failproofai 1.0.0 → 1.0.1-beta.0

package/dist/worker.mjs

@@ -370,7 +370,7 @@ function failproofaiHome(home) {
     return resolve(home, ".failproofai");
   return process.env.FAILPROOFAI_HOME || resolve(homedir(), ".failproofai");
 }
-var LAYOUT_VERSION = 3, at = (...parts) => resolve(failproofaiHome(), ...parts), atHome = (home, ...parts) => home ? resolve(failproofaiHome(home), ...parts) : at(...parts), versionFile = (home) => atHome(home, "VERSION"), configFile = (home) => atHome(home, "config.json"), policiesDir = (home) => atHome(home, "policies"), customPoliciesDir, globalPolicyConfigFile = (home) => atHome(home, "policies-config.json"), cloudPoliciesDir = (home) => resolve(policiesDir(home), "cloud-policies"), hookActivityDir = (home) => atHome(home, "hook-activity"), stateDir = (home) => atHome(home, "state"), shimsDir = (home) => resolve(stateDir(home), "shims"), sessionPauseDir = () => resolve(stateDir(), "sessions"), telemetryIdFile = (home) => resolve(stateDir(home), "telemetry-id"), codexSessionPathsFile = (home) => resolve(stateDir(home), "codex-session-paths.json"), logsDir = (home) => atHome(home, "logs"), legacy;
+var LAYOUT_VERSION = 4, at = (...parts) => resolve(failproofaiHome(), ...parts), atHome = (home, ...parts) => home ? resolve(failproofaiHome(home), ...parts) : at(...parts), versionFile = (home) => atHome(home, "VERSION"), configFile = (home) => atHome(home, "config.json"), policiesDir = (home) => atHome(home, "policies"), customPoliciesDir, globalPolicyConfigFile = (home) => atHome(home, "policies-config.json"), cloudPoliciesDir = (home) => resolve(policiesDir(home), "cloud-policies"), hookActivityDir = (home) => atHome(home, "hook-activity"), stateDir = (home) => atHome(home, "state"), shimsDir = (home) => resolve(stateDir(home), "shims"), sessionPauseDir = () => resolve(stateDir(), "sessions"), telemetryIdFile = (home) => resolve(stateDir(home), "telemetry-id"), codexSessionPathsFile = (home) => resolve(stateDir(home), "codex-session-paths.json"), logsDir = (home) => atHome(home, "logs"), legacy;
 var init_fp_home = __esm(() => {
   customPoliciesDir = policiesDir;
   legacy = {
@@ -386,6 +386,10 @@ var init_fp_home = __esm(() => {
     launcherMarker: () => at(".launcher-configured"),
     lastVersion: () => at("last-version"),
     auditDashboard: () => at("audit-dashboard.json"),
+    authJson: () => at("auth.json"),
+    nextAudit: () => at("next-audit.json"),
+    auditReminder: () => at("audit", "reminder.json"),
+    auditSchedule: () => at("state", "audit-schedule.json"),
     cacheDir: () => at("cache"),
     hookActivityDir: () => at("cache", "hook-activity"),
     auditCacheDir: () => at("cache", "audit"),
@@ -1831,7 +1835,7 @@ function registerBuiltinPolicies(enabledNames) {
     }
   }
 }
-var isClaudeInternalPath, isClaudeSettingsFile, SHELL_OPERATORS, SHELL_METACHAR_RE, JWT_RE, API_KEY_PATTERNS, CONNECTION_STRING_RE, PRIVATE_KEY_RE, BEARER_TOKEN_RE, SQL_TOOL_RE, DESTRUCTIVE_SQL_RE, DELETE_NO_WHERE_RE, SQL_WHERE_RE, SCHEMA_ALTER_RE, PUBLISH_CMD_RE, ENV_PRINTENV_RE, ECHO_ENV_RE, EXPORT_RE, PS_ENV_VAR_RE, PS_CHILDITEM_ENV_RE, DOTNET_GETENV_RE, CMD_ECHO_ENV_RE, ENV_FILE_PATH_RE, ENV_CMD_RE, PS_ELEVATION_RE, RUNAS_RE, CURL_PIPE_SH_RE, SEGMENT_SEPARATORS, COMMAND_PREFIX_TOKENS, SELF_BINARY_TOKEN_RE, CONFIG_SUBCOMMAND_RE, PAUSE_FLAG_RE, ENV_ASSIGNMENT_RE, RUNNER_OPERAND_RE, PS_WEB_PIPE_RE, SHORT_FLAG_BUNDLE_RE, SAFE_FORCE_PREFIXES, SECRET_FILE_RE, SECRET_FILE_ID_RSA_RE, SECRET_FILE_CREDENTIALS_RE, GIT_COMMIT_MERGE_RE, FAILPROOFAI_CLI_RE, FAILPROOFAI_UNINSTALL_RE, GIT_AMEND_RE, GIT_STASH_DROP_RE, GIT_ADD_ALL_RE, NPM_GLOBAL_RE, YARN_GLOBAL_RE, PNPM_GLOBAL_RE, BUN_GLOBAL_RE, CARGO_INSTALL_RE, PIP_SYSTEM_RE, PKG_MANAGER_DETECTORS, NOHUP_RE, SCREEN_DETACH_RE, TMUX_DETACH_RE, DISOWN_RE, BACKGROUND_AMPERSAND_RE, KUBECTL_RE, TERRAFORM_RE, AWS_CLI_RE, GCLOUD_RE, AZ_CLI_RE, HELM_RE, GH_PIPELINE_RE, gitBranchCache, GIT_BRANCH_CACHE_MAX_ENTRIES = 500, EVAL_FLAG_RE, HOME_PREFIX_RE, RM_CMD_RE, FIND_CMD_RE, FIND_EXEC_RE, FIND_GLOBAL_OPT_RE, FIND_EXPR_START_RE, SCRATCH_ROOTS, CATASTROPHIC_DEPTH = 2, READ_LIKE_CMDS, TOOL_CALL_TRACKER_MAX_BYTES = 65536, SEGMENT_SPLIT_RE, BUILTIN_POLICIES;
+var isClaudeInternalPath, isClaudeSettingsFile, SHELL_OPERATORS, SHELL_METACHAR_RE, JWT_RE, API_KEY_PATTERNS, CONNECTION_STRING_RE, PRIVATE_KEY_RE, BEARER_TOKEN_RE, SECRET_PATTERNS, SQL_TOOL_RE, DESTRUCTIVE_SQL_RE, DELETE_NO_WHERE_RE, SQL_WHERE_RE, SCHEMA_ALTER_RE, PUBLISH_CMD_RE, ENV_PRINTENV_RE, ECHO_ENV_RE, EXPORT_RE, PS_ENV_VAR_RE, PS_CHILDITEM_ENV_RE, DOTNET_GETENV_RE, CMD_ECHO_ENV_RE, ENV_FILE_PATH_RE, ENV_CMD_RE, PS_ELEVATION_RE, RUNAS_RE, CURL_PIPE_SH_RE, SEGMENT_SEPARATORS, COMMAND_PREFIX_TOKENS, SELF_BINARY_TOKEN_RE, CONFIG_SUBCOMMAND_RE, PAUSE_FLAG_RE, ENV_ASSIGNMENT_RE, RUNNER_OPERAND_RE, PS_WEB_PIPE_RE, SHORT_FLAG_BUNDLE_RE, SAFE_FORCE_PREFIXES, SECRET_FILE_RE, SECRET_FILE_ID_RSA_RE, SECRET_FILE_CREDENTIALS_RE, GIT_COMMIT_MERGE_RE, FAILPROOFAI_CLI_RE, FAILPROOFAI_UNINSTALL_RE, GIT_AMEND_RE, GIT_STASH_DROP_RE, GIT_ADD_ALL_RE, NPM_GLOBAL_RE, YARN_GLOBAL_RE, PNPM_GLOBAL_RE, BUN_GLOBAL_RE, CARGO_INSTALL_RE, PIP_SYSTEM_RE, PKG_MANAGER_DETECTORS, NOHUP_RE, SCREEN_DETACH_RE, TMUX_DETACH_RE, DISOWN_RE, BACKGROUND_AMPERSAND_RE, KUBECTL_RE, TERRAFORM_RE, AWS_CLI_RE, GCLOUD_RE, AZ_CLI_RE, HELM_RE, GH_PIPELINE_RE, gitBranchCache, GIT_BRANCH_CACHE_MAX_ENTRIES = 500, EVAL_FLAG_RE, HOME_PREFIX_RE, RM_CMD_RE, FIND_CMD_RE, FIND_EXEC_RE, FIND_GLOBAL_OPT_RE, FIND_EXPR_START_RE, SCRATCH_ROOTS, CATASTROPHIC_DEPTH = 2, READ_LIKE_CMDS, TOOL_CALL_TRACKER_MAX_BYTES = 65536, SEGMENT_SPLIT_RE, BUILTIN_POLICIES;
 var init_builtin_policies = __esm(() => {
   init_hook_logger();
   isClaudeInternalPath = isAgentInternalPath;
@@ -1853,6 +1857,13 @@ var init_builtin_policies = __esm(() => {
   CONNECTION_STRING_RE = /(?:postgresql|postgres|mysql|mongodb(?:\+srv)?|redis|amqps?|smtps?):\/\/[^@\s]+@/;
   PRIVATE_KEY_RE = /-----BEGIN (?:[A-Z]+ )?PRIVATE KEY-----/;
   BEARER_TOKEN_RE = /Authorization:\s*Bearer\s+[A-Za-z0-9\-._~+/]{20,}/i;
+  SECRET_PATTERNS = [
+    [PRIVATE_KEY_RE, "private key"],
+    [JWT_RE, "JWT"],
+    [BEARER_TOKEN_RE, "bearer token"],
+    [CONNECTION_STRING_RE, "database credentials"],
+    ...API_KEY_PATTERNS
+  ];
   SQL_TOOL_RE = /\b(?:psql|mysql|sqlite3|pgcli|clickhouse-client)\b/;
   DESTRUCTIVE_SQL_RE = /\b(?:DROP\s+(?:TABLE|DATABASE|SCHEMA)|TRUNCATE\b)/i;
   DELETE_NO_WHERE_RE = /\bDELETE\s+FROM\b/i;
@@ -2511,7 +2522,7 @@ var init_builtin_policies = __esm(() => {
 });
 
 // package.json
-var version = "1.0.0";
+var version = "1.0.1-beta.0";
 var init_package = () => {};
 
 // src/posthog-key.ts
@@ -2527,10 +2538,17 @@ function detectLayout() {
     return raw.layout > LAYOUT_VERSION ? { kind: "future", found: raw.layout } : { kind: "stale", found: raw.layout };
   }
   if (existsSync3(configFile())) {
+    const layoutThreePositions = [
+      legacy.authJson(),
+      legacy.nextAudit(),
+      legacy.auditSchedule()
+    ];
+    if (layoutThreePositions.some((p) => existsSync3(p)))
+      return { kind: "stale", found: 3 };
     return { kind: "current", version: { layout: LAYOUT_VERSION, cli: "" }, inferred: true };
   }
   if (existsSync3(legacy.configToml()))
-    return { kind: "stale", found: LAYOUT_VERSION - 1 };
+    return { kind: "stale", found: 2 };
   const layoutOneMarkers = [
     legacy.policyConfig(),
     legacy.cacheDir(),
@@ -2622,7 +2640,11 @@ function projectConfig(parsed) {
         sources: readSources(collector.sources)
       },
       telemetry: { enabled: telemetry.enabled !== false },
-      audit: { auto: audit.auto === true, intervalDays: readIntervalDays(audit.interval_days) }
+      audit: {
+        auto: audit.auto === true,
+        intervalDays: readIntervalDays(audit.interval_days),
+        reportsConsentedAt: typeof audit.reports_consented_at === "number" && Number.isFinite(audit.reports_consented_at) ? audit.reports_consented_at : undefined
+      }
     };
   }
 }

package/lib/auth/api-server-client.ts

@@ -107,7 +107,7 @@ async function parseError(res: Response): Promise<AuthApiError> {
   return new AuthApiError(res.status, code, message, retryAfterSecs);
 }
 
-/** Hard cap on every auth/reminder HTTP call. Without this, a wedged DNS
+/** Hard cap on every auth/report HTTP call. Without this, a wedged DNS
  *  resolver or a hung server keeps the CLI / dashboard route stuck forever. */
 const REQUEST_TIMEOUT_MS = 10_000;
 
@@ -210,34 +210,6 @@ export async function fetchMe(accessToken: string): Promise<MeResponse> {
   return getJson<MeResponse>("/v0/auth/me", accessToken);
 }
 
-export interface ServerReminder {
-  user_id: string;
-  email: string;
-  fire_at: number; // unix seconds
-  set_at: number;  // unix seconds
-}
-
-export async function scheduleReminder(
-  accessToken: string,
-  body: { in_days?: number; at?: number },
-): Promise<ServerReminder> {
-  const res = await postJson<{ reminder: ServerReminder }>(
-    "/v0/reminders",
-    body,
-    { accessToken },
-  );
-  return res.reminder;
-}
-
-export async function cancelReminder(accessToken: string): Promise<void> {
-  const res = await fetchWithTimeout(`${getApiBase()}/v0/reminders`, {
-    method: "DELETE",
-    headers: { authorization: `Bearer ${accessToken}` },
-  });
-  if (res.status === 204 || res.ok) return;
-  throw await parseError(res);
-}
-
 export interface InviteSendResult {
   /** Recipients that were dispatched successfully. */
   sent: string[];
@@ -266,6 +238,56 @@ export async function sendInvites(
   );
 }
 
+export interface AuditReportBody {
+  machine_id: string;
+  label?: string;
+  platform?: string;
+  window_from?: string;
+  window_to: string;
+  harmful: {
+    policy: string;
+    category: string;
+    title: string;
+    hits: number;
+    first_seen?: string;
+    last_seen?: string;
+    examples: string[];
+  }[];
+}
+
+export interface AuditReportResult {
+  report_id: string;
+  /** Whether this report produced an email. */
+  emailed: boolean;
+  /** `below_threshold`, `cooldown`, `send_failed`, or null when mail went out. */
+  reason: string | null;
+  /**
+   * Where the next window starts, per the SERVER.
+   *
+   * Persisted verbatim rather than computed locally. The server anchors it on
+   * the last DELIVERED digest, so a report held by the cooldown — or one whose
+   * send failed — correctly leaves the watermark where it was, and its findings
+   * turn up in the next digest instead of falling into a gap. A machine that
+   * lost `machine.json` also resyncs here rather than re-reporting from the
+   * beginning of time.
+   */
+  next_window_from: string;
+}
+
+/**
+ * Submit one scheduled scan's harmful findings.
+ *
+ * Called only by the audit child, and only on `--scheduled`. The destination
+ * address is never sent: the api-server takes it from the access-token claims,
+ * so a report cannot name where its digest goes.
+ */
+export async function submitAuditReport(
+  accessToken: string,
+  body: AuditReportBody,
+): Promise<AuditReportResult> {
+  return postJson<AuditReportResult>("/v0/audit-reports", body, { accessToken });
+}
+
 interface JwtClaims {
   sub: string;
   email: string;

package/lib/auth/auth-store.ts

@@ -1,16 +1,17 @@
 /**
- * Persistence layer for the FailproofAI auth.json file.
+ * Persistence layer for the signed-in session.
  *
- * Tokens live at ~/.failproofai/auth.json with mode 0600. The dashboard's
- * Next.js API routes read and write through here, so a session survives across
- * dashboard runs.
+ * Tokens live at `~/.failproofai/audit/session.json` with mode 0600 (layout 4;
+ * `auth.json` at the home root before that). The dashboard's Next.js API routes
+ * and the audit child both read and write through here, so a session survives
+ * across dashboard runs and is the same one a scheduled report uses.
  */
 
-import { existsSync, readFileSync, rmSync } from "node:fs";
-import { join } from "node:path";
+import { existsSync, readFileSync, readdirSync, rmSync } from "node:fs";
+import { join, resolve } from "node:path";
 
 import { writeJsonAtomically } from "../atomic-write";
-import { failproofaiHome } from "../../src/hooks/fp-home";
+import { auditDir, auditSessionFile, migrationsDir } from "../../src/hooks/fp-home";
 import {
   AuthApiError,
   decodeJwt,
@@ -27,62 +28,24 @@ export interface StoredAuth {
   user: { id: string; email: string };
 }
 
+/**
+ * Where the session file lives.
+ *
+ * `FAILPROOFAI_AUTH_DIR` overrides it OUTRIGHT — the override names the
+ * directory the two files sit in directly, with no `audit/` beneath it, which is
+ * the contract it has always had and what every test using it expects. Without
+ * the override the paths come from `fp-home.ts`, which as of layout 4 puts them
+ * under `audit/` with the rest of what the audit owns.
+ */
 export function getAuthDir(): string {
   const override = process.env.FAILPROOFAI_AUTH_DIR;
   if (override) return override;
-  return failproofaiHome();
+  return auditDir();
 }
 
 export function getAuthFilePath(): string {
-  return join(getAuthDir(), "auth.json");
-}
-
-/** Location of the persisted re-audit reminder (separate from auth.json so
- *  the reminder survives unrelated session refreshes). */
-export function getReminderFilePath(): string {
-  return join(getAuthDir(), "next-audit.json");
-}
-
-export interface StoredReminder {
-  /** Unix seconds. */
-  next_audit_at: number;
-  /** Email the reminder was set for. Used to invalidate the reminder if the
-   *  active session belongs to a different user. */
-  user_email: string;
-  /** Unix seconds. */
-  set_at: number;
-}
-
-export function readReminder(): StoredReminder | null {
-  const p = getReminderFilePath();
-  if (!existsSync(p)) return null;
-  try {
-    const raw = readFileSync(p, "utf-8");
-    const parsed = JSON.parse(raw) as Partial<StoredReminder>;
-    if (
-      typeof parsed.next_audit_at !== "number" ||
-      typeof parsed.user_email !== "string" ||
-      typeof parsed.set_at !== "number"
-    ) {
-      return null;
-    }
-    return {
-      next_audit_at: parsed.next_audit_at,
-      user_email: parsed.user_email,
-      set_at: parsed.set_at,
-    };
-  } catch {
-    return null;
-  }
-}
-
-export function writeReminder(reminder: StoredReminder): void {
-  writeJsonAtomically(getReminderFilePath(), reminder);
-}
-
-export function deleteReminder(): void {
-  const p = getReminderFilePath();
-  if (existsSync(p)) rmSync(p, { force: true });
+  const override = process.env.FAILPROOFAI_AUTH_DIR;
+  return override ? join(override, "session.json") : auditSessionFile();
 }
 
 export function readAuth(): StoredAuth | null {
@@ -127,6 +90,28 @@ export function writeAuth(auth: StoredAuth): void {
 export function deleteAuth(): void {
   const p = getAuthFilePath();
   if (existsSync(p)) rmSync(p, { force: true });
+
+  // Also any copy a migration took and could not clean up.
+  //
+  // The layout-4 step backs `auth.json` up before moving it, and a chain that
+  // FAILED deliberately keeps that copy — it is the only insurance against a
+  // half-moved credential. But "sign me out" has to mean the token is off this
+  // machine, and `migrationsDir` is classed `identity`, so nothing else will
+  // ever remove it: without this sweep a dashboard sign-out, a 401 auto-delete
+  // and `failproofai reset` all left a live bearer and refresh token on disk,
+  // to be carried into every dotfile backup and container image after it.
+  try {
+    const root = migrationsDir();
+    if (!existsSync(root)) return;
+    for (const entry of readdirSync(root)) {
+      if (!entry.startsWith("backup-layout")) continue;
+      const copy = resolve(root, entry, "auth.json");
+      if (existsSync(copy)) rmSync(copy, { force: true });
+    }
+  } catch {
+    // Sign-out must succeed even if the sweep cannot. The live token — the one
+    // that actually authenticates a request — is already gone above.
+  }
 }
 
 /** Convert verify/refresh response into the on-disk shape. */
@@ -161,8 +146,8 @@ const REFRESH_LEEWAY_SECS = 60;
 
 /**
  * In-flight refresh dedup. Without this, two concurrent callers (e.g.
- * the dashboard's `/api/auth/status` poll and a `/api/auth/reminder`
- * POST in flight) both observe the same expired access token, both call
+ * the dashboard's `/api/auth/status` poll and a scheduled audit's report
+ * in flight) both observe the same expired access token, both call
  * `refreshAccessToken(auth.refresh_token)` with the same refresh token,
  * and the api-server treats the second call as token-replay and revokes
  * every session for that user — a silent logout. Keying on the refresh

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "1.0.0",
+  "version": "1.0.1-beta.0",
   "description": "The easiest way to manage policies that keep your AI agents reliable, on-task, and running autonomously — for Claude Code & the Agents SDK",
   "bin": {
     "failproofai": "./dist/cli.mjs",
@@ -40,7 +40,8 @@
     "translate:docs": "bun scripts/translate-docs/cli.ts --docs-only",
     "translate:dry-run": "bun scripts/translate-docs/cli.ts --dry-run",
     "translate:validate": "bun scripts/translate-docs/cli.ts --validate",
-    "validate:mdx": "bun scripts/validate-mdx.ts"
+    "validate:mdx": "bun scripts/validate-mdx.ts",
+    "docs:audit": "bun scripts/docs-audit.ts"
   },
   "keywords": [
     "claude",
@@ -104,6 +105,7 @@
     "yaml": "^2.9.0"
   },
   "overrides": {
+    "nanoid": "3.3.18",
     "postcss": "8.5.26",
     "eslint-plugin-react-hooks": "7.0.1",
     "vite": "8.0.16",
@@ -112,15 +114,15 @@
     "sharp": "0.35.0"
   },
   "optionalDependencies": {
-    "@failproofai/failproofaid-linux-x64": "1.0.0",
-    "@failproofai/failproofaid-linux-arm64": "1.0.0",
-    "@failproofai/failproofaid-darwin-x64": "1.0.0",
-    "@failproofai/failproofaid-darwin-arm64": "1.0.0"
+    "@failproofai/failproofaid-linux-x64": "1.0.1-beta.0",
+    "@failproofai/failproofaid-linux-arm64": "1.0.1-beta.0",
+    "@failproofai/failproofaid-darwin-x64": "1.0.1-beta.0",
+    "@failproofai/failproofaid-darwin-arm64": "1.0.1-beta.0"
   },
   "failproofaidBinaries": {
-    "linux-x64": "67d9404812145b8b13dc97debd33cd667a5de347989b2c9c47bbdfcb5e99344c",
-    "linux-arm64": "ca003a2ca755f5d696e2d6f4ddd8eedc0f8c4914f972101aa9803986ec409000",
-    "darwin-x64": "53f1ed8710da69c2e3d3668d3b62380383a46328471870093936f53fc0a4fb05",
-    "darwin-arm64": "682c22084906877760285e925b232d3563a1874a7a1f42c4c27deb1b7b74fb6f"
+    "linux-x64": "8259a934de6ae1302e49a7e7d81e7caac533fa8437167fddc2a9b36d05745ce2",
+    "linux-arm64": "c9a4e90c94c23c78973ddb26740f39ab4d3368da5567cebe475e805049c158e9",
+    "darwin-x64": "cf0c70a0dab9f737a9ffde27b3ab3fb18ef159b851656ef778ed193a0a72a476",
+    "darwin-arm64": "f4d4e300339acc7557251a96500c24e8d675f934febc9d587560cf0544d3eef1"
   }
 }