fullcourtdefense-cli 1.26.9 → 1.26.11

package/dist/commands/mcpGateway.js

@@ -2656,12 +2656,16 @@ function protectAllTargetFiles(extra, allowedClientKeys) {
         seen.add(key);
         files.push(candidate);
     }
-    // Admin-selected roots are explicit protection scope. Default/`auto` roots
-    // remain discovery-only and are intentionally not consulted here.
-    const recursive = (0, discoverPaths_1.scanRootsForProjectConfigs)(extraScanRoots, { excludedRoots: disabledScanRoots });
+    // Same trees discovery scores (`--scan-root auto` + admin extras). MSI
+    // onboard cwd is the install folder, so without this walk project MCP
+    // under C:\dev stays direct while the fleet matrix paints the IDE Exposed.
+    // Skip clientKey `other` — repo-root mcp.json is reference inventory, not
+    // a live client config.
+    const protectionRoots = [...extraScanRoots, ...(0, discoverPaths_1.defaultScanRoots)()];
+    const recursive = (0, discoverPaths_1.scanRootsForProjectConfigs)(protectionRoots, { excludedRoots: disabledScanRoots });
     for (const candidate of recursive.candidates) {
         const key = (0, discoverPaths_1.normalizedPath)(candidate.path);
-        if (seen.has(key) || !allow(candidate.clientKey) || (0, discoverPaths_1.isExcludedPath)(candidate.path, disabledScanRoots))
+        if (seen.has(key) || candidate.clientKey === 'other' || !allow(candidate.clientKey) || (0, discoverPaths_1.isExcludedPath)(candidate.path, disabledScanRoots))
             continue;
         seen.add(key);
         files.push(candidate);

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.26.9"
+  "version": "1.26.11"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.26.9",
+  "version": "1.26.11",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {