@sigrun/ext-gateway 0.1.16 → 0.1.19

package/CHANGELOG.md

@@ -5,7 +5,29 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [0.1.17] - 2026-11-05
+### Fixed
+- `@earendil-works/pi-ai` is declared as a peer. `dist/tools.js` imports
+  `Type` from it at runtime but the manifest listed only chord and
+  pi-durable, so a standalone install (outside a sigrun host that links
+  the module) could not resolve it. The host link masked this in
+  practice; the declaration now matches the import.
+
+## [0.1.18] - 2026-11-05
+
+- Decline button and declined outcomes in chat: a declinable interaction record renders
+  a danger-styled Decline button (any plan kind; budgeted against the channel's
+  `buttons.max`, falling back to a numbered list with just the Decline row at the
+  boundary), `declineFromChat` (write-access re-checked, terminal peek,
+  `host.declineInteraction`), declinedVia-aware settlement edits, and the
+  `Reply here to decline.` line for no-button channels. Companion to sigrun-core's
+  ask-user release line; the `@sigrun/shared` peer gains the 0.9.0 line.
+
+## [0.1.19] - 2026-11-06
+
+- The @sigrun/shared peer gains the 0.10.0 line (companion to sigrun-core
+  0.10.0); check-manifest's allowed line widens with it. No runtime change.
+
 ## [Unreleased]
 
 ## [0.1.15] - 2026-11-04

package/README.md

@@ -171,6 +171,18 @@ long-text field accepts a reply to its prompt. Other forms, including
 all forms containing secrets, point to the webui instead of collecting
 values over chat.
 
+A record the owning extension marked `declinable` also carries a Decline
+button: a danger-styled row minted independently of the answer plan (a
+webui plan gets just the Decline row after its pointer; a choice plan
+gets the option rows followed by the Decline row; when the options plus
+the Decline row would exceed the channel's button limit, the choice
+renders as a numbered list with just the Decline row). On a channel without
+button capability the prompt instead says `Reply here to decline.` — a
+plain reply that declines is core's message-decline (no gateway code).
+Decline taps take the same write-access re-check as answers and settle
+the record `skipped` with `declinedVia: "button"`; outcome lines read
+`declined by alice` (button) or `declined by alice (replied in chat)`.
+
 Button taps, numbered replies, and reply-to text answers require a linked
 sender with current write access to the conversation. Numbered answers
 match only when exactly one choice interaction is pending in that chat.

package/dist/engine.js

@@ -45,7 +45,7 @@ import { hashId } from "./log.js";
 import { collectAttachments } from "./inbound/media.js";
 import { PromptStore } from "./interactions/prompts.js";
 import { createInteractionNotifier, onInteractionSettled } from "./interactions/chat.js";
-import { answerFromChat, createInteractionAnswerStage } from "./interactions/answer.js";
+import { answerFromChat, createInteractionAnswerStage, declineFromChat } from "./interactions/answer.js";
 import { receiptForInteraction } from "./interactions/receipts.js";
 /** The engine's own timer defaults (the real world). */
 function defaultTimers() {
@@ -456,6 +456,7 @@ export function createEngine(host, deps = {}) {
                     streams,
                     channelOf,
                     interactionAnswer: async (answer) => await answerFromChat(interactionDeps(), answer),
+                    interactionDecline: async (target) => await declineFromChat(interactionDeps(), target),
                     stages: {
                         interactionAnswer: createInteractionAnswerStage({
                             ...interactionDeps(),

package/dist/inbound/pipeline.d.ts

@@ -96,6 +96,12 @@ export interface PipelineDeps {
         readonly values: Record<string, JsonValue>;
         readonly user: string | undefined;
     }) => Promise<string>;
+    /** Ask-user Task 6: the write-gated decline seam (Decline button taps). */
+    readonly interactionDecline?: (target: {
+        readonly conversationId: number;
+        readonly callId: string;
+        readonly user: string | undefined;
+    }) => Promise<string>;
     /** Cross-channel lookup for `/pair` approval notices. Stand-alone
      *  pipelines fall back to their own adapter. */
     readonly channelOf?: (channel: string) => ChannelContribution | undefined;

package/dist/inbound/pipeline.js

@@ -528,6 +528,17 @@ export function createPipeline(deps) {
         if (action === undefined)
             return;
         const tapper = await access.identities.userFor(config, channelId, event.sender.id);
+        if (action.kind === "interaction-decline") {
+            if (deps.interactionDecline === undefined)
+                return;
+            const reply = await deps.interactionDecline({
+                conversationId: action.conversationId,
+                callId: action.callId,
+                user: tapper?.user,
+            });
+            await sendNotice(event.chat, reply, undefined);
+            return;
+        }
         if (action.kind === "interaction") {
             if (deps.interactionAnswer === undefined)
                 return;

package/dist/inbound/tokens.d.ts

@@ -27,6 +27,11 @@ export type TokenAction = {
     /** The root-form choice field (U6 records are not decision-specific). */
     readonly field?: string;
     readonly optionId: string;
+} | {
+    /** Decline a declinable interaction (ask-user Task 6): a human's "no". */
+    readonly kind: "interaction-decline";
+    readonly conversationId: number;
+    readonly callId: string;
 };
 /** The button-token table, one instance per engine. */
 export declare class ButtonTokens {

package/dist/interactions/answer.d.ts

@@ -25,6 +25,12 @@ export interface ChatAnswer {
 }
 /** Answer after proving the named chat user can still write the conversation. */
 export declare function answerFromChat(deps: AnswerDeps, answer: ChatAnswer): Promise<string>;
+/** Decline a declinable interaction (the write-access + terminal guards mirror answerFromChat). */
+export declare function declineFromChat(deps: Pick<AnswerDeps, "host" | "context">, target: {
+    conversationId: number;
+    callId: string;
+    user: string | undefined;
+}): Promise<string>;
 /** One shared human-readable outcome for settlement edits and stale taps. */
 export declare function outcomeOf(record: {
     readonly status: string;
@@ -32,6 +38,7 @@ export declare function outcomeOf(record: {
         readonly values: Readonly<Record<string, JsonValue>>;
     };
     readonly answeredByUser?: string;
+    readonly declinedVia?: "button" | "message";
 }): string;
 export declare function summarizeValues(values: Readonly<Record<string, JsonValue>>): string;
 /** Stage 8: consume a numbered or reply-to answer, else continue admission. */

package/dist/interactions/answer.js

@@ -34,12 +34,35 @@ export async function answerFromChat(deps, answer) {
     }
     return `Answered: ${summarizeValues(answer.values)}.`;
 }
+/** Decline a declinable interaction (the write-access + terminal guards mirror answerFromChat). */
+export async function declineFromChat(deps, target) {
+    if (target.user === undefined)
+        return "You do not have write access to this conversation.";
+    const meta = await deps.host.conversations.meta(target.conversationId);
+    const access = await deps.host.access.accessOf({ user: target.user }, { owner: meta.owner, sharing: meta.sharing });
+    if (access !== "write")
+        return "You do not have write access to this conversation.";
+    const context = deps.context ?? { abortSignal: new AbortController().signal };
+    const record = await deps.host.peekInteraction(target.conversationId, target.callId, context);
+    if (record !== undefined && TERMINAL.has(record.status)) {
+        return `Already ${outcomeOf(record)}.`;
+    }
+    if (record === undefined)
+        return "That interaction is no longer available.";
+    const declined = await deps.host.declineInteraction(target.conversationId, target.callId, context, { user: target.user });
+    if (!declined)
+        return "Already settled.";
+    return "Declined.";
+}
 /** One shared human-readable outcome for settlement edits and stale taps. */
 export function outcomeOf(record) {
     const who = record.answeredByUser === undefined ? "" : ` by ${record.answeredByUser}`;
     if (record.status === "answered") {
         return `answered${who}: ${summarizeValues(record.answer?.values ?? {})}`;
     }
+    if (record.status === "skipped" && record.declinedVia !== undefined) {
+        return `declined${who}${record.declinedVia === "message" ? " (replied in chat)" : ""}`;
+    }
     return `${record.status}${who}`;
 }
 export function summarizeValues(values) {

package/dist/interactions/chat.js

@@ -3,7 +3,7 @@
  * durable ledger entries; delivery receipts populate PromptStore refs so
  * settlement can edit the exact platform messages.
  */
-import { summarizeValues } from "./answer.js";
+import { outcomeOf } from "./answer.js";
 import { planInteraction, renderInteraction, truncateInteractionText } from "./render.js";
 /** The gateway notifier: interaction.pending plus the ordinary home notifier. */
 export function createInteractionNotifier(deps) {
@@ -68,7 +68,7 @@ async function notifyInteraction(event, deps) {
             conversationId: event.conversationId,
             conversationName: (await deps.host.conversations.meta(event.conversationId)).name ?? `Conversation ${event.conversationId}`,
             ...(event.url === undefined ? {} : { link: event.url }),
-            issue: (action) => deps.tokens.issue(action.kind === "interaction"
+            issue: (action) => deps.tokens.issue(action.kind === "interaction" || action.kind === "interaction-decline"
                 ? { ...action, conversationId: event.conversationId }
                 : action),
         });
@@ -120,14 +120,18 @@ export async function onInteractionSettled(event, deps, context) {
 }
 /** The outcome summary the settlement edit/notice carries. */
 function outcomeText(event) {
-    const who = event.answeredByUser === undefined ? "" : ` by ${event.answeredByUser}`;
-    // SAFETY: the stored answer's values are validated JsonValue (the
-    // record's answer shape); the payload types them loosely because
-    // the contract cannot import the json module's runtime shape.
-    const answerValues = (event.answer ?? {});
-    return event.status === "answered"
-        ? `answered${who}: ${summarizeValues(answerValues)}`
-        : `${event.status}${who}`;
+    // Delegates to outcomeOf (ONE wording for live taps and settlement
+    // edits); SAFETY: the stored answer's values are validated JsonValue
+    // (the record's answer shape) — the payload types them loosely
+    // because the contract cannot import the json module's runtime shape.
+    return outcomeOf({
+        status: event.status,
+        ...(event.answer === undefined
+            ? {}
+            : { answer: { values: event.answer } }),
+        ...(event.answeredByUser === undefined ? {} : { answeredByUser: event.answeredByUser }),
+        ...(event.declinedVia === undefined ? {} : { declinedVia: event.declinedVia }),
+    });
 }
 /**
  * Enqueue settlement edits and per-binding fallback outcome notices

package/dist/interactions/render.d.ts

@@ -26,7 +26,7 @@ export interface RenderInteractionOptions {
     readonly conversationId?: number;
     /** Mint the opaque transport-private action carried by each button. */
     readonly issue: (action: TokenAction & {
-        readonly kind: "interaction";
+        readonly kind: "interaction" | "interaction-decline";
     }) => string;
 }
 /** Plan the one answer mechanism the record's root form supports in chat. */

package/dist/interactions/render.js

@@ -27,7 +27,11 @@ export function planInteraction(record, caps) {
                 kind: "choice",
                 field: choice.name,
                 options: choice.options,
-                buttons: choice.options.length <= (caps.buttons?.max ?? 0),
+                // The Decline row shares the button budget: a declinable
+                // record needs one more slot, so a maxed-out choice falls
+                // back to the numbered list (its Decline row still renders).
+                buttons: choice.options.length + (record.declinable === true ? 1 : 0) <=
+                    (caps.buttons?.max ?? 0),
             };
         }
     }
@@ -85,6 +89,28 @@ export function renderInteraction(record, caps, opts) {
         if (opts.link !== undefined)
             lines.push(opts.link);
     }
+    // The Decline affordance is minted OUTSIDE the plan (any declinable
+    // record, independent of plan.kind): a choice plan appends the row
+    // after its option rows; a webui plan gets the row after its pointer.
+    // A channel without buttons gets a line — a reply-to decline is
+    // core's message-decline (no gateway code).
+    if (record.declinable === true) {
+        if (caps.buttons !== undefined) {
+            const declineRow = [{
+                    label: truncateLabel("Decline", caps.buttons.labelMax),
+                    data: opts.issue({
+                        kind: "interaction-decline",
+                        conversationId: opts.conversationId ?? 0,
+                        callId: record.callId,
+                    }),
+                    style: "danger",
+                }];
+            buttons = buttons === undefined ? [declineRow] : [...buttons, declineRow];
+        }
+        else {
+            lines.push("Reply here to decline.");
+        }
+    }
     // The body projection is plain text; the capability formatter still
     // runs so native/plain channels get the same §8.6 treatment as finals.
     const formatted = renderChunks(lines.join("\n"), caps).join("\n");

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@sigrun/ext-gateway",
-	"version": "0.1.16",
-	"description": "Gateway engine extension for sigrun (pi-durable): chat-transport supervision \u2014 channel adapters, inbound pipeline, delivery",
+	"version": "0.1.19",
+	"description": "Gateway engine extension for sigrun (pi-durable): chat-transport supervision — channel adapters, inbound pipeline, delivery",
 	"type": "module",
 	"engines": {
 		"node": ">=22.19.0"
@@ -26,11 +26,13 @@
 	},
 	"peerDependencies": {
 		"@earendil-works/chord": "1.3.0 || 1.4.0",
+		"@earendil-works/pi-ai": "1.3.0 || 1.4.0",
 		"@earendil-works/pi-durable": "1.3.0 || 1.4.0",
-		"@sigrun/shared": "0.3.0 || 0.4.0 || 0.4.1 || 0.4.2 || 0.5.0 || 0.6.0 || 0.6.1 || 0.7.0 || 0.8.0"
+		"@sigrun/shared": "0.3.0 || 0.4.0 || 0.4.1 || 0.4.2 || 0.5.0 || 0.6.0 || 0.6.1 || 0.7.0 || 0.8.0 || 0.9.0 || 0.10.0"
 	},
 	"devDependencies": {
 		"@earendil-works/chord": "1.4.0",
+		"@earendil-works/pi-ai": "1.4.0",
 		"@earendil-works/pi-durable": "1.4.0",
 		"@sigrun/shared": "file:../sigrun/shared",
 		"@sigrun/sigrun": "file:../sigrun",
@@ -52,4 +54,4 @@
 		"access": "public",
 		"provenance": true
 	}
-}
+}