failproofai 1.0.4-beta.8 → 1.0.4

package/lib/openclaw-projects.ts

@@ -1,21 +1,18 @@
 /**
  * OpenClaw (openclaw gateway) session enumeration — AUDIT-ONLY.
  *
- * Surfaces both legacy JSONL transcripts and OpenClaw 2026.9.2+ per-agent
- * SQLite transcripts as synthetic dashboard "projects" grouped by
- * (agentId, channel).
+ * Surfaces the on-disk transcripts (agents/<agentId>/sessions/<uuid>.jsonl) as
+ * synthetic dashboard "projects" grouped by (agentId, channel). The per-agent
+ * `sessions.json` index maps sessionKey → {sessionId, timestamps}; we read it to
+ * recover the sessionKey (which encodes the channel for gateway sessions) and a
+ * reliable last-activity time. Verified live against openclaw v2026.7.1.
  */
 import { readFileSync } from "node:fs";
 import { join } from "node:path";
 import { runtimeCache } from "./runtime-cache";
-import {
-  listOpenClawAgents,
-  listOpenClawTranscripts,
-  openclawHome,
-} from "./openclaw-sessions";
+import { listOpenClawAgents, listOpenClawTranscripts, openclawHome } from "./openclaw-sessions";
 import type { ProjectFolder, SessionFile } from "./projects";
 import { formatDate } from "./format-date";
-import { listOpenClawSqliteSessions } from "./openclaw-db";
 
 export interface OpenClawSessionRef {
   sessionId: string;
@@ -54,13 +51,7 @@ function str(v: unknown): string | undefined {
  *  than in the key — verified live against v2026.7.1. */
 function readSessionsIndex(agentId: string): Map<string, SessionIndexMeta> {
   const out = new Map<string, SessionIndexMeta>();
-  const indexPath = join(
-    openclawHome(),
-    "agents",
-    agentId,
-    "sessions",
-    "sessions.json",
-  );
+  const indexPath = join(openclawHome(), "agents", agentId, "sessions", "sessions.json");
   let raw: unknown;
   try {
     raw = JSON.parse(readFileSync(indexPath, "utf-8"));
@@ -73,9 +64,7 @@ function readSessionsIndex(agentId: string): Map<string, SessionIndexMeta> {
     const e = v as Record<string, unknown>;
     const sessionId = str(e.sessionId);
     if (!sessionId) continue;
-    const origin = (
-      e.origin && typeof e.origin === "object" ? e.origin : {}
-    ) as Record<string, unknown>;
+    const origin = (e.origin && typeof e.origin === "object" ? e.origin : {}) as Record<string, unknown>;
     const lastMs =
       typeof e.lastInteractionAt === "number"
         ? e.lastInteractionAt
@@ -84,8 +73,7 @@ function readSessionsIndex(agentId: string): Map<string, SessionIndexMeta> {
           : undefined;
     out.set(sessionId, {
       lastMs,
-      channel:
-        str(e.lastChannel) ?? str(origin.provider) ?? str(origin.surface),
+      channel: str(e.lastChannel) ?? str(origin.provider) ?? str(origin.surface),
       chatType: str(e.chatType) ?? str(origin.chatType),
       label: str(origin.label),
       chatId: str(e.lastTo) ?? str(origin.from),
@@ -98,7 +86,7 @@ function readSessionsIndex(agentId: string): Map<string, SessionIndexMeta> {
 export async function getOpenClawSessions(): Promise<OpenClawSessionRef[]> {
   const transcripts = listOpenClawTranscripts();
   const indexByAgent = new Map<string, Map<string, SessionIndexMeta>>();
-  const refs = new Map<string, OpenClawSessionRef>();
+  const refs: OpenClawSessionRef[] = [];
   for (const t of transcripts) {
     let idx = indexByAgent.get(t.agentId);
     if (!idx) {
@@ -106,7 +94,7 @@ export async function getOpenClawSessions(): Promise<OpenClawSessionRef[]> {
       indexByAgent.set(t.agentId, idx);
     }
     const meta = idx.get(t.sessionId);
-    refs.set(`${t.agentId}\0${t.sessionId}`, {
+    refs.push({
       sessionId: t.sessionId,
       agentId: t.agentId,
       // Gateway sessions group by channel; CLI/local runs have none.
@@ -119,18 +107,8 @@ export async function getOpenClawSessions(): Promise<OpenClawSessionRef[]> {
       sizeBytes: t.sizeBytes,
     });
   }
-
-  // SQLite is the live source on OpenClaw 2026.9.2+. Insert it second so it
-  // replaces an archived JSONL copy of the same agent/session.
-  const sqliteSessions = await listOpenClawSqliteSessions(
-    openclawHome(),
-    listOpenClawAgents(),
-  );
-  for (const s of sqliteSessions) {
-    refs.set(`${s.agentId}\0${s.sessionId}`, s);
-  }
-
-  return [...refs.values()].sort((a, b) => b.mtimeMs - a.mtimeMs);
+  refs.sort((a, b) => b.mtimeMs - a.mtimeMs);
+  return refs;
 }
 
 export const getCachedOpenClawSessions = runtimeCache(getOpenClawSessions, 2);
@@ -167,9 +145,7 @@ export interface OpenClawNameSplit {
  * form (`agentId: null`), so links shared before agents became part of the name
  * keep resolving — to every agent on that channel, which is what they meant.
  */
-export function openClawProjectNameCandidates(
-  name: string,
-): OpenClawNameSplit[] {
+export function openClawProjectNameCandidates(name: string): OpenClawNameSplit[] {
   if (!name.startsWith("openclaw-")) return [];
   const rest = name.slice("openclaw-".length);
   if (!rest) return [];
@@ -187,9 +163,7 @@ export function openClawProjectNameCandidates(
 }
 
 /** The best-guess split for a project name — `null` if it isn't an OpenClaw one. */
-export function parseOpenClawProjectName(
-  name: string,
-): OpenClawNameSplit | null {
+export function parseOpenClawProjectName(name: string): OpenClawNameSplit | null {
   return openClawProjectNameCandidates(name)[0] ?? null;
 }
 
@@ -216,12 +190,7 @@ export async function getOpenClawProjects(): Promise<ProjectFolder[]> {
       prev.latest = Math.max(prev.latest, s.mtimeMs);
       prev.count += 1;
     } else {
-      groups.set(key, {
-        agentId: s.agentId,
-        channel: s.channel,
-        latest: s.mtimeMs,
-        count: 1,
-      });
+      groups.set(key, { agentId: s.agentId, channel: s.channel, latest: s.mtimeMs, count: 1 });
     }
   }
   const out: ProjectFolder[] = [];
@@ -259,9 +228,7 @@ export async function getOpenClawSessionsByEncodedName(
   const sessions = await getOpenClawSessions();
   const matching = (split: OpenClawNameSplit) =>
     sessions.filter(
-      (s) =>
-        s.channel === split.channel &&
-        (split.agentId === null || s.agentId === split.agentId),
+      (s) => s.channel === split.channel && (split.agentId === null || s.agentId === split.agentId),
     );
 
   // Take the first split that actually owns sessions — length alone picks the
@@ -283,10 +250,7 @@ export async function getOpenClawSessionsByEncodedName(
   return {
     // Legacy channel-only names keep their old cwd label, since they really do
     // span every agent on that channel.
-    cwd:
-      agentId === null
-        ? `openclaw:${channel}`
-        : openClawProjectPath(agentId, channel),
+    cwd: agentId === null ? `openclaw:${channel}` : openClawProjectPath(agentId, channel),
     sessions: matched.map((s) => {
       const lastModified = new Date(s.mtimeMs);
       return {

package/lib/openclaw-sessions.ts

@@ -1,9 +1,11 @@
 /**
  * OpenClaw (openclaw gateway) session transcript loader + parser.
  *
- * Legacy OpenClaw writes one JSONL transcript per session under `sessions/`;
- * 2026.9.2+ stores the same logical records as `event_json` rows in each
- * agent's `agent/openclaw-agent.sqlite`. SQLite is preferred when both exist.
+ * AUDIT-ONLY (Pillar 2). OpenClaw writes one JSONL transcript per session at
+ * `~/.openclaw/agents/<agentId>/sessions/<sessionId>.jsonl` (sessionId is a
+ * UUID), alongside a much larger `<sessionId>.trajectory.jsonl` OTel trace we
+ * IGNORE, and a `sessions.json` index keyed by sessionKey. Verified live
+ * against openclaw v2026.7.1.
  *
  * The transcript is type-discriminated JSONL:
  *   {type:"session", cwd, …}              — header (carries cwd)
@@ -16,8 +18,8 @@
  * `toolResult` by `toolCallId` (mirrors lib/hermes-sessions.ts) and is PURE, so
  * it is unit-testable with plain line objects.
  *
- * Home override: `OPENCLAW_STATE_DIR`, then `OPENCLAW_HOME` (used by tests /
- * to point at a copied gateway config dir).
+ * Home override: set `OPENCLAW_HOME` (used by tests / to point at a copied
+ * gateway config dir).
  */
 import { readFile } from "node:fs/promises";
 import { readdirSync, statSync } from "node:fs";
@@ -37,18 +39,13 @@ import {
   type LogSource,
 } from "./log-entries";
 import { formatDuration } from "./format-duration";
-import { readOpenClawSqliteTranscript } from "./openclaw-db";
 
 /** OpenClaw sessions are stored under UUID filenames. */
 export const OPENCLAW_SESSION_ID_RE = /^[0-9a-fA-F-]{36}$/;
 
-/** Absolute path to OpenClaw's state home. */
+/** Absolute path to OpenClaw's config home (override with OPENCLAW_HOME). */
 export function openclawHome(): string {
-  return (
-    process.env.OPENCLAW_STATE_DIR ||
-    process.env.OPENCLAW_HOME ||
-    join(homedir(), ".openclaw")
-  );
+  return process.env.OPENCLAW_HOME || join(homedir(), ".openclaw");
 }
 
 // ── Parsing helpers ──
@@ -63,11 +60,7 @@ function extractText(content: unknown): string {
   if (typeof content === "string") return content;
   if (Array.isArray(content)) {
     return content
-      .map((c) =>
-        isPlainObject(c) && typeof c.text === "string"
-          ? (c.text as string)
-          : "",
-      )
+      .map((c) => (isPlainObject(c) && typeof c.text === "string" ? (c.text as string) : ""))
       .filter(Boolean)
       .join("\n");
   }
@@ -141,10 +134,7 @@ export function openclawLinesToLogEntries(
           if (b.type === "text" && typeof b.text === "string") {
             blocks.push({ type: "text", text: b.text });
           } else if (b.type === "toolCall") {
-            const id =
-              typeof b.id === "string"
-                ? b.id
-                : `${String(b.name ?? "tool")}-${blocks.length}`;
+            const id = typeof b.id === "string" ? b.id : `${String(b.name ?? "tool")}-${blocks.length}`;
             const name = typeof b.name === "string" ? b.name : "tool";
             const input = isPlainObject(b.arguments) ? b.arguments : {};
             const block: ToolUseBlock = { type: "tool_use", id, name, input };
@@ -161,23 +151,17 @@ export function openclawLinesToLogEntries(
       entries.push({
         type: "assistant",
         ...base,
-        message: {
-          role: "assistant",
-          content: blocks,
-          model: typeof m.model === "string" ? m.model : undefined,
-        },
+        message: { role: "assistant", content: blocks, model: typeof m.model === "string" ? m.model : undefined },
       } satisfies AssistantEntry);
       continue;
     }
 
     if (role === "toolResult") {
-      const callId =
-        typeof m.toolCallId === "string" ? m.toolCallId : undefined;
+      const callId = typeof m.toolCallId === "string" ? m.toolCallId : undefined;
       const block = callId ? toolUseById.get(callId) : undefined;
       if (block) {
         const details = isPlainObject(m.details) ? m.details : undefined;
-        const startMs =
-          (callId && toolUseStartMs.get(callId)) || date.getTime();
+        const startMs = (callId && toolUseStartMs.get(callId)) || date.getTime();
         const durationMs =
           details && typeof details.durationMs === "number"
             ? details.durationMs
@@ -254,20 +238,13 @@ export function listOpenClawTranscripts(): OpenClawTranscriptFile[] {
     }
     for (const file of files) {
       // Only `<uuid>.jsonl` — not `<uuid>.trajectory.jsonl` / `.trajectory-path.json`.
-      if (!file.endsWith(".jsonl") || file.endsWith(".trajectory.jsonl"))
-        continue;
+      if (!file.endsWith(".jsonl") || file.endsWith(".trajectory.jsonl")) continue;
       const sessionId = file.slice(0, -".jsonl".length);
       if (!OPENCLAW_SESSION_ID_RE.test(sessionId)) continue;
       const transcriptPath = join(sessionsDir, file);
       try {
         const st = statSync(transcriptPath);
-        out.push({
-          agentId,
-          sessionId,
-          transcriptPath,
-          mtimeMs: st.mtimeMs,
-          sizeBytes: st.size,
-        });
+        out.push({ agentId, sessionId, transcriptPath, mtimeMs: st.mtimeMs, sizeBytes: st.size });
       } catch {
         // skip unreadable
       }
@@ -299,36 +276,6 @@ export interface OpenClawSessionLogData {
 export async function getOpenClawSessionLog(
   sessionId: string,
 ): Promise<OpenClawSessionLogData | null> {
-  if (!OPENCLAW_SESSION_ID_RE.test(sessionId)) return null;
-
-  // New OpenClaw versions keep live transcripts in SQLite. Prefer that copy
-  // when an archived JSONL with the same UUID also exists.
-  const sqlite = await readOpenClawSqliteTranscript(
-    openclawHome(),
-    listOpenClawAgents(),
-    sessionId,
-  );
-  if (sqlite) {
-    const entries = openclawLinesToLogEntries(sqlite.rawLines, "session");
-    let cwd: string | undefined;
-    for (const line of sqlite.rawLines) {
-      if (
-        line.type === "session" &&
-        typeof line.cwd === "string" &&
-        line.cwd.length > 0
-      ) {
-        cwd = line.cwd;
-        break;
-      }
-    }
-    return {
-      entries,
-      rawLines: sqlite.rawLines,
-      cwd,
-      filePath: sqlite.filePath,
-    };
-  }
-
   const filePath = findOpenClawTranscript(sessionId);
   if (!filePath) return null;
   let content: string;
@@ -342,12 +289,7 @@ export async function getOpenClawSessionLog(
   // cwd lives on the `type:"session"` header line.
   let cwd: string | undefined;
   for (const line of rawLines) {
-    if (
-      isPlainObject(line) &&
-      line.type === "session" &&
-      typeof line.cwd === "string" &&
-      line.cwd.length > 0
-    ) {
+    if (isPlainObject(line) && line.type === "session" && typeof line.cwd === "string" && line.cwd.length > 0) {
       cwd = line.cwd;
       break;
     }

package/lib/sqlite-reader.ts

@@ -39,42 +39,8 @@ interface NodeSqliteModule {
   DatabaseSync: new (path: string, options?: { readOnly?: boolean }) => NodeSqliteDb;
 }
 
-/**
- * Swallow Node's "SQLite is an experimental feature" warning, once.
- *
- * It is not information the user can act on — we chose `node:sqlite`
- * deliberately, and the alternative tier is a WASM build that leaks. But it is
- * emitted on first use, which lands it in the MIDDLE of whatever is on screen,
- * and the audit's progress display redraws itself by moving the cursor up a
- * fixed number of lines. Two unexpected lines of stderr push the cursor down
- * two rows, so the next redraw repaints the block two rows lower and strands
- * the top of the previous frame above it. The user sees every stage twice and
- * reasonably concludes the audit ran twice.
- *
- * Filtered by message rather than silenced wholesale: `process.emitWarning` is
- * how deprecations and real problems surface too, and a blanket
- * `NODE_NO_WARNINGS` in a tool that installs into other people's machines would
- * hide those as well.
- */
-let warningPatched = false;
-function silenceSqliteExperimentalWarning(): void {
-  if (warningPatched) return;
-  warningPatched = true;
-  const original = process.emitWarning.bind(process);
-  // The overloads differ across Node versions; the shape we care about is the
-  // first argument, and everything else is passed straight through.
-  process.emitWarning = ((warning: unknown, ...rest: unknown[]) => {
-    const text = typeof warning === "string" ? warning : String((warning as Error)?.message ?? "");
-    if (text.includes("SQLite is an experimental feature")) return;
-    return (original as (...a: unknown[]) => void)(warning, ...rest);
-  }) as typeof process.emitWarning;
-}
-
 async function tryNodeSqlite(dbPath: string): Promise<SqliteReader | null> {
   try {
-    // Before the import, not after: the warning fires on first use of the
-    // module, which is this line.
-    silenceSqliteExperimentalWarning();
     // Dynamic import: on Node < 22.5 this rejects and we fall through to sql.js.
     const mod = (await import("node:sqlite")) as unknown as NodeSqliteModule;
     const db = new mod.DatabaseSync(dbPath, { readOnly: true });
@@ -100,53 +66,10 @@ function loadSqlJs(): Promise<SqlJsStatic> {
   return sqlPromise;
 }
 
-const SQLITE_MAGIC = "SQLite format 3\0";
-
-/**
- * Clear the WAL flag on OUR OWN in-memory copy of the database image.
- *
- * Header bytes 18 and 19 are the file-format write and read versions; `2`
- * means WAL. sql.js never sees the `-wal` sidecar — it is handed the main
- * file's bytes and nothing else, which is exactly the snapshot caveat this
- * module already documents — so the flag buys us nothing, and it costs a great
- * deal: opening a WAL-flagged image makes SQLite build a wal-index
- * shared-memory region that sql.js's MEMFS-backed VFS never reclaims on
- * `close()` (close unlinks only the db file it created).
- *
- * The asm.js build's heap is a FIXED 22,151,168-byte ArrayBuffer with
- * ALLOW_MEMORY_GROWTH off, so `emscripten_resize_heap` is compiled to
- * `abort("OOM")`. Measured: the 128th WAL-mode open exhausts it — the same
- * threshold for a 319 KB database and a 10 MB one, because the leaked region
- * is a fixed per-connection allocation rather than data.
- *
- * And the abort is not confined to that open. `initSqlJs` memoizes one
- * process-wide module, so once it aborts every later `openSqliteReadonly`
- * silently returns null. A full audit opens ~150 databases — devin, goose and
- * opencode each open theirs once per SESSION — so it crossed 128 and then
- * dropped whatever it had not yet read, with no error anywhere. The
- * `Aborted(OOM)` lines on stderr were the only symptom, and they read as
- * harmless because the run still completed.
- *
- * Only under bun and Node < 22.5: tier 1 is `node:sqlite`, which bun does not
- * provide, and `engines.node` allows 20.9. Both fall through to here.
- */
-function clearWalFlag(bytes: Buffer): Buffer {
-  // Too short to carry a header, or not a SQLite image at all — hand it back
-  // untouched and let sql.js produce its own error.
-  if (bytes.length < 20) return bytes;
-  if (bytes.toString("latin1", 0, 16) !== SQLITE_MAGIC) return bytes;
-  if (bytes[18] === 1 && bytes[19] === 1) return bytes; // already rollback-journal
-  bytes[18] = 1;
-  bytes[19] = 1;
-  return bytes;
-}
-
 async function trySqlJs(dbPath: string): Promise<SqliteReader | null> {
   try {
     const SQL = await loadSqlJs();
-    // `readFileSync` already returns a private copy, so mutating the two header
-    // bytes cannot touch the file on disk.
-    const db = new SQL.Database(clearWalFlag(readFileSync(dbPath)));
+    const db = new SQL.Database(readFileSync(dbPath));
     return {
       query<T = Record<string, unknown>>(sql: string, params?: unknown[]): T[] {
         const stmt = db.prepare(sql);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "failproofai",
-  "version": "1.0.4-beta.8",
+  "version": "1.0.4",
   "description": "Observability and enforcement for AI agent harnesses. 39 built-in policies hooked into 12 of them — Claude Code, Codex, Cursor, Hermes, OpenClaw and more — blocking the tool call before it runs. Local dashboard included, no account needed.",
   "bin": {
     "failproofai": "./dist/cli.mjs",
@@ -121,15 +121,15 @@
     "browserslist": "4.28.8"
   },
   "optionalDependencies": {
-    "@failproofai/failproofaid-linux-x64": "1.0.4-beta.8",
-    "@failproofai/failproofaid-linux-arm64": "1.0.4-beta.8",
-    "@failproofai/failproofaid-darwin-x64": "1.0.4-beta.8",
-    "@failproofai/failproofaid-darwin-arm64": "1.0.4-beta.8"
+    "@failproofai/failproofaid-linux-x64": "1.0.4",
+    "@failproofai/failproofaid-linux-arm64": "1.0.4",
+    "@failproofai/failproofaid-darwin-x64": "1.0.4",
+    "@failproofai/failproofaid-darwin-arm64": "1.0.4"
   },
   "failproofaidBinaries": {
-    "linux-x64": "17274c1da30675b49de74953a4ce2777e09ba07b9da79250ab155e5fdb316a0a",
-    "linux-arm64": "a07b228d899914baca1c75024be19c0319eb4fc40c6d5a303ba733bf6721924a",
-    "darwin-x64": "d170fd5604cb419bc83f4a5ab1a6cb5be2f9aec957aed99ce237990aa5d3966f",
-    "darwin-arm64": "0e2bde5bd0762641fa072a6640e485c637b2102f2fb6c1afeca679f005e89679"
+    "linux-x64": "cca1d41ff951784ba084bf2d72cfad0fe8d988f8226e0e7a4538b1fb8d76a5bd",
+    "linux-arm64": "55e9c1e2864cbf6057fd0c27e4bc573ca8fba2cd35d480a3db3a55d398e7bec0",
+    "darwin-x64": "2a46ec77d2cac14a036f35e832f92f16895239814a5f10f02121f3c313e70574",
+    "darwin-arm64": "a0e7ccc6fe24e1017592637192ba8a26c9d05ca839c98bc72a983094c863b39b"
   }
 }

package/pi-extension/index.ts

@@ -25,7 +25,7 @@
  * spawns extensions with an undefined cwd contract, so paths are resolved
  * relative to this file via `import.meta.url`, NOT process.cwd().
  */
-import { spawn, spawnSync } from "node:child_process";
+import { spawnSync } from "node:child_process";
 import { resolve, dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { existsSync, readdirSync, statSync } from "node:fs";
@@ -64,47 +64,6 @@ function debug(msg: string): void {
   }
 }
 
-/**
- * Forward an event whose VERDICT NOBODY READS, without blocking Pi.
- *
- * `callPolicy` is `spawnSync`, and Pi awaits its handlers serially on the
- * startup path — so a `session_start` forward froze the whole TUI for as long
- * as the subprocess took (measured floor 1.0-1.6s just to boot the binary,
- * ceiling the full 60s timeout) and then threw the answer away. Three call
- * sites are like that by design: `session_start`, `tool_result` and
- * `session_shutdown` forward for the activity feed and for session-id
- * continuity, and Pi cannot act on their return in any case
- * (`ToolResultEventResult` has no `block`; the other two have no Result type
- * at all).
- *
- * So they get a detached `spawn` instead. The event still reaches failproofai,
- * the policies still run and still log, and Pi keeps rendering. Deliberately
- * NOT used for `tool_call`, `user_bash`, `input` or `agent_end`: those four
- * consume the decision, and blocking is what enforcement means.
- */
-function forwardPolicy(
-  eventName: string,
-  payload: unknown,
-): void {
-  const { cmd, args } = resolveSpawn();
-  debug(`forwardPolicy (detached) event=${eventName} cmd=${cmd}`);
-  try {
-    const child = spawn(cmd, [...args, "--hook", eventName, "--cli", "pi"], {
-      stdio: ["pipe", "ignore", "ignore"],
-      detached: false,
-    });
-    // A child that outlives its parent's interest must not keep the event loop
-    // alive, or Pi cannot exit until the subprocess does.
-    child.unref();
-    // EPIPE if the child died before stdin was consumed — fail-open, silently.
-    child.on("error", (err) => debug(`forward error ${err.message}`));
-    child.stdin?.on("error", () => {});
-    child.stdin?.end(JSON.stringify(payload));
-  } catch (err) {
-    debug(`FORWARD EXCEPTION ${err instanceof Error ? err.message : String(err)}`);
-  }
-}
-
 function callPolicy(eventName: string, payload: unknown): { block: boolean; reason: string } {
   const { cmd, args } = resolveSpawn();
   debug(`callPolicy event=${eventName} cmd=${cmd}`);
@@ -124,12 +83,8 @@ function callPolicy(eventName: string, payload: unknown): { block: boolean; reas
     const parsed = JSON.parse(stdout) as PolicyDecision;
     if (parsed.permission === "deny") {
       debug(`DENY reason=${parsed.reason}`);
-      return {
-        block: true,
-        reason: parsed.reason ?? "Blocked by failproofai",
-      };
+      return { block: true, reason: parsed.reason ?? "Blocked by failproofai" };
     }
-    return { block: false, reason: "" };
   } catch (err) {
     debug(`EXCEPTION ${err instanceof Error ? err.message : String(err)}`);
     // Fail-open: never block tool execution because of an infra failure.
@@ -462,7 +417,7 @@ export default function failproofaiBridge(pi: PiExtensionApi) {
   // need session_id continuity see the metadata.
   pi.on("session_start", (event: unknown): unknown => {
     const e = event as PiSessionStartEvent;
-    forwardPolicy("session_start", {
+    callPolicy("session_start", {
       session_id: resolveSessionId(e.sessionId, resolveCwd(e.cwd)),
       cwd: resolveCwd(e.cwd),
       reason: e.reason,
@@ -480,7 +435,7 @@ export default function failproofaiBridge(pi: PiExtensionApi) {
   pi.on("tool_result", (event: unknown): unknown => {
     const e = event as PiToolResultEvent;
     const canonicalTool = canonicalizeToolName(e.toolName);
-    forwardPolicy("tool_result", {
+    callPolicy("tool_result", {
       tool_name: canonicalTool,
       tool_input: canonicalizeToolInput(canonicalTool, e.input) ?? {},
       tool_response: { content: e.content, isError: e.isError },
@@ -545,7 +500,7 @@ export default function failproofaiBridge(pi: PiExtensionApi) {
   pi.on("session_shutdown", (event: unknown): unknown => {
     const e = event as PiSessionShutdownEvent;
     const cwd = resolveCwd(e.cwd);
-    forwardPolicy("session_shutdown", {
+    callPolicy("session_shutdown", {
       session_id: resolveSessionId(e.sessionId, cwd),
       cwd,
       reason: e.reason,

package/src/audit/cache.ts

@@ -14,7 +14,6 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync, chmodSync, openSync
 import { join } from "node:path";
 import { BUILTIN_POLICIES } from "../hooks/builtin-policies";
 import { AUDIT_DETECTORS } from "./detectors";
-import { LEAK_SCAN_VERSION } from "./leak-scan";
 import type { TranscriptAuditResult, DetectorSessionState } from "./types";
 import { auditCacheDir } from "../hooks/fp-home";
 
@@ -163,9 +162,6 @@ interface CacheEntry {
   sizeBytes: number;
   engineVersion: string;
   detectorVersion: string;
-  /** Separate because leak detection is neither a builtin policy nor one of
-   * the behavioural AUDIT_DETECTORS hashed above. */
-  leakScanVersion: number;
   result: TranscriptAuditResult;
   /**
    * How far into the file the recorded result actually accounts for, at a LINE
@@ -273,7 +269,6 @@ export function readCachedTranscript(
     if (entry.schemaVersion !== CACHE_SCHEMA_VERSION) return null;
     if (entry.engineVersion !== getEngineVersion()) return null;
     if (entry.detectorVersion !== getDetectorVersion()) return null;
-    if (entry.leakScanVersion !== LEAK_SCAN_VERSION) return null;
     // Number.isFinite (not typeof) so a malformed JSON `Infinity` /
     // `NaN` is rejected — those would otherwise bypass the TTL check
     // and pin a stale entry as valid forever.
@@ -337,7 +332,6 @@ export function writeCachedTranscriptResult(
       sizeBytes,
       engineVersion: getEngineVersion(),
       detectorVersion: getDetectorVersion(),
-      leakScanVersion: LEAK_SCAN_VERSION,
       result,
     };
     if (resume && resume.bytesScanned > 0) {

package/src/audit/cli-adapters/claude.ts

@@ -6,7 +6,6 @@
  * parses each via lib/log-entries.ts.
  */
 import { readFile, open, type FileHandle } from "node:fs/promises";
-import { readFileSync } from "node:fs";
 import {
   listClaudeProjects,
   listClaudeTranscripts,
@@ -41,17 +40,6 @@ export async function listClaudeTranscriptMetadata(
     }
     for (const t of transcripts) {
       if (t.mtimeMs < sinceMs) continue;
-      let sessionDescription: string | undefined;
-      if (t.isSubagent) {
-        try {
-          const meta = JSON.parse(
-            readFileSync(t.transcriptPath.replace(/\.jsonl$/, ".meta.json"), "utf8"),
-          ) as { description?: unknown };
-          if (typeof meta.description === "string") sessionDescription = meta.description;
-        } catch {
-          // Sidecars are optional (journal transcripts do not have one).
-        }
-      }
       out.push({
         cli: "claude",
         projectName: project.name,
@@ -59,7 +47,6 @@ export async function listClaudeTranscriptMetadata(
         transcriptPath: t.transcriptPath,
         mtimeMs: t.mtimeMs,
         sizeBytes: t.sizeBytes,
-        sessionDescription,
       });
     }
   }

package/src/audit/cli-login.ts

@@ -173,10 +173,7 @@ export async function ensureSignedIn(preset?: string): Promise<EnsureSignedIn> {
     throw new LoginError(
       "Signing in needs an interactive terminal, and this one is not.\n" +
         "Run `failproofai audit --schedule` from a shell you are sitting at,\n" +
-        "or sign in from the dashboard — both write the same session file.\n" +
-        "\n" +
-        "`--email` does not avoid this: it fills in the address so you are not\n" +
-        "asked for it, but a one-time code is still sent there for you to paste.",
+        "or sign in from the dashboard — both write the same session file.",
     );
   }