fullcourtdefense-cli 1.36.3 → 1.37.0

package/dist/commands/flushSpool.js

@@ -16,12 +16,19 @@ async function flushSpoolCommand(args, config) {
     });
     if (!creds.shieldId)
         return; // nothing to attribute to
-    const result = await (0, telemetry_1.flushSpool)({
+    // Drains in batches and records completion for the hooks that coalesced
+    // onto this flusher. `--heartbeat liveness` (hook-requested flushes):
+    // liveness only, no diagnostic payload, and a short linger for the rest of
+    // the burst that requested it.
+    const hookRequested = args.heartbeat === 'liveness';
+    const result = await (0, telemetry_1.drainSpool)({
         apiUrl: creds.apiUrl,
         shieldId: creds.shieldId,
         shieldKey: creds.shieldKey,
         heartbeat: args.heartbeat !== 'false',
-    });
+        livenessOnly: hookRequested,
+        refreshGuardRules: args.guardRules !== 'false',
+    }, { linger: hookRequested });
     if (result) {
         console.log(`Flushed ${result.accepted} event(s)${result.deduped ? `, ${result.deduped} deduped` : ''}.`);
     }

package/dist/commands/hook.d.ts

@@ -34,6 +34,7 @@ export interface HookArgs {
     approvalMode?: string;
     approvalTimeoutMs?: string;
     approvalPollMs?: string;
+    ideTimeout?: string;
 }
 /**
  * `post` = a post-execution hook (Cursor afterShellExecution / afterMCPExecution, Claude
@@ -209,6 +210,14 @@ export interface HookIo {
      * mode, where `exit` only unwinds the evaluation and the process lives on.
      */
     exitsProcess: boolean;
+    /**
+     * Native hooks (Codex, Gemini CLI, Windsurf, Kiro): a block-mode local-first
+     * allow queues its check-tool-call report (gateReports.ts) instead of
+     * spooling it. These processes used to send that report themselves and
+     * wait for it; its answer still ends a gate-failure streak and feeds the
+     * server's behavior baseline, only after the verdict and off this process.
+     */
+    deferGateReports?: boolean;
     /** Evaluated inside the resident daemon for a thin client (see DaemonDeclined). */
     viaDaemon?: boolean;
     /** Set when this evaluation's verdict is a stop still being settled (approval wait). */
@@ -245,9 +254,14 @@ export declare function crashVerdictForProcess(event: string | undefined, messag
  * snapshot, policy engine) is warm here — verdicts resolve in milliseconds.
  * Mirrors hookCommand's fail-open contract: any unexpected exception yields
  * an allow verdict, never an error the thin client would surface.
+ * `exitsProcess`: the caller is a one-shot hook process that ends with this
+ * verdict (the slim entry's fallback, native hooks) — see HookIo.exitsProcess.
+ * `deferGateReports`: native hooks — see HookIo.deferGateReports.
  */
 export declare function evaluateHookRequest(args: HookArgs, stdinRaw: string, config: BotGuardConfig, opts?: {
     viaDaemon?: boolean;
+    exitsProcess?: boolean;
+    deferGateReports?: boolean;
 }): Promise<{
     stdout: string;
     stderr: string;