permdock 0.1.0 → 0.2.0

package/dist/{cloud-Cuxr6Czw.js → cloud-Bo3e9Ak3.js}

@@ -1,8 +1,9 @@
-import { t as catalogFingerprint } from "./src-CTNT-PBW.js";
-import { a as snapshotScopes } from "./permdock-yoZ7EjxX.js";
-import { i as loadConfiguredPolicy } from "./load-BZ24CpZP.js";
-import { t as parseCatalog } from "./parse-DPfIvFMU.js";
-import { t as runCatalog } from "./catalog-H-vFGwWK.js";
+import { t as catalogFingerprint } from "./src-CSbUiozF.js";
+import { s as snapshotScopes } from "./permdock-CzqXjCpU.js";
+import { i as describeError } from "./errors-CWfoNg9N.js";
+import { i as loadConfiguredPolicy } from "./load-DhWEB9P1.js";
+import { t as parseCatalog } from "./parse-BuyjxhZV.js";
+import { t as runCatalog } from "./catalog-z8q6bi_r.js";
 //#region src/cli/cloud.ts
 function firstNonEmpty(...values) {
 	for (const value of values) if (value !== void 0 && value !== "") return value;
@@ -101,7 +102,7 @@ async function runCloud(input) {
 	} catch (error) {
 		return {
 			code: 1,
-			output: `PermDock Cloud unreachable: ${error instanceof Error ? error.message : String(error)}`
+			output: `PermDock Cloud unreachable: ${describeError(error)}`
 		};
 	}
 	if (!response.ok) return {

package/dist/{collect-O-tOtbnk.js → collect-DDDv_ESs.js}

@@ -1,12 +1,15 @@
-import { i as formatCatalogJson, n as catalogForCompare, t as buildCatalog } from "./catalog-doc-BSo_Q_-6.js";
+import { i as describeError } from "./errors-CWfoNg9N.js";
+import { i as formatCatalogJson, n as catalogForCompare, t as buildCatalog } from "./catalog-doc-Dsc9y7sd.js";
 import { t as catalogPath } from "./catalog-path-CnI0XTFK.js";
-import { n as listSourceFiles, r as rel, t as defaultSrcPath } from "./files-B_wAGYmt.js";
-import { a as loadModule, i as loadConfiguredPolicy, o as pickNamed, r as leavesOf, t as asPermissionTree } from "./load-BZ24CpZP.js";
+import { i as rel, r as listSourceFiles, t as defaultSrcPath } from "./files-DWUN9PzI.js";
+import { a as loadModule, i as loadConfiguredPolicy, o as pickNamed, r as leavesOf, t as asPermissionTree } from "./load-DhWEB9P1.js";
 import { t as shortDiff } from "./text-diff-BdkkYSbi.js";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, relative, resolve } from "node:path";
 import { Visitor, parseSync, visitorKeys } from "oxc-parser";
 //#region src/cli/scan.ts
+/** oxc reports recoverable problems as `Warning` or `Advice`; only `Error` leaves the program incomplete. */
+const PARSE_ERRORS = /* @__PURE__ */ new Set(["Error"]);
 const CHECK_CALLS = /* @__PURE__ */ new Set([
 	"can",
 	"decide",
@@ -26,7 +29,8 @@ const CHECK_CALLS = /* @__PURE__ */ new Set([
 	"relation",
 	"plan",
 	"actor",
-	"assurance"
+	"assurance",
+	"inherit"
 ]);
 function scanSources(cwd, files, knownKeys) {
 	const roots = /* @__PURE__ */ new Set(["permissions"]);
@@ -38,27 +42,53 @@ function scanSources(cwd, files, knownKeys) {
 	const planNames = /* @__PURE__ */ new Set();
 	const allowKeys = /* @__PURE__ */ new Set();
 	const snapshots = [];
+	const unparsed = [];
+	const parsed = [];
 	for (const file of files) {
 		const source = readFileSync(file, "utf8");
-		let program;
+		const fileRel = rel(cwd, file);
 		try {
-			program = parseSync(file, source).program;
-		} catch {
-			continue;
+			const result = parseSync(file, source);
+			const error = result.errors.find((item) => PARSE_ERRORS.has(item.severity));
+			if (error !== void 0) unparsed.push({
+				file: fileRel,
+				line: lineIndex(source)(error.labels[0]?.start ?? 0),
+				message: error.message
+			});
+			parsed.push({
+				file,
+				source,
+				program: result.program
+			});
+		} catch (error) {
+			unparsed.push({
+				file: fileRel,
+				line: 1,
+				message: describeError(error)
+			});
 		}
+	}
+	const definitions = /* @__PURE__ */ new Set(["permissions"]);
+	for (const { program } of parsed) walk(program, (node) => {
+		if (node.type === "VariableDeclarator" && node.id?.type === "Identifier" && node.id.name !== void 0 && isDefinePermissions(node.init)) definitions.add(node.id.name);
+	});
+	for (const { file, source, program } of parsed) {
 		const fileRel = rel(cwd, file);
-		walk(program, (node, parent) => {
+		const lineAt = lineIndex(source);
+		const scopes = /* @__PURE__ */ new WeakMap();
+		walk(program, (node, parent, ancestors) => {
+			const isRoot = (name) => boundToRoot(name, ancestors, definitions, scopes);
 			if (node.type === "CallExpression") {
-				recordCall(node, parent, source, fileRel, roots, definitionFiles, usages, unknown, dynamic, roleNames, planNames, allowKeys, knownKeys);
+				recordCall(node, parent, lineAt, fileRel, roots, definitionFiles, usages, unknown, dynamic, roleNames, planNames, allowKeys, knownKeys);
 				const callee = calleeName(node.callee);
 				if (callee === "snapshot" || callee === "snapshotFor") snapshots.push({
 					file: fileRel,
-					line: lineAt(source, node.start ?? 0),
-					include: includeOf(node.arguments?.[callee === "snapshot" ? 0 : 2], roots)
+					line: lineAt(node.start ?? 0),
+					include: includeOf(node.arguments?.[callee === "snapshot" ? 0 : 2], isRoot)
 				});
 			}
-			if (node.type === "MemberExpression" && parent?.type !== "MemberExpression") recordMember(node, parent, source, fileRel, roots, usages, unknown, dynamic, allowKeys, knownKeys);
-			if (node.type === "ImportDeclaration") recordImport(node, roots);
+			if (node.type === "MemberExpression" && parent?.type !== "MemberExpression") recordMember(node, parent, lineAt, fileRel, isRoot, usages, unknown, dynamic, allowKeys, knownKeys);
+			if (node.type === "ImportDeclaration") recordImport(node, roots, definitions);
 		});
 	}
 	return {
@@ -70,10 +100,11 @@ function scanSources(cwd, files, knownKeys) {
 		roleNames: [...roleNames].toSorted(),
 		planNames: [...planNames].toSorted(),
 		allowKeys: [...allowKeys].toSorted(),
-		snapshots
+		snapshots,
+		unparsed
 	};
 }
-function includeOf(options, roots) {
+function includeOf(options, isRoot) {
 	if (options?.type !== "ObjectExpression") return options === void 0 ? void 0 : null;
 	const property = options.properties?.find((item) => item.key?.name === "include");
 	if (property === void 0) return options.properties?.some((item) => item.type === "SpreadElement") ? null : void 0;
@@ -81,22 +112,118 @@ function includeOf(options, roots) {
 	if (list?.type !== "ArrayExpression") return null;
 	const keys = [];
 	for (const element of list.elements ?? []) {
-		const [root, ...rest] = (element.type === "MemberExpression" ? memberPath(element) : void 0) ?? [];
-		if (root === void 0 || !roots.has(root) || rest.length === 0) return null;
+		const [root, ...rest] = (element?.type === "MemberExpression" ? memberPath(element) : void 0) ?? [];
+		if (root === void 0 || !isRoot(root) || rest.length === 0) return null;
 		keys.push(rest.join("."));
 	}
 	return keys;
 }
-function recordImport(node, roots) {
+function recordImport(node, roots, definitions) {
 	for (const spec of node.specifiers ?? []) {
-		const imported = spec.imported?.name ?? spec.local?.name;
 		const local = spec.local?.name;
-		if (imported === "permissions" && local !== void 0) roots.add(local);
+		if (local !== void 0 && importsRoot(spec, definitions)) roots.add(local);
+	}
+}
+function isDefinePermissions(node) {
+	return node?.type === "CallExpression" && calleeName(node.callee) === "definePermissions";
+}
+/** An import binding of a permission tree: by its imported name, or a default import named `permissions`. */
+function importsRoot(spec, definitions) {
+	if (spec.type === "ImportSpecifier") {
+		const value = spec.imported?.value;
+		const imported = typeof value === "string" ? value : spec.imported?.name;
+		return imported !== void 0 && definitions.has(imported);
+	}
+	return spec.type === "ImportDefaultSpecifier" && spec.local?.name === "permissions";
+}
+function patternNames(pattern, into) {
+	if (pattern === null || pattern === void 0) return;
+	const type = pattern.type;
+	if (type === "Identifier" && pattern.name !== void 0) into.push(pattern.name);
+	else if (type === "ObjectPattern") for (const property of pattern.properties ?? []) {
+		const value = property.value;
+		patternNames(property.type === "RestElement" ? property.argument : value, into);
+	}
+	else if (type === "ArrayPattern") for (const element of pattern.elements ?? []) patternNames(element, into);
+	else patternNames(pattern.left ?? pattern.argument ?? pattern.parameter, into);
+}
+const NAMED_DECLARATIONS = /* @__PURE__ */ new Set([
+	"FunctionDeclaration",
+	"ClassDeclaration",
+	"TSEnumDeclaration"
+]);
+function declareStatement(statement, bindings, definitions) {
+	const type = statement.type;
+	if (type === "VariableDeclaration") for (const declarator of statement.declarations ?? []) {
+		const names = [];
+		patternNames(declarator.id, names);
+		const root = declarator.id?.type === "Identifier" && isDefinePermissions(declarator.init);
+		for (const name of names) bindings.set(name, root);
+	}
+	else if (NAMED_DECLARATIONS.has(type)) {
+		if (statement.id?.name !== void 0) bindings.set(statement.id.name, false);
+	} else if (type === "ExportNamedDeclaration" || type === "ExportDefaultDeclaration") {
+		const declaration = statement.declaration;
+		if (declaration !== void 0 && declaration !== null) declareStatement(declaration, bindings, definitions);
+	} else if (type === "ImportDeclaration") {
+		for (const spec of statement.specifiers ?? []) if (spec.local?.name !== void 0) bindings.set(spec.local.name, importsRoot(spec, definitions));
 	}
 }
-function recordCall(node, parent, source, fileRel, roots, definitionFiles, usages, unknown, dynamic, roleNames, planNames, _allowKeys, knownKeys) {
+function isNodeList(value) {
+	return Array.isArray(value);
+}
+const BLOCK_SCOPES = /* @__PURE__ */ new Set([
+	"Program",
+	"BlockStatement",
+	"StaticBlock"
+]);
+const FUNCTION_SCOPES = /* @__PURE__ */ new Set([
+	"FunctionDeclaration",
+	"FunctionExpression",
+	"ArrowFunctionExpression"
+]);
+/** The names a scope node declares, each with whether it is a permission tree; `undefined` for a node that opens no scope. */
+function bindingsOf(node, definitions) {
+	const bindings = /* @__PURE__ */ new Map();
+	const type = node.type;
+	const declare = (statements) => {
+		for (const statement of isNodeList(statements) ? statements : []) declareStatement(statement, bindings, definitions);
+	};
+	const names = [];
+	if (BLOCK_SCOPES.has(type)) declare(node.body);
+	else if (FUNCTION_SCOPES.has(type)) {
+		for (const param of node.params ?? []) patternNames(param, names);
+		if (type === "FunctionExpression") patternNames(node.id, names);
+	} else if (type === "ForStatement") declare(node.init === null || node.init === void 0 ? [] : [node.init]);
+	else if (type === "ForInStatement" || type === "ForOfStatement") declare(node.left === void 0 ? [] : [node.left]);
+	else if (type === "CatchClause") patternNames(node.param, names);
+	else if (type === "SwitchStatement") for (const branch of node.cases ?? []) declare(branch.consequent);
+	else return;
+	for (const name of names) bindings.set(name, false);
+	return bindings;
+}
+/**
+* Whether `name`, read inside `ancestors`, is bound to a permission tree: the
+* innermost scope that declares it decides. A name no scope declares keeps
+* matching by name, as a global or generated reference does.
+*/
+function boundToRoot(name, ancestors, definitions, cache) {
+	for (const scope of ancestors.toReversed()) {
+		let bindings = cache.get(scope);
+		if (bindings === void 0) {
+			const found = bindingsOf(scope, definitions);
+			if (found === void 0) continue;
+			bindings = found;
+			cache.set(scope, bindings);
+		}
+		const bound = bindings.get(name);
+		if (bound !== void 0) return bound;
+	}
+	return definitions.has(name);
+}
+function recordCall(node, parent, lineAt, fileRel, roots, definitionFiles, usages, unknown, dynamic, roleNames, planNames, _allowKeys, knownKeys) {
 	const callee = calleeName(node.callee);
-	const line = lineAt(source, node.start ?? 0);
+	const line = lineAt(node.start ?? 0);
 	if (callee === "definePermissions" || callee === "defineRoles" || callee === "definePlans") {
 		const name = declaredName(parent);
 		if (name !== void 0) {
@@ -130,12 +257,12 @@ function recordCall(node, parent, source, fileRel, roots, definitionFiles, usage
 		});
 	}
 }
-function recordMember(node, parent, source, fileRel, roots, usages, unknown, dynamic, allowKeys, knownKeys) {
+function recordMember(node, parent, lineAt, fileRel, isRoot, usages, unknown, dynamic, allowKeys, knownKeys) {
 	if (node.computed === true) {
 		const root = rootName(node);
-		if (root !== void 0 && roots.has(root)) dynamic.push({
+		if (root !== void 0 && isRoot(root)) dynamic.push({
 			file: fileRel,
-			line: lineAt(source, node.start ?? 0),
+			line: lineAt(node.start ?? 0),
 			call: callName(parent)
 		});
 		return;
@@ -143,13 +270,13 @@ function recordMember(node, parent, source, fileRel, roots, usages, unknown, dyn
 	const path = memberPath(node);
 	if (path === void 0 || path.length < 2) return;
 	const [root, ...rest] = path;
-	if (root === void 0 || !roots.has(root)) return;
+	if (root === void 0 || !isRoot(root)) return;
 	const key = rest.join(".");
 	if (!knownKeys.has(key) && isFieldOrSubtree(rest, knownKeys)) return;
 	const call = callName(parent);
 	const usage = {
 		file: fileRel,
-		line: lineAt(source, node.start ?? 0),
+		line: lineAt(node.start ?? 0),
 		call
 	};
 	if (call === "allow") allowKeys.add(key);
@@ -215,11 +342,20 @@ function rootName(node) {
 	while (current?.type === "MemberExpression") current = current.object;
 	return current?.type === "Identifier" ? current.name : void 0;
 }
-function lineAt(source, index) {
-	let line = 1;
-	const end = Math.min(index, source.length);
-	for (let i = 0; i < end; i += 1) if (source.charCodeAt(i) === 10) line += 1;
-	return line;
+/** One pass over the file, then a binary search per node. */
+function lineIndex(source) {
+	const starts = [0];
+	for (let i = 0; i < source.length; i += 1) if (source.charCodeAt(i) === 10) starts.push(i + 1);
+	return (index) => {
+		let low = 0;
+		let high = starts.length - 1;
+		while (low < high) {
+			const mid = low + high + 1 >> 1;
+			if ((starts[mid] ?? 0) <= index) low = mid;
+			else high = mid - 1;
+		}
+		return low + 1;
+	};
 }
 function collectObjectKeys(node, into) {
 	if (node?.type !== "ObjectExpression" || node.properties === void 0) return;
@@ -238,7 +374,7 @@ function walk(program, visit) {
 	const handlers = {};
 	for (const type of Object.keys(visitorKeys)) {
 		handlers[type] = (node) => {
-			visit(node, stack.at(-1));
+			visit(node, stack.at(-1), stack);
 			stack.push(node);
 		};
 		handlers[`${type}:exit`] = () => {
@@ -250,6 +386,7 @@ function walk(program, visit) {
 //#endregion
 //#region src/cli/collect.ts
 async function runCollect(input) {
+	const load = { fresh: input.fresh === true };
 	const srcPath = input.collect.srcPath ?? input.config.collect?.srcPath ?? defaultSrcPath();
 	const outPath = catalogPath(input.config, input.cwd, input.collect.out);
 	const permissionsRel = input.config.permissions ?? guessPermissions(input.cwd, srcPath);
@@ -270,7 +407,7 @@ async function runCollect(input) {
 	};
 	let tree;
 	try {
-		const mod = await loadModule(permissionsAbs);
+		const mod = await loadModule(permissionsAbs, load);
 		tree = asPermissionTree(pickNamed(mod, ["permissions"]));
 	} catch (error) {
 		return {
@@ -278,13 +415,15 @@ async function runCollect(input) {
 			document: void 0,
 			scan: void 0,
 			outPath,
-			message: error instanceof Error ? error.message : String(error)
+			message: describeError(error)
 		};
 	}
-	const files = listSourceFiles(input.cwd, srcPath);
+	const files = listSourceFiles(input.cwd, input.scanPath ?? srcPath);
 	const knownKeys = new Set(leavesOf(tree).map((leaf) => leaf.key));
 	const scan = scanSources(input.cwd, files, knownKeys);
-	const document = buildCatalog(tree, scan, input.now.toISOString(), await loadConfiguredPolicy(input.cwd, input.config.policy));
+	const policy = input.loadPolicy === void 0 ? await loadConfiguredPolicy(input.cwd, input.config.policy, load) : await input.loadPolicy();
+	const generatedAt = input.now.toISOString();
+	const document = buildCatalog(tree, scan, generatedAt, policy);
 	const next = formatCatalogJson(document);
 	if (input.check) {
 		if (!existsSync(outPath)) return {
@@ -297,7 +436,7 @@ async function runCollect(input) {
 		const current = readFileSync(outPath, "utf8");
 		const currentDoc = JSON.parse(current);
 		const onDisk = catalogForCompare(currentDoc);
-		const generated = catalogForCompare(document);
+		const generated = catalogForCompare(input.scanPath === void 0 || samePaths(input.scanPath, srcPath) ? document : buildCatalog(tree, scanSources(input.cwd, listSourceFiles(input.cwd, srcPath), knownKeys), generatedAt, policy));
 		if (onDisk !== generated) {
 			const file = rel(input.cwd, outPath);
 			return {
@@ -318,16 +457,26 @@ async function runCollect(input) {
 	}
 	mkdirSync(dirname(outPath), { recursive: true });
 	writeFileSync(outPath, next);
+	const written = [outPath];
 	const barrel = input.collect.barrel ?? input.config.collect?.barrel;
-	if (barrel !== void 0 && barrel !== false) writeBarrel(resolve(input.cwd, barrel === true ? "src/permissions.generated.ts" : barrel), permissionsAbs);
+	if (barrel !== void 0 && barrel !== false) {
+		const barrelPath = resolve(input.cwd, barrelFile(barrel));
+		writeBarrel(barrelPath, permissionsAbs);
+		written.push(barrelPath);
+	}
 	return {
 		code: 0,
 		document,
 		scan,
 		outPath,
-		message: `wrote ${rel(input.cwd, outPath)}`
+		message: `wrote ${rel(input.cwd, outPath)}`,
+		written
 	};
 }
+function samePaths(a, b) {
+	return a.length === b.length && a.every((entry, index) => entry === b[index]);
+}
+/** The permissions module `collect` reads when the config names none. */
 function guessPermissions(cwd, srcPath) {
 	return [
 		"src/permissions.ts",
@@ -335,6 +484,9 @@ function guessPermissions(cwd, srcPath) {
 		...srcPath.map((entry) => `${entry.replace(/\/$/, "")}/permissions.ts`)
 	].find((file) => existsSync(resolve(cwd, file)));
 }
+function barrelFile(barrel) {
+	return barrel === true ? "src/permissions.generated.ts" : barrel;
+}
 function writeBarrel(abs, permissionsAbs) {
 	const specifier = relative(dirname(abs), permissionsAbs).replace(/\\/gu, "/").replace(/\.tsx?$/u, ".js");
 	const body = `// @generated by permdock — do not edit
@@ -347,4 +499,4 @@ export const permissions = mergePermissions(collected)
 	writeFileSync(abs, body);
 }
 //#endregion
-export { scanSources as n, runCollect as t };
+export { scanSources as i, guessPermissions as n, runCollect as r, barrelFile as t };

package/dist/collect-DLlujdHC.js

@@ -0,0 +1,83 @@
+import { i as describeError } from "./errors-CWfoNg9N.js";
+import { a as listArg, i as globalArgs, s as stringArg, t as COMMAND_DESCRIPTIONS } from "./commands-DWOrSQic.js";
+import { defineCommand } from "citty";
+//#region src/cli/commands/collect.ts
+function collect(ctx) {
+	return defineCommand({
+		meta: {
+			name: "collect",
+			description: COMMAND_DESCRIPTIONS.collect
+		},
+		args: {
+			...globalArgs,
+			check: {
+				type: "boolean",
+				description: "Exit 1 when the catalog on disk is stale; write nothing"
+			},
+			src: {
+				type: "string",
+				description: "Source roots or globs, repeatable or comma-separated",
+				valueHint: "path"
+			},
+			out: {
+				type: "string",
+				description: "Catalog file to write",
+				valueHint: "file"
+			},
+			watch: {
+				type: "boolean",
+				description: "Collect again when a source, config or policy file changes"
+			}
+		},
+		async run({ args: parsed, rawArgs }) {
+			const src = listArg(rawArgs, "src");
+			const out = stringArg(parsed.out);
+			const overrides = {
+				...src.length > 0 ? { srcPath: src } : {},
+				...out === void 0 ? {} : { out }
+			};
+			if (parsed.watch === true) {
+				if (parsed.check === true) {
+					ctx.report({
+						code: 2,
+						output: "collect: --watch writes the catalog; drop --check"
+					});
+					return;
+				}
+				const { createCollectScheduler } = await import("./watch-Etoa_Mvr.js");
+				const scheduler = createCollectScheduler(ctx.cwd, { collect: overrides }, {
+					...ctx.configFile === void 0 ? {} : { configFile: ctx.configFile },
+					report: (message) => {
+						ctx.io.stderr(message ?? "catalog updated");
+					}
+				});
+				let message;
+				try {
+					message = await scheduler.run(false);
+				} catch (error) {
+					message = describeError(error);
+				}
+				scheduler.watch();
+				ctx.report({
+					code: 0,
+					output: message ?? "watching for changes; Ctrl-C to stop"
+				});
+				return;
+			}
+			const result = await (await import("./collect-rG2IQ3t0.js")).runCollect({
+				cwd: ctx.cwd,
+				config: ctx.config,
+				collect: overrides,
+				check: parsed.check === true,
+				now: ctx.now,
+				io: ctx.io
+			});
+			ctx.report({
+				code: result.code,
+				output: result.message
+			});
+		}
+	});
+}
+//#endregion
+export { collect };

package/dist/collect-rG2IQ3t0.js

@@ -0,0 +1,2 @@
+import { r as runCollect } from "./collect-DDDv_ESs.js";
+export { runCollect };

package/dist/{commands-BMh_Etm2.js → commands-DWOrSQic.js}

@@ -65,26 +65,30 @@ const COMMAND_DESCRIPTIONS = {
 	diff: "Compare two policies or catalogs; exit 1 on a breaking change",
 	usage: "Report unused, ungranted and role-less permissions and conditions on undeclared fields",
 	doctor: "Check a PermDock installation and print a fix for each finding",
+	config: "Check permdock.config.ts for unknown keys, or print the effective config",
 	skills: "Install, update or list the PermDock Agent Skills",
 	openapi: "Emit security into an OpenAPI document, or import one into a generated definition",
 	rls: "Generate, import, verify or migrate Postgres RLS policies from the policy",
 	arazzo: "Resolve every Arazzo step to x-permdock-permissions",
 	cloud: "Publish the catalog, hostable flags and role assignability to a PermDock Cloud environment",
-	supabase: "Generate the Supabase Custom Access Token Hook, or inspect its manifest"
+	supabase: "Generate the Supabase Custom Access Token Hook, or inspect its manifest",
+	powersync: "Generate PowerSync Sync Streams from the policy, or verify them against the fixtures"
 };
 /** Every top-level command, loaded only when it runs or its own `--help` is asked for. */
 const commands = {
-	collect: async () => (await import("./collect-B7_TIfmg.js")).collect,
-	catalog: async () => (await import("./catalog-B0E6bggc.js")).catalog,
-	diff: async () => (await import("./diff-BUzf5Poi.js")).diff,
-	usage: async () => (await import("./usage-1ozMubLY.js")).usage,
-	doctor: async () => (await import("./doctor-Bqo6FwUa.js")).doctor,
-	skills: async () => (await import("./skills-C_lpV4Jx.js")).skills,
-	openapi: async () => (await import("./openapi-CwePaF7C.js")).openapi,
-	rls: async () => (await import("./rls-BOFU3chG.js")).rls,
-	arazzo: async () => (await import("./arazzo-aoTkqYsJ.js")).arazzo,
-	cloud: async () => (await import("./cloud-BNQTrmrr.js")).cloud,
-	supabase: async () => (await import("./supabase-D8UlBA7Z.js")).supabase
+	collect: async () => (await import("./collect-DLlujdHC.js")).collect,
+	catalog: async () => (await import("./catalog-h2tlKFkq.js")).catalog,
+	diff: async () => (await import("./diff-CzqLxZ77.js")).diff,
+	usage: async () => (await import("./usage-D07N9QJ3.js")).usage,
+	doctor: async () => (await import("./doctor-rOr-4ZfS.js")).doctor,
+	config: async () => (await import("./config-Bn00Z3ks.js")).config,
+	skills: async () => (await import("./skills-JaymNCdK.js")).skills,
+	openapi: async () => (await import("./openapi-Bbg4wGVL.js")).openapi,
+	rls: async () => (await import("./rls-CEvs64Kj.js")).rls,
+	arazzo: async () => (await import("./arazzo-cmvX2jDe.js")).arazzo,
+	cloud: async () => (await import("./cloud-BGhHS-lY.js")).cloud,
+	supabase: async () => (await import("./supabase-CwafwxxF.js")).supabase,
+	powersync: async () => (await import("./powersync-yW1UUFzp.js")).powersync
 };
 function isCommand(name) {
 	return Object.hasOwn(commands, name);

package/dist/compile/index.d.ts

@@ -0,0 +1,3 @@
+import { n as GraphSqlPart, r as RelationsMapping, t as GraphSql } from "../graph-sql-B-dsAT6j.js";
+import { a as CompiledWhere, c as compileWhere, i as CompiledSql, l as escapeLike, n as CompiledCompare, o as MembershipTable, r as CompiledExists, s as MembershipsMapping, t as CompileWhereOptions } from "../compile-CNnl6uIt.js";
+export { type CompileWhereOptions, type CompiledCompare, type CompiledExists, type CompiledSql, type CompiledWhere, type GraphSql, type GraphSqlPart, type MembershipTable, type MembershipsMapping, type RelationsMapping, compileWhere, escapeLike };

package/dist/compile/index.js

@@ -0,0 +1,2 @@
+import { n as escapeLike, t as compileWhere } from "../compile-Ba4blROR.js";
+export { compileWhere, escapeLike };