@danypops/vehicle-conformance 0.4.2 → 0.4.3

package/dist/vehicle-conformance.js

@@ -48,6 +48,18 @@ const ConformanceKeyed = defineVehicleOperation({
     output: outputSchema,
     permissions: [],
     effect: "external-write",
+    requiresApproval: false,
+    idempotency: { mode: "keyed", retentionMs: 60_000 },
+    limits: LIMITS,
+});
+const ConformanceUnconfiguredRisk = defineVehicleOperation({
+    name: "conformance.unconfigured-risk",
+    version: 1,
+    description: "Proves that risky operations require an explicit registry approval-policy decision.",
+    input: passthroughSchema,
+    output: outputSchema,
+    permissions: [],
+    effect: "external-write",
     idempotency: { mode: "keyed", retentionMs: 60_000 },
     limits: LIMITS,
 });
@@ -94,6 +106,7 @@ export function registerConformanceOperations(registry) {
         throw new VehicleError("conformance-boom", "conformance.boom always fails", { category: "internal" });
     }));
     registry.register("conformance", bindVehicleOperation(ConformanceKeyed, () => async (context) => ({ echoed: context.input.value })));
+    registry.register("conformance", bindVehicleOperation(ConformanceUnconfiguredRisk, () => async (context) => ({ echoed: context.input.value })));
     registry.register("conformance", bindVehicleOperation(ConformanceProgress, () => async (context) => {
         context.reportProgress({ step: 1 });
         context.reportProgress({ step: 2 });
@@ -127,6 +140,7 @@ export function registerVehicleClientConformance(runner, fixture) {
                     "conformance.never@1",
                     "conformance.progress@1",
                     "conformance.slow-progress@1",
+                    "conformance.unconfigured-risk@1",
                 ]);
                 const echo = manifest.operations.find((op) => op.name === "conformance.echo");
                 expect(echo?.permissions).toEqual(["conformance:echo"]);
@@ -211,6 +225,20 @@ export function registerVehicleClientConformance(runner, fixture) {
                 await cleanup();
             }
         });
+        it("reports an unconfigured risky operation as a hard failure", async () => {
+            const { client, cleanup } = await fixture.create();
+            try {
+                const manifest = await client.manifest();
+                expect(manifest.approvalPolicy).toMatchObject({
+                    status: "unconfigured",
+                    unconfiguredRiskyOperations: ["conformance.unconfigured-risk@1"],
+                });
+                await expect(client.invoke("conformance.unconfigured-risk", 1, { value: "x" }, { idempotencyKey: "risk-1" })).rejects.toMatchObject({ code: "approval-policy-unconfigured", category: "authorization" });
+            }
+            finally {
+                await cleanup();
+            }
+        });
         it("invoke() rejects a request exceeding its declared byte bound", async () => {
             const { client, cleanup } = await fixture.create();
             try {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@danypops/vehicle-conformance",
-	"version": "0.4.2",
+	"version": "0.4.3",
 	"description": "Runner-neutral conformance suite for VehicleClient implementations, with Bun and Vitest adapters over one shared assertion matrix.",
 	"license": "MIT",
 	"type": "module",
@@ -26,8 +26,8 @@
 		"typecheck": "tsc --noEmit"
 	},
 	"dependencies": {
-		"@danypops/vehicle-core": "^0.19.1",
-		"@danypops/vehicle-server": "^0.27.1"
+		"@danypops/vehicle-core": "^0.19.2",
+		"@danypops/vehicle-server": "^0.27.3"
 	},
 	"devDependencies": {
 		"@danypops/vehicle-client": "^0.10.8",

package/src/vehicle-conformance.ts

@@ -100,6 +100,19 @@ const ConformanceKeyed = defineVehicleOperation({
 	output: outputSchema,
 	permissions: [],
 	effect: "external-write",
+	requiresApproval: false,
+	idempotency: { mode: "keyed", retentionMs: 60_000 },
+	limits: LIMITS,
+});
+
+const ConformanceUnconfiguredRisk = defineVehicleOperation({
+	name: "conformance.unconfigured-risk",
+	version: 1,
+	description: "Proves that risky operations require an explicit registry approval-policy decision.",
+	input: passthroughSchema,
+	output: outputSchema,
+	permissions: [],
+	effect: "external-write",
 	idempotency: { mode: "keyed", retentionMs: 60_000 },
 	limits: LIMITS,
 });
@@ -160,6 +173,10 @@ export function registerConformanceOperations(registry: VehicleRegistry): void {
 		"conformance",
 		bindVehicleOperation(ConformanceKeyed, () => async (context) => ({ echoed: context.input.value })),
 	);
+	registry.register(
+		"conformance",
+		bindVehicleOperation(ConformanceUnconfiguredRisk, () => async (context) => ({ echoed: context.input.value })),
+	);
 	registry.register(
 		"conformance",
 		bindVehicleOperation(ConformanceProgress, () => async (context) => {
@@ -211,6 +228,7 @@ export function registerVehicleClientConformance(runner: VehicleConformanceRunne
 					"conformance.never@1",
 					"conformance.progress@1",
 					"conformance.slow-progress@1",
+					"conformance.unconfigured-risk@1",
 				]);
 				const echo = manifest.operations.find((op) => op.name === "conformance.echo");
 				expect(echo?.permissions).toEqual(["conformance:echo"]);
@@ -303,6 +321,22 @@ export function registerVehicleClientConformance(runner: VehicleConformanceRunne
 			}
 		});
 
+		it("reports an unconfigured risky operation as a hard failure", async () => {
+			const { client, cleanup } = await fixture.create();
+			try {
+				const manifest = await client.manifest();
+				expect(manifest.approvalPolicy).toMatchObject({
+					status: "unconfigured",
+					unconfiguredRiskyOperations: ["conformance.unconfigured-risk@1"],
+				});
+				await expect(client.invoke("conformance.unconfigured-risk", 1, { value: "x" }, { idempotencyKey: "risk-1" })).rejects.toMatchObject(
+					{ code: "approval-policy-unconfigured", category: "authorization" },
+				);
+			} finally {
+				await cleanup();
+			}
+		});
+
 		it("invoke() rejects a request exceeding its declared byte bound", async () => {
 			const { client, cleanup } = await fixture.create();
 			try {