@flowrail/init 0.0.17 → 0.0.18

package/dist/doctor-script.js

@@ -1488,6 +1488,16 @@ const VERIFY_LATENCY_PROBE_CAP_MS = 60000;
 const VERIFY_RETRY_BACKOFF_MS = 1500;
 const PROBE_MARKER_FILE = 'status-probe.json';
 const DIAGNOSTIC_DETAIL_MAX_CHARS = 300;
+// Keep aligned with @flowrail/hook's verify-latency operational verdicts.
+const OPERATIONAL_VERDICT_IDS = new Set([
+  'cost_cap_exceeded',
+  'verify_no_verdict',
+  'judge_no_verdict',
+  'managed_model_pricing_unavailable',
+  'managed_admission_unavailable',
+  'managed_route_unavailable',
+  'truncated_judge',
+]);
 
 function failModeSettingsLayers(settings) {
   return doctorSettingsLayers(settings);
@@ -1644,6 +1654,14 @@ function failModePostureMessage(verifyMode, depMode, rawEnv) {
           ? 'FLOWRAIL_FAIL_MODE=' + legacyRaw +
             ' is not a recognised value — treated as unset'
           : 'default — FLOWRAIL_FAIL_MODE unset';
+  if (verifyMode === undefined) {
+    return (
+      'FlowRail: write gate fail mode is SCOPED (' + origin + ') — ' +
+      'incomplete design-bound writes pause for retry; ' +
+      'unbound writes still allow on errors/timeouts' + depGateNote + '. ' +
+      'Set FLOWRAIL_VERIFY_FAIL_MODE=closed to pause unbound writes too.'
+    );
+  }
   return (
     'FlowRail: write gate fail mode is OPEN (' + origin + ') — verifier ' +
     'errors/timeouts allow code writes silently' + depGateNote + '. ' +
@@ -1919,7 +1937,9 @@ async function checkVerifyLatency(settings, hookVerifyBudgetMs) {
       ? 'with the closed verifier posture the write gate will block every code write (issue #300)'
       : posture === 'advisory'
         ? 'the write gate will allow every code write with advisory context (issue #300)'
-        : 'the write gate is failing open on every code write (issue #300)';
+        : posture === undefined
+          ? 'design-bound writes pause for retry; unbound writes fail open (issue #300)'
+          : 'the write gate is failing open on every code write (issue #300)';
 
   if (out.transportError) {
     if (
@@ -2001,12 +2021,10 @@ async function checkVerifyLatency(settings, hookVerifyBudgetMs) {
     );
     return false;
   }
-  // Synthetic verdicts (quota exhausted / credential unavailable / cost
-  // cap) are produced WITHOUT invoking the judge, so they arrive fast —
-  // reporting their round trip as verifier latency would be a false
-  // green. Sentinel ids: leading underscore (_quota_exceeded,
-  // _credential_unavailable) or cost_cap_exceeded; real guardrail ids
-  // are kebab-case.
+  // Operational verdicts refuse dispatch or report an unusable response.
+  // Neither establishes the latency of a usable security verdict. Preserve
+  // the reserved underscore IDs and match other operational IDs exactly so
+  // ordinary guardrail failures still count as measured verifier results.
   const structuredVerdicts = structured ? structured.per_guardrail_verdicts : undefined;
   const verdicts = Array.isArray(structuredVerdicts)
     ? structuredVerdicts
@@ -2015,7 +2033,7 @@ async function checkVerifyLatency(settings, hookVerifyBudgetMs) {
       : [];
   for (const v of verdicts) {
     const gid = v && typeof v.guardrail_id === 'string' ? v.guardrail_id : '';
-    if (gid.charAt(0) === '_' || gid === 'cost_cap_exceeded') {
+    if (gid.charAt(0) === '_' || OPERATIONAL_VERDICT_IDS.has(gid)) {
       console.warn(
         'FlowRail: verify-latency probe inconclusive — the server answered ' +
           'with a synthetic verdict (' +

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@flowrail/init",
-  "version": "0.0.17",
+  "version": "0.0.18",
   "description": "One-shot FlowRail installer for Claude Code. Wires PreToolUse hooks, MCP server config, and skill markdown into your repo, then probes the FlowRail server with your API key.",
   "license": "UNLICENSED",
   "private": false,
@@ -25,7 +25,7 @@
     "prepublishOnly": "npm run build && npm test"
   },
   "dependencies": {
-    "@flowrail/skills": "0.0.7"
+    "@flowrail/skills": "0.0.8"
   },
   "devDependencies": {
     "@types/jest": "^29.5.12",