permdock 0.11.0 → 0.14.0

package/dist/{fixtures-A1_sp_tR.js → fixtures-Bm4_K1ke.js}

@@ -5,12 +5,14 @@ import { a as loadModule, s as pickNamed } from "./load-DjSU5KXO.js";
 import { existsSync } from "node:fs";
 import { resolve } from "node:path";
 //#region src/cli/fixtures.ts
-function asFixtures(value) {
+function asFixtures(value, followed = false) {
 	const list = Array.isArray(value) ? value : isRecord(value) && Array.isArray(value["fixtures"]) ? value["fixtures"] : void 0;
 	if (list === void 0) throw configError("PermDock CLI: fixtures must be an array or { fixtures }");
 	return list.map((item, index) => {
 		if (!isRecord(item) || !isRecord(item["subject"]) || item["row"] === void 0) throw configError(`PermDock CLI: fixture ${index} needs subject and row`);
-		if (typeof item["action"] !== "string") throw new TypeError(`PermDock CLI: fixture ${index} needs action`);
+		if (followed && item["table"] !== void 0) {
+			if (typeof item["table"] !== "string" || item["table"].length === 0 || item["action"] !== void 0 || item["expected"] !== "granted" && item["expected"] !== "denied") throw configError(`PermDock CLI: fixture ${index} needs table and expected (granted or denied), without action`);
+		} else if (typeof item["action"] !== "string") throw new TypeError(`PermDock CLI: fixture ${index} needs action`);
 		if (typeof item["subject"]["id"] !== "string") throw new TypeError(`PermDock CLI: fixture ${index} subject needs id`);
 		const memberships = item["subject"]["memberships"];
 		if (memberships !== void 0 && !Array.isArray(memberships)) throw configError(`PermDock CLI: fixture ${index} subject.memberships must be an array`);
@@ -26,23 +28,19 @@ function asCustomRoles(value) {
 	if (!Array.isArray(value["customRoles"])) throw new TypeError("PermDock CLI: fixtures customRoles must be an array");
 	return value["customRoles"];
 }
-/**
-* A `.json` file or a module exporting `fixtures` (or default) and optionally
-* `customRoles`.
-*/
-async function loadFixtures(cwd, path) {
+async function loadFixtures(cwd, path, followed = false) {
 	const abs = resolve(cwd, path);
 	if (!existsSync(abs)) throw configError(`PermDock CLI: fixtures not found: ${path}`);
 	if (abs.endsWith(".json")) {
 		const parsed = readJsonFile(abs);
 		return {
-			fixtures: asFixtures(parsed),
+			fixtures: asFixtures(parsed, followed),
 			customRoles: asCustomRoles(parsed)
 		};
 	}
 	const mod = await loadModule(abs);
 	return {
-		fixtures: asFixtures(pickNamed(mod, ["fixtures", "default"])),
+		fixtures: asFixtures(pickNamed(mod, ["fixtures", "default"]), followed),
 		customRoles: asCustomRoles(mod)
 	};
 }

package/dist/{import-t1yqnCyG.js → import-efm6qPgx.js}

@@ -4,7 +4,7 @@ import { i as readJsonFile } from "./files-BSjrtIHw.js";
 import { t as applyFiles } from "./files-B3AA05f1.js";
 import { n as httpRequest } from "./http-DOL33cO0.js";
 import { i as schemaExpression, t as emitPermissionsModule } from "./generate-CezbCaTI.js";
-import { t as validateOpenapi } from "./schema-CQzIJdEd.js";
+import { t as validateOpenapi } from "./schema-CnrIP94n.js";
 import { existsSync, readFileSync } from "node:fs";
 import { resolve } from "node:path";
 //#region ../../node_modules/.pnpm/yaml@2.9.1/node_modules/yaml/browser/dist/nodes/identity.js

package/dist/{init-CY7THM2v.js → init-BtWY1L0J.js}

@@ -48,7 +48,7 @@ const init = defineLeaf({
 		...forceFlag
 	},
 	async run(ctx, { flags }) {
-		const [{ runInit }, { packageManagerOf }] = await Promise.all([import("./init-DFwylmiN.js"), import("./peer-C9LvBCcb.js")]);
+		const [{ runInit }, { packageManagerOf }] = await Promise.all([import("./init-D6rpLPwM.js"), import("./peer-C9LvBCcb.js")]);
 		const agent = await packageManagerOf(ctx.cwd);
 		const selection = {
 			archetype: flags.archetype,
@@ -79,7 +79,7 @@ const presetDecode = defineLeaf({
 	positionals: presetCode,
 	flags: {},
 	async run(_ctx, { args }) {
-		const { runPreset } = await import("./init-DFwylmiN.js");
+		const { runPreset } = await import("./init-D6rpLPwM.js");
 		return runPreset("decode", args["code"] ?? "");
 	}
 });
@@ -87,7 +87,7 @@ const presetUrl = defineLeaf({
 	positionals: presetCode,
 	flags: {},
 	async run(_ctx, { args }) {
-		const { runPreset } = await import("./init-DFwylmiN.js");
+		const { runPreset } = await import("./init-D6rpLPwM.js");
 		return runPreset("url", args["code"] ?? "");
 	}
 });

package/dist/{init-DFwylmiN.js → init-D6rpLPwM.js}

@@ -1,6 +1,6 @@
 import { n as CliError } from "./errors-Vpu6rKHl.js";
 import { a as decodePreset, g as resolvePreset, i as presetFlags, n as generatePreset, o as encodePreset } from "./preset-BjLzeFpp.js";
-import { a as nonEmptyOr } from "./output-CtyBwTNB.js";
+import { a as nonEmptyOr } from "./output-3iB3_Hfg.js";
 import { t as addLine } from "./peer-Q0fuZ6hx.js";
 import { t as applyFiles } from "./files-B3AA05f1.js";
 import { existsSync } from "node:fs";

package/dist/{kernel-qv4cr9w8.js → kernel-BD8QuMnv.js}

@@ -228,6 +228,11 @@ function createAgentKernel(policy, given) {
 	const boundary = options.boundary ?? "tool-args";
 	const tools = options.tools ?? {};
 	const run = async (binding, args, context, how) => {
+		const onError = (error) => {
+			try {
+				how.decideOptions.onError?.(error);
+			} catch {}
+		};
 		let permdock;
 		try {
 			permdock = await instance(context);
@@ -252,7 +257,8 @@ function createAgentKernel(policy, given) {
 			if (binding.data !== void 0) {
 				try {
 					data = await binding.data(args);
-				} catch {
+				} catch (error) {
+					onError(error);
 					return {
 						ok: false,
 						failure: "load-failed",
@@ -291,7 +297,8 @@ function createAgentKernel(policy, given) {
 				raw,
 				decision
 			};
-		} catch {
+		} catch (error) {
+			onError(error);
 			return compact({
 				ok: false,
 				failure: "failed",

package/dist/{login-C5XLYZSF.js → login-B8s6VI8Z.js}

@@ -27,7 +27,7 @@ const login = defineLeaf({
 		}
 	},
 	async run(ctx, { flags }) {
-		const { runLogin } = await import("./login-B92-dZMK.js");
+		const { runLogin } = await import("./login-cLflB63Z.js");
 		return runLogin({
 			cwd: ctx.cwd,
 			url: given(flags.url),
@@ -43,7 +43,7 @@ const login = defineLeaf({
 const logout = defineLeaf({
 	flags: { ...urlFlag },
 	async run(ctx, { flags }) {
-		const { runLogout } = await import("./login-B92-dZMK.js");
+		const { runLogout } = await import("./login-cLflB63Z.js");
 		return runLogout({
 			url: given(flags.url),
 			json: ctx.json,
@@ -55,7 +55,7 @@ const logout = defineLeaf({
 const whoami = defineLeaf({
 	flags: { ...urlFlag },
 	async run(ctx, { flags }) {
-		const { runWhoami } = await import("./login-B92-dZMK.js");
+		const { runWhoami } = await import("./login-cLflB63Z.js");
 		return runWhoami({
 			url: given(flags.url),
 			json: ctx.json,

package/dist/{login-B92-dZMK.js → login-cLflB63Z.js}

@@ -3,7 +3,7 @@ import { n as CliError } from "./errors-Vpu6rKHl.js";
 import { i as postForm, r as parseToken, s as runDeviceFlow } from "./device-BwbJNmb2.js";
 import { i as writeCredentials, n as deleteCredentials, r as readCredentials, t as credentialsPath } from "./storage-C2bWdvJH.js";
 import { n as randomToken, t as pkce } from "./pkce-CnmmYqUZ.js";
-import { a as nonEmptyOr } from "./output-CtyBwTNB.js";
+import { a as nonEmptyOr } from "./output-3iB3_Hfg.js";
 import { n as httpRequest } from "./http-DOL33cO0.js";
 import { c as READ_SCOPES, d as issuerMetadata, i as credentialsInsideRepository, l as cloudUrl, n as cliRuntime, r as credentialStorage, s as CLI_CLIENT_ID, t as CREDENTIAL_SERVICE } from "./auth--yPyZNgr.js";
 import { spawn } from "node:child_process";

package/dist/{manifest-Cav1rjNQ.js → manifest-BWIR_EEB.js}

@@ -30,20 +30,20 @@ const SECTIONS = [
 				docs: "init",
 				effects: ["files"],
 				config: false,
-				load: async () => (await import("./init-CY7THM2v.js")).init
+				load: async () => (await import("./init-BtWY1L0J.js")).init
 			}),
 			group("preset", "Decode a preset code, or print its permdock.com/create link", "preset", [leaf("decode", "Print what a preset code holds", {
 				examples: ["permdock preset decode p1AQIDBAc"],
 				docs: "preset",
 				effects: [],
 				config: false,
-				load: async () => (await import("./init-CY7THM2v.js")).presetDecode
+				load: async () => (await import("./init-BtWY1L0J.js")).presetDecode
 			}), leaf("url", "Print the permdock.com/create link that opens a code", {
 				examples: ["permdock preset url p1AQIDBAc"],
 				docs: "preset",
 				effects: [],
 				config: false,
-				load: async () => (await import("./init-CY7THM2v.js")).presetUrl
+				load: async () => (await import("./init-BtWY1L0J.js")).presetUrl
 			})]),
 			group("skills", "Install, update or list the PermDock Agent Skills", "skills", [
 				leaf("install", "Copy the Agent Skills into the agent folders", {
@@ -55,21 +55,21 @@ const SECTIONS = [
 					docs: "skills",
 					effects: ["files"],
 					config: false,
-					load: async () => (await import("./skills-BZc81VLt.js")).install
+					load: async () => (await import("./skills-uzsVqEi9.js")).install
 				}),
 				leaf("update", "Replace installed skills with this version's", {
 					examples: ["permdock skills update"],
 					docs: "skills",
 					effects: ["files"],
 					config: false,
-					load: async () => (await import("./skills-BZc81VLt.js")).update
+					load: async () => (await import("./skills-uzsVqEi9.js")).update
 				}),
 				leaf("list", "List the skills and where each is installed", {
 					examples: ["permdock skills list"],
 					docs: "skills",
 					effects: [],
 					config: false,
-					load: async () => (await import("./skills-BZc81VLt.js")).list
+					load: async () => (await import("./skills-uzsVqEi9.js")).list
 				})
 			]),
 			leaf("doctor", "Check a PermDock installation and print a fix for each finding", {
@@ -82,7 +82,7 @@ const SECTIONS = [
 				effects: ["files"],
 				config: true,
 				findings: true,
-				load: async () => (await import("./doctor-DxyVeUEE.js")).doctor
+				load: async () => (await import("./doctor-NxCr_hba.js")).doctor
 			}),
 			leaf("completion", "Print the shell completion script for bash, zsh or fish", {
 				examples: ["permdock completion zsh > ~/.zfunc/_permdock", "eval \"$(permdock completion bash)\""],
@@ -90,7 +90,7 @@ const SECTIONS = [
 				effects: [],
 				config: false,
 				shellOutput: true,
-				load: async () => (await import("./completion-DLTuCf53.js")).completion
+				load: async () => (await import("./completion-fJ19i8Jk.js")).completion
 			})
 		]
 	},
@@ -106,7 +106,7 @@ const SECTIONS = [
 				docs: "collect",
 				effects: ["files"],
 				config: true,
-				load: async () => (await import("./collect-D9Tt0Bcx.js")).collect
+				load: async () => (await import("./collect-lZgCKMe_.js")).collect
 			}),
 			leaf("catalog", "Export the catalog as catalog JSON, JSON Schema or Markdown", {
 				examples: ["permdock catalog --out permissions.catalog.json", "permdock catalog --kind markdown"],
@@ -132,14 +132,14 @@ const SECTIONS = [
 				effects: [],
 				config: true,
 				findings: true,
-				load: async () => (await import("./usage-heV5KOiU.js")).usage
+				load: async () => (await import("./usage-Dm2hn0pS.js")).usage
 			}),
 			leaf("diff", "Compare two policies or catalogs; exit 1 on a breaking change", {
 				examples: ["permdock diff main.catalog.json permissions.catalog.json", "permdock diff ./old-policy.ts ./src/policy.ts --impact"],
 				docs: "diff",
 				effects: [],
 				config: true,
-				load: async () => (await import("./diff-BwR1JdP2.js")).diff
+				load: async () => (await import("./diff-CxtbOi2l.js")).diff
 			}),
 			leaf("config", "Check permdock.config.ts for unknown keys, or print the effective config", {
 				examples: ["permdock config", "permdock config --print"],
@@ -147,7 +147,7 @@ const SECTIONS = [
 				effects: [],
 				config: true,
 				findings: true,
-				load: async () => (await import("./config-CmydKZr2.js")).config
+				load: async () => (await import("./config-BYSk3iKV.js")).config
 			})
 		]
 	},
@@ -164,14 +164,14 @@ const SECTIONS = [
 						"network"
 					],
 					config: true,
-					load: async () => (await import("./rls-BYHN5bcJ.js")).generate
+					load: async () => (await import("./rls-DjjOHlKE.js")).generate
 				}),
 				leaf("import", "Turn existing RLS policies into a generated definition", {
 					examples: ["permdock rls import --sql schema.sql --out src/permissions.generated.ts", "permdock rls import --db-url-stdin --out src/permissions.generated.ts"],
 					docs: "rls",
 					effects: ["files", "database:read"],
 					config: true,
-					load: async () => (await import("./rls-BYHN5bcJ.js")).importPolicies
+					load: async () => (await import("./rls-DjjOHlKE.js")).importPolicies
 				}),
 				leaf("verify", "Run the fixtures against the policies, or compare a live database", {
 					examples: [
@@ -183,21 +183,21 @@ const SECTIONS = [
 					effects: ["files", "database:read"],
 					config: true,
 					findings: true,
-					load: async () => (await import("./rls-BYHN5bcJ.js")).verify
+					load: async () => (await import("./rls-DjjOHlKE.js")).verify
 				}),
 				leaf("migrate", "Rewrite hand-written policies onto the generated helpers", {
 					examples: ["permdock rls migrate --sql supabase/migrations --dry-run", "permdock rls migrate --sql supabase/migrations"],
 					docs: "rls",
 					effects: ["rewrite", "files"],
 					config: true,
-					load: async () => (await import("./rls-BYHN5bcJ.js")).migrate
+					load: async () => (await import("./rls-DjjOHlKE.js")).migrate
 				}),
 				leaf("explain", "Show the tables, membership sources and triggers the SQL binds to", {
 					examples: ["permdock rls explain", "permdock rls explain --db-url-stdin --json"],
 					docs: "rls",
 					effects: ["database:read"],
 					config: true,
-					load: async () => (await import("./rls-BYHN5bcJ.js")).explain
+					load: async () => (await import("./rls-DjjOHlKE.js")).explain
 				})
 			]),
 			group("supabase", "Generate the Supabase Custom Access Token Hook, or inspect its manifest", "supabase", [group("hook", "The Custom Access Token Hook", "supabase", [leaf("generate", "Compile the membership sources into the hook migration", {
@@ -205,26 +205,26 @@ const SECTIONS = [
 				docs: "supabase",
 				effects: ["files", "database:read"],
 				config: true,
-				load: async () => (await import("./supabase-CBEK6KEo.js")).hookGenerate
+				load: async () => (await import("./supabase-DYWnT800.js")).hookGenerate
 			})]), leaf("inspect", "Print or write the hook and helper manifest", {
 				examples: ["permdock supabase inspect", "permdock supabase inspect --out"],
 				docs: "supabase",
 				effects: ["files"],
 				config: true,
-				load: async () => (await import("./supabase-CBEK6KEo.js")).inspect
+				load: async () => (await import("./supabase-DYWnT800.js")).inspect
 			})]),
 			group("powersync", "Generate PowerSync Sync Streams from the policy, or verify them", "powersync", [leaf("generate", "Compile the read grants into sync-config.yaml", {
 				examples: ["permdock powersync generate", "permdock powersync generate --check"],
 				docs: "powersync",
 				effects: ["files"],
 				config: true,
-				load: async () => (await import("./powersync-CBcsEvdr.js")).generate
+				load: async () => (await import("./powersync-COjQTHRD.js")).generate
 			}), leaf("verify", "Fail on stale streams or a stream that syncs a denied row", {
 				examples: ["permdock powersync verify", "permdock powersync verify --db-url-stdin"],
 				docs: "powersync",
 				effects: ["database:read"],
 				config: true,
-				load: async () => (await import("./powersync-CBcsEvdr.js")).verify
+				load: async () => (await import("./powersync-COjQTHRD.js")).verify
 			})]),
 			group("scim", "Generate the Postgres tables postgresDirectoryStore keeps a SCIM directory in", "scim", [leaf("generate", "Write the tenant-keyed users, groups and members tables", {
 				examples: [
@@ -247,13 +247,13 @@ const SECTIONS = [
 				docs: "openapi",
 				effects: ["files"],
 				config: true,
-				load: async () => (await import("./openapi-gMQQSzNn.js")).emit
+				load: async () => (await import("./openapi-CT55v3WD.js")).emit
 			}), leaf("import", "Turn an OpenAPI document into a generated definition", {
 				examples: ["permdock openapi import --doc openapi.yaml --out src/permissions.generated.ts"],
 				docs: "openapi",
 				effects: ["files", "network"],
 				config: false,
-				load: async () => (await import("./openapi-gMQQSzNn.js")).importDocument
+				load: async () => (await import("./openapi-CT55v3WD.js")).importDocument
 			})]),
 			group("arazzo", "Check Arazzo workflows against the permissions", "arazzo", [leaf("check", "Resolve every Arazzo step to x-permdock-permissions", {
 				examples: ["permdock arazzo check --doc arazzo.json --openapi openapi.json"],
@@ -261,7 +261,7 @@ const SECTIONS = [
 				effects: [],
 				config: true,
 				findings: true,
-				load: async () => (await import("./arazzo-BXaEhGHM.js")).check
+				load: async () => (await import("./arazzo-Bol9OgF-.js")).check
 			})]),
 			leaf("scan", "List authorization checks written without PermDock, to adopt it in an existing app", {
 				examples: ["permdock scan", "permdock scan --src app,lib --pattern isBeta"],
@@ -269,7 +269,7 @@ const SECTIONS = [
 				effects: [],
 				config: true,
 				findings: true,
-				load: async () => (await import("./scan-CvFWW_fU.js")).scan
+				load: async () => (await import("./scan-CR_xm71k.js")).scan
 			}),
 			group("casl", "Import CASL rules into a generated module", "casl", [leaf("import", "Turn CASL rules per role into a permissions and policy module", {
 				examples: ["permdock casl import --rules rules.json --out src/permissions.generated.ts"],
@@ -283,7 +283,7 @@ const SECTIONS = [
 				docs: "casbin",
 				effects: ["files"],
 				config: false,
-				load: async () => (await import("./casbin-BuTZnSPv.js")).casbinImport
+				load: async () => (await import("./casbin-1PVgMHOR.js")).casbinImport
 			})])
 		]
 	},
@@ -295,34 +295,34 @@ const SECTIONS = [
 				docs: "login",
 				effects: ["network", "files"],
 				config: false,
-				load: async () => (await import("./login-C5XLYZSF.js")).login
+				load: async () => (await import("./login-B8s6VI8Z.js")).login
 			}),
 			leaf("logout", "Revoke and delete the stored PermDock Cloud login", {
 				examples: ["permdock logout"],
 				docs: "login",
 				effects: ["network", "files"],
 				config: false,
-				load: async () => (await import("./login-C5XLYZSF.js")).logout
+				load: async () => (await import("./login-B8s6VI8Z.js")).logout
 			}),
 			leaf("whoami", "Print the PermDock Cloud identity the CLI acts as", {
 				examples: ["permdock whoami", "permdock whoami --json"],
 				docs: "login",
 				effects: [],
 				config: false,
-				load: async () => (await import("./login-C5XLYZSF.js")).whoami
+				load: async () => (await import("./login-B8s6VI8Z.js")).whoami
 			}),
 			group("cloud", "Publish to or pull from a PermDock Cloud project", "cloud", [leaf("push", "Publish the catalog, policy and manifest to a Cloud project", {
 				examples: ["permdock cloud push --dry-run", "permdock cloud push --project prj_123"],
 				docs: "cloud",
 				effects: ["network", "cloud:write"],
 				config: true,
-				load: async () => (await import("./cloud-DiAiYFRo.js")).push
+				load: async () => (await import("./cloud-BfJVKpcN.js")).push
 			}), leaf("pull", "Write a Cloud project's published catalog and manifest", {
 				examples: ["permdock cloud pull --project prj_123"],
 				docs: "cloud",
 				effects: ["network", "files"],
 				config: true,
-				load: async () => (await import("./cloud-DiAiYFRo.js")).pull
+				load: async () => (await import("./cloud-BfJVKpcN.js")).pull
 			})])
 		]
 	},
@@ -333,7 +333,7 @@ const SECTIONS = [
 			docs: "codemod",
 			effects: ["rewrite"],
 			config: false,
-			load: async () => (await import("./codemod-_q_ZI01S.js")).codemod
+			load: async () => (await import("./codemod-DWfH-KHk.js")).codemod
 		})]
 	}
 ];
@@ -345,7 +345,7 @@ const COMPLETE_LEAF = leaf("__complete", "Print completion candidates for a part
 	config: false,
 	shellOutput: true,
 	hidden: true,
-	load: async () => (await import("./completion-DLTuCf53.js")).complete
+	load: async () => (await import("./completion-fJ19i8Jk.js")).complete
 });
 const ROOT = group("permdock", "Collect, export, diff and check the permissions a PermDock policy declares", "", [...SECTIONS.flatMap((section) => section.entries), COMPLETE_LEAF]);
 /** Each leaf with its path from the root, in manifest order. */

package/dist/mcp/index.d.ts

@@ -112,6 +112,15 @@ type McpProcedureEnforcement = {
   readonly permissionFor: (name: string) => Permission | undefined;
   readonly oauthScopesFor?: (name: string) => readonly string[] | undefined;
 };
+/**
+ * Receives an error a check threw: a loader, `decide`, an approval input or a
+ * subject a list cannot build. The call still refuses; a sink that throws is
+ * ignored.
+ */
+type McpOnError = (error: unknown, context: {
+  readonly permission: string | null;
+  readonly name: string;
+}) => void;
 type McpPermDockOptions<TUser = unknown> = InstanceOptions & {
   /**
    * Receives the verified auth info, or `{}` on a transport without one
@@ -195,8 +204,8 @@ type McpPermDock = {
    * `permission`.
    */
   readonly protectServer: {
-    (server: McpServer): GuardedMcpServer;
-    (server: McpServer, options: McpProcedureEnforcement): ProcedureMcpServer;
+    (server: McpServer, onError?: McpOnError): GuardedMcpServer;
+    (server: McpServer, options: McpProcedureEnforcement, onError?: McpOnError): ProcedureMcpServer;
   };
 };
 //#endregion
@@ -290,4 +299,4 @@ type McpSubjectOptions = Pick<JwtSubjectOptions, "claims" | "groupRoles" | "sche
  */
 export declare function subjectFromMcp(authInfo: McpAuthInfo | undefined, options?: McpSubjectOptions): Subject<McpPrincipal>;
 //#endregion
-export type { DeniedText, DeniedTextEvent, GuardedMcpServer, McpAuthInfo, McpPermDock, McpPermDockOptions, McpPrincipal, McpProcedureEnforcement, McpProcedureToolConfig, McpPromptConfig, McpResourceConfig, McpResourceGuardOptions, McpResourceGuardResult, McpSubjectOptions, McpToolConfig, McpUiResourceConfig, ProcedureMcpServer, ProtectedResourceMetadataOptions };
+export type { DeniedText, DeniedTextEvent, GuardedMcpServer, McpAuthInfo, McpOnError, McpPermDock, McpPermDockOptions, McpPrincipal, McpProcedureEnforcement, McpProcedureToolConfig, McpPromptConfig, McpResourceConfig, McpResourceGuardOptions, McpResourceGuardResult, McpSubjectOptions, McpToolConfig, McpUiResourceConfig, ProcedureMcpServer, ProtectedResourceMetadataOptions };

package/dist/mcp/index.js

@@ -12,7 +12,7 @@ import { l as problemResponse, o as methodNotAllowed, r as bearerChallenge, u as
 import { t as clientNameOf } from "../clients-DYr3U86j.js";
 import { r as mapClaimsToSubject } from "../map-claims-C-nv08_n.js";
 import { r as instanceOptions } from "../build-instance-BWXqwQYU.js";
-import { i as refusalText, n as createAgentKernel } from "../kernel-qv4cr9w8.js";
+import { i as refusalText, n as createAgentKernel } from "../kernel-BD8QuMnv.js";
 import { t as boundedMap } from "../lru-8q4WZjBV.js";
 import { t as delegationFrom } from "../delegation-input-FTxMK3ji.js";
 import { n as deniedToolRefusal, r as toolErrorResult, t as approvalToolRefusal } from "../tool-refusal-Qpjs_W6M.js";
@@ -211,6 +211,18 @@ function stepUpRefusal(stepUpAt, decision, permission, data, context, capabiliti
 	});
 }
 //#endregion
+//#region src/mcp/report.ts
+/**
+* Sends `error` to the `onError` sink. The check still refuses; a sink that
+* throws is ignored (invariant 1).
+*/
+function report(sink, error, context) {
+	if (sink === void 0) return;
+	try {
+		sink(error, context);
+	} catch {}
+}
+//#endregion
 //#region src/mcp/call-check.ts
 function reachOf(policy, permission, declared) {
 	return declared === void 0 ? {
@@ -252,10 +264,16 @@ function credentialRefusal(checks, permission, reach, authInfo) {
 * The completion re-check of a long-running tool: the call must still be
 * allowed, or approved with the same token.
 */
-async function recheck(checks, binding, args, call, permission, approved, tool) {
+async function recheck(checks, binding, args, call, permission, approved, tool, name) {
 	const rechecked = await checks.kernel.check(binding, args, call, compact({
 		simulate: true,
-		tool
+		tool,
+		onError: (error) => {
+			report(checks.onError, error, {
+				permission: permission.key,
+				name
+			});
+		}
 	}));
 	if (!rechecked.ok) return {
 		ok: false,
@@ -271,8 +289,14 @@ async function recheck(checks, binding, args, call, permission, approved, tool)
 		} : plainRefusal(permission, `Denied: ${permission.key} was revoked before the call completed.`, {})
 	};
 }
-async function decideCall(checks, permission, reach, args, load, context, handlerContext, capabilities, completion, tool) {
+async function decideCall(checks, permission, reach, args, load, context, handlerContext, capabilities, completion, tool, name = tool ?? permission.key) {
 	const authInfo = context.http?.authInfo;
+	const onError = (error) => {
+		report(checks.onError, error, {
+			permission: permission.key,
+			name
+		});
+	};
 	const refused = credentialRefusal(checks, permission, reach, authInfo);
 	if (refused !== void 0) return {
 		ok: false,
@@ -283,10 +307,11 @@ async function decideCall(checks, permission, reach, args, load, context, handle
 		data: load === void 0 ? void 0 : () => load()
 	});
 	const call = compact({ authInfo });
-	if (completion !== void 0) return recheck(checks, binding, args, call, permission, completion.approved, tool);
+	if (completion !== void 0) return recheck(checks, binding, args, call, permission, completion.approved, tool, name);
 	const checked = await checks.kernel.check(binding, args, call, compact({
 		resumeToken: approvalTokenOf(context),
-		tool
+		tool,
+		onError
 	}));
 	if (!checked.ok) return {
 		ok: false,
@@ -316,7 +341,8 @@ async function decideCall(checks, permission, reach, args, load, context, handle
 					inputRequired: await approvalInput(checks.options, decision, handlerContext, context, capabilities)
 				})
 			};
-		} catch {
+		} catch (error) {
+			onError(error);
 			return {
 				ok: false,
 				refusal: failedRefusal(permission, "failed")
@@ -326,8 +352,8 @@ async function decideCall(checks, permission, reach, args, load, context, handle
 	}
 }
 /** `decideCall` with the refusal text replaced by `deniedText`'s. */
-async function checkCall(checks, permission, reach, args, load, context, handlerContext, capabilities, completion, tool) {
-	const checked = await decideCall(checks, permission, reach, args, load, context, handlerContext, capabilities, completion, tool);
+async function checkCall(checks, permission, reach, args, load, context, handlerContext, capabilities, completion, tool, name = tool ?? permission.key) {
+	const checked = await decideCall(checks, permission, reach, args, load, context, handlerContext, capabilities, completion, tool, name);
 	const { deniedText } = checks.options;
 	if (checked.ok || deniedText === void 0) return checked;
 	const { refusal } = checked;
@@ -366,7 +392,11 @@ async function visible(checks, context, permissionOf, keys, declaredOf = () => v
 	let permdock;
 	try {
 		permdock = await checks.kernel.instance(compact({ authInfo }));
-	} catch {
+	} catch (error) {
+		for (const entry of guarded) report(checks.onError, error, {
+			permission: entry.permission.key,
+			name: entry.key
+		});
 		return shown;
 	}
 	for (const entry of guarded) if ((!tools || actorMayCallTool(permdock.subject.actor, entry.key)) && permdock.mayUse(entry.permission)) shown.add(entry.key);
@@ -381,12 +411,13 @@ function guard(checks, permission, load, handler, dataArgs, onRefusal, extra = {
 		const loader = load === void 0 ? void 0 : () => load(...args);
 		const reach = extra.reach ?? reachOf(checks.policy, permission, void 0);
 		const tool = extra.tool?.();
-		const checked = await checkCall(checks, permission, reach, args, loader, context, raw, extra.capabilities, void 0, tool);
+		const name = extra.name?.() ?? tool ?? permission.key;
+		const checked = await checkCall(checks, permission, reach, args, loader, context, raw, extra.capabilities, void 0, tool, name);
 		let result;
 		if (checked.ok) {
 			result = await handler(...params);
 			if (extra.longRunning === true) {
-				const again = await checkCall(checks, permission, reach, args, loader, context, raw, extra.capabilities, { approved: checked.approved }, tool);
+				const again = await checkCall(checks, permission, reach, args, loader, context, raw, extra.capabilities, { approved: checked.approved }, tool, name);
 				if (!again.ok) result = onRefusal(again.refusal);
 			}
 		} else result = onRefusal(checked.refusal);
@@ -496,7 +527,8 @@ function protectServer(checks, server, enforcement) {
 		longRunning,
 		capabilities,
 		reach,
-		tool
+		tool,
+		name: tool
 	});
 	const originalTool = server.registerTool.bind(server);
 	const toolPermissionOf = (name, config) => {
@@ -555,7 +587,10 @@ function protectServer(checks, server, enforcement) {
 		const permission = requirePermission("prompt", name, config);
 		const { permission: _permission, data, scopeChallenge, ...passthrough } = config;
 		const load = data;
-		const wrap = (callback) => guard(checks, permission, load, callback, (params) => params.length >= 2 ? [params[0]] : [void 0], throwRefusal, { capabilities });
+		const wrap = (callback) => guard(checks, permission, load, callback, (params) => params.length >= 2 ? [params[0]] : [void 0], throwRefusal, {
+			capabilities,
+			name: () => name
+		});
 		const registered = originalPrompt(name, {
 			...passthrough,
 			scopeChallenge: challengeFor(scopeChallenge, scopesReaching(checks.policy, permission), challengeScope(checks.policy, permission))
@@ -578,7 +613,10 @@ function protectServer(checks, server, enforcement) {
 		const wrap = (callback) => (...params) => {
 			const permission = permissionNow();
 			if (permission === void 0) return Promise.reject(/* @__PURE__ */ new Error(`Denied: resource ${name} is linked to no guarded tool.`));
-			return guard(checks, permission, load, callback, (args) => args.slice(0, -1), throwRefusal, { capabilities })(...params);
+			return guard(checks, permission, load, callback, (args) => args.slice(0, -1), throwRefusal, {
+				capabilities,
+				name: () => name
+			})(...params);
 		};
 		const registered = originalResource(name, uriOrTemplate, {
 			...passthrough,
@@ -680,7 +718,13 @@ function createPermDock(policy, given) {
 			...instanceOptions(options)
 		}))
 	};
-	return { protectServer: ((server, enforcement) => protectServer(checks, server, enforcement)) };
+	return { protectServer: ((server, enforcement, onError) => {
+		const sink = typeof enforcement === "function" ? enforcement : onError;
+		return protectServer(sink === void 0 ? checks : {
+			...checks,
+			onError: sink
+		}, server, typeof enforcement === "function" ? void 0 : enforcement);
+	}) };
 }
 //#endregion
 //#region src/mcp/resource-guard.ts

package/dist/next/plugin.js

@@ -1,5 +1,5 @@
 import { a as describeError } from "../errors-Vpu6rKHl.js";
-import { n as createCollectScheduler, r as report, t as collectOnce } from "../watch-Bpci3hBY.js";
+import { n as createCollectScheduler, r as report, t as collectOnce } from "../watch-CTfSlIGD.js";
 //#region src/cli/plugin.ts
 const PHASE_BUILD = "phase-production-build";
 const PHASE_DEV = "phase-development-server";