fullcourtdefense-cli 1.0.2 → 1.1.1

package/dist/commands/scan.d.ts

@@ -41,5 +41,8 @@ export interface ScanArgs {
     shieldId?: string;
     shieldKey?: string;
     localOnly?: string;
+    open?: string;
+    noOpen?: string;
+    openUi?: string;
 }
 export declare function scanCommand(args: ScanArgs, config: BotGuardConfig): Promise<void>;

package/dist/commands/scan.js

@@ -46,12 +46,15 @@ async function scanCommand(args, config) {
             configShieldKey: config.shieldKey,
             configApiUrl: config.apiUrl,
             apiUrl: args.apiUrl,
+            open: args.open,
+            noOpen: args.noOpen,
+            openUi: args.openUi,
         });
         return;
     }
-    const apiKey = args.apiKey || config.apiKey || process.env.BOTGUARD_API_KEY;
+    const apiKey = args.apiKey || config.apiKey || process.env.FULLCOURTDEFENSE_API_KEY || process.env.BOTGUARD_API_KEY;
     if (!apiKey) {
-        console.error('Error: API key required. Use --api-key, BOTGUARD_API_KEY env var, or .botguard.yml');
+        console.error('Error: API key required. Use --api-key, FULLCOURTDEFENSE_API_KEY env var, or .fullcourtdefense.yml');
         console.error('Get your API key at: https://fullcourtdefense.ai → Account → API Keys');
         process.exit(1);
     }

package/dist/index.js

@@ -7,7 +7,10 @@ const credits_1 = require("./commands/credits");
 const init_1 = require("./commands/init");
 const doctor_1 = require("./commands/doctor");
 const configure_1 = require("./commands/configure");
-const VERSION = '1.0.2';
+const discover_1 = require("./commands/discover");
+const hook_1 = require("./commands/hook");
+const installCursorHook_1 = require("./commands/installCursorHook");
+const VERSION = '1.1.1';
 function parseArgs(argv) {
     const flags = {};
     let command = '';
@@ -61,6 +64,16 @@ function printHelp() {
     doctor      First step. Checks outbound HTTPS access to FullCourtDefense.
     configure   Saves Shield ID, Shield key, and API URL to .fullcourtdefense.yml.
     scan        Runs the scan. Use --local for inside-organization scans.
+    discover    Finds MCP servers configured on this machine (Cursor, Claude,
+                VS Code, Windsurf) and reports their risk. Use --upload to add
+                them to your AI Inventory.
+    install-cursor-hook
+                Installs a Cursor hook so every AI prompt + agent action
+                (shell, MCP) on this machine is scanned by your Shield.
+    uninstall-cursor-hook
+                Removes the FullCourtDefense Cursor hook entries.
+    hook        Internal: invoked by Cursor per agent event (reads stdin JSON,
+                returns an allow/deny verdict). Not run by hand.
     credits     Shows hosted scan credits for CI/CD API-key scans.
     init        Creates a starter .fullcourtdefense.yml config file.
 
@@ -79,12 +92,15 @@ function printHelp() {
     4. Run a guided local scan:
        fullcourtdefense scan --local
        The CLI asks whether to scan endpoint, mcp, or rag.
+       To open the localhost web scan UI first:
+       fullcourtdefense scan --local --open-ui
 
     5. Review results:
        Use --format summary for CI, --format table for terminal view,
        --format report for evidence, --format full-report for every row,
        or --format json for raw output.
-       With a Shield key configured, reports are saved to the web Reports page.
+       With a Shield key configured, reports are saved to the web Reports page
+       and the browser opens to the saved report. Use --no-open to suppress.
 
   \x1b[1mLocal Destinations:\x1b[0m
     endpoint    Internal HTTP URL, for example http://agent.local/chat.
@@ -111,8 +127,9 @@ function printHelp() {
 
   \x1b[1mScan Options:\x1b[0m
     --local                 Run scan from this machine, inside your network
+    --open-ui               Open localhost browser scan UI with all options
     --type <type>           Local scan type: endpoint, mcp, rag
-    --api-key <key>         API key (or set BOTGUARD_API_KEY env var)
+    --api-key <key>         API key (or set FULLCOURTDEFENSE_API_KEY env var)
     --api-url <url>         API base URL (default: https://api.fullcourtdefense.ai)
     --endpoint <url>        Agent API endpoint to scan
     --mcp-url <url>         Already-running HTTP MCP server URL
@@ -141,6 +158,9 @@ function printHelp() {
     --progress <mode>       MCP progress: verbose, compact, silent (default: verbose)
     --fail-threshold <n>    Exit code 1 if score below n (default: 0)
     --format <fmt>          Output: table, json, summary, report, full-report (default: table)
+    --open                  Open browser scan UI and saved local scan report
+    --open-ui               Open only the browser scan UI before local execution
+    --no-open               Do not open the browser during/after local scans
     --webhook-format <fmt>  Hosted webhook format, or legacy local request format
     --config <path>         Path to .fullcourtdefense.yml config file
 
@@ -148,16 +168,25 @@ function printHelp() {
     $ fullcourtdefense scan --endpoint https://my-bot.com/chat --description "Support bot"
     $ fullcourtdefense help
     $ fullcourtdefense scan --local
+    $ fullcourtdefense scan --local --open-ui
     $ fullcourtdefense scan --local --type endpoint --mode full --endpoint http://internal-agent/chat
     $ fullcourtdefense scan --local --type mcp --mcp-command node --mcp-args ./server.js --mcp-tool all --mode full
     $ fullcourtdefense scan --local --type mcp --mcp-url https://internal.company.com/mcp
     $ fullcourtdefense scan --local --type mcp --mcp-url https://internal.company.com/mcp --mcp-tool all --mode full
     $ fullcourtdefense scan --local --type mcp --mcp-transport sse --mcp-url https://internal.company.com/sse --mcp-tool all --mode full
     $ fullcourtdefense scan --local --type mcp --mcp-command node --mcp-args ./server.js --mcp-tool all --mode full --format report
+    $ fullcourtdefense discover
+    $ fullcourtdefense discover --upload
+    $ fullcourtdefense discover --type mcp --json
+    $ fullcourtdefense install-cursor-hook --shield-id <id> --shield-key <key>
+    $ fullcourtdefense install-cursor-hook --shadow true        # monitor only
+    $ fullcourtdefense install-cursor-hook --events prompt,shell,mcp,file
+    $ fullcourtdefense install-cursor-hook --project true       # this repo only
+    $ fullcourtdefense uninstall-cursor-hook
     $ fullcourtdefense configure
     $ fullcourtdefense doctor
     $ fullcourtdefense scan --system-prompt ./prompts/system.md --fail-threshold 80
-    $ fullcourtdefense scan --config .botguard.yml --format json
+    $ fullcourtdefense scan --config .fullcourtdefense.yml --format json
     $ fullcourtdefense credits
     $ fullcourtdefense init
 
@@ -218,6 +247,9 @@ async function main() {
                 ragUrl: flags['rag-url'],
                 shieldId: flags['shield-id'],
                 shieldKey: flags['shield-key'],
+                open: flags.open,
+                openUi: flags['open-ui'],
+                noOpen: flags['no-open'],
             };
             await (0, scan_1.scanCommand)(args, config);
             break;
@@ -250,6 +282,50 @@ async function main() {
             await (0, credits_1.creditsCommand)(args, config);
             break;
         }
+        case 'discover': {
+            const args = {
+                type: flags.type,
+                apiKey: flags['api-key'],
+                apiUrl: flags['api-url'],
+                json: flags.json,
+                upload: flags.upload,
+                connectorName: flags['connector-name'],
+                extraPath: flags.path,
+            };
+            await (0, discover_1.discoverCommand)(args, config);
+            break;
+        }
+        case 'install-cursor-hook': {
+            const args = {
+                project: flags.project,
+                shieldId: flags['shield-id'],
+                shieldKey: flags['shield-key'],
+                apiUrl: flags['api-url'],
+                shadow: flags.shadow,
+                failClosed: flags['fail-closed'],
+                events: flags.events,
+            };
+            await (0, installCursorHook_1.installCursorHookCommand)(args, config);
+            break;
+        }
+        case 'uninstall-cursor-hook': {
+            const args = { project: flags.project };
+            await (0, installCursorHook_1.uninstallCursorHookCommand)(args);
+            break;
+        }
+        case 'hook': {
+            const args = {
+                event: flags.event,
+                apiUrl: flags['api-url'],
+                shieldId: flags['shield-id'],
+                shieldKey: flags['shield-key'],
+                shadow: flags.shadow,
+                failClosed: flags['fail-closed'],
+                timeout: flags.timeout,
+            };
+            await (0, hook_1.hookCommand)(args, config);
+            break;
+        }
         case 'init': {
             await (0, init_1.initCommand)();
             break;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.0.2",
+  "version": "1.1.1",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {