fullcourtdefense-cli 1.3.4 → 1.3.5

package/dist/commands/mcpGateway.d.ts

@@ -5,6 +5,8 @@ export declare const ALL_GATEWAY_CLIENTS: GatewayClient[];
 export interface McpGatewayArgs {
     mcpCommand?: string;
     mcpArgs?: string;
+    /** Working directory for the downstream MCP process (Codex config.toml cwd). */
+    mcpCwd?: string;
     agentName?: string;
     agentClient?: string;
     developerName?: string;

package/dist/commands/mcpGateway.js

@@ -733,18 +733,42 @@ function removeTomlSection(content, tableName) {
     }
     return out.join('\n').replace(/\n{3,}/g, '\n\n').trim();
 }
-function writeCodexMcpServer(configPath, serverName, nodeExe, commandArgs) {
+function writeCodexMcpServer(configPath, serverName, nodeExe, commandArgs, options = {}) {
     const existing = fs.existsSync(configPath) ? fs.readFileSync(configPath, 'utf8') : '';
     const cleaned = removeTomlSection(existing, `mcp_servers.${serverName}`);
     const argsToml = commandArgs.map(arg => JSON.stringify(arg)).join(', ');
-    const block = [
+    const blockLines = [
         `[mcp_servers.${serverName}]`,
         `command = ${JSON.stringify(nodeExe)}`,
         `args = [${argsToml}]`,
-    ].join('\n');
+    ];
+    if (options.cwd) {
+        blockLines.push(`cwd = ${JSON.stringify(options.cwd.replace(/\//g, path.sep))}`);
+    }
+    if (options.startupTimeoutSec && options.startupTimeoutSec > 0) {
+        blockLines.push(`startup_timeout_sec = ${options.startupTimeoutSec}`);
+    }
+    const block = blockLines.join('\n');
     fs.mkdirSync(path.dirname(configPath), { recursive: true });
     fs.writeFileSync(configPath, `${cleaned ? `${cleaned}\n\n` : ''}${block}\n`, 'utf8');
 }
+function resolveMcpCwd(args) {
+    const explicit = args.mcpCwd || process.env.FCD_MCP_CWD;
+    if (explicit)
+        return path.resolve(explicit);
+    const pkg = path.join(process.cwd(), 'package.json');
+    if (fs.existsSync(pkg)) {
+        try {
+            const scripts = JSON.parse(fs.readFileSync(pkg, 'utf8')).scripts || {};
+            const mcpArgs = parseArgsList(args.mcpArgs || process.env.FCD_MCP_ARGS);
+            if (args.mcpCommand === 'npm' && mcpArgs[0] === 'run' && scripts[mcpArgs[1] || 'mcp']) {
+                return process.cwd();
+            }
+        }
+        catch { /* ignore */ }
+    }
+    return undefined;
+}
 function codexConfigPath(projectScope) {
     return projectScope
         ? path.join(process.cwd(), '.codex', 'config.toml')
@@ -1034,7 +1058,10 @@ async function installCodexMcpGatewayCommand(args, config) {
         throw new Error('Pass --mcp-command for the real MCP server you want to protect.');
     const downstreamArgs = parseArgsList(args.mcpArgs || process.env.FCD_MCP_ARGS);
     const commandArgs = buildGatewayCommandArgs(gatewayConfig, downstreamCommand, downstreamArgs, INSTALL_GATEWAY_ARGS);
-    writeCodexMcpServer(file, serverName, nodeExe, commandArgs);
+    writeCodexMcpServer(file, serverName, nodeExe, commandArgs, {
+        cwd: resolveMcpCwd(args),
+        startupTimeoutSec: 120,
+    });
     console.log(`AgentGuard MCP Gateway installed for Codex (${projectScope ? 'project' : 'global'}).`);
     console.log(`Config: ${file}`);
     console.log(`Server: ${serverName}`);

package/dist/index.js

@@ -295,6 +295,7 @@ async function main() {
         serverName: flags['server-name'],
         mcpCommand: flags['mcp-command'],
         mcpArgs: flags['mcp-args'],
+        mcpCwd: flags['mcp-cwd'],
         agentName: flags['agent-name'],
         developerName: flags['developer-name'],
         shieldId: flags['shield-id'],
@@ -314,6 +315,7 @@ async function main() {
     const buildGatewayArgs = () => ({
         mcpCommand: flags['mcp-command'],
         mcpArgs: flags['mcp-args'],
+        mcpCwd: flags['mcp-cwd'],
         agentName: flags['agent-name'],
         agentClient: flags['agent-client'],
         developerName: flags['developer-name'],

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.3.4"
+  "version": "1.3.5"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.3.4",
+  "version": "1.3.5",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {