fullcourtdefense-cli 1.21.39 → 1.21.40

package/dist/commands/deterministicGuard.js

@@ -272,6 +272,12 @@ function builtIn(itemId, categoryId, category, ruleId, reason, findingEvidence,
  * references these files at all.
  */
 function honeypotTouch(value, options) {
+    // Honeypot is a catalog item (id 'honeypot_decoy_access') so admins can see it
+    // in the console and, if they must, turn it off — nothing enforces invisibly.
+    // It is zero-FP by design (daemon-planted decoy paths only), so it defaults ON
+    // and disabling is discouraged, but the toggle is honored like any other rule.
+    if (!isEnabled('honeypot_decoy_access', options))
+        return undefined;
     const paths = options?.honeypotPaths;
     if (!paths || paths.length === 0)
         return undefined;

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.21.39"
+  "version": "1.21.40"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.21.39",
+  "version": "1.21.40",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {
@@ -19,6 +19,7 @@
     "test:msi-stop-filter": "node scripts/test-msi-stop-filter.js",
     "test:guard-content-context": "npm run build && node scripts/test-guard-content-context.js",
     "test:guard-fp-fixes": "npm run build && node scripts/test-guard-fp-fixes.js",
+    "test:catalog-toggles": "npm run build && node scripts/test-catalog-toggles.js",
     "test:honeypot": "npm run build && node scripts/test-honeypot.js",
     "test:browser-credentials-rule": "npm run build && node scripts/test-browser-credentials-rule.js",
     "test:taint-ledger": "npm run build && node scripts/test-taint-ledger.js",