fullcourtdefense-cli 1.6.9 → 1.6.11

package/dist/commands/hook.js

@@ -104,6 +104,30 @@ function inferEvent(explicit, payload) {
     return 'unknown';
 }
 const str = (v) => (typeof v === 'string' ? v : '');
+function collectPromptStrings(value, out = [], depth = 0) {
+    if (depth > 5 || value === null || value === undefined)
+        return out;
+    if (typeof value === 'string') {
+        if (value.trim())
+            out.push(value);
+        return out;
+    }
+    if (Array.isArray(value)) {
+        for (const item of value.slice(-10))
+            collectPromptStrings(item, out, depth + 1);
+        return out;
+    }
+    if (typeof value === 'object') {
+        const obj = value;
+        for (const key of ['text', 'content', 'message', 'value', 'input', 'prompt']) {
+            collectPromptStrings(obj[key], out, depth + 1);
+        }
+        for (const key of ['messages', 'parts', 'items']) {
+            collectPromptStrings(obj[key], out, depth + 1);
+        }
+    }
+    return out;
+}
 /** Pull the meaningful text to scan out of a Cursor PROMPT hook payload. */
 function extractPromptText(p) {
     const direct = str(p.prompt) || str(p.text) || str(p.message) || str(p.content);
@@ -114,12 +138,29 @@ function extractPromptText(p) {
         const t = str(promptObj.text) || str(promptObj.content);
         if (t)
             return t;
+        const nestedPrompt = collectPromptStrings(promptObj);
+        if (nestedPrompt.length)
+            return nestedPrompt.join('\n');
     }
     const messages = p.messages;
     if (Array.isArray(messages) && messages.length) {
         const last = messages[messages.length - 1];
-        return str(last?.content) || str(last?.text);
+        const fromLast = str(last?.content) || str(last?.text);
+        if (fromLast)
+            return fromLast;
+        const nestedMessages = collectPromptStrings(last);
+        if (nestedMessages.length)
+            return nestedMessages.join('\n');
     }
+    const nestedTopLevel = collectPromptStrings({
+        text: p.text,
+        message: p.message,
+        content: p.content,
+        input: p.input,
+        prompt: p.prompt,
+    });
+    if (nestedTopLevel.length)
+        return nestedTopLevel.join('\n');
     return '';
 }
 /**
@@ -356,6 +397,7 @@ async function hookCommand(args, config) {
     // --- Shield text analysis for prompts (developer chat) ---
     if (event === 'prompt') {
         const text = extractPromptText(payload).trim();
+        dbg({ phase: 'prompt_text', textLen: text.length, textPreview: text.slice(0, 300) });
         if (!text)
             respond(false);
         const localBlock = (0, deterministicGuard_1.scanDeterministicPrompt)(text);

package/dist/commands/installAll.js

@@ -6,6 +6,7 @@ const discover_1 = require("./discover");
 const installCursorHook_1 = require("./installCursorHook");
 const mcpGateway_1 = require("./mcpGateway");
 const autoProtect_1 = require("./autoProtect");
+const restartNotice_1 = require("./restartNotice");
 /**
  * One-click install: discover/wrap every existing MCP server, install Cursor
  * hooks for built-in Cursor actions, optional self-heal and fleet upload.
@@ -32,7 +33,7 @@ async function installAllCommand(args, config) {
             shieldKey: creds.shieldKey,
             apiUrl: creds.apiUrl,
             project: args.cursorProject,
-            events: 'shell,mcp',
+            events: 'prompt,shell,mcp',
             failClosed: 'true',
         };
         try {
@@ -61,5 +62,6 @@ async function installAllCommand(args, config) {
         };
         await (0, discover_1.discoverCommand)(discoverArgs, config);
     }
-    console.log('\n\x1b[32mDone.\x1b[0m Restart each AI client you use, then run \x1b[1mfullcourtdefense protect-all --dry-run true\x1b[0m to verify gateways.');
+    console.log('\n\x1b[32mDone.\x1b[0m Run \x1b[1mfullcourtdefense protect-all --dry-run true\x1b[0m to verify gateways.');
+    (0, restartNotice_1.printRestartNotice)();
 }

package/dist/commands/installCursorHook.js

@@ -39,6 +39,7 @@ const fs = __importStar(require("fs"));
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const config_1 = require("../config");
+const restartNotice_1 = require("./restartNotice");
 const COLOR = {
     reset: '\x1b[0m', bold: '\x1b[1m', dim: '\x1b[2m',
     red: '\x1b[31m', yellow: '\x1b[33m', green: '\x1b[32m', cyan: '\x1b[36m', gray: '\x1b[90m',
@@ -168,7 +169,8 @@ async function installCursorHookCommand(args, config) {
         console.log(`${COLOR.yellow}No Shield ID set.${COLOR.reset} Run ${COLOR.bold}fullcourtdefense setup${COLOR.reset} first, then re-run install.`);
     }
     console.log('');
-    console.log(`${COLOR.gray}Restart Cursor (or it will hot-reload hooks.json). Verify in Cursor → Settings → Hooks.${COLOR.reset}`);
+    (0, restartNotice_1.printRestartNotice)('Cursor');
+    console.log(`${COLOR.gray}Verify in Cursor → Settings → Hooks after restart.${COLOR.reset}`);
     console.log(`${COLOR.gray}Remove with:${COLOR.reset} fullcourtdefense uninstall-cursor-hook${projectScope ? ' --project true' : ''}`);
 }
 async function uninstallCursorHookCommand(args) {

package/dist/commands/mcpGateway.js

@@ -53,6 +53,7 @@ const config_1 = require("../config");
 const discoverPaths_1 = require("./discoverPaths");
 const discover_1 = require("./discover");
 const deterministicGuard_1 = require("./deterministicGuard");
+const restartNotice_1 = require("./restartNotice");
 const DEFAULT_API_URL = 'https://api.fullcourtdefense.ai';
 const MANAGED_SERVER_NAME = 'agentguard-gateway';
 const INSTALL_GATEWAY_ARGS = { includeShieldKey: false };
@@ -936,7 +937,7 @@ async function installMcpGatewayCommand(args, config) {
             console.log(`    - ${failure}`);
     }
     console.log(`  Runtime identity: ${detectedDeveloperName(args)}`);
-    console.log('Restart/reload each client to use protected MCP tools.');
+    (0, restartNotice_1.printRestartNotice)(clients.map(c => CLIENT_LABELS[c]).join(', '));
     if (args.upload === 'true') {
         console.log('\nUploading desktop inventory to AI Fleet…');
         const creds = (0, config_1.resolveCliCredentials)(config, { apiKey: args.apiKey, apiUrl: args.apiUrl });
@@ -1334,8 +1335,10 @@ async function protectAllCommand(args, config) {
     console.log('\x1b[1mSummary\x1b[0m');
     console.log(`  ${dryRun ? 'would update' : 'updated'}: ${totalWrapped}   already protected: ${totalManaged}   no servers: ${totalEmpty}   skipped remote: ${totalRemote}`);
     console.log(`  Each protected server enforces your org Action Policies (allow / block / wait-for-human-approval) on its tool calls.`);
-    if (!dryRun && totalWrapped > 0)
-        console.log('  Backups saved next to each edited file (*.fcd-backup-*). Restart each client to load the protected servers.');
+    if (!dryRun && totalWrapped > 0) {
+        console.log('  Backups saved next to each edited file (*.fcd-backup-*).');
+        (0, restartNotice_1.printRestartNotice)(allowedClientKeys ? [...allowedClientKeys].join(', ') : undefined);
+    }
     console.log('  Reverse anytime with: \x1b[1mfullcourtdefense unprotect-all\x1b[0m');
 }
 async function unprotectAllCommand(args, config) {

package/dist/commands/restartNotice.d.ts

@@ -0,0 +1 @@
+export declare function printRestartNotice(clients?: string): void;

package/dist/commands/restartNotice.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.printRestartNotice = printRestartNotice;
+function printRestartNotice(clients = 'Cursor, Claude, Codex, VS Code, Windsurf, Gemini') {
+    console.log('');
+    console.log('\x1b[33m\x1b[1mACTION REQUIRED: restart your AI clients\x1b[0m');
+    console.log(`\x1b[33mRestart/reload ${clients} so they load the protected MCP gateway and hooks.\x1b[0m`);
+    console.log('\x1b[2mAlready-running MCP servers may keep using old unprotected processes until the client restarts.\x1b[0m');
+}

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.6.9"
+  "version": "1.6.11"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.6.9",
+  "version": "1.6.11",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {