metheus-governance-mcp-cli 0.2.44 → 0.2.45

package/cli.mjs

@@ -520,6 +520,10 @@ function isEditorInstallDirectory(candidatePath) {
   if (normalized.includes("\\appdata\\local\\programs\\microsoft vs code")) return true;
   if (normalized.includes("\\appdata\\local\\programs\\antigravity")) return true;
   if (normalized.includes("\\appdata\\local\\programs\\cursor")) return true;
+  if (normalized.includes("\\program files\\antigravity")) return true;
+  if (normalized.includes("\\program files (x86)\\antigravity")) return true;
+  if (normalized.includes("\\program files\\cursor")) return true;
+  if (normalized.includes("\\program files (x86)\\cursor")) return true;
   if (normalized.includes("\\program files\\microsoft vs code")) return true;
   if (normalized.includes("\\program files (x86)\\microsoft vs code")) return true;
   return false;
@@ -3641,10 +3645,12 @@ function shouldUseSafeToolAliasesForClient(initParamsRaw) {
 function canTrustProcessCwdForClient(clientNameRaw) {
   const name = String(clientNameRaw || "").trim().toLowerCase();
   if (!name) return false;
-  // Codex app-server may not pass workspace signals reliably; never trust bare process.cwd().
+  // Codex/Cursor/Antigravity can run MCP from app/install directories.
   if (name.includes("codex")) return false;
-  // VS Code forks generally spawn MCP in active workspace folder.
-  return name.includes("cursor") || name.includes("antigravity");
+  if (name.includes("cursor")) return false;
+  if (name.includes("antigravity")) return false;
+  // CLI-style clients (e.g., Gemini/Claude Code) usually launch from active project cwd.
+  return name.includes("gemini") || name.includes("claude");
 }
 
 function displayToolNameForClient(canonicalName, useSafeToolAliases = false) {
@@ -4389,7 +4395,10 @@ async function runProxy(flags) {
         sessionWorkspaceDir = strongRequestWorkspaceCandidate;
         sessionWorkspaceTrusted = true;
       } else if (weakRequestWorkspaceCandidate) {
-        sessionWorkspaceDir = weakRequestWorkspaceCandidate;
+        // Keep trusted session workspace (e.g., roots/list) stable against weak per-request cwd noise.
+        if (!sessionWorkspaceTrusted || !sessionWorkspaceDir) {
+          sessionWorkspaceDir = weakRequestWorkspaceCandidate;
+        }
       } else if (weakEnvWorkspaceCandidate) {
         sessionWorkspaceDir = weakEnvWorkspaceCandidate;
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "metheus-governance-mcp-cli",
-  "version": "0.2.44",
+  "version": "0.2.45",
   "description": "Metheus Governance MCP CLI (setup + stdio proxy)",
   "type": "module",
   "files": [