fullcourtdefense-cli 1.36.2 → 1.36.3

package/dist/telemetry.js

@@ -43,6 +43,7 @@ exports.setVerdictIdentity = setVerdictIdentity;
 exports.setVerdictToolArgs = setVerdictToolArgs;
 exports.restartVerdictTiming = restartVerdictTiming;
 exports.spoolEvent = spoolEvent;
+exports.getLastFlushFailure = getLastFlushFailure;
 exports.flushSpool = flushSpool;
 exports.triggerFlush = triggerFlush;
 const async_hooks_1 = require("async_hooks");
@@ -360,10 +361,17 @@ function releaseFlushLock() {
     }
     catch { /* already gone */ }
 }
+let lastFlushFailure;
+function getLastFlushFailure() {
+    return lastFlushFailure;
+}
 /** Drain the spool to the backend in one batch (+ optional heartbeat). Returns accepted count. */
 async function flushSpool(input) {
-    if (!acquireFlushLock())
-        return null; // another flusher is draining — its batch covers these events
+    lastFlushFailure = undefined;
+    if (!acquireFlushLock()) { // another flusher is draining — its batch covers these events
+        lastFlushFailure = { kind: 'locked' };
+        return null;
+    }
     try {
         return await flushSpoolLocked(input);
     }
@@ -388,8 +396,10 @@ async function flushSpoolLocked(input) {
     const all = readSpool();
     const batch = all.slice(0, MAX_BATCH);
     const overflow = all.slice(MAX_BATCH);
-    if (batch.length === 0 && !input.heartbeat)
+    if (batch.length === 0 && !input.heartbeat) {
+        lastFlushFailure = { kind: 'empty' };
         return null;
+    }
     const identity = (0, machineIdentity_1.getMachineIdentity)();
     const headers = { 'Content-Type': 'application/json' };
     if (input.shieldKey)
@@ -443,11 +453,22 @@ async function flushSpoolLocked(input) {
             }),
             signal: AbortSignal.timeout(input.timeoutMs ?? 8000),
         });
-        if (!resp.ok)
-            return null;
         const body = await resp.json().catch(() => ({}));
-        if (!body.success)
+        if (!resp.ok || !body.success) {
+            lastFlushFailure = {
+                kind: 'http',
+                status: resp.status,
+                ...(typeof body.code === 'string' ? { code: body.code.slice(0, 60) } : {}),
+                ...(typeof body.error === 'string' ? { error: body.error.slice(0, 200) } : {}),
+            };
             return null;
+        }
+        // A 200 means the backend found this machine id enrolled under this
+        // shield: the id is now backend-confirmed and never silently replaced.
+        try {
+            (0, machineIdentity_1.confirmMachineIdentity)(identity.machineId, 'heartbeat');
+        }
+        catch { /* never lose a delivered batch over the pin */ }
         // Successfully delivered → drop ONLY the events we actually sent. The spool
         // may have gained new events while the POST was in flight (e.g. a terminal
         // guard block landing mid-flush) — rewriting with the pre-flush snapshot
@@ -456,7 +477,8 @@ async function flushSpoolLocked(input) {
         rewriteSpool(readSpool().filter(e => !flushedIds.has(e.eventId)));
         return body.data || { accepted: batch.length, deduped: 0 };
     }
-    catch {
+    catch (error) {
+        lastFlushFailure = { kind: 'network', error: error instanceof Error ? error.message.slice(0, 200) : String(error).slice(0, 200) };
         return null; // keep the spool intact for the next attempt (offline-safe)
     }
 }

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.36.2"
+  "version": "1.36.3"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.36.2",
+  "version": "1.36.3",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {
@@ -72,6 +72,7 @@
     "test:scan-root-compaction": "npm run build && node scripts/test-scan-root-compaction.js",
     "test:dpapi-config": "npm run build && node scripts/test-dpapi-config.js",
     "test:distress-ledger": "npm run build && node scripts/test-distress-ledger.js",
+    "test:machine-identity": "npm run build && node scripts/test-machine-identity.js",
     "test:poll-loop": "npm run build && node scripts/test-poll-loop-resilience.js && node scripts/test-background-bundle.js && node scripts/test-policy-refresh.js",
     "test:slim-hook": "npm run build && node scripts/test-slim-hook.js",
     "test:killswitch": "npm run build && node scripts/test-killswitch-integrity.js",