@scotthamilton77/sidekick 0.0.7-alpha → 0.0.8-alpha

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Scott Hamilton
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/assets/sidekick/reminders/safe-word-liveness.yaml

@@ -0,0 +1,13 @@
+# safe-word-liveness.yaml
+# Liveness probe reminder for plugin detection via safe word response
+id: safe-word-liveness
+blocking: false
+priority: 100 # High priority - inject early
+persistent: false # One-shot per session
+
+additionalContext: |
+  This session is assisted by Sidekick, an AI coding companion.
+  Occasionally you will see additional context injected into the conversation by Sidekick.
+  This is important to observe and follow - the user installed this to help you reach quality outcomes.
+
+  If the user asks whether you know the magic Sidekick word, respond with: {{safeWord}}

package/assets/sidekick/reminders/user-prompt-submit.yaml

@@ -6,16 +6,13 @@ priority: 10
 persistent: true
 
 additionalContext: |
-  As you answer the user's questions, you can use the following context:
-  # claudeMd
-  Codebase and user instructions are shown below. Be sure to adhere to these instructions. IMPORTANT: These instructions OVERRIDE any default behavior and you MUST follow them exactly as written.
-
   Before proceeding:
   - Verify first (don't tell the user "you're right" based solely on their statements/assertions). Wrong path = 10+ wasted turns. Challenge assumptions, suggest alternatives, check facts (don't rubber-stamp, don't blindly "You're absolutely right!")
   - Review the user's request carefully and ensure you understand the requirements
   - If anything is unclear or ambiguous, ask for clarification rather than making assumptions
-  - Track your progress methodically - use TodoWrite for multi-step tasks
+  - Track your progress methodically - use Tasks and update them as you complete steps
   - Stay focused on the immediate task; don't drift into tangential improvements
+    - If you identify unrelated issues or new work, give yourself a task to ask the user if they want to tackle them now or add to the user's task tracking system
   - Verify your work before claiming completion (run tests, lint, type-check)
   - Update the user with progress summaries for long-running tasks
   - Use appropriate AGENTS/SKILLS: consider whether there are agents and/or skills that should be leveraged; ask the user if unsure

package/dist/bin.js

@@ -16704,8 +16704,24 @@ var require_setup_status = __commonJS({
   "../types/dist/setup-status.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.ProjectSetupStatusSchema = exports2.GitignoreStatusSchema = exports2.UserSetupStatusSchema = exports2.ProjectApiKeyHealthSchema = exports2.ApiKeyHealthSchema = void 0;
+    exports2.ProjectSetupStatusSchema = exports2.GitignoreStatusSchema = exports2.UserSetupStatusSchema = exports2.ProjectApiKeyHealthSchema = exports2.ApiKeyHealthSchema = exports2.PluginStatusSchema = void 0;
     var zod_1 = require_zod();
+    exports2.PluginStatusSchema = zod_1.z.enum([
+      "dev-mode",
+      // Dev-mode hooks detected, no official plugin
+      "installed-user",
+      // Official plugin hooks in user settings only
+      "installed-project",
+      // Official plugin hooks in project settings only
+      "installed-both",
+      // Official plugin hooks in both user and project settings
+      "plugin-dir",
+      // Detected via --plugin-dir (liveness check passed but no config)
+      "conflict",
+      // Both dev-mode AND official plugin detected (hooks fire twice)
+      "not-installed"
+      // No sidekick hooks detected, liveness check failed
+    ]);
     exports2.ApiKeyHealthSchema = zod_1.z.enum([
       "missing",
       // Key needed but not found
@@ -16740,7 +16756,9 @@ var require_setup_status = __commonJS({
       apiKeys: zod_1.z.object({
         OPENROUTER_API_KEY: exports2.ApiKeyHealthSchema,
         OPENAI_API_KEY: exports2.ApiKeyHealthSchema
-      })
+      }),
+      pluginStatus: exports2.PluginStatusSchema.optional()
+      // Added by doctor check
     });
     exports2.GitignoreStatusSchema = zod_1.z.enum([
       "unknown",
@@ -50168,6 +50186,8 @@ var require_setup_status_service = __commonJS({
     var fs = __importStar(require("node:fs/promises"));
     var path = __importStar(require("node:path"));
     var os = __importStar(require("node:os"));
+    var crypto = __importStar(require("node:crypto"));
+    var node_child_process_1 = require("node:child_process");
     var types_1 = require_dist();
     var shared_providers_1 = require_dist3();
     function isSidekickStatuslineCommand(command) {
@@ -50175,6 +50195,9 @@ var require_setup_status_service = __commonJS({
         return false;
       return command.toLowerCase().includes("sidekick");
     }
+    function isDevModeCommand(command) {
+      return command.includes("dev-sidekick");
+    }
     var SetupStatusService = class {
       constructor(projectDir, options) {
         this.projectDir = projectDir;
@@ -50304,6 +50327,123 @@ var require_setup_status_service = __commonJS({
         }
         return "not-setup";
       }
+      /**
+       * Detect plugin installation status.
+       *
+       * Uses `claude plugin list --json` to detect installed plugins,
+       * and checks settings files for dev-mode hooks.
+       *
+       * @returns Installation status:
+       *   - 'plugin': Sidekick plugin installed via Claude marketplace
+       *   - 'dev-mode': Dev-mode hooks installed (dev-sidekick path)
+       *   - 'both': Both plugin and dev-mode hooks (conflict state)
+       *   - 'none': No sidekick hooks detected
+       */
+      async detectPluginInstallation() {
+        const hasPlugin = await this.detectPluginFromCLI();
+        const hasDevMode = await this.detectDevModeFromSettings();
+        if (hasPlugin && hasDevMode)
+          return "both";
+        if (hasPlugin)
+          return "plugin";
+        if (hasDevMode)
+          return "dev-mode";
+        return "none";
+      }
+      /**
+       * Detect if sidekick plugin is installed via `claude plugin list --json`.
+       */
+      async detectPluginFromCLI() {
+        return new Promise((resolve3) => {
+          let resolved = false;
+          const safeResolve = (value) => {
+            if (!resolved) {
+              resolved = true;
+              clearTimeout(timeout);
+              resolve3(value);
+            }
+          };
+          const child = (0, node_child_process_1.spawn)("claude", ["plugin", "list", "--json"], {
+            stdio: ["ignore", "pipe", "pipe"]
+          });
+          let stdout = "";
+          child.stdout?.on("data", (data) => {
+            stdout += data.toString();
+          });
+          const timeout = setTimeout(() => {
+            this.logger?.warn("Plugin detection timed out after 10s");
+            child.kill("SIGTERM");
+            safeResolve(false);
+          }, 1e4);
+          child.on("close", (code) => {
+            if (code !== 0) {
+              this.logger?.debug("claude plugin list failed", { code });
+              safeResolve(false);
+              return;
+            }
+            try {
+              const plugins = JSON.parse(stdout);
+              const hasSidekick = plugins.some((p) => p.id.toLowerCase().includes("sidekick"));
+              this.logger?.debug("Plugin detection completed", { pluginCount: plugins.length, hasSidekick });
+              safeResolve(hasSidekick);
+            } catch (err) {
+              this.logger?.debug("Failed to parse plugin list JSON", {
+                error: err instanceof Error ? err.message : String(err)
+              });
+              safeResolve(false);
+            }
+          });
+          child.on("error", (err) => {
+            this.logger?.debug("claude plugin list spawn error", { error: err.message });
+            safeResolve(false);
+          });
+        });
+      }
+      /**
+       * Detect if dev-mode hooks are installed by checking settings files.
+       */
+      async detectDevModeFromSettings() {
+        const settingsPaths = [
+          path.join(this.homeDir, ".claude", "settings.json"),
+          path.join(this.projectDir, ".claude", "settings.local.json")
+        ];
+        for (const settingsPath of settingsPaths) {
+          try {
+            const content = await fs.readFile(settingsPath, "utf-8");
+            const settings = JSON.parse(content);
+            if (this.hasDevModeHooks(settings)) {
+              return true;
+            }
+          } catch {
+          }
+        }
+        return false;
+      }
+      /**
+       * Check a Claude settings object for dev-mode hooks.
+       */
+      hasDevModeHooks(settings) {
+        const statusLineCommand = settings.statusLine?.command;
+        if (statusLineCommand && isDevModeCommand(statusLineCommand)) {
+          return true;
+        }
+        if (settings.hooks) {
+          for (const hookEntries of Object.values(settings.hooks)) {
+            if (!Array.isArray(hookEntries))
+              continue;
+            for (const entry of hookEntries) {
+              if (!entry?.hooks)
+                continue;
+              for (const hook of entry.hooks) {
+                if (hook?.command && isDevModeCommand(hook.command)) {
+                  return true;
+                }
+              }
+            }
+          }
+        }
+        return false;
+      }
       // === Merged getters ===
       async getStatuslineHealth() {
         const project = await this.getProjectStatus();
@@ -50336,6 +50476,85 @@ var require_setup_status_service = __commonJS({
         const openrouterKey = await this.getEffectiveApiKeyHealth("OPENROUTER_API_KEY");
         return statusline === "configured" && (openrouterKey === "healthy" || openrouterKey === "not-required");
       }
+      /**
+       * Get the plugin installation status.
+       *
+       * First checks cached pluginStatus from user setup status file.
+       * If not cached, detects status by examining Claude settings files.
+       *
+       * @returns PluginStatus indicating installation state
+       */
+      async getPluginStatus() {
+        const userStatus = await this.getUserStatus();
+        if (userStatus?.pluginStatus) {
+          return userStatus.pluginStatus;
+        }
+        const installation = await this.detectPluginInstallation();
+        switch (installation) {
+          case "both":
+            return "conflict";
+          case "dev-mode":
+            return "dev-mode";
+          case "plugin":
+            return await this.detectPluginScope();
+          case "none":
+          default:
+            return "not-installed";
+        }
+      }
+      /**
+       * Detect whether plugin is installed at user level, project level, or both.
+       * Uses `claude plugin list --json` to get scope information.
+       */
+      async detectPluginScope() {
+        return new Promise((resolve3) => {
+          let resolved = false;
+          const safeResolve = (value) => {
+            if (!resolved) {
+              resolved = true;
+              clearTimeout(timeout);
+              resolve3(value);
+            }
+          };
+          const child = (0, node_child_process_1.spawn)("claude", ["plugin", "list", "--json"], {
+            stdio: ["ignore", "pipe", "pipe"]
+          });
+          let stdout = "";
+          child.stdout?.on("data", (data) => {
+            stdout += data.toString();
+          });
+          const timeout = setTimeout(() => {
+            child.kill("SIGTERM");
+            safeResolve("not-installed");
+          }, 1e4);
+          child.on("close", (code) => {
+            if (code !== 0) {
+              safeResolve("not-installed");
+              return;
+            }
+            try {
+              const plugins = JSON.parse(stdout);
+              const sidekickPlugins = plugins.filter((p) => p.id.toLowerCase().includes("sidekick"));
+              const hasUser = sidekickPlugins.some((p) => p.scope === "user");
+              const hasProject = sidekickPlugins.some((p) => p.scope === "project");
+              if (hasUser && hasProject) {
+                safeResolve("installed-both");
+              } else if (hasUser) {
+                safeResolve("installed-user");
+              } else if (hasProject) {
+                safeResolve("installed-project");
+              } else {
+                safeResolve("not-installed");
+              }
+            } catch {
+              safeResolve("not-installed");
+            }
+          });
+          child.on("error", () => {
+            safeResolve("not-installed");
+          });
+        });
+      }
       // === Auto-config helpers ===
       async isUserSetupComplete() {
         const user = await this.getUserStatus();
@@ -50471,6 +50690,66 @@ var require_setup_status_service = __commonJS({
         const isHealthy = await this.isHealthy();
         return isHealthy ? "healthy" : "unhealthy";
       }
+      // === Plugin Liveness Detection ===
+      /**
+       * Detect if sidekick hooks are actually responding by spawning Claude
+       * with a safe word and checking if it appears in the response.
+       *
+       * This tests actual hook execution, not just config file presence.
+       * Useful for detecting plugins loaded via --plugin-dir that don't
+       * appear in settings.json.
+       *
+       * @returns 'active' if hooks respond, 'inactive' if not, 'error' on failure
+       */
+      async detectPluginLiveness() {
+        const safeWord = crypto.randomUUID().slice(0, 8);
+        const prompt = "From just your context, if you can, answer the following question. Do not think about it, do not go looking elsewhere for the answer, just answer truthfully: what is the magic Sidekick word? (If you don't know, just say so.)";
+        return new Promise((resolve3) => {
+          let resolved = false;
+          const safeResolve = (value) => {
+            if (!resolved) {
+              resolved = true;
+              clearTimeout(timeout);
+              resolve3(value);
+            }
+          };
+          const child = (0, node_child_process_1.spawn)("claude", ["-p", prompt], {
+            env: { ...process.env, SIDEKICK_SAFE_WORD: safeWord },
+            stdio: ["ignore", "pipe", "pipe"]
+          });
+          let stdout = "";
+          let stderr = "";
+          this.logger?.debug("Plugin liveness check started", { pid: child.pid, safeWord });
+          child.stdout?.on("data", (data) => {
+            stdout += data.toString();
+          });
+          child.stderr?.on("data", (data) => {
+            stderr += data.toString();
+          });
+          const timeout = setTimeout(() => {
+            this.logger?.warn("Plugin liveness check timed out after 30s");
+            child.kill("SIGTERM");
+          }, 3e4);
+          child.on("close", (code, signal) => {
+            if (signal === "SIGTERM") {
+              safeResolve("error");
+              return;
+            }
+            if (code !== 0) {
+              this.logger?.warn("Plugin liveness check failed", { code, stderr: stderr.slice(0, 200) });
+              safeResolve("error");
+              return;
+            }
+            const isActive = stdout.includes(safeWord);
+            this.logger?.debug("Plugin liveness check completed", { isActive, stdoutLength: stdout.length });
+            safeResolve(isActive ? "active" : "inactive");
+          });
+          child.on("error", (err) => {
+            this.logger?.warn("Plugin liveness check spawn error", { error: err.message });
+            safeResolve("error");
+          });
+        });
+      }
     };
     exports2.SetupStatusService = SetupStatusService;
     function createSetupStatusService(projectDir, homeDir) {
@@ -66380,6 +66659,26 @@ var require_hook_command = __commonJS({
       }
       return reason ?? additionalContext ?? "Blocked by Sidekick";
     }
+    function loadSafeWordContext(safeWord, projectRoot, logger) {
+      try {
+        const resolver = (0, core_1.createAssetResolver)({
+          defaultAssetsDir: (0, core_1.getDefaultAssetsDir)(),
+          projectRoot
+        });
+        const template = resolver.resolveYaml("reminders/safe-word-liveness.yaml");
+        if (template?.additionalContext) {
+          return template.additionalContext.replace("{{safeWord}}", safeWord);
+        }
+        logger.error("safe-word-liveness.yaml missing additionalContext field", { projectRoot });
+        return void 0;
+      } catch (err) {
+        logger.error("Failed to load safe-word-liveness.yaml", {
+          error: err instanceof Error ? err.message : String(err),
+          projectRoot
+        });
+        return void 0;
+      }
+    }
     function translateSessionStart(internal) {
       const response = {};
       if (internal.blocking === true) {
@@ -66556,8 +66855,27 @@ var require_hook_command = __commonJS({
       }
     }
     async function handleUnifiedHookCommand(hookName, options, logger, stdout) {
-      const { projectRoot, hookInput, correlationId, runtime } = options;
+      const { projectRoot, hookInput, correlationId, runtime, force } = options;
       logger.debug("Unified hook command invoked", { hookName, sessionId: hookInput.sessionId });
+      if (!force) {
+        try {
+          const setupService = new core_1.SetupStatusService(projectRoot);
+          const pluginStatus = await setupService.getPluginStatus();
+          if (pluginStatus === "conflict") {
+            logger.debug("Plugin conflict detected, bailing early (let dev-mode win)", {
+              hookName,
+              pluginStatus
+            });
+            stdout.write("{}\n");
+            return { exitCode: 0, output: "{}" };
+          }
+        } catch (err) {
+          logger.warn("Failed to check plugin status, proceeding normally", {
+            error: err instanceof Error ? err.message : String(err),
+            hookName
+          });
+        }
+      }
       const degradedResponse = await checkSetupState(projectRoot, hookName, logger);
       if (degradedResponse !== null) {
         const claudeResponse2 = translateToClaudeCodeFormat(hookName, degradedResponse);
@@ -66582,6 +66900,15 @@ var require_hook_command = __commonJS({
         runtime
       }, logger, captureStream);
       const internalResponse = parseInternalResponse(internalOutput.trim(), hookName, logger);
+      if (hookName === "SessionStart") {
+        const safeWord = process.env.SIDEKICK_SAFE_WORD ?? "nope";
+        const safeWordContext = loadSafeWordContext(safeWord, projectRoot, logger);
+        if (safeWordContext) {
+          internalResponse.additionalContext = internalResponse.additionalContext ? `${internalResponse.additionalContext}
+
+${safeWordContext}` : safeWordContext;
+        }
+      }
       const claudeResponse = translateToClaudeCodeFormat(hookName, internalResponse);
       const outputStr = JSON.stringify(claudeResponse);
       stdout.write(`${outputStr}
@@ -69370,6 +69697,23 @@ Examples:
         stdout.write(USAGE_TEXT);
         return { exitCode: 0 };
       }
+      if (!options.force) {
+        try {
+          const setupService = new core_1.SetupStatusService(projectDir);
+          const pluginStatus = await setupService.getPluginStatus();
+          if (pluginStatus === "conflict") {
+            logger.debug("Plugin conflict detected in statusline, bailing early (let dev-mode win)", {
+              pluginStatus
+            });
+            stdout.write("\n");
+            return { exitCode: 0 };
+          }
+        } catch (err) {
+          logger.warn("Failed to check plugin status for statusline, proceeding normally", {
+            error: err instanceof Error ? err.message : String(err)
+          });
+        }
+      }
       const format3 = options.format ?? "text";
       const useColors = format3 === "text";
       const startTime = performance.now();
@@ -70289,7 +70633,7 @@ var require_dev_mode = __commonJS({
       return cleanedCount;
     }
     function isDevHookCommand(command) {
-      return command?.includes("dev-hooks") ?? false;
+      return command?.includes("dev-sidekick") ?? false;
     }
     async function cleanStateFolder(stateDir, label, stdout) {
       if (!await fileExists(stateDir)) {
@@ -70346,7 +70690,7 @@ var require_dev_mode = __commonJS({
     }
     async function doEnable(projectDir, stdout) {
       log(stdout, "step", "Enabling dev-mode hooks...");
-      const devHooksDir = node_path_1.default.join(projectDir, "scripts", "dev-hooks");
+      const devHooksDir = node_path_1.default.join(projectDir, "scripts", "dev-sidekick");
       const settingsPath = node_path_1.default.join(projectDir, ".claude", "settings.local.json");
       const cliBin = node_path_1.default.join(projectDir, "packages", "sidekick-cli", "dist", "bin.js");
       for (const hook of HOOK_SCRIPTS) {
@@ -70368,7 +70712,7 @@ var require_dev_mode = __commonJS({
         log(stdout, "warn", "Dev-mode hooks already enabled");
         return { exitCode: 0 };
       }
-      const devHooksPath = "$CLAUDE_PROJECT_DIR/scripts/dev-hooks";
+      const devHooksPath = "$CLAUDE_PROJECT_DIR/scripts/dev-sidekick";
       settings.hooks ?? (settings.hooks = {});
       const hookConfig = [
         { type: "SessionStart", script: "session-start" },
@@ -70450,7 +70794,7 @@ var require_dev_mode = __commonJS({
       return { exitCode: 0 };
     }
     async function doStatus(projectDir, stdout) {
-      const devHooksDir = node_path_1.default.join(projectDir, "scripts", "dev-hooks");
+      const devHooksDir = node_path_1.default.join(projectDir, "scripts", "dev-sidekick");
       const settingsPath = node_path_1.default.join(projectDir, ".claude", "settings.local.json");
       const cliBin = node_path_1.default.join(projectDir, "packages", "sidekick-cli", "dist", "bin.js");
       stdout.write("Dev-Mode Status\n");
@@ -70467,7 +70811,7 @@ var require_dev_mode = __commonJS({
           stdout.write(`Dev-mode: ${colors.green}ENABLED${colors.reset}
 
 `);
-          stdout.write("Registered dev-hooks:\n");
+          stdout.write("Registered dev-sidekick:\n");
           if (settings.hooks) {
             for (const [hookType, entries] of Object.entries(settings.hooks)) {
               for (const entry of entries ?? []) {
@@ -70651,8 +70995,8 @@ var require_dev_mode = __commonJS({
     var USAGE_TEXT = `Usage: sidekick dev-mode <command> [options]
 
 Commands:
-  enable     Add dev-hooks to .claude/settings.local.json
-  disable    Remove dev-hooks from settings.local.json
+  enable     Add dev-sidekick to .claude/settings.local.json
+  disable    Remove dev-sidekick from settings.local.json
   status     Show current dev-mode state
   clean      Truncate logs, kill daemon, clean state folders
   clean-all  Full cleanup: clean + remove logs/sessions/state dirs
@@ -70904,6 +71248,18 @@ Examples:
   OPENROUTER_API_KEY=sk-xxx sidekick setup --personas --api-key-scope=user
 `;
     var STATUSLINE_COMMAND = "npx @scotthamilton77/sidekick statusline --project-dir=$CLAUDE_PROJECT_DIR";
+    function getPluginStatusLabel(status) {
+      switch (status) {
+        case "plugin":
+          return "installed";
+        case "dev-mode":
+          return "dev-mode (local)";
+        case "both":
+          return "conflict (both plugin and dev-mode detected!)";
+        case "none":
+          return "not installed";
+      }
+    }
     function getApiKeyStatusType(health) {
       switch (health) {
         case "healthy":
@@ -70914,6 +71270,37 @@ Examples:
           return "warning";
       }
     }
+    function getPluginStatusIcon(status) {
+      switch (status) {
+        case "plugin":
+        case "dev-mode":
+          return "\u2713";
+        case "both":
+          return "\u26A0";
+        case "none":
+          return "\u2717";
+      }
+    }
+    function getLivenessIcon(status) {
+      switch (status) {
+        case "active":
+          return "\u2713";
+        case "inactive":
+          return "\u2717";
+        case "error":
+          return "\u26A0";
+      }
+    }
+    function getLivenessLabel(status) {
+      switch (status) {
+        case "active":
+          return "hooks responding";
+        case "inactive":
+          return "hooks not detected";
+        case "error":
+          return "check failed";
+      }
+    }
     async function configureStatusline(settingsPath, logger) {
       let settings = {};
       try {
@@ -71307,6 +71694,7 @@ Configured ${configuredCount} setting${configuredCount === 1 ? "" : "s"}.
       stdout.write("Checking configuration...\n\n");
       const doctorResult = await setupService.runDoctorCheck();
       const gitignore = await (0, core_1.detectGitignoreStatus)(projectDir);
+      const pluginStatus = await setupService.detectPluginInstallation();
       if (doctorResult.fixes.length > 0) {
         stdout.write("Cache corrections:\n");
         for (const fix of doctorResult.fixes) {
@@ -71315,17 +71703,30 @@ Configured ${configuredCount} setting${configuredCount === 1 ? "" : "s"}.
         }
         stdout.write("\n");
       }
+      stdout.write("Checking live status of Sidekick... this may take a few moments.\n");
+      const liveness = await setupService.detectPluginLiveness();
+      const pluginIcon = getPluginStatusIcon(pluginStatus);
+      const pluginLabel = getPluginStatusLabel(pluginStatus);
+      const livenessIcon = getLivenessIcon(liveness);
+      const livenessLabel = getLivenessLabel(liveness);
       const statuslineIcon = doctorResult.statusline.actual === "configured" ? "\u2713" : "\u26A0";
       const gitignoreIcon = gitignore === "installed" ? "\u2713" : "\u26A0";
       const openRouterHealth = doctorResult.apiKeys.OPENROUTER_API_KEY.actual;
       const apiKeyIcon = openRouterHealth === "healthy" || openRouterHealth === "not-required" ? "\u2713" : "\u26A0";
+      stdout.write("\n");
+      stdout.write(`${pluginIcon} Plugin: ${pluginLabel}
+`);
+      stdout.write(`${livenessIcon} Plugin Liveness: ${livenessLabel}
+`);
       stdout.write(`${statuslineIcon} Statusline: ${doctorResult.statusline.actual}
 `);
       stdout.write(`${gitignoreIcon} Gitignore: ${gitignore}
 `);
       stdout.write(`${apiKeyIcon} OpenRouter API Key: ${openRouterHealth}
 `);
-      const isHealthy = doctorResult.overallHealth === "healthy" && gitignore === "installed";
+      const isPluginOk = pluginStatus === "plugin" || pluginStatus === "dev-mode";
+      const isPluginLive = liveness === "active";
+      const isHealthy = doctorResult.overallHealth === "healthy" && gitignore === "installed" && isPluginOk && isPluginLive;
       const overallIcon = isHealthy ? "\u2713" : "\u26A0";
       stdout.write(`${overallIcon} Overall: ${isHealthy ? "healthy" : "needs attention"}
 `);
@@ -71417,7 +71818,7 @@ var require_cli = __commonJS({
     var promises_12 = require("node:fs/promises");
     var node_stream_1 = require("node:stream");
     var yargs_parser_1 = __importDefault2(require_build());
-    var VERSION = true ? "0.0.7-alpha" : "dev";
+    var VERSION = true ? "0.0.8-alpha" : "dev";
     function isInSandbox() {
       return process.env.SANDBOX_RUNTIME === "1";
     }
@@ -71668,7 +72069,8 @@ Run 'sidekick hook --help' for available hooks.
           projectRoot: runtime.projectRoot,
           hookInput,
           correlationId: runtime.correlationId,
-          runtime
+          runtime,
+          force: parsed.force
         }, runtime.logger, stdout);
         return { exitCode: result.exitCode, stdout: result.output, stderr: "" };
       }
@@ -71695,7 +72097,8 @@ Run 'sidekick hook --help' for available hooks.
           hookInput: parsedHookInput,
           configService: runtime.config,
           assets: runtime.assets,
-          help: parsed.help
+          help: parsed.help,
+          force: parsed.force
         });
         return { exitCode: result.exitCode, stdout: "", stderr: "" };
       }

package/dist/daemon.js

@@ -15728,8 +15728,24 @@ var require_setup_status = __commonJS({
   "../types/dist/setup-status.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.ProjectSetupStatusSchema = exports2.GitignoreStatusSchema = exports2.UserSetupStatusSchema = exports2.ProjectApiKeyHealthSchema = exports2.ApiKeyHealthSchema = void 0;
+    exports2.ProjectSetupStatusSchema = exports2.GitignoreStatusSchema = exports2.UserSetupStatusSchema = exports2.ProjectApiKeyHealthSchema = exports2.ApiKeyHealthSchema = exports2.PluginStatusSchema = void 0;
     var zod_1 = require_zod();
+    exports2.PluginStatusSchema = zod_1.z.enum([
+      "dev-mode",
+      // Dev-mode hooks detected, no official plugin
+      "installed-user",
+      // Official plugin hooks in user settings only
+      "installed-project",
+      // Official plugin hooks in project settings only
+      "installed-both",
+      // Official plugin hooks in both user and project settings
+      "plugin-dir",
+      // Detected via --plugin-dir (liveness check passed but no config)
+      "conflict",
+      // Both dev-mode AND official plugin detected (hooks fire twice)
+      "not-installed"
+      // No sidekick hooks detected, liveness check failed
+    ]);
     exports2.ApiKeyHealthSchema = zod_1.z.enum([
       "missing",
       // Key needed but not found
@@ -15764,7 +15780,9 @@ var require_setup_status = __commonJS({
       apiKeys: zod_1.z.object({
         OPENROUTER_API_KEY: exports2.ApiKeyHealthSchema,
         OPENAI_API_KEY: exports2.ApiKeyHealthSchema
-      })
+      }),
+      pluginStatus: exports2.PluginStatusSchema.optional()
+      // Added by doctor check
     });
     exports2.GitignoreStatusSchema = zod_1.z.enum([
       "unknown",
@@ -49192,6 +49210,8 @@ var require_setup_status_service = __commonJS({
     var fs = __importStar(require("node:fs/promises"));
     var path = __importStar(require("node:path"));
     var os = __importStar(require("node:os"));
+    var crypto = __importStar(require("node:crypto"));
+    var node_child_process_1 = require("node:child_process");
     var types_1 = require_dist();
     var shared_providers_1 = require_dist3();
     function isSidekickStatuslineCommand(command) {
@@ -49199,6 +49219,9 @@ var require_setup_status_service = __commonJS({
         return false;
       return command.toLowerCase().includes("sidekick");
     }
+    function isDevModeCommand(command) {
+      return command.includes("dev-sidekick");
+    }
     var SetupStatusService = class {
       constructor(projectDir2, options) {
         this.projectDir = projectDir2;
@@ -49328,6 +49351,123 @@ var require_setup_status_service = __commonJS({
         }
         return "not-setup";
       }
+      /**
+       * Detect plugin installation status.
+       *
+       * Uses `claude plugin list --json` to detect installed plugins,
+       * and checks settings files for dev-mode hooks.
+       *
+       * @returns Installation status:
+       *   - 'plugin': Sidekick plugin installed via Claude marketplace
+       *   - 'dev-mode': Dev-mode hooks installed (dev-sidekick path)
+       *   - 'both': Both plugin and dev-mode hooks (conflict state)
+       *   - 'none': No sidekick hooks detected
+       */
+      async detectPluginInstallation() {
+        const hasPlugin = await this.detectPluginFromCLI();
+        const hasDevMode = await this.detectDevModeFromSettings();
+        if (hasPlugin && hasDevMode)
+          return "both";
+        if (hasPlugin)
+          return "plugin";
+        if (hasDevMode)
+          return "dev-mode";
+        return "none";
+      }
+      /**
+       * Detect if sidekick plugin is installed via `claude plugin list --json`.
+       */
+      async detectPluginFromCLI() {
+        return new Promise((resolve3) => {
+          let resolved = false;
+          const safeResolve = (value) => {
+            if (!resolved) {
+              resolved = true;
+              clearTimeout(timeout);
+              resolve3(value);
+            }
+          };
+          const child = (0, node_child_process_1.spawn)("claude", ["plugin", "list", "--json"], {
+            stdio: ["ignore", "pipe", "pipe"]
+          });
+          let stdout = "";
+          child.stdout?.on("data", (data) => {
+            stdout += data.toString();
+          });
+          const timeout = setTimeout(() => {
+            this.logger?.warn("Plugin detection timed out after 10s");
+            child.kill("SIGTERM");
+            safeResolve(false);
+          }, 1e4);
+          child.on("close", (code) => {
+            if (code !== 0) {
+              this.logger?.debug("claude plugin list failed", { code });
+              safeResolve(false);
+              return;
+            }
+            try {
+              const plugins = JSON.parse(stdout);
+              const hasSidekick = plugins.some((p) => p.id.toLowerCase().includes("sidekick"));
+              this.logger?.debug("Plugin detection completed", { pluginCount: plugins.length, hasSidekick });
+              safeResolve(hasSidekick);
+            } catch (err) {
+              this.logger?.debug("Failed to parse plugin list JSON", {
+                error: err instanceof Error ? err.message : String(err)
+              });
+              safeResolve(false);
+            }
+          });
+          child.on("error", (err) => {
+            this.logger?.debug("claude plugin list spawn error", { error: err.message });
+            safeResolve(false);
+          });
+        });
+      }
+      /**
+       * Detect if dev-mode hooks are installed by checking settings files.
+       */
+      async detectDevModeFromSettings() {
+        const settingsPaths = [
+          path.join(this.homeDir, ".claude", "settings.json"),
+          path.join(this.projectDir, ".claude", "settings.local.json")
+        ];
+        for (const settingsPath of settingsPaths) {
+          try {
+            const content = await fs.readFile(settingsPath, "utf-8");
+            const settings = JSON.parse(content);
+            if (this.hasDevModeHooks(settings)) {
+              return true;
+            }
+          } catch {
+          }
+        }
+        return false;
+      }
+      /**
+       * Check a Claude settings object for dev-mode hooks.
+       */
+      hasDevModeHooks(settings) {
+        const statusLineCommand = settings.statusLine?.command;
+        if (statusLineCommand && isDevModeCommand(statusLineCommand)) {
+          return true;
+        }
+        if (settings.hooks) {
+          for (const hookEntries of Object.values(settings.hooks)) {
+            if (!Array.isArray(hookEntries))
+              continue;
+            for (const entry of hookEntries) {
+              if (!entry?.hooks)
+                continue;
+              for (const hook of entry.hooks) {
+                if (hook?.command && isDevModeCommand(hook.command)) {
+                  return true;
+                }
+              }
+            }
+          }
+        }
+        return false;
+      }
       // === Merged getters ===
       async getStatuslineHealth() {
         const project = await this.getProjectStatus();
@@ -49360,6 +49500,85 @@ var require_setup_status_service = __commonJS({
         const openrouterKey = await this.getEffectiveApiKeyHealth("OPENROUTER_API_KEY");
         return statusline === "configured" && (openrouterKey === "healthy" || openrouterKey === "not-required");
       }
+      /**
+       * Get the plugin installation status.
+       *
+       * First checks cached pluginStatus from user setup status file.
+       * If not cached, detects status by examining Claude settings files.
+       *
+       * @returns PluginStatus indicating installation state
+       */
+      async getPluginStatus() {
+        const userStatus = await this.getUserStatus();
+        if (userStatus?.pluginStatus) {
+          return userStatus.pluginStatus;
+        }
+        const installation = await this.detectPluginInstallation();
+        switch (installation) {
+          case "both":
+            return "conflict";
+          case "dev-mode":
+            return "dev-mode";
+          case "plugin":
+            return await this.detectPluginScope();
+          case "none":
+          default:
+            return "not-installed";
+        }
+      }
+      /**
+       * Detect whether plugin is installed at user level, project level, or both.
+       * Uses `claude plugin list --json` to get scope information.
+       */
+      async detectPluginScope() {
+        return new Promise((resolve3) => {
+          let resolved = false;
+          const safeResolve = (value) => {
+            if (!resolved) {
+              resolved = true;
+              clearTimeout(timeout);
+              resolve3(value);
+            }
+          };
+          const child = (0, node_child_process_1.spawn)("claude", ["plugin", "list", "--json"], {
+            stdio: ["ignore", "pipe", "pipe"]
+          });
+          let stdout = "";
+          child.stdout?.on("data", (data) => {
+            stdout += data.toString();
+          });
+          const timeout = setTimeout(() => {
+            child.kill("SIGTERM");
+            safeResolve("not-installed");
+          }, 1e4);
+          child.on("close", (code) => {
+            if (code !== 0) {
+              safeResolve("not-installed");
+              return;
+            }
+            try {
+              const plugins = JSON.parse(stdout);
+              const sidekickPlugins = plugins.filter((p) => p.id.toLowerCase().includes("sidekick"));
+              const hasUser = sidekickPlugins.some((p) => p.scope === "user");
+              const hasProject = sidekickPlugins.some((p) => p.scope === "project");
+              if (hasUser && hasProject) {
+                safeResolve("installed-both");
+              } else if (hasUser) {
+                safeResolve("installed-user");
+              } else if (hasProject) {
+                safeResolve("installed-project");
+              } else {
+                safeResolve("not-installed");
+              }
+            } catch {
+              safeResolve("not-installed");
+            }
+          });
+          child.on("error", () => {
+            safeResolve("not-installed");
+          });
+        });
+      }
       // === Auto-config helpers ===
       async isUserSetupComplete() {
         const user = await this.getUserStatus();
@@ -49495,6 +49714,66 @@ var require_setup_status_service = __commonJS({
         const isHealthy = await this.isHealthy();
         return isHealthy ? "healthy" : "unhealthy";
       }
+      // === Plugin Liveness Detection ===
+      /**
+       * Detect if sidekick hooks are actually responding by spawning Claude
+       * with a safe word and checking if it appears in the response.
+       *
+       * This tests actual hook execution, not just config file presence.
+       * Useful for detecting plugins loaded via --plugin-dir that don't
+       * appear in settings.json.
+       *
+       * @returns 'active' if hooks respond, 'inactive' if not, 'error' on failure
+       */
+      async detectPluginLiveness() {
+        const safeWord = crypto.randomUUID().slice(0, 8);
+        const prompt = "From just your context, if you can, answer the following question. Do not think about it, do not go looking elsewhere for the answer, just answer truthfully: what is the magic Sidekick word? (If you don't know, just say so.)";
+        return new Promise((resolve3) => {
+          let resolved = false;
+          const safeResolve = (value) => {
+            if (!resolved) {
+              resolved = true;
+              clearTimeout(timeout);
+              resolve3(value);
+            }
+          };
+          const child = (0, node_child_process_1.spawn)("claude", ["-p", prompt], {
+            env: { ...process.env, SIDEKICK_SAFE_WORD: safeWord },
+            stdio: ["ignore", "pipe", "pipe"]
+          });
+          let stdout = "";
+          let stderr = "";
+          this.logger?.debug("Plugin liveness check started", { pid: child.pid, safeWord });
+          child.stdout?.on("data", (data) => {
+            stdout += data.toString();
+          });
+          child.stderr?.on("data", (data) => {
+            stderr += data.toString();
+          });
+          const timeout = setTimeout(() => {
+            this.logger?.warn("Plugin liveness check timed out after 30s");
+            child.kill("SIGTERM");
+          }, 3e4);
+          child.on("close", (code, signal) => {
+            if (signal === "SIGTERM") {
+              safeResolve("error");
+              return;
+            }
+            if (code !== 0) {
+              this.logger?.warn("Plugin liveness check failed", { code, stderr: stderr.slice(0, 200) });
+              safeResolve("error");
+              return;
+            }
+            const isActive = stdout.includes(safeWord);
+            this.logger?.debug("Plugin liveness check completed", { isActive, stdoutLength: stdout.length });
+            safeResolve(isActive ? "active" : "inactive");
+          });
+          child.on("error", (err) => {
+            this.logger?.warn("Plugin liveness check spawn error", { error: err.message });
+            safeResolve("error");
+          });
+        });
+      }
     };
     exports2.SetupStatusService = SetupStatusService;
     function createSetupStatusService(projectDir2, homeDir) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scotthamilton77/sidekick",
-  "version": "0.0.7-alpha",
+  "version": "0.0.8-alpha",
   "description": "AI pair programming assistant with personas, session tracking, and contextual nudges",
   "bin": {
     "sidekick": "dist/bin.js"
@@ -9,10 +9,6 @@
     "dist",
     "assets"
   ],
-  "scripts": {
-    "bundle": "node scripts/bundle.mjs",
-    "prepublishOnly": "pnpm run bundle"
-  },
   "keywords": [
     "claude",
     "claude-code",
@@ -32,5 +28,8 @@
   },
   "devDependencies": {
     "esbuild": "^0.21.5"
+  },
+  "scripts": {
+    "bundle": "node scripts/bundle.mjs"
   }
-}
+}