failproofai 1.0.3 → 1.0.4-beta.1

package/README.md

@@ -30,7 +30,7 @@ before they execute.
 
 ## Supported harnesses
 
-Twelve harnesses in two classes are supported: ten coding CLIs, plus two
+Sixteen harnesses in two classes are supported: fourteen coding CLIs, plus two
 gateways: Hermes, OpenClaw. The policy API and session history are shared; which
 events can block varies by harness.
 
@@ -38,9 +38,10 @@ Agents that run in none of them report through the [Python SDK](https://docs.bef
 which gives you tracing, sessions and audits. Enforcement there needs a hook in
 your own runtime — [talk to us](mailto:support@befailproof.ai) and we'll map it.
 
-<!-- A 6-column table instead of inline <img> runs: table columns never re-wrap,
-     so the grid stays 2×6 at any window width (scrolling on very narrow screens
-     instead of collapsing into ragged orphan rows). -->
+<!-- A 7-column table instead of inline <img> runs: table columns never re-wrap,
+     so the grid stays 2×7 at any window width (scrolling on very narrow screens
+     instead of collapsing into ragged orphan rows). Kept at exactly two full
+     rows — 14 CLIs is 7×2, where 6 columns would leave a two-cell orphan row. -->
 <table align="center">
   <tr>
     <td align="center" width="96">
@@ -72,6 +73,8 @@ your own runtime — [talk to us](mailto:support@befailproof.ai) and we'll map i
         </picture>
       </a>
     </td>
+  </tr>
+  <tr>
     <td align="center" width="96">
       <a href="https://opencode.ai/" title="OpenCode">
         <picture>
@@ -88,8 +91,14 @@ your own runtime — [talk to us](mailto:support@befailproof.ai) and we'll map i
         </picture>
       </a>
     </td>
-  </tr>
-  <tr>
+    <td align="center" width="96">
+      <a href="https://grok.com" title="grok CLI (xAI)">
+        <picture>
+          <source media="(prefers-color-scheme: dark)" srcset="assets/logos/grok-dark.svg" />
+          <img src="assets/logos/grok-light.svg" alt="grok CLI" width="56" height="56" />
+        </picture>
+      </a>
+    </td>
     <td align="center" width="96">
       <a href="https://hermes-agent.nousresearch.com/" title="Hermes (hermes-agent)">
         <picture>
@@ -98,6 +107,8 @@ your own runtime — [talk to us](mailto:support@befailproof.ai) and we'll map i
         </picture>
       </a>
     </td>
+  </tr>
+  <tr>
     <td align="center" width="96">
       <a href="https://openclaw.ai/" title="OpenClaw (openclaw gateway)">
         <img src="assets/logos/openclaw.svg" alt="OpenClaw" width="56" height="56" />
@@ -121,6 +132,8 @@ your own runtime — [talk to us](mailto:support@befailproof.ai) and we'll map i
         <img src="assets/logos/antigravity.svg" alt="Antigravity CLI" width="56" height="56" />
       </a>
     </td>
+  </tr>
+  <tr>
     <td align="center" width="96">
       <a href="https://goose-docs.ai/" title="Goose (codename goose)">
         <picture>
@@ -129,6 +142,24 @@ your own runtime — [talk to us](mailto:support@befailproof.ai) and we'll map i
         </picture>
       </a>
     </td>
+    <td align="center" width="96">
+      <a href="https://github.com/QwenLM/qwen-code" title="Qwen Code (qwen)">
+        <img src="assets/logos/qwen.svg" alt="Qwen Code" width="56" height="56" />
+      </a>
+    </td>
+    <td align="center" width="96">
+      <a href="https://openrouter.ai/docs/guides/ori/harness" title="Ori (OpenRouter)">
+        <picture>
+          <source media="(prefers-color-scheme: dark)" srcset="assets/logos/ori-dark.svg" />
+          <img src="assets/logos/ori-light.svg" alt="Ori" width="56" height="56" />
+        </picture>
+      </a>
+    </td>
+    <td align="center" width="96">
+      <a href="https://github.com/cline/cline" title="Cline">
+        <img src="assets/logos/cline.png" alt="Cline" width="56" height="56" />
+      </a>
+    </td>
   </tr>
 </table>
 
@@ -276,7 +307,7 @@ own cluster is available on the Enterprise plan.
 |---|---|
 | [Quickstart](https://docs.befailproof.ai/start/quickstart) | Install, connect a harness, see the first run |
 | [Concepts](https://docs.befailproof.ai/start/concepts) | How the hook system works |
-| [Supported harnesses](https://docs.befailproof.ai/reference/harnesses) | All 12, and what each one can enforce |
+| [Supported harnesses](https://docs.befailproof.ai/reference/harnesses) | All 16, and what each one can enforce |
 
 | Observe | |
 |---|---|

package/bin/failproofai.mjs

@@ -76,6 +76,19 @@ let lastSubcommand = null;
 // with the right event name. Mirrors the cli_install_failure / cli_uninstall_failure
 // pattern below for parity. Cleared back to null after the success track.
 let lastPolicyAction = null;
+/**
+ * Every CLI `policies --install/--uninstall/list --cli` accepts.
+ *
+ * ONE list, referenced from all three flag parsers below. It used to be three
+ * hardcoded copies, and they drifted: grok and qwen were added to the `--hook
+ * --cli` validation and to INTEGRATION_TYPES, but not here, so a real
+ * `policies --install --cli grok` was rejected outright while every unit test
+ * passed. __tests__/hooks/integrations.test.ts asserts this equals
+ * INTEGRATION_TYPES so the next CLI cannot repeat it.
+ */
+const INSTALLABLE_CLIS = ["claude", "codex", "copilot", "cursor", "opencode", "pi", "hermes", "openclaw", "factory", "devin", "antigravity", "goose", "grok", "qwen", "ori", "cline"];
+const VALID_CLIS_USAGE = `Missing value(s) for --cli. Usage: --cli ${INSTALLABLE_CLIS.join(" ")} (or any subset)`;
+
 async function track(name, props) {
   try {
     if (!_telemetry) {
@@ -121,7 +134,7 @@ const hookIdx = args.indexOf("--hook");
 if (hookIdx >= 0) {
   if (!args[hookIdx + 1]) {
     console.error("Error: Missing event type after --hook");
-    console.error("Usage: failproofai --hook <event> [--cli <claude|codex|copilot|cursor|opencode|pi|hermes|openclaw|factory|devin|antigravity|goose>]");
+    console.error("Usage: failproofai --hook <event> [--cli <claude|codex|copilot|cursor|opencode|pi|hermes|openclaw|factory|devin|antigravity|goose|grok|qwen|ori|cline>]");
     process.exit(1);
   }
   const eventType = args[hookIdx + 1];
@@ -143,6 +156,10 @@ if (hookIdx >= 0) {
       || cliArg === "devin"
       || cliArg === "antigravity"
       || cliArg === "goose"
+      || cliArg === "grok"
+      || cliArg === "qwen"
+      || cliArg === "ori"
+      || cliArg === "cline"
     )
       ? cliArg
       : "claude";
@@ -408,7 +425,7 @@ async function runCli() {
             label: "options",
             entries: [
               ["--hook <event>", "PreToolUse, PostToolUse, UserPromptSubmit, Stop, SubagentStop, SessionStart, SessionEnd, PreCompact, Notification, PermissionRequest"],
-              ["--cli <name>", "claude, codex, copilot, cursor, opencode, pi, hermes, openclaw, factory, devin, antigravity, goose. Defaults to claude. It selects which payload shape to expect: each CLI names its events and tool arguments differently, and failproofai canonicalizes them."],
+              ["--cli <name>", "claude, codex, copilot, cursor, opencode, pi, hermes, openclaw, factory, devin, antigravity, goose, ori. Defaults to claude. It selects which payload shape to expect: each CLI names its events and tool arguments differently, and failproofai canonicalizes them."],
             ],
           },
           {
@@ -1669,7 +1686,7 @@ async function runCli() {
     }
 
     // --cli accepts one or more space-separated values, optionally repeated.
-    const VALID_CLIS = new Set(["claude", "codex", "copilot", "cursor", "opencode", "pi", "hermes", "openclaw", "factory", "devin", "antigravity", "goose"]);
+    const VALID_CLIS = new Set(INSTALLABLE_CLIS);
     const cliFlagValues = [];
     const cliConsumedIdxs = new Set();
     const cliFlagIdxs = rest.map((a, i) => (a === "--cli" ? i : -1)).filter((i) => i >= 0);
@@ -1871,7 +1888,7 @@ async function runCli() {
       //   --cli claude codex copilot
       //   --cli claude --cli codex
       // Values are consumed greedily until the next flag or end of argv.
-      const VALID_CLIS = new Set(["claude", "codex", "copilot", "cursor", "opencode", "pi", "hermes", "openclaw", "factory", "devin", "antigravity", "goose"]);
+      const VALID_CLIS = new Set(INSTALLABLE_CLIS);
       const cliFlagValues = [];
       const cliConsumedIdxs = new Set();
       const cliFlagIdxs = subArgs.map((a, i) => (a === "--cli" ? i : -1)).filter((i) => i >= 0);
@@ -1888,7 +1905,7 @@ async function runCli() {
           consumed++;
         }
         if (consumed === 0) {
-          throw new CliError("Missing value(s) for --cli. Usage: --cli claude codex copilot cursor opencode pi hermes openclaw (or any subset)");
+          throw new CliError(VALID_CLIS_USAGE);
         }
       }
 
@@ -1960,7 +1977,7 @@ async function runCli() {
       }
 
       // --cli accepts one or more space-separated values; same parser as install.
-      const VALID_CLIS = new Set(["claude", "codex", "copilot", "cursor", "opencode", "pi", "hermes", "openclaw", "factory", "devin", "antigravity", "goose"]);
+      const VALID_CLIS = new Set(INSTALLABLE_CLIS);
       const cliFlagValues = [];
       const cliConsumedIdxs = new Set();
       const cliFlagIdxs = subArgs.map((a, i) => (a === "--cli" ? i : -1)).filter((i) => i >= 0);
@@ -1977,7 +1994,7 @@ async function runCli() {
           consumed++;
         }
         if (consumed === 0) {
-          throw new CliError("Missing value(s) for --cli. Usage: --cli claude codex copilot cursor opencode pi hermes openclaw (or any subset)");
+          throw new CliError(VALID_CLIS_USAGE);
         }
       }