fullcourtdefense-cli 1.1.0 → 1.1.2

package/dist/commands/hook.js

@@ -206,11 +206,6 @@ function sessionId(p) {
         return fromPayload;
     return `cursor-${os.hostname()}`;
 }
-function emit(decision, blocked) {
-    process.stdout.write(JSON.stringify(decision));
-    // Exit 2 is the universal "block" signal across all hook events.
-    process.exit(blocked ? 2 : 0);
-}
 async function hookCommand(args, config) {
     const shadow = args.shadow === 'true';
     const failClosed = args.failClosed === 'true';
@@ -236,15 +231,29 @@ async function hookCommand(args, config) {
     }
     const event = inferEvent(args.event, payload);
     const text = extractText(event, payload).trim();
+    // Emit the verdict in the shape Cursor expects for THIS event, then exit.
+    // beforeSubmitPrompt blocks via { continue: false }; the execution hooks
+    // (shell/mcp/read) block via { permission: "deny" }. Exit 2 reinforces it.
+    const respond = (blocked, userMsg, agentMsg) => {
+        const decision = event === 'prompt'
+            ? (blocked ? { continue: false } : { continue: true })
+            : { permission: blocked ? 'deny' : 'allow' };
+        if (userMsg)
+            decision.user_message = userMsg;
+        if (agentMsg)
+            decision.agent_message = agentMsg;
+        process.stdout.write(JSON.stringify(decision));
+        // ALWAYS exit 0 so Cursor uses our JSON verdict. Exit 2 is interpreted as
+        // `permission: "deny"`, which beforeSubmitPrompt ignores (it uses `continue`),
+        // so exiting 2 would silently let blocked prompts through.
+        process.exit(0);
+    };
     // Nothing to scan, or no Shield configured → allow (fail-open by design here:
     // a misconfigured machine must not brick the developer's IDE).
     if (!text)
-        emit({ permission: 'allow' }, false);
+        respond(false);
     if (!shieldId) {
-        emit({
-            permission: 'allow',
-            agent_message: 'FullCourtDefense hook installed but no Shield ID configured (run `fullcourtdefense configure`).',
-        }, false);
+        respond(false, undefined, 'FullCourtDefense hook installed but no Shield ID configured (run `fullcourtdefense configure`).');
     }
     try {
         const controller = new AbortController();
@@ -269,12 +278,7 @@ async function hookCommand(args, config) {
         clearTimeout(timer);
         if (!resp.ok) {
             // Backend rejected (quota, bad shield, etc.) — fail open unless told otherwise.
-            const blocked = failClosed;
-            emit({
-                permission: blocked ? 'deny' : 'allow',
-                user_message: blocked ? `FullCourtDefense gate unavailable (HTTP ${resp.status}) — blocked by fail-closed policy.` : undefined,
-                agent_message: `FullCourtDefense gate returned HTTP ${resp.status}.`,
-            }, blocked);
+            respond(failClosed, failClosed ? `FullCourtDefense gate unavailable (HTTP ${resp.status}) — blocked by fail-closed policy.` : undefined, `FullCourtDefense gate returned HTTP ${resp.status}.`);
         }
         const data = await resp.json().catch(() => ({}));
         const sh = (data._shield || {});
@@ -285,28 +289,16 @@ async function hookCommand(args, config) {
         const reason = String(sh.reason || 'policy_violation');
         const explanation = String(sh.reason || 'Flagged by FullCourtDefense.');
         if (!isBlocked) {
-            emit({ permission: 'allow' }, false);
+            respond(false);
         }
         // Blocked verdict. In shadow mode we annotate but let it through.
         if (shadow) {
-            emit({
-                permission: 'allow',
-                agent_message: `[FullCourtDefense shadow] would block ${event} (${reason}): ${explanation}`,
-            }, false);
+            respond(false, undefined, `[FullCourtDefense shadow] would block ${event} (${reason}): ${explanation}`);
         }
-        emit({
-            permission: 'deny',
-            user_message: `Blocked by FullCourtDefense — ${reason}. ${explanation}`,
-            agent_message: `FullCourtDefense blocked this ${event} as "${reason}". Do not retry; revise to remove the flagged content.`,
-        }, true);
+        respond(true, `Blocked by FullCourtDefense — ${reason}.`, `FullCourtDefense blocked this ${event} as "${reason}". Do not retry; revise to remove the flagged content.`);
     }
     catch (err) {
         // Network error / timeout.
-        const blocked = failClosed;
-        emit({
-            permission: blocked ? 'deny' : 'allow',
-            user_message: blocked ? 'FullCourtDefense gate unreachable — blocked by fail-closed policy.' : undefined,
-            agent_message: `FullCourtDefense hook error: ${err instanceof Error ? err.message : String(err)}.`,
-        }, blocked);
+        respond(failClosed, failClosed ? 'FullCourtDefense gate unreachable — blocked by fail-closed policy.' : undefined, `FullCourtDefense hook error: ${err instanceof Error ? err.message : String(err)}.`);
     }
 }

package/dist/index.js

@@ -10,7 +10,7 @@ const configure_1 = require("./commands/configure");
 const discover_1 = require("./commands/discover");
 const hook_1 = require("./commands/hook");
 const installCursorHook_1 = require("./commands/installCursorHook");
-const VERSION = '1.1.0';
+const VERSION = '1.1.2';
 function parseArgs(argv) {
     const flags = {};
     let command = '';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {