
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
Debugging experiments for AI coding agents and developers.
Turn a hard-to-reproduce failure into saved trials, a smaller reproducer, and evidence you can inspect after a proposed fix.
Use FailTrace from the CLI or an MCP client to repeat commands, compare failures, isolate regressions, minimize inputs, verify patches, and package a replay. Everything runs locally. No AI API, account, or telemetry is required.
Try the demo · Connect your coding agent · Use your own command
Requires Node.js 22.12+ and npm. Run from any directory:
npx --yes failtrace@1.0.0 demo

Recorded from the controlled CLI demo; output is abridged and timing edited. Static version · Full results and limits · Install for everyday use
The demo saves its evidence under .failtrace/ and prints a command to replay the reduced failure.
Give your agent a consistent way to run debugging experiments and return the evidence behind its conclusions.
Connect the local stdio MCP server through your client's configuration:
npx --yes failtrace@1.0.0 mcp --cwd "/absolute/path/to/your/project"
Setup for Codex, Claude Code, Cursor, and other MCP clients →
Your client launches this command; running it alone in a terminal waits for MCP requests. The guide covers Windows command shims and an optional project instruction snippet.
Then try asking your agent:
Use FailTrace to investigate this intermittent test failure. Choose its failure signature, run a bounded sample, compare a healthy trial with a matching failure, and explain what the evidence supports. Capture a baseline before editing, then verify the proposed change.
Seven tools expose the same Core engine: failtrace_run, failtrace_compare, failtrace_bisect, failtrace_minimize, failtrace_verify, failtrace_bundle, and the read-only failtrace_inspect_run. Agents that use a shell can call the CLI with --json.
An installed MCP server makes the tools available; the agent still chooses when to use them. A healthy sample with no target observed does not prove a bug is gone.
Run this from your project, replacing the command and error message with your own:
npx --yes failtrace@1.0.0 run "npm test -- checkout" --repeat 20 --stderr-contains "checkout failed"
FailTrace saves each trial's output and prints an investigation ID. Exit 1 can mean the failure you are investigating was recorded. Add --json for automation, and use the command reference to inspect or continue that investigation.
| When you need to… | Use | What you get |
|---|---|---|
| Measure an intermittent failure | run | Recorded outcomes, target matches, durations, and logs |
| Inspect a passing and failing attempt | compare | Bounded output differences, full hashes, and selected environment changes |
| Locate a regression | bisect | Repeated candidate trials and a sampled boundary on Git's first-parent history |
| Shrink a large reproducer | minimize | Reduced text, JSON, files, or environment keys, with a separate final check |
| Check a proposed fix | verify | Target observations and execution health against a captured baseline |
| Retrieve omitted agent evidence | failtrace_inspect_run | Saved trial pages and bounded output, without executing a command |
| Hand the investigation to someone else | bundle | Selected source/input, a manifest, and replay scripts |
The target command can use any runtime; FailTrace itself requires Node.js. Input reduction needs your command to read the candidate input. CLI reference · Verify workflow · Bundle guide
status and finalVerified.target_not_observed means no target match in a healthy, comparable sample. It does not prove that the intended test path ran or that the defect was eliminated.Result and exit-code details · Resource limits · Performance scope
1.0.0 is published on npm and as a GitHub release. The commands above use that exact package. See installation alternatives, the 1.x compatibility contract, and migration from 0.x.
The 1.1.0 source is prepared for publication with stricter Bisect exit policies, target-first comparison, and clearer CLI diagnostics. These changes are not yet in the npm package. Changes and migration notes · Product roadmap
Tell us where FailTrace helped or got stuck →
A first-install problem, a useful investigation, or a second use on your own project helps decide what to improve. Private logs are optional. Our goal is useful, repeated adoption by people and agents.
To work on the source:
git clone https://github.com/LBarimi/FailTrace.git
cd FailTrace
npm ci
npm test
npm run typecheck
npm run demo
npm test builds the source first. Core is also an ESM TypeScript API exported by failtrace; CLI and MCP call the same engine. Contributing · Implementation · Adoption priorities
FAQs
Reproduce, isolate, and minimize failures, then verify proposed fixes.
The npm package failtrace receives a total of 30 weekly downloads. As such, failtrace popularity was classified as not popular.
We found that failtrace demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.