metheus-governance-mcp-cli 0.2.43 → 0.2.45

package/cli.mjs

@@ -520,6 +520,10 @@ function isEditorInstallDirectory(candidatePath) {
   if (normalized.includes("\\appdata\\local\\programs\\microsoft vs code")) return true;
   if (normalized.includes("\\appdata\\local\\programs\\antigravity")) return true;
   if (normalized.includes("\\appdata\\local\\programs\\cursor")) return true;
+  if (normalized.includes("\\program files\\antigravity")) return true;
+  if (normalized.includes("\\program files (x86)\\antigravity")) return true;
+  if (normalized.includes("\\program files\\cursor")) return true;
+  if (normalized.includes("\\program files (x86)\\cursor")) return true;
   if (normalized.includes("\\program files\\microsoft vs code")) return true;
   if (normalized.includes("\\program files (x86)\\microsoft vs code")) return true;
   return false;
@@ -2755,11 +2759,11 @@ function syncCtxpackToLocalCache({
     ? metaPath
     : path.join(resolvedWorkspaceDir, CTXPACK_META_FILENAME);
 
-  if (!workspaceSignalTrusted && !isHomeFallback) {
+  if (!workspaceSignalTrusted) {
     return {
       sync_status: "guarded",
       sync_message:
-        "Workspace signal is missing in auto mode. Guardrail blocked ctxpack local write to avoid wrong folder sync.",
+        "Workspace signal is missing in auto mode. Guardrail blocked ctxpack local write.",
       local_path: cacheDir,
       workspace_path: resolvedWorkspaceDir,
       local_file_count: 0,
@@ -3638,6 +3642,17 @@ function shouldUseSafeToolAliasesForClient(initParamsRaw) {
   return name.includes("cursor") || name.includes("antigravity");
 }
 
+function canTrustProcessCwdForClient(clientNameRaw) {
+  const name = String(clientNameRaw || "").trim().toLowerCase();
+  if (!name) return false;
+  // Codex/Cursor/Antigravity can run MCP from app/install directories.
+  if (name.includes("codex")) return false;
+  if (name.includes("cursor")) return false;
+  if (name.includes("antigravity")) return false;
+  // CLI-style clients (e.g., Gemini/Claude Code) usually launch from active project cwd.
+  return name.includes("gemini") || name.includes("claude");
+}
+
 function displayToolNameForClient(canonicalName, useSafeToolAliases = false) {
   const canonical = String(canonicalName || "").trim();
   if (!canonical) return "";
@@ -4222,6 +4237,7 @@ async function runProxy(flags) {
   let sessionUseSafeToolAliases = false;
   let sessionToolAliasToCanonical = new Map();
   let sessionToolCanonicalToAlias = new Map();
+  let sessionClientName = "";
 
   // Proxy-initiated requests (e.g., roots/list) pending client responses.
   const pendingProxyRequests = new Map(); // id → callback(responseObj)
@@ -4353,8 +4369,13 @@ async function runProxy(flags) {
       return;
     }
 
-    if (isJsonRpcMethod(requestObj, "initialize") && shouldUseSafeToolAliasesForClient(requestObj?.params)) {
-      sessionUseSafeToolAliases = true;
+    if (isJsonRpcMethod(requestObj, "initialize")) {
+      const initParams = safeObject(requestObj?.params);
+      const initClientInfo = safeObject(initParams.clientInfo);
+      sessionClientName = String(initClientInfo.name || "").trim().toLowerCase();
+      if (shouldUseSafeToolAliasesForClient(initParams)) {
+        sessionUseSafeToolAliases = true;
+      }
     }
     if (sessionUseSafeToolAliases) {
       requestObj = rewriteAliasedToolCallToCanonical(requestObj, sessionToolAliasToCanonical);
@@ -4374,16 +4395,22 @@ async function runProxy(flags) {
         sessionWorkspaceDir = strongRequestWorkspaceCandidate;
         sessionWorkspaceTrusted = true;
       } else if (weakRequestWorkspaceCandidate) {
-        sessionWorkspaceDir = weakRequestWorkspaceCandidate;
+        // Keep trusted session workspace (e.g., roots/list) stable against weak per-request cwd noise.
+        if (!sessionWorkspaceTrusted || !sessionWorkspaceDir) {
+          sessionWorkspaceDir = weakRequestWorkspaceCandidate;
+        }
       } else if (weakEnvWorkspaceCandidate) {
         sessionWorkspaceDir = weakEnvWorkspaceCandidate;
       }
       if (!sessionWorkspaceDir) {
         const currentCwdCandidate = sanitizeWorkspaceCandidate(process.cwd());
-        if (currentCwdCandidate && !isHomeWorkspaceRoot(currentCwdCandidate)) {
+        if (
+          currentCwdCandidate &&
+          !isHomeWorkspaceRoot(currentCwdCandidate) &&
+          canTrustProcessCwdForClient(sessionClientName)
+        ) {
           sessionWorkspaceDir = currentCwdCandidate;
-          // VS Code forks (Antigravity, Cursor) set cwd to workspace folder
-          // when spawning MCP server processes, so treat plausible cwd as trusted.
+          // For selected clients, process cwd is a valid workspace signal.
           sessionWorkspaceTrusted = true;
         }
       }
@@ -4394,9 +4421,12 @@ async function runProxy(flags) {
         }
       }
     }
+    const hasWeakRequestWorkspaceSignal =
+      Boolean(weakRequestWorkspaceCandidate) && !isHomeWorkspaceRoot(weakRequestWorkspaceCandidate);
     const workspaceSignalTrusted =
       args.explicitPinnedWorkspace ||
       sessionWorkspaceTrusted ||
+      hasWeakRequestWorkspaceSignal ||
       Boolean(strongRequestWorkspaceCandidate || strongEnvWorkspaceCandidate);
     const requestWorkspaceDir = args.explicitPinnedWorkspace
       ? resolveWorkspaceDir(args.workspaceDir || process.cwd())
@@ -5155,13 +5185,9 @@ function runSetupInternal(flags, options = {}) {
       const transport = getRegisteredTransport(cliBin, context.serverName);
       if (transport) {
         const existingWorkspaceDir = extractWorkspaceDirArg(transport.args);
-        const existingEnv = safeObject(transport.env);
-        const existingWorkspaceEnv = String(existingEnv.METHEUS_WORKSPACE_DIR || "").trim();
         if (existingWorkspaceDir && !isAutoWorkspaceMode(existingWorkspaceDir)) {
           proxyArgsForRegister = withWorkspaceDirArg(proxyArgsForRegister, existingWorkspaceDir);
           workspaceEnvForRegister = "";
-        } else if (!workspaceEnvForRegister && existingWorkspaceEnv) {
-          workspaceEnvForRegister = resolveWorkspaceDir(existingWorkspaceEnv);
         }
       }
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "metheus-governance-mcp-cli",
-  "version": "0.2.43",
+  "version": "0.2.45",
   "description": "Metheus Governance MCP CLI (setup + stdio proxy)",
   "type": "module",
   "files": [