fullcourtdefense-cli 1.7.6 → 1.7.7

package/dist/commands/local-scan.js

@@ -1011,6 +1011,13 @@ function compactScanHtml(args) {
     .resultMetric span { font-size: 16px; font-weight: 800; color: #0f172a; }
     .resultMeta { margin-top: 10px; color: #334155; font-size: 12px; line-height: 1.5; }
     .resultMeta a { color: #1d4ed8; }
+    .mcpBanner { margin-top: 10px; border-radius: 14px; padding: 12px; font-size: 13px; line-height: 1.45; }
+    .mcpBanner.ok { border: 1px solid #bbf7d0; background: #f0fdf4; color: #166534; }
+    .mcpBanner.blocked { border: 1px solid #fecaca; background: #fef2f2; color: #991b1b; }
+    .mcpCards { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: 10px; margin-top: 10px; }
+    .mcpCard { border: 1px solid #e2e8f0; background: white; border-radius: 12px; padding: 10px; }
+    .mcpCard b { display: block; color: #64748b; font-size: 11px; text-transform: uppercase; letter-spacing: .05em; margin-bottom: 4px; }
+    .mcpCard span { color: #0f172a; font-size: 13px; font-weight: 750; overflow-wrap: anywhere; }
     .localTable { width: 100%; border-collapse: collapse; margin-top: 10px; font-size: 12px; overflow: hidden; border-radius: 12px; }
     .localTable th, .localTable td { border-bottom: 1px solid #e2e8f0; padding: 8px; text-align: left; vertical-align: top; }
     .localTable th { color: #475569; background: #f8fafc; font-size: 11px; text-transform: uppercase; letter-spacing: .05em; }
@@ -1411,19 +1418,68 @@ Full uses the full web attack corpus bundled with the CLI.</pre>
       if (value && Array.isArray(value.results)) return value.results;
       return null;
     }
+    function mcpText(value) {
+      if (value == null) return '';
+      if (typeof value === 'string') return value;
+      if (typeof value === 'number' || typeof value === 'boolean') return String(value);
+      const content = value.content;
+      if (Array.isArray(content)) {
+        return content
+          .map(item => item && typeof item.text === 'string' ? item.text : '')
+          .filter(Boolean)
+          .join('\\n');
+      }
+      return '';
+    }
+    function mcpObject(value) {
+      if (!value || typeof value !== 'object' || Array.isArray(value)) return null;
+      const contentText = mcpText(value);
+      if (contentText) {
+        try {
+          const parsed = JSON.parse(contentText);
+          if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) return parsed;
+        } catch {}
+      }
+      if (value.data && typeof value.data === 'object' && !Array.isArray(value.data)) return value.data;
+      if (value.result && typeof value.result === 'object' && !Array.isArray(value.result)) return value.result;
+      return value;
+    }
+    function cellValue(value) {
+      if (value == null) return '';
+      if (typeof value === 'object') return JSON.stringify(value);
+      return String(value);
+    }
+    function renderObjectCards(obj) {
+      const preferred = ['id', 'customerId', 'name', 'title', 'status', 'plan', 'email', 'decision', 'matchedPolicy', 'reason', 'ok'];
+      const keys = Array.from(new Set([...preferred.filter(k => Object.prototype.hasOwnProperty.call(obj, k)), ...Object.keys(obj)])).slice(0, 12);
+      return '<div class="mcpCards">' + keys.map(k => '<div class="mcpCard"><b>' + htmlEscape(k) + '</b><span>' + htmlEscape(cellValue(obj[k])) + '</span></div>').join('') + '</div>';
+    }
+    function renderMcpTable(rows) {
+      const preferred = ['id', 'customerId', 'name', 'title', 'status', 'plan', 'email', 'createdAt', 'updatedAt'];
+      const keys = Array.from(new Set([...preferred.filter(k => rows.some(row => row && Object.prototype.hasOwnProperty.call(row, k))), ...rows.flatMap(row => Object.keys(row || {}))])).slice(0, 10);
+      return '<table class="localTable"><thead><tr>' + keys.map(k => '<th>' + htmlEscape(k) + '</th>').join('') + '</tr></thead><tbody>' +
+        rows.slice(0, 50).map(row => '<tr>' + keys.map(k => '<td>' + htmlEscape(cellValue(row[k])) + '</td>').join('') + '</tr>').join('') +
+        '</tbody></table>' +
+        (rows.length > 50 ? '<div class="resultMeta">Showing first 50 rows. Full result is in raw JSON below.</div>' : '');
+    }
     function renderMcpResult(data) {
       byId('mcpResultCard').classList.remove('hidden');
-      byId('mcpResultStatus').textContent = data.success ? 'ALLOW / RESULT' : 'ERROR / BLOCK';
+      byId('mcpResultStatus').textContent = data.blocked ? 'BLOCKED' : data.success ? 'ALLOW / RESULT' : 'ERROR';
       byId('mcpResultStatus').className = data.success ? 'statusTag pass' : 'statusTag fail';
       byId('mcpResultJson').value = JSON.stringify(data, null, 2);
       const rows = data.success ? mcpRows(data.result) : null;
       if (rows && rows.length && rows.every(row => row && typeof row === 'object' && !Array.isArray(row))) {
-        const keys = Array.from(new Set(rows.flatMap(row => Object.keys(row)))).slice(0, 8);
-        byId('mcpResultTable').innerHTML = '<table class="localTable"><thead><tr>' + keys.map(k => '<th>' + htmlEscape(k) + '</th>').join('') + '</tr></thead><tbody>' +
-          rows.slice(0, 25).map(row => '<tr>' + keys.map(k => '<td>' + htmlEscape(typeof row[k] === 'object' ? JSON.stringify(row[k]) : String(row[k] ?? '')) + '</td>').join('') + '</tr>').join('') +
-          '</tbody></table>';
+        byId('mcpResultTable').innerHTML = '<div class="mcpBanner ok"><b>Allowed.</b> Tool returned ' + rows.length + ' row(s).</div>' + renderMcpTable(rows);
+      } else if (data.success) {
+        const obj = mcpObject(data.result);
+        const text = mcpText(data.result);
+        byId('mcpResultTable').innerHTML = '<div class="mcpBanner ok"><b>Allowed.</b> Tool call completed through the configured MCP server/proxy.</div>' +
+          (obj ? renderObjectCards(obj) : '<div class="resultMeta">' + htmlEscape(text || 'Result is shown as raw JSON below.') + '</div>');
       } else {
-        byId('mcpResultTable').innerHTML = '<div class="resultMeta">' + (data.success ? 'Result is shown as copyable JSON below.' : htmlEscape(data.error || 'MCP call failed.')) + '</div>';
+        const blockedCopy = data.blocked
+          ? 'Blocked because a FullCourtDefense policy or local safety rule is defined for this tool/action.'
+          : 'The MCP call failed before a successful tool result was returned.';
+        byId('mcpResultTable').innerHTML = '<div class="mcpBanner blocked"><b>' + (data.blocked ? 'Blocked by policy.' : 'MCP error.') + '</b> ' + htmlEscape(blockedCopy) + '<br/><span>' + htmlEscape(data.reason || data.error || 'No reason returned.') + '</span></div>';
       }
     }
     byId('copyMcpResult').onclick = async () => {
@@ -1585,6 +1641,34 @@ function createMcpClient(options) {
         return new HttpMcpClient(options);
     return new StdioMcpClient(options.command || '', options.args || []);
 }
+function parseMcpErrorResult(result) {
+    if (!result || typeof result !== 'object' || !result.isError)
+        return null;
+    const content = result.content;
+    const text = Array.isArray(content)
+        ? content.map(item => item && typeof item === 'object' && typeof item.text === 'string' ? item.text : '').filter(Boolean).join('\n')
+        : '';
+    if (text) {
+        try {
+            const parsed = JSON.parse(text);
+            if (parsed && typeof parsed === 'object') {
+                return {
+                    blocked: parsed.blocked === true || /policy|blocked|approval/i.test(text),
+                    reason: typeof parsed.reason === 'string' ? parsed.reason : text,
+                    details: parsed,
+                };
+            }
+        }
+        catch {
+            // plain-text MCP error
+        }
+    }
+    return {
+        blocked: /policy|blocked|approval|not allowed|denied/i.test(text),
+        reason: text || 'The MCP server returned an error result.',
+        details: result,
+    };
+}
 async function runMcpToolFromBrowser(body) {
     const rawUrl = typeof body.mcpUrl === 'string' ? body.mcpUrl.trim() : '';
     const rawCommand = typeof body.mcpCommand === 'string' ? body.mcpCommand.trim() : '';
@@ -1612,6 +1696,20 @@ async function runMcpToolFromBrowser(body) {
     try {
         await client.initialize();
         const result = await client.callTool(toolName, toolArgs);
+        const errorResult = parseMcpErrorResult(result);
+        if (errorResult) {
+            return {
+                success: false,
+                blocked: errorResult.blocked,
+                toolName,
+                transport,
+                destination: rawUrl || `${rawCommand} ${options.args?.join(' ') || ''}`.trim(),
+                elapsedMs: Date.now() - startedAt,
+                reason: errorResult.reason,
+                result,
+                details: errorResult.details,
+            };
+        }
         return {
             success: true,
             toolName,
@@ -1624,10 +1722,12 @@ async function runMcpToolFromBrowser(body) {
     catch (error) {
         return {
             success: false,
+            blocked: /policy|blocked|approval|not allowed|denied/i.test(error instanceof Error ? error.message : String(error)),
             toolName,
             transport,
             destination: rawUrl || `${rawCommand} ${options.args?.join(' ') || ''}`.trim(),
             elapsedMs: Date.now() - startedAt,
+            reason: error instanceof Error ? error.message : String(error),
             error: error instanceof Error ? error.message : String(error),
         };
     }

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.7.6"
+  "version": "1.7.7"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.7.6",
+  "version": "1.7.7",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {