fullcourtdefense-cli 1.21.19 → 1.21.20

package/dist/commands/daemon.d.ts

@@ -7,6 +7,8 @@ export interface DaemonArgs extends ProtectAllArgs {
     /** Suppress OS toasts (still logs). */
     quiet?: string;
 }
+/** Arguments shared by first-boot, stale catch-up, and web-triggered scans. */
+export declare function daemonDiscoverSweepArgs(): string[];
 /** Whether the daemon has been registered to start automatically. */
 export declare function isDaemonAutostartInstalled(): boolean;
 export declare function daemonCommand(args: DaemonArgs, config: BotGuardConfig): Promise<void>;

package/dist/commands/daemon.js

@@ -33,6 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.daemonDiscoverSweepArgs = daemonDiscoverSweepArgs;
 exports.isDaemonAutostartInstalled = isDaemonAutostartInstalled;
 exports.daemonCommand = daemonCommand;
 const fs = __importStar(require("fs"));
@@ -142,12 +143,19 @@ function stopPid(pid) {
 function logFile() {
     return path.join(daemonDir(), 'daemon.log');
 }
-/** Spawn `discover --upload --surface all --silent` and wait for it to finish. */
+/** Arguments shared by first-boot, stale catch-up, and web-triggered scans. */
+function daemonDiscoverSweepArgs() {
+    return ['discover', '--upload', '--surface', 'all', '--deep', 'true', '--silent', '--scan-root', 'auto'];
+}
+/** Spawn a full known-client discovery + posture sweep and wait for it to finish. */
 function runDiscoverSweep(timeoutMs = 300_000) {
     return new Promise((resolve, reject) => {
         // --scan-root auto sweeps the default dev roots; admin-selected folders from
         // the console are merged in by discover itself (cached runtime bundle).
-        const child = (0, child_process_1.spawn)(process.execPath, [cliEntry(), 'discover', '--upload', '--surface', 'all', '--silent', '--scan-root', 'auto'], {
+        // --deep inventories tools from known configured clients (Claude Desktop,
+        // Cursor, etc.). We intentionally do NOT pass --deep-roots, so arbitrary
+        // stdio servers merely found in other project trees are never auto-spawned.
+        const child = (0, child_process_1.spawn)(process.execPath, [cliEntry(), ...daemonDiscoverSweepArgs()], {
             windowsHide: true,
             stdio: 'ignore',
             // Daemon/scheduled-task cwd is C:\WINDOWS\system32 — scan from the user's

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.21.19"
+  "version": "1.21.20"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.21.19",
+  "version": "1.21.20",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {
@@ -32,6 +32,7 @@
     "test:posture-blast": "npm run build && node scripts/test-posture-blast-radius.js",
     "test:ping-e2e": "npm run build && node scripts/test-ping-e2e.js",
     "test:daemon-e2e": "npm run build && node scripts/test-daemon-e2e.js",
+    "test:daemon-discovery-args": "npm run build && node scripts/test-daemon-discovery-args.js",
     "test:machine-action-signing": "npm run build && node scripts/test-machine-action-signing.js",
     "test:integrity": "npm run build && node scripts/test-integrity.js",
     "test:posture-overhaul": "npm run build && node scripts/test-posture-overhaul.js",