permdock 0.16.0 → 0.17.0

package/dist/a2a/index.d.ts

@@ -1,8 +1,8 @@
-import { T as Policy, ar as AuthorizationDetail, pr as Principal } from "../policy-types-DGIO_gxq.js";
+import { E as Policy, _r as Principal, lr as AuthorizationDetail } from "../policy-types-IRJVABmm.js";
 import { u as Permission } from "../permission-types-CAY-GU7e.js";
-import { m as ApprovalStore } from "../types-DLvhVm1r.js";
-import { a as ProblemDetails } from "../errors-BIM4MFsJ.js";
-import { t as InstanceOptions } from "../instance-options-CoHn-0e8.js";
+import { m as ApprovalStore } from "../types-BvBbkAu1.js";
+import { a as ProblemDetails } from "../errors-Dc9FdamT.js";
+import { t as InstanceOptions } from "../instance-options-BOCRxEFb.js";
 //#region src/a2a/types.d.ts
 type A2aAuth = {
   readonly clientId?: string;

package/dist/a2a/index.js

@@ -5,10 +5,10 @@ import { n as PermDockDeniedError, t as PermDockApprovalRequiredError } from "..
 import { t as canonicalJson } from "../canonical-json-DwilZ1iB.js";
 import { t as bytesToBase64Url } from "../sha256-C-4WXKIu.js";
 import { n as resourceRef } from "../resource-ref-CaS9yVPi.js";
-import { i as challengeScope, l as withApp, o as hasScope, s as scopesReaching } from "../permdock-BvjivVb9.js";
+import { i as challengeScope, l as withApp, o as hasScope, s as scopesReaching } from "../permdock-DdzMv5-F.js";
 import { p as wwwAuthenticate, r as bearerChallenge } from "../problem-BVLHFK33.js";
-import { r as instanceOptions } from "../build-instance-BWXqwQYU.js";
-import { n as createAgentKernel } from "../kernel-BD8QuMnv.js";
+import { r as instanceOptions } from "../build-instance-lye7oEqf.js";
+import { n as createAgentKernel } from "../kernel-CDDU93dI.js";
 import { t as delegationFrom } from "../delegation-input-FTxMK3ji.js";
 //#region src/a2a/create.ts
 function firstScheme(options) {

package/dist/{adapter-context-CIQpQxbE.js → adapter-context-OHikyRqV.js}

@@ -1,4 +1,4 @@
-import { n as isActor } from "./subject-BGoM5o8B.js";
+import { n as isActor } from "./subject-C7RddW0G.js";
 //#region src/core/adapter-context.ts
 /**
 * Resolves an adapter `tenant` option against its framework context; a throw is

package/dist/{adoption-scan-C2BCiUEG.js → adoption-scan-Ci0xiJ3T.js}

@@ -1,5 +1,5 @@
 import { r as listSourceFiles } from "./files-BSjrtIHw.js";
-import { t as DOCS_BASE } from "./manifest-Cft51TLK.js";
+import { t as DOCS_BASE } from "./manifest-Dij1U0hx.js";
 import { readFileSync } from "node:fs";
 import { relative } from "node:path";
 //#region src/cli/adoption-scan.ts

package/dist/agent/index.d.ts

@@ -1,3 +1,3 @@
-import { n as DeniedTextEvent, t as DeniedText } from "../denied-text-DHldhVUv.js";
-import { a as createPermDock, c as ModelMap, d as StepUp, i as OperationVerdict, l as ToolBinding, n as AgentPermDockOptions, o as AgentAdapterOptions, r as GatewayOptions, s as DecideToolOptions, t as AgentPermDock, u as ToolMap } from "../create-BPUopdfL.js";
+import { n as DeniedTextEvent, t as DeniedText } from "../denied-text-DyzWwxEB.js";
+import { a as createPermDock, c as ModelMap, d as StepUp, i as OperationVerdict, l as ToolBinding, n as AgentPermDockOptions, o as AgentAdapterOptions, r as GatewayOptions, s as DecideToolOptions, t as AgentPermDock, u as ToolMap } from "../create-bzQlBzG4.js";
 export { type AgentAdapterOptions, type AgentPermDock, type AgentPermDockOptions, type DecideToolOptions, type DeniedText, type DeniedTextEvent, type GatewayOptions, type ModelMap, type OperationVerdict, type StepUp, type ToolBinding, type ToolMap, createPermDock };

package/dist/agent/index.js

@@ -1 +1 @@
-export { n as createPermDock } from "../create-Coq5fIrq.js";
+export { n as createPermDock } from "../create-gqtDb1nU.js";

package/dist/ai-sdk/index.d.ts

@@ -1,7 +1,7 @@
-import { T as Policy, j as PolicyVocabulary, pr as Principal } from "../policy-types-DGIO_gxq.js";
+import { E as Policy, M as PolicyVocabulary, _r as Principal } from "../policy-types-IRJVABmm.js";
 import { u as Permission } from "../permission-types-CAY-GU7e.js";
-import { n as DeniedTextEvent, t as DeniedText } from "../denied-text-DHldhVUv.js";
-import { d as StepUp, o as AgentAdapterOptions, t as AgentPermDock } from "../create-BPUopdfL.js";
+import { n as DeniedTextEvent, t as DeniedText } from "../denied-text-DyzWwxEB.js";
+import { d as StepUp, o as AgentAdapterOptions, t as AgentPermDock } from "../create-bzQlBzG4.js";
 //#region src/ai-sdk/create.d.ts
 type AiSdkContext = {
   readonly runtimeContext?: unknown;

package/dist/ai-sdk/index.js

@@ -1,8 +1,8 @@
 import { t as compact } from "../compact-CAf557ZB.js";
 import { n as PermDockDeniedError, t as PermDockApprovalRequiredError } from "../errors-B6R_lg2a.js";
-import { l as withApp } from "../permdock-BvjivVb9.js";
-import { r as stepUpText, t as approvalTokenOf } from "../kernel-BD8QuMnv.js";
-import { t as agentRuntime } from "../create-Coq5fIrq.js";
+import { l as withApp } from "../permdock-DdzMv5-F.js";
+import { r as stepUpText, t as approvalTokenOf } from "../kernel-CDDU93dI.js";
+import { t as agentRuntime } from "../create-gqtDb1nU.js";
 //#region src/ai-sdk/create.ts
 const APPROVAL_STATUSES = /* @__PURE__ */ new Set([
 	"approved",

package/dist/approval-normalize-4KxMRdJC.js

@@ -0,0 +1,189 @@
+import { n as isReadonlyArray, t as compact } from "./compact-CAf557ZB.js";
+import { a as flattenApprovers, c as isManagerApprover, d as manager, f as user, l as isPermissionApprover, r as approverLeaves, s as isAnyOfInput, u as isUserApprover } from "./approvers-CNtl4Vc5.js";
+import { d as isSelfParented } from "./resource-relations-8-pCScBO.js";
+import { r as assertDuration } from "./time-nR1JesoH.js";
+import { a as authenticated, r as asGrantee } from "./grantee-Dke-9rd1.js";
+//#region src/core/approval-normalize.ts
+/**
+* Every approver a requirement names: `by`, each stage and its escalation, and
+* `escalation.to`, inside `anyOf` groups too.
+*/
+function approversOf(requirement) {
+	return [
+		...approverLeaves(requirement.by),
+		...(requirement.stages ?? []).flatMap((stage) => approverLeaves(stage.by).concat(approverLeaves(stage.escalation?.to))),
+		...approverLeaves(requirement.escalation?.to)
+	];
+}
+function asApprover(input) {
+	if (isPermissionApprover(input)) {
+		if (typeof input.permission !== "string" || input.permission === "") throw new Error("PermDock: a permission approver needs a permission key");
+		return Object.freeze({
+			kind: "permission",
+			permission: input.permission
+		});
+	}
+	if (isManagerApprover(input)) return manager(input.levels === void 0 ? {} : { levels: input.levels });
+	if (isAnyOfInput(input)) {
+		if (!Array.isArray(input.of) || input.of.length === 0) throw new Error("PermDock: anyOf() needs at least one approver");
+		const of = input.of.map((item) => {
+			const normalized = asApprover(item);
+			const items = flattenApprovers(normalized);
+			if (items.length === 0) throw new Error("PermDock: an anyOf() item names no approver");
+			const [first] = items;
+			return isReadonlyArray(normalized) || first === void 0 ? items : first;
+		});
+		return Object.freeze({
+			kind: "any-of",
+			of: Object.freeze(of)
+		});
+	}
+	if (isReadonlyArray(input)) {
+		const items = [];
+		for (const item of input) items.push(...flattenApprovers(asApprover(item)));
+		return items;
+	}
+	if (isUserApprover(input)) return user(input.id);
+	return asGrantee(input);
+}
+function normalizeApproval(approval, permission) {
+	if (approval === void 0) return;
+	if (approval === "human") return "human";
+	if (approval.staleOn !== void 0 && approval.staleOn !== "resource-change") throw new Error(`PermDock: approval staleOn must be 'resource-change', got '${String(approval.staleOn)}'`);
+	const label = permission ?? "a grant";
+	assertQuorum(approval.quorum, "approval.quorum", label);
+	if (approval.ttl !== void 0) assertDuration(approval.ttl, `approval.ttl on '${label}'`);
+	const escalation = normalizeEscalation(approval.escalation, label);
+	const mode = approvalMode(approval.mode, label);
+	const combine = approval.combine ?? "any";
+	if (combine !== "any") return compact({
+		combine,
+		stages: normalizeStages(approval, combine, label),
+		mode,
+		staleOn: approval.staleOn,
+		ttl: approval.ttl,
+		escalation
+	});
+	if (approval.stages !== void 0) throw new Error(`PermDock: approval.stages on '${label}' needs combine: 'all' or 'sequential'`);
+	const by = approval.by === void 0 ? void 0 : asApprover(approval.by);
+	if (by === void 0 && mode === void 0 && approval.staleOn === void 0 && approval.quorum === void 0 && approval.ttl === void 0 && escalation === void 0) return "human";
+	return compact({
+		by: by ?? authenticated(),
+		mode,
+		staleOn: approval.staleOn,
+		quorum: approval.quorum,
+		ttl: approval.ttl,
+		escalation
+	});
+}
+function assertQuorum(quorum, name, label) {
+	if (quorum !== void 0 && (!Number.isInteger(quorum) || quorum < 1)) throw new Error(`PermDock: ${name} on '${label}' must be an integer of at least 1, got ${String(quorum)}`);
+}
+const LEGACY_COMBINE = /* @__PURE__ */ new Set([
+	"any",
+	"all",
+	"sequential"
+]);
+/**
+* An approval as a v1 record holds it. Records written before 0.17 carry the
+* combinator in `mode` and `distinct: false` for `'confirm'`; both read as the
+* current names.
+*/
+function readWireApproval(value) {
+	if (typeof value !== "object" || value === null) return value;
+	const mode = Reflect.get(value, "mode");
+	const distinct = Reflect.get(value, "distinct");
+	if (!LEGACY_COMBINE.has(mode) && typeof distinct !== "boolean") return value;
+	const next = {};
+	for (const [key, item] of Object.entries(value)) if (key !== "mode" && !(key === "distinct" && typeof item === "boolean")) next[key] = item;
+	if (LEGACY_COMBINE.has(mode)) next["combine"] = mode;
+	else if (mode !== void 0) next["mode"] = mode;
+	if (distinct === false) next["mode"] = "confirm";
+	return Object.freeze(next);
+}
+/** `'authorize'` is the default, so it is stored as absent. */
+function approvalMode(mode, label) {
+	if (mode === void 0 || mode === "authorize") return;
+	if (mode !== "confirm") throw new Error(`PermDock: approval.mode on '${label}' must be 'confirm' or 'authorize', got '${String(mode)}'`);
+	return mode;
+}
+function normalizeStages(approval, combine, label) {
+	if (combine !== "all" && combine !== "sequential") throw new Error(`PermDock: approval.combine on '${label}' must be 'any', 'all' or 'sequential', got '${combine}'`);
+	if (approval.by !== void 0 || approval.quorum !== void 0) throw new Error(`PermDock: approval on '${label}' sets combine '${combine}': put by and quorum on each stage`);
+	const stages = approval.stages ?? [];
+	if (stages.length === 0) throw new Error(`PermDock: approval combine '${combine}' on '${label}' needs at least one stage`);
+	return stages.map((stage, index) => {
+		assertQuorum(stage.quorum, `approval.stages[${index}].quorum`, label);
+		const by = asApprover(stage.by);
+		if (flattenApprovers(by).length === 0) throw new Error(`PermDock: approval.stages[${index}].by on '${label}' names no approver`);
+		return compact({
+			by,
+			quorum: stage.quorum,
+			escalation: normalizeEscalation(stage.escalation, label)
+		});
+	});
+}
+function normalizeEscalation(escalation, label) {
+	if (escalation === void 0) return;
+	assertDuration(escalation.after, `approval.escalation.after on '${label}'`);
+	return {
+		after: escalation.after,
+		to: asApprover(escalation.to)
+	};
+}
+/**
+* A role with `activation` is eligible-only: it needs a positive `maxDuration`
+* (Doctor PD033 warns without one). `justification` defaults to `'optional'`.
+*/
+function activationApproval(option, roleName) {
+	const label = `activation of '${roleName}'`;
+	const approval = normalizeApproval(option, label);
+	if (approval !== void 0 && approval !== "human" && approversOf(approval).some((item) => item.kind === "relation")) throw new Error(`PermDock: approval on ${label} names a relation; an activation has no row to read it on`);
+	return approval;
+}
+/**
+* A stale-on-change approval needs a row to version: an instance permission
+* whose resource declares `version`.
+*/
+function assertApprovalVersions(grants, resources) {
+	for (const grant of grants) {
+		const approval = grant.approval;
+		if (approval === void 0 || approval === "human" || approval.staleOn === void 0) continue;
+		if (grant.permission.kind !== "instance") throw new Error(`PermDock: approval staleOn on '${grant.permission.key}' needs an instance action; a collection action has no row to version`);
+		if (resources.get(grant.permission.resource)?.version === void 0) throw new Error(`PermDock: approval staleOn on '${grant.permission.key}' needs resource(..., { version: '<field>' }) on '${grant.permission.resource}'`);
+	}
+}
+/**
+* A relation approver is checked by id, from the requested row: the relation
+* lives on the permission's own resource (optionally up its parent chain), or
+* at the end of a list of links from it.
+*/
+function assertApprovalRelations(grants, resources) {
+	for (const grant of grants) {
+		const approval = grant.approval;
+		if (approval === void 0 || approval === "human") continue;
+		for (const item of approversOf(approval)) {
+			if (item.kind !== "relation") continue;
+			const label = `${grant.permission.key}: approver relation '${item.relation}'`;
+			if (grant.permission.kind !== "instance") throw new Error(`PermDock: ${label} needs an instance action; a collection action has no row to read it on`);
+			if (approverRelationResource(grant.permission.resource, item.through, resources) !== item.resource) throw new Error(`PermDock: ${label} must live on '${grant.permission.resource}' or at the end of its through links`);
+			if (resources.get(item.resource)?.relations[item.relation] === void 0) throw new Error(`PermDock: ${label} is not declared on '${item.resource}'`);
+		}
+	}
+}
+/**
+* The resource a relation approver's `through` reaches from `start`, or
+* `undefined`.
+*/
+function approverRelationResource(start, through, resources) {
+	if (through === void 0) return start;
+	if (through === "parent") return isSelfParented(resources.get(start)) ? start : void 0;
+	let current = start;
+	for (const name of through) {
+		const node = current === void 0 ? void 0 : resources.get(current);
+		current = node !== void 0 && Object.hasOwn(node.links, name) ? node.links[name]?.resource : void 0;
+	}
+	return current;
+}
+//#endregion
+export { normalizeApproval as a, assertApprovalVersions as i, asApprover as n, readWireApproval as o, assertApprovalRelations as r, activationApproval as t };

package/dist/approval-policies-9VagPixq.d.ts

@@ -0,0 +1,138 @@
+import { E as Policy, a as ApprovalOption, an as AuthEvent, bn as Scope, g as Grant, wr as Condition, yr as Subject } from "./policy-types-IRJVABmm.js";
+import { i as OperationEffect, s as OperationMeta, u as OperationRisk } from "./operations-Ci_rT6Uo.js";
+//#region src/core/approval-policies.d.ts
+/**
+ * One approval requirement kept as data, for a tenant or the whole platform. It
+ * adds to what the code requires and never removes a requirement.
+ */
+type ApprovalPolicy = {
+  /**
+   * The permission key; a former key from `renamed` resolves. Absent: every
+   * permission, which needs `risk` or `effects`.
+   */
+  readonly permission?: string;
+  /**
+   * Matches an operation call whose `meta.risk` is one of these; a call that
+   * names no operation never matches.
+   */
+  readonly risk?: readonly OperationRisk[];
+  /**
+   * Matches an operation call whose `meta.effects` includes one of these; a
+   * call that names no operation never matches.
+   */
+  readonly effects?: readonly OperationEffect[];
+  /** Absent: every tenant. */
+  readonly tenant?: string;
+  /**
+   * Actor kinds it applies to (`['agent']`); absent: every call. A call without
+   * an actor never matches a list.
+   */
+  readonly actors?: readonly string[];
+  /**
+   * A portable condition over the row; instance permissions only, since a
+   * collection action has no row.
+   */
+  readonly where?: Condition;
+  /** A portable condition over the call's input (the proposed row). */
+  readonly check?: Condition;
+  /**
+   * The same shape as `allow(..., { approval })`. An `escalation` here widens
+   * only this entry's stages, never the code's.
+   */
+  readonly approval: ApprovalOption;
+};
+/**
+ * Data-driven approval requirements, a subject input like `CustomRoleSource`:
+ * read once per instance for the subject's tenants (entries without a tenant
+ * always apply). A throw, a rejected promise or an invalid entry denies every
+ * call an allow would otherwise permit.
+ */
+type ApprovalPolicySource = {
+  /** Names the implementation in errors and events. */
+  readonly name?: string;
+  approvalPoliciesFor: (query: {
+    readonly tenants: readonly string[];
+  }) => readonly ApprovalPolicy[] | Promise<readonly ApprovalPolicy[]>;
+};
+/**
+ * The denial detail when an `ApprovalPolicySource` fails: every call an allow
+ * would grant denies with reason `approval`.
+ */
+/**
+ * The in-process `ApprovalPolicySource`, usable directly as the
+ * `approvalPolicies` option: it is the source and its feature at once.
+ */
+declare function memoryApprovalPolicySource(policies: readonly ApprovalPolicy[]): ApprovalPolicySource & ApprovalPolicies;
+/** An entry checked against the policy and ready to match. */
+type LoadedApprovalPolicy = {
+  readonly permission?: string;
+  readonly risk?: ReadonlySet<OperationRisk>;
+  readonly effects?: ReadonlySet<OperationEffect>;
+  readonly tenant?: string;
+  readonly actors?: ReadonlySet<string>;
+  readonly where?: Condition;
+  readonly check?: Condition;
+  readonly approval: NonNullable<Grant["approval"]>;
+};
+/** `"failed"`: the source threw or returned something that cannot be applied. */
+/** What `tightenApproval` reads besides the code's approval. */
+type TightenInput = Parameters<typeof tightenApproval>[2];
+/**
+ * Approval policies loaded for an instance: the tightening the evaluator
+ * applies to each allow, or `"failed"` when the source threw or returned an
+ * invalid entry (every allow then denies).
+ */
+type LoadedApprovalPolicies = {
+  readonly tighten: (code: Grant["approval"], input: TightenInput) => Grant["approval"];
+} | "failed";
+/**
+ * Approval policies kept as data, as an instance option: `approvalPolicies:
+ * approvalPolicies(source)`. The loading and tightening code ships only with an
+ * app that imports this function.
+ */
+type ApprovalPolicies = {
+  readonly feature: "approval-policies";
+  readonly load: (policy: Policy, tenants: readonly string[], auth: AuthEvent[]) => LoadedApprovalPolicies | Promise<LoadedApprovalPolicies>;
+};
+declare function approvalPolicies(source: ApprovalPolicySource): ApprovalPolicies;
+/**
+ * Why an `ApprovalPolicy` entry does not load. `unknown-permission`: the policy
+ * declares no such key (the entry applies to nothing). `invalid`: a field has
+ * the wrong shape or the approval option does not normalise.
+ * `where-on-collection`: `where` reads a row, which a collection action never
+ * has, so the entry could never match; use `check` over the input.
+ * `stale-on-without-version`: `staleOn` needs an instance permission whose
+ * resource declares `version`.
+ */
+type ApprovalPolicyProblem = "unknown-permission" | "invalid" | "where-on-collection" | "stale-on-without-version";
+type ApprovalPolicyValidation = {
+  readonly ok: true;
+} | {
+  readonly ok: false;
+  readonly problem: ApprovalPolicyProblem;
+};
+/**
+ * Checks one entry against the policy the way `approvalPoliciesFor` loads it,
+ * for an application to refuse a bad entry when it is saved instead of finding
+ * every call denied. Never throws.
+ */
+declare function validateApprovalPolicy(policy: Policy, entry: unknown): ApprovalPolicyValidation;
+/**
+ * `code` with every matching entry added as further stages: the result needs
+ * all of them (`'sequential'` when any part is ordered), keeps the code's
+ * escalation, the shortest `ttl`, and `'authorize'` unless every part is
+ * `'confirm'`. Without a matching entry, `code` unchanged.
+ */
+declare function tightenApproval(code: Grant["approval"], entries: readonly LoadedApprovalPolicy[], input: {
+  readonly permission: string;
+  readonly tenant: string | undefined;
+  readonly subject: Subject;
+  readonly current: unknown;
+  readonly next: unknown;
+  readonly now: number;
+  readonly scopes: readonly Scope[];
+  /** The meta of the operation the call decides, when it names one. */
+  readonly operation?: OperationMeta | undefined;
+}): Grant["approval"];
+//#endregion
+export { ApprovalPolicyValidation as a, validateApprovalPolicy as c, ApprovalPolicySource as i, ApprovalPolicy as n, approvalPolicies as o, ApprovalPolicyProblem as r, memoryApprovalPolicySource as s, ApprovalPolicies as t };

package/dist/{approval-prompt-3BqWczTt.d.ts → approval-prompt-BSh-yxbH.d.ts}

@@ -1,5 +1,5 @@
 import { s as OperationMeta, t as Operation } from "./operations-Ci_rT6Uo.js";
-import { u as ApprovalRequest } from "./types-DLvhVm1r.js";
+import { u as ApprovalRequest } from "./types-BvBbkAu1.js";
 //#region src/delivery/approval-prompt.d.ts
 /**
  * What an email or chat prompt shows an approver, wire format v1. It carries no

package/dist/approvals/index.d.ts

@@ -1,5 +1,6 @@
-import { _ as DEFAULT_APPROVAL_TTL, a as ApprovalDelegationSource, b as escalationOpenAt, c as ApprovalListQuery, d as ApprovalResumeFailureCause, f as ApprovalSignature, g as ApprovalVerdict, h as ApprovalSubjectSummary, i as ApprovalDelegation, l as ApprovalPage, m as ApprovalStore, n as ApprovalApprovers, o as ApprovalInspectResult, p as ApprovalStatus, r as ApprovalCancelMeta, s as ApprovalListFilter, t as APPROVAL_HEADER, u as ApprovalRequest, v as approvalQuorum, y as approverRelationKey } from "../types-DLvhVm1r.js";
+import { _ as DEFAULT_APPROVAL_TTL, a as ApprovalDelegationSource, b as escalationOpenAt, c as ApprovalListQuery, d as ApprovalResumeFailureCause, f as ApprovalSignature, g as ApprovalVerdict, h as ApprovalSubjectSummary, i as ApprovalDelegation, l as ApprovalPage, m as ApprovalStore, n as ApprovalApprovers, o as ApprovalInspectResult, p as ApprovalStatus, r as ApprovalCancelMeta, s as ApprovalListFilter, t as APPROVAL_HEADER, u as ApprovalRequest, v as approvalQuorum, y as approverRelationKey } from "../types-BvBbkAu1.js";
 import { n as ApprovalErrorCode, r as isApprovalError, t as ApprovalError } from "../errors-CHwoRRpB.js";
-import { a as AccessReviewItemQuery, c as AccessReviewStore, i as AccessReviewItemPage, n as AccessReviewDecision, o as AccessReviewItemStatus, r as AccessReviewItem, s as AccessReviewStatus, t as AccessReview } from "../types-B2efzoSX.js";
-import { $ as AccessReviewHolder, A as SignApprovalOptions, B as IdempotentResponse, C as ApproverRelationsOptions, D as approvalView, E as approvalEntityTag, F as ApprovalsHandlerOptions, G as ApprovalDelegationMatch, H as idempotencyRecordKey, I as approvalsHandler, J as memoryApprovalDelegationSource, K as MatchDelegationOptions, L as IdempotencyRecord, M as signApproval, N as APPROVAL_REQUEST_SCHEMA, O as ApprovalSignatureClaims, P as parseApprovalRequest, Q as pageAccessReviewItems, R as IdempotencyStore, S as vouchApproval, T as ApprovalView, U as matchesIdempotencyRecord, V as idempotencyRecord, W as memoryIdempotencyStore, X as MemoryAccessReviewStore, Y as parseApprovalDelegation, Z as memoryAccessReviewStore, _ as resolveApproval, a as approverPermissions, at as isAccessReviewError, b as storedApprovalToken, c as decodeApprovalCursor, ct as decideAccessReviewItem, d as pageApprovals, et as AccessReviewOptions, f as cancelApprovals, g as requestApproval, h as readApprovalHeader, i as memoryApprovalStore, it as AccessReviewErrorCode, j as approvalSignatureClaims, k as ApprovalSignatureEntry, l as encodeApprovalCursor, lt as AccessReviewsHandlerOptions, m as inspectApproval, n as applyApprovalVerdict, nt as startAccessReview, o as ApprovalCursorPosition, ot as AccessReviewVerdict, p as consumeApproval, q as matchDelegation, r as assertApprover, rt as AccessReviewError, s as approvalPageSize, st as accessReviewerEligible, t as MemoryApprovalStore, tt as StartAccessReviewInput, u as listAllApprovals, ut as accessReviewsHandler, v as resumeDecision, w as approverRelations, x as summarizeSubject, y as resumeFromHeader, z as IdempotentCall } from "../index-DJwEgYzA.js";
-export { APPROVAL_HEADER, APPROVAL_REQUEST_SCHEMA, type AccessReview, type AccessReviewDecision, AccessReviewError, type AccessReviewErrorCode, type AccessReviewHolder, type AccessReviewItem, type AccessReviewItemPage, type AccessReviewItemQuery, type AccessReviewItemStatus, type AccessReviewOptions, type AccessReviewStatus, type AccessReviewStore, type AccessReviewVerdict, type AccessReviewsHandlerOptions, type ApprovalApprovers, type ApprovalCancelMeta, type ApprovalCursorPosition, type ApprovalDelegation, type ApprovalDelegationMatch, type ApprovalDelegationSource, ApprovalError, type ApprovalErrorCode, type ApprovalInspectResult, type ApprovalListFilter, type ApprovalListQuery, type ApprovalPage, type ApprovalRequest, type ApprovalResumeFailureCause, type ApprovalSignature, type ApprovalSignatureClaims, type ApprovalSignatureEntry, type ApprovalStatus, type ApprovalStore, type ApprovalSubjectSummary, type ApprovalVerdict, type ApprovalView, type ApprovalsHandlerOptions, type ApproverRelationsOptions, DEFAULT_APPROVAL_TTL, type IdempotencyRecord, type IdempotencyStore, type IdempotentCall, type IdempotentResponse, type MatchDelegationOptions, type MemoryAccessReviewStore, type MemoryApprovalStore, type SignApprovalOptions, type StartAccessReviewInput, accessReviewerEligible, accessReviewsHandler, applyApprovalVerdict, approvalEntityTag, approvalPageSize, approvalQuorum, approvalSignatureClaims, approvalView, approvalsHandler, approverPermissions, approverRelationKey, approverRelations, assertApprover, cancelApprovals, consumeApproval, decideAccessReviewItem, decodeApprovalCursor, encodeApprovalCursor, escalationOpenAt, idempotencyRecord, idempotencyRecordKey, inspectApproval, isAccessReviewError, isApprovalError, listAllApprovals, matchDelegation, matchesIdempotencyRecord, memoryAccessReviewStore, memoryApprovalDelegationSource, memoryApprovalStore, memoryIdempotencyStore, pageAccessReviewItems, pageApprovals, parseApprovalDelegation, parseApprovalRequest, readApprovalHeader, requestApproval, resolveApproval, resumeDecision, resumeFromHeader, signApproval, startAccessReview, storedApprovalToken, summarizeSubject, vouchApproval };
+import { a as AccessReviewItemQuery, c as AccessReviewStore, i as AccessReviewItemPage, n as AccessReviewDecision, o as AccessReviewItemStatus, r as AccessReviewItem, s as AccessReviewStatus, t as AccessReview } from "../types-AOP5HQku.js";
+import { $ as AccessReviewHolder, A as SignApprovalOptions, B as IdempotentResponse, C as ApproverRelationsOptions, D as approvalView, E as approvalEntityTag, F as ApprovalsHandlerOptions, G as ApprovalDelegationMatch, H as idempotencyRecordKey, I as approvalsHandler, J as memoryApprovalDelegationSource, K as MatchDelegationOptions, L as IdempotencyRecord, M as signApproval, N as APPROVAL_REQUEST_SCHEMA, O as ApprovalSignatureClaims, P as parseApprovalRequest, Q as pageAccessReviewItems, R as IdempotencyStore, S as vouchApproval, T as ApprovalView, U as matchesIdempotencyRecord, V as idempotencyRecord, W as memoryIdempotencyStore, X as MemoryAccessReviewStore, Y as parseApprovalDelegation, Z as memoryAccessReviewStore, _ as resolveApproval, a as approverPermissions, at as isAccessReviewError, b as storedApprovalToken, c as decodeApprovalCursor, ct as decideAccessReviewItem, d as pageApprovals, et as AccessReviewOptions, f as cancelApprovals, g as requestApproval, h as readApprovalHeader, i as memoryApprovalStore, it as AccessReviewErrorCode, j as approvalSignatureClaims, k as ApprovalSignatureEntry, l as encodeApprovalCursor, lt as AccessReviewsHandlerOptions, m as inspectApproval, n as applyApprovalVerdict, nt as startAccessReview, o as ApprovalCursorPosition, ot as AccessReviewVerdict, p as consumeApproval, q as matchDelegation, r as assertApprover, rt as AccessReviewError, s as approvalPageSize, st as accessReviewerEligible, t as MemoryApprovalStore, tt as StartAccessReviewInput, u as listAllApprovals, ut as accessReviewsHandler, v as resumeDecision, w as approverRelations, x as summarizeSubject, y as resumeFromHeader, z as IdempotentCall } from "../index-CXXUFWtG.js";
+import { t as approvalFingerprint } from "../token-D6pWn8Uj.js";
+export { APPROVAL_HEADER, APPROVAL_REQUEST_SCHEMA, type AccessReview, type AccessReviewDecision, AccessReviewError, type AccessReviewErrorCode, type AccessReviewHolder, type AccessReviewItem, type AccessReviewItemPage, type AccessReviewItemQuery, type AccessReviewItemStatus, type AccessReviewOptions, type AccessReviewStatus, type AccessReviewStore, type AccessReviewVerdict, type AccessReviewsHandlerOptions, type ApprovalApprovers, type ApprovalCancelMeta, type ApprovalCursorPosition, type ApprovalDelegation, type ApprovalDelegationMatch, type ApprovalDelegationSource, ApprovalError, type ApprovalErrorCode, type ApprovalInspectResult, type ApprovalListFilter, type ApprovalListQuery, type ApprovalPage, type ApprovalRequest, type ApprovalResumeFailureCause, type ApprovalSignature, type ApprovalSignatureClaims, type ApprovalSignatureEntry, type ApprovalStatus, type ApprovalStore, type ApprovalSubjectSummary, type ApprovalVerdict, type ApprovalView, type ApprovalsHandlerOptions, type ApproverRelationsOptions, DEFAULT_APPROVAL_TTL, type IdempotencyRecord, type IdempotencyStore, type IdempotentCall, type IdempotentResponse, type MatchDelegationOptions, type MemoryAccessReviewStore, type MemoryApprovalStore, type SignApprovalOptions, type StartAccessReviewInput, accessReviewerEligible, accessReviewsHandler, applyApprovalVerdict, approvalEntityTag, approvalFingerprint, approvalPageSize, approvalQuorum, approvalSignatureClaims, approvalView, approvalsHandler, approverPermissions, approverRelationKey, approverRelations, assertApprover, cancelApprovals, consumeApproval, decideAccessReviewItem, decodeApprovalCursor, encodeApprovalCursor, escalationOpenAt, idempotencyRecord, idempotencyRecordKey, inspectApproval, isAccessReviewError, isApprovalError, listAllApprovals, matchDelegation, matchesIdempotencyRecord, memoryAccessReviewStore, memoryApprovalDelegationSource, memoryApprovalStore, memoryIdempotencyStore, pageAccessReviewItems, pageApprovals, parseApprovalDelegation, parseApprovalRequest, readApprovalHeader, requestApproval, resolveApproval, resumeDecision, resumeFromHeader, signApproval, startAccessReview, storedApprovalToken, summarizeSubject, vouchApproval };

package/dist/approvals/index.js

@@ -1,8 +1,9 @@
+import { t as approvalFingerprint } from "../token-DaMnIU9O.js";
 import { a as escalationOpenAt, c as isApprovalError, i as approverRelationKey, n as DEFAULT_APPROVAL_TTL, r as approvalQuorum, s as ApprovalError, t as APPROVAL_HEADER } from "../types-CcUXciSj.js";
-import { c as decodeApprovalCursor, d as pageApprovals, i as memoryApprovalStore, l as encodeApprovalCursor, n as assertApprover, s as approvalPageSize, t as applyApprovalVerdict, u as listAllApprovals } from "../store-RNFvaJJv.js";
-import { a as requestApproval, c as resumeFromHeader, d as vouchApproval, f as approverPermissions, i as readApprovalHeader, l as storedApprovalToken, m as approverRelations, n as consumeApproval, o as resolveApproval, r as inspectApproval, s as resumeDecision, t as cancelApprovals, u as summarizeSubject } from "../helpers-DJicaG6f.js";
+import { c as decodeApprovalCursor, d as pageApprovals, i as memoryApprovalStore, l as encodeApprovalCursor, n as assertApprover, s as approvalPageSize, t as applyApprovalVerdict, u as listAllApprovals } from "../store-XgBMbfDy.js";
+import { a as requestApproval, c as resumeFromHeader, d as vouchApproval, f as approverPermissions, i as readApprovalHeader, l as storedApprovalToken, m as approverRelations, n as consumeApproval, o as resolveApproval, r as inspectApproval, s as resumeDecision, t as cancelApprovals, u as summarizeSubject } from "../helpers-DNnZffrI.js";
 import { n as isAccessReviewError, t as AccessReviewError } from "../errors-BDUwg2qC.js";
-import { _ as accessReviewerEligible, a as idempotencyRecordKey, c as approvalEntityTag, d as memoryApprovalDelegationSource, f as parseApprovalDelegation, g as accessReviewsHandler, h as startAccessReview, i as idempotencyRecord, l as approvalView, m as pageAccessReviewItems, n as approvalSignatureClaims, o as matchesIdempotencyRecord, p as memoryAccessReviewStore, r as signApproval, s as memoryIdempotencyStore, t as approvalsHandler, u as matchDelegation, v as decideAccessReviewItem } from "../approvals-DnIBTuXE.js";
-import { t as APPROVAL_REQUEST_SCHEMA } from "../request-schema-DhX7UbfQ.js";
-import { t as parseApprovalRequest } from "../parse-request-CwCZpyjV.js";
-export { APPROVAL_HEADER, APPROVAL_REQUEST_SCHEMA, AccessReviewError, ApprovalError, DEFAULT_APPROVAL_TTL, accessReviewerEligible, accessReviewsHandler, applyApprovalVerdict, approvalEntityTag, approvalPageSize, approvalQuorum, approvalSignatureClaims, approvalView, approvalsHandler, approverPermissions, approverRelationKey, approverRelations, assertApprover, cancelApprovals, consumeApproval, decideAccessReviewItem, decodeApprovalCursor, encodeApprovalCursor, escalationOpenAt, idempotencyRecord, idempotencyRecordKey, inspectApproval, isAccessReviewError, isApprovalError, listAllApprovals, matchDelegation, matchesIdempotencyRecord, memoryAccessReviewStore, memoryApprovalDelegationSource, memoryApprovalStore, memoryIdempotencyStore, pageAccessReviewItems, pageApprovals, parseApprovalDelegation, parseApprovalRequest, readApprovalHeader, requestApproval, resolveApproval, resumeDecision, resumeFromHeader, signApproval, startAccessReview, storedApprovalToken, summarizeSubject, vouchApproval };
+import { _ as accessReviewerEligible, a as idempotencyRecordKey, c as approvalEntityTag, d as memoryApprovalDelegationSource, f as parseApprovalDelegation, g as accessReviewsHandler, h as startAccessReview, i as idempotencyRecord, l as approvalView, m as pageAccessReviewItems, n as approvalSignatureClaims, o as matchesIdempotencyRecord, p as memoryAccessReviewStore, r as signApproval, s as memoryIdempotencyStore, t as approvalsHandler, u as matchDelegation, v as decideAccessReviewItem } from "../approvals-DdFcTncq.js";
+import { t as APPROVAL_REQUEST_SCHEMA } from "../request-schema-CMP8Cmxd.js";
+import { t as parseApprovalRequest } from "../parse-request-DOBVaeiQ.js";
+export { APPROVAL_HEADER, APPROVAL_REQUEST_SCHEMA, AccessReviewError, ApprovalError, DEFAULT_APPROVAL_TTL, accessReviewerEligible, accessReviewsHandler, applyApprovalVerdict, approvalEntityTag, approvalFingerprint, approvalPageSize, approvalQuorum, approvalSignatureClaims, approvalView, approvalsHandler, approverPermissions, approverRelationKey, approverRelations, assertApprover, cancelApprovals, consumeApproval, decideAccessReviewItem, decodeApprovalCursor, encodeApprovalCursor, escalationOpenAt, idempotencyRecord, idempotencyRecordKey, inspectApproval, isAccessReviewError, isApprovalError, listAllApprovals, matchDelegation, matchesIdempotencyRecord, memoryAccessReviewStore, memoryApprovalDelegationSource, memoryApprovalStore, memoryIdempotencyStore, pageAccessReviewItems, pageApprovals, parseApprovalDelegation, parseApprovalRequest, readApprovalHeader, requestApproval, resolveApproval, resumeDecision, resumeFromHeader, signApproval, startAccessReview, storedApprovalToken, summarizeSubject, vouchApproval };

package/dist/{approvals-DnIBTuXE.js → approvals-DdFcTncq.js}

@@ -6,14 +6,14 @@ import { a as isId } from "./expiry-6XByK0dm.js";
 import { d as isoNow, f as nowMillis, g as secondsOf, i as dateAt } from "./time-nR1JesoH.js";
 import { t as canonicalJson } from "./canonical-json-DwilZ1iB.js";
 import { r as sha256Digest } from "./sha256-C-4WXKIu.js";
-import { c as rootMembershipId } from "./scopes-0Up_UA2t.js";
 import { o as flattenGrantee } from "./grantee-Dke-9rd1.js";
+import { i as rootMembershipId } from "./subject-C7RddW0G.js";
 import { c as isApprovalError, s as ApprovalError } from "./types-CcUXciSj.js";
-import { a as belongsToTenant, c as decodeApprovalCursor, n as assertApprover, o as membershipTenants, r as matchesApprovers, s as approvalPageSize, u as listAllApprovals } from "./store-RNFvaJJv.js";
+import { a as belongsToTenant, c as decodeApprovalCursor, n as assertApprover, o as membershipTenants, r as matchesApprovers, s as approvalPageSize, u as listAllApprovals } from "./store-XgBMbfDy.js";
 import { n as readBodyText } from "./body-text-DQhcmqdY.js";
 import { r as hasCredentials } from "./http-DKLXrFGk.js";
 import { d as unauthenticatedProblem, f as validationProblem, l as problemResponse, o as methodNotAllowed } from "./problem-BVLHFK33.js";
-import { f as approverPermissions, m as approverRelations, p as heldPermissions } from "./helpers-DJicaG6f.js";
+import { f as approverPermissions, m as approverRelations, p as heldPermissions } from "./helpers-DNnZffrI.js";
 import { n as isAccessReviewError, t as AccessReviewError } from "./errors-BDUwg2qC.js";
 import { t as bodyTooLarge } from "./body-CJQwYVa8.js";
 //#region src/approvals/access-reviews/decide.ts

package/dist/{approvers-B4r0N_Uz.js → approvers-CNtl4Vc5.js}

@@ -33,6 +33,27 @@ function user(id) {
 		id
 	});
 }
+/** The most `manager({ levels })` walks up the chain. */
+const MAX_MANAGER_LEVELS = 8;
+/**
+* Approves when the approver manages the requester, directly or within `levels`
+* steps up the chain (1 to `MAX_MANAGER_LEVELS`, default 1).
+*/
+function manager(options = {}) {
+	const levels = options.levels ?? 1;
+	if (!Number.isInteger(levels) || levels < 1 || levels > MAX_MANAGER_LEVELS) throw new Error(`PermDock: manager() levels must be a whole number from 1 to ${MAX_MANAGER_LEVELS}, got ${String(options.levels)}`);
+	return Object.freeze(levels === 1 ? { kind: "manager" } : {
+		kind: "manager",
+		levels
+	});
+}
+function isManagerApprover(value) {
+	return value !== null && typeof value === "object" && "kind" in value && value.kind === "manager";
+}
+/** The key a verdict's `relations` lists a manager approver under. */
+function approverManagerKey(item) {
+	return JSON.stringify(["manager", item.levels ?? 1]);
+}
 function isUserApprover(value) {
 	return value !== null && typeof value === "object" && "kind" in value && value.kind === "user";
 }
@@ -55,4 +76,4 @@ function isAnyOfInput(value) {
 	return value !== null && typeof value === "object" && "kind" in value && value.kind === "any-of";
 }
 //#endregion
-export { holder as a, isUserApprover as c, flattenApprovers as i, user as l, anyOf as n, isAnyOfInput as o, approverLeaves as r, isPermissionApprover as s, allOf as t };
+export { flattenApprovers as a, isManagerApprover as c, manager as d, user as f, approverManagerKey as i, isPermissionApprover as l, anyOf as n, holder as o, approverLeaves as r, isAnyOfInput as s, allOf as t, isUserApprover as u };

package/dist/{arazzo-CHoYnQXO.js → arazzo-7kbeh1yi.js}

@@ -1,5 +1,5 @@
 import { t as defineLeaf } from "./command-L8EstFNm.js";
-import { c as given, u as permissionsFlag } from "./flags-DXjoTVbS.js";
+import { c as given, u as permissionsFlag } from "./flags-BlmpmXoY.js";
 //#region src/cli/commands/arazzo.ts
 const check = defineLeaf({
 	flags: {
@@ -21,7 +21,7 @@ const check = defineLeaf({
 		...permissionsFlag
 	},
 	async run(ctx, { flags }) {
-		return (await import("./arazzo-ClYz2Z0W.js")).runArazzo({
+		return (await import("./arazzo-_zUmT8ZT.js")).runArazzo({
 			cwd: ctx.cwd,
 			config: ctx.config,
 			doc: given(flags.doc),

package/dist/{arazzo-ClYz2Z0W.js → arazzo-_zUmT8ZT.js}

@@ -1,9 +1,9 @@
-import { _ as arazzoFindings } from "./src-C_pi2Rnh.js";
-import { c as missingInput } from "./errors-Vpu6rKHl.js";
+import { _ as arazzoFindings } from "./src-nYNBfmgq.js";
+import { c as missingInput } from "./errors-BhRkoNS7.js";
 import { i as readJsonFile } from "./files-BSjrtIHw.js";
 import { t as ARAZZO_REPORT_SCHEMA } from "./version-DMQ0dnN5.js";
-import { a as loadModule, s as pickNamed, t as asPermissionTree } from "./load-DjSU5KXO.js";
-import { t as DOCS_BASE } from "./manifest-Cft51TLK.js";
+import { a as loadModule, s as pickNamed, t as asPermissionTree } from "./load-BaEamml-.js";
+import { t as DOCS_BASE } from "./manifest-Dij1U0hx.js";
 import { existsSync } from "node:fs";
 import { resolve } from "node:path";
 //#region src/cli/arazzo.ts

package/dist/{args-0FrVs5EH.js → args-iafbHiXn.js}

@@ -1,4 +1,4 @@
-import { n as CliError } from "./errors-Vpu6rKHl.js";
+import { n as CliError } from "./errors-BhRkoNS7.js";
 //#region ../../node_modules/.pnpm/fastest-levenshtein@1.0.16/node_modules/fastest-levenshtein/esm/mod.js
 const peq = /* @__PURE__ */ new Uint32Array(65536);
 const myers_32 = (a, b) => {
@@ -207,9 +207,6 @@ function lookupOf(flags) {
 	}
 	return lookup;
 }
-function flagSpellings(flags) {
-	return [...lookupOf(flags).keys()];
-}
 /**
 * A value never starts with `-`, bar `-` itself: `--out --check` is a bare
 * `--out`.
@@ -311,4 +308,4 @@ function parseLeaf(command, argv, flags, positionals = []) {
 	};
 }
 //#endregion
-export { suggestion as a, parseLeaf as i, flagSpellings as n, GLOBAL_FLAGS as o, parseFlags as r, didYouMean as t };
+export { GLOBAL_FLAGS as a, suggestion as i, parseFlags as n, parseLeaf as r, didYouMean as t };

package/dist/astro/index.d.ts

@@ -1,9 +1,9 @@
-import { T as Policy, Zt as Snapshot, j as PolicyVocabulary, pr as Principal } from "../policy-types-DGIO_gxq.js";
+import { $t as Snapshot, E as Policy, M as PolicyVocabulary, _r as Principal } from "../policy-types-IRJVABmm.js";
 import { u as Permission } from "../permission-types-CAY-GU7e.js";
 import { a as OperationInput, t as Operation } from "../operations-Ci_rT6Uo.js";
-import { a as PermDock } from "../permdock-CprAPN3w.js";
-import { D as ConnectionOptions, T as Connection, f as InvalidSignatureError, i as OpenApiHooks, o as ProtectOptions, u as SnapshotQuery, v as discoverViaSignatureAgent, x as webBotAuthVerifier } from "../server-types-CyRN0-Cd.js";
-import { a as ProtectTarget, i as PermDockHandlers, n as FetchAdapterOptions, t as ContextReader } from "../fetch-adapter-BIbBAtPZ.js";
+import { a as PermDock } from "../permdock-DUWZEOLR.js";
+import { D as ConnectionOptions, T as Connection, f as InvalidSignatureError, i as OpenApiHooks, o as ProtectOptions, u as SnapshotQuery, v as discoverViaSignatureAgent, x as webBotAuthVerifier } from "../server-types-Bw-lWqzR.js";
+import { a as ProtectTarget, i as PermDockHandlers, n as FetchAdapterOptions, t as ContextReader } from "../fetch-adapter-BgqpOOpd.js";
 import { APIContext, MiddlewareHandler } from "astro";
 //#region src/astro/create.d.ts
 type AstroPermDockOptions<TUser = unknown> = FetchAdapterOptions<APIContext, TUser>;

package/dist/astro/index.js

@@ -1,5 +1,5 @@
-import { l as InvalidSignatureError, p as webBotAuthVerifier, u as discoverViaSignatureAgent } from "../evaluations-IBceAeKT.js";
-import { n as guardedRoute, r as instanceRoute, t as fetchAdapter } from "../fetch-adapter-dPTgJVHd.js";
+import { l as InvalidSignatureError, p as webBotAuthVerifier, u as discoverViaSignatureAgent } from "../evaluations-DG40eSJa.js";
+import { n as guardedRoute, r as instanceRoute, t as fetchAdapter } from "../fetch-adapter-UZOW0PRC.js";
 //#region src/astro/create.ts
 const route = {
 	context: (context) => context,

package/dist/{audience-DTjR8xet.js → audience-jRO819i3.js}

@@ -1,4 +1,4 @@
-import { t as whoCan } from "./who-can-BoDJm0Nc.js";
+import { t as whoCan } from "./who-can-BY5d3HPw.js";
 //#region src/delivery/audience.ts
 async function granted(permdock, ids, permission, row) {
 	const unique = [...new Set(ids.filter((id) => typeof id === "string" && id !== ""))];

package/dist/{auth--yPyZNgr.js → auth-j3Eu-j4h.js}

@@ -1,6 +1,6 @@
 import { r as isRecord } from "./compact-CAf557ZB.js";
 import { h as secondsAt } from "./time-nR1JesoH.js";
-import { n as CliError } from "./errors-Vpu6rKHl.js";
+import { n as CliError } from "./errors-BhRkoNS7.js";
 import { a as refreshCredential, c as stringField, n as discoverAuthorizationServer } from "./device-BwbJNmb2.js";
 import { i as writeCredentials, r as readCredentials, t as credentialsPath } from "./storage-C2bWdvJH.js";
 import { t as CLOUD_BASE_URL } from "./base-url-BQbddZO5.js";