fullcourtdefense-cli 1.21.12 → 1.21.13

package/dist/appDetection.d.ts

@@ -0,0 +1,8 @@
+/** Whether the Cursor IDE appears installed (app binaries or app data, not our hook file). */
+export declare function isCursorAppInstalled(): boolean;
+/**
+ * Whether any client of the Claude-format hook family appears installed:
+ * Claude Code, VS Code (Copilot agent mode), or GitHub Copilot CLI — one
+ * `~/.claude/settings.json` hook file covers all three.
+ */
+export declare function isClaudeFamilyAppInstalled(): boolean;

package/dist/appDetection.js

@@ -0,0 +1,107 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isCursorAppInstalled = isCursorAppInstalled;
+exports.isClaudeFamilyAppInstalled = isClaudeFamilyAppInstalled;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+/**
+ * Best-effort detection of whether the AI clients we hook are actually
+ * installed on this machine. Used to decide whether a missing hook is a
+ * protection FAILURE (app present, hook gone) or merely informational
+ * (nothing to hook — e.g. a VS Code-only machine without Claude).
+ *
+ * Deliberately does NOT use our own config artifacts (`~/.cursor/hooks.json`,
+ * `~/.claude/settings.json`) as evidence — the hook installers create those
+ * directories themselves, which would make every machine look like it has
+ * every app.
+ */
+function anyExists(candidates) {
+    for (const candidate of candidates) {
+        try {
+            if (fs.existsSync(candidate))
+                return true;
+        }
+        catch { /* unreadable path — treat as absent */ }
+    }
+    return false;
+}
+/** Whether the Cursor IDE appears installed (app binaries or app data, not our hook file). */
+function isCursorAppInstalled() {
+    const home = os.homedir();
+    const candidates = [
+        // Populated by the app itself (extensions, chats, state) — not by our installer.
+        path.join(home, '.cursor', 'extensions'),
+    ];
+    if (process.platform === 'win32') {
+        if (process.env.LOCALAPPDATA)
+            candidates.push(path.join(process.env.LOCALAPPDATA, 'Programs', 'cursor'));
+        if (process.env.APPDATA)
+            candidates.push(path.join(process.env.APPDATA, 'Cursor'));
+    }
+    else if (process.platform === 'darwin') {
+        candidates.push('/Applications/Cursor.app');
+        candidates.push(path.join(home, 'Library', 'Application Support', 'Cursor'));
+    }
+    else {
+        candidates.push(path.join(home, '.config', 'Cursor'));
+    }
+    return anyExists(candidates);
+}
+/**
+ * Whether any client of the Claude-format hook family appears installed:
+ * Claude Code, VS Code (Copilot agent mode), or GitHub Copilot CLI — one
+ * `~/.claude/settings.json` hook file covers all three.
+ */
+function isClaudeFamilyAppInstalled() {
+    const home = os.homedir();
+    const candidates = [
+        path.join(home, '.claude.json'), // Claude Code state file
+        path.join(home, '.claude', 'projects'), // Claude Code session data
+        path.join(home, '.copilot'), // GitHub Copilot CLI
+    ];
+    if (process.platform === 'win32') {
+        if (process.env.APPDATA)
+            candidates.push(path.join(process.env.APPDATA, 'Code'));
+    }
+    else if (process.platform === 'darwin') {
+        candidates.push(path.join(home, 'Library', 'Application Support', 'Code'));
+    }
+    else {
+        candidates.push(path.join(home, '.config', 'Code'));
+    }
+    return anyExists(candidates);
+}

package/dist/commands/doctor.js

@@ -13,7 +13,7 @@ async function doctorCommand(args, config) {
     const pingUrl = `${apiUrl}/api/health/ping`;
     const rootUrl = `${apiUrl}/`;
     console.log('');
-    console.log('BotGuard outbound diagnostic');
+    console.log('FullCourtDefense outbound diagnostic');
     console.log(`Target: ${apiUrl}`);
     console.log('');
     const started = Date.now();

package/dist/commands/hook.js

@@ -46,6 +46,13 @@ const localSafetySnapshot_1 = require("../localSafetySnapshot");
 const taintLedger_1 = require("./taintLedger");
 const notify_1 = require("../notify");
 const DEBUG_LOG = path.join(os.homedir(), '.fullcourtdefense-hook.log');
+/**
+ * Verbose diagnostics (FCD_HOOK_DEBUG=1) additionally log content previews
+ * (raw payload + prompt text snippets). Default logging keeps operational
+ * metadata only — user prompt content must never sit in a plaintext file on
+ * a customer laptop unless support explicitly opts in.
+ */
+const HOOK_DEBUG_VERBOSE = process.env.FCD_HOOK_DEBUG === '1';
 /** Append a diagnostic line so we can see exactly what Cursor invoked + the verdict. */
 function dbg(obj) {
     try {
@@ -552,7 +559,7 @@ async function hookCommand(args, config) {
         event = inferEvent(args.event, payload);
     }
     dbg({ phase: 'invoke', event, argEvent: args.event, format: hookFormat, client, pid: process.pid,
-        isTTY, rawLen: raw.length, rawPreview: raw.slice(0, 300), stdinErr, parseErr,
+        isTTY, rawLen: raw.length, ...(HOOK_DEBUG_VERBOSE ? { rawPreview: raw.slice(0, 300) } : {}), stdinErr, parseErr,
         argv: process.argv.slice(2), payloadKeys: Object.keys(payload) });
     // Emit the verdict in the shape THIS client expects, then exit.
     //   Cursor: beforeSubmitPrompt blocks via { continue: false }; execution hooks
@@ -644,7 +651,7 @@ async function hookCommand(args, config) {
     // --- Shield text analysis for prompts (developer chat) ---
     if (event === 'prompt') {
         const text = extractPromptText(payload).trim();
-        dbg({ phase: 'prompt_text', textLen: text.length, textPreview: text.slice(0, 300) });
+        dbg({ phase: 'prompt_text', textLen: text.length, ...(HOOK_DEBUG_VERBOSE ? { textPreview: text.slice(0, 300) } : {}) });
         if (!text)
             respond(false);
         // Record the developer's prompt so taint-tracking can later tell whether a

package/dist/commands/onboard.js

@@ -50,6 +50,7 @@ const posixShellGuard_1 = require("./posixShellGuard");
 const notify_1 = require("../notify");
 const daemon_1 = require("./daemon");
 const machineIdentity_1 = require("../machineIdentity");
+const appDetection_1 = require("../appDetection");
 const integrity_1 = require("../integrity");
 const telemetry_1 = require("../telemetry");
 const onboardingJournal_1 = require("./onboardingJournal");
@@ -123,12 +124,24 @@ function checkCursorHooks() {
     const hooksFile = path.join(os.homedir(), '.cursor', 'hooks.json');
     const text = readTextSafe(hooksFile);
     const ok = text.includes('fcd-managed') || /fullcourtdefense|botguard/i.test(text);
+    if (!ok && !(0, appDetection_1.isCursorAppInstalled)()) {
+        // Nothing to hook — a machine without Cursor must not fail onboarding.
+        return { label: 'Cursor runtime hooks', ok: true, optional: true, detail: 'Cursor is not installed on this machine — hooks install automatically when it is' };
+    }
     return { label: 'Cursor runtime hooks', ok, detail: ok ? hooksFile : 'not installed (install-cursor-hook)' };
 }
 function checkClaudeHooks() {
     const settingsFile = path.join(os.homedir(), '.claude', 'settings.json');
     const text = readTextSafe(settingsFile);
     const ok = /fullcourtdefense|fcd-managed|botguard/i.test(text);
+    if (!ok && !(0, appDetection_1.isClaudeFamilyAppInstalled)()) {
+        return {
+            label: 'Claude Code / VS Code / Copilot CLI hooks',
+            ok: true,
+            optional: true,
+            detail: 'no Claude Code / VS Code / Copilot CLI found on this machine — hooks install automatically when one is',
+        };
+    }
     return {
         label: 'Claude Code / VS Code / Copilot CLI hooks',
         ok,
@@ -213,6 +226,17 @@ async function onboardCommand(args, config) {
     };
     console.log(`\n${BOLD}\x1b[36mFullCourtDefense — machine onboarding${RESET}`);
     console.log(`${DIM}Connectivity -> enrollment -> protection -> verification. One command.${RESET}\n`);
+    // Onboarding is a persisted transaction: completed steps are reused on any
+    // re-run, so `--resume` is an explicit alias that also surfaces the journal.
+    const resume = args.resume === 'true' || args.resume === '';
+    if (resume) {
+        const previouslyCompleted = Object.entries(journal.steps)
+            .filter(([, step]) => step.status === 'completed')
+            .map(([name]) => name);
+        console.log(previouslyCompleted.length > 0
+            ? `${DIM}Resuming onboarding — reusing completed steps: ${previouslyCompleted.join(', ')} (journal: ${journalFile}).${RESET}\n`
+            : `${DIM}Resuming onboarding — no completed steps found in the journal; running from the start.${RESET}\n`);
+    }
     const creds = (0, config_1.resolveCliCredentials)(config, { apiUrl: args.apiUrl });
     const apiUrl = creds.apiUrl;
     const token = (args.token || process.env.FCD_ENROLL_TOKEN || '').trim();
@@ -419,7 +443,7 @@ async function onboardCommand(args, config) {
     const dashboard = (0, notify_1.consoleUrl)('/agent-security/users?view=desktop');
     console.log('');
     if (requiredFailures.length === 0) {
-        console.log(`${GREEN}${BOLD}This machine is protected.${RESET} It reports to your org's AI Fleet and enforces your policies (dangerous actions are blocked). An admin can switch it to monitor-only from the dashboard.`);
+        console.log(`${GREEN}${BOLD}This machine is protected.${RESET} It reports to your org's AI Fleet and enforces your policies in blocking mode — dangerous actions are stopped, not just logged.`);
         console.log(`${DIM}Fleet view: ${dashboard}${RESET}`);
         console.log(`${DIM}Restart your AI clients (Cursor, Claude, VS Code, …) so they pick up the wrapped configs.${RESET}`);
         mark('verification', 'completed');

package/dist/commands/uninstallAll.d.ts

@@ -0,0 +1,18 @@
+import { BotGuardConfig } from '../config';
+import { ProtectAllArgs } from './mcpGateway';
+export interface UninstallAllArgs extends ProtectAllArgs {
+    /** 'true' => also delete local state/config files (~/.fullcourtdefense*). */
+    purge?: string;
+}
+/**
+ * `fullcourtdefense uninstall` — ONE command that reverses `onboard`/`install-all`:
+ * daemon autostart, self-heal schedule, MCP gateway wraps, IDE hooks, terminal
+ * guards, and the daily discovery schedule. Each step is best-effort so a
+ * single failure never leaves the rest of the machine half-uninstalled.
+ *
+ * Machine credentials (~/.fullcourtdefense.yml) and local state are KEPT by
+ * default so the machine can re-onboard without a new enrollment token; pass
+ * `--purge true` to delete them too. The fleet record in the dashboard is not
+ * touched — deprovision it from the console (Machines → machine → Deprovision).
+ */
+export declare function uninstallAllCommand(args: UninstallAllArgs, config: BotGuardConfig): Promise<void>;

package/dist/commands/uninstallAll.js

@@ -0,0 +1,132 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.uninstallAllCommand = uninstallAllCommand;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const daemon_1 = require("./daemon");
+const autoProtect_1 = require("./autoProtect");
+const mcpGateway_1 = require("./mcpGateway");
+const discoverSchedule_1 = require("./discoverSchedule");
+const installCursorHook_1 = require("./installCursorHook");
+const installClaudeHook_1 = require("./installClaudeHook");
+const shellGuard_1 = require("./shellGuard");
+const posixShellGuard_1 = require("./posixShellGuard");
+const cmdGuard_1 = require("./cmdGuard");
+const BOLD = '\x1b[1m';
+const GREEN = '\x1b[32m';
+const YELLOW = '\x1b[33m';
+const DIM = '\x1b[2m';
+const RESET = '\x1b[0m';
+/**
+ * `fullcourtdefense uninstall` — ONE command that reverses `onboard`/`install-all`:
+ * daemon autostart, self-heal schedule, MCP gateway wraps, IDE hooks, terminal
+ * guards, and the daily discovery schedule. Each step is best-effort so a
+ * single failure never leaves the rest of the machine half-uninstalled.
+ *
+ * Machine credentials (~/.fullcourtdefense.yml) and local state are KEPT by
+ * default so the machine can re-onboard without a new enrollment token; pass
+ * `--purge true` to delete them too. The fleet record in the dashboard is not
+ * touched — deprovision it from the console (Machines → machine → Deprovision).
+ */
+async function uninstallAllCommand(args, config) {
+    console.log(`\n${BOLD}\x1b[36mFullCourtDefense — uninstall local protection${RESET}`);
+    console.log(`${DIM}Daemon -> self-heal schedule -> MCP gateways -> IDE hooks -> terminal guards -> discovery schedule.${RESET}\n`);
+    const steps = [
+        { label: 'Resident daemon + autostart', run: () => (0, daemon_1.daemonCommand)({ ...args, uninstall: 'true', quiet: 'true' }, config) },
+        { label: 'Self-healing protect schedule', run: () => (0, autoProtect_1.autoProtectCommand)({ ...args, uninstall: 'true' }, config) },
+        { label: 'MCP gateway wraps (restore original server commands)', run: () => (0, mcpGateway_1.unprotectAllCommand)({ ...args, clients: args.clients || 'all' }, config) },
+        { label: 'Cursor runtime hooks', run: () => (0, installCursorHook_1.uninstallCursorHookCommand)({}) },
+        { label: 'Claude Code / VS Code / Copilot CLI hooks', run: () => (0, installClaudeHook_1.uninstallClaudeHookCommand)({}) },
+        ...(process.platform === 'win32'
+            ? [
+                { label: 'PowerShell shell guard', run: () => (0, shellGuard_1.uninstallShellGuardCommand)() },
+                { label: 'cmd.exe shell guard', run: () => (0, cmdGuard_1.uninstallCmdGuardCommand)() },
+            ]
+            : [
+                { label: 'bash/zsh shell guard', run: () => (0, posixShellGuard_1.uninstallPosixShellGuardCommand)() },
+            ]),
+        { label: 'Daily discovery schedule', run: () => (0, discoverSchedule_1.uninstallDailyDiscoverSchedule)() },
+    ];
+    const failures = [];
+    for (const step of steps) {
+        console.log(`${BOLD}› ${step.label}${RESET}`);
+        try {
+            await step.run();
+        }
+        catch (error) {
+            failures.push(step.label);
+            console.log(`${YELLOW}  ⚠ ${step.label} failed: ${error instanceof Error ? error.message : String(error)} — continuing.${RESET}`);
+        }
+        console.log('');
+    }
+    if (args.purge === 'true') {
+        console.log(`${BOLD}› Local state files${RESET}`);
+        const home = os.homedir();
+        const targets = [
+            path.join(home, '.fullcourtdefense.yml'),
+            path.join(home, '.fullcourtdefense-spool.jsonl'),
+            path.join(home, '.fullcourtdefense-runtime.json'),
+            path.join(home, '.fullcourtdefense-hook.log'),
+            path.join(home, '.fullcourtdefense'),
+        ];
+        for (const target of targets) {
+            try {
+                if (!fs.existsSync(target))
+                    continue;
+                fs.rmSync(target, { recursive: true, force: true });
+                console.log(`${DIM}  removed ${target}${RESET}`);
+            }
+            catch (error) {
+                failures.push(target);
+                console.log(`${YELLOW}  ⚠ could not remove ${target}: ${error instanceof Error ? error.message : String(error)}${RESET}`);
+            }
+        }
+        console.log('');
+    }
+    if (failures.length === 0) {
+        console.log(`${GREEN}${BOLD}Local protection removed.${RESET}`);
+        if (args.purge !== 'true') {
+            console.log(`${DIM}Machine credentials were kept (re-run \`fullcourtdefense onboard\` to re-protect). Use --purge true to delete all local state.${RESET}`);
+        }
+        console.log(`${DIM}The machine still appears in the fleet console until an admin deprovisions it (Machines → machine → Deprovision).${RESET}`);
+        console.log(`${DIM}Restart your AI clients (Cursor, Claude, VS Code, …) so they reload the restored configs.${RESET}`);
+    }
+    else {
+        console.log(`${YELLOW}${BOLD}Uninstall finished with ${failures.length} step(s) needing attention:${RESET} ${failures.join(', ')}`);
+        process.exitCode = 1;
+    }
+}

package/dist/index.js

@@ -50,6 +50,7 @@ const installClaudeHook_1 = require("./commands/installClaudeHook");
 const mcpGateway_1 = require("./commands/mcpGateway");
 const installAll_1 = require("./commands/installAll");
 const onboard_1 = require("./commands/onboard");
+const uninstallAll_1 = require("./commands/uninstallAll");
 const autoProtect_1 = require("./commands/autoProtect");
 const daemon_1 = require("./commands/daemon");
 const desktopChatGuard_1 = require("./commands/desktopChatGuard");
@@ -129,6 +130,14 @@ function printHelp() {
                 connectivity check -> enroll (--token <fleet-token> or
                 FCD_ENROLL_TOKEN) -> install-all -> verification checklist.
                 Exits non-zero if a required protection surface failed.
+                Safe to re-run: completed steps are reused automatically
+                (--repair true re-runs them; --dry-run true previews;
+                --json true prints the transaction as JSON).
+    uninstall   ONE command that reverses onboard/install-all on this machine:
+                daemon, self-heal schedule, MCP gateway wraps, IDE hooks,
+                terminal guards, and the daily discovery schedule. Keeps
+                machine credentials for easy re-onboarding; --purge true
+                deletes all local state too.
     doctor      First step. Checks outbound HTTPS access to FullCourtDefense.
     login       Enrolls this machine with a fleet enrollment token and saves
                 per-machine Shield credentials to ~/.fullcourtdefense.yml.
@@ -203,10 +212,15 @@ function printHelp() {
     install-vscode-mcp-gateway
                 VS Code only — .vscode/mcp.json or user settings.
     mcp-gateway
-                Runs a local MCP gateway that checks AgentGuard runtime/action
+                Runs a local MCP gateway that checks FullCourtDefense runtime/action
                 policies before forwarding tool calls to a real MCP server.
     hook        Internal: invoked by Cursor per agent event (reads stdin JSON,
                 returns an allow/deny verdict). Not run by hand.
+    desktop-chat-guard
+                Windows-only advisory guard for Claude Desktop's native chat
+                (clipboard/secret warnings). Usually started by the daemon.
+    flush-spool Manually drain locally spooled telemetry events to the backend
+                (they flush automatically; useful after long offline periods).
     credits     Shows hosted scan credits for CI/CD API-key scans.
     init        Creates a starter .fullcourtdefense.yml config file.
 
@@ -300,7 +314,7 @@ function printHelp() {
     --fail-on <severity>    agent-ci fail threshold: critical, high, medium, low
     --require-gateway       agent-ci requires risky MCP servers to use FCD gateway
     --require-approval-for  agent-ci risky controls list, e.g. payment,delete,shell,secrets
-    --require-upload        agent-ci fails if evidence cannot upload to AgentGuard UI
+    --require-upload        agent-ci fails if evidence cannot upload to the FullCourtDefense UI
     --changed-only          agent-ci limits findings to changed files
     --changed-files <path>  file or comma/newline list of changed files for agent-ci
     --method <GET|POST>     Local endpoint method
@@ -362,6 +376,8 @@ function printHelp() {
     $ fullcourtdefense install-all --auto-protect true --upload
     $ fullcourtdefense onboard --token <fleet-enrollment-token> --resume
     $ fullcourtdefense onboard --dry-run true --json true
+    $ fullcourtdefense uninstall
+    $ fullcourtdefense uninstall --purge true
     $ fullcourtdefense discover --surface all --upload --schedule logon
     $ fullcourtdefense install-mcp-gateway --clients cursor,codex --mcp-command npm --mcp-args "run mcp"
     $ fullcourtdefense install-codex-mcp-gateway --mcp-command npm --mcp-args "run mcp"
@@ -645,6 +661,17 @@ async function main() {
             await (0, installAll_1.installAllCommand)(args, config);
             break;
         }
+        case 'uninstall':
+        case 'uninstall-all': {
+            const args = {
+                ...buildGatewayArgs(),
+                clients: flags.clients,
+                config: flags.config,
+                purge: flags.purge,
+            };
+            await (0, uninstallAll_1.uninstallAllCommand)(args, config);
+            break;
+        }
         case 'onboard': {
             const args = {
                 ...buildInstallArgs(),

package/dist/integrity.js

@@ -41,6 +41,7 @@ const path = __importStar(require("path"));
 const installClaudeHook_1 = require("./commands/installClaudeHook");
 const installCursorHook_1 = require("./commands/installCursorHook");
 const mcpGateway_1 = require("./commands/mcpGateway");
+const appDetection_1 = require("./appDetection");
 function readText(file) {
     try {
         return fs.readFileSync(file, 'utf8');
@@ -93,14 +94,22 @@ function getLocalIntegrityReport(options = {}) {
     }
     if (protectedMcpConfigs < discoveredMcpConfigs)
         reasons.push('mcp_gateway_missing');
+    // A missing hook only counts as damage when the app it protects is actually
+    // installed — a VS Code-only machine without Cursor (or vice versa) must not
+    // report broken integrity forever. Stale-path entries remain failures either
+    // way: the hook file exists but points at a dead CLI path.
     const cursorHooks = (0, installCursorHook_1.inspectCursorManagedHooks)();
-    if (!cursorHooks.existed || cursorHooks.managedEntries === 0)
-        reasons.push('cursor_hook_missing');
+    if (!cursorHooks.existed || cursorHooks.managedEntries === 0) {
+        if ((0, appDetection_1.isCursorAppInstalled)())
+            reasons.push('cursor_hook_missing');
+    }
     else if (cursorHooks.staleEntries > 0)
         reasons.push('cursor_hook_stale_path');
     const claudeHooks = (0, installClaudeHook_1.inspectClaudeManagedHooks)();
-    if (!claudeHooks.existed || claudeHooks.managedEntries === 0)
-        reasons.push('claude_hook_missing');
+    if (!claudeHooks.existed || claudeHooks.managedEntries === 0) {
+        if ((0, appDetection_1.isClaudeFamilyAppInstalled)())
+            reasons.push('claude_hook_missing');
+    }
     else if (claudeHooks.staleEntries > 0)
         reasons.push('claude_hook_stale_path');
     const daemonRunning = isDaemonRunning();

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.21.12"
+  "version": "1.21.13"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.21.12",
+  "version": "1.21.13",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {