@danypops/vehicle-core 0.12.2 → 0.12.4

package/dist/vehicle-approvals.d.ts

@@ -9,6 +9,17 @@
 import type { VehicleEffect, VehiclePrincipal } from "./vehicle-contract.js";
 /** Set once at registry-configuration time (VehicleRegistry.configureApprovals()); never on a per-invoke basis. */
 export declare const DEFAULT_APPROVAL_EFFECTS: readonly VehicleEffect[];
+/**
+ * The name VehicleRegistry.configureApprovals() registers its built-in
+ * grant/deny operation under. Shared so vehicle-client-pi can recognize and
+ * exclude it from Pi tool projection by exact name (see its own use site):
+ * it is invoked only via this package's own approval-required retry dance
+ * using the extension's already-fixed permissions, never meant to be a
+ * model-callable tool -- a model that could call it directly would be able
+ * to grant its own pending approval requests, defeating the human-in-the-
+ * loop point of the gate entirely.
+ */
+export declare const VEHICLE_APPROVAL_RESOLVE_OPERATION_NAME = "vehicle.approval.resolve";
 /** How long a request stays resolvable before it lapses and must be re-requested. */
 export declare const DEFAULT_APPROVAL_TIMEOUT_MS: number;
 /** Emitted (as a Vehicle Event) the moment a gated-effect invoke() has no valid capability -- durable-first, before any interactive prompt is attempted. */

package/dist/vehicle-approvals.js

@@ -1,6 +1,17 @@
 import { defineVehicleEvent, defineVehicleSchema } from "./vehicle-contract.js";
 /** Set once at registry-configuration time (VehicleRegistry.configureApprovals()); never on a per-invoke basis. */
 export const DEFAULT_APPROVAL_EFFECTS = ["destructive", "open-world"];
+/**
+ * The name VehicleRegistry.configureApprovals() registers its built-in
+ * grant/deny operation under. Shared so vehicle-client-pi can recognize and
+ * exclude it from Pi tool projection by exact name (see its own use site):
+ * it is invoked only via this package's own approval-required retry dance
+ * using the extension's already-fixed permissions, never meant to be a
+ * model-callable tool -- a model that could call it directly would be able
+ * to grant its own pending approval requests, defeating the human-in-the-
+ * loop point of the gate entirely.
+ */
+export const VEHICLE_APPROVAL_RESOLVE_OPERATION_NAME = "vehicle.approval.resolve";
 /** How long a request stays resolvable before it lapses and must be re-requested. */
 export const DEFAULT_APPROVAL_TIMEOUT_MS = 5 * 60_000;
 const requestedPayloadSchema = defineVehicleSchema({

package/dist/vehicle-errors.d.ts

@@ -59,6 +59,8 @@ export declare class VehicleError extends Error {
     constructor(code: string, message: string, options: VehicleErrorOptions);
     toFailure(): VehicleFailure;
 }
+/** Recognizes VehicleError instances across duplicated package installations in one process. */
+export declare function isVehicleError(value: unknown): value is VehicleError;
 /** Extracts a bounded, wire-safe message from an unknown cause -- never the full stack trace, never an unbounded payload. */
 export declare function boundedCauseMessage(cause: unknown): string | undefined;
 export declare function boundedValidationDetails(issues: readonly VehicleSchemaIssue[] | undefined): JsonValue | undefined;

package/dist/vehicle-errors.js

@@ -1,3 +1,4 @@
+const VEHICLE_ERROR_BRAND = Symbol.for("@danypops/vehicle-core/VehicleError");
 /** Maps reviewed domain errors into wire-safe Vehicle errors while preserving already-mapped failures. */
 export function defineErrorMapping(rules, options = {}) {
     return async (run) => {
@@ -5,7 +6,7 @@ export function defineErrorMapping(rules, options = {}) {
             return await run();
         }
         catch (error) {
-            if (error instanceof VehicleError)
+            if (isVehicleError(error))
                 throw error;
             const rule = rules.find((candidate) => "errorClass" in candidate ? error instanceof candidate.errorClass : candidate.matches(error));
             const causeMessage = error instanceof Error ? error.message : String(error);
@@ -30,6 +31,7 @@ export class VehicleError extends Error {
     constructor(code, message, options) {
         super(message, options.cause === undefined ? undefined : { cause: options.cause });
         this.code = code;
+        Object.defineProperty(this, VEHICLE_ERROR_BRAND, { value: true });
         this.name = "VehicleError";
         this.category = options.category;
         this.retryable = options.retryable ?? false;
@@ -54,6 +56,10 @@ export class VehicleError extends Error {
         };
     }
 }
+/** Recognizes VehicleError instances across duplicated package installations in one process. */
+export function isVehicleError(value) {
+    return value instanceof Error && Reflect.get(value, VEHICLE_ERROR_BRAND) === true;
+}
 const MAX_CAUSE_MESSAGE_LENGTH = 500;
 /** Extracts a bounded, wire-safe message from an unknown cause -- never the full stack trace, never an unbounded payload. */
 export function boundedCauseMessage(cause) {

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@danypops/vehicle-core",
-	"version": "0.12.2",
+	"version": "0.12.4",
 	"description": "Vehicle's runtime-neutral wire contract: operation descriptors, schema codecs, failure shapes. Zero runtime dependencies, zero Bun-specific code -- the one thing every Vehicle client and server package depends on.",
 	"license": "MIT",
 	"type": "module",
@@ -19,7 +19,7 @@
 	},
 	"devDependencies": {
 		"@types/node": "^22.0.0",
-		"typescript": "^5.9.2"
+		"typescript": "^5.9.3"
 	},
 	"repository": {
 		"type": "git",

package/src/vehicle-approvals.ts

@@ -12,6 +12,18 @@ import { defineVehicleEvent, defineVehicleSchema } from "./vehicle-contract.js";
 /** Set once at registry-configuration time (VehicleRegistry.configureApprovals()); never on a per-invoke basis. */
 export const DEFAULT_APPROVAL_EFFECTS: readonly VehicleEffect[] = ["destructive", "open-world"];
 
+/**
+ * The name VehicleRegistry.configureApprovals() registers its built-in
+ * grant/deny operation under. Shared so vehicle-client-pi can recognize and
+ * exclude it from Pi tool projection by exact name (see its own use site):
+ * it is invoked only via this package's own approval-required retry dance
+ * using the extension's already-fixed permissions, never meant to be a
+ * model-callable tool -- a model that could call it directly would be able
+ * to grant its own pending approval requests, defeating the human-in-the-
+ * loop point of the gate entirely.
+ */
+export const VEHICLE_APPROVAL_RESOLVE_OPERATION_NAME = "vehicle.approval.resolve";
+
 /** How long a request stays resolvable before it lapses and must be re-requested. */
 export const DEFAULT_APPROVAL_TIMEOUT_MS = 5 * 60_000;
 

package/src/vehicle-errors.ts

@@ -1,5 +1,7 @@
 import type { JsonValue, VehicleSchemaIssue } from "./vehicle-contract.js";
 
+const VEHICLE_ERROR_BRAND = Symbol.for("@danypops/vehicle-core/VehicleError");
+
 export type VehicleFailureCategory =
 	| "validation"
 	| "not_found"
@@ -92,7 +94,7 @@ export function defineErrorMapping(
 		try {
 			return await run();
 		} catch (error) {
-			if (error instanceof VehicleError) throw error;
+			if (isVehicleError(error)) throw error;
 			const rule = rules.find((candidate) =>
 				"errorClass" in candidate ? error instanceof candidate.errorClass : candidate.matches(error),
 			);
@@ -122,6 +124,7 @@ export class VehicleError extends Error {
 		options: VehicleErrorOptions,
 	) {
 		super(message, options.cause === undefined ? undefined : { cause: options.cause });
+		Object.defineProperty(this, VEHICLE_ERROR_BRAND, { value: true });
 		this.name = "VehicleError";
 		this.category = options.category;
 		this.retryable = options.retryable ?? false;
@@ -148,6 +151,11 @@ export class VehicleError extends Error {
 	}
 }
 
+/** Recognizes VehicleError instances across duplicated package installations in one process. */
+export function isVehicleError(value: unknown): value is VehicleError {
+	return value instanceof Error && Reflect.get(value, VEHICLE_ERROR_BRAND) === true;
+}
+
 const MAX_CAUSE_MESSAGE_LENGTH = 500;
 
 /** Extracts a bounded, wire-safe message from an unknown cause -- never the full stack trace, never an unbounded payload. */