failproofai 1.0.11-beta.0 → 1.0.11-beta.2

package/dist/worker.mjs

@@ -1165,7 +1165,7 @@ function instruct(reason) {
 }
 
 // package.json
-var version = "1.0.11-beta.0";
+var version = "1.0.11-beta.2";
 var init_package = () => {};
 
 // src/hooks/policy-types.ts
@@ -4379,21 +4379,60 @@ var init_combine = __esm(() => {
 // src/posthog-key.ts
 var POSTHOG_API_KEY = "phc_Ac1Ww1GqKc0z1SyrRWbmatEeQdlOQIsDEEdP8l8JRgX", POSTHOG_PRODUCT = "failproofai-oss";
 
-// src/hooks/fp-config.ts
+// lib/atomic-write.ts
 import {
   chmodSync,
+  existsSync as existsSync6,
+  mkdirSync as mkdirSync3,
+  renameSync as renameSync2,
+  rmSync as rmSync2,
+  statSync as statSync4,
+  writeFileSync as writeFileSync2
+} from "node:fs";
+import { dirname as dirname2 } from "node:path";
+import { randomBytes } from "node:crypto";
+function writeJsonAtomically(filePath, value, opts = {}) {
+  const mode = opts.mode ?? 384;
+  const dirMode = opts.dirMode ?? 448;
+  const dir = dirname2(filePath);
+  if (!existsSync6(dir))
+    mkdirSync3(dir, { recursive: true, mode: dirMode });
+  const tmp = `${filePath}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
+  try {
+    writeFileSync2(tmp, JSON.stringify(value, null, 2), { mode });
+    try {
+      if ((statSync4(tmp).mode & 63) !== 0)
+        chmodSync(tmp, mode);
+    } catch {}
+    renameSync2(tmp, filePath);
+    try {
+      if ((statSync4(filePath).mode & 63) !== 0)
+        chmodSync(filePath, mode);
+    } catch {}
+  } catch (err) {
+    try {
+      rmSync2(tmp, { force: true });
+    } catch {}
+    throw err;
+  }
+}
+var init_atomic_write = () => {};
+
+// src/hooks/fp-config.ts
+import {
+  chmodSync as chmodSync2,
   closeSync,
   constants as fsConstants,
-  existsSync as existsSync6,
+  existsSync as existsSync7,
   fstatSync,
-  mkdirSync as mkdirSync3,
+  mkdirSync as mkdirSync4,
   openSync,
   readFileSync as readFileSync4,
   readSync,
-  statSync as statSync4,
-  writeFileSync as writeFileSync2
+  statSync as statSync5,
+  writeFileSync as writeFileSync3
 } from "node:fs";
-import { dirname as dirname2 } from "node:path";
+import { dirname as dirname3 } from "node:path";
 function detectLayout() {
   const raw = readVersionFile();
   if (raw) {
@@ -4401,17 +4440,17 @@ function detectLayout() {
       return { kind: "current", version: raw };
     return raw.layout > LAYOUT_VERSION ? { kind: "future", found: raw.layout } : { kind: "stale", found: raw.layout };
   }
-  if (existsSync6(configFile())) {
+  if (existsSync7(configFile())) {
     const layoutThreePositions = [
       legacy.authJson(),
       legacy.nextAudit(),
       legacy.auditSchedule()
     ];
-    if (layoutThreePositions.some((p) => existsSync6(p)))
+    if (layoutThreePositions.some((p) => existsSync7(p)))
       return { kind: "stale", found: 3 };
     return { kind: "current", version: { layout: LAYOUT_VERSION, cli: "" }, inferred: true };
   }
-  if (existsSync6(legacy.configToml()))
+  if (existsSync7(legacy.configToml()))
     return { kind: "stale", found: 2 };
   const layoutOneMarkers = [
     legacy.policyConfig(),
@@ -4422,7 +4461,7 @@ function detectLayout() {
     legacy.ingestCredentials(),
     legacy.auditDashboard()
   ];
-  return layoutOneMarkers.some((p) => existsSync6(p)) ? { kind: "stale", found: 1 } : { kind: "absent" };
+  return layoutOneMarkers.some((p) => existsSync7(p)) ? { kind: "stale", found: 1 } : { kind: "absent" };
 }
 function readLegacyTomlVersion(text) {
   const layout = Number(/^\s*layout\s*=\s*(\d+)\s*$/m.exec(text)?.[1]);
@@ -4553,6 +4592,9 @@ function projectCredentials(parsed) {
     const ingest = parsed.ingest;
     const auth = parsed.auth;
     const out = {};
+    if (typeof parsed.connectedAt === "number" && Number.isSafeInteger(parsed.connectedAt) && parsed.connectedAt >= 0) {
+      out.connectedAt = parsed.connectedAt;
+    }
     if (cloud && typeof cloud.url === "string" && typeof cloud.machine_id === "string" && typeof cloud.token === "string" && cloud.url && cloud.token) {
       const machineLabel = typeof cloud.machine_label === "string" && cloud.machine_label ? cloud.machine_label : undefined;
       out.cloud = { url: cloud.url, machineId: cloud.machine_id, token: cloud.token, machineLabel };
@@ -4560,8 +4602,9 @@ function projectCredentials(parsed) {
     const org = parsed.org;
     if (org) {
       const pick = (v) => typeof v === "string" && v ? v : undefined;
-      const built = { id: pick(org.id), slug: pick(org.slug), name: pick(org.name) };
-      if (built.id || built.slug || built.name)
+      const since = typeof org.since === "number" && Number.isSafeInteger(org.since) && org.since >= 0 ? org.since : undefined;
+      const built = { id: pick(org.id), slug: pick(org.slug), name: pick(org.name), ...since !== undefined ? { since } : {} };
+      if (built.id || built.slug || built.name || since !== undefined)
         out.org = built;
     }
     if (ingest && typeof ingest.url === "string" && typeof ingest.key === "string" && ingest.url && ingest.key) {
@@ -4618,7 +4661,7 @@ function readJevCloudCredential() {
     if (meaningful) {
       let dirMode = null;
       try {
-        const m = statSync4(dirname2(path)).mode & 511;
+        const m = statSync5(dirname3(path)).mode & 511;
         if ((m & DIR_WRITABLE_BY_OTHERS) !== 0)
           dirMode = m;
       } catch {}
@@ -4628,8 +4671,8 @@ function readJevCloudCredential() {
           path,
           mode,
           reason: "too-open",
-          problem: `its directory ${dirname2(path)} is ${dirMode.toString(8).padStart(4, "0")} — other users can write there, ` + `so they can put their own credentials in its place; it must be owner-only (chmod 700 ${dirname2(path)})`,
-          fix: `chmod 700 ${dirname2(path)}`
+          problem: `its directory ${dirname3(path)} is ${dirMode.toString(8).padStart(4, "0")} — other users can write there, ` + `so they can put their own credentials in its place; it must be owner-only (chmod 700 ${dirname3(path)})`,
+          fix: `chmod 700 ${dirname3(path)}`
         };
       }
     }
@@ -4689,6 +4732,7 @@ function originOrNull(url) {
 }
 var DEFAULT_AUDIT_INTERVAL_DAYS = 7, MIN_AUDIT_INTERVAL_DAYS = 1, MAX_AUDIT_INTERVAL_DAYS = 90, DEFAULT_CONFIG, MAX_CREDENTIALS_BYTES, credentialsOpenFlags = () => fsConstants.O_RDONLY | (fsConstants.O_NONBLOCK ?? 0), DIR_WRITABLE_BY_OTHERS = 18;
 var init_fp_config = __esm(() => {
+  init_atomic_write();
   init_package();
   init_fp_home();
   DEFAULT_CONFIG = {
@@ -5761,7 +5805,7 @@ var init_custom_hooks_registry = __esm(() => {
 // src/hooks/loader-utils.ts
 import { readFile as readFile2, writeFile as writeFile2, unlink, access, mkdir, lstat } from "fs/promises";
 import { tmpdir } from "os";
-import { resolve as resolve6, dirname as dirname3, relative as relative2, join as join3 } from "path";
+import { resolve as resolve6, dirname as dirname4, relative as relative2, join as join3 } from "path";
 import { pathToFileURL } from "url";
 import { createHash as createHash3 } from "crypto";
 function isTmpArtifact(name) {
@@ -5802,7 +5846,7 @@ async function findDistIndex() {
       return candidate;
   }
   const candidates = [
-    resolve6(dirname3(process.execPath), "..", "assets", "dist", "index.js"),
+    resolve6(dirname4(process.execPath), "..", "assets", "dist", "index.js"),
     resolve6(process.cwd(), "dist", "index.js"),
     resolve6(process.cwd(), "node_modules", "failproofai", "dist", "index.js")
   ];
@@ -5893,7 +5937,7 @@ async function rewriteFileTree(entryPath, distUrl, distIndex, tmpSuffix = TMP_SU
     if (distIndex) {
       code = code.replace(/require\s*\(\s*(['"])(?:claudeye|failproofai)\1\s*\)/g, `require('${distIndex.replace(/\\/g, "\\\\")}')`);
     }
-    const dir = dirname3(filePath);
+    const dir = dirname4(filePath);
     const rewrites = new Map;
     for (const re of [LOCAL_IMPORT_RE, LOCAL_REQUIRE_RE]) {
       const freshRe = new RegExp(re.source, re.flags);
@@ -5946,12 +5990,12 @@ var init_loader_utils = __esm(() => {
 // src/hooks/custom-hooks-loader.ts
 import { resolve as resolve7, isAbsolute as isAbsolute2, basename } from "node:path";
 import { randomUUID } from "crypto";
-import { existsSync as existsSync7, readdirSync } from "node:fs";
+import { existsSync as existsSync8, readdirSync } from "node:fs";
 import { readFile as readFile3 } from "node:fs/promises";
 import { pathToFileURL as pathToFileURL2 } from "node:url";
 import { createHash as createHash4 } from "node:crypto";
 function discoverPolicyFiles(dir) {
-  if (!existsSync7(dir))
+  if (!existsSync8(dir))
     return [];
   try {
     const entries = readdirSync(dir, { withFileTypes: true });
@@ -5961,7 +6005,7 @@ function discoverPolicyFiles(dir) {
   }
 }
 function findSkippedPolicyFiles(dir) {
-  if (!existsSync7(dir))
+  if (!existsSync8(dir))
     return [];
   try {
     return readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && LOADABLE_EXT_RE.test(e.name) && !CONVENTION_FILE_RE.test(e.name) && !e.name.endsWith(".d.ts") && !isTmpArtifact(e.name)).map((e) => e.name).sort((a, b) => a.localeCompare(b));
@@ -6155,7 +6199,7 @@ async function loadAllCustomHooks(customPoliciesPaths, opts) {
     const absPath = resolve7(projectRoot, customPoliciesPath);
     const cloudManaged = cloudManagedByPath.get(absPath);
     const pack = packByPath.get(absPath);
-    if (existsSync7(absPath)) {
+    if (existsSync8(absPath)) {
       if (!loadedPaths.has(absPath)) {
         loadedPaths.add(absPath);
         const hooksBefore = getCustomHooks().length;
@@ -6287,19 +6331,19 @@ var init_custom_hooks_loader = __esm(() => {
 // src/hooks/hook-activity-store.ts
 import {
   readFileSync as readFileSync5,
-  writeFileSync as writeFileSync3,
+  writeFileSync as writeFileSync4,
   appendFileSync as appendFileSync2,
-  renameSync as renameSync2,
+  renameSync as renameSync3,
   readdirSync as readdirSync2,
-  mkdirSync as mkdirSync4,
-  existsSync as existsSync8,
-  statSync as statSync5,
+  mkdirSync as mkdirSync5,
+  existsSync as existsSync9,
+  statSync as statSync6,
   unlinkSync
 } from "node:fs";
 import { join as join4 } from "node:path";
 function ensureDir() {
-  if (!existsSync8(storeDirValue())) {
-    mkdirSync4(storeDirValue(), { recursive: true });
+  if (!existsSync9(storeDirValue())) {
+    mkdirSync5(storeDirValue(), { recursive: true });
   }
 }
 function acquireLock() {
@@ -6308,15 +6352,15 @@ function acquireLock() {
   const deadline = Date.now() + LOCK_STALE_MS;
   while (Date.now() < deadline) {
     try {
-      writeFileSync3(lockPath, String(process.pid), { flag: "wx" });
+      writeFileSync4(lockPath, String(process.pid), { flag: "wx" });
       return;
     } catch (e) {
       if (e.code !== "EEXIST")
         return;
       try {
-        const s = statSync5(lockPath);
+        const s = statSync6(lockPath);
         if (Date.now() - s.mtimeMs > LOCK_STALE_MS) {
-          writeFileSync3(lockPath, String(process.pid), "utf-8");
+          writeFileSync4(lockPath, String(process.pid), "utf-8");
           return;
         }
       } catch {}
@@ -6355,7 +6399,7 @@ function persistHookActivity(input) {
 function rotate(currentPath, countPath) {
   const archiveName = `page-${Date.now()}-${rotateSeq++}.jsonl`;
   const archivePath = join4(storeDirValue(), archiveName);
-  renameSync2(currentPath, archivePath);
+  renameSync3(currentPath, archivePath);
   writeCount(countPath, 0);
 }
 function readCount(countPath) {
@@ -6368,7 +6412,7 @@ function readCount(countPath) {
 }
 function writeCount(countPath, n) {
   try {
-    writeFileSync3(countPath, String(n), "utf-8");
+    writeFileSync4(countPath, String(n), "utf-8");
   } catch {}
 }
 function readStoredStats() {
@@ -6393,8 +6437,8 @@ function foldEntry(s, entry) {
 function writeStoredStats(s) {
   const tmpPath = join4(storeDirValue(), `stats.json.${process.pid}.tmp`);
   try {
-    writeFileSync3(tmpPath, JSON.stringify(s), "utf-8");
-    renameSync2(tmpPath, join4(storeDirValue(), STATS_FILE));
+    writeFileSync4(tmpPath, JSON.stringify(s), "utf-8");
+    renameSync3(tmpPath, join4(storeDirValue(), STATS_FILE));
     return true;
   } catch {
     try {
@@ -6419,6 +6463,7 @@ var init_hook_activity_store = __esm(() => {
 var CREDENTIAL_STATUSES;
 var init_delivery_health = __esm(() => {
   init_fp_home();
+  init_fp_config();
   CREDENTIAL_STATUSES = new Set([401, 403]);
 });
 
@@ -7111,7 +7156,7 @@ var init_cursor_projects = __esm(() => {
 });
 
 // lib/sqlite-reader.ts
-import { existsSync as existsSync9, readFileSync as readFileSync6, statSync as statSync6 } from "node:fs";
+import { existsSync as existsSync10, readFileSync as readFileSync6, statSync as statSync7 } from "node:fs";
 import initSqlJs from "sql.js/dist/sql-asm.js";
 async function tryNodeSqlite(dbPath) {
   try {
@@ -7136,7 +7181,7 @@ function loadSqlJs() {
   return sqlPromise;
 }
 function fileVersion(path) {
-  const stat = statSync6(path);
+  const stat = statSync7(path);
   return { size: stat.size, mtimeMs: stat.mtimeMs, ctimeMs: stat.ctimeMs };
 }
 function sameVersion(a, b) {
@@ -7269,7 +7314,7 @@ async function trySqlJs(dbPath) {
   }
 }
 async function openSqliteReadonly(dbPath, options = {}) {
-  if (!existsSync9(dbPath))
+  if (!existsSync10(dbPath))
     return null;
   if (!options.forcePortable) {
     const native = await tryNodeSqlite(dbPath);
@@ -7609,19 +7654,19 @@ var init_pi_projects = __esm(() => {
 });
 
 // lib/hermes-profiles.ts
-import { existsSync as existsSync10, readdirSync as readdirSync3 } from "node:fs";
+import { existsSync as existsSync11, readdirSync as readdirSync3 } from "node:fs";
 import { homedir as homedir10 } from "node:os";
-import { basename as basename2, dirname as dirname4, join as join11, resolve as resolve8 } from "node:path";
+import { basename as basename2, dirname as dirname5, join as join11, resolve as resolve8 } from "node:path";
 function hermesRoot() {
   const env = (process.env.HERMES_HOME || "").trim();
   if (env) {
     let home = resolve8(env);
-    const parent = dirname4(home);
+    const parent = dirname5(home);
     if (basename2(parent) === PROFILES_DIR)
-      home = dirname4(parent);
+      home = dirname5(parent);
     const base = basename2(home);
     if (base === STANDARD_HOME || base.startsWith(SIBLING_HOME_PREFIX)) {
-      return join11(dirname4(home), STANDARD_HOME);
+      return join11(dirname5(home), STANDARD_HOME);
     }
     return home;
   }
@@ -7655,9 +7700,9 @@ function listHermesProfiles() {
   if (basename2(root) !== STANDARD_HOME)
     return out;
   let siblings = [];
-  const parent = dirname4(root);
+  const parent = dirname5(root);
   try {
-    siblings = readdirSync3(parent, { withFileTypes: true }).filter((entry) => (entry.isDirectory() || entry.isSymbolicLink()) && entry.name.startsWith(SIBLING_HOME_PREFIX) && entry.name.length > SIBLING_HOME_PREFIX.length && existsSync10(join11(parent, entry.name, "config.yaml"))).map((entry) => ({
+    siblings = readdirSync3(parent, { withFileTypes: true }).filter((entry) => (entry.isDirectory() || entry.isSymbolicLink()) && entry.name.startsWith(SIBLING_HOME_PREFIX) && entry.name.length > SIBLING_HOME_PREFIX.length && existsSync11(join11(parent, entry.name, "config.yaml"))).map((entry) => ({
       name: entry.name.slice(SIBLING_HOME_PREFIX.length),
       home: join11(parent, entry.name)
     })).sort((a, b) => a.name.localeCompare(b.name));
@@ -8016,7 +8061,7 @@ var init_hermes_projects = __esm(() => {
 });
 
 // lib/openclaw-db.ts
-import { existsSync as existsSync11 } from "node:fs";
+import { existsSync as existsSync12 } from "node:fs";
 import { join as join13 } from "node:path";
 function str(value) {
   return typeof value === "string" && value.length > 0 ? value : undefined;
@@ -8036,7 +8081,7 @@ function listOpenClawDatabases(home, agentIds) {
   const out = [];
   for (const agentId of agentIds) {
     const dbPath = join13(home, "agents", agentId, "agent", DB_NAME);
-    if (existsSync11(dbPath))
+    if (existsSync12(dbPath))
       out.push({ agentId, dbPath });
   }
   return out;
@@ -8173,7 +8218,7 @@ var init_openclaw_db = __esm(() => {
 
 // lib/openclaw-sessions.ts
 import { readFile as readFile7 } from "node:fs/promises";
-import { readdirSync as readdirSync4, statSync as statSync7 } from "node:fs";
+import { readdirSync as readdirSync4, statSync as statSync8 } from "node:fs";
 import { homedir as homedir11 } from "node:os";
 import { join as join14 } from "node:path";
 function openclawHome() {
@@ -8326,7 +8371,7 @@ function listOpenClawTranscripts() {
         continue;
       const transcriptPath = join14(sessionsDir, file);
       try {
-        const st = statSync7(transcriptPath);
+        const st = statSync8(transcriptPath);
         out.push({
           agentId,
           sessionId,
@@ -8569,7 +8614,7 @@ var init_openclaw_projects = __esm(() => {
 
 // lib/factory-sessions.ts
 import { readFile as readFile8 } from "node:fs/promises";
-import { readdirSync as readdirSync5, statSync as statSync8 } from "node:fs";
+import { readdirSync as readdirSync5, statSync as statSync9 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
 import { join as join16 } from "node:path";
 function factoryHome() {
@@ -8737,7 +8782,7 @@ function listFactoryTranscripts() {
         continue;
       const transcriptPath = join16(projectPath, file);
       try {
-        const st = statSync8(transcriptPath);
+        const st = statSync9(transcriptPath);
         out.push({ projectName, cwd, sessionId, transcriptPath, mtimeMs: st.mtimeMs, sizeBytes: st.size });
       } catch {}
     }
@@ -9156,7 +9201,7 @@ var init_devin_projects = __esm(() => {
 
 // lib/antigravity-sessions.ts
 import { readFile as readFile9 } from "node:fs/promises";
-import { readdirSync as readdirSync6, statSync as statSync9 } from "node:fs";
+import { readdirSync as readdirSync6, statSync as statSync10 } from "node:fs";
 import { homedir as homedir14 } from "node:os";
 import { join as join18 } from "node:path";
 function antigravityHome() {
@@ -9291,7 +9336,7 @@ function listAntigravityTranscripts() {
       continue;
     const transcriptPath = join18(root, conversationId, rel);
     try {
-      const st = statSync9(transcriptPath);
+      const st = statSync10(transcriptPath);
       if (!st.isFile())
         continue;
       out.push({ conversationId, transcriptPath, mtimeMs: st.mtimeMs, sizeBytes: st.size });
@@ -9304,7 +9349,7 @@ function findAntigravityTranscript(conversationId) {
     return null;
   const transcriptPath = join18(antigravityBrainRoot(), conversationId, antigravityTranscriptRelPath());
   try {
-    if (statSync9(transcriptPath).isFile())
+    if (statSync10(transcriptPath).isFile())
       return transcriptPath;
   } catch {}
   return null;
@@ -10213,13 +10258,13 @@ var init_log_entries = __esm(() => {
 });
 
 // lib/codex-sessions.ts
-import { readFileSync as readFileSync8, readdirSync as readdirSync7, existsSync as existsSync12, writeFileSync as writeFileSync4, mkdirSync as mkdirSync5, statSync as statSync10 } from "node:fs";
+import { readFileSync as readFileSync8, readdirSync as readdirSync7, existsSync as existsSync13, writeFileSync as writeFileSync5, mkdirSync as mkdirSync6, statSync as statSync11 } from "node:fs";
 import { readFile as readFile11 } from "node:fs/promises";
-import { dirname as dirname5, join as join24 } from "node:path";
+import { dirname as dirname6, join as join24 } from "node:path";
 import { homedir as homedir16 } from "node:os";
 function readCache() {
   try {
-    if (!existsSync12(CACHE_PATH))
+    if (!existsSync13(CACHE_PATH))
       return {};
     return JSON.parse(readFileSync8(CACHE_PATH, "utf-8"));
   } catch {
@@ -10228,10 +10273,10 @@ function readCache() {
 }
 function writeCacheEntry(sessionId, path) {
   try {
-    mkdirSync5(dirname5(CACHE_PATH), { recursive: true });
+    mkdirSync6(dirname6(CACHE_PATH), { recursive: true });
     const cache = readCache();
     cache[sessionId] = path;
-    writeFileSync4(CACHE_PATH, JSON.stringify(cache), "utf-8");
+    writeFileSync5(CACHE_PATH, JSON.stringify(cache), "utf-8");
   } catch {}
 }
 function dirSearch(dir, sessionId) {
@@ -10247,7 +10292,7 @@ function dirSearch(dir, sessionId) {
 function findCodexTranscript(sessionId) {
   const cache = readCache();
   const cached = cache[sessionId];
-  if (cached && existsSync12(cached))
+  if (cached && existsSync13(cached))
     return cached;
   const root = join24(homedir16(), ".codex", "sessions");
   const today = new Date;
@@ -10541,7 +10586,7 @@ var init_resolve_permission_mode = __esm(() => {
 });
 
 // lib/copilot-sessions.ts
-import { readFileSync as readFileSync10, readdirSync as readdirSync8, existsSync as existsSync13, statSync as statSync11 } from "node:fs";
+import { readFileSync as readFileSync10, readdirSync as readdirSync8, existsSync as existsSync14, statSync as statSync12 } from "node:fs";
 import { readFile as readFile12 } from "node:fs/promises";
 import { join as join25, resolve as resolve10, sep as sep2 } from "node:path";
 import { homedir as homedir17 } from "node:os";
@@ -10570,13 +10615,13 @@ function findCopilotTranscript(sessionId) {
   const candidate = resolveSessionFile(sessionId, "events.jsonl");
   if (!candidate)
     return null;
-  return existsSync13(candidate) ? candidate : null;
+  return existsSync14(candidate) ? candidate : null;
 }
 function findCopilotWorkspace(sessionId) {
   const candidate = resolveSessionFile(sessionId, "workspace.yaml");
   if (!candidate)
     return null;
-  return existsSync13(candidate) ? candidate : null;
+  return existsSync14(candidate) ? candidate : null;
 }
 function readYamlScalar(path, key) {
   try {
@@ -10758,7 +10803,7 @@ var init_copilot_sessions = __esm(() => {
 });
 
 // lib/cursor-sessions.ts
-import { readFileSync as readFileSync11, readdirSync as readdirSync9, existsSync as existsSync14, statSync as statSync12 } from "node:fs";
+import { readFileSync as readFileSync11, readdirSync as readdirSync9, existsSync as existsSync15, statSync as statSync13 } from "node:fs";
 import { readFile as readFile13 } from "node:fs/promises";
 import { basename as basename3, join as join26, resolve as resolve11, sep as sep3 } from "node:path";
 import { homedir as homedir18 } from "node:os";
@@ -10781,7 +10826,7 @@ function getCursorSessionDir(sessionId) {
     const transcriptRoot = resolve11(projectsRoot, entry.name, NEW_AGENT_TRANSCRIPTS_DIR2);
     if (candidate === transcriptRoot || !candidate.startsWith(`${transcriptRoot}${sep3}`))
       continue;
-    if (existsSync14(candidate))
+    if (existsSync15(candidate))
       return candidate;
   }
   for (const sub of LEGACY_SESSION_ROOT_CANDIDATES2) {
@@ -10789,7 +10834,7 @@ function getCursorSessionDir(sessionId) {
     const candidate = resolve11(root, sessionId);
     if (candidate === root || !candidate.startsWith(`${root}${sep3}`))
       continue;
-    if (existsSync14(candidate))
+    if (existsSync15(candidate))
       return candidate;
   }
   return null;
@@ -10799,11 +10844,11 @@ function findCursorTranscript(sessionId) {
   if (!dir)
     return null;
   const newCandidate = join26(dir, `${basename3(dir)}.jsonl`);
-  if (existsSync14(newCandidate))
+  if (existsSync15(newCandidate))
     return newCandidate;
   for (const name of LEGACY_TRANSCRIPT_FILE_CANDIDATES2) {
     const candidate = join26(dir, name);
-    if (existsSync14(candidate))
+    if (existsSync15(candidate))
       return candidate;
   }
   return null;
@@ -11014,7 +11059,7 @@ var init_cursor_sessions = __esm(() => {
 });
 
 // lib/pi-sessions.ts
-import { readFileSync as readFileSync12, readdirSync as readdirSync10, existsSync as existsSync15, statSync as statSync13 } from "node:fs";
+import { readFileSync as readFileSync12, readdirSync as readdirSync10, existsSync as existsSync16, statSync as statSync14 } from "node:fs";
 import { readFile as readFile14 } from "node:fs/promises";
 import { join as join27, resolve as resolve12, sep as sep4 } from "node:path";
 import { homedir as homedir19 } from "node:os";
@@ -11051,7 +11096,7 @@ function findPiTranscript(sessionId) {
       const candidate = resolve12(cwdPath, f);
       if (!candidate.startsWith(`${cwdPath}${sep4}`))
         continue;
-      if (existsSync15(candidate))
+      if (existsSync16(candidate))
         return candidate;
     }
   }
@@ -11409,45 +11454,6 @@ var init_pack_failclosed = __esm(() => {
   ]);
 });
 
-// lib/atomic-write.ts
-import {
-  chmodSync as chmodSync2,
-  existsSync as existsSync16,
-  mkdirSync as mkdirSync6,
-  renameSync as renameSync3,
-  rmSync as rmSync2,
-  statSync as statSync14,
-  writeFileSync as writeFileSync5
-} from "node:fs";
-import { dirname as dirname6 } from "node:path";
-import { randomBytes } from "node:crypto";
-function writeJsonAtomically(filePath, value, opts = {}) {
-  const mode = opts.mode ?? 384;
-  const dirMode = opts.dirMode ?? 448;
-  const dir = dirname6(filePath);
-  if (!existsSync16(dir))
-    mkdirSync6(dir, { recursive: true, mode: dirMode });
-  const tmp = `${filePath}.${process.pid}.${randomBytes(6).toString("hex")}.tmp`;
-  try {
-    writeFileSync5(tmp, JSON.stringify(value, null, 2), { mode });
-    try {
-      if ((statSync14(tmp).mode & 63) !== 0)
-        chmodSync2(tmp, mode);
-    } catch {}
-    renameSync3(tmp, filePath);
-    try {
-      if ((statSync14(filePath).mode & 63) !== 0)
-        chmodSync2(filePath, mode);
-    } catch {}
-  } catch (err) {
-    try {
-      rmSync2(tmp, { force: true });
-    } catch {}
-    throw err;
-  }
-}
-var init_atomic_write = () => {};
-
 // src/hooks/session-pause.ts
 import { existsSync as existsSync17, mkdirSync as mkdirSync7, readdirSync as readdirSync11, readFileSync as readFileSync13, rmSync as rmSync3 } from "node:fs";
 import { createHash as createHash5 } from "node:crypto";

package/hermes-plugin/plugin.yaml

@@ -1,5 +1,5 @@
 name: failproofai
-version: 1.0.11-beta.0
+version: 1.0.11-beta.2
 description: Real-time FailproofAI policy enforcement for Hermes
 manifest_version: 2
 api_version: 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "1.0.11-beta.0",
+  "version": "1.0.11-beta.2",
   "description": "Observability and enforcement for AI agent harnesses. 40 built-in policies hooked into 12 of them — Claude Code, Codex, Cursor, Hermes, OpenClaw and more — blocking the tool call before it runs. Local dashboard included, no account needed.",
   "bin": {
     "failproofai": "./dist/cli.mjs",
@@ -81,14 +81,14 @@
     "access": "public"
   },
   "devDependencies": {
-    "@anthropic-ai/sdk": "^0.128.0",
+    "@anthropic-ai/sdk": "^0.133.0",
     "@mdx-js/mdx": "^3.1.1",
     "@tailwindcss/postcss": "^4.3.1",
     "@tanstack/react-virtual": "^3.14.10",
     "@testing-library/jest-dom": "^7.0.0",
     "@testing-library/react": "^16.3.2",
     "@testing-library/user-event": "^14.6.5",
-    "@types/node": "26.6.2",
+    "@types/node": "26.6.5",
     "@types/react": "19.3.0",
     "@types/react-dom": "^19.2.3",
     "@vitejs/plugin-react": "^6.1.0",
@@ -125,15 +125,15 @@
     "browserslist": "4.28.8"
   },
   "optionalDependencies": {
-    "@failproofai/failproofaid-linux-x64": "1.0.11-beta.0",
-    "@failproofai/failproofaid-linux-arm64": "1.0.11-beta.0",
-    "@failproofai/failproofaid-darwin-x64": "1.0.11-beta.0",
-    "@failproofai/failproofaid-darwin-arm64": "1.0.11-beta.0"
+    "@failproofai/failproofaid-linux-x64": "1.0.11-beta.2",
+    "@failproofai/failproofaid-linux-arm64": "1.0.11-beta.2",
+    "@failproofai/failproofaid-darwin-x64": "1.0.11-beta.2",
+    "@failproofai/failproofaid-darwin-arm64": "1.0.11-beta.2"
   },
   "failproofaidBinaries": {
-    "linux-x64": "40b05c741f4c3c63bbf23b21cc4e200a396c07d568656a10d67a84b12fee42b8",
-    "linux-arm64": "afe688afba9e7f225d6d521c01b7d0038f1374125ede22f669ed45847a12e9b0",
-    "darwin-x64": "d8398fafe3a58abce754437f92111918d0229f966cd987be923d5dafbd5d3f84",
-    "darwin-arm64": "80108cfd087ecae5e1f2c2ba9bab77e160daceb169a0c44b5fe8b6ca519fc8dc"
+    "linux-x64": "4c27c00e42b621d0a7e6de5ff4da25806b3d8f5936b5ba154a49bcb6d252aae0",
+    "linux-arm64": "be383d9ff2a2d34ba5dc82e8d73fb5bd5bd76fca4d7059563307ae6e178cc126",
+    "darwin-x64": "e9f02f91bebe8d5202c58ff841e46ed8d4beb23e240bff3359c5aac2812c887e",
+    "darwin-arm64": "cc28680275bb0561978cf4c9c3882986d8d8b68484c5bf0e6a75c79aa4b90cda"
   }
 }

package/scripts/skew-log-filter.ts

@@ -71,8 +71,12 @@ export function makeSkewLogFilter(): (line: string) => string | null {
 export function makeNextStartupFilter(onReady?: () => void): (line: string) => string | null {
   let listening = false;
   return (line: string): string | null => {
-    if (listening) return line;
     const plain = line.replace(/\x1B\[[0-9;]*m/g, "").trim();
+    // Next 16.3 logs these around startup, the config timing AFTER `Ready in`,
+    // so they would print under the launch screen. Neither says anything the
+    // screen doesn't.
+    if (/^(?:✓\s*)?(?:Running next\.config\b|Starting\.\.\.$)/.test(plain)) return null;
+    if (listening) return line;
     if (/^(?:✓\s*)?Ready in\b/.test(plain)) {
       listening = true;
       onReady?.();