failproofai 1.0.4-beta.1 → 1.0.4-beta.4

package/.next/standalone/app/project/[name]/page.tsx

@@ -12,10 +12,6 @@ import { getCachedFactorySessionsByEncodedName } from "@/lib/factory-projects";
 import { getCachedDevinSessionsByEncodedName } from "@/lib/devin-projects";
 import { getCachedAntigravitySessionsByEncodedName } from "@/lib/antigravity-projects";
 import { getCachedGooseSessionsByEncodedName } from "@/lib/goose-projects";
-import { getCachedGrokSessionsByEncodedName } from "@/lib/grok-projects";
-import { getCachedQwenSessionsByEncodedName } from "@/lib/qwen-projects";
-import { getCachedOriSessionsByEncodedName } from "@/lib/ori-projects";
-import { getCachedClineSessionsByEncodedName } from "@/lib/cline-projects";
 import { logWarn } from "@/lib/logger";
 import { decodeFolderName, projectDisplayName, isSyntheticProjectPath } from "@/lib/paths";
 import { notFound } from "next/navigation";
@@ -54,7 +50,7 @@ export default async function ProjectPage({ params }: ProjectPageProps) {
   }
   // Note: decodeFolderName is lossy when cwds contain `-` (every `-` becomes `/`),
   // so each external CLI looks up sessions by re-encoding cwd and matching the slug.
-  const [codex, copilot, cursor, opencode, pi, hermes, openclaw, factory, devin, antigravity, goose, grok, qwen, ori, cline] = await Promise.all([
+  const [codex, copilot, cursor, opencode, pi, hermes, openclaw, factory, devin, antigravity, goose] = await Promise.all([
     getCachedCodexSessionsByEncodedName(name),
     getCachedCopilotSessionsByEncodedName(name),
     getCachedCursorSessionsByEncodedName(name),
@@ -66,10 +62,6 @@ export default async function ProjectPage({ params }: ProjectPageProps) {
     getCachedDevinSessionsByEncodedName(name),
     getCachedAntigravitySessionsByEncodedName(name),
     getCachedGooseSessionsByEncodedName(name),
-    getCachedGrokSessionsByEncodedName(name),
-    getCachedQwenSessionsByEncodedName(name),
-    getCachedOriSessionsByEncodedName(name),
-    getCachedClineSessionsByEncodedName(name),
   ]);
   const codexSessions = codex.sessions;
   const copilotSessions = copilot.sessions;
@@ -82,10 +74,6 @@ export default async function ProjectPage({ params }: ProjectPageProps) {
   const devinSessions = devin.sessions;
   const antigravitySessions = antigravity.sessions;
   const gooseSessions = goose.sessions;
-  const grokSessions = grok.sessions;
-  const qwenSessions = qwen.sessions;
-  const oriSessions = ori.sessions;
-  const clineSessions = cline.sessions;
 
   if (
     !claudeExists &&
@@ -99,11 +87,7 @@ export default async function ProjectPage({ params }: ProjectPageProps) {
     factorySessions.length === 0 &&
     devinSessions.length === 0 &&
     antigravitySessions.length === 0 &&
-    gooseSessions.length === 0 &&
-    grokSessions.length === 0 &&
-    qwenSessions.length === 0 &&
-    oriSessions.length === 0 &&
-    clineSessions.length === 0
+    gooseSessions.length === 0
   ) {
     notFound();
   }
@@ -112,7 +96,7 @@ export default async function ProjectPage({ params }: ProjectPageProps) {
   // `decodeFolderName(name)` is ambiguous for cwds containing `-` (every `-`
   // becomes `/`). Each external transcript records the literal cwd, so they
   // round-trip correctly. First non-null wins (Codex → Copilot → Cursor → OpenCode → Pi).
-  const canonicalRoot = codex.cwd ?? copilot.cwd ?? cursor.cwd ?? opencode.cwd ?? pi.cwd ?? hermes.cwd ?? openclaw.cwd ?? factory.cwd ?? devin.cwd ?? antigravity.cwd ?? goose.cwd ?? grok.cwd ?? qwen.cwd ?? decodedName;
+  const canonicalRoot = codex.cwd ?? copilot.cwd ?? cursor.cwd ?? opencode.cwd ?? pi.cwd ?? hermes.cwd ?? openclaw.cwd ?? factory.cwd ?? devin.cwd ?? antigravity.cwd ?? goose.cwd ?? decodedName;
 
   // Project header metadata
   let lastModified: Date | null = null;
@@ -126,7 +110,7 @@ export default async function ProjectPage({ params }: ProjectPageProps) {
       logWarn(`Failed to get stats for project ${decodedName}:`, error);
     }
   }
-  const newestExternal = [codexSessions[0], copilotSessions[0], cursorSessions[0], opencodeSessions[0], piSessions[0], hermesSessions[0], openclawSessions[0], factorySessions[0], devinSessions[0], antigravitySessions[0], gooseSessions[0], grokSessions[0], qwenSessions[0], oriSessions[0], clineSessions[0]]
+  const newestExternal = [codexSessions[0], copilotSessions[0], cursorSessions[0], opencodeSessions[0], piSessions[0], hermesSessions[0], openclawSessions[0], factorySessions[0], devinSessions[0], antigravitySessions[0], gooseSessions[0]]
     .filter((s): s is SessionFile => !!s)
     .map((s) => s.lastModified)
     .reduce<Date | null>((acc, d) => (!acc || d.getTime() > acc.getTime() ? d : acc), null);
@@ -148,10 +132,6 @@ export default async function ProjectPage({ params }: ProjectPageProps) {
     ...devinSessions,
     ...antigravitySessions,
     ...gooseSessions,
-    ...grokSessions,
-    ...qwenSessions,
-    ...oriSessions,
-    ...clineSessions,
   ].sort((a, b) => b.lastModified.getTime() - a.lastModified.getTime());
 
   // Path line: prefer the Claude storage dir if present (matches existing UX);

package/.next/standalone/fp-cloud-cli/CHANGELOG.md

@@ -3,9 +3,32 @@
 ## 0.0.1b2 — 2026-08-25
 
 Open for the next release. `0.0.1b1` published on 2026-08-24 and the `bump` job
-moved the version here automatically; nothing has landed against `0.0.1b2` yet.
-Add entries as changes merge — this section becomes the GitHub Release body when
-it ships.
+moved the version here automatically. Add entries as changes merge — this section
+becomes the GitHub Release body when it ships.
+
+### Fixes
+
+- **Typed errors keep their exit codes under typer 0.27.2.** That release moved
+  `Abort` out of its vendored `typer._click.exceptions`, and `_click_compat`
+  imported all six of its symbols under a single
+  `try: … except ImportError: from click import …`. One missing name was enough
+  to send the whole block to the fallback, binding `ClickException`,
+  `UsageError`, `BadParameter`, `Command` and `Parameter` to the pip `click`
+  distribution — which is *not* the Click Typer runs, and Typer catches only its
+  own. So every typed error escaped its handler: `fp alerts show ghost` exited
+  **1 with an empty stderr** instead of **6** with `no alert named "ghost"`, and
+  likewise for exits 2, 3, 4 and 5. Nothing warned; the CLI imported and every
+  happy path passed. The Click is now decided **once**, on whether `typer._click`
+  exists at all, and every symbol imported from that decision, so a future move
+  fails at import — a CLI that refuses to start — instead of silently flattening
+  the exit-code contract. `Abort` is resolved from `typer.Abort`, which is by
+  construction the class `typer.prompt` raises and typer's own `_main` catches on
+  every version in range. Suite verified green against typer 0.25.1, 0.27.0,
+  0.27.1 and 0.27.2 (#771)
+
+### Dependencies
+
+- typer 0.27.1 → 0.27.2, click 8.4.2 → 8.5.0, posthog 7.42.0 → 7.44.2 (#771)
 
 ## 0.0.1b1 — 2026-08-24
 

package/.next/standalone/fp-cloud-cli/fp_cli/_click_compat.py

@@ -11,9 +11,10 @@ compiles, and every happy path still passes:
   should print ``✗ …`` and exit 5 exits **1 with an empty stderr**, and the
   ``rich_format_error`` hook in ``app.py`` (reached only *after* that catch) never
   runs. Same for the ``UsageError``/``BadParameter`` we raise by hand.
-* ``Abort`` — ``typer.prompt`` raises its own Click's ``Abort`` on closed stdin, so a
-  pip-Click ``except click.Abort`` stops matching and the clean "no TTY, pass a slug"
-  usage error becomes a bare abort.
+* ``Abort`` — ``typer.prompt`` raises the ``Abort`` **typer** exports on closed stdin
+  (0.27.2 moved that class out of the vendored Click entirely), so a pip-Click
+  ``except click.Abort`` stops matching and the clean "no TTY, pass a slug" usage error
+  becomes a bare abort.
 * Options — Typer 0.26+ has no ``Option`` class in its vendored Click *at all*: every
   option in a Typer-built tree is a ``typer.core.TyperOption``, subclassing
   ``Parameter`` directly. ``isinstance(param, click.Option)`` is then quietly always
@@ -27,14 +28,36 @@ again, and that our errors are still the class Typer catches.
 
 from __future__ import annotations
 
+# `Abort` is resolved from `typer` itself rather than from either Click, because it is
+# the one symbol here that is not stably a Click class: typer 0.27.2 moved it out of the
+# vendored `typer._click.exceptions` into a plain `typer.exceptions.Abort(RuntimeError)`.
+# `typer.Abort` tracks that move — it is `click.Abort` before 0.26, the vendored class
+# through 0.27.1, the RuntimeError from 0.27.2 — and it is by construction the class
+# `typer.prompt` raises and typer's own `_main` catches, which is the only property
+# `select.py`'s `except click.Abort` needs.
+from typer import Abort as Abort
+
+# Pick the Click ONCE, on whether typer vendors one at all, then import every symbol
+# from that choice. Deciding per symbol — a single `try` around the whole vendored
+# import block, falling back to pip `click` on any ImportError — is what shipped
+# through 0.27.1 and it failed exactly as silently as this module exists to prevent:
+# 0.27.2 removing `typer._click.exceptions.Abort` made that one missing name rebind ALL
+# SIX symbols to pip Click, so every typed error escaped Typer's handler as exit 1 with
+# an empty stderr. A name that goes missing inside the chosen Click must raise here, at
+# import, where it is a CLI that refuses to start rather than one that silently stops
+# reporting errors.
 try:
-    # typer >= 0.26. pip `click` may well still be installed — it is simply not the
-    # Click in play, so binding to it here would reintroduce the whole class of bug.
-    from typer._click import ClickException, Command, Parameter
-    from typer._click.exceptions import Abort, BadParameter, UsageError
+    import typer._click as _typer_click  # typer >= 0.26 vendors its own Click
 except ImportError:  # typer < 0.26 drives the pip `click` distribution directly
+    _typer_click = None  # type: ignore[assignment]
+
+if _typer_click is not None:
+    # pip `click` may well still be installed — it is simply not the Click in play, so
+    # binding to it here would reintroduce the whole class of bug.
+    from typer._click import ClickException, Command, Parameter
+    from typer._click.exceptions import BadParameter, UsageError
+else:
     from click import (  # type: ignore[assignment]
-        Abort,
         BadParameter,
         ClickException,
         Command,

package/.next/standalone/fp-cloud-cli/fp_cli/permissions.py

@@ -26,6 +26,7 @@ ALL_PERMISSIONS: List[str] = [
     "users:delete",
     "evaluations:read",
     "evaluations:trigger",
+    "evaluations:run",
     "dashboards:read",
     "dashboards:write",
     "dashboards:delete",

package/.next/standalone/fp-cloud-cli/pyproject.toml

@@ -31,7 +31,14 @@ dependencies = [
     # through that — which is what makes both sides of the split work. Import Click from
     # there and nowhere else; `tests/test_click_compat.py` enforces it, because every way
     # this breaks is silent (typed errors collapse to exit 1 with an empty stderr, and the
-    # telemetry flag catalog empties). Suite verified against 0.25.1 and 0.27.0.
+    # telemetry flag catalog empties). Suite verified against 0.25.1, 0.27.0, 0.27.1 and
+    # 0.27.2.
+    #
+    # The split keeps moving INSIDE the vendored tree, so the shim resolves each symbol
+    # separately: 0.27.2 moved `Abort` out of `typer._click.exceptions` into
+    # `typer.exceptions`, and the one all-or-nothing `try/except ImportError` that used to
+    # wrap the vendored import sent every OTHER symbol to pip Click over that single
+    # missing name — 105 tests red, every typed error at exit 1.
     #
     # The floor is 0.13, not 0.12, because 0.12 cannot BUILD this app: the global
     # `--insecure/--secure` option in `app.py` is an `Optional[bool]` with a
@@ -39,7 +46,7 @@ dependencies = [
     # rejects with `TypeError: Secondary flag is not valid for non-boolean flag`.
     # That fires while the command tree is constructed, before any parsing, so
     # `fp --version`, `fp --help` and every subcommand die identically — an
-    # installed CLI that cannot run one command. `uv.lock` pins 0.27.1, so
+    # installed CLI that cannot run one command. `uv.lock` pins 0.27.2, so
     # neither CI nor the publish smoke test ever installed the broken part of the
     # range. Measured across 0.12.0/0.12.3/0.12.5 (all fail) and 0.13.0 upward
     # (all pass).

package/.next/standalone/fp-cloud-cli/tests/test_click_compat.py

@@ -11,6 +11,7 @@ from __future__ import annotations
 import ast
 import pathlib
 
+import pytest
 import typer
 from typer.testing import CliRunner
 
@@ -95,6 +96,59 @@ def test_error_exit_codes_are_distinct_per_class():
     assert issubclass(KeyModeUnsupportedError, _click_compat.ClickException)
 
 
+def test_every_symbol_comes_from_the_click_typer_runs():
+    """No symbol may quietly come from pip Click while Typer is running its own.
+
+    This is the alarm for a *partial* miss. `_click_compat` used to wrap the whole
+    vendored import in one `try: … except ImportError: from click import …`, so a single
+    name disappearing from `typer._click` rebound **all six** symbols to pip Click — and
+    that is not hypothetical: typer 0.27.2 moved `Abort` out of
+    `typer._click.exceptions`, and the fallback fired, and 105 tests went red at once
+    with typed errors collapsing to exit 1. Assert the provenance of each symbol
+    separately, so the next move is one failure naming one symbol.
+    """
+    typer_click = pytest.importorskip(
+        "typer._click", reason="typer < 0.26 has no vendored Click; pip click IS the right one"
+    )
+    wrong = {
+        name: obj.__module__
+        for name in ("ClickException", "UsageError", "BadParameter", "Command", "Parameter")
+        if not (obj := getattr(_click_compat, name)).__module__.startswith(typer_click.__name__)
+    }
+    assert not wrong, f"these came from pip Click, not the Click Typer runs: {wrong}"
+
+
+def test_abort_is_the_one_typer_raises():
+    """`Abort` is the exception NOT to pin to a Click — pin it to Typer.
+
+    It is `click.Abort` before typer 0.26, the vendored class through 0.27.1, and a
+    plain `typer.exceptions.Abort(RuntimeError)` from 0.27.2 on. `typer.Abort` is the
+    class `typer.prompt` raises and typer's own `_main` catches on every one of those,
+    which is the only thing `select.py`'s `except click.Abort` needs to be true.
+    """
+    assert _click_compat.Abort is typer.Abort
+
+
+def test_hand_raised_usage_errors_reach_typers_handler():
+    """The other half of the contract: `UsageError`/`BadParameter` we raise ourselves.
+
+    `test_typed_errors_reach_typers_handler` covers the `ClickException` subclasses in
+    `errors.py`; these two are raised directly through the shim (`raise
+    click.UsageError(...)`) from a dozen call sites, and bound to the wrong Click they
+    escape uncaught the same way — exit 1, empty stderr, instead of a clean exit 2.
+    """
+    for exc_class in (_click_compat.UsageError, _click_compat.BadParameter):
+        app = typer.Typer()
+
+        @app.command()
+        def boom() -> None:
+            raise exc_class("bad input")
+
+        result = CliRunner().invoke(app, [])
+        assert result.exit_code == 2, (exc_class, result.output)
+        assert "bad input" in result.output
+
+
 def test_is_option_recognises_typer_options():
     """Typer's vendored Click has no `Option` class, so `isinstance` cannot answer this.
 

package/.next/standalone/fp-cloud-cli/uv.lock

@@ -208,14 +208,11 @@ wheels = [
 
 [[package]]
 name = "click"
-version = "8.4.2"
+version = "8.5.0"
 source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "colorama", marker = "sys_platform == 'win32'" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/76/d4/81420972a676e8ffea40450d8c8c92943e7218a78fe9b64359836cc9876b/click-8.4.2.tar.gz", hash = "sha256:9a6cea6e60b17ebe0a44c5cc636d94f09bd66142c1cd7d8b4cd731c4917a15f6", size = 338000, upload-time = "2026-06-24T17:45:15.148Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/c7/0e/7fa0ef50764b67090eca4114772a2abf8b6148198475e54c660b97caeee6/click-8.5.0.tar.gz", hash = "sha256:ba0d2089de75ea0310e2dde03160e6ca10009947fb95a182f9b54021bb272e34", size = 382235, upload-time = "2026-08-26T13:33:14.56Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/fb/e2/79c688af8b210d232694e31e59da9f6ec747bae31c3f5946e4e9b98860d5/click-8.4.2-py3-none-any.whl", hash = "sha256:e6f9f66136c816745b9d65817da91d61d957fb16e02e4dcd0552553c5a197b76", size = 119243, upload-time = "2026-06-24T17:45:13.73Z" },
+    { url = "https://files.pythonhosted.org/packages/58/50/6c0d534c5f134586a8e1ba4e330569e32f057e33372ae556463212fb4cd3/click-8.5.0-py3-none-any.whl", hash = "sha256:255bc9599cf7748b4b1a446ccc735421bd08a2ae529a8b88597d3de5664ee360", size = 125251, upload-time = "2026-08-26T13:33:12.928Z" },
 ]
 
 [[package]]
@@ -375,7 +372,7 @@ wheels = [
 
 [[package]]
 name = "posthog"
-version = "7.42.0"
+version = "7.47.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "backoff" },
@@ -383,9 +380,9 @@ dependencies = [
     { name = "requests" },
     { name = "typing-extensions" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/79/97/32cc0a72d7896cc2d27d442c75c9d24cc77d0140be9f5e98df7f4ce98f6a/posthog-7.42.0.tar.gz", hash = "sha256:c7e9297446208d413c3071348f101f4c05e32fba4228ac0a85e9d0014c2a274e", size = 469662, upload-time = "2026-08-21T12:57:15.05Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/e4/1b/61eccf2257847def7d01ccae29f9680156cb1cd2b4f00d3e9afaabe236fa/posthog-7.47.0.tar.gz", hash = "sha256:62767af8b0808cb103da37aa3974e728467fed9527e4f201f23e718740debd30", size = 508993, upload-time = "2026-09-04T16:52:31.715Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/31/f0/46e28b947a19c992ad7289931d3197358cfdf4980b33317b5e7cf9c24abe/posthog-7.42.0-py3-none-any.whl", hash = "sha256:6429c9a4145572a8f54ab00330bbfe987340025d3a464212505be814b2b0950d", size = 559119, upload-time = "2026-08-21T12:57:13.299Z" },
+    { url = "https://files.pythonhosted.org/packages/a6/28/16b9b229b9c2380211249377df5bbb4c33cb8b224b7b27ecd46c89bcedac/posthog-7.47.0-py3-none-any.whl", hash = "sha256:c87daf7830eb5ef779d0ff1ec25b5de6d316926d6bbbcde74b80e055172a0ddc", size = 601509, upload-time = "2026-09-04T16:52:29.935Z" },
 ]
 
 [[package]]
@@ -520,7 +517,7 @@ wheels = [
 
 [[package]]
 name = "typer"
-version = "0.27.1"
+version = "0.27.2"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "annotated-doc" },
@@ -528,9 +525,9 @@ dependencies = [
     { name = "rich" },
     { name = "shellingham" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/ae/40/4a3db7990d1f62a53182aa96eaef57aeb2886a27f90a195bc66713565d31/typer-0.27.1.tar.gz", hash = "sha256:a79bef8469a79c45498e7b814ecf8d603cc7644e9acbd9e19cac0334240b18df", size = 203994, upload-time = "2026-08-03T14:41:03.438Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/16/f7/57713ba479fd405eb76de31404b2c744c289e336b2d999511ebf51e496f7/typer-0.27.2.tar.gz", hash = "sha256:269b7eb9d3c202ca84b4bc9618cb04ebb43d3d4d1e567e4c768607232c05f945", size = 204045, upload-time = "2026-08-28T10:26:55.046Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/43/89/9518bc0c3929bee36b3a4a8e3daddd6e03f92f9961c66d4983b837160543/typer-0.27.1-py3-none-any.whl", hash = "sha256:53150287edd11baeb4e4722c8e394fcdf8181c0ae89485cba8d25c778d5edd56", size = 122874, upload-time = "2026-08-03T14:41:04.391Z" },
+    { url = "https://files.pythonhosted.org/packages/dc/bf/205d0004930ede8f542fb58f601526fccf4ae7626075ca1e6c4de5d3d652/typer-0.27.2-py3-none-any.whl", hash = "sha256:b3a5fc4342d5fc8fda8fc3010b1cf117e9249aab7fae800c2eff62fd3842d97d", size = 123130, upload-time = "2026-08-28T10:26:53.752Z" },
 ]
 
 [[package]]

package/.next/standalone/lib/auth/api-server-client.ts

@@ -253,6 +253,34 @@ export interface AuditReportBody {
     last_seen?: string;
     examples: string[];
   }[];
+  /**
+   * Credentials this machine found in its own transcripts.
+   *
+   * Optional on the wire, so a CLI newer than the api-server sends a field the
+   * server ignores rather than failing the whole digest — the harmful counts
+   * are the older half of the contract and must keep arriving either way.
+   *
+   * Every field here is a mask, a label, a length or a location. There is no
+   * shape of this object that carries a secret, because the record it is built
+   * from never stores one: `recordLeaks` fingerprints at detection time and
+   * keeps only the masked rendering.
+   */
+  leaks?: {
+    id: string;
+    display: string;
+    label: string;
+    length: number;
+    attributed: boolean;
+    name: string | null;
+    confidence: string;
+    first_seen: string;
+    last_seen: string;
+    occurrences: number;
+    cli: string;
+    project: string;
+    mechanism: string;
+    direction: "input" | "result";
+  }[];
 }
 
 export interface AuditReportResult {

package/.next/standalone/lib/claude-sessions.ts

@@ -4,8 +4,14 @@
  * Claude stores transcripts at:
  *   <CLAUDE_PROJECTS_PATH>/<encoded-cwd>/<sessionId>.jsonl
  *
- * Subagent transcripts (when a session spawned subagents) live alongside:
+ * Subagent transcripts (when a session spawned subagents) live alongside, in two
+ * shapes — a direct child, and one nested per workflow run:
  *   <CLAUDE_PROJECTS_PATH>/<encoded-cwd>/<sessionId>/subagents/<agentId>.jsonl
+ *   <CLAUDE_PROJECTS_PATH>/<encoded-cwd>/<sessionId>/subagents/workflows/<runId>/<agentId>.jsonl
+ *
+ * Everything below `subagents/` is walked to a bounded depth rather than one
+ * level, because the second shape arrived after this module was written and the
+ * miss was most of the corpus. See `collectSubagentTranscripts`.
  *
  * The parser for these files lives in `lib/log-entries.ts` (`parseLogContent`,
  * `parseSessionLog`). This module exposes discovery only — the audit pipeline
@@ -70,6 +76,99 @@ export function listClaudeProjects(): ClaudeProjectFolder[] {
 /** Lists every JSONL transcript under one Claude project folder, including
  *  subagent transcripts under `<sessionId>/subagents/`. Returns [] on missing
  *  or unreadable paths. */
+/**
+ * Depth of nesting allowed below `subagents/`.
+ *
+ * The two shapes that exist today need 0 and 2 (`<agent>.jsonl` and
+ * `workflows/<runId>/<agent>.jsonl`). The cap is here so an unexpected layout —
+ * or a symlink cycle a future Claude build introduces — costs a bounded walk
+ * rather than an audit that never returns, and it is deliberately loose enough
+ * that a third shape lands inside it without another release.
+ */
+const MAX_SUBAGENT_DEPTH = 5;
+
+/**
+ * Collect every `.jsonl` beneath a session's `subagents/` directory.
+ *
+ * This used to read only the DIRECT children of `subagents/`, which was correct
+ * for the layout Claude shipped when it was written and silently wrong the day
+ * workflow runs started nesting their agents one level further down. On a
+ * machine that uses them the miss is most of the corpus: 1,839 transcripts on
+ * disk, 1,741 under `subagents/`, and 1,679 of those inside
+ * `subagents/workflows/<runId>/` — so the audit was walking 160 files, 8.7% of
+ * the evidence, and reporting the result as though it had read everything.
+ *
+ * ## Session ids come from the relative path, not the basename
+ *
+ * Every workflow run writes a `journal.jsonl` beside its agents, so basenames
+ * are NOT unique below this directory — 1,741 files share 1,613 distinct names
+ * on the machine this was found on. A basename id would collide those 128 files
+ * onto ~one row each, and `sessionId` is what the cache, the per-session
+ * detector state and the example attribution are keyed by, so the collision
+ * would silently merge unrelated sessions rather than fail.
+ *
+ * Nor is the path below `subagents/` unique on its own. A workflow run id is
+ * reused when its session is resumed, so `wf_3d609e92-a38/journal.jsonl` exists
+ * under two different parent sessions in the same project — found by asserting
+ * uniqueness over the real corpus, not by reasoning about it.
+ *
+ * The id is therefore the PARENT SESSION id followed by the path relative to
+ * `subagents/`, minus the extension, joined with `__`:
+ * `<parentUuid>__workflows__wf_123__agent-abc`. That is a filesystem path
+ * within the project, so it is unique by construction rather than by argument,
+ * and it names the session the subagent belongs to. `__` is safe as the joiner
+ * because no id Claude generates contains one — verified against 1,741 real
+ * files, zero hits. Top-level session ids are untouched.
+ *
+ * Symlinks are not followed. Nothing in the layout uses them, and following one
+ * is how a directory walk turns into an infinite loop.
+ */
+function collectSubagentTranscripts(
+  dir: string,
+  relPrefix: string,
+  project: ClaudeProjectFolder,
+  out: ClaudeTranscriptFile[],
+  depth: number,
+): void {
+  if (depth > MAX_SUBAGENT_DEPTH) return;
+  let entries: import("node:fs").Dirent[];
+  try {
+    entries = readdirSync(dir, { withFileTypes: true });
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    if (entry.isSymbolicLink()) continue;
+    if (entry.isDirectory()) {
+      collectSubagentTranscripts(
+        join(dir, entry.name),
+        relPrefix ? `${relPrefix}__${entry.name}` : entry.name,
+        project,
+        out,
+        depth + 1,
+      );
+      continue;
+    }
+    if (!entry.isFile() || !entry.name.endsWith(".jsonl")) continue;
+    const stem = entry.name.slice(0, -".jsonl".length);
+    const transcriptPath = join(dir, entry.name);
+    try {
+      const s = statSync(transcriptPath);
+      out.push({
+        projectName: project.name,
+        cwd: project.cwd,
+        sessionId: relPrefix ? `${relPrefix}__${stem}` : stem,
+        transcriptPath,
+        mtimeMs: s.mtimeMs,
+        sizeBytes: s.size,
+        isSubagent: true,
+      });
+    } catch {
+      // unreadable — skip
+    }
+  }
+}
+
 export function listClaudeTranscripts(project: ClaudeProjectFolder): ClaudeTranscriptFile[] {
   const out: ClaudeTranscriptFile[] = [];
   let entries: import("node:fs").Dirent[];
@@ -99,34 +198,9 @@ export function listClaudeTranscripts(project: ClaudeProjectFolder): ClaudeTrans
         // unreadable — skip
       }
     } else if (entry.isDirectory() && UUID_RE.test(entry.name)) {
-      // Subagent transcripts at <sessionId>/subagents/<agentId>.jsonl
       const subDir = join(project.path, entry.name, "subagents");
       if (!existsSync(subDir)) continue;
-      let subEntries: import("node:fs").Dirent[];
-      try {
-        subEntries = readdirSync(subDir, { withFileTypes: true });
-      } catch {
-        continue;
-      }
-      for (const sub of subEntries) {
-        if (!sub.isFile() || !sub.name.endsWith(".jsonl")) continue;
-        const agentId = sub.name.slice(0, -".jsonl".length);
-        const transcriptPath = join(subDir, sub.name);
-        try {
-          const s = statSync(transcriptPath);
-          out.push({
-            projectName: project.name,
-            cwd: project.cwd,
-            sessionId: agentId,
-            transcriptPath,
-            mtimeMs: s.mtimeMs,
-            sizeBytes: s.size,
-            isSubagent: true,
-          });
-        } catch {
-          // unreadable — skip
-        }
-      }
+      collectSubagentTranscripts(subDir, entry.name, project, out, 0);
     }
   }
 

package/.next/standalone/lib/cli-registry.ts

@@ -27,7 +27,7 @@
 import type { IntegrationType } from "@/src/hooks/types";
 
 /** Canonical CLI ids the registry knows about. Mirrors `INTEGRATION_TYPES`. */
-export const KNOWN_CLI_IDS = ["claude", "codex", "copilot", "cursor", "opencode", "pi", "hermes", "openclaw", "factory", "devin", "antigravity", "goose", "grok", "qwen", "ori", "cline"] as const satisfies readonly IntegrationType[];
+export const KNOWN_CLI_IDS = ["claude", "codex", "copilot", "cursor", "opencode", "pi", "hermes", "openclaw", "factory", "devin", "antigravity", "goose"] as const satisfies readonly IntegrationType[];
 export type CliId = (typeof KNOWN_CLI_IDS)[number];
 
 /** Per-CLI metadata consumed by the dashboard. */
@@ -99,38 +99,6 @@ const CLI_ENTRIES: Record<CliId, CliEntry> = {
     label: "Goose",
     badgeClasses: "bg-lime-500/10 text-lime-400 border-lime-500/20",
   },
-  grok: {
-    id: "grok",
-    label: "grok CLI",
-    // Neutral zinc, matching the design system's `--color-default`. Deliberately
-    // NOT a status hue: green/amber/red carry health meaning in this dashboard
-    // and must never be spent on identity. Neutral also happens to suit xAI's
-    // monochrome brand, and it is maximally far from qwen's magenta — the two
-    // were previously indistinguishable.
-    badgeClasses: "bg-zinc-500/10 text-zinc-200 border-zinc-500/20",
-  },
-  qwen: {
-    id: "qwen",
-    label: "Qwen Code",
-    // Magenta — the opposite pole from grok's neutral, and outside the
-    // status set (success/amber/orange/error) so it reads as identity.
-    badgeClasses: "bg-fuchsia-500/10 text-fuchsia-400 border-fuchsia-500/20",
-  },
-  ori: {
-    id: "ori",
-    label: "Ori",
-    // Sky — the badge set must be UNIQUE per CLI (a test asserts it), and
-    // violet/teal were already taken. Still outside the status set
-    // (success/amber/orange/error) so it reads as identity, not state.
-    badgeClasses: "bg-sky-500/10 text-sky-400 border-sky-500/20",
-  },
-  cline: {
-    id: "cline",
-    label: "Cline",
-    // Stone — the remaining neutral that is not zinc (grok's) and not a status
-    // colour.
-    badgeClasses: "bg-stone-500/10 text-stone-300 border-stone-500/20",
-  },
 };
 
 export function getCliEntry(id: string): CliEntry | undefined {

package/.next/standalone/lib/download-session.ts

@@ -125,21 +125,6 @@ export async function resolveDownloadSource(
     return path ? { kind: "file", path } : null;
   }
 
-  if (cli === "grok") {
-    // grok writes a real chat_history.jsonl per session directory — stream it
-    // verbatim (no synthesis, like Factory).
-    const { findGrokTranscript } = await import("./grok-sessions");
-    const path = findGrokTranscript(sessionId);
-    return path ? { kind: "file", path } : null;
-  }
-
-  if (cli === "qwen") {
-    // qwen writes a real JSONL transcript per session — stream it verbatim.
-    const { findQwenTranscript } = await import("./qwen-sessions");
-    const path = findQwenTranscript(sessionId);
-    return path ? { kind: "file", path } : null;
-  }
-
   if (cli === "devin") {
     // Devin keeps sessions in SQLite (~/.local/share/devin/cli/sessions.db).
     // Synthesize a JSONL export of the session's raw chat_message rows.
@@ -167,28 +152,6 @@ export async function resolveDownloadSource(
     return { kind: "synthesized", body, contentType: "application/x-ndjson", extension: "jsonl" };
   }
 
-  if (cli === "ori") {
-    // Ori keeps the whole conversation in one SQLite column
-    // (ori_agent_loop_history.prompt). Synthesize a JSONL export from the
-    // parsed entries — there is no per-session file to stream.
-    const { getOriSessionLog } = await import("./ori-sessions");
-    const result = await getOriSessionLog(sessionId);
-    if (!result) return null;
-    const body = result.entries.map((e) => JSON.stringify(e)).join("\n") + "\n";
-    return { kind: "synthesized", body, contentType: "application/x-ndjson", extension: "jsonl" };
-  }
-
-  if (cli === "cline") {
-    // Cline stores a real per-session messages file, but it is a single JSON
-    // document rather than JSONL, so stream the parsed entries as JSONL for
-    // consistency with every other synthesized export.
-    const { getClineSessionLog } = await import("./cline-sessions");
-    const result = await getClineSessionLog(sessionId);
-    if (!result) return null;
-    const body = result.entries.map((e) => JSON.stringify(e)).join("\n") + "\n";
-    return { kind: "synthesized", body, contentType: "application/x-ndjson", extension: "jsonl" };
-  }
-
   // Exhaustive — but TypeScript can't always see CliId is exhausted across the
   // if-chain above, so guard with a runtime fallback.
   const _exhaustive: never = cli;