failproofai 1.0.4-beta.7 → 1.0.4

package/.next/standalone/app/audit/_components/audit-dashboard.tsx

@@ -3,8 +3,8 @@
 /**
  * Top-level client wrapper for /audit.
  *
- * The old five-section personality report is SWITCHED OFF and being rebuilt
- * bottom-up around leak detection. What it used to compose:
+ * Composes the calm personality report: classify the agent into one of
+ * 8 archetypes, derive a score, and render the 5-section flow:
  *
  *   01 AuditPoster — single-screen shareable poster
  *   02 StrengthsSection — what it's great at
@@ -12,36 +12,23 @@
  *   04 HowToImproveSection — install / configure
  *   05 ComeBackBetterSection — spread the audit (invite)
  *
- * Every one of those components, and the score / persona / strengths / findings
- * modules behind them, is intact and still unit-tested — only the renders and
- * the imports here are commented out, so restoring any of it is deleting a pair
- * of comment markers. See the header of `src/audit/scoring.ts` for why.
- *
- * What this page renders now is `AuditReportPlaceholder`: the scan's own
- * numbers. The scan, the 12-CLI transcript reader and the emailed digest all
- * still run.
- *
  * Empty / running states fall back to EmptyState and RunProgress.
  */
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { getAuditResultAction } from "@/app/actions/get-audit-result";
 import type { AuditResult, RunAuditOptions } from "@/src/audit/types";
-// import { classifyAgent } from "@/src/audit/archetypes";
-// Score switched off — see the header of `src/audit/scoring.ts`.
-// import { deriveScore, gradeFor, projectedScore } from "@/src/audit/scoring";
-// import { deriveStrengths } from "@/src/audit/strengths";
-// import { deriveFindings } from "@/src/audit/findings";
+import { classifyAgent } from "@/src/audit/archetypes";
+import { deriveScore, gradeFor, projectedScore } from "@/src/audit/scoring";
+import { deriveStrengths } from "@/src/audit/strengths";
+import { deriveFindings } from "@/src/audit/findings";
 import { usePostHog } from "@/contexts/PostHogContext";
 
-// The old report's five sections — switched off, not deleted. Each component
-// file and its tests are untouched; only this render is commented out.
-// import { AuditPoster } from "./audit-poster";
-// import { StrengthsSection } from "./strengths-section";
-// import { QuirksSection } from "./quirks-section";
-// import { HowToImproveSection } from "./how-to-improve-section";
-// import { ComeBackBetterSection } from "./come-back-better-section";
+import { AuditPoster } from "./audit-poster";
+import { StrengthsSection } from "./strengths-section";
+import { QuirksSection } from "./quirks-section";
+import { HowToImproveSection } from "./how-to-improve-section";
+import { ComeBackBetterSection } from "./come-back-better-section";
 import { ReportFooter } from "./report-footer";
-import { LeakSection } from "./leak-section";
 import { EmptyState } from "./empty-state";
 import { RunProgress } from "./run-progress";
 import { AuditProgressStrip, type RerunStatus } from "./audit-progress-strip";
@@ -59,9 +46,7 @@ type Initial =
 /** Tag passed to the shared `startRerun()` handler so PostHog can tell
  *  whether the click came from the bottom return-section button or the
  *  empty-state CTA. */
-// `scan_header` is the button in section 01 — the only re-scan control the
-// page has now that the old report's sections are switched off.
-export type RerunSource = "return_section" | "empty_state" | "scan_header";
+export type RerunSource = "return_section" | "empty_state";
 
 interface Props {
   initial: Initial;
@@ -74,9 +59,6 @@ interface Props {
   totalCatalogSize: number;
 }
 
-/* Switched off with the persona layer — this named the project that seeded the
-   archetype classifier and the leaderboard row. Restore alongside
-   `classifyAgent` in this file.
 function inferProjectName(result: AuditResult, override?: string): string {
   if (override && override.trim()) return override;
   // Pick the cwd that appears in the most examples — proxy for "your
@@ -99,7 +81,6 @@ function inferProjectName(result: AuditResult, override?: string): string {
   if (segs.length >= 2) return `${segs[segs.length - 2]} / ${segs[segs.length - 1]}`;
   return segs[segs.length - 1] ?? "your agent";
 }
-*/
 
 export function AuditDashboard({ initial, projectFromUrl, totalCatalogSize }: Props) {
   const [cache, setCache] = useState<Initial>(initial);
@@ -298,22 +279,16 @@ function MainReport({
   onDismissRerun,
 }: MainReportProps) {
   const { capture } = usePostHog();
-  // Only fed the persona classifier, which is switched off with it.
-  // const project = useMemo(() => inferProjectName(result, projectFromUrl), [result, projectFromUrl]);
+  const project = useMemo(() => inferProjectName(result, projectFromUrl), [result, projectFromUrl]);
   // Seed classification with the project name so the behaviour fingerprint
   // (used for tie-breaks + copy variants) is stable per project.
-  // Persona classification is switched off with the rest of the old report. Its
-  // last live use was two telemetry properties describing a persona the product
-  // no longer shows anyone.
-  // const classification = useMemo(() => classifyAgent(result, project), [result, project]);
-  // Score switched off — see the header of `src/audit/scoring.ts`. The four
-  // functions are intact and still unit-tested; nothing calls them.
-  // const score = useMemo(() => deriveScore(result), [result]);
-  // const projected = useMemo(() => projectedScore(result, score), [result, score]);
-  // const grade = gradeFor(score);
-  // const projectedGrade = gradeFor(projected);
-  // const strengths = useMemo(() => deriveStrengths(result), [result]);
-  // const findings = useMemo(() => deriveFindings(result), [result]);
+  const classification = useMemo(() => classifyAgent(result, project), [result, project]);
+  const score = useMemo(() => deriveScore(result), [result]);
+  const projected = useMemo(() => projectedScore(result, score), [result, score]);
+  const grade = gradeFor(score);
+  const projectedGrade = gradeFor(projected);
+  const strengths = useMemo(() => deriveStrengths(result), [result]);
+  const findings = useMemo(() => deriveFindings(result), [result]);
 
   // One pass over result.results: detectors triggered + missing prescribed
   // policies. Both feed PostHog instrumentation; `missing` also feeds the
@@ -335,13 +310,10 @@ function MainReport({
     if (dashboardViewedRef.current) return;
     dashboardViewedRef.current = true;
     capture("audit_dashboard_viewed", {
-      // Score switched off — see `src/audit/scoring.ts`. `missing` is the
-      // prescription's denominator and is unaffected, so the copy→install
-      // funnel keeps both of its ends.
-      // score,
-      // grade,
-      // archetype: classification.archetype,
-      // secondary: classification.secondary ?? null,
+      score,
+      grade,
+      archetype: classification.archetype,
+      secondary: classification.secondary ?? null,
       missing,
       transcripts_scanned: result.transcripts.scanned,
       results_count: result.results.length,
@@ -349,6 +321,10 @@ function MainReport({
     });
   }, [
     capture,
+    score,
+    grade,
+    classification.archetype,
+    classification.secondary,
     missing,
     result.transcripts.scanned,
     result.results.length,
@@ -356,43 +332,19 @@ function MainReport({
   ]);
 
   /** Poster ref — captured to PNG by the poster's share buttons. */
-  // const posterRef = useRef<HTMLDivElement>(null);
+  const posterRef = useRef<HTMLDivElement>(null);
 
   return (
     <div className="app">
       <AuditProgressStrip status={rerunStatus} onDismiss={onDismissRerun} />
       <div className="app-shell">
         <div className="report">
-          <AuditReportPlaceholder
-            transcripts={result.transcripts.scanned}
-            events={result.eventsScanned ?? 0}
-            projects={result.projectsScanned?.length ?? 0}
-            isRunning={isRunning || rerunStatus.kind === "running"}
-            onRerun={() => onRerun("scan_header")}
-          />
-          {/* The rebuilt report. It reads the leak record rather than this
-              scan's result, deliberately: a credential found last month and
-              not touched by today's transcripts is still a credential to
-              rotate, and a report that showed only the current scan's findings
-              would go quiet on exactly those. */}
-          <LeakSection />
-          {/* The whole old report is switched off — the persona poster, the
-              strengths and quirks sections, the punch-list with its install-all
-              funnel, and the invite section. It is being rebuilt bottom-up
-              around leak detection; see the header of `src/audit/scoring.ts`
-              for the reasoning and `~/Desktop/failproofai-leak-detection-
-              verdict-2026-09-07.md` for the measurements behind it.
-
-              Every component below is intact and still unit-tested — only the
-              render is commented — so restoring any one of them is deleting a
-              pair of comment markers.
-
           <AuditPoster
             ref={posterRef}
             archetypeKey={classification.archetype}
             seed={classification.variantSeed}
-            // score={score}
-            // grade={grade}
+            score={score}
+            grade={grade}
             missing={missing}
             auditedAt={cachedAt ?? new Date().toISOString()}
           />
@@ -400,11 +352,10 @@ function MainReport({
           <QuirksSection findings={findings} />
           <HowToImproveSection
             result={result}
-          // projected={projected}
-          // projectedGrade={projectedGrade}
+            projected={projected}
+            projectedGrade={projectedGrade}
           />
-          <ComeBackBetterSection />
-          */}
+          <ComeBackBetterSection score={score} />
         </div>
         <ReportFooter cachedAt={cachedAt} />
       </div>
@@ -412,63 +363,6 @@ function MainReport({
   );
 }
 
-/**
- * What `/audit` shows while the report is being rebuilt.
- *
- * Deliberately states the scan's own numbers rather than nothing at all: the
- * scan still runs, still walks every transcript across all 12 CLIs, and still
- * feeds the emailed digest. Saying so is the difference between "this page is
- * under construction" and "this product is broken".
- */
-function AuditReportPlaceholder(
-  {
-    transcripts,
-    events,
-    projects,
-    isRunning,
-    onRerun,
-  }: {
-    transcripts: number;
-    events: number;
-    projects: number;
-    isRunning: boolean;
-    onRerun: () => void;
-  },
-) {
-  const n = (x: number) => x.toLocaleString();
-  return (
-    <section className="audit-sec" data-screen-label="01 Scan">
-      <div className="audit-sec-head">
-        <span className="audit-sec-eyebrow">
-          <span className="ix">01</span>{"// scan"}
-        </span>
-        {/* The re-scan control. It lived in the old report's sections and went
-            dormant when they were commented out, which left the page with no way
-            to run an audit again at all — you had to go back to the terminal. */}
-        <button
-          type="button"
-          className="scan-rerun"
-          onClick={onRerun}
-          disabled={isRunning}
-        >
-          {isRunning ? "scanning…" : "run again"}
-        </button>
-      </div>
-      <h2 className="audit-sec-title">scan complete</h2>
-      <div className="audit-sec-sub">
-        {n(events)} tool call{events === 1 ? "" : "s"} across {n(transcripts)}{" "}
-        transcript{transcripts === 1 ? "" : "s"}
-        {projects > 0 ? ` · ${n(projects)} project${projects === 1 ? "" : "s"}` : ""}
-      </div>
-      <div className="audit-sec-sub">
-        {"// the report is being rebuilt around leak detection. the scan, the"}
-        <br />
-        {"// 12-CLI transcript reader and the emailed digest are unaffected."}
-      </div>
-    </section>
-  );
-}
-
 interface ShellEmptyProps {
   running: boolean;
   mode?: "no-cache" | "zero-sessions";

package/.next/standalone/app/audit/_components/audit-poster.tsx

@@ -24,12 +24,7 @@
 import React, { forwardRef, useMemo, useState } from "react";
 import { pickArchetypeVariant, type ArchetypeKey } from "@/src/audit/archetypes";
 import { type Grade } from "@/src/audit/scoring";
-// Archetype rarity switched off — the percentages are eight hardcoded integers
-// ("Seeded with snapshot values; swap for live aggregates once that pipeline
-// lands"), and this is the ONLY surface that rendered them: baked by
-// html-to-image into the PNG people post publicly. A fabricated population
-// statistic on a shared card is a claim we cannot support.
-// import { getArchetypeRarityPct } from "@/src/audit/social-proof";
+import { getArchetypeRarityPct } from "@/src/audit/social-proof";
 import { copyOrDownloadCard, downloadCard, shareCardNative, shareCardToastMessage } from "@/lib/share-card";
 import { toast } from "@/app/components/toast";
 import { usePostHog } from "@/contexts/PostHogContext";
@@ -50,11 +45,8 @@ interface Props {
   archetypeKey: ArchetypeKey;
   /** Stable seed for variant selection (project name is the natural fit). */
   seed: string;
-  /** The score is switched off (see `src/audit/scoring.ts`). Kept as optional
-   *  props rather than removed, so restoring is un-commenting rather than
-   *  re-threading: the dashboard simply stops passing them. */
-  score?: number;
-  grade?: Grade;
+  score: number;
+  grade: Grade;
   /** Count of unenabled prescribed policies — passed to the share-text
    *  templates, not rendered on the poster itself. */
   missing: number;
@@ -71,7 +63,7 @@ export const AuditPoster = forwardRef<HTMLDivElement, Props>(function AuditPoste
     () => pickArchetypeVariant(archetypeKey, seed),
     [archetypeKey, seed],
   );
-  // const rarityPct = getArchetypeRarityPct(archetypeKey);
+  const rarityPct = getArchetypeRarityPct(archetypeKey);
   const indexLabel = String(archetype.index).padStart(2, "0");
   const auditedDate = useMemo(() => formatAuditedDate(auditedAt), [auditedAt]);
 
@@ -142,11 +134,8 @@ export const AuditPoster = forwardRef<HTMLDivElement, Props>(function AuditPoste
     }
   };
 
-  // Score switched off — the filename is keyed on the archetype instead, which
-  // is what the card now actually shows. Original:
-  //   `failproofai-${channel}-${grade.toLowerCase()}-${score}.png`
   const filenameFor = (channel: "x" | "linkedin" | "download") =>
-    `failproofai-${channel}-${archetypeKey}.png`;
+    `failproofai-${channel}-${grade.toLowerCase()}-${score}.png`;
 
   const handleShare = async (channel: "x" | "linkedin" | "download") => {
     if (busy) return;
@@ -154,11 +143,8 @@ export const AuditPoster = forwardRef<HTMLDivElement, Props>(function AuditPoste
     capture("audit_card_share_clicked", {
       channel,
       source: "poster",
-      // Score switched off — see `src/audit/scoring.ts`. Note for whoever reads
-      // the funnel: these two properties stop appearing from this release, so a
-      // dashboard keyed on them breaks rather than reading zero.
-      // score,
-      // grade,
+      score,
+      grade,
       missing_policies: missing,
     });
     try {
@@ -188,10 +174,10 @@ export const AuditPoster = forwardRef<HTMLDivElement, Props>(function AuditPoste
       }
 
       const shareCtx: ShareCtx = {
+        score,
         arch: archetype.name.toLowerCase(),
+        grade,
         missing,
-        // score,
-        // grade,
       };
       const shareText = channel === "x"
         ? pickTemplate(X_TEMPLATES, seed, shareCtx)
@@ -262,7 +248,6 @@ export const AuditPoster = forwardRef<HTMLDivElement, Props>(function AuditPoste
                 </React.Fragment>
               ))}
             </div>
-            {/* Rarity switched off — see the import above.
             {typeof rarityPct === "number" && (
               <div className="persona-rarity">
                 <span className="lbl">{"// only"}</span>{" "}
@@ -270,17 +255,13 @@ export const AuditPoster = forwardRef<HTMLDivElement, Props>(function AuditPoste
                 <span className="lbl">of agents are this archetype</span>
               </div>
             )}
-            */}
           </div>
 
-          {/* Score block — heroic number, centered in the card. Switched off;
-              see `src/audit/scoring.ts` for why. The archetype is the card's
-              headline now.
+          {/* Score block — heroic number, centered in the card */}
           <div className="poster-score">
             <span className="score-n">{score}</span>
             <span className="score-of">/100</span>
           </div>
-          */}
         </div>
 
         <footer className="poster-foot">

package/.next/standalone/app/audit/_components/come-back-better-section.tsx

@@ -21,12 +21,7 @@ import { AuthDialog, type AuthedUser } from "./auth-dialog";
 import { InviteDialog } from "./invite-dialog";
 
 interface Props {
-  /** Current audit score (0–100), forwarded into the invite email body.
-   *
-   *  Always undefined while the score is switched off (see
-   *  `src/audit/scoring.ts`) — the dashboard no longer passes it. Nothing
-   *  breaks: `/api/audit/invite` already treats it as optional and simply
-   *  leaves it out of the email body when it is not a finite number. */
+  /** Current audit score (0–100), forwarded into the invite email body. */
   score?: number;
 }
 

package/.next/standalone/app/audit/_components/empty-state.tsx

@@ -74,10 +74,7 @@ export function EmptyState({ mode, running, onStarted, onCompleted }: Props) {
           <p className="empty-sub">
             we&apos;ll walk every transcript across your installed CLIs — Claude Code,
             Codex, Copilot, Cursor, OpenCode, Pi — and count every wasteful
-            {/* Was "a tier, a score, and a punch-list" — the tier was never
-                rendered and the score is switched off, so this promised two
-                things the page did not show. */}
-            or risky action. you&apos;ll get a leak report and a scan summary.
+            or risky action. you&apos;ll get a tier, a score, and a punch-list.
           </p>
 
           <div className="empty-actions">

package/.next/standalone/app/audit/_components/how-to-improve-section.tsx

@@ -12,18 +12,13 @@
  */
 import { useMemo, useState } from "react";
 import type { AuditResult } from "@/src/audit/types";
-// Score switched off — see `src/audit/scoring.ts`.
-// import { type Grade, tierName } from "@/src/audit/scoring";
-import type { Grade } from "@/src/audit/scoring";
+import { type Grade, tierName } from "@/src/audit/scoring";
 import { usePostHog } from "@/contexts/PostHogContext";
 
 interface Props {
   result: AuditResult;
-  /** The projection is switched off — see `src/audit/scoring.ts`. Optional
-   *  rather than removed so restoring it is un-commenting the two lines in
-   *  `audit-dashboard.tsx` and the sub-heading below. */
-  projected?: number;
-  projectedGrade?: Grade;
+  projected: number;
+  projectedGrade: Grade;
 }
 
 const DETECTOR_TO_PRIMARY_POLICY: Record<string, string> = {
@@ -104,7 +99,7 @@ function bulkInstall(fixes: FixRow[]): string {
   return `failproofai policies --install ${fixes.map((f) => f.name).join(" ")}`;
 }
 
-export function HowToImproveSection({ result }: Props) {
+export function HowToImproveSection({ result, projected, projectedGrade }: Props) {
   const { capture } = usePostHog();
   const fixes = useMemo(() => buildFixes(result), [result]);
   const installAllCmd = useMemo(() => bulkInstall(fixes), [fixes]);
@@ -141,18 +136,9 @@ export function HowToImproveSection({ result }: Props) {
         </button>
       </div>
       <h2 className="audit-sec-title">install or configure</h2>
-      {/* The projected-score clause is switched off. It was also the one place
-          the product promised a number it could not deliver: `deriveScore`
-          never read `enabledInConfig`, so taking this prescription and
-          re-running returned the SAME score with the projection gone. What
-          replaces it is the thing that was always true — one command, enforced
-          on every tool call. Original:
+      <div className="audit-sec-sub">
         enable all {fixes.length === 1 ? "one" : fixes.length} → projected{" "}
         <strong>{projected}</strong> · {tierName(projectedGrade).toLowerCase()}
-      */}
-      <div className="audit-sec-sub">
-        enable all {fixes.length === 1 ? "one" : fixes.length} → one command,
-        enforced on every tool call
       </div>
 
       <div className="fix-list">