fullcourtdefense-cli 1.3.0 → 1.3.2

package/dist/api.d.ts

@@ -91,6 +91,14 @@ export interface ApiError {
     code?: string;
     remaining?: number;
 }
+export interface SetupValidationResponse {
+    organizationId: string;
+    organizationName: string;
+    shieldId: string;
+    shieldName: string;
+    shieldKeyRequired: boolean;
+    gatewayMode: boolean;
+}
 export declare class BotGuardApi {
     private apiUrl;
     private apiKey;
@@ -100,4 +108,9 @@ export declare class BotGuardApi {
     getScanStatus(jobId: string): Promise<AsyncJobResponse>;
     pollUntilDone(jobId: string, intervalMs?: number, maxWaitMs?: number): Promise<ScanResult>;
     getCredits(): Promise<CreditsResponse>;
+    validateSetup(input: {
+        organizationId?: string;
+        shieldId: string;
+        shieldKey?: string;
+    }): Promise<SetupValidationResponse>;
 }

package/dist/api.js

@@ -22,7 +22,7 @@ class BotGuardApi {
         const data = await resp.json();
         if (!resp.ok || data.success === false) {
             const err = data;
-            const msg = err.error || `API error (${resp.status})`;
+            const msg = err.code ? `${err.error} (${err.code})` : (err.error || `API error (${resp.status})`);
             if (err.code === 'CREDITS_EXHAUSTED') {
                 throw new Error(`No scan credits remaining this month. Upgrade your plan at https://fullcourtdefense.ai/pricing`);
             }
@@ -58,5 +58,8 @@ class BotGuardApi {
     async getCredits() {
         return this.request('GET', '/api/cicd/credits');
     }
+    async validateSetup(input) {
+        return this.request('POST', '/api/cicd/setup/validate', input);
+    }
 }
 exports.BotGuardApi = BotGuardApi;

package/dist/commands/configure.d.ts

@@ -1,7 +1,10 @@
 import { BotGuardConfig } from '../config';
 export interface ConfigureArgs {
+    apiKey?: string;
+    organizationId?: string;
     shieldId?: string;
     shieldKey?: string;
     apiUrl?: string;
+    skipValidate?: boolean;
 }
 export declare function configureCommand(args: ConfigureArgs, config: BotGuardConfig): Promise<void>;

package/dist/commands/configure.js

@@ -36,23 +36,55 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.configureCommand = configureCommand;
 const readline = __importStar(require("readline/promises"));
 const process_1 = require("process");
+const api_1 = require("../api");
 const config_1 = require("../config");
 async function ask(rl, question, fallback) {
     const suffix = fallback ? ` (${fallback})` : '';
     const answer = (await rl.question(`${question}${suffix}: `)).trim();
     return answer || fallback || '';
 }
+function resolveApiKey(args, config) {
+    return args.apiKey || config.apiKey || process.env.FULLCOURTDEFENSE_API_KEY || '';
+}
 async function configureCommand(args, config) {
     const rl = readline.createInterface({ input: process_1.stdin, output: process_1.stdout });
     try {
+        const apiUrl = args.apiUrl || await ask(rl, 'FullCourtDefense API URL', config.apiUrl || 'https://api.fullcourtdefense.ai');
+        const apiKey = resolveApiKey(args, config) || await ask(rl, 'Organization API key (from Settings → API Keys)', '');
+        if (!apiKey) {
+            throw new Error('Organization API key is required to validate your setup.');
+        }
+        const organizationId = args.organizationId || await ask(rl, 'Organization ID (from Settings → Organization)', config.organizationId || '');
+        if (!organizationId) {
+            throw new Error('Organization ID is required.');
+        }
         const shieldId = args.shieldId || await ask(rl, 'Shield ID', config.shieldId || 'sh_...');
         if (!shieldId || shieldId === 'sh_...') {
             throw new Error('Shield ID is required.');
         }
-        const shieldKey = args.shieldKey || await ask(rl, 'Shield key if locked, blank if not required', config.shieldKey || '');
-        const apiUrl = args.apiUrl || await ask(rl, 'FullCourtDefense API URL', config.apiUrl || 'https://api.fullcourtdefense.ai');
-        const savedPath = (0, config_1.saveShieldConfig)({ shieldId, shieldKey: shieldKey || undefined, apiUrl });
-        console.log(`Saved Shield config to ${savedPath}`);
+        const shieldKey = args.shieldKey ?? await ask(rl, 'Shield key if locked, blank if not required', config.shieldKey || '');
+        if (args.skipValidate !== true) {
+            console.log('Validating organization, Shield ID, and Shield key against FullCourtDefense...');
+            const api = new api_1.BotGuardApi(apiKey, apiUrl);
+            const validated = await api.validateSetup({
+                organizationId,
+                shieldId,
+                shieldKey: shieldKey || undefined,
+            });
+            if (validated.organizationId !== organizationId) {
+                throw new Error(`Organization mismatch: API key belongs to "${validated.organizationName}" (${validated.organizationId}), not "${organizationId}".`);
+            }
+            console.log(`Verified: ${validated.organizationName} → Shield "${validated.shieldName}" (${validated.shieldId})`);
+        }
+        const savedPath = (0, config_1.saveSetupConfig)({
+            apiKey,
+            organizationId,
+            shieldId,
+            shieldKey: shieldKey || undefined,
+            apiUrl,
+        });
+        console.log(`Saved setup to ${savedPath}`);
+        console.log('All other CLI commands (install, discover --upload, scan, hooks) will use these credentials automatically.');
     }
     finally {
         rl.close();

package/dist/commands/discover.d.ts

@@ -1,6 +1,8 @@
 import { BotGuardConfig } from '../config';
+export type DiscoverSurface = 'mcp' | 'secrets' | 'agent-files' | 'posture';
 export interface DiscoverArgs {
     type?: string;
+    surface?: string;
     apiKey?: string;
     apiUrl?: string;
     json?: string;