fullcourtdefense-cli 1.21.31 → 1.21.32

package/dist/config.d.ts

@@ -32,6 +32,16 @@ export interface PowershellHealth {
     checkedAt: string;
 }
 export declare function getPowershellHealth(): PowershellHealth | undefined;
+/**
+ * PSCredential.GetNetworkCredential() instead of Marshal::SecureStringToBSTR:
+ * hardened fleets run PowerShell in Constrained Language Mode, where the
+ * [Runtime.InteropServices.Marshal] calls are forbidden (script fails ->
+ * exit 1 -> "Shield key not available" -> every hook 401s fail-closed). The
+ * PSCredential technique is on CLM's approved-type list and decrypts the same
+ * DPAPI-protected SecureString in every language mode. Exported so the CLM
+ * regression test runs this EXACT text inside a ConstrainedLanguage session.
+ */
+export declare const DPAPI_DECRYPT_SNIPPET = "$secure=ConvertTo-SecureString -String $env:FCD_DPAPI_VALUE; (New-Object System.Management.Automation.PSCredential('fcd', $secure)).GetNetworkCredential().Password";
 export declare function getHomeConfigPath(): string;
 export declare function loadConfig(configPath?: string): BotGuardConfig;
 export declare function getDefaultConfigPath(): string;

package/dist/config.js

@@ -33,6 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.DPAPI_DECRYPT_SNIPPET = void 0;
 exports.getPowershellHealth = getPowershellHealth;
 exports.getHomeConfigPath = getHomeConfigPath;
 exports.loadConfig = loadConfig;
@@ -204,8 +205,18 @@ function powershellDpapi(script, value) {
 function protectShieldKeyForCurrentWindowsUser(value) {
     return powershellDpapi('$secure=ConvertTo-SecureString -String $env:FCD_DPAPI_VALUE -AsPlainText -Force; ConvertFrom-SecureString -SecureString $secure', value);
 }
+/**
+ * PSCredential.GetNetworkCredential() instead of Marshal::SecureStringToBSTR:
+ * hardened fleets run PowerShell in Constrained Language Mode, where the
+ * [Runtime.InteropServices.Marshal] calls are forbidden (script fails ->
+ * exit 1 -> "Shield key not available" -> every hook 401s fail-closed). The
+ * PSCredential technique is on CLM's approved-type list and decrypts the same
+ * DPAPI-protected SecureString in every language mode. Exported so the CLM
+ * regression test runs this EXACT text inside a ConstrainedLanguage session.
+ */
+exports.DPAPI_DECRYPT_SNIPPET = "$secure=ConvertTo-SecureString -String $env:FCD_DPAPI_VALUE; (New-Object System.Management.Automation.PSCredential('fcd', $secure)).GetNetworkCredential().Password";
 function unprotectShieldKeyForCurrentWindowsUser(value) {
-    return powershellDpapi('$secure=ConvertTo-SecureString -String $env:FCD_DPAPI_VALUE; $ptr=[Runtime.InteropServices.Marshal]::SecureStringToBSTR($secure); try {[Runtime.InteropServices.Marshal]::PtrToStringBSTR($ptr)} finally {[Runtime.InteropServices.Marshal]::ZeroFreeBSTR($ptr)}', value);
+    return powershellDpapi(exports.DPAPI_DECRYPT_SNIPPET, value);
 }
 function mergeConfig(base, override) {
     return {
@@ -352,9 +363,15 @@ function writeSetupConfig(target, input) {
     const protectedShieldKey = input.shieldKey && process.platform === 'win32'
         ? protectShieldKeyForCurrentWindowsUser(input.shieldKey)
         : undefined;
-    if (protectedShieldKey) {
+    // Roundtrip-verify before trusting DPAPI: encryption is cmdlet-only and
+    // succeeds even where decryption is blocked (Constrained Language Mode /
+    // EDR), which used to delete the plaintext key on a machine that could
+    // never read the encrypted one back — every hook then 401'd fail-closed.
+    const dpapiVerified = !!protectedShieldKey
+        && unprotectShieldKeyForCurrentWindowsUser(protectedShieldKey) === input.shieldKey;
+    if (protectedShieldKey && dpapiVerified) {
         setTopLevel('shieldKeyDpapi', protectedShieldKey);
-        // Remove legacy plaintext key on a successful Windows DPAPI migration.
+        // Remove legacy plaintext key on a VERIFIED Windows DPAPI migration.
         const plaintextIndex = lines.findIndex(line => /^shieldKey:/.test(line.trim()));
         if (plaintextIndex >= 0)
             lines.splice(plaintextIndex, 1);

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.21.31"
+  "version": "1.21.32"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.21.31",
+  "version": "1.21.32",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {