fullcourtdefense-cli 1.27.3 → 1.27.4

package/dist/commands/hook.js

@@ -682,14 +682,22 @@ function tryLocalPolicyEnforcement(ctx, call, detail, opts = {}) {
         (0, telemetry_1.triggerFlush)(true);
         ctx.respond(true, `Blocked by FullCourtDefense${local.policyName ? ` (${local.policyName})` : ''} — enforced locally while the policy service is unreachable.${approvalNote}`, `FullCourtDefense blocked this ${ctx.event} using the locally cached org policy${local.policyName ? ` "${local.policyName}"` : ''} (${detail}).${approvalNote} Do not retry until the connection is restored or the policy allows it.`);
     }
+    // Monitor machines land here by design (zero synchronous network calls), not
+    // because anything is down — never tell the developer the service is
+    // unreachable when it is simply not consulted.
+    const monitorPath = opts.countAsGateFailure === false;
     if (local.verdict === 'log') {
         // Warn-only rule, offline: still a real warning + Warned in the fleet.
         const warning = warnByPolicy(call, local, ctx.event, ctx.exitsProcess, 'local-first');
-        ctx.respond(false, warning.userMsg, `${warning.agentMsg} (policy service unreachable — evaluated from the locally cached org policies).`);
+        ctx.respond(false, warning.userMsg, monitorPath
+            ? warning.agentMsg
+            : `${warning.agentMsg} (policy service unreachable — evaluated from the locally cached org policies).`);
     }
-    spoolCallEvent(call, { decision: 'allow', reason: `local policy allow (offline): ${detail}`, offlineEnforced: true });
+    spoolCallEvent(call, { decision: 'allow', reason: `local policy allow (${monitorPath ? 'monitor' : 'offline'}): ${detail}`, offlineEnforced: true });
     (0, telemetry_1.triggerFlush)(false);
-    ctx.respond(false, undefined, `FullCourtDefense: policy service unreachable — this ${ctx.event} was checked against the locally cached org policies and allowed.`);
+    ctx.respond(false, undefined, monitorPath
+        ? undefined
+        : `FullCourtDefense: policy service unreachable — this ${ctx.event} was checked against the locally cached org policies and allowed.`);
 }
 /** Per-event attribution that maps onto the existing Shield runtime headers (prompt path). */
 function attributionFor(event, p) {

package/dist/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "1.27.3"
+  "version": "1.27.4"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullcourtdefense-cli",
-  "version": "1.27.3",
+  "version": "1.27.4",
   "description": "Full Court Defense CLI — security scanning for AI agents from your terminal",
   "main": "dist/index.js",
   "bin": {