILPROOFAI_DIST_PATH = resolve25(dirname11(realpathSync5(fileURLToPath4(import.meta.url))), "..", "dist");
+  process.env.FAILPROOFAI_DIST_PATH = resolve25(dirname12(realpathSync5(fileURLToPath4(import.meta.url))), "..", "dist");
 }
 var args = process.argv.slice(2);
 if (args[0] === "p")

package/dist/worker.mjs

@@ -2340,7 +2340,7 @@ var init_builtin_policies = __esm(() => {
 });
 
 // package.json
-var version = "1.0.0-beta.3";
+var version = "1.0.0-beta.5";
 var init_package = () => {};
 
 // src/posthog-key.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "1.0.0-beta.3",
+  "version": "1.0.0-beta.5",
   "description": "The easiest way to manage policies that keep your AI agents reliable, on-task, and running autonomously — for Claude Code & the Agents SDK",
   "bin": {
     "failproofai": "./dist/cli.mjs",
@@ -76,19 +76,19 @@
     "@anthropic-ai/sdk": "^0.115.0",
     "@mdx-js/mdx": "^3.1.1",
     "@tailwindcss/postcss": "^4.3.1",
-    "@tanstack/react-virtual": "^3.14.3",
+    "@tanstack/react-virtual": "^3.14.9",
     "@testing-library/jest-dom": "^7.0.0",
     "@testing-library/react": "^16.3.2",
     "@testing-library/user-event": "^14.6.1",
-    "@types/node": "26.1.1",
+    "@types/node": "26.1.2",
     "@types/react": "19.2.17",
     "@types/react-dom": "^19.2.3",
-    "@vitejs/plugin-react": "^6.0.1",
+    "@vitejs/plugin-react": "^6.0.5",
     "clsx": "^2.1.1",
     "eslint": "^10.5.0",
     "eslint-config-next": "^16.2.9",
-    "jsdom": "^30.0.0",
-    "lucide-react": "^1.18.0",
+    "jsdom": "^30.0.1",
+    "lucide-react": "^1.28.0",
     "next": "^16.2.11",
     "react": "^19.2.4",
     "react-dom": "^19.2.4",
@@ -100,7 +100,7 @@
   "dependencies": {
     "html-to-image": "^1.11.13",
     "html2canvas": "^1.4.1",
-    "posthog-node": "^5.37.1",
+    "posthog-node": "^5.47.7",
     "sql.js": "^1.14.1",
     "yaml": "^2.9.0"
   },
@@ -108,8 +108,14 @@
     "postcss": "8.5.23",
     "eslint-plugin-react-hooks": "7.0.1",
     "vite": "8.0.16",
-    "undici": "7.28.0",
+    "undici": "7.29.0",
     "brace-expansion": "5.0.9",
     "sharp": "0.35.0"
+  },
+  "optionalDependencies": {
+    "@failproofai/failproofaid-linux-x64": "1.0.0-beta.5",
+    "@failproofai/failproofaid-linux-arm64": "1.0.0-beta.5",
+    "@failproofai/failproofaid-darwin-x64": "1.0.0-beta.5",
+    "@failproofai/failproofaid-darwin-arm64": "1.0.0-beta.5"
   }
 }

package/scripts/build-daemon-packages.mjs

@@ -0,0 +1,210 @@
+#!/usr/bin/env node
+/**
+ * Publishes the four `failproofaid` binaries as npm platform packages, so a
+ * plain `npm install failproofai` already carries the daemon for the machine
+ * it landed on instead of fetching one from the GitHub Release later.
+ *
+ * The release assets stay exactly as they are — this is a second channel, not
+ * a replacement. `src/hooks/daemon-download.ts` prefers whichever binary is
+ * already on disk, then this npm package, then the release; the npm path is
+ * the only one that works with no network at `failproofai config` time.
+ *
+ * Two rules make this safe, and both come from the way the first attempt at
+ * npm-shipping the daemon failed (CHANGELOG 1.0.0-beta.3 — four
+ * `optionalDependencies` were declared and never published, so every install
+ * resolved four 404s):
+ *
+ *   1. These packages publish BEFORE the root package that pins them, so the
+ *      names always exist by the time anything depends on them.
+ *   2. A publish failure here is fatal, not a warning (unlike the alias stubs
+ *      in publish-aliases.mjs, where a missing name costs nothing). Failing
+ *      the job leaves the registry untouched; publishing a root package whose
+ *      optional dependency 404s would ship the broken state to every user.
+ *
+ * Usage:
+ *   node scripts/build-daemon-packages.mjs --artifacts <dir> [--dist-tag <tag>]
+ *                                          [--version <v>] [--pin-root] [--dry-run]
+ */
+import { execFileSync } from "node:child_process";
+import { chmodSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+import { gunzipSync } from "node:zlib";
+import {
+  DAEMON_PLATFORMS,
+  daemonAssetName,
+  daemonOptionalDependencies,
+  daemonPackageName,
+} from "./daemon-platforms.mjs";
+
+const REPO_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+
+/**
+ * Where the generated packages are staged — **outside the repo**, and that is
+ * load-bearing rather than tidy.
+ *
+ * `npm publish` re-runs `prepare`, so the Next build happens again *after*
+ * this script has run, and Next's file tracing pulls the whole project root
+ * into `.next/standalone` (see the "over-traced project artifacts" prune list
+ * in scripts/prune-standalone.mjs). Anything staged inside the checkout
+ * therefore ends up inside the published CLI tarball — measured: a dry run
+ * shipped 16 MB of daemon `.gz` assets under
+ * `.next/standalone/release-assets/`. Staging in the temp dir cannot be swept
+ * up by a build. `--staging` overrides it for tests.
+ */
+export const STAGING_DIR = resolve(tmpdir(), "failproofaid-packages");
+
+/**
+ * The manifest for one platform package.
+ *
+ * Deliberately carries no `bin` (it would shadow the root package's own
+ * `failproofaid` shim, which is what a user invoking the daemon by hand
+ * should reach) and no `exports` (so `require.resolve("<pkg>/package.json")`
+ * — how the CLI finds this package — keeps working).
+ */
+export function platformPackageManifest(platform, version, rootPkg = {}) {
+  return {
+    name: daemonPackageName(platform.key),
+    version,
+    description: `The failproofaid background daemon binary for ${platform.os} ${platform.cpu}. Installed automatically as an optional dependency of failproofai.`,
+    // npm's own platform filters: with both set, only the matching package is
+    // installed and the other three are skipped without a warning.
+    os: [platform.os],
+    cpu: [platform.cpu],
+    files: ["bin/"],
+    publishConfig: { access: "public" },
+    repository: rootPkg.repository,
+    homepage: rootPkg.homepage,
+    bugs: rootPkg.bugs,
+    license: rootPkg.license,
+  };
+}
+
+/**
+ * Stages one platform package on disk and returns its directory.
+ *
+ * The binary is written decompressed and mode 0755: npm records the executable
+ * bit in the tarball, so it survives publish → install, which is how esbuild
+ * and swc ship their binaries.
+ */
+export function stagePlatformPackage(platform, version, rootPkg, artifactsDir, stagingRoot = STAGING_DIR) {
+  const asset = resolve(artifactsDir, daemonAssetName(platform.key));
+  if (!existsSync(asset)) {
+    throw new Error(`missing artifact ${asset} — the daemon build did not produce ${daemonAssetName(platform.key)}`);
+  }
+
+  const dir = join(stagingRoot, `failproofaid-${platform.key}`);
+  rmSync(dir, { recursive: true, force: true });
+  mkdirSync(join(dir, "bin"), { recursive: true });
+
+  const binary = gunzipSync(readFileSync(asset));
+  const binaryPath = join(dir, "bin", "failproofaid");
+  writeFileSync(binaryPath, binary);
+  chmodSync(binaryPath, 0o755);
+
+  writeFileSync(
+    join(dir, "package.json"),
+    JSON.stringify(platformPackageManifest(platform, version, rootPkg), null, 2) + "\n",
+  );
+  writeFileSync(
+    join(dir, "README.md"),
+    `# ${daemonPackageName(platform.key)}\n\n` +
+      `The \`failproofaid\` background daemon binary for ${platform.os} ${platform.cpu}.\n\n` +
+      `Installed automatically as an optional dependency of [failproofai](https://www.npmjs.com/package/failproofai) — ` +
+      `you do not need to install it yourself.\n`,
+  );
+
+  return dir;
+}
+
+/**
+ * Writes the four platform packages into the root manifest's
+ * `optionalDependencies`, pinned to `version`.
+ *
+ * Called at publish time rather than committed: a pin to a version that does
+ * not exist yet breaks `bun install --frozen-lockfile` in this repo's own CI,
+ * and keeping four pins in step with every version bump by hand is the drift
+ * this whole file exists to avoid.
+ */
+export function pinRootManifest(version, packageJsonPath = resolve(REPO_ROOT, "package.json")) {
+  const pkg = JSON.parse(readFileSync(packageJsonPath, "utf8"));
+  pkg.optionalDependencies = { ...pkg.optionalDependencies, ...daemonOptionalDependencies(version) };
+  writeFileSync(packageJsonPath, JSON.stringify(pkg, null, 2) + "\n");
+  return pkg.optionalDependencies;
+}
+
+function parseArgs(argv) {
+  const valueOf = (flag, fallback) => {
+    const index = argv.indexOf(flag);
+    return index !== -1 && argv[index + 1] ? argv[index + 1] : fallback;
+  };
+  return {
+    artifacts: valueOf("--artifacts", "release-assets"),
+    staging: valueOf("--staging", STAGING_DIR),
+    distTag: valueOf("--dist-tag", null),
+    version: valueOf("--version", null),
+    pinRoot: argv.includes("--pin-root"),
+    dryRun: argv.includes("--dry-run"),
+  };
+}
+
+/**
+ * `npm publish`, with provenance when the registry will take it.
+ *
+ * Provenance needs a supported CI and a repository field npm can match to the
+ * building workflow; when it refuses, the publish itself is still correct, so
+ * this retries once without the flag rather than failing the release.
+ */
+function publishPackage(dir, distTag, dryRun) {
+  const args = ["publish", "--tag", distTag];
+  if (dryRun) args.push("--dry-run");
+
+  const attempt = (extra) =>
+    execFileSync("npm", [...args, ...extra], { cwd: dir, stdio: "pipe", encoding: "utf8" });
+
+  const withProvenance = !dryRun && process.env.GITHUB_ACTIONS === "true";
+  try {
+    return attempt(withProvenance ? ["--provenance"] : []);
+  } catch (err) {
+    const output = (err.stdout ?? "") + (err.stderr ?? "");
+    if (output.includes("cannot publish over")) return "[skip] already published at this version";
+    if (withProvenance && /provenance/i.test(output)) {
+      console.log("::warning::provenance was rejected — retrying the publish without it");
+      return attempt([]);
+    }
+    // Fatal on purpose: see the header. The root package pins these names, so
+    // a half-published set must stop the release rather than ship 404s.
+    throw new Error(`npm publish failed for ${dir}:\n${output.trim()}`);
+  }
+}
+
+export function main(argv = process.argv.slice(2)) {
+  const options = parseArgs(argv);
+  const rootPkg = JSON.parse(readFileSync(resolve(REPO_ROOT, "package.json"), "utf8"));
+  const version = options.version ?? rootPkg.version;
+  const distTag = options.distTag ?? (version.includes("-") ? "beta" : "latest");
+  const artifactsDir = resolve(process.cwd(), options.artifacts);
+
+  console.log(
+    `Publishing ${DAEMON_PLATFORMS.length} failproofaid platform packages at ${version} ` +
+      `(tag: ${distTag}${options.dryRun ? ", dry run" : ""}) from ${artifactsDir}`,
+  );
+
+  for (const platform of DAEMON_PLATFORMS) {
+    const dir = stagePlatformPackage(platform, version, rootPkg, artifactsDir, options.staging);
+    const name = daemonPackageName(platform.key);
+    console.log(`\n${name}@${version}`);
+    console.log(publishPackage(dir, distTag, options.dryRun).trim());
+  }
+
+  if (options.pinRoot) {
+    const pins = pinRootManifest(version);
+    console.log("\nPinned in the root manifest's optionalDependencies:");
+    console.log(JSON.stringify(pins, null, 2));
+  }
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+  main();
+}

package/scripts/daemon-platforms.mjs

@@ -0,0 +1,42 @@
+/**
+ * The platforms `failproofaid` is cross-compiled for, and the npm packages
+ * those binaries publish under.
+ *
+ * One list, three consumers: `build-daemon-packages.mjs` (publishes them),
+ * `publish-aliases.mjs` (pins them in every typo-squat stub), and the root
+ * package's injected `optionalDependencies`. They have to agree exactly — a
+ * name that appears in a dependency but never gets published is a 404 in
+ * every install, which is precisely how the first attempt at npm-shipping the
+ * daemon failed (see CHANGELOG 1.0.0-beta.3).
+ *
+ * `os` / `cpu` are npm's own filters, spelled in `process.platform` /
+ * `process.arch` values: with both set, npm and bun install only the package
+ * matching the machine and silently skip the other three.
+ */
+
+export const DAEMON_PLATFORMS = [
+  { key: "linux-x64", os: "linux", cpu: "x64" },
+  { key: "linux-arm64", os: "linux", cpu: "arm64" },
+  { key: "darwin-x64", os: "darwin", cpu: "x64" },
+  { key: "darwin-arm64", os: "darwin", cpu: "arm64" },
+];
+
+/** The npm package name carrying the binary for one platform key. */
+export function daemonPackageName(key) {
+  return `@failproofai/failproofaid-${key}`;
+}
+
+/** The release asset the binary for one platform key arrives in. */
+export function daemonAssetName(key) {
+  return `failproofaid-${key}.gz`;
+}
+
+/**
+ * The `optionalDependencies` block that pins all four platform packages to one
+ * version — what the root package and every alias stub carry when published.
+ */
+export function daemonOptionalDependencies(version) {
+  return Object.fromEntries(
+    DAEMON_PLATFORMS.map((platform) => [daemonPackageName(platform.key), version]),
+  );
+}

package/scripts/prune-standalone.mjs

@@ -101,6 +101,12 @@ const STANDALONE_ROOT_PRUNE = [
   ".claude", ".failproofai", ".github", ".vscode", ".idea",
   // Failproofai CLI artifacts — the dashboard never loads these
   "bin", "dist", "scripts", "src",
+  // Release-pipeline scratch: the daemon binaries downloaded from the build
+  // matrix and the staged platform packages. Both are written into the
+  // workspace only by a local/manual run (the publish workflow keeps them in
+  // RUNNER_TEMP precisely so this cannot happen), and 16 MB of `.gz` shipped
+  // inside the CLI tarball once already because nothing pruned them.
+  "release-assets", ".daemon-packages",
 ];
 const STANDALONE_ROOT_PRUNE_FILES = [
   // Top-level markdown / licenses / docs