fullcourtdefense-cli 1.3.1 → 1.3.3

package/dist/config.js

@@ -33,11 +33,17 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.getHomeConfigPath = getHomeConfigPath;
 exports.loadConfig = loadConfig;
 exports.getDefaultConfigPath = getDefaultConfigPath;
 exports.saveShieldConfig = saveShieldConfig;
+exports.resolveCliCredentials = resolveCliCredentials;
+exports.isCliSetupComplete = isCliSetupComplete;
+exports.requireCliSetup = requireCliSetup;
+exports.saveSetupConfig = saveSetupConfig;
 exports.resolveSystemPrompt = resolveSystemPrompt;
 const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const CONFIG_FILENAMES = [
     '.fullcourtdefense.yml',
@@ -120,27 +126,14 @@ function parseValue(s) {
         return num;
     return stripped;
 }
-function loadConfig(configPath) {
-    let filePath;
-    if (configPath) {
-        filePath = path.resolve(configPath);
-    }
-    else {
-        for (const name of CONFIG_FILENAMES) {
-            const candidate = path.resolve(process.cwd(), name);
-            if (fs.existsSync(candidate)) {
-                filePath = candidate;
-                break;
-            }
-        }
-    }
-    if (!filePath || !fs.existsSync(filePath)) {
+function readConfigFile(filePath) {
+    if (!fs.existsSync(filePath))
         return {};
-    }
     const content = fs.readFileSync(filePath, 'utf-8');
     const raw = parseSimpleYaml(content);
     return {
         apiKey: raw.apiKey ? interpolateEnv(String(raw.apiKey)) : undefined,
+        organizationId: raw.organizationId ? interpolateEnv(String(raw.organizationId)) : undefined,
         apiUrl: raw.apiUrl ? interpolateEnv(String(raw.apiUrl)) : undefined,
         shieldId: raw.shieldId ? interpolateEnv(String(raw.shieldId)) : undefined,
         shieldKey: raw.shieldKey ? interpolateEnv(String(raw.shieldKey)) : undefined,
@@ -159,11 +152,89 @@ function loadConfig(configPath) {
             : undefined,
     };
 }
+function mergeConfig(base, override) {
+    return {
+        ...base,
+        ...Object.fromEntries(Object.entries(override).filter(([, value]) => value !== undefined && value !== '')),
+        scan: override.scan ? { ...base.scan, ...override.scan } : base.scan,
+    };
+}
+function getHomeConfigPath() {
+    return path.join(os.homedir(), '.fullcourtdefense.yml');
+}
+function loadConfig(configPath) {
+    const homeConfig = readConfigFile(getHomeConfigPath());
+    let projectConfig = {};
+    if (configPath) {
+        projectConfig = readConfigFile(path.resolve(configPath));
+    }
+    else {
+        for (const name of CONFIG_FILENAMES) {
+            const candidate = path.resolve(process.cwd(), name);
+            if (fs.existsSync(candidate)) {
+                projectConfig = readConfigFile(candidate);
+                break;
+            }
+        }
+    }
+    return mergeConfig(homeConfig, projectConfig);
+}
 function getDefaultConfigPath() {
     return path.resolve(process.cwd(), '.fullcourtdefense.yml');
 }
 function saveShieldConfig(input) {
     const target = getDefaultConfigPath();
+    return writeSetupConfig(target, input);
+}
+const DEFAULT_API_URL = 'https://api.fullcourtdefense.ai';
+/** Merge saved ~/.fullcourtdefense.yml + env + optional CLI flag overrides. */
+function resolveCliCredentials(config, overrides = {}) {
+    return {
+        apiKey: overrides.apiKey
+            || config.apiKey
+            || process.env.FULLCOURTDEFENSE_API_KEY
+            || process.env.BOTGUARD_API_KEY,
+        organizationId: overrides.organizationId || config.organizationId,
+        apiUrl: (overrides.apiUrl
+            || config.apiUrl
+            || process.env.FULLCOURTDEFENSE_API_URL
+            || process.env.FCD_API_URL
+            || DEFAULT_API_URL).replace(/\/$/, ''),
+        shieldId: overrides.shieldId
+            || config.shieldId
+            || process.env.FCD_SHIELD_ID
+            || process.env.FULLCOURTDEFENSE_SHIELD_ID
+            || process.env.AGENTGUARD_SHIELD_ID,
+        shieldKey: overrides.shieldKey
+            || config.shieldKey
+            || process.env.FCD_SHIELD_KEY
+            || process.env.FULLCOURTDEFENSE_SHIELD_KEY
+            || process.env.AGENTGUARD_SHIELD_KEY,
+    };
+}
+function isCliSetupComplete(config) {
+    const creds = resolveCliCredentials(config);
+    return Boolean(creds.shieldId && creds.apiKey && creds.organizationId);
+}
+/** Fail fast with a clear message when setup was not run. */
+function requireCliSetup(config, overrides = {}, options = {}) {
+    const creds = resolveCliCredentials(config, overrides);
+    const requireApiKey = options.requireApiKey !== false;
+    const requireOrganizationId = options.requireOrganizationId !== false;
+    const requireShield = options.requireShield !== false;
+    const missing = [];
+    if (requireShield && !creds.shieldId)
+        missing.push('shieldId');
+    if (requireApiKey && !creds.apiKey)
+        missing.push('apiKey');
+    if (requireOrganizationId && !creds.organizationId)
+        missing.push('organizationId');
+    if (missing.length > 0) {
+        throw new Error(`Missing ${missing.join(', ')}. Run \`fullcourtdefense setup\` once — it saves org, API key, Shield ID, and Shield key to ~/.fullcourtdefense.yml so you never pass them again.`);
+    }
+    return creds;
+}
+function writeSetupConfig(target, input) {
     const existing = fs.existsSync(target) ? fs.readFileSync(target, 'utf-8') : '';
     const lines = existing ? existing.split(/\r?\n/) : [
         '# FullCourtDefense CLI Configuration',
@@ -185,12 +256,17 @@ function saveShieldConfig(input) {
                 lines.push(next);
         }
     };
+    setTopLevel('apiKey', input.apiKey);
+    setTopLevel('organizationId', input.organizationId);
     setTopLevel('shieldId', input.shieldId);
     setTopLevel('shieldKey', input.shieldKey);
     setTopLevel('apiUrl', input.apiUrl);
     fs.writeFileSync(target, `${lines.filter((line, idx, arr) => !(line === '' && arr[idx - 1] === '')).join('\n').trim()}\n`, 'utf-8');
     return target;
 }
+function saveSetupConfig(input, targetPath) {
+    return writeSetupConfig(targetPath || getHomeConfigPath(), input);
+}
 function resolveSystemPrompt(value) {
     if (fs.existsSync(value)) {
         return fs.readFileSync(value, 'utf-8').trim();

package/dist/index.js

@@ -1,5 +1,38 @@
 #!/usr/bin/env node
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 const config_1 = require("./config");
 const scan_1 = require("./commands/scan");
@@ -11,7 +44,20 @@ const discover_1 = require("./commands/discover");
 const hook_1 = require("./commands/hook");
 const installCursorHook_1 = require("./commands/installCursorHook");
 const mcpGateway_1 = require("./commands/mcpGateway");
-const VERSION = '1.1.17';
+const installAll_1 = require("./commands/installAll");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+function readCliVersion() {
+    try {
+        const versionFile = path.join(__dirname, 'version.json');
+        const parsed = JSON.parse(fs.readFileSync(versionFile, 'utf8'));
+        return parsed.version || 'unknown';
+    }
+    catch {
+        return 'unknown';
+    }
+}
+const VERSION = readCliVersion();
 function parseArgs(argv) {
     const flags = {};
     let command = '';
@@ -63,29 +109,38 @@ function printHelp() {
   \x1b[1mCommands:\x1b[0m
     help        Show this onboarding guide and command reference.
     doctor      First step. Checks outbound HTTPS access to FullCourtDefense.
-    configure   Saves Shield ID, Shield key, and API URL to .fullcourtdefense.yml.
+    configure   Saves org API key, Organization ID, Shield ID, and Shield key to ~/.fullcourtdefense.yml.
+                After setup, other commands read credentials automatically — no --shield-id/--api-key needed.
+    setup       Same as configure — validates credentials against the server before saving.
+    install-all One-click: MCP gateway in every AI client + Cursor hooks + optional upload.
+    install     Alias for install-all.
     scan        Runs the scan. Use --local for inside-organization scans.
-    discover    Finds MCP servers configured on this machine (Cursor, Claude,
-                VS Code, Windsurf, Codex, Gemini CLI) and reports their risk.
-                Use --upload to add them to your AI Inventory. Use --deep for
-                live HTTP/SSE tools/list. Use --silent for fleet/MDM scripts.
+    discover    Finds MCP servers, local secrets, agent rules/skills, and machine
+                blast radius on this laptop. Use --surface all --upload for AI Fleet.
     install-cursor-hook
                 Installs a Cursor hook so every AI prompt + agent action
                 (shell, MCP) on this machine is scanned by your Shield.
     uninstall-cursor-hook
                 Removes the FullCourtDefense Cursor hook entries.
     install-mcp-gateway
-                One command to install the AgentGuard MCP Gateway into detected
-                clients (Cursor, Claude Code, Claude Desktop).
-    mcp-gateway
-                Runs a local MCP gateway that checks AgentGuard runtime/action
-                policies before forwarding tool calls to a real MCP server.
+                Install MCP gateway into selected clients (--clients all for every tool).
     install-cursor-mcp-gateway
-                Adds the AgentGuard MCP Gateway to Cursor's mcp.json.
+                Cursor only — adds gateway to mcp.json.
     install-claude-code-mcp-gateway
-                Adds the AgentGuard MCP Gateway to Claude Code using claude mcp add.
+                Claude Code only — uses claude mcp add or .mcp.json.
     install-claude-desktop-mcp-gateway
-                Adds the AgentGuard MCP Gateway to Claude Desktop config.
+                Claude Desktop only.
+    install-codex-mcp-gateway
+                Codex only — writes ~/.codex/config.toml.
+    install-gemini-mcp-gateway
+                Gemini CLI only — writes settings.json mcpServers.
+    install-windsurf-mcp-gateway
+                Windsurf only.
+    install-vscode-mcp-gateway
+                VS Code only — .vscode/mcp.json or user settings.
+    mcp-gateway
+                Runs a local MCP gateway that checks AgentGuard runtime/action
+                policies before forwarding tool calls to a real MCP server.
     hook        Internal: invoked by Cursor per agent event (reads stdin JSON,
                 returns an allow/deny verdict). Not run by hand.
     credits     Shows hosted scan credits for CI/CD API-key scans.
@@ -99,17 +154,21 @@ function printHelp() {
        fullcourtdefense doctor
        This confirms the machine can reach https://api.fullcourtdefense.ai over HTTPS.
 
-    3. Save Shield credentials locally:
-       fullcourtdefense configure
-       This creates or updates .fullcourtdefense.yml.
+    3. Save org + Shield credentials locally (one time):
+       fullcourtdefense setup
+       Saves to ~/.fullcourtdefense.yml — install, discover --upload, scan, and hooks use it automatically.
+
+    4. One-click protect every AI client on this machine:
+       fullcourtdefense install-all --mcp-command npm --mcp-args "run mcp" --upload
+       Or install one client: fullcourtdefense install-cursor-mcp-gateway ...
 
-    4. Run a guided local scan:
+    5. Run a guided local scan:
        fullcourtdefense scan --local
        The CLI asks whether to scan endpoint, mcp, or rag.
        To open the localhost web scan UI first:
        fullcourtdefense scan --local --open-ui
 
-    5. Review results:
+    6. Review results:
        Use --format summary for CI, --format table for terminal view,
        --format report for evidence, --format full-report for every row,
        or --format json for raw output.
@@ -152,8 +211,8 @@ function printHelp() {
     --mcp-args <args>       MCP server args/path, for example ./server.js
     --mcp-tool <tool>       MCP tool to test, or all
     --server-name <name>    MCP gateway server name for client installers
-    --clients <list>        Gateway install clients: auto, all, cursor,
-                            claude-code, claude-desktop
+    --clients <list>        Gateway clients: all, auto, cursor, claude-code,
+                            claude-desktop, codex, gemini-cli, windsurf, vscode
     --developer-name <name> Runtime identity for user-scoped policies (auto-detected if omitted)
     --agent-name <name>     Runtime agent name (auto-generated from identity + client if omitted)
     --scope <scope>         Claude Code MCP scope: local, project, or user
@@ -178,7 +237,7 @@ function printHelp() {
     --mode <sync|async>     Hosted mode, or local mode: quick, full, targeted, deep
     --categories <list>     Comma-separated attack categories
     --attack-count <n>      Number of attacks to run
-    --progress <mode>       MCP progress: verbose, compact, silent (default: verbose)
+    --surface <list>        Discover surfaces: mcp, secrets, agent-files, posture, all
     --fail-threshold <n>    Exit code 1 if score below n (default: 0)
     --format <fmt>          Output: table, json, summary, report, full-report (default: table)
     --open                  Open browser scan UI and saved local scan report
@@ -199,23 +258,27 @@ function printHelp() {
     $ fullcourtdefense scan --local --type mcp --mcp-transport sse --mcp-url https://internal.company.com/sse --mcp-tool all --mode full
     $ fullcourtdefense scan --local --type mcp --mcp-command node --mcp-args ./server.js --mcp-tool all --mode full --format report
     $ fullcourtdefense discover
-    $ fullcourtdefense discover --upload
+    $ fullcourtdefense discover --surface all --upload
+    $ fullcourtdefense discover --surface secrets
+    $ fullcourtdefense discover --surface agent-files
     $ fullcourtdefense discover --deep --upload --silent --user-email you@company.com
     $ fullcourtdefense discover --type mcp --json
-    $ fullcourtdefense install-cursor-hook --shield-id <id> --shield-key <key>
+    $ fullcourtdefense install-cursor-hook
     $ fullcourtdefense install-cursor-hook --shadow true        # monitor only
     $ fullcourtdefense install-cursor-hook --events prompt,shell,mcp,file
     $ fullcourtdefense install-cursor-hook --project true       # this repo only
     $ fullcourtdefense uninstall-cursor-hook
-    $ fullcourtdefense install-mcp-gateway --clients auto --shield-id <id> --shield-key <key> --mcp-command npm --mcp-args "run mcp"
-    $ fullcourtdefense install-mcp-gateway --clients all --shield-id <id> --shield-key <key> --mcp-command npm --mcp-args "run mcp" --upload --api-key <key>
-    $ fullcourtdefense install-cursor-mcp-gateway --project true --shield-id <id> --shield-key <key> --mcp-command npm --mcp-args "run mcp"
-    $ fullcourtdefense install-claude-code-mcp-gateway --scope local --shield-id <id> --shield-key <key> --mcp-command npm --mcp-args "run mcp"
-    $ fullcourtdefense install-claude-code-mcp-gateway --scope project --shield-id <id> --mcp-command npm --mcp-args "run mcp"
-    $ fullcourtdefense install-claude-desktop-mcp-gateway --shield-id <id> --shield-key <key> --mcp-command npm --mcp-args "run mcp"
-    $ fullcourtdefense mcp-gateway --shield-id <id> --mcp-command npm --mcp-args "run mcp"
-    $ fullcourtdefense configure
-    $ fullcourtdefense doctor
+    $ fullcourtdefense install-mcp-gateway --clients auto --mcp-command npm --mcp-args "run mcp"
+    $ fullcourtdefense install-mcp-gateway --clients all --mcp-command npm --mcp-args "run mcp" --upload
+    $ fullcourtdefense install-cursor-mcp-gateway --project true --mcp-command npm --mcp-args "run mcp"
+    $ fullcourtdefense install-claude-code-mcp-gateway --scope local --mcp-command npm --mcp-args "run mcp"
+    $ fullcourtdefense install-claude-code-mcp-gateway --scope project --mcp-command npm --mcp-args "run mcp"
+    $ fullcourtdefense install-claude-desktop-mcp-gateway --mcp-command npm --mcp-args "run mcp"
+    $ fullcourtdefense mcp-gateway --mcp-command npm --mcp-args "run mcp"
+    $ fullcourtdefense setup
+    $ fullcourtdefense install-all --mcp-command npm --mcp-args "run mcp" --upload
+    $ fullcourtdefense install-mcp-gateway --clients cursor,codex --mcp-command npm --mcp-args "run mcp"
+    $ fullcourtdefense install-codex-mcp-gateway --mcp-command npm --mcp-args "run mcp"
     $ fullcourtdefense scan --system-prompt ./prompts/system.md --fail-threshold 80
     $ fullcourtdefense scan --config .fullcourtdefense.yml --format json
     $ fullcourtdefense credits
@@ -226,6 +289,47 @@ function printHelp() {
 }
 async function main() {
     const { command, flags } = parseArgs(process.argv.slice(2));
+    const buildInstallArgs = () => ({
+        clients: flags.clients,
+        cursorProject: flags['cursor-project'],
+        claudeCodeScope: flags['claude-code-scope'] || flags.scope,
+        serverName: flags['server-name'],
+        mcpCommand: flags['mcp-command'],
+        mcpArgs: flags['mcp-args'],
+        agentName: flags['agent-name'],
+        developerName: flags['developer-name'],
+        shieldId: flags['shield-id'],
+        shieldKey: flags['shield-key'],
+        apiUrl: flags['api-url'],
+        environment: flags.environment,
+        userObjective: flags['user-objective'],
+        authority: flags.authority,
+        approvalMode: flags['approval-mode'],
+        approvalTimeoutMs: flags['approval-timeout-ms'],
+        approvalPollMs: flags['approval-poll-ms'],
+        scanResponse: flags['scan-response'],
+        failClosed: flags['fail-closed'],
+        upload: flags.upload,
+        apiKey: flags['api-key'],
+    });
+    const buildGatewayArgs = () => ({
+        mcpCommand: flags['mcp-command'],
+        mcpArgs: flags['mcp-args'],
+        agentName: flags['agent-name'],
+        agentClient: flags['agent-client'],
+        developerName: flags['developer-name'],
+        shieldId: flags['shield-id'],
+        shieldKey: flags['shield-key'],
+        apiUrl: flags['api-url'],
+        environment: flags.environment,
+        userObjective: flags['user-objective'],
+        authority: flags.authority,
+        approvalMode: flags['approval-mode'],
+        approvalTimeoutMs: flags['approval-timeout-ms'],
+        approvalPollMs: flags['approval-poll-ms'],
+        scanResponse: flags['scan-response'],
+        failClosed: flags['fail-closed'],
+    });
     if (flags.version || flags.v) {
         console.log(VERSION);
         return;
@@ -296,11 +400,15 @@ async function main() {
             await (0, doctor_1.doctorCommand)(args, config);
             break;
         }
-        case 'configure': {
+        case 'configure':
+        case 'setup': {
             const args = {
+                apiKey: flags['api-key'],
+                organizationId: flags['organization-id'] || flags['org-id'],
                 shieldId: flags['shield-id'],
                 shieldKey: flags['shield-key'],
                 apiUrl: flags['api-url'],
+                skipValidate: flags['skip-validate'] === 'true',
             };
             await (0, configure_1.configureCommand)(args, config);
             break;
@@ -316,6 +424,7 @@ async function main() {
         case 'discover': {
             const args = {
                 type: flags.type,
+                surface: flags.surface,
                 apiKey: flags['api-key'],
                 apiUrl: flags['api-url'],
                 json: flags.json,
@@ -364,123 +473,85 @@ async function main() {
             break;
         }
         case 'mcp-gateway': {
+            await (0, mcpGateway_1.mcpGatewayCommand)(buildGatewayArgs(), config);
+            break;
+        }
+        case 'install-all':
+        case 'install': {
             const args = {
-                mcpCommand: flags['mcp-command'],
-                mcpArgs: flags['mcp-args'],
-                agentName: flags['agent-name'],
-                agentClient: flags['agent-client'],
-                developerName: flags['developer-name'],
-                shieldId: flags['shield-id'],
-                shieldKey: flags['shield-key'],
-                apiUrl: flags['api-url'],
-                environment: flags.environment,
-                userObjective: flags['user-objective'],
-                authority: flags.authority,
-                approvalMode: flags['approval-mode'],
-                approvalTimeoutMs: flags['approval-timeout-ms'],
-                approvalPollMs: flags['approval-poll-ms'],
-                scanResponse: flags['scan-response'],
-                failClosed: flags['fail-closed'],
+                ...buildInstallArgs(),
+                hooks: flags.hooks,
+                discover: flags.discover,
             };
-            await (0, mcpGateway_1.mcpGatewayCommand)(args, config);
+            await (0, installAll_1.installAllCommand)(args, config);
             break;
         }
         case 'install-mcp-gateway': {
-            const args = {
-                clients: flags.clients,
-                cursorProject: flags['cursor-project'],
-                claudeCodeScope: flags['claude-code-scope'] || flags.scope,
-                serverName: flags['server-name'],
-                mcpCommand: flags['mcp-command'],
-                mcpArgs: flags['mcp-args'],
-                agentName: flags['agent-name'],
-                developerName: flags['developer-name'],
-                shieldId: flags['shield-id'],
-                shieldKey: flags['shield-key'],
-                apiUrl: flags['api-url'],
-                environment: flags.environment,
-                userObjective: flags['user-objective'],
-                authority: flags.authority,
-                approvalMode: flags['approval-mode'],
-                approvalTimeoutMs: flags['approval-timeout-ms'],
-                approvalPollMs: flags['approval-poll-ms'],
-                scanResponse: flags['scan-response'],
-                failClosed: flags['fail-closed'],
-                upload: flags.upload,
-                apiKey: flags['api-key'],
-            };
-            await (0, mcpGateway_1.installMcpGatewayCommand)(args, config);
+            await (0, mcpGateway_1.installMcpGatewayCommand)(buildInstallArgs(), config);
             break;
         }
         case 'install-cursor-mcp-gateway': {
             const args = {
+                ...buildGatewayArgs(),
                 project: flags.project,
                 serverName: flags['server-name'],
-                mcpCommand: flags['mcp-command'],
-                mcpArgs: flags['mcp-args'],
-                agentName: flags['agent-name'],
-                developerName: flags['developer-name'],
-                shieldId: flags['shield-id'],
-                shieldKey: flags['shield-key'],
-                apiUrl: flags['api-url'],
-                environment: flags.environment,
-                userObjective: flags['user-objective'],
-                authority: flags.authority,
-                approvalMode: flags['approval-mode'],
-                approvalTimeoutMs: flags['approval-timeout-ms'],
-                approvalPollMs: flags['approval-poll-ms'],
-                scanResponse: flags['scan-response'],
-                failClosed: flags['fail-closed'],
             };
             await (0, mcpGateway_1.installCursorMcpGatewayCommand)(args, config);
             break;
         }
         case 'install-claude-code-mcp-gateway': {
             const args = {
+                ...buildGatewayArgs(),
                 scope: flags.scope,
                 serverName: flags['server-name'],
-                mcpCommand: flags['mcp-command'],
-                mcpArgs: flags['mcp-args'],
-                agentName: flags['agent-name'],
-                developerName: flags['developer-name'],
-                shieldId: flags['shield-id'],
-                shieldKey: flags['shield-key'],
-                apiUrl: flags['api-url'],
-                environment: flags.environment,
-                userObjective: flags['user-objective'],
-                authority: flags.authority,
-                approvalMode: flags['approval-mode'],
-                approvalTimeoutMs: flags['approval-timeout-ms'],
-                approvalPollMs: flags['approval-poll-ms'],
-                scanResponse: flags['scan-response'],
-                failClosed: flags['fail-closed'],
             };
             await (0, mcpGateway_1.installClaudeCodeMcpGatewayCommand)(args, config);
             break;
         }
         case 'install-claude-desktop-mcp-gateway': {
             const args = {
+                ...buildGatewayArgs(),
                 configPath: flags['config-path'],
                 serverName: flags['server-name'],
-                mcpCommand: flags['mcp-command'],
-                mcpArgs: flags['mcp-args'],
-                agentName: flags['agent-name'],
-                developerName: flags['developer-name'],
-                shieldId: flags['shield-id'],
-                shieldKey: flags['shield-key'],
-                apiUrl: flags['api-url'],
-                environment: flags.environment,
-                userObjective: flags['user-objective'],
-                authority: flags.authority,
-                approvalMode: flags['approval-mode'],
-                approvalTimeoutMs: flags['approval-timeout-ms'],
-                approvalPollMs: flags['approval-poll-ms'],
-                scanResponse: flags['scan-response'],
-                failClosed: flags['fail-closed'],
             };
             await (0, mcpGateway_1.installClaudeDesktopMcpGatewayCommand)(args, config);
             break;
         }
+        case 'install-codex-mcp-gateway': {
+            const args = {
+                ...buildGatewayArgs(),
+                project: flags.project,
+                serverName: flags['server-name'],
+            };
+            await (0, mcpGateway_1.installCodexMcpGatewayCommand)(args, config);
+            break;
+        }
+        case 'install-gemini-mcp-gateway': {
+            const args = {
+                ...buildGatewayArgs(),
+                project: flags.project,
+                serverName: flags['server-name'],
+            };
+            await (0, mcpGateway_1.installGeminiMcpGatewayCommand)(args, config);
+            break;
+        }
+        case 'install-windsurf-mcp-gateway': {
+            const args = {
+                ...buildGatewayArgs(),
+                serverName: flags['server-name'],
+            };
+            await (0, mcpGateway_1.installWindsurfMcpGatewayCommand)(args, config);
+            break;
+        }
+        case 'install-vscode-mcp-gateway': {
+            const args = {
+                ...buildGatewayArgs(),
+                project: flags.project,
+                serverName: flags['server-name'],
+            };
+            await (0, mcpGateway_1.installVscodeMcpGatewayCommand)(args, config);
+            break;
+        }
         case 'init': {
             await (0, init_1.initCommand)();
             break;

package/dist/version.json

@@ -0,0 +1,3 @@
+{
+  "version": "1.3.3"
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.3.1",
+  "version": "1.3.3",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {