failproofai 1.0.4-beta.6 → 1.0.4-beta.7

package/.next/standalone/server.js

@@ -9,7 +9,7 @@ const currentPort = parseInt(process.env.PORT, 10) || 3000
 const hostname = process.env.HOSTNAME || '0.0.0.0'
 
 let keepAliveTimeout = parseInt(process.env.KEEP_ALIVE_TIMEOUT, 10)
-const nextConfig = {"env":{"NEXT_PUBLIC_APP_VERSION":"1.0.4-beta.6"},"typescript":{"ignoreBuildErrors":false},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.ts","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"instrumentationClientInject":[],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/work/failproofai/failproofai","enablePrerenderSourceMaps":true,"cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":true,"coldCacheBadge":false,"devValidationWorker":true,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"dynamicOnHover":false,"useOffline":false,"varyParams":true,"optimisticRouting":true,"instrumentationClientRouterTransitionEvents":false,"prefetchInlining":{"maxSize":2048,"maxBundleSize":10240},"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":3,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptOperationCache":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"devMemoryThresholdRestart":true,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"requestInsights":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"useTypeScriptCli":true,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":true,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"serverComponentsHmrCancellation":false,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":true,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","turbopackMemoryEvictionMode":"auto","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"useCacheTimeout":54,"instantInsights":{"validationLevel":"warning"},"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.ts","outputFileTracingExcludes":{"*":["node_modules/@img/**","node_modules/sharp/**"]},"turbopack":{"root":"/home/runner/work/failproofai/failproofai"},"repoRoot":"/home/runner/work/failproofai/failproofai","distDirRoot":".next"}
+const nextConfig = {"env":{"NEXT_PUBLIC_APP_VERSION":"1.0.4-beta.7"},"typescript":{"ignoreBuildErrors":false},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.ts","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"instrumentationClientInject":[],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":"/home/runner/work/failproofai/failproofai","enablePrerenderSourceMaps":true,"cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":true,"coldCacheBadge":false,"devValidationWorker":true,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"dynamicOnHover":false,"useOffline":false,"varyParams":true,"optimisticRouting":true,"instrumentationClientRouterTransitionEvents":false,"prefetchInlining":{"maxSize":2048,"maxBundleSize":10240},"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":3,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptOperationCache":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"devMemoryThresholdRestart":true,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"requestInsights":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"useTypeScriptCli":true,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":true,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"serverComponentsHmrCancellation":false,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":true,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","turbopackMemoryEvictionMode":"auto","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"useCacheTimeout":54,"instantInsights":{"validationLevel":"warning"},"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.ts","outputFileTracingExcludes":{"*":["node_modules/@img/**","node_modules/sharp/**"]},"turbopack":{"root":"/home/runner/work/failproofai/failproofai"},"repoRoot":"/home/runner/work/failproofai/failproofai","distDirRoot":".next"}
 
 process.env.__NEXT_PRIVATE_STANDALONE_CONFIG = JSON.stringify(nextConfig)
 

package/dist/cli.mjs

@@ -29,7 +29,7 @@ var __esm = (fn, res, err) => () => {
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // package.json
-var version2 = "1.0.4-beta.6", package_default;
+var version2 = "1.0.4-beta.7", package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "failproofai",
@@ -154,16 +154,16 @@ var init_package = __esm(() => {
       browserslist: "4.28.8"
     },
     optionalDependencies: {
-      "@failproofai/failproofaid-linux-x64": "1.0.4-beta.6",
-      "@failproofai/failproofaid-linux-arm64": "1.0.4-beta.6",
-      "@failproofai/failproofaid-darwin-x64": "1.0.4-beta.6",
-      "@failproofai/failproofaid-darwin-arm64": "1.0.4-beta.6"
+      "@failproofai/failproofaid-linux-x64": "1.0.4-beta.7",
+      "@failproofai/failproofaid-linux-arm64": "1.0.4-beta.7",
+      "@failproofai/failproofaid-darwin-x64": "1.0.4-beta.7",
+      "@failproofai/failproofaid-darwin-arm64": "1.0.4-beta.7"
     },
     failproofaidBinaries: {
-      "linux-x64": "24118b8bd058cc5d8711053c4c77cdca9361c12dbf0f421a757d33f07596d428",
-      "linux-arm64": "b4278c34a288de2c747bcebcc623d8fd5bda3a1f1e55800926eb1a4b89f0a5e9",
-      "darwin-x64": "ecb66699f45f605b0d54ac9e4bac360ac11e4e136442dcccdd083514d77c7d42",
-      "darwin-arm64": "b3dbad58bda960ef9481f90bc5085ba8624b2472519cc0bf212a0e8451dd2db4"
+      "linux-x64": "e59735a8f94cd8ac697b2bd67aafdd8d76a8394d53db229876980cc13a18f07e",
+      "linux-arm64": "b9ce50dd2f79b55f4f7112add265a776a4a6d002c2a56f971e666fbb796f3906",
+      "darwin-x64": "b46efc8ec33945a5cc26b7bb288fb87cea65b5983bd83094b5e607d53b8eda4c",
+      "darwin-arm64": "a8cc6112cee5ca8a7d517900e9ce32118855135980f22979fa0ff7aa6f68d954"
     }
   };
 });
@@ -3874,8 +3874,8 @@ var init_builtin_policies = __esm(() => {
     [/sk-ant-oat01-[A-Za-z0-9\-_]{20,}/, "Anthropic OAuth token"],
     [/sk-ant-[A-Za-z0-9\-_]{20,}/, "Anthropic API key"],
     [/sk-proj-[A-Za-z0-9\-_]{20,}/, "OpenAI project API key"],
-    [/sk-svcacct-[A-Za-z0-9\-_]{20,}/, "OpenAI service-account key"],
-    [/sk-admin-[A-Za-z0-9\-_]{20,}/, "OpenAI admin key"],
+    [/(?<!\w)sk-svcacct-[A-Za-z0-9\-_]{20,}/, "OpenAI service-account key"],
+    [/(?<!\w)sk-admin-[A-Za-z0-9\-_]{20,}/, "OpenAI admin key"],
     [/sk-or-v1-[A-Za-z0-9\-_]{20,}/, "OpenRouter API key"],
     [/sk-[A-Za-z0-9]{20,}/, "OpenAI-compatible key (issuer unknown)"],
     [/github_pat_[A-Za-z0-9_]{82}/, "GitHub fine-grained token"],
@@ -25190,12 +25190,15 @@ var init_leak_fingerprint = __esm(() => {
 
 // src/audit/macos-notifier.ts
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync as existsSync26, mkdirSync as mkdirSync17, readdirSync as readdirSync16, renameSync as renameSync8, rmSync as rmSync9, writeFileSync as writeFileSync15 } from "node:fs";
+import { chmodSync as chmodSync5, existsSync as existsSync26, mkdirSync as mkdirSync17, readdirSync as readdirSync16, renameSync as renameSync8, rmSync as rmSync9, writeFileSync as writeFileSync15 } from "node:fs";
 import { homedir as homedir24 } from "node:os";
 import { resolve as resolve22 } from "node:path";
 function macNotifierAppPath(home) {
   return resolve22(runDir(home), "..", "bin", "FailproofAI Notifier.app");
 }
+function macNotifierRunnerPath(home) {
+  return resolve22(runDir(home), "..", "bin", "failproofai-notifier.zsh");
+}
 function macNotifierPlistPath() {
   return resolve22(homedir24(), "Library", "LaunchAgents", `${MAC_NOTIFIER_LABEL}.plist`);
 }
@@ -25204,35 +25207,28 @@ function escapeXml2(s) {
 }
 function notifierScript(home) {
   const dir = macNotifyDir(home);
-  return `on run
-	set dropDir to ${JSON.stringify(dir + "/")}
-	set listing to ""
-	try
-		set listing to do shell script "ls -1 " & quoted form of dropDir & " 2>/dev/null"
-	end try
-	repeat with entryName in paragraphs of listing
-		set entryPath to dropDir & (entryName as string)
-		if (entryName as string) is not "" then
-			try
-				set payload to do shell script "cat " & quoted form of entryPath & " 2>/dev/null"
-				do shell script "rm -f " & quoted form of entryPath
-				set lines_ to paragraphs of payload
-				if (count of lines_) is greater than 1 then
-					set noteTitle to item 1 of lines_
-					set noteBody to ""
-					repeat with i from 2 to (count of lines_)
-						if noteBody is not "" then set noteBody to noteBody & " "
-						set noteBody to noteBody & (item i of lines_)
-					end repeat
-					display notification noteBody with title noteTitle
-				end if
-			end try
-		end if
-	end repeat
+  const quotedDir = `'${dir.replace(/'/g, `'\\''`)}'`;
+  return `#!/bin/zsh
+set -u
+setopt NULL_GLOB
+
+drop_dir=${quotedDir}
+
+for entry_path in "$drop_dir"/*; do
+  [ -f "$entry_path" ] || continue
+  note_title=$(/usr/bin/sed -n '1p' "$entry_path")
+  note_body=$(/usr/bin/sed -n '2,$p' "$entry_path" | /usr/bin/tr '\\n' ' ')
+  /bin/rm -f "$entry_path"
+  [ -n "$note_title" ] || continue
+  /usr/bin/osascript - "$note_title" "$note_body" <<'APPLESCRIPT'
+on run argv
+  display notification (item 2 of argv) with title (item 1 of argv)
 end run
+APPLESCRIPT
+done
 `;
 }
-function notifierPlistContents(appPath, watchDir) {
+function notifierPlistContents(runnerPath, watchDir) {
   return `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0">
@@ -25241,7 +25237,7 @@ function notifierPlistContents(appPath, watchDir) {
     <string>${escapeXml2(MAC_NOTIFIER_LABEL)}</string>
     <key>ProgramArguments</key>
     <array>
-        <string>${escapeXml2(resolve22(appPath, "Contents", "MacOS", "applet"))}</string>
+        <string>${escapeXml2(runnerPath)}</string>
     </array>
     <!-- Started only when something is queued, and it exits when the queue is
          empty. RunAtLoad would fire it once at login with nothing to say. -->
@@ -25268,20 +25264,15 @@ function installMacNotifier(home) {
   if (process.platform !== "darwin")
     return { installed: false, reason: "not macOS" };
   try {
-    const app = macNotifierAppPath(home);
+    const runner = macNotifierRunnerPath(home);
     const watch = macNotifyDir(home);
     mkdirSync17(watch, { recursive: true, mode: 448 });
-    mkdirSync17(resolve22(app, ".."), { recursive: true });
-    const scriptPath = resolve22(watch, "..", "notifier.applescript");
-    writeFileSync15(scriptPath, notifierScript(home), { mode: 384 });
-    rmSync9(app, { recursive: true, force: true });
-    run("osacompile", ["-o", app, scriptPath]);
-    rmSync9(scriptPath, { force: true });
-    const plist = resolve22(app, "Contents", "Info.plist");
-    run("defaults", ["write", plist, "CFBundleIdentifier", MAC_NOTIFIER_LABEL]);
-    run("defaults", ["write", plist, "CFBundleName", "failproofai"]);
+    mkdirSync17(resolve22(runner, ".."), { recursive: true });
+    writeFileSync15(runner, notifierScript(home), { mode: 448 });
+    chmodSync5(runner, 448);
+    rmSync9(macNotifierAppPath(home), { recursive: true, force: true });
     mkdirSync17(resolve22(macNotifierPlistPath(), ".."), { recursive: true });
-    writeFileSync15(macNotifierPlistPath(), notifierPlistContents(app, watch), { mode: 420 });
+    writeFileSync15(macNotifierPlistPath(), notifierPlistContents(runner, watch), { mode: 420 });
     const target = `gui/${process.getuid?.() ?? 0}`;
     try {
       run("launchctl", ["bootout", `${target}/${MAC_NOTIFIER_LABEL}`]);
@@ -25300,6 +25291,7 @@ function uninstallMacNotifier(home) {
   } catch {}
   rmSync9(macNotifierPlistPath(), { force: true });
   rmSync9(macNotifierAppPath(home), { recursive: true, force: true });
+  rmSync9(macNotifierRunnerPath(home), { force: true });
   rmSync9(macNotifyDir(home), { recursive: true, force: true });
 }
 function queueMacNotification(id, title, body, home) {
@@ -25323,7 +25315,7 @@ ${body.replace(/\s+/g, " ")}
   }
 }
 function macNotifierInstalled(home) {
-  return existsSync26(macNotifierPlistPath()) && existsSync26(macNotifierAppPath(home));
+  return existsSync26(macNotifierPlistPath()) && existsSync26(macNotifierRunnerPath(home));
 }
 function pruneMacNotifyQueue(home, maxAgeMs = 7 * 86400000) {
   try {
@@ -27431,24 +27423,24 @@ function upsertFinding(record, incoming) {
     });
     return { record, isNew: true };
   }
+  const seen = existing.sightings.some((s) => s.sessionId === sighting.sessionId && s.at === sighting.at && s.mechanism.direction === sighting.mechanism.direction && s.mechanism.summary === sighting.mechanism.summary);
+  if (seen)
+    return { record, isNew: false };
   existing.occurrences += 1;
   if (sighting.at > existing.lastSeen)
     existing.lastSeen = sighting.at;
   if (sighting.at < existing.firstSeen)
     existing.firstSeen = sighting.at;
-  const seen = existing.sightings.some((s) => s.sessionId === sighting.sessionId && s.at === sighting.at);
-  if (!seen) {
-    existing.sightings.push(sighting);
-    existing.sightings.sort((a, b) => a.at.localeCompare(b.at));
-    if (existing.sightings.length > MAX_SIGHTINGS) {
-      existing.sightings.splice(1, existing.sightings.length - MAX_SIGHTINGS);
-    }
+  existing.sightings.push(sighting);
+  existing.sightings.sort((a, b) => a.at.localeCompare(b.at));
+  if (existing.sightings.length > MAX_SIGHTINGS) {
+    existing.sightings.splice(1, existing.sightings.length - MAX_SIGHTINGS);
   }
   return { record, isNew: false };
 }
 function pruneRecord(record, nowMs) {
   const cutoff = new Date(nowMs - FINDING_TTL_DAYS * 86400000).toISOString();
-  const live = record.findings.filter((f) => f.lastSeen >= cutoff);
+  const live = record.findings.filter((f) => !f.lastSeen || !Number.isFinite(Date.parse(f.lastSeen)) || f.lastSeen >= cutoff);
   live.sort((a, b) => a.lastSeen < b.lastSeen ? 1 : a.lastSeen > b.lastSeen ? -1 : 0);
   record.findings = live.slice(0, MAX_FINDINGS);
   return record;
@@ -27730,7 +27722,7 @@ var init_redact_example = __esm(() => {
 
 // src/audit/cache.ts
 import { createHash as createHash8 } from "node:crypto";
-import { existsSync as existsSync32, mkdirSync as mkdirSync21, readFileSync as readFileSync27, writeFileSync as writeFileSync18, chmodSync as chmodSync5, openSync, readSync, closeSync } from "node:fs";
+import { existsSync as existsSync32, mkdirSync as mkdirSync21, readFileSync as readFileSync27, writeFileSync as writeFileSync18, chmodSync as chmodSync6, openSync, readSync, closeSync } from "node:fs";
 import { join as join33 } from "node:path";
 function getEngineVersion() {
   if (cachedEngineVersion)
@@ -27856,7 +27848,7 @@ function writeCachedTranscriptResult(transcriptPath, mtimeMs, sizeBytes, result,
     }
     writeFileSync18(cachePath, JSON.stringify(entry), { encoding: "utf-8", mode: 384 });
     try {
-      chmodSync5(cachePath, 384);
+      chmodSync6(cachePath, 384);
     } catch {}
   } catch {}
 }
@@ -30210,7 +30202,15 @@ Hooks keep enforcing; scheduled audits stay off until it is.
       } catch {}
     }
     pruneOldDaemonBinaries();
-    installMacNotifier();
+    const notifier = installMacNotifier();
+    if (process.platform === "darwin" && !notifier.installed) {
+      hookLogWarn(`macOS notification helper was not installed: ${notifier.reason ?? "unknown error"}`);
+      stdout.write(`
+System notifications could not be installed. Scheduled scans and email alerts
+still work; re-run \`failproofai config\` after checking the local LaunchAgent.
+
+`);
+    }
   }
   const applied = emit("configure_applied", {
     target,
@@ -30789,7 +30789,7 @@ var init_harness_cli = __esm(() => {
 });
 
 // src/hooks/fp-config.ts
-import { chmodSync as chmodSync6, existsSync as existsSync39, mkdirSync as mkdirSync26, readFileSync as readFileSync33, statSync as statSync24, writeFileSync as writeFileSync23 } from "node:fs";
+import { chmodSync as chmodSync7, existsSync as existsSync39, mkdirSync as mkdirSync26, readFileSync as readFileSync33, statSync as statSync24, writeFileSync as writeFileSync23 } from "node:fs";
 function detectLayout2() {
   const raw = readVersionFile2();
   if (raw) {
@@ -30859,7 +30859,7 @@ var init_fp_home2 = () => {};
 
 // src/hooks/migrations.ts
 import {
-  chmodSync as chmodSync7,
+  chmodSync as chmodSync8,
   copyFileSync as copyFileSync3,
   existsSync as existsSync40,
   mkdirSync as mkdirSync27,
@@ -30910,7 +30910,7 @@ function migrateToLayout42() {
     if (!existsSync40(secret))
       continue;
     try {
-      chmodSync7(secret, 384);
+      chmodSync8(secret, 384);
     } catch {}
   }
   writeVersionFile({ layout: 4 });
@@ -31645,6 +31645,7 @@ async function runUninstallCommand(opts = {}) {
   if (found.daemonConfigured) {
     plan.push(`  • stop requiring the daemon (policies go back to evaluating in-process)`);
   }
+  let removeDaemon = opts.purge === true;
   if (found.serviceInstalled) {
     plan.push(opts.purge || opts.yes ? `  • stop, disable and delete the service at ${found.servicePath} — needs sudo` : `  • ask whether to remove the service at ${found.servicePath} (kept unless you say so)`);
   }
@@ -31704,7 +31705,7 @@ async function runUninstallCommand(opts = {}) {
     }
   }
   if (found.serviceInstalled) {
-    const removeDaemon = opts.purge || opts.yes ? true : await opts.confirmDaemon?.() ?? false;
+    removeDaemon = opts.purge || opts.yes ? true : await opts.confirmDaemon?.() ?? false;
     if (!removeDaemon) {
       lines.push(`• kept the daemon service at ${found.servicePath}`, `  Remove it later with: failproofai uninstall --purge`);
     } else {
@@ -31724,7 +31725,7 @@ async function runUninstallCommand(opts = {}) {
       }
     }
   }
-  if (opts.purge || found.serviceInstalled && (opts.purge || opts.yes)) {
+  if (opts.purge || removeDaemon) {
     uninstallMacNotifier();
   }
   if (opts.purge && found.homeExists) {
@@ -35886,7 +35887,7 @@ import { realpathSync as realpathSync7 } from "fs";
 import { dirname as dirname25, resolve as resolve35 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 // package.json
-var version = "1.0.4-beta.6";
+var version = "1.0.4-beta.7";
 
 // bin/failproofai.mjs
 if (!process.env.FAILPROOFAI_PACKAGE_ROOT) {

package/dist/worker.mjs

@@ -2809,8 +2809,8 @@ var init_builtin_policies = __esm(() => {
     [/sk-ant-oat01-[A-Za-z0-9\-_]{20,}/, "Anthropic OAuth token"],
     [/sk-ant-[A-Za-z0-9\-_]{20,}/, "Anthropic API key"],
     [/sk-proj-[A-Za-z0-9\-_]{20,}/, "OpenAI project API key"],
-    [/sk-svcacct-[A-Za-z0-9\-_]{20,}/, "OpenAI service-account key"],
-    [/sk-admin-[A-Za-z0-9\-_]{20,}/, "OpenAI admin key"],
+    [/(?<!\w)sk-svcacct-[A-Za-z0-9\-_]{20,}/, "OpenAI service-account key"],
+    [/(?<!\w)sk-admin-[A-Za-z0-9\-_]{20,}/, "OpenAI admin key"],
     [/sk-or-v1-[A-Za-z0-9\-_]{20,}/, "OpenRouter API key"],
     [/sk-[A-Za-z0-9]{20,}/, "OpenAI-compatible key (issuer unknown)"],
     [/github_pat_[A-Za-z0-9_]{82}/, "GitHub fine-grained token"],
@@ -3507,7 +3507,7 @@ function parsePackPolicyName(canonicalName) {
 }
 
 // package.json
-var version = "1.0.4-beta.6";
+var version = "1.0.4-beta.7";
 var init_package = () => {};
 
 // src/posthog-key.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "1.0.4-beta.6",
+  "version": "1.0.4-beta.7",
   "description": "Observability and enforcement for AI agent harnesses. 39 built-in policies hooked into 12 of them — Claude Code, Codex, Cursor, Hermes, OpenClaw and more — blocking the tool call before it runs. Local dashboard included, no account needed.",
   "bin": {
     "failproofai": "./dist/cli.mjs",
@@ -121,15 +121,15 @@
     "browserslist": "4.28.8"
   },
   "optionalDependencies": {
-    "@failproofai/failproofaid-linux-x64": "1.0.4-beta.6",
-    "@failproofai/failproofaid-linux-arm64": "1.0.4-beta.6",
-    "@failproofai/failproofaid-darwin-x64": "1.0.4-beta.6",
-    "@failproofai/failproofaid-darwin-arm64": "1.0.4-beta.6"
+    "@failproofai/failproofaid-linux-x64": "1.0.4-beta.7",
+    "@failproofai/failproofaid-linux-arm64": "1.0.4-beta.7",
+    "@failproofai/failproofaid-darwin-x64": "1.0.4-beta.7",
+    "@failproofai/failproofaid-darwin-arm64": "1.0.4-beta.7"
   },
   "failproofaidBinaries": {
-    "linux-x64": "24118b8bd058cc5d8711053c4c77cdca9361c12dbf0f421a757d33f07596d428",
-    "linux-arm64": "b4278c34a288de2c747bcebcc623d8fd5bda3a1f1e55800926eb1a4b89f0a5e9",
-    "darwin-x64": "ecb66699f45f605b0d54ac9e4bac360ac11e4e136442dcccdd083514d77c7d42",
-    "darwin-arm64": "b3dbad58bda960ef9481f90bc5085ba8624b2472519cc0bf212a0e8451dd2db4"
+    "linux-x64": "e59735a8f94cd8ac697b2bd67aafdd8d76a8394d53db229876980cc13a18f07e",
+    "linux-arm64": "b9ce50dd2f79b55f4f7112add265a776a4a6d002c2a56f971e666fbb796f3906",
+    "darwin-x64": "b46efc8ec33945a5cc26b7bb288fb87cea65b5983bd83094b5e607d53b8eda4c",
+    "darwin-arm64": "a8cc6112cee5ca8a7d517900e9ce32118855135980f22979fa0ff7aa6f68d954"
   }
 }

package/src/audit/index.ts

@@ -70,7 +70,7 @@ const TRANSCRIPT_BYTE_BUDGET = 48 * 1024 * 1024;
  * otherwise the largest transcript on the machine could never be scanned, which
  * is precisely the one most likely to hold something.
  */
-class ByteGate {
+export class ByteGate {
   private inFlight = 0;
   private waiting: Array<() => void> = [];
 

package/src/audit/leak-record.ts

@@ -152,23 +152,30 @@ export function upsertFinding(
     return { record, isNew: true };
   }
 
-  existing.occurrences += 1;
-  if (sighting.at > existing.lastSeen) existing.lastSeen = sighting.at;
-  if (sighting.at < existing.firstSeen) existing.firstSeen = sighting.at;
-
   // Keep the earliest sighting AND the most recent evidence. The report/email
   // promises the CLI and timestamp of the latest exposure; keeping only the
   // first five made those fields stale forever after a busy credential crossed
   // the cap. Middle sightings are the expendable ones.
   const seen = existing.sightings.some(
-    (s) => s.sessionId === sighting.sessionId && s.at === sighting.at,
+    (s) =>
+      s.sessionId === sighting.sessionId &&
+      s.at === sighting.at &&
+      s.mechanism.direction === sighting.mechanism.direction &&
+      s.mechanism.summary === sighting.mechanism.summary,
   );
-  if (!seen) {
-    existing.sightings.push(sighting);
-    existing.sightings.sort((a, b) => a.at.localeCompare(b.at));
-    if (existing.sightings.length > MAX_SIGHTINGS) {
-      existing.sightings.splice(1, existing.sightings.length - MAX_SIGHTINGS);
-    }
+  // Cached transcript results are folded through this function again. An
+  // identical sighting is therefore not a new exposure and must not inflate
+  // the count each time the same cache entry is reused.
+  if (seen) return { record, isNew: false };
+
+  existing.occurrences += 1;
+  if (sighting.at > existing.lastSeen) existing.lastSeen = sighting.at;
+  if (sighting.at < existing.firstSeen) existing.firstSeen = sighting.at;
+
+  existing.sightings.push(sighting);
+  existing.sightings.sort((a, b) => a.at.localeCompare(b.at));
+  if (existing.sightings.length > MAX_SIGHTINGS) {
+    existing.sightings.splice(1, existing.sightings.length - MAX_SIGHTINGS);
   }
   return { record, isNew: false };
 }
@@ -181,7 +188,12 @@ export function upsertFinding(
  */
 export function pruneRecord(record: LeakRecord, nowMs: number): LeakRecord {
   const cutoff = new Date(nowMs - FINDING_TTL_DAYS * 86_400_000).toISOString();
-  const live = record.findings.filter((f) => f.lastSeen >= cutoff);
+  // A missing or malformed timestamp cannot be aged out safely. Keep it until
+  // the bounded-cap pass below rather than silently deleting a finding that the
+  // reporting path deliberately surfaces as having an unknown date.
+  const live = record.findings.filter(
+    (f) => !f.lastSeen || !Number.isFinite(Date.parse(f.lastSeen)) || f.lastSeen >= cutoff,
+  );
   live.sort((a, b) => (a.lastSeen < b.lastSeen ? 1 : a.lastSeen > b.lastSeen ? -1 : 0));
   record.findings = live.slice(0, MAX_FINDINGS);
   return record;