fullcourtdefense-cli 1.7.20 → 1.7.22

package/dist/commands/agentCi.d.ts

@@ -6,6 +6,8 @@ export interface AgentCiArgs {
     requireUpload?: string;
     requireGateway?: string;
     requireApprovalFor?: string;
+    changedOnly?: string;
+    changedFiles?: string;
     extraPath?: string;
     apiKey?: string;
     apiUrl?: string;

package/dist/commands/agentCi.js

@@ -35,6 +35,7 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.agentCiCommand = agentCiCommand;
 const crypto = __importStar(require("crypto"));
+const child_process_1 = require("child_process");
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const config_1 = require("../config");
@@ -159,11 +160,82 @@ function parseRequiredControls(value) {
 function finding(input) {
     return { ...input, id: stableId([input.category, input.title, input.filePath || '', input.detail]) };
 }
+function normalizeRelativePath(cwd, filePath) {
+    if (!filePath)
+        return '';
+    const absolute = path.isAbsolute(filePath) ? filePath : path.resolve(cwd, filePath);
+    return path.relative(cwd, absolute).replace(/\\/g, '/').toLowerCase();
+}
+function parseChangedFilesInput(raw) {
+    return (raw || '')
+        .split(/\r?\n|,/)
+        .map(item => item.trim())
+        .filter(Boolean);
+}
+function resolveChangedFiles(cwd, args) {
+    if (args.changedOnly !== 'true')
+        return null;
+    let files = [];
+    if (args.changedFiles) {
+        const changedFilePath = path.resolve(cwd, args.changedFiles);
+        if (fs.existsSync(changedFilePath)) {
+            files = parseChangedFilesInput(fs.readFileSync(changedFilePath, 'utf8'));
+        }
+        else {
+            files = parseChangedFilesInput(args.changedFiles);
+        }
+    }
+    if (files.length === 0)
+        files = parseChangedFilesInput(process.env.AGENTGUARD_CHANGED_FILES || process.env.FCD_CHANGED_FILES);
+    if (files.length === 0 && process.env.GITHUB_BASE_REF) {
+        try {
+            files = (0, child_process_1.execFileSync)('git', ['diff', '--name-only', `origin/${process.env.GITHUB_BASE_REF}...HEAD`], { cwd, encoding: 'utf8' })
+                .split(/\r?\n/)
+                .filter(Boolean);
+        }
+        catch {
+            // The workflow should pass --changed-files; full scan is safer if diff context is unavailable.
+        }
+    }
+    if (files.length === 0)
+        return null;
+    return new Set(files.map(file => normalizeRelativePath(cwd, file)));
+}
+function isChangedFile(cwd, changedFiles, filePath) {
+    if (!changedFiles)
+        return true;
+    return changedFiles.has(normalizeRelativePath(cwd, filePath));
+}
+function agentFileRemediation(tags) {
+    const fixes = [];
+    if (tags.includes('allows_shell'))
+        fixes.push('remove blanket shell/terminal permission or require an explicit command allowlist plus human approval');
+    if (tags.includes('broad_filesystem'))
+        fixes.push('limit file access to approved project paths and deny secrets/home/system paths');
+    if (tags.includes('destructive_actions'))
+        fixes.push('require an AgentGuard Action Policy for delete, payment, transfer, email, Slack, or other side-effecting actions');
+    if (tags.includes('weak_guardrails'))
+        fixes.push('delete bypass language such as always allow, never block, disable security, or skip validation');
+    if (tags.includes('embedded_secret_ref'))
+        fixes.push('remove inline secret/password/token references and use a managed secret store');
+    if (tags.includes('jailbreak_hint'))
+        fixes.push('remove jailbreak/bypass instructions and add hierarchy language that system and security policies win');
+    if (tags.includes('no_runtime_hook'))
+        fixes.push('install the Full Court Defense hook/gateway so risky tool calls are checked before execution');
+    if (fixes.length === 0)
+        return 'Review the instruction/rule and add explicit least-privilege boundaries.';
+    return `Fix this file before merge: ${fixes.join('; ')}.`;
+}
 function evaluateAgentGate(args) {
     const cwd = process.cwd();
-    const mcpServers = discoverMcpServers(cwd, args.extraPath);
-    const agentFiles = (0, discoverAgentFiles_1.scanAgentFiles)({ cwd });
+    const changedFiles = resolveChangedFiles(cwd, args);
+    const mcpServers = discoverMcpServers(cwd, args.extraPath)
+        .filter(server => isChangedFile(cwd, changedFiles, server.filePath));
+    const agentFiles = (0, discoverAgentFiles_1.scanAgentFiles)({ cwd })
+        .filter(file => isChangedFile(cwd, changedFiles, file.filePath));
     const secrets = (0, discoverSecrets_1.scanSecrets)({ cwd, maxEnvDepth: 3 });
+    const secretFindings = secrets.findings
+        .filter(item => isChangedFile(cwd, changedFiles, item.filePath));
     const requireGateway = args.requireGateway !== 'false';
     const requiredControls = parseRequiredControls(args.requireApprovalFor);
     const findings = [];
@@ -197,10 +269,10 @@ function evaluateAgentGate(args) {
             title: `Risky agent instruction: ${file.title}`,
             detail: `${file.filePath} contains agent risk tags: ${file.riskTags.join(', ')}.`,
             filePath: file.filePath,
-            remediation: 'Review the instruction/rule and add explicit least-privilege boundaries.',
+            remediation: agentFileRemediation(file.riskTags),
         }));
     }
-    for (const secret of secrets.findings.filter(item => item.severity === 'critical' || item.severity === 'high')) {
+    for (const secret of secretFindings.filter(item => item.severity === 'critical' || item.severity === 'high')) {
         findings.push(finding({
             severity: secret.severity === 'critical' ? 'critical' : 'high',
             category: 'secret',
@@ -272,7 +344,7 @@ function buildCiMetadata() {
     return {
         provider: process.env.GITHUB_ACTIONS === 'true' ? 'github_actions' : process.env.CI ? 'ci' : undefined,
         repository: process.env.GITHUB_REPOSITORY,
-        ref: process.env.GITHUB_REF_NAME || process.env.GITHUB_HEAD_REF || process.env.GITHUB_REF,
+        ref: process.env.GITHUB_HEAD_REF || process.env.GITHUB_REF_NAME || process.env.GITHUB_REF,
         sha: process.env.GITHUB_SHA,
         runId: process.env.GITHUB_RUN_ID,
         runUrl: process.env.GITHUB_SERVER_URL && process.env.GITHUB_REPOSITORY && process.env.GITHUB_RUN_ID