failproofai 1.0.11 → 1.0.12-beta.0

package/.next/standalone/node_modules/next/dist/lib/patch-incorrect-lockfile.js

@@ -68,7 +68,7 @@ async function fetchPkgInfo(pkg) {
         throw new Error(`Failed to fetch registry info for ${pkg}, got status ${res.status}`);
     }
     const data = await res.json();
-    const versionData = data.versions["16.4.0"];
+    const versionData = data.versions["16.4.2"];
     return {
         os: versionData.os,
         cpu: versionData.cpu,
@@ -96,7 +96,7 @@ async function patchIncorrectLockfile(dir) {
     const expectedSwcPkgs = Object.keys(_packagejson.optionalDependencies || {}).filter((pkg)=>pkg.startsWith('@next/swc-'));
     const patchDependency = (pkg, pkgData)=>{
         lockfileParsed.dependencies[pkg] = {
-            version: "16.4.0",
+            version: "16.4.2",
             resolved: pkgData.tarball,
             integrity: pkgData.integrity,
             optional: true
@@ -104,7 +104,7 @@ async function patchIncorrectLockfile(dir) {
     };
     const patchPackage = (pkg, pkgData)=>{
         lockfileParsed.packages[pkg] = {
-            version: "16.4.0",
+            version: "16.4.2",
             resolved: pkgData.tarball,
             integrity: pkgData.integrity,
             cpu: pkgData.cpu,

package/.next/standalone/node_modules/next/dist/server/app-render/async-local-storage.js

@@ -58,7 +58,7 @@ function createAsyncLocalStorage() {
     return new FakeAsyncLocalStorage();
 }
 function getOrCreateGlobalAsyncLocalStorage(name) {
-    const key = Symbol.for(`@next/${name}@${"16.4.0"}`);
+    const key = Symbol.for(`@next/${name}@${"16.4.2"}`);
     const globalStore = globalThis;
     return globalStore[key] ??= createAsyncLocalStorage();
 }

package/.next/standalone/node_modules/next/dist/server/config.js

@@ -1163,7 +1163,7 @@ async function applyModifyConfig(config, phase, silent, dir) {
             }
             config = await adapterMod.modifyConfig(config, {
                 phase,
-                nextVersion: "16.4.0",
+                nextVersion: "16.4.2",
                 projectDir: dir
             });
         }

package/.next/standalone/node_modules/next/dist/server/dev/hot-reloader-turbopack.js

@@ -325,7 +325,7 @@ async function createHotReloaderTurbopack(opts, serverFields, distDir, resetFetc
     }
     const hasRewrites = opts.fsChecker.rewrites.afterFiles.length > 0 || opts.fsChecker.rewrites.beforeFiles.length > 0 || opts.fsChecker.rewrites.fallback.length > 0;
     const hotReloaderSpan = (0, _trace.trace)('hot-reloader', undefined, {
-        version: "16.4.0"
+        version: "16.4.2"
     });
     // Ensure the hotReloaderSpan is flushed immediately as it's the parentSpan for all processing
     // of the current `next dev` invocation.
@@ -385,7 +385,7 @@ async function createHotReloaderTurbopack(opts, serverFields, distDir, resetFetc
         writeRoutesHashesManifest: false,
         currentNodeJsVersion,
         isPersistentCachingEnabled: (0, _utils2.isFileSystemCacheEnabledForDev)(opts.nextConfig),
-        nextVersion: "16.4.0",
+        nextVersion: "16.4.2",
         serverHmr: serverFastRefresh
     }, {
         turbopackMemoryEviction: opts.nextConfig.experimental.turbopackMemoryEvictionMode,

package/.next/standalone/node_modules/next/dist/server/dev/hot-reloader-webpack.js

@@ -237,7 +237,7 @@ class HotReloaderWebpack {
         this.previewProps = previewProps;
         this.rewrites = rewrites;
         this.hotReloaderSpan = (0, _trace.trace)('hot-reloader', undefined, {
-            version: "16.4.0"
+            version: "16.4.2"
         });
         // Ensure the hotReloaderSpan is flushed immediately as it's the parentSpan for all processing
         // of the current `next dev` invocation.

package/.next/standalone/node_modules/next/dist/server/lib/app-info-log.js

@@ -83,7 +83,7 @@ function _interop_require_wildcard(obj, nodeInterop) {
 }
 function logStartInfo({ networkUrl, appUrl, envInfo, logBundler }) {
     const versionSuffix = logBundler ? ` (${(0, _bundler.bundlerName)((0, _bundler.getBundlerFromEnv)())})` : '';
-    _log.bootstrap(`${(0, _picocolors.bold)((0, _picocolors.purple)(`${_log.prefixes.ready} Next.js ${"16.4.0"}`))}${versionSuffix}`);
+    _log.bootstrap(`${(0, _picocolors.bold)((0, _picocolors.purple)(`${_log.prefixes.ready} Next.js ${"16.4.2"}`))}${versionSuffix}`);
     if (appUrl) {
         _log.bootstrap(`- Local:         ${appUrl}`);
     }

package/.next/standalone/node_modules/next/dist/server/lib/generate-agent-files.js

@@ -106,11 +106,11 @@ During the current user request, retain anonymized facts as feedback candidates
 - Missing, unclear, or conflicting documentation
 - Unexpected CLI, codemod, Skill, or upgrade behavior and non-obvious workarounds
 
-Continue the current user request without reporting immediately. Ignore routine debugging and unverified changes. Never retain code, logs, paths, URLs, secrets, personal information, or project-specific data.
+Continue the current user request without reporting immediately. Routine debugging is not feedback. Verify changes before retaining them as feedback candidates. Never retain code, logs, paths, URLs, secrets, personal information, or project-specific data.
 
-Keep a qualifying candidate through the reporting pass even if you resolve or work around it. A successful fix changes the report outcome; it does not erase the friction that qualified it.
+Retain qualifying friction even if it is later fixed or worked around; record the final outcome during the reporting pass.
 
-Before the final response, run one reporting pass. If candidates remain, from this file's directory run \`node node_modules/next/dist/bin/next internal agent-feedback-instructions\` once without piping or truncating its output. Follow its output or error guidance. If a network sandbox blocks it, retry with network access; if it still returns no output, continue normally.
+Before the final response, run one reporting pass. If candidates remain, from this file's directory run \`npx --no-install next internal agent-feedback-instructions\` once without piping or truncating its output. Follow its output or error guidance. If a network sandbox blocks it, retry with network access; if it still returns no output, continue normally.
 
 ${AGENT_FEEDBACK_END_MARKER}`;
 }

package/.next/standalone/node_modules/next/dist/server/lib/router-server.js

@@ -173,7 +173,7 @@ async function initialize(opts) {
         if (developmentConfig.experimental.agentUpgrade === 'security' || developmentConfig.experimental.agentUpgrade === 'latest' || developmentConfig.experimental.agentUpgrade === 'experimental-future' || process.env.__NEXT_AGENT_UPGRADE || process.env.__NEXT_AGENT_UPGRADE_FORCE_DEVTOOLS_FOR_TESTING === '1') {
             const { nudgeUpgrade, getUpgradeContext, assessUpgrade } = require('../../lib/upgrade/nudge');
             const upgradeContext = getUpgradeContext(developmentConfig);
-            const installedVersion = "16.4.0" || 'unknown';
+            const installedVersion = "16.4.2" || 'unknown';
             const policy = upgradeContext.experimental.agentUpgrade;
             const forced = process.env.__NEXT_AGENT_UPGRADE === policy;
             const forceDevToolsForTesting = process.env.__NEXT_AGENT_UPGRADE_FORCE_DEVTOOLS_FOR_TESTING === '1';

package/.next/standalone/node_modules/next/dist/server/lib/start-server.js

@@ -174,7 +174,7 @@ async function getRequestHandlers({ dir, port, isDev, onDevServerCleanup, server
 async function startServer(serverOptions) {
     const { dir, isDev, hostname, minimalMode, allowRetry, keepAliveTimeout, selfSignedCertificate, serverFastRefresh } = serverOptions;
     let { port } = serverOptions;
-    process.title = `next-server (v${"16.4.0"})`;
+    process.title = `next-server (v${"16.4.2"})`;
     let handlersReady = ()=>{};
     let handlersError = ()=>{};
     let handlersPromise = new Promise((resolve, reject)=>{

package/.next/standalone/node_modules/next/dist/server/lib/trace/tracer.js

@@ -103,7 +103,7 @@ class NextTracerImpl {
    * Since wrap / trace can be defined in any place prior to actual trace subscriber initialization,
    * This should be lazily evaluated.
    */ getTracerInstance() {
-        return trace.getTracer('next.js', "16.4.0");
+        return trace.getTracer('next.js', "16.4.2");
     }
     isOpenTelemetryEnabled() {
         var _tracerProvider_getDelegate_constructor, _tracerProvider_getDelegate;

package/.next/standalone/node_modules/next/dist/server/typescript/rules/config.js

@@ -121,7 +121,7 @@ const API_DOCS = {
     },
     prefetch: {
         description: `Controls prefetching behavior for this segment. Some options are experimental and may change.`,
-        link: '(docs coming soon)',
+        link: 'https://nextjs.org/docs/app/api-reference/file-conventions/route-segment-config/prefetch',
         type: `"auto" | "partial" | "force-disabled"`,
         options: {
             auto: 'Default. Framework decides based on instant validation and segment configuration. You do not need to set this explicitly.',
@@ -132,7 +132,7 @@ const API_DOCS = {
     },
     ensureStatic: {
         description: `Controls which rendering phases require static output for this segment. This option is experimental and may change.`,
-        link: '(docs coming soon)',
+        link: 'https://nextjs.org/docs/app/api-reference/file-conventions/route-segment-config/ensureStatic',
         type: `"auto" | "shell" | "prefetch" | "navigation" | false`,
         options: {
             '"auto"': 'Default. The shell, prefetch, or entire page will automatically be prerendered statically if possible.',

package/.next/standalone/node_modules/next/dist/server/use-cache/use-cache-wrapper.js

@@ -84,7 +84,7 @@ function _interop_require_wildcard(obj, nodeInterop) {
     }
     return newObj;
 }
-const nextVersion = "16.4.0";
+const nextVersion = "16.4.2";
 /**
  * Encapsulates a pending cache invocation for deduping. Manages lazy stream
  * tee-ing (via fork()) and metadata access for both intra-request and

package/.next/standalone/node_modules/next/dist/telemetry/anonymous-meta.js

@@ -82,7 +82,7 @@ async function getAnonymousMeta() {
         isWsl: _iswsl.default,
         isCI: _ciinfo.isCI,
         ciName: _ciinfo.isCI && _ciinfo.name || null,
-        nextVersion: "16.4.0",
+        nextVersion: "16.4.2",
         agentName: await (0, _agentname.getAgentName)()
     };
     return traits;

package/.next/standalone/node_modules/next/dist/telemetry/events/swc-load-failure.js

@@ -38,7 +38,7 @@ async function eventSwcLoadFailure(event) {
     telemetry.record({
         eventName: EVENT_PLUGIN_PRESENT,
         payload: {
-            nextVersion: "16.4.0",
+            nextVersion: "16.4.2",
             glibcVersion,
             installedSwcPackages,
             arch: process.arch,

package/.next/standalone/node_modules/next/dist/telemetry/events/version.js

@@ -12,12 +12,12 @@ const EVENT_VERSION = 'NEXT_CLI_SESSION_STARTED';
 function eventCliSession(nextConfig, event) {
     var _nextConfig_experimental, _nextConfig_experimental_staleTimes, _nextConfig_experimental_staleTimes1, _nextConfig_reactCompiler, _nextConfig_reactCompiler1;
     // This should be an invariant, if it fails our build tooling is broken.
-    if (typeof "16.4.0" !== 'string') {
+    if (typeof "16.4.2" !== 'string') {
         return [];
     }
     const { images, i18n } = nextConfig || {};
     const payload = {
-        nextVersion: "16.4.0",
+        nextVersion: "16.4.2",
         nodeVersion: process.version,
         cliCommand: event.cliCommand,
         isSrcDir: event.isSrcDir,

package/.next/standalone/node_modules/next/package.json

@@ -1,6 +1,6 @@
 {
   "name": "next",
-  "version": "16.4.0",
+  "version": "16.4.2",
   "description": "The React Framework",
   "main": "./dist/server/next.js",
   "license": "MIT",
@@ -82,7 +82,7 @@
     "next": "./dist/bin/next"
   },
   "dependencies": {
-    "@next/env": "16.4.0",
+    "@next/env": "16.4.2",
     "@swc/helpers": "0.5.23",
     "baseline-browser-mapping": "^2.9.19",
     "caniuse-lite": "^1.0.30001579",
@@ -112,15 +112,15 @@
     }
   },
   "optionalDependencies": {
-    "sharp": "^0.35.4",
-    "@next/swc-darwin-arm64": "16.4.0",
-    "@next/swc-darwin-x64": "16.4.0",
-    "@next/swc-linux-arm64-gnu": "16.4.0",
-    "@next/swc-linux-arm64-musl": "16.4.0",
-    "@next/swc-linux-x64-gnu": "16.4.0",
-    "@next/swc-linux-x64-musl": "16.4.0",
-    "@next/swc-win32-arm64-msvc": "16.4.0",
-    "@next/swc-win32-x64-msvc": "16.4.0"
+    "sharp": "^0.35.5",
+    "@next/swc-darwin-arm64": "16.4.2",
+    "@next/swc-darwin-x64": "16.4.2",
+    "@next/swc-linux-arm64-gnu": "16.4.2",
+    "@next/swc-linux-arm64-musl": "16.4.2",
+    "@next/swc-linux-x64-gnu": "16.4.2",
+    "@next/swc-linux-x64-musl": "16.4.2",
+    "@next/swc-win32-arm64-msvc": "16.4.2",
+    "@next/swc-win32-x64-msvc": "16.4.2"
   },
   "keywords": [
     "react",

package/.next/standalone/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "1.0.11",
+  "version": "1.0.12-beta.0",
   "description": "Observability and enforcement for AI agent harnesses. 40 built-in policies hooked into 12 of them — Claude Code, Codex, Cursor, Hermes, OpenClaw and more — blocking the tool call before it runs. Local dashboard included, no account needed.",
   "bin": {
     "failproofai": "./dist/cli.mjs",
@@ -81,7 +81,7 @@
     "access": "public"
   },
   "devDependencies": {
-    "@anthropic-ai/sdk": "^0.133.0",
+    "@anthropic-ai/sdk": "^0.135.0",
     "@mdx-js/mdx": "^3.1.1",
     "@tailwindcss/postcss": "^4.3.1",
     "@tanstack/react-virtual": "^3.14.10",
@@ -117,7 +117,7 @@
     "nanoid": "3.3.18",
     "postcss": "8.5.26",
     "eslint-plugin-react-hooks": "7.0.1",
-    "vite": "8.0.16",
+    "vite": "8.1.6",
     "undici": "7.29.1",
     "brace-expansion": "5.0.12",
     "sharp": "0.35.5",
@@ -125,15 +125,15 @@
     "browserslist": "4.28.8"
   },
   "optionalDependencies": {
-    "@failproofai/failproofaid-linux-x64": "1.0.11",
-    "@failproofai/failproofaid-linux-arm64": "1.0.11",
-    "@failproofai/failproofaid-darwin-x64": "1.0.11",
-    "@failproofai/failproofaid-darwin-arm64": "1.0.11"
+    "@failproofai/failproofaid-linux-x64": "1.0.12-beta.0",
+    "@failproofai/failproofaid-linux-arm64": "1.0.12-beta.0",
+    "@failproofai/failproofaid-darwin-x64": "1.0.12-beta.0",
+    "@failproofai/failproofaid-darwin-arm64": "1.0.12-beta.0"
   },
   "failproofaidBinaries": {
-    "linux-x64": "49b11d95dafeb2dfecc3b92d7e18243e6b93706ebc2baf44fee9d8875ee1f90a",
-    "linux-arm64": "720702120b1a2427e8ccf2d53f2e782f1f549c4b2da8880832af5b468eeefab6",
-    "darwin-x64": "8861a67d2155831fa6a3699c59ebcfe7eeabf6c6234ef57b2165b52b78e7e3ca",
-    "darwin-arm64": "4acf268dd92bc928d29feb90a3ca7162bf7505af781ae51f56e7b3899420327a"
+    "linux-x64": "61710dd6261ff0deb1116e390c366c26809bf04bb2e2c16f279b7d79e1819049",
+    "linux-arm64": "5e9501522d35b32790664b4f3b1b90aa1728629f5013df94e72c2e2a11842bd2",
+    "darwin-x64": "e9d195cf30b6bc2427b7cbe89e354cc8dab7ae02e7c45a7e44a941eda84c2674",
+    "darwin-arm64": "d70ae3a3b8073ace0852a20671dba3d32f380b97ed4a01f5791a13d2fa12e63b"
   }
 }

package/.next/standalone/sdk/python/CHANGELOG.md

@@ -9,6 +9,13 @@ in `failproofai_sdk/_version.py` becomes that release's GitHub Release body. A
 release whose section is missing or empty is refused before anything is built —
 see `scripts/changelog-section.py`.
 
+## 0.0.1b7 — 2026-10-16
+
+Open for the next release. `0.0.1b6` published on 2026-10-16 and the `bump` job
+moved the version here automatically; nothing has landed against `0.0.1b7` yet.
+Add entries as changes merge — this section becomes the GitHub Release body when
+it ships.
+
 ## 0.0.1b6 — 2026-10-15
 
 ### Features

package/.next/standalone/sdk/python/failproofai_sdk/_version.py

@@ -1 +1 @@
-__version__ = "0.0.1b6"
+__version__ = "0.0.1b7"

package/.next/standalone/sdk/python/pyproject.toml

@@ -74,6 +74,25 @@ llamaindex = ["llama-index-core>=0.14.23,<0.15"]
 pydantic-ai = ["pydantic-ai-slim>=2.0,<3"]      # 2.0 removed Agent(instrument=...)
 otel = ["opentelemetry-sdk>=1.39,<2"]          # optional SpanExporter / processor APIs
 
+# Read by uv only when it resolves uv.lock, the dev/test lockfile. It is not package
+# metadata, so it never reaches anyone installing `failproofai-sdk[crewai]`.
+#
+# crewai pins `mcp~=1.28.1`, and mcp 1.8.0 through 1.29.1 carry GHSA-84m7-p3x7-pcfv
+# (unbounded Streamable HTTP sessions). The fix, 1.30.0, is outside that pin, so no
+# in-range update reaches it; this is the uv equivalent of an npm `overrides` entry.
+# The ceiling keeps crewai on the 1.x API it is written against. Delete this once a
+# crewai release allows 1.30: an override replaces crewai's own requirement outright,
+# so while it is here uv does not check the mcp version crewai asks for.
+#
+# The `uv` entry is the same case one level down. crewai depends on crewai-cli, which
+# pins `uv~=0.11.6`, and every uv before 0.13.4 carries GHSA-hq85-5cpj-mr62 (its
+# bundled CA store trusts an emSign root whose intermediate keys are compromised).
+# crewai-cli only shells out to `uv` from its own project commands, which no test here
+# runs. The ceiling keeps the CLI it calls on one minor. Delete it once a crewai-cli
+# release allows 0.13.4.
+[tool.uv]
+override-dependencies = ["mcp>=1.30.0,<2", "uv>=0.13.4,<0.14"]
+
 [tool.setuptools.dynamic]
 version = { attr = "failproofai_sdk._version.__version__" }