fullcourtdefense-cli 1.7.21 → 1.7.22

package/dist/commands/agentCi.d.ts

@@ -6,6 +6,8 @@ export interface AgentCiArgs {
     requireUpload?: string;
     requireGateway?: string;
     requireApprovalFor?: string;
+    changedOnly?: string;
+    changedFiles?: string;
     extraPath?: string;
     apiKey?: string;
     apiUrl?: string;

package/dist/commands/agentCi.js

@@ -35,6 +35,7 @@ var __importStar = (this && this.__importStar) || (function () {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.agentCiCommand = agentCiCommand;
 const crypto = __importStar(require("crypto"));
+const child_process_1 = require("child_process");
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const config_1 = require("../config");
@@ -159,11 +160,82 @@ function parseRequiredControls(value) {
 function finding(input) {
     return { ...input, id: stableId([input.category, input.title, input.filePath || '', input.detail]) };
 }
+function normalizeRelativePath(cwd, filePath) {
+    if (!filePath)
+        return '';
+    const absolute = path.isAbsolute(filePath) ? filePath : path.resolve(cwd, filePath);
+    return path.relative(cwd, absolute).replace(/\\/g, '/').toLowerCase();
+}
+function parseChangedFilesInput(raw) {
+    return (raw || '')
+        .split(/\r?\n|,/)
+        .map(item => item.trim())
+        .filter(Boolean);
+}
+function resolveChangedFiles(cwd, args) {
+    if (args.changedOnly !== 'true')
+        return null;
+    let files = [];
+    if (args.changedFiles) {
+        const changedFilePath = path.resolve(cwd, args.changedFiles);
+        if (fs.existsSync(changedFilePath)) {
+            files = parseChangedFilesInput(fs.readFileSync(changedFilePath, 'utf8'));
+        }
+        else {
+            files = parseChangedFilesInput(args.changedFiles);
+        }
+    }
+    if (files.length === 0)
+        files = parseChangedFilesInput(process.env.AGENTGUARD_CHANGED_FILES || process.env.FCD_CHANGED_FILES);
+    if (files.length === 0 && process.env.GITHUB_BASE_REF) {
+        try {
+            files = (0, child_process_1.execFileSync)('git', ['diff', '--name-only', `origin/${process.env.GITHUB_BASE_REF}...HEAD`], { cwd, encoding: 'utf8' })
+                .split(/\r?\n/)
+                .filter(Boolean);
+        }
+        catch {
+            // The workflow should pass --changed-files; full scan is safer if diff context is unavailable.
+        }
+    }
+    if (files.length === 0)
+        return null;
+    return new Set(files.map(file => normalizeRelativePath(cwd, file)));
+}
+function isChangedFile(cwd, changedFiles, filePath) {
+    if (!changedFiles)
+        return true;
+    return changedFiles.has(normalizeRelativePath(cwd, filePath));
+}
+function agentFileRemediation(tags) {
+    const fixes = [];
+    if (tags.includes('allows_shell'))
+        fixes.push('remove blanket shell/terminal permission or require an explicit command allowlist plus human approval');
+    if (tags.includes('broad_filesystem'))
+        fixes.push('limit file access to approved project paths and deny secrets/home/system paths');
+    if (tags.includes('destructive_actions'))
+        fixes.push('require an AgentGuard Action Policy for delete, payment, transfer, email, Slack, or other side-effecting actions');
+    if (tags.includes('weak_guardrails'))
+        fixes.push('delete bypass language such as always allow, never block, disable security, or skip validation');
+    if (tags.includes('embedded_secret_ref'))
+        fixes.push('remove inline secret/password/token references and use a managed secret store');
+    if (tags.includes('jailbreak_hint'))
+        fixes.push('remove jailbreak/bypass instructions and add hierarchy language that system and security policies win');
+    if (tags.includes('no_runtime_hook'))
+        fixes.push('install the Full Court Defense hook/gateway so risky tool calls are checked before execution');
+    if (fixes.length === 0)
+        return 'Review the instruction/rule and add explicit least-privilege boundaries.';
+    return `Fix this file before merge: ${fixes.join('; ')}.`;
+}
 function evaluateAgentGate(args) {
     const cwd = process.cwd();
-    const mcpServers = discoverMcpServers(cwd, args.extraPath);
-    const agentFiles = (0, discoverAgentFiles_1.scanAgentFiles)({ cwd });
+    const changedFiles = resolveChangedFiles(cwd, args);
+    const mcpServers = discoverMcpServers(cwd, args.extraPath)
+        .filter(server => isChangedFile(cwd, changedFiles, server.filePath));
+    const agentFiles = (0, discoverAgentFiles_1.scanAgentFiles)({ cwd })
+        .filter(file => isChangedFile(cwd, changedFiles, file.filePath));
     const secrets = (0, discoverSecrets_1.scanSecrets)({ cwd, maxEnvDepth: 3 });
+    const secretFindings = secrets.findings
+        .filter(item => isChangedFile(cwd, changedFiles, item.filePath));
     const requireGateway = args.requireGateway !== 'false';
     const requiredControls = parseRequiredControls(args.requireApprovalFor);
     const findings = [];
@@ -197,10 +269,10 @@ function evaluateAgentGate(args) {
             title: `Risky agent instruction: ${file.title}`,
             detail: `${file.filePath} contains agent risk tags: ${file.riskTags.join(', ')}.`,
             filePath: file.filePath,
-            remediation: 'Review the instruction/rule and add explicit least-privilege boundaries.',
+            remediation: agentFileRemediation(file.riskTags),
         }));
     }
-    for (const secret of secrets.findings.filter(item => item.severity === 'critical' || item.severity === 'high')) {
+    for (const secret of secretFindings.filter(item => item.severity === 'critical' || item.severity === 'high')) {
         findings.push(finding({
             severity: secret.severity === 'critical' ? 'critical' : 'high',
             category: 'secret',

package/dist/index.js

@@ -265,6 +265,8 @@ function printHelp() {
     --require-gateway       agent-ci requires risky MCP servers to use FCD gateway
     --require-approval-for  agent-ci risky controls list, e.g. payment,delete,shell,secrets
     --require-upload        agent-ci fails if evidence cannot upload to AgentGuard UI
+    --changed-only          agent-ci limits findings to changed files
+    --changed-files <path>  file or comma/newline list of changed files for agent-ci
     --method <GET|POST>     Local endpoint method
     --request-format <fmt>  Local endpoint request format: custom or openai
     --auth-type <type>      none, bearer, basic, api-key
@@ -506,6 +508,8 @@ async function main() {
                 requireUpload: flags['require-upload'],
                 requireGateway: flags['require-gateway'],
                 requireApprovalFor: flags['require-approval-for'],
+                changedOnly: flags['changed-only'],
+                changedFiles: flags['changed-files'],
                 extraPath: flags.path,
                 apiKey: flags['api-key'],
                 apiUrl: flags['api-url'],

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.7.21"
+  "version": "1.7.22"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.7.21",
+  "version": "1.7.22",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {