fullcourtdefense-cli 1.1.2 → 1.1.4

package/dist/commands/hook.js

@@ -38,6 +38,14 @@ const fs = __importStar(require("fs"));
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const DEFAULT_API_URL = 'https://api.fullcourtdefense.ai';
+const DEBUG_LOG = path.join(os.homedir(), '.fullcourtdefense-hook.log');
+/** Append a diagnostic line so we can see exactly what Cursor invoked + the verdict. */
+function dbg(obj) {
+    try {
+        fs.appendFileSync(DEBUG_LOG, JSON.stringify({ t: new Date().toISOString(), ...obj }) + '\n');
+    }
+    catch { /* ignore */ }
+}
 function readStdin() {
     return new Promise((resolve) => {
         let data = '';
@@ -216,21 +224,30 @@ async function hookCommand(args, config) {
     const apiUrl = (args.apiUrl || process.env.FULLCOURTDEFENSE_API_URL || config.apiUrl || home.apiUrl || DEFAULT_API_URL)
         .replace(/\/$/, '');
     let raw = '';
+    let stdinErr = '';
+    const isTTY = !!process.stdin.isTTY;
     try {
         raw = await readStdin();
     }
-    catch { /* ignore */ }
+    catch (e) {
+        stdinErr = e instanceof Error ? e.message : String(e);
+    }
     let payload = {};
+    let parseErr = '';
     if (raw.trim()) {
         try {
             payload = JSON.parse(raw);
         }
-        catch {
+        catch (e) {
+            parseErr = e instanceof Error ? e.message : String(e);
             payload = {};
         }
     }
     const event = inferEvent(args.event, payload);
     const text = extractText(event, payload).trim();
+    dbg({ phase: 'invoke', event, argEvent: args.event, pid: process.pid,
+        isTTY, rawLen: raw.length, rawPreview: raw.slice(0, 300), stdinErr, parseErr,
+        argv: process.argv.slice(2), payloadKeys: Object.keys(payload), textPreview: text.slice(0, 80) });
     // Emit the verdict in the shape Cursor expects for THIS event, then exit.
     // beforeSubmitPrompt blocks via { continue: false }; the execution hooks
     // (shell/mcp/read) block via { permission: "deny" }. Exit 2 reinforces it.
@@ -242,6 +259,7 @@ async function hookCommand(args, config) {
             decision.user_message = userMsg;
         if (agentMsg)
             decision.agent_message = agentMsg;
+        dbg({ phase: 'verdict', event, blocked, decision });
         process.stdout.write(JSON.stringify(decision));
         // ALWAYS exit 0 so Cursor uses our JSON verdict. Exit 2 is interpreted as
         // `permission: "deny"`, which beforeSubmitPrompt ignores (it uses `continue`),

package/dist/index.js

@@ -10,7 +10,7 @@ const configure_1 = require("./commands/configure");
 const discover_1 = require("./commands/discover");
 const hook_1 = require("./commands/hook");
 const installCursorHook_1 = require("./commands/installCursorHook");
-const VERSION = '1.1.2';
+const VERSION = '1.1.4';
 function parseArgs(argv) {
     const flags = {};
     let command = '';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.1.2",
+  "version": "1.1.4",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {