fullcourtdefense-cli 1.27.0 → 1.27.1

package/dist/commands/hook.d.ts

@@ -114,6 +114,14 @@ export interface HookIo {
     write(text: string): void;
     writeErr(text: string): void;
     exit(code: number): never;
+    /**
+     * True when `exit` really ends the process (standalone hook: CI runners,
+     * containers, a workstation whose daemon is down). Fire-and-forget network
+     * work started before `respond()` dies with the process, so audit reports
+     * must go through the spool + detached flusher instead. False in daemon
+     * mode, where `exit` only unwinds the evaluation and the process lives on.
+     */
+    exitsProcess: boolean;
 }
 /**
  * Daemon-side entry: evaluate one hook request in-process and return the

package/dist/commands/hook.js

@@ -785,6 +785,7 @@ function processIo(stdin, stdinErr) {
         write: (text) => { process.stdout.write(text); },
         writeErr: (text) => { process.stderr.write(text); },
         exit: (code) => process.exit(code),
+        exitsProcess: true,
     };
 }
 /**
@@ -804,6 +805,7 @@ async function evaluateHookRequest(args, stdinRaw, config) {
         write: (text) => { out += text; },
         writeErr: (text) => { errOut += text; },
         exit: (code) => { throw new HookExitSignal(code); },
+        exitsProcess: false,
     };
     try {
         await hookCommandInner(args, config, io);
@@ -1195,7 +1197,7 @@ async function hookCommandInner(args, config, io) {
         await enforceActionPolicy({
             event, payload, apiUrl: apiUrl, shieldId: shieldId, shieldKey,
             shadow, failClosed, timeoutMs, approvalMode, approvalTimeoutMs, approvalPollMs, respond, deferLocalWarnings,
-            effectivePolicyHash, localPolicies, client,
+            effectivePolicyHash, localPolicies, client, exitsProcess: io.exitsProcess,
         });
         return;
     }
@@ -1450,8 +1452,21 @@ async function enforceActionPolicy(ctx) {
         const localVerdict = (0, actionPolicyEngine_1.evaluateActionPolicies)(ctx.localPolicies, call.toolName, localOp, localCtx, (0, actionPolicyEngine_1.deriveToolOperations)(call.toolName));
         (0, hookIo_1.dbg)({ phase: 'policy_local_first', event, tool: call.toolName, operation: localOp, verdict: localVerdict.verdict, policyName: localVerdict.policyName });
         if (localVerdict.verdict === 'allow') {
-            // Audit rides async: server records the action + its own verdict; if it
-            // is unreachable the spool keeps the trail (idempotent on eventId).
+            if (ctx.exitsProcess) {
+                // Standalone hook (CI runner, container, daemon down): respond() ends
+                // the process, so a fire-and-forget gate report would die in flight and
+                // the allowed action would never reach the fleet — the machine would
+                // read "N blocked of N recent" with every allow missing. Same delivery
+                // as a block: spool (sync file append) + detached flusher that outlives
+                // this process. The IDE is not kept waiting on the network.
+                spoolCallEvent(call, { decision: 'allow', reason: 'local policy allow (block mode, local-first)' });
+                (0, telemetry_1.triggerFlush)(true);
+                respond(false);
+                return;
+            }
+            // Daemon-evaluated: the process lives on, so the audit rides async — the
+            // server records the action + its own verdict; if it is unreachable the
+            // spool keeps the trail (idempotent on eventId).
             void fetch(gateUrl, { method: 'POST', headers, body: gateBody, signal: AbortSignal.timeout(4000) })
                 .then(() => (0, policyGateHealth_1.recordGateSuccess)())
                 .catch(() => {

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.27.0"
+  "version": "1.27.1"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.27.0",
+  "version": "1.27.1",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {