fullcourtdefense-cli 1.1.17 → 1.3.0

package/dist/commands/knownMcpServers.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.knownMcpServerInfo = knownMcpServerInfo;
+exports.directServerFixHint = directServerFixHint;
+const KNOWN = [
+    {
+        match: /playwright/i,
+        info: {
+            title: 'Playwright',
+            description: 'Browser automation — AI can open sites, click, and act as the logged-in user.',
+            category: 'browser',
+            recommendGateway: true,
+        },
+    },
+    {
+        match: /puppeteer|selenium|browser/i,
+        info: {
+            title: 'Browser automation',
+            description: 'Controls a web browser on the developer machine.',
+            category: 'browser',
+            recommendGateway: true,
+        },
+    },
+    {
+        match: /filesystem|server-filesystem/i,
+        info: {
+            title: 'Filesystem',
+            description: 'Reads and writes local files — high exfiltration risk.',
+            category: 'filesystem',
+            recommendGateway: true,
+        },
+    },
+    {
+        match: /postgres|mysql|sqlite|database|supabase/i,
+        info: {
+            title: 'Database',
+            description: 'Queries databases directly from the AI client.',
+            category: 'database',
+            recommendGateway: true,
+        },
+    },
+    {
+        match: /agentguard-gateway|fullcourtdefense-gateway|fcd-gateway/i,
+        info: {
+            title: 'FCD MCP gateway',
+            description: 'Full Court Defense proxy — tool calls checked by Shield and Action Policies.',
+            category: 'gateway',
+            recommendGateway: false,
+        },
+    },
+];
+function knownMcpServerInfo(serverName, command) {
+    const hay = `${serverName} ${command || ''}`;
+    for (const entry of KNOWN) {
+        if (entry.match.test(hay))
+            return entry.info;
+    }
+    return undefined;
+}
+function directServerFixHint(serverName) {
+    const info = knownMcpServerInfo(serverName);
+    if (!info?.recommendGateway)
+        return undefined;
+    if (/playwright/i.test(serverName)) {
+        return 'Remove Playwright from mcp.json or route it through: fullcourtdefense install-mcp-gateway --clients all --mcp-command ...';
+    }
+    return 'Route through FCD gateway: fullcourtdefense install-mcp-gateway --clients all --mcp-command npm --mcp-args "run mcp"';
+}

package/dist/commands/mcpGateway.d.ts

@@ -34,6 +34,8 @@ export interface InstallMcpGatewayArgs extends McpGatewayArgs {
     cursorProject?: string;
     claudeCodeScope?: string;
     serverName?: string;
+    upload?: string;
+    apiKey?: string;
 }
 export declare function mcpGatewayCommand(args: McpGatewayArgs, config: BotGuardConfig): Promise<void>;
 export declare function installCursorMcpGatewayCommand(args: InstallCursorMcpGatewayArgs, config: BotGuardConfig): Promise<void>;

package/dist/commands/mcpGateway.js

@@ -42,6 +42,8 @@ const fs = __importStar(require("fs"));
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const child_process_1 = require("child_process");
+const discoverPaths_1 = require("./discoverPaths");
+const discover_1 = require("./discover");
 const DEFAULT_API_URL = 'https://api.fullcourtdefense.ai';
 const MANAGED_SERVER_NAME = 'agentguard-gateway';
 function parseArgsList(value) {
@@ -672,83 +674,6 @@ function writeMcpServerConfig(file, serverName, nodeExe, commandArgs) {
     fs.mkdirSync(path.dirname(file), { recursive: true });
     fs.writeFileSync(file, `${JSON.stringify(json, null, 2)}\n`, 'utf8');
 }
-function dedupePaths(candidates) {
-    const seen = new Set();
-    return candidates.filter(candidate => {
-        const key = path.resolve(candidate.file).toLowerCase();
-        if (seen.has(key))
-            return false;
-        seen.add(key);
-        return true;
-    });
-}
-function claudeDesktopMcpPath() {
-    const home = os.homedir();
-    if (process.platform === 'win32') {
-        const appData = process.env.APPDATA || path.join(home, 'AppData', 'Roaming');
-        return path.join(appData, 'Claude', 'claude_desktop_config.json');
-    }
-    if (process.platform === 'darwin') {
-        return path.join(home, 'Library', 'Application Support', 'Claude', 'claude_desktop_config.json');
-    }
-    const xdg = process.env.XDG_CONFIG_HOME || path.join(home, '.config');
-    return path.join(xdg, 'Claude', 'claude_desktop_config.json');
-}
-function claudeDesktopMsixCandidates() {
-    if (process.platform !== 'win32')
-        return [];
-    const localAppData = process.env.LOCALAPPDATA || path.join(os.homedir(), 'AppData', 'Local');
-    const packagesDir = path.join(localAppData, 'Packages');
-    let packageNames = [];
-    try {
-        packageNames = fs.readdirSync(packagesDir)
-            .filter(name => /^Claude_/i.test(name));
-    }
-    catch {
-        return [];
-    }
-    return packageNames.map(name => {
-        const file = path.join(packagesDir, name, 'LocalCache', 'Roaming', 'Claude', 'claude_desktop_config.json');
-        return {
-            file,
-            source: 'Claude Desktop (Microsoft Store/MSIX)',
-            exists: fs.existsSync(file),
-        };
-    });
-}
-function claudeDesktopMcpCandidates() {
-    const documented = claudeDesktopMcpPath();
-    const normal = {
-        file: documented,
-        source: process.platform === 'win32'
-            ? 'Claude Desktop (Windows documented AppData)'
-            : process.platform === 'darwin'
-                ? 'Claude Desktop (macOS)'
-                : 'Claude Desktop (Linux/XDG)',
-        exists: fs.existsSync(documented),
-    };
-    // Store/MSIX Claude Desktop reads a virtualized AppData path. Prefer it when present.
-    return dedupePaths([
-        ...claudeDesktopMsixCandidates(),
-        normal,
-    ]);
-}
-function claudeDesktopInstallTargets(configPath) {
-    if (configPath) {
-        const file = path.resolve(configPath);
-        return [{ file, source: 'Claude Desktop (custom config path)', exists: fs.existsSync(file) }];
-    }
-    const candidates = claudeDesktopMcpCandidates();
-    const existing = candidates.filter(candidate => candidate.exists);
-    if (existing.length > 0)
-        return existing;
-    const msix = candidates.find(candidate => candidate.source.includes('MSIX'));
-    return [msix || candidates[candidates.length - 1] || {
-            file: claudeDesktopMcpPath(),
-            source: 'Claude Desktop',
-            exists: false,
-        }];
-}
 function normalizeClaudeCodeScope(scope) {
     if (scope === 'project' || scope === 'user' || scope === 'local')
         return scope;
@@ -791,9 +716,8 @@ function detectInstallClients(cursorProject) {
         clients.push('cursor');
     if (commandAvailable('claude'))
         clients.push('claude-code');
-    if (claudeDesktopMcpCandidates().some(candidate => candidate.exists) || fs.existsSync(path.dirname(claudeDesktopMcpPath()))) {
+    if ((0, discoverPaths_1.claudeDesktopLikelyInstalled)())
         clients.push('claude-desktop');
-    }
     return clients;
 }
 function clientInstallArgs(args) {
@@ -841,7 +765,9 @@ async function installCursorMcpGatewayCommand(args, config) {
 async function installMcpGatewayCommand(args, config) {
     const cursorProject = args.cursorProject === 'true';
     const selection = parseClientList(args.clients);
-    const clients = selection === 'auto' ? detectInstallClients(cursorProject) : selection;
+    const clients = selection === 'auto'
+        ? detectInstallClients(cursorProject)
+        : selection;
     if (clients.length === 0) {
         throw new Error('No supported MCP clients detected. Re-run with --clients all or a comma list such as cursor,claude-desktop.');
     }
@@ -876,6 +802,19 @@ async function installMcpGatewayCommand(args, config) {
     console.log(`Runtime identity: ${detectedDeveloperName(args)}`);
     console.log('Restart/reload each client to use the protected tools.');
     console.log('Smoke test prompt: "Use lookup_customer to look up customer C-1001."');
+    if (args.upload === 'true') {
+        console.log('');
+        console.log('Uploading desktop inventory to AI Inventory…');
+        await (0, discover_1.runDiscoverUpload)({
+            apiKey: args.apiKey || config.apiKey,
+            apiUrl: args.apiUrl,
+            userEmail: args.developerName,
+            silent: false,
+        }, config);
+    }
+    else {
+        console.log('Run with --upload to refresh AI Inventory / Desktop MCP coverage in the app.');
+    }
 }
 async function installClaudeCodeMcpGatewayCommand(args, config) {
     const gatewayConfig = resolveGatewayConfig(args, config, {
@@ -940,7 +879,7 @@ async function installClaudeDesktopMcpGatewayCommand(args, config) {
         agentNamePrefix: 'claude-desktop',
         userObjective: 'Developer requested this action from Claude Desktop.',
     });
-    const targets = claudeDesktopInstallTargets(args.configPath);
+    const targets = (0, discoverPaths_1.claudeDesktopInstallTargets)(args.configPath);
     const nodeExe = process.execPath;
     const serverName = args.serverName || MANAGED_SERVER_NAME;
     const downstreamCommand = args.mcpCommand || process.env.FCD_MCP_COMMAND;

package/dist/index.js

@@ -66,8 +66,9 @@ function printHelp() {
     configure   Saves Shield ID, Shield key, and API URL to .fullcourtdefense.yml.
     scan        Runs the scan. Use --local for inside-organization scans.
     discover    Finds MCP servers configured on this machine (Cursor, Claude,
-                VS Code, Windsurf) and reports their risk. Use --upload to add
-                them to your AI Inventory.
+                VS Code, Windsurf, Codex, Gemini CLI) and reports their risk.
+                Use --upload to add them to your AI Inventory. Use --deep for
+                live HTTP/SSE tools/list. Use --silent for fleet/MDM scripts.
     install-cursor-hook
                 Installs a Cursor hook so every AI prompt + agent action
                 (shell, MCP) on this machine is scanned by your Shield.
@@ -199,6 +200,7 @@ function printHelp() {
     $ fullcourtdefense scan --local --type mcp --mcp-command node --mcp-args ./server.js --mcp-tool all --mode full --format report
     $ fullcourtdefense discover
     $ fullcourtdefense discover --upload
+    $ fullcourtdefense discover --deep --upload --silent --user-email you@company.com
     $ fullcourtdefense discover --type mcp --json
     $ fullcourtdefense install-cursor-hook --shield-id <id> --shield-key <key>
     $ fullcourtdefense install-cursor-hook --shadow true        # monitor only
@@ -206,7 +208,7 @@ function printHelp() {
     $ fullcourtdefense install-cursor-hook --project true       # this repo only
     $ fullcourtdefense uninstall-cursor-hook
     $ fullcourtdefense install-mcp-gateway --clients auto --shield-id <id> --shield-key <key> --mcp-command npm --mcp-args "run mcp"
-    $ fullcourtdefense install-mcp-gateway --clients all --mcp-command node --mcp-args ./server.js
+    $ fullcourtdefense install-mcp-gateway --clients all --shield-id <id> --shield-key <key> --mcp-command npm --mcp-args "run mcp" --upload --api-key <key>
     $ fullcourtdefense install-cursor-mcp-gateway --project true --shield-id <id> --shield-key <key> --mcp-command npm --mcp-args "run mcp"
     $ fullcourtdefense install-claude-code-mcp-gateway --scope local --shield-id <id> --shield-key <key> --mcp-command npm --mcp-args "run mcp"
     $ fullcourtdefense install-claude-code-mcp-gateway --scope project --shield-id <id> --mcp-command npm --mcp-args "run mcp"
@@ -320,6 +322,12 @@ async function main() {
                 upload: flags.upload,
                 connectorName: flags['connector-name'],
                 extraPath: flags.path,
+                deep: flags.deep,
+                silent: flags.silent,
+                userEmail: flags['user-email'],
+                schedule: flags.schedule,
+                unschedule: flags.unschedule,
+                scheduleHour: flags['schedule-hour'],
             };
             await (0, discover_1.discoverCommand)(args, config);
             break;
@@ -398,6 +406,8 @@ async function main() {
                 approvalPollMs: flags['approval-poll-ms'],
                 scanResponse: flags['scan-response'],
                 failClosed: flags['fail-closed'],
+                upload: flags.upload,
+                apiKey: flags['api-key'],
             };
             await (0, mcpGateway_1.installMcpGatewayCommand)(args, config);
             break;

package/package.json

@@ -1,10 +1,11 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.1.17",
+  "version": "1.3.0",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {
     "fullcourtdefense": "dist/index.js",
+    "fcd": "dist/index.js",
     "botguard": "dist/index.js"
   },
   "files": [