@danypops/vehicle-core 0.12.3 → 0.12.4

package/dist/vehicle-approvals.d.ts

@@ -9,6 +9,17 @@
 import type { VehicleEffect, VehiclePrincipal } from "./vehicle-contract.js";
 /** Set once at registry-configuration time (VehicleRegistry.configureApprovals()); never on a per-invoke basis. */
 export declare const DEFAULT_APPROVAL_EFFECTS: readonly VehicleEffect[];
+/**
+ * The name VehicleRegistry.configureApprovals() registers its built-in
+ * grant/deny operation under. Shared so vehicle-client-pi can recognize and
+ * exclude it from Pi tool projection by exact name (see its own use site):
+ * it is invoked only via this package's own approval-required retry dance
+ * using the extension's already-fixed permissions, never meant to be a
+ * model-callable tool -- a model that could call it directly would be able
+ * to grant its own pending approval requests, defeating the human-in-the-
+ * loop point of the gate entirely.
+ */
+export declare const VEHICLE_APPROVAL_RESOLVE_OPERATION_NAME = "vehicle.approval.resolve";
 /** How long a request stays resolvable before it lapses and must be re-requested. */
 export declare const DEFAULT_APPROVAL_TIMEOUT_MS: number;
 /** Emitted (as a Vehicle Event) the moment a gated-effect invoke() has no valid capability -- durable-first, before any interactive prompt is attempted. */

package/dist/vehicle-approvals.js

@@ -1,6 +1,17 @@
 import { defineVehicleEvent, defineVehicleSchema } from "./vehicle-contract.js";
 /** Set once at registry-configuration time (VehicleRegistry.configureApprovals()); never on a per-invoke basis. */
 export const DEFAULT_APPROVAL_EFFECTS = ["destructive", "open-world"];
+/**
+ * The name VehicleRegistry.configureApprovals() registers its built-in
+ * grant/deny operation under. Shared so vehicle-client-pi can recognize and
+ * exclude it from Pi tool projection by exact name (see its own use site):
+ * it is invoked only via this package's own approval-required retry dance
+ * using the extension's already-fixed permissions, never meant to be a
+ * model-callable tool -- a model that could call it directly would be able
+ * to grant its own pending approval requests, defeating the human-in-the-
+ * loop point of the gate entirely.
+ */
+export const VEHICLE_APPROVAL_RESOLVE_OPERATION_NAME = "vehicle.approval.resolve";
 /** How long a request stays resolvable before it lapses and must be re-requested. */
 export const DEFAULT_APPROVAL_TIMEOUT_MS = 5 * 60_000;
 const requestedPayloadSchema = defineVehicleSchema({

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@danypops/vehicle-core",
-	"version": "0.12.3",
+	"version": "0.12.4",
 	"description": "Vehicle's runtime-neutral wire contract: operation descriptors, schema codecs, failure shapes. Zero runtime dependencies, zero Bun-specific code -- the one thing every Vehicle client and server package depends on.",
 	"license": "MIT",
 	"type": "module",
@@ -19,7 +19,7 @@
 	},
 	"devDependencies": {
 		"@types/node": "^22.0.0",
-		"typescript": "^5.9.2"
+		"typescript": "^5.9.3"
 	},
 	"repository": {
 		"type": "git",

package/src/vehicle-approvals.ts

@@ -12,6 +12,18 @@ import { defineVehicleEvent, defineVehicleSchema } from "./vehicle-contract.js";
 /** Set once at registry-configuration time (VehicleRegistry.configureApprovals()); never on a per-invoke basis. */
 export const DEFAULT_APPROVAL_EFFECTS: readonly VehicleEffect[] = ["destructive", "open-world"];
 
+/**
+ * The name VehicleRegistry.configureApprovals() registers its built-in
+ * grant/deny operation under. Shared so vehicle-client-pi can recognize and
+ * exclude it from Pi tool projection by exact name (see its own use site):
+ * it is invoked only via this package's own approval-required retry dance
+ * using the extension's already-fixed permissions, never meant to be a
+ * model-callable tool -- a model that could call it directly would be able
+ * to grant its own pending approval requests, defeating the human-in-the-
+ * loop point of the gate entirely.
+ */
+export const VEHICLE_APPROVAL_RESOLVE_OPERATION_NAME = "vehicle.approval.resolve";
+
 /** How long a request stays resolvable before it lapses and must be re-requested. */
 export const DEFAULT_APPROVAL_TIMEOUT_MS = 5 * 60_000;