fullcourtdefense-cli 1.1.3 → 1.1.5

package/dist/commands/hook.js

@@ -224,23 +224,33 @@ async function hookCommand(args, config) {
     const apiUrl = (args.apiUrl || process.env.FULLCOURTDEFENSE_API_URL || config.apiUrl || home.apiUrl || DEFAULT_API_URL)
         .replace(/\/$/, '');
     let raw = '';
+    let stdinErr = '';
+    const isTTY = !!process.stdin.isTTY;
     try {
         raw = await readStdin();
     }
-    catch { /* ignore */ }
+    catch (e) {
+        stdinErr = e instanceof Error ? e.message : String(e);
+    }
+    // Windows/Cursor prepends a UTF-8 BOM (\uFEFF) to the piped stdin JSON, which
+    // makes JSON.parse throw "Unexpected token". Strip BOM + surrounding whitespace.
+    const cleaned = raw.replace(/^\uFEFF/, '').replace(/^[\s\uFEFF\xA0]+/, '').trim();
     let payload = {};
-    if (raw.trim()) {
+    let parseErr = '';
+    if (cleaned) {
         try {
-            payload = JSON.parse(raw);
+            payload = JSON.parse(cleaned);
         }
-        catch {
+        catch (e) {
+            parseErr = e instanceof Error ? e.message : String(e);
             payload = {};
         }
     }
     const event = inferEvent(args.event, payload);
     const text = extractText(event, payload).trim();
     dbg({ phase: 'invoke', event, argEvent: args.event, pid: process.pid,
-        payloadKeys: Object.keys(payload), textPreview: text.slice(0, 80) });
+        isTTY, rawLen: raw.length, rawPreview: raw.slice(0, 300), stdinErr, parseErr,
+        argv: process.argv.slice(2), payloadKeys: Object.keys(payload), textPreview: text.slice(0, 80) });
     // Emit the verdict in the shape Cursor expects for THIS event, then exit.
     // beforeSubmitPrompt blocks via { continue: false }; the execution hooks
     // (shell/mcp/read) block via { permission: "deny" }. Exit 2 reinforces it.

package/dist/index.js

@@ -10,7 +10,7 @@ const configure_1 = require("./commands/configure");
 const discover_1 = require("./commands/discover");
 const hook_1 = require("./commands/hook");
 const installCursorHook_1 = require("./commands/installCursorHook");
-const VERSION = '1.1.3';
+const VERSION = '1.1.5';
 function parseArgs(argv) {
     const flags = {};
     let command = '';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.1.3",
+  "version": "1.1.5",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {