fullcourtdefense-cli 1.7.24 → 1.7.25

package/dist/commands/hook.js

@@ -393,6 +393,10 @@ function mcpServerName(p) {
  * `perServerAgentName`, so ONE per-agent policy matches the same server across every runtime.
  * The client is still reported separately as `agentClient` metadata for optional per-runtime
  * constraints. Non-MCP events keep the collapsed per-developer IDE-runtime identity.
+ *
+ * The IDE-runtime identity is MACHINE-FREE (`<client>-<username>`, e.g. `cursor-boazl`):
+ * safeIdentityPart strips the `@hostname` part, so the same user's IDE on two laptops is
+ * ONE agent. Machine attribution stays in the separate `machineName` metadata field.
  */
 function agentNameForCall(event, p, client = 'cursor') {
     if (event === 'mcp') {
@@ -400,7 +404,7 @@ function agentNameForCall(event, p, client = 'cursor') {
         if (server)
             return `${safeIdentityPart(developerId())}-${safeIdentityPart(server)}`;
     }
-    return `${client}-${developerId()}`;
+    return `${client}-${safeIdentityPart(developerId())}`;
 }
 /** Cursor conversation/session id when present, else a stable per-machine id. */
 function sessionId(p) {

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.7.24"
+  "version": "1.7.25"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.7.24",
+  "version": "1.7.25",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {