fullcourtdefense-cli 1.21.27 → 1.21.28

package/dist/config.d.ts

@@ -40,6 +40,18 @@ export interface ResolvedCliCredentials {
     shieldId?: string;
     shieldKey?: string;
 }
+/**
+ * Daemon→child credential handoff: the daemon injects its already-decrypted
+ * in-memory creds as FCD_SHIELD_ID + FCD_SHIELD_KEY when spawning sweep
+ * children (see discoverSweepCredentialEnv in daemon.ts). When BOTH are
+ * present the child must use them as-is and skip the DPAPI decrypt — that
+ * decrypt spawns powershell.exe, which EDR on hardened fleet machines can
+ * block (and flags as suspicious even when it merely fails). Requiring the
+ * pair keeps a stray single env var (e.g. AGENTGUARD_SHIELD_KEY from a
+ * Cursor-plugin setup) from overriding the machine's enrolled key.
+ * Pure — unit-tested.
+ */
+export declare function daemonHandoffShieldKey(env?: NodeJS.ProcessEnv): string | undefined;
 /** Merge saved ~/.fullcourtdefense.yml + env + optional CLI flag overrides. */
 export declare function resolveCliCredentials(config: BotGuardConfig, overrides?: Partial<ResolvedCliCredentials>): ResolvedCliCredentials;
 export declare function isCliSetupComplete(config: BotGuardConfig): boolean;

package/dist/config.js

@@ -37,6 +37,7 @@ exports.getHomeConfigPath = getHomeConfigPath;
 exports.loadConfig = loadConfig;
 exports.getDefaultConfigPath = getDefaultConfigPath;
 exports.saveShieldConfig = saveShieldConfig;
+exports.daemonHandoffShieldKey = daemonHandoffShieldKey;
 exports.resolveCliCredentials = resolveCliCredentials;
 exports.isCliSetupComplete = isCliSetupComplete;
 exports.requireCliSetup = requireCliSetup;
@@ -229,6 +230,20 @@ function saveShieldConfig(input) {
     return writeSetupConfig(target, input);
 }
 const DEFAULT_API_URL = 'https://api.fullcourtdefense.ai';
+/**
+ * Daemon→child credential handoff: the daemon injects its already-decrypted
+ * in-memory creds as FCD_SHIELD_ID + FCD_SHIELD_KEY when spawning sweep
+ * children (see discoverSweepCredentialEnv in daemon.ts). When BOTH are
+ * present the child must use them as-is and skip the DPAPI decrypt — that
+ * decrypt spawns powershell.exe, which EDR on hardened fleet machines can
+ * block (and flags as suspicious even when it merely fails). Requiring the
+ * pair keeps a stray single env var (e.g. AGENTGUARD_SHIELD_KEY from a
+ * Cursor-plugin setup) from overriding the machine's enrolled key.
+ * Pure — unit-tested.
+ */
+function daemonHandoffShieldKey(env = process.env) {
+    return env.FCD_SHIELD_ID && env.FCD_SHIELD_KEY ? env.FCD_SHIELD_KEY : undefined;
+}
 /** Merge saved ~/.fullcourtdefense.yml + env + optional CLI flag overrides. */
 function resolveCliCredentials(config, overrides = {}) {
     return {
@@ -248,6 +263,9 @@ function resolveCliCredentials(config, overrides = {}) {
             || process.env.FULLCOURTDEFENSE_SHIELD_ID
             || process.env.AGENTGUARD_SHIELD_ID,
         shieldKey: overrides.shieldKey
+            // Daemon handoff BEFORE the DPAPI decrypt: no powershell.exe spawn at
+            // all during daemon-driven sweeps (see daemonHandoffShieldKey docs).
+            || daemonHandoffShieldKey()
             || unprotectShieldKeyForCurrentWindowsUser(config.shieldKeyDpapi || '')
             || config.shieldKey
             || process.env.FCD_SHIELD_KEY

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.21.27"
+  "version": "1.21.28"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.21.27",
+  "version": "1.21.28",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {