failproofai 1.0.0 → 1.0.1-beta.1

package/dist/worker.mjs

@@ -370,7 +370,7 @@ function failproofaiHome(home) {
     return resolve(home, ".failproofai");
   return process.env.FAILPROOFAI_HOME || resolve(homedir(), ".failproofai");
 }
-var LAYOUT_VERSION = 3, at = (...parts) => resolve(failproofaiHome(), ...parts), atHome = (home, ...parts) => home ? resolve(failproofaiHome(home), ...parts) : at(...parts), versionFile = (home) => atHome(home, "VERSION"), configFile = (home) => atHome(home, "config.json"), policiesDir = (home) => atHome(home, "policies"), customPoliciesDir, globalPolicyConfigFile = (home) => atHome(home, "policies-config.json"), cloudPoliciesDir = (home) => resolve(policiesDir(home), "cloud-policies"), hookActivityDir = (home) => atHome(home, "hook-activity"), stateDir = (home) => atHome(home, "state"), shimsDir = (home) => resolve(stateDir(home), "shims"), sessionPauseDir = () => resolve(stateDir(), "sessions"), telemetryIdFile = (home) => resolve(stateDir(home), "telemetry-id"), codexSessionPathsFile = (home) => resolve(stateDir(home), "codex-session-paths.json"), logsDir = (home) => atHome(home, "logs"), legacy;
+var LAYOUT_VERSION = 4, at = (...parts) => resolve(failproofaiHome(), ...parts), atHome = (home, ...parts) => home ? resolve(failproofaiHome(home), ...parts) : at(...parts), versionFile = (home) => atHome(home, "VERSION"), configFile = (home) => atHome(home, "config.json"), policiesDir = (home) => atHome(home, "policies"), customPoliciesDir, globalPolicyConfigFile = (home) => atHome(home, "policies-config.json"), cloudPoliciesDir = (home) => resolve(policiesDir(home), "cloud-policies"), hookActivityDir = (home) => atHome(home, "hook-activity"), stateDir = (home) => atHome(home, "state"), shimsDir = (home) => resolve(stateDir(home), "shims"), sessionPauseDir = () => resolve(stateDir(), "sessions"), telemetryIdFile = (home) => resolve(stateDir(home), "telemetry-id"), codexSessionPathsFile = (home) => resolve(stateDir(home), "codex-session-paths.json"), logsDir = (home) => atHome(home, "logs"), legacy;
 var init_fp_home = __esm(() => {
   customPoliciesDir = policiesDir;
   legacy = {
@@ -386,6 +386,10 @@ var init_fp_home = __esm(() => {
     launcherMarker: () => at(".launcher-configured"),
     lastVersion: () => at("last-version"),
     auditDashboard: () => at("audit-dashboard.json"),
+    authJson: () => at("auth.json"),
+    nextAudit: () => at("next-audit.json"),
+    auditReminder: () => at("audit", "reminder.json"),
+    auditSchedule: () => at("state", "audit-schedule.json"),
     cacheDir: () => at("cache"),
     hookActivityDir: () => at("cache", "hook-activity"),
     auditCacheDir: () => at("cache", "audit"),
@@ -1831,7 +1835,7 @@ function registerBuiltinPolicies(enabledNames) {
     }
   }
 }
-var isClaudeInternalPath, isClaudeSettingsFile, SHELL_OPERATORS, SHELL_METACHAR_RE, JWT_RE, API_KEY_PATTERNS, CONNECTION_STRING_RE, PRIVATE_KEY_RE, BEARER_TOKEN_RE, SQL_TOOL_RE, DESTRUCTIVE_SQL_RE, DELETE_NO_WHERE_RE, SQL_WHERE_RE, SCHEMA_ALTER_RE, PUBLISH_CMD_RE, ENV_PRINTENV_RE, ECHO_ENV_RE, EXPORT_RE, PS_ENV_VAR_RE, PS_CHILDITEM_ENV_RE, DOTNET_GETENV_RE, CMD_ECHO_ENV_RE, ENV_FILE_PATH_RE, ENV_CMD_RE, PS_ELEVATION_RE, RUNAS_RE, CURL_PIPE_SH_RE, SEGMENT_SEPARATORS, COMMAND_PREFIX_TOKENS, SELF_BINARY_TOKEN_RE, CONFIG_SUBCOMMAND_RE, PAUSE_FLAG_RE, ENV_ASSIGNMENT_RE, RUNNER_OPERAND_RE, PS_WEB_PIPE_RE, SHORT_FLAG_BUNDLE_RE, SAFE_FORCE_PREFIXES, SECRET_FILE_RE, SECRET_FILE_ID_RSA_RE, SECRET_FILE_CREDENTIALS_RE, GIT_COMMIT_MERGE_RE, FAILPROOFAI_CLI_RE, FAILPROOFAI_UNINSTALL_RE, GIT_AMEND_RE, GIT_STASH_DROP_RE, GIT_ADD_ALL_RE, NPM_GLOBAL_RE, YARN_GLOBAL_RE, PNPM_GLOBAL_RE, BUN_GLOBAL_RE, CARGO_INSTALL_RE, PIP_SYSTEM_RE, PKG_MANAGER_DETECTORS, NOHUP_RE, SCREEN_DETACH_RE, TMUX_DETACH_RE, DISOWN_RE, BACKGROUND_AMPERSAND_RE, KUBECTL_RE, TERRAFORM_RE, AWS_CLI_RE, GCLOUD_RE, AZ_CLI_RE, HELM_RE, GH_PIPELINE_RE, gitBranchCache, GIT_BRANCH_CACHE_MAX_ENTRIES = 500, EVAL_FLAG_RE, HOME_PREFIX_RE, RM_CMD_RE, FIND_CMD_RE, FIND_EXEC_RE, FIND_GLOBAL_OPT_RE, FIND_EXPR_START_RE, SCRATCH_ROOTS, CATASTROPHIC_DEPTH = 2, READ_LIKE_CMDS, TOOL_CALL_TRACKER_MAX_BYTES = 65536, SEGMENT_SPLIT_RE, BUILTIN_POLICIES;
+var isClaudeInternalPath, isClaudeSettingsFile, SHELL_OPERATORS, SHELL_METACHAR_RE, JWT_RE, API_KEY_PATTERNS, CONNECTION_STRING_RE, PRIVATE_KEY_RE, BEARER_TOKEN_RE, SECRET_PATTERNS, SQL_TOOL_RE, DESTRUCTIVE_SQL_RE, DELETE_NO_WHERE_RE, SQL_WHERE_RE, SCHEMA_ALTER_RE, PUBLISH_CMD_RE, ENV_PRINTENV_RE, ECHO_ENV_RE, EXPORT_RE, PS_ENV_VAR_RE, PS_CHILDITEM_ENV_RE, DOTNET_GETENV_RE, CMD_ECHO_ENV_RE, ENV_FILE_PATH_RE, ENV_CMD_RE, PS_ELEVATION_RE, RUNAS_RE, CURL_PIPE_SH_RE, SEGMENT_SEPARATORS, COMMAND_PREFIX_TOKENS, SELF_BINARY_TOKEN_RE, CONFIG_SUBCOMMAND_RE, PAUSE_FLAG_RE, ENV_ASSIGNMENT_RE, RUNNER_OPERAND_RE, PS_WEB_PIPE_RE, SHORT_FLAG_BUNDLE_RE, SAFE_FORCE_PREFIXES, SECRET_FILE_RE, SECRET_FILE_ID_RSA_RE, SECRET_FILE_CREDENTIALS_RE, GIT_COMMIT_MERGE_RE, FAILPROOFAI_CLI_RE, FAILPROOFAI_UNINSTALL_RE, GIT_AMEND_RE, GIT_STASH_DROP_RE, GIT_ADD_ALL_RE, NPM_GLOBAL_RE, YARN_GLOBAL_RE, PNPM_GLOBAL_RE, BUN_GLOBAL_RE, CARGO_INSTALL_RE, PIP_SYSTEM_RE, PKG_MANAGER_DETECTORS, NOHUP_RE, SCREEN_DETACH_RE, TMUX_DETACH_RE, DISOWN_RE, BACKGROUND_AMPERSAND_RE, KUBECTL_RE, TERRAFORM_RE, AWS_CLI_RE, GCLOUD_RE, AZ_CLI_RE, HELM_RE, GH_PIPELINE_RE, gitBranchCache, GIT_BRANCH_CACHE_MAX_ENTRIES = 500, EVAL_FLAG_RE, HOME_PREFIX_RE, RM_CMD_RE, FIND_CMD_RE, FIND_EXEC_RE, FIND_GLOBAL_OPT_RE, FIND_EXPR_START_RE, SCRATCH_ROOTS, CATASTROPHIC_DEPTH = 2, READ_LIKE_CMDS, TOOL_CALL_TRACKER_MAX_BYTES = 65536, SEGMENT_SPLIT_RE, BUILTIN_POLICIES;
 var init_builtin_policies = __esm(() => {
   init_hook_logger();
   isClaudeInternalPath = isAgentInternalPath;
@@ -1853,6 +1857,13 @@ var init_builtin_policies = __esm(() => {
   CONNECTION_STRING_RE = /(?:postgresql|postgres|mysql|mongodb(?:\+srv)?|redis|amqps?|smtps?):\/\/[^@\s]+@/;
   PRIVATE_KEY_RE = /-----BEGIN (?:[A-Z]+ )?PRIVATE KEY-----/;
   BEARER_TOKEN_RE = /Authorization:\s*Bearer\s+[A-Za-z0-9\-._~+/]{20,}/i;
+  SECRET_PATTERNS = [
+    [PRIVATE_KEY_RE, "private key"],
+    [JWT_RE, "JWT"],
+    [BEARER_TOKEN_RE, "bearer token"],
+    [CONNECTION_STRING_RE, "database credentials"],
+    ...API_KEY_PATTERNS
+  ];
   SQL_TOOL_RE = /\b(?:psql|mysql|sqlite3|pgcli|clickhouse-client)\b/;
   DESTRUCTIVE_SQL_RE = /\b(?:DROP\s+(?:TABLE|DATABASE|SCHEMA)|TRUNCATE\b)/i;
   DELETE_NO_WHERE_RE = /\bDELETE\s+FROM\b/i;
@@ -2511,7 +2522,7 @@ var init_builtin_policies = __esm(() => {
 });
 
 // package.json
-var version = "1.0.0";
+var version = "1.0.1-beta.1";
 var init_package = () => {};
 
 // src/posthog-key.ts
@@ -2527,10 +2538,17 @@ function detectLayout() {
     return raw.layout > LAYOUT_VERSION ? { kind: "future", found: raw.layout } : { kind: "stale", found: raw.layout };
   }
   if (existsSync3(configFile())) {
+    const layoutThreePositions = [
+      legacy.authJson(),
+      legacy.nextAudit(),
+      legacy.auditSchedule()
+    ];
+    if (layoutThreePositions.some((p) => existsSync3(p)))
+      return { kind: "stale", found: 3 };
     return { kind: "current", version: { layout: LAYOUT_VERSION, cli: "" }, inferred: true };
   }
   if (existsSync3(legacy.configToml()))
-    return { kind: "stale", found: LAYOUT_VERSION - 1 };
+    return { kind: "stale", found: 2 };
   const layoutOneMarkers = [
     legacy.policyConfig(),
     legacy.cacheDir(),
@@ -2622,7 +2640,11 @@ function projectConfig(parsed) {
         sources: readSources(collector.sources)
       },
       telemetry: { enabled: telemetry.enabled !== false },
-      audit: { auto: audit.auto === true, intervalDays: readIntervalDays(audit.interval_days) }
+      audit: {
+        auto: audit.auto === true,
+        intervalDays: readIntervalDays(audit.interval_days),
+        reportsConsentedAt: typeof audit.reports_consented_at === "number" && Number.isFinite(audit.reports_consented_at) ? audit.reports_consented_at : undefined
+      }
     };
   }
 }

package/lib/auth/api-server-client.ts

@@ -107,7 +107,7 @@ async function parseError(res: Response): Promise<AuthApiError> {
   return new AuthApiError(res.status, code, message, retryAfterSecs);
 }
 
-/** Hard cap on every auth/reminder HTTP call. Without this, a wedged DNS
+/** Hard cap on every auth/report HTTP call. Without this, a wedged DNS
  *  resolver or a hung server keeps the CLI / dashboard route stuck forever. */
 const REQUEST_TIMEOUT_MS = 10_000;
 
@@ -210,34 +210,6 @@ export async function fetchMe(accessToken: string): Promise<MeResponse> {
   return getJson<MeResponse>("/v0/auth/me", accessToken);
 }
 
-export interface ServerReminder {
-  user_id: string;
-  email: string;
-  fire_at: number; // unix seconds
-  set_at: number;  // unix seconds
-}
-
-export async function scheduleReminder(
-  accessToken: string,
-  body: { in_days?: number; at?: number },
-): Promise<ServerReminder> {
-  const res = await postJson<{ reminder: ServerReminder }>(
-    "/v0/reminders",
-    body,
-    { accessToken },
-  );
-  return res.reminder;
-}
-
-export async function cancelReminder(accessToken: string): Promise<void> {
-  const res = await fetchWithTimeout(`${getApiBase()}/v0/reminders`, {
-    method: "DELETE",
-    headers: { authorization: `Bearer ${accessToken}` },
-  });
-  if (res.status === 204 || res.ok) return;
-  throw await parseError(res);
-}
-
 export interface InviteSendResult {
   /** Recipients that were dispatched successfully. */
   sent: string[];
@@ -266,6 +238,56 @@ export async function sendInvites(
   );
 }
 
+export interface AuditReportBody {
+  machine_id: string;
+  label?: string;
+  platform?: string;
+  window_from?: string;
+  window_to: string;
+  harmful: {
+    policy: string;
+    category: string;
+    title: string;
+    hits: number;
+    first_seen?: string;
+    last_seen?: string;
+    examples: string[];
+  }[];
+}
+
+export interface AuditReportResult {
+  report_id: string;
+  /** Whether this report produced an email. */
+  emailed: boolean;
+  /** `below_threshold`, `cooldown`, `send_failed`, or null when mail went out. */
+  reason: string | null;
+  /**
+   * Where the next window starts, per the SERVER.
+   *
+   * Persisted verbatim rather than computed locally. The server anchors it on
+   * the last DELIVERED digest, so a report held by the cooldown — or one whose
+   * send failed — correctly leaves the watermark where it was, and its findings
+   * turn up in the next digest instead of falling into a gap. A machine that
+   * lost `machine.json` also resyncs here rather than re-reporting from the
+   * beginning of time.
+   */
+  next_window_from: string;
+}
+
+/**
+ * Submit one scheduled scan's harmful findings.
+ *
+ * Called only by the audit child, and only on `--scheduled`. The destination
+ * address is never sent: the api-server takes it from the access-token claims,
+ * so a report cannot name where its digest goes.
+ */
+export async function submitAuditReport(
+  accessToken: string,
+  body: AuditReportBody,
+): Promise<AuditReportResult> {
+  return postJson<AuditReportResult>("/v0/audit-reports", body, { accessToken });
+}
+
 interface JwtClaims {
   sub: string;
   email: string;

package/lib/auth/auth-store.ts

@@ -1,16 +1,17 @@
 /**
- * Persistence layer for the FailproofAI auth.json file.
+ * Persistence layer for the signed-in session.
  *
- * Tokens live at ~/.failproofai/auth.json with mode 0600. The dashboard's
- * Next.js API routes read and write through here, so a session survives across
- * dashboard runs.
+ * Tokens live at `~/.failproofai/audit/session.json` with mode 0600 (layout 4;
+ * `auth.json` at the home root before that). The dashboard's Next.js API routes
+ * and the audit child both read and write through here, so a session survives
+ * across dashboard runs and is the same one a scheduled report uses.
  */
 
-import { existsSync, readFileSync, rmSync } from "node:fs";
-import { join } from "node:path";
+import { existsSync, readFileSync, readdirSync, rmSync } from "node:fs";
+import { join, resolve } from "node:path";
 
 import { writeJsonAtomically } from "../atomic-write";
-import { failproofaiHome } from "../../src/hooks/fp-home";
+import { auditDir, auditSessionFile, migrationsDir } from "../../src/hooks/fp-home";
 import {
   AuthApiError,
   decodeJwt,
@@ -27,62 +28,24 @@ export interface StoredAuth {
   user: { id: string; email: string };
 }
 
+/**
+ * Where the session file lives.
+ *
+ * `FAILPROOFAI_AUTH_DIR` overrides it OUTRIGHT — the override names the
+ * directory the two files sit in directly, with no `audit/` beneath it, which is
+ * the contract it has always had and what every test using it expects. Without
+ * the override the paths come from `fp-home.ts`, which as of layout 4 puts them
+ * under `audit/` with the rest of what the audit owns.
+ */
 export function getAuthDir(): string {
   const override = process.env.FAILPROOFAI_AUTH_DIR;
   if (override) return override;
-  return failproofaiHome();
+  return auditDir();
 }
 
 export function getAuthFilePath(): string {
-  return join(getAuthDir(), "auth.json");
-}
-
-/** Location of the persisted re-audit reminder (separate from auth.json so
- *  the reminder survives unrelated session refreshes). */
-export function getReminderFilePath(): string {
-  return join(getAuthDir(), "next-audit.json");
-}
-
-export interface StoredReminder {
-  /** Unix seconds. */
-  next_audit_at: number;
-  /** Email the reminder was set for. Used to invalidate the reminder if the
-   *  active session belongs to a different user. */
-  user_email: string;
-  /** Unix seconds. */
-  set_at: number;
-}
-
-export function readReminder(): StoredReminder | null {
-  const p = getReminderFilePath();
-  if (!existsSync(p)) return null;
-  try {
-    const raw = readFileSync(p, "utf-8");
-    const parsed = JSON.parse(raw) as Partial<StoredReminder>;
-    if (
-      typeof parsed.next_audit_at !== "number" ||
-      typeof parsed.user_email !== "string" ||
-      typeof parsed.set_at !== "number"
-    ) {
-      return null;
-    }
-    return {
-      next_audit_at: parsed.next_audit_at,
-      user_email: parsed.user_email,
-      set_at: parsed.set_at,
-    };
-  } catch {
-    return null;
-  }
-}
-
-export function writeReminder(reminder: StoredReminder): void {
-  writeJsonAtomically(getReminderFilePath(), reminder);
-}
-
-export function deleteReminder(): void {
-  const p = getReminderFilePath();
-  if (existsSync(p)) rmSync(p, { force: true });
+  const override = process.env.FAILPROOFAI_AUTH_DIR;
+  return override ? join(override, "session.json") : auditSessionFile();
 }
 
 export function readAuth(): StoredAuth | null {
@@ -127,6 +90,28 @@ export function writeAuth(auth: StoredAuth): void {
 export function deleteAuth(): void {
   const p = getAuthFilePath();
   if (existsSync(p)) rmSync(p, { force: true });
+
+  // Also any copy a migration took and could not clean up.
+  //
+  // The layout-4 step backs `auth.json` up before moving it, and a chain that
+  // FAILED deliberately keeps that copy — it is the only insurance against a
+  // half-moved credential. But "sign me out" has to mean the token is off this
+  // machine, and `migrationsDir` is classed `identity`, so nothing else will
+  // ever remove it: without this sweep a dashboard sign-out, a 401 auto-delete
+  // and `failproofai reset` all left a live bearer and refresh token on disk,
+  // to be carried into every dotfile backup and container image after it.
+  try {
+    const root = migrationsDir();
+    if (!existsSync(root)) return;
+    for (const entry of readdirSync(root)) {
+      if (!entry.startsWith("backup-layout")) continue;
+      const copy = resolve(root, entry, "auth.json");
+      if (existsSync(copy)) rmSync(copy, { force: true });
+    }
+  } catch {
+    // Sign-out must succeed even if the sweep cannot. The live token — the one
+    // that actually authenticates a request — is already gone above.
+  }
 }
 
 /** Convert verify/refresh response into the on-disk shape. */
@@ -161,8 +146,8 @@ const REFRESH_LEEWAY_SECS = 60;
 
 /**
  * In-flight refresh dedup. Without this, two concurrent callers (e.g.
- * the dashboard's `/api/auth/status` poll and a `/api/auth/reminder`
- * POST in flight) both observe the same expired access token, both call
+ * the dashboard's `/api/auth/status` poll and a scheduled audit's report
+ * in flight) both observe the same expired access token, both call
  * `refreshAccessToken(auth.refresh_token)` with the same refresh token,
  * and the api-server treats the second call as token-replay and revokes
  * every session for that user — a silent logout. Keying on the refresh

package/lib/telemetry.ts

@@ -38,41 +38,6 @@ interface PostHogOptions {
   requestTimeout?: number;
   fetchRetryCount?: number;
   fetchRetryDelay?: number;
-  fetch?: (url: string, options: Record<string, unknown>) => Promise<Response>;
-}
-
-/**
- * Wraps native fetch with retry logic and silent failure for non-critical telemetry.
- * Prevents posthog-node's internal console.error from firing on network errors.
- */
-async function resilientFetch(
-  url: string,
-  options: Record<string, unknown>,
-): Promise<Response> {
-  const MAX_ATTEMPTS = 5;
-  const BASE_DELAY_MS = 1000;
-  const TIMEOUT_MS = 5000;
-
-  for (let attempt = 1; attempt <= MAX_ATTEMPTS; attempt++) {
-    try {
-      const { signal: _, ...rest } = options;
-      const res = await fetch(url, {
-        ...(rest as RequestInit),
-        signal: AbortSignal.timeout(TIMEOUT_MS),
-      });
-      if (res.ok) return res;
-      // Non-2xx (e.g. 502) — treat like a transient failure and retry
-    } catch {
-      // Network error (ETIMEDOUT, etc.) — retry
-    }
-    if (attempt < MAX_ATTEMPTS) {
-      const delay = Math.min(BASE_DELAY_MS * 2 ** (attempt - 1), 8000);
-      await new Promise((r) => setTimeout(r, delay));
-    }
-  }
-  // All attempts failed — return fake OK so PostHog doesn't log errors.
-  // This is anonymous telemetry; silently dropping events is acceptable.
-  return new Response("{}", { status: 200 });
 }
 
 /**
@@ -101,17 +66,57 @@ export async function initTelemetry(): Promise<void> {
       await import("posthog-node");
     const apiKey = process.env.FAILPROOFAI_POSTHOG_KEY ?? DEFAULT_API_KEY;
     const host = process.env.FAILPROOFAI_POSTHOG_HOST ?? DEFAULT_HOST;
+    // Delivery-critical options. Every one of these was previously set to a
+    // value that lost events; see __tests__/lib/telemetry-delivery.test.ts,
+    // which pins the contract against the REAL library rather than a mock.
+    //
+    // No custom `fetch`. There used to be a `resilientFetch` wrapper here that
+    // retried five times over ~40s and then returned a synthetic 200 so
+    // posthog-node would never log a network error. It could not work: the
+    // library does not merely hand its abort signal to an injected fetch, it
+    // *races* that fetch against its own `requestTimeout` deadline
+    // (`Promise.race([fetchPromise, deadline])`) precisely because an injected
+    // fetch may ignore the signal — which ours did, by stripping it. With a
+    // ~40s budget racing a 5s deadline the wrapper could never return in time,
+    // so the synthetic 200 was unreachable, the `console.error` it existed to
+    // prevent fired anyway, and its retries ran on detached from the client that
+    // had already given up. Plain global fetch is what the library expects.
+    //
+    // `fetchRetryCount` was 0, which disabled retries entirely and left the
+    // wrapper above as the only thing retrying — the wrong layer. The library
+    // retries inside a single flush, knows which errors are retryable, and
+    // keeps its queue coherent while doing it.
+    //
+    // `flushInterval` was 0, which is falsy and therefore disables the flush
+    // timer completely. That is the one that actually stranded events: on a
+    // network error posthog-node deliberately does NOT dequeue the batch (it
+    // treats the failure as transient and keeps it for a later attempt), so
+    // with no timer armed those retained events had nothing scheduled to
+    // resend them and sat in memory until an unrelated later event happened to
+    // trigger a flush.
+    //
+    // `flushAt: 1` is deliberate and stays. Volume here is a handful of events
+    // per process, so batching buys nothing, and posthog-node's queue is
+    // memory-only (`PostHogMemoryStorage`) — anything still queued when the
+    // process dies is gone. Sending immediately is the best available defense.
     globalThis.__FAILPROOFAI_POSTHOG__ = new mod.PostHog(apiKey, {
       host,
       flushAt: 1,
-      flushInterval: 0,
-      requestTimeout: 5000,
-      fetchRetryCount: 0,
-      fetch: resilientFetch,
+      flushInterval: 10_000,
+      requestTimeout: 10_000,
+      fetchRetryCount: 3,
+      fetchRetryDelay: 3_000,
     });
 
-    // Flush pending events when the process exits
+    // Flush pending events when the process exits. This drain is the last line
+    // of defense for the memory-only queue, so it must not fight itself:
+    // `beforeExit` re-fires every time a handler schedules more async work, and
+    // an unguarded handler starts a fresh `shutdown()` — each with its own 30s
+    // budget — on every one of those passes.
+    let draining = false;
     const onExit = () => {
+      if (draining) return;
+      draining = true;
       globalThis.__FAILPROOFAI_POSTHOG__?.shutdown().catch(() => {});
     };
     process.on("beforeExit", onExit);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "1.0.0",
+  "version": "1.0.1-beta.1",
   "description": "The easiest way to manage policies that keep your AI agents reliable, on-task, and running autonomously — for Claude Code & the Agents SDK",
   "bin": {
     "failproofai": "./dist/cli.mjs",
@@ -40,7 +40,8 @@
     "translate:docs": "bun scripts/translate-docs/cli.ts --docs-only",
     "translate:dry-run": "bun scripts/translate-docs/cli.ts --dry-run",
     "translate:validate": "bun scripts/translate-docs/cli.ts --validate",
-    "validate:mdx": "bun scripts/validate-mdx.ts"
+    "validate:mdx": "bun scripts/validate-mdx.ts",
+    "docs:audit": "bun scripts/docs-audit.ts"
   },
   "keywords": [
     "claude",
@@ -104,6 +105,7 @@
     "yaml": "^2.9.0"
   },
   "overrides": {
+    "nanoid": "3.3.18",
     "postcss": "8.5.26",
     "eslint-plugin-react-hooks": "7.0.1",
     "vite": "8.0.16",
@@ -112,15 +114,15 @@
     "sharp": "0.35.0"
   },
   "optionalDependencies": {
-    "@failproofai/failproofaid-linux-x64": "1.0.0",
-    "@failproofai/failproofaid-linux-arm64": "1.0.0",
-    "@failproofai/failproofaid-darwin-x64": "1.0.0",
-    "@failproofai/failproofaid-darwin-arm64": "1.0.0"
+    "@failproofai/failproofaid-linux-x64": "1.0.1-beta.1",
+    "@failproofai/failproofaid-linux-arm64": "1.0.1-beta.1",
+    "@failproofai/failproofaid-darwin-x64": "1.0.1-beta.1",
+    "@failproofai/failproofaid-darwin-arm64": "1.0.1-beta.1"
   },
   "failproofaidBinaries": {
-    "linux-x64": "67d9404812145b8b13dc97debd33cd667a5de347989b2c9c47bbdfcb5e99344c",
-    "linux-arm64": "ca003a2ca755f5d696e2d6f4ddd8eedc0f8c4914f972101aa9803986ec409000",
-    "darwin-x64": "53f1ed8710da69c2e3d3668d3b62380383a46328471870093936f53fc0a4fb05",
-    "darwin-arm64": "682c22084906877760285e925b232d3563a1874a7a1f42c4c27deb1b7b74fb6f"
+    "linux-x64": "cf623441aa67363e423a1dba7db734d3e9243f0abff5e63a9ed7ddc096213e51",
+    "linux-arm64": "339281280ae8e60d03415da88a372ff4d3fb356c375f0e1f9eea17063233d52b",
+    "darwin-x64": "b972c37a9ca83b085d11d1312b3fa8487dead09dbc81e1e115000d2614051248",
+    "darwin-arm64": "597cbdae5f564fd0c7c917b2b0b94a91ba8465e568487da0d1cac0508b94cee5"
   }
 }