fullcourtdefense-cli 1.6.0 → 1.6.2

package/dist/commands/installAll.d.ts

@@ -1,12 +1,16 @@
 import { BotGuardConfig } from '../config';
-import { InstallMcpGatewayArgs } from './mcpGateway';
-export interface InstallAllArgs extends InstallMcpGatewayArgs {
+import { ProtectAllArgs } from './mcpGateway';
+export interface InstallAllArgs extends ProtectAllArgs {
+    apiKey?: string;
+    cursorProject?: string;
+    upload?: string;
     hooks?: string;
     discover?: string;
+    autoProtect?: string;
+    intervalMinutes?: string;
 }
 /**
- * One-click install: MCP gateway into every supported AI client, optional
- * Cursor hooks, optional fleet upload. Hooks are opt-in because Action Policies
- * should be the default enforcement path for MCP tools.
+ * One-click install: discover/wrap every existing MCP server, install Cursor
+ * hooks for built-in Cursor actions, optional self-heal and fleet upload.
  */
 export declare function installAllCommand(args: InstallAllArgs, config: BotGuardConfig): Promise<void>;

package/dist/commands/installAll.js

@@ -5,10 +5,10 @@ const config_1 = require("../config");
 const discover_1 = require("./discover");
 const installCursorHook_1 = require("./installCursorHook");
 const mcpGateway_1 = require("./mcpGateway");
+const autoProtect_1 = require("./autoProtect");
 /**
- * One-click install: MCP gateway into every supported AI client, optional
- * Cursor hooks, optional fleet upload. Hooks are opt-in because Action Policies
- * should be the default enforcement path for MCP tools.
+ * One-click install: discover/wrap every existing MCP server, install Cursor
+ * hooks for built-in Cursor actions, optional self-heal and fleet upload.
  */
 async function installAllCommand(args, config) {
     const creds = (0, config_1.requireCliSetup)(config, {
@@ -23,15 +23,17 @@ async function installAllCommand(args, config) {
         clients: args.clients || 'all',
     };
     console.log('\n\x1b[1m\x1b[36mFullCourtDefense — install all AI clients\x1b[0m');
-    console.log('\x1b[2mMCP gateway + optional fleet upload. Cursor hooks are opt-in with --hooks true.\x1b[0m\n');
-    await (0, mcpGateway_1.installMcpGatewayCommand)(gatewayArgs, config);
-    if (args.hooks === 'true') {
+    console.log('\x1b[2mAuto-protect existing MCP servers + Cursor action hooks. No --mcp-command or folder path needed.\x1b[0m\n');
+    await (0, mcpGateway_1.protectAllCommand)(gatewayArgs, config);
+    if (args.hooks !== 'false') {
         console.log('\n\x1b[1mInstalling Cursor runtime hooks…\x1b[0m');
         const hookArgs = {
             shieldId: creds.shieldId,
             shieldKey: creds.shieldKey,
             apiUrl: creds.apiUrl,
             project: args.cursorProject,
+            events: 'shell,mcp',
+            failClosed: 'true',
         };
         try {
             await (0, installCursorHook_1.installCursorHookCommand)(hookArgs, config);
@@ -40,6 +42,13 @@ async function installAllCommand(args, config) {
             console.log(`Cursor hooks skipped: ${error instanceof Error ? error.message : String(error)}`);
         }
     }
+    if (args.autoProtect === 'true') {
+        console.log('\n\x1b[1mScheduling self-healing MCP protection…\x1b[0m');
+        await (0, autoProtect_1.autoProtectCommand)({
+            ...gatewayArgs,
+            intervalMinutes: args.intervalMinutes || '60',
+        }, config);
+    }
     if (args.discover === 'true' || args.upload === 'true') {
         console.log('\n\x1b[1mUploading desktop posture to AI Fleet…\x1b[0m');
         const discoverArgs = {
@@ -52,5 +61,5 @@ async function installAllCommand(args, config) {
         };
         await (0, discover_1.discoverCommand)(discoverArgs, config);
     }
-    console.log('\n\x1b[32mDone.\x1b[0m Restart each AI client you use, then run \x1b[1mfullcourtdefense discover --surface mcp\x1b[0m to verify gateways.');
+    console.log('\n\x1b[32mDone.\x1b[0m Restart each AI client you use, then run \x1b[1mfullcourtdefense protect-all --dry-run true\x1b[0m to verify gateways.');
 }

package/dist/commands/installCursorHook.js

@@ -109,8 +109,8 @@ async function installCursorHookCommand(args, config) {
     const projectScope = args.project === 'true';
     const shadow = args.shadow === 'true';
     const file = hooksJsonPath(projectScope);
-    const requested = (args.events || 'prompt,shell,mcp')
-        .split(',').map((e) => e.trim().toLowerCase()).filter(Boolean);
+    const requested = (args.events || 'shell,mcp')
+        .split(/[\s,]+/).map((e) => e.trim().toLowerCase()).filter(Boolean);
     const events = requested.filter((e) => EVENT_MAP[e]);
     if (events.length === 0) {
         console.error(`${COLOR.red}No valid events. Choose from: ${Object.keys(EVENT_MAP).join(', ')}${COLOR.reset}`);
@@ -125,9 +125,9 @@ async function installCursorHookCommand(args, config) {
     const json = readHooksJson(file);
     for (const e of events) {
         const { hookKey, flag, failClosedDefault, timeoutSec } = EVENT_MAP[e];
-        const failClosed = args.failClosed !== undefined ? args.failClosed === 'true' : failClosedDefault;
+        const failClosed = e === 'prompt' ? false : (args.failClosed !== undefined ? args.failClosed === 'true' : failClosedDefault);
         const entry = {
-            command: buildHookCommand(flag, { shadow, failClosed }),
+            command: buildHookCommand(flag, { shadow: e === 'prompt' ? true : shadow, failClosed }),
             timeout: timeoutSec,
         };
         if (failClosed)

package/dist/index.js

@@ -113,7 +113,9 @@ function printHelp() {
     configure   Saves org API key, Organization ID, Shield ID, and Shield key to ~/.fullcourtdefense.yml.
                 After setup, other commands read credentials automatically — no --shield-id/--api-key needed.
     setup       Same as configure — validates credentials against the server before saving.
-    install-all One-click: MCP gateway in every AI client. Cursor hooks are opt-in.
+    install-all One-click: protect existing MCP servers in every AI client and
+                install Cursor hooks for built-in Cursor actions. No folder path
+                or --mcp-command needed. Use --hooks false to skip Cursor hooks.
     install     Alias for install-all.
     scan        Runs the scan. Use --local for inside-organization scans.
     discover    Finds MCP servers, local secrets, agent rules/skills, and machine
@@ -174,8 +176,8 @@ function printHelp() {
        fullcourtdefense setup
        Saves to ~/.fullcourtdefense.yml — install, discover --upload, scan, gateway, and hooks use it automatically.
 
-    4. One-click protect every AI client on this machine with MCP Action Policies:
-       fullcourtdefense install-all --mcp-command npm --mcp-args "run mcp"
+    4. One-click protect every AI client on this machine with Action Policies:
+       fullcourtdefense install-all
        Verify installs:
        fullcourtdefense discover --surface mcp
        Or install one client: fullcourtdefense install-cursor-mcp-gateway ...
@@ -295,8 +297,8 @@ function printHelp() {
     $ fullcourtdefense install-claude-desktop-mcp-gateway --mcp-command npm --mcp-args "run mcp"
     $ fullcourtdefense mcp-gateway --mcp-command npm --mcp-args "run mcp"
     $ fullcourtdefense setup
-    $ fullcourtdefense install-all --mcp-command npm --mcp-args "run mcp"
-    $ fullcourtdefense install-all --mcp-command npm --mcp-args "run mcp" --upload
+    $ fullcourtdefense install-all
+    $ fullcourtdefense install-all --auto-protect true --upload
     $ fullcourtdefense install-mcp-gateway --clients cursor,codex --mcp-command npm --mcp-args "run mcp"
     $ fullcourtdefense install-codex-mcp-gateway --mcp-command npm --mcp-args "run mcp"
     $ fullcourtdefense scan --system-prompt ./prompts/system.md --fail-threshold 80
@@ -505,6 +507,8 @@ async function main() {
                 ...buildInstallArgs(),
                 hooks: flags.hooks,
                 discover: flags.discover,
+                autoProtect: flags['auto-protect'],
+                intervalMinutes: flags['interval-minutes'],
             };
             await (0, installAll_1.installAllCommand)(args, config);
             break;

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.6.0"
+  "version": "1.6.2"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.6.0",
+  "version": "1.6.2",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {