feat: TUI redesign, config v2 and OpenTelemetry setup (one PR: #881 + #899 + OTel)

.github/workflows/ci.yml

@@ -10,7 +10,7 @@ on:
   # it produced was the daemon cross-compile, and only because it touched
   # `crates/`. A PR that cannot go red is not a reviewed PR.
   pull_request:
-    branches: [main, feat/fp-cli]
+    branches: [main, feat/fp-cli, feat/tui-ux]
 
 concurrency:
   group: ci-${{ github.ref }}

.github/workflows/osv-scanner.yml

@@ -27,7 +27,7 @@ name: Supply Chain
 
 on:
   pull_request:
-    branches: [main]
+    branches: [main, feat/tui-ux]
   push:
     branches: [main]
   schedule:

Cargo.toml

@@ -3,7 +3,7 @@ resolver = "3"
 members = ["crates/*"]
 
 [workspace.package]
-version = "1.0.11-beta.0"
+version = "1.0.11"
 edition = "2024"
 license-file = "LICENSE"
 repository = "https://github.com/FailproofAI/failproofai"

__tests__/audit/audit-cli-help.test.ts

@@ -43,8 +43,8 @@ describe("audit --help", () => {
     // it. Repeating the prefix on every row cost 17 of the 80 columns and was
     // what forced the descriptions down to four words a line.
     expect(text).toContain("failproofai audit");
+    expect(text).toContain("Scan your agents' history and open the results");
     for (const command of [
-      "(bare)",
       "--schedule [days]",
       "--no-schedule",
       "--status",
@@ -66,8 +66,13 @@ describe("audit --help", () => {
     expect(plain(render(false))).not.toContain("--scheduled");
   });
 
-  it("keeps the local-only promise the docs also make", () => {
-    expect(plain(render(false))).toMatch(/runs on this machine/i);
+  it("is usage, options and examples, and nothing else", () => {
+    // Decision D6 of the 2026-10 redesign removed explanatory and privacy
+    // lines from help pages; the audit's local-only promise went with them.
+    const headings = plain(render(false))
+      .split("\n")
+      .filter((l) => /^[A-Z][A-Z ]+$/.test(l));
+    expect(headings).toEqual(["USAGE", "OPTIONS", "EXAMPLES"]);
   });
 
   it.each([true, false])("aligns and fits 80 columns with color=%s", (color) => {
@@ -77,27 +82,14 @@ describe("audit --help", () => {
       expect(line.length).toBeLessThanOrEqual(80);
     }
 
-    // Every command row and every continuation line shares one description
-    // column. Derive it from the first row rather than restating a constant,
-    // so this fails on drift instead of being updated to match it.
-    const first = lines.find((l) => l.trim().startsWith("(bare)"));
-    expect(first).toBeDefined();
-    const descCol = first!.indexOf("Scan your session history");
-    expect(descCol).toBeGreaterThan(0);
-
-    const continuations = lines.filter(
-      (l) => l.startsWith(" ".repeat(descCol)) && l.trim().length > 0,
-    );
-    // A NON-VACUITY floor, not a layout assertion. The real check is the loop
-    // below — every continuation starts exactly at `descCol` — and this only
-    // proves it ran over something. Deliberately well under the count the
-    // current copy produces: pinning it to the exact number is what made this
-    // line fail twice for wording changes that improved the screen, once when
-    // dropping the `failproofai audit` prefix widened the column and again
-    // when `--email <address>` moved to a row of its own.
-    expect(continuations.length).toBeGreaterThanOrEqual(2);
-    for (const line of continuations) {
-      expect(line[descCol]).not.toBe(" ");
-    }
+    // Every option row shares one description column. Measured per row rather
+    // than against a constant, so this fails on drift instead of being updated
+    // to match it.
+    const optionRows = lines.filter((l) => /^ {2}-/.test(l));
+    // A non-vacuity floor: the loop below must have run over the real rows.
+    expect(optionRows.length).toBeGreaterThanOrEqual(4);
+    // The first character after the name's two-space gap.
+    const columns = new Set(optionRows.map((l) => l.search(/(?<=\S {2,})\S/)));
+    expect(columns.size).toBe(1);
   });
 });

__tests__/audit/audit-cli-telemetry.test.ts

@@ -113,7 +113,8 @@ describe("failproofai audit telemetry", () => {
       total_hits: 2,
       findings: 0,
     });
-    expect(h.launch).toHaveBeenCalledWith("start");
+    // Audit's hand-off prints its own lines, so the dashboard starts with no launch screen.
+    expect(h.launch).toHaveBeenCalledWith("start", { screen: false });
     expect(exitInfo).toBeNull(); // happy path never exits — launch() keeps the process alive
   });
 

__tests__/audit/audit-cli.test.ts

@@ -1,13 +1,16 @@
 // @vitest-environment node
 /**
  * Unit coverage for the `failproofai audit` command's pure pieces:
- *   • AUDIT_STAGES stays in lockstep with the dashboard's RunProgress STAGES
- *     (the CLI and dashboard must tell the same four-step story).
+ *   • AUDIT_STAGES stays in lockstep with the dashboard's RunProgress STAGES.
+ *     The CLI no longer animates those four stages — by decision D16 it draws
+ *     real per-agent bars — but it still names its discovery phase with the
+ *     first one, so the two must keep using the same words.
  *   • buildSummary renders the right post-run line(s) for clean / mixed /
- *     singular results.
+ *     singular results, in the 2026-10 screen language: a `✓` sentence with a
+ *     full stop, then one indented sentence about what your policies cover.
  *
- * The server-launch + browser-open path is a thin wrapper over the existing
- * `launch()` and is exercised by the build/smoke test, not here.
+ * The screen itself, and the hand-off to the dashboard, are covered in
+ * audit-screen.test.ts.
  */
 import { describe, it, expect } from "vitest";
 import { readFileSync } from "node:fs";
@@ -71,9 +74,9 @@ describe("buildSummary", () => {
         totals: { hits: 0, projectsWithHits: 0 },
       }),
     ).map(stripAnsi);
-    expect(lines[0]).toContain("audit complete");
-    expect(lines[0]).toContain("1,240 tool calls across 18 sessions");
-    expect(lines[0]).toContain("4 projects");
+    // Was "✓ audit complete · 1,240 tool calls across 18 sessions · 4 projects"
+    // before the 2026-10 screen language made results sentences.
+    expect(lines[0]).toBe("✓ Scanned 1,240 tool calls across 18 sessions in 4 projects.");
   });
 
   it("shows a clean-run line when something was scanned but nothing flagged", () => {
@@ -83,17 +86,18 @@ describe("buildSummary", () => {
         transcripts: { scanned: 2, skipped: 0, errors: 0, durationMs: 0 },
       }),
     ).map(stripAnsi);
-    expect(lines.join("\n")).toContain("clean run");
+    // Was "clean run — nothing flagged. nice." before the redesign.
+    expect(lines).toEqual(["✓ Scanned 10 tool calls across 2 sessions.", "  Nothing was flagged."]);
     expect(lines.join("\n")).not.toContain("slipping through");
   });
 
   it("does NOT claim a clean run when zero events were scanned", () => {
     const lines = buildSummary(result({ eventsScanned: 0 })).map(stripAnsi);
-    expect(lines.join("\n")).not.toContain("clean run");
+    expect(lines.join("\n")).not.toContain("Nothing was flagged");
     expect(lines[0]).toContain("0 tool calls across 0 sessions");
   });
 
-  it("splits slipping-through vs already-blocked findings", () => {
+  it("splits slipping-through vs already-covered findings", () => {
     const lines = buildSummary(
       result({
         eventsScanned: 500,
@@ -108,9 +112,29 @@ describe("buildSummary", () => {
         ],
       }),
     ).map(stripAnsi);
-    const joined = lines.join("\n");
-    expect(joined).toContain("3 patterns slipping through");
-    expect(joined).toContain("2 already blocked by your policies");
+    // "Covered", not the old "already blocked": a policy that is on may warn
+    // rather than block, so "blocked" over-claimed for every enabled warn-*.
+    expect(lines[1]).toBe("  3 patterns are slipping through, and 2 are already covered by your policies.");
+  });
+
+  it("says only the half that applies", () => {
+    const slippingOnly = buildSummary(
+      result({
+        eventsScanned: 5,
+        totals: { hits: 2, projectsWithHits: 1 },
+        results: [count({ source: "builtin", enabledInConfig: false }), count({ source: "audit-detector" })],
+      }),
+    ).map(stripAnsi);
+    expect(slippingOnly[1]).toBe("  2 patterns are slipping through.");
+
+    const coveredOnly = buildSummary(
+      result({
+        eventsScanned: 5,
+        totals: { hits: 1, projectsWithHits: 1 },
+        results: [count({ source: "builtin", enabledInConfig: true })],
+      }),
+    ).map(stripAnsi);
+    expect(coveredOnly[1]).toBe("  1 pattern is already covered by your policies.");
   });
 
   it("uses singular nouns for counts of one", () => {
@@ -123,6 +147,14 @@ describe("buildSummary", () => {
       }),
     ).map(stripAnsi);
     expect(lines[0]).toContain("1 tool call across 1 session");
-    expect(lines.join("\n")).toContain("1 pattern slipping through");
+    expect(lines.join("\n")).toContain("1 pattern is slipping through");
+  });
+
+  it("paints only the glyph, and leaves the counts in the terminal's own ink", () => {
+    const painted = buildSummary(
+      result({ eventsScanned: 3, transcripts: { scanned: 1, skipped: 0, errors: 0, durationMs: 0 } }),
+      { color: true },
+    );
+    expect(painted[0]).toMatch(/^\x1B\[[0-9;]+m✓\x1B\[0m Scanned 3 tool calls across 1 session\.$/);
   });
 });