fullcourtdefense-cli 1.16.0 → 1.17.1

package/dist/commands/daemon.js

@@ -658,10 +658,13 @@ async function runDaemon(args, config) {
     const watched = refreshWatchTargets();
     log(`Watching ${watched} config file(s) across ${watchers.size} director${watchers.size === 1 ? 'y' : 'ies'}.`);
     await pollBundle();
-    await heartbeat();
     // One protective pass at startup so a machine that drifted while the daemon
-    // was down converges immediately.
+    // was down converges immediately. Runs BEFORE the first heartbeat: upgrades
+    // legitimately leave stale hook/wrap paths behind, and heartbeating first
+    // would report a false "damaged" state (and fire admin integrity alerts)
+    // for a condition the very next line repairs.
     await reprotect(['startup pass']);
+    await heartbeat();
     // Fresh machines have never uploaded an inventory (MSI/onboard defers the
     // initial discovery to keep setup fast), so the dashboard shows "Never" for
     // discovery + posture until the daily scheduled job fires — up to 24h later.

package/dist/commands/login.d.ts

@@ -3,6 +3,8 @@ export interface LoginArgs {
     /** Reusable, non-expiring fleet enrollment token (or FCD_ENROLL_TOKEN env). */
     token?: string;
     apiUrl?: string;
+    /** Admin-facing friendly machine name shown next to the hostname in the console. */
+    nickname?: string;
 }
 /**
  * `fullcourtdefense login` — zero-paste machine enrollment.

package/dist/commands/login.js

@@ -21,8 +21,11 @@ async function loginCommand(args, config) {
     }
     const identity = (0, machineIdentity_1.getMachineIdentity)();
     const shieldName = (0, machineIdentity_1.suggestedShieldName)(identity);
+    const nickname = (args.nickname || process.env.FCD_MACHINE_NICKNAME || '').trim().slice(0, 80) || undefined;
     console.log('\x1b[1mEnrolling this machine…\x1b[0m');
     console.log(`  Device:  ${identity.developerName}`);
+    if (nickname)
+        console.log(`  Name:    ${nickname}`);
     console.log(`  OS:      ${identity.osFriendly}`);
     console.log(`  Shield:  ${shieldName}`);
     const resp = await fetch(`${apiUrl}/api/cli/enroll`, {
@@ -39,6 +42,7 @@ async function loginCommand(args, config) {
             osFriendly: identity.osFriendly,
             platform: identity.platform,
             shieldName,
+            nickname,
         }),
     });
     const data = (await resp.json().catch(() => ({})));

package/dist/commands/onboard.d.ts

@@ -3,6 +3,8 @@ import { InstallAllArgs } from './installAll';
 export interface OnboardArgs extends InstallAllArgs {
     /** Fleet enrollment token (or FCD_ENROLL_TOKEN env). Optional when already enrolled. */
     token?: string;
+    /** Admin-facing friendly machine name (or FCD_MACHINE_NICKNAME env) shown in the console. */
+    nickname?: string;
     /** Continue a persisted onboarding transaction. */
     resume?: string;
     /** Re-run completed install steps to repair changed machine state. */

package/dist/commands/onboard.js

@@ -251,7 +251,7 @@ async function onboardCommand(args, config) {
         mark('enrollment', 'skipped', alreadyEnrolled ? 'would reuse existing per-machine Shield credentials' : 'would enroll with supplied token');
     }
     else if (token) {
-        await (0, login_1.loginCommand)({ token, apiUrl: args.apiUrl }, config);
+        await (0, login_1.loginCommand)({ token, apiUrl: args.apiUrl, nickname: args.nickname }, config);
         mark('enrollment', 'completed', 'machine enrolled');
     }
     else if (alreadyEnrolled) {

package/dist/index.js

@@ -506,6 +506,7 @@ async function main() {
             const args = {
                 token: flags.token || flags['enroll-token'],
                 apiUrl: flags['api-url'],
+                nickname: flags.nickname || flags['machine-name'],
             };
             await (0, login_1.loginCommand)(args, config);
             break;
@@ -646,6 +647,7 @@ async function main() {
             const args = {
                 ...buildInstallArgs(),
                 token: flags.token || flags['enroll-token'],
+                nickname: flags.nickname || flags['machine-name'],
                 hooks: flags.hooks,
                 discover: flags.discover,
                 autoProtect: flags['auto-protect'],

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.16.0"
+  "version": "1.17.1"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.16.0",
+  "version": "1.17.1",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {