fullcourtdefense-cli 1.6.10 → 1.6.12

package/dist/commands/installAll.js

@@ -6,6 +6,7 @@ const discover_1 = require("./discover");
 const installCursorHook_1 = require("./installCursorHook");
 const mcpGateway_1 = require("./mcpGateway");
 const autoProtect_1 = require("./autoProtect");
+const restartNotice_1 = require("./restartNotice");
 /**
  * One-click install: discover/wrap every existing MCP server, install Cursor
  * hooks for built-in Cursor actions, optional self-heal and fleet upload.
@@ -32,7 +33,7 @@ async function installAllCommand(args, config) {
             shieldKey: creds.shieldKey,
             apiUrl: creds.apiUrl,
             project: args.cursorProject,
-            events: 'shell,mcp',
+            events: 'prompt,shell,mcp',
             failClosed: 'true',
         };
         try {
@@ -61,5 +62,6 @@ async function installAllCommand(args, config) {
         };
         await (0, discover_1.discoverCommand)(discoverArgs, config);
     }
-    console.log('\n\x1b[32mDone.\x1b[0m Restart each AI client you use, then run \x1b[1mfullcourtdefense protect-all --dry-run true\x1b[0m to verify gateways.');
+    console.log('\n\x1b[32mDone.\x1b[0m Run \x1b[1mfullcourtdefense protect-all --dry-run true\x1b[0m to verify gateways.');
+    await (0, restartNotice_1.promptRestartNotice)();
 }

package/dist/commands/installCursorHook.js

@@ -39,6 +39,7 @@ const fs = __importStar(require("fs"));
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const config_1 = require("../config");
+const restartNotice_1 = require("./restartNotice");
 const COLOR = {
     reset: '\x1b[0m', bold: '\x1b[1m', dim: '\x1b[2m',
     red: '\x1b[31m', yellow: '\x1b[33m', green: '\x1b[32m', cyan: '\x1b[36m', gray: '\x1b[90m',
@@ -168,7 +169,8 @@ async function installCursorHookCommand(args, config) {
         console.log(`${COLOR.yellow}No Shield ID set.${COLOR.reset} Run ${COLOR.bold}fullcourtdefense setup${COLOR.reset} first, then re-run install.`);
     }
     console.log('');
-    console.log(`${COLOR.gray}Restart Cursor (or it will hot-reload hooks.json). Verify in Cursor → Settings → Hooks.${COLOR.reset}`);
+    (0, restartNotice_1.printRestartNotice)('Cursor');
+    console.log(`${COLOR.gray}Verify in Cursor → Settings → Hooks after restart.${COLOR.reset}`);
     console.log(`${COLOR.gray}Remove with:${COLOR.reset} fullcourtdefense uninstall-cursor-hook${projectScope ? ' --project true' : ''}`);
 }
 async function uninstallCursorHookCommand(args) {

package/dist/commands/mcpGateway.js

@@ -53,6 +53,7 @@ const config_1 = require("../config");
 const discoverPaths_1 = require("./discoverPaths");
 const discover_1 = require("./discover");
 const deterministicGuard_1 = require("./deterministicGuard");
+const restartNotice_1 = require("./restartNotice");
 const DEFAULT_API_URL = 'https://api.fullcourtdefense.ai';
 const MANAGED_SERVER_NAME = 'agentguard-gateway';
 const INSTALL_GATEWAY_ARGS = { includeShieldKey: false };
@@ -936,7 +937,7 @@ async function installMcpGatewayCommand(args, config) {
             console.log(`    - ${failure}`);
     }
     console.log(`  Runtime identity: ${detectedDeveloperName(args)}`);
-    console.log('Restart/reload each client to use protected MCP tools.');
+    (0, restartNotice_1.printRestartNotice)(clients.map(c => CLIENT_LABELS[c]).join(', '));
     if (args.upload === 'true') {
         console.log('\nUploading desktop inventory to AI Fleet…');
         const creds = (0, config_1.resolveCliCredentials)(config, { apiKey: args.apiKey, apiUrl: args.apiUrl });
@@ -1334,8 +1335,10 @@ async function protectAllCommand(args, config) {
     console.log('\x1b[1mSummary\x1b[0m');
     console.log(`  ${dryRun ? 'would update' : 'updated'}: ${totalWrapped}   already protected: ${totalManaged}   no servers: ${totalEmpty}   skipped remote: ${totalRemote}`);
     console.log(`  Each protected server enforces your org Action Policies (allow / block / wait-for-human-approval) on its tool calls.`);
-    if (!dryRun && totalWrapped > 0)
-        console.log('  Backups saved next to each edited file (*.fcd-backup-*). Restart each client to load the protected servers.');
+    if (!dryRun && totalWrapped > 0) {
+        console.log('  Backups saved next to each edited file (*.fcd-backup-*).');
+        (0, restartNotice_1.printRestartNotice)(allowedClientKeys ? [...allowedClientKeys].join(', ') : undefined);
+    }
     console.log('  Reverse anytime with: \x1b[1mfullcourtdefense unprotect-all\x1b[0m');
 }
 async function unprotectAllCommand(args, config) {

package/dist/commands/restartNotice.d.ts

@@ -0,0 +1,2 @@
+export declare function printRestartNotice(clients?: string): void;
+export declare function promptRestartNotice(clients?: string): Promise<void>;

package/dist/commands/restartNotice.js

@@ -0,0 +1,109 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.printRestartNotice = printRestartNotice;
+exports.promptRestartNotice = promptRestartNotice;
+const child_process_1 = require("child_process");
+function printRestartNotice(clients = 'Cursor, Claude, Codex, VS Code, Windsurf, Gemini') {
+    console.log('');
+    console.log('\x1b[33m\x1b[1mACTION REQUIRED: restart your AI clients\x1b[0m');
+    console.log(`\x1b[33mRestart/reload ${clients} so they load the protected MCP gateway and hooks.\x1b[0m`);
+    console.log('\x1b[2mAlready-running MCP servers may keep using old unprotected processes until the client restarts.\x1b[0m');
+}
+function shouldPrompt() {
+    if (!process.stdin.isTTY || !process.stdout.isTTY)
+        return false;
+    if (process.env.CI === 'true' || process.env.FCD_NO_RESTART_PROMPT === 'true')
+        return false;
+    return true;
+}
+function parseJsonArray(raw) {
+    const trimmed = raw.trim();
+    if (!trimmed)
+        return [];
+    const parsed = JSON.parse(trimmed);
+    const rows = Array.isArray(parsed) ? parsed : [parsed];
+    return rows
+        .map((row) => row)
+        .map((row) => ({
+        pid: Number(row.ProcessId || row.pid),
+        name: String(row.Name || row.name || ''),
+        executablePath: typeof row.ExecutablePath === 'string' ? row.ExecutablePath : undefined,
+    }))
+        .filter((row) => Number.isFinite(row.pid) && row.pid > 0 && row.name);
+}
+function detectWindowsClients() {
+    const script = [
+        "$names=@('Cursor.exe','Claude.exe','Code.exe','Windsurf.exe');",
+        'Get-CimInstance Win32_Process |',
+        'Where-Object { $names -contains $_.Name } |',
+        'Select-Object ProcessId,Name,ExecutablePath |',
+        'ConvertTo-Json -Compress',
+    ].join(' ');
+    try {
+        return parseJsonArray((0, child_process_1.execFileSync)('powershell.exe', ['-NoProfile', '-Command', script], { encoding: 'utf8' }));
+    }
+    catch {
+        return [];
+    }
+}
+function detectRestartableClients() {
+    if (process.platform === 'win32')
+        return detectWindowsClients();
+    return [];
+}
+async function askRestart(clients) {
+    const names = [...new Set(clients.map(client => client.name.replace(/\.exe$/i, '')))].join(', ');
+    return new Promise((resolve) => {
+        process.stdout.write(`\n\x1b[1mRestart detected AI clients now (${names})? Press r then Enter to restart, or Enter to skip.\x1b[0m `);
+        process.stdin.resume();
+        process.stdin.once('data', (chunk) => {
+            process.stdin.pause();
+            resolve(String(chunk).trim().toLowerCase() === 'r');
+        });
+    });
+}
+async function restartWindowsClients(clients) {
+    const launchPaths = [...new Set(clients.map(client => client.executablePath).filter((value) => !!value))];
+    for (const client of clients) {
+        try {
+            (0, child_process_1.execFileSync)('taskkill.exe', ['/PID', String(client.pid), '/T', '/F'], { stdio: 'ignore' });
+        }
+        catch {
+            // The process may already be gone.
+        }
+    }
+    await new Promise(resolve => setTimeout(resolve, 1200));
+    for (const exePath of launchPaths) {
+        try {
+            const child = (0, child_process_1.spawn)(exePath, [], { detached: true, stdio: 'ignore' });
+            child.unref();
+            console.log(`Restarted ${exePath}`);
+        }
+        catch (error) {
+            console.log(`Could not restart ${exePath}: ${error instanceof Error ? error.message : String(error)}`);
+        }
+    }
+}
+async function restartClients(clients) {
+    if (process.platform === 'win32') {
+        await restartWindowsClients(clients);
+        return;
+    }
+    console.log('Automatic restart is not supported on this OS yet. Please restart your AI clients manually.');
+}
+async function promptRestartNotice(clients = 'Cursor, Claude, Codex, VS Code, Windsurf, Gemini') {
+    printRestartNotice(clients);
+    if (!shouldPrompt())
+        return;
+    const runningClients = detectRestartableClients();
+    if (runningClients.length === 0) {
+        console.log('\n\x1b[2mNo running GUI AI clients detected. Start them again to load protection.\x1b[0m');
+        return;
+    }
+    if (await askRestart(runningClients)) {
+        await restartClients(runningClients);
+    }
+    else {
+        console.log('Skipped automatic restart. Protection applies after you restart/reload the clients.');
+    }
+}

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.6.10"
+  "version": "1.6.12"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.6.10",
+  "version": "1.6.12",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {