failproofai 1.0.10 → 1.0.11-beta.0

package/dist/worker.mjs

@@ -1165,7 +1165,7 @@ function instruct(reason) {
 }
 
 // package.json
-var version = "1.0.10";
+var version = "1.0.11-beta.0";
 var init_package = () => {};
 
 // src/hooks/policy-types.ts
@@ -4476,6 +4476,35 @@ function readSources(raw) {
   }
   return Object.keys(out).length > 0 ? out : undefined;
 }
+function readAgentSessions(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return;
+  const agents = Object.fromEntries(Object.entries(raw).flatMap(([agent, settings]) => {
+    if (!settings || typeof settings !== "object" || Array.isArray(settings))
+      return [];
+    const sessions = settings.sessions;
+    return typeof sessions === "boolean" ? [[agent, { sessions }]] : [];
+  }));
+  return Object.keys(agents).length ? agents : undefined;
+}
+function readOtlpSettings(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return;
+  const settings = raw;
+  return {
+    enabled: settings.enabled === true,
+    ...typeof settings.port === "number" && Number.isInteger(settings.port) ? { port: settings.port } : {}
+  };
+}
+function readAgents(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return;
+  const ids = (v) => Array.isArray(v) ? [...new Set(v.filter((e) => typeof e === "string" && e.trim() !== ""))] : [];
+  const table = raw;
+  if (!Array.isArray(table.selected))
+    return;
+  return { selected: ids(table.selected), seen: ids(table.seen) };
+}
 function readConfig() {
   try {
     const parsed = JSON.parse(readFileSync4(configFile(), "utf8"));
@@ -4501,17 +4530,23 @@ function projectConfig(parsed) {
         redact: collector.redact === "off" ? "off" : "minimal",
         environment: typeof collector.environment === "string" ? collector.environment : "local",
         machineId: typeof collector.machine_id === "string" ? collector.machine_id : undefined,
-        sources: readSources(collector.sources)
+        sources: readSources(collector.sources),
+        agents: readAgentSessions(collector.agents),
+        otlp: readOtlpSettings(collector.otlp)
       },
       telemetry: { enabled: telemetry.enabled !== false },
       audit: {
         auto: audit.auto === true,
         intervalDays: readIntervalDays(audit.interval_days),
         reportsConsentedAt: typeof audit.reports_consented_at === "number" && Number.isFinite(audit.reports_consented_at) ? audit.reports_consented_at : undefined
-      }
+      },
+      agents: readAgents(parsed.agents)
     };
   }
 }
+function isAgentTraced(id, config = readConfig()) {
+  return !config.agents || config.agents.selected.includes(id);
+}
 function projectCredentials(parsed) {
   {
     const cloud = parsed.cloud;
@@ -11375,10 +11410,46 @@ var init_pack_failclosed = __esm(() => {
 });
 
 // lib/atomic-write.ts
+import {
+  chmodSync as chmodSync2,
+  existsSync as existsSync16,
+  mkdirSync as mkdirSync6,
+  renameSync as renameSync3,
+  rmSync as rmSync2,
+  statSync as statSync14,
+  writeFileSync as writeFileSync5
+} from "node:fs";
+import { dirname as dirname6 } from "node:path";
+import { randomBytes } from "node:crypto";
+function writeJsonAtomically(filePath, value, opts = {}) {
+  const mode = opts.mode ?? 384;
+  const dirMode = opts.dirMode ?? 448;
+  const dir = dirname6(filePath);
+  if (!existsSync16(dir))
+    mkdirSync6(dir, { recursive: true, mode: dirMode });
+  const tmp = `${filePath}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
+  try {
+    writeFileSync5(tmp, JSON.stringify(value, null, 2), { mode });
+    try {
+      if ((statSync14(tmp).mode & 63) !== 0)
+        chmodSync2(tmp, mode);
+    } catch {}
+    renameSync3(tmp, filePath);
+    try {
+      if ((statSync14(filePath).mode & 63) !== 0)
+        chmodSync2(filePath, mode);
+    } catch {}
+  } catch (err) {
+    try {
+      rmSync2(tmp, { force: true });
+    } catch {}
+    throw err;
+  }
+}
 var init_atomic_write = () => {};
 
 // src/hooks/session-pause.ts
-import { existsSync as existsSync16, mkdirSync as mkdirSync6, readdirSync as readdirSync11, readFileSync as readFileSync13, rmSync as rmSync2 } from "node:fs";
+import { existsSync as existsSync17, mkdirSync as mkdirSync7, readdirSync as readdirSync11, readFileSync as readFileSync13, rmSync as rmSync3 } from "node:fs";
 import { createHash as createHash5 } from "node:crypto";
 import { join as join28, resolve as resolve13 } from "node:path";
 function pauseStateDir() {
@@ -11418,7 +11489,7 @@ function readActivePause(sessionId, now = Date.now()) {
     return null;
   try {
     const path = pauseFilePath(sessionId);
-    if (!existsSync16(path))
+    if (!existsSync17(path))
       return null;
     const stored = parseStored(JSON.parse(readFileSync13(path, "utf8")));
     if (!stored)
@@ -11459,15 +11530,15 @@ var init_daemon_service = __esm(() => {
 // src/hooks/fp-reset.ts
 import {
   copyFileSync,
-  existsSync as existsSync17,
-  mkdirSync as mkdirSync7,
+  existsSync as existsSync18,
+  mkdirSync as mkdirSync8,
   readFileSync as readFileSync14,
   readdirSync as readdirSync12,
-  renameSync as renameSync3,
-  rmSync as rmSync3,
+  renameSync as renameSync4,
+  rmSync as rmSync4,
   rmdirSync,
-  statSync as statSync14,
-  writeFileSync as writeFileSync5
+  statSync as statSync15,
+  writeFileSync as writeFileSync6
 } from "node:fs";
 function layoutWarningForHook() {
   const state = detectLayout();
@@ -11476,7 +11547,7 @@ function layoutWarningForHook() {
   if (state.kind === "future") {
     return `[failproofai] this directory was written by a newer version (layout ${state.found} vs ${LAYOUT_VERSION}) — policies are NOT being enforced. ` + `Upgrade failproofai.`;
   }
-  if (existsSync17(globalPolicyConfigFile()))
+  if (existsSync18(globalPolicyConfigFile()))
     return null;
   return `[failproofai] setup predates this version — global policies are NOT being enforced. ` + `Run \`failproofai config\` to re-create it.`;
 }
@@ -11487,9 +11558,44 @@ var init_fp_reset = __esm(() => {
   init_daemon_service();
 });
 
+// src/hooks/untraced-note.ts
+import { existsSync as existsSync19, readFileSync as readFileSync15 } from "node:fs";
+import { join as join29 } from "node:path";
+function untracedNotePath(home) {
+  return join29(stateDir(home), "untraced-notes.json");
+}
+function noteUntracedAgent(cli, sessionId, config) {
+  try {
+    if (isAgentTraced(cli, config ?? readConfig()))
+      return false;
+    const key = `${cli}:${sessionId ?? "no-session"}`;
+    const path = untracedNotePath();
+    let seen = [];
+    if (existsSync19(path)) {
+      const parsed = JSON.parse(readFileSync15(path, "utf8"));
+      if (Array.isArray(parsed))
+        seen = parsed.filter((k) => typeof k === "string");
+    }
+    if (seen.includes(key))
+      return false;
+    writeJsonAtomically(path, [...seen, key].slice(-UNTRACED_NOTE_KEEP));
+    hookLogInfo(`${cli} is not one of the agents failproofai config traces, but a hook for it fired` + `${sessionId ? ` (session ${sessionId})` : ""}. Its calls are evaluated as usual: a hook somebody installed keeps enforcing.`);
+    return true;
+  } catch {
+    return false;
+  }
+}
+var UNTRACED_NOTE_KEEP = 200;
+var init_untraced_note = __esm(() => {
+  init_atomic_write();
+  init_fp_config();
+  init_fp_home();
+  init_hook_logger();
+});
+
 // src/hooks/semantic/jev-config.ts
-import { closeSync as closeSync2, constants as fsConstants2, fstatSync as fstatSync2, openSync as openSync2, readSync as readSync2, statSync as statSync15 } from "node:fs";
-import { dirname as dirname6 } from "node:path";
+import { closeSync as closeSync2, constants as fsConstants2, fstatSync as fstatSync2, openSync as openSync2, readSync as readSync2, statSync as statSync16 } from "node:fs";
+import { dirname as dirname7 } from "node:path";
 function parseJevMode(raw) {
   return raw === "off" || raw === "observe" || raw === "enforce" ? raw : null;
 }
@@ -11720,7 +11826,7 @@ function looseConfigDirMode(path) {
   if (!modesAreMeaningful())
     return null;
   try {
-    const mode = statSync15(dirname6(path)).mode & 511;
+    const mode = statSync16(dirname7(path)).mode & 511;
     return (mode & DIR_WRITABLE_BY_OTHERS2) !== 0 ? mode : null;
   } catch {
     return null;
@@ -11781,8 +11887,8 @@ function inspectJevConfig() {
         path,
         mode,
         reason: "too-open",
-        problem: `its directory ${dirname6(path)} is ${dirMode.toString(8).padStart(4, "0")} — other users can write there, ` + `so they can put their own config in its place; it must be owner-only (chmod 700 ${dirname6(path)})`,
-        fix: `chmod 700 ${dirname6(path)}`
+        problem: `its directory ${dirname7(path)} is ${dirMode.toString(8).padStart(4, "0")} — other users can write there, ` + `so they can put their own config in its place; it must be owner-only (chmod 700 ${dirname7(path)})`,
+        fix: `chmod 700 ${dirname7(path)}`
       };
     }
     if (st.size > MAX_CONFIG_BYTES)
@@ -11904,9 +12010,9 @@ var init_jev_config = __esm(() => {
 });
 
 // src/hooks/semantic/facts.ts
-import { existsSync as existsSync18, readFileSync as readFileSync15, statSync as statSync16 } from "node:fs";
+import { existsSync as existsSync20, readFileSync as readFileSync16, statSync as statSync17 } from "node:fs";
 import { homedir as homedir20 } from "node:os";
-import { dirname as dirname7, isAbsolute as isAbsolute3, resolve as resolve14 } from "node:path";
+import { dirname as dirname8, isAbsolute as isAbsolute3, resolve as resolve14 } from "node:path";
 function classifyTool(toolName) {
   if (SHELL_TOOLS.has(toolName))
     return { toolClass: "shell", toolIsKnown: true };
@@ -12131,9 +12237,9 @@ function findGitDir(start) {
   let dir = start;
   for (let i = 0;i < 40; i++) {
     const candidate = resolve14(dir, ".git");
-    if (existsSync18(candidate))
+    if (existsSync20(candidate))
       return candidate;
-    const parent = dirname7(dir);
+    const parent = dirname8(dir);
     if (parent === dir)
       return null;
     dir = parent;
@@ -12144,7 +12250,7 @@ function findProjectRoot(cwd) {
   if (!cwd)
     return null;
   const gitDir = findGitDir(cwd);
-  return gitDir ? dirname7(gitDir) : cwd;
+  return gitDir ? dirname8(gitDir) : cwd;
 }
 function readCurrentBranch(cwd) {
   if (!cwd)
@@ -12154,14 +12260,14 @@ function readCurrentBranch(cwd) {
     if (!gitPath)
       return null;
     let headFile = resolve14(gitPath, "HEAD");
-    if (statSync16(gitPath).isFile()) {
-      const pointer = readFileSync15(gitPath, "utf8").trim();
+    if (statSync17(gitPath).isFile()) {
+      const pointer = readFileSync16(gitPath, "utf8").trim();
       const m = /^gitdir:\s*(.+)$/.exec(pointer);
       if (!m)
         return null;
-      headFile = resolve14(dirname7(gitPath), m[1], "HEAD");
+      headFile = resolve14(dirname8(gitPath), m[1], "HEAD");
     }
-    const head = readFileSync15(headFile, "utf8").trim();
+    const head = readFileSync16(headFile, "utf8").trim();
     const ref = /^ref:\s*refs\/heads\/(.+)$/.exec(head);
     return ref ? ref[1] : null;
   } catch {
@@ -14703,19 +14809,19 @@ __export(exports_intent, {
   readIntent: () => readIntent
 });
 import {
-  chmodSync as chmodSync2,
+  chmodSync as chmodSync3,
   closeSync as closeSync3,
-  mkdirSync as mkdirSync8,
+  mkdirSync as mkdirSync9,
   openSync as openSync3,
   readdirSync as readdirSync13,
-  readFileSync as readFileSync16,
+  readFileSync as readFileSync17,
   readSync as readSync3,
-  renameSync as renameSync4,
-  statSync as statSync17,
+  renameSync as renameSync5,
+  statSync as statSync18,
   unlinkSync as unlinkSync2,
-  writeFileSync as writeFileSync6
+  writeFileSync as writeFileSync7
 } from "node:fs";
-import { dirname as dirname8, resolve as resolve15 } from "node:path";
+import { dirname as dirname9, resolve as resolve15 } from "node:path";
 function modesAreMeaningful2() {
   return process.platform !== "win32";
 }
@@ -14727,7 +14833,7 @@ function storeDirChain() {
     chain.push(dir);
     if (dir === home)
       break;
-    const parent = dirname8(dir);
+    const parent = dirname9(dir);
     if (parent === dir)
       break;
     dir = parent;
@@ -14740,15 +14846,15 @@ function looseIntentStoreDir() {
   for (const dir of storeDirChain()) {
     let mode;
     try {
-      mode = statSync17(dir).mode & 511;
+      mode = statSync18(dir).mode & 511;
     } catch {
       continue;
     }
     if ((mode & DIR_WRITABLE_BY_OTHERS3) === 0)
       continue;
     try {
-      chmodSync2(dir, mode & ~DIR_WRITABLE_BY_OTHERS3);
-      if ((statSync17(dir).mode & DIR_WRITABLE_BY_OTHERS3) !== 0)
+      chmodSync3(dir, mode & ~DIR_WRITABLE_BY_OTHERS3);
+      if ((statSync18(dir).mode & DIR_WRITABLE_BY_OTHERS3) !== 0)
         return dir;
     } catch {
       return dir;
@@ -14758,7 +14864,7 @@ function looseIntentStoreDir() {
 }
 function readIntentFile(sessionId) {
   try {
-    const parsed = JSON.parse(readFileSync16(intentFile(sessionId), "utf8"));
+    const parsed = JSON.parse(readFileSync17(intentFile(sessionId), "utf8"));
     return Array.isArray(parsed?.prompts) ? parsed : { prompts: [] };
   } catch {
     return { prompts: [] };
@@ -14771,12 +14877,12 @@ function appendPrompt(sessionId, entry) {
     const kept = last && last.text === entry.text ? file.prompts.slice(0, -1) : file.prompts;
     file.prompts = [...kept, entry].slice(-MAX_RECORDED_PROMPTS);
     const dir = sessionsDir();
-    mkdirSync8(dir, { recursive: true, mode: 448 });
+    mkdirSync9(dir, { recursive: true, mode: 448 });
     const target = intentFile(sessionId);
     const isNew = !fileExists2(target);
     const tmp = `${target}.${process.pid}.tmp`;
-    writeFileSync6(tmp, JSON.stringify(file), { mode: 384 });
-    renameSync4(tmp, target);
+    writeFileSync7(tmp, JSON.stringify(file), { mode: 384 });
+    renameSync5(tmp, target);
     if (isNew)
       pruneExpiredSessions(entry.at);
     return true;
@@ -14786,7 +14892,7 @@ function appendPrompt(sessionId, entry) {
 }
 function fileExists2(path) {
   try {
-    statSync17(path);
+    statSync18(path);
     return true;
   } catch {
     return false;
@@ -14801,7 +14907,7 @@ function pruneExpiredSessions(now = Date.now()) {
         continue;
       const path = resolve15(dir, name);
       try {
-        const st = statSync17(path);
+        const st = statSync18(path);
         if (st.isFile() && now - st.mtimeMs > INTENT_MAX_AGE_MS) {
           unlinkSync2(path);
           removed++;
@@ -15110,7 +15216,7 @@ function visitLinesBackwards(transcriptPath, maxBytes, visit) {
     return;
   let fd;
   try {
-    const st = statSync17(path);
+    const st = statSync18(path);
     if (!st.isFile() || st.size === 0)
       return;
     fd = openSync3(path, "r");
@@ -15768,7 +15874,7 @@ var init_pack_policies = __esm(() => {
 
 // src/hooks/semantic/evaluator.ts
 import { createHash as createHash6 } from "node:crypto";
-import { appendFileSync as appendFileSync3, mkdirSync as mkdirSync9, renameSync as renameSync5, statSync as statSync18 } from "node:fs";
+import { appendFileSync as appendFileSync3, mkdirSync as mkdirSync10, renameSync as renameSync6, statSync as statSync19 } from "node:fs";
 import { resolve as resolve16 } from "node:path";
 function storeCut(message) {
   return typeof message === "string" && message.length >= MAX_USER_MESSAGE_CHARS - STORE_CUT_SLACK && OMISSION_MARK.test(message);
@@ -15940,10 +16046,10 @@ function verdictLogRow(input, outcome, meta) {
 function appendVerdictLog(row) {
   try {
     const file = verdictLogFile();
-    mkdirSync9(semanticDir(), { recursive: true, mode: 448 });
+    mkdirSync10(semanticDir(), { recursive: true, mode: 448 });
     try {
-      if (statSync18(file).size > VERDICT_LOG_MAX_BYTES)
-        renameSync5(file, `${file}.1`);
+      if (statSync19(file).size > VERDICT_LOG_MAX_BYTES)
+        renameSync6(file, `${file}.1`);
     } catch {}
     appendFileSync3(file, JSON.stringify(row) + `
 `, { mode: 384 });
@@ -16173,7 +16279,7 @@ var init_jev_throttle = __esm(() => {
 });
 
 // src/hooks/semantic/session-root.ts
-import { mkdirSync as mkdirSync10, readdirSync as readdirSync14, readFileSync as readFileSync17, statSync as statSync19, unlinkSync as unlinkSync3, writeFileSync as writeFileSync7 } from "node:fs";
+import { mkdirSync as mkdirSync11, readdirSync as readdirSync14, readFileSync as readFileSync18, statSync as statSync20, unlinkSync as unlinkSync3, writeFileSync as writeFileSync8 } from "node:fs";
 import { isAbsolute as isAbsolute4, resolve as resolve17 } from "node:path";
 function validRoot(v) {
   return typeof v === "string" && isAbsolute4(v) && resolve17(v) === v && v !== "/";
@@ -16184,7 +16290,7 @@ function storeIsOurs() {
   if (looseIntentStoreDir() !== null)
     return false;
   try {
-    const mode = statSync19(rootsDir()).mode & 511;
+    const mode = statSync20(rootsDir()).mode & 511;
     return (mode & DIR_WRITABLE_BY_OTHERS4) === 0;
   } catch {
     return true;
@@ -16192,7 +16298,7 @@ function storeIsOurs() {
 }
 function readPinned(sessionId) {
   try {
-    const parsed = JSON.parse(readFileSync17(rootFile(sessionId), "utf8"));
+    const parsed = JSON.parse(readFileSync18(rootFile(sessionId), "utf8"));
     return validRoot(parsed?.root) ? parsed.root : null;
   } catch {
     return null;
@@ -16207,7 +16313,7 @@ function pruneSessionRoots(now = Date.now()) {
         continue;
       const path = resolve17(dir, name);
       try {
-        const st = statSync19(path);
+        const st = statSync20(path);
         if (st.isFile() && now - st.mtimeMs > SESSION_ROOT_MAX_AGE_MS) {
           unlinkSync3(path);
           removed++;
@@ -16231,8 +16337,8 @@ function sessionProjectRoot(sessionId, cwd, now = Date.now()) {
       return pinned;
     if (!validRoot(live))
       return live;
-    mkdirSync10(rootsDir(), { recursive: true, mode: 448 });
-    writeFileSync7(rootFile(sessionId), JSON.stringify({ root: live, at: now }), { mode: 384, flag: "wx" });
+    mkdirSync11(rootsDir(), { recursive: true, mode: 448 });
+    writeFileSync8(rootFile(sessionId), JSON.stringify({ root: live, at: now }), { mode: 384, flag: "wx" });
     pruneSessionRoots(now);
   } catch {}
   return live;
@@ -16557,7 +16663,7 @@ var init_enforcement_capability = __esm(() => {
 });
 
 // src/hooks/handler.ts
-import { existsSync as existsSync19 } from "node:fs";
+import { existsSync as existsSync21 } from "node:fs";
 function canonicalizeEventType(raw, cli) {
   if (cli === "codex") {
     const mapped = CODEX_EVENT_MAP[raw];
@@ -16617,7 +16723,7 @@ function jevForcedOff(opts) {
 }
 async function readJevConfig() {
   try {
-    if (!existsSync19(jevConfigFile()))
+    if (!existsSync21(jevConfigFile()))
       return null;
     await Promise.resolve().then(() => init_jev_config());
     const config = loadJevConfig();
@@ -16735,6 +16841,7 @@ async function evaluateHookEvent(eventType, cli = "claude", stdinPayload, opts)
       parsed.tool_input = canonicalInput;
     }
     const sessionId = parsed.session_id;
+    noteUntracedAgent(cli, sessionId);
     const session = {
       sessionId,
       transcriptPath: resolveTranscriptPath(cli, parsed, sessionId),
@@ -17055,12 +17162,13 @@ var init_handler = __esm(() => {
   init_session_pause();
   init_fp_home();
   init_fp_reset();
+  init_untraced_note();
   JEV_GATE_EVENTS = new Set(["PreToolUse", "PermissionRequest"]);
 });
 
 // src/hooks/worker-server.ts
 import { createConnection, createServer } from "node:net";
-import { existsSync as existsSync20, unlinkSync as unlinkSync4 } from "node:fs";
+import { existsSync as existsSync22, unlinkSync as unlinkSync4 } from "node:fs";
 function isWorkerHookRequest(msg) {
   if (!msg || typeof msg !== "object")
     return false;
@@ -17226,14 +17334,14 @@ function requestExistingWorkerShutdown(socketPath) {
 function startWorkerServer(socketPath, shutdown) {
   const server = createServer((socket) => handleConnection(socket, shutdown ?? (() => server.close())));
   const listen = () => {
-    if (existsSync20(socketPath)) {
+    if (existsSync22(socketPath)) {
       try {
         unlinkSync4(socketPath);
       } catch {}
     }
     server.listen(socketPath);
   };
-  if (!existsSync20(socketPath))
+  if (!existsSync22(socketPath))
     listen();
   else
     requestExistingWorkerShutdown(socketPath).then(listen, (err) => server.emit("error", err));
@@ -17249,13 +17357,13 @@ var init_worker_server = __esm(() => {
 
 // bin/failproofai-worker.mjs
 import { realpathSync as realpathSync2 } from "node:fs";
-import { dirname as dirname9, resolve as resolve18 } from "node:path";
+import { dirname as dirname10, resolve as resolve18 } from "node:path";
 import { fileURLToPath } from "node:url";
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {
-  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve18(dirname9(realpathSync2(fileURLToPath(import.meta.url))), "..");
+  process.env.FAILPROOFAI_PACKAGE_ROOT = resolve18(dirname10(realpathSync2(fileURLToPath(import.meta.url))), "..");
 }
 if (!process.env.FAILPROOFAI_DIST_PATH) {
-  process.env.FAILPROOFAI_DIST_PATH = resolve18(dirname9(realpathSync2(fileURLToPath(import.meta.url))), "..", "dist");
+  process.env.FAILPROOFAI_DIST_PATH = resolve18(dirname10(realpathSync2(fileURLToPath(import.meta.url))), "..", "dist");
 }
 var socketPath = process.env.FAILPROOFAI_WORKER_SOCKET;
 if (!socketPath) {

package/hermes-plugin/plugin.yaml

@@ -1,5 +1,5 @@
 name: failproofai
-version: 1.0.10
+version: 1.0.11-beta.0
 description: Real-time FailproofAI policy enforcement for Hermes
 manifest_version: 2
 api_version: 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "1.0.10",
+  "version": "1.0.11-beta.0",
   "description": "Observability and enforcement for AI agent harnesses. 40 built-in policies hooked into 12 of them — Claude Code, Codex, Cursor, Hermes, OpenClaw and more — blocking the tool call before it runs. Local dashboard included, no account needed.",
   "bin": {
     "failproofai": "./dist/cli.mjs",
@@ -97,7 +97,7 @@
     "eslint-config-next": "^16.3.2",
     "jsdom": "^30.0.1",
     "lucide-react": "^1.33.0",
-    "next": "^16.3.2",
+    "next": "^16.3.8",
     "react": "^19.2.4",
     "react-dom": "^19.2.4",
     "tailwind-merge": "^3.4.0",
@@ -107,7 +107,9 @@
   },
   "dependencies": {
     "html-to-image": "^1.11.13",
+    "jsonc-parser": "^3.3.1",
     "posthog-node": "^5.50.0",
+    "smol-toml": "^1.9.1",
     "sql.js": "^1.14.1",
     "yaml": "^2.9.0"
   },
@@ -118,19 +120,20 @@
     "vite": "8.0.16",
     "undici": "7.29.1",
     "brace-expansion": "5.0.12",
-    "sharp": "0.35.4",
+    "sharp": "0.35.5",
+    "source-map-js": "1.2.2",
     "browserslist": "4.28.8"
   },
   "optionalDependencies": {
-    "@failproofai/failproofaid-linux-x64": "1.0.10",
-    "@failproofai/failproofaid-linux-arm64": "1.0.10",
-    "@failproofai/failproofaid-darwin-x64": "1.0.10",
-    "@failproofai/failproofaid-darwin-arm64": "1.0.10"
+    "@failproofai/failproofaid-linux-x64": "1.0.11-beta.0",
+    "@failproofai/failproofaid-linux-arm64": "1.0.11-beta.0",
+    "@failproofai/failproofaid-darwin-x64": "1.0.11-beta.0",
+    "@failproofai/failproofaid-darwin-arm64": "1.0.11-beta.0"
   },
   "failproofaidBinaries": {
-    "linux-x64": "868a4978a66e4407b86dac8d6c8af4ad0b2b355da56983fa5530f5d8b5024098",
-    "linux-arm64": "8a4603784e43552ed8cf5ed7a1552721c7216be4fb106ed6851daabd18e19ebe",
-    "darwin-x64": "b6a59948ad12c06cedc90ebca95492a357430a2a150b76ceaf98930f8b1279c2",
-    "darwin-arm64": "8c14361f7274973bb2cf99135ddb4a5a9cdc8b453a33e653156ba6b68354c417"
+    "linux-x64": "40b05c741f4c3c63bbf23b21cc4e200a396c07d568656a10d67a84b12fee42b8",
+    "linux-arm64": "afe688afba9e7f225d6d521c01b7d0038f1374125ede22f669ed45847a12e9b0",
+    "darwin-x64": "d8398fafe3a58abce754437f92111918d0229f966cd987be923d5dafbd5d3f84",
+    "darwin-arm64": "80108cfd087ecae5e1f2c2ba9bab77e160daceb169a0c44b5fe8b6ca519fc8dc"
   }
 }