fullcourtdefense-cli 1.25.5 → 1.25.7

package/dist/commands/cmdGuard.js

@@ -112,6 +112,7 @@ function batQuote(value) {
 function buildGuardJs(nodePath, cliEntry) {
     return [
         `'use strict';`,
+        `// ${(0, shellGuard_1.guardBuildStamp)()}`,
         `const fs=require('fs');const os=require('os');const path=require('path');const{spawn,spawnSync}=require('child_process');const crypto=require('crypto');`,
         `const RULES_PATH=${JSON.stringify(GUARD_RULES_PATH)};`,
         `const SPOOL_PATH=${JSON.stringify(path.join(os.homedir(), '.fullcourtdefense-spool.jsonl'))};`,
@@ -146,6 +147,7 @@ function buildAutorunBat(nodePath) {
     return [
         '@echo off',
         'REM FullCourtDefense cmd.exe guard (installed by fullcourtdefense-cli).',
+        `REM ${(0, shellGuard_1.guardBuildStamp)()}`,
         'REM Disable for one session: set FCD_CMD_GUARD=off',
         'REM Remove permanently: fullcourtdefense uninstall-cmd-guard',
         'if defined FCD_CMD_AUTORUN_DONE goto :eof',
@@ -275,6 +277,13 @@ function refreshCmdGuardRules() {
         if (!isCmdGuardInstalled())
             return;
         (0, shellGuard_1.writeShellGuardRules)();
+        // Self-heal after CLI updates: the planted checker/autorun carry the
+        // detection logic of the build that wrote them — rewrite when stale.
+        if ((0, shellGuard_1.guardArtifactStale)(GUARD_JS_PATH)) {
+            const nodePath = process.execPath;
+            (0, shellGuard_1.writeGuardArtifact)(GUARD_JS_PATH, buildGuardJs(nodePath, process.argv[1] || ''));
+            (0, shellGuard_1.writeGuardArtifact)(AUTORUN_BAT_PATH, buildAutorunBat(nodePath));
+        }
     }
     catch { /* best-effort */ }
 }

package/dist/commands/posixShellGuard.js

@@ -97,6 +97,7 @@ function shSingleQuote(value) {
 function buildGuardJs(nodePath, cliEntry) {
     return [
         `'use strict';`,
+        `// ${(0, shellGuard_1.guardBuildStamp)()}`,
         `const fs=require('fs');const crypto=require('crypto');const{spawn}=require('child_process');`,
         `const RULES_PATH=${JSON.stringify(GUARD_RULES_PATH)};`,
         `const SPOOL_PATH=${JSON.stringify(SPOOL_PATH)};`,
@@ -128,6 +129,7 @@ function buildGuardJs(nodePath, cliEntry) {
 function buildGuardZsh(nodePath) {
     return [
         `# FullCourtDefense interactive shell guard for zsh (installed by fullcourtdefense-cli).`,
+        `# ${(0, shellGuard_1.guardBuildStamp)()}`,
         `# Disable for one session:  export FCD_SHELL_GUARD=off`,
         `# Remove permanently:       fullcourtdefense uninstall-shell-guard`,
         ``,
@@ -174,6 +176,7 @@ function buildGuardZsh(nodePath) {
 function buildGuardBash(nodePath) {
     return [
         `# FullCourtDefense interactive shell guard for bash (installed by fullcourtdefense-cli).`,
+        `# ${(0, shellGuard_1.guardBuildStamp)()}`,
         `# Disable for one session:  export FCD_SHELL_GUARD=off`,
         `# Remove permanently:       fullcourtdefense uninstall-shell-guard`,
         ``,
@@ -393,6 +396,15 @@ function refreshPosixShellGuardRules() {
         if (!isPosixShellGuardInstalled())
             return;
         (0, shellGuard_1.writeShellGuardRules)();
+        // Self-heal after CLI updates: planted guard scripts carry the detection
+        // logic of the build that wrote them — rewrite when the stamp is stale.
+        if ((0, shellGuard_1.guardArtifactStale)(GUARD_JS_PATH)) {
+            const nodePath = process.execPath;
+            const cliEntry = process.argv[1] || '';
+            (0, shellGuard_1.writeGuardArtifact)(GUARD_JS_PATH, buildGuardJs(nodePath, cliEntry), 0o600);
+            (0, shellGuard_1.writeGuardArtifact)(GUARD_ZSH_PATH, buildGuardZsh(nodePath), 0o600);
+            (0, shellGuard_1.writeGuardArtifact)(GUARD_BASH_PATH, buildGuardBash(nodePath), 0o600);
+        }
     }
     catch { /* best-effort */ }
 }

package/dist/commands/shellGuard.d.ts

@@ -1,3 +1,19 @@
+/**
+ * Build stamp — the CLI version that generated a planted guard artifact.
+ *
+ * The profile/rc/autorun guard scripts are COPIES of CLI detection logic
+ * written to disk at install time. Without a stamp, a fleet CLI self-update
+ * ships new detection logic but every machine keeps running the old planted
+ * script forever (rules JSON refreshes carry rules, never logic). Each
+ * builder embeds this stamp in a comment; the telemetry-cycle refresh
+ * rewrites any artifact whose stamp differs from the running build.
+ */
+export declare const GUARD_BUILD_MARKER = "fcd-guard-build:";
+export declare function guardBuildStamp(): string;
+/** True when a planted guard artifact was generated by a DIFFERENT CLI build. */
+export declare function guardArtifactStale(filePath: string): boolean;
+/** Atomic write — a torn guard script would break every new shell that sources it. */
+export declare function writeGuardArtifact(filePath: string, content: string, mode?: number): void;
 /** Blast-severity levels (shellfirm-style). Drives per-severity console policy. */
 export type ShellGuardSeverity = 'critical' | 'high' | 'medium' | 'low';
 export interface ShellGuardRule {

package/dist/commands/shellGuard.js

@@ -33,6 +33,10 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.GUARD_BUILD_MARKER = void 0;
+exports.guardBuildStamp = guardBuildStamp;
+exports.guardArtifactStale = guardArtifactStale;
+exports.writeGuardArtifact = writeGuardArtifact;
 exports.writeShellGuardRules = writeShellGuardRules;
 exports.activeShellGuardRules = activeShellGuardRules;
 exports.evaluateShellCommand = evaluateShellCommand;
@@ -81,6 +85,48 @@ const RUNTIME_CACHE_PATH = path.join(os.homedir(), '.fullcourtdefense-runtime.js
 const SNAPSHOT_CACHE_DIR = path.join(os.homedir(), '.fullcourtdefense');
 const MARKER_START = '# >>> fullcourtdefense shell guard >>>';
 const MARKER_END = '# <<< fullcourtdefense shell guard <<<';
+/**
+ * Build stamp — the CLI version that generated a planted guard artifact.
+ *
+ * The profile/rc/autorun guard scripts are COPIES of CLI detection logic
+ * written to disk at install time. Without a stamp, a fleet CLI self-update
+ * ships new detection logic but every machine keeps running the old planted
+ * script forever (rules JSON refreshes carry rules, never logic). Each
+ * builder embeds this stamp in a comment; the telemetry-cycle refresh
+ * rewrites any artifact whose stamp differs from the running build.
+ */
+exports.GUARD_BUILD_MARKER = 'fcd-guard-build:';
+function guardBuildVersion() {
+    try {
+        const parsed = JSON.parse(fs.readFileSync(path.join(__dirname, '..', 'version.json'), 'utf8'));
+        return parsed.version || 'unknown';
+    }
+    catch {
+        return 'unknown';
+    }
+}
+function guardBuildStamp() {
+    return `${exports.GUARD_BUILD_MARKER} ${guardBuildVersion()}`;
+}
+/** True when a planted guard artifact was generated by a DIFFERENT CLI build. */
+function guardArtifactStale(filePath) {
+    const version = guardBuildVersion();
+    // Dev builds without version.json must not churn artifacts every 30s.
+    if (version === 'unknown')
+        return false;
+    try {
+        return !fs.readFileSync(filePath, 'utf8').includes(`${exports.GUARD_BUILD_MARKER} ${version}`);
+    }
+    catch {
+        return false;
+    }
+}
+/** Atomic write — a torn guard script would break every new shell that sources it. */
+function writeGuardArtifact(filePath, content, mode) {
+    const tmp = `${filePath}.tmp`;
+    fs.writeFileSync(tmp, content, mode !== undefined ? { encoding: 'utf8', mode } : 'utf8');
+    fs.renameSync(tmp, filePath);
+}
 /** Confine every lookahead to a single command segment (never span `;` `&` `|`). */
 const SEG = String.raw `[^;&|]*`;
 function compileSpec(spec) {
@@ -444,6 +490,12 @@ function refreshShellGuardRules() {
         if (!fs.existsSync(GUARD_PS1_PATH))
             return;
         writeShellGuardRules();
+        // Self-heal after CLI updates: the planted profile script carries the
+        // detection logic of the build that WROTE it. Rewrite when stale so new
+        // shells load the current guard (rules refreshes alone never carry logic).
+        if (guardArtifactStale(GUARD_PS1_PATH)) {
+            writeGuardArtifact(GUARD_PS1_PATH, buildGuardPs1(process.execPath, process.argv[1] || ''));
+        }
     }
     catch { /* best-effort */ }
 }
@@ -454,6 +506,7 @@ function psQuote(value) {
 function buildGuardPs1(nodePath, cliEntry) {
     const lines = [
         `# FullCourtDefense interactive shell guard (installed by fullcourtdefense-cli).`,
+        `# ${guardBuildStamp()}`,
         `# Blocks dangerous commands typed in PowerShell using the org's cached rules.`,
         `# Disable for one session:  $env:FCD_SHELL_GUARD = 'off'`,
         `# Remove permanently:       fullcourtdefense uninstall-shell-guard`,
@@ -577,9 +630,15 @@ function buildGuardPs1(nodePath, cliEntry) {
         `      try { $hit = Test-FcdShellGuard -CommandLine $line } catch { $hit = $null }`,
         `    }`,
         `    if ($null -ne $hit) {`,
+        `      # Writing from inside a PSReadLine key handler races the line redraw:`,
+        `      # on AcceptLine PSReadLine repaints the buffer at its saved coordinates,`,
+        `      # which can overwrite the message (it flashes and disappears — seen in`,
+        `      # Cursor/VS Code terminals). InvokePrompt() re-renders the prompt+buffer`,
+        `      # BELOW the message so the warning stays in the scrollback permanently.`,
         `      if ($global:FcdGuardMode -eq 'monitor') {`,
         `        Write-Host ''`,
         `        Write-Host ('[FullCourtDefense] monitor: would block [' + $hit.Severity + '] ' + $hit.Reason + ' (rule ' + $hit.Id + ')') -ForegroundColor Yellow`,
+        `        try { [Microsoft.PowerShell.PSConsoleReadLine]::InvokePrompt() } catch { }`,
         `        Write-FcdGuardEvent -Rule $hit -CommandLine $line -Decision 'warn'`,
         `        [Microsoft.PowerShell.PSConsoleReadLine]::AcceptLine()`,
         `        return`,
@@ -588,6 +647,7 @@ function buildGuardPs1(nodePath, cliEntry) {
         `      if ($hit.Action -eq 'warn') {`,
         `        Write-Host ''`,
         `        Write-Host ('[FullCourtDefense] warning [' + $hit.Severity + ']: ' + $hit.Reason + ' (rule ' + $hit.Id + ') — allowed by org policy, reported to your security dashboard.') -ForegroundColor Yellow`,
+        `        try { [Microsoft.PowerShell.PSConsoleReadLine]::InvokePrompt() } catch { }`,
         `        Write-FcdGuardEvent -Rule $hit -CommandLine $line -Decision 'warn'`,
         `        [Microsoft.PowerShell.PSConsoleReadLine]::AcceptLine()`,
         `        return`,
@@ -596,6 +656,7 @@ function buildGuardPs1(nodePath, cliEntry) {
         `      Write-Host ''`,
         `      Write-Host ('[FullCourtDefense] BLOCKED [' + $hit.Severity + ']: ' + $hit.Reason + ' (rule ' + $hit.Id + ')') -ForegroundColor Red`,
         `      Write-Host 'This command was not executed. Reported to your security dashboard.' -ForegroundColor DarkGray`,
+        `      try { [Microsoft.PowerShell.PSConsoleReadLine]::InvokePrompt() } catch { }`,
         `      Write-FcdGuardEvent -Rule $hit -CommandLine $line -Decision 'block'`,
         `      [Microsoft.PowerShell.PSConsoleReadLine]::AcceptLine()`,
         `      return`,

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.25.5"
+  "version": "1.25.7"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.25.5",
+  "version": "1.25.7",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {