fullcourtdefense-cli 1.21.22 → 1.21.23

package/dist/commands/mcpGateway.js

@@ -876,8 +876,19 @@ class McpGatewayServer {
                     }
                 }
                 else {
-                    const reason = preflight.actionPolicy?.reason || preflight.intentEvaluation?.reasons?.[0] || `Tool call ${preflight.decision}.`;
-                    throw new Error(reason);
+                    // Detailed, self-explanatory block message: WHICH policy fired, WHAT rule matched,
+                    // and where to review it — so the developer (and the AI agent relaying the error)
+                    // can tell exactly why the call was refused instead of guessing.
+                    const policy = preflight.actionPolicy;
+                    const parts = [];
+                    parts.push(policy?.reason || preflight.intentEvaluation?.reasons?.[0] || `Tool call ${preflight.decision} by FullCourtDefense.`);
+                    if (policy?.policyName)
+                        parts.push(`Policy: "${policy.policyName}"`);
+                    if (policy?.matchedRule)
+                        parts.push(`Matched rule: ${policy.matchedRule}`);
+                    parts.push(`Tool: ${toolName}${operation && operation !== toolName ? ` (operation: ${operation})` : ''}`);
+                    parts.push(`Review or change this policy in the FullCourtDefense console → Agent Security → Policies.`);
+                    throw new Error(parts.join(' | '));
                 }
             }
             const rawResult = await this.downstream.callTool(toolName, toolArgs);

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.21.22"
+  "version": "1.21.23"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.21.22",
+  "version": "1.21.23",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {