fullcourtdefense-cli 1.26.8 → 1.26.9

package/dist/telemetry.d.ts

@@ -37,9 +37,12 @@ export interface SpoolEvent {
  */
 export type VerdictPath = 'ipc' | 'local' | 'fail_open' | 'gateway';
 /**
- * Compact JSON of the command/path/query the agent attempted. The console
- * Details column renders this as the labeled Command / Query / URL / File
- * row. Truncated to 500 chars so it survives backend sanitize().
+ * Compact JSON of the command/path/query/args the agent attempted. The console
+ * Details column renders this as labeled Command / Query / URL / File / Args
+ * rows. Truncated to 500 chars so it survives backend sanitize().
+ *
+ * Known keys are preferred. Other primitive args (action, selector, prompt, …)
+ * are included so MCP tools that are not a shell/file still show what ran.
  */
 export declare function evidenceFromToolArgs(toolArgs: Record<string, unknown> | undefined): string | undefined;
 interface VerdictTiming {

package/dist/telemetry.js

@@ -73,21 +73,53 @@ const SPOOL_TRIM_BYTES = 2 * 1024 * 1024;
 const ACTION_EVIDENCE_KEYS = [
     'command', 'cmd', 'commandLine', 'script', 'query', 'sql', 'url',
     'path', 'file_path', 'filePath', 'file', 'target',
+    'pattern', 'glob', 'search', 'q',
 ];
+/** Noise / secrets — never stamp these as activity evidence. */
+const EVIDENCE_SKIP_KEYS = /^(cwd|pwd|env|environment|headers|cookie|cookies|authorization|password|passwd|secret|token|api[_-]?key|private[_-]?key|session|retryCount|timeoutMs|timeout)$/i;
+function stringifyEvidenceValue(value) {
+    if (typeof value === 'string' && value.trim())
+        return value.trim().slice(0, 480);
+    if (typeof value === 'number' && Number.isFinite(value))
+        return String(value);
+    if (typeof value === 'boolean')
+        return value ? 'true' : 'false';
+    if (Array.isArray(value) || (value && typeof value === 'object')) {
+        try {
+            const json = JSON.stringify(value);
+            return json && json !== '{}' && json !== '[]' ? json.slice(0, 240) : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    return undefined;
+}
 /**
- * Compact JSON of the command/path/query the agent attempted. The console
- * Details column renders this as the labeled Command / Query / URL / File
- * row. Truncated to 500 chars so it survives backend sanitize().
+ * Compact JSON of the command/path/query/args the agent attempted. The console
+ * Details column renders this as labeled Command / Query / URL / File / Args
+ * rows. Truncated to 500 chars so it survives backend sanitize().
+ *
+ * Known keys are preferred. Other primitive args (action, selector, prompt, …)
+ * are included so MCP tools that are not a shell/file still show what ran.
  */
 function evidenceFromToolArgs(toolArgs) {
     if (!toolArgs)
         return undefined;
     const picked = {};
     for (const key of ACTION_EVIDENCE_KEYS) {
-        const value = toolArgs[key];
-        if (typeof value === 'string' && value.trim()) {
-            picked[key] = value.trim().slice(0, 480);
-        }
+        const text = stringifyEvidenceValue(toolArgs[key]);
+        if (text)
+            picked[key] = text;
+    }
+    for (const [key, value] of Object.entries(toolArgs)) {
+        if (picked[key] || EVIDENCE_SKIP_KEYS.test(key))
+            continue;
+        if (Object.keys(picked).length >= 8)
+            break;
+        const text = stringifyEvidenceValue(value);
+        if (text)
+            picked[key] = text;
     }
     if (Object.keys(picked).length === 0)
         return undefined;

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.26.8"
+  "version": "1.26.9"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.26.8",
+  "version": "1.26.9",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {