fullcourtdefense-cli 1.1.1 → 1.1.3

package/dist/commands/hook.js

@@ -38,6 +38,14 @@ const fs = __importStar(require("fs"));
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const DEFAULT_API_URL = 'https://api.fullcourtdefense.ai';
+const DEBUG_LOG = path.join(os.homedir(), '.fullcourtdefense-hook.log');
+/** Append a diagnostic line so we can see exactly what Cursor invoked + the verdict. */
+function dbg(obj) {
+    try {
+        fs.appendFileSync(DEBUG_LOG, JSON.stringify({ t: new Date().toISOString(), ...obj }) + '\n');
+    }
+    catch { /* ignore */ }
+}
 function readStdin() {
     return new Promise((resolve) => {
         let data = '';
@@ -231,6 +239,8 @@ async function hookCommand(args, config) {
     }
     const event = inferEvent(args.event, payload);
     const text = extractText(event, payload).trim();
+    dbg({ phase: 'invoke', event, argEvent: args.event, pid: process.pid,
+        payloadKeys: Object.keys(payload), textPreview: text.slice(0, 80) });
     // Emit the verdict in the shape Cursor expects for THIS event, then exit.
     // beforeSubmitPrompt blocks via { continue: false }; the execution hooks
     // (shell/mcp/read) block via { permission: "deny" }. Exit 2 reinforces it.
@@ -242,8 +252,12 @@ async function hookCommand(args, config) {
             decision.user_message = userMsg;
         if (agentMsg)
             decision.agent_message = agentMsg;
+        dbg({ phase: 'verdict', event, blocked, decision });
         process.stdout.write(JSON.stringify(decision));
-        process.exit(blocked ? 2 : 0);
+        // ALWAYS exit 0 so Cursor uses our JSON verdict. Exit 2 is interpreted as
+        // `permission: "deny"`, which beforeSubmitPrompt ignores (it uses `continue`),
+        // so exiting 2 would silently let blocked prompts through.
+        process.exit(0);
     };
     // Nothing to scan, or no Shield configured → allow (fail-open by design here:
     // a misconfigured machine must not brick the developer's IDE).

package/dist/index.js

@@ -10,7 +10,7 @@ const configure_1 = require("./commands/configure");
 const discover_1 = require("./commands/discover");
 const hook_1 = require("./commands/hook");
 const installCursorHook_1 = require("./commands/installCursorHook");
-const VERSION = '1.1.1';
+const VERSION = '1.1.3';
 function parseArgs(argv) {
     const flags = {};
     let command = '';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.1.1",
+  "version": "1.1.3",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {