fullcourtdefense-cli 1.6.5 → 1.6.6

package/dist/commands/hook.js

@@ -240,16 +240,19 @@ function mcpServerName(p) {
     return str(p.mcp_server_name) || str(p.server_name) || str(p.serverName) || str(p.mcpServer) || undefined;
 }
 /**
- * Runtime agent identity for a tool call. For MCP calls we mirror the gateway's
- * per-server identity (`<developer>-cursor-<server>`) so a per-agent policy created
- * for a gateway-observed agent ALSO matches the same server when it flows through
- * the in-IDE hook. Non-MCP events keep the collapsed per-developer identity.
+ * Runtime agent identity for a tool call. For MCP calls we use a RUNTIME-AGNOSTIC
+ * per-server identity (`<developer>-<server>`) — the client (cursor/codex/claude/...) is
+ * intentionally NOT part of the identity, because the same logical agent (the MCP server)
+ * is the same agent no matter which IDE/client invokes it. This mirrors the gateway's
+ * `perServerAgentName`, so ONE per-agent policy matches the same server across every runtime.
+ * The client is still reported separately as `agentClient` metadata for optional per-runtime
+ * constraints. Non-MCP events keep the collapsed per-developer IDE-runtime identity.
  */
 function agentNameForCall(event, p) {
     if (event === 'mcp') {
         const server = mcpServerName(p);
         if (server)
-            return `${safeIdentityPart(developerId())}-cursor-${safeIdentityPart(server)}`;
+            return `${safeIdentityPart(developerId())}-${safeIdentityPart(server)}`;
     }
     return `cursor-${developerId()}`;
 }
@@ -382,9 +385,9 @@ async function enforceActionPolicy(ctx) {
             headers,
             body: JSON.stringify({
                 shieldId,
-                // For MCP calls this mirrors the gateway's per-server identity
-                // (`<developer>-cursor-<server>`), so a per-agent policy matches the same
-                // server on BOTH the gateway path and this in-IDE hook path.
+                // For MCP calls this mirrors the gateway's runtime-agnostic per-server identity
+                // (`<developer>-<server>`), so ONE per-agent policy matches the same server on the
+                // gateway path AND this in-IDE hook path, across every client/runtime.
                 agentName: agentNameForCall(event, payload),
                 toolName: call.toolName,
                 toolArgs: call.toolArgs,

package/dist/commands/mcpGateway.js

@@ -1022,8 +1022,13 @@ function backupFile(file) {
     }
     catch { /* best effort */ }
 }
-function perServerAgentName(developerName, agentClient, serverName) {
-    return `${safeIdentityPart(developerName)}-${agentClient}-${safeIdentityPart(serverName)}`;
+// RUNTIME-AGNOSTIC per-server agent identity: `<developer>-<server>`. The client
+// (cursor/codex/claude/...) is deliberately excluded — the same MCP server is the same
+// logical agent regardless of which IDE/runtime invokes it, so ONE per-agent policy applies
+// everywhere. The client is still carried separately as `agentClient` metadata (see GatewayConfig)
+// for optional per-runtime constraints. `agentClient` is kept as a param for signature stability.
+function perServerAgentName(developerName, _agentClient, serverName) {
+    return `${safeIdentityPart(developerName)}-${safeIdentityPart(serverName)}`;
 }
 function wrapJsonConfigFile(file, gatewayConfig, agentClient, dryRun) {
     const stats = newWrapStats();

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.6.5"
+  "version": "1.6.6"
 }

package/package.json

@@ -1,42 +1,42 @@
-{
-  "name": "fullcourtdefense-cli",
-  "version": "1.6.5",
-  "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
-  "main": "dist/index.js",
-  "bin": {
-    "fullcourtdefense": "dist/index.js",
-    "fcd": "dist/index.js",
-    "botguard": "dist/index.js"
-  },
-  "files": [
-    "dist",
-    "README.md"
-  ],
-  "scripts": {
-    "build": "tsc && node scripts/copy-attack-corpus.js",
-    "prepublishOnly": "npm run build"
-  },
-  "keywords": [
-    "llm",
-    "security",
-    "guardrails",
-    "ai-safety",
-    "prompt-injection",
-    "cli",
-    "red-teaming",
-    "owasp",
-    "mcp",
-    "rag"
-  ],
-  "license": "MIT",
-  "devDependencies": {
-    "@types/node": "^25.3.0",
-    "typescript": "^5.3.0"
-  },
-  "engines": {
-    "node": ">=18.0.0"
-  },
-  "dependencies": {
-    "yaml": "^2.8.4"
-  }
-}
+{
+  "name": "fullcourtdefense-cli",
+  "version": "1.6.6",
+  "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
+  "main": "dist/index.js",
+  "bin": {
+    "fullcourtdefense": "dist/index.js",
+    "fcd": "dist/index.js",
+    "botguard": "dist/index.js"
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc && node scripts/copy-attack-corpus.js",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "llm",
+    "security",
+    "guardrails",
+    "ai-safety",
+    "prompt-injection",
+    "cli",
+    "red-teaming",
+    "owasp",
+    "mcp",
+    "rag"
+  ],
+  "license": "MIT",
+  "devDependencies": {
+    "@types/node": "^25.3.0",
+    "typescript": "^5.3.0"
+  },
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "dependencies": {
+    "yaml": "^2.8.4"
+  }
+}