fullcourtdefense-cli 1.6.4 → 1.6.5

package/dist/commands/hook.js

@@ -222,6 +222,37 @@ function developerId() {
         return 'unknown-developer';
     }
 }
+/**
+ * Normalize an identity component — MUST stay byte-for-byte identical to the MCP
+ * gateway's `safeIdentityPart` (mcpGateway.ts) so the hook and the gateway build
+ * the SAME per-server agent identity for the same server.
+ */
+function safeIdentityPart(value) {
+    return value
+        .trim()
+        .replace(/@.*$/, '')
+        .replace(/[^a-zA-Z0-9._-]+/g, '-')
+        .replace(/^-+|-+$/g, '')
+        .toLowerCase() || 'local-user';
+}
+/** Extract the MCP server name Cursor reports for a beforeMCPExecution payload. */
+function mcpServerName(p) {
+    return str(p.mcp_server_name) || str(p.server_name) || str(p.serverName) || str(p.mcpServer) || undefined;
+}
+/**
+ * Runtime agent identity for a tool call. For MCP calls we mirror the gateway's
+ * per-server identity (`<developer>-cursor-<server>`) so a per-agent policy created
+ * for a gateway-observed agent ALSO matches the same server when it flows through
+ * the in-IDE hook. Non-MCP events keep the collapsed per-developer identity.
+ */
+function agentNameForCall(event, p) {
+    if (event === 'mcp') {
+        const server = mcpServerName(p);
+        if (server)
+            return `${safeIdentityPart(developerId())}-cursor-${safeIdentityPart(server)}`;
+    }
+    return `cursor-${developerId()}`;
+}
 /** Cursor conversation/session id when present, else a stable per-machine id. */
 function sessionId(p) {
     const fromPayload = p.conversation_id || p.conversationId || p.session_id || p.sessionId;
@@ -351,12 +382,16 @@ async function enforceActionPolicy(ctx) {
             headers,
             body: JSON.stringify({
                 shieldId,
-                agentName: `cursor-${developerId()}`,
+                // For MCP calls this mirrors the gateway's per-server identity
+                // (`<developer>-cursor-<server>`), so a per-agent policy matches the same
+                // server on BOTH the gateway path and this in-IDE hook path.
+                agentName: agentNameForCall(event, payload),
                 toolName: call.toolName,
                 toolArgs: call.toolArgs,
                 argsSummary: summarizeToolCall(call.toolName, call.toolArgs),
                 sessionId: sessionId(payload),
                 source: 'cursor_hook',
+                ...(event === 'mcp' && mcpServerName(payload) ? { mcpServer: mcpServerName(payload) } : {}),
                 ...machineMetadata(),
             }),
             signal: controller.signal,

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.6.4"
+  "version": "1.6.5"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.6.4",
+  "version": "1.6.5",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {