failproofai 1.0.6 → 1.0.7-beta.1

package/src/hooks/semantic/types.ts

@@ -0,0 +1,145 @@
+/**
+ * Types for the semantic (Jev-backed) evaluator.
+ *
+ * The regex engine answers "does this string match"; this one asks TypeSafe's
+ * Jev a set of typed yes/no questions about the tool call and decides from the
+ * probabilities. Everything here is plain data so the decision can be replayed
+ * offline from a recorded response — see `decide.ts`.
+ */
+
+/** Coarse class of a tool, derived deterministically from its canonical name. */
+export type ToolClass = "shell" | "write" | "read" | "network" | "other";
+
+/** A single yes/no question sent to Jev (the `noul` primitive). */
+export interface NoulQuestion {
+  type: "noul";
+  instructions: string;
+  criteria?: { true: string; false: string };
+}
+
+export interface JevRequest {
+  model: string;
+  state: Record<string, unknown>;
+  questions: Record<string, NoulQuestion>;
+}
+
+export interface JevNoulAnswer {
+  type?: "noul";
+  noul: number;
+}
+
+export interface JevResponse {
+  model: string;
+  answers: Record<string, JevNoulAnswer>;
+  usage?: { input_tokens?: number; output_tokens?: number };
+  /** Set when the provider did not report which Jev version answered (Cloudflare's unversioned alias). */
+  modelUnverified?: boolean;
+}
+
+/** A yes/no probe. A policy fires only when every one of its probes holds. */
+export interface Probe {
+  id: string;
+  instructions: string;
+  criteria?: { true: string; false: string };
+}
+
+export interface SemanticPolicy {
+  /** Short slug; registered as `semantic/<name>` in reasons and logs. */
+  name: string;
+  /** Past-tense, human-readable description of what was caught. */
+  title: string;
+  /** Tool classes this policy is asked about. Unknown/MCP tools get every policy. */
+  appliesTo: ReadonlyArray<ToolClass>;
+  /**
+   * `deny` policies block when the evidence is strong and instruct when it is
+   * moderate; `instruct` policies only ever warn.
+   */
+  mode: "deny" | "instruct";
+  /**
+   * Whether the user's own explicit request may clear this policy. False for
+   * the few things a prompt injection most wants to be approved for.
+   */
+  userCanOverride: boolean;
+  /** Every probe must hold for the policy to fire (conjunction). */
+  probes: ReadonlyArray<Probe>;
+  /** If this holds, the policy does not fire — the documented exceptions. */
+  exempt?: Probe;
+  /** Deterministic precondition over the facts; when false nothing is asked. */
+  precondition?: (facts: Facts) => boolean;
+  /** Shown to the agent when the policy fires. */
+  guidance: string;
+}
+
+export interface PathFact {
+  asWritten: string;
+  resolved: string;
+  relation: "inside_project" | "project_root" | "outside_project_in_home" | "home_root" | "system" | "root";
+}
+
+/** Deterministic facts computed locally, so Jev never has to count or resolve. */
+export interface Facts {
+  toolName: string;
+  toolClass: ToolClass;
+  /** False for tools no canonical map recognised — MCP tools, skills, etc. */
+  toolIsKnown: boolean;
+  cwd: string | null;
+  projectRoot: string | null;
+  currentGitBranch: string | null;
+  paths: PathFact[];
+  permissionMode: string | null;
+}
+
+export interface SemanticInput {
+  eventType: string;
+  toolName: string;
+  toolInput: Record<string, unknown>;
+  cwd?: string;
+  permissionMode?: string;
+  /** What the human typed recently, oldest first. Trusted channel only. */
+  userSaid: string[];
+  /**
+   * The agent's last visible message before the human's latest one — what a
+   * reply like "yes" or "do it" refers to. Agent-written, so it may only ever
+   * explain a human reply; it is never consent on its own.
+   */
+  agentLastMessage?: string | null;
+}
+
+/**
+ * How "did the human ask for this?" is put to Jev.
+ *
+ * - `v0`: one `user_asked` question per policy, phrased as the policy's harm,
+ *   plus a global `scope` question. Measured to clear a policy 6 times in
+ *   1,332 cases.
+ * - `v1`: three task-level questions asked once per call — is this a step
+ *   toward the human's task, did they ask for this exact operation, does it
+ *   reach beyond what they asked — judged only against the human's own words
+ *   with harness-written text removed.
+ */
+export type IntentMode = "v0" | "v1";
+
+export interface PolicyOutcome {
+  policy: string;
+  mode: "deny" | "instruct";
+  /** min over probe probabilities — one weak probe spoils the evidence. */
+  evidence: number;
+  exempt: number | null;
+  userAsked: number | null;
+  targetNamedByUser: boolean;
+  /** Fired, and the request also addressed the reviewer — so it was blocked outright. */
+  escalatedByInjection: boolean;
+  verdict: "deny" | "instruct" | "overridden" | "none";
+  /** v1 only: why an override applied, or that a deny was softened to instruct. */
+  intent?: "op-requested" | "task-step" | "downgraded-task-step";
+}
+
+export interface SemanticVerdict {
+  decision: "allow" | "deny" | "instruct";
+  reason: string | null;
+  outcomes: PolicyOutcome[];
+  injectionSuspected: number | null;
+  /** The `scope` answer: does the request stay within what the user asked? null when not asked. */
+  scopeWithinRequest: number | null;
+  /** v1 only: set when the call was flagged for reaching beyond the human's task. */
+  beyondTask?: boolean;
+}

package/src/hooks/semver-precedence.ts

@@ -0,0 +1,128 @@
+/**
+ * Semver PRECEDENCE — ordering two version strings — for the one question a
+ * pack manifest asks: is the CLI about to run this pack at least the version
+ * the pack says it needs?
+ *
+ * ## Why this is written out rather than reused
+ *
+ * Nothing in this repo orders two versions. `daemonVersionSkew()` compares them
+ * for EQUALITY, which is the right test there — the CLI and the daemon ship
+ * from one commit, so anything but identical is skew — and it yields no
+ * ordering at all. There is no semver dependency either: this module runs on
+ * the hook path, and the loader's rule is that nothing there may pull in a
+ * package.
+ *
+ * ## Why the obvious implementation is wrong here
+ *
+ * Splitting on dots and comparing numbers gets the release triple right and the
+ * PRERELEASE exactly backwards. This package's version is `1.0.7-beta.0`, and
+ * the beta cut from that line is the first build that understands
+ * `minCliVersion` at all — so it is the build a pack's minimum is aimed at. On
+ * numbers alone `1.0.7-beta.0` satisfies a minimum of `1.0.7`, which reads the
+ * beta as the newer build when it is the older one, and the pack installs on a
+ * CLI that may be missing the feature the minimum exists to require.
+ *
+ * So precedence follows semver §11 for real:
+ *
+ *     1.0.6 < 1.0.7-beta.0 < 1.0.7-beta.1 < 1.0.7 < 1.0.8
+ *
+ * - the release triple is compared numerically, field by field;
+ * - a version WITH a prerelease is lower than the same triple without one;
+ * - prerelease identifiers are compared left to right, numeric ones
+ *   numerically and always below alphanumeric ones, and a longer identifier
+ *   list wins when every shared identifier is equal;
+ * - build metadata (`+2026.09.24`) is ignored, because it carries no precedence.
+ *
+ * Anything this cannot order is reported as unorderable rather than guessed at.
+ * A caller comparing versions to decide whether to REFUSE something needs to
+ * know the difference between "older" and "I cannot tell".
+ */
+
+/** A version decomposed far enough to be ordered. Build metadata is dropped. */
+export interface SemVer {
+  major: number;
+  minor: number;
+  patch: number;
+  /** Dot-separated prerelease identifiers, numeric ones as numbers. Empty for a release. */
+  prerelease: ReadonlyArray<string | number>;
+}
+
+/**
+ * Strict semver, and strict on purpose. `v1.0.0`, `1.0`, `01.2.3` and
+ * `1.0.7-beta.0.` are all things people write and none of them has one
+ * unambiguous ordering, so they are refused rather than normalised — a
+ * `minCliVersion` nobody can order is a requirement nobody can check.
+ */
+const SEMVER_RE =
+  /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*)(?:\.(?:0|[1-9]\d*|\d*[A-Za-z-][0-9A-Za-z-]*))*))?(?:\+([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?$/;
+
+const NUMERIC_ID = /^(?:0|[1-9]\d*)$/;
+
+/** Decompose a version, or `null` when it is not one this can order. */
+export function parseSemver(value: unknown): SemVer | null {
+  if (typeof value !== "string") return null;
+  const m = SEMVER_RE.exec(value);
+  if (!m) return null;
+  return {
+    major: Number(m[1]),
+    minor: Number(m[2]),
+    patch: Number(m[3]),
+    prerelease: m[4] === undefined ? [] : m[4].split(".").map((id) => (NUMERIC_ID.test(id) ? Number(id) : id)),
+  };
+}
+
+const cmp = (a: number, b: number): number => (a < b ? -1 : a > b ? 1 : 0);
+
+/**
+ * Compare two prerelease identifier lists. An EMPTY list is a release, and a
+ * release outranks every prerelease of the same triple — the rule the naive
+ * implementation loses, and the one that decides this release's own case.
+ */
+function comparePrerelease(a: ReadonlyArray<string | number>, b: ReadonlyArray<string | number>): number {
+  if (a.length === 0 && b.length === 0) return 0;
+  if (a.length === 0) return 1;
+  if (b.length === 0) return -1;
+  for (let i = 0; i < Math.min(a.length, b.length); i++) {
+    const x = a[i];
+    const y = b[i];
+    if (x === y) continue;
+    const xNum = typeof x === "number";
+    const yNum = typeof y === "number";
+    // "Numeric identifiers always have lower precedence than non-numeric
+    // ones" (semver §11.4.3): `1.0.0-1` is below `1.0.0-alpha`, so an `rc.1`
+    // line and a `1` line never interleave by accident.
+    if (xNum !== yNum) return xNum ? -1 : 1;
+    if (xNum && yNum) return cmp(x as number, y as number);
+    return (x as string) < (y as string) ? -1 : 1;
+  }
+  // Every shared identifier is equal, so the longer list is the later build:
+  // `1.0.0-beta` < `1.0.0-beta.1`.
+  return cmp(a.length, b.length);
+}
+
+/** `-1`, `0` or `1` by semver precedence. */
+export function compareSemver(a: SemVer, b: SemVer): number {
+  return cmp(a.major, b.major) || cmp(a.minor, b.minor) || cmp(a.patch, b.patch) || comparePrerelease(a.prerelease, b.prerelease);
+}
+
+/**
+ * `-1` / `0` / `1` for two version STRINGS, or `null` when either one cannot be
+ * ordered. Null is deliberately not 0: a caller that treats "unorderable" as
+ * "equal" silently accepts the requirement it could not check.
+ *
+ * There is deliberately NO `meetsMinimum(current, minimum): boolean | null` here.
+ * It existed, and it collapsed two situations that need opposite treatment into
+ * one value: an ABSENT minimum (every pack published before today has none, so it
+ * must satisfy) and a MALFORMED one. A call site reading `=== false` would then
+ * ignore a typo'd requirement, and one reading `!== true` would refuse every
+ * pre-existing pack — and on an `enforce` pack that means denying every tool call
+ * the pack covers. Neither mistake shows up until a user hits it, so the decision
+ * is encoded once, where the field lives: `checkPackMinCliVersion` in
+ * `pack-manifest.ts`.
+ */
+export function compareVersions(a: unknown, b: unknown): number | null {
+  const left = parseSemver(a);
+  const right = parseSemver(b);
+  if (!left || !right) return null;
+  return compareSemver(left, right);
+}

package/src/hooks/worker-server.ts

@@ -17,7 +17,10 @@
  * evaluations could have request B's `clearPolicies()` wipe request A's
  * in-flight registration. Serializing keeps the existing registry code
  * correct with zero changes; a worker_threads/process pool is a valid
- * future enhancement if this becomes a real throughput bottleneck.
+ * future enhancement if this becomes a real throughput bottleneck. The one
+ * exception is the network wait of a two-tier (Jev) review, which happens
+ * after the registry is no longer read and so does not hold the queue (see
+ * `enqueue`).
  */
 import { createConnection, createServer, type Server, type Socket } from "node:net";
 import { existsSync, unlinkSync } from "node:fs";
@@ -97,37 +100,115 @@ const TASK_DEADLINE_MS = 60_000;
  * worker whose `try_wait()` reports it gone), which costs one cold start and
  * denies the in-flight requests — the same fail-closed outcome they were headed
  * for anyway, but recovered on the next call instead of never.
+ *
+ * A task may hand its place in the chain back early by calling `release`:
+ * the next request starts while the task finishes on its own. Only the
+ * two-tier (Jev) path does, at the point it stops reading the registry and
+ * starts waiting on Jev's network answer (`EvaluateHookEventOptions.
+ * releaseRegistry`). Without that, every hook on the machine — PostToolUse,
+ * UserPromptSubmit, other agents' calls — would queue behind each gated call's
+ * round trip, and a slow or unreachable provider would push the calls at the
+ * back of the queue past the client's 30 s budget into fail-closed denies.
+ * A released task no longer holds the registry, so the deadline it was running
+ * under — the one that protects the QUEUE — has done its job. It gets a fresh
+ * one of its own instead of none: it is still running, its connection's later
+ * replies still queue behind it (see `handleConnection`), and a task that has
+ * not settled a minute after handing the queue back is wedged on something
+ * that is not going to finish. Its Jev wait is bounded by the configured
+ * timeout, so nothing on the intended path comes close.
+ *
+ * Released tasks therefore run concurrently with each other and with the
+ * queue: two gated calls can be waiting on Jev at once (T5's throttle shares
+ * one cache and token bucket across them, and does not merge identical
+ * in-flight requests). Replies on one connection still leave in request order
+ * (see `handleConnection`).
  */
 const WEDGED_EXIT_CODE = 75;
+/**
+ * A released task's own deadline, counted from the moment it handed the queue
+ * back. Its Jev wait is bounded by the configured timeout (at most 10 s, plus
+ * the review's own backstop), so only a task stuck on something else ever
+ * reaches this.
+ */
+const RELEASED_TASK_DEADLINE_MS = 60_000;
+
+/** What a wedged task costs: this worker, so the supervisor respawns a clean one. */
+function exitWedged(ms: number, released: boolean): void {
+  hookLogWarn(
+    `worker: a ${released ? "released " : ""}request did not settle within ${ms}ms; ` +
+      `exiting so the supervisor can respawn a clean worker`,
+  );
+  process.exit(WEDGED_EXIT_CODE);
+}
+
+export interface QueuedTaskOptions {
+  taskMs?: number;
+  releasedMs?: number;
+  onWedged?: (ms: number, released: boolean) => void;
+}
+
+/**
+ * Runs one queued task under a wedge deadline, calling `settle` when the next
+ * task may start — because this one finished, or because it handed its place
+ * back early with the `release` it is given. A released task keeps running
+ * under a deadline of its own (see `RELEASED_TASK_DEADLINE_MS`); dropping the
+ * deadline at that point would have made every wedge past the release
+ * invisible.
+ *
+ * Exported for the deadlines' own tests: they are a minute long and expiry
+ * exits the process, so a test passes its own values and its own `onWedged`.
+ */
+export function runQueuedTask(task: (release: () => void) => Promise<void>, settle: () => void, opts: QueuedTaskOptions = {}): void {
+  const onWedged = opts.onWedged ?? exitWedged;
+  let timer: ReturnType<typeof setTimeout> | undefined;
+  let finished = false;
+  let started = false;
+  const arm = (ms: number, released: boolean) => {
+    clearTimeout(timer);
+    timer = setTimeout(() => onWedged(ms, released), ms);
+    // Never let the deadline itself hold the event loop open.
+    timer.unref?.();
+  };
+  /** The next task starts once, whether this one released first or just finished. */
+  const startNext = () => {
+    if (started) return;
+    started = true;
+    settle();
+  };
+  const finish = () => {
+    finished = true;
+    clearTimeout(timer);
+    startNext();
+  };
+  const release = () => {
+    if (finished) return;
+    arm(opts.releasedMs ?? RELEASED_TASK_DEADLINE_MS, true);
+    startNext();
+  };
+  arm(opts.taskMs ?? TASK_DEADLINE_MS, false);
+  void task(release).then(finish, finish);
+}
 
 let processingChain: Promise<void> = Promise.resolve();
-function enqueue(task: () => Promise<void>): void {
-  processingChain = processingChain
-    .then(
-      () =>
-        new Promise<void>((settle) => {
-          const timer = setTimeout(() => {
-            hookLogWarn(
-              `worker: a request did not settle within ${TASK_DEADLINE_MS}ms; ` +
-                `exiting so the supervisor can respawn a clean worker`,
-            );
-            process.exit(WEDGED_EXIT_CODE);
-          }, TASK_DEADLINE_MS);
-          // Never let the deadline itself hold the event loop open.
-          timer.unref?.();
-          const done = () => {
-            clearTimeout(timer);
-            settle();
-          };
-          void task().then(done, done);
-        }),
-    )
-    .catch(() => {});
+function enqueue(task: (release: () => void) => Promise<void>): void {
+  processingChain = processingChain.then(() => new Promise<void>((settle) => runQueuedTask(task, settle))).catch(() => {});
 }
 
 function handleConnection(socket: Socket, shutdown: () => void): void {
   let recvBuf = Buffer.alloc(0);
   let declaredLen: number | null = null;
+  /**
+   * Hook replies leave in the order their requests arrived on this
+   * connection. The wire carries no request id, so a client that pipelines
+   * several requests on one connection can match replies only by order — which
+   * the strictly serialized queue used to guarantee by itself. A two-tier task
+   * that releases the queue early (see `enqueue`) can finish after a request
+   * that arrived behind it, so each reply waits for every earlier one on its
+   * connection. The Rust supervisor opens one connection per request, so today
+   * this never delays anything; it keeps the ordering true for any client that
+   * does pipeline.
+   */
+  let replies: Promise<void> = Promise.resolve();
 
   socket.on("data", (chunk: Buffer) => {
     recvBuf = Buffer.concat([recvBuf, chunk]);
@@ -178,15 +259,27 @@ function handleConnection(socket: Socket, shutdown: () => void): void {
       }
       const request = message;
 
-      enqueue(async () => {
+      let deliver!: (frame: Buffer) => void;
+      const reply = new Promise<Buffer>((resolveReply) => {
+        deliver = resolveReply;
+      });
+      replies = replies
+        .then(() => reply)
+        .then((frame) => {
+          socket.write(frame);
+        })
+        .catch(() => {});
+
+      enqueue(async (release) => {
         try {
           const result = await evaluateHookEvent(request.hookEvent, request.cli, request.stdin, {
             awaitTelemetryFlush: false,
             // Normalised here so no consumer has to know the wire spells
             // "absent" as null.
             fallbackCwd: request.cwd ?? undefined,
+            releaseRegistry: release,
           });
-          socket.write(
+          deliver(
             encodeFrame({
               type: "hookResult",
               exitCode: result.exitCode,
@@ -198,7 +291,7 @@ function handleConnection(socket: Socket, shutdown: () => void): void {
         } catch (err) {
           const msg = err instanceof Error ? err.message : String(err);
           hookLogWarn(`worker: evaluateHookEvent threw: ${msg}`);
-          socket.write(encodeFrame({ type: "error", message: msg }));
+          deliver(encodeFrame({ type: "error", message: msg }));
         }
       });
     }

package/src/index.ts

@@ -6,7 +6,9 @@
  */
 export {
   customPolicies,
+  semanticPolicies,
   getCustomHooks,
+  getSemanticRegistrations,
   clearCustomHooks,
 } from "./hooks/custom-hooks-registry";
 export { allow, deny, instruct } from "./hooks/policy-helpers";
@@ -16,4 +18,8 @@ export type {
   CustomHook,
   PolicyDecision,
   PolicyFunction,
+  PolicyAuthority,
+  SemanticPolicyDeclaration,
+  SemanticProbeDeclaration,
+  SemanticToolClass,
 } from "./hooks/policy-types";

package/.next/standalone/.next/server/chunks/src_hooks_0iu54mz._.js

@@ -1,3 +0,0 @@
-module.exports=[52306,e=>{"use strict";var t=e.i(66680),r=e.i(2157),o=e.i(50227),s=e.i(79857);let i=[1],a=/^[a-f0-9]{64}$/,n=/^[A-Za-z0-9._-]{1,64}\/[A-Za-z0-9._-]{1,64}$/,l=/^[A-Za-z0-9][A-Za-z0-9._+-]{0,63}$/,_=/^[0-9a-f]{7,40}$/,p=/^[A-Za-z0-9._-]{1,128}$/;function c(e){return e instanceof Error?e.message:String(e)}e.s(["readInstalledPacks",0,function(){let e,d=process.env.FAILPROOFAI_PACK_DIR?(0,o.resolve)(process.env.FAILPROOFAI_PACK_DIR,"installed.json"):(0,s.packsInstalledFile)();if(!(0,r.existsSync)(d))return{packs:[],errors:[]};try{e=JSON.parse((0,r.readFileSync)(d,"utf8"))}catch(e){return{packs:[],errors:[{id:null,reason:`unreadable pack manifest: ${c(e)}`}]}}if(!e||"object"!=typeof e)return{packs:[],errors:[{id:null,reason:"pack manifest is not an object"}]};let f=e;if(!i.includes(f.schemaVersion))return{packs:[],errors:[{id:null,reason:`unsupported pack manifest schema ${String(f.schemaVersion)} (supported: ${i.join(", ")})`}]};if(!Array.isArray(f.packs))return{packs:[],errors:[{id:null,reason:"pack manifest packs is not an array"}]};let h=process.env.FAILPROOFAI_PACK_DIR??(0,s.packsDir)(),O=[],E=[],S=new Set;for(let e of f.packs){let s=e&&"object"==typeof e&&"string"==typeof e.id?e.id:null;try{let s=function(e,s){if(!s||"object"!=typeof s)throw Error("pack entry is not an object");let i=function(e){if("string"!=typeof e.id||!n.test(e.id))throw Error(`unsafe pack id ${JSON.stringify(e.id)}`);if("string"!=typeof e.version||!l.test(e.version))throw Error(`invalid version for pack ${e.id}`);if(void 0!==e.effect&&"enforce"!==e.effect&&"observe"!==e.effect)throw Error(`unknown effect ${JSON.stringify(e.effect)} for pack ${e.id}`);let t="string"==typeof e.commit&&_.test(e.commit.trim().toLowerCase())?e.commit.trim().toLowerCase():void 0;return{id:e.id,version:e.version,effect:e.effect??"enforce",...t?{commit:t}:{}}}(s);if("string"!=typeof s.source||0===s.source.length)throw Error(`pack ${s.id} has no source`);if("string"!=typeof s.sha256||!a.test(s.sha256))throw Error(`invalid SHA-256 for pack ${s.id}`);let c=i.effect,d=function(e,t){if(!t||(0,o.isAbsolute)(t))throw Error(`unsafe managed policy path ${JSON.stringify(t)}`);let s=(0,o.resolve)(e,t),i=(0,o.relative)(e,s);if(i.startsWith("..")||(0,o.isAbsolute)(i))throw Error(`managed policy path escapes its root: ${JSON.stringify(t)}`);let a=(0,r.realpathSync)(e),n=(0,r.realpathSync)(s),l=(0,o.relative)(a,n);if(l.startsWith("..")||(0,o.isAbsolute)(l))throw Error(`managed policy symlink escapes its root: ${JSON.stringify(t)}`);return n}(e,s.entry),f=(0,t.createHash)("sha256").update((0,r.readFileSync)(d)).digest("hex");if(f!==s.sha256)throw Error(`pack ${s.id} failed integrity verification: expected ${s.sha256}, got ${f}`);if(!Array.isArray(s.policies))throw Error(`pack ${s.id} policies is not an array`);let h=s.policies.map((e,t)=>(function(e,t,r){let o=`${e} policy #${r}`;if(!t||"object"!=typeof t)throw Error(`${o} is not an object`);let s=t.name;if("string"!=typeof s||!p.test(s))throw Error(`${o} has an unsafe name ${JSON.stringify(s)}`);if("alwaysOn"in t)throw Error(`${o} declares alwaysOn, which packs may not set`);if("string"!=typeof t.description||0===t.description.length)throw Error(`${o} is missing a description`);if("string"!=typeof t.category||0===t.category.length)throw Error(`${o} is missing a category`);if("boolean"!=typeof t.defaultEnabled)throw Error(`${o} is missing defaultEnabled`);if(!t.match||"object"!=typeof t.match)throw Error(`${o} is missing a match`);let i=t.match;for(let e of["events","toolNames"]){let t=i[e];if(void 0!==t&&(!Array.isArray(t)||t.some(e=>"string"!=typeof e||0===e.length)))throw Error(`${o} has a match.${e} that is not a list of names`)}return t})(s.id,e,t)),O=new Set;for(let e of h){if(O.has(e.name))throw Error(`pack ${s.id} declares ${e.name} twice`);O.add(e.name)}let E=null;if(void 0!==s.enabled){if(!Array.isArray(s.enabled)||s.enabled.some(e=>"string"!=typeof e))throw Error(`pack ${s.id} enabled is not an array of names`);E=s.enabled.filter(e=>O.has(e))}let S=null;if(void 0!==s.clis){if(!Array.isArray(s.clis)||s.clis.some(e=>"string"!=typeof e))throw Error(`pack ${s.id} clis is not an array of agent names`);S=s.clis}return{clis:S,id:i.id,version:i.version,source:s.source,path:d,sha256:s.sha256,effect:c,policies:h,enabled:E}}(h,e);if(S.has(s.id))throw Error(`duplicate pack id ${s.id}`);S.add(s.id),O.push(s)}catch(r){let t=e&&("observe"===e.effect||"enforce"===e.effect)?e.effect:"enforce";E.push({id:s,reason:c(r),effect:t,...Array.isArray(e?.policies)?{declared:function(e){let t=[];for(let r of e)r&&"object"==typeof r&&"string"==typeof r.name&&r.match&&"object"==typeof r.match&&t.push(r);return t}(e.policies)}:{},...Array.isArray(e?.clis)&&e.clis.every(e=>"string"==typeof e)?{clis:e.clis}:{}})}}return{packs:O,errors:E}}],52306)},71194,e=>{"use strict";e.i(66680),e.i(2157),e.i(50227),e.i(52306),e.s(["CORE_SOURCE",0,"FailproofAI/policies","PACK_CHECKSUMS_ASSET",0,"SHA256SUMS","PACK_ENTRY_ASSET",0,"failproofai-pack.mjs","PACK_MANIFEST_ASSET",0,"failproofai-pack.json"])},38441,e=>{"use strict";let t=["SessionStart","SessionEnd","UserPromptSubmit","PreToolUse","PermissionRequest","PermissionDenied","PostToolUse","PostToolUseFailure","Notification","SubagentStart","SubagentStop","TaskCreated","TaskCompleted","Stop","StopFailure","TeammateIdle","InstructionsLoaded","ConfigChange","CwdChanged","FileChanged","WorktreeCreate","WorktreeRemove","PreCompact","PostCompact","Elicitation","ElicitationResult","UserPromptExpansion","PostToolBatch","Setup"].filter(e=>"WorktreeCreate"!==e);e.s(["ANTIGRAVITY_HOOK_EVENT_TYPES",0,["PreToolUse","PostToolUse","PreInvocation","Stop"],"ANTIGRAVITY_HOOK_SCOPES",0,["user","project"],"ANTIGRAVITY_TOOL_INPUT_MAP",0,{Bash:{CommandLine:"command",Cwd:"cwd"},Write:{TargetFile:"file_path",CodeContent:"content"},Edit:{TargetFile:"file_path"},Read:{TargetFile:"file_path",AbsolutePath:"file_path",File:"file_path"}},"ANTIGRAVITY_TOOL_MAP",0,{run_command:"Bash",write_to_file:"Write",read_file:"Read",view_file:"Read",edit_file:"Edit",replace_file_content:"Edit",list_dir:"LS",find_by_name:"Glob",grep_search:"Grep",read_url_content:"WebFetch",search_web:"WebSearch"},"CLAUDE_INSTALL_EVENT_TYPES",0,t,"CODEX_EVENT_MAP",0,{session_start:"SessionStart",pre_tool_use:"PreToolUse",permission_request:"PermissionRequest",post_tool_use:"PostToolUse",user_prompt_submit:"UserPromptSubmit",stop:"Stop",subagent_start:"SubagentStart",pre_compact:"PreCompact",post_compact:"PostCompact",subagent_stop:"SubagentStop"},"CODEX_HOOK_EVENT_TYPES",0,["session_start","pre_tool_use","permission_request","post_tool_use","user_prompt_submit","stop","subagent_start","pre_compact","post_compact","subagent_stop"],"CODEX_HOOK_SCOPES",0,["user","project"],"CODEX_TOOL_MAP",0,{apply_patch:"Edit",write_stdin:"Bash"},"COPILOT_HOOK_EVENT_TYPES",0,["SessionStart","SessionEnd","UserPromptSubmit","PreToolUse","PostToolUse","Stop","SubagentStop","PostToolUseFailure","ErrorOccurred","PreCompact","PermissionRequest","Notification"],"COPILOT_HOOK_SCOPES",0,["user","project"],"COPILOT_TOOL_INPUT_MAP",0,{Read:{path:"file_path"},Write:{path:"file_path",file_text:"content"},Edit:{path:"file_path",old_str:"old_string",new_str:"new_string"}},"COPILOT_TOOL_MAP",0,{bash:"Bash",powershell:"Bash",list_bash:"Bash",read_bash:"Bash",stop_bash:"Bash",write_bash:"Bash",list_powershell:"Bash",read_powershell:"Bash",stop_powershell:"Bash",write_powershell:"Bash",read:"Read",view:"Read",show_file:"Read",write:"Write",create:"Write",edit:"Edit",apply_patch:"Edit",str_replace_editor:"Edit",glob:"Glob",grep:"Grep",rg:"Grep",ls:"LS",web_fetch:"WebFetch"},"CURSOR_HOOK_EVENT_TYPES",0,["sessionStart","sessionEnd","beforeSubmitPrompt","preToolUse","postToolUse","stop","subagentStop"],"CURSOR_HOOK_SCOPES",0,["user","project"],"CURSOR_TOOL_MAP",0,{Shell:"Bash"},"DEVIN_HOOK_EVENT_TYPES",0,["SessionStart","UserPromptSubmit","PreToolUse","PostToolUse","PermissionRequest","Stop","SessionEnd"],"DEVIN_HOOK_SCOPES",0,["user","project"],"DEVIN_TOOL_MAP",0,{exec:"Bash"},"FACTORY_HOOK_EVENT_TYPES",0,["SessionStart","UserPromptSubmit","PreToolUse","PostToolUse","Notification","Stop","SubagentStop","PreCompact","SessionEnd"],"FACTORY_HOOK_SCOPES",0,["user","project"],"FACTORY_TOOL_MAP",0,{Execute:"Bash",Read:"Read",Edit:"Edit",Create:"Write",Grep:"Grep",Glob:"Glob",LS:"LS",FetchUrl:"WebFetch",WebSearch:"WebSearch",TodoWrite:"TodoWrite",Task:"Task"},"FAILPROOFAI_HOOK_MARKER",0,"__failproofai_hook__","GOOSE_HOOK_EVENT_TYPES",0,["SessionStart","UserPromptSubmit","PreToolUse","PostToolUse","SessionEnd"],"GOOSE_HOOK_SCOPES",0,["user","project"],"GOOSE_TOOL_INPUT_MAP",0,{Read:{path:"file_path",source:"file_path"},Write:{path:"file_path"},Edit:{path:"file_path"},LS:{path:"file_path"}},"GOOSE_TOOL_MAP",0,{shell:"Bash",write:"Write",edit:"Edit",view:"Read",read_image:"Read",glob:"Glob",grep:"Grep",tree:"LS",delegate:"Task",todo__todo_write:"TodoWrite"},"HERMES_HOOK_EVENT_TYPES",0,["pre_tool_call","post_tool_call","on_session_start","on_session_end","subagent_stop"],"HERMES_HOOK_SCOPES",0,["user"],"HERMES_TOOL_INPUT_MAP",0,{Read:{path:"file_path"},Write:{path:"file_path"},Edit:{path:"file_path"}},"HERMES_TOOL_MAP",0,{terminal:"Bash",bash:"Bash",read_file:"Read",write_file:"Write",patch:"Edit",web_search:"WebSearch",web_extract:"WebFetch",search_files:"Grep",todo:"TodoWrite"},"HOOK_SCOPES",0,["user","project","local"],"INTEGRATION_TYPES",0,["claude","codex","copilot","cursor","opencode","pi","hermes","openclaw","factory","devin","antigravity","goose"],"OPENCLAW_HOOK_EVENT_TYPES",0,["before_tool_call","after_tool_call","before_agent_run","before_agent_finalize","session_start","session_end","subagent_ended","before_compaction"],"OPENCLAW_HOOK_SCOPES",0,["user"],"OPENCLAW_TOOL_INPUT_MAP",0,{Read:{path:"file_path"},Write:{path:"file_path"},Edit:{path:"file_path"}},"OPENCLAW_TOOL_MAP",0,{exec:"Bash",read:"Read",write:"Write",edit:"Edit",grep:"Grep",glob:"Glob",web_search:"WebSearch",web_fetch:"WebFetch"},"OPENCODE_HOOK_EVENT_TYPES",0,["tool.execute.before","tool.execute.after","session.created","session.deleted","session.idle","message.updated","permission.ask"],"OPENCODE_HOOK_SCOPES",0,["user","project"],"OPENCODE_TOOL_INPUT_MAP",0,{Read:{filePath:"file_path"},Write:{filePath:"file_path"},Edit:{filePath:"file_path",oldString:"old_string",newString:"new_string",replaceAll:"replace_all"}},"OPENCODE_TOOL_MAP",0,{bash:"Bash",read:"Read",write:"Write",edit:"Edit",apply_patch:"Edit",glob:"Glob",grep:"Grep",list:"LS",webfetch:"WebFetch",websearch:"WebSearch",todowrite:"TodoWrite",todoread:"TodoRead"},"PI_HOOK_EVENT_TYPES",0,["session_start","session_shutdown","input","tool_call","user_bash","tool_result","agent_end"],"PI_HOOK_SCOPES",0,["user","project"],"PI_TOOL_INPUT_MAP",0,{Read:{path:"file_path"},Write:{path:"file_path"},Edit:{path:"file_path"}},"PI_TOOL_MAP",0,{bash:"Bash",read:"Read",write:"Write",edit:"Edit",glob:"Glob",grep:"Grep"}])}];
-
-//# sourceMappingURL=src_hooks_0iu54mz._.js.map

package/.next/standalone/.next/server/chunks/ssr/[root-of-the-server]__0-_ki57._.js

@@ -1,4 +0,0 @@
-module.exports=[74533,(a,b,c)=>{b.exports=a.x("node:child_process",()=>require("node:child_process"))},66680,(a,b,c)=>{b.exports=a.x("node:crypto",()=>require("node:crypto"))},2157,(a,b,c)=>{b.exports=a.x("node:fs",()=>require("node:fs"))},60526,(a,b,c)=>{b.exports=a.x("node:os",()=>require("node:os"))},50227,(a,b,c)=>{b.exports=a.x("node:path",()=>require("node:path"))},20213,a=>{"use strict";var b=a.i(36359),c=a.i(36119),d=a.i(37936),e=a.i(21572),f=a.i(81243);async function g(a){if(a&&!await (0,f.whoAmI)()){let a=(0,f.readAuth)();return{ok:!1,reason:a&&1e3*a.refresh_expires_at>Date.now()?"unreachable":"signed-out"}}return{ok:!0,auto:(0,e.updateConfig)({audit:a?{auto:!0,reportsConsentedAt:Date.now()}:{auto:!1}}).audit.auto}}async function h(a){return(0,e.updateConfig)({audit:{intervalDays:a}}),{intervalDays:(0,e.readConfig)().audit.intervalDays}}(0,a.i(13095).ensureServerEntryExports)([g,h]),(0,d.registerServerReference)(g,"40a46a4bfb367205e6de934f38e1e919c3b69ed937",null),(0,d.registerServerReference)(h,"40168692117f80ed35533b6f510d0a483a609cbf47",null),a.s([],14097),a.i(14097),a.s(["002a551863b51d42ffe781e9841b676b82fa895b9b",()=>b.getTelemetryConfig,"00307e102c6f6e4cfdd9201975d1f4ef94ea86924c",()=>c.getScheduledAuditAction,"40168692117f80ed35533b6f510d0a483a609cbf47",0,h,"40a46a4bfb367205e6de934f38e1e919c3b69ed937",0,g],20213)},36359,a=>{"use strict";var b=a.i(37936),c=a.i(69839);a.i(93328);var d=a.i(31920),e=a.i(12072);async function f(){let a=(0,d.isTelemetryEnabled)();return{enabled:a,distinctId:a?(0,c.getInstanceId)():"",apiKey:process.env.FAILPROOFAI_POSTHOG_KEY??"phc_Ac1Ww1GqKc0z1SyrRWbmatEeQdlOQIsDEEdP8l8JRgX",host:process.env.FAILPROOFAI_POSTHOG_HOST??"https://us.i.posthog.com",version:e.version}}(0,a.i(13095).ensureServerEntryExports)([f]),(0,b.registerServerReference)(f,"002a551863b51d42ffe781e9841b676b82fa895b9b",null),a.s(["getTelemetryConfig",0,f])},31920,a=>{"use strict";var b=a.i(21572);a.s(["isTelemetryEnabled",0,function(){if("1"===process.env.FAILPROOFAI_TELEMETRY_DISABLED)return!1;try{return(0,b.readConfig)().telemetry.enabled}catch{return!0}}])},69839,a=>{"use strict";let b;var c=a.i(2157),d=a.i(50227),e=a.i(60526),f=a.i(66680);a.i(74533);var g=a.i(75818);let h=d.default.join(e.default.homedir(),".failproofai"),i=d.default.join(h,"instance-id");function j(a){return f.default.createHmac("sha256","failproofai-telemetry-v1").update(a).digest("hex")}function k(a){let b;try{if(b=(0,g.telemetryIdFile)(),c.default.readFileSync(b,"utf-8").trim()===a)return}catch{try{b=(0,g.telemetryIdFile)()}catch{return}}try{c.default.mkdirSync(d.default.dirname(b),{recursive:!0});let e=`${b}.${process.pid}.tmp`;c.default.writeFileSync(e,a,{encoding:"utf-8",mode:384}),c.default.renameSync(e,b)}catch{}}a.s(["getInstanceId",0,function(){if(b)return b;let a=function(){try{for(let a of(e.default.platform(),["/etc/machine-id","/var/lib/dbus/machine-id"]))try{let b=c.default.readFileSync(a,"utf-8").trim();if(b)return b}catch{}}catch{}}();if(a)return k(b=j(a)),b;let d=[e.default.hostname(),e.default.homedir(),e.default.platform(),e.default.arch(),e.default.cpus()[0]?.model??""].join(":");return d?k(b=j(d)):k(b=function(){try{let a=c.default.readFileSync(i,"utf-8").trim();if(a)return a}catch{}let a=f.default.randomUUID();try{c.default.mkdirSync(h,{recursive:!0}),c.default.writeFileSync(i,a,"utf-8")}catch{}return a}()),b},"hashToId",0,j])},93328,a=>{"use strict";var b=a.i(69839),c=a.i(31920),d=a.i(12072),e=a.i(79779);e.POSTHOG_API_KEY,a.s(["trackEvent",0,function(a,f){if(!(0,c.isTelemetryEnabled)())return;let g=globalThis.__FAILPROOFAI_POSTHOG__;g&&g.capture({distinctId:(0,b.getInstanceId)(),event:a,properties:{...f,$lib:"failproofai",failproofai_version:d.version,product:e.POSTHOG_PRODUCT}})}])},13095,(a,b,c)=>{"use strict";function d(a){for(let b=0;b<a.length;b++){let c=a[b];if("function"!=typeof c)throw Object.defineProperty(Error(`A "use server" file can only export async functions, found ${typeof c}.
-Read more: https://nextjs.org/docs/messages/invalid-use-server-value`),"__NEXT_ERROR_CODE",{value:"E352",enumerable:!1,configurable:!0})}}Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"ensureServerEntryExports",{enumerable:!0,get:function(){return d}})},37936,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"registerServerReference",{enumerable:!0,get:function(){return d.registerServerReference}});let d=a.r(11857)},12072,(a,b,c)=>{b.exports={name:"failproofai",version:"1.0.6",description:"Observability and enforcement for AI agent harnesses. 39 built-in policies hooked into 12 of them — Claude Code, Codex, Cursor, Hermes, OpenClaw and more — blocking the tool call before it runs. Local dashboard included, no account needed.",bin:{failproofai:"./dist/cli.mjs",failproofaid:"./bin/failproofaid-shim.mjs"},files:["bin/","src/","scripts/","lib/","pi-extension/","hermes-plugin/","openclaw-plugin/",".next/standalone/","dist/","README.md"],engines:{node:">=20.9.0",bun:">=1.3.0"},scripts:{predev:"bun run build:cli && bun link",dev:"FAILPROOFAI_TELEMETRY_DISABLED=1 bun scripts/dev.ts --port 8020","build:cli":"bun build --target=node --format=esm --outfile=dist/cli.mjs bin/failproofai.mjs --external posthog-node --external sql.js && node -e \"const fs=require('fs');const c=fs.readFileSync('dist/cli.mjs','utf8');fs.writeFileSync('dist/cli.mjs',c.replace('#!/usr/bin/env bun','#!/usr/bin/env node').replace('// @bun\\n',''))\"","build:worker":"bun build --target=node --format=esm --outfile=dist/worker.mjs bin/failproofai-worker.mjs --external posthog-node --external sql.js",build:"bun build --target=node --format=cjs --outfile=dist/index.js src/index.ts && bun run build:cli && bun run build:worker && bun --bun next build && node -e \"const {cpSync}=require('fs');cpSync('.next/static','.next/standalone/.next/static',{recursive:true});\" && node scripts/prune-standalone.mjs",prestart:"bun run build:cli && bun link",start:"FAILPROOFAI_TELEMETRY_DISABLED=1 bun scripts/start.ts",test:"vitest","test:run":"vitest run",lint:"eslint . --config eslint.config.mjs",prepare:"bun run build","test:e2e":"vitest run --config vitest.config.e2e.mts","test:e2e:watch":"vitest --config vitest.config.e2e.mts",translate:"bun scripts/translate-docs/cli.ts","translate:readme":"bun scripts/translate-docs/cli.ts --readme-only","translate:docs":"bun scripts/translate-docs/cli.ts --docs-only","translate:dry-run":"bun scripts/translate-docs/cli.ts --dry-run","translate:validate":"bun scripts/translate-docs/cli.ts --validate","validate:mdx":"bun scripts/validate-mdx.ts","docs:audit":"bun scripts/docs-audit.ts","build:pack":"bun scripts/build-policy-pack.mjs"},keywords:["agent-observability","llm-observability","agent-tracing","agent-monitoring","agent-harness","guardrails","enforcement","policies","evals","ai-agent","autonomous-agent","agent-reliability","failure-prevention","claude-code","codex","hermes","openclaw","cli","local-first","hooks"],author:"ExosphereHost Inc. <failproofai@exosphere.host>",license:"SEE LICENSE IN LICENSE",homepage:"https://github.com/FailproofAI/failproofai",repository:{type:"git",url:"https://github.com/FailproofAI/failproofai.git"},bugs:{url:"https://github.com/FailproofAI/failproofai/issues"},publishConfig:{access:"public"},devDependencies:{"@anthropic-ai/sdk":"^0.125.0","@mdx-js/mdx":"^3.1.1","@tailwindcss/postcss":"^4.3.1","@tanstack/react-virtual":"^3.14.10","@testing-library/jest-dom":"^7.0.0","@testing-library/react":"^16.3.2","@testing-library/user-event":"^14.6.5","@types/node":"26.5.1","@types/react":"19.3.0","@types/react-dom":"^19.2.3","@vitejs/plugin-react":"^6.1.0",clsx:"^2.1.1",eslint:"^10.9.0","eslint-config-next":"^16.3.2",jsdom:"^30.0.1","lucide-react":"^1.33.0",next:"^16.3.2",react:"^19.2.4","react-dom":"^19.2.4","tailwind-merge":"^3.4.0",tailwindcss:"^4.3.1",typescript:"6.0.3",vitest:"^5.0.0"},dependencies:{"html-to-image":"^1.11.13","posthog-node":"^5.50.0","sql.js":"^1.14.1",yaml:"^2.9.0"},overrides:{nanoid:"3.3.18",postcss:"8.5.26","eslint-plugin-react-hooks":"7.0.1",vite:"8.0.16",undici:"7.29.0","brace-expansion":"5.0.9",sharp:"0.35.4",browserslist:"4.28.8"},optionalDependencies:{"@failproofai/failproofaid-linux-x64":"1.0.6","@failproofai/failproofaid-linux-arm64":"1.0.6","@failproofai/failproofaid-darwin-x64":"1.0.6","@failproofai/failproofaid-darwin-arm64":"1.0.6"},failproofaidBinaries:{"linux-x64":"e075f24a3a0950b631979d9370b665da2c3e2920decfb917ff0831d1f17c9740","linux-arm64":"b90ce8c642f2685719f4915695615219860daf3155a9c07344cf1e10395028c3","darwin-x64":"51dd95e9b85226e4f1888c7edaa56ec4464e91eb645d39c5cb7cede16d2da2f1","darwin-arm64":"f6a1b9d63363e8805e0d72b4fa168fde661bdbbd4125b54047f7de8948ea0f39"}}},79779,a=>{"use strict";a.s(["POSTHOG_API_KEY",0,"phc_Ac1Ww1GqKc0z1SyrRWbmatEeQdlOQIsDEEdP8l8JRgX","POSTHOG_PRODUCT",0,"failproofai-oss"])}];
-
-//# sourceMappingURL=%5Broot-of-the-server%5D__0-_ki57._.js.map

package/.next/standalone/.next/server/chunks/ssr/[root-of-the-server]__013jr2b._.js

@@ -1,4 +0,0 @@
-module.exports=[74533,(a,b,c)=>{b.exports=a.x("node:child_process",()=>require("node:child_process"))},66680,(a,b,c)=>{b.exports=a.x("node:crypto",()=>require("node:crypto"))},2157,(a,b,c)=>{b.exports=a.x("node:fs",()=>require("node:fs"))},60526,(a,b,c)=>{b.exports=a.x("node:os",()=>require("node:os"))},50227,(a,b,c)=>{b.exports=a.x("node:path",()=>require("node:path"))},165,a=>{"use strict";var b=a.i(36359);a.s([],84833),a.i(84833),a.s(["002a551863b51d42ffe781e9841b676b82fa895b9b",()=>b.getTelemetryConfig],165)},36359,a=>{"use strict";var b=a.i(37936),c=a.i(69839);a.i(93328);var d=a.i(31920),e=a.i(12072);async function f(){let a=(0,d.isTelemetryEnabled)();return{enabled:a,distinctId:a?(0,c.getInstanceId)():"",apiKey:process.env.FAILPROOFAI_POSTHOG_KEY??"phc_Ac1Ww1GqKc0z1SyrRWbmatEeQdlOQIsDEEdP8l8JRgX",host:process.env.FAILPROOFAI_POSTHOG_HOST??"https://us.i.posthog.com",version:e.version}}(0,a.i(13095).ensureServerEntryExports)([f]),(0,b.registerServerReference)(f,"002a551863b51d42ffe781e9841b676b82fa895b9b",null),a.s(["getTelemetryConfig",0,f])},31920,a=>{"use strict";var b=a.i(21572);a.s(["isTelemetryEnabled",0,function(){if("1"===process.env.FAILPROOFAI_TELEMETRY_DISABLED)return!1;try{return(0,b.readConfig)().telemetry.enabled}catch{return!0}}])},69839,a=>{"use strict";let b;var c=a.i(2157),d=a.i(50227),e=a.i(60526),f=a.i(66680);a.i(74533);var g=a.i(75818);let h=d.default.join(e.default.homedir(),".failproofai"),i=d.default.join(h,"instance-id");function j(a){return f.default.createHmac("sha256","failproofai-telemetry-v1").update(a).digest("hex")}function k(a){let b;try{if(b=(0,g.telemetryIdFile)(),c.default.readFileSync(b,"utf-8").trim()===a)return}catch{try{b=(0,g.telemetryIdFile)()}catch{return}}try{c.default.mkdirSync(d.default.dirname(b),{recursive:!0});let e=`${b}.${process.pid}.tmp`;c.default.writeFileSync(e,a,{encoding:"utf-8",mode:384}),c.default.renameSync(e,b)}catch{}}a.s(["getInstanceId",0,function(){if(b)return b;let a=function(){try{for(let a of(e.default.platform(),["/etc/machine-id","/var/lib/dbus/machine-id"]))try{let b=c.default.readFileSync(a,"utf-8").trim();if(b)return b}catch{}}catch{}}();if(a)return k(b=j(a)),b;let d=[e.default.hostname(),e.default.homedir(),e.default.platform(),e.default.arch(),e.default.cpus()[0]?.model??""].join(":");return d?k(b=j(d)):k(b=function(){try{let a=c.default.readFileSync(i,"utf-8").trim();if(a)return a}catch{}let a=f.default.randomUUID();try{c.default.mkdirSync(h,{recursive:!0}),c.default.writeFileSync(i,a,"utf-8")}catch{}return a}()),b},"hashToId",0,j])},93328,a=>{"use strict";var b=a.i(69839),c=a.i(31920),d=a.i(12072),e=a.i(79779);e.POSTHOG_API_KEY,a.s(["trackEvent",0,function(a,f){if(!(0,c.isTelemetryEnabled)())return;let g=globalThis.__FAILPROOFAI_POSTHOG__;g&&g.capture({distinctId:(0,b.getInstanceId)(),event:a,properties:{...f,$lib:"failproofai",failproofai_version:d.version,product:e.POSTHOG_PRODUCT}})}])},13095,(a,b,c)=>{"use strict";function d(a){for(let b=0;b<a.length;b++){let c=a[b];if("function"!=typeof c)throw Object.defineProperty(Error(`A "use server" file can only export async functions, found ${typeof c}.
-Read more: https://nextjs.org/docs/messages/invalid-use-server-value`),"__NEXT_ERROR_CODE",{value:"E352",enumerable:!1,configurable:!0})}}Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"ensureServerEntryExports",{enumerable:!0,get:function(){return d}})},37936,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"registerServerReference",{enumerable:!0,get:function(){return d.registerServerReference}});let d=a.r(11857)},2726,a=>{a.v(b=>Promise.all(["server/chunks/ssr/[externals]__0vmspq5._.js","server/chunks/ssr/node_modules_posthog-node_dist_entrypoints_index_node_mjs_11bnuzn._.js"].map(b=>a.l(b))).then(()=>b(74493)))},12072,(a,b,c)=>{b.exports={name:"failproofai",version:"1.0.6",description:"Observability and enforcement for AI agent harnesses. 39 built-in policies hooked into 12 of them — Claude Code, Codex, Cursor, Hermes, OpenClaw and more — blocking the tool call before it runs. Local dashboard included, no account needed.",bin:{failproofai:"./dist/cli.mjs",failproofaid:"./bin/failproofaid-shim.mjs"},files:["bin/","src/","scripts/","lib/","pi-extension/","hermes-plugin/","openclaw-plugin/",".next/standalone/","dist/","README.md"],engines:{node:">=20.9.0",bun:">=1.3.0"},scripts:{predev:"bun run build:cli && bun link",dev:"FAILPROOFAI_TELEMETRY_DISABLED=1 bun scripts/dev.ts --port 8020","build:cli":"bun build --target=node --format=esm --outfile=dist/cli.mjs bin/failproofai.mjs --external posthog-node --external sql.js && node -e \"const fs=require('fs');const c=fs.readFileSync('dist/cli.mjs','utf8');fs.writeFileSync('dist/cli.mjs',c.replace('#!/usr/bin/env bun','#!/usr/bin/env node').replace('// @bun\\n',''))\"","build:worker":"bun build --target=node --format=esm --outfile=dist/worker.mjs bin/failproofai-worker.mjs --external posthog-node --external sql.js",build:"bun build --target=node --format=cjs --outfile=dist/index.js src/index.ts && bun run build:cli && bun run build:worker && bun --bun next build && node -e \"const {cpSync}=require('fs');cpSync('.next/static','.next/standalone/.next/static',{recursive:true});\" && node scripts/prune-standalone.mjs",prestart:"bun run build:cli && bun link",start:"FAILPROOFAI_TELEMETRY_DISABLED=1 bun scripts/start.ts",test:"vitest","test:run":"vitest run",lint:"eslint . --config eslint.config.mjs",prepare:"bun run build","test:e2e":"vitest run --config vitest.config.e2e.mts","test:e2e:watch":"vitest --config vitest.config.e2e.mts",translate:"bun scripts/translate-docs/cli.ts","translate:readme":"bun scripts/translate-docs/cli.ts --readme-only","translate:docs":"bun scripts/translate-docs/cli.ts --docs-only","translate:dry-run":"bun scripts/translate-docs/cli.ts --dry-run","translate:validate":"bun scripts/translate-docs/cli.ts --validate","validate:mdx":"bun scripts/validate-mdx.ts","docs:audit":"bun scripts/docs-audit.ts","build:pack":"bun scripts/build-policy-pack.mjs"},keywords:["agent-observability","llm-observability","agent-tracing","agent-monitoring","agent-harness","guardrails","enforcement","policies","evals","ai-agent","autonomous-agent","agent-reliability","failure-prevention","claude-code","codex","hermes","openclaw","cli","local-first","hooks"],author:"ExosphereHost Inc. <failproofai@exosphere.host>",license:"SEE LICENSE IN LICENSE",homepage:"https://github.com/FailproofAI/failproofai",repository:{type:"git",url:"https://github.com/FailproofAI/failproofai.git"},bugs:{url:"https://github.com/FailproofAI/failproofai/issues"},publishConfig:{access:"public"},devDependencies:{"@anthropic-ai/sdk":"^0.125.0","@mdx-js/mdx":"^3.1.1","@tailwindcss/postcss":"^4.3.1","@tanstack/react-virtual":"^3.14.10","@testing-library/jest-dom":"^7.0.0","@testing-library/react":"^16.3.2","@testing-library/user-event":"^14.6.5","@types/node":"26.5.1","@types/react":"19.3.0","@types/react-dom":"^19.2.3","@vitejs/plugin-react":"^6.1.0",clsx:"^2.1.1",eslint:"^10.9.0","eslint-config-next":"^16.3.2",jsdom:"^30.0.1","lucide-react":"^1.33.0",next:"^16.3.2",react:"^19.2.4","react-dom":"^19.2.4","tailwind-merge":"^3.4.0",tailwindcss:"^4.3.1",typescript:"6.0.3",vitest:"^5.0.0"},dependencies:{"html-to-image":"^1.11.13","posthog-node":"^5.50.0","sql.js":"^1.14.1",yaml:"^2.9.0"},overrides:{nanoid:"3.3.18",postcss:"8.5.26","eslint-plugin-react-hooks":"7.0.1",vite:"8.0.16",undici:"7.29.0","brace-expansion":"5.0.9",sharp:"0.35.4",browserslist:"4.28.8"},optionalDependencies:{"@failproofai/failproofaid-linux-x64":"1.0.6","@failproofai/failproofaid-linux-arm64":"1.0.6","@failproofai/failproofaid-darwin-x64":"1.0.6","@failproofai/failproofaid-darwin-arm64":"1.0.6"},failproofaidBinaries:{"linux-x64":"e075f24a3a0950b631979d9370b665da2c3e2920decfb917ff0831d1f17c9740","linux-arm64":"b90ce8c642f2685719f4915695615219860daf3155a9c07344cf1e10395028c3","darwin-x64":"51dd95e9b85226e4f1888c7edaa56ec4464e91eb645d39c5cb7cede16d2da2f1","darwin-arm64":"f6a1b9d63363e8805e0d72b4fa168fde661bdbbd4125b54047f7de8948ea0f39"}}},79779,a=>{"use strict";a.s(["POSTHOG_API_KEY",0,"phc_Ac1Ww1GqKc0z1SyrRWbmatEeQdlOQIsDEEdP8l8JRgX","POSTHOG_PRODUCT",0,"failproofai-oss"])}];
-
-//# sourceMappingURL=%5Broot-of-the-server%5D__013jr2b._.js.map

package/.next/standalone/.next/server/chunks/ssr/[root-of-the-server]__01wy8d-._.js

@@ -1,4 +0,0 @@
-module.exports=[74533,(a,b,c)=>{b.exports=a.x("node:child_process",()=>require("node:child_process"))},66680,(a,b,c)=>{b.exports=a.x("node:crypto",()=>require("node:crypto"))},2157,(a,b,c)=>{b.exports=a.x("node:fs",()=>require("node:fs"))},60526,(a,b,c)=>{b.exports=a.x("node:os",()=>require("node:os"))},50227,(a,b,c)=>{b.exports=a.x("node:path",()=>require("node:path"))},7292,1144,a=>{"use strict";var b=a.i(37936),c=a.i(2157),d=a.i(50227),e=a.i(75818);let f="current.jsonl",g=()=>(0,e.hookActivityDir)();function h(){(0,c.existsSync)(g())||(0,c.mkdirSync)(g(),{recursive:!0})}function i(){let a=function(){try{return JSON.parse((0,c.readFileSync)((0,d.join)(g(),"stats.json"),"utf-8"))}catch{return{totalEvents:0,denyCount:0,policyMap:{}}}}(),b=null,e=0;for(let[c,d]of Object.entries(a.policyMap))d>e&&(b=c,e=d);return{totalEvents:a.totalEvents,denyCount:a.denyCount,topPolicy:b,topPolicyCount:e}}function j(a,b){let c=(function(){h();let a=l((0,d.join)(g(),f)).reverse(),b=m(),c=[];for(let a of b){let b=l((0,d.join)(g(),a));c.push(...b.reverse())}return[...a,...c]})().filter(b=>(!a.decision||b.decision===a.decision)&&(!a.eventType||b.eventType===a.eventType)&&(!a.policyName||!!b.policyName&&!!b.policyName.toLowerCase().includes(a.policyName.toLowerCase()))&&(!a.sessionId||!!b.sessionId&&!!b.sessionId.toLowerCase().includes(a.sessionId.toLowerCase()))&&(!a.integration||b.integration===a.integration)&&(!a.source||b.policySource===a.source)&&!0),e=Math.max(1,Math.ceil(c.length/25)),j=(b-1)*25;return{entries:c.slice(j,j+25),totalPages:e,page:b,stats:i()}}function k(a){let b=function(a){if(h(),a<1)return[];if(1===a)return l((0,d.join)(g(),f)).reverse();let b=m(),c=a-2;return c>=b.length?[]:l((0,d.join)(g(),b[c])).reverse()}(a);return{entries:b,totalPages:(h(),1+m().length),page:a,stats:i()}}function l(a){let b=function(a){try{return(0,c.readFileSync)(a,"utf-8")}catch{return""}}(a);if(!b.trim())return[];let d=[];for(let a of b.trim().split("\n"))try{var e;d.push((e=JSON.parse(a),void 0===e.cloudVersion&&"number"==typeof e.cloudRevision&&(e.cloudVersion=e.cloudRevision),void 0===e.cloudDeployment&&"number"==typeof e.cloudGeneration&&(e.cloudDeployment=e.cloudGeneration),e))}catch{}return d}function m(){try{return(0,c.readdirSync)(g()).filter(a=>a.startsWith("page-")&&a.endsWith(".jsonl")).sort((a,b)=>{let c=a.slice(5,-6).split("-"),d=b.slice(5,-6).split("-"),e=parseInt(c[0],10),f=parseInt(d[0],10);if(e!==f)return f-e;let g=c.length>1?parseInt(c[1],10):0;return(d.length>1?parseInt(d[1],10):0)-g})}catch{return[]}}async function n(a){return k(a)}async function o(a,b){return j(a,b)}a.s(["getHookActivityHistory",0,k,"searchHookActivity",0,j],1144),(0,a.i(13095).ensureServerEntryExports)([n,o]),(0,b.registerServerReference)(n,"405d01984e38d9024cc663e19a61a035216c7283cb",null),(0,b.registerServerReference)(o,"607d04cf3dfa7aa40bb77f7c023c14a6ef615e1ad5",null),a.s(["getHookActivityAction",0,n,"searchHookActivityAction",0,o],7292)},36359,a=>{"use strict";var b=a.i(37936),c=a.i(69839);a.i(93328);var d=a.i(31920),e=a.i(12072);async function f(){let a=(0,d.isTelemetryEnabled)();return{enabled:a,distinctId:a?(0,c.getInstanceId)():"",apiKey:process.env.FAILPROOFAI_POSTHOG_KEY??"phc_Ac1Ww1GqKc0z1SyrRWbmatEeQdlOQIsDEEdP8l8JRgX",host:process.env.FAILPROOFAI_POSTHOG_HOST??"https://us.i.posthog.com",version:e.version}}(0,a.i(13095).ensureServerEntryExports)([f]),(0,b.registerServerReference)(f,"002a551863b51d42ffe781e9841b676b82fa895b9b",null),a.s(["getTelemetryConfig",0,f])},31920,a=>{"use strict";var b=a.i(21572);a.s(["isTelemetryEnabled",0,function(){if("1"===process.env.FAILPROOFAI_TELEMETRY_DISABLED)return!1;try{return(0,b.readConfig)().telemetry.enabled}catch{return!0}}])},69839,a=>{"use strict";let b;var c=a.i(2157),d=a.i(50227),e=a.i(60526),f=a.i(66680);a.i(74533);var g=a.i(75818);let h=d.default.join(e.default.homedir(),".failproofai"),i=d.default.join(h,"instance-id");function j(a){return f.default.createHmac("sha256","failproofai-telemetry-v1").update(a).digest("hex")}function k(a){let b;try{if(b=(0,g.telemetryIdFile)(),c.default.readFileSync(b,"utf-8").trim()===a)return}catch{try{b=(0,g.telemetryIdFile)()}catch{return}}try{c.default.mkdirSync(d.default.dirname(b),{recursive:!0});let e=`${b}.${process.pid}.tmp`;c.default.writeFileSync(e,a,{encoding:"utf-8",mode:384}),c.default.renameSync(e,b)}catch{}}a.s(["getInstanceId",0,function(){if(b)return b;let a=function(){try{for(let a of(e.default.platform(),["/etc/machine-id","/var/lib/dbus/machine-id"]))try{let b=c.default.readFileSync(a,"utf-8").trim();if(b)return b}catch{}}catch{}}();if(a)return k(b=j(a)),b;let d=[e.default.hostname(),e.default.homedir(),e.default.platform(),e.default.arch(),e.default.cpus()[0]?.model??""].join(":");return d?k(b=j(d)):k(b=function(){try{let a=c.default.readFileSync(i,"utf-8").trim();if(a)return a}catch{}let a=f.default.randomUUID();try{c.default.mkdirSync(h,{recursive:!0}),c.default.writeFileSync(i,a,"utf-8")}catch{}return a}()),b},"hashToId",0,j])},93328,a=>{"use strict";var b=a.i(69839),c=a.i(31920),d=a.i(12072),e=a.i(79779);e.POSTHOG_API_KEY,a.s(["trackEvent",0,function(a,f){if(!(0,c.isTelemetryEnabled)())return;let g=globalThis.__FAILPROOFAI_POSTHOG__;g&&g.capture({distinctId:(0,b.getInstanceId)(),event:a,properties:{...f,$lib:"failproofai",failproofai_version:d.version,product:e.POSTHOG_PRODUCT}})}])},13095,(a,b,c)=>{"use strict";function d(a){for(let b=0;b<a.length;b++){let c=a[b];if("function"!=typeof c)throw Object.defineProperty(Error(`A "use server" file can only export async functions, found ${typeof c}.
-Read more: https://nextjs.org/docs/messages/invalid-use-server-value`),"__NEXT_ERROR_CODE",{value:"E352",enumerable:!1,configurable:!0})}}Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"ensureServerEntryExports",{enumerable:!0,get:function(){return d}})},37936,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"registerServerReference",{enumerable:!0,get:function(){return d.registerServerReference}});let d=a.r(11857)},12072,(a,b,c)=>{b.exports={name:"failproofai",version:"1.0.6",description:"Observability and enforcement for AI agent harnesses. 39 built-in policies hooked into 12 of them — Claude Code, Codex, Cursor, Hermes, OpenClaw and more — blocking the tool call before it runs. Local dashboard included, no account needed.",bin:{failproofai:"./dist/cli.mjs",failproofaid:"./bin/failproofaid-shim.mjs"},files:["bin/","src/","scripts/","lib/","pi-extension/","hermes-plugin/","openclaw-plugin/",".next/standalone/","dist/","README.md"],engines:{node:">=20.9.0",bun:">=1.3.0"},scripts:{predev:"bun run build:cli && bun link",dev:"FAILPROOFAI_TELEMETRY_DISABLED=1 bun scripts/dev.ts --port 8020","build:cli":"bun build --target=node --format=esm --outfile=dist/cli.mjs bin/failproofai.mjs --external posthog-node --external sql.js && node -e \"const fs=require('fs');const c=fs.readFileSync('dist/cli.mjs','utf8');fs.writeFileSync('dist/cli.mjs',c.replace('#!/usr/bin/env bun','#!/usr/bin/env node').replace('// @bun\\n',''))\"","build:worker":"bun build --target=node --format=esm --outfile=dist/worker.mjs bin/failproofai-worker.mjs --external posthog-node --external sql.js",build:"bun build --target=node --format=cjs --outfile=dist/index.js src/index.ts && bun run build:cli && bun run build:worker && bun --bun next build && node -e \"const {cpSync}=require('fs');cpSync('.next/static','.next/standalone/.next/static',{recursive:true});\" && node scripts/prune-standalone.mjs",prestart:"bun run build:cli && bun link",start:"FAILPROOFAI_TELEMETRY_DISABLED=1 bun scripts/start.ts",test:"vitest","test:run":"vitest run",lint:"eslint . --config eslint.config.mjs",prepare:"bun run build","test:e2e":"vitest run --config vitest.config.e2e.mts","test:e2e:watch":"vitest --config vitest.config.e2e.mts",translate:"bun scripts/translate-docs/cli.ts","translate:readme":"bun scripts/translate-docs/cli.ts --readme-only","translate:docs":"bun scripts/translate-docs/cli.ts --docs-only","translate:dry-run":"bun scripts/translate-docs/cli.ts --dry-run","translate:validate":"bun scripts/translate-docs/cli.ts --validate","validate:mdx":"bun scripts/validate-mdx.ts","docs:audit":"bun scripts/docs-audit.ts","build:pack":"bun scripts/build-policy-pack.mjs"},keywords:["agent-observability","llm-observability","agent-tracing","agent-monitoring","agent-harness","guardrails","enforcement","policies","evals","ai-agent","autonomous-agent","agent-reliability","failure-prevention","claude-code","codex","hermes","openclaw","cli","local-first","hooks"],author:"ExosphereHost Inc. <failproofai@exosphere.host>",license:"SEE LICENSE IN LICENSE",homepage:"https://github.com/FailproofAI/failproofai",repository:{type:"git",url:"https://github.com/FailproofAI/failproofai.git"},bugs:{url:"https://github.com/FailproofAI/failproofai/issues"},publishConfig:{access:"public"},devDependencies:{"@anthropic-ai/sdk":"^0.125.0","@mdx-js/mdx":"^3.1.1","@tailwindcss/postcss":"^4.3.1","@tanstack/react-virtual":"^3.14.10","@testing-library/jest-dom":"^7.0.0","@testing-library/react":"^16.3.2","@testing-library/user-event":"^14.6.5","@types/node":"26.5.1","@types/react":"19.3.0","@types/react-dom":"^19.2.3","@vitejs/plugin-react":"^6.1.0",clsx:"^2.1.1",eslint:"^10.9.0","eslint-config-next":"^16.3.2",jsdom:"^30.0.1","lucide-react":"^1.33.0",next:"^16.3.2",react:"^19.2.4","react-dom":"^19.2.4","tailwind-merge":"^3.4.0",tailwindcss:"^4.3.1",typescript:"6.0.3",vitest:"^5.0.0"},dependencies:{"html-to-image":"^1.11.13","posthog-node":"^5.50.0","sql.js":"^1.14.1",yaml:"^2.9.0"},overrides:{nanoid:"3.3.18",postcss:"8.5.26","eslint-plugin-react-hooks":"7.0.1",vite:"8.0.16",undici:"7.29.0","brace-expansion":"5.0.9",sharp:"0.35.4",browserslist:"4.28.8"},optionalDependencies:{"@failproofai/failproofaid-linux-x64":"1.0.6","@failproofai/failproofaid-linux-arm64":"1.0.6","@failproofai/failproofaid-darwin-x64":"1.0.6","@failproofai/failproofaid-darwin-arm64":"1.0.6"},failproofaidBinaries:{"linux-x64":"e075f24a3a0950b631979d9370b665da2c3e2920decfb917ff0831d1f17c9740","linux-arm64":"b90ce8c642f2685719f4915695615219860daf3155a9c07344cf1e10395028c3","darwin-x64":"51dd95e9b85226e4f1888c7edaa56ec4464e91eb645d39c5cb7cede16d2da2f1","darwin-arm64":"f6a1b9d63363e8805e0d72b4fa168fde661bdbbd4125b54047f7de8948ea0f39"}}},79779,a=>{"use strict";a.s(["POSTHOG_API_KEY",0,"phc_Ac1Ww1GqKc0z1SyrRWbmatEeQdlOQIsDEEdP8l8JRgX","POSTHOG_PRODUCT",0,"failproofai-oss"])}];
-
-//# sourceMappingURL=%5Broot-of-the-server%5D__01wy8d-._.js.map

package/.next/standalone/.next/server/chunks/ssr/[root-of-the-server]__02npjtd._.js

@@ -1,4 +0,0 @@
-module.exports=[74533,(a,b,c)=>{b.exports=a.x("node:child_process",()=>require("node:child_process"))},66680,(a,b,c)=>{b.exports=a.x("node:crypto",()=>require("node:crypto"))},2157,(a,b,c)=>{b.exports=a.x("node:fs",()=>require("node:fs"))},60526,(a,b,c)=>{b.exports=a.x("node:os",()=>require("node:os"))},50227,(a,b,c)=>{b.exports=a.x("node:path",()=>require("node:path"))},37985,a=>{"use strict";var b=a.i(36359);a.s([],80194),a.i(80194),a.s(["002a551863b51d42ffe781e9841b676b82fa895b9b",()=>b.getTelemetryConfig],37985)},36359,a=>{"use strict";var b=a.i(37936),c=a.i(69839);a.i(93328);var d=a.i(31920),e=a.i(12072);async function f(){let a=(0,d.isTelemetryEnabled)();return{enabled:a,distinctId:a?(0,c.getInstanceId)():"",apiKey:process.env.FAILPROOFAI_POSTHOG_KEY??"phc_Ac1Ww1GqKc0z1SyrRWbmatEeQdlOQIsDEEdP8l8JRgX",host:process.env.FAILPROOFAI_POSTHOG_HOST??"https://us.i.posthog.com",version:e.version}}(0,a.i(13095).ensureServerEntryExports)([f]),(0,b.registerServerReference)(f,"002a551863b51d42ffe781e9841b676b82fa895b9b",null),a.s(["getTelemetryConfig",0,f])},31920,a=>{"use strict";var b=a.i(21572);a.s(["isTelemetryEnabled",0,function(){if("1"===process.env.FAILPROOFAI_TELEMETRY_DISABLED)return!1;try{return(0,b.readConfig)().telemetry.enabled}catch{return!0}}])},69839,a=>{"use strict";let b;var c=a.i(2157),d=a.i(50227),e=a.i(60526),f=a.i(66680);a.i(74533);var g=a.i(75818);let h=d.default.join(e.default.homedir(),".failproofai"),i=d.default.join(h,"instance-id");function j(a){return f.default.createHmac("sha256","failproofai-telemetry-v1").update(a).digest("hex")}function k(a){let b;try{if(b=(0,g.telemetryIdFile)(),c.default.readFileSync(b,"utf-8").trim()===a)return}catch{try{b=(0,g.telemetryIdFile)()}catch{return}}try{c.default.mkdirSync(d.default.dirname(b),{recursive:!0});let e=`${b}.${process.pid}.tmp`;c.default.writeFileSync(e,a,{encoding:"utf-8",mode:384}),c.default.renameSync(e,b)}catch{}}a.s(["getInstanceId",0,function(){if(b)return b;let a=function(){try{for(let a of(e.default.platform(),["/etc/machine-id","/var/lib/dbus/machine-id"]))try{let b=c.default.readFileSync(a,"utf-8").trim();if(b)return b}catch{}}catch{}}();if(a)return k(b=j(a)),b;let d=[e.default.hostname(),e.default.homedir(),e.default.platform(),e.default.arch(),e.default.cpus()[0]?.model??""].join(":");return d?k(b=j(d)):k(b=function(){try{let a=c.default.readFileSync(i,"utf-8").trim();if(a)return a}catch{}let a=f.default.randomUUID();try{c.default.mkdirSync(h,{recursive:!0}),c.default.writeFileSync(i,a,"utf-8")}catch{}return a}()),b},"hashToId",0,j])},93328,a=>{"use strict";var b=a.i(69839),c=a.i(31920),d=a.i(12072),e=a.i(79779);e.POSTHOG_API_KEY,a.s(["trackEvent",0,function(a,f){if(!(0,c.isTelemetryEnabled)())return;let g=globalThis.__FAILPROOFAI_POSTHOG__;g&&g.capture({distinctId:(0,b.getInstanceId)(),event:a,properties:{...f,$lib:"failproofai",failproofai_version:d.version,product:e.POSTHOG_PRODUCT}})}])},13095,(a,b,c)=>{"use strict";function d(a){for(let b=0;b<a.length;b++){let c=a[b];if("function"!=typeof c)throw Object.defineProperty(Error(`A "use server" file can only export async functions, found ${typeof c}.
-Read more: https://nextjs.org/docs/messages/invalid-use-server-value`),"__NEXT_ERROR_CODE",{value:"E352",enumerable:!1,configurable:!0})}}Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"ensureServerEntryExports",{enumerable:!0,get:function(){return d}})},37936,(a,b,c)=>{"use strict";Object.defineProperty(c,"__esModule",{value:!0}),Object.defineProperty(c,"registerServerReference",{enumerable:!0,get:function(){return d.registerServerReference}});let d=a.r(11857)},2726,a=>{a.v(b=>Promise.all(["server/chunks/ssr/[externals]__0vmspq5._.js","server/chunks/ssr/node_modules_posthog-node_dist_entrypoints_index_node_mjs_11bnuzn._.js"].map(b=>a.l(b))).then(()=>b(74493)))},12072,(a,b,c)=>{b.exports={name:"failproofai",version:"1.0.6",description:"Observability and enforcement for AI agent harnesses. 39 built-in policies hooked into 12 of them — Claude Code, Codex, Cursor, Hermes, OpenClaw and more — blocking the tool call before it runs. Local dashboard included, no account needed.",bin:{failproofai:"./dist/cli.mjs",failproofaid:"./bin/failproofaid-shim.mjs"},files:["bin/","src/","scripts/","lib/","pi-extension/","hermes-plugin/","openclaw-plugin/",".next/standalone/","dist/","README.md"],engines:{node:">=20.9.0",bun:">=1.3.0"},scripts:{predev:"bun run build:cli && bun link",dev:"FAILPROOFAI_TELEMETRY_DISABLED=1 bun scripts/dev.ts --port 8020","build:cli":"bun build --target=node --format=esm --outfile=dist/cli.mjs bin/failproofai.mjs --external posthog-node --external sql.js && node -e \"const fs=require('fs');const c=fs.readFileSync('dist/cli.mjs','utf8');fs.writeFileSync('dist/cli.mjs',c.replace('#!/usr/bin/env bun','#!/usr/bin/env node').replace('// @bun\\n',''))\"","build:worker":"bun build --target=node --format=esm --outfile=dist/worker.mjs bin/failproofai-worker.mjs --external posthog-node --external sql.js",build:"bun build --target=node --format=cjs --outfile=dist/index.js src/index.ts && bun run build:cli && bun run build:worker && bun --bun next build && node -e \"const {cpSync}=require('fs');cpSync('.next/static','.next/standalone/.next/static',{recursive:true});\" && node scripts/prune-standalone.mjs",prestart:"bun run build:cli && bun link",start:"FAILPROOFAI_TELEMETRY_DISABLED=1 bun scripts/start.ts",test:"vitest","test:run":"vitest run",lint:"eslint . --config eslint.config.mjs",prepare:"bun run build","test:e2e":"vitest run --config vitest.config.e2e.mts","test:e2e:watch":"vitest --config vitest.config.e2e.mts",translate:"bun scripts/translate-docs/cli.ts","translate:readme":"bun scripts/translate-docs/cli.ts --readme-only","translate:docs":"bun scripts/translate-docs/cli.ts --docs-only","translate:dry-run":"bun scripts/translate-docs/cli.ts --dry-run","translate:validate":"bun scripts/translate-docs/cli.ts --validate","validate:mdx":"bun scripts/validate-mdx.ts","docs:audit":"bun scripts/docs-audit.ts","build:pack":"bun scripts/build-policy-pack.mjs"},keywords:["agent-observability","llm-observability","agent-tracing","agent-monitoring","agent-harness","guardrails","enforcement","policies","evals","ai-agent","autonomous-agent","agent-reliability","failure-prevention","claude-code","codex","hermes","openclaw","cli","local-first","hooks"],author:"ExosphereHost Inc. <failproofai@exosphere.host>",license:"SEE LICENSE IN LICENSE",homepage:"https://github.com/FailproofAI/failproofai",repository:{type:"git",url:"https://github.com/FailproofAI/failproofai.git"},bugs:{url:"https://github.com/FailproofAI/failproofai/issues"},publishConfig:{access:"public"},devDependencies:{"@anthropic-ai/sdk":"^0.125.0","@mdx-js/mdx":"^3.1.1","@tailwindcss/postcss":"^4.3.1","@tanstack/react-virtual":"^3.14.10","@testing-library/jest-dom":"^7.0.0","@testing-library/react":"^16.3.2","@testing-library/user-event":"^14.6.5","@types/node":"26.5.1","@types/react":"19.3.0","@types/react-dom":"^19.2.3","@vitejs/plugin-react":"^6.1.0",clsx:"^2.1.1",eslint:"^10.9.0","eslint-config-next":"^16.3.2",jsdom:"^30.0.1","lucide-react":"^1.33.0",next:"^16.3.2",react:"^19.2.4","react-dom":"^19.2.4","tailwind-merge":"^3.4.0",tailwindcss:"^4.3.1",typescript:"6.0.3",vitest:"^5.0.0"},dependencies:{"html-to-image":"^1.11.13","posthog-node":"^5.50.0","sql.js":"^1.14.1",yaml:"^2.9.0"},overrides:{nanoid:"3.3.18",postcss:"8.5.26","eslint-plugin-react-hooks":"7.0.1",vite:"8.0.16",undici:"7.29.0","brace-expansion":"5.0.9",sharp:"0.35.4",browserslist:"4.28.8"},optionalDependencies:{"@failproofai/failproofaid-linux-x64":"1.0.6","@failproofai/failproofaid-linux-arm64":"1.0.6","@failproofai/failproofaid-darwin-x64":"1.0.6","@failproofai/failproofaid-darwin-arm64":"1.0.6"},failproofaidBinaries:{"linux-x64":"e075f24a3a0950b631979d9370b665da2c3e2920decfb917ff0831d1f17c9740","linux-arm64":"b90ce8c642f2685719f4915695615219860daf3155a9c07344cf1e10395028c3","darwin-x64":"51dd95e9b85226e4f1888c7edaa56ec4464e91eb645d39c5cb7cede16d2da2f1","darwin-arm64":"f6a1b9d63363e8805e0d72b4fa168fde661bdbbd4125b54047f7de8948ea0f39"}}},79779,a=>{"use strict";a.s(["POSTHOG_API_KEY",0,"phc_Ac1Ww1GqKc0z1SyrRWbmatEeQdlOQIsDEEdP8l8JRgX","POSTHOG_PRODUCT",0,"failproofai-oss"])}];
-
-//# sourceMappingURL=%5Broot-of-the-server%5D__02npjtd._.js.map