@praesidias/sdk 0.1.0 → 0.1.1

package/dist/index.cjs

@@ -257,6 +257,8 @@ var SENTENCES = {
   DENY_POLICY_AUTHORITY_SCOPE_REQUIREMENTS_UNMET: "This agent's access does not cover what the rule requires.",
   DENY_POLICY_AUTHORITY_PATH_REQUIREMENTS_UNMET: "This agent's access was not given the way the rule requires.",
   DENY_POLICY_CHANGED_DURING_DECISION: "The rules changed while this was being decided. Ask again.",
+  DENY_GROUPS_CHANGED_DURING_DECISION: "This agent's groups changed while this was being decided. Ask again.",
+  ALLOW_POLICY_REPORT_ONLY: "A rule allows this.",
   DENY_PRINCIPAL_NOT_BOUND: "This key may not act as that agent.",
   DENY_WORKLOAD_NOT_VERIFIED: "This agent must run from its own workload, and this request did not prove that.",
   DENY_DOMAIN_NO_MATCH: "This action is outside every area, so it is blocked.",
@@ -276,6 +278,10 @@ var isWaitingCode = (code) => WAITING.has(code);
 function sentenceFor(code) {
   return SENTENCES[code] ?? (code.startsWith("DENY_") ? "Praesidias blocked this action." : code);
 }
+function messageOf(reasons, code) {
+  const own = reasons?.caseMessage;
+  return typeof own === "string" && own.trim() ? own.slice(0, 500) : sentenceFor(code);
+}
 
 // src/report.ts
 var ACTION_NAME = /^[A-Za-z0-9][A-Za-z0-9_.:-]{0,127}$/;
@@ -545,7 +551,7 @@ var Praesidias = class {
     return {
       decisionId: body.decisionId,
       allowed: result === "ALLOW",
-      reason: { code, message: sentenceFor(code) },
+      reason: { code, message: messageOf(body.reasons, code) },
       context,
       caseId: typeof caseId === "string" ? caseId : null,
       boundPaths: Array.isArray(paths) ? paths.map(String) : [],

package/dist/index.js

@@ -201,6 +201,8 @@ var SENTENCES = {
   DENY_POLICY_AUTHORITY_SCOPE_REQUIREMENTS_UNMET: "This agent's access does not cover what the rule requires.",
   DENY_POLICY_AUTHORITY_PATH_REQUIREMENTS_UNMET: "This agent's access was not given the way the rule requires.",
   DENY_POLICY_CHANGED_DURING_DECISION: "The rules changed while this was being decided. Ask again.",
+  DENY_GROUPS_CHANGED_DURING_DECISION: "This agent's groups changed while this was being decided. Ask again.",
+  ALLOW_POLICY_REPORT_ONLY: "A rule allows this.",
   DENY_PRINCIPAL_NOT_BOUND: "This key may not act as that agent.",
   DENY_WORKLOAD_NOT_VERIFIED: "This agent must run from its own workload, and this request did not prove that.",
   DENY_DOMAIN_NO_MATCH: "This action is outside every area, so it is blocked.",
@@ -220,6 +222,10 @@ var isWaitingCode = (code) => WAITING.has(code);
 function sentenceFor(code) {
   return SENTENCES[code] ?? (code.startsWith("DENY_") ? "Praesidias blocked this action." : code);
 }
+function messageOf(reasons, code) {
+  const own = reasons?.caseMessage;
+  return typeof own === "string" && own.trim() ? own.slice(0, 500) : sentenceFor(code);
+}
 
 // src/report.ts
 var ACTION_NAME = /^[A-Za-z0-9][A-Za-z0-9_.:-]{0,127}$/;
@@ -489,7 +495,7 @@ var Praesidias = class {
     return {
       decisionId: body.decisionId,
       allowed: result === "ALLOW",
-      reason: { code, message: sentenceFor(code) },
+      reason: { code, message: messageOf(body.reasons, code) },
       context,
       caseId: typeof caseId === "string" ? caseId : null,
       boundPaths: Array.isArray(paths) ? paths.map(String) : [],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@praesidias/sdk",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Check every agent action with Praesidias before it runs.",
   "license": "Apache-2.0",
   "author": "Praesidias",