fullcourtdefense-cli 1.7.11 → 1.7.12

package/dist/commands/local-scan.js

@@ -1181,7 +1181,7 @@ function compactScanHtml(args) {
         </div>
         <div class="note" id="backendStatus">Backend status: not checked yet.</div>
       </div>
-      <div class="steps">
+      <div class="steps" id="scanSteps">
         <div class="step active" id="step-dot-1">1. Connect target</div>
         <div class="step" id="step-dot-2">2. Select scan type</div>
         <div class="step" id="step-dot-3">3. Run red-team scan</div>
@@ -1210,8 +1210,8 @@ function compactScanHtml(args) {
       <div id="step-1" class="stepSection">
       <div class="sectionTitle">
         <div>
-          <h2>Connect target</h2>
-          <div class="muted">Choose Run MCP Tool for a single action, or choose a scan target for red-team testing.</div>
+          <h2 id="connectTitle">Run MCP Tool</h2>
+          <div class="muted" id="connectSubtitle">Call one MCP tool from this machine. This is not a scan.</div>
         </div>
       </div>
       <div id="runner-fields">
@@ -1223,11 +1223,11 @@ function compactScanHtml(args) {
         <div class="two">
           <div>
             <label>Protected MCP HTTP/SSE URL</label>
-            <input id="runnerMcpUrl" placeholder="http://127.0.0.1:5066/mcp" />
+            <input id="runnerMcpUrl" placeholder="Optional: http://127.0.0.1:5066/mcp" />
           </div>
           <div>
             <label>Tool name</label>
-            <input id="runnerTool" placeholder="lookup_customer" />
+            <input id="runnerTool" placeholder="Example: lookup_customer_profile" />
           </div>
         </div>
         <div class="two">
@@ -1241,12 +1241,12 @@ function compactScanHtml(args) {
           </div>
         </div>
         <div class="two">
-          <div><label>Or stdio command</label><input id="runnerMcpCommand" placeholder="fullcourtdefense" /></div>
-          <div><label>Command args</label><input id="runnerMcpArgs" placeholder='mcp-gateway --mcp-command node --mcp-args "[&quot;./server.js&quot;]"' /></div>
+          <div><label>Or stdio command</label><input id="runnerMcpCommand" placeholder="node" /></div>
+          <div><label>Command args</label><input id="runnerMcpArgs" placeholder="C:\\path\\to\\mcp-server.js" /></div>
         </div>
         <label>Tool arguments JSON</label>
         <textarea id="runnerToolArgs" spellcheck="false">{
-  "customerId": "cus_123"
+  "customerId": "RO-PB-10492"
 }</textarea>
         <div class="actions">
           <button class="primary" id="runMcpTool">Run MCP tool</button>
@@ -1361,11 +1361,11 @@ function compactScanHtml(args) {
           <b>Red-team console</b>
           <span class="pill" id="consoleStatus">Ready</span>
         </div>
-        <pre id="out">Full Court Defense Local Runner ready.
+        <pre id="out">Full Court Defense Local Web Console ready.
 
-Select Endpoint, RAG, or MCP above, then run a scan.
-Quick uses the same critical/high attack selection as the web scanner.
-Full uses the full web attack corpus bundled with the CLI.</pre>
+Choose Run MCP Tool for one live tool call.
+Choose Endpoint/RAG/MCP Scan for a local red-team scan.
+Local targets stay on this machine; saved scan reports go to Full Court Defense.</pre>
       </div>
       </div>
     </section>
@@ -1379,7 +1379,20 @@ Full uses the full web attack corpus bundled with the CLI.</pre>
     const sync = () => {
       document.querySelectorAll('.card').forEach(c => c.classList.toggle('active', c.dataset.target === target));
       ['runner','endpoint','rag','mcp','help'].forEach(id => byId(id + '-fields').classList.toggle('hidden', id !== target));
-      byId('scanActions').classList.toggle('hidden', target === 'runner');
+      const scanTarget = ['endpoint','rag','mcp'].includes(target);
+      byId('scanSteps').classList.toggle('hidden', !scanTarget);
+      byId('scanActions').classList.toggle('hidden', !scanTarget);
+      byId('connectTitle').textContent = target === 'runner'
+        ? 'Run MCP Tool'
+        : target === 'help'
+          ? 'Local workflow options'
+          : 'Connect scan target';
+      byId('connectSubtitle').textContent = target === 'runner'
+        ? 'Call one MCP tool from this machine. This is not a scan.'
+        : target === 'help'
+          ? 'Choose one-off tool run or local red-team scan.'
+          : 'Choose the internal target to red-team from this machine.';
+      if (!scanTarget) setStep(1);
     };
     const setStep = next => {
       step = next;
@@ -1398,7 +1411,7 @@ Full uses the full web attack corpus bundled with the CLI.</pre>
     byId('mcpCommand').value = qs.get('mcpCommand') || '';
     byId('mcpArgs').value = qs.get('mcpArgs') || '';
     byId('runnerMcpUrl').value = qs.get('mcpUrl') || '';
-    byId('runnerMcpCommand').value = qs.get('mcpCommand') || 'fullcourtdefense';
+    byId('runnerMcpCommand').value = qs.get('mcpCommand') || '';
     byId('runnerMcpArgs').value = qs.get('mcpArgs') || '';
     byId('runnerTool').value = qs.get('mcpTool') || '';
     byId('runnerOperation').value = qs.get('operation') || '';
@@ -1506,18 +1519,18 @@ Full uses the full web attack corpus bundled with the CLI.</pre>
       byId('mcpArgs').value = '';
       byId('mcpTool').value = 'all';
       byId('runnerMcpUrl').value = '';
-      byId('runnerMcpCommand').value = 'fullcourtdefense';
+      byId('runnerMcpCommand').value = '';
       byId('runnerMcpArgs').value = '';
       byId('runnerTool').value = '';
       byId('runnerOperation').value = '';
-      byId('runnerToolArgs').value = '{\\n  "customerId": "cus_123"\\n}';
+      byId('runnerToolArgs').value = '{\\n  "customerId": "RO-PB-10492"\\n}';
       byId('mcpResultCard').classList.add('hidden');
       byId('mcpResultJson').value = '';
       byId('mcpResultTable').innerHTML = '';
       byId('mode').value = 'quick';
       byId('format').value = 'report';
       clearScanSummary();
-      setConsole('Full Court Defense Local Runner ready.\\n\\nSelect Endpoint, RAG, or MCP above, then run a scan.\\nQuick uses the same critical/high attack selection as the web scanner.\\nFull uses the full web attack corpus bundled with the CLI.', 'Ready');
+      setConsole('Full Court Defense Local Web Console ready.\\n\\nChoose Run MCP Tool for one live tool call.\\nChoose Endpoint/RAG/MCP Scan for a local red-team scan.', 'Ready');
     };
     byId('command').onclick = () => { setConsole(renderCommand(payload()), 'Command'); };
     byId('connectNext').onclick = () => setStep(2);

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.7.11"
+  "version": "1.7.12"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.7.11",
+  "version": "1.7.12",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {