failproofai 1.0.2-beta.8 → 1.0.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "1.0.2-beta.8",
+  "version": "1.0.2",
   "description": "Observability and enforcement for AI agent harnesses. 39 built-in policies hooked into 12 of them — Claude Code, Codex, Cursor, Hermes, OpenClaw and more — blocking the tool call before it runs. Local dashboard included, no account needed.",
   "bin": {
     "failproofai": "./dist/cli.mjs",
@@ -120,15 +120,15 @@
     "sharp": "0.35.0"
   },
   "optionalDependencies": {
-    "@failproofai/failproofaid-linux-x64": "1.0.2-beta.8",
-    "@failproofai/failproofaid-linux-arm64": "1.0.2-beta.8",
-    "@failproofai/failproofaid-darwin-x64": "1.0.2-beta.8",
-    "@failproofai/failproofaid-darwin-arm64": "1.0.2-beta.8"
+    "@failproofai/failproofaid-linux-x64": "1.0.2",
+    "@failproofai/failproofaid-linux-arm64": "1.0.2",
+    "@failproofai/failproofaid-darwin-x64": "1.0.2",
+    "@failproofai/failproofaid-darwin-arm64": "1.0.2"
   },
   "failproofaidBinaries": {
-    "linux-x64": "7b49023fd9351ccdddc066f9560d998e6b582b763ab4ad4253831a2548e99ae1",
-    "linux-arm64": "b43af87cb0ca7e83bfbc053051ef4627ce9594cb7b6a520492689f750302adc1",
-    "darwin-x64": "c03d157deddf78d1d7928aa6d33909e1ff585eace77d5d25090c56c7eb2a9983",
-    "darwin-arm64": "a2489beaf7e580a3e012a45d346c8df5764f426f460c0c6fb9bd7b405ac65366"
+    "linux-x64": "c2afafa22c3516a35737c2a1a47fe16e5caab29c11a62fc8aaef670c9e0a4fae",
+    "linux-arm64": "a93f406ff99ce401d0e1637e716e04383ef28fba06d5351b657593bc71e485af",
+    "darwin-x64": "40eb1484d260d98d85249859ae075fa4f885838d7d4302f73d809a5939fe2b24",
+    "darwin-arm64": "7306cecba6537d8bca9c6b404add0e0226c4ed445c39054dcf4664e18e3b4b43"
   }
 }

package/src/audit/index.ts

@@ -100,6 +100,17 @@ interface ScanOutcome {
   result: TranscriptAuditResult;
   bytesScanned: number;
   detectorState: DetectorSessionState;
+  /**
+   * Whether this result covers the TAIL only, or the whole transcript.
+   *
+   * The caller merges a cached prefix onto the result, which is right for a
+   * resumed scan and wrong for a full one — and a resume that could not be
+   * honoured falls back to a full read RIGHT HERE, several returns away from
+   * the merge. Without this the fallback merged a whole-file result onto a
+   * prefix that already contained it, and every finding before the resume point
+   * was counted twice.
+   */
+  resumed: boolean;
 }
 
 async function scanOneTranscript(
@@ -125,6 +136,7 @@ async function scanOneTranscript(
   // `errors` rather than silently returning an empty hits map.
   let events: NormalizedToolEvent[];
   let bytesScanned = 0;
+  let resumed = false;
   // A resumed scan carries the stateful detectors' state forward across the
   // boundary. Starting them empty would silently change what they find — the
   // re-read detector's countdown spans tool calls, so an edit before the offset
@@ -151,6 +163,7 @@ async function scanOneTranscript(
       events = scan.events;
       bytesScanned = scan.bytesConsumed;
       empty.cwd = scan.cwd ?? "";
+      resumed = true;
     }
   } else {
     // A source with no byte offsets to speak of — a database. Scanned whole,
@@ -160,7 +173,7 @@ async function scanOneTranscript(
   }
 
   if (events.length === 0) {
-    return { result: empty, bytesScanned, detectorState: sessionState };
+    return { result: empty, bytesScanned, detectorState: sessionState, resumed };
   }
 
   const result = empty;
@@ -201,7 +214,7 @@ async function scanOneTranscript(
     }
   }
 
-  return { result, bytesScanned, detectorState: sessionState };
+  return { result, bytesScanned, detectorState: sessionState, resumed };
 }
 
 function formatPolicyExample(_policyName: string, event: NormalizedToolEvent): string {
@@ -447,8 +460,15 @@ async function runAuditInner(opts: RunAuditOptions, startedAt: number): Promise<
     try {
       const scan = await scanOneTranscript(meta, resume);
       // A resumed scan produced hits for the TAIL only; the cached result holds
-      // everything before it. Merging is what makes the two halves one answer.
-      const fresh = cachedPrefix ? mergeIncremental(cachedPrefix, scan.result) : scan.result;
+      // everything before it. Merging is what makes the two halves one answer —
+      // and `scan.resumed`, not `cachedPrefix`, is what says there are two
+      // halves. A resume the reader could not honour (truncated, unparseable
+      // from that offset, rewritten under us) falls back to reading the WHOLE
+      // file, and merging the prefix onto that counted everything before the
+      // resume point twice.
+      const fresh = cachedPrefix && scan.resumed
+        ? mergeIncremental(cachedPrefix, scan.result)
+        : scan.result;
       if (!opts.noCache) {
         writeCachedTranscriptResult(
           meta.transcriptPath,