failproofai 1.0.11-beta.3 → 1.0.11

package/.next/standalone/sdk/python/failproofai_sdk/integrations/otel.py

@@ -8,6 +8,8 @@ import threading
 import uuid
 from pathlib import Path
 
+from .._resolver import failproofai_home
+
 _MAX_BYTES = 8 * 1024 * 1024
 _METADATA = b'{"path":"/v1/traces","content_type":"application/json","encoding":null}\n'
 
@@ -85,7 +87,7 @@ class OtelSpanExporter:
             if self._stopped:
                 return SpanExportResult.FAILURE
             try:
-                directory = self._directory or Path(os.environ.get("FAILPROOFAI_HOME", Path.home() / ".failproofai")) / "state" / "spool-otlp"
+                directory = self._directory or failproofai_home() / "state" / "spool-otlp"
                 items, chunks, size = [], [], 20
                 for span in spans:
                     encoded = json.dumps(_resource_span(span), ensure_ascii=True, separators=(",", ":")).encode("utf8")

package/.next/standalone/sdk/python/tests/test_otel.py

@@ -102,6 +102,31 @@ def test_exporter_reports_failures_and_shutdown(tmp_path):
     provider.shutdown()
 
 
+@pytest.mark.parametrize("blank", ["", "   "])
+def test_blank_failproofai_home_means_the_default_not_the_cwd(tmp_path, monkeypatch, blank):
+    from failproofai_sdk import _redact, _resolver
+    home, cwd = tmp_path / "home", tmp_path / "cwd"
+    cwd.mkdir()
+    monkeypatch.setenv("HOME", str(home))
+    monkeypatch.setenv("FAILPROOFAI_HOME", blank)
+    monkeypatch.chdir(cwd)
+    default = home / ".failproofai"
+    assert _resolver.failproofai_home() == default
+    assert _resolver.failproofai_custom_agents_dir() == default / "custom-agents"
+    provider = TracerProvider()
+    span = provider.get_tracer("app").start_span("blank-home")
+    span.end()
+    assert failproofai_sdk.OtelSpanExporter().export([span]) == SpanExportResult.SUCCESS
+    assert len(batches(default)) == 1
+    assert not any(cwd.iterdir()), "a blank FAILPROOFAI_HOME wrote into the working directory"
+    # Redaction reads the same root: a switch in the cwd must not be consulted.
+    (cwd / "config.json").write_text('{"collector":{"redact":"off"}}')
+    default.mkdir(parents=True, exist_ok=True)
+    (default / "config.json").write_text('{"collector":{"redact":"minimal"}}')
+    assert _redact.redaction_enabled(tmp_path / "unrelated") is True
+    provider.shutdown()
+
+
 def test_batches_split_at_relay_limit(tmp_path, monkeypatch):
     from opentelemetry.sdk.trace import SpanLimits
     monkeypatch.setenv("FAILPROOFAI_HOME", str(tmp_path))

package/.next/standalone/sdk/typescript/CHANGELOG.md

@@ -8,10 +8,23 @@ Headings are `## <version> — <YYYY-MM-DD>`, and the section matching the versi
 in `src/version.ts` becomes that release's GitHub Release body. A release whose
 section is missing or empty is refused before anything is built.
 
-## 0.0.1-beta.1 — 2026-09-24
+## 0.0.1-beta.1 — 2026-10-15
+
+### Features
+
+- **OpenTelemetry spans to FailproofAI Cloud, without a network call in your
+  process.** `OtelSpanExporter`, or `instrument("otel", { spanProcessors })` before
+  you construct your provider, writes each finished batch of spans as OTLP/JSON to
+  the local spool (`~/.failproofai/state/spool-otlp`); the failproofai daemon
+  delivers it to Cloud with the machine's key and retries if Cloud is unreachable.
+  `@opentelemetry/sdk-trace-base` is only loaded when you call it.
 
 ### Fixes
 
+- **A blank `FAILPROOFAI_HOME` no longer means the current directory.** An empty or
+  whitespace-only value made the exporter and the custom-agents resolver write
+  under the working directory, where the daemon never reads. Blank now means unset.
+
 - **The integration fixtures stop carrying 32 open security advisories.** Nothing
   the published package ships changed — every fixture under `integration/fixtures/`
   is `"private": true` and exists only to run the adapters against real framework
@@ -95,6 +108,18 @@ section is missing or empty is refused before anything is built.
   against the override. This package's own dev lockfile also moves
   `source-map-js` to `1.2.2` (GHSA-68fv-2mgg-jv7q). (#901)
 
+- **`nextjs` and `mastra-0` clear their fixable advisories, again without moving
+  a pin.** `nextjs` moves `next` to `16.4.1` (six advisories, fixed in `16.3.8`),
+  `sharp` to `0.35.5` (GHSA-wq5f-xc86-pv6w) and `source-map-js` to `1.2.2`
+  (GHSA-68fv-2mgg-jv7q). `mastra-0` moves `@modelcontextprotocol/sdk` from
+  `1.30.1` to `1.32.1` (GHSA-6qxp-vccf-f47h), inside the `^1.17.5` range
+  `@mastra/mcp@0.14.5` declares, so only the lockfile changes. Dependabot's
+  version of this PR also moved `ai-4` to `ai@5.0.52` and `mastra-0` to
+  `@mastra/core@1.77.0`, which cannot install beside `@mastra/mcp@0.14.5` and
+  failed every integration shard, and `nextjs`'s `ai` to `7.0.141`, off the
+  `ai-7` twin its routes' traces are compared against. None of those are
+  applied. (#902)
+
 ## 0.0.1-beta.0 — 2026-09-23
 
 ### Added

package/.next/standalone/sdk/typescript/integration/fixtures/mastra-0/package-lock.json

@@ -1026,9 +1026,9 @@
       "license": "BSD-3-Clause"
     },
     "node_modules/@modelcontextprotocol/sdk": {
-      "version": "1.30.1",
-      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.30.1.tgz",
-      "integrity": "sha512-H2HxLvC3HDNybePJaLdSrU1hhUK5iQw+WvV1b01myFyI7sdVGe1u/IPTE5D9fGCiJDVtgMV/lmFkQXLmQyIFYA==",
+      "version": "1.32.1",
+      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.32.1.tgz",
+      "integrity": "sha512-2DdE+SJDtzLEEWzY1ZjY7Q+VcPhcV1KisD3zI4u0XZyktsjHum1mwbMI+JaulUBi2OZk+KJAi2uPXzxichPkdw==",
       "license": "MIT",
       "dependencies": {
         "@hono/node-server": "^1.19.9 || ^2.0.5",