fullcourtdefense-cli 1.6.8 → 1.6.10

package/dist/commands/hook.js

@@ -104,6 +104,30 @@ function inferEvent(explicit, payload) {
     return 'unknown';
 }
 const str = (v) => (typeof v === 'string' ? v : '');
+function collectPromptStrings(value, out = [], depth = 0) {
+    if (depth > 5 || value === null || value === undefined)
+        return out;
+    if (typeof value === 'string') {
+        if (value.trim())
+            out.push(value);
+        return out;
+    }
+    if (Array.isArray(value)) {
+        for (const item of value.slice(-10))
+            collectPromptStrings(item, out, depth + 1);
+        return out;
+    }
+    if (typeof value === 'object') {
+        const obj = value;
+        for (const key of ['text', 'content', 'message', 'value', 'input', 'prompt']) {
+            collectPromptStrings(obj[key], out, depth + 1);
+        }
+        for (const key of ['messages', 'parts', 'items']) {
+            collectPromptStrings(obj[key], out, depth + 1);
+        }
+    }
+    return out;
+}
 /** Pull the meaningful text to scan out of a Cursor PROMPT hook payload. */
 function extractPromptText(p) {
     const direct = str(p.prompt) || str(p.text) || str(p.message) || str(p.content);
@@ -114,12 +138,29 @@ function extractPromptText(p) {
         const t = str(promptObj.text) || str(promptObj.content);
         if (t)
             return t;
+        const nestedPrompt = collectPromptStrings(promptObj);
+        if (nestedPrompt.length)
+            return nestedPrompt.join('\n');
     }
     const messages = p.messages;
     if (Array.isArray(messages) && messages.length) {
         const last = messages[messages.length - 1];
-        return str(last?.content) || str(last?.text);
+        const fromLast = str(last?.content) || str(last?.text);
+        if (fromLast)
+            return fromLast;
+        const nestedMessages = collectPromptStrings(last);
+        if (nestedMessages.length)
+            return nestedMessages.join('\n');
     }
+    const nestedTopLevel = collectPromptStrings({
+        text: p.text,
+        message: p.message,
+        content: p.content,
+        input: p.input,
+        prompt: p.prompt,
+    });
+    if (nestedTopLevel.length)
+        return nestedTopLevel.join('\n');
     return '';
 }
 /**
@@ -356,6 +397,7 @@ async function hookCommand(args, config) {
     // --- Shield text analysis for prompts (developer chat) ---
     if (event === 'prompt') {
         const text = extractPromptText(payload).trim();
+        dbg({ phase: 'prompt_text', textLen: text.length, textPreview: text.slice(0, 300) });
         if (!text)
             respond(false);
         const localBlock = (0, deterministicGuard_1.scanDeterministicPrompt)(text);

package/dist/commands/installCursorHook.js

@@ -137,7 +137,7 @@ async function installCursorHookCommand(args, config) {
         const { hookKey, flag, failClosedDefault, timeoutSec } = EVENT_MAP[e];
         const failClosed = e === 'prompt' ? false : (args.failClosed !== undefined ? args.failClosed === 'true' : failClosedDefault);
         const entry = {
-            command: buildHookCommand(flag, { shadow: e === 'prompt' ? true : shadow, failClosed }),
+            command: buildHookCommand(flag, { shadow, failClosed }),
             timeout: timeoutSec,
         };
         if (failClosed)

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.6.8"
+  "version": "1.6.10"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.6.8",
+  "version": "1.6.10",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {