fullcourtdefense-cli 1.7.14 → 1.7.16

package/dist/commands/local-scan.js

@@ -1111,7 +1111,7 @@ function compactScanHtml(args) {
     .workflowCard { min-height: 118px; }
     .workflowCard b { font-size: 18px; }
     .workflowCard span { font-size: 13px; }
-    .landingScanGrid { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 10px; }
+    .landingScanGrid { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: 10px; }
     .scanTypeGrid { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 10px; margin: 12px 0; }
     .advancedScanGrid { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 10px; margin: 8px 0 12px; }
     .card:hover, .card.active { border-color: #2563eb; background: #eff6ff; transform: translateY(-1px); }
@@ -1202,6 +1202,7 @@ function compactScanHtml(args) {
           <div class="landingScanGrid">
             <button class="card workflowCard" data-workflow="bot"><b>Bot Scan</b><span>Red-team an internal bot, agent, or chat API.</span></button>
             <button class="card workflowCard" data-workflow="posture"><b>Security Posture Scan</b><span>Run web-style endpoint security checkup.</span></button>
+            <button class="card workflowCard" data-workflow="mcp"><b>MCP Scan</b><span>Scan an MCP server or protected gateway for risky tool paths.</span></button>
           </div>
         </div>
         <div class="menuGroup">
@@ -1211,7 +1212,7 @@ function compactScanHtml(args) {
       </div>
     </section>
 
-    <section class="panel">
+    <section class="panel hidden" id="workflowPanel">
       <div id="step-1" class="stepSection">
       <div class="sectionTitle">
         <div>
@@ -1293,7 +1294,7 @@ function compactScanHtml(args) {
       </div>
 
       <div id="posture-fields" class="hidden">
-        <div class="note">Security Posture Scan checks endpoint configuration, auth exposure, headers, transport, and operational security signals. This matches the web Security Checkup flow.</div>
+        <div class="note">Security Posture Scan checks HTTP endpoint configuration, auth exposure, headers, transport, and operational security signals. To test MCP tools, choose MCP Scan from the Security Scans cards.</div>
         <div class="two">
           <div>
             <label>AI endpoint URL</label>
@@ -1414,15 +1415,16 @@ Local targets stay on this machine; saved scan reports go to Full Court Defense.
   </main>
   <script>
     const scanTargets = ['endpoint','posture','rag','mcp'];
-    let target = 'runner';
+    let target = 'home';
     let step = 1;
     const qs = new URLSearchParams(location.search);
     if (['runner','endpoint','posture','rag','mcp','help'].includes(qs.get('target'))) target = qs.get('target');
     const byId = id => document.getElementById(id);
-    const workflow = () => target === 'endpoint' ? 'bot' : target === 'posture' ? 'posture' : target;
+    const workflow = () => target === 'endpoint' ? 'bot' : target === 'posture' ? 'posture' : target === 'home' ? '' : target;
     const sync = () => {
       document.querySelectorAll('.workflowCard').forEach(c => c.classList.toggle('active', c.dataset.workflow === workflow()));
       document.querySelectorAll('.scanTypeCard').forEach(c => c.classList.toggle('active', c.dataset.target === target));
+      byId('workflowPanel').classList.toggle('hidden', target === 'home');
       ['runner','endpoint','posture','rag','mcp','help'].forEach(id => byId(id + '-fields').classList.toggle('hidden', id !== target));
       const scanTarget = scanTargets.includes(target);
       byId('scan-picker').classList.toggle('hidden', !scanTarget);
@@ -1438,7 +1440,7 @@ Local targets stay on this machine; saved scan reports go to Full Court Defense.
         : target === 'help'
           ? 'Choose one-off tool run or local red-team scan.'
           : 'Select Endpoint, RAG, or MCP, then connect the internal target.';
-      if (!scanTarget) setStep(1);
+      if (!scanTarget || target === 'home') setStep(1);
     };
     const setStep = next => {
       step = next;
@@ -1451,6 +1453,7 @@ Local targets stay on this machine; saved scan reports go to Full Court Defense.
     document.querySelectorAll('.workflowCard').forEach(c => c.onclick = () => {
       target = c.dataset.workflow === 'bot' ? 'endpoint' : c.dataset.workflow;
       sync();
+      byId('workflowPanel').scrollIntoView({ behavior: 'smooth', block: 'start' });
     });
     document.querySelectorAll('.scanTypeCard').forEach(c => c.onclick = () => {
       target = c.dataset.target;

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.7.14"
+  "version": "1.7.16"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.7.14",
+  "version": "1.7.16",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {