failproofai 1.0.2-beta.8 → 1.0.2-beta.9

package/.next/standalone/app/actions/pack-actions.ts

@@ -86,7 +86,18 @@ export async function addBundledPackWebAction(): Promise<PackActionResult> {
 }
 
 export async function removePackWebAction(id: string): Promise<PackActionResult> {
-  return removePack(id) ? { ok: true, id } : { ok: false, error: `No installed pack with id ${id}` };
+  // The dashboard always sends an id it read off an installed pack, so the
+  // ambiguous case is unreachable from here — caught anyway, because an
+  // uncaught throw in a server action reaches the browser as a generic failure
+  // with the reason stripped, and "something went wrong" is the least useful
+  // thing this could say.
+  let removed: string | null;
+  try {
+    removed = removePack(id);
+  } catch (err) {
+    return { ok: false, error: err instanceof Error ? err.message : String(err) };
+  }
+  return removed ? { ok: true, id: removed } : { ok: false, error: `No installed pack with id ${id}` };
 }
 
 /**

package/.next/standalone/app/policies/hooks-client.tsx

@@ -25,6 +25,7 @@ import {
 import type { PackPreviewResult } from "@/app/actions/pack-actions";
 import { installHooksWebAction, removeHooksWebAction } from "@/app/actions/install-hooks-web";
 import { updatePolicyParamsAction } from "@/app/actions/update-policy-params";
+import { packPolicyParamKey } from "@/src/hooks/pack-param-key";
 import { useAutoRefresh } from "@/contexts/AutoRefreshContext";
 import { usePostHog } from "@/contexts/PostHogContext";
 import { useUrlParams } from "@/lib/use-url-params";
@@ -1284,13 +1285,26 @@ function PoliciesTab({ onHooksInstallChange }: { onHooksInstallChange?: (install
       return;
     }
     setHooksWarning(null);
+    // A policy name is unique only WITHIN a pack, so `config.policies` — the
+    // flat list across every installed pack — can hold two `block-sudo` rows.
+    // The write below targets (packId, name); matching the optimistic update on
+    // the name alone flipped the OTHER pack's row too, showing a change nothing
+    // persisted until the next reload silently undid it.
+    //
+    // Matched on the pair with no fallback to the name. `PolicyInfo.packId` is
+    // required — every policy comes from a pack — and `togglePackPolicyAction`
+    // takes a `string`, so a row without one is a type error at the call below,
+    // not a case to widen for here. A `packId === undefined ||` guard would only
+    // ever restore the conflation this line exists to remove.
     // Optimistic update
     setConfig((prev) => {
       if (!prev) return prev;
       return {
         ...prev,
         policies: prev.policies.map((p) =>
-          p.name === name ? { ...p, enabled: !currentlyEnabled } : p,
+          p.name === name && p.packId === policy.packId
+            ? { ...p, enabled: !currentlyEnabled }
+            : p,
         ),
         packs: prev.packs.map((pack) =>
           pack.id === policy.packId
@@ -1306,7 +1320,19 @@ function PoliciesTab({ onHooksInstallChange }: { onHooksInstallChange?: (install
     });
     startTransition(async () => {
       try {
-        await togglePackPolicyAction(policy.packId, name, !currentlyEnabled);
+        // The RESULT, not just the absence of a throw. This action reports a
+        // missing pack, an unreadable manifest, or a policy an intervening pack
+        // update removed by RETURNING `{ ok: false, error }` — deliberately,
+        // because none of those is exceptional. Awaiting and discarding it left
+        // the optimistic row showing enforcement that was never written: the
+        // dashboard said a policy was on, and nothing was running it. Every
+        // reachable path there is a stale dashboard, which is the ordinary
+        // state of a tab somebody left open.
+        const result = await togglePackPolicyAction(policy.packId, name, !currentlyEnabled);
+        if (!result.ok) {
+          fireActionError("policy_toggle", result.error ?? "Failed to save policy change.");
+          reload();
+        }
       } catch {
         fireActionError("policy_toggle", "Failed to save policy change.");
         reload();
@@ -1380,7 +1406,14 @@ function PoliciesTab({ onHooksInstallChange }: { onHooksInstallChange?: (install
 
   const handleSaveParams = (params: Record<string, unknown>) => {
     if (!configuringPolicy) return;
-    const policyName = configuringPolicy.name;
+    // A PACK policy is saved under the stable pack-qualified key, because the
+    // bare name is not what the evaluator looks up — it registers pack policies
+    // as `pack/<id>@<version>/<name>`, so a bare key was written, displayed as
+    // saved, and ignored at runtime. Version-less on purpose: a key carrying
+    // the version would be orphaned by the publisher's next release.
+    const policyName = configuringPolicy.packId
+      ? packPolicyParamKey(configuringPolicy.packId, configuringPolicy.name)
+      : configuringPolicy.name;
     setConfiguringPolicy(null);
     startTransition(async () => {
       try {
@@ -1642,8 +1675,12 @@ function PoliciesTab({ onHooksInstallChange }: { onHooksInstallChange?: (install
             </div>
             {/* Policy rows */}
             {policies.map((policy) => (
+              // Keyed by pack AND name: two installed packs may each declare
+              // `block-sudo` in the same category, and a bare name key made
+              // them one React key — React warns and reuses the first row's
+              // state for the second.
               <div
-                key={policy.name}
+                key={`${policy.packId}/${policy.name}`}
                 className="flex items-start gap-3 px-4 py-3 border-b border-border/20 hover:bg-muted/20 transition-colors"
               >
                 <div className="mt-0.5 shrink-0">

package/.next/standalone/fp-cloud-cli/tests/test_pagination.py

@@ -0,0 +1,204 @@
+"""When `--all` stops early, the response must say so.
+
+The defect these pin was measured against a live instance, on the CLI this one
+was moved from:
+
+    fp --json sessions --since 7d --limit 200        -> 200 rows, next_cursor set
+    fp --json sessions --since 7d --all              ->  50 rows   (25x undercount)
+    fp --json sessions --since 7d --all --limit 5000 -> 1,274 rows
+
+`--all` inherits `--limit`'s default of 50 — which is documented and deliberate
+here — but the envelope then hard-coded `next_cursor: null`, so a 4% sample of a
+customer's fleet came back with exit 0, no warning, and a response that read as
+complete. Nothing in the output could tell you otherwise.
+
+The fix (`Walk`, carried through `client.paginate`) is present in this repo and
+was untested when these were written. That combination is the one worth
+guarding: a silent-completeness bug cannot be caught by reading the code, only
+by asserting on what the envelope claims.
+
+So every test here checks the REPORTED completeness, not just the row count.
+
+The fake feed is a real cursor server — it honours `limit` and `cursor` — not a
+list of canned pages. A fixture that ignored `limit` would pass no matter how
+few rows the CLI asked for, which is to say it could not fail on the bug.
+"""
+
+from __future__ import annotations
+
+import json
+
+import httpx
+import pytest
+import respx
+
+from fp_cli import client
+from fp_cli.app import app
+
+from .conftest import BASE_URL as BASE
+
+
+def _feed(key: str, total: int, row):
+    """respx side_effect: a cursor-paginated feed holding ``total`` rows.
+
+    The cursor is the offset of the next row (opaque to the CLI, which only
+    round-trips it). ``limit`` is honoured exactly, so the CLI's own page sizing
+    decides how much of the feed it can actually reach.
+    """
+
+    def handler(request: httpx.Request) -> httpx.Response:
+        params = request.url.params
+        limit = int(params["limit"])
+        offset = int(params.get("cursor") or 0)
+        rows = [row(i) for i in range(offset, min(offset + limit, total))]
+        nxt = offset + len(rows)
+        return httpx.Response(
+            200, json={key: rows, "next_cursor": str(nxt) if nxt < total else None}
+        )
+
+    return handler
+
+
+def _event_row(i: int) -> dict:
+    return {
+        "id": i, "session_id": "s", "agent_id": "a", "event_type": "tool_use",
+        "ts": "2026-08-24T12:00:00Z", "environment": "prod", "summary": f"row {i}",
+    }
+
+
+def _session_row(i: int) -> dict:
+    return {
+        "session_id": f"sess-{i}", "agent_id": "a", "environment": "prod",
+        "last_event_at": "2026-08-24T12:00:00Z", "latest_evaluation": None,
+    }
+
+
+def _eval_row(i: int) -> dict:
+    return {
+        "id": f"eval-{i}", "session_id": "s", "agent_id": "a", "environment": "prod",
+        "status": "done", "scores": {"helpfulness": 0.9}, "created_at": "2026-08-24T12:00:00Z",
+    }
+
+
+# (command, endpoint, server key, envelope key, row builder). Every command that
+# takes `--all`; the bug was reported on `sessions` but lived in the shared
+# walker, so all four had it. `errors` is the one where the two keys differ: it
+# reads the shared errored-events feed (`{"events": …}`) and re-labels it
+# `errors` on the way out.
+FEEDS = [
+    ("events", "/api/events/summary", "events", "events", _event_row),
+    ("sessions", "/api/sessions", "sessions", "sessions", _session_row),
+    ("evals", "/api/evaluations", "evaluations", "evaluations", _eval_row),
+    ("errors", "/api/events/summary", "events", "errors", _event_row),
+]
+IDS = [f[0] for f in FEEDS]
+
+TOTAL = 274  # > the 50 default, and not a multiple of the 200 page size
+
+
+@pytest.mark.parametrize("command,endpoint,server_key,key,row", FEEDS, ids=IDS)
+@respx.mock
+def test_all_stopped_by_the_default_limit_is_reported_not_silent(
+    logged_in, runner, command, endpoint, server_key, key, row
+):
+    """THE REGRESSION. `--all` stopping at 50 is the documented behaviour; saying
+    the feed was exhausted is the bug."""
+    respx.get(f"{BASE}{endpoint}").mock(side_effect=_feed(server_key, TOTAL, row))
+    res = runner.invoke(app, ["--base-url", BASE, "--json", command, "--all"])
+    assert res.exit_code == 0, res.output
+    out = json.loads(res.stdout)
+    assert len(out[key]) == 50, "the documented default bound still applies"
+    assert out["next_cursor"] is not None, (
+        "a walk that stopped on --limit must hand back a resumable cursor; "
+        "null here is the 4%-sample-reported-as-complete bug"
+    )
+
+
+@pytest.mark.parametrize("command,endpoint,server_key,key,row", FEEDS, ids=IDS)
+@respx.mock
+def test_all_that_exhausts_the_feed_reports_complete(
+    logged_in, runner, command, endpoint, server_key, key, row
+):
+    """The other direction, and the reason `truncated` cannot just be "we hit the
+    limit": a walk that took every row must NOT claim there is more."""
+    respx.get(f"{BASE}{endpoint}").mock(side_effect=_feed(server_key, 30, row))
+    res = runner.invoke(app, ["--base-url", BASE, "--json", command, "--all", "--limit", "500"])
+    assert res.exit_code == 0, res.output
+    out = json.loads(res.stdout)
+    assert len(out[key]) == 30
+    assert out["next_cursor"] is None, "an exhausted feed must not look truncated"
+
+
+@respx.mock
+def test_an_explicit_limit_is_honoured_and_reported(logged_in, runner):
+    """`--all --limit N` is how you actually get more than the default, so the
+    bound has to hold exactly and still report the remainder."""
+    respx.get(f"{BASE}/api/sessions").mock(side_effect=_feed("sessions", TOTAL, _session_row))
+    res = runner.invoke(
+        app, ["--base-url", BASE, "--json", "sessions", "--all", "--limit", "220"]
+    )
+    assert res.exit_code == 0, res.output
+    out = json.loads(res.stdout)
+    assert len(out["sessions"]) == 220
+    assert out["next_cursor"] is not None
+
+
+@respx.mock
+def test_all_pages_in_chunks_rather_than_one_giant_request(logged_in, runner):
+    """The walk must actually WALK. Asking for 220 in a single request would work
+    against this fake and fail against a server that caps a page at 200."""
+    route = respx.get(f"{BASE}/api/sessions").mock(
+        side_effect=_feed("sessions", TOTAL, _session_row)
+    )
+    res = runner.invoke(
+        app, ["--base-url", BASE, "--json", "sessions", "--all", "--limit", "220"]
+    )
+    assert res.exit_code == 0, res.output
+    assert route.call_count > 1, "a 220-row walk must span more than one request"
+    for call in route.calls:
+        assert int(call.request.url.params["limit"]) <= 200
+
+
+# --- the walker itself, below the CLI ---------------------------------------
+
+
+def _pages(total: int, page: int):
+    """A `fetch_page` over ``total`` rows, honouring the limit it is given."""
+
+    def fetch(cursor=None, limit=None):
+        offset = int(cursor or 0)
+        size = min(limit or page, page)
+        items = list(range(offset, min(offset + size, total)))
+        nxt = offset + len(items)
+        return client.Page(items=items, next_cursor=str(nxt) if nxt < total else None)
+
+    return fetch
+
+
+def test_walk_records_the_cursor_it_stopped_on():
+    walk = client.Walk()
+    items = list(client.paginate(_pages(500, 200), limit=250, walk=walk))
+    assert len(items) == 250
+    assert walk.truncated is True
+    assert walk.next_cursor is not None, "a bounded walk must be resumable"
+
+
+def test_walk_that_exhausts_the_feed_is_not_flagged_truncated():
+    walk = client.Walk()
+    items = list(client.paginate(_pages(120, 200), limit=500, walk=walk))
+    assert len(items) == 120
+    assert walk.truncated is False
+    assert walk.next_cursor is None
+
+
+def test_truncated_is_not_derivable_from_the_row_count():
+    """The subtle case, and why `Walk` exists at all: a walk whose limit lands
+    EXACTLY on the last row is complete, and one that lands exactly on a page
+    boundary with more behind it is not. Row count cannot tell those apart."""
+    exact = client.Walk()
+    list(client.paginate(_pages(200, 200), limit=200, walk=exact))
+    assert exact.truncated is False, "taking every row is not a truncation"
+
+    boundary = client.Walk()
+    list(client.paginate(_pages(400, 200), limit=200, walk=boundary))
+    assert boundary.truncated is True, "stopping on a boundary with more behind it is"

package/.next/standalone/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "1.0.2-beta.8",
+  "version": "1.0.2-beta.9",
   "description": "Observability and enforcement for AI agent harnesses. 39 built-in policies hooked into 12 of them — Claude Code, Codex, Cursor, Hermes, OpenClaw and more — blocking the tool call before it runs. Local dashboard included, no account needed.",
   "bin": {
     "failproofai": "./dist/cli.mjs",
@@ -120,15 +120,15 @@
     "sharp": "0.35.0"
   },
   "optionalDependencies": {
-    "@failproofai/failproofaid-linux-x64": "1.0.2-beta.8",
-    "@failproofai/failproofaid-linux-arm64": "1.0.2-beta.8",
-    "@failproofai/failproofaid-darwin-x64": "1.0.2-beta.8",
-    "@failproofai/failproofaid-darwin-arm64": "1.0.2-beta.8"
+    "@failproofai/failproofaid-linux-x64": "1.0.2-beta.9",
+    "@failproofai/failproofaid-linux-arm64": "1.0.2-beta.9",
+    "@failproofai/failproofaid-darwin-x64": "1.0.2-beta.9",
+    "@failproofai/failproofaid-darwin-arm64": "1.0.2-beta.9"
   },
   "failproofaidBinaries": {
-    "linux-x64": "7b49023fd9351ccdddc066f9560d998e6b582b763ab4ad4253831a2548e99ae1",
-    "linux-arm64": "b43af87cb0ca7e83bfbc053051ef4627ce9594cb7b6a520492689f750302adc1",
-    "darwin-x64": "c03d157deddf78d1d7928aa6d33909e1ff585eace77d5d25090c56c7eb2a9983",
-    "darwin-arm64": "a2489beaf7e580a3e012a45d346c8df5764f426f460c0c6fb9bd7b405ac65366"
+    "linux-x64": "906b0c8a7502ad6a0494231a2220fff65db7ff8335ad7bdf15b58079a001562f",
+    "linux-arm64": "8b40f161cedf07ec3504dd736c906666d18bf042613af0a6a38f4daae8d7c7d4",
+    "darwin-x64": "7407d02234c24932ac9ece07bca348bd40c7a4edff72e0a8db9ac230a1e28a8c",
+    "darwin-arm64": "77131a4f0c1b9d3e5611ad3f4834542e26e32a404f1311903a1cf7783fe99fee"
   }
 }

package/.next/standalone/server.js

@@ -9,7 +9,7 @@ const currentPort = parseInt(process.env.PORT, 10) || 3000
 const hostname = process.env.HOSTNAME || '0.0.0.0'
 
 let keepAliveTimeout = parseInt(process.env.KEEP_ALIVE_TIMEOUT, 10)
-const nextConfig = {"env":{"NEXT_PUBLIC_APP_VERSION":"1.0.2-beta.8"},"typescript":{"ignoreBuildErrors":false},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.ts","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"instrumentationClientInject":[],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/work/failproofai/failproofai","enablePrerenderSourceMaps":true,"cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":true,"coldCacheBadge":false,"devValidationWorker":true,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"dynamicOnHover":false,"useOffline":false,"varyParams":true,"optimisticRouting":true,"instrumentationClientRouterTransitionEvents":false,"prefetchInlining":{"maxSize":2048,"maxBundleSize":10240},"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":3,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptOperationCache":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"devMemoryThresholdRestart":true,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"requestInsights":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"useTypeScriptCli":true,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":true,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"serverComponentsHmrCancellation":false,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":true,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","turbopackMemoryEvictionMode":"auto","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"useCacheTimeout":54,"instantInsights":{"validationLevel":"warning"},"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.ts","outputFileTracingExcludes":{"*":["node_modules/@img/**","node_modules/sharp/**"]},"turbopack":{"root":"/home/runner/work/failproofai/failproofai"},"repoRoot":"/home/runner/work/failproofai/failproofai","distDirRoot":".next"}
+const nextConfig = {"env":{"NEXT_PUBLIC_APP_VERSION":"1.0.2-beta.9"},"typescript":{"ignoreBuildErrors":false},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.ts","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"instrumentationClientInject":[],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/work/failproofai/failproofai","enablePrerenderSourceMaps":true,"cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":true,"coldCacheBadge":false,"devValidationWorker":true,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"dynamicOnHover":false,"useOffline":false,"varyParams":true,"optimisticRouting":true,"instrumentationClientRouterTransitionEvents":false,"prefetchInlining":{"maxSize":2048,"maxBundleSize":10240},"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":3,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptOperationCache":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"devMemoryThresholdRestart":true,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"requestInsights":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"useTypeScriptCli":true,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":true,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"serverComponentsHmrCancellation":false,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":true,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","turbopackMemoryEvictionMode":"auto","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"useCacheTimeout":54,"instantInsights":{"validationLevel":"warning"},"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.ts","outputFileTracingExcludes":{"*":["node_modules/@img/**","node_modules/sharp/**"]},"turbopack":{"root":"/home/runner/work/failproofai/failproofai"},"repoRoot":"/home/runner/work/failproofai/failproofai","distDirRoot":".next"}
 
 process.env.__NEXT_PRIVATE_STANDALONE_CONFIG = JSON.stringify(nextConfig)
 

package/bin/failproofai.mjs

@@ -1408,11 +1408,19 @@ async function runCli() {
             ],
           },
           {
+            // This screen said "an existing private one still publishes, and
+            // warns" for as long as that was true. It is REFUSED now — exit 1,
+            // nothing created or uploaded — and `--allow-private` was named
+            // nowhere in this help, so the one documented behaviour pointed a
+            // publisher at a command that exits 1 and gave them no way through.
             label: "the repo must be public",
             lines: [
               "Installs are anonymous HTTPS with no credential to offer, so a private",
               "repository publishes to nobody. A repo created here is public for that",
-              "reason; an existing private one still publishes, and warns.",
+              "reason; an existing private one is REFUSED, before anything is built,",
+              "created or uploaded. --allow-private publishes to one anyway, for",
+              "somebody who will hand the three assets over another way — it still",
+              "says plainly that no `policies add` can reach them.",
               "",
               "Only the release matters. Installs read releases/download/<tag>/<asset>",
               "and never touch your git tree — pushing the source is for humans.",
@@ -1444,6 +1452,7 @@ async function runCli() {
               ["--out <dir>", "Where to write the assets. Default: dist-pack."],
               ["--effect <effect>", "enforce or observe. observe records and blocks nothing. Default: enforce."],
               ["--dry-run", "Build the assets, publish nothing. No credential."],
+              ["--allow-private", "Publish to an already-private repo anyway. Nobody can install it."],
             ],
           },
           {