@vellumai/cli 0.12.4-dev.202609232017.d454a3d → 0.12.4-dev.202609232047.847daa9

package/node_modules/@vellumai/local-mode/node_modules/@vellumai/service-contracts/src/__tests__/guardian-requests.test.ts

@@ -0,0 +1,26 @@
+import { describe, expect, test } from "bun:test";
+
+import {
+  GUARDIAN_DECISION_ACTION_IDS,
+  isDenyingGuardianAction,
+  isParkGuardianAction,
+} from "../guardian-requests.js";
+
+describe("guardian decision actions", () => {
+  test("reject, leave_unverified and block deny; every other action approves", () => {
+    const denying = GUARDIAN_DECISION_ACTION_IDS.filter(
+      isDenyingGuardianAction,
+    );
+    expect(denying).toEqual(["reject", "leave_unverified", "block"]);
+  });
+
+  test("only leave_unverified parks the sender", () => {
+    const parking = GUARDIAN_DECISION_ACTION_IDS.filter(isParkGuardianAction);
+    expect(parking).toEqual(["leave_unverified"]);
+  });
+
+  test("an absent or unknown action neither denies nor parks", () => {
+    expect(isDenyingGuardianAction(undefined)).toBe(false);
+    expect(isParkGuardianAction("approve_always")).toBe(false);
+  });
+});

package/node_modules/@vellumai/local-mode/node_modules/@vellumai/service-contracts/src/guardian-requests.ts

@@ -1,7 +1,8 @@
 /**
- * Canonical vocabulary for a guardian request's lifecycle status, shared by
- * the gateway that owns the request rows, the daemon that decides and
- * projects them, and the web that renders the projection.
+ * Canonical vocabulary for guardian requests, shared by the gateway that owns
+ * the request rows, the daemon that decides and projects them, and the web
+ * that renders the projection: a request's lifecycle status, the actions a
+ * guardian can decide it with, and the weight a card gives each action.
  */
 import { z } from "zod";
 
@@ -16,3 +17,76 @@ export const GuardianRequestStatusSchema = z.enum(
   GUARDIAN_REQUEST_STATUS_VALUES,
 );
 export type GuardianRequestStatus = z.infer<typeof GuardianRequestStatusSchema>;
+
+/**
+ * The actions a guardian can decide a request with.
+ *
+ * `approve_once` / `reject` are the generic decision pair used by every
+ * request kind. `trust` / `verify_code` / `leave_unverified` / `block` are the
+ * introduction-card actions, valid only for `access_request` requests.
+ */
+export const GUARDIAN_DECISION_ACTION_IDS = [
+  "approve_once",
+  "reject",
+  "trust",
+  "verify_code",
+  "leave_unverified",
+  "block",
+] as const;
+export const GuardianDecisionActionIdSchema = z.enum(
+  GUARDIAN_DECISION_ACTION_IDS,
+);
+export type GuardianDecisionActionId = z.infer<
+  typeof GuardianDecisionActionIdSchema
+>;
+
+/** Actions that resolve a request to `denied`; every other one approves. */
+export const GUARDIAN_DENYING_ACTION_VALUES = [
+  "reject",
+  "leave_unverified",
+  "block",
+] as const satisfies readonly GuardianDecisionActionId[];
+
+/**
+ * The denying actions that park the sender at `unverified`: a neutral hold,
+ * not a rejection. A parked contact is still admitted under the permissive
+ * admission floors (`any_contact`, `strangers`) and can be trusted or verified
+ * later; contrast `block` (revoked, a hard keep-out) and `reject` (an explicit
+ * decline). All three resolve the request to `denied`, so a resolved card
+ * consults this to read a park neutrally rather than as a denial.
+ */
+export const GUARDIAN_PARK_ACTION_VALUES = [
+  "leave_unverified",
+] as const satisfies readonly GuardianDecisionActionId[];
+
+const DENYING_ACTIONS: ReadonlySet<string> = new Set(
+  GUARDIAN_DENYING_ACTION_VALUES,
+);
+const PARK_ACTIONS: ReadonlySet<string> = new Set(GUARDIAN_PARK_ACTION_VALUES);
+
+/** True when `action` resolves a request to `denied`. */
+export function isDenyingGuardianAction(action: string | undefined): boolean {
+  return action !== undefined && DENYING_ACTIONS.has(action);
+}
+
+/** True when `action` parks the sender at `unverified`. */
+export function isParkGuardianAction(action: string | undefined): boolean {
+  return action !== undefined && PARK_ACTIONS.has(action);
+}
+
+/**
+ * Surface-agnostic weight of a card action. Each renderer translates it to
+ * its own token (Slack primary/danger, a web button variant); absent means the
+ * renderer's default.
+ */
+export const GUARDIAN_ACTION_EMPHASIS_VALUES = [
+  "primary",
+  "secondary",
+  "destructive",
+] as const;
+export const GuardianActionEmphasisSchema = z.enum(
+  GUARDIAN_ACTION_EMPHASIS_VALUES,
+);
+export type GuardianActionEmphasis = z.infer<
+  typeof GuardianActionEmphasisSchema
+>;

package/node_modules/@vellumai/service-contracts/src/__tests__/guardian-requests.test.ts

@@ -0,0 +1,26 @@
+import { describe, expect, test } from "bun:test";
+
+import {
+  GUARDIAN_DECISION_ACTION_IDS,
+  isDenyingGuardianAction,
+  isParkGuardianAction,
+} from "../guardian-requests.js";
+
+describe("guardian decision actions", () => {
+  test("reject, leave_unverified and block deny; every other action approves", () => {
+    const denying = GUARDIAN_DECISION_ACTION_IDS.filter(
+      isDenyingGuardianAction,
+    );
+    expect(denying).toEqual(["reject", "leave_unverified", "block"]);
+  });
+
+  test("only leave_unverified parks the sender", () => {
+    const parking = GUARDIAN_DECISION_ACTION_IDS.filter(isParkGuardianAction);
+    expect(parking).toEqual(["leave_unverified"]);
+  });
+
+  test("an absent or unknown action neither denies nor parks", () => {
+    expect(isDenyingGuardianAction(undefined)).toBe(false);
+    expect(isParkGuardianAction("approve_always")).toBe(false);
+  });
+});

package/node_modules/@vellumai/service-contracts/src/guardian-requests.ts

@@ -1,7 +1,8 @@
 /**
- * Canonical vocabulary for a guardian request's lifecycle status, shared by
- * the gateway that owns the request rows, the daemon that decides and
- * projects them, and the web that renders the projection.
+ * Canonical vocabulary for guardian requests, shared by the gateway that owns
+ * the request rows, the daemon that decides and projects them, and the web
+ * that renders the projection: a request's lifecycle status, the actions a
+ * guardian can decide it with, and the weight a card gives each action.
  */
 import { z } from "zod";
 
@@ -16,3 +17,76 @@ export const GuardianRequestStatusSchema = z.enum(
   GUARDIAN_REQUEST_STATUS_VALUES,
 );
 export type GuardianRequestStatus = z.infer<typeof GuardianRequestStatusSchema>;
+
+/**
+ * The actions a guardian can decide a request with.
+ *
+ * `approve_once` / `reject` are the generic decision pair used by every
+ * request kind. `trust` / `verify_code` / `leave_unverified` / `block` are the
+ * introduction-card actions, valid only for `access_request` requests.
+ */
+export const GUARDIAN_DECISION_ACTION_IDS = [
+  "approve_once",
+  "reject",
+  "trust",
+  "verify_code",
+  "leave_unverified",
+  "block",
+] as const;
+export const GuardianDecisionActionIdSchema = z.enum(
+  GUARDIAN_DECISION_ACTION_IDS,
+);
+export type GuardianDecisionActionId = z.infer<
+  typeof GuardianDecisionActionIdSchema
+>;
+
+/** Actions that resolve a request to `denied`; every other one approves. */
+export const GUARDIAN_DENYING_ACTION_VALUES = [
+  "reject",
+  "leave_unverified",
+  "block",
+] as const satisfies readonly GuardianDecisionActionId[];
+
+/**
+ * The denying actions that park the sender at `unverified`: a neutral hold,
+ * not a rejection. A parked contact is still admitted under the permissive
+ * admission floors (`any_contact`, `strangers`) and can be trusted or verified
+ * later; contrast `block` (revoked, a hard keep-out) and `reject` (an explicit
+ * decline). All three resolve the request to `denied`, so a resolved card
+ * consults this to read a park neutrally rather than as a denial.
+ */
+export const GUARDIAN_PARK_ACTION_VALUES = [
+  "leave_unverified",
+] as const satisfies readonly GuardianDecisionActionId[];
+
+const DENYING_ACTIONS: ReadonlySet<string> = new Set(
+  GUARDIAN_DENYING_ACTION_VALUES,
+);
+const PARK_ACTIONS: ReadonlySet<string> = new Set(GUARDIAN_PARK_ACTION_VALUES);
+
+/** True when `action` resolves a request to `denied`. */
+export function isDenyingGuardianAction(action: string | undefined): boolean {
+  return action !== undefined && DENYING_ACTIONS.has(action);
+}
+
+/** True when `action` parks the sender at `unverified`. */
+export function isParkGuardianAction(action: string | undefined): boolean {
+  return action !== undefined && PARK_ACTIONS.has(action);
+}
+
+/**
+ * Surface-agnostic weight of a card action. Each renderer translates it to
+ * its own token (Slack primary/danger, a web button variant); absent means the
+ * renderer's default.
+ */
+export const GUARDIAN_ACTION_EMPHASIS_VALUES = [
+  "primary",
+  "secondary",
+  "destructive",
+] as const;
+export const GuardianActionEmphasisSchema = z.enum(
+  GUARDIAN_ACTION_EMPHASIS_VALUES,
+);
+export type GuardianActionEmphasis = z.infer<
+  typeof GuardianActionEmphasisSchema
+>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vellumai/cli",
-  "version": "0.12.4-dev.202609232017.d454a3d",
+  "version": "0.12.4-dev.202609232047.847daa9",
   "description": "CLI tools for vellum-assistant",
   "type": "module",
   "exports": {