@happyvertical/smrt-playbooks 0.44.0 → 0.45.0

package/dist/index.js

@@ -1,5 +1,5 @@
 import { PLAYBOOK_PLANES } from "./types.js";
-import { ObjectRegistry, SmrtCollection, SmrtObject, field, smrt } from "@happyvertical/smrt-core";
+import { ObjectRegistry, SmrtCollection, SmrtObject, field, isApiActionEnabledForObject, isRestActionRoutable, isRestRoutePublic, resolveRegisteredObjectName, restFieldReadPermissions, restMethodForApiAction, smrt } from "@happyvertical/smrt-core";
 import { getPackageConfig } from "@happyvertical/smrt-config";
 import { getTenantId } from "@happyvertical/smrt-tenancy";
 //#region \0rolldown/runtime.js
@@ -15,7 +15,7 @@ var __exportAll = (all, no_symbols) => {
 };
 //#endregion
 //#region src/__smrt-register__.ts
-ObjectRegistry.registerPackageManifest(JSON.parse("{\"version\":\"1.0.0\",\"timestamp\":0,\"packageName\":\"@happyvertical/smrt-playbooks\",\"packageVersion\":\"0.44.0\",\"objects\":{\"@happyvertical/smrt-playbooks:PlaybookOverrideCollection\":{\"name\":\"playbookoverridecollection\",\"className\":\"PlaybookOverrideCollection\",\"qualifiedName\":\"@happyvertical/smrt-playbooks:PlaybookOverrideCollection\",\"collection\":\"playbookoverrides\",\"filePath\":\"/home/runner/work/smrt/smrt/packages/playbooks/src/collections/PlaybookOverrideCollection.ts\",\"packageName\":\"@happyvertical/smrt-playbooks\",\"fields\":{},\"methods\":{\"getAppOverride\":{\"name\":\"getAppOverride\",\"async\":true,\"parameters\":[{\"name\":\"key\",\"type\":\"string\",\"optional\":false},{\"name\":\"options\",\"type\":\"object\",\"optional\":true}],\"returnType\":\"Promise<PlaybookOverride | null>\",\"isStatic\":false,\"isPublic\":true},\"getTenantOverride\":{\"name\":\"getTenantOverride\",\"async\":true,\"parameters\":[{\"name\":\"key\",\"type\":\"string\",\"optional\":false},{\"name\":\"tenantId\",\"type\":\"string\",\"optional\":false},{\"name\":\"options\",\"type\":\"object\",\"optional\":true}],\"returnType\":\"Promise<PlaybookOverride | null>\",\"isStatic\":false,\"isPublic\":true},\"getResolutionLayers\":{\"name\":\"getResolutionLayers\",\"async\":true,\"parameters\":[{\"name\":\"key\",\"type\":\"string\",\"optional\":false},{\"name\":\"tenantId\",\"type\":\"string | null\",\"optional\":true},{\"name\":\"options\",\"type\":\"object\",\"optional\":true}],\"returnType\":\"Promise<object>\",\"isStatic\":false,\"isPublic\":true}},\"decoratorConfig\":{\"tableName\":\"_smrt_playbook_overrides\"},\"extends\":\"SmrtCollection\",\"extendsTypeArg\":\"PlaybookOverride\",\"exportName\":\"PlaybookOverrideCollection\",\"collectionExportName\":\"PlaybookOverrideCollectionCollection\",\"schema\":{\"tableName\":\"_smrt_playbook_overrides\",\"ddl\":\"CREATE TABLE IF NOT EXISTS \\\"_smrt_playbook_overrides\\\" (\\n  \\\"id\\\" UUID PRIMARY KEY NOT NULL,\\n  \\\"slug\\\" TEXT NOT NULL,\\n  \\\"context\\\" TEXT NOT NULL DEFAULT '',\\n  \\\"created_at\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\n  \\\"updated_at\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp\\n);\",\"columns\":{\"id\":{\"type\":\"UUID\",\"primaryKey\":true,\"referenceKind\":\"id\",\"notNull\":true},\"slug\":{\"type\":\"TEXT\",\"notNull\":true},\"context\":{\"type\":\"TEXT\",\"notNull\":true,\"default\":\"\"},\"created_at\":{\"type\":\"TIMESTAMP\",\"notNull\":true,\"default\":\"current_timestamp\"},\"updated_at\":{\"type\":\"TIMESTAMP\",\"notNull\":true,\"default\":\"current_timestamp\"}},\"indexes\":[{\"name\":\"_smrt_playbook_overrides_slug_context_idx\",\"columns\":[\"slug\",\"context\"],\"unique\":true},{\"name\":\"_smrt_playbook_overrides_created_at_idx\",\"columns\":[\"created_at\"]}],\"version\":\"410e08c4\"}},\"@happyvertical/smrt-playbooks:PlaybookOverride\":{\"name\":\"playbookoverride\",\"className\":\"PlaybookOverride\",\"qualifiedName\":\"@happyvertical/smrt-playbooks:PlaybookOverride\",\"collection\":\"playbookoverrides\",\"filePath\":\"/home/runner/work/smrt/smrt/packages/playbooks/src/models/PlaybookOverride.ts\",\"packageName\":\"@happyvertical/smrt-playbooks\",\"fields\":{\"key\":{\"type\":\"text\",\"required\":true,\"default\":\"\",\"_meta\":{\"required\":true}},\"tenantId\":{\"type\":\"text\",\"required\":false,\"_meta\":{\"nullable\":true}},\"title\":{\"type\":\"text\",\"required\":false,\"_meta\":{\"nullable\":true}},\"description\":{\"type\":\"text\",\"required\":false,\"_meta\":{\"nullable\":true}},\"planes\":{\"type\":\"text\",\"required\":false,\"_meta\":{\"nullable\":true}},\"onStepFailure\":{\"type\":\"text\",\"required\":false,\"_meta\":{\"nullable\":true}},\"enabled\":{\"type\":\"boolean\",\"required\":false,\"_meta\":{\"nullable\":true}},\"metadata\":{\"type\":\"text\",\"required\":false,\"_meta\":{\"nullable\":true}}},\"methods\":{\"getMetadata\":{\"name\":\"getMetadata\",\"async\":false,\"parameters\":[],\"returnType\":\"PlaybookMetadata\",\"isStatic\":false,\"isPublic\":true},\"setMetadata\":{\"name\":\"setMetadata\",\"async\":false,\"parameters\":[{\"name\":\"metadata\",\"type\":\"PlaybookMetadata | null\",\"optional\":false}],\"returnType\":\"void\",\"isStatic\":false,\"isPublic\":true},\"getPlanes\":{\"name\":\"getPlanes\",\"async\":false,\"parameters\":[],\"returnType\":\"null\",\"isStatic\":false,\"isPublic\":true},\"setPlanes\":{\"name\":\"setPlanes\",\"async\":false,\"parameters\":[{\"name\":\"planes\",\"type\":\"null\",\"optional\":false}],\"returnType\":\"void\",\"isStatic\":false,\"isPublic\":true},\"toPlaybookLayer\":{\"name\":\"toPlaybookLayer\",\"async\":false,\"parameters\":[],\"returnType\":\"PlaybookLayer\",\"isStatic\":false,\"isPublic\":true},\"save\":{\"name\":\"save\",\"async\":true,\"parameters\":[],\"returnType\":\"Promise\",\"isStatic\":false,\"isPublic\":true},\"delete\":{\"name\":\"delete\",\"async\":true,\"parameters\":[],\"returnType\":\"Promise<void>\",\"isStatic\":false,\"isPublic\":true}},\"decoratorConfig\":{\"tableName\":\"_smrt_playbook_overrides\",\"conflictColumns\":[\"key\",\"context\"],\"api\":{\"include\":[\"list\",\"get\",\"create\",\"update\",\"delete\"]},\"cli\":{\"include\":[\"list\",\"get\",\"create\",\"update\",\"delete\"],\"exclude\":[\"getMetadata\",\"setMetadata\",\"getPlanes\",\"setPlanes\",\"toPlaybookLayer\"]},\"mcp\":{\"include\":[]}},\"extends\":\"SmrtObject\",\"exportName\":\"PlaybookOverride\",\"collectionExportName\":\"PlaybookOverrideCollection\",\"validationRules\":[{\"field\":\"key\",\"rule\":\"required\",\"fieldType\":\"text\"}],\"schema\":{\"tableName\":\"_smrt_playbook_overrides\",\"ddl\":\"CREATE TABLE IF NOT EXISTS \\\"_smrt_playbook_overrides\\\" (\\n  \\\"id\\\" UUID PRIMARY KEY NOT NULL,\\n  \\\"slug\\\" TEXT NOT NULL,\\n  \\\"context\\\" TEXT NOT NULL DEFAULT '',\\n  \\\"created_at\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\n  \\\"updated_at\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\n  \\\"key\\\" TEXT NOT NULL DEFAULT '',\\n  \\\"tenant_id\\\" TEXT,\\n  \\\"title\\\" TEXT,\\n  \\\"description\\\" TEXT,\\n  \\\"planes\\\" TEXT,\\n  \\\"on_step_failure\\\" TEXT,\\n  \\\"enabled\\\" BOOLEAN,\\n  \\\"metadata\\\" TEXT\\n);\",\"columns\":{\"id\":{\"type\":\"UUID\",\"primaryKey\":true,\"referenceKind\":\"id\",\"notNull\":true},\"slug\":{\"type\":\"TEXT\",\"notNull\":true},\"context\":{\"type\":\"TEXT\",\"notNull\":true,\"default\":\"\"},\"created_at\":{\"type\":\"TIMESTAMP\",\"notNull\":true,\"default\":\"current_timestamp\"},\"updated_at\":{\"type\":\"TIMESTAMP\",\"notNull\":true,\"default\":\"current_timestamp\"},\"key\":{\"type\":\"TEXT\",\"notNull\":true,\"unique\":false,\"default\":\"\"},\"tenant_id\":{\"type\":\"TEXT\",\"notNull\":false,\"unique\":false},\"title\":{\"type\":\"TEXT\",\"notNull\":false,\"unique\":false},\"description\":{\"type\":\"TEXT\",\"notNull\":false,\"unique\":false},\"planes\":{\"type\":\"TEXT\",\"notNull\":false,\"unique\":false},\"on_step_failure\":{\"type\":\"TEXT\",\"notNull\":false,\"unique\":false},\"enabled\":{\"type\":\"BOOLEAN\",\"notNull\":false,\"unique\":false},\"metadata\":{\"type\":\"TEXT\",\"notNull\":false,\"unique\":false}},\"indexes\":[{\"name\":\"_smrt_playbook_overrides_key_context_idx\",\"columns\":[\"key\",\"context\"],\"unique\":true},{\"name\":\"_smrt_playbook_overrides_slug_context_idx\",\"columns\":[\"slug\",\"context\"]},{\"name\":\"_smrt_playbook_overrides_created_at_idx\",\"columns\":[\"created_at\"]}],\"version\":\"8aec8e13\"}}},\"moduleType\":\"smrt\",\"smrtDependencies\":[\"@happyvertical/smrt-core\",\"@happyvertical/smrt-tenancy\"]}"));
+ObjectRegistry.registerPackageManifest(JSON.parse("{\"version\":\"1.0.0\",\"timestamp\":0,\"packageName\":\"@happyvertical/smrt-playbooks\",\"packageVersion\":\"0.45.0\",\"objects\":{\"@happyvertical/smrt-playbooks:PlaybookOverrideCollection\":{\"name\":\"playbookoverridecollection\",\"className\":\"PlaybookOverrideCollection\",\"qualifiedName\":\"@happyvertical/smrt-playbooks:PlaybookOverrideCollection\",\"collection\":\"playbookoverrides\",\"filePath\":\"/home/runner/work/smrt/smrt/packages/playbooks/src/collections/PlaybookOverrideCollection.ts\",\"packageName\":\"@happyvertical/smrt-playbooks\",\"fields\":{},\"methods\":{\"getAppOverride\":{\"name\":\"getAppOverride\",\"async\":true,\"parameters\":[{\"name\":\"key\",\"type\":\"string\",\"optional\":false},{\"name\":\"options\",\"type\":\"object\",\"optional\":true}],\"returnType\":\"Promise<PlaybookOverride | null>\",\"isStatic\":false,\"isPublic\":true},\"getTenantOverride\":{\"name\":\"getTenantOverride\",\"async\":true,\"parameters\":[{\"name\":\"key\",\"type\":\"string\",\"optional\":false},{\"name\":\"tenantId\",\"type\":\"string\",\"optional\":false},{\"name\":\"options\",\"type\":\"object\",\"optional\":true}],\"returnType\":\"Promise<PlaybookOverride | null>\",\"isStatic\":false,\"isPublic\":true},\"getResolutionLayers\":{\"name\":\"getResolutionLayers\",\"async\":true,\"parameters\":[{\"name\":\"key\",\"type\":\"string\",\"optional\":false},{\"name\":\"tenantId\",\"type\":\"string | null\",\"optional\":true},{\"name\":\"options\",\"type\":\"object\",\"optional\":true}],\"returnType\":\"Promise<object>\",\"isStatic\":false,\"isPublic\":true}},\"decoratorConfig\":{\"tableName\":\"_smrt_playbook_overrides\"},\"extends\":\"SmrtCollection\",\"extendsTypeArg\":\"PlaybookOverride\",\"exportName\":\"PlaybookOverrideCollection\",\"collectionExportName\":\"PlaybookOverrideCollectionCollection\",\"schema\":{\"tableName\":\"_smrt_playbook_overrides\",\"ddl\":\"CREATE TABLE IF NOT EXISTS \\\"_smrt_playbook_overrides\\\" (\\n  \\\"id\\\" UUID PRIMARY KEY NOT NULL,\\n  \\\"slug\\\" TEXT NOT NULL,\\n  \\\"context\\\" TEXT NOT NULL DEFAULT '',\\n  \\\"created_at\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\n  \\\"updated_at\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp\\n);\",\"columns\":{\"id\":{\"type\":\"UUID\",\"primaryKey\":true,\"referenceKind\":\"id\",\"notNull\":true},\"slug\":{\"type\":\"TEXT\",\"notNull\":true},\"context\":{\"type\":\"TEXT\",\"notNull\":true,\"default\":\"\"},\"created_at\":{\"type\":\"TIMESTAMP\",\"notNull\":true,\"default\":\"current_timestamp\"},\"updated_at\":{\"type\":\"TIMESTAMP\",\"notNull\":true,\"default\":\"current_timestamp\"}},\"indexes\":[{\"name\":\"_smrt_playbook_overrides_slug_context_idx\",\"columns\":[\"slug\",\"context\"],\"unique\":true},{\"name\":\"_smrt_playbook_overrides_created_at_idx\",\"columns\":[\"created_at\"]}],\"version\":\"410e08c4\"}},\"@happyvertical/smrt-playbooks:PlaybookOverride\":{\"name\":\"playbookoverride\",\"className\":\"PlaybookOverride\",\"qualifiedName\":\"@happyvertical/smrt-playbooks:PlaybookOverride\",\"collection\":\"playbookoverrides\",\"filePath\":\"/home/runner/work/smrt/smrt/packages/playbooks/src/models/PlaybookOverride.ts\",\"packageName\":\"@happyvertical/smrt-playbooks\",\"fields\":{\"key\":{\"type\":\"text\",\"required\":true,\"default\":\"\",\"_meta\":{\"required\":true}},\"tenantId\":{\"type\":\"text\",\"required\":false,\"_meta\":{\"nullable\":true}},\"title\":{\"type\":\"text\",\"required\":false,\"_meta\":{\"nullable\":true}},\"description\":{\"type\":\"text\",\"required\":false,\"_meta\":{\"nullable\":true}},\"planes\":{\"type\":\"text\",\"required\":false,\"_meta\":{\"nullable\":true}},\"onStepFailure\":{\"type\":\"text\",\"required\":false,\"_meta\":{\"nullable\":true}},\"enabled\":{\"type\":\"boolean\",\"required\":false,\"_meta\":{\"nullable\":true}},\"metadata\":{\"type\":\"text\",\"required\":false,\"_meta\":{\"nullable\":true}}},\"methods\":{\"getMetadata\":{\"name\":\"getMetadata\",\"async\":false,\"parameters\":[],\"returnType\":\"PlaybookMetadata\",\"isStatic\":false,\"isPublic\":true},\"setMetadata\":{\"name\":\"setMetadata\",\"async\":false,\"parameters\":[{\"name\":\"metadata\",\"type\":\"PlaybookMetadata | null\",\"optional\":false}],\"returnType\":\"void\",\"isStatic\":false,\"isPublic\":true},\"getPlanes\":{\"name\":\"getPlanes\",\"async\":false,\"parameters\":[],\"returnType\":\"null\",\"isStatic\":false,\"isPublic\":true},\"setPlanes\":{\"name\":\"setPlanes\",\"async\":false,\"parameters\":[{\"name\":\"planes\",\"type\":\"null\",\"optional\":false}],\"returnType\":\"void\",\"isStatic\":false,\"isPublic\":true},\"toPlaybookLayer\":{\"name\":\"toPlaybookLayer\",\"async\":false,\"parameters\":[],\"returnType\":\"PlaybookLayer\",\"isStatic\":false,\"isPublic\":true},\"save\":{\"name\":\"save\",\"async\":true,\"parameters\":[],\"returnType\":\"Promise\",\"isStatic\":false,\"isPublic\":true},\"delete\":{\"name\":\"delete\",\"async\":true,\"parameters\":[],\"returnType\":\"Promise<void>\",\"isStatic\":false,\"isPublic\":true}},\"decoratorConfig\":{\"tableName\":\"_smrt_playbook_overrides\",\"conflictColumns\":[\"key\",\"context\"],\"api\":{\"include\":[\"list\",\"get\",\"create\",\"update\",\"delete\"]},\"cli\":{\"include\":[\"list\",\"get\",\"create\",\"update\",\"delete\"],\"exclude\":[\"getMetadata\",\"setMetadata\",\"getPlanes\",\"setPlanes\",\"toPlaybookLayer\"]},\"mcp\":{\"include\":[]}},\"extends\":\"SmrtObject\",\"exportName\":\"PlaybookOverride\",\"collectionExportName\":\"PlaybookOverrideCollection\",\"validationRules\":[{\"field\":\"key\",\"rule\":\"required\",\"fieldType\":\"text\"}],\"schema\":{\"tableName\":\"_smrt_playbook_overrides\",\"ddl\":\"CREATE TABLE IF NOT EXISTS \\\"_smrt_playbook_overrides\\\" (\\n  \\\"id\\\" UUID PRIMARY KEY NOT NULL,\\n  \\\"slug\\\" TEXT NOT NULL,\\n  \\\"context\\\" TEXT NOT NULL DEFAULT '',\\n  \\\"created_at\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\n  \\\"updated_at\\\" TIMESTAMP NOT NULL DEFAULT current_timestamp,\\n  \\\"key\\\" TEXT NOT NULL DEFAULT '',\\n  \\\"tenant_id\\\" TEXT,\\n  \\\"title\\\" TEXT,\\n  \\\"description\\\" TEXT,\\n  \\\"planes\\\" TEXT,\\n  \\\"on_step_failure\\\" TEXT,\\n  \\\"enabled\\\" BOOLEAN,\\n  \\\"metadata\\\" TEXT\\n);\",\"columns\":{\"id\":{\"type\":\"UUID\",\"primaryKey\":true,\"referenceKind\":\"id\",\"notNull\":true},\"slug\":{\"type\":\"TEXT\",\"notNull\":true},\"context\":{\"type\":\"TEXT\",\"notNull\":true,\"default\":\"\"},\"created_at\":{\"type\":\"TIMESTAMP\",\"notNull\":true,\"default\":\"current_timestamp\"},\"updated_at\":{\"type\":\"TIMESTAMP\",\"notNull\":true,\"default\":\"current_timestamp\"},\"key\":{\"type\":\"TEXT\",\"notNull\":true,\"unique\":false,\"default\":\"\"},\"tenant_id\":{\"type\":\"TEXT\",\"notNull\":false,\"unique\":false},\"title\":{\"type\":\"TEXT\",\"notNull\":false,\"unique\":false},\"description\":{\"type\":\"TEXT\",\"notNull\":false,\"unique\":false},\"planes\":{\"type\":\"TEXT\",\"notNull\":false,\"unique\":false},\"on_step_failure\":{\"type\":\"TEXT\",\"notNull\":false,\"unique\":false},\"enabled\":{\"type\":\"BOOLEAN\",\"notNull\":false,\"unique\":false},\"metadata\":{\"type\":\"TEXT\",\"notNull\":false,\"unique\":false}},\"indexes\":[{\"name\":\"_smrt_playbook_overrides_key_context_idx\",\"columns\":[\"key\",\"context\"],\"unique\":true},{\"name\":\"_smrt_playbook_overrides_slug_context_idx\",\"columns\":[\"slug\",\"context\"]},{\"name\":\"_smrt_playbook_overrides_created_at_idx\",\"columns\":[\"created_at\"]}],\"version\":\"8aec8e13\"}}},\"moduleType\":\"smrt\",\"smrtDependencies\":[\"@happyvertical/smrt-core\",\"@happyvertical/smrt-tenancy\"]}"));
 //#endregion
 //#region src/cache.ts
 var PLAYBOOK_CACHE_TTL_MS = 3e4;
@@ -42,6 +42,9 @@ function getDbNamespace(db) {
 	}
 	return "db:unknown";
 }
+function playbookCacheNamespace(db) {
+	return getDbNamespace(db);
+}
 function buildCacheKey(key, tenantId, db) {
 	return `${getDbNamespace(db)}::${key}::${tenantId ?? "app"}`;
 }
@@ -726,9 +729,249 @@ async function resolvePlaybook(key, options = {}) {
 	};
 }
 //#endregion
+//#region src/preflight-cache.ts
+var PREFLIGHT_CACHE_TTL_MS = 15e3;
+var PREFLIGHT_CACHE_MAX_ENTRIES = 1e3;
+var preflightCache = /* @__PURE__ */ new Map();
+function buildKey(scope) {
+	return `${playbookCacheNamespace(scope.db)}::${scope.principal}::${scope.key}::${scope.plane}::${scope.tenantId ?? "app"}`;
+}
+function evict() {
+	const now = Date.now();
+	for (const [cacheKey, entry] of preflightCache) if (entry.expiresAt <= now) preflightCache.delete(cacheKey);
+	for (const cacheKey of preflightCache.keys()) {
+		if (preflightCache.size <= PREFLIGHT_CACHE_MAX_ENTRIES) break;
+		preflightCache.delete(cacheKey);
+	}
+}
+function getPlaybookPreflightCacheTtlMs() {
+	return PREFLIGHT_CACHE_TTL_MS;
+}
+function getCachedPlaybookPreflight(scope) {
+	const cacheKey = buildKey(scope);
+	const entry = preflightCache.get(cacheKey);
+	if (!entry) return null;
+	if (entry.expiresAt <= Date.now() || entry.generation !== getPlaybookCacheGeneration(scope.key, scope.db)) {
+		preflightCache.delete(cacheKey);
+		return null;
+	}
+	return entry.report;
+}
+function setCachedPlaybookPreflight(scope, report, loadedAtGeneration) {
+	if (getPlaybookCacheGeneration(scope.key, scope.db) !== loadedAtGeneration) return;
+	preflightCache.set(buildKey(scope), {
+		expiresAt: Date.now() + PREFLIGHT_CACHE_TTL_MS,
+		generation: loadedAtGeneration,
+		report
+	});
+	if (preflightCache.size > PREFLIGHT_CACHE_MAX_ENTRIES) evict();
+}
+function clearPlaybookPreflightCache() {
+	preflightCache.clear();
+}
+//#endregion
+//#region src/preflight.ts
+var PLAYBOOK_PREFLIGHT_UNAVAILABLE = Object.freeze({
+	available: false,
+	advisory: true,
+	verdict: "deny",
+	steps: Object.freeze([]),
+	summary: Object.freeze({
+		allow: 0,
+		deny: 0,
+		unknown: 0
+	})
+});
+var VERDICT_RANK = {
+	allow: 0,
+	unknown: 1,
+	deny: 2
+};
+function worstVerdict(left, right) {
+	return VERDICT_RANK[right] > VERDICT_RANK[left] ? right : left;
+}
+function combineLayers(layers) {
+	let verdict = "allow";
+	for (const layer2 of layers) verdict = worstVerdict(verdict, layer2.verdict);
+	if (!layers.length) return {
+		verdict: "unknown",
+		reason: "not-evaluated"
+	};
+	const source = layers.find((layer2) => layer2.verdict === verdict);
+	return {
+		verdict,
+		reason: source?.reason ?? "ok"
+	};
+}
+function summarize(steps) {
+	const summary = {
+		allow: 0,
+		deny: 0,
+		unknown: 0
+	};
+	for (const step of steps) summary[step.verdict] += 1;
+	return summary;
+}
+async function preflightPlan(plan, evaluate) {
+	const steps = [];
+	for (const planStep of plan.steps) {
+		const { layers } = await evaluate(planStep);
+		steps.push(Object.freeze({
+			index: planStep.index,
+			kind: planStep.step.kind,
+			...combineLayers(layers),
+			layers: Object.freeze([...layers])
+		}));
+	}
+	let verdict = "allow";
+	for (const step of steps) verdict = worstVerdict(verdict, step.verdict);
+	return Object.freeze({
+		available: true,
+		advisory: true,
+		key: plan.key,
+		plane: plan.plane,
+		title: plan.title,
+		description: plan.description,
+		verdict,
+		steps: Object.freeze(steps),
+		summary: Object.freeze(summarize(steps))
+	});
+}
+async function equalizeUnknownKeyCost(key, options) {
+	if (!options?.db) return;
+	try {
+		const collection = await PlaybookOverrideCollection.create({ db: options.db });
+		const tenantId = options.tenantId !== void 0 ? options.tenantId : getTenantId() ?? null;
+		await collection.getResolutionLayers(key, tenantId);
+	} catch {}
+}
+async function normalizeCacheDb(db) {
+	if (!db) return db;
+	try {
+		return (await PlaybookOverrideCollection.create({ db })).db;
+	} catch {
+		return db;
+	}
+}
+async function preflightPlaybook(request) {
+	const { key, plane, principal, resolve, evaluate } = request;
+	const tenantId = resolve?.tenantId !== void 0 ? resolve.tenantId : getTenantId() ?? null;
+	const db = await normalizeCacheDb(resolve?.db);
+	const scope = {
+		principal,
+		key,
+		plane,
+		tenantId,
+		db
+	};
+	const cached = getCachedPlaybookPreflight(scope);
+	if (cached) return cached;
+	const loadedAtGeneration = getPlaybookCacheGeneration(key, db);
+	try {
+		const resolution = await resolvePlaybook(key, {
+			...resolve,
+			plane
+		});
+		if (!resolution.ok) {
+			if (resolution.reason === "unknown-playbook") await equalizeUnknownKeyCost(key, resolve);
+			setCachedPlaybookPreflight(scope, PLAYBOOK_PREFLIGHT_UNAVAILABLE, loadedAtGeneration);
+			return PLAYBOOK_PREFLIGHT_UNAVAILABLE;
+		}
+		const report = await preflightPlan(resolution.plan, evaluate);
+		setCachedPlaybookPreflight(scope, report, loadedAtGeneration);
+		return report;
+	} catch {
+		return PLAYBOOK_PREFLIGHT_UNAVAILABLE;
+	}
+}
+function layer(layerName, verdict, reason, missingPermissions) {
+	return Object.freeze({
+		layer: layerName,
+		verdict,
+		reason,
+		...missingPermissions?.length ? { missingPermissions: Object.freeze([...missingPermissions]) } : {}
+	});
+}
+function createServerStepEvaluator(options) {
+	return async (planStep) => {
+		const step = planStep.step;
+		if (step.kind === "intent") return { layers: [(options.intentPlanes?.(step.id) ?? null)?.includes("server") ?? false ? layer("plane", "unknown", "intent-bridge-not-evaluated") : layer("plane", "deny", "plane")] };
+		const operation = step;
+		const toolLayer = options.isToolAllowed(operation) ? layer("tool-allowlist", "allow", "ok") : layer("tool-allowlist", "deny", "tool-not-allowed");
+		const permissionVerdict = await options.checkOperationPermission(operation);
+		return { layers: [toolLayer, permissionVerdict === "allow" ? layer("operation-permission", "allow", "ok") : permissionVerdict === "deny" ? layer("operation-permission", "deny", "permission-denied") : layer("operation-permission", "unknown", "permission-unknown")] };
+	};
+}
+function createBrowserStepEvaluator(options) {
+	const held = options.permissions ? new Set(options.permissions) : null;
+	return (planStep) => {
+		const step = planStep.step;
+		if (step.kind === "intent") return { layers: [layer("intent-mount", "unknown", "intent-not-mounted")] };
+		const { model, action } = step;
+		const layers = [];
+		const exposed = options.layers.isActionExposed(model, action);
+		layers.push(exposed ? layer("action-exposure", "allow", "ok") : layer("action-exposure", "deny", "action-not-exposed"));
+		const isPublic = options.layers.isRoutePublic(model, action);
+		const appAuthConfigured = options.layers.appAuthConfigured;
+		layers.push(isPublic ? layer("public-access", "allow", "ok") : appAuthConfigured ? layer("public-access", "unknown", "auth-required") : layer("public-access", "deny", "not-public"));
+		const required = options.layers.requiredFieldPermissions(model, action);
+		if (!required.length) layers.push(layer("field-permissions", "allow", "ok"));
+		else if (!held) layers.push(layer("field-permissions", "unknown", "field-permissions-unknown"));
+		else {
+			const missing = required.filter((slug) => !held.has(slug));
+			layers.push(missing.length ? layer("field-permissions", "allow", "fields-redacted", missing) : layer("field-permissions", "allow", "ok"));
+		}
+		layers.push(appAuthConfigured ? layer("app-auth", "unknown", "app-auth-not-evaluated") : layer("app-auth", "allow", "app-auth-not-configured"));
+		return { layers };
+	};
+}
+//#endregion
+//#region src/rest-preflight.ts
+function createRestPreflightLayerSource(options) {
+	return {
+		appAuthConfigured: options.appAuthConfigured,
+		isActionExposed(model, action) {
+			const objectName = resolveRegisteredObjectName(model);
+			if (!objectName) return false;
+			return isRestActionRoutable(objectName, action) && isApiActionEnabledForObject(objectName, action);
+		},
+		isRoutePublic(model, action) {
+			const objectName = resolveRegisteredObjectName(model);
+			if (!objectName) return false;
+			return isRestRoutePublic(objectName, restMethodForApiAction(action, objectName));
+		},
+		requiredFieldPermissions(model) {
+			const objectName = resolveRegisteredObjectName(model);
+			if (!objectName) return [];
+			return restFieldReadPermissions(objectName);
+		}
+	};
+}
+function defaultPrincipal(request) {
+	return `${request.permissions ? `perm:${[...request.permissions].sort().join(",")}` : "perm:unpublished"}|auth:${request.appAuthConfigured ? "wired" : "none"}`;
+}
+function createBrowserPlaybookPreflight(options = {}) {
+	return async (request) => {
+		const layers = createRestPreflightLayerSource({ appAuthConfigured: request.appAuthConfigured });
+		return preflightPlaybook({
+			key: request.key,
+			plane: "browser",
+			principal: (options.principal ?? defaultPrincipal)(request),
+			resolve: {
+				...options.resolve,
+				...request.db === void 0 ? {} : { db: request.db }
+			},
+			evaluate: createBrowserStepEvaluator({
+				layers,
+				permissions: request.permissions ?? null
+			})
+		});
+	};
+}
+//#endregion
 //#region src/index.ts
 var PACKAGE_VERSION_INITIALIZED = true;
 //#endregion
-export { FAIL_CLOSED_CLASSIFICATION, PACKAGE_VERSION_INITIALIZED, PLAYBOOK_PLANES, PlaybookOverride, PlaybookOverrideCollection, PlaybookRegistry, clearPlaybookCache, definePlaybook, getPlaybookCacheTtlMs, normalizeEditableConfig, resolvePlaybook };
+export { FAIL_CLOSED_CLASSIFICATION, PACKAGE_VERSION_INITIALIZED, PLAYBOOK_PLANES, PLAYBOOK_PREFLIGHT_UNAVAILABLE, PlaybookOverride, PlaybookOverrideCollection, PlaybookRegistry, clearPlaybookCache, clearPlaybookPreflightCache, createBrowserPlaybookPreflight, createBrowserStepEvaluator, createRestPreflightLayerSource, createServerStepEvaluator, definePlaybook, getPlaybookCacheTtlMs, getPlaybookPreflightCacheTtlMs, normalizeEditableConfig, preflightPlan, preflightPlaybook, resolvePlaybook, worstVerdict };
 
 //# sourceMappingURL=index.js.map