@arbiterhq/cli 0.1.0 → 0.1.1

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 0.1.1 — 2026-07-08
+
+### Changed
+
+- Scaffolded / discovered permissions in manifests use **`defaultDecision: hold`** instead of legacy posture `status`
+- Depends on `@arbiterhq/sdk@^0.2.1`
+
+### Compatibility
+
+- Manifest validation still accepts deprecated permission `status` posture aliases via the SDK
+
 ## 0.1.0 — 2026-06-28
 
 First public npm release under **`@arbiterhq/cli`**. The CLI binary remains **`arbiter`**; only the npm scope changed from the previously planned `@arbiter` org.
@@ -17,4 +28,4 @@ First public npm release under **`@arbiterhq/cli`**. The CLI binary remains **`a
 
 ### Dependencies
 
-- Requires `@arbiterhq/sdk@^0.2.0` (publish SDK before CLI)
+- Requires `@arbiterhq/sdk@^0.2.1` (publish SDK before CLI)

package/dist/index.js

@@ -109,6 +109,13 @@ var PERMISSION_STATUSES = [
   "denied",
   "approval_required"
 ];
+var PERMISSION_DEFAULT_DECISIONS = ["allow", "hold", "deny"];
+var LEGACY_STATUS_TO_DEFAULT_DECISION = {
+  pending_review: null,
+  allowed: "allow",
+  denied: "deny",
+  approval_required: "hold"
+};
 var AGENT_STATUSES = [
   "pending_review",
   "active",
@@ -172,7 +179,9 @@ var ManifestAgentSchema = z.object({
 var ManifestPermissionSchema = z.object({
   action: z.string().min(1).regex(SNAKE_CASE_ACTION, "Action must be snake_case"),
   description: z.string().optional(),
+  /** @deprecated Prefer defaultDecision. Legacy posture alias. */
   status: z.enum(PERMISSION_STATUSES).optional(),
+  defaultDecision: z.enum(PERMISSION_DEFAULT_DECISIONS).optional(),
   source: z.enum(RESOURCE_SOURCES).optional(),
   management: z.enum(RESOURCE_MANAGEMENTS).optional(),
   assignedAgents: z.array(z.string().min(1)).optional(),
@@ -181,6 +190,21 @@ var ManifestPermissionSchema = z.object({
   documentation: z.string().nullable().optional(),
   tags: z.array(z.string()).nullable().optional(),
   metadata: z.record(z.unknown()).nullable().optional()
+}).transform((permission) => {
+  if (permission.defaultDecision !== void 0) {
+    return permission;
+  }
+  if (permission.status === void 0) {
+    return permission;
+  }
+  const mapped = LEGACY_STATUS_TO_DEFAULT_DECISION[permission.status];
+  if (mapped === null) {
+    return permission;
+  }
+  return {
+    ...permission,
+    defaultDecision: mapped
+  };
 });
 var PolicyConditionSchema = z.object({
   field: z.string().min(1).max(256),
@@ -379,7 +403,7 @@ function starterManifestTemplate() {
       permissions: [
         {
           action: "send_payment",
-          status: "approval_required"
+          defaultDecision: "hold"
         }
       ],
       policies: [
@@ -727,7 +751,7 @@ function buildWorkspaceFromDrift(suggestions, records) {
     if (suggestion.type === "permission" && suggestion.action && !seenPermissions.has(suggestion.action)) {
       workspace.permissions.push({
         action: suggestion.action,
-        status: "pending_review"
+        defaultDecision: "hold"
       });
       seenPermissions.add(suggestion.action);
     }
@@ -754,7 +778,7 @@ function buildWorkspaceFromDrift(suggestions, records) {
     if (record.type === "permission" && record.action && !seenPermissions.has(record.action)) {
       workspace.permissions.push({
         action: record.action,
-        status: "pending_review"
+        defaultDecision: "hold"
       });
       seenPermissions.add(record.action);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbiterhq/cli",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Official Arbiter command line interface",
   "license": "MIT",
   "type": "module",
@@ -23,7 +23,7 @@
     "prepublishOnly": "npm run build"
   },
   "dependencies": {
-    "@arbiterhq/sdk": "^0.2.0",
+    "@arbiterhq/sdk": "^0.2.1",
     "commander": "^13.1.0",
     "yaml": "^2.8.0",
     "zod": "^3.25.76"