fullcourtdefense-cli 1.7.9 → 1.7.11

package/dist/commands/discoverBlastRadius.js

@@ -73,7 +73,7 @@ function computeBlastRadius(input) {
             id: 'no_gateway_coverage',
             severity: 'high',
             title: 'No gateway on any AI client',
-            detail: `${clientsWithMcp.length} AI client(s) have MCP configured but no FCD gateway or Cursor hooks.`,
+            detail: `${clientsWithMcp.length} AI client(s) have MCP configured but no FCD gateway or runtime hooks.`,
         });
     }
     if (countDirect(mcpServers, 'critical') >= 2) {
@@ -106,7 +106,7 @@ function computeBlastRadius(input) {
             id: 'rich_instructions_no_hooks',
             severity: 'medium',
             title: 'Many instruction files, no runtime hooks',
-            detail: `${agentFiles.length} agent instruction/skill files found but Cursor hooks are not installed.`,
+            detail: `${agentFiles.length} agent instruction/skill files found but runtime hooks are not installed.`,
         });
     }
     let score = 100;

package/dist/commands/hook.js

@@ -504,7 +504,7 @@ async function enforceActionPolicy(ctx) {
                 agentName: agentNameForCall(event, payload),
                 toolName: call.toolName,
                 toolArgs: call.toolArgs,
-                argsSummary: summarizeToolCall(call.toolName, call.toolArgs),
+                argsSummary: call.toolArgs,
                 sessionId: sessionId(payload),
                 source: 'cursor_hook',
                 ...(event === 'mcp' && mcpServerName(payload) ? { mcpServer: mcpServerName(payload) } : {}),

package/dist/commands/installAll.js

@@ -26,7 +26,7 @@ async function installAllCommand(args, config) {
         clients: args.clients || 'all',
     };
     console.log('\n\x1b[1m\x1b[36mFullCourtDefense — install all AI clients\x1b[0m');
-    console.log('\x1b[2mAuto-protect existing MCP servers + Cursor action hooks. No --mcp-command or folder path needed.\x1b[0m\n');
+    console.log('\x1b[2mAuto-protect MCP servers across AI clients + Cursor built-in action hooks. No --mcp-command or folder path needed.\x1b[0m\n');
     await (0, mcpGateway_1.protectAllCommand)(gatewayArgs, config);
     if (args.hooks !== 'false') {
         console.log('\n\x1b[1mInstalling Cursor runtime hooks…\x1b[0m');

package/dist/commands/local-scan.js

@@ -1095,7 +1095,11 @@ function compactScanHtml(args) {
     .eyebrow { color: #1d4ed8; font-size: 12px; font-weight: 900; letter-spacing: .08em; text-transform: uppercase; }
     h1 { margin: 6px 0 8px; font-size: 26px; line-height: 1.15; }
     p { color: #475569; line-height: 1.55; }
-    .grid { display: grid; grid-template-columns: repeat(5, minmax(0, 1fr)); gap: 12px; margin-top: 18px; }
+    .grid { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: 12px; }
+    .menuShell { display: grid; grid-template-columns: minmax(180px, 1fr) minmax(0, 3fr) minmax(160px, .85fr); gap: 14px; margin-top: 18px; align-items: stretch; }
+    .menuGroup { border: 1px solid #dbeafe; background: rgba(255,255,255,.7); border-radius: 20px; padding: 12px; }
+    .menuGroup.run { border-color: #bbf7d0; background: #f0fdf4; }
+    .menuLabel { color: #475569; font-size: 11px; font-weight: 900; letter-spacing: .08em; text-transform: uppercase; margin: 0 0 9px; }
     .steps { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: 10px; margin-top: 18px; }
     .step { border: 1px solid #e2e8f0; background: white; color: #64748b; border-radius: 16px; padding: 12px; font-size: 12px; font-weight: 900; }
     .step.active { border-color: #2563eb; background: #eff6ff; color: #1d4ed8; }
@@ -1146,15 +1150,15 @@ function compactScanHtml(args) {
     .localTable th { color: #475569; background: #f8fafc; font-size: 11px; text-transform: uppercase; letter-spacing: .05em; }
     .copyBox { margin-top: 10px; }
     .hidden { display: none; }
-    @media (max-width: 800px) { .grid, .two { grid-template-columns: 1fr; } }
+    @media (max-width: 800px) { .grid, .two, .menuShell { grid-template-columns: 1fr; } }
   </style>
 </head>
 <body>
   <main class="wrap">
     <section class="hero">
-      <div class="eyebrow">Local Runner</div>
-      <h1>Scan internal Endpoint, RAG, and MCP from inside your organization</h1>
-      <p>This compact browser UI is served by the CLI on 127.0.0.1. Targets stay private. Scan traffic runs locally, while Shield verdicts and saved reports go outbound to Full Court Defense.</p>
+      <div class="eyebrow">Local Web Console</div>
+      <h1>Run local MCP tools or scan internal AI targets</h1>
+      <p>This compact browser UI is served by the CLI on 127.0.0.1. One-off MCP tool runs stay local in this page. Red-team scans run locally too, while Shield verdicts and saved reports go outbound to Full Court Defense.</p>
       <div class="auth">
         <div class="eyebrow">${isConfigured ? 'Authenticated' : 'Authentication Required'}</div>
         <p id="authStatus">${isConfigured
@@ -1182,12 +1186,23 @@ function compactScanHtml(args) {
         <div class="step" id="step-dot-2">2. Select scan type</div>
         <div class="step" id="step-dot-3">3. Run red-team scan</div>
       </div>
-      <div class="grid" id="cards">
-        <button class="card active" data-target="runner"><b>Run MCP Tool</b><span>Direct local call through proxy</span></button>
-        <button class="card" data-target="endpoint"><b>Endpoint</b><span>Internal agent/chat API</span></button>
-        <button class="card" data-target="rag"><b>RAG</b><span>Retrieval URL or corpus path</span></button>
-        <button class="card" data-target="mcp"><b>MCP</b><span>Tool server via stdio or HTTP</span></button>
-        <button class="card" data-target="help"><b>Options</b><span>Same modes as web red-team scan</span></button>
+      <div class="menuShell" id="cards">
+        <div class="menuGroup run">
+          <div class="menuLabel">Run, not a scan</div>
+          <button class="card active" data-target="runner"><b>Run MCP Tool</b><span>Call one tool through a local MCP server or protected gateway.</span></button>
+        </div>
+        <div class="menuGroup">
+          <div class="menuLabel">Security scans</div>
+          <div class="grid">
+            <button class="card" data-target="endpoint"><b>Endpoint Scan</b><span>Red-team an internal agent/chat API.</span></button>
+            <button class="card" data-target="rag"><b>RAG Scan</b><span>Test retrieval URL or local corpus path.</span></button>
+            <button class="card" data-target="mcp"><b>MCP Scan</b><span>Scan tool responses and tool-abuse paths.</span></button>
+          </div>
+        </div>
+        <div class="menuGroup">
+          <div class="menuLabel">Help</div>
+          <button class="card" data-target="help"><b>Options</b><span>Modes, formats, and when to use each local workflow.</span></button>
+        </div>
       </div>
     </section>
 
@@ -1196,11 +1211,11 @@ function compactScanHtml(args) {
       <div class="sectionTitle">
         <div>
           <h2>Connect target</h2>
-          <div class="muted">Choose Endpoint, RAG, or MCP. This runs from inside your organization.</div>
+          <div class="muted">Choose Run MCP Tool for a single action, or choose a scan target for red-team testing.</div>
         </div>
       </div>
       <div id="runner-fields">
-        <div class="note">Run one MCP tool call from this machine. Use a protected proxy/gateway command or local MCP URL. Results stay local in this browser page.</div>
+        <div class="note">This is not a scan. It runs one MCP tool call from this machine. Use a protected proxy/gateway command to show policy decisions, or a direct local MCP server for raw tool testing.</div>
         <label>Saved/protected MCP server</label>
         <select id="runnerServer">
           <option value="">Manual connection...</option>
@@ -1282,7 +1297,7 @@ function compactScanHtml(args) {
       </div>
 
       <div id="help-fields" class="hidden">
-        <div class="note">Use Endpoint for internal chat APIs, RAG for retrieval/corpus injection checks, and MCP for tool output and tool-abuse red-team scans. Reports save back to the normal web report history when Shield key is configured.</div>
+        <div class="note">Use Run MCP Tool for one live tool call. Use Endpoint, RAG, or MCP Scan for red-team testing. Scan reports save back to the normal web report history when a Shield key is configured.</div>
       </div>
       <div class="actions" id="scanActions">
         <button class="secondary" id="command">Show CLI command</button>

package/dist/commands/login.js

@@ -57,5 +57,5 @@ async function loginCommand(args, config) {
     console.log(`  Mode:    ${result.mode} (monitor-first — no blocking until you enable enforcement)`);
     console.log(`  Config:  ${savedPath}`);
     console.log('');
-    console.log('Next: \x1b[1mfullcourtdefense install-all\x1b[0m to wrap your MCP clients and Cursor hooks.');
+    console.log('Next: \x1b[1mfullcourtdefense install-all\x1b[0m to wrap your MCP clients and install available runtime hooks.');
 }

package/dist/commands/mcpGateway.js

@@ -108,6 +108,7 @@ function normalizeAgentClient(value, fallback) {
         'claude-code': 'claude-code',
         'claude-desktop': 'claude-desktop',
         codex: 'codex',
+        codec: 'codex',
         'gemini-cli': 'gemini-cli',
         gemini: 'gemini-cli',
         windsurf: 'windsurf',
@@ -811,6 +812,7 @@ function parseClientList(value) {
         claude_desktop: 'claude-desktop',
         desktop: 'claude-desktop',
         codex: 'codex',
+        codec: 'codex',
         'gemini-cli': 'gemini-cli',
         gemini: 'gemini-cli',
         windsurf: 'windsurf',

package/dist/index.js

@@ -118,8 +118,8 @@ function printHelp() {
                 Shield ID, and Shield key to ~/.fullcourtdefense.yml.
     setup       Same as configure — manual fallback when not using fleet login.
     install-all One-click: protect existing MCP servers in every AI client and
-                install Cursor hooks for built-in Cursor actions. No folder path
-                or --mcp-command needed. Use --hooks false to skip Cursor hooks.
+                install available runtime hooks for built-in actions. No folder path
+                or --mcp-command needed. Use --hooks false to skip runtime hooks.
     install     Alias for install-all.
     scan        Runs the scan. Use --local for inside-organization scans.
     discover    Finds MCP servers, local secrets, agent rules/skills, and machine

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.7.9"
+  "version": "1.7.11"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.7.9",
+  "version": "1.7.11",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {