fullcourtdefense-cli 1.26.10 → 1.26.12

package/dist/commands/discoverPaths.d.ts

@@ -76,3 +76,8 @@ export declare function buildFolderCatalog(options?: {
 export declare function resolveScanRoots(flag: string | undefined): string[];
 /** Include config paths for apps that exist on disk even when the MCP file is not created yet. */
 export declare function discoverScanTargets(cwd: string, extra?: string): ConfigPathCandidate[];
+/**
+ * True when the AI *app* is on disk — not when a leftover config folder exists.
+ * `~/.codex` / `~/.cursor` without Cursor.exe must not count as installed.
+ */
+export declare function detectIdeAppInstalled(clientKey: string, env?: NodeJS.ProcessEnv, home?: string, platform?: NodeJS.Platform): boolean;

package/dist/commands/discoverPaths.js

@@ -49,6 +49,7 @@ exports.scanRootsForProjectConfigs = scanRootsForProjectConfigs;
 exports.buildFolderCatalog = buildFolderCatalog;
 exports.resolveScanRoots = resolveScanRoots;
 exports.discoverScanTargets = discoverScanTargets;
+exports.detectIdeAppInstalled = detectIdeAppInstalled;
 const fs = __importStar(require("fs"));
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
@@ -461,3 +462,76 @@ function discoverScanTargets(cwd, extra) {
     }
     return [...existing, ...implicit];
 }
+function fileExists(file) {
+    try {
+        return fs.existsSync(file) && fs.statSync(file).isFile();
+    }
+    catch {
+        return false;
+    }
+}
+function dirHasFile(dir, names) {
+    return names.some(name => fileExists(path.join(dir, name)));
+}
+function firstExistingCodexBin(localAppData) {
+    const binRoot = path.join(localAppData, 'OpenAI', 'Codex', 'bin');
+    try {
+        if (!fs.statSync(binRoot).isDirectory())
+            return false;
+        for (const name of fs.readdirSync(binRoot)) {
+            if (fileExists(path.join(binRoot, name, 'codex.exe')) || fileExists(path.join(binRoot, name, 'codex')))
+                return true;
+        }
+    }
+    catch { /* missing */ }
+    return fileExists(path.join(localAppData, 'OpenAI', 'Codex', 'codex.exe'));
+}
+/**
+ * True when the AI *app* is on disk — not when a leftover config folder exists.
+ * `~/.codex` / `~/.cursor` without Cursor.exe must not count as installed.
+ */
+function detectIdeAppInstalled(clientKey, env = process.env, home = os.homedir(), platform = process.platform) {
+    const localAppData = env.LOCALAPPDATA || path.join(home, 'AppData', 'Local');
+    const programFiles = env.ProgramFiles || 'C:\\Program Files';
+    const programFilesX86 = env['ProgramFiles(x86)'] || 'C:\\Program Files (x86)';
+    if (clientKey === 'cursor') {
+        if (platform === 'darwin' && fs.existsSync('/Applications/Cursor.app'))
+            return true;
+        return dirHasFile(path.join(localAppData, 'Programs', 'cursor'), ['Cursor.exe'])
+            || dirHasFile(path.join(localAppData, 'Programs', 'Cursor'), ['Cursor.exe'])
+            || dirHasFile(path.join(programFiles, 'Cursor'), ['Cursor.exe']);
+    }
+    if (clientKey === 'vscode') {
+        if (platform === 'darwin' && fs.existsSync('/Applications/Visual Studio Code.app'))
+            return true;
+        return dirHasFile(path.join(localAppData, 'Programs', 'Microsoft VS Code'), ['Code.exe'])
+            || dirHasFile(path.join(programFiles, 'Microsoft VS Code'), ['Code.exe'])
+            || dirHasFile(path.join(programFilesX86, 'Microsoft VS Code'), ['Code.exe']);
+    }
+    if (clientKey === 'windsurf') {
+        if (platform === 'darwin' && fs.existsSync('/Applications/Windsurf.app'))
+            return true;
+        return dirHasFile(path.join(localAppData, 'Programs', 'Windsurf'), ['Windsurf.exe'])
+            || dirHasFile(path.join(localAppData, 'Programs', 'windsurf'), ['Windsurf.exe']);
+    }
+    if (clientKey === 'claude_desktop') {
+        if (platform === 'darwin' && fs.existsSync('/Applications/Claude.app'))
+            return true;
+        if (platform === 'win32' && claudeDesktopMsixCandidates().length > 0)
+            return true;
+        if (platform === 'win32' && claudeDesktopWindowsInstallDirs(env, home).some(dir => fs.existsSync(dir)))
+            return true;
+        return false;
+    }
+    if (clientKey === 'claude_code') {
+        return fileExists(path.join(home, '.local', 'bin', 'claude.exe'))
+            || fileExists(path.join(home, '.local', 'bin', 'claude'))
+            || dirHasFile(path.join(localAppData, 'Programs', 'claude'), ['claude.exe']);
+    }
+    if (clientKey === 'codex') {
+        if (platform === 'darwin' && (fs.existsSync('/Applications/Codex.app') || fs.existsSync('/Applications/ChatGPT Codex.app')))
+            return true;
+        return firstExistingCodexBin(localAppData);
+    }
+    return false;
+}

package/dist/commands/discoverProxy.d.ts

@@ -13,6 +13,8 @@ export interface ClientCoverageRow {
     cursorHooksInstalled: boolean;
     cursorHookEvents: string[];
     cursorHookShadow: boolean;
+    /** False when only leftover config exists — the app binary is not on disk. */
+    appInstalled: boolean;
 }
 export interface ProxyClassifiableServer {
     serverName: string;

package/dist/commands/discoverProxy.js

@@ -45,6 +45,7 @@ exports.buildClientCoverage = buildClientCoverage;
 const fs = __importStar(require("fs"));
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
+const discoverPaths_1 = require("./discoverPaths");
 /**
  * Config sources that no AI client actually loads. A plain `mcp.json` at a
  * repo root is documentation/sample material — Cursor, Claude Code, VS Code,
@@ -258,6 +259,12 @@ function buildClientCoverage(scanned, servers, cwd) {
         list.push(server);
         serversByConfig.set(key, list);
     }
+    const appInstalledByKey = new Map();
+    const appInstalledFor = (clientKey) => {
+        if (!appInstalledByKey.has(clientKey))
+            appInstalledByKey.set(clientKey, (0, discoverPaths_1.detectIdeAppInstalled)(clientKey));
+        return appInstalledByKey.get(clientKey) === true;
+    };
     const rows = [];
     for (const item of scanned) {
         const list = serversByConfig.get(item.path.toLowerCase()) || [];
@@ -273,6 +280,7 @@ function buildClientCoverage(scanned, servers, cwd) {
             cursorHooksInstalled: clientKey === 'cursor' ? hooks.installed : false,
             cursorHookEvents: clientKey === 'cursor' ? hooks.events : [],
             cursorHookShadow: clientKey === 'cursor' ? hooks.shadow : false,
+            appInstalled: appInstalledFor(clientKey),
         });
     }
     // Cursor hooks apply globally even if only project mcp.json was scanned
@@ -287,6 +295,7 @@ function buildClientCoverage(scanned, servers, cwd) {
             cursorHooksInstalled: true,
             cursorHookEvents: hooks.events,
             cursorHookShadow: hooks.shadow,
+            appInstalled: appInstalledFor('cursor'),
         });
     }
     return rows.sort((a, b) => a.client.localeCompare(b.client));

package/dist/commands/mcpGateway.js

@@ -2656,12 +2656,16 @@ function protectAllTargetFiles(extra, allowedClientKeys) {
         seen.add(key);
         files.push(candidate);
     }
-    // Admin-selected roots are explicit protection scope. Default/`auto` roots
-    // remain discovery-only and are intentionally not consulted here.
-    const recursive = (0, discoverPaths_1.scanRootsForProjectConfigs)(extraScanRoots, { excludedRoots: disabledScanRoots });
+    // Same trees discovery scores (`--scan-root auto` + admin extras). MSI
+    // onboard cwd is the install folder, so without this walk project MCP
+    // under C:\dev stays direct while the fleet matrix paints the IDE Exposed.
+    // Skip clientKey `other` — repo-root mcp.json is reference inventory, not
+    // a live client config.
+    const protectionRoots = [...extraScanRoots, ...(0, discoverPaths_1.defaultScanRoots)()];
+    const recursive = (0, discoverPaths_1.scanRootsForProjectConfigs)(protectionRoots, { excludedRoots: disabledScanRoots });
     for (const candidate of recursive.candidates) {
         const key = (0, discoverPaths_1.normalizedPath)(candidate.path);
-        if (seen.has(key) || !allow(candidate.clientKey) || (0, discoverPaths_1.isExcludedPath)(candidate.path, disabledScanRoots))
+        if (seen.has(key) || candidate.clientKey === 'other' || !allow(candidate.clientKey) || (0, discoverPaths_1.isExcludedPath)(candidate.path, disabledScanRoots))
             continue;
         seen.add(key);
         files.push(candidate);

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.26.10"
+  "version": "1.26.12"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.26.10",
+  "version": "1.26.12",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {