fullcourtdefense-cli 1.7.4 → 1.7.5

package/dist/commands/discover.js

@@ -511,6 +511,7 @@ async function upload(servers, host, clientCoverage, apiUrl, auth, connectorName
         } : undefined,
         secrets: extras?.secrets?.findings.slice(0, 100).map(sanitizeSecretForUpload),
         agentFiles: extras?.agentFiles?.slice(0, 100).map(sanitizeAgentFileForUpload),
+        scanScope: extras?.scanScope,
         servers: servers.map(s => ({
             serverName: s.serverName,
             command: s.command,
@@ -691,7 +692,30 @@ async function discoverCommand(args, config) {
         }, null, 2));
         return;
     }
-    const uploadExtras = { secrets, agentFiles, posture };
+    const home = os.homedir();
+    const uploadExtras = {
+        secrets,
+        agentFiles,
+        posture,
+        scanScope: {
+            surfaces: [...surfaces],
+            workingDirectory: cwd,
+            mcpConfigPaths: scanned.map(s => ({ ...s, exists: fs.existsSync(s.path) })),
+            included: [
+                `Current command folder: ${cwd}`,
+                'Known MCP/AI client config files for Cursor, Claude, Codex, Gemini, Windsurf, and VS Code',
+                `User-level AI rules, skills, hooks, and instruction files under ${home}`,
+                `Credential stores and shell history under ${home}`,
+                `Environment files under ${cwd}, ${path.join(home, 'dev')}, ${path.join(home, 'repos')}, ${path.join(home, 'projects')}, ${path.join(home, 'Documents')}, and ${path.join(home, 'code')}`,
+            ],
+            excluded: [
+                'Unrelated project folders outside the listed roots',
+                'Large/generated dependency and build folders such as node_modules, .git, dist, build, vendor, caches, and temp folders',
+                'Full disk contents, browser profiles, email/chat archives, binary files, and operating-system folders',
+            ],
+            note: 'Desktop posture is a targeted AI-development exposure scan, not a full-device forensic scan. Run the command from the project folder you want represented.',
+        },
+    };
     async function maybeUpload() {
         if (args.upload !== 'true')
             return;

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.7.4"
+  "version": "1.7.5"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.7.4",
+  "version": "1.7.5",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {