fullcourtdefense-cli 1.22.7 → 1.22.8

package/dist/commands/verifyRemoved.js

@@ -0,0 +1,293 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.collectRemnantChecks = collectRemnantChecks;
+exports.verifyRemovedCommand = verifyRemovedCommand;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const child_process_1 = require("child_process");
+const uninstallAll_1 = require("./uninstallAll");
+const FCD_TASK_NAMES = [
+    'FullCourtDefense Updater',
+    'FullCourtDefense Daemon',
+    'FullCourtDefense Daemon Watchdog',
+    'FullCourtDefense Auto-Protect',
+    'FullCourtDefenseDesktopDiscover',
+];
+function taskExists(taskName) {
+    const query = (0, child_process_1.spawnSync)('schtasks', ['/Query', '/TN', taskName], {
+        stdio: 'ignore', windowsHide: true, timeout: 10_000,
+    });
+    return query.status === 0;
+}
+function regQuery(keyPath, valueName) {
+    const queryArgs = valueName ? ['query', keyPath, '/v', valueName] : ['query', keyPath];
+    const query = (0, child_process_1.spawnSync)('reg', queryArgs, { encoding: 'utf8', windowsHide: true, timeout: 10_000 });
+    return query.status === 0 ? query.stdout : undefined;
+}
+/** Well-known GLOBAL client config files that FCD wraps or hooks into. */
+function knownClientConfigFiles() {
+    const home = os.homedir();
+    const files = [
+        path.join(home, '.cursor', 'mcp.json'),
+        path.join(home, '.cursor', 'hooks.json'),
+        path.join(home, '.claude', 'settings.json'),
+        path.join(home, '.claude.json'),
+        path.join(home, '.codex', 'config.toml'),
+        path.join(home, '.gemini', 'settings.json'),
+        path.join(home, '.codeium', 'windsurf', 'mcp_config.json'),
+    ];
+    if (process.platform === 'win32' && process.env.APPDATA) {
+        files.push(path.join(process.env.APPDATA, 'Claude', 'claude_desktop_config.json'));
+        files.push(path.join(process.env.APPDATA, 'Code', 'User', 'settings.json'));
+    }
+    else if (process.platform === 'darwin') {
+        files.push(path.join(home, 'Library', 'Application Support', 'Claude', 'claude_desktop_config.json'));
+        files.push(path.join(home, 'Library', 'Application Support', 'Code', 'User', 'settings.json'));
+    }
+    else {
+        files.push(path.join(home, '.config', 'Claude', 'claude_desktop_config.json'));
+        files.push(path.join(home, '.config', 'Code', 'User', 'settings.json'));
+    }
+    return files;
+}
+function fileMentionsFcd(file) {
+    try {
+        return /fullcourtdefense|fcd-mcp-gateway/i.test(fs.readFileSync(file, 'utf8'));
+    }
+    catch {
+        return false;
+    }
+}
+function collectWindowsChecks() {
+    const checks = [];
+    const home = os.homedir();
+    for (const taskName of FCD_TASK_NAMES) {
+        checks.push({
+            id: `task:${taskName}`,
+            label: `Scheduled task "${taskName}"`,
+            present: taskExists(taskName),
+            fix: taskName === 'FullCourtDefense Updater'
+                ? 'removed by the MSI uninstall (Settings → Apps → FullCourtDefense → Uninstall); it runs as SYSTEM, so an elevated `schtasks /Delete /TN "FullCourtDefense Updater" /F` also works'
+                : `schtasks /Delete /TN "${taskName}" /F`,
+        });
+    }
+    // HKLM machine-wide entries. PowerShell audit policies are attributed to
+    // FCD via the transcript OutputDirectory — an org GPO pointing elsewhere is
+    // NOT flagged (it is not ours to remove).
+    const fcdRoot = regQuery('HKLM\\SOFTWARE\\FullCourtDefense');
+    checks.push({
+        id: 'reg:hklm-fcd',
+        label: 'HKLM\\SOFTWARE\\FullCourtDefense registry key',
+        present: fcdRoot !== undefined,
+        fix: 'removed by the MSI uninstall',
+    });
+    const transcription = regQuery('HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\PowerShell\\Transcription', 'OutputDirectory');
+    const fcdTranscription = transcription !== undefined && /FullCourtDefense/i.test(transcription);
+    checks.push({
+        id: 'reg:transcription',
+        label: 'HKLM PowerShell Transcription policy (FCD-enabled)',
+        present: fcdTranscription,
+        detail: fcdTranscription ? 'OutputDirectory points at a FullCourtDefense folder' : undefined,
+        fix: 'fullcourtdefense windows-audit --disable true (or the MSI uninstall)',
+    });
+    if (fcdTranscription) {
+        const sbl = regQuery('HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\PowerShell\\ScriptBlockLogging', 'EnableScriptBlockLogging');
+        checks.push({
+            id: 'reg:scriptblocklogging',
+            label: 'HKLM PowerShell ScriptBlockLogging policy (FCD-enabled)',
+            present: sbl !== undefined,
+            fix: 'fullcourtdefense windows-audit --disable true (or the MSI uninstall)',
+        });
+    }
+    const runKey = regQuery('HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run', 'FullCourtDefenseDaemon');
+    checks.push({
+        id: 'reg:run-key',
+        label: 'HKCU Run key "FullCourtDefenseDaemon"',
+        present: runKey !== undefined,
+        fix: 'reg delete "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run" /v FullCourtDefenseDaemon /f',
+    });
+    const autorun = regQuery('HKCU\\Software\\Microsoft\\Command Processor', 'AutoRun');
+    const fcdAutorun = autorun !== undefined && /fullcourtdefense/i.test(autorun);
+    checks.push({
+        id: 'reg:cmd-autorun',
+        label: 'cmd.exe AutoRun hook (cmd shell guard)',
+        present: fcdAutorun,
+        fix: 'fullcourtdefense uninstall-cmd-guard',
+    });
+    const machinePath = regQuery('HKLM\\SYSTEM\\CurrentControlSet\\Control\\Session Manager\\Environment', 'Path');
+    checks.push({
+        id: 'reg:system-path',
+        label: 'System PATH entry (FullCourtDefense install dir)',
+        present: machinePath !== undefined && /FullCourtDefense/i.test(machinePath),
+        fix: 'removed by the MSI uninstall',
+    });
+    const dirs = [
+        ['dir:program-files', process.env.ProgramFiles, 'removed by the MSI uninstall'],
+        ['dir:program-files-x86', process.env['ProgramFiles(x86)'], 'removed by the MSI uninstall'],
+        ['dir:programdata', process.env.ProgramData, 'removed by the MSI uninstall (transcripts + machine state)'],
+        ['dir:localappdata', process.env.LOCALAPPDATA, 'fullcourtdefense uninstall (purges local caches)'],
+    ];
+    for (const [id, base, fix] of dirs) {
+        if (!base)
+            continue;
+        const dir = path.join(base, 'FullCourtDefense');
+        checks.push({ id, label: dir, present: fs.existsSync(dir), fix });
+    }
+    const profileFiles = [
+        '.fullcourtdefense.yml',
+        '.fullcourtdefense-spool.jsonl',
+        '.fullcourtdefense-runtime.json',
+        '.fullcourtdefense-hook.log',
+        '.fullcourtdefense',
+        '.fullcourtdefense-shell-guard.json',
+        '.fullcourtdefense-shell-guard.ps1',
+        '.fullcourtdefense-cmd-guard.js',
+        '.fullcourtdefense-cmd-autorun.bat',
+    ];
+    for (const name of profileFiles) {
+        const file = path.join(home, name);
+        checks.push({
+            id: `file:${name}`,
+            label: file,
+            present: fs.existsSync(file),
+            fix: 'fullcourtdefense uninstall (purges profile state)',
+        });
+    }
+    return checks;
+}
+function collectPosixChecks() {
+    const checks = [];
+    const home = os.homedir();
+    if (process.platform === 'darwin') {
+        const plist = path.join(home, 'Library', 'LaunchAgents', 'ai.fullcourtdefense.daemon.plist');
+        checks.push({ id: 'launchd', label: plist, present: fs.existsSync(plist), fix: 'fullcourtdefense daemon --uninstall true' });
+    }
+    else {
+        const unit = path.join(process.env.XDG_CONFIG_HOME || path.join(home, '.config'), 'systemd', 'user', 'fullcourtdefense-daemon.service');
+        checks.push({ id: 'systemd', label: unit, present: fs.existsSync(unit), fix: 'fullcourtdefense daemon --uninstall true' });
+        const crontab = (0, child_process_1.spawnSync)('crontab', ['-l'], { encoding: 'utf8', timeout: 10_000 });
+        checks.push({
+            id: 'crontab',
+            label: 'crontab entries (# FCD_DAEMON)',
+            present: crontab.status === 0 && /FCD_DAEMON|fullcourtdefense/i.test(crontab.stdout || ''),
+            fix: 'fullcourtdefense daemon --uninstall true',
+        });
+    }
+    for (const rc of ['.zshrc', '.bashrc', '.bash_profile', '.profile']) {
+        const file = path.join(home, rc);
+        let mentions = false;
+        try {
+            mentions = /fullcourtdefense/i.test(fs.readFileSync(file, 'utf8'));
+        }
+        catch { /* absent */ }
+        checks.push({ id: `rc:${rc}`, label: `${file} (shell guard hook)`, present: mentions, fix: 'fullcourtdefense uninstall (removes shell guard wiring)' });
+    }
+    const profileFiles = [
+        '.fullcourtdefense.yml',
+        '.fullcourtdefense-spool.jsonl',
+        '.fullcourtdefense-runtime.json',
+        '.fullcourtdefense-hook.log',
+        '.fullcourtdefense',
+        '.fullcourtdefense-shell-guard.json',
+        '.fullcourtdefense-shell-guard.zsh',
+        '.fullcourtdefense-shell-guard.bash',
+    ];
+    for (const name of profileFiles) {
+        const file = path.join(home, name);
+        checks.push({ id: `file:${name}`, label: file, present: fs.existsSync(file), fix: 'fullcourtdefense uninstall (purges profile state)' });
+    }
+    return checks;
+}
+/** Shared (all platforms): config backups + still-wrapped client configs. */
+function collectSharedChecks() {
+    const checks = [];
+    const backups = (0, uninstallAll_1.listFcdConfigBackups)();
+    checks.push({
+        id: 'config-backups',
+        label: 'Config backups (*.fcd-backup-*) — may contain credentials',
+        present: backups.length > 0,
+        detail: backups.length ? backups.join(', ') : undefined,
+        fix: 'fullcourtdefense uninstall (deletes them), or delete the listed files',
+    });
+    for (const file of knownClientConfigFiles()) {
+        if (!fs.existsSync(file))
+            continue;
+        if (!fileMentionsFcd(file))
+            continue;
+        checks.push({
+            id: `wrapped:${file}`,
+            label: `${file} still references FullCourtDefense`,
+            present: true,
+            fix: 'fullcourtdefense uninstall (restores original client configs)',
+        });
+    }
+    return checks;
+}
+/** All known-artifact checks for this platform — reused by `uninstall` for its inline self-verification. */
+function collectRemnantChecks() {
+    return [
+        ...(process.platform === 'win32' ? collectWindowsChecks() : collectPosixChecks()),
+        ...collectSharedChecks(),
+    ];
+}
+async function verifyRemovedCommand(args) {
+    const checks = collectRemnantChecks();
+    const remnants = checks.filter(check => check.present);
+    if (args.json === 'true') {
+        console.log(JSON.stringify({ clean: remnants.length === 0, checked: checks.length, remnants }, null, 2));
+    }
+    else {
+        console.log('\n\x1b[1m\x1b[36mFullCourtDefense — verify removal\x1b[0m');
+        console.log(`\x1b[2m${checks.length} known artifact locations checked on this machine.\x1b[0m\n`);
+        if (remnants.length === 0) {
+            console.log('\x1b[32m\x1b[1m✓ Clean — no FullCourtDefense artifacts found. This machine is back to its pre-FCD state.\x1b[0m');
+            console.log('\x1b[2mNote: the fleet console record is server-side and separate — an admin deprovisions it there.\x1b[0m');
+        }
+        else {
+            console.log(`\x1b[33m\x1b[1m${remnants.length} artifact(s) still present:\x1b[0m\n`);
+            for (const remnant of remnants) {
+                console.log(`  \x1b[33m✗\x1b[0m ${remnant.label}`);
+                if (remnant.detail)
+                    console.log(`    \x1b[2m${remnant.detail}\x1b[0m`);
+                if (remnant.fix)
+                    console.log(`    \x1b[2mfix: ${remnant.fix}\x1b[0m`);
+            }
+        }
+    }
+    if (remnants.length > 0)
+        process.exitCode = 1;
+}

package/dist/commands/windowsAudit.d.ts

@@ -63,19 +63,24 @@ export declare function disableWindowsAudit(): EnableWindowsAuditResult;
  */
 export declare function enableWindowsAudit(): EnableWindowsAuditResult;
 export interface TranscriptPruneResult {
-    /** Files deleted in this run. */
+    /** Files deleted in this run (age window). */
     pruned: number;
+    /** Files deleted because the folder exceeded the size budget. */
+    prunedBySize?: number;
     /** Set when pruning was skipped entirely (not enabled / foreign dir / non-Windows). */
     skipped?: string;
 }
 /** Retention window in days — env override for fleets that want tighter/looser. */
 export declare function transcriptRetentionDays(): number;
+/** Size budget in MB — env override (FCD_TRANSCRIPT_MAX_MB, floor 50MB). */
+export declare function transcriptMaxMb(): number;
 /**
- * Delete transcript files older than the retention window. Never throws;
- * locked/in-use files (an open PowerShell session's live transcript) are
- * skipped and picked up on a later run. Empty date folders are removed.
+ * Delete transcript files older than the retention window, then enforce the
+ * size budget (oldest-first) on whatever survived. Never throws; locked/
+ * in-use files (an open PowerShell session's live transcript) are skipped and
+ * picked up on a later run. Empty date folders are removed.
  */
-export declare function pruneTranscripts(maxAgeDays?: number, dirOverride?: string): TranscriptPruneResult;
+export declare function pruneTranscripts(maxAgeDays?: number, dirOverride?: string, maxTotalMb?: number): TranscriptPruneResult;
 export interface WindowsAuditArgs {
     enable?: string;
     disable?: string;

package/dist/commands/windowsAudit.js

@@ -40,6 +40,7 @@ exports.captureAuditPreInstallSnapshot = captureAuditPreInstallSnapshot;
 exports.disableWindowsAudit = disableWindowsAudit;
 exports.enableWindowsAudit = enableWindowsAudit;
 exports.transcriptRetentionDays = transcriptRetentionDays;
+exports.transcriptMaxMb = transcriptMaxMb;
 exports.pruneTranscripts = pruneTranscripts;
 exports.windowsAuditCommand = windowsAuditCommand;
 const child_process_1 = require("child_process");
@@ -353,17 +354,29 @@ function enableWindowsAudit() {
 // that FCD itself configured (path contains "FullCourtDefense") — an
 // org-managed transcript share set via GPO is never cleaned by us.
 const DEFAULT_TRANSCRIPT_RETENTION_DAYS = 30;
+// Size budget alongside the age window: heavy PowerShell users produce
+// ~200MB/day of transcripts, so 30 days of age-based retention alone can eat
+// multiple GB of disk (a customer churn finding). Oldest files go first once
+// the folder exceeds the budget, regardless of age.
+const DEFAULT_TRANSCRIPT_MAX_MB = 500;
+const MIN_TRANSCRIPT_MAX_MB = 50;
 /** Retention window in days — env override for fleets that want tighter/looser. */
 function transcriptRetentionDays() {
     const raw = Number(process.env.FCD_TRANSCRIPT_RETENTION_DAYS);
     return Number.isFinite(raw) && raw >= 1 ? Math.floor(raw) : DEFAULT_TRANSCRIPT_RETENTION_DAYS;
 }
+/** Size budget in MB — env override (FCD_TRANSCRIPT_MAX_MB, floor 50MB). */
+function transcriptMaxMb() {
+    const raw = Number(process.env.FCD_TRANSCRIPT_MAX_MB);
+    return Number.isFinite(raw) && raw >= MIN_TRANSCRIPT_MAX_MB ? Math.floor(raw) : DEFAULT_TRANSCRIPT_MAX_MB;
+}
 /**
- * Delete transcript files older than the retention window. Never throws;
- * locked/in-use files (an open PowerShell session's live transcript) are
- * skipped and picked up on a later run. Empty date folders are removed.
+ * Delete transcript files older than the retention window, then enforce the
+ * size budget (oldest-first) on whatever survived. Never throws; locked/
+ * in-use files (an open PowerShell session's live transcript) are skipped and
+ * picked up on a later run. Empty date folders are removed.
  */
-function pruneTranscripts(maxAgeDays = transcriptRetentionDays(), dirOverride) {
+function pruneTranscripts(maxAgeDays = transcriptRetentionDays(), dirOverride, maxTotalMb = transcriptMaxMb()) {
     if (process.platform !== 'win32' && !dirOverride)
         return { pruned: 0, skipped: 'non-Windows' };
     const dir = dirOverride ?? getWindowsAuditStatus().transcriptionPath;
@@ -375,6 +388,7 @@ function pruneTranscripts(maxAgeDays = transcriptRetentionDays(), dirOverride) {
         return { pruned: 0, skipped: 'transcript dir does not exist' };
     const cutoff = Date.now() - maxAgeDays * 24 * 60 * 60 * 1000;
     let pruned = 0;
+    const survivors = [];
     const pruneDir = (target, depth) => {
         let entries;
         try {
@@ -394,16 +408,41 @@ function pruneTranscripts(maxAgeDays = transcriptRetentionDays(), dirOverride) {
                     }
                     catch { /* not empty — keep */ }
                 }
-                else if (fs.statSync(full).mtimeMs < cutoff) {
-                    fs.unlinkSync(full);
-                    pruned += 1;
+                else {
+                    const stat = fs.statSync(full);
+                    if (stat.mtimeMs < cutoff) {
+                        fs.unlinkSync(full);
+                        pruned += 1;
+                    }
+                    else {
+                        survivors.push({ path: full, mtimeMs: stat.mtimeMs, size: stat.size });
+                    }
                 }
             }
             catch { /* locked (live session transcript) or race — next run */ }
         }
     };
     pruneDir(dir, 0);
-    return { pruned };
+    // Size budget: age retention alone is unbounded on chatty machines. Delete
+    // oldest-first until under budget; the newest transcript always survives so
+    // a live session's file is never the one we try to delete.
+    let prunedBySize = 0;
+    const budgetBytes = maxTotalMb * 1024 * 1024;
+    let totalBytes = survivors.reduce((sum, file) => sum + file.size, 0);
+    if (totalBytes > budgetBytes) {
+        survivors.sort((a, b) => a.mtimeMs - b.mtimeMs);
+        for (const file of survivors.slice(0, -1)) {
+            if (totalBytes <= budgetBytes)
+                break;
+            try {
+                fs.unlinkSync(file.path);
+                totalBytes -= file.size;
+                prunedBySize += 1;
+            }
+            catch { /* locked — skip, next run */ }
+        }
+    }
+    return { pruned, prunedBySize };
 }
 /**
  * `fullcourtdefense windows-audit` — show (default) or enable (--enable)

package/dist/index.js

@@ -51,6 +51,7 @@ const mcpGateway_1 = require("./commands/mcpGateway");
 const installAll_1 = require("./commands/installAll");
 const onboard_1 = require("./commands/onboard");
 const uninstallAll_1 = require("./commands/uninstallAll");
+const verifyRemoved_1 = require("./commands/verifyRemoved");
 const autoProtect_1 = require("./commands/autoProtect");
 const daemon_1 = require("./commands/daemon");
 const watchdog_1 = require("./commands/watchdog");
@@ -134,11 +135,21 @@ function printHelp() {
                 Safe to re-run: completed steps are reused automatically
                 (--repair true re-runs them; --dry-run true previews;
                 --json true prints the transaction as JSON).
-    uninstall   ONE command that reverses onboard/install-all on this machine:
-                daemon, self-heal schedule, MCP gateway wraps, IDE hooks,
-                terminal guards, and the daily discovery schedule. Keeps
-                machine credentials for easy re-onboarding; --purge true
-                deletes all local state too.
+    uninstall   COMPLETE removal in one command: daemon, self-heal schedule,
+                MCP gateway wraps, IDE hooks, terminal guards, discovery
+                schedule, credentials, caches, and config backups. On Windows
+                MSI installs it then launches the Windows uninstaller (one UAC
+                prompt) which removes the SYSTEM updater task, HKLM audit
+                policies, and the application itself.
+    detach      Reverse onboard/install-all protection but KEEP machine
+                credentials and the installed app, for easy re-onboarding.
+                --purge true deletes local state too.
+    verify-removed
+                Prove this machine is back to its pre-FCD state: checks every
+                known FCD artifact (tasks, registry, files, config backups)
+                and lists anything left, with the command that removes it.
+                Exits 1 when remnants are found. Works via npx after the CLI
+                itself is uninstalled.
     doctor      First step. Checks outbound HTTPS access to FullCourtDefense.
     login       Enrolls this machine with a fleet enrollment token and saves
                 per-machine Shield credentials to ~/.fullcourtdefense.yml.
@@ -150,8 +161,9 @@ function printHelp() {
                 or --mcp-command needed. Use --hooks false to skip runtime hooks.
     install     Alias for install-all.
     windows-audit  Show Windows PowerShell audit coverage (ScriptBlock Logging +
-                Transcription). Use --enable to turn it on, --disable to remove
-                both policy keys (one admin prompt either way).
+                Transcription). OFF by default (machine-wide policy + on-disk
+                transcripts are opt-in). Use --enable to turn it on, --disable
+                to remove both policy keys (one admin prompt either way).
     install-shell-guard    Block dangerous commands typed in a terminal (real-time,
                 offline rule cache): PowerShell on Windows, bash + zsh on macOS/Linux.
                 uninstall-shell-guard removes it; shell-guard-status shows coverage.
@@ -233,6 +245,9 @@ function printHelp() {
     2. Run the one-command onboarding (connectivity + enroll + install + verify):
        fullcourtdefense onboard --token <fleet-enrollment-token>
        Or set FCD_ENROLL_TOKEN and run: fullcourtdefense onboard
+       Shows a trust disclosure (what gets installed, what data is sent
+       to your org's console) and asks for confirmation; automation/MDM
+       passes --accept-disclosure true (or FCD_ACCEPT_DISCLOSURE=1).
        Ends with a green/red checklist per protection surface and exits
        non-zero on failure (safe for MDM scripts).
 
@@ -670,10 +685,26 @@ async function main() {
                 clients: flags.clients,
                 config: flags.config,
                 purge: flags.purge,
+                localOnly: flags['local-only'],
+                reason: flags.reason,
             };
             await (0, uninstallAll_1.uninstallAllCommand)(args, config);
             break;
         }
+        case 'detach': {
+            const args = {
+                ...buildGatewayArgs(),
+                clients: flags.clients,
+                config: flags.config,
+                purge: flags.purge,
+            };
+            await (0, uninstallAll_1.detachCommand)(args, config);
+            break;
+        }
+        case 'verify-removed': {
+            await (0, verifyRemoved_1.verifyRemovedCommand)({ json: flags.json });
+            break;
+        }
         case 'onboard': {
             const args = {
                 ...buildInstallArgs(),
@@ -694,6 +725,7 @@ async function main() {
                 dryRun: flags['dry-run'],
                 json: flags.json,
                 noDaemon: flags['no-daemon'],
+                acceptDisclosure: flags['accept-disclosure'],
             };
             await (0, onboard_1.onboardCommand)(args, config);
             break;

package/dist/localSafetySnapshot.js

@@ -68,13 +68,16 @@ function writeCache(file, snapshot) {
     catch { /* best-effort */ }
 }
 function toRuleAction(value) {
-    return value === 'warn' || value === 'mask' ? value : undefined;
+    // Explicit 'block' is preserved (not treated as absent): warn-by-default
+    // items (e.g. env_workspace) need an org's explicit block override to
+    // survive parsing, otherwise the CLI's catalog default would resurrect warn.
+    return value === 'warn' || value === 'mask' || value === 'block' ? value : undefined;
 }
 function toSnapshot(data) {
     if (!data || typeof data !== 'object')
         return undefined;
-    // Only non-default ('warn'/'mask') entries are kept — anything unrecognized
-    // falls back to 'block', so a malformed value can only fail strict.
+    // Anything unrecognized falls back to 'block' (fail strict); recognized
+    // entries — including explicit 'block' — are kept verbatim.
     let itemActions;
     if (data.itemActions && typeof data.itemActions === 'object' && !Array.isArray(data.itemActions)) {
         for (const [itemId, raw] of Object.entries(data.itemActions)) {

package/dist/selfTest.js

@@ -145,8 +145,39 @@ async function runDeepSelfTest(input) {
             add({ id: 'watchdog_task', label: 'Watchdog task registered', ok: false, detail: error instanceof Error ? error.message : String(error) });
         }
     }
+    // 9. Windowless task principals. FCD tasks must run with the S4U logon type:
+    // an InteractiveToken principal running console node.exe flashes a visible
+    // console window on every trigger (the "5-minute flicker" complaint class —
+    // <Hidden>true</Hidden> does NOT suppress it). Machines where the S4U
+    // migration did not converge surface here instead of a user email.
+    if (process.platform === 'win32') {
+        const interactive = listInteractiveFcdTasks();
+        add({
+            id: 'windowless_tasks',
+            label: 'Scheduled tasks are windowless (S4U)',
+            ok: interactive.length === 0,
+            detail: interactive.length === 0
+                ? 'no FCD task runs with an InteractiveToken principal'
+                : `InteractiveToken principal (visible console flash) on: ${interactive.join(', ')} — daemon migration to S4U has not converged`,
+        });
+    }
     return { ok: checks.every(check => check.ok), checks, ranAt: new Date().toISOString() };
 }
+/** FCD per-user tasks whose XML still declares an InteractiveToken principal. */
+const WINDOWED_TASK_CANDIDATES = ['FullCourtDefense Daemon', 'FullCourtDefense Daemon Watchdog', 'FullCourtDefense Auto-Protect', 'FullCourtDefenseDesktopDiscover'];
+function listInteractiveFcdTasks() {
+    const offenders = [];
+    for (const taskName of WINDOWED_TASK_CANDIDATES) {
+        const query = (0, child_process_1.spawnSync)('schtasks', ['/Query', '/TN', taskName, '/XML'], {
+            encoding: 'utf8', windowsHide: true, timeout: 10_000,
+        });
+        if (query.status !== 0 || !query.stdout)
+            continue; // absent — nothing to flash
+        if (/<LogonType>\s*InteractiveToken\s*<\/LogonType>/i.test(query.stdout))
+            offenders.push(taskName);
+    }
+    return offenders;
+}
 /** Compact one-line summary for the machine-action result card. */
 function summarizeSelfTest(report) {
     const failed = report.checks.filter(check => !check.ok);

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.22.7"
+  "version": "1.22.8"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.22.7",
+  "version": "1.22.8",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {