fullcourtdefense-cli 1.1.11 → 1.1.13

package/README.md

@@ -167,6 +167,8 @@ Local scans run from the customer machine or VPN and only send captured text out
 | `--mcp-api-key <key>` | HTTP/SSE MCP API-key auth | API key value. | prompt |
 | `--progress <mode>` | MCP | Console progress: `verbose`, `compact`, or `silent`. | `verbose` |
 | `--server-name <name>` | MCP gateway installers | MCP server name to write into the client config. | `agentguard-gateway` |
+| `--developer-name <name>` | MCP gateway installers | Runtime identity used for user-scoped Action Policies. Auto-detected from `FCD_DEVELOPER_NAME`, git email, npm username, or OS username. | auto |
+| `--agent-name <name>` | MCP gateway installers | Runtime agent name shown in AI Users. Auto-generated from runtime identity plus client, e.g. `boaz.lautman-claude-desktop`. | auto |
 | `--scope <scope>` | Claude Code gateway installer | Claude Code MCP scope: `local`, `project`, or `user`. | `local` |
 | `--config-path <path>` | Claude Desktop gateway installer | Override path to `claude_desktop_config.json`. | OS default |
 
@@ -328,6 +330,8 @@ Claude Desktop install:
 fullcourtdefense install-claude-desktop-mcp-gateway --shield-id "sh_..." --shield-key "shsk_..." --mcp-command npm --mcp-args "run mcp"
 ```
 
+The gateway auto-detects runtime identity when `--developer-name` is omitted. Detection order is `FCD_DEVELOPER_NAME`, `FULLCOURTDEFENSE_DEVELOPER_NAME`, `AGENTGUARD_DEVELOPER_NAME`, `USER_EMAIL`, `git config user.email`, `npm whoami`, then OS username. Use `--developer-name` only when you want to override the detected employee/runtime identity.
+
 Direct gateway run for debugging:
 
 ```powershell

package/dist/commands/mcpGateway.js

@@ -80,19 +80,55 @@ function normalizeAgentClient(value, fallback) {
         return value;
     return fallback;
 }
+function firstNonEmpty(...values) {
+    return values.map(value => value?.trim()).find(Boolean);
+}
+function commandOutput(command, args) {
+    try {
+        const result = (0, child_process_1.spawnSync)(command, args, {
+            encoding: 'utf8',
+            shell: process.platform === 'win32',
+            stdio: ['ignore', 'pipe', 'ignore'],
+        });
+        if (result.status !== 0)
+            return undefined;
+        return result.stdout?.trim() || undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function safeIdentityPart(value) {
+    return value
+        .trim()
+        .replace(/@.*$/, '')
+        .replace(/[^a-zA-Z0-9._-]+/g, '-')
+        .replace(/^-+|-+$/g, '')
+        .toLowerCase() || 'local-user';
+}
+function detectedDeveloperName(args) {
+    return firstNonEmpty(args.developerName, process.env.FCD_DEVELOPER_NAME, process.env.FULLCOURTDEFENSE_DEVELOPER_NAME, process.env.AGENTGUARD_DEVELOPER_NAME, process.env.USER_EMAIL, commandOutput('git', ['config', '--get', 'user.email']), commandOutput('npm', ['whoami']), safeUserName()) || 'unknown';
+}
+function defaultAgentName(agentClient, developerName, defaults) {
+    if (defaults.agentName)
+        return defaults.agentName;
+    const prefix = defaults.agentNamePrefix || agentClient;
+    return `${safeIdentityPart(developerName)}-${prefix}`;
+}
 function resolveGatewayConfig(args, config, defaults = {}) {
     const home = loadHomeShield();
     const shieldId = args.shieldId || process.env.FCD_SHIELD_ID || process.env.FULLCOURTDEFENSE_SHIELD_ID || process.env.AGENTGUARD_SHIELD_ID || config.shieldId || home.shieldId;
     if (!shieldId)
         throw new Error('Missing Shield ID. Pass --shield-id or run fullcourtdefense configure.');
     const agentClient = normalizeAgentClient(args.agentClient || process.env.FCD_AGENT_CLIENT, defaults.agentClient || 'cursor');
+    const developerName = detectedDeveloperName(args);
     return {
         shieldId,
         shieldKey: args.shieldKey || process.env.FCD_SHIELD_KEY || process.env.FULLCOURTDEFENSE_SHIELD_KEY || process.env.AGENTGUARD_SHIELD_KEY || config.shieldKey || home.shieldKey,
         apiUrl: (args.apiUrl || process.env.FCD_API_URL || process.env.FULLCOURTDEFENSE_API_URL || config.apiUrl || home.apiUrl || DEFAULT_API_URL).replace(/\/$/, ''),
-        agentName: args.agentName || process.env.FCD_AGENT_NAME || defaults.agentName || 'cursor-local-agent',
+        agentName: args.agentName || process.env.FCD_AGENT_NAME || defaultAgentName(agentClient, developerName, defaults),
         agentClient,
-        developerName: args.developerName || process.env.FCD_DEVELOPER_NAME || process.env.USER_EMAIL || safeUserName(),
+        developerName,
         environment: args.environment || process.env.FCD_ENVIRONMENT || 'developer-workstation',
         userObjective: args.userObjective || process.env.FCD_USER_OBJECTIVE || defaults.userObjective || 'Developer requested this action from Cursor.',
         authority: args.authority || process.env.FCD_AUTHORITY || 'developer',
@@ -613,7 +649,7 @@ function normalizeClaudeCodeScope(scope) {
 async function installCursorMcpGatewayCommand(args, config) {
     const gatewayConfig = resolveGatewayConfig(args, config, {
         agentClient: 'cursor',
-        agentName: 'cursor-local-agent',
+        agentNamePrefix: 'cursor',
         userObjective: 'Developer requested this action from Cursor.',
     });
     const projectScope = args.project === 'true';
@@ -635,7 +671,7 @@ async function installCursorMcpGatewayCommand(args, config) {
 async function installClaudeCodeMcpGatewayCommand(args, config) {
     const gatewayConfig = resolveGatewayConfig(args, config, {
         agentClient: 'claude-code',
-        agentName: 'claude-code-local-agent',
+        agentNamePrefix: 'claude-code',
         userObjective: 'Developer requested this action from Claude Code.',
     });
     const scope = normalizeClaudeCodeScope(args.scope);
@@ -680,7 +716,7 @@ async function installClaudeCodeMcpGatewayCommand(args, config) {
 async function installClaudeDesktopMcpGatewayCommand(args, config) {
     const gatewayConfig = resolveGatewayConfig(args, config, {
         agentClient: 'claude-desktop',
-        agentName: 'claude-desktop-local-agent',
+        agentNamePrefix: 'claude-desktop',
         userObjective: 'Developer requested this action from Claude Desktop.',
     });
     const file = args.configPath ? path.resolve(args.configPath) : claudeDesktopMcpPath();

package/dist/index.js

@@ -11,7 +11,7 @@ const discover_1 = require("./commands/discover");
 const hook_1 = require("./commands/hook");
 const installCursorHook_1 = require("./commands/installCursorHook");
 const mcpGateway_1 = require("./commands/mcpGateway");
-const VERSION = '1.1.10';
+const VERSION = '1.1.13';
 function parseArgs(argv) {
     const flags = {};
     let command = '';
@@ -148,6 +148,8 @@ function printHelp() {
     --mcp-args <args>       MCP server args/path, for example ./server.js
     --mcp-tool <tool>       MCP tool to test, or all
     --server-name <name>    MCP gateway server name for client installers
+    --developer-name <name> Runtime identity for user-scoped policies (auto-detected if omitted)
+    --agent-name <name>     Runtime agent name (auto-generated from identity + client if omitted)
     --scope <scope>         Claude Code MCP scope: local, project, or user
     --config-path <path>    Claude Desktop config override path
     --mcp-auth-type <type>  HTTP MCP auth: none, bearer, basic, api-key

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.1.11",
+  "version": "1.1.13",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {