fullcourtdefense-cli 1.17.1 → 1.18.0

package/dist/commands/discover.js

@@ -35,7 +35,6 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.discoverCommand = discoverCommand;
 exports.runDiscoverUpload = runDiscoverUpload;
-const crypto = __importStar(require("crypto"));
 const fs = __importStar(require("fs"));
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
@@ -52,6 +51,7 @@ const discoverBlastRadius_1 = require("./discoverBlastRadius");
 const discoverSecrets_1 = require("./discoverSecrets");
 const windowsAudit_1 = require("./windowsAudit");
 const discoveryMarker_1 = require("../discoveryMarker");
+const machineIdentity_1 = require("../machineIdentity");
 const DEFAULT_API_URL = 'https://api.fullcourtdefense.ai';
 function parseSurfaces(args) {
     const raw = (args.surface || args.type || 'mcp').toLowerCase().trim();
@@ -93,9 +93,17 @@ function redactCommandArgs(args) {
     }
     return out;
 }
+/**
+ * The SAME stable hardware id used at enrollment (MachineGuid / IOPlatformUUID
+ * / machine-id, sha256 → 32 hex chars). Discovery uploads MUST carry this id:
+ * the fleet console attaches scan evidence to the enrolled machine strictly by
+ * machineId, so a divergent id here makes the machine page show "Never
+ * scanned" while the data sits under a ghost host record. (Pre-1.18 releases
+ * hashed hostname+username into a 16-char fingerprint — the backend still
+ * recognizes those as legacy and matches them by hostname.)
+ */
 function machineFingerprint() {
-    const seed = [os.hostname(), os.userInfo().username, os.platform(), os.arch()].join('|');
-    return crypto.createHash('sha256').update(seed).digest('hex').slice(0, 16);
+    return (0, machineIdentity_1.getMachineIdentity)().machineId;
 }
 /** Detect ephemeral CI runners so they are never listed as user machines in the fleet. */
 function isCiEnvironment() {
@@ -613,6 +621,8 @@ function proxyStatusLabel(status) {
         return 'Proxied';
     if (status === 'direct')
         return 'Direct — needs gateway';
+    if (status === 'reference')
+        return 'Reference config — not loaded by any AI client';
     return 'Unknown';
 }
 function sanitizeSecretForUpload(finding) {
@@ -1036,7 +1046,9 @@ async function discoverCommand(args, config) {
             console.log('');
             if (clientCoverage.length > 0) {
                 for (const row of clientCoverage) {
-                    const gateway = row.mcpGatewayInstalled ? `${COLOR.green}gateway ✓${COLOR.reset}` : `${COLOR.red}no gateway${COLOR.reset}`;
+                    const gateway = (0, discoverProxy_1.isReferenceConfigSource)(row.client)
+                        ? `${COLOR.gray}reference only — not loaded by any AI client${COLOR.reset}`
+                        : row.mcpGatewayInstalled ? `${COLOR.green}gateway ✓${COLOR.reset}` : `${COLOR.red}no gateway${COLOR.reset}`;
                     console.log(`  ${COLOR.dim}•${COLOR.reset} ${row.client} — ${row.mcpServerCount} MCP · ${gateway}`);
                 }
                 console.log('');

package/dist/commands/discoverProxy.d.ts

@@ -1,4 +1,5 @@
-export type DesktopProxyStatus = 'fcd_gateway' | 'proxied' | 'direct' | 'unknown';
+export type DesktopProxyStatus = 'fcd_gateway' | 'proxied' | 'direct' | 'reference' | 'unknown';
+export declare function isReferenceConfigSource(source: string): boolean;
 export declare const FCD_GATEWAY_SERVER_NAMES: Set<string>;
 export declare const FCD_HOOK_MARKER = "--fcd-managed true";
 export declare const FCD_HOOK_TAG = "fullcourtdefense";

package/dist/commands/discoverProxy.js

@@ -34,6 +34,7 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.FCD_HOOK_TAG = exports.FCD_HOOK_MARKER = exports.FCD_GATEWAY_SERVER_NAMES = void 0;
+exports.isReferenceConfigSource = isReferenceConfigSource;
 exports.isFcdGatewayServer = isFcdGatewayServer;
 exports.extractGatewayDownstream = extractGatewayDownstream;
 exports.buildGatewayWrapIndex = buildGatewayWrapIndex;
@@ -44,6 +45,18 @@ exports.buildClientCoverage = buildClientCoverage;
 const fs = __importStar(require("fs"));
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
+/**
+ * Config sources that no AI client actually loads. A plain `mcp.json` at a
+ * repo root is documentation/sample material — Cursor, Claude Code, VS Code,
+ * Windsurf, etc. all read their own dot-folder configs, never this file.
+ * Servers found there are inventory-worthy (they show what a repo references)
+ * but are not live attack surface, so they classify as 'reference' instead of
+ * 'direct' and must never count toward the machine's exposed status.
+ */
+const REFERENCE_CONFIG_SOURCES = new Set(['Repo (mcp.json)']);
+function isReferenceConfigSource(source) {
+    return REFERENCE_CONFIG_SOURCES.has(source);
+}
 exports.FCD_GATEWAY_SERVER_NAMES = new Set([
     'agentguard-gateway',
     'fullcourtdefense-gateway',
@@ -157,6 +170,8 @@ function buildGatewayWrapIndex(servers) {
     return wrapsByConfig;
 }
 function classifyProxyStatus(server, wrapsByConfig) {
+    if (isReferenceConfigSource(server.source))
+        return 'reference';
     if (isFcdGatewayServer(server))
         return 'fcd_gateway';
     const wrapped = wrapsByConfig.get(server.configPath.toLowerCase());

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.17.1"
+  "version": "1.18.0"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.17.1",
+  "version": "1.18.0",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {